LAB1 Day1 Switching Answers

8/12/2019 LAB1 Day1 Switching Answers

1/124

CCIE ROUTING & SWITCHING

Catalyst 3560

Answers

CCIE Routing and Switching Catalyst 3560 Lab Pae ! "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


2/124

R"ter & Sw't() T" Sw't() ("nne(t'"n

SW-1 SW-2

R1

F0/0 F0/1

R2

F0/0 F0/1

R3

R3

F0/0 F0/1

R4

F0/0 F0/1

R5

F0/0 F0/1

R6

F0/0 F0/1

CCIE Routing and Switching Catalyst 3560 Lab Pae $ "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.

*0+!

*0+$

*0+3

*0+%

*0+5

*0+6

*0+!,

*0+$0

*0+!

*0+$

*0+3

*0+%

*0+5

*0+6

*0+!,

*0+$0


3/124

CCIE Routing and Switching Catalyst 3560 Lab Pae 3 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


4/124

Tas- !

Configure the first and the second switch to be in !" do#ain ca$$ed CC%&

.e#"re ass'n'n a /TP "1a'n na1e2 t)ere 1st be a trn- establ's)e between

t)e tw" sw't()es s" t)e ("n#'rat'"ns w'll be r"aate t" t)e "t)er sw't()4

On b"t) sw't()es

Switch'Show interface trun(

Switch'

N"te t)e tw" 3560s sw't()es are ("nne(te w't) $ (r"ss "er et)ernet (ables2 '# t)ese

sw't()es were 3550s2 t)e tw" "rts w"l )ae ne"t'ate an ISL trn-2 a(tally

t)ey w"l s)"w as n7'sl82 t)'s 's be(ase by e#alt t)e "rts were ("n#'re

'n es'rable 1"e4 W't) 3560 sw't()es2 t)e "rts are n"t 'n es'rable 1"e2 a s)"w

rn 'nt #0+!,8 w'll reeal t)'s 'n#"r1at'"n2 an t)ere#"re2 t)e "rt+s 1st be

("n#'re stat'(ally t" trn- "r ne"t'ate a trn-4

On ."t) sw't()es9

Switch'Show cd) neighbors

Ca)abi$it* Codes+ R - Router, ! - !rans ridge, - Source Route ridge

S - Switch, . - .ost, % - %", r - Re)eater, " - "hone

eice % oca$ %ntrfce .o$dt#e Ca)abi$it* "$atfor# "ort %

Switch Fas 0/22 1 S % WS-C3560-2Fas 0/22Switch Fas 0/21 1 S % WS-C3560-2Fas 0/21

Switch Fas 0/20 1 S % WS-C3560-2Fas 0/20

Switch Fas 0/1 1 S % WS-C3560-2Fas 0/1Switch Fas 0/ 1 S % WS-C3560-2Fas 0/

Switch Fas 0/ 1 S % WS-C3560-2Fas 0/

N"te t)e S)"w ( ne')b"rs8 ("11an reeals t)e "rts ("nne(t'n t)e tw"

sw't()es4

CCIE Routing and Switching Catalyst 3560 Lab Pae % "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.

Lab !

.as'( 3560 ("n#'rat'"n I


5/124

On ."t) sw't()es9

Switch7config8'int range f0/1-20Switch7config-if-range8'switch)ort trun( enca)su$ation is$

Switch7config-if-range8'switch)ort #ode trun(

T" er'#y t)e ("n#'rat'"n9

On t)e #'rst sw't()es9

Switch'Show int trun(

"ort ode &nca)su$ation Status 9atie $anFa0/1 on is$ trun(ing 1

Fa0/20 on is$ trun(ing 1"ort $ans a$$owed on trun(

Fa0/1 1-404

Fa0/20 1-404

"ort $ans a$$owed and actie in #anage#ent do#ain

Fa0/1 1Fa0/20 1

"ort $ans in s)anning tree forwarding state and not )runed

Fa0/1 1Fa0/20 none

N"w t)at t)e trn- 's establ's)e between t)e tw" sw't()es2 y" (an " "n w't) /TP

("n#'rat'"n as #"ll"ws9

On t)e #'rst sw't()

Switch7config8'!" do#ain CC%&

.y e#alt t)e 3560 sw't()es are 1e1ber "# a "1a'n (alle NULL2 t)ere#"re2 a#ter

enter'n t)e ab"e ("11an2 y" w'll et t)e #"ll"w'n 1essae nless t)e sw't()

was 1e1ber "# an"t)er "1a'n:

Changing !" do#ain na#e fro# 9: to CC%&

T)'s tas- ("l als" be a(("1l's)e by enter'n t)e /LAN atabase8 as #"ll"ws9



6/124

Switch'$an databaseSwitch7$an8't) do#ain CC%&

Switch7$an8'&;it

W)en a ("11an 's entere 'n t)e /lan atabase2 y" 1st er#"r1 t)e e;'t8 "rt)e aly8 ("11an #"r t)e ()anes t" ta-e e##e(t4

N"te t)e 'slay bel"w reeals t)at /TP r"aate t)e /TP "1a'n 'n#"r1at'"n t"

t)e se("n sw't()9

On t)e se("n sw't()9

Switch'Sh t) status

!" ersion + 2

Configuration Reision + 0a;i#u# 0>0>0 at 0-0-00 00+00+00

oca$ u)dater % is 0>0>0>0 7no a$id interface found8

Tas- $

!his !" do#ain shou$d be )assword )rotected using ?Cisco@ as the )assword>

On b"t) sw't()es

Switch7config8't) )assword Cisco


7/124

T)e assw"r ("11an 1st be ("n#'re stat'(ally "n b"t) sw't()es be(ase t)'s

()ane w'll NOT et r"aate 'a /TP 1essaes4


On t)e *'rst sw't()

Switch' Show t) status

!" ersion + 2Configuration Reision + 0

a;i#u# 0>0>0 at 0-0-00 00+00+00oca$ u)dater % is 0>0>0>0 7no a$id interface found8

/TP assw"r (an be ()ane 'n t)ree ways9

"rii$ege #ode+

Switch't) )assword Cisco

$an atabase+$an database

t) )assword Cisco

&;it

$oba$ config #ode+

Switch7config8't) )assword Cisco

On t)e Se("n sw't()

Switch'Show t) status


a;i#u#


8/124

!" 2 ode + isab$ed

!" !ra)s eneration + isab$ed5 digest + 0;5 0;C 0;40 0;65 0;63 0;5 0;4 0;

Configuration $ast #odified b* 0>0>0>0 at 0-0-00 00+00+00


On any "# t)e sw't()es9

Switch'Show !" )assword T)'s er'#'es t)e assw"r2 re1e1ber

Sa(es w'll n"t s)"w

/TP Passw"r9 C's("

Tas- 3

!he first Cata$*st switch shou$d be configured with a hostna#e of Cat-1 and the second

Cata$*st shou$d hae a hostna#e of Cat-2>

On t)e #'rst Sw't()

Switch7config8'.ostna#e Cat-1

On t)e Se("n Sw't()


Tas- %

Cat-2 shou$d 9=! hae the abi$it* to create, de$ete or rena#e


9/124


10/124

Cat-17config8'interface range f0/1 - 2Cat-17config-if8'switch #ode access

Cat-17config-if8'switch access $an 12

Cat-17config8'interface range f0/3 - 4Cat-17config-if8'switch #ode access

Cat-17config-if8'switch access $an 34

Cat-17config8'interface range F0/5 - 6

Cat-17config-if8'switch #ode access

Cat-17config-if8'switch access $an 56Cat-17config-if8'&nd

N"te t)e /lan 'n#"r1at'"n w'll be r"aate t" t)e "t)er sw't() @Cat7$2 be(ase

b"t) sw't()es are 'n t)e sa1e /TP "1a'n an t)ey are b"t) ("n#'re w't) t)e

sa1e assw"r>

On Cat7$

Cat-2'Show $an brie


11/124


12/124


13/124

On Cat7$

Cat-2'Show t) status


a;i#u#

On ."t) Sw't()es

7config8'%nterface range F0/1B20

7config-if-range8' Switch)ort #ode trun(7config-if-range8'Switch)ort nonegotiate

N"te t)e "rts1st be 'n trn- 1"e be#"re t)e n"ne"t'ate8 ("11an 's entere2"t)erw'se y" w'll re(e'e t)e #"ll"w'n err"r 1essae9

Co##and reected+ Conf$ict between DnonegotiateA and Dd*na#icA status>

A "rt (an be ("n#'re as #"ll"ws9

CCIE Routing and Switching Catalyst 3560 Lab Pae !3 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


14/124

Stat'( A((ess? T)'s "rt (an bel"n t" ONL< "ne /LAN2 an 'ts 1anally ass'ne

t" a 'en /LAN4

Trn-B A trn- "rt by e#alt 's 1e1ber "# all n"r1al rane /LANs !7!005 @bt

n"te t)at /LANs !2 !00$ ? !005 are at"1at'(ally (reate an (an n"t be re1"e2

"nly $ t" !00! (an be 1anally (reate2 t)ese /LANs are -et 'n t)e /LAN4DAT4T)'s als" 'n(les t)e e;tene7rane /LANs @!006 7 %0,%2 an t)'s 1e1bers)'

(an be l'1'te by ("n#'r'n t)e all"we7lan8 ("11an4 T)'s "rt (an be

en(aslate by ISL "r tae by >0$4!4

Dyna1'( A((essB A yna1'( a((ess "rt (an "nly be a 1e1ber "# "ne n"r1al

/LAN2 an t)ese "rts are yna1'(ally ass'ne t" a 'en /LAN by a /FPS4

/"'(e /LAN ? T)'s 's an a((ess "rt ("nne(te t" an IP )"ne s() as C's("s =,602

an t)'s /LAN 's se #"r /"'(e tra##'(4

D"t!7Tnnel ? T)ese are tnnel "rts an are se #"r >0$4! tnnel'n t"1a'nta'n (st"1er /LAN 'nter'ty a(r"ss a ser'(e r"'ers netw"r-4 A tnnel

"rt 's ("n#'re "n an ee sw't() 'n t)e ser'(e r"'ers netw"r- an 'ts

("nne(te t" an >0$4! trn- "rt "n a (st"1er sw't()s 'nter#a(e2 a tnnel "rt

bel"ns t" a s'nle /LAN t)at 's e'(ate t" tnnel'n4

Tas- >

Configure the switches such that f$ooded traffic is restricted to the trun( $in(s that the

traffic #ust use to reach the destination deice>

On Cat7$


!" ersion + 2

Configuration Reision + 3a;i#u# 0>0>0 at 3-1-3 00+12+4

CCIE Routing and Switching Catalyst 3560 Lab Pae !% "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


15/124


N"te /TP Prn'n 's 'sable by e#alt

On Cat7!

Cat-1't) )runing

T)'s ("11an (an be ("n#'re 'n r''lee 1"e2 Gl"bal ("n#' 1"e2 an+"r 'n

t)e /lan atabase4 On(e t)'s #eatre 's enable 't w'll et r"aate t" t)e "t)er

sw't()es w't)'n t)e /TP "1a'n4

T" er'#y t)e ("n#'rat'"n "n b"t) sw't()es9

On Cat7$


!" ersion + 2

Configuration Reision + 4

a;i#u#


16/124

Tas- !0

&nsure that Cat-1 is the root bridge for the

T)ere are t)ree ("11ans t)at (an be se t" 'slay t)e .ID #"r a 'en sw't()9

S)"w ers'"n

S)"w sann'n7tree br'e

S)"w 'nter#a(e /lan !

On Cat7!

Cat-1'Show ersion

Cat-1'Show er

Cisco %=S Software, C3560 Software 7C3560-


17/124

cisco WS-C3560-24!S 7"ower"C4058 )rocessor 7reision 08 with 114E/1220E b*tes of#e#or*>

"rocessor board % C

ast reset fro# )ower-on

1 irtua$ &thernet interface24 Fast&thernet interfaces

2 igabit &thernet interfaces!he )assword-recoer* #echanis# is disab$ed>

512E b*tes of f$ash-si#u$ated non-o$ati$e configuration #e#or*>

.ase et)ernet FAC Aress 9 009!,9069=*9>,900

otherboard asse#b$* nu#ber + 3--06

"ower su))$* )art nu#ber + 341-00-02

otherboard seria$ nu#ber + C

r'"r'ty an t)e base FAC aress 's t)e .ID #"r a 'en sw't()4

Cat-1'Show s)anning-tree bridge

.e$$o a; Fwd$an ridge % !i#e 0 an /LAN 3% as 3% t" t)e e#alt

r'"r'ty ale2 t)ere#"re2 t)e r'"r'ty 's 3$>0$4 N"te t)at t)e FAC 's t)e base FAC aress

an 't re1a'ns t)e sa1e2 'n t)'s (ase @00!,406=#4>,004

N"te y"r FAC aress 1aybe '##erent4

Cat-1'Show int $an 1

$an1 is u), $ine )rotoco$ is u)

.ardware is &therS%, address is 00!,406=#4>,%0 @b'a 00!,406=#4>,%0 !: 1500 b*tes, W 1000000 Ebit, L 10 usec,

CCIE Routing and Switching Catalyst 3560 Lab Pae != "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


18/124

re$iabi$it* 255/255, t;$oad 1/255, r;$oad 1/255

T)e "tt "# t)e ab"e ("11an w'll reeal t)e b'a "r t)e FAC aress "# /LAN !

'nter#a(e w)'() 's als" t)e base FAC aress "# t)e sw't()

T" #'n "t t)e .ID an t)e r""t br'e #"r a 'en /LAN2 enter t)e #"ll"w'n S)"w("11an9

On Cat7!

Cat-1'Show s)anning-tree $an 12


4b,>,4>$>0

Cost 1

"ort 21 7Fast&thernet0/18

.e$$o !i#e 2 sec a; 9br !*)e---------------- ------ ------ --------- ---------- --------------------------------

Fa0/1 Root FW 1 12>21 "2)

Fa0/20 22 "2)

Enter t)e #"ll"w'n ("11ans t" ("n#'re Cat7! t" be t)e r""t br'e #"r /LANs !$ an

3%9

On Cat7!

Cat-17config8'S)anning-tree $an 12,34 root )ri#ar*

T)e ab"e ("11an ("n#'res Cat7! t" be t)e r""t #"r /LANs !$ an 3%: t)e r""t8

-eyw"r 's a 1a(r" t)at re(es t)e .ID "# t)e sw't() #"r a 'en /LAN by a ale "# >!,$

@T)e l"wer ale 's t)e re#erre ale> T)ere are n" sa(es between t)e !$ an t)e ("11a

an t)e 3%4


CCIE Routing and Switching Catalyst 3560 Lab Pae !> "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


19/124

7)riorit* 2456 s*s-id-e;t 128

Aress 00!,406=#4>,00 .e$$o !i#e 2 sec a; 22 "2)

On Cat7$

Cat-27config8''S)anning-tree $an 56 root )ri#ar*


Cat7$

Cat-2'Show s)anning $an 56

4b,>,4>$>0

T)'s br'e 's t)e r""t .e$$o !i#e 2 sec a; 4b,>,4>$>0 .e$$o !i#e 2 sec a; 22 "2)

CCIE Routing and Switching Catalyst 3560 Lab Pae !, "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


20/124

Tas- !!

Configure Cat-1 such that the )orts that the routers are connected to b*)ass $istening and

$earning state> %f an* of these )orts receie ": )ac(ets, the* shou$d transition intoerrdisab$e state> :se #ini#u# nu#ber of co##ands to acco#)$ish this tas(> !his

configuration shou$d on$* be a))$ied to the )orts that the routers R1 - R6 are connected

to>

On Cat7!

Cat-17config8'S)anning-tree )ortfast b)duguard defau$t

Cat-17config8'%nterface range F0/1 - 6

Cat-17config-if8'S)anning-tree )ortfast

On(e t)e "rt#ast ("11an 's entere y" s)"l see t)e #"ll"w'n warn'n

1essae9

MWarning+ )ortfast shou$d on$* be enab$ed on )orts connected to a sing$e

host> Connecting hubs, concentrators, switches, bridges, etc>>> to this

%nterface when )ortfast is enab$ed, can cause te#)orar* bridging $oo)s>:se with C %f an* of these )orts receie ": )ac(ets, the* shou$d

$oose their )ortfast state> !his configuration shou$d a))$* to e;isting and future )orts that

are configured as )ortfast>

On Cat7$

Cat-27config8'S)anning-tree )ortfast b)dufi$ter defau$t

CCIE Routing and Switching Catalyst 3560 Lab Pae $0 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


21/124

Cat-27config8'%nterface range F0/1 - 6

Cat-27config-if8'S)anning-tree )ortfast

On(e t)e "rt#ast ("11an 's entere y" s)"l see t)e #"ll"w'n warn'n

1essae9

MWarning+ )ortfast shou$d on$* be enab$ed on )orts connected to a sing$e

host> Connecting hubs, concentrators, switches, bridges, etc>>> to this%nterface when )ortfast is enab$ed, can cause te#)orar* bridging $oo)s>

:se with C


22/124

Cat-1'Show #onitor session 1

Session 1

---------

!*)e + oca$ Session

Source "orts + oth + Fa0/14

estination "orts + Fa0/15 &nca)su$ation + 9atie

%ngress + isab$ed

Tas- !%

Lou receied another reIuest fro# *our %! de)art#ent to (ee) trac( of a$$ the !he switch #ust use the 9S $ocated at

12>16>1>1 /24, configure the switch to hand$e this reIuest> Lou shou$d use an %" address

of 2>2>2>2 / to acco#)$ish this tas(>

On Cat7$

Cat-27config8'Sn#)-serer host 12>16>1>1 tra) )riate

IPJSNFP737SOCKET9 (ant "en UDP s"(-et

Unable t" "en s"(-et "n "rt !6!

N"te s'n(e t)'s sw't() 's n"t ("n#'re w't) an IP aress2 't w'll #a'l t" ("n#'re

t)e Sn1 serer4 T)ere#"re2 an IP aress s)"l be ("n#'re be#"re enter'n t)e

sn17serer8 ("11an as #"ll"ws9Cat-27config8'%nt $o0

Cat-27config-if8'%) addr 2>2>2>2 255>0>0>0

Cat-27config8'sn#)-serer host 12>16>1>1 )riate

@T" set t)e Sn17Serer

Cat-27config8'sn#)-serer enab$e tra)s #ac-notification

@C"n#'res t)e sw't() t" sen 1a(7aress tras t" t)e NFS

Cat-27config8'#ac-address-tab$e notification@T" enable FAC7aress n"t'#'(at'"n

Cat-27config8'%nter f0/1Cat-27config-if8'sn#) tra) #ac-notification added

@T)e ab"e ("11an enables t)e SNFP tra "n 'nter#a(e *0+!> an ("n#'res t)e

sw't() t" sen FAC n"t'#'(at'"n tras w)eneer a FAC7aress 's ae4 I# t)e

sw't() 1st be ("n#'re t" re"rt t)e FAC aresses t)at are learnt an e;'re2

CCIE Routing and Switching Catalyst 3560 Lab Pae $$ "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


23/124

t)en sn1 tra 1a(7n"t'#'(at'"n re1"e8 ("11an 1st als" be ("n#'re4


Cat-2'Show #ac-address-tab$e notification interface f0/1

On Cat7$

Cat-27config8'%nterface F0/14Cat-27config-if8'Stor#-contro$ broadcast $ee$ 50>00

St"r17("ntr"l (an be se #"r .r"a(ast2 Un'(ast an Flt'(ast tra##'(2 t)'s

("11an se('#'es tra##'( sress'"n leel #"r a 'en tye "# tra##'( #"r a



24/124

art'(lar 'nter#a(e4 T)e leel (an be #r"1 0 t" !00 an an "t'"nal #ra(t'"n "# a

leel (an als" be ("n#'re #r"1 0 ? ,,4 A t)res)"l ale "# !00 er(ent 1eans t)at

n" l'1't 's la(e #"r t)e se('#'e tye "# tra##'(: a ale "# 040 1eans t)at t)e

art'(lar tye "# tra##'( 's bl"(-e all t"et)er4

W)en t)e rate "# Flt'(ast tra##'( e;(ees a ree#'ne t)res)"l2 all 'n("1'n

tra##'( @.r"a(ast2 Flt'(ast an Un'(ast 's r"e nt'l t)e leel "# Flt'(asttra##'( 's r"e bel"w t)e t)res)"l leel4 On(e t)'s "((rs2 "nly t)e Sann'n7tree

a(-ets are #"rware4 W)en .r"a(ast "r Un'(ast t)res)"ls are e;(eee2 tra##'(

's bl"(-e #"r "nly t)e tye "# tra##'( t)at e;(eee t)e t)res)"l4


Cat-2'Show stor#-contro$ f0/14 broadcast

%nterface Fi$ter State :))er ower Current--------- ------------- ----------- ----------- -----------

Fa0/14 Forwarding 50>00M 50>00M 0>00M

Tas- !6

ac addresses $earnt d*na#ica$$* b* these two switches shou$d not sta* in the

.y e#alt t)e FAC aresses t)at are 'na(t'e w'll e;'re w't)'n 300 se("ns2 t)'s

tas- 's as-'n #"r a !0 1'ntes t)res)"l2 !0 1'ntes eates t" 600 se("ns2 t)e

#"ll"w'n ("11an w'll a(("1l's) t)'s tas-9

On Cat7! an Cat7$

7config8'ac-address-tab$e aging-ti#e 600

Tas- !=

For #anage#ent )ur)oses, assign an %" address of 10>1>1>11 /24 to Cat-1, with a defau$tgatewa* of 10>1>1>2 /24>

On Cat7!

Cat-17config8'%nter $an 1Cat-17config-if8'%) address 10>1>1>11 255>255>255>0

Cat-17config-if8'9o shut

Cat-17config-if8'&;it

CCIE Routing and Switching Catalyst 3560 Lab Pae $% "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


25/124

Cat-17config8'%) defau$t-gatewa* 10>1>1>2

Tas- !>

Configure Cat-2 such that :nicast, roadcast and u$ticast traffic is restricted to 40M on

itAs )ort F0/1> .oweer, when the rate of #u$ticast traffic e;ceeds the set thresho$d, a$$

inco#ing traffic 7broadcast, #u$ticast, and unicast8 shou$d be dro))ed unti$ the $ee$

dro)s be$ow the thresho$d $ee$> = 9=! configure )o$icing to acco#)$ish this tas(>>

On Cat7$

Cat-27config8'%nt F0/1

Cat-27config-if8'Stor#-contro$ #u$ticast $ee$ 40

Cat-27config-if8'Stor#-contro$ unicast $ee$ 40Cat-27config-if8'Stor#-contro$ broadcast $ee$ 40

St"r17("ntr"l (an be se #"r .r"a(ast2 Un'(ast an Flt'(ast tra##'(4 T)'s

("11an se('#'es tra##'( sress'"n leel #"r a 'en tye "# tra##'( #"r a

art'(lar 'nter#a(e4 T)e leel (an be #r"1 0 t" !00 an an "t'"nal #ra(t'"n "# a

leel (an als" be ("n#'re #r"1 0 ? ,,4 A t)res)"l ale "# !00 er(ent 1eans t)at

n" l'1't 's la(e #"r t)e se('#'e tye "# tra##'(: a ale "# 040 1eans t)at t)e

art'(lar tye "# tra##'( 's bl"(-e all t"et)er4

W)en t)e rate "# Flt'(ast tra##'( e;(ees a set t)res)"l2 all 'n("1'n tra##'(

@.r"a(ast2 Flt'(ast an Un'(ast 's r"e nt'l t)e leel r"s bel"w t)e

t)res)"l leel2 an "nly t)e Sann'n7tree a(-ets are #"rware4 W)en .r"a(ast

an Un'(ast t)res)"ls are e;(eee2 tra##'( 's bl"(-e #"r "nly t)e tye "# tra##'(

t)at e;(eee t)e t)res)"l4


Show stor#-contro$ f0/1 #u$ticast

%nterface Fi$ter State :))er ower Current--------- ------------- ----------- ----------- -----------

Fa0/1 in( down 40>00M 40>00M 0>00M

Tas- !,



26/124

Configure routers R1 and R3 using the fo$$owing %" addresses+

R1 - F0/0 O 12>1>1>1 /

R3 - F0/0 O 34>1>1>1 /

Configure Cat-1 to route between :se an* %) address on Cat-1 to acco#)$ish this tas(>

On R!

R17config8'%nterface F0/0

R17config-if8'%) address 12>1>1>1 255>0>0>0

R17config-if8'9o shutR17config-if8'&;it

R17config8'%) route 0>0>0>0 0>0>0>0 12>1>1>12

On R3



R37config-if8'9o shut

R37config-if8'&;it

R37config8'%) route 0>0>0>0 0>0>0>0 34>1>1>34

On Cat7!

Cat-17config8'%) routing

Cat-17config8'%nterface $an 12

Cat-17config-if8'%) address 12>1>1>12 255>0>0>0Cat-17config-if8'9o shut

Cat-17config8'%nterface $an 34

Cat-17config-if8'%) address 34>1>1>34 255>0>0>0


A Sw't() /'rtal Inter#a(e @S/I reresents a /LAN "# sw't() "rts as "ne 'nter#a(e

t" t)e r"t'n4 Only "ne S/I (an be ass"('ate w't) a /LAN4 T)'s 's ne(essary w)en

("n#'r'n Inter /lan r"t'n4

W)en (reat'n an S/I #"r a /LAN2 t)e es'nate n1ber 1st 1at() t)e /LAN

n1ber>



27/124


On R!

R1'"ing 34>1>1>1

!*)e esca)e seIuence to abort>

Sending 5, 100-b*te %C" &chos to 34>1>1>1, ti#eout is 2 seconds+PPPPP

Success rate is 100 )ercent 75/58, round-tri) #in/ag/#a; O 1/2/4 #s

On R3

R3'"ing 12>1>1>1

!*)e esca)e seIuence to abort>Sending 5, 100-b*te %C" &chos to 12>1>1>1, ti#eout is 2 seconds+

PPPPP


Tas- $0

Re#oe the configuration fro# the )reious ste) and configure %nter $an routing

between = 9=! use S%s to acco#)$ish this tas(> F0/1 interface ofan* router can be used to acco#)$ish this tas(> :se the %" addressing fro# the )reious

tas(> &nsure to use an industr* standard )rotoco$ for the trun(>

S'n(e R5s *0+0 's art "# /LAN 562 R5s *0+! 's se t" a(("1l's) t)'s tas-4

On Cat7!

Cat-17config8'9o %nterface $an 12

Cat-17config8'9o %nterface $an 34

On Cat7$

Cat-27config8'%) routing

Cat-27config8'%nterface F0/5Cat-27config-if8'Switch)ort trun( enca) ot1I

CCIE Routing and Switching Catalyst 3560 Lab Pae $= "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


28/124

Cat-27config-if8'Switch)ort #ode trun(

On R5


R57config-if8'9o shutR57config-if8'&;it

R57config8'%nt f0/1>12

R57config-if8'&nca) dot1I 12


R57config8'%nt f0/1>34

R57config-if8'&nca) dot1I 34



On R!

R1'"ing 34>1>1>1




On R3

R3'"ing 12>1>1>1


Sending 5, 100-b*te %C" &chos to 12>1>1>1, ti#eout is 2 seconds+

PPPPP


CCIE Routing and Switching Catalyst 3560 Lab Pae $> "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


29/124

Tas- $!

Configure Cat-1 such that wheneer the switch $earns or re#oes a efau$t a$ue is one second, and the range is 0 B 2,14,43,64 seconds>

Fa( aress7table n"t'#'(at'"n )'st"ry7s'Be ? S)ecifies the #a;i#u# nu#ber of

entries in the !he defau$t a$ue is 1, and the range

is 1 B 500 entries>

On Cat7!

Cat-17config8'Sn#)-serer host 12>16>1>100 tra)s )riate

T)e ab"e ("11an 'ent'#'es t)e NFS

Cat-17config8'Sn#)-serer enab$e tra)s #ac-notification

T)'s ("11an enables SNFP tras 1a(7n"t'#'(at'"n

Cat-17config8'ac-address-tab$e notification

T)e ab"e ("11an enables t)e 1a( aress7table n"t'#'(at'"n "n t)e sw't()

Cat-17config8'ac-address-tab$e notification intera$ 100T)'s ("11an sets t)e 'nteral

Cat-17config8'ac-address-tab$e notification histor*-siHe 150

T)'s ("11an sets t)e )'st"ry7s'Be

Cat-17config8'%nt f0/1

Cat-17config-if8'Sn#) tra) #ac-notification added

CCIE Routing and Switching Catalyst 3560 Lab Pae $, "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


30/124

T" enable t)e FAC n"t'#'(at'"n tra w)eneer a FAC aress 's ae

Cat-17config-if8'Sn#) tra) #ac-notification re#oed

T" enable t)e FAC n"t'#'(at'"n tra w)eneer a FAC aress 's re1"e


Cat-1'Show #ac address-tab$e notification interface f0/1


31/124

A((essB :sed for Q=S c$assification and Securit*>

R"t'nB :sed for routing

/lanB isab$es routing and sets the switch to be a $a*er 2 switch>

E;tene71at()B refor#ats routing #e#or* s)ace to a$$ow 144-bit $a*er 3

!C


32/124

.y e#alt a trn- "rt sens an re(e'es tra##'( #r"1 all /LANs2 )"weer2 a 'en

/LAN "r /LANs (an be re1"e #r"1 t)e trn- l'n- 'n "rer t" reent tra##'( #r"1

t)at /LAN+s #r"1 traers'n "er t)e trn->

On Cat7!

Cat-17config8'$an 30-32

.e#"re ("n#'r'n t)e tas- we )ae t" ()e(- t" see '# t)e /LANs t)at we Mst (reate

(an traerse t)e trn- l'n-4

Cat-1'Show interface trun(


Fa0/20 on is$ trun(ing 1

"ort $ans a$$owed on trun(

*a0+!, !7%0,%

*a0+$0 !7%0,%


Fa0/1 1,12,30-32,34,56

Fa0/20 1,12,30-32,34,56


Fa0/1 1Fa0/20 none

T" re1"e t)"se /LANs #r"1 t)e trn- l'n-s9

On ."t) Sw't()es

Switch7config8'%nterface range f0/1-20Switch7config-if-range8'Switch)ort trun( a$$owed $an e;ce)t 30,31,32

N"te '# an Et)erC)annel was (reate2 t)e ("11an )a t" be ("n#'re 're(tly t)e

"rt7()annel 'nter#a(e4

T" /er'#y t)e ("n#'rat'"n9

CCIE Routing and Switching Catalyst 3560 Lab Pae 3$ "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


33/124

On Cat7!

Cat-1'Show int trun(


Fa0/20 on is$ trun(ing 1


*a0+!, !7$,2337%0,% N"te /LANs 30 ? 3$ are re1"e #r"1 t)e trn-

*a0+$0 !7$,2337%0,%

"ort $ans a$$owed and actie in #anage#ent do#ainFa0/1 1,12,34,56

Fa0/20 1,12,34,56

"ort $ans in s)anning tree forwarding state and not )runedFa0/1 1

Fa0/20 none

S"1e "# t)e "t'"ns t)at (an be se w't) Sw't()"rt trn- all"we /LAN8

("11an are: Re1"e2 a2 all2 e;(et4

T)e Sw't()"rt trn- all"we lan re1"e 3023!23$8 ("11an ("l a(("1l's) t)e

sa1e tas-4

Tas- $%

Configure Cat-1As )ort F0/15 and F0/16 such that when c$ient "Cs connect to these )orts,the* auto#atica$$* beco#e #e#ber of a gien Cat-1 shou$d be configured to use

10>1>1>1 as the )ri#ar* and 10>1>1>2 as the secondar* "S serer> &nsure that the $oca$

switch reconfir#s the

/FPS9

T)e 3550 sw't() (ant be set as a /FPS serer2 bt 't (an be ("n#'re as a

/FPS (l'ent4

T)e (l'ent ("11n'(ates w't) t)e /FPS t)r") /lan ery Pr"t"("l @/P4

W)en a /FPS re(e'es a /P #r"1 t)e (l'ent2 't sear()es 'ts atabase #"r a FAC

t" /LAN 1a'n2 an '# t)e 1a'n 's #"n2 't ("neys t)e /LAN 'n#"r1at'"n



34/124

t" t)e (l'ent an t)en t)e (l'ent ass'ns t)at 'en /LAN t" t)e "rt t)at t)e (l'ent

's ("nne(te t"4

T)e /FPS (an "erate 'n Se(re 1"e2 w)'() 1eans t)at '# a FAC t" /LAN

1a'n (an n"t be #"n 'n 'ts atabase2 t)e /FPS w'll sen a "rt7s)t"wn7

1essae t" t)e (l'ent an t)e (l'ent w'll s)t "wn t)at 'en "rt2 )"weer2 '# t)e/FPS 's n"t ("n#'re 'n a se(re 1"e2 't w'll sen a((ess7eny 1essae2 an t)e

(l'ent w'll ("nstantly 1"n't"r t)e "rt an w'll reMe(t all tra##'( #r"1 t)at 'en

"rt4

T)e /FPS (l'ent er'"'(ally re("n#'r1s t)e /LAN 1e1bers)' 'n#"r1at'"n

re(e'e #r"1 t)e /FPS serer4 .y e#alt t)'s 's er#"r1e eery 60 1'ntes2 t)'s

'nteral (an be ()ane s'n /FPS re("n#'r18 l"bal ("n#' ("11an4

I# t)e /FPS (l'ent (ant ("nta(t t)e /FPS serer2 't w'll retry t" establ's) t)at

("11n'(at'"n t)ree t'1es an t)'s ale (an be ()ane s'n 1s retry8

("11an 'n t)e l"bal ("n#' 1"e4

T)e atabase 's 'n #"r1 "# an ASCII #'le sae "n a T*TP serer2 w)'() t)e /FPS

serer a((esses4

On Cat7!

.e#"re ("n#'r'n t)'s tas- we s)"l ()e(- s"1e "# t)e e#alt ales9

Cat-1'Show #)s

Q" C$ient Status+--------------------

"S Q" ersion+ 1

Reconfir# %ntera$+ 60 #inSerer Retr* Count+ 3

"S do#ain serer+

Reconfir#ation status

---------------------

"S

Cat-17config8'int range f0/15 - 16

Cat-17config-if-range8'switch)ort #ode access

Cat-17config-if-range8'switch)ort access $an d*na#icCat-17config-if-range8'no shut

CCIE Routing and Switching Catalyst 3560 Lab Pae 3% "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


35/124

T)e ab"e ("11an sets "rts *0+!5 an *0+!6 t" /LAN yna1'(2 w)'() 1eans t)at t)ey

w'll a('re t)e'r /LAN 'n#"r1at'"n yna1'(ally>

Cat-17config8'#)s reconfir# 30

Cat-17config8'#)s retr* 5

T)e ab"e tw" ("11ans ("n#'re t)e re("n#'r1at'"n 'nteral t" 30 1'ntes an t)e

retry ("nter t" 54

Cat-17config8'#)s serer 10>1>1>1 )ri#ar*

Cat-17config8'#)s serer 10>1>1>2

T)ese ("11ans ("n#'re t)e r'1ary an t)e se("nary /FPS serers4


Cat-1'Show #)s

Q" C$ient Status+

--------------------

"S Q" ersion+ 1Reconfir# %ntera$+ 30 #in

Serer Retr* Count+ 5

"S do#ain serer+ 10>1>1>2

10>1>1>1 7)ri#ar*, current8

Reconfir#ation status

-------------------------"S &nsure

that the data traffic be$ongs to


36/124

Cat-17config8'%nterface F0/1Cat-17config-if8'Switch)ort access $an 3

Cat-17config-if8'Switch)ort oice $an 5

Cat-17config-if8'Switch)ort )riorit* e;tend cos 1

Cat-17config-if8'$s Ios trust cosCat-17config-if8'9o shut

W)en t)e )"ne ets ("nne(te t" t)e sw't() 't w'll #"r1 an >0$4! trn- l'n-4 T)e

tra##'( est'ne t" t)e PC w'll be (arr'e 'n t)e a((ess /LAN2 w)ereas t)e tra##'(

est'ne #"r t)e =,60 IP P)"ne w'll be (arr'e 'n /"'(e /LAN4

.y e#alt t)e 3550 "esnt r"(ess t)e C"S ale an rewr'tes all #ra1es w't) a

C"S ale "# 04 T" ("n#'re t)e )"ne s() t)at 't r"(esses t)e C"S ales2 t)e

OS 1st be enable l"bally s'n t)e 1ls "s8 ("11an4

T" ("n#'re t)e sw't() s" 't trsts t)e 'n("1'n C"S ale #r"1 t)e =,60 IP P)"ne

t)e 1ls "s trst ("s8 ("11an 's se4

S'n(e t)e PC ("nne(te t" t)e IP P)"ne (an sen tra##'( t" t)e P)"ne w't) any C"s

ale an t)e )"ne wants t" ensre t)at t)e "'(e tra##'( t)at 't enerates et betterr'"r'ty2 t "err'es t)e C"S #"r all tra##'( t)at 's "r''nate by t)e PC4 In t)'s tas-

we )ae t" ("n#'re t)e sw't() s() t)at 't re7wr'tes t)e tra##'( w't) a C"S "# !2

t)ere#"re2 t)e Sw't()"rt r'"r'ty e;tene ("s !8 ("11an 's se4

Tas- $6

!he third switch shou$d be configured with a hostna#e of Cat-3 and the forth switch

shou$d be configured with a hostna#e of Cat-4

On t)e T)'r Sw't()


On t)e *"rt) Sw't()


Tas- $=

Configure trun(ing between Cat-3 and Cat-4 using )orts F0/1 and F0/20> !he !"

do#ain na#e shou$d be ?CC%&@>

T)e reas"n DOT! trn-'n en(aslat'"n 's ()"sen 's be(ase "# tas- $,2 t)e



37/124

re("11enat'"n 's t)at t)e ent're lab s)"l be rea a)ea "# t'1e an a lan "#

a(t'"n s)"l be #"r1late 'n "rer t" a"' renant ("n#'rat'"n4

On ."t) Sw't()es

7config8'%nterface range F0/1-207config-if-range8'Switch)ort trun( enca) dot1I

7config-if-range8'Switch)ort #ode trun(7config8't) do#ain CC%&


On Cat73

Cat-3'Show int trun(

"ort ode &nca)su$ation Status 9atie $an

Fa0/1 on 02>1I trun(ing 1



Fa0/1 1-404

Fa0/20 1-404


Fa0/1 1Fa0/20 1


Fa0/20 1

Tas- $>

Configure the fo$$owing


38/124

Router %nterface


39/124

On Cat7%

Cat-4'Show $an brief


40/124



Fa0/1 1-404

Fa0/20 1-404


Fa0/20 1,112,134,156

"ort $ans in s)anning tree forwarding state and not )runedFa0/1 134,156

Fa0/20 134,156

Tas- 30

Configure u$ti-instance of S)anning !ree on the switches using the fo$$ows )o$ic*+

!here shou$d be two instances of S!", instance 1 and 2

%nstance 1 shou$d hand$e


41/124

On ."t) Sw't()es

7config8'S)anning-tree #ode #st

T)'s ("11an ()anes t)e 1"e "# t)e sw't() t" FST4

7config8'S)anning-tree #st configuration

7config-#st8'Reision 17config-#st8'9a#e CC%&

7config-#st8'%nstance 1 $an 112,134

7config-#st8'%nstance 2 $an 156

T)e #'rst ("11an all"ws s t" enter 'n t)e FST ("n#'rat'"n 1"e4 T)e se("n

("11an se('#'es t)e ("n#'rat'"n re's'"n n1ber: t)e rane #"r t)'s n1ber 's

!7655354 T)e t)'r ("11an se('#'es t)e na1e #"r t)'s ("n#'rat'"n 'n t)'s (ase

CCIE4 T)e #"rt) an #'#t) ("11ans 1a t)e reeste /LANs t" t)e se('#'e

'nstan(es2 FST s"rts !6 'nstan(es2 by e#alt all t)e #tre /LANs w'll beass'ne t" 'nstan(e 02 'nstan(e 0 's t)e (at() all 'nstan(e4

T" er'#y t)'s ("n#'rat'"n9

On b"t) Sw't()es

Show s)anning-tree #st configuration

9a#e CC%&

Reision 1%nstance $ans #a))ed

-------- ------------------------------------------

0 1-11,13-33,35-55, 5-4041 112,134

2 156

N"te 'nstan(e 0 )anles t)e rest "# t)e lans t)at are n"t ass'ne t" a 'en

'nstan(e: 'nstan(e 0 's t)e (at() all 'nstan(e4

T" /er'#y t)e ("n#'rat'"n be#"re ("n#'r'n t)e ne;t "rt'"n "# t)etas-9

On Cat73

Cat-3'Show s)anning-tree bridge

.e$$o a; Fwd

CCIE Routing and Switching Catalyst 3560 Lab Pae %! "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


42/124

S! %nstance ridge % !i#e


43/124

S! %nstance Root % Cost !i#e b>20 0 2 20 15S!1 1 001>06f>00 200000 2 20 15 Fa0/1S!2 2 001>b>20 0 2 20 15

N"te Cat7% 's t)e r""t br'e #"r 'nstan(e $ an 02 w)ereas2 Cat73 's t)e r""t #"r

'nstan(e !4

T" ("n#'re t)e last "rt'"n "# t)'s tas-2 "rt7r'"r'ty #eatre 's se as #"ll"ws9

On ."t) Sw't()es

7config8'%nt F0/1

7config-if8'S)anning-tree #st 1 )ort-)riorit* 0 H') r'"r'ty7config-if8' S)anning-tree #st 2 )ort-)riorit* 12

7config8'%nt F0/207config-if8'S)anning-tree #st 1 )ort-)riorit* 12

7config-if8'S)anning-tree #st 2 )ort-)riorit* 0

In t)'s tas- P"rt7r'"r'ty 's se w)en sele(t'n an 'nter#a(e t" t 'nt" t)e

#"rwar'n state #"r a 'en 'nstan(e: a l"wer ale )as a )')er r'"r'ty4 In t)'s

(ase "rt *0+!, w'll be se by all t)e /LANs t)at are ass'ne t" 'nstan(e !2

be(ase 't )as a )')er r'"r'ty @L"wer ale2 an t)e se("n 'nstan(e w'll se "rt

*0+$! be(ase 't )as been ("n#'re w't) a )')er r'"r'ty @L"wer ale4


On Cat73

Cat-3'Show s)anning-tree int f0/1

CCIE Routing and Switching Catalyst 3560 Lab Pae %3 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


44/124

st %nstance Ro$e Sts Cost "rio>9br !*)e---------------- -------- --------- ---------- ---------- -------

S!0 Root FW 200000 12>23 "2)

S!1 esg FW 200000 0>23 "2)

S!2 23 "2)

Cat-3'Sh s)anning-tree int f0/20

st %nstance Ro$e Sts Cost "rio>9br !*)e

---------------- -------- --------- ---------- ---------- -------

S!0 22 "2)S!1 esg FW 200000 12>22 "2)

S!2 Root FW 200000 0>22 "2)

On Cat7%


st %nstance Ro$e Sts Cost "rio>9br !*)e---------------- -------- --------- ---------- ---------- -------

S!0 esg FW 200000 12>21 "2)

S!1 Root FW 200000 0>21 "2)S!2 esg FW 200000 12>21 "2)

Cat-4'Sh s)anning-tree int f0/20

st %nstance Ro$e Sts Cost "rio>9br !*)e

---------------- -------- --------- ---------- ---------- -------

S!0 esg FW 200000 12>22 "2)S!1 22 "2)

S!2 esg FW 200000 0>22 "2)

N"te 1st 'nstan(e ! 's bl"(-e "n "rt *0+$0 bt #"rware "n *0+!, an 1st

'nstan(e $ 's bl"(-e "n 'nter#a(e *0+!, an #"rware "n *0+$04

Tas- 3!

!here is a )rotoco$ ana$*Her connected to F0/1 on Cat-4> Lou receied a reIuest to

#onitor and ana$*He a$$ )ac(ets for )ort F0/16 on Cat-3> Configure the switches to

acco##odate this reIuest>

On Cat73

CCIE Routing and Switching Catalyst 3560 Lab Pae %% "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


45/124

Cat-37config8'$an 0Cat-37config-$an8'Re#ote-s)an

Cat-37config-$an8'&;it

T)e (reat'"n "# t)'s /LAN (an "nly be "ne 'n t)e l"bal ("n#'rat'"n 1"e2be(ase t)'s 's t)e "nly 1"e t)at all"ws s t" set t)e /LAN as re1"te7san4 Ensre

t)at t)'s /LAN 's r"aate t" Cat7%4


On Cat739

Cat-3'Sh $an brie


46/124

On Cat73

Cat-3'Show $an re#ote-s)an

Re#ote S" 's w)ere t)e r"t"("l analyBer 's ("nne(te4

CCIE Routing and Switching Catalyst 3560 Lab Pae %6 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


47/124


On Cat7%

Cat-4'Sh #onitor session 1

Session 1---------

!*)e + Re#ote estination Session

Source RS"

&therChanne$ )roides an auto#atic recoer* for the $oss of a $in( b*

redistributing the traffic across the re#aining $in(/s> S!" wi$$ not b$oc( one of the $in(s in the bund$e because to S!", the bund$e $oo(s

$i(e a sing$e $in(>

:) to $in(s can be co#bined to )roide #ore bandwidth>

!he $in(s within the bund$e #ust hae the sa#e characteristics such as du)$e;ing,

s)eed and etc> &therChanne$ can be configured as $a*er 2 or $a*er 3>

With a*er 3, a $ogica$ interface 7"ort-Channe$8 is statica$$* configured and a$$

a*er 3 configurations are )erfor#ed under that interface> With a*er 2, the $ogica$ interface is created auto#atica$$*>

With both a*er 2 and a*er 3, )h*sica$ interfaces #ust be #anua$$* assigned to

the $ogica$ interface using ?channe$-grou)@ configuration co##and> &therChanne$s can be configured auto#atica$$* using "ort aggregation )rotoco$

CCIE Routing and Switching Catalyst 3560 Lab Pae %= "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


48/124

7" "3ad )rotoco$> Switches can be configured to use "

T)ere are 5 1"es t)at t)e sw't()es (an be ("n#'re 'n9

ONB Forces the interface into an &therChanne$ without "

ACTI/EB :sed in

AUTOB :sed in " "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


49/124


50/124

On Cat7!

Cat-1'Sh int trun(


Fa0/1 on is$ trun(ing 1Fa0/20 on is$ trun(ing 1

"o1 on 02>1I trun(ing 1


Fa0/1 1-2,33-404Fa0/20 1-2,33-404

"o1 1-404


Fa0/20 1,12,34,56"o1 1,12,30-32,34,56


Fa0/1 1Fa0/20 none

"o1 1,12,30-32,34,56

On Cat7!


$an Ro$e Sts Cost "rio>9br !*)e

-------------- ----------------- --------- ------

2 "2)2 "2)

2 "2)

2 "2)2 "2)

2 "2)

2 "2)


$an Ro$e Sts Cost "rio>9br !*)e-------------- ---------------- ---------- -----

2 "2)2 "2)

2 "2)



51/124

2 "2)

2 "2)2 "2)

2 "2)

On Cat73



-------------- ---------------- --------- ------2 "2)

2 "2)

2 "2)

2 "2)



------------- ---------------- ---------- -----

2 "2)2 "2)

2 "2)

2 "2)

N"te all 'nter#a(es are 'n #"rwar'n state be(ase t" sann'n7tree2 t)e "rt7

()annel aears as a s'nle 'nter#a(e4

A s)"w et)er()annel ! eta'l8 ("11an (an reeal t)at t)e 'nter#a(es are w"r-'n

'n t)e bnle4

Tas- 33

&nsure that the &therChanne$ created in the )reious ste) uses destination

L"a balan('n (an be "ne base "n t)e #"ll"w'n9

S"r(e FAC aressB "ac(ets forwarded to an &therChanne$ are distributed across the

)orts in the channe$ based on the source When

source


52/124

and destination %" address is a$so enab$ed

Dest'nat'"n FAC aressB %f the &therChanne$ is between a router and a switch and

since the router has a sing$e

T" see t)e e#alt l"a balan('n9

On Cat7!N"te t)e e#alt l"a balan('n 's base "n t)e

Cat-1'show etherchanne$ $oad S"r(e Fa( aress&therChanne$ oad-a$ancing =)erationa$ State 7src-#ac8+9on-%"+ Source



53/124


35607Se(r'ty

Answers



54/124


SW-1 SW-2

R1

F0/0 F0/1

R2

F0/0 F0/1

R3

R3

F0/0 F0/1

R4

F0/0 F0/1

R5

F0/0 F0/1

R6

F0/0 F0/1

CCIE Routing and Switching Catalyst 3560 Lab Pae 5% "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.

*0+!

*0+$

*0+3

*0+%

*0+5

*0+6

*0+!,

*0+$0

*0+!

*0+$

*0+3

*0+%

*0+5

*0+6

*0+!,

*0+$0


55/124



56/124

Tas- !

Configure the hostna#e of the four Cata$*st switches as fo$$ows+

First Switch O SW-1Second Switch O SW-2

!hird Switch O SW-3

Forth Switch O SW-4

On t)e *'rst Sw't()

Switch7config8'.ostna#e SW-1

On t)e Se("n Sw't()


On t)e T)'r Sw't()


On t)e *"rt) Sw't()


Tas- $

%n order to )reent a


57/124

Cat-1'Show )ort-securit*

Secure "ort a;Secure


58/124

T)ere are tw" tyes "# a'n t)at (an be se('#'e "n a 'en "rt an t)ey are as

#"ll"ws9

Ina(t''ty9 T)e se(re FAC aress+es "n t)'s "rt are elete ONL< '# t)ey

are 'na(t'e #"r t)e se('#'e a'n t'1e4

Abs"lte9 T)e se(re FAC aress+es "n t)'s "rt are elete a#ter t)e

se('#'e a'n t'1e2 rearless "# a(t''ty "r 'na(t''ty: t)'s 's l'-e t'1e t"

l'e4

Cat-17config-if8'Switch)ort )ort-securit* aging ti#e 60

S'n(e t)e a'n t'1e ("l n"t be se('#'e 'n t)e re'"s ("11an2 a searate

("11an nees t" be ("n#'re t" se('#y t)e a'n t'1e4


On Cat7!

Cat-1'Show )ort-securit*

Secure "ort a;Secure "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


59/124

02+14+06+ M%9&"R=!=-5-:"=W9+ L'ne r"t"("l "n Inter#a(e *astEt)ernet0+!2

()ane state t" "wn

02+14+0+ M%9E-3-:"=W9+ %nterface Fast&thernet0/1, changed state to down

On Cat7!

Cat-1'Show i) int brie

%nterface %"-


60/124

R17config8'%nt F0/0R17config-if8'9= ac-address 0000>1111>1111

On Cat7!

Cat-17config8'%nt f0/1

Cat-17config-if8'Shut

Wa't t'll t)e l'ne "es "wn t)en enter t)e #"ll"w'n ("11an9


Tas- 3

%n order to )reent &nd with the character VJV>

switch)ort #ode accessswitch)ort )ort-securit*

switch)ort )ort-securit* #ac-address stic(*

switch)ort )ort-securit* #a;i#u# 1switch)ort )ort-securit* io$ation )rotect

J

Cat-27config8'

@T)e ab"e ("n#'rat'"n ("n#'res a s1art"rt 1a(r"4 A s1art"rt 1a(r" 's

starte by t)e Fa(r" na1e8 ("11an an t)en #"ll"we by an arb'trary na1e

t)at 's ass'ne t" t)e 1a(r"4

On(e t)at ("11an 's entere2 a 1essae 's 'slaye 'n t)e ("11an l'ne4 T)'s



61/124

1essae tells s t" se t)e 8 s'n 'n "rer t" en t)'s 1a(r"4

L'ne 3 t" l'ne = ("nta'ns t)e a(tal ("11ans t)at t)e 1a(r" w'll e;e(te4

A s1art"rt 1a(r" (an be al'e t" an 'nter#a(e2 'nter#a(e rane2 "r a relar

1a(r"4

Lastly t)e S1art"rt Fa(r" 's al'e t" t)e relar 1a(r"2 as #"ll"ws9

Cat-27config8'%nterface range #acro Router-"orts

Cat-27config-if-range8'acro a))$* "ort-Secur


On Cat7$

A S)"w rn8 ("11an 's entere2 1"st "# t)e "tt #r"1 t)'s s)"w ("11an 's

"1'tte an "nly t)e erta'n'n arts are s)"wn9

Cat-2'Show run

ui$ding configuration>>>

P

1a(r" na1e P"rt7Se(r

sw't()"rt 1"e a((ess

sw't()"rt "rt7se(r'ty

sw't()"rt "rt7se(r'ty 1a(7aress st'(-y

sw't()"rt "rt7se(r'ty 1a;'11 !

sw't()"rt "rt7se(r'ty '"lat'"n r"te(t

P

P

interface Fast&thernet0/1switch)ort #ode access

switch)ort )ort-securit*

switch)ort )ort-securit* #ac-address stic(*switch)ort )ort-securit* io$ation )rotect

sw't()"rt "rt7se(r'ty 1a(7aress st'(-y 00!=40e=04#%=0

1a(r" es(r't'"n P"rt7Se(r

P


switch)ort )ort-securit*switch)ort )ort-securit* #ac-address stic(*

switch)ort )ort-securit* io$ation )rotect

sw't()"rt "rt7se(r'ty 1a(7aress st'(-y 00!=45aa4e$%01a(r" es(r't'"n P"rt7Se(rP

CCIE Routing and Switching Catalyst 3560 Lab Pae 6! "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


62/124

interface Fast&thernet0/3

switch)ort #ode accessswitch)ort )ort-securit*


switch)ort )ort-securit* io$ation )rotect

sw't()"rt "rt7se(r'ty 1a(7aress st'(-y 00!=45,$646a6>1a(r" es(r't'"n P"rt7Se(r

Pinterface Fast&thernet0/4

switch)ort #ode access



sw't()"rt "rt7se(r'ty 1a(7aress st'(-y 00!546$#34!%#0


P

interface Fast&thernet0/5switch)ort #ode accessswitch)ort )ort-securit*


switch)ort )ort-securit* io$ation )rotectsw't()"rt "rt7se(r'ty 1a(7aress st'(-y 00!=40e%e46a=0


P




sw't()"rt "rt7se(r'ty 1a(7aress st'(-y 00!=45,$646ab01a(r" es(r't'"n P"rt7Se(r

P

e#'ne 'nter#a(e7rane R"ter7P"rts *astEt)ernet0+! 7 6

P

end

N"te "rts *0+! ? 6 )ae t)e Sw't()"rt "rt7se(r'ty 1a(7aress st'(-y8 #"ll"we

by t)e r"ters FAC aress4 I# t)e r"ters *0+0 'nter#a(e 's 'n s)t"wn8 1"e2

t)e s)"w rn ("11an w'll n"t reeal t)e FAC aress "# t)e r"ter4

T)e Sw't()"rt "rt7se(r'ty 1a(7aress st'(-y8 'nter#a(e ("11an ("nerts all

t)e yna1'( se(re FAC aresses2 'n(l'n t)"se t)at were yna1'(ally learne

be#"re st'(-y learn'n was enable2 t" st'(-y se(re FAC aresses4 All st'(-y

se(re FAC aresses are ae t" t)e rnn'n ("n#'rat'"n4 T)e st'(-y se(re

FAC aresses " n"t at"1at'(ally be("1e art "# t)e ("n#'rat'"n #'le2 w)'() 's

t)e start ("n#'rat'"n se ea() t'1e t)e sw't() restarts4 I# y" sae t)e st'(-y



63/124

se(re FAC aresses 'n t)e ("n#'rat'"n #'le2 w)en t)e sw't() restarts2 t)e

'nter#a(e "es n"t nee t" relearn t)ese aresses4 I# y" " n"t sae t)e st'(-y

se(re aresses2 t)ey are l"st4

Tas- %

Cat-2As )orts F0/15 and F0/16 are connected to co#)an*As web and e-#ai$ serer> !hese

)orts shou$d be configured in &nsure that these )orts canAt co##unicate with

each other> Lou shou$d 9=! configure "riate

On Cat7$

Cat-27config8'$an

Cat-27config8'%nterface range F0/15 B 16

Cat-27config-if-range8'Switch)ort #ode accessCat-27config-if-range8'Switch access $an

Cat-2'Show inter f0/15 switch

9a#e+ Fa0/15Switch)ort+ &nab$ed


64/124

:n(nown #u$ticast b$oc(ed+ disab$ed


65/124

Tas- 5

Configure Cat-2 such that it )reents un(nown unicast or #u$ticast traffic fro# beingforwarded between these two )orts>

On Cat7$

Cat-27config8' interface range f0/15-16Cat-27config-if-range8' switch)ort b$oc( #u$ticast

Cat-27config-if-range8' switch)ort b$oc( unicast

Cat-27config-if-range8' end

N"te "rts *0+!5 an *0+!6 are ("n#'re as r"te(te "rts2 '# n-n"wn n'(ast an

1lt'(ast tra##'( 's #"rware t" a r"te(te "rt2 t)ere ("l be se(r'ty 'sses4 T"

reent n-n"wn n'(ast "r 1lt'(ast tra##'( #r"1 be'n #"rware #r"1 "ne "rt t"

an"t)er2 #l""'n "# n-n"wn n'(ast "r 1lt'(ast a(-ets s)"l be bl"(-e "n t)ese

"rts4


Cat-2'Show inter f0/15 switch

9a#e+ Fa0/15

Switch)ort+ &nab$ed


66/124

Un-n"wn n'(ast bl"(-e9 enable T)e "rts are n"w bl"(-'n

Un-n"wn 1lt'(ast bl"(-e9 enable n-n"wn n'(ast an 1lt'(ast


67/124

Cat-17config8'Radius-serer host 12>16>1>2 (e* cisco

@T)'s ("11an se('#'es t)e Ra's serer an t)e assw"r

T" er'#y t)at 'ts enable "n a 'en "rt9

Cat-1'Show dot1; inter F0/16

Cat-1'

N"te D"t!; 's n"t ("n#'re "n t)'s "rt yet4 Een t)") D"t!; 's enable l"bally "n

t)e sw't()2 'ts n"t a(t'ate "n a 'en 'nter#a(e4 T" a(t'ate D"t!; "n a 'en 'nter#a(e2

enter t)e #"ll"w'n ("11an9

Cat-17config8'%nt f0/16Cat-17config-if8'dot1; )ort-contro$ auto

M %na$id in)ut detected at VV #ar(er>

N"te t)e err"r 1essae tells s t)at D"t!; 's n"t aa'lable "n t)'s "rt: t)e reas"n #"r t)'s

err"r 1essae 's be(ase t)e "rt 's 'n Dyna1'( 1"e an D"t!; 's n"t aa'lable "n "rts

t)at are 'n Dyna1'( 1"e4

In "rer t" #'; t)'s r"ble1 an sat's#y t)e re're1ents "# D"t!; ("n#'rat'"n2 "rt

*0+!6 1st be ("n#'re 'n a((ess 1"e as #"ll"ws9

Cat-17config8'%nterface f0/16

Cat-17config-if8'Switch #ode acc

Cat-17config-if8'ot1; )ort-contro$ auto

N"te2 n" err"r 1essae 's 'slaye4

T)e "rt at)ent'(at'"n state (an be ("ntr"lle as #"ll"ws9

*"r(e7at)"r'Be+ %t b*)asses the authentication state and a$$ traffic is a$$owed>

*"r(e7Unat)"r'Be+ !he )ort re#ains in unauthoriHed state regard$ess of

c$ients atte#)t to get authenticated>

At"9&nab$es 02>1; authentication, the switch identifies the c$ient b* the

T" er'#y t)at 't 's enable "n a 'en "rt9

Cat-1'Show dot1; interface f0/16

ot1; %nfo for Fast&thernet0/16

-----------------------------------

CCIE Routing and Switching Catalyst 3560 Lab Pae 6= "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


68/124

"

Su))!i#eout O 30Re

Configure both of the switches such that if a )assword recoer* is )erfor#ed, the startu)configuration is de$eted auto#atica$$*>

On ."t) Sw't()es

7config8'9o serice )assword-recoer*


On ."t) Sw't()es+

Cat-1'Show ersion

Cisco %=S Software, C3560 Software 7C3560-


69/124

Co)*right 7c8 16-2006 b* Cisco S*ste#s, %nc>

Co#)i$ed Fri 2-u$-06 12+34 b* *enanh%#age te;t-base+ 0;00003000, data-base+ 0;012230

R=+ ootstra) )rogra# is C3560 boot $oader

==!R+ C3560 oot oader 7C3560-.==!-8 ersion 12>2725r8S&C, R&&S&&2>binG

!his )roduct contains cr*)togra)hic features and is subect to :nited

States and $oca$ countr* $aws goerning i#)ort, e;)ort, transfer anduse> e$ier* of Cisco cr*)togra)hic )roducts does not i#)$*

third-)art* authorit* to i#)ort, e;)ort, distribute or use encr*)tion>%#)orters, e;)orters, distributors and users are res)onsib$e forco#)$iance with :>S> and $oca$ countr* $aws> * using this )roduct *ou

agree to co#)$* with a))$icab$e $aws and regu$ations> %f *ou are unab$e

to co#)$* with :>S> and $oca$ $aws, return this )roduct i##ediate$*>

< su##ar* of :>S> $aws goerning Cisco cr*)togra)hic )roducts #a* be found at+

htt)+//www>cisco>co#/ww$/e;)ort/cr*)to/too$/stIrg>ht#$

%f *ou reIuire further assistance )$ease contact us b* sending e#ai$ to

e;)ortJcisco>co#>

cisco WS-C3560-24!S 7"ower"C4058 )rocessor 7reision 08 with 114E/1220E

b*tes of #e#or*>

"rocessor board % C

1 irtua$ &thernet interface

24 Fast&thernet interfaces

2 igabit &thernet interfaces

T)e assw"r7re("ery 1e()an's1 's 'sable4

N"te by e#alt2 any"ne w't) )ys'(al a((ess t" t)e sw't() (an re("er t)e assw"r

by 'nterrt'n t)e b""t r"(ess4

W)en t)'s #eatre 's enable2 t)e b""t r"(ess (an be 'nterrte "nly by aree'n

t" set t)e syste1 ba(- t" t)e e#alt ("n#'rat'"n4

W't) assw"r re("ery 'sable2 y" (an st'll 'nterrt t)e b""t r"(ess an

()ane t)e assw"r2 bt t)e ("n#'rat'"n #'le @("n#'4te;t an t)e /LAN atabase

#'le @lan4at are elete4

CCIE Routing and Switching Catalyst 3560 Lab Pae 6, "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


70/124

Tas- ,

!here are 10 "Cs connected to )ort F0/1 on Cat-2> &nsure that as $ong as one of these"Cs gets authenticated successfu$$* with the R16>1>2, the rest of

the "Cs are a$$owed access to the networ(> :se ?Cisco@ as the (e*>

On Cat7$

Cat-27config8'ot1; s*ste#-auth-contro$

T)e ab"e ("11an enables D"t!; l"bally "n t)e sw't()4


Cat-2'Show dot1;

Sysat)("ntr"l Enable D"t!; 's enable l"bally "n

ot1; "rotoco$ ersion O 1 t)e sw't()Critica$ Recoer* e$a* O 100

Critica$ &

Quiet"eriod O 60

CCIE Routing and Switching Catalyst 3560 Lab Pae =0 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


71/124

Serer!i#eout O 30

Su))!i#eout O 30Re


72/124

Tas- !0

Configure a static


73/124

On Cat7!

Cat-17config8'ac address-tab$e static 0000>1111>2222 $an 1 dro)

Tas- !$

Configure R1 and R2 as fo$$ows+

R"ter Inter#a(e an IP aress FAC aress

R1 F0/0 O 131>1>1>1 /24 0000>1111>1111

R2 F0/1 O 131>1>1>2 /24 0000>2222>2222

Configure trun(ing between the two switches using )orts F0/1 and F0/20N use an

industr* standard trun(ing )rotoco$>

Configure Cat-1 to )rotect R1 fro#


74/124

ARP s""#'n atta(-2 DAI (an be se t" al'ate ARP a(-ets 'n a netw"r-4 DAI

'nter(ets2 l"s an 's(ars ARP a(-ets w't) 'nal' IP7t"7FAC aress b'n'ns4

T)'s #eatre (an reent 1an7'n7t)e71'le atta(-s4

DAI eter1'nes t)e al''ty "# an ARP a(-et base "n al' IP7t"7FAC aress

b'n'ns st"re 'n DHCP sn""'n b'n'ns atabase2 '# a DHCP serer 's n"t

aa'lable2 ser ("n#'re ARP a((ess7l'st (an be se t" al'ate t)e ARP a(-ets4

T" Test be#"re t)e DAI ("n#'rat'"n9

R2'"ing 131>1>1>1


PPPPP


On R!

R1'Show i) ar)

"rotoco$ 2 3 0000>2222>2222


75/124


Sending 5, 100-b*te %C" &chos to 131>1>1>1, ti#eout is 2 seconds+>>>>>

Success rate is 0 )ercent 70/58

N"te t)e P'n 's n"t s((ess#l an t)e #"ll"w'n 1essaes w'll aear "n Cat7!9

MSWJDAI7%7DHCPJSNOOPINGJDEN

7001>5aad>e241/131>1>1>2/0000>0000>0000/131>1>1>1/03+03+46 :!C on ar 1 138

SWJDAI7%7DHCPJSNOOPINGJDEN1>1>1


>>>>>


N"te t)e #"ll"w'n 1essae 's 'slaye "n Cat7!9

CCIE Routing and Switching Catalyst 3560 Lab Pae =5 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


76/124


77/124

In "rer t" test t)e ("n#'rat'"n #rt)er t)e FAC aress "# R$ 's ()ane ba(- t"

'ts e#alt ale as #"ll"ws9

On R$

R27config8'int f0/1R27config-if8'no #ac-address 0000>2222>2222

R27config-if8'Shut

Wa't #"r t)e 'nter#a(e t" " "wn2 t)en enter t)e #"ll"w'n9

R27config-if8'no Shut


78/124

1 36 >3 6= 16

$an .C" "er#its !he F0/23 interface shou$d #onitor for a high

rate of "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


79/124

%nterface !rust State Rate 7))s8 urst %ntera$

--------------- ----------- ---------- --------------Fa0/1 :ntrusted 15 1

Fa0/2 :ntrusted 10 2

Fa0/3 :ntrusted 15 1

Fa0/4 :ntrusted 15 1Fa0/5 :ntrusted 15 1

Fa0/6 :ntrusted 15 1>

>

*a0+$3 Untrste !0 $

Tas- !%

Configure Cat-1 )ort F0/1 to den* inco#ing


80/124

Tas- !6

Configure a 2222 and 0000>1111>3333ro) 1>1>4 host 131>1>1>3

Cat-17config8'i) access-$ist e;tended %"Cat-17config-e;t-nac$8')er#it ig#) an* an*

Cat-17config8'#ac access-$ist e;tended 0 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


81/124

Cat-17config8'$an access-#a) !S! 20

Cat-17config-access-#a)8'#atch i) addr :"Cat-17config-access-#a)8'action dro)

Cat-17config-access-#a)8'e;it

Cat-17config8'$an access-#a) !S! 30Cat-17config-access-#a)8'#atch i) addr !C"

Cat-17config-access-#a)8'action dro)Cat-17config-access-#a)8'e;it


Cat-17config-access-#a)8'#atch i) addr %"Cat-17config-access-#a)8'action dro)

Cat-17config-access-#a)8'e;it


Cat-17config-access-#a)8'#atch #ac address


82/124


83/124

Tas- !

!he first switch shou$d be configured with a hostna#e of SW-1 and the second switchshou$d be configured with a hostna#e of SW-2

On t)e *'rst Sw't()

.ostna#e SW-1

On t)e Se("n Sw't()

.ostna#e SW-2

Tas- $

1>1>1 /24R2 F0/0 200>1>1>2 /24

R3 F0/0 200>1>1>3 /24

R4 F0/1 200>1>1>4 /24

R5 F0/1 200>1>1>5 /24

R6 F0/1 200>1>1>6 /24

1 F0/0 200>1>1>10 /24

On R!

%nt F0/0%) address 200>1>1>1 255>255>255>0

9o shut

On R$

%nt F0/0

CCIE Routing and Switching Catalyst 3560 Lab Pae >3 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.

Lab 3

Pr'ate /LANs


84/124

%) address 200>1>1>2 255>255>255>0

9o shut

On R3

%nt F0/0%) address 200>1>1>3 255>255>255>0

9o shut

On R%

%nt F0/1

%) address 200>1>1>4 255>255>255>0

9o shut

On R5

%nt F0/1

%) address 200>1>1>5 255>255>255>0

9o shut

On R6

%nt F0/1

%) address 200>1>1>6 255>255>255>0

9o shut

On ..!

%nt F0/0

%) address 200>1>1>10 255>255>255>0

9o shut

T" test an er'#y t)e ("n#'rat'"n9

R1'"ing 200>1>1>2



PPPPP

Success rate is 100 )ercent 75/58, round-tri) #in/ag/#a; O 1/2/4 #sR1'"ing 200>1>1>3

CCIE Routing and Switching Catalyst 3560 Lab Pae >% "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


85/124




R1'"ing 200>1>1>4


PPPPP


R1'"ing 200>1>1>5


PPPPPSuccess rate is 100 )ercent 75/58, round-tri) #in/ag/#a; O 1/2/4 #s

R1'"ing 200>1>1>6



PPPPP


R1'"ing 200>1>1>10




Tas- 3

Configure trun(ing between SW-1 and SW-2 using )orts F0/1 and F0/20> :se anindustr* standard trun(ing )rotoco$ for this )ur)ose>

On ."t) Sw't()es

%nterface range f0/1-20Switch trun( enca) dot1I

Switch #ode trun(




86/124

On ."t) Sw't()es

SW-1'Show int trun(

"ort ode &nca)su$ation Status 9atie $anFa0/1 on 02>1I trun(ing 1



Fa0/1 1-404Fa0/20 1-404


Fa0/1 1Fa0/20 1


Fa0/20 none

SW-2'Show int trun(





Fa0/1 1-404

Fa0/20 1-404


Fa0/1 1Fa0/20 1


Fa0/1 1

Tas- %

Configure the switches such that the )orts that are not used are in ad#inistratie$* down

state> :se #ini#u# nu#ber of co##ands for this tas(>

On SW7!



87/124

SW-17config8'%nt range F0/4-,F0/10-1,F0/21-24SW-17config-if8'Shut

On SW7$

SW-27config8'%nt range F0/1-3,F0/-F0/1,F0/21-24

SW-27config-if8'Shut

Tas- 5

Configure SW-1 and SW-2 to i#)$e#ent the fo$$owing )o$ic*+

Routers R1, R2 and R5 shou$d be ab$e to )ing and hae reachabi$it* to each other>

R2 and R5 shou$d 9=! hae reachabi$it* to an* other router in this $ab>

Routers R3, R4 and R1 shou$d be ab$e to )ing and hae reachabi$it* to each other>

R3 and R4 shou$d 9=! hae reachabi$it* to an* other router in this $ab>

Routers R6 and R1 shou$d be ab$e to )ing and hae reachabi$it* to each other> R6

shou$d 9=! hae reachabi$it* to an* other router in this $ab>

Routers 1 and R1 shou$d be ab$e to )ing and hae reachabi$it* to each other>

1 shou$d 9=! hae reachabi$it* to an* other router in this $ab>

&nsure that R6 and 1 are in the sa#e


88/124

7config-$an8')riate-$an iso$ated

7config8'$an 10

7config-$an8')riate-$an association add 25,34,61


Show $an )riate-$an

"ri#ar* Secondar* !*)e "orts

------- --------- ----------------- ---------------------------------------------10 25 co##unit*

10 34 co##unit*

10 61 iso$ated

On SW7!

SW-17config8'%nt F0/1SW-17config-if8' Switch)ort )riate-$an #a))ing 10 25,34,61

SW-17config-if8' Switch)ort #ode )riate-$an )ro#iscuous

SW-17config-if8'%nt F0/2

SW-17config-if8'Switch)ort #ode )riate-$an host

SW-17config-if8'Switch)ort )riate-$an host-association 10 25

SW-17config-if8'%nt F0/3


SW-17config-if8'switch)ort )riate-$an host-association 10 34

SW-17config8'%nt F0/

SW-17config-if8'Switch)ort #ode )riate-$an hostSW-17config-if8'Switch)ort )riate-$an host-association 10 61

On SW7$

SW-27config8'%nt F0/4SW-27config-if8' Switch)ort #ode )riate-$an host

SW-27config-if8' Switch)ort )riate-$an host-association 10 34

SW-27config8'%nt F0/5SW-27config-if8'Switch)ort #ode )riate-$an host

SW-27config-if8'Switch)ort )riate-$an host-association 10 25

SW-27config8'%nt F0/6


CCIE Routing and Switching Catalyst 3560 Lab Pae >> "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


89/124

SW-27config-if8'switch)ort )riate-$an host-association 10 61


On SW7$

SW-2'Show $an )riate-$an

"ri#ar* Secondar* !*)e "orts------- --------- ----------------- ------

10 25 co##unit* Fa0/5

10 34 co##unit* Fa0/4

10 61 iso$ated Fa0/6

On SW7!

SW-1'Show $an )riate-$an

"ri#ar* Secondar* !*)e "orts------- --------- ----------------- ------

10 25 co##unit* Fa0/1, Fa0/2

10 34 co##unit* Fa0/1, Fa0/310 61 iso$ated Fa0/1, Fa0/

T" test t)e ("n#'rat'"n9

On R!

R1'"ing 200>1>1>2




R1'"ing 200>1>1>3




CCIE Routing and Switching Catalyst 3560 Lab Pae >, "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


90/124

R1'"ing 200>1>1>4




R1'"ing 200>1>1>5




R1'"ing 200>1>1>6


PPPPP


R1'"ing 200>1>1>10


PPPPP


On R$

R2'"ing 200>1>1>1


PPPPP


R2'"ing 200>1>1>3


>>>>>


R2'"ing 200>1>1>4

CCIE Routing and Switching Catalyst 3560 Lab Pae ,0 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


91/124


>>>>>


R2'"ing 200>1>1>5


PPPPP


R2'"ing 200>1>1>6


>>>>>Success rate is 0 )ercent 70/58

R2'"ing 200>1>1>10



>>>>>


On R3

R3'"ing 200>1>1>1


PPPPP


R3'"ing 200>1>1>2




R3'"ing 200>1>1>4



CCIE Routing and Switching Catalyst 3560 Lab Pae ,! "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


92/124

PPPPP


R3'"ing 200>1>1>5



R3'"ing 200>1>1>6




R3'"ing 200>1>1>10




On R%

R4'"ing 200>1>1>1




R4'"ing 200>1>1>2



>>>>>


R4'"ing 200>1>1>3



Success rate is100 )ercent 75/58, round-tri) #in/ag/#a; O 1/1/4 #s

CCIE Routing and Switching Catalyst 3560 Lab Pae ,$ "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


93/124

R4'"ing 200>1>1>5




R4'"ing 200>1>1>6




R4'"ing 200>1>1>10


>>>>>


On R5

R5'"ing 200>1>1>1




R5'"ing 200>1>1>2


PPPPP


R5'"ing 200>1>1>3


>>>>>


R5'"ing 200>1>1>4



94/124


>>>>>


R5'"ing 200>1>1>6


>>>>>


R5'"ing 200>1>1>10



On R6

R6'"ing 200>1>1>1




R6'"ing 200>1>1>2


>>>>>


R6'"ing 200>1>1>3




R6'"ing 200>1>1>4



CCIE Routing and Switching Catalyst 3560 Lab Pae ,% "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.


95/124

>>>>>


R6'"ing 200>1>1>5



R6'"ing 200>1>1>10




On ..!

1'"ing 200>1>1>1




1'"ing 200>1>1>2




1'"ing 200>1>1>3




1'"ing 200>1>1>4


>>>>>



96/124


1'"ing 200>1>1>5




1'"ing 200>1>1>6


>>>>>

Success rate is0 )ercent 70/58

Tas- 6

&rase the startu) config and re$oad the routers before )roceeding to the ne;t tas(>



98/124


SW-1 SW-2

R1

F0/0 F0/1

R2

F0/0 F0/1

R3

R3

F0/0 F0/1

R4

F0/0 F0/1

R5

F0/0 F0/1

R6

F0/0 F0/1

CCIE Routing and Switching Catalyst 3560 Lab Pae ,> "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.

*0+!

*0+$

*0+3

*0+%

*0+5

*0+6

*0+!,

*0+$0

*0+!

*0+$

*0+3

*0+%

*0+5

*0+6

*0+!,

*0+$0


100/124

Tas- !

Configure the hostna#e of the four Cata$*st switches as fo$$ows+

First Switch O SW-1Second Switch O SW-2

!hird Switch O SW-3

Forth Switch O SW-4

On t)e *'rst Sw't()


On t)e Se("n Sw't()


On t)e T)'r Sw't()


On t)e *"rt) Sw't()


Tas- $

Configure SW-3 based on the fo$$owing %ngress Q=S )o$ic*+

SC" a$ues of 00 B 20 shou$d be #a))ed to Queue 1 thresho$d 2 with a W!

thresho$d of 50 )ercent>



CCIE Routing and Switching Catalyst 3560 Lab Pae !00 "# !$%2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.

Lab %

3560 OS 7 I


101/124





It 's always a "" 'ea t" see t)e e#alt 1a'n be#"re any ()anes2 t)'s (an be "ne by enter'n

t)e #"ll"w'n ("11an9

SW-3'Show #$s Ios #a)s dsc)-in)ut-I

sc)-in)utI-thresho$d #a)+

d1 +d2 0 1 2 3 4 5 6

----------------------------------------------------------------------------------- 0 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01

1 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 2 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 3 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01

4 + 02-01 02-01 02-01 02-01 02-01 02-01 02-01 02-01 01-01 01-01

5 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 6 + 01-01 01-01 01-01 01-01

N"te t)e "tt 'slays t)e e

Documents

LAB1 Day1 Switching Answers