《CCNP实验手册.doc》由会员分享，可在线阅读，更多相关《CCNP实验手册.doc（333页珍藏版）》请在三一办公上搜索。
1、CCNP Lab ManualIndexBuilding Scalable Cisco Internetworks3Lab 1.Configuring Basic EIGRP4Lab 2.Configuring Default-network for EIGRP8Lab 3.Manually Summarizing EIGRP Routes15Lab 4.Configuring EIGRP Unequal-Cost Paths22Lab 5.Configuring EIGRP Authentication26Lab 6.Understand EIGRP Query30Lab 7.Configu
2、ring Basic Multi Area OSPF and Area Summary38Lab 8.Configuring OSPF in NBMA43Lab 9.Configuring OSPF Authentication51Lab 10.Configuring OSPF External Summary58Lab 11.Configuring OSPF Default Route With Metric62Lab 12.Configuring OSPF Stub Area66Lab 13.Configuring OSPF Totally Stub Area71Lab 14.Config
3、uring OSPF NSSA Area and NSSA Totally Stub75Lab 15.Configuring OSPF Virtual-Link83Lab 16.Configuring OSPF Virtual-Link（Cont.）87Lab 17.Understand OSPF Routing Between Inter Area91Lab 18.Configuring Basic IS-IS94Lab 19.Configuring IS-IS Multi Area and Summary Route100Lab 20.Migrate IS-IS Area107Lab 21
4、.Redistributing into RIP and OSPF112Lab 22.Redistributing into EIGRP and IS-IS116Lab 23.Redistribution Using Administrative Distance121Lab 24.Filtering Routing Updates with a Distribute List124Lab 25.Filtering Routing Updates with a Router Maps128Lab 26.Policy-based route132Lab 27.Configuring Basic
5、BGP137Lab 28.Configuring BGP Using Loopback Addresses141Lab 29.Understand BGP Auto-Summary145Lab 30.Configuring BGP Summarization150Lab 31.Understand BGP Sychronization Rule155Lab 32.BGP Neighbor Authentication163Lab 33.Configuring BGP Local Preference168Lab 34.Using Route Maps to Configuring BGP Lo
6、cal Preference174Lab 35.Configuring BGP Multi-Exit Discriminator181Lab 36.Configuring BGP Weight187Lab 37.Affects the BGP Routing By Path Prepend193Lab 38.Using Route Tag to Store BGP AS-Path197Lab 39.Using Distribute-list to Filtering BGP Routing203Lab 40.Using Route-Map to Filtering BGP Routing206
7、Lab 41.Using Prefix-List to Filtering BGP Routing209Building Cisco Multilayer Switched Networks214Lab 42.Routing Between VLANs and VTP Protocol215Lab 43.Configuring L2 & L3 EtherChannel with PAgP225Lab 44.Configuring L2 & L3 EtherChannel with LACP233Lab 45.Configuring Layer 3 Redundancy with HSRP238
8、Lab 46.Configuring Layer 3 Redundancy with VRRP246Implementing Secure Converged Wide Area Networks253Lab 47.Configuring the CPE as the PPPoE Client254Lab 48.Configuring GRE Tunnels266Lab 49.Configuring IPsec Site-to-Site With Preshare-Key270Lab 50.Configuring IPsec Site-to-Site VPN Using SDM283Lab 5
9、1.Configuring GRE Tunnels over IPsec With Preshare-key292Lab 52.Configuring GRE Tunnels over IPsec using SDM299Lab 53.Basic MPLS Frame-Mode Configuration311Lab 54.Basic MPLS VPN Configuration318Lab 55.Configuring Reflexive ACL333Lab 55. Using Route Tag Filtering Routing Updates.340Optimizing Converg
10、ed Cisco Networks345CCNP Lab ManualBuilding Scalable Cisco InternetworksCCNP Lab ManualLab 1. Configuring Basic EIGRP实验目的：1、掌握EIGRP的基本配置。2、掌握EIGRP的通配符掩配置方法。3、掌握EIGRP的自动汇总特性，以及如何关闭自动汇总。4、掌握EIGRP的手工汇总。实验拓扑图：实验步骤及要求：1、配置各台路由器的IP地址，并且使用ping命令确认各路由器的直连口的互通性。2、在三台路由配置EIGRP自治系统编号为50。3、登录到R2路由器，作如下配置（其它路由器参
11、照其进行配置）： R2#configure terminalR2(config-if)#router eigrp 50R2(config-router)#network 172.16.0.0默认情况下，EIGRP在配置路由器时，可以直接network主类网络号。此处配置，可以同时将R2路由器两个串口直接加入到EIGRP的路由进程中。R2(config-router)#network 131.131.0.0R2(config-router)#exit4、在任意一台路由器上观察EIGRP的邻居关系：R2#show ip eigrp 50 neighbors 查看eigrp 50自治系统的邻居IP-
12、EIGRP neighbors for process 50H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num1 172.16.1.6 Se1/1 13 00:00:37 436 2616 0 20 172.16.1.1 Se1/0 13 00:02:34 736 4416 0 4其中：列H指出邻居学习的顺序,Address指出邻居地址，Interface指出邻居所在本地接口。5、在任意一台路由器上查看路由器，确认路由：R2#show ip route 172.16.0.0/16 is variably subne
13、tted, 3 subnets, 2 masksC 172.16.1.4/30 is directly connected, Serial1/1D 172.16.0.0/16 is a summary, 00:06:33, Null0EIGRP会自动的为可汇总的子网生成一条指向null0口的路由。其目的：1.汇总路由2.避免路由黑洞C 172.16.1.0/30 is directly connected, Serial1/0D 192.168.4.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1D 10.0.0.0/8 90/229785
14、6 via 172.16.1.1, 00:06:34, Serial1/0C 131.131.0.0/16 is directly connected, Loopback0D 192.168.0.0/24 90/229785690为EIGRP的内部管理距离2297856为EIGRP计算的度量(FD) via 172.16.1.6, 00:04:39, Serial1/1D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:04:3
15、9, Serial1/1D 192.168.3.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1R2#6、在R1路由器上使用更简洁的查看关于EIGRP的路由命令：R2#show ip route eigrp 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masksD 172.16.0.0/16 is a summary, 00:10:09, Null0D 192.168.4.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1D 10.0
16、.0.0/8 90/2297856 via 172.16.1.1, 00:10:10, Serial1/0R1路由器的自动汇总的路由。D 192.168.0.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1D 192.168.3.0/24 90/2297856 via 172.16.1.6,
17、00:08:14, Serial1/1R2#7、我们注意到在R2路由器上有一条指向s1/0口的10.0.0.0/8的汇总路由，这是EIGRP路由协议自动汇总的特性体现。可以使用no auto-summary命令关闭。如下：R1(config)R1(config)#router eigrp 50R1(config-router)#no auto-summary关于EIGRP的自动汇总特性。 R1(config-router)#exitR1(config)#随后在R2上观察路由表的变化，如下显示：R2#show ip route eigrp 172.16.0.0/16 is variably su
18、bnetted, 3 subnets, 2 masksD 172.16.0.0/16 is a summary, 00:07:26, Null0D 192.168.4.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1 10.0.0.0/24 is subnetted, 4 subnetsD 10.1.3.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.2.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.1.0 90/2
19、297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.4.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0当关闭了自动汇总后，R2可以看到明细路由。D 192.168.0.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:05:09,
20、Serial1/1D 192.168.3.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1R2#7、EIGRP也可以进行手工地址总结。手工地址总结，可以有效的减少路由表的大小。比如在R2上的路由中关于R3的192.168.*.*的网络显示为四条具体路由，可以在R3上进行如下配置，减少路由通告条目。R3(config)#interface serail 1/0R3(config-if)#ip summary eigrp 50 192.168.0.0 255.255.252.0R3(config-if)#exit8、观察R2路由器的路由表:R2
21、#show ip route eigrp D 10.1.1.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.4.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 192.168.0.0/22 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1显示为一条汇总路由。有效的减少路由表的大小。 9、在R2上使用通配符掩码进行配置EIGRP:R2(config)#no router eigrp 50R2(config)#router eigrp 50R
22、2(config-router)#network 172.16.1.0 0.0.0.3使用通配符掩码，可以很好的控制，哪些接口加入到EIGRP的进程中工作。否则可能需要使用passive-interface命令进行了设置。此处仅将s1/0接口加入到eigrp中，所以R2的s1/1接口，和R3的路由不会被转发给R1.R2(config-router)#network 131.131.0.0R2(config-router)#exit10、在R2确认邻居，此处仅发现与R1建立了邻居关系。R2#show ip eigrp neighbors IP-EIGRP neighbors for proces
23、s 50H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num0 172.16.1.1 Se1/0 12 00:04:57 1510 5000 0 511、查看R1的路由表，进行确认所学习到的路由。R1#show ip route eigrp 172.16.0.0/16 is variably subnetted, 2 subnets, 2 masksD 172.16.0.0/16 is a summary, 00:02:55, Null0 10.0.0.0/8 is variably subnetted, 5 sub
24、nets, 2 masksD 10.0.0.0/8 is a summary, 00:02:55, Null0D 131.131.0.0/16 90/2297856 via 172.16.1.2, 00:00:06, Serial1/1由于采用通配符掩码，进行选择性的配置，所以R1仅学习到131.131.0.0/16的路由条目。无法学习到R3的直接路由。R1#12、实验完成。工大瑞普Cisco课程开发小组CCNP Lab ManualLab 2. Configuring Default-network for EIGRP实验目的：1、掌握通过ip default-network命令配置EIGR
25、P默认网络。实验拓扑图：实验步骤及要求：1、配置各台路由器的IP地址，并且使用Ping命令确认各路由器的直连口的互通性。2、配置R3路由器用于模拟外部网络，也可以把其假想为Internet网络，并且在R3上配置一条默认用于，以便路由来自于EIGRP内部网络的数据包。R3(config)#R3(config)#ip route 0.0.0.0 0.0.0.0 192.168.10.1配置此条路由到达EIGRP内部网络。R3(config)#3、配置R1、R2和R5路由器的EIGRP路由协议，配置如下所示：R1(config)#router eigrp 50R1(config-router)#ne
26、twork 172.16.0.0R1(config-router)#exitR5(config)#router eigrp 50R5(config-router)#network 172.16.0.0R5(config-router)#exitR2(config)#router eigrp 50R2(config-router)#network 172.16.0.0R2(config-router)#exit4、在R2上查看EIGRP的邻居，确认EIGRP正常运行：R2#show ip eigrp neighbors IP-EIGRP neighbors for process 50H Add
27、ress Interface Hold Uptime SRTT RTO Q Seq Type (sec) (ms) Cnt Num1 172.16.1.6 Et1/2 11 00:00:54 1 3000 0 2 0 172.16.1.1 Et1/0 12 00:00:54 1 3000 0 2 5、在R2上配置静态默认路由，用于到达外部网络，配置如下：R2(config)#ip route 0.0.0.0 0.0.0.0 192.168.10.2R2通过此路由可以访问到外部网络。R2(config)#R2#ping 192.168.1.1测试静态默认路由的有效性。Type escape se
28、quence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.!Success rate is 80 percent (4/5), round-trip min/avg/max = 4/43/92 msR2#6、路由器R2作为企业的出口路由器，由于其配置了静态路由，因此其可以直接访问外部，但是内部的R1和R5路由器由于缺少路由，因此无法访问外网。下面显示了R1路由器的路由表和其向外部发起ping的访问结果：R1#show ip route Gateway of last resort i
29、s not set 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:06:40, FastEthernet0/1C 172.16.1.0 is directly connected, FastEthernet0/1路由表中显示出R1没有外部网络路由。R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
30、.由于R1缺少到达外部网络路由，因此R1无法访问外部网络。Success rate is 0 percent (0/5)R1#R5#show ip route Gateway of last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/1D 172.16.1.0 90/307200 via 172.16.1.5, 00:12:15, Ethernet1/1R5#R5#ping 192.168.1.1Type escape sequence
31、 to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.内部路由器R5也遇到了相同的问题。Success rate is 0 percent (0/5)R5#7、为了解决问题，只需要在R1和R5路由器上配置一条指向R2路由器的静态默认路由即可，如下所示：R1(config)#ip route 0.0.0.0 0.0.0.0 172.16.1.2 R1(config)#exitR1#show ip route Gateway of last resort is 172.16.1.2 to net
32、work 0.0.0.0 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:09:19, FastEthernet0/1C 172.16.1.0 is directly connected, FastEthernet0/1S* 0.0.0.0/0 1/0 via 172.16.1.2为R1添加一条到达外网静态默认路由。R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to
33、192.168.1.1, timeout is 2 seconds:!由于已经此时配置了默认路由，所以此时R1可以访问到外部网络。Success rate is 100 percent (5/5), round-trip min/avg/max = 48/71/92 msR1#R5(config)#ip route 0.0.0.0 0.0.0.0 172.16.1.5 R5(config)#exitR5#R5#show ip route Gateway of last resort is 172.16.1.5 to network 0.0.0.0 172.16.0.0/30 is subnet
34、ted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/1D 172.16.1.0 90/307200 via 172.16.1.5, 00:13:57, Ethernet1/1S* 0.0.0.0/0 1/0 via 172.16.1.5R5#R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent
35、 (5/5), round-trip min/avg/max = 32/53/64 msR5#8、根据上面配置，其实只需要给内部路由器配置默认路由指向出口路由器R2即可解决外部网络无法访问的问题。但是如果内部网络路由器数量较多时，采用手工配置静态默认路由，则会显得非常繁锁。因此，建议采用默认网络命令，让R2路由器自动的向内部通告默认路由。9、将R1和R5的静态默认路由删除后，查看R1和R5的路由表。如下所示：R1(config)#no ip route 0.0.0.0 0.0.0.0 172.16.1.2 R1(config)#exitR1#R1#show ip route Gateway o
36、f last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:19:02, FastEthernet0/1C 172.16.1.0 is directly connected, FastEthernet0/1R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.Su
37、ccess rate is 0 percent (0/5)R1#R5(config)#no ip route 0.0.0.0 0.0.0.0 172.16.1.5 R5(config)#exitR5#R5#show ip route Gateway of last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/1D 172.16.1.0 90/307200 via 172.16.1.5, 00:19:42, Ethernet1/1R5#R5
38、#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.Success rate is 0 percent (0/5)R5#10、在R2上配置默认网络，配置如下所示：R2(config)#router eigrp 50R2(config-router)#network 192.168.10.0R2(config-router)#exitR2(config)#ip default-network 192.168.10.0R
39、2(config)#exitR2#show ip route Gateway of last resort is 192.168.10.2 to network 0.0.0.0 * 192.168.10.0/24 is variably subnetted, 2 subnets, 2 masksD* 192.168.10.0/24 is a summary, 00:00:53, Null0ip default-network命令标识的默认网络。C 192.168.10.0/30 is directly connected, Ethernet1/1 172.16.0.0/16 is variab
40、ly subnetted, 3 subnets, 2 masksC 172.16.1.4/30 is directly connected, Ethernet1/2D 172.16.0.0/16 is a summary, 00:22:22, Null0C 172.16.1.0/30 is directly connected, Ethernet1/0S* 0.0.0.0/0 1/0 via 192.168.10.2手工配置的静态默认路由。R2#11、查看R1和R5路由器的路由表，并且尝试访问外部网络：R1#show ip route Gateway of last resort is 172
41、.16.1.2 to network 192.168.10.0D* 192.168.10.0/24 90/284160 via 172.16.1.2, 00:02:03, FastEthernet0/1由于R2上配置的默认网络，EIGRP路由器会将其通告给R1路由器。 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:02:04, FastEthernet0/1C 172.16.1.0 is directly connected, FastEthernet0/1R1#R1#ping 19
42、2.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 48/105/188 msR1#R5#show ip route Gateway of last resort is 172.16.1.5 to network 192.168.10.0D* 192.168.10.0/24 90/307200 via 172.16
43、.1.5, 00:04:15, Ethernet1/1 172.16.0.0/30 is subnetted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/1D 172.16.1.0 90/307200 via 172.16.1.5, 00:04:19, Ethernet1/1R5# R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 76/87/96 msR5#12、使用ip default-network命令可以有效减少内部网络配置任务。不过需要注意的是ip default-network其指出默认网络，建议采用主类网络。如果使用无类网络，则可能会出现无法解释的问题。38、实验完成。工大瑞普Cisco课程开发
