© 2014-2018 CCIERNSTRICKS.

COM July 29, 2018

1.1 SWITCH ADMINISTRATION

Configure the ACME headquarters network (AS 12345) as per the following requirements
 The VTP domain must be set to CCIE
 Use VTP version 2
 SW1 must be the VTP server and SW2 must be the VTP client
 Secure all VTP update with an MD5 digest of the ASCII string CCIErock$
 In order to avoid as much as possible unknown unicast flooding in all VLANs the administrator
requires that any dynamic entries learned by either SW1 to SW2 must be retained for 2 hours
before being refresh,

Configure the network of the new York office (AS 34567) as per the following requirements
 The VTP domain must be set to CCIE
 Use VTP version 2
 SW3 and SW4 must no advertise their VLAN configuration but must forward VTP advertisement
that they receive out their trunk ports
 Secure all VTP update with an MD5 digest of the ASCII string CCIErock?

DIAGRAM:

ACME ACME HQ
SAN JOSE SAN FRANCISCO ACME
BGP AS 65112 101.1.123.2/30 BGP AS 12345 102.2.123.2/30 NEW YORK
5x VPN 5x VPN
5x VPN E0/0
123.10.1.X/30 101.1.34.2/30 BGP AS 34567 102.1.34.2/30
E0/0 E0/0
E0/0 .2 123.10.2.X/30 E0/0
VLAN 23
E0/3 .1 E0/2 .13 E0/2 .1 E0/1 .2
E0/1 .9 E0/1 .10
R3 VLAN 89
R2 33 Internet SP
R20 VLAN 24 E0/2 .17 VLAN 35 E0/1 .5 R8 R9 E0/2 .9 .
E1/ 34.4.
0 2/3 BGP 30000
E0/1 .6 E0/3.5 0
VLAN 38 VLAN 49
5x VPN E0/1 .18 E0/2 .14
S38 .6 S49 .10
E0/0 .2 VLAN 14 E0/1 .1 E0/2 .5 VLAN 15 E0/1 .6 VLAN 34

R4 R5 S34 .13 S34 .14

E0/2 .21 R1 E0/0 .29 S310 .17 SW3 SW4 S411 .21

VLAN 310 VLAN 411 2 /30

.3.
VLAN 46 VLAN 57 .34
SW1 SW2 E0/1 .18 R11 E0/2 .22 33 0
R10 E1/
VLAN 111
10.2.19.1/24 E0/2 .22 VLAN 67 E0/2 .30
R6 E0/2 .25 E0/1 .26
E0/1 .25
R7
E0/1 .26
E0/0 .2 E0/0 .2
E0/0 .2 E0/0 .2
3x VPN 202.2.34.2/30
3x VPN 201.1.34.2/30
201.1.123.2/30
202.2.123.2/30

SOLUTION:
SW1:
CCIERNSTRICKS.COM_H1.1_SW1(config)#
CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP domain CCIE

© 2014-2018 CCIERNSTRICKS.COM 127

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP mode server

CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP version 2
CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP password CCIErock?
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER
CCIERNSTRICKS.COM_H1.1_SW1(config)#Mac-address again 7200

SW2:
CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP domain CCIE
CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP mode client
CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP password CCIErock?
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER
CCIERNSTRICKS.COM_H1.1_SW2(config)#Mac-address again 7200

SW3
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP domain CCIE
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP version 2
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP mode transparent
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP password CCIErock$
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER

SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP domain CCIE
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP version 2
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP mode transparent
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP password CCIErock$
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER

© 2014-2018 CCIERNSTRICKS.COM 128

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

1.2 LAYER 2 PORTS

Configure your network as per the following requirements

Complete the configuration of all VLANs so that all routers those are located in ACME's
Headquarters (AS12345) and New York office (AS 34567) can ping their directly connected neighbors

 All four switches (SW1-SW4) must have dot1q trunks that do not rely on negotiation do not
configure any etherchannel
 Ensure that the following unused ports on all four switches are shutdown and
 Configured as access ports in VLAN 999

E3/0 - E3/3 are unused on SW1 and SW2

E1/0 - E1/3 are unused on SW3 and SW4
E3/0 - E3/3 are unused on SW3 and SW4

DIAGRAM:

ACME ACME HQ
SAN JOSE SAN FRANCISCO ACME
BGP AS 65112 101.1.123.2/30 BGP AS 12345 102.2.123.2/30 NEW YORK
5x VPN 5x VPN
5x VPN E0/0
123.10.1.X/30 101.1.34.2/30 BGP AS 34567 102.1.34.2/30
E0/0 E0/0
E0/0 .2 123.10.2.X/30 E0/0
VLAN 23
E0/3 .1 E0/2 .13 E0/2 .1 E0/1 .2
E0/1 .9 E0/1 .10
R3 VLAN 89
R2 33 Internet SP
R20 VLAN 24 E0/2 .17 VLAN 35 E0/1 .5 R8 R9 E0/2 .9 .
E1/ 34.4.
0 2/3 BGP 30000
E0/1 .6 E0/3.5 0
VLAN 38 VLAN 49
5x VPN E0/1 .18 E0/2 .14
S38 .6 S49 .10
E0/0 .2 VLAN 14 E0/1 .1 E0/2 .5 VLAN 15 E0/1 .6 VLAN 34

R4 R5 S34 .13 S34 .14

E0/2 .21 R1 E0/0 .29 S310 .17 SW3 SW4 S411 .21

VLAN 310 VLAN 411 2 /30

.3.
VLAN 46 VLAN 57 .34
SW1 SW2 E0/1 .18 R11 E0/2 .22 33 0
R10 E1/
VLAN 111
10.2.19.1/24 E0/2 .22 VLAN 67 E0/2 .30
R6 E0/2 .25 E0/1 .26
E0/1 .25
R7
E0/1 .26
E0/0 .2 E0/0 .2
E0/0 .2 E0/0 .2
3x VPN 202.2.34.2/30
3x VPN 201.1.34.2/30
201.1.123.2/30
202.2.123.2/30

SOLUTION:
SW1:
CCIERNSTRICKS.COM_H1.1_SW1(config)#Vlan 14,15,23,24,35,46,57,67,999

TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access

© 2014-2018 CCIERNSTRICKS.COM 129

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 14

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 23

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 23

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 24

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 14

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 15

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 67

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 67

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
© 2014-2018 CCIERNSTRICKS.COM 130
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999

CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW1(config)#Interface range eth 2/0-3

CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport nonegotiate

SW2:
TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 15

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 24

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 35

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 46

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 57

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 35

© 2014-2018 CCIERNSTRICKS.COM 131

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 46

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 57

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW2(config)#Interface range eth 2/0-3

CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport nonegotiate

SW3:
CCIERNSTRICKS.COM_H1.1_SW3(config)#Vlan 34,38,49,89,111,310,411,999

TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access

© 2014-2018 CCIERNSTRICKS.COM 132

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 38

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 89

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 310

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 111

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
© 2014-2018 CCIERNSTRICKS.COM 133
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#Interface range eth 2/0-3

CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport nonegotiate

IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan34
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan38
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan310
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown

SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config)#Vlan 34,38,49,89,111,310,411,999
TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 89

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 49

© 2014-2018 CCIERNSTRICKS.COM 134

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 111

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 411

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
© 2014-2018 CCIERNSTRICKS.COM 135
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown

CCIERNSTRICKS.COM_H1.1_SW4(config)#Interface range eth 2/0-3

CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport nonegotiate

IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan34
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan49
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown

CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan411
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown

AFTER CONFIGURATION OF ALL ABOVE TASK PLEASE MAKE SURE THAT ALL DEVICES IN AS 12345 AND AS
34567 ARE ABLE TO PING ITS DIRECTLY CONNECTED NEIGHBORS

© 2014-2018 CCIERNSTRICKS.COM 136

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

1.3 SPANNING TREE

Configure the ACME network as per the following requirements.
 SW1 must be the root switch for all odd vlans and must be the backup for all even vlans
 SW2 must be the root switch for all even vlans and must be the backup for all odd vlans
 SW3 must be the root switch for all odd vlans and must be the backup for all even vlans
 SW4 must be the root switch for all even vlans and must be the backup for all odd vlans
 Explicitly configure the root and backup roles, assuming that other switches with default
configuration may eventually be added in the network in the future
 All switches must maintain one STP instance per vlan
 Use the STP mode that has only three possible states
 All access ports must immediately transitioned to the forwarding state upon link up and they
must still participate in STP. Use single command per switch to enable this
 Access ports must automatically shut down if they receive any BPDU and an administrator must
still manually re-enable the port. Use a single command per switch to enable this feature.

DIAGRAM:

ACME ACME HQ
SAN JOSE SAN FRANCISCO ACME
BGP AS 65112 101.1.123.2/30 BGP AS 12345 102.2.123.2/30 NEW YORK
5x VPN 5x VPN
5x VPN E0/0
123.10.1.X/30 101.1.34.2/30 BGP AS 34567 102.1.34.2/30
E0/0 E0/0
E0/0 .2 123.10.2.X/30 E0/0
VLAN 23
E0/3 .1 E0/2 .13 E0/2 .1 E0/1 .2
E0/1 .9 E0/1 .10
R3 VLAN 89
R2 33 Internet SP
R20 VLAN 24 E0/2 .17 VLAN 35 E0/1 .5 R8 R9 E0/2 .9 .
E1/ 34.4.
0 2/3 BGP 30000
E0/1 .6 E0/3.5 0
VLAN 38 VLAN 49
5x VPN E0/1 .18 E0/2 .14
S38 .6 S49 .10
E0/0 .2 VLAN 14 E0/1 .1 E0/2 .5 VLAN 15 E0/1 .6 VLAN 34

R4 R5 S34 .13 S34 .14

E0/2 .21 R1 E0/0 .29 S310 .17 SW3 SW4 S411 .21

VLAN 310 VLAN 411 2 /30

.3.
VLAN 46 VLAN 57 .34
SW1 SW2 E0/1 .18 R11 E0/2 .22 33 0
R10 E 1/
VLAN 111
10.2.19.1/24 E0/2 .22 VLAN 67 E0/2 .30
R6 E0/2 .25 E0/1 .26
E0/1 .25
R7
E0/1 .26
E0/0 .2 E0/0 .2
E0/0 .2 E0/0 .2
3x VPN 202.2.34.2/30
3x VPN 201.1.34.2/30
201.1.123.2/30
202.2.123.2/30

SOLUTIONS:

SW1:
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree vlan 1,15,23,35,57,67,999 priority 0
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree vlan 14,24,46 priority 4096
© 2014-2018 CCIERNSTRICKS.COM 137
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

SW2:
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree vlan 1,15,23,35,57,67,999 priority 4096
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree vlan 14,24,46 priority 0

SW3:
CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW3(config)#spanning-tree vlan 1,49,89,111,411,999 priority 0
CCIERNSTRICKS.COM_H1.1_SW3(config)#spanning-tree vlan 34,38,310 priority 4096

SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW4(config)#spanning-tree vlan 1,49,89,111,411,999 priority 4096
CCIERNSTRICKS.COM_H1.1_SW4(config)#spanning-tree vlan 34,38,310 priority 0

© 2014-2018 CCIERNSTRICKS.COM 138

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

1.4 WAN SWITCHING

The WAN links must rely on a layer 2 protocol that supports link negotiation and authentication.
 The Service provider expects both R18 and R19 to complete three way hand shake by providing
the expected response of a challenge that is sent by AS 20003 Router
 R18 must use the username ACME-R18 and password CCIE
 R19 must use the username ACME-R19 and password CCIE

DIAGRAM:

SOLUTIONS:

R18:
CCIERNSTRICKS.COM_H1.1_R18(config)#int s1/0
CCIERNSTRICKS.COM_H1.1_R18(config)# no shutdown
CCIERNSTRICKS.COM_H1.1_R18(config-if)#encap ppp
CCIERNSTRICKS.COM_H1.1_R18(config-if)#no peer neighbor-route
CCIERNSTRICKS.COM_H1.1_R18(config-if)#ppp chap hostname ACME-R18
CCIERNSTRICKS.COM_H1.1_R18(config-if)#ppp chap password CCIE

R19:
CCIERNSTRICKS.COM_H1.1_R19(config)#int s1/0
CCIERNSTRICKS.COM_H1.1_R19(config)# no shutdown

© 2014-2018 CCIERNSTRICKS.COM 139

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_R19(config-if)#encap ppp
CCIERNSTRICKS.COM_H1.1_R19(config-if)#no peer neighbor-route
CCIERNSTRICKS.COM_H1.1_R19(config-if)#ppp chap hostname ACME-R19
CCIERNSTRICKS.COM_H1.1_R19(config-if)#ppp chap password CCIE

© 2014-2018 CCIERNSTRICKS.COM 140

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

SECTION II LAYER 3 TECHNOLOGIES

© 2014-2018 CCIERNSTRICKS.COM 141

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

2.1 OSPF IN AS12345

Configure OSPFv2 area 0 in ACME HQ (AS12345) according to the following requirements:
 Configure the OSPF process id to 12345 and set the router id to interface lo0 on all seven
routers
 The interface lo0 at each router must be seen as an internal OSPF prefix by all other routers
 Ensure that OSPF is not running on any interface that is facing another AS. use any method to
accomplish this requirement
 SW1 and SW2 must not participate in routing at all
 Do not change the default OSPF cost of any interface in AS12345
 Ensure that R1 must see OSPF routes in routing table as STUB, it is not order you configure R1 in
STUB area, just make sure R1 won't be a Transit router of Traffics R1 is not Source or Destination
 R1 must see the following OSPF routes in the routing table

R1#sh ip route OSPF

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override

Gateway of last resort is not set

123.0.0.0/8 is variably subnetted, 17 subnets, 2 masks

O 123.2.2.2/32 [110/65546] via 123.10.1.2, 00:03:57, Ethernet0/1
O 123.3.3.3/32 [110/65546] via 123.10.1.6, 00:03:31, Ethernet0/2
O 123.4.4.4/32 [110/65536] via 123.10.1.2, 00:04:07, Ethernet0/1
O 123.5.5.5/32 [110/65536] via 123.10.1.6, 00:03:31, Ethernet0/2
O 123.6.6.6/32 [110/65546] via 123.10.1.2, 00:03:04, Ethernet0/1
O 123.7.7.7/32 [110/65546] via 123.10.1.6, 00:02:36, Ethernet0/2
O 123.10.1.8/30 [110/65555] via 123.10.1.6, 00:03:31, Ethernet0/2
[110/65555] via 123.10.1.2, 00:03:57, Ethernet0/1
O 123.10.1.12/30 [110/65545] via 123.10.1.6, 00:03:31, Ethernet0/2
O 123.10.1.16/30 [110/65545] via 123.10.1.2, 00:04:07, Ethernet0/1
© 2014-2018 CCIERNSTRICKS.COM 142
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

O 123.10.1.20/30 [110/65545] via 123.10.1.2, 00:03:57, Ethernet0/1

O 123.10.1.24/30 [110/65555] via 123.10.1.6, 00:02:36, Ethernet0/2
[110/65555] via 123.10.1.2, 00:01:56, Ethernet0/1
O 123.10.1.28/30 [110/65545] via 123.10.1.6, 00:03:31, Ethernet0/2
R1#

DIAGRAM:

ACME HQ
SAN FRANCISCO
101.1.123.2/30 BGP AS 12345 102.2.123.2/30
5x VPN 5x VPN
123.10.1.X/30
E0/0 E0/0
VLAN 23
E0/3 .1 E0/1 .9 E0/1 .10 E0/2 .13

R2 R3
VLAN 24 E0/2 .17 VLAN 35
E0/3.5
E0/1 .18 E0/2 .14

E0/0 .2 VLAN 14 E0/1 .1 E0/2 .5 VLAN 15 E0/1 .6

R4 R5
E0/2 .21 R1 E0/0 .29

VLAN 46 VLAN 57
SW1 SW2

E0/2 .22 VLAN 67 E0/2 .30

R6 R7
E0/1 .25 E0/1 .26
E0/0 .2
3x VPN E0/0 .2
201.1.123.2/30 3x VPN
202.2.123.2/30

SOLUTIONS:

© 2014-2018 CCIERNSTRICKS.COM 143

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

R1:
CCIERNSTRICKS.COM_H1.1_R1(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R1(config-router)#router-id 123.1.1.1
CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.1.1.1 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.10.1.5 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.10.1.1 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R1(config-router)#max-metric router-lsa

R2:
CCIERNSTRICKS.COM_H1.1_R2(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R2(config-router)#router-id 123.2.2.2
CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.2.2.2 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.10.1.9 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.10.1.17 0.0.0.0 area 0

R3:
CCIERNSTRICKS.COM_H1.1_R3(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R3(config-router)#router-id 123.3.3.3
CCIERNSTRICKS.COM_H1.1_R3(config-router)#network 123.3.3.3 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R3(config-router)#network 123.10.1.10 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.13 0.0.0.0 area 0

R4:
CCIERNSTRICKS.COM_H1.1_R4(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R4(config-router)#router-id 123.4.4.4
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.4.4.4 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.2 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.18 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.21 0.0.0.0 area 0

R5:
CCIERNSTRICKS.COM_H1.1_R5(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R5(config-router)#router-id 123.5.5.5
CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.5.5.5 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.6 0.0.0.0 area 0

© 2014-2018 CCIERNSTRICKS.COM 144

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.14 0.0.0.0 area 0

CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.29 0.0.0.0 area 0

R6:
CCIERNSTRICKS.COM_H1.1_R6(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R6(config-router)#router-id 123.6.6.6
CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.6.6.6 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.10.1.22 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.10.1.25 0.0.0.0 area 0

R7:
CCIERNSTRICKS.COM_H1.1_R7(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R7(config-router)#router-id 123.7.7.7
CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.7.7.7 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.10.1.26 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.10.1.30 0.0.0.0 area 0

© 2014-2018 CCIERNSTRICKS.COM 145

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

2.2 EIGRP IN AS34567

Configure EIGRP for ipv4 in the New York office (AS34567) according to the following requirements

 The EIGRP AS is 34567

 The interface lo0 must be seen as an internal EIGRP prefix by all other routers
 Ensure the EIGRP is not running on any interface that is facing another AS use any method to
accomplish this
 Using a single command on one switch only ensure that R8 instal ls two equal-cost route for the
following three path and you are not allowed to use any virtual name
vlan 411
int lo0 of SW4
int lo0 of R11

 Using a single command on one switch only ensure that R9 installs two equal cost route for the
following three path
vlan 310
int lo0 of SW3
int lo0 of R10

R8#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override

Gateway of last resort is not set

101.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 101.1.34.0/30 is directly connected, Ethernet0/0
L 101.1.34.2/32 is directly connected, Ethernet0/0
123.0.0.0/8 is variably subnetted, 15 subnets, 2 masks
C 123.8.8.8/32 is directly connected, Loopback0

© 2014-2018 CCIERNSTRICKS.COM 146

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

D 123.9.9.9/32 [90/409600] via 123.10.2.2, 00:04:37, Ethernet0/2

C 123.10.2.0/30 is directly connected, Ethernet0/2
L 123.10.2.1/32 is directly connected, Ethernet0/2
C 123.10.2.4/30 is directly connected, Ethernet0/1
L 123.10.2.5/32 is directly connected, Ethernet0/1
D 123.10.2.8/30 [90/307200] via 123.10.2.2, 00:04:37, Ethernet0/2
D 123.10.2.12/30 [90/307200] via 123.10.2.6, 00:04:37, Ethernet0/1
D 123.10.2.16/30 [90/281856] via 123.10.2.6, 00:04:27, Ethernet0/1
D 123.10.2.20/30 [90/307456] via 123.10.2.6, 00:04:37, Ethernet0/1
[90/307456] via 123.10.2.2, 00:04:37, Ethernet0/2
D 123.10.2.24/30 [90/307456] via 123.10.2.6, 00:00:25, Ethernet0/1
D 123.10.10.10/32 [90/409856] via 123.10.2.6, 00:04:27, Ethernet0/1
D 123.11.11.11/32 [90/435456] via 123.10.2.6, 00:00:11, Ethernet0/1
[90/435456] via 123.10.2.2, 00:00:11, Ethernet0/2
D 123.33.33.33/32 [90/409600] via 123.10.2.6, 00:04:27, Ethernet0/1
D 123.44.44.44/32 [90/435200] via 123.10.2.6, 00:04:37, Ethernet0/1
[90/435200] via 123.10.2.2, 00:04:37, Ethernet0/2

R9#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override

Gateway of last resort is not set

33.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 33.34.4.0/30 is directly connected, Ethernet1/0

© 2014-2018 CCIERNSTRICKS.COM 147

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

L 33.34.4.2/32 is directly connected, Ethernet1/0

102.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 102.1.34.0/30 is directly connected, Ethernet0/0
L 102.1.34.2/32 is directly connected, Ethernet0/0
123.0.0.0/8 is variably subnetted, 15 subnets, 2 masks
D 123.8.8.8/32 [90/409600] via 123.10.2.1, 00:04:36, Ethernet0/1
C 123.9.9.9/32 is directly connected, Loopback0
C 123.10.2.0/30 is directly connected, Ethernet0/1
L 123.10.2.2/32 is directly connected, Ethernet0/1
D 123.10.2.4/30 [90/307200] via 123.10.2.1, 00:04:36, Ethernet0/1
C 123.10.2.8/30 is directly connected, Ethernet0/2
L 123.10.2.9/32 is directly connected, Ethernet0/2
D 123.10.2.12/30 [90/307200] via 123.10.2.10, 00:04:46, Ethernet0/2
D 123.10.2.16/30 [90/307456] via 123.10.2.10, 00:04:36, Ethernet0/2
[90/307456] via 123.10.2.1, 00:04:36, Ethernet0/1
D 123.10.2.20/30 [90/281856] via 123.10.2.10, 00:04:47, Ethernet0/2
D 123.10.2.24/30 [90/307456] via 123.10.2.10, 00:00:34, Ethernet0/2
D 123.10.10.10/32 [90/435456] via 123.10.2.10, 00:04:36, Ethernet0/2
[90/435456] via 123.10.2.1, 00:04:36, Ethernet0/1
D 123.11.11.11/32 [90/409856] via 123.10.2.10, 00:00:20, Ethernet0/2
D 123.33.33.33/32 [90/435200] via 123.10.2.10, 00:04:36, Ethernet0/2
[90/435200] via 123.10.2.1, 00:04:36, Ethernet0/1
D 123.44.44.44/32 [90/409600] via 123.10.2.10, 00:04:47, Ethernet0/2
R9#

© 2014-2018 CCIERNSTRICKS.COM 148

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

DIAGRAM:
ACME
NEW YORK
101.1.34.2/30 BGP AS 34567 102.1.34.2/30
E0/0 123.10.2.X/30 E0/0
E0/2 .1 E0/1 .2
VLAN 89
E0/1 .5 R8 R9 E0/2 .9

VLAN 38 VLAN 49
S38 .6 S49 .10
VLAN 34

S34 .13 S34 .14

S310 .17 SW3 SW4 S411 .21

VLAN 310 VLAN 411

E0/1 .18 R11 E0/2 .22
R10
VLAN 111

E0/2 .25 E0/1 .26

E0/0 .2
E0/0 .2
202.2.34.2/30
201.1.34.2/30

SOLUTIONS:
R8:
CCIERNSTRICKS.COM_H1.1_R8(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_R8(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R8(config-router)#eigrp router-id 123.8.8.8
CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.8.8.8 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.10.2.1 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.10.2.5 0.0.0.0

R9:
CCIERNSTRICKS.COM_H1.1_R9(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_R9(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R9(config-router)#eigrp router-id 123.9.9.9
CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.9.9.9 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.10.2.2 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.10.2.9 0.0.0.0

R10:
CCIERNSTRICKS.COM_H1.1_R10(config)#router eigrp 34567

© 2014-2018 CCIERNSTRICKS.COM 149

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_R10(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R10(config-router)#eigrp router-id 123.10.10.10
CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.10.10 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.2.18 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.2.25 0.0.0.0

R11:
CCIERNSTRICKS.COM_H1.1_R11(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_R11(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R11(config-router)#eigrp router-id 123.11.11.11
CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.11.11.11 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.10.2.22 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.10.2.26 0.0.0.0

SW3:
CCIERNSTRICKS.COM_H1.1_SW3config)#ip routing
CCIERNSTRICKS.COM_H1.1_SW3(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#eigrp router-id 123.33.33.33
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.33.33.33 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.13 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.17 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.6 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-)#interface vlan 34
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#delay 100

SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config-)#ip routing
CCIERNSTRICKS.COM_H1.1_SW4(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#eigrp router-id 123.44.44.44
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.44.44.44 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.14 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.10 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.21 0.0.0.0

© 2014-2018 CCIERNSTRICKS.COM 150

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

CCIERNSTRICKS.COM_H1.1_SW4(config-)#interface vlan 34
CCIERNSTRICKS.COM_H1.1_SW4(config-if)#delay 100

© 2014-2018 CCIERNSTRICKS.COM 151

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

2.3 EIGRP in AS 45678

Configure EIGRP in AS 45678 as the following requirements
 The EIGRP autonomous system number is 45678
 The interface Loopback 0 at each router must be seen as an Internal EIGRP prefix by all other
routers
 Ensure the EIGRP is not running on any interface that is facing another AS use any method to
accomplish this requirement
 SW4 and SW6 are layer 3 switches must configure EIGRP
 On all three routers R15,16,17 must use EIGRP the 64bit metric version
 Do not change the interface bandwidth on any physical interface in as 45678

DIAGRAM:

ACME
SYDENY
BGP AS 45678 E0/0
123.20.1.X/30 103.2.45.2/30

R15
E0/1 .1 E0/2 .9

VLAN 5
VLAN 55 VLAN 66
S55 .3 S66 .11

E0/1 .2 E0/2 .10

R16 R17
E0/2 .17 E0/1 .18
E0/0 E0/0
203.3.16.2/30 203.3.17.2/30

© 2014-2018 CCIERNSTRICKS.COM 152

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

SOLUTIONS:
R15:
CCIERNSTRICKS.COM_H1.1_R15(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R15(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.15.15.15 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.20.1.1 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.20.1.9 0.0.0.0

R16:
CCIERNSTRICKS.COM_H1.1_R16(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R16(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.16.16.16 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.20.1.2 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.20.1.17 0.0.0.0

R17:
CCIERNSTRICKS.COM_H1.1_R17(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R17(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.17.17.17 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.20.1.10 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.20.1.18 0.0.0.0

SW5:
CCIERNSTRICKS.COM_H1.1_SW5(config)#router EIGRP 45678
CCIERNSTRICKS.COM_H1.1_SW5(config-router)#network 123.20.1.3 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW5(config-router-)#network 123.55.55.55 0.0.0.0

IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP

CCIERNSTRICKS.COM_H1.1_SW5(config)#interface Vlan5
CCIERNSTRICKS.COM_H1.1_SW5(config-if)#no shutdown

CCIERNSTRICKS.COM_H1.1_SW5(config)#interface Vlan55
CCIERNSTRICKS.COM_H1.1_SW5(config-if)#no shutdown

© 2014-2018 CCIERNSTRICKS.COM 153

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

SW6:
CCIERNSTRICKS.COM_H1.1_SW6(config)#router EIGRP 45678
CCIERNSTRICKS.COM_H1.1_SW6(config-router)#network 123.20.1.11 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW6(config-router)#network 123.66.66.66 0.0.0.0

IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP

CCIERNSTRICKS.COM_H1.1_SW6(config)#interface Vlan6
CCIERNSTRICKS.COM_H1.1_SW6(config-if)#no shutdown

CCIERNSTRICKS.COM_H1.1_SW6(config)#interface Vlan66
CCIERNSTRICKS.COM_H1.1_SW6(config-if)#no shutdown

© 2014-2018 CCIERNSTRICKS.COM 154

© 2014-2018 CCIERNSTRICKS.COM July 29, 2018

2.4 EIGRP in AS 65222

 The EIGRP autonomous system number is 45678
 The interface Loopback 0 at each router must be seen as an internal EIGRP prefix by all other
routers
 Ensure the EIGRP is not running on any interface that is facing another AS use any method to
accomplish this requirement
 R17 is the DMVPN hub, R18, R19 as the spoke use the preconfigured tunnel 0

DIAGRAM:
R16 R17
E0/2 .17 E0/1 .18
E0/0 E0/0
203.3.16.2/30 203.3.17.2/30

Regional SP-3
BGP 20003

S1/0 ACME APAC S1/0

203.3.18.2/30 203.3.19.2/30
BGP AS 65222
R18 R9

E0/0 E0/0

10.1.18.1/24 10.1.19.1/24

SOLUTIONS:

NOTE:MOST OF THE PART OF THIS QUESTION WILL BE UP AND RUNNING AFTER BGP AND DMVPN
CONFIGURATION. THIS TASK IS DEPENDANT TASK 2.7, 2.7 and 3.1, 3.2, 3.3 ONCES THOSE TASK DONE
CONFIG WILL WORK

R17:
CCIERNSTRICKS.COM_H1.1_R17(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R17(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.2_R17 (config-router-af)#af-interface tun0
CCIERNSTRICKS.COM_H1.2_R17 (config-router-af-interface)# next-hop-self
CCIERNSTRICKS.COM_H1.2_R17 (config-router-af-interface)# split-horizon

© 2014-2018 CCIERNSTRICKS.COM 155