Section 1: Bridging and Switching (18 Points)

Section 1.1: Frame Relay Configuration (3 Points)

• Configure the Frame Relay portion of the network as shown in Figure 5-8 and ensure that only the PVCs illustrated in Figure 5-8 will be used. Use of dynamic PVCs is not permitted.

The question clearly states that you must use only the PVCs as shown in Figure 5-8. You must, therefore, disable inverse ARP on the routers. It is good practice to ensure that all routers do not rely on inverse ARP so you should have configured no frame-relay inverse-arp under routers R1, R2, R3, R4, and R5 on their serial interfaces.

If you configured this correctly as shown in Example 5-1 through Example 5-5, you have scored 2 points.

• You must use subinterfaces on R2 interface S0/1.

• Do NOT configure subinterfaces on any other routers.

• You must be able to ping across the Frame Relay cloud.

R2 will be connecting to R1, R4, and R5. Notice that the subnet addresses between R2 and R4 are different. You should be able to ping across the Frame Relay cloud.

Example 5-1 through Example 5-10 show the Frame Relay configuration and Example 5-6 to Example 5-10, show the connectivity tests.

If you configured this correctly as shown in Example 5-6 through Example 5-10, you have scored 1 point

NOTE

When configuring the Frame Relay serial interfaces, it is a very good idea for you to shut down the interfaces while you are configuring. This procedure will ensure you do not have unexpected behavior because of dynamic maps, etc., although you have configured the no frame-relay inverse-arp. Another useful command is clear frame-relay inarp interface, which clears your inverse ARP entries from the map table.

Example 5-1. R1 Initial Frame Relay Solution Configuration

 R1#show run int s0/1 Building configuration... Current configuration : 285 bytes ! interface Serial0/1  ip address 160.10.37.1 255.255.255.0  encapsulation frame-relay  frame-relay map ip 160.10.37.2 112 broadcast  frame-relay map ip 160.10.37.5 112 broadcast  no frame-relay inverse-arp  frame-relay lmi-type ansi end R1# 

Example 5-2. R2 Initial Frame Relay Solution Configuration

 R2#show run int s0/0 Building configuration... Current configuration : 193 bytes ! interface Serial0/0  ip address 160.10.32.2 255.255.255.252  encapsulation frame-relay  frame-relay map ip 160.10.32.1 203 broadcast  no frame-relay inverse-arp  frame-relay lmi-type ansi end R2# R2#show run int s0/1 Building configuration... Current configuration : 285 bytes ! interface Serial0/1  no ip address  encapsulation frame-relay  no frame-relay inverse-arp  frame-relay lmi-type ansi end ! interface Serial0/1.1 multipoint  ip address 160.10.37.2 255.255.255.0  frame-relay map ip 160.10.37.1 211 broadcast  frame-relay map ip 160.10.37.5 215 broadcast  end ! R2#sh run int s0/1.2 Building configuration... Current configuration : 117 bytes ! interface Serial0/1.2 point-to-point  ip address 160.10.38.2 255.255.255.0  frame-relay interface-dlci 214 end R2# 

Example 5-3. R3 Initial Frame Relay Solution Configuration

 R3#show run int s0/0 Building configuration... Current configuration : 193 bytes ! interface Serial0/0  ip address 160.10.32.1 255.255.255.252  encapsulation frame-relay  frame-relay map ip 160.10.32.2 302 broadcast  no frame-relay inverse-arp  frame-relay lmi-type ansi end R3# 

Example 5-4. R4 Initial Frame Relay Solution Configuration

 R4#show run int s0/1 Building configuration... Current configuration : 285 bytes ! interface Serial0/1  ip address 160.10.38.4 255.255.255.0  encapsulation frame-relay  frame-relay map ip 160.10.38.2 412 broadcast  no frame-relay inverse-arp  frame-relay lmi-type ansi end R4# 

Example 5-5. R5 Initial Frame Relay Solution Configuration

 R5#show run int s0/1 Building configuration... Current configuration : 285 bytes ! interface Serial0/1  ip address 160.10.37.5 255.255.255.0  encapsulation frame-relay  frame-relay map ip 160.10.37.1 512 broadcast  frame-relay map ip 160.10.37.2 512 broadcast  no frame-relay inverse-arp  frame-relay lmi-type ansi end R5# 

Example 5-6. R1 show Commands and Pings to Verify Functionality

 R1#show fram map Serial0/1 (up): ip 160.10.37.2 dlci 112(0x70,0x1C00), static,               broadcast,               CISCO, status defined, active Serial0/1 (up): ip 160.10.37.5 dlci 112(0x70,0x1C00), static,               broadcast,               CISCO, status defined, active R1# R1#ping 160.10.37.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.37.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms R1#ping 160.10.37.5 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.37.5, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/8 ms R1# 

Example 5-7. R2 show Commands and Pings to Verify Functionality

 R2#show fram map Serial0/0 (up): ip 160.10.32.1 dlci 203(0xCB,0x30B0), static,               broadcast,               CISCO, status defined, active Serial0/1.1 (up): ip 160.10.37.1 dlci 211(0xD3,0x3430), static,               broadcast,               CISCO, status defined, active Serial0/1.1 (up): ip 160.10.37.5 dlci 215(0xD7,0x3470), static,               broadcast,               CISCO, status defined, active Serial0/1.2 (up): point-to-point dlci, dlci 214(0xD6,0x3460), broadcast           status defined, active R2# R2# R2#ping 160.10.32.1 Type escape sequence to abort Sending 5, 100-byte ICMP Echos to 160.10.32.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms R2#ping 160.10.37.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.37.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms R2#ping 160.10.37.5 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.37.5, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms R2# R2#ping 160.10.38.4 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.38.4, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms 

Example 5-8. R3 show Commands and Pings to Verify Functionality

 R3#show fram map Serial0/0 (up): ip 160.10.32.2 dlci 302(0x12E,0x48E0), static,               broadcast,               CISCO, status defined, active R3#ping 160.10.32.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.32.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms R3# 

Example 5-9. R4 show Commands and Pings to Verify Functionality

 R4#show fram map Serial0/1 (up): ip 160.10.38.2 dlci 412(0x19C,0x64C0), static,               broadcast,               CISCO, status defined, active R4# R4#ping 160.10.38.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.38.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/8 ms R4# 

Example 5-10. R5 show Commands and Pings to Verify Functionality

 R5#show fram map R5#sh fram map Serial0/1 (up): ip 160.10.37.1 dlci 512(0x200,0x8000), static,               broadcast,               CISCO, status defined, active Serial0/1 (up): ip 160.10.37.2 dlci 512(0x200,0x8000), static,               broadcast,               CISCO, status defined, active R5# R5#ping 160.10.37.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.37.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/8 ms R5#ping 160.10.37.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.37.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms R5# 

Section 1.2: 3550 LAN Switch Configuration (12 Points)

• Sw1 and Sw2 are connected via a crossover cable using ports fa0/15. Configured a Dot1q (801.1Q) trunk between Sw1 and Sw2.

This is a basic trunk configuration. Example 5-11 and Example 5-13, show the trunk configuration. Example 5-13 tells you through the show commands the verification. If you configured this correctly as shown in Example 5-11 through Example 5-13, you have scored 2 points.

Example 5-11. 3550 Sw1 Initial Trunk Configuration

 Sw1#show run int fa0/15 Building configuration... Current configuration : 108 bytes ! interface FastEthernet0/15  switchport trunk encapsulation dot1q  switchport mode trunk  no ip address end Sw1# 

Example 5-12. 3550 Sw2 Initial Trunk Configuration

 Sw2#show run int fa0/15 Building configuration... Current configuration : 108 bytes ! interface FastEthernet0/15  switchport trunk encapsulation dot1q  switchport mode trunk  no ip address end Sw2 

Example 5-13. 3550 Sw1 and Sw2 show Command Output to Verify Configuration and Functionality

 Sw1#show int trunk Port      Mode         Encapsulation  Status        Native vlan Fa0/15    on           802.1q           trunking      1 Port      Vlans allowed on trunk Fa0/15    1-4094 Port      Vlans allowed and active in management domain Fa0/15    1 Port      Vlans in spanning tree forwarding state and not pruned Fa0/15    1 Sw1# Sw2#show int trunk Port      Mode         Encapsulation  Status        Native vlan Fa0/15    on           802.1q           trunking      1 Port      Vlans allowed on trunk Fa0/15    1-4094 Port      Vlans allowed and active in management domain Fa0/15    1 Port      Vlans in spanning tree forwarding state and not pruned Fa0/15    1 Sw2# 

• All Ethernet ports are pre-cabled as per Table 5-4. Note that not all ports will be used on this lab.

• Configure the VLANs as follows:

  - VLAN_11: Connected to R1-e0/0 (VLAN_11)
  
  

  - VLAN_22: Connected to R3-fa0/0, R5-fa0/0, and R6-e0/0 (VLAN_22)
  
  

  - VLAN_25: Connected to R1-e0/1 and R5-fa0/1 (VLAN_25)
  
  

  - VLAN_33: Connected to R3-fa0/1 (VLAN_33)
  
  

  - VLAN_100: Connected to R2-fa0/0 and BB1_Router-e2/0 (VLAN_100)
  
  

  - VLAN_200: Connected to R4-e0/0 and BB2_Router-e2/4 (VLAN_200)
  
  

If you configured this correctly as shown in Example 5-14, you have scored 3 points.

• Configure Sw1 to be the VTP server for the domain. Sw2 is a VTP client. Be sure that Sw2 can see the VLAN configuration from Sw1. The VTP domain name is "CCIE."

If you configured this correctly as shown in Example 5-14, you have scored 3 points.

NOTE

The VLAN configuration is completed under Vlan database.

Example 5-14. 3550 Sw1 and Sw2 VLAN and VTP Configuration

 Sw1#show vlan brief VLAN Name                             Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                          active    Fa0/7, Fa0/8, Fa0/9, Fa0/10                                                 Fa0/11, Fa0/12, Fa0/14, Fa0/16                                                 Fa0/17, Fa0/18, Fa0/19, Fa0/20                                                 Fa0/21, Fa0/22, Fa0/23, Fa0/24                                                 Gi0/1, Gi0/2 11   VLAN_11                          active    Fa0/1 22   VLAN_22                          active    Fa0/3, Fa0/5, Fa0/6 25   VLAN_25                          active 33   VLAN_33                          active 100  VLAN_100                         active    Fa0/2, Fa0/13 200  VLAN_200                         active    Fa0/4 1002 fddi-default                     active 1003 token-ring-default               active 1004 fddinet-default                  active 1005 trnet-default                    active Sw1# ________________________________________________________________ Sw2#show vlan brief VLAN Name                             Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                          active    Fa0/2, Fa0/4, Fa0/6, Fa0/7                                                 Fa0/8, Fa0/9, Fa0/10, Fa0/11                                                 Fa0/12, Fa0/14, Fa0/16, Fa0/17                                                 Fa0/18, Fa0/19, Fa0/20, Fa0/21                                                 Fa0/22, Fa0/23, Fa0/24, Gi0/1                                                 Gi0/2 11   VLAN_11                          active 22   VLAN_22                          active 25   VLAN_25                          active    Fa0/1, Fa0/5 33   VLAN_33                          active    Fa0/3 100  VLAN_100                         active 200  VLAN_200                         active    Fa0/13 1002 fddi-default                     active 1003 token-ring-default               active 1004 fddinet-default                  active 1005 trnet-default                    active Sw2# ________________________________________________________________ Sw1# Sw1#show vtp stat VTP Version                     : 2 Configuration Revision          : 1 Maximum VLANs supported locally : 1005 Number of existing VLANs        : 11 VTP Operating Mode              : Server VTP Domain Name                 : CCIE VTP Pruning Mode                : Disabled VTP V2 Mode                     : Disabled VTP Traps Generation            : Disabled MD5 digest                      : 0x36 0xC9 0xB9 0x93 0x5C 0xE6 0x7B 0x1D Configuration last modified by 160.10.7.7 at 3-19-93 04:55:23 Local updater ID is 160.10.11.10 on interface Vl11 (lowest numbered VLAN interface found) Sw1# ________________________________________________________________ Sw2#show vtp stat VTP Version                     : 2 Configuration Revision          : 1 Maximum VLANs supported locally : 1005 Number of existing VLANs        : 11 VTP Operating Mode              : Client VTP Domain Name                 : CCIE VTP Pruning Mode                : Disabled VTP V2 Mode                     : Disabled VTP Traps Generation            : Disabled MD5 digest                      : 0x36 0xC9 0xB9 0x93 0x5C 0xE6 0x7B 0x1D Configuration last modified by 160.10.7.7 at 3-19-93 04:55:23 Sw2# 

NOTE

The VTP domain name must be called CCIE. It needs to be exactly as the question is asking for.

• Configure Sw1, using VLAN_11 with the IP address 160.10.11.10/24. After you have finished all tasks related to the IGP section, all routers on your topology should be able to ping Sw1 VLAN_11 interface. R1 should also be able to ping this interface. Sw1 will not participate on the IP routing.

If you configured this correctly as shown in Example 5-15, you have scored 2 points.

Example 5-15 shows the Sw1 virtual interface configuration and Example 5-16 shows the connectivity test.

Example 5-15. 3550 Sw1 Management Interface Configuration

 Sw1# Sw1#show run int vlan 11 Building configuration... Current configuration : 63 bytes ! interface Vlan11  ip address 160.10.11.10 255.255.255.0 ! ! ip default-gateway 160.10.11.1 

NOTE

In this moment, Sw1 will be able to ping only the directly connected interfaces on R1 (R1-e0/0, R1-s0/1 and R1-lo0). In fact, you are not required to reach the switches from other routers.

Example 5-16. 3550 Sw1 Management Interface Output Verification

 Sw1#ping 160.10.11.1 ! R1-E0/0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.11.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms Sw1# Sw1#ping 160.10.1.1 ! R1-Loopback 0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms Sw1# Sw1#ping 160.10.37.1 ! R1-S0/0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 160.10.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms Sw1# 

• You are planning to connect your Sw2 to an external network and you are concerned about sending some of your network information through this port. Configure Sw2-fa0/18 to not send CDP advertisements to the remote side.

If you configured this correctly as shown in Example 5-17, you have scored 2 points.

Example 5-17 shows the necessary configuration to disable the CDP protocol.

Example 5-17. 3550 Sw1 Secondary Root Configuration and Verification

 Sw1#sh cdp interface fa0/18 ! Before to disable CDP FastEthernet0/18 is down, line protocol is down   Encapsulation ARPA   Sending CDP packets every 60 seconds   Holdtime is 180 seconds ! Sw1# sh run int fa0/18 Building configuration... Current configuration : 64 bytes ! interface FastEthernet0/18  no ip address  no cdp enable end Sw1#sh cdp interface fa0/18 ! After to disable CDP ! No output Sw1# 

Section 1.3: ATM Configuration (3 Points)

• Configure the ATM connection as shown in Figure 5-9.

• A PVC is configured between R6 and the backbone router. Do not configure subinterfaces.

• Use explicit address mapping. Do not depend on the remoter backbone router for inverse ARP.

• You must be able to ping the backbone router address 170.100.10.254.

If you configured this correctly as shown in Example 5-18 you have scored 3 points.

Example 5-18 shows the ATM PVC configuration as well as the connectivity test to the backbone router.

Example 5-18. R6 ATM Configuration, Map Verification, and Access to Backbone Router

 R6#show run int a3/0 Building configuration... Current configuration : 140 bytes ! interface ATM3/0  ip address 170.100.10.1 255.255.255.0  no atm ilmi-keepalive  pvc 0/100   protocol ip 170.100.10.254 broadcast  ! end R6#ping 170.100.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 170.100.10.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms R6#sh atm vc            VCD /                                        Peak  Avg/Min Burst Interface  Name         VPI   VCI  Type   Encaps   SC   Kbps   Kbps   Cells  Sts 3/0        3              0   100  PVC    SNAP     UBR  155000                UP R6#