Lab Objective:
The focus of this lab is to understand branch office connectivity implementation and configuration. Additional technologies include IP routing, FHRPs, and IPsec VPNs.
Lab Topology:
The lab network topology is illustrated below:
|
IMPORTANT NOTE If you are using the www.howtonetwork.net racks, please bring up the LAN interfaces connected to the routers by issuing the no shutdown command on the connected switches. If you are using a home lab with no interface fastethernet 0/0 Alternately, you can simply connect the interfaces to a hub or switch if you have one available in your own lab. |
Task 1
Configure hostnames, IP addressing on all routers as illustrated in the network topology.
Task 2
Configure IP routing as illustrated in the topology. Use AS 65500 for both BGP and EIGRP. Use OSPF process ID 1 for OSPF. Do NOT enable any dynamic routing protocols on the R3-R4 link. However, ensure that R1 and R2 know about this subnet.
Ensure that all routers can each other. Implement the necessary route redistribution so that all routers can ping each other. However, you are NOT allowed to redistribute anything into BGP.
Verify the solution using the appropriate commands on all routers.
Task 3
Configure HSRP on the LAN segment between R1 and R4. Use a VIP of 150.1.1.254. Configure R1 with a priority of 105 and R4 with a priority of 100. Ensure that R4 becomes active gateway when R1s Serial 0/0 interface goes down. When R1s Serial0/0 interface comes up, R1 should wait 30 seconds before it assumes the role of active gateway. Verify your HSRP configuration.
Task 4
Assume that the link between R1 and R2 is secure; however, the link between R3 and R4 is not. Management requests that you configure an IPsec tunnel so that when the R1-R2 link is down, traffic between the 150.1.1.0/24 and 150.2.2.0/24 subnets is encrypted and sent across the R3-R4 link. Do NOT configure a GRE Tunnel. Configure the IPsec solution as follows:
- Use Advanced Encryption Standard (AES) as the encryption algorithm
- Use a 256-bit AES encryption key
- Use pre-shared key authentication with a shared key of CCNP2011
- Use Diffie-Hellman group 5
Test your solution and verify that R1 and R2 can ping each other from their LAN interfaces.