It's about my CCIE journey: RIP

Showing posts with label RIP. Show all posts

Thursday, December 8, 2011

Lab 7. RIP Filtering – Offset List

In RIP, offset list will add existing hop count
In EIGRP, offset list will add existing delay
To influence all the network use command 'offset-list 0'

R1(config-router)#do sh ip rout 3.3.3.3
Routing entry for 3.3.3.3/32
Known via "rip", distance 120, metric 2
Redistributing via rip
Last update from 12.12.12.2 on Serial0/0, 00:00:22 ago
Routing Descriptor Blocks:
* 12.12.12.2, from 12.12.12.2, 00:00:22 ago, via Serial0/0
Route metric is 2, traffic share count is 1

Now setting offset in R2 to add existing hopcount

R2(config)#router rip
R2(config-router)#offse
R2(config-router)#offset-list 1 out 13 s0/0
R2(config-router)#exi
R2(config)#access 1 permit host 3.3.3.3

R1(config-router)#do sh ip rout 3.3.3.3
Routing entry for 3.3.3.3/32
Known via "rip", distance 120, metric 15
Redistributing via rip
Last update from 12.12.12.2 on Serial0/0, 00:00:11 ago
Routing Descriptor Blocks:
* 12.12.12.2, from 12.12.12.2, 00:00:11 ago, via Serial0/0
Route metric is 15, traffic share count is 1

If we want 3.3.3.3 inaccessible from R1, so we can do by command ‘offset-list 1 out 14 s0/0’ in R2 so the metric will be 16. RIP allowed only 15 hop count.

R2(config)#router rip
R2(config-router)#offset-list 1 out 14 s0/0

R1(config-router)#do sh ip rout 3.3.3.3
% Network not in table

Lab 6. RIP Filtering – Administrative Distance

R1#
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface Serial0/0
ip address 12.12.12.1 255.255.255.0
!
router rip
version 2
network 1.0.0.0
network 12.0.0.0
no auto-summary

R2#
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
!
interface Serial0/0
ip address 12.12.12.2 255.255.255.0
!
router rip
version 2
network 2.0.0.0
network 12.0.0.0
network 23.0.0.0
no auto-summary

R3#
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.3 255.255.255.0
!
router rip
version 2
network 3.0.0.0
network 23.0.0.0
no auto-summary

Let's check the routing table

R1(config-router)#do sh ip rout
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/32 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Loopback0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 12.12.12.2, 00:00:10, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/2] via 12.12.12.2, 00:00:10, Serial0/0
23.0.0.0/24 is subnetted, 1 subnets
R 23.23.23.0 [120/1] via 12.12.12.2, 00:00:10, Serial0/0
12.0.0.0/24 is subnetted, 1 subnets
C 12.12.12.0 is directly connected, Serial0/0

R1(config-router)#do sh ip rout 3.3.3.3
Routing entry for 3.3.3.3/32
Known via "rip", distance 120, metric 2
Redistributing via rip
Last update from 12.12.12.2 on Serial0/0, 00:00:19 ago
Routing Descriptor Blocks:
* 12.12.12.2, from 12.12.12.2, 00:00:19 ago, via Serial0/0
Route metric is 2, traffic share count is 1

R1(config-router)#do ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/41/80 ms

Then we will make AD for 3.3.3.3 to 255 in order to be unaccessible to 3.3.3.3

R1(config-router)#distance 255 0.0.0.0 255.255.255.255 ?
<1-99> IP Standard access list number
<1300-1999> IP Standard expanded access list number
WORD Standard access-list name

R1(config-router)#distance 255 0.0.0.0 255.255.255.255 1
R1(config-router)#exi
R1(config)#access 1 permit host 3.3.3.3

Check the routing table. 3.3.3.3 should not be in routing table and can not be ping.

R1(config)#do clear ip rout *
R1(config)#do sh ip rout
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/32 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Loopback0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 12.12.12.2, 00:00:07, Serial0/0
23.0.0.0/24 is subnetted, 1 subnets
R 23.23.23.0 [120/1] via 12.12.12.2, 00:00:07, Serial0/0
12.0.0.0/24 is subnetted, 1 subnets
C 12.12.12.0 is directly connected, Serial0/0

R1(config)#do ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

R1(config)#do sh ip rip database 3.3.3.3 255.255.255.255
%Route not in database

Lab 5. RIP – Filtering – Standard ACL

R1#
interface Loopback1
ip address 10.0.0.1 255.255.255.255
!
interface Loopback2
ip address 10.0.0.2 255.255.255.255
!
interface Loopback3
ip address 10.0.0.3 255.255.255.255
!
interface Loopback4
ip address 10.0.0.4 255.255.255.255
!
interface Loopback5
ip address 10.0.0.5 255.255.255.255
!
interface Loopback6
ip address 10.0.0.6 255.255.255.255
!
router rip
version 2
network 10.0.0.0
network 12.0.0.0
no auto-summary

R2#
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
!
interface Serial0/0
ip address 12.12.12.2 255.255.255.0
!
router rip
version 2
network 2.0.0.0
network 12.0.0.0
network 23.0.0.0
no auto-summary

R3#
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.3 255.255.255.0
!
router rip
version 2
network 3.0.0.0
network 23.0.0.0
no auto-summary

Let's check the routing table

R2(config-router)#do sh ip rou rip
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 23.23.23.3, 00:00:05, FastEthernet0/0
10.0.0.0/32 is subnetted, 6 subnets
R 10.0.0.2 [120/1] via 12.12.12.1, 00:00:01, Serial0/0
R 10.0.0.3 [120/1] via 12.12.12.1, 00:00:01, Serial0/0
R 10.0.0.1 [120/1] via 12.12.12.1, 00:00:01, Serial0/0
R 10.0.0.6 [120/1] via 12.12.12.1, 00:00:01, Serial0/0
R 10.0.0.4 [120/1] via 12.12.12.1, 00:00:01, Serial0/0
R 10.0.0.5 [120/1] via 12.12.12.1, 00:00:01, Serial0/0

R3#sh ip rou rip
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:07, FastEthernet0/0
10.0.0.0/32 is subnetted, 6 subnets
R 10.0.0.2 [120/2] via 23.23.23.2, 00:00:07, FastEthernet0/0
R 10.0.0.3 [120/2] via 23.23.23.2, 00:00:07, FastEthernet0/0
R 10.0.0.1 [120/2] via 23.23.23.2, 00:00:07, FastEthernet0/0
R 10.0.0.6 [120/2] via 23.23.23.2, 00:00:07, FastEthernet0/0
R 10.0.0.4 [120/2] via 23.23.23.2, 00:00:07, FastEthernet0/0
R 10.0.0.5 [120/2] via 23.23.23.2, 00:00:07, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:07, FastEthernet0/0

Then we will do filtering in router R2 that only even IP loopback advertized by R1.

R2(config-router)#distribute 1 in s0/0
R2(config-router)#ex
R2(config)#access 1 permit 0.0.0.0 255.255.255.254

Let's check the routing table again

R2(config)#do clear ip rout *
R2(config)#do sh ip rou rip
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 23.23.23.3, 00:00:04, FastEthernet0/0
10.0.0.0/32 is subnetted, 3 subnets
R 10.0.0.2 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
R 10.0.0.6 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
R 10.0.0.4 [120/1] via 12.12.12.1, 00:00:02, Serial0/0

R3#clear ip rout *
R3#sh ip rou rip
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:00, FastEthernet0/0
10.0.0.0/32 is subnetted, 3 subnets
R 10.0.0.2 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.0.0.6 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.0.0.4 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:00, FastEthernet0/0

Now, we only want odd IP loopback in R2.

R2(config)#no access 1 permit 0.0.0.0 255.255.255.254
R2(config)#access 1 permit 0.0.0.1 255.255.255.254

Let's check again the routing table

R2(config)#do clear ip rou *
R2(config)#do sh ip rou rip
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 23.23.23.3, 00:00:04, FastEthernet0/0
10.0.0.0/32 is subnetted, 3 subnets
R 10.0.0.3 [120/1] via 12.12.12.1, 00:00:04, Serial0/0
R 10.0.0.1 [120/1] via 12.12.12.1, 00:00:04, Serial0/0
R 10.0.0.5 [120/1] via 12.12.12.1, 00:00:04, Serial0/0

R3#clear ip rout *
R3#sh ip rou rip
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:03, FastEthernet0/0
10.0.0.0/32 is subnetted, 3 subnets
R 10.0.0.3 [120/2] via 23.23.23.2, 00:00:03, FastEthernet0/0
R 10.0.0.1 [120/2] via 23.23.23.2, 00:00:03, FastEthernet0/0
R 10.0.0.5 [120/2] via 23.23.23.2, 00:00:03, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:03, FastEthernet0/0

Lab 4. RIP Convergence Timers

Please use basic configuration as the same as http://pursuingmydestiny.blogspot.com/2011/12/lab-3-rip-summary-address.html.
RIP have default timers: sending update every 30 second, invalid timer after 180 second, hold down timer every180 second, and flush timer every 240 second.

R1(config-router)#do sh ip pro
Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 14 seconds
Invalid after 180 seconds, hold down 180, flushed after 240
Redistributing: rip

Let's change the timer R1 and R2

R1(config-router)#timers basic 10 60 60 80
R2(config-router)#timers basic 10 60 60 80

Verify the timer

R1(config-router)#do sh ip pro
Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 10 seconds, next due in 9 seconds
Invalid after 60 seconds, hold down 60, flushed after 80

R2#sh ip pro
Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 10 seconds, next due in 4 seconds
Invalid after 60 seconds, hold down 60, flushed after 80

R3#sh ip pro
Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 12 seconds
Invalid after 180 seconds, hold down 180, flushed after 240

R3#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!

R2 still have default timers, so it need ‘ip rip advertise 30’ in interface to R3 in order to have the same RIP timer with R3.

R2(config)#int fa0/0
R2(config-if)#ip rip advertise 30

Lab 3. RIP Summary Address

R1#
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface Loopback10
ip address 10.0.0.1 255.255.255.0
!
interface Loopback11
ip address 10.0.1.1 255.255.255.0
!
interface Loopback12
ip address 10.0.2.1 255.255.255.0
!
interface Loopback13
ip address 10.0.3.1 255.255.255.0
!
interface Loopback14
ip address 10.4.0.1 255.255.255.0
!
interface Loopback15
ip address 10.5.0.1 255.255.255.0
!
interface Loopback16
ip address 10.6.0.1 255.255.255.0
!
interface Loopback17
ip address 10.7.0.1 255.255.255.0
!
interface Loopback18
ip address 10.8.0.1 255.255.255.0
!
interface Loopback20
ip address 11.0.0.1 255.255.255.0
!
interface Loopback21
ip address 11.0.1.1 255.255.255.0
!
interface Loopback22
ip address 11.0.2.1 255.255.255.0
!
interface Loopback23
ip address 11.0.3.1 255.255.255.0
!
interface Loopback24
ip address 11.0.4.1 255.255.255.0
!
interface Loopback31
ip address 12.0.0.1 255.255.255.255
!
interface Loopback32
ip address 12.0.0.2 255.255.255.255
!
interface Loopback33
ip address 12.0.0.3 255.255.255.255
!
interface Loopback34
ip address 12.0.0.4 255.255.255.255
!
interface Serial0/0
ip address 12.12.12.1 255.255.255.0
clock rate 2000000
!
router rip
version 2
network 1.0.0.0
network 10.0.0.0
network 11.0.0.0
network 12.0.0.0
no auto-summary

R2#
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
ip address 12.12.12.2 255.255.255.0
clock rate 2000000
!
router rip
version 2
network 2.0.0.0
network 12.0.0.0
network 23.0.0.0
no auto-summary

R3#
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.3 255.255.255.0
!
router rip
version 2
network 3.0.0.0
network 23.0.0.0
no auto-summary

Let's check the routing table

R2#sh ip rout rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 23.23.23.3, 00:00:06, FastEthernet0/0
10.0.0.0/24 is subnetted, 9 subnets
R 10.8.0.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.0.2.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.0.3.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.0.0.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.0.1.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.6.0.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.7.0.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.4.0.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 10.5.0.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
11.0.0.0/24 is subnetted, 5 subnets
R 11.0.3.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 11.0.2.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 11.0.1.0 [120/1] via 12.12.12.1, 00:00:09, Serial0/0
R 11.0.0.0 [120/1] via 12.12.12.1, 00:00:11, Serial0/0
R 11.0.4.0 [120/1] via 12.12.12.1, 00:00:11, Serial0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/1] via 12.12.12.1, 00:00:11, Serial0/0
R 12.0.0.1/32 [120/1] via 12.12.12.1, 00:00:11, Serial0/0
R 12.0.0.2/32 [120/1] via 12.12.12.1, 00:00:12, Serial0/0
R 12.0.0.3/32 [120/1] via 12.12.12.1, 00:00:12, Serial0/0

R3#sh ip rout rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:12, FastEthernet0/0
10.0.0.0/24 is subnetted, 9 subnets
R 10.8.0.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.0.2.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.0.3.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.0.0.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.0.1.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.6.0.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.7.0.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.4.0.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 10.5.0.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
11.0.0.0/24 is subnetted, 5 subnets
R 11.0.3.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 11.0.2.0 [120/2] via 23.23.23.2, 00:00:12, FastEthernet0/0
R 11.0.1.0 [120/2] via 23.23.23.2, 00:00:14, FastEthernet0/0
R 11.0.0.0 [120/2] via 23.23.23.2, 00:00:14, FastEthernet0/0
R 11.0.4.0 [120/2] via 23.23.23.2, 00:00:14, FastEthernet0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/2] via 23.23.23.2, 00:00:14, FastEthernet0/0
R 12.12.12.0/24 [120/1] via 23.23.23.2, 00:00:14, FastEthernet0/0
R 12.0.0.1/32 [120/2] via 23.23.23.2, 00:00:16, FastEthernet0/0
R 12.0.0.2/32 [120/2] via 23.23.23.2, 00:00:16, FastEthernet0/0
R 12.0.0.3/32 [120/2] via 23.23.23.2, 00:00:16, FastEthernet0/0

Now, let's summary address RIP in R1 so other router just get the summary

R1(config-if)#int s0/0
R1(config-if)#ip summ rip 10.0.0.0 255.0.0.0
R1(config-if)#ip summ rip 11.0.0.0 255.0.0.0

R2#clear ip route *
R2#sh ip rout rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 23.23.23.3, 00:00:02, FastEthernet0/0
R 10.0.0.0/8 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
R 11.0.0.0/8 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
R 12.0.0.1/32 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
R 12.0.0.2/32 [120/1] via 12.12.12.1, 00:00:02, Serial0/0
R 12.0.0.3/32 [120/1] via 12.12.12.1, 00:00:02, Serial0/0

R3#clear ip rou *
R3#sh ip rout rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 10.0.0.0/8 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 11.0.0.0/8 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 12.12.12.0/24 [120/1] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 12.0.0.1/32 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 12.0.0.2/32 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 12.0.0.3/32 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0

Lab 2. RIP Split Horizon

Split horizon prevent the route sent from other router to router sender.

R1#
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface Serial0/0
no ip address
encapsulation frame-relay
clock rate 2000000
!
interface Serial0/0.123 multipoint
ip address 123.123.123.1 255.255.255.0
snmp trap link-status
frame-relay map ip 123.123.123.3 103 broadcast
frame-relay map ip 123.123.123.2 102 broadcast
!
router rip
version 2
network 0.0.0.0
no auto-summary

R2#
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface Serial0/0
ip address 123.123.123.2 255.255.255.0
encapsulation frame-relay
frame-relay map ip 123.123.123.1 201 broadcast
frame-relay map ip 123.123.123.3 201
!
router rip
version 2
network 0.0.0.0
no auto-summary

R3#
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface Serial0/0
ip address 123.123.123.3 255.255.255.0
encapsulation frame-relay
frame-relay map ip 123.123.123.1 301 broadcast
frame-relay map ip 123.123.123.2 301
!
router rip
version 2
network 0.0.0.0
no auto-summary

Check frame relay mapping

R1(config-subif)#do sh fram map
Serial0/0.123 (up): ip 123.123.123.2 dlci 102(0x66,0x1860), static,
broadcast,
CISCO, status defined, active
Serial0/0.123 (up): ip 123.123.123.3 dlci 103(0x67,0x1870), static,
broadcast,
CISCO, status defined, active

R2#sh fram map
Serial0/0 (up): ip 123.123.123.1 dlci 201(0xC9,0x3090), static,
broadcast,
CISCO, status defined, active
Serial0/0 (up): ip 123.123.123.3 dlci 201(0xC9,0x3090), static,
CISCO, status defined, active

R3#sh fram map
Serial0/0 (up): ip 123.123.123.1 dlci 301(0x12D,0x48D0), static,
broadcast,
CISCO, status defined, active
Serial0/0 (up): ip 123.123.123.2 dlci 301(0x12D,0x48D0), static,
CISCO, status defined, active

Check the routing table and the ping should ok from all router

R1(config-subif)#do sh ip rout rip
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 123.123.123.2, 00:00:08, Serial0/0.123
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 123.123.123.3, 00:00:15, Serial0/0.123

R1(config-subif)#do ping 2.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/17/40 ms

R1(config-subif)#do ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/30/64 ms

R2#sh ip route rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 123.123.123.1, 00:00:21, Serial0/0

R2#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/19/60 ms

R2#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

R3#sh ip rout rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 123.123.123.1, 00:00:22, Serial0/0

R3#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/23/44 ms

R3#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

R3#ping 2.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

We can see R1 have all routing table R2 and R3. R2 have only get RIP from R1 and R3 also have only RIP from R1. So R2 and R3 can not talk each other. It's because split horizon. Check split horizon

R1(config-subif)#do sh ip int s0/0 | i Split
R1(config-subif)#do sh ip int s0/0.123 | i Split
Split horizon is enabled

R2#sh ip int s0/0 | i Split
Split horizon is disabled

R3#sh ip int s0/0 | i Split
Split horizon is disabled

Ok, now let's disable split horizon in R1.

R1(config-subif)#int s0/0.123
R1(config-subif)#no ip split-horizon
R1(config-subif)#do clear ip route *

Let's check routing table in R2 and R3

R2#sh ip route rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 123.123.123.1, 00:00:25, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/2] via 123.123.123.3, 00:00:25, Serial0/0

R3#sh ip rout rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 123.123.123.1, 00:00:06, Serial0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/2] via 123.123.123.2, 00:00:06, Serial0/0

R3#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/46/152 ms

R3#ping 2.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/43/144 ms

Lab 1. RIP Authentication

Now we did various types of Frame Relay. Let's move to RIP. You can go to for RIP summary http://pursuingmydestiny.blogspot.com/2011/12/day-2-ccie-bootcamp.html

R1#
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 13.13.13.1 255.255.255.0
!
interface Serial0/0
ip address 12.12.12.1 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
!
router rip
version 2
network 0.0.0.0
no auto-summary
!

R2#
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
ip rip authentication mode text --- > by default
ip rip authentication key-chain RIP
!
interface Serial0/0
ip address 12.12.12.2 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
!
router rip
version 2
network 0.0.0.0
no auto-summary

R3#
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
ip address 13.13.13.3 255.255.255.0
!
interface FastEthernet0/1
ip address 23.23.23.3 255.255.255.0
ip rip authentication key-chain RIP
!
router rip
version 2
network 0.0.0.0
no auto-summary

Now, let's check debugging for authentication. RIP support authentication using clear text and MD5

R1#debug ip rip
RIP protocol debugging is on
R1#
*Mar 1 00:14:57.095: RIP: received packet with MD5 authentication
*Mar 1 00:14:57.095: RIP: received v2 update from 12.12.12.2 on Serial0/0
*Mar 1 00:14:57.099: 2.2.2.2/32 via 0.0.0.0 in 1 hops
*Mar 1 00:14:57.099: 3.3.3.3/32 via 0.0.0.0 in 2 hops
*Mar 1 00:14:57.103: 23.23.23.0/24 via 0.0.0.0 in 1 hops

R3(config)#do debug ip rip
RIP protocol debugging is on
*Mar 1 00:16:27.771: RIP: received packet with text authentication CISCO
*Mar 1 00:16:27.775: RIP: received v2 update from 23.23.23.2 on FastEthernet0/1
*Mar 1 00:16:27.775: 1.1.1.1/32 via 0.0.0.0 in 2 hops
*Mar 1 00:16:27.779: 2.2.2.2/32 via 0.0.0.0 in 1 hops
*Mar 1 00:16:27.783: 12.12.12.0/24 via 0.0.0.0 in 1 hops

Let's check the routing table and ping

R1#sh ip rout
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/32 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Loopback0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 12.12.12.2, 00:00:08, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 13.13.13.3, 00:00:22, FastEthernet0/0
23.0.0.0/24 is subnetted, 1 subnets
R 23.23.23.0 [120/1] via 13.13.13.3, 00:00:22, FastEthernet0/0
[120/1] via 12.12.12.2, 00:00:08, Serial0/0
12.0.0.0/24 is subnetted, 1 subnets
C 12.12.12.0 is directly connected, Serial0/0
13.0.0.0/24 is subnetted, 1 subnets
C 13.13.13.0 is directly connected, FastEthernet0/0

R1#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 28/44/76 ms
R1#ping 2.2.2.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/29/76 ms

Monday, December 5, 2011

Day-2 CCIE Bootcamp Indonesia

In day-2, we learnt about RIP & EIGRP stuff. In the night we have troubleshoot section regarding this subject.

RIP use hop count for metric and EIGRP use bandwidth & delay for metric.
RIP have 2 version i.e. RIP and RIPv2.
The different is RIP is classfull and update routing using broadcast (255.255.255.255) and RIPv2 is classless and update using multicast (224.0.0.9).
RIP use UDP port 520 for routing update to other router.
Here the subject in RIP that we focus on:
1. Update
2. Metric
3. Split Horizon
4. Security
5. Summary
6. Filtering
7. Default Route
8. Timers

I will go one by one for detail lab to practice the command.

EIGRP use multicast (224.0.0.10) for update. EIGRP has best route and backup route if best route is unavailable. The term for that is successor (best path) and feasible successor (backup best path). EIGRP is only support by md5 authentication. Such as RIP, redistribution from other dynamic IGP in EIGRP need metric. EIGRP support equal and unequal load balancing. By default, equal load balancing is enable to 4 links and maximum is 6 links. Unequal load balancing use by command 'variance' which biggest FD / lowest FD. FD is link from router to next hop router + AD (next hop router to destination).

Then around 9 PM, we had troubleshoot ticket about EIGRP & RIP. I just finished 4 questions from 10. Oh God, please help me...

My Countingdown

Thursday, December 8, 2011

Monday, December 5, 2011