In this lab, I use Olive (JunOS 12.1R1.9) to finish the JNCIP study guide chapter 3 case study lab.
I use two VMWares to run Olive-1 and Olive-2
Olive-1 have logical-systems r1 to r7 and Ovlie-2 have logical-systems RIP.
Note: Due to JNCIP study Guide use old version JunOS (5.2R2.3) and I use JunOS (12.1R1.9). So,
This lab will find some commands different.
Before we start lab, we need to setup some default configuration.
VMware Olive-1:
VMware Olive-2:
VMware Olive-1:
root# delete
root# set system root-authentication plain-text-password
root# set system host-name JNCIP_1
root# commit
root@JNCIP_1# run request system reboot
VMware Olive-2:
root# delete
root# set system root-authentication plain-text-password
root# set system host-name JNCIP_2
root# commit
root@JNCIP_2# run request system reboot
VMware Olive-1 pre-configuration:
set system host-name JNCIP_1
set system time-zone Asia/Taipei
set system authentication-order radius
set system ports auxiliary type vt100
set system root-authentication encrypted-password "$1$9xaCfeIA$DoMiHW7akhvyMpAHebr/R0"
set system radius-server 10.0.200.2 secret "$9$-DbYoDi.z39JG39ApREdbs"
set system login class NOC permissions view
set system login user lab uid 2000
set system login user lab class super-user
set system login user lab authentication encrypted-password "$1$q0M9ehlx$9XZkXwUuPJK1bVFie2FCS."
set system login user noc uid 2001
set system login user noc class NOC
set system login user noc authentication encrypted-password "$1$nutuTWm9$j40sAjOFPTImr7tm/6/pE1"
set system static-host-mapping proctor inet 10.0.200.1
set system services ssh root-login deny
set system services ssh protocol-version v2
set system services telnet
set system syslog user * any emergency
set system syslog host 10.0.200.2 interactive-commands any
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system syslog file r1-cli interactive-commands any
set system syslog file r1-cli archive files 4
set system ntp boot-server 10.0.1.102
set system ntp authentication-key 200 type md5
set system ntp authentication-key 200 value "$9$PTF/uORlK8CtK8X7sYfTz"
set system ntp broadcast-client
set system ntp trusted-key 200
set logical-systems r1 interfaces em1 unit 12 description "Connect to r2 em2.12"
set logical-systems r1 interfaces em1 unit 12 vlan-id 12
set logical-systems r1 interfaces em1 unit 12 family inet address 10.0.4.5/30
set logical-systems r1 interfaces em1 unit 13 description "Connect to r3 em3.13"
set logical-systems r1 interfaces em1 unit 13 vlan-id 13
set logical-systems r1 interfaces em1 unit 13 family inet address 10.0.4.14/30
set logical-systems r1 interfaces em1 unit 129 description "Connect to r2 em2.129"
set logical-systems r1 interfaces em1 unit 129 vlan-id 129
set logical-systems r1 interfaces em1 unit 129 family inet address 10.0.5.1/24
set logical-systems r1 interfaces lo0 unit 1 family inet address 10.0.6.1/32
set logical-systems r2 interfaces em2 unit 12 description "Connect to r1 em1.12"
set logical-systems r2 interfaces em2 unit 12 vlan-id 12
set logical-systems r2 interfaces em2 unit 12 family inet address 10.0.4.6/30
set logical-systems r2 interfaces em2 unit 23 description "Connect to r3 em3.23"
set logical-systems r2 interfaces em2 unit 23 vlan-id 23
set logical-systems r2 interfaces em2 unit 23 family inet address 10.0.4.2/30
set logical-systems r2 interfaces em2 unit 24 description "Connect to r4 em4.24"
set logical-systems r2 interfaces em2 unit 24 vlan-id 24
set logical-systems r2 interfaces em2 unit 24 family inet address 10.0.4.10/30
set logical-systems r2 interfaces em2 unit 129 description "Connect to r1 em1.129"
set logical-systems r2 interfaces em2 unit 129 vlan-id 129
set logical-systems r2 interfaces em2 unit 129 family inet address 10.0.5.2/24
set logical-systems r2 interfaces lo0 unit 2 family inet address 10.0.6.2/32
set logical-systems r3 interfaces em3 unit 13 description "Connecto to r1 em1.13"
set logical-systems r3 interfaces em3 unit 13 vlan-id 13
set logical-systems r3 interfaces em3 unit 13 family inet address 10.0.4.13/30
set logical-systems r3 interfaces em3 unit 23 description "Connecto to r2 em2.23"
set logical-systems r3 interfaces em3 unit 23 vlan-id 23
set logical-systems r3 interfaces em3 unit 23 family inet address 10.0.4.1/30
set logical-systems r3 interfaces em3 unit 34 description "Connecto to r4 em4.34"
set logical-systems r3 interfaces em3 unit 34 vlan-id 34
set logical-systems r3 interfaces em3 unit 34 family inet address 10.0.2.5/30
set logical-systems r3 interfaces em3 unit 35 description "Connecto to r5 em5.35"
set logical-systems r3 interfaces em3 unit 35 vlan-id 35
set logical-systems r3 interfaces em3 unit 35 family inet address 10.0.2.2/30
set logical-systems r3 interfaces lo0 unit 3 family inet address 10.0.3.3/32
set logical-systems r4 interfaces em4 unit 24 description "Connect to r2 em2.24"
set logical-systems r4 interfaces em4 unit 24 vlan-id 24
set logical-systems r4 interfaces em4 unit 24 family inet address 10.0.4.9/30
set logical-systems r4 interfaces em4 unit 34 description "Connect to r3 em3.34"
set logical-systems r4 interfaces em4 unit 34 vlan-id 34
set logical-systems r4 interfaces em4 unit 34 family inet address 10.0.2.6/30
set logical-systems r4 interfaces em4 unit 45 description "Connect to r5 em5.45"
set logical-systems r4 interfaces em4 unit 45 vlan-id 45
set logical-systems r4 interfaces em4 unit 45 family inet address 10.0.2.10/30
set logical-systems r4 interfaces lo0 unit 4 family inet address 10.0.3.4/32
set logical-systems r5 interfaces em5 unit 35 description "Connect to r3 em3.35"
set logical-systems r5 interfaces em5 unit 35 vlan-id 35
set logical-systems r5 interfaces em5 unit 35 family inet address 10.0.2.1/30
set logical-systems r5 interfaces em5 unit 45 description "Connect to r4 em4.45"
set logical-systems r5 interfaces em5 unit 45 vlan-id 45
set logical-systems r5 interfaces em5 unit 45 family inet address 10.0.2.9/30
set logical-systems r5 interfaces em5 unit 56 description "Connect to r6 em6.56"
set logical-systems r5 interfaces em5 unit 56 vlan-id 56
set logical-systems r5 interfaces em5 unit 56 family inet address 10.0.8.6/30
set logical-systems r5 interfaces em5 unit 57 description "Connect to r7 em7.57"
set logical-systems r5 interfaces em5 unit 57 vlan-id 57
set logical-systems r5 interfaces em5 unit 57 family inet address 10.0.8.9/30
set logical-systems r5 interfaces lo0 unit 5 family inet address 10.0.3.5/32
set logical-systems r6 interfaces em6 unit 56 description "Connect to r5 em5.56"
set logical-systems r6 interfaces em6 unit 56 vlan-id 56
set logical-systems r6 interfaces em6 unit 56 family inet address 10.0.8.5/30
set logical-systems r6 interfaces em6 unit 67 description "Connect to r7 em7.67"
set logical-systems r6 interfaces em6 unit 67 vlan-id 67
set logical-systems r6 interfaces em6 unit 67 family inet address 10.0.8.1/30
set logical-systems r6 interfaces em6 unit 68 description "Connect to RIP em1.68"
set logical-systems r6 interfaces em6 unit 68 vlan-id 68
set logical-systems r6 interfaces em6 unit 68 family inet address 172.16.40.2/30
set logical-systems r6 interfaces lo0 unit 6 family inet address 10.0.9.6/32
set logical-systems r7 interfaces em7 unit 57 description "Connect to r5 em5.57"
set logical-systems r7 interfaces em7 unit 57 vlan-id 57
set logical-systems r7 interfaces em7 unit 57 family inet address 10.0.8.10/30
set logical-systems r7 interfaces em7 unit 67 description "Connect to r6 em6.67"
set logical-systems r7 interfaces em7 unit 67 vlan-id 67
set logical-systems r7 interfaces em7 unit 67 family inet address 10.0.8.2/30
set logical-systems r7 interfaces em7 unit 78 description "Connect to RIP em1.78"
set logical-systems r7 interfaces em7 unit 78 vlan-id 78
set logical-systems r7 interfaces em7 unit 78 family inet address 172.16.40.6/30
set logical-systems r7 interfaces lo0 unit 7 family inet address 10.0.9.7/32
set chassis alarm management-ethernet link-down ignore
set interfaces em0 unit 0 family inet address 10.0.1.1/24
set interfaces em1 vlan-tagging
set interfaces em2 vlan-tagging
set interfaces em3 vlan-tagging
set interfaces em4 vlan-tagging
set interfaces em5 vlan-tagging
set interfaces em6 vlan-tagging
set interfaces em7 vlan-tagging
set snmp interface em0.0
set snmp community public authorization read-only
set snmp community private authorization read-write
set snmp trap-group FOO version v1
set snmp trap-group FOO categories authentication
set snmp trap-group FOO targets 10.0.200.2
set routing-options static route 10.0.200.0/24 next-hop 10.0.1.102
set routing-options static route 10.0.200.0/24 no-readvertise
VMware Olive-2 pre-configuration:
set logical-systems RIP interfaces em1 unit 68 description "Connect to r6 em6.68"
set logical-systems RIP interfaces em1 unit 68 vlan-id 68
set logical-systems RIP interfaces em1 unit 68 family inet address 172.16.40.1/30
set logical-systems RIP interfaces em1 unit 78 description "Connect to r7 em7.78"
set logical-systems RIP interfaces em1 unit 78 vlan-id 78
set logical-systems RIP interfaces em1 unit 78 family inet address 172.16.40.5/30
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.0.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.1.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.2.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.3.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.4.1/32
set logical-systems RIP protocols rip group RIP export RIP_OUT
set logical-systems RIP protocols rip group RIP neighbor em1.68
set logical-systems RIP protocols rip group RIP neighbor em1.78
set logical-systems RIP policy-options policy-statement RIP_OUT term 1 from protocol static
set logical-systems RIP policy-options policy-statement RIP_OUT term 1 from protocol rip
set logical-systems RIP policy-options policy-statement RIP_OUT then accept
set logical-systems RIP routing-options static route 192.168.0.0/24 receive
set logical-systems RIP routing-options static route 192.168.1.0/24 receive
set logical-systems RIP routing-options static route 192.168.2.0/24 receive
set logical-systems RIP routing-options static route 192.168.3.0/24 receive
set logical-systems RIP routing-options static route 192.168.4.0/24 receive
set interfaces em1 vlan-tagging
set interfaces em2 vlan-tagging
set interfaces em3 vlan-tagging
set interfaces em4 vlan-tagging
set interfaces em5 vlan-tagging
set interfaces em6 vlan-tagging
Base OSPF configuration:
R1:
set logical-systems r1 protocols ospf area 0.0.0.1 interface em1.12
set logical-systems r1 protocols ospf area 0.0.0.1 interface em1.13
R2:
set logical-systems r2 protocols ospf area 0.0.0.1 interface em2.12
set logical-systems r2 protocols ospf area 0.0.0.1 interface em2.23
set logical-systems r2 protocols ospf area 0.0.0.1 interface em2.24
R3:
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.34
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.35
set logical-systems r3 protocols ospf area 0.0.0.1 interface em3.13
set logical-systems r3 protocols ospf area 0.0.0.1 interface em3.23
R4:
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.34
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.45
set logical-systems r4 protocols ospf area 0.0.0.1 interface em4.24
R5:
set logical-systems r5 protocols ospf area 0.0.0.0 interface em5.35
set logical-systems r5 protocols ospf area 0.0.0.0 interface em5.45
set logical-systems r5 protocols ospf area 0.0.0.20 interface em5.56
set logical-systems r5 protocols ospf area 0.0.0.20 interface em5.57
R6:
set logical-systems r6 protocols ospf area 0.0.0.20 interface em6.56
set logical-systems r6 protocols ospf area 0.0.0.20 interface em6.67
R7:
set logical-systems r7 protocols ospf area 0.0.0.20 interface em7.57
set logical-systems r7 protocols ospf area 0.0.0.20 interface em7.67
Basic RIP setting:
R6:
set logical-systems r6 protocols rip group RIP neighbor em6.68
R7:
set logical-systems r7 protocols rip group RIP neighbor em7.78
Requirements:
1. RID based on lo0 address and reachable via OSPF for all routers.
2. Loopback addresses from the backbone must appear as summary LSAs in area 20.
3. The 10.0.5/25 subnet between r1 and r2 must appear in area 0 as an external route. Ensure that no adjacencies can be established over this subnet.
4. Set the metric of the 10.0.5/24 route to reflect an initial value of 10 and ensure that all routers adjust this value to reflect their internal OSPF cost.
Tag this route with the value 420.
5. Ensure that r1 never generates a network LSA.
6. No type 3 or type 5 LSAs in area 1.
7. You must elect a DR on the 10.0.2.4/30 subnet.
8. Summarize all routes (internal and external) into the backbone area, including the 192.168.x/24 routes from the RIP router.
You must not modify the RIP router’s configuration.
9. Area 0 must use md5 authentication with secret of jnx. Configure r6 and r7 to advertise 10.0.5/24 to the RIP router,
and ensure that the rip metric sent by r7 is higher than that sent from r6.
10. Advertise the 172.16.40.x RIP router subnets as OSPF internal routes, while ensuring that no adjacency can be established over these interfaces.
11. Except for r5, ensure that no single ABR or link failure will break communications between area 1 routers and the RIP router.
12. Optimize routing based on bandwidth, and ensure that all Fast Ethernet interfaces are auto-matically assigned a metric of 10.
You may manually set metrics as needed to allow load balancing from r5 to area 1 internal destinations.
13. No static routes.
14. The 10.0.5/24 subnet must be reachable from the RIP router and the path must be optimal.
OSPF Case Study Configurations:
1. RID based on lo0 address and reachable via OSPF for all routers.
2. Loopback addresses from the backbone must appear as summary LSAs in area 20
R1:
set logical-systems r1 routing-options router-id 10.0.6.1
set logical-systems r1 protocols ospf area 0.0.0.1 interface lo0.1 passive
R2:
set logical-systems r2 routing-options router-id 10.0.6.2
set logical-systems r2 protocols ospf area 0.0.0.1 interface lo0.2 passive
R3:
set logical-systems r3 routing-options router-id 10.0.3.3
set logical-systems r3 protocols ospf area 0.0.0.0 interface lo0.3 passive
R4:
set logical-systems r4 routing-options router-id 10.0.3.4
set logical-systems r4 protocols ospf area 0.0.0.0 interface lo0.4 passive
R5:
set logical-systems r5 routing-options router-id 10.0.3.5
set logical-systems r5 protocols ospf area 0.0.0.0 interface lo0.5 passive
R6:
set logical-systems r6 routing-options router-id 10.0.9.6
set logical-systems r6 protocols ospf area 0.0.0.20 interface lo0.6 passive
R7:
set logical-systems r7 routing-options router-id 10.0.9.7
set logical-systems r7 protocols ospf area 0.0.0.20 interface lo0.7 passive
Check:
root@JNCIP_1# run show ospf database advertising-router 10.0.3.5 logical-system r7
OSPF database, Area 0.0.0.20
Type ID Adv Rtr Seq Age Opt Cksum Len
Router 10.0.3.5 10.0.3.5 0x8000000f 34 0x22 0xacdc 48
Summary 10.0.2.0 10.0.3.5 0x80000007 73 0x22 0x4fcb 28
Summary 10.0.2.4 10.0.3.5 0x80000005 38 0x22 0x35e2 28
Summary 10.0.2.8 10.0.3.5 0x80000007 73 0x22 0xfe14 28
Summary 10.0.3.3 10.0.3.5 0x80000003 73 0x22 0x40d7 28
Summary 10.0.3.4 10.0.3.5 0x80000004 73 0x22 0x34e1 28
Summary 10.0.3.5 10.0.3.5 0x80000003 417 0x22 0x22f4 28
Summary 10.0.4.0 10.0.3.5 0x80000003 73 0x22 0x4bd0 28
Summary 10.0.4.4 10.0.3.5 0x80000006 33 0x22 0x27ec 28
Summary 10.0.4.8 10.0.3.5 0x80000004 73 0x22 0xf81a 28
Summary 10.0.4.12 10.0.3.5 0x80000003 73 0x22 0xd23d 28
Summary 10.0.6.1 10.0.3.5 0x80000005 33 0x22 0x39da 28
Summary 10.0.6.2 10.0.3.5 0x80000002 33 0x22 0x35e0 28
[edit]
root@JNCIP_1#
Note: In early version (JunOS 8.5), OSPF will auto announce interface Lo0 as Stub network.
But now is differnet, We need to setting interface Lo0 on the OSPF area level.
3. The 10.0.5/25 subnet between r1 and r2 must appear in area 0 as an external route. Ensure that no adjacencies can be established over this subnet.
4. Set the metric of the 10.0.5/24 route to reflect an initial value of 10 and ensure that all routers adjust this value to reflect their internal OSPF cost.
Tag this route with the value 420.
R1:
set logical-systems r1 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r1 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r1 policy-options policy-statement VL129 term 1 then metric 10
set logical-systems r1 policy-options policy-statement VL129 term 1 then tag 420
set logical-systems r1 policy-options policy-statement VL129 term 1 then external type 1
set logical-systems r1 policy-options policy-statement VL129 term 1 then accept
set logical-systems r1 protocols ospf export VL129
R2:
set logical-systems r2 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r2 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r2 policy-options policy-statement VL129 term 1 then metric 10
set logical-systems r2 policy-options policy-statement VL129 term 1 then tag 420
set logical-systems r2 policy-options policy-statement VL129 term 1 then external type 1
set logical-systems r2 policy-options policy-statement VL129 term 1 then accept
set logical-systems r2 protocols ospf export VL129
Check:
root@JNCIP_1# run show route logical-system r5 10.0.5/24
inet.0: 23 destinations, 23 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.5.0/24 *[OSPF/150] 00:40:01, metric 12, tag 420
> to 10.0.2.2 via em5.35
to 10.0.2.10 via em5.45
[edit]
root@JNCIP_1#
5. Ensure that r1 never generates a network LSA.
R1:
set logical-systems r1 protocols ospf area 0.0.0.1 interface em1.12 priority 0
set logical-systems r1 protocols ospf area 0.0.0.1 interface em1.13 priority 0
Check:
root@JNCIP_1# run show ospf interface logical-system r1
Interface State Area DR ID BDR ID Nbrs
em1.12 DRother 0.0.0.1 10.0.6.2 0.0.0.0 1
em1.13 DRother 0.0.0.1 10.0.3.3 0.0.0.0 1
lo0.1 DRother 0.0.0.1 0.0.0.0 0.0.0.0 0
[edit]
root@JNCIP_1#
[edit]
root@JNCIP_1# run show ospf neighbor detail logical-system r1
Address Interface State ID Pri Dead
10.0.4.6 em1.12 Full 10.0.6.2 128 36
Area 0.0.0.1, opt 0x52, DR 10.0.4.6, BDR 0.0.0.0
Up 00:03:47, adjacent 00:03:07
10.0.4.13 em1.13 Full 10.0.3.3 128 36
Area 0.0.0.1, opt 0x52, DR 10.0.4.13, BDR 0.0.0.0
Up 00:03:47, adjacent 00:03:03
[edit]
root@JNCIP_1#
6. No type 3 or type 5 LSAs in area 1.
R1:
set logical-systems r1 protocols ospf area 0.0.0.1 nssa
R2:
set logical-systems r2 protocols ospf area 0.0.0.1 nssa
R3:
set logical-systems r3 protocols ospf area 0.0.0.1 nssa default-lsa default-metric 10
set logical-systems r3 protocols ospf area 0.0.0.1 nssa default-lsa metric-type 1
set logical-systems r3 protocols ospf area 0.0.0.1 nssa default-lsa type-7
set logical-systems r3 protocols ospf area 0.0.0.1 nssa no-summaries
R4:
set logical-systems r4 protocols ospf area 0.0.0.1 nssa default-lsa default-metric 10
set logical-systems r4 protocols ospf area 0.0.0.1 nssa default-lsa metric-type 1
set logical-systems r4 protocols ospf area 0.0.0.1 nssa default-lsa type-7
set logical-systems r4 protocols ospf area 0.0.0.1 nssa no-summaries
Check:
root@JNCIP_1# run show ospf database netsummary logical-system r1
[edit]
root@JNCIP_1# run show ospf database external logical-system r1
[edit]
root@JNCIP_1#
Reference:
http://www.juniper.net/techpubs/en_US/junos12.1/topics/topic-map/ospf-stub-and-not-so-stubby-areas.html
7. You must elect a DR on the 10.0.2.4/30 subnet.
Note: In the book, 10.0.2.4/30 is a Frame Relay network.
R3:
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.34 interface-type nbma
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.34 neighbor 10.0.2.6 eligible
R4:
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.34 interface-type nbma
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.34 neighbor 10.0.2.5
Check:
root@JNCIP_1# run show ospf neighbor logical-system r3
Address Interface State ID Pri Dead
10.0.2.6 em3.34 Full 10.0.3.4 128 109
10.0.2.1 em3.35 Full 10.0.3.5 128 38
10.0.4.14 em3.13 Full 10.0.6.1 0 37
10.0.4.2 em3.23 Full 10.0.6.2 128 36
[edit logical-systems]
root@JNCIP_1#
8. Summarize all routes (internal and external) into the backbone area, including the 192.168.x/24 routes from the RIP router.
You must not modify the RIP router’s configuration.
Note:Our summarization should be check the interface link, loopback and RIP routes, NSSA external route.
R3:
set logical-systems r3 protocols ospf area 0.0.0.1 area-range 10.0.4.0/22
R4:
set logical-systems r4 protocols ospf area 0.0.0.1 area-range 10.0.4.0/22
Note: I had make a mistake:
set logical-systems r4 protocols ospf area 0.0.0.1 nssa area-range 10.0.4.0/22
This command is summary the NSSA route (LAS Type-7)!!
Note: RIP routes type 5 LSAs can be summarized only at the originating ASBR. We will export OSPF routes to RIP domain later.
R6:
set logical-systems r6 policy-options policy-statement RIP>OSPF term 1 from protocol aggregate
set logical-systems r6 policy-options policy-statement RIP>OSPF term 1 from route-filter 192.168.0.0/22 exact
set logical-systems r6 policy-options policy-statement RIP>OSPF term 1 then accept
set logical-systems r6 routing-options aggregate route 192.168.0.0/22
set logical-systems r6 protocols ospf export RIP>OSPF
R7:
set logical-systems r7 policy-options policy-statement RIP>OSPF term 1 from protocol aggregate
set logical-systems r7 policy-options policy-statement RIP>OSPF term 1 from route-filter 192.168.0.0/22 exact
set logical-systems r7 policy-options policy-statement RIP>OSPF term 1 then accept
set logical-systems r7 routing-options aggregate route 192.168.0.0/22
set logical-systems r7 protocols ospf export RIP>OSPF
R5:
set logical-systems r5 protocols ospf area 0.0.0.20 area-range 10.0.8.0/21
set logical-systems r5 protocols ospf area 0.0.0.20 area-range 172.16.40.0/28
9. Area 0 must use md5 authentication with secret of jnx. Configure r6 and r7 to advertise 10.0.5/24 to the RIP router,
and ensure that the rip metric sent by r7 is higher than that sent from r6.
R3:
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.34 authentication md5 1 key jnx
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.35 authentication md5 1 key jnx
R4:
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.34 authentication md5 1 key jnx
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.45 authentication md5 1 key jnx
R5:
set logical-systems r5 protocols ospf area 0.0.0.0 interface em5.35 authentication md5 1 key jnx
set logical-systems r5 protocols ospf area 0.0.0.0 interface em5.45 authentication md5 1 key jnx
R6:
set logical-systems r6 policy-options policy-statement OSPF>RIP term 1 from protocol ospf
set logical-systems r6 policy-options policy-statement OSPF>RIP term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r6 policy-options policy-statement OSPF>RIP term 1 then accept
set logical-systems r6 policy-options policy-statement OSPF>RIP term 2 then reject
set logical-systems r6 protocols rip group RIP metric-out 1
set logical-systems r6 protocols rip group RIP export OSPF>RIP
R7:
set logical-systems r7 policy-options policy-statement OSPF>RIP term 1 from protocol ospf
set logical-systems r7 policy-options policy-statement OSPF>RIP term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r7 policy-options policy-statement OSPF>RIP term 1 then accept
set logical-systems r7 policy-options policy-statement OSPF>RIP term 2 then reject
set logical-systems r7 protocols rip group RIP metric-out 2
set logical-systems r7 protocols rip group RIP export OSPF>RIP
check:
RIP:
root@JNCIP_2> show route logical-system RIP 10.0.5.0/24
inet.0: 16 destinations, 16 routes (15 active, 1 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.5.0/24 [RIP/100] 00:00:45, metric 2, tag 420
> to 172.16.40.2 via em1.68
root@JNCIP_2>
10. Advertise the 172.16.40.x RIP router subnets as OSPF internal routes, while ensuring that no adjacency can be established over these interfaces.
R6:
set logical-systems r6 protocols ospf area 0.0.0.20 interface em6.68 passive
R7:
set logical-systems r7 protocols ospf area 0.0.0.20 interface em7.78 passive
In this time, the Sub-optimal Path issue will happen on the R6 or R7!!
You will find R7 go to 10.0.5.0 via R6 but the optimal path is via R5.
root@JNCIP_1# run show route logical-system r7 10.0.5.0
inet.0: 31 destinations, 34 routes (31 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.5.0/24 *[RIP/100] 01:12:36, metric 3, tag 420
> to 172.16.40.5 via em7.78
[OSPF/150] 01:12:40, metric 14, tag 420
> to 10.0.8.9 via em7.57
[edit logical-systems]
root@JNCIP_1#
Note: We have two soluitions, first one is to setup router r6 & r7 only receiving 192.168.0.0/24-32 from router RIP which is book soultion.
Two, is change source from router RIP and network 10.0.5.0/24 preference value.
Solution 1: (Note: term 2 is necessary, due to RIP by defulte, accept all RIP routes.)
R6:
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 1 from protocol rip
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 1 from route-filter 192.168.0.0/24 orlonger
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 1 then accept
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 2 then reject
set logical-systems r6 protocols rip group RIP import RIP>IMPORT
R7:
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 1 from protocol rip
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 1 from route-filter 192.168.0.0/24 orlonger
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 1 then accept
set logical-systems r6 policy-options policy-statement RIP>IMPORT term 2 then reject
set logical-systems r7 protocols rip group RIP import RIP>IMPORT
Check:
root@JNCIP_1# run show route logical-system r7 10.0.5.0
inet.0: 23 destinations, 24 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.5.0/24 *[OSPF/150] 00:05:38, metric 14, tag 420
> to 10.0.8.9 via em7.57
[edit logical-systems]
root@JNCIP_1#
Solution 2:
R6:
set logical-systems r6 policy-options policy-statement RIP>IMPORT-2 from protocol rip
set logical-systems r6 policy-options policy-statement RIP>IMPORT-2 from route-filter 10.0.5.0/24 exact
set logical-systems r6 policy-options policy-statement RIP>IMPORT-2 then preference 155
set logical-systems r6 protocols rip group RIP import RIP>IMPORT-2
R7:
set logical-systems r7 policy-options policy-statement RIP>IMPORT-2 term 1 from protocol rip
set logical-systems r7 policy-options policy-statement RIP>IMPORT-2 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r7 policy-options policy-statement RIP>IMPORT-2 term 1 then preference 155
set logical-systems r7 protocols rip group RIP import RIP>IMPORT-2
Check:
root@JNCIP_1# run show route logical-system r7 10.0.5.0
inet.0: 31 destinations, 34 routes (31 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.5.0/24 *[OSPF/150] 00:00:49, metric 14, tag 420
> to 10.0.8.9 via em7.57
[RIP/155] 00:00:43, metric 3, tag 420
> to 172.16.40.5 via em7.78
[edit logical-systems]
root@JNCIP_1#
11. Except for r5, ensure that no single ABR or link failure will break communications between area 1 routers and the RIP router.
Note: We just need to check there are two default route sending from R3 and R4.
R6 & R7 also need to announce 192.168.0.0 network into OSPF domain.
check:
root@JNCIP_1# run show ospf database nssa logical-system r1
OSPF database, Area 0.0.0.1
Type ID Adv Rtr Seq Age Opt Cksum Len
NSSA 0.0.0.0 10.0.3.3 0x8000000e 9 0x20 0x48c3 36
NSSA 0.0.0.0 10.0.3.4 0x8000000e 49 0x20 0x42c8 36
NSSA *10.0.5.0 10.0.6.1 0x8000000c 47 0x28 0x80be 36
NSSA 10.0.5.0 10.0.6.2 0x8000000f 48 0x28 0x82b7 36
[edit logical-systems]
root@JNCIP_1#
root@JNCIP_1# run show ospf database external logical-system r5
OSPF AS SCOPE link state database
Type ID Adv Rtr Seq Age Opt Cksum Len
Extern 10.0.5.0 10.0.3.4 0x8000000b 46 0x22 0xa3d 36
Extern 192.168.0.0 10.0.9.6 0x8000000d 86 0x22 0x6abc 36
Extern 192.168.0.0 10.0.9.7 0x8000000d 86 0x22 0x64c1 36
[edit logical-systems]
root@JNCIP_1#
12. Optimize routing based on bandwidth, and ensure that all Fast Ethernet interfaces are auto-matically assigned a metric of 10.
You may manually set metrics as needed to allow load balancing from r5 to area 1 internal destinations.
R1:
set logical-systems r1 protocols ospf reference-bandwidth 1g
R2:
set logical-systems r2 protocols ospf reference-bandwidth 1g
R3:
set logical-systems r3 protocols ospf reference-bandwidth 1g
R4:
set logical-systems r4 protocols ospf reference-bandwidth 1g
R5:
set logical-systems r5 protocols ospf reference-bandwidth 1g
R6:
set logical-systems r6 protocols ospf reference-bandwidth 1g
R7:
set logical-systems r7 protocols ospf reference-bandwidth 1g
R3:
set logical-systems r3 protocols ospf area 0.0.0.1 interface em3.23 metric 2
set logical-systems r3 protocols ospf area 0.0.0.1 interface em3.13 metric 2
Check:
root@JNCIP_1# run show route logical-system r5 10.0.4.4
inet.0: 23 destinations, 23 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.4.0/22 *[OSPF/10] 00:07:50, metric 4
to 10.0.2.2 via em5.35
> to 10.0.2.10 via em5.45
[edit logical-systems]
root@JNCIP_1#
13. No static routes.
14. The 10.0.5/24 subnet must be reachable from the RIP router and the path must be optimal.
Check:
root@JNCIP_2# run traceroute 10.0.5.1 logical-system RIP
traceroute to 10.0.5.1 (10.0.5.1), 30 hops max, 40 byte packets
1 172.16.40.2 (172.16.40.2) 0.245 ms 0.250 ms 0.180 ms
2 10.0.8.6 (10.0.8.6) 0.270 ms 0.298 ms 0.261 ms
3 10.0.2.2 (10.0.2.2) 0.356 ms 0.362 ms 0.479 ms
4 10.0.4.2 (10.0.4.2) 0.855 ms 0.627 ms 1.026 ms
5 10.0.5.1 (10.0.5.1) 0.514 ms 0.735 ms 0.478 ms
[edit]
root@JNCIP_2#
Final configuration:
VMware Olive-1:
root@JNCIP_1# show | display set
set version 12.1R1.9
set system host-name JNCIP_1
set system time-zone Asia/Taipei
set system authentication-order radius
set system ports auxiliary type vt100
set system root-authentication encrypted-password "$1$9xaCfeIA$DoMiHW7akhvyMpAHebr/R0"
set system radius-server 10.0.200.2 secret "$9$-DbYoDi.z39JG39ApREdbs"
set system login class NOC permissions view
set system login user lab uid 2000
set system login user lab class super-user
set system login user lab authentication encrypted-password "$1$q0M9ehlx$9XZkXwUuPJK1bVFie2FCS."
set system login user noc uid 2001
set system login user noc class NOC
set system login user noc authentication encrypted-password "$1$nutuTWm9$j40sAjOFPTImr7tm/6/pE1"
set system static-host-mapping proctor inet 10.0.200.1
set system services ssh root-login deny
set system services ssh protocol-version v2
set system services telnet
set system syslog user * any emergency
set system syslog host 10.0.200.2 interactive-commands any
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system syslog file r1-cli interactive-commands any
set system syslog file r1-cli archive files 4
set system ntp boot-server 10.0.1.102
set system ntp authentication-key 200 type md5
set system ntp authentication-key 200 value "$9$PTF/uORlK8CtK8X7sYfTz"
set system ntp broadcast-client
set system ntp trusted-key 200
set logical-systems r1 interfaces em1 unit 12 description "Connect to r2 em2.12"
set logical-systems r1 interfaces em1 unit 12 vlan-id 12
set logical-systems r1 interfaces em1 unit 12 family inet address 10.0.4.5/30
set logical-systems r1 interfaces em1 unit 13 description "Connect to r3 em3.13"
set logical-systems r1 interfaces em1 unit 13 vlan-id 13
set logical-systems r1 interfaces em1 unit 13 family inet address 10.0.4.14/30
set logical-systems r1 interfaces em1 unit 129 description "Connect to r2 em2.129"
set logical-systems r1 interfaces em1 unit 129 vlan-id 129
set logical-systems r1 interfaces em1 unit 129 family inet address 10.0.5.1/24
set logical-systems r1 interfaces lo0 unit 1 family inet address 10.0.6.1/32
set logical-systems r1 protocols ospf export VL129
set logical-systems r1 protocols ospf reference-bandwidth 1g
set logical-systems r1 protocols ospf area 0.0.0.1 nssa
set logical-systems r1 protocols ospf area 0.0.0.1 interface em1.12 priority 0
set logical-systems r1 protocols ospf area 0.0.0.1 interface em1.13 priority 0
set logical-systems r1 protocols ospf area 0.0.0.1 interface lo0.1 passive
set logical-systems r1 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r1 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r1 policy-options policy-statement VL129 term 1 then metric 10
set logical-systems r1 policy-options policy-statement VL129 term 1 then tag 420
set logical-systems r1 policy-options policy-statement VL129 term 1 then external type 1
set logical-systems r1 policy-options policy-statement VL129 term 1 then accept
set logical-systems r1 routing-options router-id 10.0.6.1
set logical-systems r2 interfaces em2 unit 12 description "Connect to r1 em1.12"
set logical-systems r2 interfaces em2 unit 12 vlan-id 12
set logical-systems r2 interfaces em2 unit 12 family inet address 10.0.4.6/30
set logical-systems r2 interfaces em2 unit 23 description "Connect to r3 em3.23"
set logical-systems r2 interfaces em2 unit 23 vlan-id 23
set logical-systems r2 interfaces em2 unit 23 family inet address 10.0.4.2/30
set logical-systems r2 interfaces em2 unit 24 description "Connect to r4 em4.24"
set logical-systems r2 interfaces em2 unit 24 vlan-id 24
set logical-systems r2 interfaces em2 unit 24 family inet address 10.0.4.10/30
set logical-systems r2 interfaces em2 unit 129 description "Connect to r1 em1.129"
set logical-systems r2 interfaces em2 unit 129 vlan-id 129
set logical-systems r2 interfaces em2 unit 129 family inet address 10.0.5.2/24
set logical-systems r2 interfaces lo0 unit 2 family inet address 10.0.6.2/32
set logical-systems r2 protocols ospf export VL129
set logical-systems r2 protocols ospf reference-bandwidth 1g
set logical-systems r2 protocols ospf area 0.0.0.1 nssa
set logical-systems r2 protocols ospf area 0.0.0.1 interface em2.12
set logical-systems r2 protocols ospf area 0.0.0.1 interface em2.23
set logical-systems r2 protocols ospf area 0.0.0.1 interface em2.24
set logical-systems r2 protocols ospf area 0.0.0.1 interface lo0.2 passive
set logical-systems r2 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r2 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r2 policy-options policy-statement VL129 term 1 then metric 10
set logical-systems r2 policy-options policy-statement VL129 term 1 then tag 420
set logical-systems r2 policy-options policy-statement VL129 term 1 then external type 1
set logical-systems r2 policy-options policy-statement VL129 term 1 then accept
set logical-systems r2 routing-options router-id 10.0.6.2
set logical-systems r3 interfaces em3 unit 13 description "Connecto to r1 em1.13"
set logical-systems r3 interfaces em3 unit 13 vlan-id 13
set logical-systems r3 interfaces em3 unit 13 family inet address 10.0.4.13/30
set logical-systems r3 interfaces em3 unit 23 description "Connecto to r2 em2.23"
set logical-systems r3 interfaces em3 unit 23 vlan-id 23
set logical-systems r3 interfaces em3 unit 23 family inet address 10.0.4.1/30
set logical-systems r3 interfaces em3 unit 34 description "Connecto to r4 em4.34"
set logical-systems r3 interfaces em3 unit 34 vlan-id 34
set logical-systems r3 interfaces em3 unit 34 family inet address 10.0.2.5/30
set logical-systems r3 interfaces em3 unit 35 description "Connecto to r5 em5.35"
set logical-systems r3 interfaces em3 unit 35 vlan-id 35
set logical-systems r3 interfaces em3 unit 35 family inet address 10.0.2.2/30
set logical-systems r3 interfaces lo0 unit 3 family inet address 10.0.3.3/32
set logical-systems r3 protocols ospf reference-bandwidth 1g
set logical-systems r3 protocols ospf area 0.0.0.1 nssa default-lsa default-metric 10
set logical-systems r3 protocols ospf area 0.0.0.1 nssa default-lsa metric-type 1
set logical-systems r3 protocols ospf area 0.0.0.1 nssa default-lsa type-7
set logical-systems r3 protocols ospf area 0.0.0.1 nssa no-summaries
set logical-systems r3 protocols ospf area 0.0.0.1 area-range 10.0.4.0/22
set logical-systems r3 protocols ospf area 0.0.0.1 interface em3.23 metric 2
set logical-systems r3 protocols ospf area 0.0.0.1 interface em3.13 metric 2
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.34 interface-type nbma
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.34 authentication md5 1 key "$9$PTF/cSeK87"
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.34 neighbor 10.0.2.6 eligible
set logical-systems r3 protocols ospf area 0.0.0.0 interface em3.35 authentication md5 1 key "$9$c0krK84oGUHm"
set logical-systems r3 protocols ospf area 0.0.0.0 interface lo0.3 passive
set logical-systems r3 routing-options router-id 10.0.3.3
set logical-systems r4 interfaces em4 unit 24 description "Connect to r2 em2.24"
set logical-systems r4 interfaces em4 unit 24 vlan-id 24
set logical-systems r4 interfaces em4 unit 24 family inet address 10.0.4.9/30
set logical-systems r4 interfaces em4 unit 34 description "Connect to r3 em3.34"
set logical-systems r4 interfaces em4 unit 34 vlan-id 34
set logical-systems r4 interfaces em4 unit 34 family inet address 10.0.2.6/30
set logical-systems r4 interfaces em4 unit 45 description "Connect to r5 em5.45"
set logical-systems r4 interfaces em4 unit 45 vlan-id 45
set logical-systems r4 interfaces em4 unit 45 family inet address 10.0.2.10/30
set logical-systems r4 interfaces lo0 unit 4 family inet address 10.0.3.4/32
set logical-systems r4 protocols ospf reference-bandwidth 1g
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.34 interface-type nbma
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.34 authentication md5 1 key "$9$OIrTIhrVb2gJD"
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.34 neighbor 10.0.2.5
set logical-systems r4 protocols ospf area 0.0.0.0 interface em4.45 authentication md5 1 key "$9$NPVs4PfzF/t"
set logical-systems r4 protocols ospf area 0.0.0.0 interface lo0.4 passive
set logical-systems r4 protocols ospf area 0.0.0.1 nssa default-lsa default-metric 10
set logical-systems r4 protocols ospf area 0.0.0.1 nssa default-lsa metric-type 1
set logical-systems r4 protocols ospf area 0.0.0.1 nssa default-lsa type-7
set logical-systems r4 protocols ospf area 0.0.0.1 nssa no-summaries
set logical-systems r4 protocols ospf area 0.0.0.1 area-range 10.0.4.0/22
set logical-systems r4 protocols ospf area 0.0.0.1 interface em4.24
set logical-systems r4 routing-options router-id 10.0.3.4
set logical-systems r5 interfaces em5 unit 35 description "Connect to r3 em3.35"
set logical-systems r5 interfaces em5 unit 35 vlan-id 35
set logical-systems r5 interfaces em5 unit 35 family inet address 10.0.2.1/30
set logical-systems r5 interfaces em5 unit 45 description "Connect to r4 em4.45"
set logical-systems r5 interfaces em5 unit 45 vlan-id 45
set logical-systems r5 interfaces em5 unit 45 family inet address 10.0.2.9/30
set logical-systems r5 interfaces em5 unit 56 description "Connect to r6 em6.56"
set logical-systems r5 interfaces em5 unit 56 vlan-id 56
set logical-systems r5 interfaces em5 unit 56 family inet address 10.0.8.6/30
set logical-systems r5 interfaces em5 unit 57 description "Connect to r7 em7.57"
set logical-systems r5 interfaces em5 unit 57 vlan-id 57
set logical-systems r5 interfaces em5 unit 57 family inet address 10.0.8.9/30
set logical-systems r5 interfaces lo0 unit 5 family inet address 10.0.3.5/32
set logical-systems r5 protocols ospf reference-bandwidth 1g
set logical-systems r5 protocols ospf area 0.0.0.0 interface em5.35 authentication md5 1 key "$9$2foZjn6AtOR"
set logical-systems r5 protocols ospf area 0.0.0.0 interface em5.45 authentication md5 1 key "$9$F7rr6CuKvLX-w"
set logical-systems r5 protocols ospf area 0.0.0.0 interface lo0.5 passive
set logical-systems r5 protocols ospf area 0.0.0.20 area-range 10.0.8.0/21
set logical-systems r5 protocols ospf area 0.0.0.20 area-range 172.16.40.0/28
set logical-systems r5 protocols ospf area 0.0.0.20 interface em5.56
set logical-systems r5 protocols ospf area 0.0.0.20 interface em5.57
set logical-systems r5 routing-options router-id 10.0.3.5
set logical-systems r6 interfaces em6 unit 56 description "Connect to r5 em5.56"
set logical-systems r6 interfaces em6 unit 56 vlan-id 56
set logical-systems r6 interfaces em6 unit 56 family inet address 10.0.8.5/30
set logical-systems r6 interfaces em6 unit 67 description "Connect to r7 em7.67"
set logical-systems r6 interfaces em6 unit 67 vlan-id 67
set logical-systems r6 interfaces em6 unit 67 family inet address 10.0.8.1/30
set logical-systems r6 interfaces em6 unit 68 description "Connect to RIP em1.68"
set logical-systems r6 interfaces em6 unit 68 vlan-id 68
set logical-systems r6 interfaces em6 unit 68 family inet address 172.16.40.2/30
set logical-systems r6 interfaces lo0 unit 6 family inet address 10.0.9.6/32
set logical-systems r6 protocols ospf export RIP>OSPF
set logical-systems r6 protocols ospf reference-bandwidth 1g
set logical-systems r6 protocols ospf area 0.0.0.20 interface em6.56
set logical-systems r6 protocols ospf area 0.0.0.20 interface em6.67
set logical-systems r6 protocols ospf area 0.0.0.20 interface lo0.6 passive
set logical-systems r6 protocols ospf area 0.0.0.20 interface em6.68 passive
set logical-systems r6 protocols rip group RIP metric-out 1
set logical-systems r6 protocols rip group RIP export OSPF>RIP
set logical-systems r6 protocols rip group RIP import RIP>IMPORT-1
set logical-systems r6 protocols rip group RIP neighbor em6.68
set logical-systems r6 policy-options policy-statement OSPF>RIP term 1 from protocol ospf
set logical-systems r6 policy-options policy-statement OSPF>RIP term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r6 policy-options policy-statement OSPF>RIP term 1 then accept
set logical-systems r6 policy-options policy-statement OSPF>RIP term 2 then reject
set logical-systems r6 policy-options policy-statement RIP>IMPORT-1 term 1 from protocol rip
set logical-systems r6 policy-options policy-statement RIP>IMPORT-1 term 1 from route-filter 192.168.0.0/24 orlonger
set logical-systems r6 policy-options policy-statement RIP>IMPORT-1 term 1 then accept
set logical-systems r6 policy-options policy-statement RIP>IMPORT-1 term 2 then reject
set logical-systems r6 policy-options policy-statement RIP>IMPORT-2 from protocol rip
set logical-systems r6 policy-options policy-statement RIP>IMPORT-2 from route-filter 10.0.5.0/24 exact
set logical-systems r6 policy-options policy-statement RIP>IMPORT-2 then preference 155
set logical-systems r6 policy-options policy-statement RIP>OSPF term 1 from protocol aggregate
set logical-systems r6 policy-options policy-statement RIP>OSPF term 1 from route-filter 192.168.0.0/22 exact
set logical-systems r6 policy-options policy-statement RIP>OSPF term 1 then accept
set logical-systems r6 routing-options aggregate route 192.168.0.0/22
set logical-systems r6 routing-options router-id 10.0.9.6
set logical-systems r7 interfaces em7 unit 57 description "Connect to r5 em5.57"
set logical-systems r7 interfaces em7 unit 57 vlan-id 57
set logical-systems r7 interfaces em7 unit 57 family inet address 10.0.8.10/30
set logical-systems r7 interfaces em7 unit 67 description "Connect to r6 em6.67"
set logical-systems r7 interfaces em7 unit 67 vlan-id 67
set logical-systems r7 interfaces em7 unit 67 family inet address 10.0.8.2/30
set logical-systems r7 interfaces em7 unit 78 description "Connect to RIP em1.78"
set logical-systems r7 interfaces em7 unit 78 vlan-id 78
set logical-systems r7 interfaces em7 unit 78 family inet address 172.16.40.6/30
set logical-systems r7 interfaces lo0 unit 7 family inet address 10.0.9.7/32
set logical-systems r7 protocols ospf export RIP>OSPF
set logical-systems r7 protocols ospf reference-bandwidth 1g
set logical-systems r7 protocols ospf area 0.0.0.20 interface em7.57
set logical-systems r7 protocols ospf area 0.0.0.20 interface em7.67
set logical-systems r7 protocols ospf area 0.0.0.20 interface lo0.7 passive
set logical-systems r7 protocols ospf area 0.0.0.20 interface em7.78 passive
set logical-systems r7 protocols rip group RIP metric-out 2
set logical-systems r7 protocols rip group RIP export OSPF>RIP
set logical-systems r7 protocols rip group RIP import RIP>IMPORT-1
set logical-systems r7 protocols rip group RIP neighbor em7.78
set logical-systems r7 policy-options policy-statement OSPF>RIP term 1 from protocol ospf
set logical-systems r7 policy-options policy-statement OSPF>RIP term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r7 policy-options policy-statement OSPF>RIP term 1 then accept
set logical-systems r7 policy-options policy-statement OSPF>RIP term 2 then reject
set logical-systems r7 policy-options policy-statement RIP>IMPORT-1 term 1 from protocol rip
set logical-systems r7 policy-options policy-statement RIP>IMPORT-1 term 1 from route-filter 192.168.0.0/24 orlonger
set logical-systems r7 policy-options policy-statement RIP>IMPORT-1 term 1 then accept
set logical-systems r7 policy-options policy-statement RIP>IMPORT-1 term 2 then reject
set logical-systems r7 policy-options policy-statement RIP>IMPORT-2 term 1 from protocol rip
set logical-systems r7 policy-options policy-statement RIP>IMPORT-2 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r7 policy-options policy-statement RIP>IMPORT-2 term 1 then preference 155
set logical-systems r7 policy-options policy-statement RIP>OSPF term 1 from protocol aggregate
set logical-systems r7 policy-options policy-statement RIP>OSPF term 1 from route-filter 192.168.0.0/22 exact
set logical-systems r7 policy-options policy-statement RIP>OSPF term 1 then accept
set logical-systems r7 routing-options aggregate route 192.168.0.0/22
set logical-systems r7 routing-options router-id 10.0.9.7
set chassis alarm management-ethernet link-down ignore
set interfaces em0 unit 0 family inet address 10.0.1.1/24
set interfaces em1 vlan-tagging
set interfaces em2 vlan-tagging
set interfaces em3 vlan-tagging
set interfaces em4 vlan-tagging
set interfaces em5 vlan-tagging
set interfaces em6 vlan-tagging
set interfaces em7 vlan-tagging
set snmp interface em0.0
set snmp community public authorization read-only
set snmp community private authorization read-write
set snmp trap-group FOO version v1
set snmp trap-group FOO categories authentication
set snmp trap-group FOO targets 10.0.200.2
set routing-options static route 10.0.200.0/24 next-hop 10.0.1.102
set routing-options static route 10.0.200.0/24 no-readvertise
[edit]
root@JNCIP_1#
VMware Olive-2:
root@JNCIP_2# show | display set
set version 12.1R1.9
set system host-name JNCIP_2
set system root-authentication encrypted-password "$1$5bfCL6uX$DlJ/81p.yu2.aai.8e7tA1"
set logical-systems RIP interfaces em1 unit 68 description "Connect to r6 em6.68"
set logical-systems RIP interfaces em1 unit 68 vlan-id 68
set logical-systems RIP interfaces em1 unit 68 family inet address 172.16.40.1/30
set logical-systems RIP interfaces em1 unit 78 description "Connect to r7 em7.78"
set logical-systems RIP interfaces em1 unit 78 vlan-id 78
set logical-systems RIP interfaces em1 unit 78 family inet address 172.16.40.5/30
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.0.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.1.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.2.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.3.1/32
set logical-systems RIP interfaces lo0 unit 8 family inet address 192.168.4.1/32
set logical-systems RIP protocols rip group RIP export RIP_OUT
set logical-systems RIP protocols rip group RIP neighbor em1.68
set logical-systems RIP protocols rip group RIP neighbor em1.78
set logical-systems RIP policy-options policy-statement RIP_OUT term 1 from protocol static
set logical-systems RIP policy-options policy-statement RIP_OUT term 1 from protocol rip
set logical-systems RIP policy-options policy-statement RIP_OUT then accept
set logical-systems RIP routing-options static route 192.168.0.0/24 receive
set logical-systems RIP routing-options static route 192.168.1.0/24 receive
set logical-systems RIP routing-options static route 192.168.2.0/24 receive
set logical-systems RIP routing-options static route 192.168.3.0/24 receive
set logical-systems RIP routing-options static route 192.168.4.0/24 receive
set interfaces em1 vlan-tagging
set interfaces em2 vlan-tagging
set interfaces em3 vlan-tagging
set interfaces em4 vlan-tagging
set interfaces em5 vlan-tagging
set interfaces em6 vlan-tagging
[edit]
root@JNCIP_2#
Reference:
Juniper Networks Certified Internet Professional Study Guide
Chapter 3 Case Study (p.228)
JunOS 12.1 OSPF Configuration Guide
http://www.juniper.net/techpubs/en_US/junos12.1/information-products/pathway-pages/config-guide-routing/config-guide-ospf.html
最初發表 / 最後更新: 2014.05.21 / 2018.06.15
0 comments:
張貼留言