Skip to content
Class Notes

Lecture Notes for CCNP Enterprise: Core Networking (ENCOR) v8 Lab Manual, 2nd Edition

Lecture Notes for CCNP Enterprise: Core Networking (ENCOR) v8 Lab Manual, 2nd Edition helps you review course material quickly and effectively.

Preview 31 of 1089 pages

See the first 31 pages exactly as they appear in the document.

  1. Page 1
    Read page 1 as text

    CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Instructor’s Answer Key Cisco Networking Academy

  2. Page 2
  3. Page 3
    Read page 3 as text

    iv CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Contents Chapter 1 Packet Forwarding 1 1.1.2 Lab - Implement Inter-VLAN Routing (Instructor Version) 1 Topology 1 Addressing Table 1 Objectives 2 Background/Scenario 2 Required Resources 2 Instructions 2 Part 1: Build the Network and Configure Basic Device Settings 2 Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3 Switch 4 Part 3: Configure and Verify Router-based Inter-VLAN Routing 6 Part 4: Examine CAM and CEF Details 8 Router Interface Summary Table 10 Device Configs - Final 11 Router R1 11 Router R3 13 Switch D1 15 Switch D2 20 Chapter 2 Spanning Tree Protocol 25 2.1.2 Lab - Observe STP Topology Changes and Implement RSTP (Instructor Version) 25 Topology 25 Addressing Table 25 Objectives 25 Background/Scenario 25 Required Resources 26 Instructions 26 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 26 Part 2: Discover the Default Spanning Tree 28 Part 3: Implement and Observe Rapid Spanning Tree Protocol 33 Device Configs - Final 35 Switch D1 35 Switch D2 39 Switch A1 44

  4. Page 4
    Read page 4 as text

    v Chapter 3 Advanced Spanning Tree Tuning 47 3.1.2 Lab - Implement Advanced STP Modifications and Mechanisms (Instructor Version) 47 Topology 47 Addressing Table 47 Objectives 47 Background/Scenario 48 Required Resources 48 Instructions 48 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 48 Part 2: Implement and Observe Various Topology Tuning Methods 51 Part 3: Implement and Observe Various Topology Protection Mechanisms 59 Device Configs - Final 67 Switch D1 67 Switch D2 72 Switch A1 76 Chapter 4 Multiple Spanning Tree Protocol 81 4.1.2 Lab - Implement MST (Instructor Version) 81 Topology 81 Objectives 81 Background/Scenario 81 Required Resources 82 Instructions 82 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 82 Part 2: Implement and Observe MST 84 Part 3: Configure, Tune and Verify Basic MST Operation 86 Device Configs - Final 94 Switch D1 94 Switch D2 99 Switch A1 104 Chapter 5 VLAN Trunks and EtherChannel Bundles 107 5.1.2 Lab - Implement VTP (Instructor Version) 107 Topology 107 Objectives 107 Background/Scenario 107 Required Resources 109 Instructions 109 Part 1: Build the Network, Configure Basic Device Settings and Interface Addressing 109

  5. Page 5
    Read page 5 as text

    vi CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Part 2: Implement and Observe a VTPv2 Domain. 110 Part 3: Implement and Observe a VTPv3 Domain 117 Device Configs - Final 122 Switch D1 122 Switch D2 127 Switch A1 132 5.1.3 Lab - Implement EtherChannel (Instructor Version) 135 Topology 135 Objectives 135 Background/Scenario 135 Required Resources 136 Instructions 136 Part 1: Build the Network and Explore Dynamic Trunking Protocol 136 Part 2: Configure Static EtherChannel 140 Part 3: Implement EtherChannel Using PAgP 142 Part 4: Implement EtherChannel using LACP 144 Device Configs - Final 146 Switch D1 146 Switch D2 151 Switch A1 156 5.1.4 Lab - Tune and Optimize EtherChannel Operations (Instructor Version) 161 Topology 161 Objectives 161 Background/Scenario 161 Required Resources 161 Part 1: Build the Network and Configure Basic Device Settings 162 Part 2: Tune LACP-based EtherChannels 163 Part 3: Explore EtherChannel Load Balancing 165 Switch D1 165 Switch D2 170 Chapter 6 IP Routing Essentials 177 6.1.2 Lab - Investigate Static Routes (Instructor Version) 177 Topology 177 Addressing Table 177 Objectives 178 Background/Scenario 178 Required Resources 178 Instructions 178 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 178 Part 2: Configure and Investigate IPv4 Static Routes 181

  6. Page 6
    Read page 6 as text

    vii Part 3: Configure and Investigate IPv6 Static Routes 187 Part 4: Complete Static Routing Challenge 190 Router Interface Summary Table 192 Device Configs - Final 193 Router R1 193 Router R2 195 Router R3 197 6.1.3 Lab - Implement VRF-Lite (Instructor Version) 200 Topology 200 Addressing Table 200 Objectives 201 Background/Scenario 201 Required Resources 201 Part 1: Build the Network and Configure Basic Device Settings 201 Part 2: Configure and Verify VRF and Interface Addressing 206 Part 3: Configure and Verify Static Routing for Reachability Inside Each VRF 208 Router Interface Summary Table 211 Device Configs - Final 211 Router R1 211 Router R2 214 Router R3 216 Switch D1 218 Switch D2 223 Switch A1 228 Chapter 7 EIGRP 233 There are no labs in this chapter Chapter 8 OSPF 235 8.1.2 Lab - Implement Single-Area OSPFv2 (Instructor Version) 235 Topology 235 Addressing Table 235 Objectives 236 Background/Scenario 236 Required Resources 236 Instructions 237 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 237 Part 2: Configure Single-Area OSPFv2 239 Part 3: Configure and Verify the Advertising of a Default Route 246 Part 4: Implement OSPF Network Optimizing Features 247 Part 5: DR and BDR Placement 253

  7. Page 7
    Read page 7 as text

    viii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Router Interface Summary Table 256 Device Configs - Final 256 Router R1 256 Switch D1 258 Switch D2 262 Chapter 9 Advanced OSPF 267 9.1.2 Lab - Implement Multiarea OSPFv2 (Instructor Version) 267 Topology 267 Addressing Table 267 Objectives 268 Background/Scenario 268 Required Resources 268 Instructions 269 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 269 Part 2: Configure Multiarea OSPFv2 271 Part 3: Exploring Link-State Announcements 285 Router Interface Summary Table 293 Device Configs - Final 293 Router R1 293 Router R2 295 Router R3 297 Switch D1 298 Switch D2 303 9.1.3 Lab - OSPFv2 Route Summarization and Filtering (Instructor Version) 308 Topology 308 Addressing Table 308 Objectives 309 Background/Scenario 309 Required Resources 310 Instructions 310 Part 1: Build the Network, Configure Basic Device Settings and Routing 310 Part 2: OSPFv2 Route Summarization 318 Part 3: OSPFv2 Route Filtering 322 Router Interface Summary Table 325 Device Configs – Final 325 Router R1 325 Router R2 327 Router R3 329 Switch D1 331 Switch D2 335

  8. Page 8
    Read page 8 as text

    ix Chapter 10 OSPFv3 341 10.1.2 Lab - Implement Multiarea OSPFv3 (Instructor Version) 341 Topology 341 Addressing Table 341 Objectives 342 Background/Scenario 342 Required Resources 342 Instructions 343 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 343 Part 2: Configure Traditional OSPFv3 for IPv6 on D1 345 Part 3: Configure OSPFv3 for AF IPv4 and AF IPv6 347 Part 4: Verify OSPFv3 351 Part 5: Tune OSPFv3 357 Router Interface Summary Table 359 Device Configs - Final 360 Router R1 360 Router R2 362 Router R3 364 Switch D1 366 Switch D2 370 Chapter 11 BGP 377 11.1.2 Lab - Implement eBGP for IPv4 (Instructor Version) 377 Topology 377 Addressing Table 377 Objectives 378 Background/Scenario 378 Required Resources 378 Instructions 378 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 378 Part 2: Configure and Verify eBGP for IPv4 on all Routers 380 Part 3: Configure and Verify Route Summarization and Atomic Aggregate 387 Part 4: Configure and Verify Route Summarization with Atomic Aggregate and AS-Set 390 Part 5: Configure and Verify the Advertising of a Default Route 392 Router Interface Summary Table 392 Device Configs - Final 393 Router R1 393 Router R2 395 Router R3 397

  9. Page 9
    Read page 9 as text

    x CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 11.1.3 Lab - Implement MP-BGP (Instructor Version) 400 Topology 400 Addressing Table 400 Objectives 400 Background/Scenario 401 Required Resources 401 Instructions 401 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 401 Part 2: Configure MP-BGP on all Routers 403 Part 3: Verify MP-BGP 406 Part 4: Configure and Verify IPv6 Route Summarization 412 Router Interface Summary Table 414 Device Configs - Final 414 Router R1 414 Router R2 417 Router R3 419 Chapter 12 Advanced BGP 423 12.1.2 Lab - Implement BGP Path Manipulation (Instructor Version) 423 Topology 423 Addressing Table 423 Objectives 424 Background/Scenario 424 Required Resources 424 Instructions 424 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 424 Part 2: Configure and Verify Multi-Protocol BGP on all Routers 427 Part 3: Configure and Verify BGP Path Manipulation Settings on all Routers 431 Router Interface Summary Table 437 Device Configs - Final 437 Router R1 437 Router R2 440 Router R3 442 12.1.3 Lab - Implement BGP Communities (Instructor Version) 446 Topology 446 Addressing Table 446 Objectives 447 Background/Scenario 447 Required Resources 447

  10. Page 10
    Read page 10 as text

    xi Instructions 447 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 447 Part 2: Configure and Verify Multi-Protocol BGP on all Routers 450 Part 3: Configure and Verify BGP Communities on all Routers 455 Reflection Questions 461 Router Interface Summary Table 461 Device Configs - Final 462 Router R1 462 Router R2 465 Router R3 467 Chapter 13 Multicast 471 There are no labs in this chapter Chapter 14 QoS 473 There are no labs in this chapter Chapter 15 IP Services 475 15.1.2 Lab - Implement NTP (Instructor Version) 475 Topology 475 Addressing Table 475 Objectives 475 Background/Scenario 476 Required Resources 477 Instructions 477 Part 1: Build the Network, Configure Basic Device Settings and Routing 477 Part 2: Configure NTP in a P2P Network 480 Part 3: Configure NTP in a Multiaccess Broadcast Network 485 Router Interface Summary Table 488 Device Configs – Final 488 Router R1 488 Router R2 490 Router R3 492 Switch D1 493 Switch D2 497 Switch A1 502 15.1.3 Lab - Implement HSRP (Instructor Version) 505 Topology 505 Addressing Table 505 Objectives 506 Background/Scenario 506 Required Resources 506

  11. Page 11
    Read page 11 as text

    xii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Instructions 507 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 507 Part 2: Configure and Observe HSRP for IPv4 and IPv6 510 Part 3: Configure and Observe HSRP Authentication 513 Part 4: Configure and Observe HSRP Object Tracking 515 Device Configs - Final 517 Switch D1 517 Switch D2 523 Switch A1 529 15.1.4 Lab - Implement VRRP (Instructor Version) 533 Topology 533 Addressing Table 533 Objectives 534 Background/Scenario 534 Required Resources 535 Instructions 535 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 535 Part 2: Configure and Observe VRRP for IPv4 and IPv6 538 Part 3: Configure and Observe VRRP Object Tracking 542 Device Configs - Final 544 Switch D1 544 Switch D2 550 Switch A1 556 15.1.5 Lab - Implement GLBP (Instructor Version) 560 Topology 560 Addressing Table 560 Objectives 561 Background/Scenario 561 Required Resources 561 Instructions 562 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 562 Part 2: Configure and Observe GLBP for IPv4 and IPv6 565 Part 3: Configure and Observe GLBP Authentication 569 Part 4: Configure and Observe GLBP Object Tracking 570 Device Configs - Final 574 Switch D1 574 Switch D2 580 Switch A1 585

  12. Page 12
    Read page 12 as text

    xiii 15.1.6 Lab - Implement NAT (Instructor Version) 590 Topology 590 Addressing Table 590 Objectives 590 Background/Scenario 591 Required Resources 591 Instructions 591 Part 1: Build the Network and Configure Basic Device Settings 591 Part 2: Configure and Verify Static Inside NAT 594 Part 3: Configure and Verify Pooled NAT 596 Part 4: Configure and Verify NAT Overload 598 Router Interface Summary Table 599 Device Configs - Final 599 Router R1 599 Router R2 601 Router R3 603 Switch D1 604 Switch D2 609 Chapter 16 Overlay Tunnels 615 16.1.2 Lab - Implement a GRE Tunnel (Instructor Version) 615 Topology 615 Addressing Table 615 Objectives 615 Background/Scenario 616 Required Resources 616 Instructions 616 Part 1: Build the Network and Configure Basic Device Settings 616 Part 2: Configure and Verify GRE Tunnels with Static Routing 619 Part 3: Configure and Verify GRE Tunnels with Dynamic Routing 622 Part 4: Examine the Recursive Routing Problem with GRE 626 Router Interface Summary Table 627 Device Configs - Final 628 Router R1 628 Router R2 630 Router R3 632 16.1.3 Lab - Implement IPsec Site-to-Site VPNs (Instructor Version) 636 Topology 636 Addressing Table 636 Objectives 637 Background/Scenario 637 Required Resources 638

  13. Page 13
    Read page 13 as text

    xiv CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Instructions 638 Part 1: Build the Network, Configure Basic Device Settings and Static Routing 638 Part 2: Configure a Site-to-Site VPN using Crypto Maps Between R1 and R3 644 Part 3: Verify a Site-to-Site VPN Between R1 and R3 651 Router Interface Summary Table 657 Device Configs – Final 657 Router R1 657 Router R2 659 Router R3 661 Layer 3 Switch D1 663 Layer 3 Switch D3 668 16.1.4 Lab - Implement GRE over IPsec Site-to-Site VPNs (Instructor Version) 675 Topology 675 Addressing Table 675 Objectives 676 Background/Scenario 676 Required Resources 677 Instructions 677 Part 1: Build the Network, Configure Basic Device Settings and Static Routing 677 Part 2: Configure GRE over IPsec using a Crypto Map on R1 683 Part 3: Configure GRE over IPsec using a Tunnel IPsec Profile on R3 685 Part 4: Verify the GRE over IPsec Tunnel on R1 and R3 687 Router Interface Summary Table 691 Device Configs – Final 692 Router R1 692 Router R2 694 Router R3 696 Switch D1 698 Switch D3 703 16.1.5 Lab - Implement IPsec VTI Site-to-Site VPNs (Instructor Version) 709 Topology 709 Addressing Table 709 Objectives 710 Background/Scenario 710 Required Resources 711

  14. Page 14
    Read page 14 as text

    xv Instructions 711 Part 1: Build the Network, Configure Basic Device Settings and Static Routing 711 Part 2: Configure Static IPsec VTI on R1 and R3 717 Part 3: Verify Static IPsec VTI on R1 and R3 720 Router Interface Summary Table 724 Device Configs – Final 725 Router R1 725 Router R2 727 Router R3 729 Switch D1 731 Switch D3 737 Chapter 17 Wireless Signals and Modulation 745 There are no labs in this chapter Chapter 18 Wireless Infrastructure 747 There are no labs in this chapter Chapter 19 Understanding Wireless Roaming and Location Services 749 There are no labs in this chapter Chapter 20 Authenticating Wireless Clients 751 There are no labs in this chapter Chapter 21 Troubleshooting Wireless Connectivity 753 There are no labs in this chapter Chapter 22 Enterprise Network Architecture 755 There are no labs in this chapter Chapter 23 Fabric Technologies 757 There are no labs in this chapter Chapter 24 Network Assurance 759 24.1.2 Lab - Use Connectivity Tests and Debug for Network Assurance (Instructor Version) 759 Topology 759 Addressing Table 759 Objectives 760 Background/Scenario 760 Required Resources 760 Instructions 760 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 760 Part 2: Explore Ping Options and Extended Ping Commands 764

  15. Page 15
    Read page 15 as text

    xvi CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Part 3: Explore Traceroute Options and Extended Traceroute Commands 769 Part 4: Explore Common Debug Commands and Conditional Debugging 771 Part 5: Troubleshoot OSPF with Debugging 774 Router Interface Summary Table 777 Device Configs – Final 777 Router R1 777 Router R2 779 Router R3 781 24.1.3 Lab - Implement SNMP and Syslog (Instructor Version) 784 Topology 784 Addressing Table 784 Objectives 784 Background/Scenario 785 Required Resources 785 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 785 Part 2: Configure and Verify SNMP 788 Part 3: Configure and Verify Syslog 790 Router Interface Summary Table 794 Device Configs – Final 794 Router R1 794 Switch D1 800 Switch A1 807 24.1.4 Lab - Implement Flexible Netflow (Instructor Version) 812 Topology 812 Addressing Table 812 Objectives 812 Background/Scenario 812 Required Resources 813 Instructions 813 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 813 Part 2: Configure and Verify Flexible Netflow 816 Part 3: (Optional) Configure and Verify Netflow 820 Router Interface Summary Table 823 Device Configs – Final 823 Router R1 823 Switch D1 826 Switch A1 831

  16. Page 16
    Read page 16 as text

    xvii 24.1.5 Lab - Implement SPAN Technologies (Instructor Version) 835 Topology 835 Addressing Table 835 Objectives 835 Background/Scenario 836 Required Resources 836 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 836 Part 2: Configure and Verify Local SPAN 839 Part 3: Configure and Verify RSPAN 840 Device Configs – Final 842 Switch D1 842 Switch A1 847 24.1.6 Lab - Implement IP SLA (Instructor Version) 851 Topology 851 Addressing Table 851 Objectives 852 Background/Scenario 852 Required Resources 853 Instructions 853 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 853 Part 2: Configure and Observe IP SLA Operations 861 Part 3: Configure and Observe HSRP IP SLA Tracking 864 Router Interface Summary Table 866 Device Configs - Final 866 Router R1 866 Router R2 868 Router R3 870 Switch D1 872 Switch D2 879 Switch A1 886 Chapter 25 Secure Network Access Control 891 25.1.2 Lab - Install the CCNP Virtual Machine (Instructor Version) 891 Objectives 891 Background/Scenario 891 Required Resources 891 Instructions 891 Part 1: Prepare a Computer for Virtualization 891 Part 2: Configure Your Network and Explore the GUI 892

  17. Page 17
    Read page 17 as text

    xviii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Chapter 26 Network Device Access Control and Infrastructure Security 895 26.1.2 Lab - Implement IPv4 ACLs (Instructor Version) 895 Topology 895 Addressing Table 895 Objectives 896 Background/Scenario 896 Required Resources 896 Instructions 897 Part 1: Build the Network and Configure Basic Device Settings 897 Part 2: Verify Initial Connectivity 900 Part 3: Implement Standard ACLs on R3 900 Part 4: Implement a Named Extended ACL from Area 1 to Area 2 902 Part 5: Implement a Named Extended ACL from Area 2 to Area 1 904 Part 6: Implement a Port ACL on D2 905 Part 7: Implement a VLAN ACL on D2 906 Router Interface Summary Table 908 Device Configs – Final 908 Router R1 908 Router R3 911 Switch D1 913 Switch D2 917 Switch A1 922 26.1.3 Lab - Configure Protections for Passwords and Terminal Lines (Instructor Version) 926 Topology 926 Addressing Table 926 Objectives 926 Background/Scenario 926 Required Resources 927 Part 1: Build the Network and Configure Basic Device Settings 927 Part 2: Explore Password Protection Options 929 Part 3: Configure and Verify Terminal Line Protection Options 932 Reflection Questions 935 Router Interface Summary Table 935 Device Configs 936 Router R1 936 Switch D1 938 Switch A1 943 26.1.4 Lab - Configure Local and Server-Based AAA Authentication (Instructor Version) 947 Topology 947 Addressing Table 947 Objectives 947

  18. Page 18
    Read page 18 as text

    xix Background/Scenario 947 Required Resources 948 Part 1: Build the Network and Configure Basic Device Settings and Interface Addressing 948 Part 2: Configure Local AAA Authentication 950 Part 3: Configure Server-Based AAA using RADIUS on A1 953 Part 4: Configure Server-Based AAA using TACACS+ on D1 955 Router Interface Summary Table 958 Device Configs 958 Router R1 958 Switch D1 960 Switch A1 965 26.1.5 Lab - Implement CoPP (Instructor Version) 969 Topology 969 Addressing Table 969 Objectives 969 Background/Scenario 969 Required Resources 970 Part 1: Build the Network and Configure Basic Device Settings 970 Part 2: Verify Initial Connectivity 972 Part 3: Implement a CoPP Policy on R1 972 Part 4: Verify the CoPP Policy on R1. 975 Part 5: (Challenge) Further Classify Default Traffic 980 Reflection Questions 981 Router Interface Summary Table 981 Device Configs 981 Router R1 981 Router R2 984 Switch A1 986 Chapter 27 Virtualization 991 There are no labs in this chapter Chapter 28 Foundational Network Programmability Concepts 993 28.1.2 Lab - Construct a Basic Python Script (Instructor Version) 993 Objectives 993 Background/Scenario 993 Required Resources 993 Instructions 993 Part 1: Explore the Python Interpreter 993 Part 2: Explore Data Types, Variables, and Conversions 996 Part 3: Explore Lists and Dictionaries 998 Part 4: Explore User Input 1000

  19. Page 19
    Read page 19 as text

    xx CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Part 5: Explore If Functions and Loops 1001 Part 6: Explore File Access 1005 28.1.3 Lab - Use the Netmiko Python Module to Configure a Router (Instructor Version) 1009 Topology 1009 Addressing Table 1009 Objectives 1009 Background/Scenario 1009 Required Resources 1009 Instructions 1010 Part 1: Build the Network and Verify Connectivity 1010 Part 2: Import Netmiko Python Module 1012 Part 3: Use Netmiko to Connect to the SSH Service 1012 Part 4: Use Netmiko to Send a Verification Command 1013 Part 5: Use Netmiko to Send and Verify a Configuration 1014 Part 6: Use Netmiko to Send an Erroneous Command 1015 Part 7: Modify the Program Used in this Lab 1016 Router Interface Summary Table 1017 Device Configs - Final 1017 Router R1 1017 28.1.4 Lab - Use NETCONF to Access an IOS XE Router (Instructor Version) 1020 Topology 1020 Addressing Table 1020 Objectives 1020 Background/Scenario 1020 Required Resources 1020 Instructions 1021 Part 1: Build the Network and Verify Connectivity 1021 Part 2: Use a NETCONF Session to Gather Information 1023 Part 3: Use ncclient to Connect to NETCONF 1027 Part 4: Use ncclient to Retrieve the Configuration 1029 Part 5: Use ncclient to Configure a Device 1032 Part 6: Modify the Program Used in this Lab 1035 Router Interface Summary Table 1037 Device Configs – Final 1038 Router R1 1038 28.1.5 Lab - Use RESTCONF to Access an IOS XE Router (Instructor Version) 1041 Topology 1041 Addressing Table 1041 Objectives 1041 Background/Scenario 1041

  20. Page 20
    Read page 20 as text

    xxi Required Resources 1041 Instructions 1042 Part 1: Build the Network and Verify Connectivity 1042 Part 2: Configure an IOS XE Device for RESTCONF Access 1044 Part 3: Open and Configure Postman 1045 Part 4: Use Postman to Send GET Requests 1045 Part 5: Use Postman to Send a PUT Request 1048 Part 6: Use a Python Script to Send GET Requests 1050 Part 7: Use a Python Script to Send a PUT Request 1053 Programs Used in this Lab 1055 Router Interface Summary Table 1056 Device Configs – Final 1057 Router R1 1057 Chapter 29 Introduction to Automation Tools 1061 29.1.2 Lab - Construct an EEM Applet (Instructor Version) 1061 Topology 1061 Addressing Table 1061 Objectives 1061 Background/Scenario 1061 Required Resources 1062 Instructions 1062 Part 1: Build the Network and Verify Connectivity 1062 Part 2: Implement a Syslog Detector EEM Applet 1063 Part 3: Implement a CLI Detector EEM Applet 1066 Router Interface Summary Table 1069

  21. Page 21
    Read page 21 as text

    xxii CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 About This Lab Manual This is the only authorized Lab Manual for the Cisco Networking Academy CCNP Enterprise: Core Networking (ENCOR) v8 Course. The two courses in this CCNP Enterprise version 8.0 curriculum provide students with knowl- edge and skills needed to configure, operate, and troubleshoot large scale enterprise net- works. The courses cover a broad range of routing, switching, and wireless topics along with security best practices used in software-driven digital networks. CCNP Enterprise certification requires candidates to pass two 120-minute exams: CCNP and CCIE Enterprise Core ENCOR 350-401 and CCNP Enterprise Advanced Routing ENARSI 300-410. By the end of the CCNP course series, students gain practical, hands-on lab experience pre- paring them for the CCNP Enterprise certification exams and career-ready skills for profes- sional-level roles in the Information & Communication Technologies (ICT) industry. CCNP Enterprise: Core Networking This first course in the 2-course CCNP Enterprise series covers switching, routing, wireless, and related security topics, along with the technologies that support software-defined, pro- grammable networks. Comprehensive labs emphasize hands-on learning and practice to rein- force configuration and troubleshooting skills. This course directly prepares for the Cisco Enterprise Network Core Technologies exam (350- 401 ENCOR) to earn an Enterprise Core Specialist certification. Completion of both courses in the CCNP Enterprise course series prepares for the CCNP Enterprise certification exam. The 37 comprehensive labs in this manual emphasize hands-on learning and practice to rein- force configuration skills.

  22. Page 22
    Read page 22 as text

    CHAPTER 1 Packet Forwarding 1.1.2 Lab - Implement Inter-VLAN Routing (Instructor Version) Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only. Topology Addressing Table Device Interface IPv4 Address IPv6 Address IPv6 Link-Local R1 G0/0/1 10.1.13.1/24 2001:db8:acad:10d1::1/64 fe80::1:1 S0/1/1 10.1.3.1/24 2001:db8:acad:1013::1/64 fe80::1:2 D1 G1/0/11 10.1.13.13/24 2001:db8:acad:10d1::d1/64 fe80::d1:1 VLAN50 10.2.50.1/24 2001:db8:acad:1050::d1/64 fe80::d1:2 VLAN60 10.2.60.1/24 2001:db8:acad:1060::d1/64 fe80::d1:3 R3 S0/1/1 10.1.3.3/24 2001:db8:acad:1013::3/64 fe80::3:1 G0/0/1.75 10.3.75.1/24 2001:db8:acad:3075::1/64 fe80::3:2 G0/0/1.85 10.3.85.1/24 2001:db8:acad:3085::1/64 fe80::3:3 D2 VLAN75 10.3.75.14/24 2001:db8:acad:3075::d2/64 fe80::d2:1 PC1 NIC 10.2.50.50/24 2001:db8:acad:1050::50/64 EUI-64 PC2 NIC 10.2.60.50/24 2001:db8:acad:1060::50/64 EUI-64 PC3 NIC 10.3.75.50/24 2001:db8:acad:3075::50/64 EUI-64 PC4 NIC 10.3.85.50/24 2001:db8:acad:3085::50/64 EUI-64

  23. Page 23
    Read page 23 as text

    2 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Objectives Part 1: Build the Network and Configure Basic Device Settings Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3 Switch Part 3: Configure and Verify Router-based Inter-VLAN Routing Part 4: Examine CAM and CEF Details Background/Scenario The methods used to move packets and frames from one interface to the next have changed over the years. In this lab you will configure Inter-VLAN Routing in its various forms and then examine the dif- ferent tables used in making forwarding decisions. Note: This lab is an exercise in configuring and verifying various methods of Inter-VLAN routing and does not reflect networking best practices. Note: The routers and switches used with CCNP hands-on labs are Cisco 4221 and Cisco 3650, both with Cisco IOS XE Release 16.9.4 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and the output produced might vary from what is shown in the labs. Note: Ensure that the routers and switches have been erased and have no startup configurations. If you are unsure contact your instructor. Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices. Required Resources ■ 2 Routers (Cisco 4221 with Cisco IOS XE Release 16.9.4 universal image or comparable) ■ 2 Switches (Cisco 3650 with Cisco IOS XE Release 16.9.4 universal image or comparable) ■ 4 PCs (PC with terminal emulation program, such as Tera Term) ■ Console cables to configure the Cisco IOS devices via the console ports ■ Ethernet and serial cables as shown in the topology Instructions Part 1: Build the Network and Configure Basic Device Settings In Part 1, you will set up the network topology and configure basic settings. Step 1. Cable the network as shown in the topology. Attach the devices as shown in the topology diagram, and cable as necessary.

  24. Page 24
    Read page 24 as text

    Chapter 1: Packet Forwarding 3 Step 2. Configure basic settings for each devic e. a. Console into each router, enter global configuration mode, and apply the basic settings using the following startup configurations. Router R1 no ip domain lookup hostname R1 line con 0 exec-timeout 0 0 logging synchronous exit banner motd # This is R1, Inter-VLAN Routing Lab # Router R3 no ip domain lookup hostname R3 line con 0 exec-timeout 0 0 logging synchronous exit banner motd # This is R3, Inter-VLAN Routing Lab # Switch D1 no ip domain lookup hostname D1 line con 0 exec-timeout 0 0 logging synchronous exit banner motd # This is D1, Inter-VLAN Routing Lab # interface range g1/0/1-24, g0/0, g1/1/1-4 shutdown Switch D2 no ip domain lookup hostname D2 line con 0 exec-timeout 0 0 logging synchronous exit banner motd # This is D2, Inter-VLAN Routing Lab # interface range g1/0/1-24, g0/0, g1/1/1-4 shutdown b. Set the clock on each device to UTC time. c. Save the running configuration to startup-config.

  25. Page 25
    Read page 25 as text

    4 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Part 2: Configure and Verify Inter-VLAN Routing on a Layer 3 Switch In Part 2, you will configure and verify inter-VLAN Routing on a Layer 3 switch. For this part, you will focus on the configuration of switch D1 and router R1. Note: The default Switch Database Manager (SDM) template on a Catalyst 3650 running IOS XE supports dual- stacked operations and requires no additional configuration for our purposes. If you are using an alternate device running Cisco IOS, check the SDM template with the privileged EXEC command show sdm prefer and verify that the ‘number of IPv6 unicast routes’ supported is not zero. If it is zero, you must change the SDM template to one that supports IPv6 using the sdm prefer template_name global configuration command. The template name will vary depending on the IOS version. Changing the template will require a reboot. Step 1. On D1, configure Inter-VLAN Routing. a. Configure D1 to support IP routing and IPv6 unicast routing. D1(config)# ip routing D1(config)# ipv6 unicast-routing b. Create the VLANs and name them as specified in the topology. D1(config)# vlan 50 D1(config-vlan)# name Group50 D1(config-vlan)# exit D1(config)# vlan 60 D1(config-vlan)# name Group60 D1(config-vlan)# exit c. Assign the G1/0/23 to VLAN 50 and G1/0/24 to VLAN 60. D1(config)# interface g1/0/23 D1(config-if)# switchport mode access D1(config-if)# switchport access vlan 50 D1(config-if)# no shutdown D1(config-if)# exit D1(config)# interface g1/0/24 D1(config-if)# switchport mode access D1(config-if)# switchport access vlan 60 D1(config-if)# no shutdown D1(config-if)# exit d. Create the Switched Virtual Interfaces (SVI) that will support VLAN 50 and VLAN 60. D1(config)# interface vlan 50 D1(config-if)# ip address 10.2.50.1 255.255.255.0 D1(config-if)# ipv6 address fe80::d1:2 link-local D1(config-if)# ipv6 address 2001:db8:acad:1050::d1/64 D1(config-if)# no shutdown D1(config-if)# exit D1(config)# interface vlan 60 D1(config-if)# ip address 10.2.60.1 255.255.255.0 D1(config-if)# ipv6 address fe80::d1:3 link-local D1(config-if)# ipv6 address 2001:db8:acad:1060::d1/64

  26. Page 26
    Read page 26 as text

    Chapter 1: Packet Forwarding 5 D1(config-if)# no shutdown D1(config-if)# exit e. Configure PC1 with the addresses specified in the Addressing Table. Further assign default gateways of 10.2.50.1 and 2001:db8:acad:1050::d1. f. Configure PC2 with the addresses specified in the Addressing Table. Further assign default gateways of 10.2.60.1 and 2001:db8:acad:1060::d1. g. From PC1, ping PC2’s IPv4 and IPv6 address. Success indicates that D1 is performing Inter-VLAN Routing. h. Examine the MAC address table on D1 with the command show mac address-table dynamic . You should see PC1 and PC2’s mac addresses listed with the ports they are connected to. D1# show mac address-table dynamic Mac Address Table ------------------------------------------- Vlan Mac Address Type Ports ---- ----------- -------- ----- 50 0050.56b3.8137 DYNAMIC Gi1/0/23 60 0050.56b3.994b DYNAMIC Gi1/0/24 Total Mac Addresses for this criterion: 2 Step 2. On D1, configure a routed port and default routes towards R1. a. Configure interface G1/0/11 as a routed port with addressing as specified in the topol- ogy diagram. D1(config)# interface g1/0/11 D1(config-if)# no switchport D1(config-if)# ip address 10.1.13.13 255.255.255.0 D1(config-if)# ipv6 address fe80::d1:1 link-local D1(config-if)# ipv6 address 2001:db8:acad:10d1::d1/64 D1(config-if)# no shutdown D1(config-if)# exit b. Verify that interface G1/0/11 is no longer associated with the VLAN database by issu- ing the command show vlan brief | i g1/0/11 . There should be no output. c. Configure static default routes for IPv4 and IPv6 that point towards the interface address at R1. D1(config)# ip route 0.0.0.0 0.0.0.0 10.1.13.1 D1(config)# ipv6 route ::/0 2001:db8:acad:10d1::1 You may see the error message %ADJ-3-RESOLVE_REQ: Adj resolve request: Failed to resolve 10.1.13.1 . This indicates that the switch sent an ARP for the MAC address of 10.1.13.1 and got no reply. We will configure that next. Step 3. On R1, configure interface addressing and static routing. a. Configure R1 to support IPv6 unicast routing. R1(config)# ipv6 unicast-routing b. Configure the interfaces on R1 with the addresses specified in the Addressing Table. R1(config)# interface g0/0/1 R1(config-if)# ip address 10.1.13.1 255.255.255.0

  27. Page 27
    Read page 27 as text

    6 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 R1(config-if)# ipv6 address fe80::1:1 link-local R1(config-if)# ipv6 address 2001:db8:acad:10d1::1/64 R1(config-if)# no shutdown R1(config-if)# exit R1(config)# interface s0/1/1 R1(config-if)# ip address 10.1.3.1 255.255.255.0 R1(config-if)# ipv6 address fe80::1:2 link-local R1(config-if)# ipv6 address 2001:db8:acad:1013::1/64 R1(config-if)# no shutdown R1(config-if)# exit c. Configure routing on R1. Configure static routes to the networks supported by D1 and a default route for everything else point at R3. R1(config)# ip route 10.2.0.0 255.255.0.0 10.1.13.13 R1(config)# ipv6 route 2001:db8:acad:1050::/64 2001:db8:acad:10d1::d1 R1(config)# ipv6 route 2001:db8:acad:1060::/64 2001:db8:acad:10d1::d1 R1(config)# R1(config)# ip route 0.0.0.0 0.0.0.0 10.1.3.3 R1(config)# ipv6 route ::/0 2001:db8:acad:1013::3 R1(config)# d. From R1, ping PC2 with IPv4 and IPv6. All pings should be successful. Part 3: Configure and Verify Router-based Inter-VLAN Routing Note: The default Switch Database Manager (SDM) template on a Catalyst 3650 running IOS XE supports dual- stacked operations and requires no additional configuration for our purposes. If you are using an alternate device running Cisco IOS, check the SDM template with the privileged exec command show sdm prefer and verify that the ‘number of IPv6 unicast routes’ supported is not zero. If it is zero, you must change the SDM template to one that supports IPv6 using the sdm prefer tem- plate_name global configuration command. The template name will vary depending on the IOS ver- sion. Changing the template will require a reboot. Step 1. Configure D2 to support the required VLANs. a. Create the VLANs and name them as specified in the topology. In addition, create vlan 999 and name it NativeVLAN. D2(config)# vlan 75 D2(config-vlan)# name Group75 D2(config-vlan)# exit D2(config)# vlan 85 D2(config-vlan)# name Group85 D2(config-vlan)# exit D2(config)# vlan 999 D2(config-vlan)# name NativeVLAN D2(config-vlan)# exit b. Assign the G1/0/23 to VLAN 75 and G1/0/24 to VLAN 85.

  28. Page 28
    Read page 28 as text

    Chapter 1: Packet Forwarding 7 c. Create a Switched Virtual Interface that will operate within VLAN 75. D2(config)# interface vlan75 D2(config-if)# ip address 10.3.75.14 255.255.255.0 D2(config-if)# ipv6 address fe80::d2:1 link-local D2(config-if)# ipv6 address 2001:db8:acad:3075::d2/64 D2(config-if)# no shutdown D2(config-if)# exit d. Create an IEEE 802.1Q-based trunk to R3. As a part of the configuration of the trunk, set the native VLAN to VLAN 999 and filter the VLANs allowed on the trunk down to only those that are configured. D2(config)# interface g1/0/11 D2(config-if)# switchport mode trunk D2(config-if)# switchport trunk native vlan 999 D2(config-if)# switchport trunk allowed vlan 75,85,999 D2(config-if)# no shutdown D2(config-if)# exit Step 2. Configure R3 to support Inter-VLAN Routing. a. Configure R3 to support IPv6 unicast routing. b. Configure the subinterfaces needed on R3 interface G0/0/1 to support the configured VLANs. Ensure an interface is created for the native VLAN 999. R3(config)# interface g0/0/1 R3(config-if)# no shutdown R3(config-if)# exit R3(config)# interface g0/0/1.75 R3(config-subif)# encapsulation dot1q 75 R3(config-subif)# ip address 10.3.75.1 255.255.255.0 R3(config-subif)# ipv6 address fe80::3:2 link-local R3(config-subif)# ipv6 address 2001:db8:acad:3075::1/64 R3(config-subif)# no shutdown R3(config-subif)# exit R3(config)# interface g0/0/1.85 R3(config-subif)# encapsulation dot1q 85 R3(config-subif)# ip address 10.3.85.1 255.255.255.0 R3(config-subif)# ipv6 address fe80::3:3 link-local R3(config-subif)# ipv6 address 2001:db8:acad:3085::1/64 R3(config-subif)# no shutdown R3(config-subif)# exit R3(config)# interface g0/0/1.999 R3(config-subif)# encapsulation dot1q 999 native R3(config-subif)# no shutdown R3(config-subif)# exit c. Configure PC3 with the addresses specified in the Addressing Table. Further assign default gateways of 10.3.75.1 and 2001:db8:acad:3075::1. d. Configure PC4 with the addresses specified in the Addressing Table. Further assign default gateways of 10.3.85.1 and 2001:db8:acad:3085::1. e. From PC3, ping PC4’s IPv4 and IPv6 address. Success indicates that R3 is performing Inter-VLAN Routing.

  29. Page 29
    Read page 29 as text

    8 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 Step 3. Configure static routing to enable end-to-end reachability. a. On R3, configure interface S0/1/1 with the addresses specified in the Addressing Table. R3(config)# interface s0/1/1 R3(config-if)# ip address 10.1.3.3 255.255.255.0 R3(config-if)# ipv6 address fe80::3:1 link-local R3(config-if)# ipv6 address 2001:db8:acad:1013::3/64 R3(config-if)# no shutdown R3(config-if)# exit b. On R3, configure a static default route for IPv4 and IPv6 that points to R1’s S0/1/1 interface addresses. R3(config)# ip route 0.0.0.0 0.0.0.0 10.1.3.1 R3(config)# ipv6 route ::/0 2001:db8:acad:1013::1 c. On PC3, issue a ping to PC2. The ping should be successful. This indicates the routing solution is working in both directions. Part 4: Examine CAM and CEF Details In Part 4, you will examine CEF details on the devices you have configured. The objective of Cisco Express Forwarding is to speed up the process of moving data from one interface to another. To do this, as much data as possible is precompiled into two tables, the Forwarding Information Base (FIB) and the Adjacency Table. These are basically shortcuts that identify what interface a packet should be sent out of and how it should be framed. a. Issue the command show ip cef to see the compiled CEF table, which tells the device what to do with a frame or packet based on its destination address. This table gives the device a quick answer and keeps the CPU from getting directly involved. For example, packets destined to the 10.2.0.0/16 network are quickly resolved to the next-hop address of 10.1.13.13 exiting interface g0/0/1. R1# show ip cef Prefix Next Hop Interface 0.0.0.0/0 10.1.3.3 Serial0/1/1 0.0.0.0/8 drop 0.0.0.0/32 receive 10.1.3.0/24 attached Serial0/1/1 10.1.3.0/32 receive Serial0/1/1 10.1.3.1/32 receive Serial0/1/1 10.1.3.3/32 10.1.3.3 Serial0/1/1 10.1.3.255/32 receive Serial0/1/1 10.1.13.0/24 attached GigabitEthernet0/0/1 10.1.13.0/32 receive GigabitEthernet0/0/1 10.1.13.1/32 receive GigabitEthernet0/0/1 10.1.13.13/32 attached GigabitEthernet0/0/1 10.1.13.255/32 receive GigabitEthernet0/0/1 10.2.0.0/16 10.1.13.13 GigabitEthernet0/0/1 127.0.0.0/8 drop 224.0.0.0/4 drop 224.0.0.0/24 receive 240.0.0.0/4 drop 255.255.255.255/32 receive

  30. Page 30
    Read page 30 as text

    Chapter 1: Packet Forwarding 9 b. Issue the command show adjacency , which shows you the address neighbors on each interface. R1# show adjacency Protocol Interface Address IP GigabitEthernet0/0/1 10.1.13.13(11) IP GigabitEthernet0/0/1 227.0.0.0(3) IPV6 GigabitEthernet0/0/1 2001:DB8:ACAD:10D1::D1(12) IPV6 GigabitEthernet0/0/1 FE80::D1:1(3) IPV6 GigabitEthernet0/0/1 FFFF::(3) IP Serial0/1/1 point2point(13) IPV6 Serial0/1/1 point2point(13) c. Expand this a bit and issue the command show adjacency detail , and you will see that the router has precompiled the Layer 2 headers and other details to allow it to package information quickly. R1# show adjacency detail Protocol Interface Address IP GigabitEthernet0/0/1 10.1.13.13(11) 20 packets, 1680 bytes epoch 0 sourced in sev-epoch 0 Encap length 14 001AE3CFB8C37079B39236410800 L2 destination address byte offset 0 L2 destination address byte length 6 Link-type after encap: ip ARP IP GigabitEthernet0/0/1 227.0.0.0(3) connectionid 1 0 packets, 0 bytes epoch 0 sourced in sev-epoch 0 Encap length 14 01005E0000007079B39236410800 L2 destination address byte offset 0 L2 destination address byte length 6 Link-type after encap: ip Inject p2mp Multicast IPV6 GigabitEthernet0/0/1 2001:DB8:ACAD:10D1::D1(12) 5 packets, 570 bytes epoch 0 sourced in sev-epoch 0 Encap length 14 001AE3CFB8C37079B392364186DD L2 destination address byte offset 0 L2 destination address byte length 6 Link-type after encap: ipv6 IPv6 ND IPV6 GigabitEthernet0/0/1 FE80::D1:1(3) 0 packets, 0 bytes epoch 0

  31. Page 31
    Read page 31 as text

    10 CCNP Enterprise: Core Networking (ENCOR) Lab Manual Version 8 sourced in sev-epoch 0 Encap length 14 001AE3CFB8C37079B392364186DD L2 destination address byte offset 0 L2 destination address byte length 6 Link-type after encap: ipv6 IPv6 ND IPV6 GigabitEthernet0/0/1 FFFF::(3) connectionid 1 8 packets, 720 bytes epoch 0 sourced in sev-epoch 0 Encap length 14 3333000000007079B392364186DD L2 destination address byte offset 0 L2 destination address byte length 6 Link-type after encap: ipv6 Inject p2mp Multicast IP Serial0/1/1 point2point(13) 8 packets, 512 bytes epoch 0 sourced in sev-epoch 0 Encap length 4 0F000800 P2P-ADJ IPV6 Serial0/1/1 point2point(13) 18599 packets, 1756190 bytes epoch 0 sourced in sev-epoch 0 Encap length 4 0F0086DD P2P-ADJ Router Interface Summary Table Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2 1800 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1) 1900 Gigabit Ethernet 0/0 (G0/0) Gigabit Ethernet 0/1 (G0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1) 2801 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1) 2811 Fast Ethernet 0/0 (F0/0) Fast Ethernet 0/1 (F0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1) 2900 Gigabit Ethernet 0/0 (G0/0) Gigabit Ethernet 0/1 (G0/1) Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1) 4221 Gigabit Ethernet 0/0/0 (G0/0/0) Gigabit Ethernet 0/0/1 (G0/0/1) Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1) 4300 Gigabit Ethernet 0/0/0 (G0/0/0) Gigabit Ethernet 0/0/1 (G0/0/1) Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)

1058 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Information Technology study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.