www.howtonetwork.org

CCNA & CCNP Certifcation Training

  • About
  • Contact
  • FAQ
  • Join
  • Home
  • CCNA
    • ICND1
    • ICND2
    • 101 CCNA LABS
  • CCNP
    • ROUTE
    • SWITCH
    • TSHOOT
    • 101 CCNP LABS
  • CompTIA
    • Security+
    • Network+
  • Design
    • CCDA
    • CCDP
You are here: Home / 101 CCNP Labs Solutions / CCNP Lab 096 Solution: Troubleshooting Lab

CCNP Lab 096 Solution: Troubleshooting Lab

Lab Objective:

The focus of this lab is to hone your trouble isolation and resolution skills. This lab will include Layer 2 and Layer 3 technologies which fall within the scope of the current CCNP curriculum.

Lab Topology:

The lab network topology is illustrated below:

department696

 

IMPORTANT NOTE

If you are using the www.howtonetwork.net racks, please download and paste the troubleshooting lab configurations. If you are using your own rack or lab, please modify this configuration to reflect the actual interface types, etc, that you have on your devices. Prior to beginning all labs, apply the pre-lab configuration for each individual device.

When completing these labs, it is important to resolve the trouble tickets in the order in which they are listed because they build on each other. For example, if you begin with Trouble Ticket # 3, you might not get the expected resolution or result if you have not completed Trouble Ticket # 1 and Trouble Ticket # 2. It is very important to follow the order listed.

 

Trouble Ticket # 1

You have received a call from Level 1 stating that following some configuration changes, the OSPF neighbor adjacency between R1 and R2 has failed. Troubleshoot and resolve this issue.

Trouble Ticket # 2

You have received a call from Level 1 stating that following some basic network configuration changes, the OSPF adjacency between R2 and R3 is down. Troubleshoot and resolve this issue.

Trouble Ticket # 3

You have received a call from Level 1 stating that the OSPF adjacency between R3 and R4 is down. Troubleshoot and resolve this issue.

Trouble Ticket # 4

You have received a call from Level 1 stating that there is intermittent connectivity between the 150.1.1.0/24 and 150.2.2.0/24 subnets and the 150.4.4.0/24 subnet. Due to a current configuration freeze on R3, Management allows you to only make changes to ONE device. With this restriction in mind, troubleshoot and resolve this issue.

Lab Solutions

Solution # 1

The issue is that there is no clocking on the WAN link between R1 and R2:

R1#show controllers serial 0/0
Interface Serial0/0
Hardware is PowerQUICC MPC860
DCE V.35, no clock
R2#show controllers serial 0/0
Interface Serial0/0
Hardware is PowerQUICC MPC860
DTE V.35 clocks stopped.

To resolve this issue, configure clocking on R1s WAN interface:

R1(config)#interface serial 0/0
R1(config-if)#clock rate 2000000

Solution # 2

The issue here is that there is an MTU mismatch between R2 and R3:

R2#show running-config interface serial 0/1
Building configuration…

Current configuration : 95 bytes
!
interface Serial0/1
ip address 10.0.0.9 255.255.255.252
ip mtu 1492
ip ospf 2 area 1
end

R3#show running-config interface serial 1/1
Building configuration…

Current configuration : 102 bytes
!
interface Serial1/1
ip address 10.0.0.10 255.255.255.252
ip ospf 3 area 1
clock rate 128000
end

 

To resolve this issue, you can do one of the following:

  1. Apply the same configuration to R3s WAN interface
  2. Remove this configuration on R2s WAN interface

 

This solution shows the latter of the acceptable solutions:

R2(config)#interface serial 0/0
R2(config-if)#no ip mtu 1492

Solution # 3

The issue here is that the interface configuration on R4 has been applied to the wrong interface. While R4 is connected to R3 via Serial 0/0, the configuration has been applied to Serial 0/1:

R4#show running-config interface serial 0/1
Building configuration…

Current configuration : 83 bytes
!
interface Serial0/1
ip address 10.0.0.14 255.255.255.252
ip ospf 4 area 2
end

To resolve this issue, remove this configuration from Serial 0/1 and apply it instead to Serial 0/0:

R4(config)#default interface serial 0/1
Building configuration…

Interface Serial0/1 set to default configuration
R4(config)#interface serial 0/0
R4(config-if)#ip address 10.0.0.14 255.255.255.252
R4(config-if)#ip ospf 4 area 2
R4(config-if)#exit

Solution # 4

The issue here is that the configuration applied to R2 causes a recursive routing issue because the tunnel source address is learned via the tunnel interface itself:

R2#show running-config interface loopback 0
Building configuration…

Current configuration : 81 bytes
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
ip ospf 2 area 0
end

This can be validated by looking at the contents of the routing table on R3:

R3#show ip route 2.2.2.2 255.255.255.255
Routing entry for 2.2.2.2/32
Known via “ospf 3”, distance 110, metric 11112, type intra area
Last update from 192.168.1.2 on Tunnel0, 00:00:02 ago
Routing Descriptor Blocks:
* 192.168.1.2, from 2.2.2.2, 00:00:02 ago, via Tunnel0
Route metric is 11112, traffic share count is 1

Given this issue, if logging was enabled, you would see the following printed on the console:

R3(config)#logging console
R3(config)#
*Jul 10 04:34:34.091: %OSPF-5-ADJCHG: Process 3, Nbr 2.2.2.2 on Serial1/1 from LOADING to FULL, Loading Done
*Jul 10 04:34:49.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to up
*Jul 10 04:34:50.067: %OSPF-5-ADJCHG: Process 3, Nbr 2.2.2.2 on Tunnel0 from LOADING to FULL, Loading Done
*Jul 10 04:34:58.955: %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing
*Jul 10 04:34:59.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to down
*Jul 10 04:34:59.955: %OSPF-5-ADJCHG: Process 3, Nbr 2.2.2.2 on Tunnel0 from FULL to DOWN, Neighbor Down: Interface down or detached
*Jul 10 04:35:59.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to up
*Jul 10 04:36:00.067: %OSPF-5-ADJCHG: Process 3, Nbr 2.2.2.2 on Tunnel0 from LOADING to FULL, Loading Done
*Jul 10 04:36:08.955: %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing
*Jul 10 04:36:09.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to down
*Jul 10 04:36:09.955: %OSPF-5-ADJCHG: Process 3, Nbr 2.2.2.2 on Tunnel0 from FULL to DOWN, Neighbor Down: Interface down or detached

Recursive routing issues are common when implementing tunneling. It is important to have a solid understanding of routing to avoid these issues. To resolve this issue, assign the Loopback interface to area 1 on R2:

R2(config)#interface loopback 0
R2(config-if)#ip ospf 2 area 1

 

Final Working Router Configurations

R1

 

R1#term len 0
R1#sh run
Building configuration…

Current configuration : 906 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
!
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address 150.1.1.1 255.255.255.0
ip ospf 1 area 0
duplex auto
speed auto
!
interface Serial0/0
ip address 10.0.0.1 255.255.255.252
ip ospf 1 area 0
clock rate 2000000
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
router-id 1.1.1.1
log-adjacency-changes
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end

R1#

 

R2

 

R2#term len 0
R2#sh run
Building configuration…

Current configuration : 1126 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
!
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
ip ospf 2 area 1
!
interface Tunnel0
ip address 192.168.1.2 255.255.255.254
ip ospf 2 area 0
tunnel source 2.2.2.2
tunnel destination 3.3.3.3
!
interface FastEthernet0/0
ip address 150.2.2.2 255.255.255.0
ip ospf 2 area 0
duplex auto
speed auto
!
interface Serial0/0
ip address 10.0.0.2 255.255.255.252
ip ospf 2 area 0
!
interface Serial0/1
ip address 10.0.0.9 255.255.255.252
ip ospf 2 area 1
!
router ospf 2
router-id 2.2.2.2
log-adjacency-changes
area 1 nssa no-summary
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end

R2#

R3

 

R3#term len 0
R3#sh run
Building configuration…

Current configuration : 1624 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
!
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
ip ospf 3 area 1
!
interface Tunnel0
ip address 192.168.1.3 255.255.255.254
ip ospf 3 area 0
tunnel source 3.3.3.3
tunnel destination 2.2.2.2
!
interface FastEthernet0/0
ip address 150.3.3.3 255.255.255.0
duplex auto
speed auto
!
interface Serial1/0
no ip address
shutdown
clock rate 128000
!
interface Serial1/1
ip address 10.0.0.10 255.255.255.252
ip ospf 3 area 1
clock rate 128000
!
interface Serial1/2
ip address 10.0.0.13 255.255.255.252
ip ospf 3 area 2
clock rate 128000
!
interface Serial1/3
no ip address
shutdown
!
interface Serial1/4
no ip address
shutdown
!
interface Serial1/5
no ip address
shutdown
!
interface Serial1/6
no ip address
shutdown
!
interface Serial1/7
no ip address
shutdown
!
router ospf 3
router-id 3.3.3.3
log-adjacency-changes
area 1 nssa
redistribute connected metric-type 1 subnets route-map CONNECTED
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
route-map CONNECTED deny 10
match interface Tunnel0
!
route-map CONNECTED permit 20
match interface FastEthernet0/0
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end

R3#

R4

 

R4#term len 0
R4#sh run
Building configuration…

Current configuration : 887 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
!
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address 150.4.4.4 255.255.255.0
ip ospf 4 area 2
duplex auto
speed auto
!
interface Serial0/0
ip address 10.0.0.14 255.255.255.252
ip ospf 4 area 2
!
interface Serial0/1
no ip address
shutdown
!
router ospf 4
router-id 4.4.4.4
log-adjacency-changes
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end

R4#

Prev

Next

About Us

This is a free bonus site for members of www.howtonetwork.com

Copyright

The content on this copyright Reality Press Ltd.
Copyright Reality Press Ltd.