25
May 2015
More GNS3 – EIGRP, BGP, RIP, OSPF
One of the things that I like to do is to create networks in the labs and really experiment with them. In this lab, I work with multiple routing protocols and throw in a vpn for fun. I’ve added the code of my routers so you can give them a try as well.
Routes Produced
Corp-Edge-Router#show ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is 10.100.10.1 to network 0.0.0.0 172.16.0.0/16 is variably subnetted, 8 subnets, 3 masks C 172.16.200.0/24 is directly connected, FastEthernet0/1 C 172.16.192.0/24 is directly connected, FastEthernet0/0 S 172.16.48.0/20 is directly connected, Tunnel0 D EX 172.16.32.0/20 [170/51200] via 172.16.192.2, 00:03:48, FastEthernet0/0 D EX 172.16.16.0/20 [170/51200] via 172.16.192.2, 00:03:48, FastEthernet0/0 D 172.16.0.0/20 [90/30720] via 172.16.200.2, 00:00:24, FastEthernet0/1 D 172.16.0.0/16 [90/27024640] via 192.168.200.2, 00:03:04, Tunnel0 D EX 172.16.64.0/20 [170/51200] via 172.16.192.2, 00:03:28, FastEthernet0/0 192.168.200.0/30 is subnetted, 1 subnets C 192.168.200.0 is directly connected, Tunnel0 10.0.0.0/27 is subnetted, 1 subnets C 10.100.10.0 is directly connected, FastEthernet1/0 192.168.100.0/24 is variably subnetted, 6 subnets, 2 masks D EX 192.168.100.8/30 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0 D EX 192.168.100.10/32 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0 D EX 192.168.100.4/30 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0 D EX 192.168.100.6/32 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0 D EX 192.168.100.0/30 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0 D EX 192.168.100.2/32 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0 S* 0.0.0.0/0 [1/0] via 10.100.10.1 Corp-Edge-Router# ISP2-Router#show ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is not set 50.0.0.0/24 is subnetted, 1 subnets B 50.10.10.0 [20/0] via 10.150.15.1, 00:03:21 160.10.0.0/24 is subnetted, 1 subnets C 160.10.10.0 is directly connected, Loopback1 10.0.0.0/27 is subnetted, 3 subnets B 10.100.10.0 [20/0] via 10.150.15.1, 00:03:21 C 10.150.15.0 is directly connected, FastEthernet0/0 C 10.200.20.0 is directly connected, FastEthernet1/0 150.10.0.0/24 is subnetted, 1 subnets B 150.10.10.0 [20/0] via 10.150.15.1, 00:03:21 60.0.0.0/24 is subnetted, 1 subnets C 60.10.10.0 is directly connected, Loopback0 ISP2-Router# ABR-Router1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override Gateway of last resort is 172.16.192.1 to network 0.0.0.0 S* 0.0.0.0/0 [1/0] via 172.16.192.1 172.16.0.0/16 is variably subnetted, 7 subnets, 3 masks D 172.16.0.0/20 [90/33280] via 172.16.192.1, 00:00:18, FastEthernet0/0 O 172.16.16.0/20 [110/74] via 192.168.100.2, 00:00:18, Serial1/0 O 172.16.32.0/20 [110/74] via 192.168.100.6, 00:00:18, Serial1/1 D 172.16.48.0/20 [90/27024640] via 172.16.192.1, 00:00:13, FastEthernet0/0 C 172.16.192.0/24 is directly connected, FastEthernet0/0 L 172.16.192.2/32 is directly connected, FastEthernet0/0 D 172.16.200.0/24 [90/30720] via 172.16.192.1, 00:00:20, FastEthernet0/0 192.168.100.0/24 is variably subnetted, 9 subnets, 2 masks C 192.168.100.0/30 is directly connected, Serial1/0 L 192.168.100.1/32 is directly connected, Serial1/0 C 192.168.100.2/32 is directly connected, Serial1/0 C 192.168.100.4/30 is directly connected, Serial1/1 L 192.168.100.5/32 is directly connected, Serial1/1 C 192.168.100.6/32 is directly connected, Serial1/1 C 192.168.100.8/30 is directly connected, Serial1/2 L 192.168.100.9/32 is directly connected, Serial1/2 C 192.168.100.10/32 is directly connected, Serial1/2 192.168.200.0/30 is subnetted, 1 subnets D 192.168.200.0 [90/27024640] via 172.16.192.1, 00:00:14, FastEthernet0/0 ABR-Router1#
ABR-Router1
hostname ABR-Router1 ! boot-start-marker boot-end-marker ! no aaa new-model ! ip source-route no ip icmp rate-limit unreachable ip cef ! no ip domain lookup no ipv6 cef ! multilink bundle-name authenticated ! crypto pki token default removal timeout 0 ! redundancy ! ip tcp synwait-time 5 ! interface FastEthernet0/0 description Link to Corp-Edge ip address 172.16.192.2 255.255.255.0 duplex full speed 100 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial1/0 description Link to SiteA ip address 192.168.100.1 255.255.255.252 encapsulation ppp serial restart-delay 0 ! interface Serial1/1 description Link to SiteB ip address 192.168.100.5 255.255.255.252 encapsulation ppp serial restart-delay 0 ! interface Serial1/2 description Link to RIP Router ip address 192.168.100.9 255.255.255.252 encapsulation ppp serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! interface Serial1/4 no ip address shutdown serial restart-delay 0 ! interface Serial1/5 no ip address shutdown serial restart-delay 0 ! interface Serial1/6 no ip address shutdown serial restart-delay 0 ! interface Serial1/7 no ip address shutdown serial restart-delay 0 ! interface FastEthernet2/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet3/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet3/1 no ip address shutdown duplex auto speed auto ! router eigrp 65 network 172.16.192.0 0.0.15.255 redistribute ospf 100 metric 56000 12 255 255 1500 redistribute rip metric 56000 12 255 255 1500 ! router ospf 100 redistribute eigrp 65 redistribute rip network 172.16.16.0 0.0.15.255 area 1 network 172.16.32.0 0.0.15.255 area 2 network 172.16.192.0 0.0.15.255 area 0 network 192.168.100.0 0.0.0.3 area 1 network 192.168.100.4 0.0.0.3 area 2 ! router rip version 2 redistribute eigrp 65 redistribute ospf 100 network 172.16.0.0 network 192.168.100.0 no auto-summary ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip route 0.0.0.0 0.0.0.0 172.16.192.1 ! logging esm config ! control-plane ! mgcp profile default ! gatekeeper shutdown ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous stopbits 1 line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous stopbits 1 line vty 0 4 login transport input all ! end
Corp Edge Router
hostname Corp-Edge-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! crypto isakmp policy 1 authentication pre-share lifetime 84600 crypto isakmp key cisco12345 address 10.200.20.2 ! crypto ipsec transform-set myset ah-sha-hmac esp-des esp-sha-hmac mode transport ! crypto map mymap local-address FastEthernet1/0 crypto map mymap 1 ipsec-isakmp set peer 10.200.20.2 set transform-set myset match address 101 ! ip tcp synwait-time 5 ! interface Tunnel0 description VPN to SiteC bandwidth 180 ip address 192.168.200.1 255.255.255.252 tunnel source 10.100.10.2 tunnel destination 10.200.20.2 crypto map mymap ! interface FastEthernet0/0 description Link to ABR-Router ip address 172.16.192.1 255.255.255.0 ip nat inside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet0/1 description Link to CorpNet ip address 172.16.200.1 255.255.255.0 ip nat inside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet1/0 description Link to ISP ip address 10.100.10.2 255.255.255.224 ip nat outside ip virtual-reassembly speed 100 full-duplex crypto map mymap ! interface FastEthernet2/0 no ip address shutdown duplex auto speed auto ! router eigrp 65 network 172.16.0.0 network 192.168.200.0 no auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 10.100.10.1 ip route 172.16.48.0 255.255.240.0 Tunnel0 ! no ip http server no ip http secure-server ip nat pool ovrld 10.100.10.5 10.100.10.9 prefix-length 27 ip nat inside source list 7 pool ovrld overload ! access-list 7 permit 172.16.0.0 0.0.255.255 access-list 101 permit gre host 10.100.10.2 host 10.200.20.2 ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end
CorpNet Router
hostname CorpNet-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.0.1 255.255.240.0 speed 100 full-duplex ! interface FastEthernet0/1 description Link to CorpEdge ip address 172.16.200.2 255.255.255.0 speed 100 full-duplex ! interface FastEthernet1/0 ! interface FastEthernet1/1 ! interface FastEthernet1/2 ! interface FastEthernet1/3 ! interface FastEthernet1/4 ! interface FastEthernet1/5 ! interface FastEthernet1/6 ! interface FastEthernet1/7 ! interface FastEthernet1/8 ! interface FastEthernet1/9 ! interface FastEthernet1/10 ! interface FastEthernet1/11 ! interface FastEthernet1/12 ! interface FastEthernet1/13 ! interface FastEthernet1/14 ! interface FastEthernet1/15 ! interface Vlan1 no ip address ! router eigrp 65 network 172.16.0.0 auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 172.16.200.1 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end
ISP Router
hostname ISP-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface Loopback0 description DemoNet1-ISP1 ip address 50.10.10.1 255.255.255.0 ! interface Loopback1 description DemoNet2-ISP1 ip address 150.10.10.1 255.255.255.0 ! interface FastEthernet0/0 description Link to ISP2 ip address 10.150.15.1 255.255.255.224 speed 100 full-duplex ! interface Serial0/0 no ip address shutdown clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/1 no ip address shutdown clock rate 2000000 ! interface FastEthernet1/0 description Link to Customer ip address 10.100.10.1 255.255.255.224 ip access-group BLK-PRV-IPS in speed 100 full-duplex ! router bgp 101 no synchronization bgp log-neighbor-changes network 10.100.10.0 mask 255.255.255.224 network 50.10.10.0 mask 255.255.255.0 network 150.10.10.0 mask 255.255.255.0 neighbor 10.150.15.2 remote-as 102 no auto-summary ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip access-list standard BLK-PRV-IPS remark Block Private IP's from reaching Internetn deny 172.16.0.0 0.15.255.255 deny 192.168.0.0 0.0.255.255 permit any ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end
ISP Router2
hostname ISP2-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface Loopback0 description DemoNet1-ISP2 ip address 60.10.10.1 255.255.255.0 ! interface Loopback1 description DemoNet2-ISP2 ip address 160.10.10.1 255.255.255.0 ! interface FastEthernet0/0 description Link to ISP1 ip address 10.150.15.2 255.255.255.224 speed 100 full-duplex ! interface Serial0/0 no ip address shutdown clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/1 no ip address shutdown clock rate 2000000 ! interface FastEthernet1/0 description Link to CustomerSiteC ip address 10.200.20.1 255.255.255.224 ip access-group BLK-PRV-IPS in speed 100 full-duplex ! router bgp 102 no synchronization bgp log-neighbor-changes network 10.200.20.0 mask 255.255.255.224 network 60.10.10.0 mask 255.255.255.0 network 160.10.10.0 mask 255.255.255.0 neighbor 10.150.15.1 remote-as 101 no auto-summary ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip access-list standard BLK-PRV-IPS remark Block Private IP's from reaching Internetn deny 172.16.0.0 0.15.255.255 deny 192.168.0.0 0.0.255.255 permit any ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end
RIP Router
hostname RIP-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.64.1 255.255.240.0 duplex auto speed auto ! interface Serial0/0 description Link to ABR-Router ip address 192.168.100.10 255.255.255.252 encapsulation ppp clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/0 ! interface FastEthernet2/1 ! interface FastEthernet2/2 ! interface FastEthernet2/3 ! interface FastEthernet2/4 ! interface FastEthernet2/5 ! interface FastEthernet2/6 ! interface FastEthernet2/7 ! interface FastEthernet2/8 ! interface FastEthernet2/9 ! interface FastEthernet2/10 ! interface FastEthernet2/11 ! interface FastEthernet2/12 ! interface FastEthernet2/13 ! interface FastEthernet2/14 ! interface FastEthernet2/15 ! interface Vlan1 no ip address shutdown ! router rip version 2 network 172.16.0.0 network 192.168.100.0 no auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.100.9 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end
SiteA Router
hostname SiteA-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.16.1 255.255.240.0 duplex auto speed auto ! interface Serial0/0 description Uplink to ABR-Router ip address 192.168.100.2 255.255.255.252 encapsulation ppp clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/0 ! interface FastEthernet2/1 ! interface FastEthernet2/2 ! interface FastEthernet2/3 ! interface FastEthernet2/4 ! interface FastEthernet2/5 ! interface FastEthernet2/6 ! interface FastEthernet2/7 ! interface FastEthernet2/8 ! interface FastEthernet2/9 ! interface FastEthernet2/10 ! interface FastEthernet2/11 ! interface FastEthernet2/12 ! interface FastEthernet2/13 ! interface FastEthernet2/14 ! interface FastEthernet2/15 ! interface Vlan1 no ip address ! router ospf 100 log-adjacency-changes network 172.16.16.0 0.0.15.255 area 1 network 192.168.100.0 0.0.0.3 area 1 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.100.1 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end
SiteB Router
hostname SiteB-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.32.1 255.255.240.0 duplex auto speed auto ! interface Serial0/0 description Uplink to ABR-Router ip address 192.168.100.6 255.255.255.252 encapsulation ppp clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/0 ! interface FastEthernet2/1 ! interface FastEthernet2/2 ! interface FastEthernet2/3 ! interface FastEthernet2/4 ! interface FastEthernet2/5 ! interface FastEthernet2/6 ! interface FastEthernet2/7 ! interface FastEthernet2/8 ! interface FastEthernet2/9 ! interface FastEthernet2/10 ! interface FastEthernet2/11 ! interface FastEthernet2/12 ! interface FastEthernet2/13 ! interface FastEthernet2/14 ! interface FastEthernet2/15 ! interface Vlan1 no ip address ! router ospf 100 log-adjacency-changes network 172.16.32.0 0.0.15.255 area 2 network 192.168.100.4 0.0.0.3 area 2 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.100.5 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end
SiteC VPN Router
hostname SiteC-VPN ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! crypto isakmp policy 1 authentication pre-share lifetime 84600 crypto isakmp key cisco12345 address 10.100.10.2 ! crypto ipsec transform-set myset ah-sha-hmac esp-des esp-sha-hmac mode transport ! crypto map mymap local-address FastEthernet0/0 crypto map mymap 1 ipsec-isakmp set peer 10.100.10.2 set transform-set myset match address 101 ! ip tcp synwait-time 5 ! interface Tunnel1 bandwidth 180 ip address 192.168.200.2 255.255.255.252 tunnel source 10.200.20.2 tunnel destination 10.100.10.2 crypto map mymap ! interface FastEthernet0/0 description Link to ISP2 ip address 10.200.20.2 255.255.255.224 ip nat outside ip virtual-reassembly speed 100 full-duplex crypto map mymap ! interface FastEthernet0/1 description SiteC Lan ip address 172.16.48.1 255.255.240.0 ip nat inside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet1/0 ! interface FastEthernet1/1 ! interface FastEthernet1/2 ! interface FastEthernet1/3 ! interface FastEthernet1/4 ! interface FastEthernet1/5 ! interface FastEthernet1/6 ! interface FastEthernet1/7 ! interface FastEthernet1/8 ! interface FastEthernet1/9 ! interface FastEthernet1/10 ! interface FastEthernet1/11 ! interface FastEthernet1/12 ! interface FastEthernet1/13 ! interface FastEthernet1/14 ! interface FastEthernet1/15 ! interface Vlan1 no ip address ! router eigrp 65 network 172.16.0.0 network 192.168.200.0 auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 10.200.20.1 ! no ip http server no ip http secure-server ip nat pool ovrld 10.200.20.5 10.200.20.9 prefix-length 27 ip nat inside source list 7 pool ovrld overload ! access-list 7 permit 172.16.48.0 0.0.15.255 access-list 101 permit gre host 10.200.20.2 host 10.100.10.2 ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! ! end