November 06, 2010
Free Cisco Lab Scenario Advanced BGP
Overview:
In this lab scenario there are two BGP AS in addition to OSPF, EIGRP, IGRP and RIP routing protocols. This is a timed lab much like that of a CCIE lab. Nine hours have been allotted to complete the lab scenario Good Luck.
Preparation:
- Turn off DNS lookup on all the routers
- Disable console timeout on all the routers
- Do not use static routes
- Use Class C 192.168.100.x for network addressing
Topology and IP address setup (0.5 hour)
- Configure Catalyst switch so that port 2/1, 2/3, 2/4 and 2/5 are each on a separate VLAN
- Address vlan1 to have 14 hosts
- Address vlan2 to have 31 hosts
- Address vlan3 to have 6 hosts
- Address vlan4 to have 6 hosts
- Address R2 token ring to have 14 hosts
- Address R4 token ring to have 6 hosts
- Create three loopback interfaces on R3, using 30 bit mask
- Setup the serial link between R1 and R2 as 64K back to back link using HDLC encapsulation and with 28 bit mask
- Setup the serial link between R4 and R5 as 64K back to back link using PPP encapsulation with 30 bit mask
- Verify that you have a working IP setup by pinging the local interfaces on each router.
Configure Frame-Relay Switch (0.5 hour)
- Configure the Frame Relay switch according to the diagram
- Use LMI type Cisco and encapsulation IETF
- All ports on Frame-Relay switch are DCE
- Set the Frame-Relay speed to 64K
- Use 28 bit subnet mask to address the Frame-Relay network
- Use sub-interfaces on Router R3 and R5, use “frame-relay map” statement on R1
- Confirm connectivity by pinging from R1 to R3 and R5
Configure IP across the ISDN link (1 hour)
- ISDN switch type is NI-1
- For ISDN port connected to R1: SPID1: 0835866201, DN 835-8662
SPID2: 0835866401, DN 835-8664
- For ISDN port connected to R3: SPID1: 0835866101, DN 835-8661
SPID2: 0835866301, DN 835-8663
- Using a 28 bit subnet mask, configure the ISDN link such that traffic from R3 to R1 will force the ISDN line to dial, but not vice-versa.
- Confirm IP connectivity across the ISDN link by pinging from R3 to R1.
OSPF Configuration (2 hours)
- Configure OSPF according to the diagram.
- Use OSPF MD5 authentication between R1 and R3, set MD5 password as “cisco”
- Ensure that R3 can still see all the routes.
- Configure R3 so that the ISDN line will come up if the frame relay connection fails.
IGRP (0.5 hour)
- Configure IGRP on R2 token ring and serial interface S0.
- Configure IGRP on R1 serial interface S1.
- Make sure those are the only interfaces advertising IGRP.
- Redistribute between OSPF and IGRP on R1.
- Make sure R2 can Ping all interfaces in the OSPF domain.
RIP (0.5 hour)
- Configure RIP on R1’s E0.
- Make sure this is the only interface advertising RIP
- Redistribute between OSPF and RIP on R1.
- Verify R4 can Ping R1’s Ethernet 0 interface.
BGP (3 hours)
- Configure 2 loopback interfaces on Router R7 using the network address 10.0.0.1/8 and 172.16.0.1/16.
- Configure router R7’s Ethernet 0 interface with address 11.1.1.2/24
- Configure BGP on Router R7 with AS number of 200, and set it up to advertise the three networks. (10.0.0.0, 172.16.0.0, 11.1.1.0)
- Configure External BGP on R2 using AS 100. Configure the BGP between router R7 and Router R2 so that R2 can see all three interfaces configured on Router R7.
- “show ip route” and “show ip bgp” on Router R2 should show the three networks advertised by Router R7.
- Configure BGP on Router R1, R3, R4 and R5 using AS 100.
- Make Router R1 a route-reflector neighboring with R3, R5 and R4.
- Do not redistribute between BGP and OSPF, RIP or IGRP
- A “show ip bgp” and “show ip route” on Router R3 should show the three routes advertised by router R7.
- Configure a filter on Router R2 that will prevent network 11.1.1.0 from advertising into the AS 100.
- Configure EBGP on router R4 with AS 100 neighboring with R7.
- Configure BGP on R4 so that it will be the preferred exit to network 10.0.0.0 on router R7
- Configure BGP on R2 so that it will be the preferred entry point for traffic from R7 destined for EIGRP loopback interface.
IP Firewall (1 hour)
Configure an inbound access-list on R2’s Serial0 interface that meets the following:
- Telnet is permitted if originated from R5
- FTP is permitted if originated from VLAN3
- TFTP is permitted
- SMTP is not allowed
- WWW is not allowed from VLAN1, but is allowed if originated from VLAN3
- PING is permitted from everywhere
November 21st, 2010 at 5:52 pm
Straightforward and written well, thanks for the info
November 25th, 2010 at 3:59 am
Wow this is a great resource.. Im enjoying it.. good article – If you don’t know how to do something, you don’t know how to do it with a computer. Attributed to Anonymous
December 8th, 2010 at 8:45 am
Hi ,
Please give the full configuration details.It will very useful for practice
December 26th, 2010 at 6:21 am
Commonly i tend not to react to a article just like that, although considering that i really loved it I just must give you the thumbs up 🙂
December 26th, 2010 at 8:24 am
a few of my favorites, since I was here There is some stuff. Well this is also an. I need it one of my school projects, fortunately for me mine is on a similar theme as the one here. Glad, happy trails.