CCIE Routing Switching

MTU issue in MPLS on Nexus in Production Environement

2014-08-26T12:52:00.005+05:30

This is the problem I recently faced in my work environment.

Background

The switches are connected as shown in the diagram via L2 port channel. The switch C6509 is forming EIGRP neighborship with 7018 1 nexus switch on VLAN 230. The switch C6509 is also forming EIGRP neighborship with 7018 2 nexus switch on VLAN 240. All layer 3 interfaces are MPLS enables and LDP neighborship was formed among each other.

Issue

The clients at downstream were not able to access the application hosted somewhere in upstream.

Since MPLS accommodate extra bytes in the packet header so it cannot take 1500 byte of default packet size therefore the MTU size was needed to raise on the L3 interfaces.

When MTU size on SVI interfaces of VLAN 230 and VLAN 240 was raised to 1536 (as per the standard of my customer). I faced the strange behaviour that after changing the MTU size the EIGRP neighborship went down after appx. 1 hour on both the SVIs.

Solution

The default MTU size on port-channel was 1500 so when MTU on L3 interface was changed to 1536 in that case the underlying MTU must also support the larger MTU size therefore I had to change the MTU size of both the port-channel to mtu 9216.

After changing the MTU of the port-channel to a larger size the EIGRP neighborship became stable and never went down.

Mysterious ospf LSA Type-4

2012-12-06T16:30:00.002+05:30

Every one who are at this position of preparing for CCIE lab must know about all ospf LSA Types. However LSA Type-4 always remains mysterious and confusing for many of us. So let's discuss on this LSA Type.

Consider a small ospf domain for better understanding of this LSA.

-----RIP Domain -----R1----AREA0------R2------AREA1--------R3

Here R1 is an ASBR since it is redistributing RIP into OSPF, R2 is an ABR because both area 0 is attached to it. R3 is an internal router in area 1.

To need to understand LSA Type-5 we have to understand how a router perform lookup in order to reach to an external prefix.

When R1 performs redistribution from rip into ospf, R1generates an LSA Type-5 which contains external prefixes with it's attributes. In this LSA, R1 attachs in this LSA, its router-I'd in the advertising router field and forwarding address ( this may be 0.0.0.0 or any ip address depends on some parameters of the external link).
Now when a router in the same area in which ASBR is present like R2 performs few steps of recursive look up
First look is for external prefix I.e
Show ip ospf database external <> output of this command will contain the advertising router ip address and forward address along with other details.
If forwarder address field is a non zero value then further look up will perform on this address otherwise look up will perform on the advertising router field ip address which is R1's router I'd.

R2 will then search for this address in its ospf database
show ip ospf database router <R1's router-id>
since this router is in the same area so it will perform SPF calculation in order to reach R1 and ultimately to external prefix.

When an ABR i.e R2 pass on the LSA Type-5 to area 1 (LSA Tpye-5 are supposed to get flooded through out the ospf domain) it also generates an LSA Type-4 for area 1 in order to inform all the routers in area 1 that the external prefixes are advertised by the router address (ASBR) contained in the LSA Type-4. Since R2 the ABR forwarding this information to the internal routers in area 1 so they can contact R2 in order to reach to ASBR and ultimately the external prefixes.

Any internal router performs the first look up on external prefix

show ip ospf database external <> (assuming forwarder address field is 0.0.0.0) then look up will perform on advertising router ( R1's router-id ) appeared in this output.
Show ip ospf database router <R1's router-id >
this will not give any output because this router does not belong to this area 1. Therefore internal router will now have to perform look up on asbr
Show ip ospf database asbr-summary <>
this contains the advertising router as R2's router-id the ABR so further look ups will perform on this ABR in order to reach it.
Show ip ospf database router <ABR's router-id>
now internal router will do SPF calculation to reach to ABR in order to reach ABBR and ultimately to external prefixes.

CCIE # 37340

2012-11-15T11:04:00.001+05:30

Hi guys

I am happy to announce that after couple of years of work hard and applying good strategy in the lab exam I got my CCIE number. All the strategy for lab I had already been discussed on my blog. I had also been discussing on corner case scenarios on various networking technologies in my blog from time to time which I though could be useful for others.
I covered the entire INE volume workbooks several times, few Cisco 360 labs at the end of my preparation for practice. I also studied from various networking books available in the market such as tcp/ip routing vol1 &2, tcp/ip protocols vol1 by Richard Stevens and many more.

I shall keep posting on this blog on technical topics which are sometimes difficult to understand or confusing.

Practice Lab and Real Lab Approach Strategy

2012-08-21T14:21:00.003+05:30

I have completed many full scale as of now and came out with a strategy for attempting a CCIE R&S labs. From now on I will try to approach a practice or real lab with these steps. The time is 6 hours for completing the entire lab.

1. Read the instructions very carefully. ---- 2 min

2. Draw your own L3 logical Diagram. Rough diagram only. ---- 5 min

3. Read the entire lab (Mark the important points in the diagram) ---- 15 min
3.1. Layer 2 section will help to draw L2 Diagram. ---- 5 min

4. Identify the core and none core tasks in the entire lab. --- 2 min

5. Prepare a table like this to track your time, tasks and points. ---- 1min

TIME HOURS TASKS POINTS ROUND1 TASKS?(unsolved)
9:00-9:30 30 min 2.1,2.2,2.3,2.4 2+0+3+2 Tick 2.2

5. Start configuring ONLY the core topics first, make sure full IP connectivity is there.This also includes IPv6 tasks. If you do not know how to configure the core task do some alternative e.g. you are required to form an OSPF adjacency on IP unnumbered interfaces for some reason it not happening, in that case give some ip address to the interfaces so that you have OSPF adjacency for full IP connectivity. Though you may lose points for this task but will help getting points in the following tasks. ---- 3 hours

6. Verify each and every core tasks once it is configured

7. If this is a practice lab; once you configure a task verify it from the solution guide. If solution guide has a different approach then try to remember both the approaches. ---- 2 hour

8. Pick out the easiest tasks in the lab and configure them. Easy task are task which you can configure them without the help of configuration guide or even command line. ---- 1 hour

9. Verify each task once it is configured.

10. Pick out the task which you think you can configure with the help of configuration guide. ---- 1/2 hour

11. Verify these tasks as well.

12. There may be few tasks still left over, just DO NOT try to configure them. Leave them as of now.

13. Verify the entire lab task from starting to end. ---- 1 hour

14. If time is still left then try the configure the left over tasks. Make sure you are not breaking the previous verified task or connectivity.

Excluding step 7, all the steps need to be followed for real lab. So total time is 6 hours to finish the lab. If step 7 is also included for practice labs the total time is 8 hours to complete the lab.

Static NAT

2012-05-04T19:33:00.000+05:30

There can be various NAT scenarios which can create issues in the exam. Lets take a static NAT case which appear very simple at first but it requires some thought in order to solve it.

R6(f0/0.146)----(f0/1)R4(s0/0/1)----(s0/0/1)R5(s0/0/0)----503FRSW305----(s1/0)R3(f0/0)-----(f0/3)SW1

R5 is the NAT device and ospf is running between all devices. Loopbacks of R6 and SW1 are not advertise in ospf. Now the task is configure this scenario so that R6 can ping SW1's loopback sourced from its loopback. Use minimum number of static routes to solve this.

Note : Try to solve it without looking at the solution.

Here is the solution..

Solution Configuration

First we need to have static NAT configured on R5 as

ip nat inside source static 150.1.6.6 155.1.146.6

Source traffic from R6's loopback will convert into know inside global address 155.1.146.6.

ip nat outside source static 155.1.37.7 150.1.7.7 add-route ------this will generate a static route

Rack1R5#sh ip route static

S 150.1.7.7/32 [1/0] via 155.1.37.7

Redistribute this static route into ospf so that R4 and R6 can have this route to reach to 150.1.7.7. This will void the need of static routes on these devices.

R5#sh run | se router ospf
router ospf 1
redistribute static subnets

Now define inside and outside interfaces as

interface Serial0/0/1
ip address 155.1.45.5 255.255.255.0
ip nat inside

interface Serial0/0/0
ip address 155.1.0.5 255.255.255.0
ip nat outside

While on SW1 and R3 needs to have static routes to reach to 150.1.6.6.

SW1(conft)#ip route 150.1.6.6 255.255.255.255 155.1.37.3 (pointing towards R3)
R3(conft)# ip route 150.1.6.6 255.255.255.255 155.1.0.5 (pointing towards R5)

R5 and R4 also does not have route to R6's loopback for the return traffic. So they also need to have static routes.

R5#sh ip route static
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
S 150.1.7.7/32 [1/0] via 155.1.37.7
S 150.1.6.6/32 is directly connected, Serial0/0/1

R4#sh ip route static
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
S 150.1.6.6/32 [1/0] via 155.1.146.6

Verification.

R6#ping 150.1.7.7 source loopback 0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 150.1.7.7, timeout is 2 seconds:
Packet sent with a source address of 150.1.6.6
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms

Portfast and BPDUfilter Combined

2012-04-21T12:18:00.002+05:30

Cisco has some proprietary STP features for faster convergence at layer 2. Today lets discuss portfast and bpdufilter.

Portfast essentially does two main things when applied on the access ports of the switch.

1. It skips listening and learning phases of stp and directly jumps to forwarding state whenever a host is alive on the respective connected port.

2. It does not generate TCN (Topology Change Notification) bit to inform root about the change in network topology. Generally when portfast is not applied and a host comes up on a switchport, stp generate a TCN bit to inform root switch about the change and then the root switch flush the CAM table of the entire layer 2 network which increases the convergence time. Therefore by using portfast it reduces the convergence time by insuring the host ports can not create loops.

There are two ways by which we can apply portfast on switch ports.

1. Directly on access switchports

#switchport access vlan X

#spanning-tree portfast

2. Globally

#spanning-tree portfast default

first will apply only on the respective port on which its applied and second will apply on all the access ports of the switch.

BPDUfilter isolates the switching domain by not receiving and sending (though it sends 11 initial bpdu to prevent transient loops) bpdu to the connected device. There are two ways to apply bpdufilter.

1. On interface

#spanning-tree bpdufilter enable

2. Globally

#spanning-tree portfast bpdufilter default

First applies only on interface while second applies on all the access ports on which portfast is enabled. In this case if bpdu is received on the portfast enabled access port, the portfast status on this port is disabled that means bpdufilter which applied globally does not have any significance.

Lets try some applying combinations of these two features.

1. Both portfast and bpdufilter on interface

In this case bpdufilter take the precedence, that means this interface will not send and receive any bpdu. Here receive means it silently drops the bpdus on this interface. Therefore portfast will not be able to revert to disable state and port remains portfast enabled.

2. Portfast globally and bpdufilter on interface

This is same as case 1 except that since portfast is applied globally it will apply to all the access ports of the switch.

3. Both portfast and bpdufilter globally

In this case portfast will apply to all access ports of the switch and bpdufilter apply on all the portfast enabled ports. That means bpdu will not send out on these ports and if bpdus are received then porstfast is disabled on this port. Now since portfast is diabled on this port bpdufilter will no long apply on this port.

4. Portfast on interface and bpdufilter globally

In this case, when we apply bpdufilter globally it will apply only on portfast enabled ports. The port on which portfast is applied will not send any bpdu but if it receives any bpdu it will disable the porstfast from this port and therefore bpdufilter is also no longer applied on this interface.

Also note that we can also disable portfast or bpdufilter on per interface basis.

On interface

#spanning-tree portfast disable OR # spanning-tree bpdufilter diable

The above mentioned cases can be used in various scenarios at layer 2 switching to solve stp convergence issues.

For example

Task : Ensure only f0/1 and f0/2 should skip listening and learning phases and bpdus should not be send and receive on these ports, if any bpdu is received it should disables the portfast on these ports.

Solution :

Globally "spanning-tree portfast bpdufilter default

Interface f0/1 and f0/2 "spanning-tree portfast"

here ONLY is the keyword lookout for. Which means apply portfast at interface level and on these interface apply bpdufilter by applying bpdufilter globally.

In this way we can have other tasks require our learning on these features though these features are being replaced by mstp and rstp. In these advance spanning tree technologies these features are inbuilt.

Here is the end of this blog, we will take up other stp features in the future blogs.

Thanks

Multicast TroubleShooting

2012-04-19T22:53:00.000+05:30

Configuration of Multicast is not that difficult unlike its troubleshooting. The multicast TS is a process of verifying the configuration at each step using proper tools. Lets take a multicast TS ticket which involves an advance multicast scenario with multiple issues which may not necessarily only from multicast.

You just need to copy and paste the initial configuration on all the devices of any INE Rack and start working on the TS ticket.

Note: You just need to take care of rack number. Here I have used Rack 1 .

Note: TRY NOT TO USE "Show run" commands for better learning purposes

Topology Diagram:

Ticket: R6 can not able to ping the multicast group 224.2.2.2 which is listening on R2's Loopback0. Fix it.

--------------------------INITIAL CONFIGURATIONS---------------------------------

R1:

enable
config t

Current configuration : 942 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------------------

R2:

enable
config t

Current configuration : 1567 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
ip multicast-routing
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.2.2 255.255.255.0
ip pim sparse-mode
ip igmp join-group 224.2.2.2
no ip mroute-cache
!
interface FastEthernet0/0
ip address 155.1.28.2 255.255.255.0
ip pim sparse-mode
no ip mroute-cache
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
!
router eigrp 10
network 150.1.2.2 0.0.0.0
network 155.1.28.2 0.0.0.0
no auto-summary
eigrp router-id 150.1.2.2
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 150.1.2.0 mask 255.255.255.0
neighbor 150.1.8.8 remote-as 200
no auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip pim send-rp-announce Loopback0 scope 2 interval 10
ip msdp peer 150.1.3.3 connect-source Loopback1 remote-as 101
ip msdp password peer 150.1.3.3 CISC0
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------------------

R3:

enable
config t

Current configuration : 1918 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
ip multicast-routing
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.3.3 255.255.255.0
ip pim sparse-mode
shut
!
interface FastEthernet0/0
ip address 155.1.37.3 255.255.255.0
ip pim sparse-mode
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.39.3 255.255.255.0
ip pim sparse-mode
ip access-group MULTICAST in
duplex auto
speed auto
!
interface Serial1/0
no ip address
shutdown
!
interface Serial1/1
no ip address
shutdown
!
interface Serial1/2
no ip address
shutdown
!
interface Serial1/3
no ip address
shutdown
!
router ospf 1
router-id 150.1.3.3
log-adjacency-changes
network 150.1.3.3 0.0.0.0 area 1
network 155.1.37.3 0.0.0.0 area 1
network 155.1.39.3 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 150.1.3.0 mask 255.255.255.0
neighbor IBGP_PEERS peer-group
neighbor IBGP_PEERS remote-as 100
neighbor IBGP_PEERS update-source Loopback0
neighbor IBGP_PEERS route-reflector-client
neighbor 150.1.7.7 peer-group IBGP_PEERS
neighbor 150.1.9.9 peer-group IBGP_PEERS
no auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip pim rp-candidate Loopback0 interval 10
ip msdp peer 150.1.2.2 connect-source Loopback0
ip msdp password peer 150.1.2.2 CISCO
!
access-list 120 permit ip 155.1.56.0 0.0.0.255 225.0.0.0 30.255.255.255
!
!
ip access-list extended MULTICAST
deny pim any any
permit ip any any
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------------------

R4:

enable
config t

Current configuration : 962 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------------------

R5:

enable
config t

Current configuration : 1346 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
ip multicast-routing
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.0
ip pim sparse-mode
!
interface FastEthernet0/0
ip address 155.1.56.5 255.255.255.0
ip pim sparse-mode
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.59.5 255.255.255.0
ip pim sparse-mode
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
!
router ospf 1
router-id 150.1.5.5
log-adjacency-changes
area 2 nssa default-information-originate
network 150.1.5.5 0.0.0.0 area 0
network 155.1.56.5 0.0.0.0 area 2
network 155.1.59.5 0.0.0.0 area 0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip pim bsr-candidate Loopback0 0
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------------------

R6:

enable
config t

Current configuration : 1147 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
ip multicast-routing
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.6.6 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.56.6 255.255.255.0
ip pim sparse-mode
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
router ospf 1
router-id 150.1.6.6
log-adjacency-changes
area 1 nssa
network 150.1.6.6 0.0.0.0 area 2
network 155.1.56.6 0.0.0.0 area 1
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------------------

SW1:

enable
config t

Current configuration : 4742 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
!
!
ip multicast-routing distributed
!
!
crypto pki trustpoint TP-self-signed-3817290112
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290112
revocation-check none
rsakeypair TP-self-signed-3817290112
!
!
crypto pki certificate chain TP-self-signed-3817290112
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393031 3132301E 170D3933 30333031 30303031
32355A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303131 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BB1A 34F6E38D F58112CD 9746C936 56896227 89935549 C3EB868B 7DA4FA9A
D0FB19AD 6A3B56CA 082ED34C 2535742C 0B553966 5B3F62E4 6690AE4E ACF20A55
3006A862 5054DA8C 69E91CB3 3BBF2E1D CDC0B840 A0D95D49 D9B30BB6 2649739A
D4B6F4E9 3B8901F4 6AB02F0E 99DA0F8E 5F66A89C E85164E2 BD84FB08 F8A7702E
025B0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535731 2E301F06 03551D23 04183016 80144E36 D63150BB
D68858CA 720B4CDC 392B8564 5D4F301D 0603551D 0E041604 144E36D6 3150BBD6
8858CA72 0B4CDC39 2B85645D 4F300D06 092A8648 86F70D01 01040500 03818100
3ED41F07 B919C329 58A5E77A B2E7F84C 479E10DA 20D41836 895A083D C3A299EE
FC134E4E D53F35B3 E31CECAD CF775040 A8586B76 736C58FC 7EB9EEB8 BF6E8998
A11BA823 DBC19B14 D4C9E070 AA030C83 0C9EFB4B 848C8F16 B2A0DB75 26E07011
AAFCF349 D8CE11C7 6C740FA7 B072ED71 3C058778 B353D9EF 538AE575 BFE15FF6
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.7.7 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
no switchport
ip address 155.1.37.7 255.255.255.0
ip pim sparse-mode
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 56
switchport mode access
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/14
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/15
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/16
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/17
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/18
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/19
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/20
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/21
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan78
ip address 155.1.78.7 255.255.255.0
ip pim bsr-border
!
router ospf 1
router-id 150.1.7.7
log-adjacency-changes
network 150.1.7.7 0.0.0.0 area 1
network 155.1.37.7 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 150.1.3.3 remote-as 100
neighbor 150.1.3.3 next-hop-self
neighbor 155.1.78.8 remote-as 200
no auto-summary
!
ip classless
ip http server
ip http secure-server
!
!
!
ip prefix-list R6_PREFIX seq 5 permit 155.1.56.0/24
ip prefix-list R6_PREFIX seq 10 permit 150.1.6.0/24 ge 32
ip sla enable reaction-alerts
!
route-map R6_PREFIX->BGP permit 10
match ip address prefix-list R6_PREFIX
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line vty 0 4
login
line vty 5 15
login
!
end

---------------------------------------------------------------------------------------------

SW2:

enable
config t

Current configuration : 4672 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW2
!
boot-start-marker
boot-end-marker
!
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
!
!
ip multicast-routing distributed
!
!
crypto pki trustpoint TP-self-signed-3819482240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3819482240
revocation-check none
rsakeypair TP-self-signed-3819482240
!
!
crypto pki certificate chain TP-self-signed-3819482240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383139 34383232 3430301E 170D3933 30333031 30303031
32305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313934
38323234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BA8A 91B9F34F 61EF5C72 0A769170 C145F085 B9A4301B 5F5CA957 80BA7085
7D18D125 8985C8DE BDEEF751 3CB3D694 EBDF7F6F 79EC952E D4636C37 2FC460C0
55A6C402 46507722 9D5D8E0E 7B8676A6 29E264F2 D997B654 C8D62F05 95ADCFBE
B48722F3 240BFF79 36D840CB 831851A2 05A94C24 84044E64 21C3B002 3060C2E0
E79D0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535732 2E301F06 03551D23 04183016 801491E5 622F7489
F097DA15 89997FA9 46705116 8E08301D 0603551D 0E041604 1491E562 2F7489F0
97DA1589 997FA946 7051168E 08300D06 092A8648 86F70D01 01040500 03818100
4347DB03 09EC1E15 AB1B079E 870EDC8D 15D982C0 CA00E679 3C051E1E B0CA9D4F
52C98D65 29954E0B C145D907 D370946C A8748B05 A6F816D4 C9EC2961 115F003A
07251756 F72D444B 9DF962AC 2E93C8D0 070870EB 17CAE0AA E0023412 5C8787F8
85E06849 24E7FA5B 2D46535C 031AD148 57A40C87 4BC401F2 8257D98E A3A7F904
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.8.8 255.255.255.0
ip pim sparse-mode
!
interface FastEthernet0/1
!
interface FastEthernet0/2
no switchport
ip address 155.1.28.8 255.255.255.0
ip pim sparse-mode
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
switchport access vlan 56
switchport mode access
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/14
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/15
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/16
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/17
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/18
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/19
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/20
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/21
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan78
ip address 155.1.78.8 255.255.255.0
ip pim sparse-mode
ip multicast boundary FILTER_AUTO_RP
!
!
router eigrp 10
network 150.1.8.8 0.0.0.0
network 155.1.28.8 0.0.0.0
eigrp router-id 150.1.8.8
!
router bgp 200
no synchronization
bgp log-neighbor-changes
neighbor 150.1.2.2 remote-as 200
neighbor 150.1.2.2 update-source Loopback0
neighbor 150.1.2.2 next-hop-self
neighbor 155.1.78.7 remote-as 100
no auto-summary
!
ip classless
ip http server
ip http secure-server
!
!
access-list 2 permit 150.1.2.2
access-list 22 deny 224.0.0.0
access-list 22 permit any
!
ip pim send-rp-discovery Loopback0 scope 1 interval 10
ip pim rp-announce-filter rp-list 2 group-list 22
!
ip access-list standard FILTER_AUTO_RP
deny 224.0.1.39
deny 224.0.1.40
permit any
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line vty 0 4
login
line vty 5 15
login
!
end

---------------------------------------------------------------------------------------------

SW3:

enable
config t

Current configuration : 4547 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW3
!
boot-start-marker
boot-end-marker
!
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
!
!
!
!
crypto pki trustpoint TP-self-signed-3817305984
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817305984
revocation-check none
rsakeypair TP-self-signed-3817305984
!
!
crypto pki certificate chain TP-self-signed-3817305984
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 33303539 3834301E 170D3933 30333031 30303031
32305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313733
30353938 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100E9D9 7ABD3879 0A129780 9F334565 356A9FF4 EB7FE4E1 34ACDAE2 B4F64E4D
1001A812 964DB2EC 0F3F774F 98D9D043 6F68F370 26FB3FD4 B2C25E37 5E1FB5C1
5B7DF79A 22FCD48A 1248FD23 07DDB4EC 916FD70D FFD59E03 09F0B545 5736A864
56674F5B 67F7FB60 CE98BBDB 3137C54C 5EDA5B3E C9457CC8 3C316909 2166027C
E64F0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535733 2E301F06 03551D23 04183016 8014A185 28641084
A83336D4 F35DB110 90343537 8FC2301D 0603551D 0E041604 14A18528 641084A8
3336D4F3 5DB11090 3435378F C2300D06 092A8648 86F70D01 01040500 03818100
93EB266A 7147D6E0 10B4777B 490685E8 07A6761E 2D312478 0F546501 BB218280
E67897F8 10B68BF4 FE6D5F2B AEA2565F 39380FF3 E2C0E351 AFCE0794 8F837E30
0013685F 6A08D572 4363A817 85B2EBF0 2C5ADFA1 8966D9F6 8E27C721 A5E76140
DA72BE7A 3F405FFA 16C5B456 4CA0E0F8 4F7D45CB BB8F205E D6CA4577 6054FB6A
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.9.9 255.255.255.0
ip pim sparse-mode
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
switchport access vlan 39
switchport mode access
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 59
switchport mode access
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/14
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/15
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/16
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/17
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/18
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/19
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/20
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/21
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan39
ip address 155.1.39.9 255.255.255.0
ip pim sparse-mode
!
interface Vlan59
ip address 155.1.59.9 255.255.255.0
ip pim sparse-mode
!
router ospf 1
router-id 150.1.9.9
log-adjacency-changes
network 150.1.9.9 0.0.0.0 area 0
network 155.1.39.9 0.0.0.0 area 1
network 155.1.59.9 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 150.1.3.3 remote-as 100
no auto-summary
!
ip classless
ip http server
ip http secure-server
!
ip pim rp-candidate Loopback0 interval 10 priority 100
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line vty 0 4
login
line vty 5 15
login
!
end

---------------------------------------------------------------------------------------------

SW4:

enable
config t

Current configuration : 3838 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW4
!
boot-start-marker
boot-end-marker
!
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
!
!
!
!
crypto pki trustpoint TP-self-signed-3817290240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290240
revocation-check none
rsakeypair TP-self-signed-3817290240
!
!
crypto pki certificate chain TP-self-signed-3817290240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393032 3430301E 170D3933 30333031 30303031
31395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C7F8 FD003D7F 48BF2D79 D2E2F3AF 97BF626A 2482A978 D6E7C205 F9C354A9
2593DBE7 5C88F699 6DDF93D1 48D951A1 8491A61A B76B8155 C6E15C7B 20304EF8
39DAA4ED 518F5B1C 4DA8D48B E5E92163 01EFA14A 934BECDF F5929DF4 341C6BD5
6CC94434 C6B1F2E7 CE01FF1A 6EB9861E FC20B52F FEA94C23 0BAB1BCD A0936845
AF930203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535734 2E301F06 03551D23 04183016 80149123 050BF20B
50FE9784 F4AE992E 61D66F3D 3DB8301D 0603551D 0E041604 14912305 0BF20B50
FE9784F4 AE992E61 D66F3D3D B8300D06 092A8648 86F70D01 01040500 03818100
405838B4 838FD607 9BFFB10B B8E8EFC1 13F2555A F0914056 E33565C5 FE3928CC
C1A846A7 A93899F5 A6D5BB09 BD4A4756 0FDCBB73 2CDCD171 2B6520CD 6665BD32
769A6895 102656AE 1515A7B7 ADBABED2 22A4AD16 C193B70D 20814864 DCBD06D6
29CF765D 0B28932D F73F5513 0A2BC8EC 88D37371 10DA44FC 94A0356D 39C5CB6A
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/14
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/15
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/16
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/17
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/18
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/19
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/20
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/21
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line vty 0 4
login
line vty 5 15
login
!
end

---------------------------------------------------------------------------------------------

NTP TroubleShooting

2012-04-18T23:17:00.002+05:30

NTP provide time synchronization in the network devices. NTP TS its just like verifying each configuration steps except with minor exceptions. Lets take those exceptions along with common causes in NTP TS. I deliberately introduce multiple issues in this topology. These issues may not necessarily be from NTP.

You just need to copy and paste the initial configuration on all the devices of any INE Rack and start working on the TS ticket.

Note: You just need to take care of rack number. Here I have used Rack 1 .
Note: TRY NOT TO USE "Show run" commands for better learning purposes

Topology Diagram:

Ticket1: NTP clients are not synchronized with NTP server. Fix it.

-----------------------INITIAL CONFIGURATIONS-------------------------------

R1:

Enable
Config t

Current configuration : 1285 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.146.1 255.255.255.0
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.1 255.255.255.0
frame-relay interface-dlci 105
!
interface Serial0/0/1
ip address 155.1.13.1 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------

R2:

Enable
Config t

Current configuration : 1274 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R2
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.2.2 255.255.255.0
!
interface FastEthernet0/0
ip address 192.10.1.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.2 255.255.255.0
frame-relay interface-dlci 205
!
interface Serial0/0/1
ip address 155.1.23.2 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

----------------------------------------------------------------------------------------

R3:

Enable
Config t

Current configuration : 1878 bytes
!
! Last configuration change at 20:44:30 UTC Wed Apr 18 2012
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R3
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.3.3 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.37.3 255.255.255.0
ip access-group EIGRP in
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.43.3 255.255.255.0
ip access-group NTP in
duplex auto
speed auto
!
interface Serial1/0
no ip address
encapsulation frame-relay
!
interface Serial1/0.1 point-to-point
ip address 155.1.0.3 255.255.255.0
frame-relay interface-dlci 305
!
interface Serial1/1
no ip address
shutdown
!
interface Serial1/2
ip address 155.1.13.3 255.255.255.0
clock rate 64000
!
interface Serial1/3
ip address 155.1.23.3 255.255.255.0
clock rate 64000
!
router eigrp 10
network 150.1.0.0
network 155.1.0.0
no auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
ip access-list extended EIGRP
permit ip any any
ip access-list extended NTP
deny udp any eq ntp any
deny udp any any eq ntp
permit ip any any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
ntp authentication-key 43 md5 096F673A3A2A 7
ntp authenticate
ntp trusted-key 43
ntp server 150.1.4.4 source Loopback0
end

-----------------------------------------------------------------------------------------

R4:

Enable
Config t

Current configuration : 1759 bytes
!
! Last configuration change at 20:42:18 UTC Wed Apr 18 2012
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R4
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
key chain EIGRP
key 1
key-string CISCO
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.4.4 255.255.255.0
shutdown
!
interface FastEthernet0/0
ip address 155.1.43.4 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.146.4 255.255.255.0
ip authentication mode eigrp 10 md5
ip authentication key-chain eigrp 10 EIGRP
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.4 255.255.255.0
frame-relay interface-dlci 405
!
interface Serial0/0/1
ip address 155.1.45.4 255.255.255.0
clock rate 64000
!
router eigrp 10
network 150.1.0.0
network 155.1.0.0
no auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
ntp authentication-key 43 md5 00273A352774 7
ntp authentication-key 46 md5 047822352C0E 7
ntp trusted-key 64
ntp trusted-key 43
ntp source Loopback0
ntp master 7
ntp server 150.1.4.4
end

-----------------------------------------------------------------------------------------

R5:

Enable
Config t

Current configuration : 1398 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.58.5 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.5.5 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
ip address 155.1.0.5 255.255.255.0
encapsulation frame-relay
frame-relay map ip 155.1.0.4 504 broadcast
frame-relay map ip 155.1.0.3 503 broadcast
frame-relay map ip 155.1.0.2 502 broadcast
frame-relay map ip 155.1.0.1 501 broadcast
no frame-relay inverse-arp
!
interface Serial0/0/1
ip address 155.1.45.5 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------

R6:

Enable
Config t

Current configuration : 1692 bytes
!
! Last configuration change at 20:45:14 UTC Wed Apr 18 2012
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R6
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
key chain EIGRP
key 1
key-string CISCO
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.6.6 255.255.255.0
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.67
encapsulation dot1Q 67
ip address 155.1.67.6 255.255.255.0
!
interface FastEthernet0/0.146
encapsulation dot1Q 146
ip address 155.1.146.6 255.255.255.0
ip authentication mode eigrp 10 md5
ip authentication key-chain eigrp 10 EIGRP
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 54.1.1.6 255.255.255.0
encapsulation frame-relay
frame-relay map ip 54.1.1.254 101 broadcast
!
router eigrp 10
network 150.1.0.0
network 155.1.0.0
no auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
ntp authentication-key 46 md5 062526136F61 7
ntp authenticate
ntp server 150.1.4.4 source Loopback0
end

---------------------------------------------------------------------------------------

SW1:

Enable
Config t

Current configuration : 4010 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW1
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817290112
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290112
revocation-check none
rsakeypair TP-self-signed-3817290112
!
!
crypto pki certificate chain TP-self-signed-3817290112
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393031 3132301E 170D3933 30333031 30303131
30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303131 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100EB14 D8B1EDD2 7907520B 10C018D4 39F0AD6D A231AED9 BED9AEC6 21A79CDC
7D4DC350 94F3AAA1 FD77B225 13996685 B8946D64 2E7B3189 2BD0F2E0 F9447FDA
599B426C DEF0AC03 4CC22373 D2C0CFE8 A9D14CFF 0067B2F1 5AACD311 1BC493BC
988BD25F 7C38F0DD 618E2B94 F6E984B6 E2266F69 4AF3DFDB B0A9B719 331A612B
90E30203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535731 2E301F06 03551D23 04183016 8014DA7A D70513B1
129D9908 816E0E58 FA147A8F A3BD301D 0603551D 0E041604 14DA7AD7 0513B112
9D990881 6E0E58FA 147A8FA3 BD300D06 092A8648 86F70D01 01040500 03818100
9A0A702B AB8CAC50 D7C3F588 6E4FD437 A28C3809 A55F99F4 D289059C 000097FA
ED0E328F D3F79F77 85B2C6BD B078E7BC B55D17F4 AB8DF5BA 810C8DAC 4CBBE939
70C9FB6E EAEFD9CB 3BC77A03 805E7037 7ECC12C3 F5DE5101 6D776B23 4B963D65
67BBDED5 BAF9A4E2 DFDDE663 31841423 1C753ECB BEAED509 25149EEC 0681E588
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 146
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/2
!
interface FastEthernet0/3
no switchport
ip address 155.1.37.7 255.255.255.0
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 58
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan7
ip address 155.1.7.7 255.255.255.0
!
interface Vlan67
ip address 155.1.67.7 255.255.255.0
!
interface Vlan79
ip address 155.1.79.7 255.255.255.0
!
!
router eigrp 10
network 155.1.0.0
network 150.1.0.0
no auto
!
!
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

-----------------------------------------------------------------------------------------

SW2:

Enable
Config t

Current configuration : 4060 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW2
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3819482240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3819482240
revocation-check none
rsakeypair TP-self-signed-3819482240
!
!
crypto pki certificate chain TP-self-signed-3819482240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383139 34383232 3430301E 170D3933 30333031 30303131
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313934
38323234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A837 82D6C881 800C4388 3530AB13 BA5BF24E 287B930D 23E87550 2AB8E6CE
D2A64706 F0D4D7F8 F0D6A957 99618333 41B3151E 0D4A3762 D23C6B90 255500D5
BCEDFFCE E5BD2B0C 18824191 41DC2C91 65C0B10B C80DA935 6B640AB4 3AFCB936
CB3EF1E6 6D89E7EE 16248E2E 66E19965 D299D3D7 C399BA9F A451A94B 15C8D1CC
428F0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535732 2E301F06 03551D23 04183016 8014D981 2DC83174
778DE36B ED56E7EA 12238458 C0AB301D 0603551D 0E041604 14D9812D C8317477
8DE36BED 56E7EA12 238458C0 AB300D06 092A8648 86F70D01 01040500 03818100
1D070628 97289B70 5232CF0F 90385491 EF2D1BE2 0727752A 26372174 9BFF2D8E
48393ABB D1CFFFD3 3A3DD0F4 4129CC11 9889BD50 E34102AD 73D3350B 8AAED219
CD2BA90C 27F10D8A A886305D D4FAE4D9 CFB58DFF A48F8A69 27794E02 CF2144EA
EFCED9F0 6CFDFE4C 9CAE7CF0 97459580 093DC01C 35AB8559 4D0B04E0 40644CB3
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
ip access-list extended EIGRP
permit eigrp any any
!
!
vlan access-map VLAN_MAP 10
action drop
match ip address EIGRP
vlan access-map VLAN_MAP 20
action forward
!
vlan filter VLAN_MAP vlan-list 43
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.8.8 255.255.255.0
!
interface Port-channel1
no switchport
ip address 155.1.108.8 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
switchport access vlan 22
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 43
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/20
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport access vlan 22
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan8
ip address 155.1.8.8 255.255.255.0
!
interface Vlan58
ip address 155.1.58.8 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

---------------------------------------------------------------------------------------

SW3:

Enable
Config t

Current configuration : 3831 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW3
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817305984
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817305984
revocation-check none
rsakeypair TP-self-signed-3817305984
!
!
crypto pki certificate chain TP-self-signed-3817305984
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 33303539 3834301E 170D3933 30333031 30303131
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313733
30353938 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C769 FF6EFF61 B1A90633 742490B5 451DB6A8 FD3ECCEB D50F2A27 06A6ED45
FE139569 A086D8B8 41C65CE6 94E798C7 A8DF051A 517916F6 FB95380A E47BFE44
DDDB9A60 8ACEB1F7 CDA47FB2 6939B9D8 A6E3BF7C B824AC58 1519707F 018A6806
9C246CFF 3C6A817F 2FFF8376 D496A0F6 606E7E0C F161678C A92800A1 DE884A97
545F0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535733 2E301F06 03551D23 04183016 8014727E F9FC8A5B
863BBB1E BC2C115F 813F4BFC 9EA9301D 0603551D 0E041604 14727EF9 FC8A5B86
3BBB1EBC 2C115F81 3F4BFC9E A9300D06 092A8648 86F70D01 01040500 03818100
7AB609CE 03584B9A 85D00FCF 6CA6F59F E4984898 35D53691 6433BF57 A37C3ED1
4866CBC1 E99C3746 799393CC 95EEE40A DD9F6A51 3F061CCF 3CB59A53 897AF112
4F135059 01DA2695 3EC6DCAB 4C850371 72404BD0 3C15F2C5 926617EB 047E9D92
65948CC2 DC676466 1194CB15 364D3665 088ABB44 0E5929DB 2F408387 1A704054
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.9.9 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
switchport access vlan 43
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 5
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport access vlan 43
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan9
ip address 155.1.9.9 255.255.255.0
!
interface Vlan79
ip address 155.1.79.9 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

---------------------------------------------------------------------------------------

SW4:

Enable
Config t

Current configuration : 3800 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW4
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817290240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290240
revocation-check none
rsakeypair TP-self-signed-3817290240
!
!
crypto pki certificate chain TP-self-signed-3817290240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393032 3430301E 170D3933 30333031 30303131
30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A882 8FE6CF9A B3F50221 B8E72FCF 63CCCD43 C1A9413D 0FB9A949 7039AF7A
C388A46C BAD51B80 8FF8E1D9 93117A25 7B3050AE B45DD0F1 BCF4A248 E8E67E26
C32763D1 EEF76A8C CE39F76C 974AA287 D0822950 BB6ECD51 963A028D 9BD7B103
E40BCA82 6CDA6BBF 11A9F479 53A4E74C 81B718D7 D02291BF F48444FB F3AE2205
C8BD0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535734 2E301F06 03551D23 04183016 80141447 F24FD588
D20BE6F5 CD962442 8F6EB9DA 9579301D 0603551D 0E041604 141447F2 4FD588D2
0BE6F5CD 9624428F 6EB9DA95 79300D06 092A8648 86F70D01 01040500 03818100
1CC19729 F5D312B9 DA3B6C4B 5AC0BD06 6317043C 05CF0A2B CDA4F23E 2D0E8A24
2FB4DBF1 9551F6B2 469A7904 3FC08A0A 997DC725 5B00BDA8 5BA37247 B45E7086
5CE14049 C1FC95BB F3D2CDC4 F68F8271 F71CED12 B3B0CFB1 658584DC F731F6B8
7410BA9C E3819D52 4B36A44F B45094CF 669F6B6B 10C6FD9B 173FB472 E424132D
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.10.10 255.255.255.0
!
interface Port-channel1
no switchport
ip address 155.1.108.10 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 146
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/17
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 155.1.10.10 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

---------------------------------------------------------------------------------------

EIGRP TroubleShooting

2012-04-18T22:48:00.000+05:30

EIGRP TS ticket may sometimes create unexpected problems. Lets take an EIGRP Troubleshooting ticket. I deliberately introduce multiple issues in this topology. These issues may not necessarily be from EIGRP.

You just need to copy and paste the initial configuration on concern devices of any INE Rack and start working on the TS ticket.

Note: You just need to take care of rack number. Here I have used Rack 1 .

Note: TRY NOT TO USE "Show run" commands for better learning purposes

Topology Diagram:

Ticket1: Loopback0 interfaces of SW1 and R4 are unable to reach each other. Fix it

--------------------------INITIAL CONFIGURATIONS------------------------

R1:

Enable
Config t

Current configuration : 1285 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.146.1 255.255.255.0
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.1 255.255.255.0
frame-relay interface-dlci 105
!
interface Serial0/0/1
ip address 155.1.13.1 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------------

R2:

Enable
Config t

Current configuration : 1274 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R2
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.2.2 255.255.255.0
!
interface FastEthernet0/0
ip address 192.10.1.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.2 255.255.255.0
frame-relay interface-dlci 205
!
interface Serial0/0/1
ip address 155.1.23.2 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------------

R3:

Enable
Config t

Current configuration : 1591 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R3
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.3.3 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.37.3 255.255.255.0
ip access-group EIGRP in
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.43.3 255.255.255.0
duplex auto
speed auto
!
interface Serial1/0
no ip address
encapsulation frame-relay
!
interface Serial1/0.1 point-to-point
ip address 155.1.0.3 255.255.255.0
frame-relay interface-dlci 305
!
interface Serial1/1
no ip address
shutdown
!
interface Serial1/2
ip address 155.1.13.3 255.255.255.0
clock rate 64000
!
interface Serial1/3
ip address 155.1.23.3 255.255.255.0
clock rate 64000
!
router eigrp 10
network 150.1.0.0
network 155.1.0.0
auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
ip access-list extended EIGRP
deny eigrp any any
permit ip any any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------------

R4:

Enable
Config t

Current configuration : 1375 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R4
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.4.4 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.43.4 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.146.4 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.4 255.255.255.0
frame-relay interface-dlci 405
!
interface Serial0/0/1
ip address 155.1.45.4 255.255.255.0
clock rate 64000
!
router eigrp 10
network 150.1.0.0
network 155.1.0.0
auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------------

R5:

Enable
Config t

Current configuration : 1398 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.58.5 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.5.5 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
ip address 155.1.0.5 255.255.255.0
encapsulation frame-relay
frame-relay map ip 155.1.0.4 504 broadcast
frame-relay map ip 155.1.0.3 503 broadcast
frame-relay map ip 155.1.0.2 502 broadcast
frame-relay map ip 155.1.0.1 501 broadcast
no frame-relay inverse-arp
!
interface Serial0/0/1
ip address 155.1.45.5 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------------

R6:

Enable
Config t

Current configuration : 1401 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R6
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.6.6 255.255.255.0
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.67
encapsulation dot1Q 67
ip address 155.1.67.6 255.255.255.0
!
interface FastEthernet0/0.146
encapsulation dot1Q 146
ip address 155.1.146.6 255.255.255.0
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 54.1.1.6 255.255.255.0
encapsulation frame-relay
frame-relay map ip 54.1.1.254 101 broadcast
!
router eigrp 10
network 150.1.0.0
network 155.1.0.0
auto-summary
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------------

SW1:

Enable
Config t

Current configuration : 4010 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW1
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817290112
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290112
revocation-check none
rsakeypair TP-self-signed-3817290112
!
!
crypto pki certificate chain TP-self-signed-3817290112
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393031 3132301E 170D3933 30333031 30303131
30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303131 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100EB14 D8B1EDD2 7907520B 10C018D4 39F0AD6D A231AED9 BED9AEC6 21A79CDC
7D4DC350 94F3AAA1 FD77B225 13996685 B8946D64 2E7B3189 2BD0F2E0 F9447FDA
599B426C DEF0AC03 4CC22373 D2C0CFE8 A9D14CFF 0067B2F1 5AACD311 1BC493BC
988BD25F 7C38F0DD 618E2B94 F6E984B6 E2266F69 4AF3DFDB B0A9B719 331A612B
90E30203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535731 2E301F06 03551D23 04183016 8014DA7A D70513B1
129D9908 816E0E58 FA147A8F A3BD301D 0603551D 0E041604 14DA7AD7 0513B112
9D990881 6E0E58FA 147A8FA3 BD300D06 092A8648 86F70D01 01040500 03818100
9A0A702B AB8CAC50 D7C3F588 6E4FD437 A28C3809 A55F99F4 D289059C 000097FA
ED0E328F D3F79F77 85B2C6BD B078E7BC B55D17F4 AB8DF5BA 810C8DAC 4CBBE939
70C9FB6E EAEFD9CB 3BC77A03 805E7037 7ECC12C3 F5DE5101 6D776B23 4B963D65
67BBDED5 BAF9A4E2 DFDDE663 31841423 1C753ECB BEAED509 25149EEC 0681E588
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 146
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/2
!
interface FastEthernet0/3
no switchport
ip address 155.1.37.7 255.255.255.0
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 58
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan7
ip address 155.1.7.7 255.255.255.0
!
interface Vlan67
ip address 155.1.67.7 255.255.255.0
!
interface Vlan79
ip address 155.1.79.7 255.255.255.0
!
!
router eigrp 10
network 155.1.0.0
!
!
router eigrp 1
network 150.1.7.7 0.0.0.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

-----------------------------------------------------------------------------------------------

SW2:

Enable
Config t

Current configuration : 4060 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW2
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3819482240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3819482240
revocation-check none
rsakeypair TP-self-signed-3819482240
!
!
crypto pki certificate chain TP-self-signed-3819482240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383139 34383232 3430301E 170D3933 30333031 30303131
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313934
38323234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A837 82D6C881 800C4388 3530AB13 BA5BF24E 287B930D 23E87550 2AB8E6CE
D2A64706 F0D4D7F8 F0D6A957 99618333 41B3151E 0D4A3762 D23C6B90 255500D5
BCEDFFCE E5BD2B0C 18824191 41DC2C91 65C0B10B C80DA935 6B640AB4 3AFCB936
CB3EF1E6 6D89E7EE 16248E2E 66E19965 D299D3D7 C399BA9F A451A94B 15C8D1CC
428F0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535732 2E301F06 03551D23 04183016 8014D981 2DC83174
778DE36B ED56E7EA 12238458 C0AB301D 0603551D 0E041604 14D9812D C8317477
8DE36BED 56E7EA12 238458C0 AB300D06 092A8648 86F70D01 01040500 03818100
1D070628 97289B70 5232CF0F 90385491 EF2D1BE2 0727752A 26372174 9BFF2D8E
48393ABB D1CFFFD3 3A3DD0F4 4129CC11 9889BD50 E34102AD 73D3350B 8AAED219
CD2BA90C 27F10D8A A886305D D4FAE4D9 CFB58DFF A48F8A69 27794E02 CF2144EA
EFCED9F0 6CFDFE4C 9CAE7CF0 97459580 093DC01C 35AB8559 4D0B04E0 40644CB3
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.8.8 255.255.255.0
!
interface Port-channel1
no switchport
ip address 155.1.108.8 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
switchport access vlan 22
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 43
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/20
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport access vlan 22
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan8
ip address 155.1.8.8 255.255.255.0
!
interface Vlan58
ip address 155.1.58.8 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

-----------------------------------------------------------------------------------------------

SW3:

Enable
Config t

Current configuration : 3831 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW3
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817305984
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817305984
revocation-check none
rsakeypair TP-self-signed-3817305984
!
!
crypto pki certificate chain TP-self-signed-3817305984
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 33303539 3834301E 170D3933 30333031 30303131
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313733
30353938 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C769 FF6EFF61 B1A90633 742490B5 451DB6A8 FD3ECCEB D50F2A27 06A6ED45
FE139569 A086D8B8 41C65CE6 94E798C7 A8DF051A 517916F6 FB95380A E47BFE44
DDDB9A60 8ACEB1F7 CDA47FB2 6939B9D8 A6E3BF7C B824AC58 1519707F 018A6806
9C246CFF 3C6A817F 2FFF8376 D496A0F6 606E7E0C F161678C A92800A1 DE884A97
545F0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535733 2E301F06 03551D23 04183016 8014727E F9FC8A5B
863BBB1E BC2C115F 813F4BFC 9EA9301D 0603551D 0E041604 14727EF9 FC8A5B86
3BBB1EBC 2C115F81 3F4BFC9E A9300D06 092A8648 86F70D01 01040500 03818100
7AB609CE 03584B9A 85D00FCF 6CA6F59F E4984898 35D53691 6433BF57 A37C3ED1
4866CBC1 E99C3746 799393CC 95EEE40A DD9F6A51 3F061CCF 3CB59A53 897AF112
4F135059 01DA2695 3EC6DCAB 4C850371 72404BD0 3C15F2C5 926617EB 047E9D92
65948CC2 DC676466 1194CB15 364D3665 088ABB44 0E5929DB 2F408387 1A704054
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.9.9 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
switchport access vlan 43
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 5
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport access vlan 43
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan9
ip address 155.1.9.9 255.255.255.0
!
interface Vlan79
ip address 155.1.79.9 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
-----------------------------------------------------------------------------------------------

SW4:

Enable
Config t

Current configuration : 3800 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW4
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817290240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290240
revocation-check none
rsakeypair TP-self-signed-3817290240
!
!
crypto pki certificate chain TP-self-signed-3817290240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393032 3430301E 170D3933 30333031 30303131
30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A882 8FE6CF9A B3F50221 B8E72FCF 63CCCD43 C1A9413D 0FB9A949 7039AF7A
C388A46C BAD51B80 8FF8E1D9 93117A25 7B3050AE B45DD0F1 BCF4A248 E8E67E26
C32763D1 EEF76A8C CE39F76C 974AA287 D0822950 BB6ECD51 963A028D 9BD7B103
E40BCA82 6CDA6BBF 11A9F479 53A4E74C 81B718D7 D02291BF F48444FB F3AE2205
C8BD0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535734 2E301F06 03551D23 04183016 80141447 F24FD588
D20BE6F5 CD962442 8F6EB9DA 9579301D 0603551D 0E041604 141447F2 4FD588D2
0BE6F5CD 9624428F 6EB9DA95 79300D06 092A8648 86F70D01 01040500 03818100
1CC19729 F5D312B9 DA3B6C4B 5AC0BD06 6317043C 05CF0A2B CDA4F23E 2D0E8A24
2FB4DBF1 9551F6B2 469A7904 3FC08A0A 997DC725 5B00BDA8 5BA37247 B45E7086
5CE14049 C1FC95BB F3D2CDC4 F68F8271 F71CED12 B3B0CFB1 658584DC F731F6B8
7410BA9C E3819D52 4B36A44F B45094CF 669F6B6B 10C6FD9B 173FB472 E424132D
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.10.10 255.255.255.0
!
interface Port-channel1
no switchport
ip address 155.1.108.10 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 146
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/17
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 155.1.10.10 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
----------------------------------------------------------------------------------

I will post the solution of this ticket once i get responses from you guys. Thanks.

OSPF TroubleShooting

2012-04-18T17:52:00.000+05:30

OSPF TS is not that difficult it self but sometimes other underlying layer 2 technologies make the TS difficult. Lets take an OSPF Troubleshooting ticket. I deliberately introduce multiple issues in this topology. These issues may not necessarily be from OSPF.

You just need to copy and paste the initial configuration on concern devices of any INE Rack and start working on the TS ticket.

Note: You just need to take care of rack number. Here I have used Rack 1 .

Note: TRY NOT TO USE "Show run" commands for better learning purposes

Topology Diagram:

Ticket1: R1 and R2 are not forming ospf adjacency. Fix it. There can be multiple issue with this TS ticket.

--------------------INITIAL CONFIGURATIONS-------------------------

R1:

enable

config t

Current configuration : 1624 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.1.1 255.255.255.0
!
interface Loopback1
ip address 150.1.11.11 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
encapsulation frame-relay
!
interface Serial0/0/1.1 multipoint
ip address 155.1.12.1 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 12 md5 CISC0
ip ospf priority 0
frame-relay map ip 155.1.12.2 201 broadcast
no frame-relay inverse-arp
!
router ospf 1
router-id 150.1.1.1
log-adjacency-changes
area 12 nssa
redistribute connected subnets route-map CONNECTED->OSPF
network 150.1.1.1 0.0.0.0 area 1
network 155.1.12.1 0.0.0.0 area 12
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
route-map CONNECTED->OSPF permit 10
match interface Loopback1
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
speed 38400
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------

R2:

enable

config t

Current configuration : 1506 bytes

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R2

boot-start-marker

boot-end-marker

logging message-counter syslog

no aaa new-model

dot11 syslog

ip source-route

ip cef

no ipv6 cef

multilink bundle-name authenticated

voice-card 0

MPLS TroubleShooting

2012-04-18T16:31:00.000+05:30

MPLS TS is something many of us fear with. Lets take a troubleshooting ticket on MPLS to understand this technology in depth. I deliberately introduce multiple issues in this topology. These issues may not necessarily be from MPLS.

You just need to copy and paste the initial configuration on all the devices of any INE Rack and start working on the TS ticket.

Note: You just need to take care of rack number. Here I have used Rack 1 .
Note: TRY NOT TO USE "Show run" commands for better learning purposes

Topology Diagram:

Ticket:Vlan 7 is unable to reach Vlan 8. Fix it. There can be multiple issues in this TS ticket.

---------------------------INITIAL CONFIGURATIONS-------------------------

R1:

enable
conf t

Current configuration : 1285 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.146.1 255.255.255.0
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.1 255.255.255.0
frame-relay interface-dlci 105
!
interface Serial0/0/1
ip address 155.1.13.1 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

--------------------------------------------------------------------------------------------------------------------
R2:

enable
config t

Current configuration : 1274 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R2
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.2.2 255.255.255.0
!
interface FastEthernet0/0
ip address 192.10.1.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.2 255.255.255.0
frame-relay interface-dlci 205
!
interface Serial0/0/1
ip address 155.1.23.2 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

-----------------------------------------------------------------------------------------------
R3:

enable
config t

Current configuration : 1410 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R3
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.3.3 255.255.255.0
!
interface FastEthernet0/0
ip address 155.1.37.3 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
no ip address
encapsulation frame-relay
!
interface Serial1/0.1 point-to-point
ip address 155.1.0.3 255.255.255.0
frame-relay interface-dlci 305
!
interface Serial1/1
no ip address
shutdown
!
interface Serial1/2
ip address 155.1.13.3 255.255.255.0
clock rate 64000
!
interface Serial1/3
ip address 155.1.23.3 255.255.255.0
clock rate 64000
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

------------------------------------------------------------------------------------------
R4:

enable
config t

Current configuration : 2866 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R4
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
no ip cef
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
mpls ldp password required
mpls ldp neighbor 150.1.5.5 password CISCO
mpls ldp neighbor 150.1.6.6 password cisco
no mpls ldp advertise-labels
mpls ldp advertise-labels for 11
mpls label protocol ldp
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.4.4 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet0/0
ip address 204.12.1.4 255.255.255.0
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.146.4 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CISCO
duplex auto
speed auto
mpls ip
!
interface Serial0/0/0
no ip address
encapsulation frame-relay
shutdown
!
interface Serial0/0/0.1 point-to-point
ip address 155.1.0.4 255.255.255.0
frame-relay interface-dlci 405
!
interface Serial0/1
ip address 155.1.45.4 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CISCO
mpls ldp discovery transport-address interface
clock rate 64000
!
router ospf 100
mpls ldp autoconfig area 0
router-id 150.1.4.4
log-adjacency-changes
network 150.1.4.4 0.0.0.0 area 0
network 155.1.45.4 0.0.0.0 area 0
network 155.1.146.4 0.0.0.0 area 0
!
router bgp 100
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 150.1.5.5 remote-as 100
neighbor 150.1.5.5 password C1SCO
neighbor 150.1.5.5 update-source Loopback0
neighbor 150.1.6.6 remote-as 100
neighbor 150.1.6.6 password CISCO
neighbor 150.1.6.6 update-source Loopback0
!
address-family ipv4
neighbor 150.1.5.5 activate
neighbor 150.1.5.5 route-reflector-client
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 route-reflector-client
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 150.1.5.5 activate
neighbor 150.1.5.5 send-community extended
neighbor 150.1.5.5 route-reflector-client
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
access-list 1 permit 150.1.0.0 0.0.255.255
!
!
!
!
!
mpls ldp router-id Loopback0 force
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

---------------------------------------------------------------------------------------------
R5:

enable
config t

Current configuration : 2723 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
ip vrf VPN_A
rd 100:1
route-target export 100:55
route-target import 100:6
!
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
mpls ldp password required
mpls ldp neighbor 150.1.4.4 password CISCO
no mpls ldp advertise-labels
mpls ldp advertise-labels for 1
mpls label protocol tdp
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet0/0
ip vrf forwarding VPN_A
ip address 155.1.58.5 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CISCO
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 155.1.5.5 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
ip address 155.1.0.5 255.255.255.0
encapsulation frame-relay
shutdown
frame-relay map ip 155.1.0.4 504 broadcast
frame-relay map ip 155.1.0.3 503 broadcast
frame-relay map ip 155.1.0.2 502 broadcast
frame-relay map ip 155.1.0.1 501 broadcast
no frame-relay inverse-arp
!
interface Serial0/1
ip address 155.1.45.5 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CISCO
mpls ldp discovery transport-address interface
mpls ip
!
router ospf 1 vrf VPN_A
log-adjacency-changes
redistribute bgp 100 subnets
network 155.1.58.5 0.0.0.0 area 1
!
router ospf 100
router-id 150.1.5.5
log-adjacency-changes
network 150.1.5.5 0.0.0.0 area 0
network 155.1.45.5 0.0.0.0 area 0
!
router bgp 100
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 150.1.4.4 remote-as 100
neighbor 150.1.4.4 password CISCO
neighbor 150.1.4.4 update-source Loopback0
!
address-family ipv4
neighbor 150.1.4.4 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community extended
exit-address-family
!
address-family ipv4 vrf VPN_A
no synchronization
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
access-list 1 permit 150.1.0.0 0.0.255.255
!
!
!
!
!
mpls ldp router-id Loopback0 force
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

--------------------------------------------------------------------------------------
R6:

enable
config t

Current configuration : 2599 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1R6
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password cisco
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
ip vrf VPN_A
rd 100:1
route-target export 100:66
route-target import 100:5
!
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
mpls ldp password required
mpls ldp neighbor 150.1.4.4 password CISCO
no mpls ldp advertise-labels
mpls ldp advertise-labels for 1
mpls label protocol ldp
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 150.1.6.6 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.67
encapsulation dot1Q 67
ip address 155.1.67.6 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CISCO
!
interface FastEthernet0/0.146
encapsulation dot1Q 146
ip address 155.1.146.6 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CISCO
mpls ip
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 54.1.1.6 255.255.255.0
encapsulation frame-relay
frame-relay map ip 54.1.1.254 101 broadcast
!
router ospf 1 vrf VPN_A
log-adjacency-changes
network 155.1.67.6 0.0.0.0 area 1
!
router ospf 100
router-id 150.1.6.6
log-adjacency-changes
network 150.1.6.6 0.0.0.0 area 0
network 155.1.146.6 0.0.0.0 area 0
!
router bgp 100
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 150.1.4.4 remote-as 100
neighbor 150.1.4.4 password CISCO
neighbor 150.1.4.4 update-source Loopback0
!
address-family ipv4
neighbor 150.1.4.4 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community extended
exit-address-family
!
address-family ipv4 vrf VPN_A
redistribute ospf 1 vrf VPN_A match internal external 1 external 2
no synchronization
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
access-list 1 permit 150.1.0.0 0.0.255.255
!
!
!
!
!
mpls ldp router-id Loopback0 force
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line aux 0
exec-timeout 0 0
privilege level 15
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

SW1:

enable
config t

Current configuration : 4299 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW1
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
no ip domain-lookup
!
!
ip vrf VPN_A
rd 100:1
!
!
!
crypto pki trustpoint TP-self-signed-3817290112
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290112
revocation-check none
rsakeypair TP-self-signed-3817290112
!
!
crypto pki certificate chain TP-self-signed-3817290112
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393031 3132301E 170D3933 30333031 30303435
33385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303131 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A620 7B67ACE8 75C8013C 497F0C2C AC6BB470 C378B292 C3404D98 A6BC8000
5FB12A04 426C6B8A 1E20BCA6 684F3517 09098B66 BBA903C8 E5E867CF FEF40FF7
2241342E E1A7F68D 0858F766 5FEE91B1 AD9CB7A6 A3310A06 651C0A3F C31916F7
03C13FE5 4474A75D 8ADA6387 71626B99 86E7160A FF6CC129 D2C2B0CC 2E827A3C
F72D0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535731 2E301F06 03551D23 04183016 801462B5 BF96E610
33D9193C 83AEC52F 851B8630 BAEC301D 0603551D 0E041604 1462B5BF 96E61033
D9193C83 AEC52F85 1B8630BA EC300D06 092A8648 86F70D01 01040500 03818100
746BBA38 551BEA97 6DC1C56B 7F66F51A 84495B1A 9CB380FF D245D7C6 8C966D8E
76F7DF51 4C87BF06 201AA184 CC4C4302 941B99AF 401550E4 7F6F20F3 3B56E5FE
4D3AEC8C 4FF5A772 DB26E080 8F8B14A9 2C1A4A5C 112F5256 31795606 9B21DC59
D477C754 B6769E3D 2E76463F F289AF38 812C3318 220EC1FC 42246570 8584C5CB
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip vrf forwarding VPN_A
ip address 150.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 146
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/2
!
interface FastEthernet0/3
no switchport
ip address 155.1.37.7 255.255.255.0
shutdown
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 58
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan7
ip vrf forwarding VPN_A
ip address 155.1.7.7 255.255.255.0
!
interface Vlan67
ip vrf forwarding VPN_A
ip address 155.1.67.7 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CISCO
!
interface Vlan79
ip address 155.1.79.7 255.255.255.0
shutdown
!
router ospf 1 vrf VPN_A
log-adjacency-changes
redistribute connected subnets route-map VL7CONNN->OSPF
network 150.1.7.7 0.0.0.0 area 1
network 155.1.67.7 0.0.0.0 area 1
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
route-map VL7CONN->OSPF permit 10
match interface Vlan7
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

------------------------------------------------------------------------------------------------
SW2:

enable
config t

Current configuration : 4324 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW2
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1440
authentication mac-move permit
ip subnet-zero
ip routing
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3819482240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3819482240
revocation-check none
rsakeypair TP-self-signed-3819482240
!
!
crypto pki certificate chain TP-self-signed-3819482240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383139 34383232 3430301E 170D3933 30333031 30303435
33375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313934
38323234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CA94 74434DD0 75D58511 498BADEA 0A45DC20 3F694F06 7E526FC7 6816BF03
B123D58B C0664B85 3466913F 57E14362 2A0D715F E6B8322A 799C4526 E1A68DCB
9E13D4B1 3FAA06F7 CADF26FB 2CD01B2D EBA8E469 BFACCA4E 1481CCAC 25031980
493F12FD A7C56CF4 1372AA34 BD058D42 64844DB4 D3829C4F 6587CBEC F58C3917
EB9F0203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535732 2E301F06 03551D23 04183016 80144BBF 74B7EF03
5E15F7A7 FC3498AB 4694EB2F 3FE3301D 0603551D 0E041604 144BBF74 B7EF035E
15F7A7FC 3498AB46 94EB2F3F E3300D06 092A8648 86F70D01 01040500 03818100
7ABB1A9A 8AAFB5B5 1D969E4E B8DE398D 93DCECED 22FF0BF0 FE4BF86A 18D418E3
9292616F 472C270C 67673622 EEDB6E5E 21C029EC 46F3160A 2AA1BF6A 22B52664
D7F9C235 609DB9BA ABAFC3B1 425D4BE8 16BC5EEF 3ED6BE93 0097AF6F 23800429
C6568D51 EDA2BFAA 0D7C4E96 8D5F91CF 1CCF696E B66252C3 68D16397 87CB705E
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.8.8 255.255.255.0
!
interface Port-channel1
no switchport
ip address 155.1.108.8 255.255.255.0
shutdown
!
interface FastEthernet0/1
!
interface FastEthernet0/2
switchport access vlan 22
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 43
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
no switchport
no ip address
shutdown
channel-group 1 mode on
!
interface FastEthernet0/20
no switchport
no ip address
shutdown
channel-group 1 mode on
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport access vlan 22
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan8
ip address 155.1.8.8 255.255.255.0
!
interface Vlan58
ip address 155.1.58.8 255.255.255.0
ip ospf authentication
ip ospf message-digest-key 1 md5 CISCO
!
router ospf 1
log-adjacency-changes
redistribute connected subnets route-map VL8CONN->OSPF
network 150.1.8.8 0.0.0.0 area 1
network 155.1.58.8 0.0.0.0 area 1
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
route-map VL8CONN->OSPF permit 10
match interface Vlan8
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

------------------------------------------------------------------------------------------------
SW3:

enable
config t

Current configuration : 3804 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW3
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817305984
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817305984
revocation-check none
rsakeypair TP-self-signed-3817305984
!
!
crypto pki certificate chain TP-self-signed-3817305984
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 33303539 3834301E 170D3933 30333031 30303435
33365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313733
30353938 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BFD2 3AB861BF AB19D9E7 DAEF9CCA 217EC34E 8FB8B790 2F3A4AA3 1C24983B
4047F4CB 643923A4 0C398FF3 F3C7BB9B 173BA28C E71DDE4C DD164EFE 38029524
712B0408 A0038479 7CACDF1A 324B6DB4 FFFF4E8A 62F24AFE EDF1FB9A DE96EC16
7F8A70D7 AA7C6A1E 31265008 40BBD4B6 537D0C02 F24E31EB 0AC38D5B D51B0D02
38170203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535733 2E301F06 03551D23 04183016 801435BE 72A60831
DD364141 50AB11F9 1D8127FE 09C1301D 0603551D 0E041604 1435BE72 A60831DD
36414150 AB11F91D 8127FE09 C1300D06 092A8648 86F70D01 01040500 03818100
132DCA88 EAC12D64 355CF32A 9815CC72 F137B8DD 3FE7703E BF8C7686 00D17D3B
A8EF6001 004E66AB 02452BEB 1CE60FBE 9B6B7E1A 703CA63C CE572A39 6BA6033F
58F19F8F 86C4CFC9 EE683BA8 2FF5F1BE AF526BDC 4D40FC95 175D910B 678E0A5D
83294087 95A7E1F0 50EF2E96 C577E5A0 53F67230 52F83DB1 A47BCD24 F5EFD575
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.9.9 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
switchport access vlan 5
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport access vlan 43
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan9
ip address 155.1.9.9 255.255.255.0
!
interface Vlan79
ip address 155.1.79.9 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

-----------------------------------------------------------------------------------------------
SW4:

enable
config t

Current configuration : 3800 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rack1SW4
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
no ip domain-lookup
!
!
!
!
crypto pki trustpoint TP-self-signed-3817290240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3817290240
revocation-check none
rsakeypair TP-self-signed-3817290240
!
!
crypto pki certificate chain TP-self-signed-3817290240
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383137 32393032 3430301E 170D3933 30333031 30303435
33365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38313732
39303234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BFF6 E26A206A 1BB0653B 6AFD01DC 6CB0C476 44A05081 1F2D2C24 D4D2B7B6
05F8EDCB 1B24822F 7FB2DA32 63D5BB0E 42A3B279 E390255D 49A82D9B 18CBF919
C29B9873 2A0AEE3B 23A6538F 9AEF5561 B24B17CF 4C82AC63 463EA3DC 7C041FD2
5DFE2EFC F268D364 E05079CA C20DD377 B3E08BD4 E4E3540E 6A7CAE54 BB285010
1FD70203 010001A3 64306230 0F060355 1D130101 FF040530 030101FF 300F0603
551D1104 08300682 04535734 2E301F06 03551D23 04183016 801436FD EAF3DFF0
CF4D3F67 32655B11 08EE5E9A 5825301D 0603551D 0E041604 1436FDEA F3DFF0CF
4D3F6732 655B1108 EE5E9A58 25300D06 092A8648 86F70D01 01040500 03818100
201D95D7 6D4A2F45 27D42AE8 4D68B11C F58143CC 37B76510 1CF1A4E3 805700DA
C2BCD024 3B14D943 8CB27C6A C79E8C6F 3406AB30 BF77616C CD4FC059 81457DA8
4BE48608 28DD7524 AA12226A 0C6CAF44 4F34CCD3 2996006D 8A35534C 034FAFDC
5BC4817E 69AB3C87 BD87D800 83DF8F49 5F7E9486 4EBF9E77 12E416F5 97D56C9D
quit
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface Loopback0
ip address 150.1.10.10 255.255.255.0
!
interface Port-channel1
no switchport
ip address 155.1.108.10 255.255.255.0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 146
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/17
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 155.1.10.10 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip sla enable reaction-alerts
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
speed 38400
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

-------------------------------------------------------------------------------------------------

I will post the solution once i get response from you guys. Thanks

IEOC Winner

2012-04-14T18:54:00.001+05:30

Contribution to INE community forum

2012-04-14T18:50:00.000+05:30

http://ieoc.com/members/dcancerian/default.aspx

CCIE R&S LAB Exam Preparation Strategy

2012-03-21T12:21:00.000+05:30

Assuming CCIE R&S Written exam has been passed. The lab exam preparation strategy is as follows

1. Watch ATC -----> VOL1 scenarios Require 2-3 Months and 3-4 hours per day

for example multicast Watch ATC for multicast and do all the vol1 scenarios for multicast and do not forget to check ieoc.ine.com and this blog for each vol1 scenarios

2. Repeat step 1 for all technology

3. VOL 2 lab1 for completing each vlo2 lab it requires 1 week it include steps 3,4,5

4. Watch ATC for a technology ---> VOl1 theory only for this technology ----> Cisco DoC, blog.ine.com, book for reference-----> VOl1 labs for this technology

for example vol2 lab1 task 1.1 has private vlans, first watch ATC with vol1 theory of it, read ine blog and Cisco DoC for it then do all the vol1 scenarios for this technology. Also do not forget to check ieoc.ine.com for each vol2 and vol1 lab tasks.

5. Revise vol2 labs after completing it. for example you finish vol2 lab 1 in 1st week from mon to sat then revise this lab on sunday. Each sunday you can also do one VOL 3 lab.

6. Repeat 3, 4 and 5 for all vol2 labs.

7. After completing 10 vol2 labs go for a ine MOCK lab for assessment. Give atleat one week for it and identified your weak areas.

8. For each weak Area technolgy do this: ATC-->Vol1 theory-->INE blog--->Cisco DoC--->Vol1 scenarios--->ieoc.ine.com

9. Follow same procedure in steps 3,4,5,6,7,8 for vol2 remaning labs 11 - 20

10. Once you completed all vol2 labs go for couple of more ine MOCK labs.

11. Repeat the vol2 labs but this time complete one vol2 lab along with one VOL 4 lab in a day. It may take 8-10 hours a day.

So this require a total time of 11-12 months for preperation

step 1 and 2 === 3 months

step 3 to 8 ==== 3 months

step 9 ======== 3 months

step 10 ======= 1 month

step 11======== 1 month

---------REVISIT THIS BLOG FROM TIME TO TIME FOR THE CCIE LAB TECHNICAL------------ -QUESTIONS WHICH ARE UNANSWERED-------------------------

Thanks,

DHCP host pool

2012-03-02T10:39:00.000+05:30

Q: When should we use "hardware-address <mac-address>" , instead of "client-identifier <>" ?

A: By default Cisco router if configured as DHCP server will serve both BOOTP and DHCP requests. Client-identifier is used for DHCP request and hardware-address is used for BOOTP request. You can also disable to reply for BOOTP request via "ip dhcp bootp ignore" in this case "hardware-address" has no use.

Cisco routers by default is configured to send DHCP request so they have client identifier field, but if some devices send BOOTP request then DHCP should be configured with hardware-address. Windows send DHCP request by default, Linux machine sends BOOTP request by default (we can change this behavior as well). So its depends on which device is sending which request and accordingly DHCP serves them.

OSPF Basics

2012-02-17T06:52:00.001+05:30

Lets take a very basic question on OSPF which requires an explanation

Q: OSPF being a link state routing protocol prepares Link State Database. I would like to understand, if OSPF advertises and redistributes routes from its Link State Database table or from its Routing Table.

A: Within the ospf flooding domain or an area ospf process exchanges LSA's (LSA type1, LSA type 2) and based on that all the ospf running routers maintain the same copy of the LSDB. Now it is upto the individual router which runs independent spf calculation for selecting the best route to reach a perticular destination.

But when ospf process needs to send an LSA (type 3,4) outside its own area it behaves like a distance vector becuase the other area routers when receives a summary LSA (type3,4) they believe on the ABR which sends those LSA into the area so these routers just need to run spf to determine cost to reach to the ABR that means these routers adds up the cost (what ABR is advertising plus cost to reach to the ABR) to reach to the routes in the other area. So technically its wrong to say aospf is advetising routes because ospf just exchanges LSAs i.e within area type 1 and 2 while from other area type 3 and 4.

Now if you are considering redistribution of ospf process into some other IGP(RIP,EIGRP etc or other OSPF process), the redistribution will always performs from the ospf routing table i.e "show ip route ospf". In this by default "show ip route ospf" routes and "show ip ospf interface br" routes will be redistributed from ospf process to other IGP and these ospf routes will end up in the database of other IGP on the device on which redistribution is performed. The other IGP domain will then select the best path based on its best path selection procedures.

Side Notes

2012-02-16T23:54:00.001+05:30

1. Understanding the command: spaning-tree vlan 68 root primary diameter 3 hello-time 1

Based just on diameter value, Cisco IOS may calculate all other timer values suitable for the particular STP topology. The idea is that all timers essentially depend on few fixed parameters (e.g. hello timer) and the network diameter. The command itself is a macro, which is expanded into a number of additional commands. If you want to read more on the relations between STP timers and network diameter check out the following link:
http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a0080094954.shtml

2. There exist a command "set ip next-hop peer-address" which could be applied under a route-map. This command does the same as next-hop-self, BUT it allows you to do so on per-prefix basis. For example:

---
ip prefix-list TEST permit 150.1.1.0/24
!
route-map NEXT_HOP
match ip address prefix-list TEST
set ip next-hop peer-address
!
router bgp 100
neighbor 155.1.22 remote-as 100
...
neighbor 155.1.2.2 route-map NEXT_HOP out
---

You can also use the command "set ip next-hop 150.1.1.1" (explicit next-hop) in a route-map to change the next-hop to self. All three alternative are viable, just use the one that suits you better.

OSPF over PPPoFR

2012-02-12T01:19:00.000+05:30

PPPoFR is configured by creating a virtual-template first and then bind that template with the frame-relay interface-dlci ppp virtual-template. It does not require dynamic or static mapping since the connection is now considered as point to point. All the logical options like authentication, multilink are configured here under virtual template but not backup command.
What if we bind the virtual-template with multiple interface-dlci ? such as

interface virtual-template 1
ip address 10.0.0.5 255.255.255.0

interface S0/0/0
frame-relay interface-dlci 501 ppp virtual-template 1
frame-relay interface-dlci 502 ppp virtual-template 1

Virtual-template is just a template which create a virtual-access interface if it bind to any dlci. Here virtual template is bind to two dlci therefore it will create two different virtual access say virtual-access2 and virtual-access3. Now these are the interfaces on which dynamic protocols learns the routing updates.
Lets consider a HuB R5 and two Spokes R1 and R2 are connected via frame relay cloud.

R5#sh run int s0/0
interface Serial0/0
no ip address
encapsulation frame-relay
frame-relay interface-dlci 501 ppp Virtual-Template1
frame-relay interface-dlci 502 ppp Virtual-Template1
frame-relay lmi-type ansi
end
R5#sh run int virtual-template 1
interface Virtual-Template1
ip address 10.0.0.5 255.255.255.0
end

R5#sh ip int br

Interface IP-Address OK? Method Status Protocol

Serial0/0 unassigned YES unset up up

Virtual-Access1 unassigned YES unset down down

Virtual-Template1 10.0.0.5 YES manual down down

Virtual-Access2 10.0.0.5 YES TFTP up up

Virtual-Access3 10.0.0.5 YES TFTP up up

R5#sh int virtual-access 2

Virtual-Access2 is up, line protocol is up

Hardware is Virtual Access interface

Internet address is 10.0.0.5/24

MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, LCP Open

Open: IPCP

PPPoFR vaccess, cloned from Virtual-Template1

Vaccess status 0x44

Bound to Serial0/0 DLCI 501, Cloned from Virtual-Template1, loopback not set

Keepalive set (10 sec)

DTR is pulsed for 5 seconds on reset

< skip >

R5#sh int virtual-access 3

Virtual-Access3 is up, line protocol is up

Hardware is Virtual Access interface

Internet address is 10.0.0.5/24

MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, LCP Open

Open: IPCP

PPPoFR vaccess, cloned from Virtual-Template1

Vaccess status 0x44

Bound to Serial0/0 DLCI 502, Cloned from Virtual-Template1, loopback not set

Keepalive set (10 sec)

DTR is pulsed for 5 seconds on reset

< skip >

Configuration at both R1 and R2 are similar here are the configuration at R1

R1#sh run int s0/0

interface Serial0/0

no ip address

encapsulation frame-relay

frame-relay interface-dlci 105 ppp Virtual-Template1

end

R1#sh run int virtual-template 1

interface Virtual-Template1

ip address 10.0.0.1 255.255.255.0

end

R1#sh ip int br

Interface IP-Address OK? Method Status Protocol

Serial0/0 unassigned YES unset up up

Virtual-Access1 unassigned YES unset down down

Virtual-Template1 10.0.0.1 YES manual down down

Virtual-Access2 10.0.0.1 YES TFTP up up

R1#sh int virtual-access 2

Virtual-Access2 is up, line protocol is up

Hardware is Virtual Access interface

Internet address is 10.0.0.1/24

MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, LCP Open

Open: IPCP

PPPoFR vaccess, cloned from Virtual-Template1

Vaccess status 0x44

Bound to Serial0/0 DLCI 105, Cloned from Virtual-Template1, loopback not set

Keepalive set (10 sec)

DTR is pulsed for 5 seconds on reset

< skip >

At R5

R5#sh ip route 10.0.0.1

Routing entry for 10.0.0.1/32

Known via "connected", distance 0, metric 0 (connected, via interface)

Routing Descriptor Blocks:

* directly connected, via Virtual-Access2

Route metric is 0, traffic share count is 1

R5#sh ip route 10.0.0.2

Routing entry for 10.0.0.2/32

Known via "connected", distance 0, metric 0 (connected, via interface)

Routing Descriptor Blocks:

* directly connected, via Virtual-Access3

Route metric is 0, traffic share count is 1

The spokes ip addresses are learned on virtual-access 2 and virtual-access 3, meaning that if R5 tries to ping R1 or R2 it will use respective dlci to forward packets.

Lets run OSPF on R5, R1 and R2 and advertise their loopback interfaces into ospf say Area 0.

R5#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

10.0.0.2 0 FULL/ - 00:00:34 10.0.0.2 Virtual-Access3

10.0.0.1 0 FULL/ - 00:00:36 10.0.0.1 Virtual-Access2

Notice that these neighbors are learned on virtual-access2 and virtual-access3.

Lets look into the ospf routing table

R5#sh ip route ospf

2.0.0.0/32 is subnetted, 1 subnets

O 2.2.2.2 [110/2] via 10.0.0.2, 00:00:18, Virtual-Access3

R1#sh ip route ospf

2.0.0.0/32 is subnetted, 1 subnets

O 2.2.2.2 [110/3] via 10.0.0.5, 00:00:36, Virtual-Access2

5.0.0.0/32 is subnetted, 1 subnets

O 5.5.5.5 [110/2] via 10.0.0.5, 00:00:36, Virtual-Access2

R2#sh ip route ospf

1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/3] via 10.0.0.5, 00:01:15, Virtual-Access2

5.0.0.0/32 is subnetted, 1 subnets

O 5.5.5.5 [110/2] via 10.0.0.5, 00:01:15, Virtual-Access2

We have just R2's loopback in the R5's routing table learned on virtual-access3 but does not have R1's loopback. This is happening because ospf here network type is point to point but there are two virtual interfaces virtual-access2 and virtual-access3 on which these routes are learned so ospf process will accept the route only from one (which has the higher ifindex number).

Lets change the ospf network type to point-to-multipoint. Remember that this option of ip ospf network type point-to-multipoint will come under virtual-template. Now routing table at R5 looks likes this

R5#sh ip route ospf

1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/2] via 10.0.0.1, 00:01:51, Virtual-Access3

2.0.0.0/32 is subnetted, 1 subnets

O 2.2.2.2 [110/2] via 10.0.0.2, 00:01:31, Virtual-Access3

Now we have both the routes but both are learned on same virtual-access3 therefore traffic towards both routes will go to through the same dlci. So traffic send towards one will successful but drops for the other. Notice that vitual-access 3 is associated with dlci 502 so traffic for R2's loopback will get succeed.

R5#ping 1.1.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

R5#ping 2.2.2.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/30/92 ms

So there is a very big issue here. How this can be resolved? There are two ways to solve this

1. Use ip unnumbered for virtual template
2. Use multilink
3. Obtain IP address from the other source like IPCP or DHCP

These will also help in self pinging on the frame relay main interface which is not possible in normal cases.

This post has happened to be very long so rest part will be posted in my next post.

On Demand Routing (ODR)

2012-01-28T02:35:00.001+05:30

ODR requires cdp to be enabled on connected interface between hub and spokes. the hub need to have "router odr" command that's all we require to configure odr. Hub router will send a default route to all spokes while spokes will send their connected prefixes to Hub.

We need to enable cdp on virtual-template if PPPoFR is running, in this case it does matter whether cdp is enabled on physical interface or not. But if cdp is enable on both physical interface and virtual template, the hub will have two routes installed for same destination one via virtual -access and other via physical interface. Though this does not make any difference whether two routes are install or just one because ultimately even virtual-access is also using physical interface for packet forwarding. And obviously spokes will have a default route advertise by hub.

Redistribution example

2012-01-28T00:33:00.000+05:30

Lets take up a scenario based question on redistribution

R1 running both EIGRP and OSPF. EIGRP to R2 and OSPF to R3
R1 s0/0 to R2 s0/0 and R1 S0/1 to R3 S0/1

R1 has 2 LAN interface F0/0 and F0/1

R1 Redistributes these LAN interfaces into EIGRP.

R1 then mutually redistributes EIGRP and OSPF

Question: Why isn't R3 seeing the LAN interfaces of R1? Since they were redistributed on EIGRP and then EIGRP was redistributed into OSPF....wouldn't R3 see them?

Answer: When you redistribute 2 LAN connected interfaces into EIGRP on R1, these two interfaces will land up in the eigrp topology database i.e show ip eigrp topology" but not on the eigrp routing table i.e "show ip route eigrp" because R1 does a comparision of administrative distance(AD) between same routes(2 LAN interfaces) learned via connected (AD = 0) and EIGRP (AD = 170) clearly connected wins and hence appear in the routing table. Now since Eigrp has these routes in its database so it passes them to R2, R2 is learning these routes only via EIGRP so R2 need not to perform any comparision and hence install in its routing table.

Remember even after the above redistribution:

"Show ip route eigrp will have nothing while "show ip eigrp int" will have only connected link i.e s0/0

When mutual redistribution takes place between EIGRP and OSPF on R1 (Redistribution always takes place from the routing table)

When EIGRP redistribute into OSPF it does this

1. R1's OSPF databese "show ip ospf database" will have "Show ip route eigrp" and "show ip eigrp int" route so the only route land up in R1's database is prefix of S0/0 "show ip ospf database.

2. R1 passes this route (prefix of R1's S0/0) to R3 and R3 learned these routes only via ospf so R3 installs them in its routing table

When OSPF redistribute into EIGRP it does this

1. R1's EIGRP databese "show ip eigrp topology" will have "Show ip route eigrp" and "show ip eigrp int" routes so the only route land up in R1's EIGRP database is prefix of S0/1 "show ip eigrp topology".

2. R1 passes this route (prefix of R1's S0/1) to R2 and R2 learned these routes only via eigrp so R3 installs them in its routing table

Therefore ultimately R3 can not have connected routes in its routing table, in order to do so we have to redistribute these connected interfaces into eigrp.

Redistribution between OSPF processes

2012-01-27T03:28:00.000+05:30

Lets take a corner case where three OSPF processes running on a router are getting redistributed.

First a side note: A router running multiple ospf processes and learning a same from all of them, in that case router will install that route in the routing table associated with the ospf process which has least process I'd number.

R1 is directly connected with R2, R3 and R4. Loopback 0 is configured on all routers as 1.1.1.1, 2.2.2.2 , 3.3.3.3 and 4.4.4.4 respectively.

Link between R1 and R2, and R2's loopback are running ospf process 1 in area 0

Link between R1 and R3, and R3's loopback are running ospf process 2 in area 0

Link between R1 and R4, and R4's loopback are running ospf process 3 in area 0

The rule of redistribution says redistribution should happen only from the routing table. When redistribution between process 1 and process 3 takes place

1. R1 puts 2.2.2.2 from its "show ip route ospf 1" to R1's "show ip ospf 3 database" consecutively in R4's "show ip route ospf 3"

2. R1 puts 4.4.4.4 from its "show ip route ospf 3" to R1's "show ip ospf 1 database" consecutively in R2's "show ip route ospf 1"

After this redistribution R1's "show ip route ospf 1" still have same prefix i.e 2.2.2.2 (there is no change). Now if we redistribute between process 1 and process 2

1. R1 puts 2.2.2.2 from its "show ip route ospf 1" to R1's "show ip ospf 2 database" consecutively in R3's "show ip route ospf 2"

2. R1 puts 3.3.3.3 from its "show ip route ospf 2" to R1's "show ip ospf 1 database" consecutively in R2's "show ip route ospf 1"

After these two redistribution R3's "show ip route ospf 2" can not have R4's 4.4.4.4 and vice versa. Therefore we must redistribute between process 2 and process 3 in order to achieve the same.

The challege comes when we have two routers running 2 different ospf processes and redistribution is performed on both between these two processes.

In this case internal prefixes of any process say process 1 will become external to process 2, now these routers have to decide which route they should choose, if it were from same process it was easy for router to choose internal routes over external but here comparision is between internal prefixes of one process and external prefixes for another. Administrative Distance will also not help because its same for both. Here there is no way for the routers to determine which routes to take sometimes they prefer internal route from process 1 and sometimes externel from process 2 basically whichever router install last in the routing table but its not stable so condition is undetermined.

Protected ports

2012-01-25T20:58:00.001+05:30

The basic security feature available in a switch.

The protected ports are used for isolating ports within same vlan and this work within a single switch.

For example if a switch has 3 ports i.e fa0/0, fa0/1 and fa1/1, all in a same vlan 100. If "switchport protected" command is configured in fa0/0 and fa0/1 that means host on f0/0 and host on f0/1 can not send frames to each other while both hosts on fa0/0 and fa0/1 can still send and receive frames to or from host on fa1/1.

Configuration on switch ports fa0/0 and fa0/1

#interface range fa0/0 , fa0/1

#switchport access vlan 100

#switchport protected

Configuration on switch port fa1/1

#interface fa1/1
#switchport access vlan 100

Cisco IOS caveat

2012-01-25T13:32:00.000+05:30

Cisco IOS Software, C2600 Software (C2600-ADVENTERPRISEK9-M), Version 12.4(10), RELEASE SOFTWARE (fc1)

If this IOS is being used, it can behave a bit differently than others for the below case

RIPv2 is running with "passive-interface default" command on R2, now if you create a tunnel interface then this tunnel interface will not fall under passive-interface default. For example

R2#sh ver | in IOS
Cisco IOS Software, C2600 Software (C2600-ADVENTERPRISEK9-M), Version 12.4(10), RELEASE SOFTWARE (fc1)

R2#sh run | se router rip
router rip
version 2
passive-interface default
no passive-interface FastEthernet0/0
network 204.12.3.0
no auto-summary
R2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#int tunnel 1
R2(config-if)#ip add 1.1.1.1 255.255.255.0
R2(config)#end
R2#
Jan 24 23:58:06.524: %SYS-5-CONFIG_I: Configured from console by console
R2#sh run | se router rip
router rip
version 2
passive-interface default
no passive-interface FastEthernet0/0
no passive-interface Tunnel1
network 204.12.3.0
no auto-summary
R2#

Side note:
The same IOS does not support "show ipv6 ospf interface brief" while it does support "show ipv6 ospf interface"

Cisco IOS features

2012-01-23T18:43:00.001+05:30

Cisco IOS asks file names or destinations address again if you have already supplied then before.
Example

Router#copy running-config tftp://192.168.1.1/file
Source filename [running-config]?
Address or name of remote host [192.168.1.1]?
Destination filename [file]?
!!
1124 bytes copied in 0.226 secs (4976 bytes/sec)

This can be disabled by the "file prompt quiet" configuration command.

fw#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#file prompt quiet
Router(config)#end
Router#copy running-config tftp://192.168.1.1/file
!!
1124 bytes copied in 0.226 secs (4976 bytes/sec)

Basic OSPF packets

2012-01-22T20:40:00.000+05:30

Lets consider this

R1(fa0/0)------R2(fa0/0)

when OSPF protocol is configured only on R1 via "router ospf" it joins multicast groups 224.0.0.5 and 224.0.0.6 check via

R1#sh ip int f0/0 | in Multicast

Multicast reserved groups joined: 224.0.0.5 224.0.0.6

Now if other router R2 on this link is not running OSPF it will not join these multicast groups check on R2

R2#sh ip int f0/0 | in Multicast

R2#

So when R1 sends OSPF packets to R2 at multicast destination address of 224.0.0.5 with ip protocol ip 89 check on R2 via

R1#debug ip packets details

*Mar 1 00:17:45.907: IP: s=10.0.0.1 (local), d=224.0.0.5 (FastEthernet0/0), len 76, sending broad/multicast, proto=89

Since R2 does not have layer 2 multicast address corresponding to Layer 3 multicast address 224.0.0.5 because R2 has not joined this group (OSPF is not enabled ). Therefore when these packets arrived on R2's layer 2. It will discard all these packets at this layer. Hence no packets will be shown at layer 3 via

R2#debug ip packets details

R2#

Conclusion: OSPF packets will not be received at R2's network layer 3 because they were already being discarded at R2's layer 2.