+ All Categories
Home > Documents > AJRE_LD_8.b.pdf

AJRE_LD_8.b.pdf

Date post: 02-Jun-2018
Category:
Upload: aseem-khan
View: 223 times
Download: 0 times
Share this document with a friend

of 38

Transcript
  • 8/10/2019 AJRE_LD_8.b.pdf

    1/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    2/38

    Juniper Networks, the Juniper Networks logo, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other

    countries. JUNOS and JUNOSe are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks

    are the property of their respective owners.

    Juniper Networks reserves the right to change, modify, transfer or otherwise revise this publication without notice.

    YEAR 2000 NOTICE

    Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The JUNOS software has no

    known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

    SOFTWARE LICENSE

    The terms and conditions for using this software are described in the software license contained in the acknowledgment to your purchase order or, to the extent

    applicable, to any reseller agreement or end-user purchase agreement executed between you and Juniper Networks. By using this sof tware, you indicate that you

    understand and agree to be bound by those terms and conditions.

    Generally speaking, the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certain uses.

    The software license may state conditions under which the license is automatically terminated. You should consult the license for further details.

    Advanced Juniper Networks Routing in the Enterprise Lab Diagrams, Revision 8.b

    Copyright 2008, Juniper Networks, Inc.

    All rights reserved. Printed in USA.

    Revision History:

    Revision 8.aDecember 2006

    Revision 8.bJanuary 2008

    The information in this document is current as of the date listed above.

    The information in this document has been carefully verified and is believed to be accurate for software Release 8.4R2.3. Juniper Networks assumes no

    responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental

    or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.

  • 8/10/2019 AJRE_LD_8.b.pdf

    3/38

    LabDiagrams

    J4300

    To

    pology

  • 8/10/2019 AJRE_LD_8.b.pdf

    4/38

    TheI

    ntern

    etinthe

    Lab

    ISPA

    AS65010

    ISPC

    AS65030

    ISPB

    AS65020

    N

    O

    T

    E

    Theseareallimplem

    entedas

    virtualrouterroutinginstan

    ceson

    Sydney.YoucanlogintoSydney

    anduseitasarouteservertoexamine

    routingtablesandexecute

    ping

    and

    traceroute

    foreachoft

    hesevirtual

    routers.Seeyourlabguide

    formore

    details.

  • 8/10/2019 AJRE_LD_8.b.pdf

    5/38

    TheI

    ntern

    etinthe

    Lab

    isp-a

    RoutingTable(is

    p-a.*)

    Interfaces

    RoutingProtocols

    isp-b

    RoutingTable(isp-b.*

    )

    Interfaces

    RoutingProtocols

    isp-c

    RoutingTable

    (isp-c.*)

    Interfaces

    RoutingProtoc

    ols

    (master)

    Routing

    Table(*)

    Interfac

    es

    Routing

    Protocols

  • 8/10/2019 AJRE_LD_8.b.pdf

    6/38

    TheI

    ntern

    etinthe

    Lab

    ISPA

    AS65010

    ISPC

    AS65030

    ISPB

    AS65020

    ping

    routing

    -instance

    isp

    -a

    show

    route

    t

    able

    isp-a

    traceroute

    r

    outing-instan

    ce

    isp-a

    instructor@Sydney

    >

    show

    con

    figurat

    ion

    rout

    ing-

    instances

    isp-a

    instance-type

    vir

    tual-router;

    interface

    fe-2/0/

    1.15;

    interface

    fe-2/0/

    1.16;

    interface

    lo0.1;

    routing-options

    {

    aggregate

    {

    route

    172

    .17.32.0/21;

    } router-id

    172

    .17.32.1;

    autonomous-sy

    stem

    65010;

    } protocols

    {

    bgp

    { group

    ful

    l-route-customers

    {

    neigh

    bor

    172.17.39.18

    {

    d

    escription

    "HongKong

    to

    isp-a";

    p

    eer-as

    65108;

    }

    }

    [...]

  • 8/10/2019 AJRE_LD_8.b.pdf

    7/38

    Lab1a:Policy

    HongKong

    lo0:8.

    1,

    8.

    254

    SanJose

    lo0:13.

    1,

    13.2

    54

    Montreal

    lo0:12.

    1,

    12.

    254

    Denver

    lo0:14.

    1,

    14.

    254

    London

    lo0:10.

    1,

    10.

    254

    Tokyo

    lo0:9.

    1,

    9.

    254

    Amsterdam

    lo0:11.

    1,

    11.

    254

    SaoPaulo

    lo0:15.

    1,

    15.

    254

    ISPA

    AS65010

    ISPC

    AS65030

    FrameRelay

    Network

    101 2

    01

    1022

    02

    103

    203

    104

    204 1

    05205

    106

    206

    207

    107

    108

    208

    se-1/0

    /1

    se-1

    /0/0

    se-1/0/0

    se-1/0/0

    se-1

    /0/

    1

    se

    -1/0

    /1

    se-1/0/1

    se-1/0/0

    AS65109

    AS65108

    AS65112

    AS65113

    AS65115

    AS65114

    AS65110

    AS65111

    Loopbackaddresses:10.14.y.z

  • 8/10/2019 AJRE_LD_8.b.pdf

    8/38

    Lab1b:Policy

    Denver

    lo0:14.

    1,

    14.

    254

    London

    lo0:10.

    1,

    10.

    254

    Amsterdam

    lo0:11.

    1,

    11.

    254

    SaoPaulo

    lo0:15.

    1,

    15.

    254

    FrameRelay

    Network

    601

    602

    603

    60

    4

    605 6

    06

    60

    7

    608

    se-1/0/0 .5

    se-1/0/0

    .6 .13se-1/0/1

    .14

    se-1/0/0

    HongKong

    lo0:8.

    1,

    8.

    254

    Tokyo

    lo0:9.

    1,

    9.

    254

    se-1/0

    /1

    .2 se-1

    /0/0

    .1

    SanJose

    lo0:13.1,

    13.

    254

    Montreal

    lo0:12.

    1,

    12.2

    54

    se-1

    /0/

    1 .9

    se

    -1/0/

    1

    .10

    Serialaddresses:192.168.25.x

    /30

    Loopbackaddresses:10.14.y.z

  • 8/10/2019 AJRE_LD_8.b.pdf

    9/38

    Lab2:BGPRouting

    Hong

    Kong

    l

    o

    :

    1

    0

    1

    4

    2

    4

    3

    2

    5

    SanJose

    l

    o

    :

    1

    0

    1

    4

    2

    5

    1

    2

    5

    Montr

    eal

    l

    o

    :

    1

    0

    1

    4

    2

    5

    1

    2

    5

    Denver

    lo

    :

    1

    0

    1

    4

    2

    5

    5

    2

    5

    London

    l

    o

    :

    1

    0

    1

    4

    2

    4

    7

    2

    5

    Tokyo

    l

    o

    :

    1

    0

    1

    4

    2

    4

    3

    2

    5

    A

    msterdam

    lo

    :

    1

    0

    1

    4

    2

    4

    7

    2

    5

    SaoPaulo

    l

    o

    :

    1

    0

    1

    4

    2

    5

    5

    2

    5

    ISPA

    AS65010

    ISPC

    AS65030

    se-1/0

    /1

    se-1

    /0/0

    se-1/0/0

    se-1/0/0 s

    e-1/0/1

    se-1/0/1

    se-1/0/1

    se-1/0/0

    AS65240

    GroupA

    l

    o

    :

    1

    0

    1

    4

    2

    4

    3

    2

    5

    GroupC

    l

    o

    :

    1

    0

    1

    4

    2

    5

    1

    2

    5

    AS6

    5248

    GroupB

    l

    o

    :

    1

    0

    1

    4

    2

    4

    7

    2

    5

    GroupD

    l

    o

    :

    1

    0

    1

    4

    2

    5

    5

    2

    5

    AS65244

    AS65252

    Allfe-2/0/1

    VLAN240

    10.14.243.

    x/28

    Allfe-2/0/1

    VLAN244

    10.14.247.x/28

    Allfe-2/0/1

    VLAN248

    10.14.2

    51.x/28

    Allfe-2/0/1

    VLAN252

    10.14.255.x/28

    .236

    .23

    8

    .237

    .238

    .237

    .236

    .236

    .238

    .237

    .236

    .238

    .23

    7

  • 8/10/2019 AJRE_LD_8.b.pdf

    10/38

    Lab3a:IG

    PConver

    sion

    fe-2/0/0

    8.6/30

    fe-0/0/1

    8.5/

    30

    fe-2/0/0

    8.2/30

    fe-2/0/0

    8.1/30

    se-1/0/1

    8.22/30se-1/0/0

    8.21/30

    fe-0/0/1

    8.29/30

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    8.1

    7/30

    se-

    1/0/0

    8.

    13/30

    fe-0

    /0/1

    8.10

    fe-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN 102

    fe-2/0/1

    10.1/26

    VLAN 103

    fe-2/0/1

    10.65/27

    VLAN105fe-2/0

    /111.

    65/2

    7

    VLAN101

    fe-2/0

    /1

    9.65/2

    7

    fe-2

    /0/1

    VLAN16

    172.

    17.3

    8.20

    /29

    fe-2/0/1

    VLAN

    15

    172.17

    .37.

    20/29

    fe-0/0/1

    8.30/30

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    VLAN104fe-2/0

    /1

    11.1/2

    7

    VLAN100

    fe-2/0

    /1

    11.129/27

    se-1/0/0

    8.26/30se-1/0/1

    8.25/30

  • 8/10/2019 AJRE_LD_8.b.pdf

    11/38

    Lab3b:IG

    PConver

    sion

    fe-2/0/0

    8.6/30

    fe-0/0/1

    8.5/

    30

    fe-2/0/0

    8.2/30

    fe-2/0/0

    8.1/30

    se-1/0/1

    8.22/30se-1/0/0

    8.21/30

    fe-0/0/1

    8.29/30

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    8.1

    7/30

    se-

    1/0/0

    8.

    13/30

    fe-0/0/1

    8.30/30

    fe-0

    /0/1

    8.10

    fe-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN104fe-2/0

    /1

    11.1/2

    7

    VLAN 102

    fe-2/0/1

    10.1/26

    VLAN 103

    fe-2/0/1

    10.65/27

    VLAN105fe-2/0

    /111.

    65/2

    7

    VLAN101

    fe-2/0

    /1

    9.65/2

    7

    VLAN100

    fe-2/0

    /1

    11.129/27

    Area1

    10.14.9.0/2

    4

    Area2

    10.14.10.0/24

    Area0

    fe-2

    /0/1

    VLAN16

    172.

    17.3

    8.20

    /29

    fe-2/0/1

    VLAN

    15

    172.17

    .37.

    20/29

    se-1/0/0

    8.26/30se-1/0/1

    8.25/30

    Area3

    10.14.11.0/24

  • 8/10/2019 AJRE_LD_8.b.pdf

    12/38

    Lab4a:CRTP

    fe-2/0/0

    8.6/30

    fe-0/0/1

    8.5/

    30

    fe-2/0/0

    8.2/30

    fe-2/0/0

    8.1/30

    se-1/0/1

    8.22/30se-1/0/0

    8.21/30

    fe-0/0/1

    8.29/30

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    8.1

    7/30

    se-

    1/0/0

    8.

    13/30

    fe-0/0/1

    8.30/30

    fe-0

    /0/1

    8.10

    fe-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN104fe-2/0

    /1

    11.1/2

    7

    VLAN 102

    fe-2/0/1

    10.1/26

    VLAN 103

    fe-2/0/1

    10.65/27

    VLAN105fe-2/0

    /111.

    65/2

    7

    VLAN101

    fe-2/0

    /1

    9.65/2

    7

    VLAN100

    fe-2/0

    /1

    11.129/27

    Area1

    10.14.9.0/2

    4

    Area2

    10.14.10.0/24

    Area0

    fe-2

    /0/1

    VLAN16

    172.

    17.3

    8.20

    /29

    fe-2/0/1

    VLAN

    15

    172.17

    .37.

    20/29

    se-1/0/0

    8.26/30se-1/0/1

    8.25/30

    Area3

    10.14.11.0/24

  • 8/10/2019 AJRE_LD_8.b.pdf

    13/38

    Lab4b:M

    ultilinkPPP

    fe-2/0/0

    8.6/30

    fe-0/0/1

    8.5/

    30

    fe-2/0/0

    8.2/30

    fe-2/0/0

    8.1/30

    se-1/0/0

    se-1/0/1

    8.22/30se-1/0/0

    se-1/0/1

    8.21/30

    fe-0/0/1

    8.29/30

    se

    -1/0

    /0

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    se

    -10/1

    8.1

    7/30

    se-

    1/0/0

    se-

    1/0/1

    8.

    13/30

    fe-0/0/1

    8.30/30

    fe-0

    /0/1

    8.10

    fe-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/0

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN104fe-2/0

    /1

    11.1/2

    7

    VLAN 102

    fe-2/0/1

    10.1/26

    VLAN 103

    fe-2/0/1

    10.65/27

    VLAN105fe-2/0

    /111.

    65/2

    7

    VLAN101

    fe-2/0

    /1

    9.65/2

    7

    VLAN100

    fe-2/0

    /1

    11.129/27

    Area1

    10.14.9.0/2

    4

    Area2

    10.14.10.0/24

    Area3

    10.14.11.0/24

    Area0

    fe-2

    /0/1

    VLAN16

    172.

    17.3

    8.20

    /27

    fe-2/0/1

    VLAN

    15

    172.17

    .37.

    20/27

    se-1/0/0

    se-1/0/1

    8.26/30se-1/0/0

    se-1/0/1

    8.25/30

  • 8/10/2019 AJRE_LD_8.b.pdf

    14/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    15/38

    Lab5b:Fi

    rewallPo

    licyandN

    AT

    FastEthernetaddresses:192.1

    68.x.z

    Loopbackaddresses:10.14.y.z

    HongKongVR

    HongKong

    fe-2/0/1

    X.2/24

    fe-2/0/1

    X.1/24

    VLANX

    XValues

    HongKong=200

    Tokyo=201

    London=202

    Amsterdam=203

    Montreal=204

    SanJose=205

    Denver=206

    SaoPaulo=207

    Internet

  • 8/10/2019 AJRE_LD_8.b.pdf

    16/38

    Lab6:IPS

    ecVPNs

    Denver

    lo0:14.1,

    14.2

    54

    London

    lo0:10.1,

    10.

    254

    Amst

    erdam

    lo0:11

    .1,1

    1.2

    54

    SaoPaulo

    lo0:15.1,

    15

    .254

    Internet

    Tokyo

    lo0:9.1,

    9.254

    SanJose

    lo0:13.1,

    13

    .254

    Montre

    al

    lo0:12.

    1,1

    2

    .254

    Loopbackaddresses:10.14.y.z

    VRFastEthernetaddresses:19

    2.168.x.z/24

    (SeeLab5bformoreVRconfiguration.)

    Tokyo-vr

    192.

    168.2

    01.

    2

    London-vr

    192.1

    68.2

    02.

    2

    Amste

    rdam-vr

    192.1

    6

    8.2

    03.

    2

    Montreal-vr

    192.1

    68.2

    04.

    2

    SanJose-vr

    192.1

    68.2

    05.2

    Denver-vr

    192.

    16

    8.2

    06.

    2

    SaoPaulo

    -vr

    192.1

    68.2

    0

    7.

    2

    HongKong-vr

    192.1

    68.2

    00.

    2

    HongKo

    ng

    lo0:8.1,

    8.2

    54

  • 8/10/2019 AJRE_LD_8.b.pdf

    17/38

    Lab7:CoS

    Denver

    lo0:14.1,

    14.2

    54

    London

    lo0:10.1,

    10.

    254

    Amst

    erdam

    lo0:11

    .1,1

    1.2

    54

    SaoPaulo

    lo0:15.1,

    15

    .254

    Internet

    Tokyo

    lo0:9.1,

    9.254

    SanJose

    lo0:13.1,

    13

    .254

    Montre

    al

    lo0:12.

    1,1

    2

    .254

    Loopbackaddresses:10.14.y.z

    VRFastEthernetaddresses:19

    2.168.x.z/24

    (SeeLab5bformoreVRconfiguration.)

    Tokyo-vr

    201.

    2,

    201.

    254

    London-vr

    202.2,

    202.

    254

    Amste

    rdam-vr

    203.2,

    203.

    254

    Montreal-vr

    204.2,

    204.

    254

    SanJose-vr

    205.2,

    205.

    254

    Denver-vr

    SaoPaulo

    -vr

    207.2,

    207.

    254

    HongKong-vr

    200.2,

    200.

    254

    HongKo

    ng

    lo0:8.1,

    8.2

    54

    206.

    2,

    206.

    254

  • 8/10/2019 AJRE_LD_8.b.pdf

    18/38

    Lab8a:BranchOfficeConne

    ctivity

    FastEthernetAddresses:172.1

    7.x.y/29

    ProviderGateway:172.17.x.z

    HongKong

    VLANw

    ISPA

    Tokyo

    FrameRelay

    SerialInterfaceandD

    LCI

    (SeeLab1bdiagramfo

    r

    interface,DLCI,andIP

    addressassignments.)

    fe-2/0/1

    192.168.207.1,.254

    SaoPa

    ulo

    37.25

    37.28

    17

    192.168.206.1,.254

    Denver

    192.168.205.1,.254

    SanJose

    37.17

    37.20

    15

    192.168.204.1,.254

    Montre

    al

    192.168.203.1,.254

    Amster

    dam

    37.9

    37.12

    13

    192.168.202.1,.254

    London

    192.168.201.1,.254

    Tokyo

    37.1

    37.4

    11

    192.168.200.1,.254

    HongK

    ong

    ProviderGW(

    x.z

    )

    fe-2/0/1(x.y)

    VLAN(w)

    lo0

    Router

  • 8/10/2019 AJRE_LD_8.b.pdf

    19/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    20/38

    Lab8c:Br

    anchOfficeConne

    ctivity

    FastEthernetAddresses:172.17.x.y/29

    ProviderGateway:172.17.x.z

    gr-0/0/0.0andL2VPNaddress:192.168.25.v/30

    HongKong

    VLANw

    I

    SPA

    Tokyo

    fe-2

    /0/1

    604

    604

    603

    603

    602

    602

    601

    601

    L2VPN

    VLAN(t)

    .14

    .13

    .10

    .9.6.5.2.1L2VPN(v)

    .142

    .141

    .138

    .137

    .134

    .133

    .130

    .129

    gr0(v)

    38

    .25

    38.28

    1

    8

    192.168.207.1,.254

    SaoPaulo

    37

    .25

    37.28

    1

    7

    192.168.206.1,.254

    Denver

    38

    .17

    38.20

    1

    6

    192.168.205.1,.254

    SanJose

    37

    .17

    37.20

    1

    5

    192.168.204.1,.254

    Montreal

    38

    .9

    38.12

    1

    4

    192.168.203.1,.254

    Amsterdam

    37

    .9

    37.12

    1

    3

    192.168.202.1,.254

    London

    38

    .1

    38.4

    1

    2

    192.168.201.1,.254

    Tokyo

    37

    .1

    37.4

    1

    1

    192.168.200.1,.254

    HongKong

    Pr

    oviderGW(

    x.z

    )

    fe-2/0/1(x.y

    )

    V

    LAN(w)

    lo0

    Router

    VLANw

    fe-2/0/1

    (VPN)

    VLANt

    fe-2/0/1

    fe-2/0/1

  • 8/10/2019 AJRE_LD_8.b.pdf

    21/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    22/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    23/38

    TheI

    ntern

    etinthe

    Lab

    isp-a

    RoutingTable(is

    p-a.*)

    Interfaces

    RoutingProtocols

    isp-b

    RoutingTable(isp-b.*

    )

    Interfaces

    RoutingProtocols

    isp-c

    RoutingTable

    (isp-c.*)

    Interfaces

    RoutingProtoc

    ols

    (master)

    Routing

    Table(*)

    Interfac

    es

    Routing

    Protocols

  • 8/10/2019 AJRE_LD_8.b.pdf

    24/38

    TheI

    ntern

    etinthe

    Lab

    ISPA

    AS65010

    ISPC

    AS65030

    ISPB

    AS65020

    ping

    routing

    -instance

    isp

    -a

    show

    route

    t

    able

    isp-a

    traceroute

    r

    outing-instan

    ce

    isp-a

    instructor@Sydney

    >

    show

    con

    figurat

    ion

    rout

    ing-

    instances

    isp-a

    instance-type

    vir

    tual-router;

    interface

    ge-0/0/

    3.15;

    interface

    ge-0/0/

    3.16;

    interface

    lo0.1;

    routing-options

    {

    aggregate

    {

    route

    172

    .17.32.0/21;

    } router-id

    172

    .17.32.1;

    autonomous-sy

    stem

    65010;

    } protocols

    {

    bgp

    { group

    ful

    l-route-customers

    {

    neigh

    bor

    172.17.39.18

    {

    d

    escription

    "HongKong

    to

    isp-a";

    p

    eer-as

    65108;

    }

    }

    [...]

  • 8/10/2019 AJRE_LD_8.b.pdf

    25/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    26/38

    Lab1b:Policy

    Denver

    lo0:14.

    1,

    14.

    254

    London

    lo0:10.

    1,

    10.

    254

    Amsterdam

    lo0:11.

    1,

    11.

    254

    SaoPaulo

    lo0:15.

    1,

    15.

    254

    FrameRelay

    Network

    601

    602

    603

    60

    4

    605 6

    06

    60

    7

    608

    se-1/0/0 .5

    se-1/0/0

    .6 .13se-1/0/1

    .14

    se-1/0/0

    HongKong

    lo0:8.

    1,

    8.

    254

    Tokyo

    lo0:9.

    1,

    9.

    254

    se-1/0

    /1

    .2 se-1

    /0/0

    .1

    SanJose

    lo0:13.1,

    13.

    254

    Montreal

    lo0:12.

    1,

    12.2

    54

    se-1

    /0/

    1 .9

    se

    -1/0/

    1

    .10

    Serialaddresses:192.168.25.x

    /30

    Loopbackaddresses:10.14.y.z

  • 8/10/2019 AJRE_LD_8.b.pdf

    27/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    28/38

    Lab3a:IG

    PConver

    sion

    ge-0/0/2

    8.6/30

    ge-0/0/1

    8.5/

    30

    ge-0/0/2

    8.2/30

    ge-0/0/2

    8.1/30

    se-1/0/1

    8.22/30se-1/0/0

    8.21/30

    ge-0/0/1

    8.29/30

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    8.1

    7/30

    se-

    1/0/0

    8.

    13/30

    ge-0

    /0/1

    8.10

    ge-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN 102

    ge-0/0/3

    10.1/26

    VLAN 103

    ge-0/0/3

    10.65/27

    VLAN105ge

    -0/0/3

    11.65

    /27

    VLAN101

    ge-0/0/3

    9.65/2

    7

    ge-0

    /0/3

    VLAN16

    172.

    17.3

    8.20

    /29

    ge-0/0/3

    VLAN

    15

    172.17

    .37.

    20/29

    ge-0/0/1

    8.30/30

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    VLAN104ge-0/0

    /3

    11.1/2

    7

    VLAN100

    ge-0/0

    /3

    11.129/27

    se-1/0/0

    8.26/30se-1/0/1

    8.25/30

  • 8/10/2019 AJRE_LD_8.b.pdf

    29/38

    Lab3b:IG

    PConver

    sion

    ge-0/0/2

    8.6/30

    ge-0/0/1

    8.5/

    30

    ge-0/0/2

    8.2/30

    ge-0/0/2

    8.1/30

    se-1/0/1

    8.22/30se-1/0/0

    8.21/30

    ge-0/0/1

    8.29/30

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    8.1

    7/30

    se-

    1/0/0

    8.

    13/30

    ge-0/0/1

    8.30/30

    ge-0

    /0/1

    8.10

    ge-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN104ge-0/0

    /3

    11.1/2

    7

    VLAN 102

    ge-0/0/3

    10.1/26

    VLAN 103

    ge-0/0/3

    10.65/27

    VLAN105ge

    -0/0/3

    11.65

    /27

    VLAN101

    ge-0/0/3

    9.65/2

    7

    VLAN100

    ge-0/0

    /3

    11.129/27

    Area1

    10.14.9.0/2

    4

    Area2

    10.14.10.0/24

    Area0

    ge-0

    /0/3

    VLAN16

    172.

    17.3

    8.20

    /29

    ge-0/0/3

    VLAN

    15

    172.17

    .37.

    20/29

    se-1/0/0

    8.26/30se-1/0/1

    8.25/30

    Area3

    10.14.11.0/24

  • 8/10/2019 AJRE_LD_8.b.pdf

    30/38

    Lab4a:CRTP

    ge-0/0/2

    8.6/30

    ge-0/0/1

    8.5/

    30

    ge-0/0/2

    8.2/30

    ge-0/0/2

    8.1/30

    se-1/0/1

    8.22/30se-1/0/0

    8.21/30

    ge-0/0/1

    8.29/30

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    8.1

    7/30

    se-

    1/0/0

    8.

    13/30

    ge-0/0/1

    8.30/30

    ge-0

    /0/1

    8.10

    ge-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN104ge-0/0

    /3

    11.1/2

    7

    VLAN 102

    ge-0/0/3

    10.1/26

    VLAN 103

    ge-0/0/3

    10.65/27

    VLAN105ge

    -0/0/3

    11.65

    /27

    VLAN101

    ge-0/0/3

    9.65/2

    7

    VLAN100

    ge-0/0

    /3

    11.129/27

    Area1

    10.14.9.0/2

    4

    Area2

    10.14.10.0/24

    Area0

    ge-0

    /0/3

    VLAN16

    172.

    17.3

    8.20

    /29

    ge-0/0/3

    VLAN

    15

    172.17

    .37.

    20/29

    se-1/0/0

    8.26/30se-1/0/1

    8.25/30

    Area3

    10.14.11.0/24

  • 8/10/2019 AJRE_LD_8.b.pdf

    31/38

    Lab4b:M

    ultilinkPPP

    ge-0/0/2

    8.6/30

    ge-0/0/1

    8.5/

    30

    ge-0/0/2

    8.2/30

    ge-0/0/2

    8.1/30

    se-1/0/0

    se-1/0/1

    8.22/30se-1/0/0

    se-1/0/1

    8.21/30

    ge-0/0/1

    8.29/30

    se

    -1/0

    /0

    se

    -1/0

    /1

    8.1

    8/3

    0

    se

    -1/0/0

    se

    -10/1

    8.1

    7/30

    se-

    1/0/0

    se-

    1/0/1

    8.

    13/30

    ge-0/0/1

    8.30/30

    ge-0

    /0/1

    8.10

    ge-0

    /0/1

    8.9

    SanJose

    Montr

    eal

    Denver

    Amsterdam

    lo0:192.

    168.

    25.

    6

    lo0:192.

    16

    8.

    25.

    5

    lo0:192.

    168.

    25.

    7

    London

    lo0:192.1

    68.

    25.

    3

    Tokyo

    lo0:192.

    168.

    25.

    2

    lo0:192.

    168.

    25.

    4

    SaoPaulo

    lo0:192.

    168.

    25.

    8

    se-1/0/0

    se-1/0/1

    8.

    14/30

    HongKong

    lo0:192.

    168.

    25.1

    ISPA

    Interfaceaddresses:10.14.x.y(exceptasnoted)

    Loopbackaddresses:192.168.

    25.x/32

    ClockingMode=Intern

    al(provideserialinterface

    timing)

    VLAN104ge-0/0

    /3

    11.1/2

    7

    VLAN 102

    ge-0/0/3

    10.1/26

    VLAN 103

    ge-0/0/3

    10.65/27

    VLAN105ge

    -0/0/3

    11.65

    /27

    VLAN101

    ge-0/0/3

    9.65/2

    7

    VLAN100

    ge-0/0

    /3

    11.129/27

    Area1

    10.14.9.0/2

    4

    Area2

    10.14.10.0/24

    Area3

    10.14.11.0/24

    Area0

    ge-0

    /0/3

    VLAN16

    172.

    17.3

    8.20

    /27

    ge-0/0/3

    VLAN

    15

    172.17

    .37.

    20/27

    se-1/0/0

    se-1/0/1

    8.26/30se-1/0/0

    se-1/0/1

    8.25/30

  • 8/10/2019 AJRE_LD_8.b.pdf

    32/38

    Lab5a:Fi

    rewallPo

    licyandN

    AT

    HongKong

    lo0:8.

    1,

    8.

    254

    SanJose

    lo0:13.

    1,

    13.2

    54

    Montreal

    lo0:12.

    1,

    12.

    254

    Denver

    lo0:14.

    1,

    14.

    254

    London

    lo0:10.

    1,

    10.

    254

    Tokyo

    lo0:9.

    1,

    9.

    254

    Amsterdam

    lo0:11.

    1,

    11.

    254

    SaoPaulo

    lo0:15.

    1,

    15.

    254

    ISPA

    AS65010

    ISPC

    AS65030

    FrameRelay

    Network

    101 2

    01

    1022

    02

    103

    203

    104

    204 1

    05205

    106

    206

    207

    107

    108

    208

    se-1/0

    /1

    se-1

    /0/0

    se-1/0/0

    se-1/0/0

    se-1

    /0/

    1

    se

    -1/0

    /1

    se-1/0/1

    se-1/0/0

    AS65109

    AS65108

    AS65112

    AS65113

    AS65115

    AS65114

    AS65110

    AS65111

    Loopbackaddresses:10.14.y.z

  • 8/10/2019 AJRE_LD_8.b.pdf

    33/38

    Lab5b:Fi

    rewallPo

    licyandN

    AT

    FastEthernetaddresses:192.1

    68.x.z

    Loopbackaddresses:10.14.y.z

    HongKongVR

    HongKong

    ge-0/0/3

    X.2/24

    ge-0/0/3

    X.1/24

    VLANX

    XValues

    HongKong=200

    Tokyo=201

    London=202

    Amsterdam=203

    Montreal=204

    SanJose=205

    Denver=206

    SaoPaulo=207

    Internet

  • 8/10/2019 AJRE_LD_8.b.pdf

    34/38

    Lab6:IPS

    ecVPNs

    Denver

    lo0:14.1,

    14.2

    54

    London

    lo0:10.1,

    10.

    254

    Amst

    erdam

    lo0:11

    .1,1

    1.2

    54

    SaoPaulo

    lo0:15.1,

    15

    .254

    Internet

    Tokyo

    lo0:9.1,

    9.254

    SanJose

    lo0:13.1,

    13

    .254

    Montre

    al

    lo0:12.

    1,1

    2

    .254

    Loopbackaddresses:10.14.y.z

    VRFastEthernetaddresses:19

    2.168.x.z/24

    (SeeLab5bformoreVRconfiguration.)

    Tokyo-vr

    192.

    168.2

    01.

    2

    London-vr

    192.1

    68.2

    02.

    2

    Amste

    rdam-vr

    192.1

    6

    8.2

    03.

    2

    Montreal-vr

    192.1

    68.2

    04.

    2

    SanJose-vr

    192.1

    68.2

    05.2

    Denver-vr

    192.

    16

    8.2

    06.

    2

    SaoPaulo

    -vr

    192.1

    68.2

    0

    7.

    2

    HongKong-vr

    192.1

    68.2

    00.

    2

    HongKo

    ng

    lo0:8.1,

    8.2

    54

  • 8/10/2019 AJRE_LD_8.b.pdf

    35/38

    Lab7:CoS

    Denver

    lo0:14.1,

    14.2

    54

    London

    lo0:10.1,

    10.

    254

    Amst

    erdam

    lo0:11

    .1,1

    1.2

    54

    SaoPaulo

    lo0:15.1,

    15

    .254

    Internet

    Tokyo

    lo0:9.1,

    9.254

    SanJose

    lo0:13.1,

    13

    .254

    Montre

    al

    lo0:12.

    1,1

    2

    .254

    Loopbackaddresses:10.14.y.z

    VRFastEthernetaddresses:19

    2.168.x.z/24

    (SeeLab5bformoreVRconfiguration.)

    Tokyo-vr

    201.

    2,

    201.

    254

    London-vr

    202.2,

    202.

    254

    Amste

    rdam-vr

    203.2,

    203.

    254

    Montreal-vr

    204.2,

    204.

    254

    SanJose-vr

    205.2,

    205.

    254

    Denver-vr

    SaoPaulo

    -vr

    207.2,

    207.

    254

    HongKong-vr

    200.2,

    200.

    254

    HongKo

    ng

    lo0:8.1,

    8.2

    54

    206.

    2,

    206.

    254

  • 8/10/2019 AJRE_LD_8.b.pdf

    36/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    37/38

  • 8/10/2019 AJRE_LD_8.b.pdf

    38/38

    b8c:Br

    anchOfficeConne

    ctivity

    etAddresses:172.17.x.y/29

    teway:172.17.x.z

    andL2VPNaddress:192.168.25.v/30

    HongKong

    VLANw

    I

    SPA

    Tokyo

    ge-0

    /0/3

    604

    604

    603

    603

    602

    602

    601

    601

    L2VPN

    VLAN(t

    )

    .14

    .13

    .10

    .9.6.5.2.1L2VPN(v)

    .142

    .141

    .138

    .137

    .134

    .133

    .130

    .129

    gr0(v)

    38.25

    38.28

    18

    192

    .168.207.1,.254

    SaoPaulo

    37.25

    37.28

    17

    192

    .168.206.1,.254

    Denver

    38.17

    38.20

    16

    192

    .168.205.1,.254

    SanJose

    37.17

    37.20

    15

    192

    .168.204.1,.254

    Montreal

    38.9

    38.12

    14

    192

    .168.203.1,.254

    Amsterdam

    37.9

    37.12

    13

    192

    .168.202.1,.254

    London

    38.1

    38.4

    12

    192

    .168.201.1,.254

    Tokyo

    37.1

    37.4

    11

    192

    .168.200.1,.254

    HongKong

    ProviderGW(

    x.z

    )

    ge-0/0/3(x.y

    )

    VLAN(w)

    lo0

    Router

    VLANw

    ge-0

    /0/3

    (VPN)

    VLANt

    ge-0/0/3

    ge-0/0/3


Recommended