in search of the cert: gns3

Showing posts with label gns3. Show all posts

Friday, December 14, 2012

5 rtrs...

i worked a little on automating the process...

first, cdp...

core1#sh cdp neigh
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                  D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID        Local Intrfce     Holdtme    Capability Platform Port ID
agg1.ozlan       Fas 0/1           170             R S I WS-C3560- Fas 0/1
agg1.ozlan       Fas 0/2           170             R S I WS-C3560- Fas 0/2
agg2.ozlan       Fas 0/5           127             R S I WS-C3560- Fas 0/5
agg2.ozlan       Fas 0/6           127             R S I WS-C3560- Fas 0/6
gnsrtr4.ozlan    Fas 0/13          147               R    7206VXR   Fas 0/0
gnsrtr5.ozlan    Fas 0/14          177               R    7206VXR   Fas 0/0
gnsrtr2.ozlan    Fas 0/11          139               R    7206VXR   Fas 0/0
gnsrtr3.ozlan    Fas 0/12          144               R    7206VXR   Fas 0/0
gnsrtr1.ozlan    Fas 0/10          132               R    7206VXR   Fas 0/0
core2.ozlan      Fas 0/4           164             R S I WS-C3560- Fas 0/4
core2.ozlan      Fas 0/3           164             R S I WS-C3560- Fas 0/3

you'll need to sudo apt-get install vlan first... save the mod in case of reboot...

see http://blog.ipexpert.com/2011/02/28/gns3-and-physical-switches-breakout-switch/#more-6136

word of caution, you can try to screw around with creating a root account... don't...

i made a text file to quickly build the nix interfaces...

you can use vconfig to make the vlans, but you'll still have to add the ip's to the nic (waste of time)... this does it in one step...

auto eth0.110
iface eth0.110 inet static
address 10.110.1.2
netmask 255.255.255.0

auto eth0.120
iface eth0.120 inet static
address 10.120.1.2
netmask 255.255.255.0

auto eth0.130
iface eth0.130 inet static
address 10.130.1.2
netmask 255.255.255.0

auto eth0.140
iface eth0.140 inet static
address 10.140.1.2
netmask 255.255.255.0

auto eth0.150
iface eth0.150 inet static
address 10.150.1.2
netmask 255.255.255.0

copy them to the /etc/network/interfaces file with an editor:

sudo gedit /etc/network/interfaces

then sudo service networking restart to kick them off...

arteq@arteq-p7-1254:/$ ifconfig
eth0      Link encap:Ethernet HWaddr e8:40:f2:0e:de:63
          inet6 addr: fe80::ea40:f2ff:fe0e:de63/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST MTU:1536 Metric:1
          RX packets:62860 errors:0 dropped:9 overruns:0 frame:0
          TX packets:5627 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:6112576 (6.1 MB) TX bytes:755838 (755.8 KB)
          Interrupt:44 Base address:0x2000

eth1      Link encap:Ethernet HWaddr 9c:b7:0d:9d:82:78
          inet addr:192.168.1.6 Bcast:192.168.1.255 Mask:255.255.255.0
          inet6 addr: fe80::9eb7:dff:fe9d:8278/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:23412 errors:0 dropped:0 overruns:0 frame:651174
          TX packets:17752 errors:65 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:15762205 (15.7 MB) TX bytes:3971120 (3.9 MB)
          Interrupt:16

eth0.110 Link encap:Ethernet HWaddr e8:40:f2:0e:de:63
          inet addr:10.110.1.2 Bcast:10.110.1.255 Mask:255.255.255.0
          inet6 addr: fe80::ea40:f2ff:fe0e:de63/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1536 Metric:1
          RX packets:3445 errors:0 dropped:0 overruns:0 frame:0
          TX packets:60 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:185668 (185.6 KB) TX bytes:10270 (10.2 KB)

eth0.120 Link encap:Ethernet HWaddr e8:40:f2:0e:de:63
          inet addr:10.120.1.2 Bcast:10.120.1.255 Mask:255.255.255.0
          inet6 addr: fe80::ea40:f2ff:fe0e:de63/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1536 Metric:1
          RX packets:2899 errors:0 dropped:2 overruns:0 frame:0
          TX packets:61 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:163544 (163.5 KB) TX bytes:10359 (10.3 KB)

eth0.130 Link encap:Ethernet HWaddr e8:40:f2:0e:de:63
          inet addr:10.130.1.2 Bcast:10.130.1.255 Mask:255.255.255.0
          inet6 addr: fe80::ea40:f2ff:fe0e:de63/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1536 Metric:1
          RX packets:4318 errors:0 dropped:6 overruns:0 frame:0
          TX packets:62 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:252240 (252.2 KB) TX bytes:10385 (10.3 KB)

eth0.140 Link encap:Ethernet HWaddr e8:40:f2:0e:de:63
          inet addr:10.140.1.2 Bcast:10.140.1.255 Mask:255.255.255.0
          inet6 addr: fe80::ea40:f2ff:fe0e:de63/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1536 Metric:1
          RX packets:2364 errors:0 dropped:1 overruns:0 frame:0
          TX packets:61 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:131880 (131.8 KB) TX bytes:10359 (10.3 KB)

eth0.150 Link encap:Ethernet HWaddr e8:40:f2:0e:de:63
          inet addr:10.150.1.2 Bcast:10.150.1.255 Mask:255.255.255.0
          inet6 addr: fe80::ea40:f2ff:fe0e:de63/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1536 Metric:1
          RX packets:3209 errors:0 dropped:4 overruns:0 frame:0
          TX packets:61 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:183412 (183.4 KB) TX bytes:10340 (10.3 KB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1 Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING MTU:16436 Metric:1
          RX packets:261083 errors:0 dropped:0 overruns:0 frame:0
          TX packets:261083 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:16362694 (16.3 MB) TX bytes:16362694 (16.3 MB)

incidentally, eth1 is my wireless card...

this is what my finished /etc/network/interfaces file looks like:

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp

auto eth0.110
iface eth0.110 inet static
address 10.110.1.2
netmask 255.255.255.0

auto eth0.120
iface eth0.120 inet static
address 10.120.1.2
netmask 255.255.255.0

auto eth0.130
iface eth0.130 inet static
address 10.130.1.2
netmask 255.255.255.0

auto eth0.140
iface eth0.140 inet static
address 10.140.1.2
netmask 255.255.255.0

auto eth0.150
iface eth0.150 inet static
address 10.150.1.2
netmask 255.255.255.0

auto eth1
iface eth0 inet dhcp

this is what the ethernet switch in gns3 looks like:

note dot1q for port 11 which is from the nix box to f1/0/1 of the breakout...

you'll need svi's on your connecting mls for each vlan, as well as the vlans... don't forget to make the vlans first...

core1#sh vlan brie

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/7, Fa0/8, Fa0/9, Fa0/16
                                                Fa0/17, Fa0/18, Fa0/19, Fa0/20
                                                Fa0/21, Fa0/22, Fa0/24, Gi0/1
                                                Gi0/2
10   10                               active
100 100                              active
110 gnsr1                            active    Fa0/10
120 gnsr2                            active    Fa0/11
130 gnsr3                            active    Fa0/12
140 gnsr4                            active    Fa0/13
150 gnsr5                            active    Fa0/14, Fa0/15
200 200                              active
1002 fddi-default                     act/unsup
1003 token-ring-default               act/unsup
1004 fddinet-default                  act/unsup
1005 trnet-default                    act/unsup

on the breakout you need the l2protocol-tunnel statements for each l2 proto, cdp, stp and (arghhhh) vtp (cough) as well as sw acc vlan x for the corresponding supported vlan...

don't bother with the routing protocol on the gns routers until you've proven cdp, and basic l3 connectivity first...

gnsrtr5#ping 10.150.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.150.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/10/12 ms
gnsrtr5#

then get em all talking with ospf or one of those other igp's...

core1#sh ip route


Gateway of last resort is not set

     1.0.0.0/24 is subnetted, 1 subnets
C       1.0.0.0 is directly connected, Loopback0
     2.0.0.0/32 is subnetted, 1 subnets
O       2.0.0.2 [110/2] via 10.1.200.2, 00:00:03, Vlan200
                [110/2] via 10.1.100.2, 00:00:03, Vlan100
                [110/2] via 10.1.10.2, 00:00:03, Vlan10
     3.0.0.0/32 is subnetted, 1 subnets
O       3.0.0.3 [110/2] via 10.1.200.11, 00:00:03, Vlan200
                [110/2] via 10.1.100.11, 00:00:03, Vlan100
                [110/2] via 10.1.10.11, 00:00:03, Vlan10
     4.0.0.0/24 is subnetted, 1 subnets
O       4.0.0.0 [110/2] via 10.1.200.12, 00:00:03, Vlan200
                [110/2] via 10.1.100.12, 00:00:03, Vlan100
                [110/2] via 10.1.10.12, 00:00:03, Vlan10
     10.0.0.0/24 is subnetted, 8 subnets
C       10.1.10.0 is directly connected, Vlan10
C       10.110.1.0 is directly connected, Vlan110
C       10.1.100.0 is directly connected, Vlan100
C       10.120.1.0 is directly connected, Vlan120
C       10.140.1.0 is directly connected, Vlan140
C       10.130.1.0 is directly connected, Vlan130
C       10.150.1.0 is directly connected, Vlan150
C       10.1.200.0 is directly connected, Vlan200

agg2# sh ip route ospf
     1.0.0.0/32 is subnetted, 1 subnets
O       1.0.0.1 [110/2] via 10.1.200.1, 00:01:22, Vlan200
                [110/2] via 10.1.100.1, 00:01:22, Vlan100
                [110/2] via 10.1.10.1, 00:01:22, Vlan10
     2.0.0.0/32 is subnetted, 1 subnets
O       2.0.0.2 [110/2] via 10.1.200.2, 00:01:22, Vlan200
                [110/2] via 10.1.100.2, 00:01:22, Vlan100
                [110/2] via 10.1.10.2, 00:01:22, Vlan10
     3.0.0.0/32 is subnetted, 1 subnets
O       3.0.0.3 [110/2] via 10.1.200.11, 00:01:22, Vlan200
                [110/2] via 10.1.100.11, 00:01:22, Vlan100
                [110/2] via 10.1.10.11, 00:01:22, Vlan10
     10.0.0.0/24 is subnetted, 8 subnets
O       10.110.1.0 [110/2] via 10.1.200.1, 00:01:22, Vlan200
                   [110/2] via 10.1.100.1, 00:01:22, Vlan100
                   [110/2] via 10.1.10.1, 00:01:22, Vlan10
O       10.120.1.0 [110/2] via 10.1.200.1, 00:01:22, Vlan200
                   [110/2] via 10.1.100.1, 00:01:22, Vlan100
                   [110/2] via 10.1.10.1, 00:01:22, Vlan10
O       10.140.1.0 [110/2] via 10.1.200.1, 00:01:22, Vlan200
                   [110/2] via 10.1.100.1, 00:01:22, Vlan100
                   [110/2] via 10.1.10.1, 00:01:22, Vlan10
O       10.130.1.0 [110/2] via 10.1.200.1, 00:01:22, Vlan200
                   [110/2] via 10.1.100.1, 00:01:22, Vlan100
                   [110/2] via 10.1.10.1, 00:01:26, Vlan10
O       10.150.1.0 [110/2] via 10.1.200.1, 00:01:26, Vlan200
                   [110/2] via 10.1.100.1, 00:01:26, Vlan100
                   [110/2] via 10.1.10.1, 00:01:26, Vlan10

gnsrtr5#ping 10.110.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.110.1.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 4/10/16 ms
gnsrtr5#

als1#ping 10.130.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.130.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/209/1012 ms

it's very exciting...

proof of concept... gns3 and breakout...

all the elements are together, and it's working...

the 3750 is truly invisible with the tunneling... kind of a shame for such a nice switch, but in the end i probably saved 2 grand between a gns3 server and quad nic's...

a lot of work and a lot to keep straight... layer 3 is working fine... and i haven't seen any mtu inspired errors in ospf yet, having upped the system mtu's where needed...

damn... of course this is on the list:

http://blog.ipexpert.com/2011/02/28/gns3-and-physical-switches-breakout-switch/#more-6136

using ubu 12.04 and it doesn't really dig all the network screwing around... i lost my wireless connection for a few hours...

core1#sh cdp neigh
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                  D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID        Local Intrfce     Holdtme    Capability Platform Port ID
agg1.ozlan       Fas 0/1           160             R S I WS-C3560- Fas 0/1
agg1.ozlan       Fas 0/2           160             R S I WS-C3560- Fas 0/2
agg2.ozlan       Fas 0/5           176             R S I WS-C3560- Fas 0/5
agg2.ozlan       Fas 0/6           176             R S I WS-C3560- Fas 0/6
gns3rtr1.ozlan   Fas 0/24          179               R    7206VXR   Fas 0/0
gns3rtr3.ozlan   Fas 0/23          163               R    7206VXR   Fas 0/0

gns3rtr3#sh ip route ospf

Gateway of last resort is not set

      1.0.0.0/32 is subnetted, 1 subnets
O        1.0.0.1 [110/2] via 10.30.1.1, 00:02:45, FastEthernet0/0
      2.0.0.0/32 is subnetted, 1 subnets
O        2.0.0.2 [110/3] via 10.30.1.1, 00:02:45, FastEthernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.0.0.3 [110/3] via 10.30.1.1, 00:02:45, FastEthernet0/0
      4.0.0.0/24 is subnetted, 1 subnets
O        4.0.0.0 [110/3] via 10.30.1.1, 00:02:45, FastEthernet0/0
      10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
O        10.1.10.0/24 [110/2] via 10.30.1.1, 00:02:45, FastEthernet0/0
O        10.1.100.0/24 [110/2] via 10.30.1.1, 00:02:45, FastEthernet0/0
O        10.1.200.0/24 [110/2] via 10.30.1.1, 00:02:45, FastEthernet0/0
      172.16.0.0/24 is subnetted, 1 subnets
O        172.16.1.0 [110/2] via 10.30.1.1, 00:02:45, FastEthernet0/0
gns3rtr3#

gns3rtr1#ping 10.30.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.30.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/19/20 ms

gns3rtr3#ping 10.1.10.112
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.10.112, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 8/11/12 ms

i'm going to build the 3 tshoot topologies also... once i get comfortable with it, i'll post a step by step...

quick tip... sudo /etc/init.d/networking restart has been deprecated... the new command is sudo service networking restart... that's a command you'll use often...

virtual and hardware, l2..

i have the 3750 in place, and l2 is functioning properly...

many thanks to tyson scott at ipexpert...

http://blog.ipexpert.com/2011/02/28/gns3-and-physical-switches-breakout-switch/#more-6136

the cloud and gns3 switch plus the 3750, represent the connection to the switched network...

i'm tunneling l2 through the 3750 to get there, and it is invisible, as below...

gns3rtr1#sh cdp neigh
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                  D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID        Local Intrfce     Holdtme    Capability Platform Port ID
core1.ozlan      Fas 0/0           166             R S I WS-C3560- Fas 0/24

gns3rtr2#sh cdp neigh
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                  D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID        Local Intrfce     Holdtme    Capability Platform Port ID
core1.ozlan      Fas 0/0           147             R S I WS-C3560- Fas 0/23

core1#sh cdp neigh
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                  D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID        Local Intrfce     Holdtme    Capability Platform Port ID
agg1.ozlan       Fas 0/1           149             R S I WS-C3560- Fas 0/1
agg1.ozlan       Fas 0/2           149             R S I WS-C3560- Fas 0/2
agg2.ozlan       Fas 0/5           166             R S I WS-C3560- Fas 0/5
agg2.ozlan       Fas 0/6           166             R S I WS-C3560- Fas 0/6
gns3rtr1.ozlan   Fas 0/24          140               R    7206VXR   Fas 0/0
gns3rtr2.ozlan   Fas 0/23          159               R    7206VXR   Fas 0/0
core2.ozlan      Fas 0/4           143             R S I WS-C3560- Fas 0/4
core2.ozlan      Fas 0/3           143             R S I WS-C3560- Fas 0/3

each router is in a separate vlan, the gns3 switch is access vlans to the routers, and dot1q to the cloud, vlan 1... there are two tunneled connections, one each per vlan from the 3750 to core1 on ports f0/23 and 24 respectively...

core1#sh vlan brie

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/7, Fa0/8, Fa0/9, Fa0/10
                                                Fa0/11, Fa0/12, Fa0/13, Fa0/14
                                                Fa0/15, Fa0/16, Fa0/17, Fa0/18
                                                Fa0/19, Fa0/20, Fa0/21, Fa0/22
                                                Gi0/1, Gi0/2
10   10                               active
100 100                              active
101 VLAN0101                         active    Fa0/24
102 VLAN0102                         active    Fa0/23
200 200                              active
1002 fddi-default                     act/unsup
1003 token-ring-default               act/unsup
1004 fddinet-default                  act/unsup
1005 trnet-default                    act/unsup

note trunked ports 1-6 to the switched network...

VLAN0010
Spanning tree enabled protocol rstp
Root ID    Priority    4106
             Address     0016.c706.9680
             This bridge is the root
             Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority    4106   (priority 4096 sys-id-ext 10)
             Address     0016.c706.9680
             Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec
             Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1               Desg FWD 19        128.3    P2p Peer(STP)
Fa0/2               Desg FWD 19        128.4    P2p Peer(STP)
Fa0/3               Desg FWD 19        128.5    P2p
Fa0/4               Desg FWD 19        128.6    P2p
Fa0/5               Desg FWD 19        128.7    P2p
Fa0/6               Desg FWD 19        128.8    P2p

behavior is expected... i haven't dicked around with mtu and difficulties that presents with ospf yet... i'm simply happy that l2 is functioning properly... as has been stated by others, the plan is not to troubleshoot gns3, the plan is to perform labs...

Sunday, December 2, 2012

new ver gns3...

what a battle... but the interfaces to the gear seem more stable...

R1#sh cdp neigh
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                  D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID        Local Intrfce     Holdtme    Capability Platform Port ID
3550-01.ozlan    Fas 0/0           166             R S I WS-C3550- Fas 0/1
R1#ping 10.1.1.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.100, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/6/16 ms

switch...

good to be kicking switch ass again, i missed it... although i did build 2 nexus 5010's with fex's from the ground up last week...

that was my plan with switch, likewise with route, i studied both in their time to exclusion... nice to be marrying the two now though... plus there are many other things i want to accomplish in the coming year... when you're so focused on a subject, all the other things you want to do have to wait...

the last few weeks before an exam are always miserable... you want to move on but the looming exam keeps warning you your stuck here until it's finished....

which of course is not to say that route is finished; it's just beginning, again...

always begin again...

the beginning is a perfectly good place to start...

gns3 > gear...

and here we have it...

i'll get all slick rick on it later... first is proving connectivity... the guidance for linux is to use the generic eth interface v. the linux one...

r1#sh cdp neigh
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                  D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID        Local Intrfce     Holdtme    Capability Platform Port ID
3550-01.ozlan    Fas 0/0           127             R S I WS-C3550- Fas 0/1

this is the entre' to the wire; the 3550...

r1#sh arp
Protocol Address          Age (min) Hardware Addr   Type   Interface
Internet 10.1.1.1                7   a8b1.d4d3.a941 ARPA   FastEthernet0/0
Internet 10.1.1.11               8   0009.b752.d780 ARPA   FastEthernet0/0
Internet 10.1.1.12               7   0009.b73f.ce80 ARPA   FastEthernet0/0
Internet 10.1.1.100              9   000f.8ffe.0980 ARPA   FastEthernet0/0
Internet 10.1.1.101              -   ca00.0d67.0008 ARPA   FastEthernet0/0

1.100 is the 3550, 1.1 is the 3560, 1.11 and .12 are the 2950's and 1.101 is the gns3 router...

also running as root is advised, sudo gns3... qinq is next to make the 3550 invisible...

Tuesday, November 13, 2012

slimed ospf lab...

from here... http://www.gns3-labs.com/2010/08/13/gns3-lab-exercise-ospf-case-study-lab-scenario-3/

looks challenging... this was not easy to convert...

it has lots of pretty colors... this is the task list:

Instructions
Plan, design, and implement the International Travel Agency (ITA) network
shown in the diagram and described below. Verify that all configurations are
operational and functioning according to the guidelines.

Scenario
The ITA needs its core network set up for OSPF with the following
specifications. Use the addressing scheme shown in the diagram.

• Configure the OSPF backbone area on the Ethernet connection between R1
and R5.
• Configure the Frame Relay subnet as a point-to-multipoint network in area
100.
• Configure R2’s loopback interfaces to be in area 200. Summarize this area
with the most efficient summary.
• Configure the Ethernet connection between R3 and R4 to be in area 300.
• Add the loopback on R3 to area 300.
• Make area 300 a totally NSSA area.

• Redistribute the loopback networks on R4 that do not belong in any OSPF
area.
• Create virtual links as necessary for full connectivity.
• Make sure that all loopback interfaces get advertised with the correct subnet
mask.

Sunday, October 28, 2012

pbr in gns3...

i was having trouble earlier with pbr, determining path choice with a route map... thought i was losing my mind... see this:

http://www.cisco.com/en/US/docs/ios/12_0/qos/configuration/guide/qcpolicy.html

according to this document pbr is supported in cef based switching since 12.0... the question is how well is cef supported in gns3 running ios... my guess is gns3 may choke a little here... i'm the last one to call out gns3; it's the best thing that ever happened to people like us, but...

here's the example:

r1#trace 6.6.6.6
Type escape sequence to abort.
Tracing the route to 6.6.6.6
VRF info: (vrf in name/id, vrf out name/id)
1 10.1.1.2 32 msec
10.1.2.2 20 msec

r1 has a choice of two paths in this ospf/eigrp redistributed topology to get to the far end loopback 6.6.6.6... both paths are supported in the trace... i want to determine one path...

so i set up a pbr on r1 to force the path through r2...

r1(config)#access-list 1 permit 6.6.6.6
r1(config)#access-list 1 permit any
r1(config)#do sh access-list
Standard IP access list 1
10 permit 6.6.6.6
20 permit any

r1(config)#route-map this
r1(config-route-map)#match ip add 1
r1(config-route-map)#set ip next-hop 10.1.1.2
r1(config-route-map)#exit
r1(config)#int f0/0
r1(config-if)#ip policy route-map this
r1(config-if)#

r1#ping 6.6.6.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/14/20 ms
r1#sh route-map
route-map this, permit, sequence 10
Match clauses:
    ip address (access-lists): 1
Set clauses:
    ip next-hop 10.1.1.2
Policy routing matches: 0 packets, 0 bytes

no matches...

turn off cef...

r1(config)#no ip cef
r1(config)#end
r1#ping 6.6.6.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/13/20 ms
r1#sh route-map
route-map this, permit, sequence 10
Match clauses:
    ip address (access-lists): 1
Set clauses:
    ip next-hop 10.1.1.2
Policy routing matches: 0 packets, 0 bytes

still no matches... so i turned cef back on...

if i debug the policy i get no hits as well...

r1#debug ip policy
Policy routing debugging is on
r1#ping 6.6.6.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/14/24 ms

nothing...

then there's this... ip local policy route-map (route-map name) see link above...

r1(config)#ip local policy route-map this
r1(config)#end
r1#
*Oct 28 12:34:29: %SYS-5-CONFIG_I: Configured from console by console
r1#ping 6.6.6.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/13/20 ms
r1#
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6, len 100, policy match
*Oct 28 12:34:33: IP: route map this, item 10, permit
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6 (FastEthernet0/0), len 100, policy routed
*Oct 28 12:34:33: IP: local to FastEthernet0/0 10.1.1.2
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6, len 100, policy match
*Oct 28 12:34:33: IP: route map this, item 10, permit
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6 (FastEthernet0/0), len 100, policy routed
*Oct 28 12:34:33: IP: local to FastEthernet0/0 10.1.1.2
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6, len 100, policy match
*Oct 28 12:34:33: IP: route map this, item 10, permit
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6 (FastEthernet0/0), len 100, policy routed
*Oct 28 12:34:33: IP: local to FastEthernet0/0 10.1.1.2
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6, len 100, policy match
*Oct 28 12:34:33: IP: route map this, item 10, permit
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6 (FastEthernet0/0), len 100, policy routed
*Oct 28 12:34:33: IP: local to FastEthernet0/0 10.1.1.2
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6, len 100, policy match
*Oct 28 12:34:33: IP: route map this, item 10, permit
*Oct 28 12:34:33: IP: s=10.1.2.1 (local), d=6.6.6.6 (FastEthernet0/0)
r1#, len 100, policy routed
*Oct 28 12:34:33: IP: local to FastEthernet0/0 10.1.1.2

now i don't feel like i'm losing my goddamn mind...

r1#sh route-map
route-map this, permit, sequence 10
Match clauses:
    ip address (access-lists): 1
Set clauses:
    ip next-hop 10.1.1.2
Nexthop tracking current: 0.0.0.0
10.1.1.2, fib_nh:0,oce:0,status:0

Policy routing matches: 5 packets, 500 bytes

that's a big difference...

r1#trace 6.6.6.6
Type escape sequence to abort.
Tracing the route to 6.6.6.6
VRF info: (vrf in name/id, vrf out name/id)
1 10.1.1.2 8 msec 4 msec 8 msec
2 192.168.1.2 8 msec 8 msec 8 msec
3 172.16.1.1 12 msec 40 msec *

no big deal... i still love gns3...

Tuesday, August 28, 2012

lab 8-1...

but first a word about gns3...

almost 400 pages of labs in this ccnp route lab manual from cisco, and every one so far done with gns3... how i wish this had been around when i first started a long time ago... how lucky those new to this are... if they could only incorporate switch fully, this would truly be everything... i haven't had my home lab on in over a month...

and speaking of switch... the newly minted ccna should start there... in a corporate network the chances of showing your route prowess will be minimal at best... switch will be your bread and butter for the day to day... i'm very pleased i chose switch first, i use it all the time...

my thought is cisco should give equal time to switch in ccna, if not more... perhaps even a switch specialist cert for ccna...

he arrives with ipv6...

r1

int lo0
ip add 10.1.1.1 255.255.255.0
ipv6 add fec0::1:1/112

r2

int lo0
ip add 10.1.2.1 255.255.255.0
ipv6 add fec0::2:1/112

r3
int lo0
ip add 10.1.3.1 255.255.255.0
ipv6 add fec0::3:1/112

r1#sh run int lo0
Building configuration...

Current configuration : 90 bytes
!
interface Loopback0
ip address 10.1.1.1 255.255.255.0
ipv6 address FEC0::1:1/112

r1

int s1/1
ipv6 add fec0::12:1/112
clock rat 64000
band 64
no shut

int s1/3
ipv6 add fec0::13:1/112
band 64
no shut

r2

int s1/1
ipv6 add fec0::12:2/112
band 64
no shut

r3
int s1/3
ipv6 add fec0::13:3/112
clock rat 64000
band 64
no shut

r1#ping fec0::12:2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FEC0::12:2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/12 ms
r1#ping fec0::13:3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FEC0::13:3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/8 ms

r2#ping fec0::12:1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FEC0::12:1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms

r3#ping fec0::13:1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FEC0::13:1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms

r1#sh ipv6 int s1/1
Serial1/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::C800:BFF:FE13:8
No Virtual link-local address(es):
Global unicast address(es):
    FEC0::12:1, subnet is FEC0::12:0/112

we can modify our topology by changing this to be more accomodating to our simple minds...

r1

int s1/1
ipv6 add fe80::1 link-local

r2

int s1/1
ipv6 add fe80::2 link-local

r2#ping fe80::1
Output Interface: serial1/1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FE80::1, timeout is 2 seconds:
Packet sent with a source address of FE80::2%Serial1/1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms

r2#sh ipv6 int s1/1
Serial1/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::2

very pretty, but unnecessary...

from stretch over at packet life...
http://packetlife.net/blog/2008/aug/4/eui-64-ipv6/

One of IPv6's key benefits over IPv4 is its capability for automatic interface addressing. By implementing the IEEE's 64-bit Extended Unique Identifier (EUI-64) format, a host can automatically assign itself a unique 64-bit IPv6 interface identifier without the need for manual configuration or DHCP. This is accomplished on Ethernet interfaces by referencing the already unique 48-bit MAC address, and reformatting that value to match the EUI-64 specification.
RFC 2373 dictates the conversion process, which can be described as having two steps. The first step is to convert the 48-bit MAC address to a 64-bit value. To do this, we break the MAC address into its two 24-bit halves: the Organizationally Unique Identifier (OUI) and the NIC specific part. The 16-bit hex value 0xFFFE is then inserted between these two halves to form a 64-bit address.

r2

int f0/0
ipv6 add fec0:23::/64 eui-64
no shut

r3

int f0/0
ipv6 add fec0:23::/64 eui-64
no shut

r2#sh ipv6 int f0/0
FastEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::C801:BFF:FE13:8
No Virtual link-local address(es):
Global unicast address(es):
    FEC0:23::C801:BFF:FE13:8, subnet is FEC0:23::/64 [EUI]
Joined group address(es):
    FF02::1
    FF02::1:FF13:8
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND NS retransmit interval is 1000 milliseconds

r2#sh ipv6 int brie

FastEthernet0/0 [up/up]

FE80::C801:BFF:FE13:8

FEC0:23::C801:BFF:FE13:8

r3#ping FEC0:23::C801:BFF:FE13:8

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to FEC0:23::C801:BFF:FE13:8, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/16 ms

r2#ping FEC0:23::C802:BFF:FE13:8

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to FEC0:23::C802:BFF:FE13:8, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms

very exciting...

in search of the cert

ccie or die

Pages

network cisco ccna gns3 certification arteq

Search insearchofthecert