narbiks new foundation for v5 sample

narbik_foundation_sample

this lab is a sample from narbik’s new foundation book v5 which can be downloaded here… 90 pages of free labs…

http://www.micronics.nl/Foundation-v50-Sample.pdf

this first lab was instructive in getting used to how narbik operates. his v5 books should be interesting. below is the topology i used in gns3 to accomplish this lab.

narbik_lab2_gns3

and here is the zipped .net and configs…

narbik_foundation_lab2

have at it…

3.5.g Implement EIGRP [multi-address] named mode

  • 3.5.g [i] Types of families
  • 3.5.g [ii] IPv4 address-family
  • 3.5.g [iii] IPv6 address-family

piece of cake if you are familiar with address families…

eigrp_named_mode

R1(config)#do sh ver
Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 15.2(4)S, RELEASE SOFTWARE (fc1)

you’ll need a relatively new version of ios to support this

use a name instead of a number

R1(config)#router eigrp ?
<1-65535>  Autonomous System
WORD       EIGRP Virtual-Instance Name

R1(config)#router eigrp OZ

R1(config-router)#address-fam ipv4 autonomo 1
R1(config-router-af)#netw 0.0.0.0
R1(config-router-af)#
*Apr 26 14:55:15.199: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.12.2 (FastEthernet1/0) is up: new adjacency

older versions in address-family mode the autonomous system was configured on a separate line… now just put it on the same line with address-fam ipv4

use af-interface mode for interface specific commands:

R1(config-router-af)#af-interface

topology base mode gives you the usual manipualation set:

R1(config-router-af)#topology base
R1(config-router-af-topology)#?
Address Family Topology configuration commands:
auto-summary         Enable automatic network number summarization
default              Set a command to its defaults
default-information  Control distribution of default information
default-metric       Set metric of redistributed routes
distance             Define an administrative distance
distribute-list      Filter entries in eigrp updates
eigrp                EIGRP specific commands
exit-af-topology     Exit from Address Family Topology configuration mode
fast-reroute         Configure Fast-Reroute
maximum-paths        Forward packets over multiple paths
metric               Modify metrics and parameters for advertisement
no                   Negate a command or set its defaults
offset-list          Add or subtract offset from EIGRP metrics
redistribute         Redistribute IPv4 routes from another routing protocol
snmp                 Modify snmp parameters
summary-metric       Specify summary to apply metric/filtering
timers               Adjust topology specific timers
traffic-share        How to compute traffic share over alternate paths
variance             Control load balancing variance

 

 

GNS3 Idle PC HOW-TO

GNS3 How-TO

 

How To Calculate an Idle PC in 0.8.6

 

Historically, and often for new users of GNS3 this can be frustrating. However, in the last couple of releases this has become much more stable, reliable and effective. We will be covering two methods to accomplish this.

 

Method 1

 

  1. Start GNS3 (optional but recommended; run as administrator) and drag a router or two to the workspace. Select the green start button to get it running.
  2. Start a performance monitoring tool as shown below.

ss1_ws_perf_mon

 

Note the high cpu utilization. Selecting a good Idle PC value will remedy this.

 

  1. Right click on a router and select Idle PC from the drop down menu. This will issue a warning; click yes to calculate a new Idle PC value.

idle_pc_warning

 

4. The GNS3 logo will come up on the screen while it is calculating the Idle PC value.

 

3_gns3_logo

 

5. Once that is complete, you will be presented with drop down value choices, as below:

 

4_idle_pc_drop_down

 

6. There should be a few choices for values in the drop down. If presented with a value that has an asterisk *, choose that one.

7. Your cpu utilization should drop significantly once an Idle PC value is selected. If not, repeat the process and select a different value.

 

5_dropping_cpu

 

Method 2 (Preferred)

 

  1. As in method 1, drag a router to the workspace, start it, then select Edit—IOS images and hypervisors.
  2. In the pop-up, Highlight the image you are calculating for and select auto calculation to the right of the empty Idle PC field.

ss6_edit

 

ss7_warning

 

3. Select Yes.

4. GNS3 will calculate the value. Select close.

 

ss8_idle_calculated

 

ss9_tuned

 

 

5. Check performance with your performance monitor.

 

This How-To was performed on a notebook with a lower end Pentium B940 @ 2 GHz with only 4 G ram. Better results can be achieved with more ram and a stronger processor. However, it is safe to say with this latest release the folks at GNS3 have made substantial improvements. A third party program such as Process Lasso can also help with performance issues.

 

In the screenshot below there are 16 7200 routers operational.

ss11_16rtrs

 

Note that while the cpu is doing fine, ram is taking a big hit.

 

 

 

r&s v5 written/lab additions and subtractions

New Lab Topics:

 

  • Interpreting Packet Captures
  • Bidirectional Forwarding Detection (BFD)
  • Multi Address Family (AF) EIGRP
  • Dynamic Multipoint VPN (DMVPN)
  • IPsec
  • IPv6 First Hop Security

 

Topics moved from the Lab to the Written:

 

  • IPv6 Multicast
  • RIPng
  • IPv6 Tunneling
  • IOS AAA with TACACS+ and RADIUS
  • 802.1x
  • Layer 2 QoS
  • Performance Routing (PfR)

 

Topics completely removed:

 

  • Flexlinks
  • ISL
  • Layer 2 Protocol Tunneling
  • Frame-Relay
  • WCCP
  • IOS Firewall
  • IOS IPS
  • RITE
  • RMON
  • RGMP
  • RSVP QoS
  • WRR/SRR

3.6a, 3.6c, 3.6d, 3.6g OSPF

ospf_7to5_nssa

that link above will download the below topology with only ip addressing in place…

ospf_7to5_nssa

put rip v2 on r1 and r2′s connected interfaces:

R1(config-router)#do sh run | sec rip
router rip
version 2
network 0.0.0.0
no auto-summary

R2(config-router)#do sh ip route rip | b Gate
Gateway of last resort is not set

1.0.0.0/24 is subnetted, 1 subnets
R        1.1.1.0 [120/1] via 192.168.12.1, 00:00:19, FastEthernet0/0

configure the ospf networks or interfaces for the areas according to the diagram…

prove the veracity of the ospf domain:

R3(config-router)#do sh ip route ospf | b Gate
Gateway of last resort is not set

2.0.0.0/32 is subnetted, 1 subnets
O        2.2.2.2 [110/2] via 192.168.23.2, 00:04:03, FastEthernet0/1
4.0.0.0/32 is subnetted, 1 subnets
O        4.4.4.4 [110/2] via 192.168.34.4, 00:02:43, FastEthernet0/0
5.0.0.0/32 is subnetted, 1 subnets
O IA     5.5.5.5 [110/3] via 192.168.34.4, 00:01:15, FastEthernet0/0
O IA  192.168.45.0/24 [110/2] via 192.168.34.4, 00:02:26, FastEthernet0/0

foreach address {
2.2.2.2
3.3.3.3
4.4.4.4
5.5.5.5
192.168.23.2
192.168.23.3
192.168.34.3
192.168.34.4
192.168.45.4
192.168.45.5
} { ping $address }

do mutual redistribution on both ends of the network, ie. rip into ospf, ospf int eigrp, etc.

R2(config-router)#do sh run | i redistr
redistribute rip subnets
redistribute ospf 1 metric 6

R5(config-router)#do sh run | i redistr
redistribute ospf 1 metric 1 1 255 255 1500
redistribute eigrp 1 subnets

R6(config-router)#do sh ip route eigrp | b Gate
Gateway of last resort is not set

1.0.0.0/24 is subnetted, 1 subnets
D EX     1.1.1.0 [170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
D EX     2.2.2.2 [170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
3.0.0.0/32 is subnetted, 1 subnets
D EX     3.3.3.3 [170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
4.0.0.0/32 is subnetted, 1 subnets
D EX     4.4.4.4 [170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
5.0.0.0/24 is subnetted, 1 subnets
D EX     5.5.5.0 [170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
D EX  192.168.12.0/24
[170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
D EX  192.168.23.0/24
[170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
D EX  192.168.34.0/24
[170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0
D EX  192.168.45.0/24
[170/2560002816] via 192.168.56.5, 00:01:33, FastEthernet0/0

R1(config-router)#do sh ip route rip | b Gate
Gateway of last resort is not set

2.0.0.0/24 is subnetted, 1 subnets
R        2.2.2.0 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
3.0.0.0/32 is subnetted, 1 subnets
R        3.3.3.3 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
4.0.0.0/32 is subnetted, 1 subnets
R        4.4.4.4 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
5.0.0.0/32 is subnetted, 1 subnets
R        5.5.5.5 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
6.0.0.0/24 is subnetted, 1 subnets
R        6.6.6.0 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
R     192.168.23.0/24 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
R     192.168.34.0/24 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
R     192.168.45.0/24 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0
R     192.168.56.0/24 [120/6] via 192.168.12.2, 00:00:06, FastEthernet0/0

note all the routes end to end…

R1(config-router)#do ping 6.6.6.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!

make router 4 the nssa abr and router 5 the nssa asbr for area1…

R5(config-router)#area 1 nssa
R5(config-router)#
*Apr 18 16:21:46.351: %OSPF-5-ADJCHG: Process 1, Nbr 4.4.4.4 on FastEthernet0/1 from FULL to DOWN, Neighbor Down: Adjacency forced to reset
R5(config-router)#
*Apr 18 16:21:49.927: %OSPF-5-ADJCHG: Process 1, Nbr 4.4.4.4 on FastEthernet0/1 from LOADING to FULL, Loading Done

 

 

 

 

 

 

 

6.2.b Implement, optimize and troubleshoot QoS using MQC

  • 6.2.b [ii] Network based application recognition [NBAR]
  • 6.2.b [iii] Marking using IP precedence, DSCP, CoS, ECN

ripv2

put nbar on f0/0 of r2

R2#sh run | sec 0/0
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
ip nbar protocol-discovery

ping r4

R4#ping 4.4.4.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/8/8 ms

look at nbar on r2

R2#sh ip nbar protocol-d proto icmp

FastEthernet0/0

Last clearing of “show ip nbar protocol-discovery” counters 00:05:45

Input                    Output
—–                    ——
Protocol                 Packet Count             Packet Count
Byte Count               Byte Count
5min Bit Rate (bps)      5min Bit Rate (bps)
5min Max Bit Rate (bps)  5min Max Bit Rate (bps)
———————— ———————— ————————
icmp                     0                        0
0                        0
0                        0
0                        0
Total                    15                       99

make a class map for icmp on r2

R2#sh class-map ICMP-CLASS
Class Map match-all ICMP-CLASS (id 1)
Match protocol  icmp

put a policy on the class to mark it with dscp

R2#sh policy-map
Policy Map ICMP-POLICY
Class ICMP-CLASS
set dscp af41

put a service policy input on the interface

R2#sh run int f0/0
Building configuration…

Current configuration : 147 bytes
!
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
ip nbar protocol-discovery
duplex full
service-policy input ICMP-POLICY

R2#sh policy-map int
FastEthernet0/0

Service-policy input: ICMP-POLICY

Class-map: ICMP-CLASS (match-all)
25 packets, 2850 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: protocol icmp
QoS Set
dscp af41
Packets marked 25

prove it with wireshark also

ws_dscp

 

 

 

 

3.4.a Implement and troubleshoot RIPv2

ripv2

rip v2 is on r3 and r2, eigrp is on r1, r2 and r4…

router rip
version 2
network 0.0.0.0

redistribution occurs on r2…

R2#sh run | sec router rip
router rip
version 2
redistribute eigrp 1 metric 5
network 192.168.23.0

R2#sh run | sec eigrp
router eigrp 1
network 192.168.12.0
network 192.168.24.0
 redistribute rip metric 1 1 255 255 1500

R1#sh ip route eigrp | b Gate
Gateway of last resort is not set

D EX  3.0.0.0/8 [170/2560002816] via 192.168.12.2, 00:11:23, FastEthernet0/0
4.0.0.0/24 is subnetted, 1 subnets
D        4.4.4.0 [90/158720] via 192.168.12.2, 00:12:35, FastEthernet0/0
D EX  192.168.23.0/24
           [170/2560002816] via 192.168.12.2, 00:11:23, FastEthernet0/0
D     192.168.24.0/24 [90/30720] via 192.168.12.2, 00:14:52, FastEthernet0/0

rip authentication like eigrp uses key chains…

R3#sh run | sec key
key chain RIP
key 1
key-string cisco

R2(config-if)#do sh run int f1/0
Building configuration…

Current configuration : 166 bytes
!
interface FastEthernet1/0
ip address 192.168.23.2 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP

R3#debug ip rip
RIP protocol debugging is on
R3#
*Apr 17 14:37:23.399: RIP: sending v2 update to 224.0.0.9 via FastEthernet1/0 (192.168.23.3)
*Apr 17 14:37:23.399: RIP: build update entries
*Apr 17 14:37:23.403:   3.0.0.0/8 via 0.0.0.0, metric 1, tag 0
R3#
*Apr 17 14:37:25.399: RIP: sending v2 update to 224.0.0.9 via Loopback0 (3.3.3.3)
*Apr 17 14:37:25.399: RIP: build update entries
*Apr 17 14:37:25.403:   1.0.0.0/8 via 0.0.0.0, metric 6, tag 0
*Apr 17 14:37:25.403:   4.0.0.0/8 via 0.0.0.0, metric 6, tag 0
*Apr 17 14:37:25.407:   192.168.12.0/24 via 0.0.0.0, metric 6, tag 0
*Apr 17 14:37:25.411:   192.168.23.0/24 via 0.0.0.0, metric 1, tag 0
*Apr 17 14:37:25.411:   192.168.24.0/24 via 0.0.0.0, metric 6, tag 0
*Apr 17 14:37:25.423: RIP: ignored v2 packet from 3.3.3.3 (sourced from one of our addresses)
R3#
*Apr 17 14:37:36.311: RIP: received packet with MD5 authentication
*Apr 17 14:37:36.311: RIP: received v2 update from 192.168.23.2 on FastEthernet1/0
*Apr 17 14:37:36.315:      1.0.0.0/8 via 0.0.0.0 in 5 hops
*Apr 17 14:37:36.315:      4.0.0.0/8 via 0.0.0.0 in 5 hops
*Apr 17 14:37:36.319:      192.168.12.0/24 via 0.0.0.0 in 5 hops
*Apr 17 14:37:36.319:      192.168.24.0/24 via 0.0.0.0 in 5 hops
R3#un all
All possible debugging has been turned off