Lecture Notes for CCNP Enterprise: Core Networking (ENCOR) v8 Lab Manual, 2nd Edition
Lecture Notes for CCNP Enterprise: Core Networking (ENCOR) v8 Lab Manual, 2nd Edition helps you review course material quickly and effectively.
Zoey Brown
Contributor
4.9
123
about 2 months ago
Preview (31 of 1089)
Sign in to access the full document!
CCNP Enterprise: Core
Networking (ENCOR) Lab Manual
Version 8
Instructor’s Answer Key
Cisco Networking Academy
Networking (ENCOR) Lab Manual
Version 8
Instructor’s Answer Key
Cisco Networking Academy
iv CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Contents
Chapter 1 Packet Forwarding 1
1.1.2 Lab - Implement Inter-VLAN Routing (Instructor Version) 1
Topology 1
Addressing Table 1
Objectives 2
Background/Scenario 2
Required Resources 2
Instructions 2
Part 1: Build the Network and Configure Basic Device Settings 2
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3
Switch 4
Part 3: Configure and Verify Router-based Inter-VLAN Routing 6
Part 4: Examine CAM and CEF Details 8
Router Interface Summary Table 10
Device Configs - Final 11
Router R1 11
Router R3 13
Switch D1 15
Switch D2 20
Chapter 2 Spanning Tree Protocol 25
2.1.2 Lab - Observe STP Topology Changes and Implement RSTP (Instructor
Version) 25
Topology 25
Addressing Table 25
Objectives 25
Background/Scenario 25
Required Resources 26
Instructions 26
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 26
Part 2: Discover the Default Spanning Tree 28
Part 3: Implement and Observe Rapid Spanning Tree Protocol 33
Device Configs - Final 35
Switch D1 35
Switch D2 39
Switch A1 44
Contents
Chapter 1 Packet Forwarding 1
1.1.2 Lab - Implement Inter-VLAN Routing (Instructor Version) 1
Topology 1
Addressing Table 1
Objectives 2
Background/Scenario 2
Required Resources 2
Instructions 2
Part 1: Build the Network and Configure Basic Device Settings 2
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3
Switch 4
Part 3: Configure and Verify Router-based Inter-VLAN Routing 6
Part 4: Examine CAM and CEF Details 8
Router Interface Summary Table 10
Device Configs - Final 11
Router R1 11
Router R3 13
Switch D1 15
Switch D2 20
Chapter 2 Spanning Tree Protocol 25
2.1.2 Lab - Observe STP Topology Changes and Implement RSTP (Instructor
Version) 25
Topology 25
Addressing Table 25
Objectives 25
Background/Scenario 25
Required Resources 26
Instructions 26
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 26
Part 2: Discover the Default Spanning Tree 28
Part 3: Implement and Observe Rapid Spanning Tree Protocol 33
Device Configs - Final 35
Switch D1 35
Switch D2 39
Switch A1 44
iv CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Contents
Chapter 1 Packet Forwarding 1
1.1.2 Lab - Implement Inter-VLAN Routing (Instructor Version) 1
Topology 1
Addressing Table 1
Objectives 2
Background/Scenario 2
Required Resources 2
Instructions 2
Part 1: Build the Network and Configure Basic Device Settings 2
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3
Switch 4
Part 3: Configure and Verify Router-based Inter-VLAN Routing 6
Part 4: Examine CAM and CEF Details 8
Router Interface Summary Table 10
Device Configs - Final 11
Router R1 11
Router R3 13
Switch D1 15
Switch D2 20
Chapter 2 Spanning Tree Protocol 25
2.1.2 Lab - Observe STP Topology Changes and Implement RSTP (Instructor
Version) 25
Topology 25
Addressing Table 25
Objectives 25
Background/Scenario 25
Required Resources 26
Instructions 26
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 26
Part 2: Discover the Default Spanning Tree 28
Part 3: Implement and Observe Rapid Spanning Tree Protocol 33
Device Configs - Final 35
Switch D1 35
Switch D2 39
Switch A1 44
Contents
Chapter 1 Packet Forwarding 1
1.1.2 Lab - Implement Inter-VLAN Routing (Instructor Version) 1
Topology 1
Addressing Table 1
Objectives 2
Background/Scenario 2
Required Resources 2
Instructions 2
Part 1: Build the Network and Configure Basic Device Settings 2
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3
Switch 4
Part 3: Configure and Verify Router-based Inter-VLAN Routing 6
Part 4: Examine CAM and CEF Details 8
Router Interface Summary Table 10
Device Configs - Final 11
Router R1 11
Router R3 13
Switch D1 15
Switch D2 20
Chapter 2 Spanning Tree Protocol 25
2.1.2 Lab - Observe STP Topology Changes and Implement RSTP (Instructor
Version) 25
Topology 25
Addressing Table 25
Objectives 25
Background/Scenario 25
Required Resources 26
Instructions 26
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 26
Part 2: Discover the Default Spanning Tree 28
Part 3: Implement and Observe Rapid Spanning Tree Protocol 33
Device Configs - Final 35
Switch D1 35
Switch D2 39
Switch A1 44
v
Chapter 3 Advanced Spanning Tree Tuning 47
3.1.2 Lab - Implement Advanced STP Modifications and Mechanisms
(Instructor Version) 47
Topology 47
Addressing Table 47
Objectives 47
Background/Scenario 48
Required Resources 48
Instructions 48
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 48
Part 2: Implement and Observe Various Topology Tuning Methods 51
Part 3: Implement and Observe Various Topology Protection
Mechanisms 59
Device Configs - Final 67
Switch D1 67
Switch D2 72
Switch A1 76
Chapter 4 Multiple Spanning Tree Protocol 81
4.1.2 Lab - Implement MST (Instructor Version) 81
Topology 81
Objectives 81
Background/Scenario 81
Required Resources 82
Instructions 82
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 82
Part 2: Implement and Observe MST 84
Part 3: Configure, Tune and Verify Basic MST Operation 86
Device Configs - Final 94
Switch D1 94
Switch D2 99
Switch A1 104
Chapter 5 VLAN Trunks and EtherChannel Bundles 107
5.1.2 Lab - Implement VTP (Instructor Version) 107
Topology 107
Objectives 107
Background/Scenario 107
Required Resources 109
Instructions 109
Part 1: Build the Network, Configure Basic Device Settings and
Interface Addressing 109
Chapter 3 Advanced Spanning Tree Tuning 47
3.1.2 Lab - Implement Advanced STP Modifications and Mechanisms
(Instructor Version) 47
Topology 47
Addressing Table 47
Objectives 47
Background/Scenario 48
Required Resources 48
Instructions 48
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 48
Part 2: Implement and Observe Various Topology Tuning Methods 51
Part 3: Implement and Observe Various Topology Protection
Mechanisms 59
Device Configs - Final 67
Switch D1 67
Switch D2 72
Switch A1 76
Chapter 4 Multiple Spanning Tree Protocol 81
4.1.2 Lab - Implement MST (Instructor Version) 81
Topology 81
Objectives 81
Background/Scenario 81
Required Resources 82
Instructions 82
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 82
Part 2: Implement and Observe MST 84
Part 3: Configure, Tune and Verify Basic MST Operation 86
Device Configs - Final 94
Switch D1 94
Switch D2 99
Switch A1 104
Chapter 5 VLAN Trunks and EtherChannel Bundles 107
5.1.2 Lab - Implement VTP (Instructor Version) 107
Topology 107
Objectives 107
Background/Scenario 107
Required Resources 109
Instructions 109
Part 1: Build the Network, Configure Basic Device Settings and
Interface Addressing 109
Loading page 4...
vi CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Part 2: Implement and Observe a VTPv2 Domain. 110
Part 3: Implement and Observe a VTPv3 Domain 117
Device Configs - Final 122
Switch D1 122
Switch D2 127
Switch A1 132
5.1.3 Lab - Implement EtherChannel (Instructor Version) 135
Topology 135
Objectives 135
Background/Scenario 135
Required Resources 136
Instructions 136
Part 1: Build the Network and Explore Dynamic Trunking
Protocol 136
Part 2: Configure Static EtherChannel 140
Part 3: Implement EtherChannel Using PAgP 142
Part 4: Implement EtherChannel using LACP 144
Device Configs - Final 146
Switch D1 146
Switch D2 151
Switch A1 156
5.1.4 Lab - Tune and Optimize EtherChannel Operations (Instructor
Version) 161
Topology 161
Objectives 161
Background/Scenario 161
Required Resources 161
Part 1: Build the Network and Configure Basic Device Settings 162
Part 2: Tune LACP-based EtherChannels 163
Part 3: Explore EtherChannel Load Balancing 165
Switch D1 165
Switch D2 170
Chapter 6 IP Routing Essentials 177
6.1.2 Lab - Investigate Static Routes (Instructor Version) 177
Topology 177
Addressing Table 177
Objectives 178
Background/Scenario 178
Required Resources 178
Instructions 178
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 178
Part 2: Configure and Investigate IPv4 Static Routes 181
Part 2: Implement and Observe a VTPv2 Domain. 110
Part 3: Implement and Observe a VTPv3 Domain 117
Device Configs - Final 122
Switch D1 122
Switch D2 127
Switch A1 132
5.1.3 Lab - Implement EtherChannel (Instructor Version) 135
Topology 135
Objectives 135
Background/Scenario 135
Required Resources 136
Instructions 136
Part 1: Build the Network and Explore Dynamic Trunking
Protocol 136
Part 2: Configure Static EtherChannel 140
Part 3: Implement EtherChannel Using PAgP 142
Part 4: Implement EtherChannel using LACP 144
Device Configs - Final 146
Switch D1 146
Switch D2 151
Switch A1 156
5.1.4 Lab - Tune and Optimize EtherChannel Operations (Instructor
Version) 161
Topology 161
Objectives 161
Background/Scenario 161
Required Resources 161
Part 1: Build the Network and Configure Basic Device Settings 162
Part 2: Tune LACP-based EtherChannels 163
Part 3: Explore EtherChannel Load Balancing 165
Switch D1 165
Switch D2 170
Chapter 6 IP Routing Essentials 177
6.1.2 Lab - Investigate Static Routes (Instructor Version) 177
Topology 177
Addressing Table 177
Objectives 178
Background/Scenario 178
Required Resources 178
Instructions 178
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 178
Part 2: Configure and Investigate IPv4 Static Routes 181
Loading page 5...
vii
Part 3: Configure and Investigate IPv6 Static Routes 187
Part 4: Complete Static Routing Challenge 190
Router Interface Summary Table 192
Device Configs - Final 193
Router R1 193
Router R2 195
Router R3 197
6.1.3 Lab - Implement VRF-Lite (Instructor Version) 200
Topology 200
Addressing Table 200
Objectives 201
Background/Scenario 201
Required Resources 201
Part 1: Build the Network and Configure Basic Device Settings 201
Part 2: Configure and Verify VRF and Interface Addressing 206
Part 3: Configure and Verify Static Routing for Reachability Inside
Each VRF 208
Router Interface Summary Table 211
Device Configs - Final 211
Router R1 211
Router R2 214
Router R3 216
Switch D1 218
Switch D2 223
Switch A1 228
Chapter 7 EIGRP 233
There are no labs in this chapter
Chapter 8 OSPF 235
8.1.2 Lab - Implement Single-Area OSPFv2 (Instructor Version) 235
Topology 235
Addressing Table 235
Objectives 236
Background/Scenario 236
Required Resources 236
Instructions 237
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 237
Part 2: Configure Single-Area OSPFv2 239
Part 3: Configure and Verify the Advertising of a Default Route 246
Part 4: Implement OSPF Network Optimizing Features 247
Part 5: DR and BDR Placement 253
Part 3: Configure and Investigate IPv6 Static Routes 187
Part 4: Complete Static Routing Challenge 190
Router Interface Summary Table 192
Device Configs - Final 193
Router R1 193
Router R2 195
Router R3 197
6.1.3 Lab - Implement VRF-Lite (Instructor Version) 200
Topology 200
Addressing Table 200
Objectives 201
Background/Scenario 201
Required Resources 201
Part 1: Build the Network and Configure Basic Device Settings 201
Part 2: Configure and Verify VRF and Interface Addressing 206
Part 3: Configure and Verify Static Routing for Reachability Inside
Each VRF 208
Router Interface Summary Table 211
Device Configs - Final 211
Router R1 211
Router R2 214
Router R3 216
Switch D1 218
Switch D2 223
Switch A1 228
Chapter 7 EIGRP 233
There are no labs in this chapter
Chapter 8 OSPF 235
8.1.2 Lab - Implement Single-Area OSPFv2 (Instructor Version) 235
Topology 235
Addressing Table 235
Objectives 236
Background/Scenario 236
Required Resources 236
Instructions 237
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 237
Part 2: Configure Single-Area OSPFv2 239
Part 3: Configure and Verify the Advertising of a Default Route 246
Part 4: Implement OSPF Network Optimizing Features 247
Part 5: DR and BDR Placement 253
Loading page 6...
viii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Router Interface Summary Table 256
Device Configs - Final 256
Router R1 256
Switch D1 258
Switch D2 262
Chapter 9 Advanced OSPF 267
9.1.2 Lab - Implement Multiarea OSPFv2 (Instructor Version) 267
Topology 267
Addressing Table 267
Objectives 268
Background/Scenario 268
Required Resources 268
Instructions 269
Part 1: Build the Network and Configure Basic Device Settings and Interface
Addressing 269
Part 2: Configure Multiarea OSPFv2 271
Part 3: Exploring Link-State Announcements 285
Router Interface Summary Table 293
Device Configs - Final 293
Router R1 293
Router R2 295
Router R3 297
Switch D1 298
Switch D2 303
9.1.3 Lab - OSPFv2 Route Summarization and Filtering (Instructor Version) 308
Topology 308
Addressing Table 308
Objectives 309
Background/Scenario 309
Required Resources 310
Instructions 310
Part 1: Build the Network, Configure Basic Device Settings and Routing 310
Part 2: OSPFv2 Route Summarization 318
Part 3: OSPFv2 Route Filtering 322
Router Interface Summary Table 325
Device Configs – Final 325
Router R1 325
Router R2 327
Router R3 329
Switch D1 331
Switch D2 335
Router Interface Summary Table 256
Device Configs - Final 256
Router R1 256
Switch D1 258
Switch D2 262
Chapter 9 Advanced OSPF 267
9.1.2 Lab - Implement Multiarea OSPFv2 (Instructor Version) 267
Topology 267
Addressing Table 267
Objectives 268
Background/Scenario 268
Required Resources 268
Instructions 269
Part 1: Build the Network and Configure Basic Device Settings and Interface
Addressing 269
Part 2: Configure Multiarea OSPFv2 271
Part 3: Exploring Link-State Announcements 285
Router Interface Summary Table 293
Device Configs - Final 293
Router R1 293
Router R2 295
Router R3 297
Switch D1 298
Switch D2 303
9.1.3 Lab - OSPFv2 Route Summarization and Filtering (Instructor Version) 308
Topology 308
Addressing Table 308
Objectives 309
Background/Scenario 309
Required Resources 310
Instructions 310
Part 1: Build the Network, Configure Basic Device Settings and Routing 310
Part 2: OSPFv2 Route Summarization 318
Part 3: OSPFv2 Route Filtering 322
Router Interface Summary Table 325
Device Configs – Final 325
Router R1 325
Router R2 327
Router R3 329
Switch D1 331
Switch D2 335
Loading page 7...
ix
Chapter 10 OSPFv3 341
10.1.2 Lab - Implement Multiarea OSPFv3 (Instructor Version) 341
Topology 341
Addressing Table 341
Objectives 342
Background/Scenario 342
Required Resources 342
Instructions 343
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 343
Part 2: Configure Traditional OSPFv3 for IPv6 on D1 345
Part 3: Configure OSPFv3 for AF IPv4 and AF IPv6 347
Part 4: Verify OSPFv3 351
Part 5: Tune OSPFv3 357
Router Interface Summary Table 359
Device Configs - Final 360
Router R1 360
Router R2 362
Router R3 364
Switch D1 366
Switch D2 370
Chapter 11 BGP 377
11.1.2 Lab - Implement eBGP for IPv4 (Instructor Version) 377
Topology 377
Addressing Table 377
Objectives 378
Background/Scenario 378
Required Resources 378
Instructions 378
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 378
Part 2: Configure and Verify eBGP for IPv4 on all Routers 380
Part 3: Configure and Verify Route Summarization and Atomic
Aggregate 387
Part 4: Configure and Verify Route Summarization with Atomic
Aggregate and AS-Set 390
Part 5: Configure and Verify the Advertising of a Default Route 392
Router Interface Summary Table 392
Device Configs - Final 393
Router R1 393
Router R2 395
Router R3 397
Chapter 10 OSPFv3 341
10.1.2 Lab - Implement Multiarea OSPFv3 (Instructor Version) 341
Topology 341
Addressing Table 341
Objectives 342
Background/Scenario 342
Required Resources 342
Instructions 343
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 343
Part 2: Configure Traditional OSPFv3 for IPv6 on D1 345
Part 3: Configure OSPFv3 for AF IPv4 and AF IPv6 347
Part 4: Verify OSPFv3 351
Part 5: Tune OSPFv3 357
Router Interface Summary Table 359
Device Configs - Final 360
Router R1 360
Router R2 362
Router R3 364
Switch D1 366
Switch D2 370
Chapter 11 BGP 377
11.1.2 Lab - Implement eBGP for IPv4 (Instructor Version) 377
Topology 377
Addressing Table 377
Objectives 378
Background/Scenario 378
Required Resources 378
Instructions 378
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 378
Part 2: Configure and Verify eBGP for IPv4 on all Routers 380
Part 3: Configure and Verify Route Summarization and Atomic
Aggregate 387
Part 4: Configure and Verify Route Summarization with Atomic
Aggregate and AS-Set 390
Part 5: Configure and Verify the Advertising of a Default Route 392
Router Interface Summary Table 392
Device Configs - Final 393
Router R1 393
Router R2 395
Router R3 397
Loading page 8...
x CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
11.1.3 Lab - Implement MP-BGP (Instructor Version) 400
Topology 400
Addressing Table 400
Objectives 400
Background/Scenario 401
Required Resources 401
Instructions 401
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 401
Part 2: Configure MP-BGP on all Routers 403
Part 3: Verify MP-BGP 406
Part 4: Configure and Verify IPv6 Route Summarization 412
Router Interface Summary Table 414
Device Configs - Final 414
Router R1 414
Router R2 417
Router R3 419
Chapter 12 Advanced BGP 423
12.1.2 Lab - Implement BGP Path Manipulation (Instructor Version) 423
Topology 423
Addressing Table 423
Objectives 424
Background/Scenario 424
Required Resources 424
Instructions 424
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 424
Part 2: Configure and Verify Multi-Protocol BGP on all Routers 427
Part 3: Configure and Verify BGP Path Manipulation Settings on all
Routers 431
Router Interface Summary Table 437
Device Configs - Final 437
Router R1 437
Router R2 440
Router R3 442
12.1.3 Lab - Implement BGP Communities (Instructor Version) 446
Topology 446
Addressing Table 446
Objectives 447
Background/Scenario 447
Required Resources 447
11.1.3 Lab - Implement MP-BGP (Instructor Version) 400
Topology 400
Addressing Table 400
Objectives 400
Background/Scenario 401
Required Resources 401
Instructions 401
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 401
Part 2: Configure MP-BGP on all Routers 403
Part 3: Verify MP-BGP 406
Part 4: Configure and Verify IPv6 Route Summarization 412
Router Interface Summary Table 414
Device Configs - Final 414
Router R1 414
Router R2 417
Router R3 419
Chapter 12 Advanced BGP 423
12.1.2 Lab - Implement BGP Path Manipulation (Instructor Version) 423
Topology 423
Addressing Table 423
Objectives 424
Background/Scenario 424
Required Resources 424
Instructions 424
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 424
Part 2: Configure and Verify Multi-Protocol BGP on all Routers 427
Part 3: Configure and Verify BGP Path Manipulation Settings on all
Routers 431
Router Interface Summary Table 437
Device Configs - Final 437
Router R1 437
Router R2 440
Router R3 442
12.1.3 Lab - Implement BGP Communities (Instructor Version) 446
Topology 446
Addressing Table 446
Objectives 447
Background/Scenario 447
Required Resources 447
Loading page 9...
xi
Instructions 447
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 447
Part 2: Configure and Verify Multi-Protocol BGP on all Routers 450
Part 3: Configure and Verify BGP Communities on all Routers 455
Reflection Questions 461
Router Interface Summary Table 461
Device Configs - Final 462
Router R1 462
Router R2 465
Router R3 467
Chapter 13 Multicast 471
There are no labs in this chapter
Chapter 14 QoS 473
There are no labs in this chapter
Chapter 15 IP Services 475
15.1.2 Lab - Implement NTP (Instructor Version) 475
Topology 475
Addressing Table 475
Objectives 475
Background/Scenario 476
Required Resources 477
Instructions 477
Part 1: Build the Network, Configure Basic Device Settings and
Routing 477
Part 2: Configure NTP in a P2P Network 480
Part 3: Configure NTP in a Multiaccess Broadcast Network 485
Router Interface Summary Table 488
Device Configs – Final 488
Router R1 488
Router R2 490
Router R3 492
Switch D1 493
Switch D2 497
Switch A1 502
15.1.3 Lab - Implement HSRP (Instructor Version) 505
Topology 505
Addressing Table 505
Objectives 506
Background/Scenario 506
Required Resources 506
Instructions 447
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 447
Part 2: Configure and Verify Multi-Protocol BGP on all Routers 450
Part 3: Configure and Verify BGP Communities on all Routers 455
Reflection Questions 461
Router Interface Summary Table 461
Device Configs - Final 462
Router R1 462
Router R2 465
Router R3 467
Chapter 13 Multicast 471
There are no labs in this chapter
Chapter 14 QoS 473
There are no labs in this chapter
Chapter 15 IP Services 475
15.1.2 Lab - Implement NTP (Instructor Version) 475
Topology 475
Addressing Table 475
Objectives 475
Background/Scenario 476
Required Resources 477
Instructions 477
Part 1: Build the Network, Configure Basic Device Settings and
Routing 477
Part 2: Configure NTP in a P2P Network 480
Part 3: Configure NTP in a Multiaccess Broadcast Network 485
Router Interface Summary Table 488
Device Configs – Final 488
Router R1 488
Router R2 490
Router R3 492
Switch D1 493
Switch D2 497
Switch A1 502
15.1.3 Lab - Implement HSRP (Instructor Version) 505
Topology 505
Addressing Table 505
Objectives 506
Background/Scenario 506
Required Resources 506
Loading page 10...
xii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Instructions 507
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 507
Part 2: Configure and Observe HSRP for IPv4 and IPv6 510
Part 3: Configure and Observe HSRP Authentication 513
Part 4: Configure and Observe HSRP Object Tracking 515
Device Configs - Final 517
Switch D1 517
Switch D2 523
Switch A1 529
15.1.4 Lab - Implement VRRP (Instructor Version) 533
Topology 533
Addressing Table 533
Objectives 534
Background/Scenario 534
Required Resources 535
Instructions 535
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 535
Part 2: Configure and Observe VRRP for IPv4 and IPv6 538
Part 3: Configure and Observe VRRP Object Tracking 542
Device Configs - Final 544
Switch D1 544
Switch D2 550
Switch A1 556
15.1.5 Lab - Implement GLBP (Instructor Version) 560
Topology 560
Addressing Table 560
Objectives 561
Background/Scenario 561
Required Resources 561
Instructions 562
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 562
Part 2: Configure and Observe GLBP for IPv4 and IPv6 565
Part 3: Configure and Observe GLBP Authentication 569
Part 4: Configure and Observe GLBP Object Tracking 570
Device Configs - Final 574
Switch D1 574
Switch D2 580
Switch A1 585
Instructions 507
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 507
Part 2: Configure and Observe HSRP for IPv4 and IPv6 510
Part 3: Configure and Observe HSRP Authentication 513
Part 4: Configure and Observe HSRP Object Tracking 515
Device Configs - Final 517
Switch D1 517
Switch D2 523
Switch A1 529
15.1.4 Lab - Implement VRRP (Instructor Version) 533
Topology 533
Addressing Table 533
Objectives 534
Background/Scenario 534
Required Resources 535
Instructions 535
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 535
Part 2: Configure and Observe VRRP for IPv4 and IPv6 538
Part 3: Configure and Observe VRRP Object Tracking 542
Device Configs - Final 544
Switch D1 544
Switch D2 550
Switch A1 556
15.1.5 Lab - Implement GLBP (Instructor Version) 560
Topology 560
Addressing Table 560
Objectives 561
Background/Scenario 561
Required Resources 561
Instructions 562
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 562
Part 2: Configure and Observe GLBP for IPv4 and IPv6 565
Part 3: Configure and Observe GLBP Authentication 569
Part 4: Configure and Observe GLBP Object Tracking 570
Device Configs - Final 574
Switch D1 574
Switch D2 580
Switch A1 585
Loading page 11...
xiii
15.1.6 Lab - Implement NAT (Instructor Version) 590
Topology 590
Addressing Table 590
Objectives 590
Background/Scenario 591
Required Resources 591
Instructions 591
Part 1: Build the Network and Configure Basic Device Settings 591
Part 2: Configure and Verify Static Inside NAT 594
Part 3: Configure and Verify Pooled NAT 596
Part 4: Configure and Verify NAT Overload 598
Router Interface Summary Table 599
Device Configs - Final 599
Router R1 599
Router R2 601
Router R3 603
Switch D1 604
Switch D2 609
Chapter 16 Overlay Tunnels 615
16.1.2 Lab - Implement a GRE Tunnel (Instructor Version) 615
Topology 615
Addressing Table 615
Objectives 615
Background/Scenario 616
Required Resources 616
Instructions 616
Part 1: Build the Network and Configure Basic Device Settings 616
Part 2: Configure and Verify GRE Tunnels with Static Routing 619
Part 3: Configure and Verify GRE Tunnels with Dynamic Routing 622
Part 4: Examine the Recursive Routing Problem with GRE 626
Router Interface Summary Table 627
Device Configs - Final 628
Router R1 628
Router R2 630
Router R3 632
16.1.3 Lab - Implement IPsec Site-to-Site VPNs (Instructor Version) 636
Topology 636
Addressing Table 636
Objectives 637
Background/Scenario 637
Required Resources 638
15.1.6 Lab - Implement NAT (Instructor Version) 590
Topology 590
Addressing Table 590
Objectives 590
Background/Scenario 591
Required Resources 591
Instructions 591
Part 1: Build the Network and Configure Basic Device Settings 591
Part 2: Configure and Verify Static Inside NAT 594
Part 3: Configure and Verify Pooled NAT 596
Part 4: Configure and Verify NAT Overload 598
Router Interface Summary Table 599
Device Configs - Final 599
Router R1 599
Router R2 601
Router R3 603
Switch D1 604
Switch D2 609
Chapter 16 Overlay Tunnels 615
16.1.2 Lab - Implement a GRE Tunnel (Instructor Version) 615
Topology 615
Addressing Table 615
Objectives 615
Background/Scenario 616
Required Resources 616
Instructions 616
Part 1: Build the Network and Configure Basic Device Settings 616
Part 2: Configure and Verify GRE Tunnels with Static Routing 619
Part 3: Configure and Verify GRE Tunnels with Dynamic Routing 622
Part 4: Examine the Recursive Routing Problem with GRE 626
Router Interface Summary Table 627
Device Configs - Final 628
Router R1 628
Router R2 630
Router R3 632
16.1.3 Lab - Implement IPsec Site-to-Site VPNs (Instructor Version) 636
Topology 636
Addressing Table 636
Objectives 637
Background/Scenario 637
Required Resources 638
Loading page 12...
xiv CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Instructions 638
Part 1: Build the Network, Configure Basic Device Settings and Static
Routing 638
Part 2: Configure a Site-to-Site VPN using Crypto Maps Between R1
and R3 644
Part 3: Verify a Site-to-Site VPN Between R1 and R3 651
Router Interface Summary Table 657
Device Configs – Final 657
Router R1 657
Router R2 659
Router R3 661
Layer 3 Switch D1 663
Layer 3 Switch D3 668
16.1.4 Lab - Implement GRE over IPsec Site-to-Site VPNs (Instructor
Version) 675
Topology 675
Addressing Table 675
Objectives 676
Background/Scenario 676
Required Resources 677
Instructions 677
Part 1: Build the Network, Configure Basic Device Settings and Static
Routing 677
Part 2: Configure GRE over IPsec using a Crypto Map on R1 683
Part 3: Configure GRE over IPsec using a Tunnel IPsec Profile
on R3 685
Part 4: Verify the GRE over IPsec Tunnel on R1 and R3 687
Router Interface Summary Table 691
Device Configs – Final 692
Router R1 692
Router R2 694
Router R3 696
Switch D1 698
Switch D3 703
16.1.5 Lab - Implement IPsec VTI Site-to-Site VPNs (Instructor Version) 709
Topology 709
Addressing Table 709
Objectives 710
Background/Scenario 710
Required Resources 711
Instructions 638
Part 1: Build the Network, Configure Basic Device Settings and Static
Routing 638
Part 2: Configure a Site-to-Site VPN using Crypto Maps Between R1
and R3 644
Part 3: Verify a Site-to-Site VPN Between R1 and R3 651
Router Interface Summary Table 657
Device Configs – Final 657
Router R1 657
Router R2 659
Router R3 661
Layer 3 Switch D1 663
Layer 3 Switch D3 668
16.1.4 Lab - Implement GRE over IPsec Site-to-Site VPNs (Instructor
Version) 675
Topology 675
Addressing Table 675
Objectives 676
Background/Scenario 676
Required Resources 677
Instructions 677
Part 1: Build the Network, Configure Basic Device Settings and Static
Routing 677
Part 2: Configure GRE over IPsec using a Crypto Map on R1 683
Part 3: Configure GRE over IPsec using a Tunnel IPsec Profile
on R3 685
Part 4: Verify the GRE over IPsec Tunnel on R1 and R3 687
Router Interface Summary Table 691
Device Configs – Final 692
Router R1 692
Router R2 694
Router R3 696
Switch D1 698
Switch D3 703
16.1.5 Lab - Implement IPsec VTI Site-to-Site VPNs (Instructor Version) 709
Topology 709
Addressing Table 709
Objectives 710
Background/Scenario 710
Required Resources 711
Loading page 13...
xv
Instructions 711
Part 1: Build the Network, Configure Basic Device Settings and Static
Routing 711
Part 2: Configure Static IPsec VTI on R1 and R3 717
Part 3: Verify Static IPsec VTI on R1 and R3 720
Router Interface Summary Table 724
Device Configs – Final 725
Router R1 725
Router R2 727
Router R3 729
Switch D1 731
Switch D3 737
Chapter 17 Wireless Signals and Modulation 745
There are no labs in this chapter
Chapter 18 Wireless Infrastructure 747
There are no labs in this chapter
Chapter 19 Understanding Wireless Roaming and Location Services 749
There are no labs in this chapter
Chapter 20 Authenticating Wireless Clients 751
There are no labs in this chapter
Chapter 21 Troubleshooting Wireless Connectivity 753
There are no labs in this chapter
Chapter 22 Enterprise Network Architecture 755
There are no labs in this chapter
Chapter 23 Fabric Technologies 757
There are no labs in this chapter
Chapter 24 Network Assurance 759
24.1.2 Lab - Use Connectivity Tests and Debug for Network Assurance
(Instructor Version) 759
Topology 759
Addressing Table 759
Objectives 760
Background/Scenario 760
Required Resources 760
Instructions 760
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 760
Part 2: Explore Ping Options and Extended Ping Commands 764
Instructions 711
Part 1: Build the Network, Configure Basic Device Settings and Static
Routing 711
Part 2: Configure Static IPsec VTI on R1 and R3 717
Part 3: Verify Static IPsec VTI on R1 and R3 720
Router Interface Summary Table 724
Device Configs – Final 725
Router R1 725
Router R2 727
Router R3 729
Switch D1 731
Switch D3 737
Chapter 17 Wireless Signals and Modulation 745
There are no labs in this chapter
Chapter 18 Wireless Infrastructure 747
There are no labs in this chapter
Chapter 19 Understanding Wireless Roaming and Location Services 749
There are no labs in this chapter
Chapter 20 Authenticating Wireless Clients 751
There are no labs in this chapter
Chapter 21 Troubleshooting Wireless Connectivity 753
There are no labs in this chapter
Chapter 22 Enterprise Network Architecture 755
There are no labs in this chapter
Chapter 23 Fabric Technologies 757
There are no labs in this chapter
Chapter 24 Network Assurance 759
24.1.2 Lab - Use Connectivity Tests and Debug for Network Assurance
(Instructor Version) 759
Topology 759
Addressing Table 759
Objectives 760
Background/Scenario 760
Required Resources 760
Instructions 760
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 760
Part 2: Explore Ping Options and Extended Ping Commands 764
Loading page 14...
xvi CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Part 3: Explore Traceroute Options and Extended Traceroute
Commands 769
Part 4: Explore Common Debug Commands and Conditional
Debugging 771
Part 5: Troubleshoot OSPF with Debugging 774
Router Interface Summary Table 777
Device Configs – Final 777
Router R1 777
Router R2 779
Router R3 781
24.1.3 Lab - Implement SNMP and Syslog (Instructor Version) 784
Topology 784
Addressing Table 784
Objectives 784
Background/Scenario 785
Required Resources 785
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 785
Part 2: Configure and Verify SNMP 788
Part 3: Configure and Verify Syslog 790
Router Interface Summary Table 794
Device Configs – Final 794
Router R1 794
Switch D1 800
Switch A1 807
24.1.4 Lab - Implement Flexible Netflow (Instructor Version) 812
Topology 812
Addressing Table 812
Objectives 812
Background/Scenario 812
Required Resources 813
Instructions 813
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 813
Part 2: Configure and Verify Flexible Netflow 816
Part 3: (Optional) Configure and Verify Netflow 820
Router Interface Summary Table 823
Device Configs – Final 823
Router R1 823
Switch D1 826
Switch A1 831
Part 3: Explore Traceroute Options and Extended Traceroute
Commands 769
Part 4: Explore Common Debug Commands and Conditional
Debugging 771
Part 5: Troubleshoot OSPF with Debugging 774
Router Interface Summary Table 777
Device Configs – Final 777
Router R1 777
Router R2 779
Router R3 781
24.1.3 Lab - Implement SNMP and Syslog (Instructor Version) 784
Topology 784
Addressing Table 784
Objectives 784
Background/Scenario 785
Required Resources 785
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 785
Part 2: Configure and Verify SNMP 788
Part 3: Configure and Verify Syslog 790
Router Interface Summary Table 794
Device Configs – Final 794
Router R1 794
Switch D1 800
Switch A1 807
24.1.4 Lab - Implement Flexible Netflow (Instructor Version) 812
Topology 812
Addressing Table 812
Objectives 812
Background/Scenario 812
Required Resources 813
Instructions 813
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 813
Part 2: Configure and Verify Flexible Netflow 816
Part 3: (Optional) Configure and Verify Netflow 820
Router Interface Summary Table 823
Device Configs – Final 823
Router R1 823
Switch D1 826
Switch A1 831
Loading page 15...
xvii
24.1.5 Lab - Implement SPAN Technologies (Instructor Version) 835
Topology 835
Addressing Table 835
Objectives 835
Background/Scenario 836
Required Resources 836
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 836
Part 2: Configure and Verify Local SPAN 839
Part 3: Configure and Verify RSPAN 840
Device Configs – Final 842
Switch D1 842
Switch A1 847
24.1.6 Lab - Implement IP SLA (Instructor Version) 851
Topology 851
Addressing Table 851
Objectives 852
Background/Scenario 852
Required Resources 853
Instructions 853
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 853
Part 2: Configure and Observe IP SLA Operations 861
Part 3: Configure and Observe HSRP IP SLA Tracking 864
Router Interface Summary Table 866
Device Configs - Final 866
Router R1 866
Router R2 868
Router R3 870
Switch D1 872
Switch D2 879
Switch A1 886
Chapter 25 Secure Network Access Control 891
25.1.2 Lab - Install the CCNP Virtual Machine (Instructor Version) 891
Objectives 891
Background/Scenario 891
Required Resources 891
Instructions 891
Part 1: Prepare a Computer for Virtualization 891
Part 2: Configure Your Network and Explore the GUI 892
24.1.5 Lab - Implement SPAN Technologies (Instructor Version) 835
Topology 835
Addressing Table 835
Objectives 835
Background/Scenario 836
Required Resources 836
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 836
Part 2: Configure and Verify Local SPAN 839
Part 3: Configure and Verify RSPAN 840
Device Configs – Final 842
Switch D1 842
Switch A1 847
24.1.6 Lab - Implement IP SLA (Instructor Version) 851
Topology 851
Addressing Table 851
Objectives 852
Background/Scenario 852
Required Resources 853
Instructions 853
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 853
Part 2: Configure and Observe IP SLA Operations 861
Part 3: Configure and Observe HSRP IP SLA Tracking 864
Router Interface Summary Table 866
Device Configs - Final 866
Router R1 866
Router R2 868
Router R3 870
Switch D1 872
Switch D2 879
Switch A1 886
Chapter 25 Secure Network Access Control 891
25.1.2 Lab - Install the CCNP Virtual Machine (Instructor Version) 891
Objectives 891
Background/Scenario 891
Required Resources 891
Instructions 891
Part 1: Prepare a Computer for Virtualization 891
Part 2: Configure Your Network and Explore the GUI 892
Loading page 16...
xviii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Chapter 26 Network Device Access Control and Infrastructure Security 895
26.1.2 Lab - Implement IPv4 ACLs (Instructor Version) 895
Topology 895
Addressing Table 895
Objectives 896
Background/Scenario 896
Required Resources 896
Instructions 897
Part 1: Build the Network and Configure Basic Device Settings 897
Part 2: Verify Initial Connectivity 900
Part 3: Implement Standard ACLs on R3 900
Part 4: Implement a Named Extended ACL from Area 1 to Area 2 902
Part 5: Implement a Named Extended ACL from Area 2 to Area 1 904
Part 6: Implement a Port ACL on D2 905
Part 7: Implement a VLAN ACL on D2 906
Router Interface Summary Table 908
Device Configs – Final 908
Router R1 908
Router R3 911
Switch D1 913
Switch D2 917
Switch A1 922
26.1.3 Lab - Configure Protections for Passwords and Terminal Lines
(Instructor Version) 926
Topology 926
Addressing Table 926
Objectives 926
Background/Scenario 926
Required Resources 927
Part 1: Build the Network and Configure Basic Device Settings 927
Part 2: Explore Password Protection Options 929
Part 3: Configure and Verify Terminal Line Protection Options 932
Reflection Questions 935
Router Interface Summary Table 935
Device Configs 936
Router R1 936
Switch D1 938
Switch A1 943
26.1.4 Lab - Configure Local and Server-Based AAA Authentication (Instructor
Version) 947
Topology 947
Addressing Table 947
Objectives 947
Chapter 26 Network Device Access Control and Infrastructure Security 895
26.1.2 Lab - Implement IPv4 ACLs (Instructor Version) 895
Topology 895
Addressing Table 895
Objectives 896
Background/Scenario 896
Required Resources 896
Instructions 897
Part 1: Build the Network and Configure Basic Device Settings 897
Part 2: Verify Initial Connectivity 900
Part 3: Implement Standard ACLs on R3 900
Part 4: Implement a Named Extended ACL from Area 1 to Area 2 902
Part 5: Implement a Named Extended ACL from Area 2 to Area 1 904
Part 6: Implement a Port ACL on D2 905
Part 7: Implement a VLAN ACL on D2 906
Router Interface Summary Table 908
Device Configs – Final 908
Router R1 908
Router R3 911
Switch D1 913
Switch D2 917
Switch A1 922
26.1.3 Lab - Configure Protections for Passwords and Terminal Lines
(Instructor Version) 926
Topology 926
Addressing Table 926
Objectives 926
Background/Scenario 926
Required Resources 927
Part 1: Build the Network and Configure Basic Device Settings 927
Part 2: Explore Password Protection Options 929
Part 3: Configure and Verify Terminal Line Protection Options 932
Reflection Questions 935
Router Interface Summary Table 935
Device Configs 936
Router R1 936
Switch D1 938
Switch A1 943
26.1.4 Lab - Configure Local and Server-Based AAA Authentication (Instructor
Version) 947
Topology 947
Addressing Table 947
Objectives 947
Loading page 17...
xix
Background/Scenario 947
Required Resources 948
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 948
Part 2: Configure Local AAA Authentication 950
Part 3: Configure Server-Based AAA using RADIUS on A1 953
Part 4: Configure Server-Based AAA using TACACS+ on D1 955
Router Interface Summary Table 958
Device Configs 958
Router R1 958
Switch D1 960
Switch A1 965
26.1.5 Lab - Implement CoPP (Instructor Version) 969
Topology 969
Addressing Table 969
Objectives 969
Background/Scenario 969
Required Resources 970
Part 1: Build the Network and Configure Basic Device Settings 970
Part 2: Verify Initial Connectivity 972
Part 3: Implement a CoPP Policy on R1 972
Part 4: Verify the CoPP Policy on R1. 975
Part 5: (Challenge) Further Classify Default Traffic 980
Reflection Questions 981
Router Interface Summary Table 981
Device Configs 981
Router R1 981
Router R2 984
Switch A1 986
Chapter 27 Virtualization 991
There are no labs in this chapter
Chapter 28 Foundational Network Programmability Concepts 993
28.1.2 Lab - Construct a Basic Python Script (Instructor Version) 993
Objectives 993
Background/Scenario 993
Required Resources 993
Instructions 993
Part 1: Explore the Python Interpreter 993
Part 2: Explore Data Types, Variables, and Conversions 996
Part 3: Explore Lists and Dictionaries 998
Part 4: Explore User Input 1000
Background/Scenario 947
Required Resources 948
Part 1: Build the Network and Configure Basic Device Settings and
Interface Addressing 948
Part 2: Configure Local AAA Authentication 950
Part 3: Configure Server-Based AAA using RADIUS on A1 953
Part 4: Configure Server-Based AAA using TACACS+ on D1 955
Router Interface Summary Table 958
Device Configs 958
Router R1 958
Switch D1 960
Switch A1 965
26.1.5 Lab - Implement CoPP (Instructor Version) 969
Topology 969
Addressing Table 969
Objectives 969
Background/Scenario 969
Required Resources 970
Part 1: Build the Network and Configure Basic Device Settings 970
Part 2: Verify Initial Connectivity 972
Part 3: Implement a CoPP Policy on R1 972
Part 4: Verify the CoPP Policy on R1. 975
Part 5: (Challenge) Further Classify Default Traffic 980
Reflection Questions 981
Router Interface Summary Table 981
Device Configs 981
Router R1 981
Router R2 984
Switch A1 986
Chapter 27 Virtualization 991
There are no labs in this chapter
Chapter 28 Foundational Network Programmability Concepts 993
28.1.2 Lab - Construct a Basic Python Script (Instructor Version) 993
Objectives 993
Background/Scenario 993
Required Resources 993
Instructions 993
Part 1: Explore the Python Interpreter 993
Part 2: Explore Data Types, Variables, and Conversions 996
Part 3: Explore Lists and Dictionaries 998
Part 4: Explore User Input 1000
Loading page 18...
xx CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Part 5: Explore If Functions and Loops 1001
Part 6: Explore File Access 1005
28.1.3 Lab - Use the Netmiko Python Module to Configure a Router (Instructor
Version) 1009
Topology 1009
Addressing Table 1009
Objectives 1009
Background/Scenario 1009
Required Resources 1009
Instructions 1010
Part 1: Build the Network and Verify Connectivity 1010
Part 2: Import Netmiko Python Module 1012
Part 3: Use Netmiko to Connect to the SSH Service 1012
Part 4: Use Netmiko to Send a Verification Command 1013
Part 5: Use Netmiko to Send and Verify a Configuration 1014
Part 6: Use Netmiko to Send an Erroneous Command 1015
Part 7: Modify the Program Used in this Lab 1016
Router Interface Summary Table 1017
Device Configs - Final 1017
Router R1 1017
28.1.4 Lab - Use NETCONF to Access an IOS XE Router (Instructor
Version) 1020
Topology 1020
Addressing Table 1020
Objectives 1020
Background/Scenario 1020
Required Resources 1020
Instructions 1021
Part 1: Build the Network and Verify Connectivity 1021
Part 2: Use a NETCONF Session to Gather Information 1023
Part 3: Use ncclient to Connect to NETCONF 1027
Part 4: Use ncclient to Retrieve the Configuration 1029
Part 5: Use ncclient to Configure a Device 1032
Part 6: Modify the Program Used in this Lab 1035
Router Interface Summary Table 1037
Device Configs – Final 1038
Router R1 1038
28.1.5 Lab - Use RESTCONF to Access an IOS XE Router (Instructor
Version) 1041
Topology 1041
Addressing Table 1041
Objectives 1041
Background/Scenario 1041
Part 5: Explore If Functions and Loops 1001
Part 6: Explore File Access 1005
28.1.3 Lab - Use the Netmiko Python Module to Configure a Router (Instructor
Version) 1009
Topology 1009
Addressing Table 1009
Objectives 1009
Background/Scenario 1009
Required Resources 1009
Instructions 1010
Part 1: Build the Network and Verify Connectivity 1010
Part 2: Import Netmiko Python Module 1012
Part 3: Use Netmiko to Connect to the SSH Service 1012
Part 4: Use Netmiko to Send a Verification Command 1013
Part 5: Use Netmiko to Send and Verify a Configuration 1014
Part 6: Use Netmiko to Send an Erroneous Command 1015
Part 7: Modify the Program Used in this Lab 1016
Router Interface Summary Table 1017
Device Configs - Final 1017
Router R1 1017
28.1.4 Lab - Use NETCONF to Access an IOS XE Router (Instructor
Version) 1020
Topology 1020
Addressing Table 1020
Objectives 1020
Background/Scenario 1020
Required Resources 1020
Instructions 1021
Part 1: Build the Network and Verify Connectivity 1021
Part 2: Use a NETCONF Session to Gather Information 1023
Part 3: Use ncclient to Connect to NETCONF 1027
Part 4: Use ncclient to Retrieve the Configuration 1029
Part 5: Use ncclient to Configure a Device 1032
Part 6: Modify the Program Used in this Lab 1035
Router Interface Summary Table 1037
Device Configs – Final 1038
Router R1 1038
28.1.5 Lab - Use RESTCONF to Access an IOS XE Router (Instructor
Version) 1041
Topology 1041
Addressing Table 1041
Objectives 1041
Background/Scenario 1041
Loading page 19...
xxi
Required Resources 1041
Instructions 1042
Part 1: Build the Network and Verify Connectivity 1042
Part 2: Configure an IOS XE Device for RESTCONF Access 1044
Part 3: Open and Configure Postman 1045
Part 4: Use Postman to Send GET Requests 1045
Part 5: Use Postman to Send a PUT Request 1048
Part 6: Use a Python Script to Send GET Requests 1050
Part 7: Use a Python Script to Send a PUT Request 1053
Programs Used in this Lab 1055
Router Interface Summary Table 1056
Device Configs – Final 1057
Router R1 1057
Chapter 29 Introduction to Automation Tools 1061
29.1.2 Lab - Construct an EEM Applet (Instructor Version) 1061
Topology 1061
Addressing Table 1061
Objectives 1061
Background/Scenario 1061
Required Resources 1062
Instructions 1062
Part 1: Build the Network and Verify Connectivity 1062
Part 2: Implement a Syslog Detector EEM Applet 1063
Part 3: Implement a CLI Detector EEM Applet 1066
Router Interface Summary Table 1069
Required Resources 1041
Instructions 1042
Part 1: Build the Network and Verify Connectivity 1042
Part 2: Configure an IOS XE Device for RESTCONF Access 1044
Part 3: Open and Configure Postman 1045
Part 4: Use Postman to Send GET Requests 1045
Part 5: Use Postman to Send a PUT Request 1048
Part 6: Use a Python Script to Send GET Requests 1050
Part 7: Use a Python Script to Send a PUT Request 1053
Programs Used in this Lab 1055
Router Interface Summary Table 1056
Device Configs – Final 1057
Router R1 1057
Chapter 29 Introduction to Automation Tools 1061
29.1.2 Lab - Construct an EEM Applet (Instructor Version) 1061
Topology 1061
Addressing Table 1061
Objectives 1061
Background/Scenario 1061
Required Resources 1062
Instructions 1062
Part 1: Build the Network and Verify Connectivity 1062
Part 2: Implement a Syslog Detector EEM Applet 1063
Part 3: Implement a CLI Detector EEM Applet 1066
Router Interface Summary Table 1069
Loading page 20...
xxii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
About This Lab Manual
This is the only authorized Lab Manual for the Cisco Networking Academy CCNP Enterprise:
Core Networking (ENCOR) v8 Course.
The two courses in this CCNP Enterprise version 8.0 curriculum provide students with knowl-
edge and skills needed to configure, operate, and troubleshoot large scale enterprise net-
works. The courses cover a broad range of routing, switching, and wireless topics along with
security best practices used in software-driven digital networks. CCNP Enterprise certification
requires candidates to pass two 120-minute exams: CCNP and CCIE Enterprise Core ENCOR
350-401 and CCNP Enterprise Advanced Routing ENARSI 300-410.
By the end of the CCNP course series, students gain practical, hands-on lab experience pre-
paring them for the CCNP Enterprise certification exams and career-ready skills for profes-
sional-level roles in the Information & Communication Technologies (ICT) industry.
CCNP Enterprise: Core Networking
This first course in the 2-course CCNP Enterprise series covers switching, routing, wireless,
and related security topics, along with the technologies that support software-defined, pro-
grammable networks. Comprehensive labs emphasize hands-on learning and practice to rein-
force configuration and troubleshooting skills.
This course directly prepares for the Cisco Enterprise Network Core Technologies exam (350-
401 ENCOR) to earn an Enterprise Core Specialist certification. Completion of both courses
in the CCNP Enterprise course series prepares for the CCNP Enterprise certification exam.
The 37 comprehensive labs in this manual emphasize hands-on learning and practice to rein-
force configuration skills.
About This Lab Manual
This is the only authorized Lab Manual for the Cisco Networking Academy CCNP Enterprise:
Core Networking (ENCOR) v8 Course.
The two courses in this CCNP Enterprise version 8.0 curriculum provide students with knowl-
edge and skills needed to configure, operate, and troubleshoot large scale enterprise net-
works. The courses cover a broad range of routing, switching, and wireless topics along with
security best practices used in software-driven digital networks. CCNP Enterprise certification
requires candidates to pass two 120-minute exams: CCNP and CCIE Enterprise Core ENCOR
350-401 and CCNP Enterprise Advanced Routing ENARSI 300-410.
By the end of the CCNP course series, students gain practical, hands-on lab experience pre-
paring them for the CCNP Enterprise certification exams and career-ready skills for profes-
sional-level roles in the Information & Communication Technologies (ICT) industry.
CCNP Enterprise: Core Networking
This first course in the 2-course CCNP Enterprise series covers switching, routing, wireless,
and related security topics, along with the technologies that support software-defined, pro-
grammable networks. Comprehensive labs emphasize hands-on learning and practice to rein-
force configuration and troubleshooting skills.
This course directly prepares for the Cisco Enterprise Network Core Technologies exam (350-
401 ENCOR) to earn an Enterprise Core Specialist certification. Completion of both courses
in the CCNP Enterprise course series prepares for the CCNP Enterprise certification exam.
The 37 comprehensive labs in this manual emphasize hands-on learning and practice to rein-
force configuration skills.
Loading page 21...
CHAPTER 1
Packet Forwarding
1.1.2 Lab - Implement Inter-VLAN Routing (Instructor
Version)
Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IPv4 Address IPv6 Address IPv6 Link-Local
R1 G0/0/1 10.1.13.1/24 2001:db8:acad:10d1::1/64 fe80::1:1
S0/1/1 10.1.3.1/24 2001:db8:acad:1013::1/64 fe80::1:2
D1 G1/0/11 10.1.13.13/24 2001:db8:acad:10d1::d1/64 fe80::d1:1
VLAN50 10.2.50.1/24 2001:db8:acad:1050::d1/64 fe80::d1:2
VLAN60 10.2.60.1/24 2001:db8:acad:1060::d1/64 fe80::d1:3
R3 S0/1/1 10.1.3.3/24 2001:db8:acad:1013::3/64 fe80::3:1
G0/0/1.75 10.3.75.1/24 2001:db8:acad:3075::1/64 fe80::3:2
G0/0/1.85 10.3.85.1/24 2001:db8:acad:3085::1/64 fe80::3:3
D2 VLAN75 10.3.75.14/24 2001:db8:acad:3075::d2/64 fe80::d2:1
PC1 NIC 10.2.50.50/24 2001:db8:acad:1050::50/64 EUI-64
PC2 NIC 10.2.60.50/24 2001:db8:acad:1060::50/64 EUI-64
PC3 NIC 10.3.75.50/24 2001:db8:acad:3075::50/64 EUI-64
PC4 NIC 10.3.85.50/24 2001:db8:acad:3085::50/64 EUI-64
Packet Forwarding
1.1.2 Lab - Implement Inter-VLAN Routing (Instructor
Version)
Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IPv4 Address IPv6 Address IPv6 Link-Local
R1 G0/0/1 10.1.13.1/24 2001:db8:acad:10d1::1/64 fe80::1:1
S0/1/1 10.1.3.1/24 2001:db8:acad:1013::1/64 fe80::1:2
D1 G1/0/11 10.1.13.13/24 2001:db8:acad:10d1::d1/64 fe80::d1:1
VLAN50 10.2.50.1/24 2001:db8:acad:1050::d1/64 fe80::d1:2
VLAN60 10.2.60.1/24 2001:db8:acad:1060::d1/64 fe80::d1:3
R3 S0/1/1 10.1.3.3/24 2001:db8:acad:1013::3/64 fe80::3:1
G0/0/1.75 10.3.75.1/24 2001:db8:acad:3075::1/64 fe80::3:2
G0/0/1.85 10.3.85.1/24 2001:db8:acad:3085::1/64 fe80::3:3
D2 VLAN75 10.3.75.14/24 2001:db8:acad:3075::d2/64 fe80::d2:1
PC1 NIC 10.2.50.50/24 2001:db8:acad:1050::50/64 EUI-64
PC2 NIC 10.2.60.50/24 2001:db8:acad:1060::50/64 EUI-64
PC3 NIC 10.3.75.50/24 2001:db8:acad:3075::50/64 EUI-64
PC4 NIC 10.3.85.50/24 2001:db8:acad:3085::50/64 EUI-64
Loading page 22...
2 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3 Switch
Part 3: Configure and Verify Router-based Inter-VLAN Routing
Part 4: Examine CAM and CEF Details
Background/Scenario
The methods used to move packets and frames from one interface to the next have changed over the
years. In this lab you will configure Inter-VLAN Routing in its various forms and then examine the dif-
ferent tables used in making forwarding decisions.
Note: This lab is an exercise in configuring and verifying various methods of Inter-VLAN routing and does not
reflect networking best practices.
Note: The routers and switches used with CCNP hands-on labs are Cisco 4221 and Cisco 3650, both with Cisco
IOS XE Release 16.9.4 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the
model and Cisco IOS version, the commands available and the output produced might vary from what is shown in
the labs.
Note: Ensure that the routers and switches have been erased and have no startup configurations. If you are unsure
contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
■ 2 Routers (Cisco 4221 with Cisco IOS XE Release 16.9.4 universal image or comparable)
■ 2 Switches (Cisco 3650 with Cisco IOS XE Release 16.9.4 universal image or comparable)
■ 4 PCs (PC with terminal emulation program, such as Tera Term)
■ Console cables to configure the Cisco IOS devices via the console ports
■ Ethernet and serial cables as shown in the topology
Instructions
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings.
Step 1. Cable the network as shown in the topology.
Attach the devices as shown in the topology diagram, and cable as necessary.
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3 Switch
Part 3: Configure and Verify Router-based Inter-VLAN Routing
Part 4: Examine CAM and CEF Details
Background/Scenario
The methods used to move packets and frames from one interface to the next have changed over the
years. In this lab you will configure Inter-VLAN Routing in its various forms and then examine the dif-
ferent tables used in making forwarding decisions.
Note: This lab is an exercise in configuring and verifying various methods of Inter-VLAN routing and does not
reflect networking best practices.
Note: The routers and switches used with CCNP hands-on labs are Cisco 4221 and Cisco 3650, both with Cisco
IOS XE Release 16.9.4 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the
model and Cisco IOS version, the commands available and the output produced might vary from what is shown in
the labs.
Note: Ensure that the routers and switches have been erased and have no startup configurations. If you are unsure
contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
■ 2 Routers (Cisco 4221 with Cisco IOS XE Release 16.9.4 universal image or comparable)
■ 2 Switches (Cisco 3650 with Cisco IOS XE Release 16.9.4 universal image or comparable)
■ 4 PCs (PC with terminal emulation program, such as Tera Term)
■ Console cables to configure the Cisco IOS devices via the console ports
■ Ethernet and serial cables as shown in the topology
Instructions
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings.
Step 1. Cable the network as shown in the topology.
Attach the devices as shown in the topology diagram, and cable as necessary.
Loading page 23...
Chapter 1: Packet Forwarding 3
Step 2. Configure basic settings for each devic e.
a. Console into each router, enter global configuration mode, and apply the basic settings
using the following startup configurations.
Router R1
no ip domain lookup
hostname R1
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is R1, Inter-VLAN Routing Lab #
Router R3
no ip domain lookup
hostname R3
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is R3, Inter-VLAN Routing Lab #
Switch D1
no ip domain lookup
hostname D1
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is D1, Inter-VLAN Routing Lab #
interface range g1/0/1-24, g0/0, g1/1/1-4
shutdown
Switch D2
no ip domain lookup
hostname D2
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is D2, Inter-VLAN Routing Lab #
interface range g1/0/1-24, g0/0, g1/1/1-4
shutdown
b. Set the clock on each device to UTC time.
c. Save the running configuration to startup-config.
Step 2. Configure basic settings for each devic e.
a. Console into each router, enter global configuration mode, and apply the basic settings
using the following startup configurations.
Router R1
no ip domain lookup
hostname R1
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is R1, Inter-VLAN Routing Lab #
Router R3
no ip domain lookup
hostname R3
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is R3, Inter-VLAN Routing Lab #
Switch D1
no ip domain lookup
hostname D1
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is D1, Inter-VLAN Routing Lab #
interface range g1/0/1-24, g0/0, g1/1/1-4
shutdown
Switch D2
no ip domain lookup
hostname D2
line con 0
exec-timeout 0 0
logging synchronous
exit
banner motd # This is D2, Inter-VLAN Routing Lab #
interface range g1/0/1-24, g0/0, g1/1/1-4
shutdown
b. Set the clock on each device to UTC time.
c. Save the running configuration to startup-config.
Loading page 24...
4 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3
Switch
In Part 2, you will configure and verify inter-VLAN Routing on a Layer 3 switch. For this part, you will
focus on the configuration of switch D1 and router R1.
Note: The default Switch Database Manager (SDM) template on a Catalyst 3650 running IOS XE supports dual-
stacked operations and requires no additional configuration for our purposes.
If you are using an alternate device running Cisco IOS, check the SDM template with the privileged
EXEC command show sdm prefer and verify that the ‘number of IPv6 unicast routes’ supported is not
zero.
If it is zero, you must change the SDM template to one that supports IPv6 using the sdm prefer
template_name global configuration command. The template name will vary depending on the IOS
version. Changing the template will require a reboot.
Step 1. On D1, configure Inter-VLAN Routing.
a. Configure D1 to support IP routing and IPv6 unicast routing.
D1(config)# ip routing
D1(config)# ipv6 unicast-routing
b. Create the VLANs and name them as specified in the topology.
D1(config)# vlan 50
D1(config-vlan)# name Group50
D1(config-vlan)# exit
D1(config)# vlan 60
D1(config-vlan)# name Group60
D1(config-vlan)# exit
c. Assign the G1/0/23 to VLAN 50 and G1/0/24 to VLAN 60.
D1(config)# interface g1/0/23
D1(config-if)# switchport mode access
D1(config-if)# switchport access vlan 50
D1(config-if)# no shutdown
D1(config-if)# exit
D1(config)# interface g1/0/24
D1(config-if)# switchport mode access
D1(config-if)# switchport access vlan 60
D1(config-if)# no shutdown
D1(config-if)# exit
d. Create the Switched Virtual Interfaces (SVI) that will support VLAN 50 and VLAN 60.
D1(config)# interface vlan 50
D1(config-if)# ip address 10.2.50.1 255.255.255.0
D1(config-if)# ipv6 address fe80::d1:2 link-local
D1(config-if)# ipv6 address 2001:db8:acad:1050::d1/64
D1(config-if)# no shutdown
D1(config-if)# exit
D1(config)# interface vlan 60
D1(config-if)# ip address 10.2.60.1 255.255.255.0
D1(config-if)# ipv6 address fe80::d1:3 link-local
D1(config-if)# ipv6 address 2001:db8:acad:1060::d1/64
Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3
Switch
In Part 2, you will configure and verify inter-VLAN Routing on a Layer 3 switch. For this part, you will
focus on the configuration of switch D1 and router R1.
Note: The default Switch Database Manager (SDM) template on a Catalyst 3650 running IOS XE supports dual-
stacked operations and requires no additional configuration for our purposes.
If you are using an alternate device running Cisco IOS, check the SDM template with the privileged
EXEC command show sdm prefer and verify that the ‘number of IPv6 unicast routes’ supported is not
zero.
If it is zero, you must change the SDM template to one that supports IPv6 using the sdm prefer
template_name global configuration command. The template name will vary depending on the IOS
version. Changing the template will require a reboot.
Step 1. On D1, configure Inter-VLAN Routing.
a. Configure D1 to support IP routing and IPv6 unicast routing.
D1(config)# ip routing
D1(config)# ipv6 unicast-routing
b. Create the VLANs and name them as specified in the topology.
D1(config)# vlan 50
D1(config-vlan)# name Group50
D1(config-vlan)# exit
D1(config)# vlan 60
D1(config-vlan)# name Group60
D1(config-vlan)# exit
c. Assign the G1/0/23 to VLAN 50 and G1/0/24 to VLAN 60.
D1(config)# interface g1/0/23
D1(config-if)# switchport mode access
D1(config-if)# switchport access vlan 50
D1(config-if)# no shutdown
D1(config-if)# exit
D1(config)# interface g1/0/24
D1(config-if)# switchport mode access
D1(config-if)# switchport access vlan 60
D1(config-if)# no shutdown
D1(config-if)# exit
d. Create the Switched Virtual Interfaces (SVI) that will support VLAN 50 and VLAN 60.
D1(config)# interface vlan 50
D1(config-if)# ip address 10.2.50.1 255.255.255.0
D1(config-if)# ipv6 address fe80::d1:2 link-local
D1(config-if)# ipv6 address 2001:db8:acad:1050::d1/64
D1(config-if)# no shutdown
D1(config-if)# exit
D1(config)# interface vlan 60
D1(config-if)# ip address 10.2.60.1 255.255.255.0
D1(config-if)# ipv6 address fe80::d1:3 link-local
D1(config-if)# ipv6 address 2001:db8:acad:1060::d1/64
Loading page 25...
Chapter 1: Packet Forwarding 5
D1(config-if)# no shutdown
D1(config-if)# exit
e. Configure PC1 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.2.50.1 and 2001:db8:acad:1050::d1.
f. Configure PC2 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.2.60.1 and 2001:db8:acad:1060::d1.
g. From PC1, ping PC2’s IPv4 and IPv6 address. Success indicates that D1 is performing
Inter-VLAN Routing.
h. Examine the MAC address table on D1 with the command show mac address-table
dynamic. You should see PC1 and PC2’s mac addresses listed with the ports they are
connected to.
D1# show mac address-table dynamic
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
50 0050.56b3.8137 DYNAMIC Gi1/0/23
60 0050.56b3.994b DYNAMIC Gi1/0/24
Total Mac Addresses for this criterion: 2
Step 2. On D1, configure a routed port and default routes towards R1.
a. Configure interface G1/0/11 as a routed port with addressing as specified in the topol-
ogy diagram.
D1(config)# interface g1/0/11
D1(config-if)# no switchport
D1(config-if)# ip address 10.1.13.13 255.255.255.0
D1(config-if)# ipv6 address fe80::d1:1 link-local
D1(config-if)# ipv6 address 2001:db8:acad:10d1::d1/64
D1(config-if)# no shutdown
D1(config-if)# exit
b. Verify that interface G1/0/11 is no longer associated with the VLAN database by issu-
ing the command show vlan brief | i g1/0/11. There should be no output.
c. Configure static default routes for IPv4 and IPv6 that point towards the interface
address at R1.
D1(config)# ip route 0.0.0.0 0.0.0.0 10.1.13.1
D1(config)# ipv6 route ::/0 2001:db8:acad:10d1::1
You may see the error message %ADJ-3-RESOLVE_REQ: Adj resolve request: Failed
to resolve 10.1.13.1. This indicates that the switch sent an ARP for the MAC address
of 10.1.13.1 and got no reply. We will configure that next.
Step 3. On R1, configure interface addressing and static routing.
a. Configure R1 to support IPv6 unicast routing.
R1(config)# ipv6 unicast-routing
b. Configure the interfaces on R1 with the addresses specified in the Addressing Table.
R1(config)# interface g0/0/1
R1(config-if)# ip address 10.1.13.1 255.255.255.0
D1(config-if)# no shutdown
D1(config-if)# exit
e. Configure PC1 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.2.50.1 and 2001:db8:acad:1050::d1.
f. Configure PC2 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.2.60.1 and 2001:db8:acad:1060::d1.
g. From PC1, ping PC2’s IPv4 and IPv6 address. Success indicates that D1 is performing
Inter-VLAN Routing.
h. Examine the MAC address table on D1 with the command show mac address-table
dynamic. You should see PC1 and PC2’s mac addresses listed with the ports they are
connected to.
D1# show mac address-table dynamic
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
50 0050.56b3.8137 DYNAMIC Gi1/0/23
60 0050.56b3.994b DYNAMIC Gi1/0/24
Total Mac Addresses for this criterion: 2
Step 2. On D1, configure a routed port and default routes towards R1.
a. Configure interface G1/0/11 as a routed port with addressing as specified in the topol-
ogy diagram.
D1(config)# interface g1/0/11
D1(config-if)# no switchport
D1(config-if)# ip address 10.1.13.13 255.255.255.0
D1(config-if)# ipv6 address fe80::d1:1 link-local
D1(config-if)# ipv6 address 2001:db8:acad:10d1::d1/64
D1(config-if)# no shutdown
D1(config-if)# exit
b. Verify that interface G1/0/11 is no longer associated with the VLAN database by issu-
ing the command show vlan brief | i g1/0/11. There should be no output.
c. Configure static default routes for IPv4 and IPv6 that point towards the interface
address at R1.
D1(config)# ip route 0.0.0.0 0.0.0.0 10.1.13.1
D1(config)# ipv6 route ::/0 2001:db8:acad:10d1::1
You may see the error message %ADJ-3-RESOLVE_REQ: Adj resolve request: Failed
to resolve 10.1.13.1. This indicates that the switch sent an ARP for the MAC address
of 10.1.13.1 and got no reply. We will configure that next.
Step 3. On R1, configure interface addressing and static routing.
a. Configure R1 to support IPv6 unicast routing.
R1(config)# ipv6 unicast-routing
b. Configure the interfaces on R1 with the addresses specified in the Addressing Table.
R1(config)# interface g0/0/1
R1(config-if)# ip address 10.1.13.1 255.255.255.0
Loading page 26...
6 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
R1(config-if)# ipv6 address fe80::1:1 link-local
R1(config-if)# ipv6 address 2001:db8:acad:10d1::1/64
R1(config-if)# no shutdown
R1(config-if)# exit
R1(config)# interface s0/1/1
R1(config-if)# ip address 10.1.3.1 255.255.255.0
R1(config-if)# ipv6 address fe80::1:2 link-local
R1(config-if)# ipv6 address 2001:db8:acad:1013::1/64
R1(config-if)# no shutdown
R1(config-if)# exit
c. Configure routing on R1. Configure static routes to the networks supported by D1 and
a default route for everything else point at R3.
R1(config)# ip route 10.2.0.0 255.255.0.0 10.1.13.13
R1(config)# ipv6 route 2001:db8:acad:1050::/64 2001:db8:acad:10d1::d1
R1(config)# ipv6 route 2001:db8:acad:1060::/64 2001:db8:acad:10d1::d1
R1(config)#
R1(config)# ip route 0.0.0.0 0.0.0.0 10.1.3.3
R1(config)# ipv6 route ::/0 2001:db8:acad:1013::3
R1(config)#
d. From R1, ping PC2 with IPv4 and IPv6. All pings should be successful.
Part 3: Configure and Verify Router-based Inter-VLAN Routing
Note: The default Switch Database Manager (SDM) template on a Catalyst 3650 running IOS XE supports dual-
stacked operations and requires no additional configuration for our purposes.
If you are using an alternate device running Cisco IOS, check the SDM template with the privileged
exec command show sdm prefer and verify that the ‘number of IPv6 unicast routes’ supported is not
zero.
If it is zero, you must change the SDM template to one that supports IPv6 using the sdm prefer tem-
plate_name global configuration command. The template name will vary depending on the IOS ver-
sion. Changing the template will require a reboot.
Step 1. Configure D2 to support the required VLANs.
a. Create the VLANs and name them as specified in the topology. In addition, create vlan
999 and name it NativeVLAN.
D2(config)# vlan 75
D2(config-vlan)# name Group75
D2(config-vlan)# exit
D2(config)# vlan 85
D2(config-vlan)# name Group85
D2(config-vlan)# exit
D2(config)# vlan 999
D2(config-vlan)# name NativeVLAN
D2(config-vlan)# exit
b. Assign the G1/0/23 to VLAN 75 and G1/0/24 to VLAN 85.
R1(config-if)# ipv6 address fe80::1:1 link-local
R1(config-if)# ipv6 address 2001:db8:acad:10d1::1/64
R1(config-if)# no shutdown
R1(config-if)# exit
R1(config)# interface s0/1/1
R1(config-if)# ip address 10.1.3.1 255.255.255.0
R1(config-if)# ipv6 address fe80::1:2 link-local
R1(config-if)# ipv6 address 2001:db8:acad:1013::1/64
R1(config-if)# no shutdown
R1(config-if)# exit
c. Configure routing on R1. Configure static routes to the networks supported by D1 and
a default route for everything else point at R3.
R1(config)# ip route 10.2.0.0 255.255.0.0 10.1.13.13
R1(config)# ipv6 route 2001:db8:acad:1050::/64 2001:db8:acad:10d1::d1
R1(config)# ipv6 route 2001:db8:acad:1060::/64 2001:db8:acad:10d1::d1
R1(config)#
R1(config)# ip route 0.0.0.0 0.0.0.0 10.1.3.3
R1(config)# ipv6 route ::/0 2001:db8:acad:1013::3
R1(config)#
d. From R1, ping PC2 with IPv4 and IPv6. All pings should be successful.
Part 3: Configure and Verify Router-based Inter-VLAN Routing
Note: The default Switch Database Manager (SDM) template on a Catalyst 3650 running IOS XE supports dual-
stacked operations and requires no additional configuration for our purposes.
If you are using an alternate device running Cisco IOS, check the SDM template with the privileged
exec command show sdm prefer and verify that the ‘number of IPv6 unicast routes’ supported is not
zero.
If it is zero, you must change the SDM template to one that supports IPv6 using the sdm prefer tem-
plate_name global configuration command. The template name will vary depending on the IOS ver-
sion. Changing the template will require a reboot.
Step 1. Configure D2 to support the required VLANs.
a. Create the VLANs and name them as specified in the topology. In addition, create vlan
999 and name it NativeVLAN.
D2(config)# vlan 75
D2(config-vlan)# name Group75
D2(config-vlan)# exit
D2(config)# vlan 85
D2(config-vlan)# name Group85
D2(config-vlan)# exit
D2(config)# vlan 999
D2(config-vlan)# name NativeVLAN
D2(config-vlan)# exit
b. Assign the G1/0/23 to VLAN 75 and G1/0/24 to VLAN 85.
Loading page 27...
Chapter 1: Packet Forwarding 7
c. Create a Switched Virtual Interface that will operate within VLAN 75.
D2(config)# interface vlan75
D2(config-if)# ip address 10.3.75.14 255.255.255.0
D2(config-if)# ipv6 address fe80::d2:1 link-local
D2(config-if)# ipv6 address 2001:db8:acad:3075::d2/64
D2(config-if)# no shutdown
D2(config-if)# exit
d. Create an IEEE 802.1Q-based trunk to R3. As a part of the configuration of the trunk,
set the native VLAN to VLAN 999 and filter the VLANs allowed on the trunk down to
only those that are configured.
D2(config)# interface g1/0/11
D2(config-if)# switchport mode trunk
D2(config-if)# switchport trunk native vlan 999
D2(config-if)# switchport trunk allowed vlan 75,85,999
D2(config-if)# no shutdown
D2(config-if)# exit
Step 2. Configure R3 to support Inter-VLAN Routing.
a. Configure R3 to support IPv6 unicast routing.
b. Configure the subinterfaces needed on R3 interface G0/0/1 to support the configured
VLANs. Ensure an interface is created for the native VLAN 999.
R3(config)# interface g0/0/1
R3(config-if)# no shutdown
R3(config-if)# exit
R3(config)# interface g0/0/1.75
R3(config-subif)# encapsulation dot1q 75
R3(config-subif)# ip address 10.3.75.1 255.255.255.0
R3(config-subif)# ipv6 address fe80::3:2 link-local
R3(config-subif)# ipv6 address 2001:db8:acad:3075::1/64
R3(config-subif)# no shutdown
R3(config-subif)# exit
R3(config)# interface g0/0/1.85
R3(config-subif)# encapsulation dot1q 85
R3(config-subif)# ip address 10.3.85.1 255.255.255.0
R3(config-subif)# ipv6 address fe80::3:3 link-local
R3(config-subif)# ipv6 address 2001:db8:acad:3085::1/64
R3(config-subif)# no shutdown
R3(config-subif)# exit
R3(config)# interface g0/0/1.999
R3(config-subif)# encapsulation dot1q 999 native
R3(config-subif)# no shutdown
R3(config-subif)# exit
c. Configure PC3 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.3.75.1 and 2001:db8:acad:3075::1.
d. Configure PC4 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.3.85.1 and 2001:db8:acad:3085::1.
e. From PC3, ping PC4’s IPv4 and IPv6 address. Success indicates that R3 is performing
Inter-VLAN Routing.
c. Create a Switched Virtual Interface that will operate within VLAN 75.
D2(config)# interface vlan75
D2(config-if)# ip address 10.3.75.14 255.255.255.0
D2(config-if)# ipv6 address fe80::d2:1 link-local
D2(config-if)# ipv6 address 2001:db8:acad:3075::d2/64
D2(config-if)# no shutdown
D2(config-if)# exit
d. Create an IEEE 802.1Q-based trunk to R3. As a part of the configuration of the trunk,
set the native VLAN to VLAN 999 and filter the VLANs allowed on the trunk down to
only those that are configured.
D2(config)# interface g1/0/11
D2(config-if)# switchport mode trunk
D2(config-if)# switchport trunk native vlan 999
D2(config-if)# switchport trunk allowed vlan 75,85,999
D2(config-if)# no shutdown
D2(config-if)# exit
Step 2. Configure R3 to support Inter-VLAN Routing.
a. Configure R3 to support IPv6 unicast routing.
b. Configure the subinterfaces needed on R3 interface G0/0/1 to support the configured
VLANs. Ensure an interface is created for the native VLAN 999.
R3(config)# interface g0/0/1
R3(config-if)# no shutdown
R3(config-if)# exit
R3(config)# interface g0/0/1.75
R3(config-subif)# encapsulation dot1q 75
R3(config-subif)# ip address 10.3.75.1 255.255.255.0
R3(config-subif)# ipv6 address fe80::3:2 link-local
R3(config-subif)# ipv6 address 2001:db8:acad:3075::1/64
R3(config-subif)# no shutdown
R3(config-subif)# exit
R3(config)# interface g0/0/1.85
R3(config-subif)# encapsulation dot1q 85
R3(config-subif)# ip address 10.3.85.1 255.255.255.0
R3(config-subif)# ipv6 address fe80::3:3 link-local
R3(config-subif)# ipv6 address 2001:db8:acad:3085::1/64
R3(config-subif)# no shutdown
R3(config-subif)# exit
R3(config)# interface g0/0/1.999
R3(config-subif)# encapsulation dot1q 999 native
R3(config-subif)# no shutdown
R3(config-subif)# exit
c. Configure PC3 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.3.75.1 and 2001:db8:acad:3075::1.
d. Configure PC4 with the addresses specified in the Addressing Table. Further assign
default gateways of 10.3.85.1 and 2001:db8:acad:3085::1.
e. From PC3, ping PC4’s IPv4 and IPv6 address. Success indicates that R3 is performing
Inter-VLAN Routing.
Loading page 28...
8 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
Step 3. Configure static routing to enable end-to-end reachability.
a. On R3, configure interface S0/1/1 with the addresses specified in the Addressing Table.
R3(config)# interface s0/1/1
R3(config-if)# ip address 10.1.3.3 255.255.255.0
R3(config-if)# ipv6 address fe80::3:1 link-local
R3(config-if)# ipv6 address 2001:db8:acad:1013::3/64
R3(config-if)# no shutdown
R3(config-if)# exit
b. On R3, configure a static default route for IPv4 and IPv6 that points to R1’s S0/1/1
interface addresses.
R3(config)# ip route 0.0.0.0 0.0.0.0 10.1.3.1
R3(config)# ipv6 route ::/0 2001:db8:acad:1013::1
c. On PC3, issue a ping to PC2. The ping should be successful. This indicates the routing
solution is working in both directions.
Part 4: Examine CAM and CEF Details
In Part 4, you will examine CEF details on the devices you have configured. The objective of Cisco
Express Forwarding is to speed up the process of moving data from one interface to another. To do
this, as much data as possible is precompiled into two tables, the Forwarding Information Base (FIB)
and the Adjacency Table. These are basically shortcuts that identify what interface a packet should be
sent out of and how it should be framed.
a. Issue the command show ip cef to see the compiled CEF table, which tells the device
what to do with a frame or packet based on its destination address. This table gives the
device a quick answer and keeps the CPU from getting directly involved. For example,
packets destined to the 10.2.0.0/16 network are quickly resolved to the next-hop
address of 10.1.13.13 exiting interface g0/0/1.
R1# show ip cef
Prefix Next Hop Interface
0.0.0.0/0 10.1.3.3 Serial0/1/1
0.0.0.0/8 drop
0.0.0.0/32 receive
10.1.3.0/24 attached Serial0/1/1
10.1.3.0/32 receive Serial0/1/1
10.1.3.1/32 receive Serial0/1/1
10.1.3.3/32 10.1.3.3 Serial0/1/1
10.1.3.255/32 receive Serial0/1/1
10.1.13.0/24 attached GigabitEthernet0/0/1
10.1.13.0/32 receive GigabitEthernet0/0/1
10.1.13.1/32 receive GigabitEthernet0/0/1
10.1.13.13/32 attached GigabitEthernet0/0/1
10.1.13.255/32 receive GigabitEthernet0/0/1
10.2.0.0/16 10.1.13.13 GigabitEthernet0/0/1
127.0.0.0/8 drop
224.0.0.0/4 drop
224.0.0.0/24 receive
240.0.0.0/4 drop
255.255.255.255/32 receive
Step 3. Configure static routing to enable end-to-end reachability.
a. On R3, configure interface S0/1/1 with the addresses specified in the Addressing Table.
R3(config)# interface s0/1/1
R3(config-if)# ip address 10.1.3.3 255.255.255.0
R3(config-if)# ipv6 address fe80::3:1 link-local
R3(config-if)# ipv6 address 2001:db8:acad:1013::3/64
R3(config-if)# no shutdown
R3(config-if)# exit
b. On R3, configure a static default route for IPv4 and IPv6 that points to R1’s S0/1/1
interface addresses.
R3(config)# ip route 0.0.0.0 0.0.0.0 10.1.3.1
R3(config)# ipv6 route ::/0 2001:db8:acad:1013::1
c. On PC3, issue a ping to PC2. The ping should be successful. This indicates the routing
solution is working in both directions.
Part 4: Examine CAM and CEF Details
In Part 4, you will examine CEF details on the devices you have configured. The objective of Cisco
Express Forwarding is to speed up the process of moving data from one interface to another. To do
this, as much data as possible is precompiled into two tables, the Forwarding Information Base (FIB)
and the Adjacency Table. These are basically shortcuts that identify what interface a packet should be
sent out of and how it should be framed.
a. Issue the command show ip cef to see the compiled CEF table, which tells the device
what to do with a frame or packet based on its destination address. This table gives the
device a quick answer and keeps the CPU from getting directly involved. For example,
packets destined to the 10.2.0.0/16 network are quickly resolved to the next-hop
address of 10.1.13.13 exiting interface g0/0/1.
R1# show ip cef
Prefix Next Hop Interface
0.0.0.0/0 10.1.3.3 Serial0/1/1
0.0.0.0/8 drop
0.0.0.0/32 receive
10.1.3.0/24 attached Serial0/1/1
10.1.3.0/32 receive Serial0/1/1
10.1.3.1/32 receive Serial0/1/1
10.1.3.3/32 10.1.3.3 Serial0/1/1
10.1.3.255/32 receive Serial0/1/1
10.1.13.0/24 attached GigabitEthernet0/0/1
10.1.13.0/32 receive GigabitEthernet0/0/1
10.1.13.1/32 receive GigabitEthernet0/0/1
10.1.13.13/32 attached GigabitEthernet0/0/1
10.1.13.255/32 receive GigabitEthernet0/0/1
10.2.0.0/16 10.1.13.13 GigabitEthernet0/0/1
127.0.0.0/8 drop
224.0.0.0/4 drop
224.0.0.0/24 receive
240.0.0.0/4 drop
255.255.255.255/32 receive
Loading page 29...
Chapter 1: Packet Forwarding 9
b. Issue the command show adjacency, which shows you the address neighbors on each
interface.
R1# show adjacency
Protocol Interface Address
IP GigabitEthernet0/0/1 10.1.13.13(11)
IP GigabitEthernet0/0/1 227.0.0.0(3)
IPV6 GigabitEthernet0/0/1 2001:DB8:ACAD:10D1::D1(12)
IPV6 GigabitEthernet0/0/1 FE80::D1:1(3)
IPV6 GigabitEthernet0/0/1 FFFF::(3)
IP Serial0/1/1 point2point(13)
IPV6 Serial0/1/1 point2point(13)
c. Expand this a bit and issue the command show adjacency detail, and you will see that
the router has precompiled the Layer 2 headers and other details to allow it to package
information quickly.
R1# show adjacency detail
Protocol Interface Address
IP GigabitEthernet0/0/1 10.1.13.13(11)
20 packets, 1680 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
001AE3CFB8C37079B39236410800
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ip
ARP
IP GigabitEthernet0/0/1 227.0.0.0(3)
connectionid 1
0 packets, 0 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
01005E0000007079B39236410800
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ip
Inject p2mp Multicast
IPV6 GigabitEthernet0/0/1 2001:DB8:ACAD:10D1::D1(12)
5 packets, 570 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
001AE3CFB8C37079B392364186DD
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ipv6
IPv6 ND
IPV6 GigabitEthernet0/0/1 FE80::D1:1(3)
0 packets, 0 bytes
epoch 0
b. Issue the command show adjacency, which shows you the address neighbors on each
interface.
R1# show adjacency
Protocol Interface Address
IP GigabitEthernet0/0/1 10.1.13.13(11)
IP GigabitEthernet0/0/1 227.0.0.0(3)
IPV6 GigabitEthernet0/0/1 2001:DB8:ACAD:10D1::D1(12)
IPV6 GigabitEthernet0/0/1 FE80::D1:1(3)
IPV6 GigabitEthernet0/0/1 FFFF::(3)
IP Serial0/1/1 point2point(13)
IPV6 Serial0/1/1 point2point(13)
c. Expand this a bit and issue the command show adjacency detail, and you will see that
the router has precompiled the Layer 2 headers and other details to allow it to package
information quickly.
R1# show adjacency detail
Protocol Interface Address
IP GigabitEthernet0/0/1 10.1.13.13(11)
20 packets, 1680 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
001AE3CFB8C37079B39236410800
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ip
ARP
IP GigabitEthernet0/0/1 227.0.0.0(3)
connectionid 1
0 packets, 0 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
01005E0000007079B39236410800
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ip
Inject p2mp Multicast
IPV6 GigabitEthernet0/0/1 2001:DB8:ACAD:10D1::D1(12)
5 packets, 570 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
001AE3CFB8C37079B392364186DD
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ipv6
IPv6 ND
IPV6 GigabitEthernet0/0/1 FE80::D1:1(3)
0 packets, 0 bytes
epoch 0
Loading page 30...
10 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8
sourced in sev-epoch 0
Encap length 14
001AE3CFB8C37079B392364186DD
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ipv6
IPv6 ND
IPV6 GigabitEthernet0/0/1 FFFF::(3)
connectionid 1
8 packets, 720 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
3333000000007079B392364186DD
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ipv6
Inject p2mp Multicast
IP Serial0/1/1 point2point(13)
8 packets, 512 bytes
epoch 0
sourced in sev-epoch 0
Encap length 4
0F000800
P2P-ADJ
IPV6 Serial0/1/1 point2point(13)
18599 packets, 1756190 bytes
epoch 0
sourced in sev-epoch 0
Encap length 4
0F0086DD
P2P-ADJ
Router Interface Summary Table
Router
Model
Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0
(G0/0)
Gigabit Ethernet 0/1
(G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0
(G0/0)
Gigabit Ethernet 0/1
(G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
4221 Gigabit Ethernet 0/0/0
(G0/0/0)
Gigabit Ethernet 0/0/1
(G0/0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
4300 Gigabit Ethernet 0/0/0
(G0/0/0)
Gigabit Ethernet 0/0/1
(G0/0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
sourced in sev-epoch 0
Encap length 14
001AE3CFB8C37079B392364186DD
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ipv6
IPv6 ND
IPV6 GigabitEthernet0/0/1 FFFF::(3)
connectionid 1
8 packets, 720 bytes
epoch 0
sourced in sev-epoch 0
Encap length 14
3333000000007079B392364186DD
L2 destination address byte offset 0
L2 destination address byte length 6
Link-type after encap: ipv6
Inject p2mp Multicast
IP Serial0/1/1 point2point(13)
8 packets, 512 bytes
epoch 0
sourced in sev-epoch 0
Encap length 4
0F000800
P2P-ADJ
IPV6 Serial0/1/1 point2point(13)
18599 packets, 1756190 bytes
epoch 0
sourced in sev-epoch 0
Encap length 4
0F0086DD
P2P-ADJ
Router Interface Summary Table
Router
Model
Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0
(G0/0)
Gigabit Ethernet 0/1
(G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0
(G0/0)
Gigabit Ethernet 0/1
(G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
4221 Gigabit Ethernet 0/0/0
(G0/0/0)
Gigabit Ethernet 0/0/1
(G0/0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
4300 Gigabit Ethernet 0/0/0
(G0/0/0)
Gigabit Ethernet 0/0/1
(G0/0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
Loading page 31...
28 more pages available. Scroll down to load them.
Preview Mode
Sign in to access the full document!
100%
Study Now!
XY-Copilot AI
Unlimited Access
Secure Payment
Instant Access
24/7 Support
AI Assistant
Document Details
Subject
Information Technology