Changes between Version 19 and Version 20 of Cnbp2019/Agenda/NetworkSetup


Ignore:
Timestamp:
Feb 27, 2019, 8:48:17 AM (5 years ago)
Author:
admin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • Cnbp2019/Agenda/NetworkSetup

    v19 v20  
    248248FAC1(config-router)#router-id 10.XY.2.1
    249249}}}
    250     * You are announcing to the default route via FAC1. Use this command for this
    251 {{{
    252 FAC1config-router)#default-information originate
     250    * You are announcing the core network and connected subnets. Use this command for this
     251{{{
     252FAC1(config-router)#redistribute connected subnets
     253FAC1(config-router)#network 10.XY.0.0 0.0.0.255 area 2
    253254FAC1(config-router)#exit
    254255}}}
    … …  
    269270FAC1(config-rtr)#router-id 10.XY.2.1
    270271}}}
    271     * You are going to originate the default route too. Use this command for that,
    272 {{{
    273 FAC1(config-rtr)#default-information originate
     272    * You are going to redistribute the connected networks. Use this command for that,
     273{{{
     274FAC1(config-rtr)#redistribute connected
    274275FAC1(config-rtr)#exit
    275276}}}
    … …  
    290291FAC2(config)#router ospf 1
    291292FAC2(config-router)#router-id 10.XY.3.1
     293FAC2(config-router)#redistribute connected subnets
     294FAC2(config-router)#network 10.XY.0.0 0.0.0.255 area 2
    292295FAC2(config-router)#exit
    293296FAC2(config)# ip route 0.0.0.0 0.0.0.0 10.0.0.6
    294 FAC1(config)# ipv6 unicast-routing
    295 FAC1(config)#ipv6 router ospf 1
     297FAC2(config)# ipv6 unicast-routing
     298FAC2(config)#ipv6 router ospf 1
    296299FAC2(config-rtr)#router-id 10.XY.3.1
    297300FAC2(config-rtr)#exit
    … …  
    300303FAC2(config-if)#ipv6 ospf 1 area 2
    301304FAC2(config-if)#exit
     305FAC2(config)ipv6 route ::/0 2401:DD00:20XY:2::FFFF
    302306}}}
    303307
    … …  
    323327}}}
    324328
    325 Repeat the same for other VLAN's as well.
     329Repeat the same for all other VLAN's in FAC1.
    326330
    327331* Then we need to create vlan interfaces and assign routing.
    … …  
    360364
    361365
    362 == Assign Interfaces  ==
     366=== Assign Interfaces  ===
    363367
    364368On L3 devices we can have three types of links,
    … …  
    400404FAC1(config-if)#switchport trunk encapsulation dot1q
    401405FAC1(config-if)#description link to Building 2
    402 FAC1(config-if)#
    403 FAC1(config-if)#
     406FAC1(config-if)#switchport trunk allowed vlan 1,2,20,30,1002-1005
     407FAC1(config-if)#switchport trunk native vlan 2
    404408FAC1(config-if)#exit
    405409}}}
    … …  
    420424}}}
    421425
     426== Distribution Layer ==
     427
     428For the lab purposes, we are using an L3 capable switch platform to illustrate a manageable L2 switch. We need to configure following on the '''FAC1-BLD1-FL2''',
     429
     430* Management Network
     431* Trunk Ports
     432*  Access Ports
     433
     434=== Configure Management Network ===
     435
     436* Create VLAN 2 which is the MGT Network for Faculty 1. Then assign an IP address for the VLAN 2 interface.
     437{{{
     438FAC1-BLD1-FL2# vlan database
     439FAC1-BLD1-FL2(vlan)# vlan 2 name FAC1_MGT
     440FAC1-BLD1-FL2(vlan)# exit
     441FAC1-BLD1-FL2# config t
     442FAC1-BLD1-FL2(config)# interface vlan 2
     443FAC1-BLD1-FL2(config-if)# ip address 10.XY.2.4 255.255.255.0
     444FAC1-BLD1-FL2(config-if)# exit
     445}}}
     446*  apply default routing for the subnet.
     447{{{
     448FAC1-BLD1-FL2(config)#ip route 0.0.0.0 0.0.0.0 10.0.2.1
     449}}}
     450
     451=== Configure Trunk Ports ===
     452
     453* Before configuring trunks we need to define the vlans first.
     454{{{
     455FAC1-BLD1-FL2# vlan database
     456FAC1-BLD1-FL2(vlan)# vlan 10 name DEPT1
     457FAC1-BLD1-FL2(vlan)# vlan 20 name DEPT2
     458FAC1-BLD1-FL2(vlan)#exit
     459}}}
     460
     461* This FAC1-BLD1-FL2 has two trunk ports configure them to allow VLAN 10,20 to fa1/15 and VLAN 20 on fa1/14. We need to configure Native VLAN to VLAN 2 as well.
     462{{{
     463FAC1-BLD1-FL2(config)#interface FastEthernet 1/15
     464FAC1-BLD1-FL2(config-if)#switchport mode trunk
     465FAC1-BLD1-FL2(config-if)#switchport trunk encapsulation dot1q
     466FAC1-BLD1-FL2(config-if)#description link to FAC1_L3
     467FAC1-BLD1-FL2(config-if)#switchport trunk allowed vlan 1,2,10,20,1002-1005
     468FAC1-BLD1-FL2(config-if)#switchport trunk native vlan 2
     469FAC1-BLD1-FL2(config-if)#exit
     470FAC1-BLD1-FL2(config)#interface FastEthernet 1/14
     471FAC1-BLD1-FL2(config-if)#switchport mode trunk
     472FAC1-BLD1-FL2(config-if)#switchport trunk encapsulation dot1q
     473FAC1-BLD1-FL2(config-if)#description link to FAC1-BLD1-FL2
     474FAC1-BLD1-FL2(config-if)#switchport trunk allowed vlan 1,2,20,1002-1005
     475FAC1-BLD1-FL2(config-if)#switchport trunk native vlan 2
     476FAC1-BLD1-FL2(config-if)#exit
     477}}}
     478
     479
     480=== Configure Access Ports ===
     481
     482* We have only one access port
     483
     484{{{
     485FAC1-BLD1-FL2(config)#interface FastEthernet 1/0
     486FAC1-BLD1-FL2(config-if)#switchport mode access
     487FAC1-BLD1-FL2(config-if)#switchport access vlan 20
     488FAC1-BLD1-FL2(config-if)#description link to PC2
     489FAC1-BLD1-FL2(config-if)#exit
     490}}}
     491
     492
     493== Configuring the rest L2 network ==
     494
     495* Right-click on FAC1-BLD1-FL1 and select '''Configure'''
     496* Under Settings, Select
     497   * Port: 7
     498   * VLAN: 2
     499   * Type: dot1q
     500* Click Add
     501* Repeat again and select,
     502   * Port: 0
     503   * VLAN: 10
     504   * Type: access
     505* Click Add
     506* Click Apply and OK
     507
     508Repeat the same procedure for all other L2 switches but make sure you change the ports as per the tables below,
     509
     510
     511
     512||=     **FAC1-BLD1-FL1**       =||=    **Type**        =||=    **VLANS**       =||     
     513||      e0      ||      Access  ||      10      ||     
     514||      e7      ||      dot1q   ||      2       ||     
     515                                                               
     516----                                                           
     517                                                               
     518||=     **FAC1-BLD1-FL2**       =||=    **Type**        =||=    **VLANS**       =||
     519||      e0      ||      Access  ||      20      ||
     520||      e6      ||      dot1q   ||      2       ||
     521||      e7      ||      dot1q   ||      2      ||
     522                                                               
     523----                                                            ||
     524                                                               
     525||=     **FAC1-BLD2-FL0**       =||=    **Type**        =||=    **VLANS**       =||=    **Native VLAN** =||
     526||      e0      ||      Access  ||      20      ||      -       ||
     527||      e1      ||      Access  ||      30      ||      -       ||
     528||      e7      ||      Trunk   ||      20, 30  ||      2       ||
     529                                                               
     530----                                                           
     531                                                               
     532||=     **FAC2-BLD1-FL1**       =||=    **Type**        =||=    **VLANS**       =||=    **Native VLAN** =||
     533||      e0      ||      Access  ||      60      ||      -       ||
     534||      e1      ||      Access  ||      70      ||      -       ||
     535||      e7      ||      Trunk   ||      60, 70  ||      3       ||
     536                                                               
     537----                                                           
     538                                                               
     539||=     **FAC2-BLD2-FL1**       =||=    **Type**        =||=    **VLANS**       =||=    **Native VLAN** =||
     540||      e0      ||      Access  ||      70      ||      -       ||
     541||      e6      ||      Trunk   ||      80      ||      3       ||
     542||      e7      ||      Trunk   ||      70, 80  ||      3       ||
     543                                                               
     544----                                                           
     545                                                               
     546||=     **FAC2-BLD2-FL3**       =||=    **Type**        =||=    **VLANS**       =||
     547||      e0      ||      Access  ||      80      ||
     548||      e7      ||      Trunk   ||      3       ||
     549                                                               
     550----                                                           
     551                                                               
     552||=     **DMC** =||=    **Type**        =||     **VLANS**       ||
     553||      e0      ||      Access  ||      1       ||
     554||      e1      ||      Access  ||      1       ||
     555||      e7      ||      Access  ||      1       ||
     556
     557
    422558
    423559
    … …  
    427563
    428564
    429 
    430 
    431  - Next configure fast ethernet interface which connects to the Core device and give a description
    432 {{{
    433 Dept1Sw(config)#interface FastEthernet 1/15
    434 Dept1Sw(config-if)#switchport mode trunk
    435 Dept1Sw(config-if)#switchport trunk encapsulation dot1q
    436 Dept1Sw(config-if)#description link to FacACore
    437 Dept1Sw(config-if)#exit
    438 }}}
    439  - Configure fast ethernet interface, which connects to the User PC to an access port of VLAN 10 and give a description
    440 {{{
    441 Dept1Sw(config)#interface FastEthernet 1/0
    442 Dept1Sw(config-if)#switchport mode access
    443 Dept1Sw(config-if)#switchport access vlan 10
    444 Dept1Sw(config-if)#description link to Dept1PC
    445 Dept1Sw(config-if)#exit
    446 }}}
    447  - Follow the same steps for Dept2Sw
    448 {{{
    449 Dept2Sw(config)# vlan 20
    450 Dept2Sw(config-vlan)# name Dept2
    451 Dept2Sw(config-vlan)# exit
    452 Dept2Sw(config)#interface FastEthernet 1/15
    453 Dept2Sw(config-if)#switchport mode trunk
    454 Dept2Sw(config-if)#switchport trunk encapsulation dot1q
    455 Dept2Sw(config-if)#description link to FacBCore
    456 Dept2Sw(config-if)#exit
    457 Dept2Sw(config)#interface FastEthernet 1/0
    458 Dept2Sw(config-if)#switchport mode access
    459 Dept2Sw(config-if)#switchport access vlan 20
    460 Dept2Sw(config-if)#description link to Dept2PC
    461 Dept2Sw(config-if)#exit
    462 }}}
    463  - You have configured your distribution layer. Check and verify the connectivity
    464565    * Go to Dept1PC and try ping the gateway (VLAN 10 Interface IP of FacACore)
    465566{{{
    … …  
    469570    * Try the same in Dept2PC
    470571
    471 ==== Connecting LAN to the Router ====
    472 
    473 Your Campus LAN is connecting to the outside through a border router. Your !CampusCore switch connects to this border router. In this link router's fast ethernet interface IP connects with the Core switch's vlan interface IP. Let's start configuring this link starting from the !CampusCore.
    474 
    475  - Login to !CampusCore switch and switch to config mode
    476  - Create VLAN 255 and name it Public
    477 {{{
    478 CampusCore(config)# vlan 255
    479 CampusCore(config-vlan)# name Public
    480 CampusCore(config-vlan)# exit
    481 }}}
    482  - Then assign the IP Address to the VLAN interface. Get the IP from the [#point1 table]. In the real situation this VLAN could be a public IP range which is assign to your Institute. In this Lab we are using a private IP block.
    483 {{{
    484 CampusCore(config)#interface vlan 255
    485 CampusCore(config-if)# ip address 10.0.255.253 255.255.255.0
    486 CampusCore(config-if)# exit
    487 }}}
    488  - Next configure fast ethernet interface which connects to the Core device and give a description.You can find then from the [#point2 table]
    489 {{{
    490 CampusCore(config)#interface FastEthernet 1/15
    491 CampusCore(config-if)#switchport mode access
    492 CampusCore(config-if)#switchport access vlan 255
    493 CampusCore(config-if)#description link to Border Router
    494 CampusCore(config-if)#speed 100
    495 CampusCore(config-if)#duplex full
    496 CampusCore(config-if)#exit
    497 }}}
    498 '''Note''': In the real environment you might not need Duplex and Speed. It will be negotiate automatically
    499 
    500  - Now you have done !CampusCore configuration. Let's start routers Configuration.
    501  - Login to !BorderRt Router and switch to config mode
    502  - Router's IP allocation is as follows. You can get your Router's IP address from [wiki:2017Ipv6ipallocation here]
    503 ||= Interface Name =||= IP Address =||
    504 ||Fast Ethernet 0/0 ||10.0.255.254/24||
    505 ||Fast Ethernet 0/1 ||<Your Routers WAN IP>||
    506  - Let's configure the LAN port (fa 0/0)
    507 {{{
    508 BorderRt(config)#interface fastEthernet 0/0
    509 BorderRt(config-if)#ip address 10.0.255.254 255.255.255.0
    510 BorderRt(config-if)#description LAN Port connects to CampusCore
    511 BorderRt(config-if)#no shutdown
    512 BorderRt(config-if)#speed 100
    513 BorderRt(config-if)#duplex full
    514 BorderRt(config-if)#exit
    515 }}}
    516  - Configure the WAN port (fa 0/1)
    517 {{{
    518 BorderRt(config)#interface fastEthernet 0/1
    519 BorderRt(config-if)#ip address x.x.x.x 255.255.255.0
    520 BorderRt(config-if)#description WAN Port Bridged with CampusLAN host
    521 BorderRt(config-if)#no shutdown
    522 BorderRt(config-if)#exit
    523 }}}
    524  - You have successfully finished connecting !CampusCore to the !BorderRt router. Let's verify the connectivity using the ping command.
    525  - Go to !BorderRt and ping to !CampusCore switch's VLAN 255 Interface IP
    526 {{{
    527 ping 10.0.255.253
    528 }}}
    529  - Now Check the routers connectivity in WAN port. Ping to the WAN Gateway
    530 {{{
    531 ping 192.248.6.254
    532 }}}
    533  - Both these ping commands should give you a reply
    534 
    535 ==== Routing ====
    536 If You go to the Dept1PC and try a Ping to Dept2PC (10.0.20.1) and !BorderRt router LAN port(10.0.255.254), you will not get a reply. That is because you don't have inter VLAN routing yet. In this Lab we will enable OSPF in all the Layer 3 devices and we will add default routes as following table.
    537 
    538  - Following are the default routes of the devices
    539 ||= Device =||= Default Route Destination IP =||= Default Route Destination Description =||
    540 || !BorderRt || 192.248.6.254 || This is Configured in the router in the Lab ||
    541 || !CampusCore || 10.0.255.254 || !BorderRt routers LAN interface IP ||
    542 || FacACore || 10.0.2.1 || !CampusCore Switches VLAN2 Interface IP ||
    543 || FacBCore || 10.0.2.1 || !CampusCore Switches VLAN2 Interface IP ||
    544 || Dept1PC || none || This is a L2 device ||
    545 || Dept2PC || none || This is a L2 device ||
    546 || Dept1PC || 10.0.10.254 || FacACore Switches VLAN10 Interface IP ||
    547 || Dept2PC || 10.0.20.254 || FacBCore Switches VLAN20 Interface IP ||
    548  - Now let's enable OSPF on Core devices. Starting from !CampusCore
    549     * Login to !CampusCore switch and switch to config mode
    550     * Define OSPF process and Process ID. In this lab use process ID as 1
    551 {{{
    552 CampusCore(config)#router ospf 1
    553 }}}
    554     * Give the router ID
    555 {{{
    556 CampusCore(config-router)#router-id 10.0.2.1
    557 }}}
    558     * You are going to announce the subnets which are directly connects to you. Use this command for that
    559 {{{
    560 CampusCore(config-router)#redistribute connected subnets
    561 }}}
    562     * You are announcing to the core network (10.0.2.0/24) in area 2. Use this command for this
    563 {{{
    564 CampusCore(config-router)#network 10.0.2.0 0.0.0.255 area 2
    565 CampusCore(config-router)#exit
    566 }}}
    567     * You are enabling OSPF on VLAN 2. Use this command for that.
    568 {{{
    569 CampusCore(config)#interface vlan 2
    570 CampusCore(config-if)# ip ospf 1 area 2
    571 CampusCore(config-if)# exit
    572 }}}
    573     * Now you have enable OSPF on !CampusCore Switch. Now lets add the default Route.
    574 {{{
    575 CampusCore(config)# ip route 0.0.0.0 0.0.0.0 10.0.255.254
    576 }}}
    577  - Follow the same steps in FacACore and FacBCore
    578     * FacACore
    579 {{{
    580 FacACore(config)#router ospf 1
    581 FacACore(config-router)#router-id 10.0.2.2
    582 FacACore(config-router)#redistribute connected subnets
    583 FacACore(config-router)#network 10.0.2.0 0.0.0.255 area 2
    584 FacACore(config-router)#exit
    585 FacACore(config)#interface vlan 2
    586 FacACore(config-if)# ip ospf 1 area 2
    587 FacACore(config-if)# exit
    588 FacACore(config)# ip route 0.0.0.0 0.0.0.0 10.0.2.1
    589 }}}
    590     * FacBCore
    591 {{{
    592 FacBCore(config)#router ospf 1
    593 FacBCore(config-router)#router-id 10.0.2.3
    594 FacBCore(config-router)#redistribute connected subnets
    595 FacBCore(config-router)#network 10.0.2.0 0.0.0.255 area 2
    596 FacBCore(config-router)#exit
    597 FacBCore(config)#interface vlan 2
    598 FacBCore(config-if)# ip ospf 1 area 2
    599 FacBCore(config-if)# exit
    600 FacBCore(config)# ip route 0.0.0.0 0.0.0.0 10.0.2.1
    601 }}}
    602  - Now you have enable Routing in your Core network. Let's verify whether it is working.
    603    * Go to Dept1PC and try a Ping to Dept2PC
    604 {{{
    605 ping 10.0.20.1
    606 }}}
    607    * It should give you a reply
    608  - add the !BorderRt Routers default gateway
    609     * Go to !BorderRt and switch to config mode
    610     * Add the default route
    611 {{{
    612 BorderRt(config)# ip route 0.0.0.0 0.0.0.0 192.248.6.254
    613 }}}
     572
    614573    * Verify the route by ping a known host from the !BorderRt router
    615574{{{