One of the things that I like to do is to create networks in the labs and really experiment with them.  In this lab, I work with multiple routing protocols and throw in a vpn for fun.  I’ve added the code of my routers so you can give them a try as well.

 

topology

 

Routes Produced


 Corp-Edge-Router#show ip route
 Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
 D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
 N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
 E1 - OSPF external type 1, E2 - OSPF external type 2
 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
 ia - IS-IS inter area, * - candidate default, U - per-user static route
 o - ODR, P - periodic downloaded static route
Gateway of last resort is 10.100.10.1 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 8 subnets, 3 masks
 C 172.16.200.0/24 is directly connected, FastEthernet0/1
 C 172.16.192.0/24 is directly connected, FastEthernet0/0
 S 172.16.48.0/20 is directly connected, Tunnel0
 D EX 172.16.32.0/20 [170/51200] via 172.16.192.2, 00:03:48, FastEthernet0/0
 D EX 172.16.16.0/20 [170/51200] via 172.16.192.2, 00:03:48, FastEthernet0/0
 D 172.16.0.0/20 [90/30720] via 172.16.200.2, 00:00:24, FastEthernet0/1
 D 172.16.0.0/16 [90/27024640] via 192.168.200.2, 00:03:04, Tunnel0
 D EX 172.16.64.0/20 [170/51200] via 172.16.192.2, 00:03:28, FastEthernet0/0
 192.168.200.0/30 is subnetted, 1 subnets
 C 192.168.200.0 is directly connected, Tunnel0
 10.0.0.0/27 is subnetted, 1 subnets
 C 10.100.10.0 is directly connected, FastEthernet1/0
 192.168.100.0/24 is variably subnetted, 6 subnets, 2 masks
 D EX 192.168.100.8/30
 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0
 D EX 192.168.100.10/32
 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0
 D EX 192.168.100.4/30
 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0
 D EX 192.168.100.6/32
 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0
 D EX 192.168.100.0/30
 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0
 D EX 192.168.100.2/32
 [170/51200] via 172.16.192.2, 00:03:53, FastEthernet0/0
 S* 0.0.0.0/0 [1/0] via 10.100.10.1
 Corp-Edge-Router#
ISP2-Router#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

50.0.0.0/24 is subnetted, 1 subnets
B 50.10.10.0 [20/0] via 10.150.15.1, 00:03:21
160.10.0.0/24 is subnetted, 1 subnets
C 160.10.10.0 is directly connected, Loopback1
10.0.0.0/27 is subnetted, 3 subnets
B 10.100.10.0 [20/0] via 10.150.15.1, 00:03:21
C 10.150.15.0 is directly connected, FastEthernet0/0
C 10.200.20.0 is directly connected, FastEthernet1/0
150.10.0.0/24 is subnetted, 1 subnets
B 150.10.10.0 [20/0] via 10.150.15.1, 00:03:21
60.0.0.0/24 is subnetted, 1 subnets
C 60.10.10.0 is directly connected, Loopback0
ISP2-Router#

ABR-Router1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override

Gateway of last resort is 172.16.192.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 172.16.192.1
172.16.0.0/16 is variably subnetted, 7 subnets, 3 masks
D 172.16.0.0/20 [90/33280] via 172.16.192.1, 00:00:18, FastEthernet0/0
O 172.16.16.0/20 [110/74] via 192.168.100.2, 00:00:18, Serial1/0
O 172.16.32.0/20 [110/74] via 192.168.100.6, 00:00:18, Serial1/1
D 172.16.48.0/20
[90/27024640] via 172.16.192.1, 00:00:13, FastEthernet0/0
C 172.16.192.0/24 is directly connected, FastEthernet0/0
L 172.16.192.2/32 is directly connected, FastEthernet0/0
D 172.16.200.0/24
[90/30720] via 172.16.192.1, 00:00:20, FastEthernet0/0
192.168.100.0/24 is variably subnetted, 9 subnets, 2 masks
C 192.168.100.0/30 is directly connected, Serial1/0
L 192.168.100.1/32 is directly connected, Serial1/0
C 192.168.100.2/32 is directly connected, Serial1/0
C 192.168.100.4/30 is directly connected, Serial1/1
L 192.168.100.5/32 is directly connected, Serial1/1
C 192.168.100.6/32 is directly connected, Serial1/1
C 192.168.100.8/30 is directly connected, Serial1/2
L 192.168.100.9/32 is directly connected, Serial1/2
C 192.168.100.10/32 is directly connected, Serial1/2
192.168.200.0/30 is subnetted, 1 subnets
D 192.168.200.0
[90/27024640] via 172.16.192.1, 00:00:14, FastEthernet0/0
ABR-Router1#


ABR-Router1

hostname ABR-Router1 ! boot-start-marker boot-end-marker ! no aaa new-model ! ip source-route no ip icmp rate-limit unreachable ip cef ! no ip domain lookup no ipv6 cef ! multilink bundle-name authenticated ! crypto pki token default removal timeout 0 ! redundancy ! ip tcp synwait-time 5 ! interface FastEthernet0/0 description Link to Corp-Edge ip address 172.16.192.2 255.255.255.0 duplex full speed 100 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial1/0 description Link to SiteA ip address 192.168.100.1 255.255.255.252 encapsulation ppp serial restart-delay 0 ! interface Serial1/1 description Link to SiteB ip address 192.168.100.5 255.255.255.252 encapsulation ppp serial restart-delay 0 ! interface Serial1/2 description Link to RIP Router ip address 192.168.100.9 255.255.255.252 encapsulation ppp serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! interface Serial1/4 no ip address shutdown serial restart-delay 0 ! interface Serial1/5 no ip address shutdown serial restart-delay 0 ! interface Serial1/6 no ip address shutdown serial restart-delay 0 ! interface Serial1/7 no ip address shutdown serial restart-delay 0 ! interface FastEthernet2/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet3/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet3/1 no ip address shutdown duplex auto speed auto ! router eigrp 65 network 172.16.192.0 0.0.15.255 redistribute ospf 100 metric 56000 12 255 255 1500 redistribute rip metric 56000 12 255 255 1500 ! router ospf 100 redistribute eigrp 65 redistribute rip network 172.16.16.0 0.0.15.255 area 1 network 172.16.32.0 0.0.15.255 area 2 network 172.16.192.0 0.0.15.255 area 0 network 192.168.100.0 0.0.0.3 area 1 network 192.168.100.4 0.0.0.3 area 2 ! router rip version 2 redistribute eigrp 65 redistribute ospf 100 network 172.16.0.0 network 192.168.100.0 no auto-summary ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip route 0.0.0.0 0.0.0.0 172.16.192.1 ! logging esm config ! control-plane ! mgcp profile default ! gatekeeper shutdown ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous stopbits 1 line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous stopbits 1 line vty 0 4 login transport input all ! end

Corp Edge Router

hostname Corp-Edge-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! crypto isakmp policy 1 authentication pre-share lifetime 84600 crypto isakmp key cisco12345 address 10.200.20.2 ! crypto ipsec transform-set myset ah-sha-hmac esp-des esp-sha-hmac mode transport ! crypto map mymap local-address FastEthernet1/0 crypto map mymap 1 ipsec-isakmp set peer 10.200.20.2 set transform-set myset match address 101 ! ip tcp synwait-time 5 ! interface Tunnel0 description VPN to SiteC bandwidth 180 ip address 192.168.200.1 255.255.255.252 tunnel source 10.100.10.2 tunnel destination 10.200.20.2 crypto map mymap ! interface FastEthernet0/0 description Link to ABR-Router ip address 172.16.192.1 255.255.255.0 ip nat inside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet0/1 description Link to CorpNet ip address 172.16.200.1 255.255.255.0 ip nat inside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet1/0 description Link to ISP ip address 10.100.10.2 255.255.255.224 ip nat outside ip virtual-reassembly speed 100 full-duplex crypto map mymap ! interface FastEthernet2/0 no ip address shutdown duplex auto speed auto ! router eigrp 65 network 172.16.0.0 network 192.168.200.0 no auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 10.100.10.1 ip route 172.16.48.0 255.255.240.0 Tunnel0 ! no ip http server no ip http secure-server ip nat pool ovrld 10.100.10.5 10.100.10.9 prefix-length 27 ip nat inside source list 7 pool ovrld overload ! access-list 7 permit 172.16.0.0 0.0.255.255 access-list 101 permit gre host 10.100.10.2 host 10.200.20.2 ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end

CorpNet Router

hostname CorpNet-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.0.1 255.255.240.0 speed 100 full-duplex ! interface FastEthernet0/1 description Link to CorpEdge ip address 172.16.200.2 255.255.255.0 speed 100 full-duplex ! interface FastEthernet1/0 ! interface FastEthernet1/1 ! interface FastEthernet1/2 ! interface FastEthernet1/3 ! interface FastEthernet1/4 ! interface FastEthernet1/5 ! interface FastEthernet1/6 ! interface FastEthernet1/7 ! interface FastEthernet1/8 ! interface FastEthernet1/9 ! interface FastEthernet1/10 ! interface FastEthernet1/11 ! interface FastEthernet1/12 ! interface FastEthernet1/13 ! interface FastEthernet1/14 ! interface FastEthernet1/15 ! interface Vlan1 no ip address ! router eigrp 65 network 172.16.0.0 auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 172.16.200.1 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end

ISP Router

hostname ISP-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface Loopback0 description DemoNet1-ISP1 ip address 50.10.10.1 255.255.255.0 ! interface Loopback1 description DemoNet2-ISP1 ip address 150.10.10.1 255.255.255.0 ! interface FastEthernet0/0 description Link to ISP2 ip address 10.150.15.1 255.255.255.224 speed 100 full-duplex ! interface Serial0/0 no ip address shutdown clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/1 no ip address shutdown clock rate 2000000 ! interface FastEthernet1/0 description Link to Customer ip address 10.100.10.1 255.255.255.224 ip access-group BLK-PRV-IPS in speed 100 full-duplex ! router bgp 101 no synchronization bgp log-neighbor-changes network 10.100.10.0 mask 255.255.255.224 network 50.10.10.0 mask 255.255.255.0 network 150.10.10.0 mask 255.255.255.0 neighbor 10.150.15.2 remote-as 102 no auto-summary ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip access-list standard BLK-PRV-IPS remark Block Private IP's from reaching Internetn deny 172.16.0.0 0.15.255.255 deny 192.168.0.0 0.0.255.255 permit any ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end

ISP Router2

hostname ISP2-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface Loopback0 description DemoNet1-ISP2 ip address 60.10.10.1 255.255.255.0 ! interface Loopback1 description DemoNet2-ISP2 ip address 160.10.10.1 255.255.255.0 ! interface FastEthernet0/0 description Link to ISP1 ip address 10.150.15.2 255.255.255.224 speed 100 full-duplex ! interface Serial0/0 no ip address shutdown clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/1 no ip address shutdown clock rate 2000000 ! interface FastEthernet1/0 description Link to CustomerSiteC ip address 10.200.20.1 255.255.255.224 ip access-group BLK-PRV-IPS in speed 100 full-duplex ! router bgp 102 no synchronization bgp log-neighbor-changes network 10.200.20.0 mask 255.255.255.224 network 60.10.10.0 mask 255.255.255.0 network 160.10.10.0 mask 255.255.255.0 neighbor 10.150.15.1 remote-as 101 no auto-summary ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip access-list standard BLK-PRV-IPS remark Block Private IP's from reaching Internetn deny 172.16.0.0 0.15.255.255 deny 192.168.0.0 0.0.255.255 permit any ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end

RIP Router

hostname RIP-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.64.1 255.255.240.0 duplex auto speed auto ! interface Serial0/0 description Link to ABR-Router ip address 192.168.100.10 255.255.255.252 encapsulation ppp clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/0 ! interface FastEthernet2/1 ! interface FastEthernet2/2 ! interface FastEthernet2/3 ! interface FastEthernet2/4 ! interface FastEthernet2/5 ! interface FastEthernet2/6 ! interface FastEthernet2/7 ! interface FastEthernet2/8 ! interface FastEthernet2/9 ! interface FastEthernet2/10 ! interface FastEthernet2/11 ! interface FastEthernet2/12 ! interface FastEthernet2/13 ! interface FastEthernet2/14 ! interface FastEthernet2/15 ! interface Vlan1 no ip address shutdown ! router rip version 2 network 172.16.0.0 network 192.168.100.0 no auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.100.9 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end

SiteA Router

hostname SiteA-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.16.1 255.255.240.0 duplex auto speed auto ! interface Serial0/0 description Uplink to ABR-Router ip address 192.168.100.2 255.255.255.252 encapsulation ppp clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/0 ! interface FastEthernet2/1 ! interface FastEthernet2/2 ! interface FastEthernet2/3 ! interface FastEthernet2/4 ! interface FastEthernet2/5 ! interface FastEthernet2/6 ! interface FastEthernet2/7 ! interface FastEthernet2/8 ! interface FastEthernet2/9 ! interface FastEthernet2/10 ! interface FastEthernet2/11 ! interface FastEthernet2/12 ! interface FastEthernet2/13 ! interface FastEthernet2/14 ! interface FastEthernet2/15 ! interface Vlan1 no ip address ! router ospf 100 log-adjacency-changes network 172.16.16.0 0.0.15.255 area 1 network 192.168.100.0 0.0.0.3 area 1 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.100.1 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end

SiteB Router

hostname SiteB-Router ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! ip tcp synwait-time 5 ! interface FastEthernet0/0 ip address 172.16.32.1 255.255.240.0 duplex auto speed auto ! interface Serial0/0 description Uplink to ABR-Router ip address 192.168.100.6 255.255.255.252 encapsulation ppp clock rate 2000000 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet2/0 ! interface FastEthernet2/1 ! interface FastEthernet2/2 ! interface FastEthernet2/3 ! interface FastEthernet2/4 ! interface FastEthernet2/5 ! interface FastEthernet2/6 ! interface FastEthernet2/7 ! interface FastEthernet2/8 ! interface FastEthernet2/9 ! interface FastEthernet2/10 ! interface FastEthernet2/11 ! interface FastEthernet2/12 ! interface FastEthernet2/13 ! interface FastEthernet2/14 ! interface FastEthernet2/15 ! interface Vlan1 no ip address ! router ospf 100 log-adjacency-changes network 172.16.32.0 0.0.15.255 area 2 network 192.168.100.4 0.0.0.3 area 2 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.100.5 ! no ip http server no ip http secure-server ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! end

SiteC VPN Router

hostname SiteC-VPN ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! crypto isakmp policy 1 authentication pre-share lifetime 84600 crypto isakmp key cisco12345 address 10.100.10.2 ! crypto ipsec transform-set myset ah-sha-hmac esp-des esp-sha-hmac mode transport ! crypto map mymap local-address FastEthernet0/0 crypto map mymap 1 ipsec-isakmp set peer 10.100.10.2 set transform-set myset match address 101 ! ip tcp synwait-time 5 ! interface Tunnel1 bandwidth 180 ip address 192.168.200.2 255.255.255.252 tunnel source 10.200.20.2 tunnel destination 10.100.10.2 crypto map mymap ! interface FastEthernet0/0 description Link to ISP2 ip address 10.200.20.2 255.255.255.224 ip nat outside ip virtual-reassembly speed 100 full-duplex crypto map mymap ! interface FastEthernet0/1 description SiteC Lan ip address 172.16.48.1 255.255.240.0 ip nat inside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet1/0 ! interface FastEthernet1/1 ! interface FastEthernet1/2 ! interface FastEthernet1/3 ! interface FastEthernet1/4 ! interface FastEthernet1/5 ! interface FastEthernet1/6 ! interface FastEthernet1/7 ! interface FastEthernet1/8 ! interface FastEthernet1/9 ! interface FastEthernet1/10 ! interface FastEthernet1/11 ! interface FastEthernet1/12 ! interface FastEthernet1/13 ! interface FastEthernet1/14 ! interface FastEthernet1/15 ! interface Vlan1 no ip address ! router eigrp 65 network 172.16.0.0 network 192.168.200.0 auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 10.200.20.1 ! no ip http server no ip http secure-server ip nat pool ovrld 10.200.20.5 10.200.20.9 prefix-length 27 ip nat inside source list 7 pool ovrld overload ! access-list 7 permit 172.16.48.0 0.0.15.255 access-list 101 permit gre host 10.200.20.2 host 10.100.10.2 ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! ! end