My Network Lab

Saturday, January 16, 2016

Basic RIP Configuration

I never expected I would be able to configure and troubleshoot a live RIP network in my networking career. I always read about RIP in Cisco books and implement it in a lab environment. We're running RIP version 2 for our iDirect VSAT network due to simplicity and ease of configuration of its dynamic routing protocol

Router#show run | section rip
router rip
version 2
network 10.0.0.0
default-information originate
no auto-summary
!
address-family ipv4 vrf VRF-A
redistribute bgp 23703
network 10.0.0.0
no auto-summary
version 2
!
address-family ipv4 vrf VRF-B
redistribute bgp 23703
network 10.0.0.0
no auto-summary
version 2
exit-address-family

<OUTPUT TRUNCATED>

Router#show ip protocols
*** IP Routing is NSF aware ***

Routing Protocol is "application"
Sending updates every 0 seconds
Invalid after 0 seconds, hold down 0, flushed after 0
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Maximum path: 32
Routing for Networks:
Routing Information Sources:
    Gateway         Distance      Last Update
Distance: (default is 4)

<OUTPUT TRUNCATED>

Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 18 seconds
Invalid after 180 seconds, hold down 180, flushed after 240
Redistributing: rip
Default version control: send version 2, receive version 2
    Interface             Send Recv Triggered RIP Key-chain
    GigabitEthernet0/0.40 2     2
    GigabitEthernet0/1    2     2
    GigabitEthernet0/2    2     2
    Loopback0             2     2
Automatic network summarization is not in effect
Maximum path: 4
Routing for Networks:
    10.0.0.0
Routing Information Sources:
    Gateway         Distance      Last Update
    10.116.23.67         120      00:00:28
    10.116.23.66         120      7w4d
Distance: (default is 120)

Router#show ip route rip
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override

Gateway of last resort is 10.106.193.57 to network 0.0.0.0

      10.0.0.0/8 is variably subnetted, 276 subnets, 6 masks
R        10.113.1.128/26
           [120/2] via 10.116.23.67, 00:00:14, GigabitEthernet0/0.400
R        10.113.2.0/26
           [120/2] via 10.116.23.67, 00:00:14, GigabitEthernet0/0.400

Below is a RIP lab I did while studying for Network+, which covers classful and classless network scenarios.

Scenario A: Running RIPv1 on Classful Networks

R1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#no ip domain-lookup
R1(config)#enable secret cisco
R1(config)#banner motd $
Enter TEXT message. End with the character '$'
********************************
   AUTHORIZED ACCESS ONLY
********************************
$
R1(config)#line console 0
R1(config-line)#password cisco
R1(config-line)#login
R1(config-line)#logging synchronous
R1(config-line)#line vty 0 4
R1(config-line)#password cisco
R1(config-line)#login
R1(config-line)#logging synchronous

R2#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#no ip domain-lookup
R2(config)#enable secret cisco
R2(config)#banner motd $
Enter TEXT message. End with the character '$'
********************************
   AUTHORIZED ACCESS ONLY
********************************
$
R2(config)#line console 0
R2(config-line)#password cisco
R2(config-line)#login
R2(config-line)#logging synchronous
R2(config-line)#line vty 0 4
R2(config-line)#password cisco
R2(config-line)#login
R2(config-line)#logging synchronous

R3#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R3(config)#no ip domain-lookup
R3(config)#enable secret cisco
R3(config)#banner motd $
Enter TEXT message. End with the character '$'
********************************
   AUTHORIZED ACCESS ONLY
********************************
$
R3(config)#line console 0
R3(config-line)#password cisco
R3(config-line)#login
R3(config-line)#logging synchronous
R3(config-line)#line vty 0 4
R3(config-line)#password cisco
R3(config-line)#login
R3(config-line)#logging synchronous

R1(config)#interface fastethernet0/0
R1(config-if)#ip address 192.168.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#
*Dec 27 10:20:57.851: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Dec 27 10:20:58.851: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#interface serial0/0/0
R1(config-if)#ip address 192.168.2.1 255.255.255.0
R1(config-if)#clock rate 64000
R1(config-if)#no shutdown
R1(config-if)#
*Dec 27 10:21:28.215: %LINK-3-UPDOWN: Interface Serial0/0/0, changed state to down

R2(config)#interface fastethernet0/0
R2(config-if)#ip address 192.168.3.1 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#
*Dec 27 10:13:28.227: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R2(config-if)#interface serial0/0/0
R2(config-if)#ip address 192.168.2.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#
*Dec 27 10:14:05.835: %LINK-3-UPDOWN: Interface Serial0/0/0, changed state to up
*Dec 27 10:14:06.835: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to up
R2(config-if)#
R2(config-if)#interface serial0/0/1
R2(config-if)#ip address 192.168.4.2 255.255.255.0
R2(config-if)#clock rate 64000
R2(config-if)#no shutdown
R2(config-if)#
*Dec 27 10:14:23.315: %LINK-3-UPDOWN: Interface Serial0/0/1, changed state to down

R3(config)#interface fastethernet0/0
R3(config-if)#ip address 192.168.5.1 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#
*Dec 27 10:22:33.343: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Dec 27 10:22:34.343: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R3(config-if)#interface serial0/0/1
R3(config-if)#ip address 192.168.4.1 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#
*Dec 27 10:22:52.659: %LINK-3-UPDOWN: Interface Serial0/0/1, changed state to up
*Dec 27 10:22:53.659: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to up

R1#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            192.168.1.1     YES manual up                    up
FastEthernet0/1            unassigned      YES NVRAM administratively down down
Serial0/0/0                192.168.2.1     YES manual up                    up
Serial0/0/1                unassigned      YES NVRAM administratively down down
Serial0/1/0                unassigned      YES NVRAM administratively down down
Serial0/1/1                unassigned      YES NVRAM administratively down down

R2#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            192.168.3.1     YES manual up                    up
FastEthernet0/1            unassigned      YES NVRAM administratively down down
Serial0/0/0                192.168.2.2     YES manual up                    up
Serial0/0/1                192.168.4.2     YES manual up                    up

R3#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            192.168.5.1     YES manual up                    up
FastEthernet0/1            unassigned      YES NVRAM administratively down down
Serial0/0/0                unassigned      YES NVRAM administratively down down
Serial0/0/1                192.168.4.1     YES manual up                    up

R1(config)#router ?
bgp       Border Gateway Protocol (BGP)
eigrp     Enhanced Interior Gateway Routing Protocol (EIGRP)
isis      ISO IS-IS
iso-igrp IGRP for OSI networks
mobile    Mobile routes
odr       On Demand stub Routes
ospf      Open Shortest Path First (OSPF)
rip       Routing Information Protocol (RIP)

R1(config)#router rip    // ENABLE RIPv1
R1(config-router)#network ?
A.B.C.D Network number

R1(config-router)#network 192.168.1.0   // ENABLE RIP ON ALL INTERFACES THAT BELONGS TO THIS CLASSFUL NETWORK; INTERFACE WILL SEND AND RECEIVE RIP UPDATES EVERY 30 SECONDS
R1(config-router)#network 192.168.2.0

R2(config)#router rip
R2(config-router)#network 192.168.2.0
R2(config-router)#network 192.168.3.0
R2(config-router)#network 192.168.4.0

R3(config)#router rip
R3(config-router)#network 192.168.4.0
R3(config-router)#network 192.168.5.0

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

R    192.168.4.0/24 [120/1] via 192.168.2.2, 00:00:14, Serial0/0/0
R    192.168.5.0/24 [120/2] via 192.168.2.2, 00:00:14, Serial0/0/0
C    192.168.1.0/24 is directly connected, FastEthernet0/0
C    192.168.2.0/24 is directly connected, Serial0/0/0
R    192.168.3.0/24 [120/1] via 192.168.2.2, 00:00:14, Serial0/0/0

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C    192.168.4.0/24 is directly connected, Serial0/0/1
R    192.168.5.0/24 [120/1] via 192.168.4.1, 00:00:14, Serial0/0/1
R    192.168.1.0/24 [120/1] via 192.168.2.1, 00:00:11, Serial0/0/0
C    192.168.2.0/24 is directly connected, Serial0/0/0
C    192.168.3.0/24 is directly connected, FastEthernet0/0

R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C    192.168.4.0/24 is directly connected, Serial0/0/1
C    192.168.5.0/24 is directly connected, FastEthernet0/0
R    192.168.1.0/24 [120/2] via 192.168.4.2, 00:00:19, Serial0/0/1
R    192.168.2.0/24 [120/1] via 192.168.4.2, 00:00:19, Serial0/0/1
R    192.168.3.0/24 [120/1] via 192.168.4.2, 00:00:19, Serial0/0/1

R1#show ip protocols
Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 25 seconds
Invalid after 180 seconds, hold down 180, flushed after 240
Redistributing: rip
Default version control: send version 1, receive any version
    Interface             Send Recv Triggered RIP Key-chain
    FastEthernet0/0       1     1 2
    Serial0/0/0           1     1 2
Automatic network summarization is in effect
Maximum path: 4
Routing for Networks:
    192.168.1.0
    192.168.2.0
Routing Information Sources:
    Gateway         Distance      Last Update
    192.168.2.2          120      00:00:12
Distance: (default is 120)

R1#debug ip rip
RIP protocol debugging is on
R1#
*Dec 27 10:34:32.271: RIP: sending v1 update to 255.255.255.255 via FastEthernet0/0 (192.168.1.1)
*Dec 27 10:34:32.271: RIP: build update entries
*Dec 27 10:34:32.271:   network 192.168.2.0 metric 1
*Dec 27 10:34:32.271:   network 192.168.3.0 metric 2
*Dec 27 10:34:32.271:   network 192.168.4.0 metric 2
*Dec 27 10:34:32.271:   network 192.168.5.0 metric 3
*Dec 27 10:34:32.335: RIP: sending v1 update to 255.255.255.255 via Serial0/0/0 (192.168.2.1)
*Dec 27 10:34:32.335: RIP: build update entries
*Dec 27 10:34:32.335:   network 192.168.1.0 metric 1
R1#
*Dec 27 10:34:47.799: RIP: received v1 update from 192.168.2.2 on Serial0/0/0
*Dec 27 10:34:47.799:      192.168.3.0 in 1 hops
*Dec 27 10:34:47.799:      192.168.4.0 in 1 hops
*Dec 27 10:34:47.799:      192.168.5.0 in 2 hops
R1#
*Dec 27 10:35:00.971: RIP: sending v1 update to 255.255.255.255 via FastEthernet0/0 (192.168.1.1)
*Dec 27 10:35:00.971: RIP: build update entries
*Dec 27 10:35:00.971:   network 192.168.2.0 metric 1
*Dec 27 10:35:00.971:   network 192.168.3.0 metric 2
*Dec 27 10:35:00.971:   network 192.168.4.0 metric 2
*Dec 27 10:35:00.971:   network 192.168.5.0 metric 3
R1#
*Dec 27 10:35:01.987: RIP: sending v1 update to 255.255.255.255 via Serial0/0/0 (192.168.2.1)
*Dec 27 10:35:01.987: RIP: build update entries
*Dec 27 10:35:01.987:   network 192.168.1.0 metric 1

Scenario B: Running RIPv1 with Subnets and Between Classful Networks

R2(config)#router rip
R2(config-router)#no network 192.168.4.0   // REMOVE 192.168.4.0/24 SUBNET FROM RIP ON R2; NO RIP UPDATES BETWEEN R2 AND R3 (ISP ROUTER); DON'T ADVERTISE 192.168.4.0/24 TO R1

R3(config)#no router rip   // DISABLE RIP ON ISP ROUTER
R3(config)#ip route 172.30.0.0 255.255.0.0 serial0/0/1   // ROUTE 172.30.0.0/116 TO HOP TO R2

R2(config)#ip route 0.0.0.0 0.0.0.0 serial 0/0/1   // STATIC DEFAULT ROUTE FOR DESTINATION SUBNET NOT IN R2 ROUTING TABLE TO HOP TO R3

R2(config)#router rip
R2(config-router)#default-information ?
originate Distribute a default route

R2(config-router)#default-information originate   // INCLUDE DEFAULT STATIC ROUTE IN RIP UPDATE TO R1

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

     172.30.0.0/24 is subnetted, 3 subnets
C       172.30.2.0 is directly connected, Serial0/0/0
C       172.30.3.0 is directly connected, FastEthernet0/0
R       172.30.1.0 [120/1] via 172.30.2.1, 00:00:22, Serial0/0/0
C    192.168.4.0/24 is directly connected, Serial0/0/1
S*   0.0.0.0/0 is directly connected, Serial0/0/1

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is 172.30.2.2 to network 0.0.0.0

     172.30.0.0/24 is subnetted, 3 subnets
C       172.30.2.0 is directly connected, Serial0/0/0
R       172.30.3.0 [120/1] via 172.30.2.2, 00:00:03, Serial0/0/0
C       172.30.1.0 is directly connected, FastEthernet0/0
R*   0.0.0.0/0 [120/1] via 172.30.2.2, 00:00:03, Serial0/0/0

R1#debug ip rip
RIP protocol debugging is on
R1#
*Dec 31 02:20:22.031: RIP: received v1 update from 172.30.2.2 on Serial0/0/0
*Dec 31 02:20:22.031:      0.0.0.0 in 1 hops
*Dec 31 02:20:22.031:      172.30.3.0 in 1 hops
R1#
*Dec 31 02:20:32.743: RIP: sending v1 update to 255.255.255.255 via Serial0/0/0 (172.30.2.1)
*Dec 31 02:20:32.743: RIP: build update entries
*Dec 31 02:20:32.743:   subnet 172.30.1.0 metric 1

R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

S    172.30.0.0/16 is directly connected, Serial0/0/1   // NO RIP ROUTES
C    192.168.4.0/24 is directly connected, Serial0/0/1
C    192.168.5.0/24 is directly connected, FastEthernet0/0

R3#ping 172.30.1.10

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.1.10, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 56/56/56 ms
R3#traceroute 172.30.1.10

Type escape sequence to abort.
Tracing the route to 172.30.1.10

1 192.168.4.9 16 msec 12 msec 16 msec
2 172.30.2.1 24 msec 28 msec 28 msec
3 * * *
4 * * *
5 * * *

C:\Users\PC1>ipconfig

Windows IP Configuration

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix . :
   Link-local IPv6 Address . . . . . : fe80::4562:9b92:c15f:91ff%10
   IPv4 Address. . . . . . . . . . . : 172.30.1.10
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 172.30.1.1

C:\Users\PC1>ping 172.30.1.1

Pinging 172.30.1.1 with 32 bytes of data:
Reply from 172.30.1.1: bytes=32 time=1ms TTL=255
Reply from 172.30.1.1: bytes=32 time=1ms TTL=255
Reply from 172.30.1.1: bytes=32 time=1ms TTL=255
Reply from 172.30.1.1: bytes=32 time=1ms TTL=255

Ping statistics for 172.30.1.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 1ms, Average = 1ms

C:\Users\PC1>ping 192.168.5.1

Pinging 192.168.5.1 with 32 bytes of data:
Reply from 192.168.5.1: bytes=32 time=35ms TTL=253
Reply from 192.168.5.1: bytes=32 time=35ms TTL=253
Reply from 192.168.5.1: bytes=32 time=35ms TTL=253
Reply from 192.168.5.1: bytes=32 time=35ms TTL=253

Ping statistics for 192.168.5.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 35ms, Maximum = 35ms, Average = 35ms

C:\Users\PC1>tracert 192.168.5.1

Tracing route to 192.168.5.1 over a maximum of 30 hops

1     1 ms     1 ms     1 ms 172.30.1.1
2    22 ms    21 ms    21 ms 172.30.2.2
3    52 ms    53 ms    53 ms 192.168.5.1

Friday, January 8, 2016

Basic Static Route Configuration (and CompTIA Network+)

I started studying for CompTIA Network+ around July 2015 but I stopped for a while in order to give way for my last CCNP Security exam (SITCS 300-207) and prioritize some work related projects. I've been working with computer networks for more than 10 years now and I thought of taking this exam just to gauge myself how far I've gone in this technology. I also had my Security+ last year, so I thought why not take Network+ as well. Studying for Network+ also gave me a refresher for my routing and switching basics and help prepare for my CCIE R/S.

The Network+ N10-005 has been retired last year and was replaced by N10-006 exam. The N10-006 exam objectives covers a plethora of wired, wireless and a bit of security topics. I've used Todd Lammle Network+ N10-006 Study Guide and Keith Barker's Network+ CBT nuggets for my studies. I also did some labs using the Cisco CCNA Academy Student Lab Manual to reinforce the routing and switching concepts. This is probably the last "hardware" lab that I'll be doing. I'll be virtualizing my lab soon in order to perform CCNA SP, Check Point (CCSA) and CCIE R/S v5 labs. Below is the rack gear that I've used which is composed of a Cisco 2511 as terminal server, Cisco 3560 8-port switch, two Cisco 3560 24-port switch, and three Cisco 1841 routers.

This is the first lab that I did while studying for Network+.

R1(config)#no ip domain-lookup
R1(config)#enable secret cisco

R1(config)#line console 0
R1(config-line)#password cisco
R1(config-line)#login
R1(config-line)#logging synchronous   // AVOIDS CLI INTERRUPTION
R1(config-line)#line vty 0 4
R1(config-line)#password cisco
R1(config-line)#login
R1(config-line)#logging synchronous

R1(config-line)#line console 0
R1(config-line)#exec-timeout ?
<0-35791> Timeout in minutes

R1(config-line)#exec-timeout 0 ?
<0-2147483> Timeout in seconds
<cr>

R1(config-line)#exec-timeout 0 0   // DISABLES CONSOLE ACCESS TIME OUT; DEFAULT IS 10 MINS

R1(config-line)#line vty 0 4
R1(config-line)#no exec-timeout   // SAME AS exec-timeout 0 0

R1#debug ip routing    // SHOWS WHEN ROUTES ARE ADDED, MODIFIED, AND DELTED FROM THE ROUTING TABLE
IP routing debugging is on
R1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#interface fastethernet0/0
R1(config-if)#ip address 172.16.3.1 255.255.255.0
R1(config-if)#
*Dec 26 03:16:11.699: RT: is_up: FastEthernet0/0 0 state: 6 sub state: 1 line: 1 has_route: False
*Dec 26 03:16:11.699: RT: is_up: FastEthernet0/0 0 state: 6 sub state: 1 line: 1 has_route: False
R1(config-if)#no shutdown
R1(config-if)#
*Dec 26 03:16:44.783: RT: is_up: FastEthernet0/0 1 state: 4 sub state: 1 line: 1 has_route: False
*Dec 26 03:16:44.787: RT: add 172.16.3.0/24 via 0.0.0.0, connected metric [0/0]
*Dec 26 03:16:44.787: RT: NET-RED 172.16.3.0/24
*Dec 26 03:16:44.787: RT: interface FastEthernet0/0 added to routing table   //
R1(config-if)#
*Dec 26 03:16:46.771: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
R1(config-if)#
*Dec 26 03:16:46.771: RT: is_up: FastEthernet0/0 1 state: 4 sub state: 1 line: 1 has_route: True
*Dec 26 03:16:47.771: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#
*Dec 26 03:16:49.999: RT: is_up: FastEthernet0/0 1 state: 4 sub state: 1 line: 1 has_route: True

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 1 subnets
C       172.16.3.0 is directly connected, FastEthernet0/0

R1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#interface serial0/0/0
R1(config-if)#ip address 172.16.2.1 255.255.255.0
R1(config-if)#
*Dec 26 03:19:45.343: RT: is_up: Serial0/0/0 0 state: 6 sub state: 1 line: 0 has_route: False
*Dec 26 03:19:45.343: RT: is_up: Serial0/0/0 0 state: 6 sub state: 1 line: 0 has_route: False
R1(config-if)#clock rate 64000
R1(config-if)#no shutdown
R1(config-if)#
*Dec 26 03:21:38.747: RT: is_up: Serial0/0/0 0 state: 0 sub state: 1 line: 0 has_route: False
R1(config-if)#
*Dec 26 03:21:40.747: %LINK-3-UPDOWN: Interface Serial0/0/0, changed state to down
R1(config-if)#
*Dec 26 03:21:40.747: RT: is_up: Serial0/0/0 0 state: 0 sub state: 1 line: 0 has_route: False //

FOR SERIAL INTERFACE, THE OTHER SIDE OF THE WAN LINK MUST BE CONFIGURED FOR ROUTE TO SHOW UP

R1#show ip route
*Dec 26 03:22:49.111: %SYS-5-CONFIG_I: Configured from console by console
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 1 subnets
C       172.16.3.0 is directly connected, FastEthernet0/0

R2#debug ip routing
IP routing debugging is on
R2#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#interface serial0/0/0
R2(config-if)#ip address 172.16.2.2 255.255.255.0
R2(config-if)#
*Dec 26 03:15:36.631: RT: is_up: Serial0/0/0 0 state: 6 sub state: 1 line: 0 has_route: False
*Dec 26 03:15:36.631: RT: is_up: Serial0/0/0 0 state: 6 sub state: 1 line: 0 has_route: False
R2(config-if)#no shutdown
R2(config-if)#
*Dec 26 03:15:48.171: RT: is_up: Serial0/0/0 0 state: 4 sub state: 1 line: 0 has_route: False
*Dec 26 03:15:50.167: %LINK-3-UPDOWN: Interface Serial0/0/0, changed state to up
*Dec 26 03:15:50.167: RT: is_up: Serial0/0/0 1 state: 4 sub state: 1 line: 0 has_route: False
*Dec 26 03:15:50.171: RT: add 172.16.2.0/24 via 0.0.0.0, connected metric [0/0]
*Dec 26 03:15:50.171: RT: NET-RED 172.16.2.0/24
*Dec 26 03:15:50.171: RT: interface Serial0/0/0 added to routing table
*Dec 26 03:15:50.171: RT: is_up: Serial0/0/0 1 state: 4 sub state: 1 line: 0 has_route: True
*Dec 26 03:15:51.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to up
*Dec 26 03:15:51.167: RT: is_up: Serial0/0/0 1 state: 4 sub state: 1 line: 0 has_route: True

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 2 subnets
C       172.16.2.0 is directly connected, Serial0/0/0    //
C       172.16.3.0 is directly connected, FastEthernet0/0

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 1 subnets
C       172.16.2.0 is directly connected, Serial0/0/0   //

R2#no debug ip routing
IP routing debugging is off

R2#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#interface fastethernet0/0
R2(config-if)#ip address 172.16.1.1 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#
*Dec 26 03:19:00.339: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed

state to up
R2(config-if)#interface serial0/0/1
R2(config-if)#ip address 192.168.1.2 255.255.255.0
R2(config-if)#no shutdown
R2(config-if)#
*Dec 26 03:19:31.059: %LINK-3-UPDOWN: Interface Serial0/0/1, changed state to down

R3#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R3(config)#interface fastethernet0/0
R3(config-if)#ip address 192.168.2.1 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#
*Dec 26 03:27:58.395: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R3(config-if)#interface serial0/0/1
R3(config-if)#ip address 192.168.1.1 255.255.255.0
R3(config-if)#no shutdown
R3(config-if)#
*Dec 26 03:28:18.923: %LINK-3-UPDOWN: Interface Serial0/0/1, changed state to down
*Dec 26 03:29:48.651: %LINK-3-UPDOWN: Interface Serial0/0/1, changed state to up
*Dec 26 03:29:49.651: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to up

C:\Users\PC1>ping 172.16.3.1

Pinging 172.16.3.1 with 32 bytes of data:
Reply from 172.16.3.1: bytes=32 time=1ms TTL=255
Reply from 172.16.3.1: bytes=32 time=1ms TTL=255
Reply from 172.16.3.1: bytes=32 time=1ms TTL=255
Reply from 172.16.3.1: bytes=32 time=1ms TTL=255

Ping statistics for 172.16.3.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 1ms, Average = 1ms

C:\Users\PC2>ping 172.16.1.1

Pinging 172.16.1.1 with 32 bytes of data:
Reply from 172.16.1.1: bytes=32 time=9ms TTL=251
Reply from 172.16.1.1: bytes=32 time=10ms TTL=251
Reply from 172.16.1.1: bytes=32 time=13ms TTL=251
Reply from 172.16.1.1: bytes=32 time=10ms TTL=251

Ping statistics for 172.16.1.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 9ms, Maximum = 13ms, Average = 10ms

C:\Users\PC3>ping 172.16.1.1

Pinging 172.16.1.1 with 32 bytes of data:
Reply from 172.16.1.1: bytes=32 time=9ms TTL=251
Reply from 172.16.1.1: bytes=32 time=10ms TTL=251
Reply from 172.16.1.1: bytes=32 time=13ms TTL=251
Reply from 172.16.1.1: bytes=32 time=10ms TTL=251

Ping statistics for 172.16.1.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 9ms, Maximum = 13ms, Average = 10ms

R1#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            172.16.3.1      YES manual up                    up
FastEthernet0/1            unassigned      YES NVRAM administratively down down
Serial0/0/0                172.16.2.1      YES manual up                    up
Serial0/0/1                unassigned      YES NVRAM administratively down down
Serial0/1/0                unassigned      YES NVRAM administratively down down
Serial0/1/1                unassigned      YES NVRAM administratively down down

R2#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            172.16.1.1      YES manual up                    up
FastEthernet0/1            unassigned      YES NVRAM administratively down down
Serial0/0/0                172.16.2.2      YES manual up                    up
Serial0/0/1                192.168.1.2     YES manual up                    up

R3#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            192.168.2.1     YES manual up                    up
FastEthernet0/1            unassigned      YES NVRAM administratively down down
Serial0/0/0                unassigned      YES NVRAM administratively down down
Serial0/0/1                192.168.1.1     YES manual up                    up

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 2 subnets
C       172.16.2.0 is directly connected, Serial0/0/0
C       172.16.3.0 is directly connected, FastEthernet0/0

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 2 subnets
C       172.16.1.0 is directly connected, FastEthernet0/0
C       172.16.2.0 is directly connected, Serial0/0/0
C    192.168.1.0/24 is directly connected, Serial0/0/1

R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C    192.168.1.0/24 is directly connected, Serial0/0/1
C    192.168.2.0/24 is directly connected, FastEthernet0/0

R3(config)#ip route 172.16.1.0 255.255.255.0 192.168.1.2
R3(config)#end
R3#
*Dec 26 03:43:28.979: %SYS-5-CONFIG_I: Configured from console by console
R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 1 subnets
S       172.16.1.0 [1/0] via 192.168.1.2   // S MEANS STATIC ROUTE
C    192.168.1.0/24 is directly connected, Serial0/0/1
C    192.168.2.0/24 is directly connected, FastEthernet0/0

R3#ping 172.16.1.10

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/28/28 ms

R3#ping 172.16.1.10 source 192.168.2.1   // PING FAILED SINCE R2 HAS NO RETURN ROUTE TO

192.168.2.0/24

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:
Packet sent with a source address of 192.168.2.1
.....
Success rate is 0 percent (0/5)

R2(config)#ip route 192.168.2.0 255.255.255.0 192.168.1.1

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 2 subnets
C       172.16.1.0 is directly connected, FastEthernet0/0
C       172.16.2.0 is directly connected, Serial0/0/0
C    192.168.1.0/24 is directly connected, Serial0/0/1
S    192.168.2.0/24 [1/0] via 192.168.1.1   //

R3#ping 172.16.1.10 source 192.168.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:
Packet sent with a source address of 192.168.2.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/28/32 ms

R3(config)#ip route 172.16.2.0 255.255.255.0 serial0/0/1

R3#show run | include ip route
ip route 172.16.1.0 255.255.255.0 192.168.1.2
ip route 172.16.2.0 255.255.255.0 Serial0/0/1

R2(config)#ip route 172.16.3.0 255.255.255.0 serial0/0/0

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 3 subnets
C       172.16.1.0 is directly connected, FastEthernet0/0
C       172.16.2.0 is directly connected, Serial0/0/0
S       172.16.3.0 is directly connected, Serial0/0/0
C    192.168.1.0/24 is directly connected, Serial0/0/1
S    192.168.2.0/24 [1/0] via 192.168.1.1

C:\Users\PC2>ping 172.16.3.1   // PING FAILED SINCE R1 HAS NO RETURN ROUTE TO 172.16.1.0/24

Pinging 172.16.3.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 172.16.3.1:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

R1(config)#ip route 0.0.0.0 0.0.0.0 172.16.2.2   // DEFAULT STATIC ROUTE;
R1(config)#
*Dec 26 04:44:50.843: RT: add 0.0.0.0/0 via 172.16.2.2, static metric [1/0]
*Dec 26 04:44:50.843: RT: NET-RED 0.0.0.0/0
*Dec 26 04:44:50.843: RT: default path is now 0.0.0.0 via 172.16.2.2
*Dec 26 04:44:50.843: RT: new default network 0.0.0.0
*Dec 26 04:44:50.843: RT: NET-RED 0.0.0.0/0
R1(config)#end
*Dec 26 04:44:55.367: %SYS-5-CONFIG_I: Configured from console by console
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is 172.16.2.2 to network 0.0.0.0   //

     172.16.0.0/24 is subnetted, 2 subnets
C       172.16.2.0 is directly connected, Serial0/0/0
C       172.16.3.0 is directly connected, FastEthernet0/0
S*   0.0.0.0/0 [1/0] via 172.16.2.2    //

C:\Users\PC2>ping 172.16.3.1   // PC2 SHOULD BE ABLE TO PING PC1/GW

Pinging 172.16.3.1 with 32 bytes of data:
Reply from 172.16.3.1: bytes=32 time=18ms TTL=254
Reply from 172.16.3.1: bytes=32 time=18ms TTL=254
Reply from 172.16.3.1: bytes=32 time=18ms TTL=254
Reply from 172.16.3.1: bytes=32 time=18ms TTL=254

Ping statistics for 172.16.3.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 18ms, Maximum = 18ms, Average = 18ms

R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 2 subnets   //
S       172.16.1.0 [1/0] via 192.168.1.2
S       172.16.2.0 is directly connected, Serial0/0/1
C    192.168.1.0/24 is directly connected, Serial0/0/1
C    192.168.2.0/24 is directly connected, FastEthernet0/0
R3#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R3(config)#ip route 172.16.0.0 255.255.252.0 192.168.1.2
R3(config)#end
R3#
*Dec 26 04:49:53.755: %SYS-5-CONFIG_I: Configured from console by console
R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks
S       172.16.0.0/22 [1/0] via 192.168.1.2   // SUMMARY ROUTE DIDN'T REMOVE STATIC ROUTES BELOW

SINCE THEY'RE MORE SPECIFIC ROUTES; WE CAN REMOVE STATIC ROUTES
S       172.16.1.0/24 [1/0] via 192.168.1.2
S       172.16.2.0/24 is directly connected, Serial0/0/1
C    192.168.1.0/24 is directly connected, Serial0/0/1
C    192.168.2.0/24 is directly connected, FastEthernet0/0

R3#show run | inc ip route
ip route 172.16.0.0 255.255.252.0 192.168.1.2
ip route 172.16.1.0 255.255.255.0 192.168.1.2
ip route 172.16.2.0 255.255.255.0 Serial0/0/1
R3#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R3(config)#no ip route 172.16.1.0 255.255.255.0 192.168.1.2
R3(config)#no ip route 172.16.2.0 255.255.255.0 Serial0/0/1

R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/22 is subnetted, 1 subnets
S       172.16.0.0 [1/0] via 192.168.1.2   //
C    192.168.1.0/24 is directly connected, Serial0/0/1
C    192.168.2.0/24 is directly connected, FastEthernet0/0

C:\Users\PC3>ping 172.16.3.1   // PC3 CAN PING PC1/GW

Pinging 172.16.3.1 with 32 bytes of data:
Reply from 172.16.3.1: bytes=32 time=36ms TTL=253
Reply from 172.16.3.1: bytes=32 time=35ms TTL=253
Reply from 172.16.3.1: bytes=32 time=35ms TTL=253
Reply from 172.16.3.1: bytes=32 time=35ms TTL=253

Ping statistics for 172.16.3.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 35ms, Maximum = 36ms, Average = 35ms

Sunday, November 29, 2015

Connecting GNS3 Device to the Internet

I'm contemplating on selling my Cisco lab gear next year and just keep some of the hard to find pieces such as my Cisco 2511 router that's used for my terminal server, my ASA 5505 firewall since it can still run the 9.x code, my Cisco 871w router for my home wifi and a Cisco 3560 8-port switch. I've started studying for CompTIA Network+ (which is a prelude to my CCIE R/S studies) and plan to sit for the N10-006 exam early next year. So, I'll be using my Cisco lab gear probably one last time and setup a CCNA Routing and Switching lab.

My network lab helped me a lot in preparing for my CCNP Security, Security+ (CCNA Security review) and CCDP (CCNP ROUTE and CCNP SWITCH review). I'll be virtualizing my lab next year in preparation for my CCIE Routing and Switching studies and started looking for a mini server to run VMWare ESXi. So I've been practicing again in GNS3 and in order to connect an emulated device to the Internet, we first create a Microsoft Loopback interface. We issue hdwwiz in Windows command prompt and the Add Hardware dialog box appears. Select Install the hardware that I manually select from a list (Advanced) > Network adapters > Microsoft > Microsoft Loopback Adapter.

We "bridge" our LAN adapter connected to the Internet to our MS Loopback by clicking "Allow other network users to connect through this computer's Internet connection" under Local Area Connection properties. For this scenario, I've used my wireless adapter and bridged it to Local Area Connection 2, which is my MS Loopback interface.

It will pop up a warning saying we could only use 192.168.137.1 for our LAN adapter (MS Loopback). We manually assign the TCP/IPv4 settings for the MS Loopback interface as below:

We'll need to configure the network device in GNS3 as below:

For a router:

R1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#interface fastethernet0/0
R1(config-if)#ip address 192.168.137.2 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#
*Mar 1 00:01:56.827: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Mar 1 00:01:57.827: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#do ping 192.168.137.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.137.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/13/28 ms
R1(config-if)#do ping 8.8.8.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

R1(config)#do ping www.cisco.com
Translating "www.cisco.com"
% Unrecognized host or address, or protocol not running.

R1(config)#ip route 0.0.0.0 0.0.0.0 192.168.137.1
R1(config)#ip domain-lookup
R1(config)#ip name-server 8.8.8.8
R1(config)#do ping 8.8.8.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/39/44 ms
R1(config)#do ping www.cisco.com
Translating "www.cisco.com"...domain server (192.168.137.1) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 125.252.216.170, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/24/36 ms

For an ASA firewall:

ciscoasa# configure terminal
ciscoasa(config)#

***************************** NOTICE *****************************

Help to improve the ASA platform by enabling anonymous reporting,
which allows Cisco to securely receive minimal error and health
information from the device. To learn more about this feature,
please visit: http://www.cisco.com/go/smartcall

Would you like to enable anonymous error reporting to help improve
the product? [Y]es, [N]o, [A]sk later:

ciscoasa(config)# interface gigabitethernet0
ciscoasa(config-if)# ip address 192.168.137.2 255.255.255.0
ciscoasa(config-if)# no shutdown
ciscoasa(config-if)# nameif outside
INFO: Security level for "outside" set to 0 by default.
ciscoasa(config-if)# ping 192.168.137.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.137.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
ciscoasa(config-if)# ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
No route to host 8.8.8.8

Success rate is 0 percent (0/1)
ciscoasa(config-if)# route outside 0 0 192.168.137.1
ciscoasa(config)# ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/20/20 ms
ciscoasa(config)# ping www.cisco.com
                       ^
ERROR: % Invalid Hostname
ciscoasa(config)# dns ?

configure mode commands/options:
domain-lookup       Enable/Disable DNS host-to-address translation
expire-entry-timer Specify DNS entry expire timer
name-server         Specify DNS servers
poll-timer          Specify dns update interval
retries             Configure DNS retries
server-group        Configure a DNS server group
timeout             Configure DNS query timeout

exec mode commands/options:
update Update FQDN IP addresses
ciscoasa(config)# dns domain-lookup ?

configure mode commands/options:
Current available interface(s):
outside Name of interface GigabitEthernet0
ciscoasa(config)# dns domain-lookup outside
ciscoasa(config)# dns name-server 8.8.8.8
ciscoasa(config)# ping www.cisco.com
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 60.254.168.170, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 30/40/50 ms

Saturday, November 14, 2015

Cisco WLC AP license

I had a site that needs 10 access points (APs) but was given a Cisco WLC 2504 that only supports 5 APs by default. Cisco's website mentioned that AP license can be added in increments of 1, 5 and 25. So I availed for a 25 AP license (L-LIC-CT2504-25A) in order to accommodate the future growth of the wireless system. I followed these steps to apply the AP license.

The first step is to go to Cisco's licensing portal and register the license Product Authorization Key (PAK) that was sent via e-mail in PDF form (e-license) or hard copy. Register the license PAK using the Product ID (PID) and serial number found in the WLC by going to Controller > Inventory. The same info can be seen using the show license udi command.

Be extra careful and double check the info that was typed in the licensing portal to avoid issues with the license not taking effect even after reboot. I've personally encountered this mistake a couple of times and had to go through Cisco TAC to re-issue a new license. TAC usually respond within a day or two.

To install the AP license, go to Management > Software Activation > Commands > Actions > Install License, and for or some strange reason only 3CDaemon works. After transferring the license via TFTP, the WLC will prompt to restart in order for the license to take effect. You can also optionally save the license.

After WLC has been rebooted, you can verify the license by going to Management > Software Activation > License. Click on the license to show more details.

Here are some useful WLC CLI commands to verify the license.

(Cisco Controller) >show license ?

all            Displays All The License(s).
capacity       Displays License currently used by AP
detail         Displays Details Of A Given License.
evaluation     Displays Evaluation License(s).
expiring       Displays Expiring License(s).
feature        Displays License Enabled Features.
file           Displays All The License File(s).
handle         Displays License Handles.
image-level    Display the image level
in-use         Displays License That Are In-Use.
permanent      Displays Permanent License(s).
statistics     Displays License Statistics.
status         Displays License Status.
summary        Displays Brief Summary Of All License(s).
udi            Displays UDI Values For Licenses.

(Cisco Controller) >show license summary

License Store: Primary License Storage
StoreIndex: 0 Feature: base                              Version: 1.0
        License Type: Permanent
        License State: Active, Not in Use
        License Count: Non-Counted
        License Priority: Medium
License Store: Primary License Storage
StoreIndex: 1 Feature: base-ap-count                     Version: 1.0
        License Type: Permanent
        License State: Inactive
        License Count: 5 / 0 (Active/In-use)
        License Priority: Medium
License Store: Primary License Storage
StoreIndex: 2 Feature: base-ap-count                     Version: 1.0
        License Type: Permanent
        License State: Active, In Use
        License Count: 30 /30 (Active/In-use)
        License Priority: Medium
License Store: Evaluation License Storage
StoreIndex: 0 Feature: base-ap-count                     Version: 1.0
        License Type: Evaluation
        License State: Inactive
            Evaluation total period: 12 weeks 6 days
            Evaluation period left: 12 weeks 5 days
        License Count: 75 / 0 (Active/In-use)
        License Priority: Low

(Cisco Controller) >show license feature

Feature name        Enforcement   Evaluation Clear Allowed Enabled
base-ap-count       yes           yes         yes            yes
data_encryption     yes           no          yes            no

(Cisco Controller) >show license capacity

Licensed Feature    Max Count         Current Count     Remaining Count
-----------------------------------------------------------------------
AP Count            30                5                 25