ccie sp tshoot lab

8/10/2019 Ccie Sp Tshoot Lab

1/49

Look deep , think and solve

CCIE SP Troubleshooting

Practice Lab

Mohammad KhalilCCIE #35484 (R&S,SP)


2/49

1

About the Author

This practice lab was prepared by Mohammad KhalilMohammad holds double CCIE in Routing and switching and in Service ProviderHe holds BSc in Telecommunications engineering and has more than 8 yearsexperience in networks fieldMohammad has worked for 4 main Internet Service Providers across the MENAregionMoreover , he worked as an instructor for CCNP at multiple Cisco partners trainingcenters in Jordan

Lab goal

The goal of this lab document for sure it to troubleshoot and find the errors injected , butthe main focus of this lab is that error places are not highlighted , the main focus is theunderstanding of technologies and implementations within the CCIE service providertrack

As well , after solving the faults the lab itself will give you a good example on the variousrouting protocols used and demonstrates the MPLS VPN connections in place

Lab highlights

Diagram 2 shows the routing protocols used within the network and between Ps , PEsand CEs in addition to the Cs as well , below are the highlights that will guide youthrough this practice lab

AToM has been configured in order to achive connectivity between R12 and R13via both IPv4 and IPv6

MPLS L3VPNs have been configured to achive connectivity between CEslocated in AS 100 (R8,R9) and CEs located in AS 200 (R10,R11) via both IPv4and IPv6 , the routing protocols configured as denoted in Diagram #2

Carrier supporting Carrier has been implemented in order to achieve connectivitybetween Cs located in AS 300 (R14,R15,R16 and R17) via IPv4

Only R15 and R16 needs to communicate via IPv6 as well

MPLS TE has been configured in AS 100 in order to force communicationbetween R1 and R18 loopback 2 networks via the explicit path calledINTER_AREA

R1 is the RR for IPv4 , VPNv4 R2 is the RR for IPv4 , IPv6 , VPNv6 R3 is the RR for IPv4 , IPv6 , VPNv4 , VPNv6 Loopback 1 networks on R4 , R5 , R6 and R7 is treated as CEs and should be

included in testing communications


3/49

2

Network Diagrams

R1R4

R5R2

R3

R6

R7

R1

R11

R8

R9

R12 R16

R1713

R14

R15

R18

Diagram 1


4/49

3

R1R4

R5 R2

R3

R6

R7

R1

R11

R8

R9

R12

R16

R17

R13

R14

R15

R18

NamedEIGRP

AS 123

NamedEIGRP

AS 123

O2 A0O3 A0

O2 A0O3 A0

i4 A49.0001i6 A49.0001

i4 A49.0001i6 A49.0001

i4 A49.0001i6 A49.0001

BGP (4,6)

BGP (4,6)

O2 A0O3 A0

O2 A0O3 A0

RIPv2O3 (PID 159)

O2 A0RIPng

RIPv2O3 (PID 106)RIPv2

RIPv2

EIGRPAS300

i4 A49.1117

O2 A1O3 A1

O2 A1O3 A1

BGP (4,6)

BGP 4

AS1 AS2R1 R2 R4 R5 R18 R3 R6 R7

Diagram 2


5/49

4

Physical Connections

Router Hostname Interface Router Hostname InterfaceR1 Pos1/0 R3 Pos1/0

FastEthernet2/0 R2 FastEthernet 2/0FastEthernet2/1 R4 FastEthernet 1/0FastEthernet3/0 R5 FastEthernet 1/0

R2 Pos1/0 R3 Pos2/0FastEthernet 2/0 R1 FastEthernet 2/0FastEthernet 2/1 R5 FastEthernet 1/1

R3 Pos1/0 R1 Pos1/0Pos2/0 R2 Pos1/0FastEthernet 3/0 R6 FastEthernet 1/0

FastEthernet 3/1 R7 FastEthernet 1/0R4 FastEthernet 1/0 R1 FastEthernet 2/1

FastEthernet 1/1 R5 FastEthernet 2/0FastEthernet 2/0 R18 FastEthernet 1/0FastEthernet 2/1 R8 FastEthernet 1/0S3/0 R14 S1/0

R5 FastEthernet 1/0 R1 FastEthernet 3/0FastEthernet 1/1 R2 FastEthernet 2/1FastEthernet 2/0 R4 FastEthernet 1/1FastEthernet 2/1 R18 FastEthernet 1/1FastEthernet 3/0 R9 FastEthernet 1/0

S4/0 R13 S1/0R6 FastEthernet 1/0 R3 FastEthernet 3/0

FastEthernet 1/1 R7 FastEthernet 1/1FastEthernet 2/0 R10 FastEthernet 1/0S3/0 R12 S1/0

R7 FastEthernet 1/0 R3 FastEthernet 3/1FastEthernet 1/1 R6 FastEthernet 1/1FastEthernet 2/0 R11 FastEthernet 1/0


R9 FastEthernet 1/0 R5 FastEthernet 3/0FastEthernet 1/1 R15 FastEthernet 1/0FastEthernet 2/0 R8 FastEthernet 2/0FastEthernet 2/1 R14 FastEthernet 1/1


R11 FastEthernet 1/0 R7 FastEthernet 2/0


6/49

5

FastEthernet 1/1 R10 FastEthernet 1/1FastEthernet 2/0 R10 FastEthernet 2/0

R12 S1/0 R6 S3/0R13 S1/0 R5 S4/0R14 FastEthernet 1/0 R8 FastEthernet 1/1

FastEthernet 1/1 R9 FastEthernet 2/1R15 FastEthernet 1/0 R9 FastEthernet 1/1R16 FastEthernet 1/0 R10 FastEthernet 2/0R17 FastEthernet 1/0 R11 FastEthernet 2/0R18 FastEthernet 1/0 R4 FastEthernet 2/0

FastEthernet 1/1 R5 FastEthernet 2/1


7/49

6

Net File

autostart = False[127.0.0.1:7200]workingdir = /tmpudp = 10001[[7200]]

image = INE/c7200-adventerprisek9-mz.152-4.S2.binidlepc = 0x60a5b940ghostios = True

[[ROUTER R4]]console = 2004slot1 = PA-2FE-TXf1/0 = R1 f2/1f1/1 = R5 f2/0slot2 = PA-2FE-TXf2/0 = R18 f1/0f2/1 = R8 f1/0x = -243.0y = -62.0

[[ROUTER R5]]console = 2005slot1 = PA-2FE-TXf1/0 = R1 f3/0f1/1 = R2 f2/1

slot2 = PA-2FE-TXf2/0 = R4 f1/1f2/1 = R18 f1/1slot3 = PA-2FE-TXf3/0 = R9 f1/0slot4 = PA-8Ts4/0 = R13 s1/0x = -232.0y = 40.0

[[ROUTER R6]]console = 2006slot1 = PA-2FE-TXf1/0 = R3 f3/0f1/1 = R7 f1/1slot2 = PA-2FE-TXf2/0 = R10 f1/0slot3 = PA-8Ts3/0 = R12 s1/0x = 87.0y = -69.0


8/49

7

[[ROUTER R7]]console = 2007

slot1 = PA-2FE-TXf1/0 = R3 f3/1f1/1 = R6 f1/1slot2 = PA-2FE-TXf2/0 = R11 f1/0x = 85.0y = 38.0

[[ROUTER R12]]console = 2012slot1 = PA-8Ts1/0 = R6 s3/0x = 43.0y = -128.0

[[ROUTER R1]]console = 2001slot1 = PA-POS-OC3p1/0 = R3 p1/0slot2 = PA-2FE-TXf2/0 = R2 f2/0f2/1 = R4 f1/0slot3 = PA-2FE-TXf3/0 = R5 f1/0x = -132.0

y = -63.0[[ROUTER R2]]console = 2002slot1 = PA-POS-OC3p1/0 = R3 p2/0slot2 = PA-2FE-TXf2/0 = R1 f2/0f2/1 = R5 f1/1x = -127.0y = 27.5857864376

[[ROUTER R3]]console = 2003slot1 = PA-POS-OC3p1/0 = R1 p1/0slot2 = PA-POS-OC3p2/0 = R2 p1/0slot3 = PA-2FE-TXf3/0 = R6 f1/0f3/1 = R7 f1/0x = -14.0


9/49

8

y = -24.0[[ROUTER R11]]

console = 2011slot1 = PA-2FE-TXf1/0 = R7 f2/0f1/1 = R10 f1/1slot2 = PA-2FE-TXf2/0 = R17 f1/0x = 187.0y = 109.585786438

[[ROUTER R8]]console = 2008slot1 = PA-2FE-TXf1/0 = R4 f2/1f1/1 = R14 f1/0slot2 = PA-2FE-TXf2/0 = R9 f2/0x = -285.0y = -119.0

[[ROUTER R9]]console = 2009slot1 = PA-2FE-TXf1/0 = R5 f3/0f1/1 = R15 f1/0slot2 = PA-2FE-TX

f2/0 = R8 f2/0f2/1 = R14 f1/1x = -296.0y = 107.0

[[ROUTER R10]]console = 2010slot1 = PA-2FE-TXf1/0 = R6 f2/0f1/1 = R11 f1/1slot2 = PA-2FE-TXf2/0 = R16 f1/0x = 164.0y = -110.0

[[ROUTER R15]]console = 2015slot1 = PA-2FE-TXf1/0 = R9 f1/1x = -224.0y = 149.0

[[ROUTER R14]]


10/49

9

console = 2014slot1 = PA-2FE-TX

f1/0 = R8 f1/1f1/1 = R9 f2/1x = -381.220346111y = -212.74011537

[[ROUTER R13]]console = 2013slot1 = PA-8Ts1/0 = R5 s4/0x = -158.0y = 108.0

[127.0.0.1:7201]workingdir = /tmpudp = 10101[[7200]]

image = INE/c7200-adventerprisek9-mz.152-4.S2.binidlepc = 0x60a5b940ghostios = True

[[ROUTER R18]]console = 2018slot1 = PA-2FE-TXf1/0 = R4 f2/0f1/1 = R5 f2/1x = -453.021428025

y = -17.7573593129[[ROUTER R17]]console = 2017slot1 = PA-2FE-TXf1/0 = R11 f2/0x = 278.126983722y = 149.119841047

[[ROUTER R16]]console = 2016slot1 = PA-2FE-TXf1/0 = R10 f2/0x = 263.984848098y = -203.019335984

[GNS3-DATA]m11 = 0.707106781187m22 = 0.707106781187


11/49

10

Initial Configuration Files

R1hostname R1

no logging console

ip cefipv6 unicast-routingipv6 cef

mpls label protocol ldpmpls traffic-eng tunnels

interface Loopback0ip address 1.1.1.1 255.255.255.255ipv6 address 2001::1/128ipv6 ospf 1 area 0

interface Loopback2ip address 1.18.1.1 255.255.255.255

interface Tunnel181ip unnumbered Loopback0tunnel mode mpls traffic-engtunnel destination 18.18.18.18tunnel mpls traffic-eng autoroute destinationtunnel mpls traffic-eng path-option 1 explicit name INTER_AREA

interface POS1/0ip address 192.168.13.1 255.255.255.0encapsulation pppmpls bgp forwardingno shut

interface FastEthernet2/0

ip address 192.168.12.1 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:12::1/64mpls ipmpls traffic-eng tunnelsipv6 ospf 1 area 0


12/49

11

ip rsvp bandwidthno shut

interface FastEthernet2/1ip address 192.168.14.1 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:14::1/64mpls ipmpls traffic-eng tunnelsipv6 ospf 1 area 0ip rsvp bandwidthno shut

interface FastEthernet3/0ip address 192.168.15.1 255.255.255.0ip ospf authentication message-digestip ospf message-digest-key 1 md5 ciscoip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:15::1/64mpls ipmpls traffic-eng tunnels

ipv6 ospf 1 area 0ip rsvp bandwidthno shut

router ospf 1router-id 1.1.1.1redistribute bgp 100 subnets route-map R6LOOP_MAPnetwork 1.1.1.1 0.0.0.0 area 0network 192.168.12.1 0.0.0.0 area 0network 192.168.14.1 0.0.0.0 area 0network 192.168.15.1 0.0.0.0 area 0mpls traffic-eng router-id Loopback0mpls traffic-eng area 0

router bgp 100bgp log-neighbor-changesno bgp default ipv4-unicastno bgp default route-target filterneighbor 2.2.2.2 remote-as 100neighbor 2.2.2.2 password cisc0


13/49

12

neighbor 2.2.2.2 update-source Loopback0neighbor 4.4.4.4 remote-as 100

neighbor 4.4.4.4 update-source Loopback0neighbor 5.5.5.5 remote-as 100neighbor 5.5.5.5 update-source Loopback0neighbor 18.18.18.18 remote-as 100neighbor 18.18.18.18 update-source Loopback0neighbor 2001::2 remote-as 100neighbor 2001::2 update-source Loopback0neighbor 192.168.13.3 remote-as 200

address-family ipv4network 1.1.1.1 mask 255.255.255.255neighbor 2.2.2.2 activateneighbor 2.2.2.2 route-reflector-clientneighbor 2.2.2.2 next-hop-selfneighbor 4.4.4.4 activateneighbor 4.4.4.4 route-reflector-clientneighbor 4.4.4.4 next-hop-selfneighbor 5.5.5.5 activateneighbor 5.5.5.5 route-reflector-clientneighbor 5.5.5.5 next-hop-selfneighbor 18.18.18.18 activateneighbor 18.18.18.18 route-reflector-clientneighbor 18.18.18.18 next-hop-self

neighbor 192.168.13.3 activateneighbor 192.168.13.3 send-labelexit-address-family

address-family vpnv4neighbor 2.2.2.2 activateneighbor 2.2.2.2 send-community bothneighbor 2.2.2.2 route-reflector-clientneighbor 2.2.2.2 next-hop-selfneighbor 4.4.4.4 activateneighbor 4.4.4.4 send-community bothneighbor 4.4.4.4 route-reflector-clientneighbor 5.5.5.5 activateneighbor 5.5.5.5 send-community bothneighbor 5.5.5.5 next-hop-selfneighbor 18.18.18.18 activateneighbor 18.18.18.18 send-community bothneighbor 18.18.18.18 route-reflector-clientneighbor 18.18.18.18 next-hop-selfneighbor 192.168.13.3 activate


14/49

13

neighbor 192.168.13.3 send-community bothexit-address-family

address-family ipv6network 2001::1/128neighbor 2001::2 activate

exit-address-family

ip route 1.18.1.18 255.255.255.255 Tunnel181

ip explicit-path name INTER_AREA enablenext-address loose 5.5.5.5

ip prefix-list R6LOOP seq 5 permit 6.6.6.6/32ipv6 router ospf 1router-id 1.1.1.1

route-map R6LOOP_MAP permit 10match ip address prefix-list R6LOOP

mpls ldp router-id Loopback0 force

R2hostname R2

no logging console


mpls label protocol ldp


interface POS1/0ip address 192.168.23.2 255.255.255.0encapsulation pppipv6 address 2001:192:23::2/64mpls bgp forwardingno shut


15/49

14

interface FastEthernet2/0ip address 192.168.12.2 255.255.255.0

ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:12::2/64mpls ipmpls traffic-eng tunnelsipv6 ospf 1 area 0ip rsvp bandwidthno shut


router ospf 1

router-id 2.2.2.2network 2.2.2.2 0.0.0.0 area 0network 192.168.12.2 0.0.0.0 area 0network 192.168.25.2 0.0.0.0 area 0mpls traffic-eng router-id Loopback0mpls traffic-eng area 0

router bgp 100bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 1.1.1.1 remote-as 100neighbor 1.1.1.1 password cisconeighbor 1.1.1.1 update-source Loopback0neighbor 4.4.4.4 remote-as 100neighbor 4.4.4.4 update-source Loopback0neighbor 5.5.5.5 remote-as 100neighbor 5.5.5.5 update-source Loopback0neighbor 18.18.18.18 remote-as 100neighbor 18.18.18.18 update-source Loopback0neighbor 2001::1 remote-as 100


16/49

15

neighbor 2001::1 update-source Loopback0neighbor 2001::4 remote-as 100

neighbor 2001::4 update-source Loopback0neighbor 2001::5 remote-as 100neighbor 2001::5 update-source Loopback0neighbor 2001::18 remote-as 100neighbor 2001::18 update-source Loopback0neighbor 2001:192:23::3 remote-as 200neighbor 192.168.23.3 remote-as 200

address-family ipv4network 2.2.2.2 mask 255.255.255.255neighbor 1.1.1.1 activateneighbor 1.1.1.1 route-reflector-clientneighbor 1.1.1.1 next-hop-selfneighbor 4.4.4.4 activateneighbor 4.4.4.4 route-reflector-clientneighbor 4.4.4.4 next-hop-selfneighbor 5.5.5.5 activateneighbor 5.5.5.5 route-reflector-clientneighbor 5.5.5.5 next-hop-selfneighbor 18.18.18.18 activateneighbor 18.18.18.18 route-reflector-clientneighbor 18.18.18.18 next-hop-selfneighbor 192.168.23.3 activate

exit-address-family

address-family vpnv4neighbor 1.1.1.1 activateneighbor 1.1.1.1 send-community both

exit-address-family

address-family ipv6network 2001::2/128neighbor 2001::1 activateneighbor 2001::1 route-reflector-clientneighbor 2001::1 next-hop-selfneighbor 2001::4 activateneighbor 2001::4 route-reflector-clientneighbor 2001::4 next-hop-selfneighbor 2001::5 activateneighbor 2001::5 route-reflector-clientneighbor 2001::5 next-hop-selfneighbor 2001::18 activateneighbor 2001::18 route-reflector-client


17/49

16

neighbor 2001::18 next-hop-selfneighbor 2001:192:23::3 activate

exit-address-family

address-family vpnv6neighbor 4.4.4.4 activateneighbor 4.4.4.4 send-community bothneighbor 4.4.4.4 route-reflector-clientneighbor 4.4.4.4 next-hop-selfneighbor 5.5.5.5 activateneighbor 5.5.5.5 send-community bothneighbor 5.5.5.5 route-reflector-clientneighbor 5.5.5.5 next-hop-selfneighbor 18.18.18.18 activateneighbor 18.18.18.18 route-reflector-clientneighbor 18.18.18.18 next-hop-selfneighbor 192.168.23.3 activateneighbor 192.168.23.3 send-community both

exit-address-family

ipv6 router ospf 1router-id 2.2.2.2


R3hostname R3

no logging console



interface Loopback0ip address 3.3.3.3 255.255.255.255ip router isis 1ipv6 address 2001::3/128ipv6 router isis 1

interface POS1/0ip address 192.168.13.3 255.255.255.0encapsulation ppp


18/49

17

mpls bgp forwardingno shut

interface POS2/0ip address 192.168.23.3 255.255.255.0encapsulation pppipv6 address 2001:192:23::3/64mpls bgp forwardingno shut

interface FastEthernet3/0ip address 192.168.36.3 255.255.255.0ip router isis 1speed 100duplex fullipv6 address 2001:192:36::3/64ipv6 router isis 1mpls ipno shut

interface FastEthernet3/1ip address 192.168.37.3 255.255.255.0ip router isis 1speed 100duplex full

ipv6 address 2001:192:37::3/64ipv6 router isis 1mpls ipno shut

router isis 1net 49.0001.0000.0000.0003.00is-type level-2-onlyredistribute bgp 200 route-map R5LOOP_MAP level-1

router bgp 200bgp log-neighbor-changesno bgp default ipv4-unicastno bgp default route-target filterneighbor 6.6.6.6 remote-as 200neighbor 6.6.6.6 update-source Loopback0neighbor 7.7.7.7 remote-as 200neighbor 7.7.7.7 update-source Loopback0neighbor 2001::6 remote-as 200neighbor 2001::6 update-source Loopback0


19/49

18

neighbor 2001::7 remote-as 200neighbor 2001::7 update-source Loopback0

neighbor 2001:192:23::2 remote-as 100neighbor 192.168.13.1 remote-as 100neighbor 192.168.23.2 remote-as 100

address-family ipv4network 3.3.3.3 mask 255.255.255.255neighbor 6.6.6.6 activateneighbor 6.6.6.6 route-reflector-clientneighbor 6.6.6.6 next-hop-selfneighbor 7.7.7.7 activateneighbor 7.7.7.7 route-reflector-clientneighbor 7.7.7.7 next-hop-selfneighbor 192.168.13.1 activateneighbor 192.168.13.1 send-labelneighbor 192.168.23.2 activate

exit-address-family

address-family vpnv4neighbor 6.6.6.6 activateneighbor 6.6.6.6 send-community bothneighbor 6.6.6.6 route-reflector-clientneighbor 6.6.6.6 next-hop-selfneighbor 7.7.7.7 activate

neighbor 7.7.7.7 send-community bothneighbor 7.7.7.7 route-reflector-clientneighbor 7.7.7.7 next-hop-selfneighbor 192.168.13.1 activateneighbor 192.168.13.1 send-community both

exit-address-family

address-family ipv6network 2001::3/128neighbor 2001::6 activateneighbor 2001::6 route-reflector-clientneighbor 2001::6 next-hop-selfneighbor 2001::7 activateneighbor 2001::7 route-reflector-clientneighbor 2001::7 next-hop-selfneighbor 2001:192:23::2 activate

exit-address-family

address-family vpnv6neighbor 6.6.6.6 activate


20/49

19

neighbor 6.6.6.6 send-community bothneighbor 6.6.6.6 route-reflector-client

neighbor 6.6.6.6 next-hop-selfneighbor 7.7.7.7 activateneighbor 7.7.7.7 send-community bothneighbor 7.7.7.7 route-reflector-clientneighbor 7.7.7.7 next-hop-selfneighbor 192.168.23.2 activateneighbor 192.168.23.2 send-community both

exit-address-family

ip prefix-list R5LOOP seq 5 deny 5.5.5.5/32

access-list 16 permit 6.6.6.6access-list 16 permit 7.7.7.0 0.0.0.255

route-map R5LOOP_MAP permit 10match ip address prefix-list R5LOOP


R4hostname R4

vrf definition MSSK

rd 100:1

address-family ipv4route-target export 100:1route-target import 100:1

exit-address-family

address-family ipv6route-target export 100:1route-target import 100:1route-target import 200:1

exit-address-family

no logging console




21/49

20

mpls traffic-eng tunnelsmpls ldp advertise-labels for 1


interface Loopback1vrf forwarding MSSKip address 172.16.4.4 255.255.255.255ipv6 address 2001:DB8::4/128


interface FastEthernet1/1ip address 192.168.45.4 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:45::4/64mpls ipmpls traffic-eng tunnelsipv6 ospf 1 area 0ipv6 ospf hello-interval 11ip rsvp bandwidthno shut

interface FastEthernet2/0ip address 192.168.184.4 255.255.255.0ip ospf network point-to-pointip ospf 1 area 2speed 100duplex fullipv6 address 2001:192:184::4/64


22/49

21

mpls ipmpls traffic-eng tunnels


interface FastEthernet2/1vrf forwarding MSSKip address 172.16.48.4 255.255.255.0speed 100duplex fullipv6 address 2001:172:48::4/64mpls bgp forwardingno shut

router ospf 1router-id 4.4.4.4network 4.4.4.4 0.0.0.0 area 0network 192.168.14.4 0.0.0.0 area 0network 192.168.45.4 0.0.0.0 area 0network 192.168.184.4 0.0.0.0 area 1mpls traffic-eng router-id Loopback0mpls traffic-eng area 0mpls traffic-eng area 1

router bgp 100bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 1.1.1.1 remote-as 100neighbor 1.1.1.1 update-source Loopback0neighbor 2.2.2.2 remote-as 100neighbor 2.2.2.2 update-source Loopback0neighbor 2001::2 remote-as 100neighbor 2001::2 update-source Loopback0

address-family ipv4network 4.4.4.4 mask 255.255.255.255neighbor 1.1.1.1 activateneighbor 2.2.2.2 activate

exit-address-family


exit-address-family


23/49

22

address-family ipv6

network 2001::4/128neighbor 2001::2 activateexit-address-family


exit-address-family

address-family ipv4 vrf MSSKnetwork 172.16.4.4 mask 255.255.255.255neighbor 172.16.48.8 remote-as 300neighbor 172.16.48.8 activateneighbor 172.16.48.8 as-overrideneighbor 172.16.48.8 send-label

exit-address-family

address-family ipv6 vrf MSSKnetwork 2001:DB8::4/128

exit-address-family

ipv6 router ospf 1router-id 18.18.18.18


access-list 1 deny 4.4.4.4 0.0.0.0access-list 1 permit any

R5hostname R5

vrf definition MSSKrd 100:1


exit-address-family

address-family ipv6route-target import 100:1


24/49

23

route-target import 200:1exit-address-family

no logging console



pseudowire-class XCONNECTencapsulation mpls



interface FastEthernet1/0ip address 192.168.15.5 255.255.255.0ip ospf authentication message-digestip ospf message-digest-key 2 md5 ciscoip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:15::5/64mpls ipmpls traffic-eng tunnelsipv6 ospf 1 area 0ip rsvp bandwidthno shut

interface FastEthernet1/1ip address 192.168.25.5 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:25::5/64


25/49

24

mpls ipmpls traffic-eng tunnels


interface FastEthernet2/0ip address 192.168.45.5 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:45::5/64mpls ipipv6 ospf 1 area 0ip rsvp bandwidthno shut

interface FastEthernet2/1ip address 192.168.185.5 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:185::5/64mpls ipmpls traffic-eng tunnels



interface Serial4/0no ip addressno keepaliveserial restart-delay 0xconnect 6.6.6.6 123 encapsulation mpls pw-class XCONNECTno shut

router ospf 1


26/49

25

router-id 5.5.5.5network 5.5.5.5 0.0.0.0 area 0

network 192.168.15.5 0.0.0.0 area 0network 192.168.25.5 0.0.0.0 area 0network 192.168.45.5 0.0.0.0 area 0network 192.168.185.5 0.0.0.0 area 1mpls traffic-eng router-id Loopback0mpls traffic-eng area 0mpls traffic-eng area 1

router bgp 100bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 1.1.1.1 remote-as 100neighbor 1.1.1.1 update-source Loopback0neighbor 2.2.2.2 remote-as 100neighbor 2.2.2.2 update-source Loopback0neighbor 2001::2 remote-as 100neighbor 2001::2 update-source Loopback0


exit-address-family


exit-address-family


exit-address-family


exit-address-family

address-family ipv4 vrf MSSKnetwork 172.16.5.5 mask 255.255.255.255neighbor 172.16.59.9 remote-as 300neighbor 172.16.59.9 activate


27/49


28/49

27

pseudowire-class XCONNECTencapsulation mpls



interface FastEthernet1/0ip address 192.168.36.6 255.255.255.0ip router isis 1speed 100duplex fullipv6 address 2001:192:36::6/64ipv6 router isis 1no shut


ip router isis 1speed 100duplex fullipv6 address 2001:192:67::6/64ipv6 router isis 1mpls ipno shut


interface Serial3/0no ip addressno keepalive


29/49

28

serial restart-delay 0xconnect 5.5.5.5 123 encapsulation mpls pw-class XCONNECT

no shut

router isis 1net 49.0001.0000.0000.0006.00is-type level-2-only

router bgp 200bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 3.3.3.3 remote-as 200neighbor 3.3.3.3 update-source Loopback0neighbor 2001::3 remote-as 200neighbor 2001::3 update-source Loopback1

address-family ipv4network 6.6.6.6 mask 255.255.255.255neighbor 3.3.3.3 activate

exit-address-family


exit-address-family


exit-address-family


exit-address-family

address-family ipv4 vrf MSSKnetwork 172.16.6.6 mask 255.255.255.255neighbor 172.16.106.10 remote-as 300neighbor 172.16.106.10 activateneighbor 172.16.106.10 as-overrideneighbor 172.16.106.10 send-label

exit-address-family

address-family ipv6 vrf MSSK


30/49

29

network 2001:DB8::6/128neighbor 2001:172:106::10 remote-as 300

neighbor 2001:172:106::10 activateneighbor 2001:172:106::10 as-overrideexit-address-family

ip prefix-list R5LOOP seq 5 deny 5.5.5.5/32ip prefix-list R5LOOP seq 10 permit 0.0.0.0/0 le 32


R7hostname R7



exit-address-family

address-family ipv6

route-target export 200:1route-target import 200:1route-target import 100:1

exit-address-family

no logging console


mpls label protocol tdpmpls ldp neighbor 3.3.3.3 password ldppasword



31/49

30

interface Loopback1vrf forwarding MSSK

ip address 172.16.7.7 255.255.255.255ipv6 address 2001:DB8::7/128

interface FastEthernet1/0ip address 192.168.37.7 255.255.255.0ip router isis 1speed 100duplex fullipv6 address 2001:192:37::7/64ipv6 router isis 1mpls ipisis circuit-type level-1no shut

interface FastEthernet1/1ip address 192.168.67.7 255.255.255.0ip router isis 1speed 100duplex fullipv6 address 2001:192:67::7/64ipv6 router isis 1mpls ipno shut

interface FastEthernet2/0vrf forwarding MSSKip address 172.16.117.7 255.255.255.0speed 100duplex fullipv6 address 2001:172:117::7/64mpls ipno shut

router ospf 300 vrf MSSKrouter-id 172.16.7.7network 172.16.117.7 0.0.0.0 area 0distribute-list route-map DENY_TAG out


router bgp 200


32/49

31

bgp log-neighbor-changesno bgp default ipv4-unicast

neighbor 3.3.3.3 remote-as 200neighbor 3.3.3.3 update-source Loopback0neighbor 2001::3 remote-as 200neighbor 2001::3 update-source Loopback0

address-family ipv4network 7.7.7.7 mask 255.255.255.255neighbor 3.3.3.3 activate

exit-address-family


exit-address-family


exit-address-family


exit-address-family

address-family ipv4 vrf MSSKnetwork 172.16.7.7 mask 255.255.255.255

exit-address-family

address-family ipv6 vrf MSSKnetwork 2001:DB8::7/128

exit-address-family


route-map DENY_TAG deny 10match tag 300

R8hostname R8

vrf definition ABCrd 300:1


33/49

32

address-family ipv4

route-target export 300:1route-target import 300:1exit-address-family


exit-address-family

no logging console

ip cefipv6 unicast-routingno ipv6 cef

interface Loopback0ip address 172.16.8.8 255.255.255.255ipv6 address 2001:DB8::8/128ipv6 eigrp 300

interface FastEthernet1/0ip address 172.16.48.8 255.255.255.0speed 100

duplex fullipv6 address 2001:172:48::8/64mpls bgp forwardingno shut

interface FastEthernet1/1vrf forwarding ABCip address 10.10.148.8 255.255.255.0speed 100duplex fullipv6 address 2001:10:148::8/64no shut

interface FastEthernet2/0ip address 172.16.89.8 255.255.255.0speed 100duplex fullipv6 address 2001:172:89::8/64ipv6 eigrp 300mpls ip


34/49


35/49

34

rd 300:1


exit-address-family


exit-address-family

no logging console


interface Loopback0ip address 172.16.9.9 255.255.255.255ipv6 address 2001:DB8::9/128

interface FastEthernet1/0ip address 172.16.59.9 255.255.255.0speed 100

duplex fullipv6 address 2001:172:59::9/64mpls bgp forwardingno shut

interface FastEthernet1/1vrf forwarding ABCip address 10.10.159.9 255.255.255.0speed 100duplex fullipv6 address 2001:10:159::9/64ospfv3 159 ipv6 area 1no shut

interface FastEthernet2/0ip address 172.16.89.9 255.255.255.0speed 100duplex fullipv6 address 2001:172:89::9/64ipv6 eigrp 300


36/49

35

mpls ipno shut

interface FastEthernet2/1vrf forwarding ABCip address 10.10.149.9 255.255.255.0speed 100duplex fullipv6 address 2001:10:149::9/64no shut

router ospfv3 159

address-family ipv6 unicast vrf ABCredistribute bgp 300router-id 172.16.9.9

exit-address-family

router ospf 300router-id 172.16.9.9network 172.16.9.9 0.0.0.0 area 0network 172.16.89.9 0.0.0.0 area 0

router rip

address-family ipv4 vrf ABCnetwork 10.0.0.0no auto-summaryversion 2

exit-address-family

router bgp 300bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 2001:172:59::5 remote-as 100neighbor 172.16.10.10 remote-as 300neighbor 172.16.10.10 update-source Loopback0neighbor 172.16.59.5 remote-as 100

address-family ipv4network 172.16.9.9 mask 255.255.255.255neighbor 172.16.59.5 activateneighbor 172.16.59.5 send-label

exit-address-family


37/49

36

address-family ipv6redistribute connected

redistribute eigrp 300 include-connectedneighbor 2001:172:59::5 activateexit-address-family


exit-address-family

address-family ipv6 vrf ABCredistribute ospf 159 include-connected

exit-address-family

ipv6 router eigrp 300redistribute bgp 300 metric 1000 1000 255 1 1500redistribute connected

R10hostname R10



exit-address-family


exit-address-family

no logging console

no ip cefipv6 unicast-routingipv6 cef

interface Loopback0ip address 172.16.10.10 255.255.255.255ipv6 address 2001:db8::10/128


38/49

37


speed 100duplex fullipv6 address 2001:172:106::10/64mpls bgp forwardingno shut

interface FastEthernet1/1ip address 172.16.110.10 255.255.255.0speed 100duplex fullipv6 address 2001:172:110::10/64ipv6 rip RIPng enablempls ipno shut

interface FastEthernet2/0vrf forwarding ABCip address 10.10.106.10 255.255.255.0speed 100duplex fullipv6 address 2001:10:106::10/64ospfv3 106 ipv6 area 1no shut

router ospfv3 106

address-family ipv6 unicast vrf ABCrouter-id 172.16.10.10

exit-address-family

router ospf 300router-id 172.16.10.10network 172.16.10.10 0.0.0.0 area 0network 172.16.110.10 0.0.0.0 area 0redistribute bgp 300 subnets route-map TAG

router rip

address-family ipv4 vrf ABCnetwork 10.0.0.0no auto-summaryversion 2

exit-address-family


39/49

38

router bgp 300

bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 2001:172:106::6 remote-as 200neighbor 172.16.8.8 remote-as 300neighbor 172.16.8.8 update-source Loopback0neighbor 172.16.9.9 remote-as 300neighbor 172.16.9.9 update-source Loopback0neighbor 172.16.11.11 remote-as 300neighbor 172.16.11.11 update-source Loopback0neighbor 172.16.106.6 remote-as 200

address-family ipv4network 172.16.10.10 mask 255.255.255.255redistribute ospf 300 match internal external 1neighbor 172.16.106.6 activate

exit-address-family

address-family vpnv4neighbor 172.16.8.8 activateneighbor 172.16.8.8 send-community bothneighbor 172.16.8.8 route-reflector-clientneighbor 172.16.11.11 activateneighbor 172.16.11.11 send-community both

neighbor 172.16.11.11 route-reflector-clientexit-address-family

address-family ipv6redistribute rip RIPng include-connected

exit-address-family


exit-address-family

address-family ipv4 vrf ABCredistribute rip

exit-address-family

address-family ipv6 vrf ABCredistribute ospf 160 include-connected

exit-address-family


40/49

39

ipv6 router rip RIPngredistribute connected

route-map TAG permit 10set tag 300

R11hostname R11



exit-address-family


exit-address-family

no logging console

ip cef

ipv6 unicast-routingipv6 cef

interface Loopback0ip address 172.16.11.11 255.255.255.255ipv6 address 2001:db8::11/128ipv6 rip RIPng enable

interface FastEthernet1/0ip address 172.16.117.11 255.255.255.0speed 100duplex fullipv6 address 2001:172:117::11/64mpls ipno shut

interface FastEthernet1/1ip address 172.16.110.11 255.255.255.0ip access-group DENY_LDP inspeed 100


41/49

40

duplex fullipv6 address 2001:172:110::11/64

ipv6 rip RIPmg enablempls ipno shut

interface FastEthernet2/0vrf forwarding ABCip address 10.10.117.11 255.255.255.0ip router isis 1speed 100duplex fullipv6 address 2001:10:117::11/64no shut

router ospf 300router-id 172.16.11.11redistribute connected subnets route-map LOOPnetwork 172.16.110.11 0.0.0.0 area 0network 172.16.117.11 0.0.0.0 area 0

router isis 1vrf ABCnet 49.1117.0000.0000.0011.00is-type level-2-only

redistribute bgp 300

router bgp 300bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 172.16.10.10 remote-as 300neighbor 172.16.10.10 update-source Loopback0

address-family ipv4exit-address-family


exit-address-family

address-family ipv4 vrf ABCredistribute isis 1 level-2redistribute isis level-2

exit-address-family


42/49

41

ip access-list extended DENY_LDP

permit tcp any any eq 646

ipv6 router rip RIPng

ipv6 router rip RIPmg

route-map LOOP permit 10match interface Loopback0

R12hostname R12

no logging console


interface Loopback0ip address 10.10.12.12 255.255.255.255ipv6 address 2001:DB8:10::12/128

interface Serial1/0

ip address 10.10.123.12 255.255.255.0ipv6 address 2001:10:123::12/64serial restart-delay 0no shut

router eigrp MSSK

address-family ipv4 unicast autonomous-system 123

topology baseexit-af-topologynetwork 10.10.12.12 0.0.0.0

exit-address-family


topology baseexit-af-topology

exit-address-family


43/49

42

R13hostname R13

no logging console


interface Loopback0ip address 10.10.13.13 255.255.255.255ipv6 address 2001:DB8:10::13/128

interface Serial1/0ip address 10.10.123.13 255.255.255.0ipv6 address 2001:10:132::13/64serial restart-delay 0no shut

router eigrp MSSK



network 10.10.13.13 0.0.0.0network 10.10.123.13 0.0.0.0exit-address-family


af-interface Serial1/0passive-interface

exit-af-interface


exit-address-family

R14hostname R14

no logging console

ip cef


44/49


45/49

44

speed 100duplex full

ipv6 address 2001:10:159::15/64ospfv3 159 ipv6 area 1no shut

router ospfv3 159router-id 10.10.15.15

address-family ipv6 unicastpassive-interface FastEthernet1/0

exit-address-family

router ripversion 2network 10.0.0.0no auto-summary

R16hostname R16

no logging console

ip cefipv6 unicast-routing

ipv6 cef

interface Loopback0ip address 10.10.16.16 255.255.255.255ipv6 address 2001:DB8:10::16/64ospfv3 106 ipv6 area 1

interface FastEthernet1/0ip address 10.10.106.16 255.255.255.0speed 100duplex fullipv6 address 2001:10:106::16/64ospfv3 106 ipv6 area 1ipv6 traffic-filter DENY_OSPFv3 inno shut

router ospfv3 106router-id 10.10.16.16

address-family ipv6 unicast


46/49

45

exit-address-family

router ripnetwork 10.0.0.0no auto-summary

ipv6 access-list DENY_OSPFv3sequence 5 deny ipv6 any host FF02::5sequence 10 permit ipv6 any any

R17hostname R17

no logging console


interface Loopback0ip address 10.10.17.17 255.255.255.255ip router isis 1ipv6 address 2001:DB8:10::17/128

interface FastEthernet1/0

ip address 10.10.117.17 255.255.255.0ip router isis 1speed 100duplex fullipv6 address 2001:10:117::17/64isis network point-to-pointno shut


R18hostname R18


address-family ipv4route-target export 100:1


47/49

46

route-target import 100:1route-target import 200:1

exit-address-familyaddress-family ipv6route-target export 100:1route-target import 100:1route-target import 200:1

exit-address-family

no logging console




interface Loopback1vrf forwarding MSSK

ip address 172.16.18.18 255.255.255.255ipv6 address 2001:DB8::18/128

interface Loopback2ip address 1.18.1.18 255.255.255.255

interface Tunnel181ip unnumbered Loopback0tunnel mode mpls traffic-engtunnel destination 1.1.1.1tunnel mpls traffic-eng autoroute destinationtunnel mpls traffic-eng path-option 1 explicit name INTER_AREa

interface FastEthernet1/0ip address 192.168.184.18 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:184::18/64mpls ip


48/49

47

mpls traffic-eng tunnelsipv6 ospf 1 area 1


interface FastEthernet1/1ip address 192.168.185.18 255.255.255.0ip ospf network point-to-pointspeed 100duplex fullipv6 address 2001:192:185::18/64mpls ipmpls traffic-eng tunnelsipv6 ospf 1 area 1no shut

router ospf 1router-id 18.18.18.18network 18.18.18.18 0.0.0.0 area 1network 192.168.184.18 0.0.0.0 area 1network 192.168.185.18 0.0.0.0 area 1mpls traffic-eng router-id Loopback0mpls traffic-eng area 1

router bgp 100

bgp log-neighbor-changesno bgp default ipv4-unicastneighbor 1.1.1.1 remote-as 100neighbor 1.1.1.1 update-source Loopback0neighbor 2.2.2.2 remote-as 100neighbor 2.2.2.2 update-source Loopback0neighbor 2001::2 remote-as 100neighbor 2001::2 update-source Loopback0


exit-address-family


exit-address-family


49/49

ccie sp tshoot lab

Documents