Lab 26: BGP-II

Task

Topology

1. Configure IP Address as per given in topology. Make sure all routers have four loopbacks (e.g. on R1 L1 1.1.1.1/24 L2 1.1.2.1/24.)
2. Configure IBGP as per given in topology and advertise first two loopbacks in IBGP Domain.
3. Configure HSRP on R5 and R6. Use Virtual IP as 192.168.20.254 and MD5 authentication key as "N3tW@x!ab".
4. Configure Server as per given in topology. Make sure Routers who participate in BGP 100 will ping netwaxlab and blog.eincop.com
5. Configure BGP as per given in topology. Also Configure Sub BGP in BGP 1000.
6. Make sure Loopback which is participating in BGP domains will communicate each other’s.
7. Make sure OSPF Area 0 authenticate with MD5 using "N3tW@x!ab" key.
8. Configure BGP authentication between R4 and R6 using "N3tW@x!ab" key.
9. On R9, R14 is the best path for networks 8.8.1.0, 8.8.2.0, 8.8.3.0 and 8.8.4.0.
10. R11 receives all the routes from R8. Expect their own BGP domain.

Solution

Task 2: Configure IBGP as per given in topology and advertise first two loopbacks in IBGP Domain.

R1
==

router ospf 1
 router-id 1.1.1.1
 network 1.1.1.0 0.0.0.255 area 0
 network 1.1.2.0 0.0.0.255 area 0
 network 10.0.13.0 0.0.0.255 area 0
 network 10.0.14.0 0.0.0.255 area 0
 exit

R2
==

router ospf 1
 router-id 2.2.2.2
 network 2.2.1.0 0.0.0.255 area 0
 network 2.2.2.0 0.0.0.255 area 0
 network 10.0.23.0 0.0.0.255 area 0
 network 10.0.24.0 0.0.0.255 area 0
 exit

R3
==

router ospf 1
 router-id 3.3.3.3
 network 3.3.1.0 0.0.0.255 area 0
 network 3.3.2.0 0.0.0.255 area 0
 network 10.0.13.0 0.0.0.255 area 0
 network 10.0.23.0 0.0.0.255 area 0
 exit

R4
==

router ospf 1
 router-id 4.4.4.4
 network 4.4.1.0 0.0.0.255 area 0
 network 4.4.2.0 0.0.0.255 area 0
 network 10.0.14.0 0.0.0.255 area 0
 network 10.0.24.0 0.0.0.255 area 0
 network 20.0.45.0 0.0.0.255 area 1
 network 20.0.46.0 0.0.0.255 area 1


R5
==

router ospf 1
 router-id 5.5.5.5
 network 5.5.1.0 0.0.0.255 area 1
 network 5.5.2.0 0.0.0.255 area 1
 network 20.0.45.0 0.0.0.255 area 1
 network 192.168.20.0 0.0.0.255 area 1
 exit

R6
==

router ospf 1
 router-id 6.6.6.6
 network 6.6.1.0 0.0.0.255 area 1
 network 6.6.2.0 0.0.0.255 area 1
 network 20.0.46.0 0.0.0.255 area 1
 network 192.168.20.0 0.0.0.255 area 1
 exit

R11
===

router eigrp 100
 network 10.0.112.0 0.0.0.255
 network 10.0.113.0 0.0.0.255
 network 11.11.1.0 0.0.0.255
 network 11.11.2.0 0.0.0.255
 no auto-summary


R12
===

router eigrp 100
 network 10.0.112.0 0.0.0.255
 network 10.0.114.0 0.0.0.255
 network 12.12.1.0 0.0.0.255
 network 12.12.2.0 0.0.0.255
 no auto-summary


R13
===

router eigrp 100
 network 10.0.113.0 0.0.0.255
 network 13.13.1.0 0.0.0.255
 network 13.13.2.0 0.0.0.255
 no auto-summary


R14
===

router eigrp 100
 network 10.0.114.0 0.0.0.255
 network 14.14.1.0 0.0.0.255
 network 14.14.2.0 0.0.0.255
 no auto-summary


Task 3: Configure HSRP on R5 and R6. Use Virtual IP as 192.168.20.254 and MD5 authentication key as "N3tW@x!ab".

R5
==

int f0/0
 standby 1 ip 192.168.20.254
 standby 1 priority 101
 standby 1 preempt
 standby 1 authentication md5 key-string N3tW@x!ab
 exit

R6
==

int f1/0
 standby 1 ip 192.168.20.254
 standby 1 priority 99
 standby 1 preempt
 standby 1 authentication md5 key-string N3tW@x!ab

 
Task 4: Configure Server as per given in topology. Make sure Routers who participate in BGP 100 will ping netwaxlab and blog.eincop.com

R6
==

int l1
 ip add 99.99.99.100 255.255.255.0

int l2
 ip add 99.99.98.11 255.255.255.0


R4, R5 and R6
==============

ip domain lookup
ip name-server 192.168.20.200


Task 5: Configure BGP as per given in toplogy. Also Configure Sub BGP in BGP 1000. (Task 6 will also complete in this task).

R1
==

router bgp 100
 no synchronization
 bgp log-neighbor-changes
 network 1.1.3.0 mask 255.255.255.0
 network 1.1.4.0 mask 255.255.255.0
 neighbor 10.0.13.3 remote-as 100
 neighbor 10.0.14.4 remote-as 100
 neighbor 10.0.14.4 route-reflector-client
 neighbor 10.0.14.4 next-hop-self
 no auto-summary


R2
==

router bgp 100
 no synchronization
 bgp log-neighbor-changes
 network 2.2.3.0 mask 255.255.255.0
 network 2.2.4.0 mask 255.255.255.0
 neighbor 10.0.23.3 remote-as 100
 neighbor 10.0.24.4 remote-as 100
 neighbor 10.0.24.4 route-reflector-client
 neighbor 10.0.24.4 next-hop-self
 no auto-summary


R3
==

router bgp 100
 no synchronization
 bgp log-neighbor-changes
 network 3.3.3.0 mask 255.255.255.0
 network 3.3.4.0 mask 255.255.255.0
 neighbor 7.7.1.1 remote-as 200
 neighbor 7.7.1.1 ebgp-multihop 2
 neighbor 7.7.1.1 update-source Loopback1
 neighbor 8.8.1.1 remote-as 1422
 neighbor 8.8.1.1 ebgp-multihop 2
 neighbor 8.8.1.1 update-source Loopback1
 neighbor 10.0.13.1 remote-as 100
 neighbor 10.0.13.1 next-hop-self
 neighbor 10.0.23.2 remote-as 100
 neighbor 10.0.23.2 route-reflector-client
 neighbor 10.0.23.2 next-hop-self
 neighbor 10.0.37.7 remote-as 200
 neighbor 10.0.38.8 remote-as 1422
 no auto-summary


R4
==

router bgp 100
 no synchronization
 bgp log-neighbor-changes
 network 4.4.3.0 mask 255.255.255.0
 network 4.4.4.0 mask 255.255.255.0
 neighbor 10.0.14.1 remote-as 100
 neighbor 10.0.14.1 route-reflector-client
 neighbor 10.0.14.1 next-hop-self
 neighbor 10.0.24.2 remote-as 100
 neighbor 10.0.24.2 route-reflector-client
 neighbor 10.0.24.2 next-hop-self
 neighbor 20.0.45.5 remote-as 100
 neighbor 20.0.45.5 route-reflector-client
 neighbor 20.0.45.5 next-hop-self
 neighbor 20.0.46.6 remote-as 100
 neighbor 20.0.46.6 route-reflector-client
 neighbor 20.0.46.6 next-hop-self
 no auto-summary

R5
==

router bgp 100
 no synchronization
 bgp log-neighbor-changes
 network 5.5.3.0 mask 255.255.255.0
 network 5.5.4.0 mask 255.255.255.0
 network 192.168.20.0
 neighbor 20.0.45.4 remote-as 100
 no auto-summary


R6
==

router bgp 100
 no synchronization
 bgp log-neighbor-changes
 network 6.6.3.0 mask 255.255.255.0
 network 6.6.4.0 mask 255.255.255.0
 network 99.99.98.0 mask 255.255.255.0
 network 99.99.99.0 mask 255.255.255.0
 network 192.168.20.0
 neighbor 9.9.1.1 remote-as 1330
 neighbor 9.9.1.1 ebgp-multihop 2
 neighbor 9.9.1.1 update-source Loopback1
 neighbor 10.0.69.9 remote-as 1330
 neighbor 10.10.1.1 remote-as 400
 neighbor 10.10.1.1 ebgp-multihop 2
 neighbor 10.10.1.1 update-source Loopback1
 neighbor 20.0.46.4 remote-as 100
 neighbor 20.0.46.4 next-hop-self
 no auto-summary


R7
==

router bgp 200
 no synchronization
 bgp log-neighbor-changes
 network 7.7.1.0 mask 255.255.255.0
 network 7.7.2.0 mask 255.255.255.0
 network 7.7.3.0 mask 255.255.255.0
 network 7.7.4.0 mask 255.255.255.0
 network 10.0.0.0 mask 255.255.255.0
 network 20.0.0.0 mask 255.255.255.0
 neighbor 3.3.1.1 remote-as 100
 neighbor 3.3.1.1 ebgp-multihop 2
 neighbor 3.3.1.1 update-source Loopback1
 neighbor 10.0.37.3 remote-as 100
 no auto-summary


R8
==

router bgp 1422
 no synchronization
 bgp log-neighbor-changes
 network 8.8.1.0 mask 255.255.255.0
 network 8.8.2.0 mask 255.255.255.0
 network 8.8.3.0 mask 255.255.255.0
 network 8.8.4.0 mask 255.255.255.0
 network 192.168.4.0
 neighbor 3.3.1.1 remote-as 100
 neighbor 3.3.1.1 ebgp-multihop 2
 neighbor 3.3.1.1 update-source Loopback1
 neighbor 10.0.38.3 remote-as 100
 neighbor 10.0.81.11 remote-as 1000
 neighbor 11.11.1.1 remote-as 1000
 neighbor 11.11.1.1 ebgp-multihop 2
 neighbor 11.11.1.1 update-source Loopback1
 no auto-summary


R9
==

router bgp 1330
 no synchronization
 bgp log-neighbor-changes
 network 9.9.1.0 mask 255.255.255.0
 network 9.9.2.0 mask 255.255.255.0
 network 9.9.3.0 mask 255.255.255.0
 network 9.9.4.0 mask 255.255.255.0
 neighbor 6.6.1.1 remote-as 100
 neighbor 6.6.1.1 ebgp-multihop 2
 neighbor 6.6.1.1 update-source Loopback1
 neighbor 10.0.69.6 remote-as 100
 neighbor 10.0.149.14 remote-as 1000
 neighbor 14.14.1.1 remote-as 1000
 neighbor 14.14.1.1 ebgp-multihop 2
 neighbor 14.14.1.1 update-source Loopback1
 no auto-summary


R10
===

router bgp 400
 no synchronization
 bgp log-neighbor-changes
 network 10.10.1.0 mask 255.255.255.0
 network 10.10.2.0 mask 255.255.255.0
 network 10.10.3.0 mask 255.255.255.0
 network 10.10.4.0 mask 255.255.255.0
 neighbor 6.6.1.1 remote-as 100
 neighbor 6.6.1.1 ebgp-multihop 2
 neighbor 6.6.1.1 update-source Loopback1
 neighbor 10.0.60.0 remote-as 100
 no auto-summary


R11
===

router bgp 1000
 no synchronization
 bgp log-neighbor-changes
 bgp confederation identifier 1000
 bgp confederation peers 230
 network 11.11.3.0 mask 255.255.255.0
 network 11.11.4.0 mask 255.255.255.0
 neighbor 8.8.1.1 remote-as 1422
 neighbor 8.8.1.1 ebgp-multihop 2
 neighbor 8.8.1.1 update-source Loopback1
 neighbor 10.0.81.8 remote-as 1422
 neighbor 10.0.112.12 remote-as 1000
 neighbor 10.0.112.12 next-hop-self
 neighbor 10.0.113.13 remote-as 230
 neighbor 10.0.113.13 next-hop-self
 no auto-summary


R12
===

router bgp 1000
 no synchronization
 bgp log-neighbor-changes
 bgp confederation identifier 1000
 bgp confederation peers 260
 network 12.12.3.0 mask 255.255.255.0
 network 12.12.4.0 mask 255.255.255.0
 neighbor 10.0.112.11 remote-as 1000
 neighbor 10.0.112.11 next-hop-self
 neighbor 10.0.114.14 remote-as 260
 neighbor 10.0.114.14 next-hop-self
 no auto-summary


R13
===

router bgp 230
 no synchronization
 bgp log-neighbor-changes
 bgp confederation identifier 1000
 bgp confederation peers 1000
 network 13.13.3.0 mask 255.255.255.0
 network 13.13.4.0 mask 255.255.255.0
 neighbor 10.0.113.11 remote-as 1000
 no auto-summary


R14
===

router bgp 260
 no synchronization
 bgp log-neighbor-changes
 bgp confederation identifier 1000
 bgp confederation peers 1000
 network 14.14.3.0 mask 255.255.255.0
 network 14.14.4.0 mask 255.255.255.0
 neighbor 9.9.1.1 remote-as 1330
 neighbor 9.9.1.1 ebgp-multihop 2
 neighbor 9.9.1.1 update-source Loopback1
 neighbor 10.0.114.12 remote-as 1000
 neighbor 10.0.114.12 next-hop-self
 neighbor 10.0.149.9 remote-as 1330
 no auto-summary

 
(Task 6: Already Complete in above task)


Task 7: Make sure OSPF Area 0 authenticate with MD5 using "N3tW@x!ab" key.
 
R1
==

router ospf 1
 area 0 authentication
 exit

int se0/0
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit

int se0/1
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit

R2
==

router ospf 1
 area 0 authentication
 exit

int se0/0
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit

int se0/1
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit

R3
==

router ospf 1
 area 0 authentication
 exit

int se0/0
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit

int se0/1
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit

R4
==

router ospf 1
 area 0 authentication
 exit

int se0/0
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit

int se0/1
 ip ospf authentication message-digest
 ip ospf message-digest-key 10 md5 N3tW@x!ab
 exit


Task 8: Configure BGP authentication between R4 and R6 using "N3tW@x!ab" key.

R4
==

router bgp 100
 neighbor 20.0.46.6 password N3tW@x!ab
 exit

R6
==

router bgp 100
 neighbor 20.0.46.4 password N3tW@x!ab
 exit


Task 9: On R9, R14 is the best path for networks 8.8.1.0, 8.8.2.0, 8.8.3.0 and 8.8.4.0.

R9
==

access-list 10 permit 8.8.1.0 0.0.0.255
access-list 10 permit 8.8.2.0 0.0.0.255
access-list 10 permit 8.8.3.0 0.0.0.255
access-list 10 permit 8.8.4.0 0.0.0.255

route-map R8 permit 10
 match ip address 10
 set local-preference 500
 exit

route-map R8 permit 20
 exit

router bgp 1330
 neighbor 10.0.149.14 route-map R8 in
 exit


Task 10: R11 receives all the routes from R8. Expect their own BGP domain.

R11
===

access-list 10 permit 9.9.1.0 0.0.0.255
access-list 10 permit 9.9.2.0 0.0.0.255
access-list 10 permit 9.9.3.0 0.0.0.255
access-list 10 permit 9.9.4.0 0.0.0.255

route-map R9 permit 10
 match ip address 10
 set weight 1500
 exit

route-map R9 permit 20
 exit

router bgp 1000
 neighbor 10.0.81.8 route-map R9 in
 exit