Lab Objective:
The focus of this lab is to understand tunneling implementation and configuration in Cisco IOS routers. Additional technologies include Multi Protocol Border Gateway Protocol (MP-BGP).
Lab Topology:
The lab network topology is illustrated below:
|
IMPORTANT NOTE If you are using the www.howtonetwork.net racks, please bring up the LAN interfaces connected to the routers by issuing the no shutdown command on the connected switches. If you are using a home lab with no interface fastethernet 0/0 Alternately, you can simply connect the interfaces to a hub or switch if you have one available in your own lab. |
Task 1
Configure hostnames, IP addressing on all routers as illustrated in the network topology. Next, configure the following Loopback 0 interfaces on all routers:
R1: Loopback 0 – IP Address 1.1.1.1/32
R2: Loopback 0 – IP Address 2.2.2.2/32
R3: Loopback 0 – IP Address 3.3.3.3/32
R4: Loopback 0 – IP Address 4.4.4.4/32
Task 2
Enable OSPF on all routers as illustrated in the topology. Advertise the Loopback 0 interfaces via OSPF as Type 2 External LSAs. Verify your OSPF configuration.
Task 3
Configure ISATAP tunnels on all routers. Use the Loopback 0 interface as the tunnel source. The tunnels should be configured using the fec0:abcd:1234:1::/64 subnet. Verify your configuration using the appropriate commands.
Task 4
Configure MP-BGP on all routers. All routers should use their ISATAP tunnel addresses for peering. Ensure that all routers advertise their LAN subnet via MP-BGP. MP-BGP peering should be configured on all routers as follows:
R1 – Autonomous System 1: This router will peer with R2
R2 – Autonomous System 2: This router will peer with R1 and R2
R3 – Autonomous System 3: This router will peer with R2 and R4
R4 – Autonomous System 4: This router will peer with R3
Verify your MP-BGP configuration using the appropriate commands.
Task 5
Ensure that all routers can ping each other LAN-to-LAN. Use the extended ping function for verification. Every router should be able to ping every other routers’ LAN subnet without additional configuration. If not, check the configuration implemented in the previous lab tasks.
Lab Validation
Task 1
Please refer to previous labs for basic IPv4, IPv6 addressing and hostname configuration. This will not be included in this section to avoid being redundant.
Task 2
Please refer to previous labs for basic OSPF configuration. Following this, verify your OSPF configuration using the show ip ospf neighbor command:
| R1#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface |
| R2#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface |
| R3#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface |
| R4#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface |
Next, verify that all routing information is correct using the show ip route command:
| R1#show ip route ospf 2.0.0.0/32 is subnetted, 1 subnets O E2 2.2.2.2 [110/20] via 10.0.0.2, 00:01:32, Serial0/0 3.0.0.0/32 is subnetted, 1 subnets O E2 3.3.3.3 [110/20] via 10.0.0.2, 00:01:32, Serial0/0 4.0.0.0/32 is subnetted, 1 subnets O E2 4.4.4.4 [110/20] via 10.0.0.2, 00:01:32, Serial0/0 10.0.0.0/30 is subnetted, 3 subnets O 10.0.0.8 [110/128] via 10.0.0.2, 00:01:32, Serial0/0 O 10.0.0.12 [110/909] via 10.0.0.2, 00:01:32, Serial0/0 |
| R2#show ip route ospf 1.0.0.0/32 is subnetted, 1 subnets O E2 1.1.1.1 [110/20] via 10.0.0.1, 00:01:35, Serial0/0 3.0.0.0/32 is subnetted, 1 subnets O E2 3.3.3.3 [110/20] via 10.0.0.10, 00:01:35, Serial0/1 4.0.0.0/32 is subnetted, 1 subnets O E2 4.4.4.4 [110/20] via 10.0.0.10, 00:01:35, Serial0/1 10.0.0.0/30 is subnetted, 3 subnets O 10.0.0.12 [110/845] via 10.0.0.10, 00:01:36, Serial0/1 |
| R3#show ip route ospf 1.0.0.0/32 is subnetted, 1 subnets O E2 1.1.1.1 [110/20] via 10.0.0.9, 00:01:39, Serial1/1 2.0.0.0/32 is subnetted, 1 subnets O E2 2.2.2.2 [110/20] via 10.0.0.9, 00:01:39, Serial1/1 4.0.0.0/32 is subnetted, 1 subnets O E2 4.4.4.4 [110/20] via 10.0.0.14, 00:01:39, Serial1/2 10.0.0.0/30 is subnetted, 3 subnets O 10.0.0.0 [110/845] via 10.0.0.9, 00:01:39, Serial1/1 |
| R4#show ip route ospf 1.0.0.0/32 is subnetted, 1 subnets O E2 1.1.1.1 [110/20] via 10.0.0.13, 00:01:42, Serial0/0 2.0.0.0/32 is subnetted, 1 subnets O E2 2.2.2.2 [110/20] via 10.0.0.13, 00:01:42, Serial0/0 3.0.0.0/32 is subnetted, 1 subnets O E2 3.3.3.3 [110/20] via 10.0.0.13, 00:01:42, Serial0/0 10.0.0.0/30 is subnetted, 3 subnets O 10.0.0.8 [110/845] via 10.0.0.13, 00:01:42, Serial0/0 O 10.0.0.0 [110/909] via 10.0.0.13, 00:01:42, Serial0/0 |
Task 3
| R1(config)#interface tunnel 0 R1(config-if)#tunnel source loopback 0 R1(config-if)#ipv6 address fec0:abcd:1234:1::/64 eui-64 R1(config-if)#tunnel mode ipv6ip isatap R1(config-if)#no ipv6 nd suppress-ra R1(config-if)#exit |
| R2(config)#interface tunnel 0 R2(config-if)#tunnel source loopback 0 R2(config-if)#ipv6 address fec0:abcd:1234:1::/64 eui-64 R2(config-if)#tunnel mode ipv6ip isatap R2(config-if)#no ipv6 nd suppress-ra R2(config-if)#exit |
| R3(config)#interface tunnel 0 R3(config-if)#tunnel source loopback 0 R3(config-if)#ipv6 address fec0:abcd:1234:1::/64 eui-64 R3(config-if)#tunnel mode ipv6ip isatap R3(config-if)#no ipv6 nd suppress-ra R3(config-if)#exit |
| R4(config)#interface tunnel 0 R4(config-if)#tunnel source loopback 0 R4(config-if)#ipv6 address fec0:abcd:1234:1::/64 eui-64 R4(config-if)#tunnel mode ipv6ip isatap R4(config-if)#no ipv6 nd suppress-ra R4(config-if)#exit |
Verify ISATAP tunnel status and configuration using the show interfaces command:
| R1#show interfaces tunnel 0 Tunnel0 is up, line protocol is up Hardware is Tunnel MTU 1514 bytes, BW 9 Kbit/sec, DLY 500000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation TUNNEL, loopback not set Keepalive not set Tunnel source 1.1.1.1 (Loopback0), destination UNKNOWN Tunnel protocol/transport IPv6 ISATAP Fast tunneling enabled |
Verify ISATAP IPv6 addressing using the show ipv6 interface command:
| R1#show ipv6 interface tunnel 0 Tunnel0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::5EFE:101:101 Global unicast address(es): FEC0:ABCD:1234:1:0:5EFE:101:101, subnet is FEC0:ABCD:1234:1::/64 [EUI] Joined group address(es): FF02::1 FF02::2 FF02::1:FF01:101 MTU is 1480 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled ND DAD is not supported ND reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 0 milliseconds ND router advertisements live for 1800 seconds Hosts use stateless autoconfig for addresses. |
Task 4
| R1(config)#router bgp 1 R1(config-router)#bgp router-id 1.1.1.1 R1(config-router)#address-family ipv6 R1(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:202:202 remote-as 2 R1(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:202:202 activate R1(config-router-af)#network 3FFE:ABCD:1111:1::/64 R1(config-router-af)#exit-address-family R1(config-router)#exit |
| R2(config)#router bgp 2 R2(config-router)#bgp router-id 2.2.2.2 R2(config-router)#address-family ipv6 R2(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:101:101 remote-as 1 R2(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:101:101 activate R2(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:303:303 remote-as 3 R2(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:303:303 activate R2(config-router-af)#network 3FFE:ABCD:1111:2::/64 R2(config-router-af)#exit-address-family R2(config-router)#exit |
| R3(config)#router bgp 3 R3(config-router)#bgp router-id 3.3.3.3 R3(config-router)#address-family ipv6 R3(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:202:202 remote-as 2 R3(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:202:202 activate R3(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:404:404 remote-as 4 R3(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:404:404 activate R3(config-router-af)#network 3FFE:ABCD:1111:3::/64 R3(config-router-af)#exit-address-family R3(config-router)#exit |
| R4(config)#router bgp 4 R4(config-router)#bgp router-id 4.4.4.4 R4(config-router)#address-family ipv6 R4(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:303:303 remote-as 3 R4(config-router-af)#neighbor FEC0:ABCD:1234:1:0:5EFE:303:303 activate R4(config-router-af)#network 3FFE:ABCD:1111:4::/64 R4(config-router-af)#exit-address-family R4(config-router)#exit |
Verify MP-BGP configuration using the show bgp ipv6 unicast summary command:
| R1#show bgp ipv6 unicast summary BGP router identifier 1.1.1.1, local AS number 1 BGP table version is 5, main routing table version 5 4 network entries using 596 bytes of memory 4 path entries using 304 bytes of memory 5/4 BGP path/bestpath attribute entries using 620 bytes of memory 3 BGP AS-PATH entries using 72 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1592 total bytes of memory BGP activity 4/0 prefixes, 4/0 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd |
| R2#show bgp ipv6 unicast summary BGP router identifier 2.2.2.2, local AS number 2 BGP table version is 6, main routing table version 6 4 network entries using 596 bytes of memory 4 path entries using 304 bytes of memory 5/4 BGP path/bestpath attribute entries using 620 bytes of memory 3 BGP AS-PATH entries using 72 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1592 total bytes of memory BGP activity 4/0 prefixes, 4/0 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd |
| R3#show bgp ipv6 unicast summary BGP router identifier 3.3.3.3, local AS number 3 BGP table version is 6, main routing table version 6 4 network entries using 596 bytes of memory 4 path entries using 304 bytes of memory 5/4 BGP path/bestpath attribute entries using 620 bytes of memory 3 BGP AS-PATH entries using 72 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1592 total bytes of memory BGP activity 4/0 prefixes, 4/0 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd |
| R4#show bgp ipv6 unicast summary BGP router identifier 4.4.4.4, local AS number 4 BGP table version is 5, main routing table version 5 4 network entries using 596 bytes of memory 4 path entries using 304 bytes of memory 5/4 BGP path/bestpath attribute entries using 620 bytes of memory 3 BGP AS-PATH entries using 72 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1592 total bytes of memory BGP activity 4/0 prefixes, 4/0 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd |
Finally, verify that all routers have the LAN subnets in their MP-BGP RIB Tables:
| R1#show bgp ipv6 unicast BGP table version is 5, local router ID is 1.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best, i – internal, r RIB-failure, S Stale Origin codes: i – IGP, e – EGP, ? – incomplete Network Next Hop Metric LocPrf Weight Path |
| R2#show bgp ipv6 unicast BGP table version is 6, local router ID is 2.2.2.2 Status codes: s suppressed, d damped, h history, * valid, > best, i – internal, r RIB-failure, S Stale Origin codes: i – IGP, e – EGP, ? – incomplete Network Next Hop Metric LocPrf Weight Path |
| R3#show bgp ipv6 unicast BGP table version is 6, local router ID is 3.3.3.3 Status codes: s suppressed, d damped, h history, * valid, > best, i – internal, r RIB-failure, S Stale Origin codes: i – IGP, e – EGP, ? – incomplete Network Next Hop Metric LocPrf Weight Path |
| R4#show bgp ipv6 unicast BGP table version is 5, local router ID is 4.4.4.4 Status codes: s suppressed, d damped, h history, * valid, > best, i – internal, r RIB-failure, S Stale Origin codes: i – IGP, e – EGP, ? – incomplete Network Next Hop Metric LocPrf Weight Path |
Task 5
If you have completed all task as required, this step will be completed with no issues. Use the extended ping function to ping LAN-to-LAN between routers. With the implemented configuration, all prefixes are advertised and received via BGP, as illustrated in the output of the IPv6 routing table on any one of the routers; the example below showing R1s IPv6 RIB:
| R1#show ipv6 route 3FFE:ABCD:1111:2::/64 IPv6 Routing Table – 9 entries Codes: C – Connected, L – Local, S – Static, R – RIP, B – BGP U – Per-user Static route I1 – ISIS L1, I2 – ISIS L2, IA – ISIS interarea, IS – ISIS summary O – OSPF intra, OI – OSPF inter, OE1 – OSPF ext 1, OE2 – OSPF ext 2 ON1 – OSPF NSSA ext 1, ON2 – OSPF NSSA ext 2 B 3FFE:ABCD:1111:2::/64 [20/0] via FEC0:ABCD:1234:1:0:5EFE:202:202 |
However, notice that the NEXT_HOP addresses are the ISATAP tunnel interfaces, which means that the packets are forwarded out of these tunnels across the IPv4 infrastructure:
| R1#show ipv6 route FEC0:ABCD:1234:1:0:5EFE:202:202 IPv6 Routing Table – 9 entries Codes: C – Connected, L – Local, S – Static, R – RIP, B – BGP U – Per-user Static route I1 – ISIS L1, I2 – ISIS L2, IA – ISIS interarea, IS – ISIS summary O – OSPF intra, OI – OSPF inter, OE1 – OSPF ext 1, OE2 – OSPF ext 2 ON1 – OSPF NSSA ext 1, ON2 – OSPF NSSA ext 2 C FEC0:ABCD:1234:1::/64 [0/0] via ::, Tunnel0 |
Complete this last task by using the extended ping function on all routers as follows:
| R1#ping 3FFE:ABCD:1111:2::2 source fastethernet 0/0 repeat 10 size 1500
Type escape sequence to abort. R1#ping 3FFE:ABCD:1111:3::3 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. R1#ping 3FFE:ABCD:1111:4::4 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. |
| R2#ping 3FFE:ABCD:1111:1::1 source fastethernet 0/0 repeat 10 size 1500
Type escape sequence to abort. R2#ping 3FFE:ABCD:1111:3::3 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. R2#ping 3FFE:ABCD:1111:4::4 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. |
| R3#ping 3FFE:ABCD:1111:1::1 source fastethernet 0/0 repeat 10 size 1500
Type escape sequence to abort. R3#ping 3FFE:ABCD:1111:2::2 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. R3#ping 3FFE:ABCD:1111:4::4 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. |
| R4#ping 3FFE:ABCD:1111:1::1 source fastethernet 0/0 repeat 10 size 1500
Type escape sequence to abort. R4#ping 3FFE:ABCD:1111:2::2 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. R4#ping 3FFE:ABCD:1111:3::3 source fastethernet 0/0 repeat 10 size 1500 Type escape sequence to abort. |
Final Router Configurations
R1
|
R1#term len 0 Current configuration : 1535 bytes R1# |
R2
|
R2#term len 0 Current configuration : 1687 bytes R2# |
R3
|
R3#term len 0 Current configuration : 2028 bytes R3# |
R4
|
R4#term len 0 Current configuration : 1516 bytes R4# |