In this lab, I use Olive (JunOS 12.1R1.9) to finish the JNCIP study guide chapter 4 case study lab.
I use two VMWares to run Olive-1 and Olive-2
Olive-1 have run logical-systems r1 to r7 and Ovlie-2 have run logical-systems T1 & OSPF.
Note: Due to JNCIP study Guide use old version JunOS (5.2R2.3) and I use JunOS (12.1R1.9).
So,This lab will find some commands different.
Before we start lab, we need to setup some default configuration.
For VMware Olive-1 & Olive-2 setting:
VMware Olive-1 pre-configuration:
set system host-name JNCIP_1
set system time-zone Asia/Taipei
set system authentication-order radius
set system ports auxiliary type vt100
set system root-authentication encrypted-password "$1$9xaCfeIA$DoMiHW7akhvyMpAHebr/R0"
set system radius-server 10.0.200.2 secret "$9$-DbYoDi.z39JG39ApREdbs"
set system login class NOC permissions view
set system login user lab uid 2000
set system login user lab class super-user
set system login user lab authentication encrypted-password "$1$q0M9ehlx$9XZkXwUuPJK1bVFie2FCS."
set system login user noc uid 2001
set system login user noc class NOC
set system login user noc authentication encrypted-password "$1$nutuTWm9$j40sAjOFPTImr7tm/6/pE1"
set system static-host-mapping proctor inet 10.0.200.1
set system services ssh root-login deny
set system services ssh protocol-version v2
set system services telnet
set system syslog user * any emergency
set system syslog host 10.0.200.2 interactive-commands any
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system syslog file r1-cli interactive-commands any
set system syslog file r1-cli archive files 4
set system ntp boot-server 10.0.1.102
set system ntp authentication-key 200 type md5
set system ntp authentication-key 200 value "$9$PTF/uORlK8CtK8X7sYfTz"
set system ntp broadcast-client
set system ntp trusted-key 200
set logical-systems r1 interfaces em1 unit 12 description "Connect to r2 em2.12"
set logical-systems r1 interfaces em1 unit 12 vlan-id 12
set logical-systems r1 interfaces em1 unit 12 family inet address 10.0.4.5/30
set logical-systems r1 interfaces em1 unit 13 description "Connect to r3 em3.13"
set logical-systems r1 interfaces em1 unit 13 vlan-id 13
set logical-systems r1 interfaces em1 unit 13 family inet address 10.0.4.14/30
set logical-systems r1 interfaces em1 unit 129 description "Connect to r2 em2.129"
set logical-systems r1 interfaces em1 unit 129 vlan-id 129
set logical-systems r1 interfaces em1 unit 129 family inet address 10.0.5.1/24
set logical-systems r1 interfaces lo0 unit 1 family inet address 10.0.6.1/32
set logical-systems r2 interfaces em2 unit 12 description "Connect to r1 em1.12"
set logical-systems r2 interfaces em2 unit 12 vlan-id 12
set logical-systems r2 interfaces em2 unit 12 family inet address 10.0.4.6/30
set logical-systems r2 interfaces em2 unit 23 description "Connect to r3 em3.23"
set logical-systems r2 interfaces em2 unit 23 vlan-id 23
set logical-systems r2 interfaces em2 unit 23 family inet address 10.0.4.2/30
set logical-systems r2 interfaces em2 unit 24 description "Connect to r4 em4.24"
set logical-systems r2 interfaces em2 unit 24 vlan-id 24
set logical-systems r2 interfaces em2 unit 24 family inet address 10.0.4.10/30
set logical-systems r2 interfaces em2 unit 129 description "Connect to r1 em1.129"
set logical-systems r2 interfaces em2 unit 129 vlan-id 129
set logical-systems r2 interfaces em2 unit 129 family inet address 10.0.5.2/24
set logical-systems r2 interfaces lo0 unit 2 family inet address 10.0.6.2/32
set logical-systems r3 interfaces em3 unit 13 description "Connecto to r1 em1.13"
set logical-systems r3 interfaces em3 unit 13 vlan-id 13
set logical-systems r3 interfaces em3 unit 13 family inet address 10.0.4.13/30
set logical-systems r3 interfaces em3 unit 23 description "Connecto to r2 em2.23"
set logical-systems r3 interfaces em3 unit 23 vlan-id 23
set logical-systems r3 interfaces em3 unit 23 family inet address 10.0.4.1/30
set logical-systems r3 interfaces em3 unit 34 description "Connecto to r4 em4.34"
set logical-systems r3 interfaces em3 unit 34 vlan-id 34
set logical-systems r3 interfaces em3 unit 34 family inet address 10.0.2.5/30
set logical-systems r3 interfaces em3 unit 35 description "Connecto to r5 em5.35"
set logical-systems r3 interfaces em3 unit 35 vlan-id 35
set logical-systems r3 interfaces em3 unit 35 family inet address 10.0.2.2/30
set logical-systems r3 interfaces em3 unit 310 description "Connecto to T1 em3.310"
set logical-systems r3 interfaces em3 unit 310 vlan-id 310
set logical-systems r3 interfaces em3 unit 310 family inet address 172.16.0.13/30
set logical-systems r3 interfaces lo0 unit 3 family inet address 10.0.3.3/32
set logical-systems r4 interfaces em4 unit 24 description "Connect to r2 em2.24"
set logical-systems r4 interfaces em4 unit 24 vlan-id 24
set logical-systems r4 interfaces em4 unit 24 family inet address 10.0.4.9/30
set logical-systems r4 interfaces em4 unit 34 description "Connect to r3 em3.34"
set logical-systems r4 interfaces em4 unit 34 vlan-id 34
set logical-systems r4 interfaces em4 unit 34 family inet address 10.0.2.6/30
set logical-systems r4 interfaces em4 unit 45 description "Connect to r5 em5.45"
set logical-systems r4 interfaces em4 unit 45 vlan-id 45
set logical-systems r4 interfaces em4 unit 45 family inet address 10.0.2.10/30
set logical-systems r4 interfaces lo0 unit 4 family inet address 10.0.3.4/32
set logical-systems r5 interfaces em5 unit 35 description "Connect to r3 em3.35"
set logical-systems r5 interfaces em5 unit 35 vlan-id 35
set logical-systems r5 interfaces em5 unit 35 family inet address 10.0.2.1/30
set logical-systems r5 interfaces em5 unit 45 description "Connect to r4 em4.45"
set logical-systems r5 interfaces em5 unit 45 vlan-id 45
set logical-systems r5 interfaces em5 unit 45 family inet address 10.0.2.9/30
set logical-systems r5 interfaces em5 unit 56 description "Connect to r6 em6.56"
set logical-systems r5 interfaces em5 unit 56 vlan-id 56
set logical-systems r5 interfaces em5 unit 56 family inet address 10.0.8.6/30
set logical-systems r5 interfaces em5 unit 57 description "Connect to r7 em7.57"
set logical-systems r5 interfaces em5 unit 57 vlan-id 57
set logical-systems r5 interfaces em5 unit 57 family inet address 10.0.8.9/30
set logical-systems r5 interfaces lo0 unit 5 family inet address 10.0.3.5/32
set logical-systems r6 interfaces em6 unit 56 description "Connect to r5 em5.56"
set logical-systems r6 interfaces em6 unit 56 vlan-id 56
set logical-systems r6 interfaces em6 unit 56 family inet address 10.0.8.5/30
set logical-systems r6 interfaces em6 unit 67 description "Connect to r7 em7.67"
set logical-systems r6 interfaces em6 unit 67 vlan-id 67
set logical-systems r6 interfaces em6 unit 67 family inet address 10.0.8.1/30
set logical-systems r6 interfaces em6 unit 68 description "Connect to OSPF em1.68"
set logical-systems r6 interfaces em6 unit 68 vlan-id 68
set logical-systems r6 interfaces em6 unit 68 family inet address 172.16.40.2/30
set logical-systems r6 interfaces lo0 unit 6 family inet address 10.0.9.6/32
set logical-systems r7 interfaces em7 unit 57 description "Connect to r5 em5.57"
set logical-systems r7 interfaces em7 unit 57 vlan-id 57
set logical-systems r7 interfaces em7 unit 57 family inet address 10.0.8.10/30
set logical-systems r7 interfaces em7 unit 67 description "Connect to r6 em6.67"
set logical-systems r7 interfaces em7 unit 67 vlan-id 67
set logical-systems r7 interfaces em7 unit 67 family inet address 10.0.8.2/30
set logical-systems r7 interfaces em7 unit 78 description "Connect to OSPF em1.78"
set logical-systems r7 interfaces em7 unit 78 vlan-id 78
set logical-systems r7 interfaces em7 unit 78 family inet address 172.16.40.6/30
set logical-systems r7 interfaces lo0 unit 7 family inet address 10.0.9.7/32
set chassis alarm management-ethernet link-down ignore
set interfaces em0 unit 0 family inet address 10.0.1.1/24
set interfaces em1 vlan-tagging
set interfaces em2 vlan-tagging
set interfaces em3 vlan-tagging
set interfaces em4 vlan-tagging
set interfaces em5 vlan-tagging
set interfaces em6 vlan-tagging
set interfaces em7 vlan-tagging
set snmp interface em0.0
set snmp community public authorization read-only
set snmp community private authorization read-write
set snmp trap-group FOO version v1
set snmp trap-group FOO categories authentication
set snmp trap-group FOO targets 10.0.200.2
set routing-options static route 10.0.200.0/24 next-hop 10.0.1.102
set routing-options static route 10.0.200.0/24 no-readvertise
VMware Olive-2 pre-configuration:
set system host-name JNCIP_2
set system root-authentication encrypted-password "$1$iUWoHDQs$pGhPDBTA1l0idhazm/jPQ."
set logical-systems T1 interfaces em3 unit 310 description "Connect to r3 em3.310"
set logical-systems T1 interfaces em3 unit 310 vlan-id 310
set logical-systems T1 interfaces em3 unit 310 family inet address 172.16.0.14/30
set logical-systems T1 interfaces em3 unit 310 family iso address 49.0003.1720.1600.0014.00
set logical-systems T1 protocols isis interface all level 1 disable
set interfaces em3 vlan-tagging
set logical-systems OSPF interfaces em1 unit 68 description "Connecto to r6 em6.68"
set logical-systems OSPF interfaces em1 unit 68 vlan-id 68
set logical-systems OSPF interfaces em1 unit 68 family inet address 172.16.40.1/30
set logical-systems OSPF interfaces em1 unit 78 description "Connecto to r7 em7.78"
set logical-systems OSPF interfaces em1 unit 78 vlan-id 78
set logical-systems OSPF interfaces em1 unit 78 family inet address 172.16.40.5/30
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.0.1/32
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.1.1/32
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.2.1/32
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.3.1/32
set logical-systems OSPF protocols ospf area 0.0.0.2 nssa
set logical-systems OSPF protocols ospf area 0.0.0.2 interface all authentication simple-password peter
set interfaces em1 vlan-tagging
Requirements:
1. lo0 addresses are reachable through IS-IS for all routers with an IS-IS SysID based on the lo0 address.
Backbone router lo0 addresses must not be injected into area 49.0002 or 49.0001.
2. Backbone area routes must be summarized into area 49.0001.
3. The subnet between r3 and T1 must appear in area 49.0003 as an internal route.
Ensure that no adjacencies can be established on this subnet.
4. Redistribute the 10.0.5/24 route into the backbone such that area 49.0002–attached routers see a metric of at least 100.
5. r5 and r6 must use a level 1 priority of 0.
6. Ensure that r7 never functions as a pseudonode when its adjacencies are up.
7. Summarize all routes (internal and external) into the backbone area.
8. You may not modify or view the OSPF router’s configuration.
9. All areas must use hello authentication based on md5 with a secret of jnx.
The backbone area must also authenticate LSPs using a simple password of jnx.
10. Configure r6 and r7 to advertise the IS-IS default route to the OSPF router.
Ensure that the OSPF router can load balance over the default route.
11. Configure r6 and r7 to redistribute OSPF routes learned from the OSPF router into IS-IS.
12. Except for r5, ensure that no single router or link failure will isolate r1, r2, or the OSPF router.
13. Optimize routing based on bandwidth, and ensure that all Fast Ethernet interfaces are auto-matically assigned a metric of 5.
14. No static routes and no loops.
15. Set the level 1 preference in area 49.0001 to 155.
16. You must not have suboptimal routing between r6, r7, and the OSPF router.
17. Configure the network to keep LSPs that are up to 3600 seconds old.
18. Only one adjacency is permitted between any two routers.
IS-IS Case Study Configurations:
1. lo0 addresses are reachable through IS-IS for all routers with an IS-IS SysID based on the lo0 address.
Backbone router lo0 addresses must not be injected into area 49.0002 or 49.0001.
R1:
set logical-systems r1 interfaces em1 unit 12 family iso
set logical-systems r1 interfaces em1 unit 13 family iso
set logical-systems r1 interfaces lo0 unit 1 family iso address 49.0002.0100.0000.6001.00
set logical-systems r1 protocols isis interface all level 2 disable
set logical-systems r1 protocols isis interface lo0.1 passive
R2:
set logical-systems r2 interfaces em2 unit 12 family iso
set logical-systems r2 interfaces em2 unit 23 family iso
set logical-systems r2 interfaces em2 unit 24 family iso
set logical-systems r2 interfaces lo0 unit 2 family iso address 49.0002.0100.0000.6002.00
set logical-systems r2 protocols isis interface all level 2 disable
set logical-systems r2 protocols isis interface lo0.2 passive
R3:
set logical-systems r3 interfaces em3 unit 13 family iso
set logical-systems r3 interfaces em3 unit 23 family iso
set logical-systems r3 interfaces em3 unit 34 family iso
set logical-systems r3 interfaces em3 unit 35 family iso
set logical-systems r3 interfaces em3 unit 310 family iso
set logical-systems r3 interfaces lo0 unit 3 family iso address 49.0002.0100.0000.3003.00
set logical-systems r3 protocols isis interface all level 1 disable
set logical-systems r3 protocols isis interface em3.13 level 2 disable
set logical-systems r3 protocols isis interface em3.23 level 2 disable
set logical-systems r3 protocols isis interface lo0.3 passive
R4:
set logical-systems r4 interfaces em4 unit 24 family iso
set logical-systems r4 interfaces em4 unit 34 family iso
set logical-systems r4 interfaces em4 unit 45 family iso
set logical-systems r4 interfaces lo0 unit 4 family iso address 49.0002.0100.0000.3004.00
set logical-systems r4 protocols isis interface all level 1 disable
set logical-systems r4 protocols isis interface em4.24 level 2 disable
set logical-systems r4 protocols isis interface lo0.4 passive
R5:
set logical-systems r5 interfaces em5 unit 35 family iso
set logical-systems r5 interfaces em5 unit 45 family iso
set logical-systems r5 interfaces em5 unit 56 family iso
set logical-systems r5 interfaces em5 unit 57 family iso
set logical-systems r5 interfaces lo0 unit 5 family iso address 49.0001.0100.0000.3005.00
set logical-systems r5 protocols isis interface all level 1 disable
set logical-systems r5 protocols isis interface em5.56 level 2 disable
set logical-systems r5 protocols isis interface em5.57 level 2 disable
set logical-systems r5 protocols isis interface lo0.5 passive
R6:
set logical-systems r6 interfaces em6 unit 56 family iso
set logical-systems r6 interfaces em6 unit 67 family iso
set logical-systems r6 interfaces lo0 unit 6 family iso address 49.0001.0100.0000.9006.00
set logical-systems r6 protocols isis interface all level 2 disable
set logical-systems r6 protocols isis interface lo0.6 passive
R7:
set logical-systems r7 interfaces em7 unit 57 family iso
set logical-systems r7 interfaces em7 unit 67 family iso
set logical-systems r7 interfaces lo0 unit 7 family iso address 49.0001.0100.0000.9007.00
set logical-systems r7 protocols isis interface all level 2 disable
set logical-systems r7 protocols isis interface lo0.7 passive
Check:
root@JNCIP_1# run show isis interface logical-system r5
IS-IS interface database:
Interface L CirID Level 1 DR Level 2 DR L1/L2 Metric
em5.35 2 0x3 Disabled JNCIP_1-r5.03 10/10
em5.45 2 0x2 Disabled JNCIP_1-r5.02 10/10
em5.56 1 0x1 JNCIP_1-r6.02 Disabled 10/10
em5.57 1 0x1 JNCIP_1-r7.03 Disabled 10/10
lo0.5 0 0x1 Disabled Passive 0/0
[edit logical-systems]
root@JNCIP_1#
[edit logical-systems]
root@JNCIP_1# run show route protocol isis logical-system r3 | match /32
10.0.3.4/32 *[IS-IS/18] 02:07:13, metric 10
10.0.3.5/32 *[IS-IS/18] 02:06:32, metric 10
10.0.6.1/32 *[IS-IS/15] 02:07:13, metric 10
10.0.6.2/32 *[IS-IS/15] 02:07:13, metric 10
10.0.9.6/32 *[IS-IS/18] 02:06:32, metric 20
10.0.9.7/32 *[IS-IS/18] 02:06:10, metric 20
[edit logical-systems]
2. Backbone area routes must be summarized into area 49.0001.
R5:
set logical-systems r5 routing-options aggregate route 10.0.2.0/23
set logical-systems r5 policy-options policy-statement SUM-1 term 1 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-1 term 1 from route-filter 10.0.2.0/23 exact
set logical-systems r5 policy-options policy-statement SUM-1 term 1 to level 1
set logical-systems r5 policy-options policy-statement SUM-1 term 1 then accept
set logical-systems r5 protocols isis export SUM-1
Check:
root@JNCIP_1# run show route logical-system r6 10.0.2.
inet.0: 11 destinations, 11 routes (11 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.2.0/23 *[IS-IS/160] 00:03:40, metric 20
> to 10.0.8.6 via em6.56
[edit logical-systems]
root@JNCIP_1#
3. The subnet between r3 and T1 must appear in area 49.0003 as an internal route.
Ensure that no adjacencies can be established on this subnet.
R3:
set logical-systems r3 protocols isis interface em3.310 passive
Check:
root@JNCIP_1# run show route logical-system r5 172.16.0.12
inet.0: 23 destinations, 23 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
172.16.0.12/30 *[IS-IS/18] 01:01:26, metric 20
> to 10.0.2.2 via em5.35
[edit logical-systems]
root@JNCIP_1#
root@JNCIP_1# run show isis interface logical-system r3
IS-IS interface database:
Interface L CirID Level 1 DR Level 2 DR L1/L2 Metric
em3.13 1 0x2 JNCIP_1-r3.02 Disabled 10/10
em3.23 1 0x3 JNCIP_1-r3.03 Disabled 10/10
em3.310 2 0x4 Disabled JNCIP_1-r3.04 10/10
em3.34 2 0x1 Disabled JNCIP_1-r4.03 10/10
em3.35 2 0x1 Disabled JNCIP_1-r5.03 10/10
lo0.3 0 0x1 Disabled Passive 0/0
[edit logical-systems]
root@JNCIP_1#
4. Redistribute the 10.0.5/24 route into the backbone such that area 49.0002–attached routers see a metric of at least 100.
R1:
set logical-systems r1 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r1 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r1 policy-options policy-statement VL129 term 1 then metric 101
set logical-systems r1 policy-options policy-statement VL129 term 1 then accept
set logical-systems r1 protocols isis export VL129
set logical-systems r1 protocols isis level 1 wide-metrics-only
R2:
set logical-systems r2 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r2 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r2 policy-options policy-statement VL129 term 1 then metric 101
set logical-systems r2 policy-options policy-statement VL129 term 1 then accept
set logical-systems r2 protocols isis export VL129
set logical-systems r2 protocols isis level 1 wide-metrics-only
Check:
root@JNCIP_1# run show route logical-system r3 10.0.5.0/24
inet.0: 24 destinations, 24 routes (24 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.5.0/24 *[IS-IS/15] 00:01:22, metric 111
to 10.0.4.14 via em3.13
> to 10.0.4.2 via em3.23
[edit logical-systems]
root@JNCIP_1#
5. r5 and r6 must use a level 1 priority of 0.
R5:
set logical-systems r5 protocols isis interface em5.56 level 1 priority 0
set logical-systems r5 protocols isis interface em5.57 level 1 priority 0
R6:
set logical-systems r6 protocols isis interface all level 1 priority 0
Check:
root@JNCIP_1# run show isis adjacency JNCIP_1-r5 detail logical-system r6
JNCIP_1-r5
Interface: em6.56, Level: 1, State: Up, Expires in 22 secs
Priority: 0, Up/Down transitions: 1609, Last transition: 00:01:22 ago
Circuit type: 1, Speaks: IP, IPv6, MAC address: 0:c:29:76:19:ea
Topologies: Unicast
Restart capable: Yes, Adjacency advertisement: Advertise
LAN id: JNCIP_1-r6.02, IP addresses: 10.0.8.6
[edit logical-systems]
root@JNCIP_1#
6. Ensure that r7 never functions as a pseudonode when its adjacencies are up.
R7:
set logical-systems r7 protocols isis interface all level 1 priority 0
After that, we need to chang r7 interface MAC address smaller than r5 & r6.
But logical-systems do not support this command.
set interface [interface-name] mac 00:00:00:00:00:11
7. Summarize all routes (internal and external) into the backbone area.
8. You may not modify or view the OSPF router’s configuration.
Note: About OSPF routes, I chage setting and summary after step 11.
R3:
set logical-systems r3 policy-options policy-statement SUM term 1 from protocol aggregate
set logical-systems r3 policy-options policy-statement SUM term 1 from route-filter 10.0.4.0/22 exact
set logical-systems r3 policy-options policy-statement SUM term 1 to level 2
set logical-systems r3 policy-options policy-statement SUM term 1 then accept
set logical-systems r3 policy-options policy-statement SUM term 2 from route-filter 10.0.5.0/24 exact
set logical-systems r3 policy-options policy-statement SUM term 2 to level 2
set logical-systems r3 policy-options policy-statement SUM term 2 then accept
set logical-systems r3 policy-options policy-statement SUM term 3 from route-filter 10.0.4.0/22 longer
set logical-systems r3 policy-options policy-statement SUM term 3 to level 2
set logical-systems r3 policy-options policy-statement SUM term 3 then reject
set logical-systems r3 routing-options aggregate route 10.0.4.0/22
set logical-systems r3 protocols isis export SUM
R4:
set logical-systems r4 policy-options policy-statement SUM term 1 from protocol aggregate
set logical-systems r4 policy-options policy-statement SUM term 1 from route-filter 10.0.4.0/22 exact
set logical-systems r4 policy-options policy-statement SUM term 1 to level 2
set logical-systems r4 policy-options policy-statement SUM term 1 then accept
set logical-systems r4 policy-options policy-statement SUM term 2 from route-filter 10.0.5.0/24 exact
set logical-systems r4 policy-options policy-statement SUM term 2 to level 2
set logical-systems r4 policy-options policy-statement SUM term 2 then accept
set logical-systems r4 policy-options policy-statement SUM term 3 from route-filter 10.0.4.0/22 longer
set logical-systems r4 policy-options policy-statement SUM term 3 to level 2
set logical-systems r4 policy-options policy-statement SUM term 3 then reject
set logical-systems r4 routing-options aggregate route 10.0.4.0/22
set logical-systems r4 protocols isis export SUM
R5:
set logical-systems r5 policy-options policy-statement SUM-2 term 1 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-2 term 1 from route-filter 10.0.8.0/21 exact
set logical-systems r5 policy-options policy-statement SUM-2 term 1 to level 2
set logical-systems r5 policy-options policy-statement SUM-2 term 1 then accept
set logical-systems r5 policy-options policy-statement SUM-2 term 2 from route-filter 10.0.8.0/21 longer
set logical-systems r5 policy-options policy-statement SUM-2 term 2 then reject
set logical-systems r5 routing-options aggregate route 10.0.8.0/21
set logical-systems r5 protocols isis export SUM-2
9. All areas must use hello authentication based on md5 with a secret of jnx.
The backbone area must also authenticate LSPs using a simple password of jnx.
R1:
set logical-systems r1 protocols isis interface all level 1 hello-authentication-key jnx
set logical-systems r1 protocols isis interface all level 1 hello-authentication-type md5
R2:
set logical-systems r2 protocols isis interface all level 1 hello-authentication-key jnx
set logical-systems r2 protocols isis interface all level 1 hello-authentication-type md5
R3:
set logical-systems r3 protocols isis interface all level 1 hello-authentication-key jnx
set logical-systems r3 protocols isis interface all level 1 hello-authentication-type md5
set logical-systems r3 protocols isis interface em3.13 level 2 hello-authentication-key jnx
set logical-systems r3 protocols isis interface em3.13 level 2 hello-authentication-type md5
set logical-systems r3 protocols isis interface em3.23 level 2 hello-authentication-key jnx
set logical-systems r3 protocols isis interface em3.23 level 2 hello-authentication-type md5
set logical-systems r3 protocols isis level 2 authentication-key jnx
set logical-systems r3 protocols isis level 2 authentication-type simple
R4:
set logical-systems r4 protocols isis interface all level 2 hello-authentication-key jnx
set logical-systems r4 protocols isis interface all level 2 hello-authentication-type md5
set logical-systems r4 protocols isis interface em4.24 level 1 hello-authentication-key jnx
set logical-systems r4 protocols isis interface em4.24 level 1 hello-authentication-type md5
set logical-systems r4 protocols isis level 2 authentication-key jnx
set logical-systems r4 protocols isis level 2 authentication-type simple
R5:
set logical-systems r5 protocols isis interface all level 2 hello-authentication-key jnx
set logical-systems r5 protocols isis interface all level 2 hello-authentication-type md5
set logical-systems r5 protocols isis interface em5.56 level 1 hello-authentication-key jnx
set logical-systems r5 protocols isis interface em5.56 level 1 hello-authentication-type md5
set logical-systems r5 protocols isis interface em5.57 level 1 hello-authentication-key jnx
set logical-systems r5 protocols isis interface em5.57 level 1 hello-authentication-type md5
set logical-systems r5 protocols isis level 2 authentication-key jnx
set logical-systems r5 protocols isis level 2 authentication-type simple
R6:
set logical-systems r6 protocols isis interface all level 1 hello-authentication-key jnx
set logical-systems r6 protocols isis interface all level 1 hello-authentication-type md5
R7:
set logical-systems r7 protocols isis interface all level 1 hello-authentication-key jnx
set logical-systems r7 protocols isis interface all level 1 hello-authentication-type md5
10. Configure r6 and r7 to advertise the IS-IS default route to the OSPF router.
Ensure that the OSPF router can load balance over the default route.
Note: In the step, we are not able to view or modify the logical-systems OSPF router’s configuration.
In other words, We need to pretend that we not know the OSPF configuration in the logical-systems OSPF router.
So, I creat a OSPF routing in the logical-systems r6 and then using traceoptions to monitor OSPF packets.
R6:
set logical-systems r6 protocols ospf traceoptions file OSPF
set logical-systems r6 protocols ospf traceoptions flag hello detail
set logical-systems r6 protocols ospf traceoptions flag error detail
set logical-systems r6 protocols ospf area 0.0.0.0 interface em6.68
Running monitor to analysis OSPF packet:
root@JNCIP_1# run monitor start /var/log/r6/OSPF
May 28 10:20:30.540007 OSPF packet ignored: area mismatch (0.0.0.2) from 172.16.40.1 on intf em6.68 area 0.0.0.0
May 28 10:20:30.540140 OSPF rcvd Hello 172.16.40.1 -> 224.0.0.5 (em6.68 IFL 121 area 0.0.0.0)
May 28 10:20:30.540146 Version 2, length 44, ID 192.168.0.1, area 0.0.0.2
May 28 10:20:30.540150 checksum 0x5065, authtype 1
Stop monitor:
root@JNCIP_1# run monitor stop /var/log/r6/OSPF
Now, we know two thing.
1. Our OSPF area should be setting area 2 not area 0.
2. OSPF auth type is 1 (simple-password).
Let's change r6 OSPF area setting
root@JNCIP_1# rename logical-systems r6 protocols ospf area 0 to area 2
root@JNCIP_1# commit
The logical-systems r6 OSPF neighbor still nothing. Try, other command
root@JNCIP_1# run monitor traffic interface em6.68 size 9000 no-resolve detail
you will find out the password.
but Olive on the VM that do not support this command. sorry~ >_<#
So, we skip it.
R6:
set logical-systems r6 protocols ospf area 0.0.0.2 interface em6.68 authentication simple-password peter
Now, we check again.
root@JNCIP_1# run monitor start /var/log/r6/OSPF
May 28 10:41:42.801517 OSPF packet ignored: area stubness mismatch from 172.16.40.1 on intf em6.68 area 0.0.0.2
root@JNCIP_1# run monitor stop /var/log/r6/OSPF
OK, we found the area type is wrong. Chang to stub.
root@JNCIP_1# set logical-systems r6 protocols ospf area 2 stub
Try again.
root@JNCIP_1# run monitor start /var/log/r6/OSPF
May 28 19:04:39.546115 OSPF packet ignored: area nssaness mismatch from 172.16.40.1 on intf em6.68 area 0.0.0.2
root@JNCIP_1# run monitor stop /var/log/r6/OSPF
OK, we found the area type is wrong. Chang to nssa.
root@JNCIP_1# set logical-systems r6 protocols ospf area 2 stub
Good!
root@JNCIP_1# run show ospf neighbor logical-system r6
Address Interface State ID Pri Dead
172.16.40.1 em6.68 Full 192.168.0.1 128 33
Final, remove traceoptions setting and delete OSPF log file.
root@JNCIP_1# delete logical-systems r6 protocols ospf traceoptions
root@JNCIP_1# commit
root@JNCIP_1# run file delete /var/log/r6/OSPF
Setting R7 OSPF.
set logical-systems r7 protocols ospf area 0.0.0.2 nssa
set logical-systems r7 protocols ospf area 0.0.0.2 interface em7.78 authentication simple-password peter
Check:
root@JNCIP_1# run show ospf neighbor logical-system r7
Address Interface State ID Pri Dead
172.16.40.5 em7.78 Full 192.168.0.1 128 35
OK, Let's continue our JNCIP LAB.
R6:
set logical-systems r6 policy-options policy-statement ISIS>OSPF term 1 from protocol isis
set logical-systems r6 policy-options policy-statement ISIS>OSPF term 1 from route-filter 0.0.0.0/0 exact
set logical-systems r6 policy-options policy-statement ISIS>OSPF term 1 then accept
set logical-systems r6 protocols ospf export ISIS>OSPF
R7:
set logical-systems r7 policy-options policy-statement ISIS>OSPF term 1 from protocol isis
set logical-systems r7 policy-options policy-statement ISIS>OSPF term 1 from route-filter 0.0.0.0/0 exact
set logical-systems r7 policy-options policy-statement ISIS>OSPF term 1 then accept
set logical-systems r7 protocols ospf export ISIS>OSPF
Check:
root@JNCIP_2> show route logical-system OSPF 0.0.0.0
inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[OSPF/150] 00:02:16, metric 10, tag 0
> to 172.16.40.2 via em1.68
to 172.16.40.6 via em1.78
root@JNCIP_2>
11. Configure r6 and r7 to redistribute OSPF routes learned from the OSPF router into IS-IS.
Note: After this step, we also check step 7 (Summarize all routes (internal and external) into the backbone area.)
R6:
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 from protocol ospf
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 from route-filter 192.168.0.0/22 longer
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 from route-filter 172.16.40.0/29 longer
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 then accept
set logical-systems r6 protocols isis export OSPF>ISIS
R7:
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 from protocol ospf
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 from route-filter 192.168.0.0/22 longer
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 from route-filter 172.16.40.0/29 longer
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 then accept
set logical-systems r7 protocols isis export OSPF>ISIS
R5:
set logical-systems r5 routing-options aggregate route 192.168.0.0/22
set logical-systems r5 routing-options aggregate route 172.16.40.0/29
set logical-systems r5 policy-options policy-statement SUM-3 term 1 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-3 term 1 from route-filter 192.168.0.0/22 exact
set logical-systems r5 policy-options policy-statement SUM-3 term 1 to level 2
set logical-systems r5 policy-options policy-statement SUM-3 term 1 then accept
set logical-systems r5 policy-options policy-statement SUM-3 term 2 from route-filter 192.168.0.0/22 longer
set logical-systems r5 policy-options policy-statement SUM-3 term 2 then reject
set logical-systems r5 policy-options policy-statement SUM-3 term 3 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-3 term 3 from route-filter 172.16.40.0/29 exact
set logical-systems r5 policy-options policy-statement SUM-3 term 3 to level 2
set logical-systems r5 policy-options policy-statement SUM-3 term 3 then accept
set logical-systems r5 policy-options policy-statement SUM-3 term 4 from route-filter 172.16.40.0/29 longer
set logical-systems r5 policy-options policy-statement SUM-3 term 4 then reject
set logical-systems r5 protocols isis export SUM-3
Check:
root@JNCIP_1# run show route logical-system r4 192.168.
inet.0: 20 destinations, 20 routes (20 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
192.168.0.0/22 *[IS-IS/165] 00:03:18, metric 20
> to 10.0.2.9 via em4.45
[edit logical-systems]
root@JNCIP_1#
12. Except for r5, ensure that no single router or link failure will isolate r1, r2, or the OSPF router.
13. Optimize routing based on bandwidth, and ensure that all Fast Ethernet interfaces are auto-matically assigned a metric of 5.
Note: IS-IS Cost = reference-bandwidth/bandwidth
R1:
set logical-systems r1 protocols isis reference-bandwidth 5g
R2:
set logical-systems r2 protocols isis reference-bandwidth 5g
R3:
set logical-systems r3 protocols isis reference-bandwidth 5g
R4:
set logical-systems r4 protocols isis reference-bandwidth 5g
R5:
set logical-systems r5 protocols isis reference-bandwidth 5g
R6:
set logical-systems r6 protocols isis reference-bandwidth 5g
R7:
set logical-systems r7 protocols isis reference-bandwidth 5g
Check:
root@JNCIP_1# run show isis interface logical-system r5
IS-IS interface database:
Interface L CirID Level 1 DR Level 2 DR L1/L2 Metric
em5.35 2 0x3 Disabled JNCIP_1-r5.03 5/5
em5.45 2 0x2 Disabled JNCIP_1-r5.02 5/5
em5.56 1 0x1 JNCIP_1-r6.02 Disabled 5/5
em5.57 1 0x1 JNCIP_1-r7.02 Disabled 5/5
lo0.5 0 0x1 Passive Passive 0/0
[edit logical-systems]
root@JNCIP_1#
14. No static routes and no loops.
15. Set the level 1 preference in area 49.0001 to 155.
R5:
set logical-systems r5 protocols isis level 1 preference 155
R6:
set logical-systems r6 protocols isis level 1 preference 155
R7:
set logical-systems r7 protocols isis level 1 preference 155
Note: In r6 or R7, we will find two default routes.
One is from ISIS, Otherone is from OSPF.
Due to we change ISIS preference, route chose wrong default route(form OSPF).
We will chang the OSPF preference values to fix this issue now.
root@JNCIP_1# run show route logical-system r7 0.0.0.0
inet.0: 18 destinations, 20 routes (18 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[OSPF/150] 00:02:15, metric 5, tag 0
> to 172.16.40.5 via em7.78
[IS-IS/155] 00:02:21, metric 5
> to 10.0.8.9 via em7.57
[edit logical-systems]
root@JNCIP_1#
R6:
set logical-systems r6 protocols ospf external-preference 159
R7:
set logical-systems r6 protocols ospf external-preference 159
Check:
root@JNCIP_1# run show route logical-system r6 0.0.0.0
inet.0: 18 destinations, 20 routes (18 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[IS-IS/155] 00:05:27, metric 5
> to 10.0.8.6 via em6.56
[OSPF/159] 00:05:22, metric 5, tag 0
> to 172.16.40.1 via em6.68
[edit logical-systems]
root@JNCIP_1#
[edit logical-systems]
root@JNCIP_1# run show route logical-system r7 0.0.0.0
inet.0: 18 destinations, 20 routes (18 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[IS-IS/155] 00:05:31, metric 5
> to 10.0.8.9 via em7.57
[OSPF/159] 00:05:26, metric 5, tag 0
> to 172.16.40.5 via em7.78
[edit logical-systems]
root@JNCIP_1#
16. You must not have suboptimal routing between r6, r7, and the OSPF router.
17. Configure the network to keep LSPs that are up to 3600 seconds old.
18. Only one adjacency is permitted between any two routers.
R1:
set logical-systems r1 protocols isis lsp-lifetime 3600
R2:
set logical-systems r2 protocols isis lsp-lifetime 3600
R3:
set logical-systems r3 protocols isis lsp-lifetime 3600
R4:
set logical-systems r4 protocols isis lsp-lifetime 3600
R5:
set logical-systems r5 protocols isis lsp-lifetime 3600
R6:
set logical-systems r6 protocols isis lsp-lifetime 3600
R7:
set logical-systems r7 protocols isis lsp-lifetime 3600
Note: Step 18 means only level 1 or level 2 adjacency between any two routers.
Final Check:
(Routing Table)
root@JNCIP_1# run show route logical-system r1
inet.0: 14 destinations, 14 routes (14 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[IS-IS/15] 00:07:19, metric 5
> to 10.0.4.13 via em1.13
10.0.3.3/32 *[IS-IS/15] 00:07:50, metric 5
> to 10.0.4.13 via em1.13
10.0.3.4/32 *[IS-IS/15] 00:06:54, metric 10
> to 10.0.4.6 via em1.12
10.0.4.0/30 *[IS-IS/15] 00:06:54, metric 10
> to 10.0.4.13 via em1.13
to 10.0.4.6 via em1.12
10.0.4.4/30 *[Direct/0] 00:07:59
> via em1.12
10.0.4.5/32 *[Local/0] 00:07:59
Local via em1.12
10.0.4.8/30 *[IS-IS/15] 00:06:54, metric 10
> to 10.0.4.6 via em1.12
10.0.4.12/30 *[Direct/0] 00:07:59
> via em1.13
10.0.4.14/32 *[Local/0] 00:07:59
Local via em1.13
10.0.5.0/24 *[Direct/0] 00:07:59
> via em1.129
10.0.5.1/32 *[Local/0] 00:07:59
Local via em1.129
10.0.6.1/32 *[Direct/0] 00:08:00
> via lo0.1
10.0.6.2/32 *[IS-IS/15] 00:06:54, metric 5
> to 10.0.4.6 via em1.12
172.16.0.12/30 *[IS-IS/15] 00:07:50, metric 10
> to 10.0.4.13 via em1.13
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
49.0002.0100.0000.6001/72
*[Direct/0] 00:08:00
> via lo0.1
[edit]
root@JNCIP_1#
[edit]
root@JNCIP_1# run show route logical-system r2
inet.0: 15 destinations, 15 routes (15 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[IS-IS/15] 00:06:59, metric 5
> to 10.0.4.1 via em2.23
to 10.0.4.9 via em2.24
10.0.3.3/32 *[IS-IS/15] 00:07:25, metric 5
> to 10.0.4.1 via em2.23
10.0.3.4/32 *[IS-IS/15] 00:06:59, metric 5
> to 10.0.4.9 via em2.24
10.0.4.0/30 *[Direct/0] 00:08:04
> via em2.23
10.0.4.2/32 *[Local/0] 00:08:04
Local via em2.23
10.0.4.4/30 *[Direct/0] 00:08:04
> via em2.12
10.0.4.6/32 *[Local/0] 00:08:04
Local via em2.12
10.0.4.8/30 *[Direct/0] 00:08:04
> via em2.24
10.0.4.10/32 *[Local/0] 00:08:04
Local via em2.24
10.0.4.12/30 *[IS-IS/15] 00:06:59, metric 10
to 10.0.4.1 via em2.23
> to 10.0.4.5 via em2.12
10.0.5.0/24 *[Direct/0] 00:08:04
> via em2.129
10.0.5.2/32 *[Local/0] 00:08:04
Local via em2.129
10.0.6.1/32 *[IS-IS/15] 00:06:59, metric 5
> to 10.0.4.5 via em2.12
10.0.6.2/32 *[Direct/0] 00:08:05
> via lo0.2
172.16.0.12/30 *[IS-IS/15] 00:07:25, metric 10
> to 10.0.4.1 via em2.23
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
49.0002.0100.0000.6002/72
*[Direct/0] 00:08:05
> via lo0.2
[edit]
root@JNCIP_1#
[edit]
root@JNCIP_1# run show route logical-system r3
inet.0: 23 destinations, 23 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.2.0/30 *[Direct/0] 00:08:08
> via em3.35
10.0.2.2/32 *[Local/0] 00:08:08
Local via em3.35
10.0.2.4/30 *[Direct/0] 00:08:08
> via em3.34
10.0.2.5/32 *[Local/0] 00:08:08
Local via em3.34
10.0.2.8/30 *[IS-IS/18] 00:07:07, metric 10
> to 10.0.2.6 via em3.34
to 10.0.2.1 via em3.35
10.0.3.3/32 *[Direct/0] 00:08:09
> via lo0.3
10.0.3.4/32 *[IS-IS/15] 00:07:03, metric 10
> to 10.0.4.2 via em3.23
10.0.3.5/32 *[IS-IS/18] 00:07:07, metric 5
> to 10.0.2.1 via em3.35
10.0.4.0/22 *[Aggregate/130] 00:08:15
Reject
10.0.4.0/30 *[Direct/0] 00:08:08
> via em3.23
10.0.4.1/32 *[Local/0] 00:08:08
Local via em3.23
10.0.4.4/30 *[IS-IS/15] 00:07:29, metric 10
> to 10.0.4.14 via em3.13
to 10.0.4.2 via em3.23
10.0.4.8/30 *[IS-IS/15] 00:07:29, metric 10
> to 10.0.4.2 via em3.23
10.0.4.12/30 *[Direct/0] 00:08:08
> via em3.13
10.0.4.13/32 *[Local/0] 00:08:08
Local via em3.13
10.0.5.0/24 *[IS-IS/15] 00:07:29, metric 106
to 10.0.4.14 via em3.13
> to 10.0.4.2 via em3.23
10.0.6.1/32 *[IS-IS/15] 00:07:59, metric 5
> to 10.0.4.14 via em3.13
10.0.6.2/32 *[IS-IS/15] 00:07:29, metric 5
> to 10.0.4.2 via em3.23
10.0.8.0/21 *[IS-IS/165] 00:07:07, metric 15
> to 10.0.2.1 via em3.35
172.16.0.12/30 *[Direct/0] 00:08:08
> via em3.310
172.16.0.13/32 *[Local/0] 00:08:08
Local via em3.310
172.16.40.0/29 *[IS-IS/165] 00:07:07, metric 15
> to 10.0.2.1 via em3.35
192.168.0.0/22 *[IS-IS/165] 00:07:07, metric 15
> to 10.0.2.1 via em3.35
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
49.0002.0100.0000.3003/72
*[Direct/0] 00:08:09
> via lo0.3
[edit]
root@JNCIP_1#
[edit]
root@JNCIP_1# run show route logical-system r4
inet.0: 21 destinations, 21 routes (21 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.2.0/30 *[IS-IS/18] 00:07:33, metric 10
to 10.0.2.5 via em4.34
> to 10.0.2.9 via em4.45
10.0.2.4/30 *[Direct/0] 00:08:13
> via em4.34
10.0.2.6/32 *[Local/0] 00:08:13
Local via em4.34
10.0.2.8/30 *[Direct/0] 00:08:13
> via em4.45
10.0.2.10/32 *[Local/0] 00:08:13
Local via em4.45
10.0.3.3/32 *[IS-IS/15] 00:06:59, metric 10
> to 10.0.4.10 via em4.24
10.0.3.4/32 *[Direct/0] 00:08:14
> via lo0.4
10.0.3.5/32 *[IS-IS/18] 00:07:33, metric 5
> to 10.0.2.9 via em4.45
10.0.4.0/22 *[Aggregate/130] 00:08:20
Reject
10.0.4.0/30 *[IS-IS/15] 00:07:08, metric 10
> to 10.0.4.10 via em4.24
10.0.4.4/30 *[IS-IS/15] 00:07:08, metric 10
> to 10.0.4.10 via em4.24
10.0.4.8/30 *[Direct/0] 00:08:13
> via em4.24
10.0.4.9/32 *[Local/0] 00:08:13
Local via em4.24
10.0.4.12/30 *[IS-IS/15] 00:07:03, metric 15
> to 10.0.4.10 via em4.24
10.0.5.0/24 *[IS-IS/15] 00:07:08, metric 106
> to 10.0.4.10 via em4.24
10.0.6.1/32 *[IS-IS/15] 00:07:03, metric 10
> to 10.0.4.10 via em4.24
10.0.6.2/32 *[IS-IS/15] 00:07:08, metric 5
> to 10.0.4.10 via em4.24
10.0.8.0/21 *[IS-IS/165] 00:07:33, metric 15
> to 10.0.2.9 via em4.45
172.16.0.12/30 *[IS-IS/15] 00:06:59, metric 15
> to 10.0.4.10 via em4.24
172.16.40.0/29 *[IS-IS/165] 00:07:17, metric 15
> to 10.0.2.9 via em4.45
192.168.0.0/22 *[IS-IS/165] 00:07:17, metric 15
> to 10.0.2.9 via em4.45
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
49.0002.0100.0000.3004/72
*[Direct/0] 00:08:14
> via lo0.4
[edit]
root@JNCIP_1#
[edit]
root@JNCIP_1# run show route logical-system r5
inet.0: 28 destinations, 30 routes (28 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.2.0/23 *[Aggregate/130] 00:08:24
Reject
10.0.2.0/30 *[Direct/0] 00:08:17
> via em5.35
10.0.2.1/32 *[Local/0] 00:08:17
Local via em5.35
10.0.2.4/30 *[IS-IS/18] 00:07:16, metric 10
to 10.0.2.2 via em5.35
> to 10.0.2.10 via em5.45
10.0.2.8/30 *[Direct/0] 00:08:17
> via em5.45
10.0.2.9/32 *[Local/0] 00:08:17
Local via em5.45
10.0.3.3/32 *[IS-IS/18] 00:07:16, metric 5
> to 10.0.2.2 via em5.35
10.0.3.4/32 *[IS-IS/18] 00:07:37, metric 5
> to 10.0.2.10 via em5.45
10.0.3.5/32 *[Direct/0] 00:08:17
> via lo0.5
10.0.4.0/22 *[IS-IS/165] 00:07:16, metric 15
to 10.0.2.2 via em5.35
> to 10.0.2.10 via em5.45
10.0.5.0/24 *[IS-IS/18] 00:07:12, metric 68
> to 10.0.2.2 via em5.35
to 10.0.2.10 via em5.45
10.0.8.0/21 *[Aggregate/130] 00:08:24
Reject
10.0.8.0/30 *[IS-IS/155] 00:07:37, metric 10
> to 10.0.8.5 via em5.56
to 10.0.8.10 via em5.57
10.0.8.4/30 *[Direct/0] 00:08:17
> via em5.56
[IS-IS/155] 00:08:02, metric 10
> to 10.0.8.5 via em5.56
10.0.8.6/32 *[Local/0] 00:08:17
Local via em5.56
10.0.8.8/30 *[Direct/0] 00:08:17
> via em5.57
[IS-IS/155] 00:07:37, metric 10
> to 10.0.8.10 via em5.57
10.0.8.9/32 *[Local/0] 00:08:17
Local via em5.57
10.0.9.6/32 *[IS-IS/155] 00:08:02, metric 5
> to 10.0.8.5 via em5.56
10.0.9.7/32 *[IS-IS/155] 00:07:37, metric 5
> to 10.0.8.10 via em5.57
172.16.0.12/30 *[IS-IS/18] 00:07:16, metric 10
> to 10.0.2.2 via em5.35
172.16.40.0/29 *[Aggregate/130] 00:08:24
Reject
172.16.40.0/30 *[IS-IS/160] 00:07:21, metric 7, tag2 2
> to 10.0.8.10 via em5.57
172.16.40.4/30 *[IS-IS/160] 00:07:21, metric 7, tag2 2
> to 10.0.8.5 via em5.56
192.168.0.0/22 *[Aggregate/130] 00:08:24
Reject
192.168.0.1/32 *[IS-IS/160] 00:07:21, metric 6, tag2 2
to 10.0.8.5 via em5.56
> to 10.0.8.10 via em5.57
192.168.1.1/32 *[IS-IS/160] 00:07:21, metric 6, tag2 2
> to 10.0.8.5 via em5.56
to 10.0.8.10 via em5.57
192.168.2.1/32 *[IS-IS/160] 00:07:21, metric 6, tag2 2
> to 10.0.8.5 via em5.56
to 10.0.8.10 via em5.57
192.168.3.1/32 *[IS-IS/160] 00:07:21, metric 6, tag2 2
to 10.0.8.5 via em5.56
> to 10.0.8.10 via em5.57
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
49.0001.0100.0000.3005/72
*[Direct/0] 00:08:17
> via lo0.5
[edit]
root@JNCIP_1#
[edit]
root@JNCIP_1# run show route logical-system r6
inet.0: 18 destinations, 20 routes (18 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[IS-IS/155] 00:07:42, metric 5
> to 10.0.8.6 via em6.56
[OSPF/159] 00:07:26, metric 5, tag 0
> to 172.16.40.1 via em6.68
10.0.2.0/23 *[IS-IS/160] 00:08:07, metric 15
> to 10.0.8.6 via em6.56
10.0.3.5/32 *[IS-IS/155] 00:08:07, metric 5
> to 10.0.8.6 via em6.56
10.0.8.0/30 *[Direct/0] 00:08:22
> via em6.67
10.0.8.1/32 *[Local/0] 00:08:22
Local via em6.67
10.0.8.4/30 *[Direct/0] 00:08:22
> via em6.56
10.0.8.5/32 *[Local/0] 00:08:22
Local via em6.56
10.0.8.8/30 *[IS-IS/155] 00:07:14, metric 10
> to 10.0.8.2 via em6.67
10.0.9.6/32 *[Direct/0] 00:08:23
> via lo0.6
10.0.9.7/32 *[IS-IS/155] 00:07:14, metric 5
> to 10.0.8.2 via em6.67
172.16.40.0/30 *[Direct/0] 00:08:22
> via em6.68
[IS-IS/160] 00:07:14, metric 7, tag2 2
> to 10.0.8.2 via em6.67
172.16.40.2/32 *[Local/0] 00:08:22
Local via em6.68
172.16.40.4/30 *[OSPF/10] 00:07:26, metric 2
> to 172.16.40.1 via em6.68
192.168.0.1/32 *[OSPF/10] 00:07:26, metric 1
> to 172.16.40.1 via em6.68
192.168.1.1/32 *[OSPF/10] 00:07:26, metric 1
> to 172.16.40.1 via em6.68
192.168.2.1/32 *[OSPF/10] 00:07:26, metric 1
> to 172.16.40.1 via em6.68
192.168.3.1/32 *[OSPF/10] 00:07:26, metric 1
> to 172.16.40.1 via em6.68
224.0.0.5/32 *[OSPF/10] 00:08:29, metric 1
MultiRecv
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
49.0001.0100.0000.9006/72
*[Direct/0] 00:08:23
> via lo0.6
[edit]
root@JNCIP_1#
[edit]
root@JNCIP_1# run show route logical-system r7
inet.0: 18 destinations, 20 routes (18 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[IS-IS/155] 00:07:45, metric 5
> to 10.0.8.9 via em7.57
[OSPF/159] 00:07:30, metric 5, tag 0
> to 172.16.40.5 via em7.78
10.0.2.0/23 *[IS-IS/160] 00:07:45, metric 15
> to 10.0.8.9 via em7.57
10.0.3.5/32 *[IS-IS/155] 00:07:45, metric 5
> to 10.0.8.9 via em7.57
10.0.8.0/30 *[Direct/0] 00:08:25
> via em7.67
10.0.8.2/32 *[Local/0] 00:08:25
Local via em7.67
10.0.8.4/30 *[IS-IS/155] 00:07:17, metric 10
> to 10.0.8.1 via em7.67
10.0.8.8/30 *[Direct/0] 00:08:25
> via em7.57
10.0.8.10/32 *[Local/0] 00:08:25
Local via em7.57
10.0.9.6/32 *[IS-IS/155] 00:07:17, metric 5
> to 10.0.8.1 via em7.67
10.0.9.7/32 *[Direct/0] 00:08:26
> via lo0.7
172.16.40.0/30 *[OSPF/10] 00:07:30, metric 2
> to 172.16.40.5 via em7.78
172.16.40.4/30 *[Direct/0] 00:08:25
> via em7.78
[IS-IS/160] 00:07:17, metric 7, tag2 2
> to 10.0.8.1 via em7.67
172.16.40.6/32 *[Local/0] 00:08:25
Local via em7.78
192.168.0.1/32 *[OSPF/10] 00:07:30, metric 1
> to 172.16.40.5 via em7.78
192.168.1.1/32 *[OSPF/10] 00:07:30, metric 1
> to 172.16.40.5 via em7.78
192.168.2.1/32 *[OSPF/10] 00:07:30, metric 1
> to 172.16.40.5 via em7.78
192.168.3.1/32 *[OSPF/10] 00:07:30, metric 1
> to 172.16.40.5 via em7.78
224.0.0.5/32 *[OSPF/10] 00:08:33, metric 1
MultiRecv
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
49.0001.0100.0000.9007/72
*[Direct/0] 00:08:26
> via lo0.7
[edit]
root@JNCIP_1#
(Traceroute)
root@JNCIP_1# run traceroute 192.168.0.1 logical-system r1 source 10.0.5.1
traceroute to 192.168.0.1 (192.168.0.1) from 10.0.5.1, 30 hops max, 40 byte packets
1 10.0.4.13 (10.0.4.13) 0.237 ms 0.180 ms 0.315 ms
2 10.0.2.1 (10.0.2.1) 0.240 ms 0.372 ms 0.246 ms
3 10.0.8.10 (10.0.8.10) 1.382 ms 0.615 ms 0.550 ms
4 192.168.0.1 (192.168.0.1) 0.803 ms 0.719 ms 0.595 ms
[edit]
root@JNCIP_1#
root@JNCIP_2# run traceroute 10.0.5.1 logical-system OSPF source 192.168.1.1
traceroute to 10.0.5.1 (10.0.5.1) from 192.168.1.1, 30 hops max, 40 byte packets
1 172.16.40.2 (172.16.40.2) 0.265 ms 0.269 ms 0.225 ms
2 10.0.8.6 (10.0.8.6) 0.278 ms 0.355 ms 0.233 ms
3 10.0.2.2 (10.0.2.2) 0.372 ms 0.392 ms 0.497 ms
4 10.0.4.2 (10.0.4.2) 0.531 ms 0.494 ms 0.402 ms
5 10.0.5.1 (10.0.5.1) 0.466 ms 0.471 ms 0.634 ms
[edit]
root@JNCIP_2#
Final configuration:
(Olive-1):
root@JNCIP_1# show | display set
set version 12.1R1.9
set system host-name JNCIP_1
set system time-zone Asia/Taipei
set system authentication-order radius
set system ports auxiliary type vt100
set system root-authentication encrypted-password "$1$9xaCfeIA$DoMiHW7akhvyMpAHebr/R0"
set system radius-server 10.0.200.2 secret "$9$-DbYoDi.z39JG39ApREdbs"
set system login class NOC permissions view
set system login user lab uid 2000
set system login user lab class super-user
set system login user lab authentication encrypted-password "$1$q0M9ehlx$9XZkXwUuPJK1bVFie2FCS."
set system login user noc uid 2001
set system login user noc class NOC
set system login user noc authentication encrypted-password "$1$nutuTWm9$j40sAjOFPTImr7tm/6/pE1"
set system static-host-mapping proctor inet 10.0.200.1
set system services ssh root-login deny
set system services ssh protocol-version v2
set system services telnet
set system syslog user * any emergency
set system syslog host 10.0.200.2 interactive-commands any
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system syslog file r1-cli interactive-commands any
set system syslog file r1-cli archive files 4
set system ntp boot-server 10.0.1.102
set system ntp authentication-key 200 type md5
set system ntp authentication-key 200 value "$9$PTF/uORlK8CtK8X7sYfTz"
set system ntp broadcast-client
set system ntp trusted-key 200
set logical-systems r1 interfaces em1 unit 12 description "Connect to r2 em2.12"
set logical-systems r1 interfaces em1 unit 12 vlan-id 12
set logical-systems r1 interfaces em1 unit 12 family inet address 10.0.4.5/30
set logical-systems r1 interfaces em1 unit 12 family iso
set logical-systems r1 interfaces em1 unit 13 description "Connect to r3 em3.13"
set logical-systems r1 interfaces em1 unit 13 vlan-id 13
set logical-systems r1 interfaces em1 unit 13 family inet address 10.0.4.14/30
set logical-systems r1 interfaces em1 unit 13 family iso
set logical-systems r1 interfaces em1 unit 129 description "Connect to r2 em2.129"
set logical-systems r1 interfaces em1 unit 129 vlan-id 129
set logical-systems r1 interfaces em1 unit 129 family inet address 10.0.5.1/24
set logical-systems r1 interfaces lo0 unit 1 family inet address 10.0.6.1/32
set logical-systems r1 interfaces lo0 unit 1 family iso address 49.0002.0100.0000.6001.00
set logical-systems r1 protocols isis export VL129
set logical-systems r1 protocols isis reference-bandwidth 5g
set logical-systems r1 protocols isis lsp-lifetime 3600
set logical-systems r1 protocols isis level 1 wide-metrics-only
set logical-systems r1 protocols isis interface all level 2 disable
set logical-systems r1 protocols isis interface all level 1 hello-authentication-key "$9$xGi-b2.mTQnC"
set logical-systems r1 protocols isis interface all level 1 hello-authentication-type md5
set logical-systems r1 protocols isis interface lo0.1 passive
set logical-systems r1 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r1 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r1 policy-options policy-statement VL129 term 1 then metric 101
set logical-systems r1 policy-options policy-statement VL129 term 1 then accept
set logical-systems r2 interfaces em2 unit 12 description "Connect to r1 em1.12"
set logical-systems r2 interfaces em2 unit 12 vlan-id 12
set logical-systems r2 interfaces em2 unit 12 family inet address 10.0.4.6/30
set logical-systems r2 interfaces em2 unit 12 family iso
set logical-systems r2 interfaces em2 unit 23 description "Connect to r3 em3.23"
set logical-systems r2 interfaces em2 unit 23 vlan-id 23
set logical-systems r2 interfaces em2 unit 23 family inet address 10.0.4.2/30
set logical-systems r2 interfaces em2 unit 23 family iso
set logical-systems r2 interfaces em2 unit 24 description "Connect to r4 em4.24"
set logical-systems r2 interfaces em2 unit 24 vlan-id 24
set logical-systems r2 interfaces em2 unit 24 family inet address 10.0.4.10/30
set logical-systems r2 interfaces em2 unit 24 family iso
set logical-systems r2 interfaces em2 unit 129 description "Connect to r1 em1.129"
set logical-systems r2 interfaces em2 unit 129 vlan-id 129
set logical-systems r2 interfaces em2 unit 129 family inet address 10.0.5.2/24
set logical-systems r2 interfaces lo0 unit 2 family inet address 10.0.6.2/32
set logical-systems r2 interfaces lo0 unit 2 family iso address 49.0002.0100.0000.6002.00
set logical-systems r2 protocols isis export VL129
set logical-systems r2 protocols isis reference-bandwidth 5g
set logical-systems r2 protocols isis lsp-lifetime 3600
set logical-systems r2 protocols isis level 1 wide-metrics-only
set logical-systems r2 protocols isis interface all level 2 disable
set logical-systems r2 protocols isis interface all level 1 hello-authentication-key "$9$dIw2a5T3nCu"
set logical-systems r2 protocols isis interface all level 1 hello-authentication-type md5
set logical-systems r2 protocols isis interface lo0.2 passive
set logical-systems r2 policy-options policy-statement VL129 term 1 from protocol direct
set logical-systems r2 policy-options policy-statement VL129 term 1 from route-filter 10.0.5.0/24 exact
set logical-systems r2 policy-options policy-statement VL129 term 1 then metric 101
set logical-systems r2 policy-options policy-statement VL129 term 1 then accept
set logical-systems r3 interfaces em3 unit 13 description "Connecto to r1 em1.13"
set logical-systems r3 interfaces em3 unit 13 vlan-id 13
set logical-systems r3 interfaces em3 unit 13 family inet address 10.0.4.13/30
set logical-systems r3 interfaces em3 unit 13 family iso
set logical-systems r3 interfaces em3 unit 23 description "Connecto to r2 em2.23"
set logical-systems r3 interfaces em3 unit 23 vlan-id 23
set logical-systems r3 interfaces em3 unit 23 family inet address 10.0.4.1/30
set logical-systems r3 interfaces em3 unit 23 family iso
set logical-systems r3 interfaces em3 unit 34 description "Connecto to r4 em4.34"
set logical-systems r3 interfaces em3 unit 34 vlan-id 34
set logical-systems r3 interfaces em3 unit 34 family inet address 10.0.2.5/30
set logical-systems r3 interfaces em3 unit 34 family iso
set logical-systems r3 interfaces em3 unit 35 description "Connecto to r5 em5.35"
set logical-systems r3 interfaces em3 unit 35 vlan-id 35
set logical-systems r3 interfaces em3 unit 35 family inet address 10.0.2.2/30
set logical-systems r3 interfaces em3 unit 35 family iso
set logical-systems r3 interfaces em3 unit 310 description "Connecto to T1 em3.310"
set logical-systems r3 interfaces em3 unit 310 vlan-id 310
set logical-systems r3 interfaces em3 unit 310 family inet address 172.16.0.13/30
set logical-systems r3 interfaces em3 unit 310 family iso
set logical-systems r3 interfaces lo0 unit 3 family inet address 10.0.3.3/32
set logical-systems r3 interfaces lo0 unit 3 family iso address 49.0002.0100.0000.3003.00
set logical-systems r3 protocols isis export SUM
set logical-systems r3 protocols isis reference-bandwidth 5g
set logical-systems r3 protocols isis lsp-lifetime 3600
set logical-systems r3 protocols isis level 2 authentication-key "$9$9IVPt0ILX-ds4"
set logical-systems r3 protocols isis level 2 authentication-type simple
set logical-systems r3 protocols isis interface all level 1 disable
set logical-systems r3 protocols isis interface all level 2 hello-authentication-key "$9$zcean9peK8LNb"
set logical-systems r3 protocols isis interface all level 2 hello-authentication-type md5
set logical-systems r3 protocols isis interface em3.13 level 2 disable
set logical-systems r3 protocols isis interface em3.13 level 1 hello-authentication-key "$9$/kI1Au18LN-wg"
set logical-systems r3 protocols isis interface em3.13 level 1 hello-authentication-type md5
set logical-systems r3 protocols isis interface em3.23 level 2 disable
set logical-systems r3 protocols isis interface em3.23 level 1 hello-authentication-key "$9$VbsgJTQn6A0"
set logical-systems r3 protocols isis interface em3.23 level 1 hello-authentication-type md5
set logical-systems r3 protocols isis interface em3.310 passive
set logical-systems r3 protocols isis interface lo0.3 passive
set logical-systems r3 policy-options policy-statement SUM term 1 from protocol aggregate
set logical-systems r3 policy-options policy-statement SUM term 1 from route-filter 10.0.4.0/22 exact
set logical-systems r3 policy-options policy-statement SUM term 1 to level 2
set logical-systems r3 policy-options policy-statement SUM term 1 then accept
set logical-systems r3 policy-options policy-statement SUM term 2 from route-filter 10.0.5.0/24 exact
set logical-systems r3 policy-options policy-statement SUM term 2 to level 2
set logical-systems r3 policy-options policy-statement SUM term 2 then accept
set logical-systems r3 policy-options policy-statement SUM term 3 from route-filter 10.0.4.0/22 longer
set logical-systems r3 policy-options policy-statement SUM term 3 to level 2
set logical-systems r3 policy-options policy-statement SUM term 3 then reject
set logical-systems r3 routing-options aggregate route 10.0.4.0/22
set logical-systems r4 interfaces em4 unit 24 description "Connect to r2 em2.24"
set logical-systems r4 interfaces em4 unit 24 vlan-id 24
set logical-systems r4 interfaces em4 unit 24 family inet address 10.0.4.9/30
set logical-systems r4 interfaces em4 unit 24 family iso
set logical-systems r4 interfaces em4 unit 34 description "Connect to r3 em3.34"
set logical-systems r4 interfaces em4 unit 34 vlan-id 34
set logical-systems r4 interfaces em4 unit 34 family inet address 10.0.2.6/30
set logical-systems r4 interfaces em4 unit 34 family iso
set logical-systems r4 interfaces em4 unit 45 description "Connect to r5 em5.45"
set logical-systems r4 interfaces em4 unit 45 vlan-id 45
set logical-systems r4 interfaces em4 unit 45 family inet address 10.0.2.10/30
set logical-systems r4 interfaces em4 unit 45 family iso
set logical-systems r4 interfaces lo0 unit 4 family inet address 10.0.3.4/32
set logical-systems r4 interfaces lo0 unit 4 family iso address 49.0002.0100.0000.3004.00
set logical-systems r4 protocols isis export SUM
set logical-systems r4 protocols isis reference-bandwidth 5g
set logical-systems r4 protocols isis lsp-lifetime 3600
set logical-systems r4 protocols isis level 2 authentication-key "$9$NRVs4PfzF/t"
set logical-systems r4 protocols isis level 2 authentication-type simple
set logical-systems r4 protocols isis interface all level 1 disable
set logical-systems r4 protocols isis interface all level 2 hello-authentication-key "$9$pAYBOIcN-ws4Z"
set logical-systems r4 protocols isis interface all level 2 hello-authentication-type md5
set logical-systems r4 protocols isis interface em4.24 level 2 disable
set logical-systems r4 protocols isis interface em4.24 level 1 hello-authentication-key "$9$O34HIhrVb2gJD"
set logical-systems r4 protocols isis interface em4.24 level 1 hello-authentication-type md5
set logical-systems r4 protocols isis interface lo0.4 passive
set logical-systems r4 policy-options policy-statement SUM term 1 from protocol aggregate
set logical-systems r4 policy-options policy-statement SUM term 1 from route-filter 10.0.4.0/22 exact
set logical-systems r4 policy-options policy-statement SUM term 1 to level 2
set logical-systems r4 policy-options policy-statement SUM term 1 then accept
set logical-systems r4 policy-options policy-statement SUM term 2 from route-filter 10.0.5.0/24 exact
set logical-systems r4 policy-options policy-statement SUM term 2 to level 2
set logical-systems r4 policy-options policy-statement SUM term 2 then accept
set logical-systems r4 policy-options policy-statement SUM term 3 from route-filter 10.0.4.0/22 longer
set logical-systems r4 policy-options policy-statement SUM term 3 to level 2
set logical-systems r4 policy-options policy-statement SUM term 3 then reject
set logical-systems r4 routing-options aggregate route 10.0.4.0/22
set logical-systems r5 interfaces em5 unit 35 description "Connect to r3 em3.35"
set logical-systems r5 interfaces em5 unit 35 vlan-id 35
set logical-systems r5 interfaces em5 unit 35 family inet address 10.0.2.1/30
set logical-systems r5 interfaces em5 unit 35 family iso
set logical-systems r5 interfaces em5 unit 45 description "Connect to r4 em4.45"
set logical-systems r5 interfaces em5 unit 45 vlan-id 45
set logical-systems r5 interfaces em5 unit 45 family inet address 10.0.2.9/30
set logical-systems r5 interfaces em5 unit 45 family iso
set logical-systems r5 interfaces em5 unit 56 description "Connect to r6 em6.56"
set logical-systems r5 interfaces em5 unit 56 vlan-id 56
set logical-systems r5 interfaces em5 unit 56 family inet address 10.0.8.6/30
set logical-systems r5 interfaces em5 unit 56 family iso
set logical-systems r5 interfaces em5 unit 57 description "Connect to r7 em7.57"
set logical-systems r5 interfaces em5 unit 57 vlan-id 57
set logical-systems r5 interfaces em5 unit 57 family inet address 10.0.8.9/30
set logical-systems r5 interfaces em5 unit 57 family iso
set logical-systems r5 interfaces lo0 unit 5 family inet address 10.0.3.5/32
set logical-systems r5 interfaces lo0 unit 5 family iso address 49.0001.0100.0000.3005.00
set logical-systems r5 protocols isis export SUM-1
set logical-systems r5 protocols isis export SUM-2
set logical-systems r5 protocols isis export SUM-3
set logical-systems r5 protocols isis reference-bandwidth 5g
set logical-systems r5 protocols isis lsp-lifetime 3600
set logical-systems r5 protocols isis level 2 authentication-key "$9$vY48xdDjq.5F"
set logical-systems r5 protocols isis level 2 authentication-type simple
set logical-systems r5 protocols isis level 1 preference 155
set logical-systems r5 protocols isis interface all level 1 disable
set logical-systems r5 protocols isis interface all level 2 hello-authentication-key "$9$Fl1u6CuKvLX-w"
set logical-systems r5 protocols isis interface all level 2 hello-authentication-type md5
set logical-systems r5 protocols isis interface em5.56 level 2 disable
set logical-systems r5 protocols isis interface em5.56 level 1 hello-authentication-key "$9$PTF/cSeK87"
set logical-systems r5 protocols isis interface em5.56 level 1 hello-authentication-type md5
set logical-systems r5 protocols isis interface em5.56 level 1 priority 0
set logical-systems r5 protocols isis interface em5.57 level 2 disable
set logical-systems r5 protocols isis interface em5.57 level 1 hello-authentication-key "$9$2qoZjn6AtOR"
set logical-systems r5 protocols isis interface em5.57 level 1 hello-authentication-type md5
set logical-systems r5 protocols isis interface em5.57 level 1 priority 0
set logical-systems r5 protocols isis interface lo0.5 passive
set logical-systems r5 policy-options policy-statement SUM-1 term 1 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-1 term 1 from route-filter 10.0.2.0/23 exact
set logical-systems r5 policy-options policy-statement SUM-1 term 1 to level 1
set logical-systems r5 policy-options policy-statement SUM-1 term 1 then accept
set logical-systems r5 policy-options policy-statement SUM-2 term 1 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-2 term 1 from route-filter 10.0.8.0/21 exact
set logical-systems r5 policy-options policy-statement SUM-2 term 1 to level 2
set logical-systems r5 policy-options policy-statement SUM-2 term 1 then accept
set logical-systems r5 policy-options policy-statement SUM-2 term 2 from route-filter 10.0.8.0/21 longer
set logical-systems r5 policy-options policy-statement SUM-2 term 2 then reject
set logical-systems r5 policy-options policy-statement SUM-3 term 1 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-3 term 1 from route-filter 192.168.0.0/22 exact
set logical-systems r5 policy-options policy-statement SUM-3 term 1 to level 2
set logical-systems r5 policy-options policy-statement SUM-3 term 1 then accept
set logical-systems r5 policy-options policy-statement SUM-3 term 2 from route-filter 192.168.0.0/22 longer
set logical-systems r5 policy-options policy-statement SUM-3 term 2 then reject
set logical-systems r5 policy-options policy-statement SUM-3 term 3 from protocol aggregate
set logical-systems r5 policy-options policy-statement SUM-3 term 3 from route-filter 172.16.40.0/29 exact
set logical-systems r5 policy-options policy-statement SUM-3 term 3 to level 2
set logical-systems r5 policy-options policy-statement SUM-3 term 3 then accept
set logical-systems r5 policy-options policy-statement SUM-3 term 4 from route-filter 172.16.40.0/29 longer
set logical-systems r5 policy-options policy-statement SUM-3 term 4 then reject
set logical-systems r5 routing-options aggregate route 10.0.2.0/23
set logical-systems r5 routing-options aggregate route 10.0.8.0/21
set logical-systems r5 routing-options aggregate route 192.168.0.0/22
set logical-systems r5 routing-options aggregate route 172.16.40.0/29
set logical-systems r6 interfaces em6 unit 56 description "Connect to r5 em5.56"
set logical-systems r6 interfaces em6 unit 56 vlan-id 56
set logical-systems r6 interfaces em6 unit 56 family inet address 10.0.8.5/30
set logical-systems r6 interfaces em6 unit 56 family iso
set logical-systems r6 interfaces em6 unit 67 description "Connect to r7 em7.67"
set logical-systems r6 interfaces em6 unit 67 vlan-id 67
set logical-systems r6 interfaces em6 unit 67 family inet address 10.0.8.1/30
set logical-systems r6 interfaces em6 unit 67 family iso
set logical-systems r6 interfaces em6 unit 68 description "Connect to OSPF em1.68"
set logical-systems r6 interfaces em6 unit 68 vlan-id 68
set logical-systems r6 interfaces em6 unit 68 family inet address 172.16.40.2/30
set logical-systems r6 interfaces lo0 unit 6 family inet address 10.0.9.6/32
set logical-systems r6 interfaces lo0 unit 6 family iso address 49.0001.0100.0000.9006.00
set logical-systems r6 protocols isis export OSPF>ISIS
set logical-systems r6 protocols isis reference-bandwidth 5g
set logical-systems r6 protocols isis lsp-lifetime 3600
set logical-systems r6 protocols isis level 1 preference 155
set logical-systems r6 protocols isis interface all level 2 disable
set logical-systems r6 protocols isis interface all level 1 hello-authentication-key "$9$Ujiqfu0IRSe"
set logical-systems r6 protocols isis interface all level 1 hello-authentication-type md5
set logical-systems r6 protocols isis interface all level 1 priority 0
set logical-systems r6 protocols isis interface lo0.6 passive
set logical-systems r6 protocols ospf external-preference 159
set logical-systems r6 protocols ospf export ISIS>OSPF
set logical-systems r6 protocols ospf area 0.0.0.2 nssa
set logical-systems r6 protocols ospf area 0.0.0.2 interface em6.68 authentication simple-password "$9$f5390ORyeW36rv"
set logical-systems r6 policy-options policy-statement ISIS>OSPF term 1 from protocol isis
set logical-systems r6 policy-options policy-statement ISIS>OSPF term 1 from route-filter 0.0.0.0/0 exact
set logical-systems r6 policy-options policy-statement ISIS>OSPF term 1 then accept
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 from protocol ospf
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 from route-filter 192.168.0.0/22 longer
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 from route-filter 172.16.40.0/29 longer
set logical-systems r6 policy-options policy-statement OSPF>ISIS term 1 then accept
set logical-systems r7 interfaces em7 unit 57 description "Connect to r5 em5.57"
set logical-systems r7 interfaces em7 unit 57 vlan-id 57
set logical-systems r7 interfaces em7 unit 57 family inet address 10.0.8.10/30
set logical-systems r7 interfaces em7 unit 57 family iso
set logical-systems r7 interfaces em7 unit 67 description "Connect to r6 em6.67"
set logical-systems r7 interfaces em7 unit 67 vlan-id 67
set logical-systems r7 interfaces em7 unit 67 family inet address 10.0.8.2/30
set logical-systems r7 interfaces em7 unit 67 family iso
set logical-systems r7 interfaces em7 unit 78 description "Connect to OSPF em1.78"
set logical-systems r7 interfaces em7 unit 78 vlan-id 78
set logical-systems r7 interfaces em7 unit 78 family inet address 172.16.40.6/30
set logical-systems r7 interfaces lo0 unit 7 family inet address 10.0.9.7/32
set logical-systems r7 interfaces lo0 unit 7 family iso address 49.0001.0100.0000.9007.00
set logical-systems r7 protocols isis export OSPF>ISIS
set logical-systems r7 protocols isis reference-bandwidth 5g
set logical-systems r7 protocols isis lsp-lifetime 3600
set logical-systems r7 protocols isis level 1 preference 155
set logical-systems r7 protocols isis interface all level 2 disable
set logical-systems r7 protocols isis interface all level 1 hello-authentication-key "$9$IRhhyKsYoaUH"
set logical-systems r7 protocols isis interface all level 1 hello-authentication-type md5
set logical-systems r7 protocols isis interface all level 1 priority 0
set logical-systems r7 protocols isis interface lo0.7 passive
set logical-systems r7 protocols ospf external-preference 159
set logical-systems r7 protocols ospf export ISIS>OSPF
set logical-systems r7 protocols ospf area 0.0.0.2 nssa
set logical-systems r7 protocols ospf area 0.0.0.2 interface em7.78 authentication simple-password "$9$.mQntpBhyKQFcl"
set logical-systems r7 policy-options policy-statement ISIS>OSPF term 1 from protocol isis
set logical-systems r7 policy-options policy-statement ISIS>OSPF term 1 from route-filter 0.0.0.0/0 exact
set logical-systems r7 policy-options policy-statement ISIS>OSPF term 1 then accept
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 from protocol ospf
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 from route-filter 192.168.0.0/22 longer
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 from route-filter 172.16.40.0/29 longer
set logical-systems r7 policy-options policy-statement OSPF>ISIS term 1 then accept
set chassis alarm management-ethernet link-down ignore
set interfaces em0 unit 0 family inet address 10.0.1.1/24
set interfaces em1 vlan-tagging
set interfaces em2 vlan-tagging
set interfaces em3 vlan-tagging
set interfaces em4 vlan-tagging
set interfaces em5 vlan-tagging
set interfaces em6 vlan-tagging
set interfaces em7 vlan-tagging
set snmp interface em0.0
set snmp community public authorization read-only
set snmp community private authorization read-write
set snmp trap-group FOO version v1
set snmp trap-group FOO categories authentication
set snmp trap-group FOO targets 10.0.200.2
set routing-options static route 10.0.200.0/24 next-hop 10.0.1.102
set routing-options static route 10.0.200.0/24 no-readvertise
[edit]
root@JNCIP_1#
(Olvie-2):
root@JNCIP_2# show | display set
set version 12.1R1.9
set system host-name JNCIP_2
set system root-authentication encrypted-password "$1$iUWoHDQs$pGhPDBTA1l0idhazm/jPQ."
set logical-systems OSPF interfaces em1 unit 68 description "Connecto to r6 em6.68"
set logical-systems OSPF interfaces em1 unit 68 vlan-id 68
set logical-systems OSPF interfaces em1 unit 68 family inet address 172.16.40.1/30
set logical-systems OSPF interfaces em1 unit 78 description "Connecto to r7 em7.78"
set logical-systems OSPF interfaces em1 unit 78 vlan-id 78
set logical-systems OSPF interfaces em1 unit 78 family inet address 172.16.40.5/30
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.0.1/32
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.1.1/32
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.2.1/32
set logical-systems OSPF interfaces lo0 unit 1 family inet address 192.168.3.1/32
set logical-systems OSPF protocols ospf area 0.0.0.2 nssa
set logical-systems OSPF protocols ospf area 0.0.0.2 interface all authentication simple-password "$9$eOMKLNsYoUi.LxDk"
set logical-systems T1 interfaces em3 unit 310 description "Connect to r3 em3.310"
set logical-systems T1 interfaces em3 unit 310 vlan-id 310
set logical-systems T1 interfaces em3 unit 310 family inet address 172.16.0.14/30
set logical-systems T1 interfaces em3 unit 310 family iso address 49.0003.1720.1600.0014.00
set logical-systems T1 protocols isis interface all level 1 disable
set interfaces em1 vlan-tagging
set interfaces em3 vlan-tagging
[edit]
root@JNCIP_2#
Reference:
Juniper Networks Certified Internet Professional Study Guide
Chapter 4 Case Study (p.319)
JunOS 12.1 IS-IS Configuration Guide
http://www.juniper.net/techpubs/en_US/junos12.1/information-products/pathway-pages/config-guide-routing/config-guide-routing-is-is.html
最初發表 / 最後更新: 2014.05.28 / 2018.06.15
0 comments:
張貼留言