lab2英文需求非100标准可供参考

1、Section 1-Layer 2 Technologies1.1Jamesons Datacenter:Access port(4 points) 需求：Jamesons Datacenter:Access portsRefer to “Diagram 1:Jamesons Layer 2 Connections”,“Table 1:Jamesons VLAN to PortMapping” and “Diagram 2:Intial Topology”The following requirements were pre-configured. It is your responsibil

2、ity to verify theirfunctionality:VTP version 2 in transparent mode;Access-ports for VLAN 100,101,153,156,164 and 999 in all relevant switches;All SVI in all relevant switches;Configure the switches in Jamesons datacenter network (AS 65002) as per thefollowing requirements:Configure all remaining acc

3、ess-ports an specified in “Table 1 :Jamesons VLANto Port Mapping”.All unused ports must be configin VLAN 999 and must remainadministratively shutdown in allswitches.Access-ports must immediately transition to the forwarding state upon linkeup,as long as they do no receive a BPDU.Use the minimal numb

4、er ofcommands per switch to enable this feature.If an access-port received a BPDU,it must automatically shutdown.Use theminimal number of commands per switch to enable this feature.Ports that were shutdown must always rely on a manual intervention torecover.Refer to “Diagram 2: Initial Topology” and

5、 ensure that all routers andswitches in Jamesons datacenter are able to ping their connected neighbors.Ensure that the management VLAN 911 in Jamesons datacenter isfuntional.SW3 must be able to ping the other three switchesDo not create any new SVIinterface1.2 Jamesons Datacenter:Trunk ports(4 point

6、s) 需求：Refer to “Diagram 1 : Jamesons Layer 2 Connections” and “Table 1 : Jamesons VLANto Port Mapping”.Configure Jamesons datacenter network (AS 65002) as per the following requirements：All inter-switch links must explicitly use an encapsulation technology thatinserts 4-byte tags into the original f

7、ramesAll inter-switch links on all switches must explicitly disable the dynamictrunking negotiation.Ensure that all four switches send and receive untagged frames on VLAN 1.All four switches must maintain exactly three instances of spanning-treeSW4 must be the root switch for VLANs 1,34,100,101,153,

8、156; and backuproot switch for VLANs 164,173,184,911,999. Use instance number 1.SW3 must be the root switch for VLANs 164,173,184,911,999; and backuproot switch for VLANs 1,34,100,101,153,156.Use instance number 2.Both SW3 and SW4 must have the best chance of maintaining theirrespective role(as desc

9、ribed above) even if any new switch was inserted inthe future.Configure SW4 so that the interface e2/1 of SW3 in forwarding traffic forVLAN 34 and the interface e2/0 is blocking traffic for VLAN 34.（e2/1,e2/0 不需要部署 etherchannel）.1.3 Jamesons Datacenter:Link bundling(4 points) 需求：Refer to “Diagram 1

10、: Jamesons Layer 2 Connections” and “Diagram 2:Initial Topology”Configure Jamesons datacenter network as per the following requirements:All four switches must bundle trunk ports so that they maintain a single Layer2 link. Use the portchannel number as shown in the “Diagram 2:InitialTopology”.Ensure

11、that all four switches use a Cisco proprietary protocol to negotiatewhich ports should become active in the bundle.The access switches SW5 and SW6 must initiate the link bundling negotiation.The distribution switches SW3 and SW4 must only respond to negotiation,they may never initate it.The distribu

12、tion switches SW3 and SW4 must balance traffic between allmembers of the link bundle based on source and destination IP addresses.The access switches SW5 and SW6 must balance the incoming traffic(that isoriginated from servers) between all members of the link bundle based onthe serversMAC address1.4

13、 Jamesons Branch Offices(2 points) 需求：Refer to “Diagram 1: Jamesons Layer 2 connections”Configure interface Ethernet0/0 in Jamesons branch routers R19,R20 and R21 as perthe following requirements:The Ethernet WAN links must rely on a Layer 2 protocol that support linknegotiation and authenticationTh

14、e service provider expect that the branch routers complete a three-wayhandshake by providing the expected response of a challenge that is sent byR49.R19 must use the username “Jamesons-R19” and password “CCIE”(withoutquotes).R20 must use the username “Jamesons-R20” and password “CCIE”(withoutquotes)

15、R21 must use the username “Jamesons-R21” and password “CCIE”(withoutquotes)The interface Eth0/0 of all three routers must receive an IP address from R49Ensure that all three routers can ping the IP address of each oters interfaceEth0/0You are no allowed to configure any single static route in any br

16、anch routerto achieve the previous requirement.Section 2-Layer 3 Technologies2.1 Jamesons IGP,part 1(2 points) 需求：Refer to “Diagram 2 : Initial Topology”The configuration was already started.It is your responsibility to complete and verifyall requirements.Configure Jamesons network (AS 65001 and AS

17、65002) according to the followingrequirements:The OSPF process ID must be 1 everywhere.Ensure that all routers use their interface Lo0 as OSPF router-id.Ensure that OSPF is not running on any interface that is facing another BGPAS.Do not use the “network” statement under the “router ospf” configurat

18、ionanywhere innetwork(AS 65002-datacenter 里面不能用 network). Do not change the default OSPF cost of any interface anywhere.Ensure that both SW3 and SW4 do not attempt to establish OSPF adjacenciesvia their VLAN 100,101 and 911 while they must advertise these subnets inOSPF as internal prefixes.SW5 and

19、SW6 must no participate in OSPF at all.OSPF Type 2 LSAs must not appear in any link state database in the datacenter.2.2 Jamesons IGP,part 2(2 points) 需求:Refer to “Diagram 2 :Initial Topology”.The Tunnel0 interface of routers R17,R19,R20,R21 must remain in VRF Corp aspreconfigured.Configure Jamesons

20、 branch network according to the following requirements;The OSPF process ID must be 1 everywhere.Each branch router must establish an OSPF adjacency with R17 in area 51.Each branch router must install the prefix 10.2.0.0/16 in their routing tableas an OSPF Type 3 LSA.R17 must propagate a default rou

21、te in both area 0 and area 51 only if it hasa defauly route in its routing tables.You are allowed to add a unique staticroute to achieve this requirement.Each branch router must advertise their interfaces Lo0 and Eth0/1 into OSPF.Do not add,remove or modify any BGP configuration on R17.OSPF Type 2 L

22、SAs must not appear in any link state database in any branchrouter.Do not user “network”anywhere in area 51Do not create any virtual-link anywhere.2.3 Jacobs IGP(3 points) 需求：Refer to “Diagram 2:Initial Topology”Jacobs network is partly preconfigured.It is your responsibility to verify and completet

23、hem.Configure EIGRP for IPV4 in Jacobs core network(AS 65006) according to the followingrequirements:All EIGRP routers must support 64-bit metric calculations and RoutingInformation Base(RIB)scaling in EIGRP topologiesThe interface Lo0 of each router must be seen as an internal EIGRP prefix byall ot

24、her routers in their local domainEnsure that EIGRP is no running on any interface that is facing anoter AS. Useany method to accomplish this requirementJacobs core network must use the EIGRP autonomous system number 1R52 must inject its interface Lo52 into EIGRP as an external prefix.No otherprefix

25、may be injected as an EIGRP external prefix by R52.Do not configureany metric with redistribution conmmand（重分布时还不能使用 route-map）All routers in Jacobs core network must install the prefix of interface Lo52 ofR52 into their routing tableDo not change the preconfigured bandwidth on interface Lo52 of R52

26、 It mustremain at 1KbpsDo not change EIGRPs default metric weight anywhere.2.4 Jamesons Pre-merge,part 1(4 points) 需求：Refer to the “Overall Scenario”,”Diagram 2:Initial Topology” and “Diagram 4 : Pre-merge Topology”Jamesons decided to enable MPLS VPN in theirnetworkConfigure Jamesons network as per

27、the following requirements：R1 must reflect IPv4 BGP prefixes to all core routers except R2All internal BGP peerings must be established using interface Lo0Ensure that each Jamesons site receives BGP prefixes form other sitesR15 and R16 must mutually redistribute OSPF and BGPMust advertise the summar

28、y 10.0.0.0/8 prefix in BGP and may not advertiseany more specific prefixesMust not peer with R17 or R18R11,R12,R13 and R14：Must redistribute OSPF into BGPMay not redistribute BGP into OSPFMust advertise a default route into their respective OSPF domainMust advertise only four prefixes via eBGP to Ja

29、mesons core network asfollowsR11 and R12 must advertise 10.1.0.0/16, 10.255.1.11/32, 10.255.1.12/32and 10.255.1.101/32R13 and R14 must advertise 10.3.0.0/16, 10.255.1.13/32, 10.25.1.14/32 and10.255.1.103/32At the end of the exam, R11,R12,R13 and R14 must see a very similar outputas the one shown bel

30、ow (only the next-hop version and update-group maydiffer)2.5 Jamesons Pre-merge,part 2(3 points) 需求:Refer to the “Overall scenario”,”Diagram 2:Initial Topology” and “Diagram 4 :Penmerge Topology”This item completes Jamesons transition to enable MPLS VPN in their core network.It may require items “2.

31、4 Jamesons Pre-merge, part1” and “3.2 Jamesons Pre-mergeVPN ” to be configuredConfigure Jamesons core(AS #65001) network as per the following requirements：Ensure that any prefix that originated in any sites of AS#65002 will not beadvertised back into the same site via its redundant gatewaysThe confi

32、guration must equally apply to any other prefix that may beoriginated in any site of AS#65002 in the futureEnsure that Jacobs CEs(R55 and R56) dont propagate the aggregate prefix172.0.0.0/8 in the JacobsCorp VPN R55 and R56 may not establish an IBGPpeering with R57要求 R15/R16 必须汇总 10.0.0.0/8要求 R15/R1

33、6 只能下方默认路由和汇总路由，不能发送任何明细 R55/R56 不能做任何汇总，且不能有 172.0.0.0/8 的路由从 55、56 发出2.6 Merge phase 1:BGP(3 points) 需求:Refer to the “Overall Scenario” and “Diagram 5: Merge Phase:1”Jamesons and Jacobs started the first phase of their merge and add a new borderrouter in their respective main site (R18 and R57)Con

34、figure the network as per the followingrequirements：Interface Lo0 of both R18 and R57 must be add into their respective IGPdomainInterface e0/1 of both R18 and R57 must peer with its connected IGPneighborUsing a single conmmand per router,advertise two aggregate prefixes viaeBGP as followsR18 advert

35、ises 10.0.0.0/8R57 advertise 172.0.0.0/8The aggregate command on both routers must use the “summary-only”optionBoth R18 and R57 must propagate the received summary prefix into theirrespective IGP domainEnsure that the backdoor link is never used as a transit link for local predixesJamesons prefixes

36、may never be advertised in eBGP by R57Jacobs prefixes may never be advertised in eBGP by R182.7 Merge phase 2:IGP(3 points) 需求:Refer to “Diagram 2: Initial Topology” and “Diagram 6 : Merge Phase 2”Jamesons and Jacobs are entering in the second phase of the mergeand havedeployed two new border router

37、s in their respective core networkConfigure the core networks as per the following requirements:R9 and R10 must run OSPF on their interface Eth0/0 and Lo0R9 and R10 must run EIGRP on their interface Eth0/1R53 and R54 must run EIGRP on all of their interfacesMutually redistribute EIGRP and OSPF on bo

38、th R9 and R10Avoid routing loops and ensure that all current and future prefixes areconsistently routed via their optimal pathIn an attempt to reduce operational costs, your solution must not includeany accss-list, prefix-list or route-map in order to achieve this requirement2.8 Merge phase 2 :Routi

39、ng Policies(3 points) 需求：Refer to the “Overall Scenario”,”Diagram 2 : Initial Topology” and”Diagram 6:MergePhase 2”Configure the network as per the followingrequirements：Network managers have decided that the primary path for all trafficbetween Jamesons 10.2.100.0/24 and Jacobs 172.18.1.0/24 must be

40、routed preferably via the BGP backdoor link between R18 and R57If this link should fail then traffice should fall back over the MPLS corenetworkThis policy applies in both directions,from Jamesons VLAN 100 to JacobsVLAN100 and vice versaAll other traffic must be routed preferably via the MPLS core n

41、etwork unlessthe paths arent advertised by the PEsDo not configure any access-list in order to achieve this requirementR55 and R56 may not summarize any prefix in BGPDo not configure any iBGP peering with R57 in Jacobs headquartersEnsure that the follwing test reveals the same path as shown below2.9

42、 IPv6 Routing, part 1(2 points) 需求：Refer to “Diagram 2: Initial Topology”Jamesons started deploying IPv6 in dual-stack mode in the datacenterConfigure Jamesons datacenter network as per the following requirements：Establish OSPFv3 adjacencies in Area 0 between SW3,SW4,R15 and R16Ensure that SW3 and S

43、W4 advertise the prefix of interface VLAN 100 as aninternal OSPF prefix while they may not establish an OSPF adjacency on thisinterfaceDo no use the command “ipv6 ospf ” anywhere in order to accomplish theprevious requirementInterface VLAN 100 of SW3 must be configured with default routepreference s

44、et to “medium”Interface VLAN 100 of SW4 must be configured with default routepreference set to “high”The intervalbetween Router Advertisement transmissions on VLAN 100must be set 10 seconds on both SW3 and SW4datacenter 不能有二类的 lsa（SW3 SW4 R15 R16 都修改网络类型）2.10 IPv6 Routing part 2 (1 points) 需求：Config

45、ure Jamesons datacenter network as per the following requirements:SW3 and SW4 must provide first-hop redundancy for hosts in VLAN 100 by sharing the virtual link-local address FE80:100:1. SW4 must be elected as the active router and SW3 must be elected the standby router. In case SW4 is down, SW3 mu

46、st take over the active role. If SW4 comes back online, it must automatically recover the active role from SW3. Ensure that HSRP Hello packets are exchanged every 5 second and that the standby takes over the active role if three consecutive Hello packets weremissed from the active.2.11 Multicast in

47、Jamesons(3 points) 需求:Refer to “Diagram 2: Initial Topology”.An application running on server R101 (which is located in Jamesons datacenter) usesmulticast to deliver specific traffic to users located in Jamesons branch network.Configure Jamesons network as per following requirements: Configure PIM S

48、parse-mode in R17, R19, R20 and R21. The interface Lo0 of R17 must be elected as the Rendez-Vous point for thewhole multicast groups All routers in the multicast domain are Cisco routers. Use a Ciscoproprietary mechanism for the RP election The source uses the group address 239.1.1.1 to send traffic

49、e to interestedreceivers Ensure that no spoke router（分支路由器） ever becomes the PIMDesignated Router and that they never move to the shortest-path tree but always remain on the shard-tree Ensure that the following test is successful:Section 3 VPN Technologies3.1 Jamesons Branch Offices(3 Points) 需求：Ref

50、er to “Diagram 2: Initial Topology”.Configure DMVPN Phase 3 in Jamesons branch network as perrequirements:the following Use the preconfigured interface Tunnel0 on all four routers in order to accomplish this task. R17 must be configured as the hub router. R19, R20 and R21 must be the spoke routers a

51、nd must participate in theNHRP information exchange.For cost optimization, ensure that the large majority of spoke-to-spoke traffic does not transit via the hubProtect the tunneled traffic by attaching the preconfigured IPsec profile to the tunnel interface on all tunnel end-points.Ensure that all s

52、poke establish an OSPF adjacency through the tunnel with the hub R17, without attempting to elect any Designated Router.Ensure that the following test are successful:3.2 Jamesons Pre-merge VPN（4 Points） 需求:Refer to the “Overall Scenario” and “Diagram 4: Pre-merge Topology”. Jamesons decided to enabl

53、e MPLS VPN in their network.They started configuring it but it is your responsibility to complete it and verify that it is fully functional.Configure Jamesons network as per the following requirements: Enable LDP in the core network as indicated in “Diagram 4: Pre-merge Topology”. Ensure that all LD

54、P routers use their interface Lo0 as their LDP router-id.R1 must reflect VPNv4 prefixes to all PEs.The datacenter （R3-R4）network must be connected to the VPN “DC” viaeBGP.The headquarter and main office of jamesons（R5 R6 R7 R8） network mustbe connected to the VPN “Corp” via eBGP.All six PEs must use

55、 a consistent format “ASN.YX” for the VPN route- distinguisher, where:ASN is the Autonomous System Number of the connected CE YX is any relevant number for the VPN site.Ensure that traffic destined to the datacenters server R101 is load-balancedbetween both PEs R3 and R4 as shown below;3.3-3.4 Merge

56、 phase 2:VPN(4 Points) 需求：Refer to the “Overall Scenario” and “Diagram 6: Merge Phase 2”.Jamesons and Jacobs are entering in the second phase of the merge and havedeployed two new border routers in their respective core network. Configure the network as per the following requirements: Jacobs headquarters and office ne