1-Module 01 Basic & Interface
1-Module 01 Basic & Interface
1-Module 01 Basic & Interface
Infra
e1/3
e1/1
e1/1
e1/1
e1/0
fa0/1
e1/1
fa0/8
e1/1
e1/3
e1/3
11
lo 0
172.16.15.8/32
2406:6400::8/128
e1/1
44
e1/1
fa0/0
e1/0
e1/1
172.16.10.76/30
2406:6400:e:31::/64
AS17821
lo 0
172.16.15.11/32
2406:6400::11/128
2 54
172.16.4.0/23
2406:6400:c00::/39
lo 0
172.16.15.9/32
2406:6400::9/128
2 58
R9
e1/0
172.16.6.0/23
2406:6400:e00::/39
lo 0
172.16.15.7/32
2406:6400::7/128
fa0/0
r18-CBR3
fa0/1
2 162
161 1
172.16.11.160/30
2406:6400:24::/64
Infra
11
fa0/0
CPE
172.16.26.0/23
2406:6400:d800::/48
e1/1
1 53
e1/0
78 2
Infra
1 57
1 49
fa0/0
77 1
R12
2 50
33
44
fa0/1
fa0/0
172.16.11.128/30
2406:6400:20::/64 r17-CAR3
129 1
2 130
11
fa0/1
fa0/0
fa0/0
172.16.10.56/30
2406:6400:e:22::/64
CPE
R8
e1/0
172.16.10.52/30
2406:6400:e:21::/64
fa0/0
82 2
fa0/1
fa0/0
1 225
226 2
172.16.11.224/30
2406:6400:2c::/64
R11
73 1
11
fa0/8
11
r20-CBR4
11
fa0/1
2 98
172.16.11.96/30
2406:6400:1c::/64
fa0/5
SW2
33
lo 0
172.16.15.10/32
2406:6400::10/128
172.16.10.72/30
2406:6400:e:30::/64
74 2
81 1
r16-CBR2
R6
fa0/0
R7
e1/0
lo 0
172.16.15.6/32
2406:6400::6/128
172.16.24.0/23
2406:6400:c000::/48
1 193
fa0/0
11
fa0/0
lo 0
172.16.15.4/32
2406:6400::4/128
97 1
2 30
172.16.10.48/30
2406:6400:e:20::/64
fa0/0
SW1
2 34
e1/0
R10
r19-CAR4
194 2
fa0/1
fa0/1
fa0/5
fa0/2
11
e1/0
e1/3
11
172.16.10.0/30
2406:6400:e::/64
172.16.10.4/30
2406:6400:e:1::/64
e1/1
e1/0
172.16.10.80/30
2406:6400:e:32::/64
172.16.18.0/23
2406:6400:9800::/48
172.16.12.0/24
2406:6400:2::/48
fa0/11
172.16.11.192/30
2406:6400:28::/64
1 29
22
fa0/11
172.16.28.0/23
2406:6400:e000::/48
11
r15-CAR2
2 66
fa0/1
172.16.22.0/23
2406:6400:b800::/48
62
1 25
fa0/0
fa0/0
1 33
172.16.10.28/30
2406:6400:e:11::/64
R3
10 2
fa0/1
fa0/0
34 2
1 33
172.16.11.32/30
2406:6400:14::/64
lo 0
172.16.15.12/32
2406:6400::12/128
172.16.30.0/23
2406:6400:f800::/48
51
R5
172.16.13.0/24
2406:6400:3::/48
fa0/1
e1/0
2 26
172.16.10.32/30
2406:6400:e:12::/64
R2
11
22
11
fa0/0
lo 0
172.16.15.2/32
2406:6400::2/128
fa0/2
r14-CBR1
lo 0
172.16.15.5/32
2406:6400::5/128
11
172.16.10.8/30
2406:6400:e:2::/64
e1/1
91
lo 0
172.16.15.3/32
2406:6400::3/128
CPE
172.16.11.64/30
2406:6400:18::/64
65 1
e1/0
22
lo 0
172.16.15.1/32
2406:6400::1/128
Infra
R4
11
fa0/0
11
fa0/1
e1/0
22
172.16.2.0/23
2406:6400:a00::/39
fa0/0
11
fa0/0
172.16.0.0/23
2406:6400:800::/39
R1
e1/1
r13-CAR1
172.16.20.0/23
2406:6400:a000::/48
172.16.11.0/30
2406:6400:10::/64
172.16.10.24/30
2406:6400:e:10::/64
172.16.16.0/23
2406:6400:8000::/48
CPE
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
Lab Notes
This workshop is intended to be run on a real cisco routers or Dynamips server with the above lab
topologies set up. The routers are using both IPv4 and IPv6 supported IOS software. Participants
should do their workshop module one configuration in several steps as explained below:
1. Standard basic router configuration.
2. Standard interface related configuration for both IPv6 and IPv4.
3. Do necessary verification to make sure you can ping (Both IPv6 & IPv4) your neighbouring
router point-to-point interface and satisfy the requirement to go to the next step.
For time management purpose we will emphasize more on IPv6 protocol when we will do verification
and analysis after each lab exercise. Please notice that some Cisco commands are case sensitive,
already enable by default in some recent IOS version and some are not a mandatory command for
router functionality. But for lab troubleshooting and verification purpose it is strongly recommended
that please do all necessary configuration exactly as it is explained in the instruction. Our objective
after the exercise is to build a template for each participant so that it can be re-used after you go back
to your work environment.
Lab Exercise
1.
Basic Router Configuration: This will set the router with necessary basic configuration used in a
real production router for both enterprise and service provider network.
Example Config on a Router:
config t
Router host name which is an FQDN name mapped into a DNS server. There is a common
practice about router hostname which is domain name then 3 digit airline city code then
region/pop then a name etc. Example: router1.pop1reg1.BNE.apnic.net. Please use your router
name according the topology diagram.
ip routing
It recent IOS this command is enable by default. So it can act as a router and start routing IP
packet. To be safe add this command in your template. Need to look for equivalent IPv6
command if any command read IP/L3 header
ipv6 unicast-routing
Even in recent IOS [15.1(4)M3] this command is not enable by default. We must use this
command so that router starts routing IPv6 packet. To be safe add this command in your
template.
Enable Cisco (Proprietary) Express Forwarding to process IPv6 packet faster. Some high end
cisco router process packet using line card. Use ipv6 cef distributed instead on those
routers.
no ip domain-lookup
To disable DNS resolver functionality on router if you do not use it. If yes then specify DNS
server IP. There is no equivalent command for IPv6 yet [15.1(4)M3].
no ip http server
Finger service can be used to find out which users are logged into a router. Also a special DoS
attack named Finger of death uses the finger service to continuously transmit finger requests
to a given device consuming great amounts of processing resources. Depending of your IOS
version it could be disable by default. To be safe add it in your command template. There is no
equivalent command for IPv6 yet [15.1(4)M3].
no service pad
To disable Packet Assembler/Disassembler (PAD) service, which is used for X.25 networks in
early days. If you do not use it now please disable it.
no service udp-small-servers
no service tcp-small-server
Depending on your cisco IOS version it offer by default small tcp/udp services that are
basically a set of simple services that are used for diagnostic purposes. An attacker could
maliciously use these services to gain system information and even launch Denial of Service
(DoS) attacks to your router.
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
no ip bootp server
A Cisco router can be configured to act as a BOOTP server and provide IOS software image to
another Cisco network devices. This service could be used by an attacker to download a copy
of a network devices IOS software. There is no equivalent command for IPv6 yet
[15.1(4)M3].
no ip source-route
no ipv6 source-route
An IP source routing function allows the sender of an IP packet to control the route that the
packet will take towards its final destination. Source routing should be disabled when its not
needed because it could be used for various malicious attacks and also very CPU intensive
function.
logging source-interface loopback 0
We need the router use the loopback address as the "source interface" for traffic that is
generated by the router, such as syslog packets, SNMP traps, security related packets. Also
DNS is mapped with the loopback address and FQDN name of the router.
service timestamps log datetime localtime msec show-timezone year
service timestamps debug datetime localtime msec show-timezone year
Router will show either uptime or current date and time on the log it will generate based on the
configuration on your router. We would like to record current date and time in msec unit for
both log and debug messages to facilitate the log analysis if required.
clock timezone AEST 10
Set your router clock according to your local time zone. We used AEST 10 to reflect APNIC
office where it is located and corresponding time zone.
ip subnet-zero
Under old IP subnetting rules, the all 0s subnet was reserved for the network, and the all 1s
subnet was reserved for the broadcast. Over time this idea has been changed and we can use all
0s and all 1s subnet. Depending on your IOS version you might need to enable this on your
cisco router. To be safe add this command in your template. IP subnet-zero concept is not
applicable for IPv6 address family
ip classless
In old days routers are by default classful. Now we are in CIDR era. Depending on your cisco
IOS version this command can be there by default. To be safe add this command in your
template. IP classless concept is not applicable for IPv6 address family.
transport preferred none
By default telnet is the preferred protocol and when we mistyping a command the router will
try to telnet the name we typed. If we set the transport preferred to none the router wont try
to telnet when mistyping and we still can have DNS resolver enabled.
ip tcp synwait-time 15
An attacker could flood a router with a high volume of TCP connection requests for which it
does not return back an acknowledgement causing connection queues to fill up at the receiving
host. Setting the TCP Synwait time to 15 seconds for example, will instruct the router to shut
down any incomplete connections after 15 seconds. There is no equivalent command for IPv6
yet [15.1(4)M3].
security authentication failure rate 3 log
Configuring a router to lock access (for about 15 seconds) after three unsuccessful login
attempts. This method protects a router from malicious attack (brute-force attack) and at the
same time a log message is generated warning about the unsuccessful login attempts.
exit
wr
[wr] is an abbreviation or write command. Which will eventually copy (Save) the running
configuration (From RAM) in to the startup-configuration (NVRAM) of cisco router.
END OF STEP ONE
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
2. Interface Related Configuration: This will set the router with necessary interface related
configuration (IPv6 and IPv4) used in a real production router for both enterprise and service
provider network.
Example IPv4 Config on a Router:
config t
interface e1/0
It is very important to add a meaningful description of a router interface to explain where this
interface is connected. Otherwise we might be lost finding which interface connects where on a
large data centre and need to jump behind the rack to look for a clue.
no ip redirects
This disables ICMP redirect messages. Redirects function happen when a router recognizes a
packet arriving on an interface and the best route is out that same interface. In that case the
router sends an ICMP redirect back to the source telling them about a better router on the same
subnet. Subsequent packets take the redirected path. This function can be abused by an attacker
who has got access to your layer 2 network to initiate man in the middle attack. Need to look
for equivalent command for IPv6
no ip directed-broadcast
Every subnet in IPv4 has a broadcast address. If any packet arrives on a router with broadcast
address as destination the router will amplify L2 frame on that interface. Any network attacker
can initiate a traffic amplification attack in your LAN if directed broadcast is not disable on
that Interface. Broadcast concept is not applicable in IPv6.
no ip unreachables
From a security point of view some one can initiate reconnaissance attack on a device and if
you want to minimize the amount of information that the device can provides about itself to
others this command is very useful. It also protect the router from the un wanted resource
utilization on the device.
ip address 172.16.15.3 255.255.255.255
Cisco router interface is disable by default. Use this command to activate the interface to start
processing IP packet.
IPv6 enable command is only required if your router has only link local address but no global
address will be configured.
ipv6 address 2406:6400:0000:0000::3/128
Please notice the [Network Prefix::Interface ID] part of the IPv6 global address configured on
the interface. In this case interface is configured with static address and double colon is
perfectly sitting in between.
interface e1/0
ipv6 address 2406:6400:000E:0001::2/64
interface e1/1
ipv6 address 2406:6400:000E:0002::2/64
interface fa0/0
ipv6 address 2406:6400:0014:0000::1/64
exit
exit
wr
[!!!!!]
[!!!!!]
You need to replace the destination IPv4 address with your relevant interface IPv4 address.
Please look at the topology diagram on page 1 for further detail.
Example IPv6 protocol verification on a Router:
ping 2406:6400:000E:0000::1
ping 2406:6400:000E:0002::2
[!!!!!]
[!!!!!]
You need to replace the destination IPv6 address with your relevant interface IPv6 address.
Please look at the topology diagram on page 1 for further detail.
END OF MODULE ONE
Next pages for reference template used on different routers.
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
Infra
CPE
172.16.11.0/30
2406:6400:10::/64
fa0/5
fa0/2
e1/1
e1/3
2 30
fa0/5
SW2
fa0/8
R10
1 193
fa0/0
fa0/8
194 2
fa0/1
SW1
fa0/11
e1/0
e1/0
fa0/11
11
fa0/1
172.16.12.0/24
2406:6400:2::/48
e1/0
Basic r19-CAR4
Conf Router1:
1 29
22
62
172.16.11.192/30
2406:6400:28::/64
1 25
fa0/0
11
11
172.16.10.4/30
2406:6400:e:1::/64
R3
10 2
fa0/1
fa0/0
34 2
1 33
172.16.11.32/30
2406:6400:14::/64
e1/0
e1/3
11
172.16.10.0/30
2406:6400:e::/64
e1/1
172.16.10.8/30
2406:6400:e:2::/64
e1/1
11
fa0/0
fa0/1
51
R5
172.16.13.0/24
2406:6400:3::/48
e1/0
fa0/1
e1/3
e1/1
fa0/0
44
11
e1/3
e1/0
e1/1
172.16.10.72/30
2406:6400:e:30::/64
172.16.10.76/30
2406:6400:e:31::/64
e1/1
172.16.10.80/30
2406:6400:e:32::/64
e1/0
2 50
172.16.10.52/30
2406:6400:e:21::/64
11
e1/1
33
172.16.10.48/30
2406:6400:e:20::/64
fa0/0
config
t
74 2
hostname Router1 81 1
ip routing lo 0
172.16.15.10/32
ipv6 unicast-routing
2406:6400::10/128
R11
ip cef
R8
33
44
ipv6 cef
1 49
73 1
fa0/1
no ip domain-lookup
fa0/0
1 53
77 1
no ip http server
lo 0
no ip http secure-server
172.16.15.12/32
AS17821
no ip finger
2406:6400::12/128
lo 0
lo 0
no service pad
172.16.15.8/32
172.16.15.11/32
2406:6400::8/128
2406:6400::11/128
82
2
no service
udp-small-servers
r20-CBR4
R12
11
no service
tcp-small-server
fa0/1
fa0/0
e1/0
fa0/0
1 225
226 2
78 2
no ip bootp
server
172.16.11.224/30
2406:6400:2c::/64
no ipCPE
source-route
Infra
172.16.6.0/27
172.16.4.0/27
no ipv6 source-route
2406:6400:0e00:0000::/64
2406:6400:0c00:0000::/64
logging source-interface loopback 0
service timestamps log datetime localtime msec show-timezone year
DNS MAIL WWW
DNS MAIL WWW
service timestamps debug datetime
localtime msec show-timezone year
clock timezone AEST 10
ip subnet-zero
ip classless
line console 0
logging synchronous
transport preferred none
ip tcp synwait-time 15
security authentication failure rate 3 log
exit
exit
wr
172.16.30.0/27
2406:6400:f800:0001::/64
e1/0
2 26
172.16.10.28/30
2406:6400:e:11::/64
r14-CBR1
R2
11
22
lo 0
172.16.15.3/32
2406:6400::3/128
lo 0
172.16.15.5/32
2406:6400::5/128
lo 0
172.16.15.2/32
2406:6400::2/128
11
172.16.18.0/27
2406:6400:9800:0001::/64
e1/0
22
91
fa0/2
172.16.28.0/27
2406:6400:e000:0001::/64
R1
11
fa0/0
lo 0
172.16.15.1/32
2406:6400::1/128
172.16.2.0/27
2406:6400:0a00:0000::/64
fa0/0
fa0/1
172.16.0.0/27
2406:6400:0800:0000::/64
e1/0
22
e1/1
r13-CAR1
11
fa0/0
172.16.10.24/30
2406:6400:e:10::/64
172.16.16.0/27
2406:6400:8000:0001::/64
e1/0
2 54
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
10
CPE
172.16.11.64/30
2406:6400:18::/64
R4
65 1
e1/3
e1/0
1 29
lo 0
172.16.15.6/32
2406:6400::6/128
e1/1
fa0/1
lo 0
172.16.15.4/32
2406:6400::4/128
2 34
r16-CBR2
R6
fa0/1
2 98
97 1
172.16.11.96/30
2406:6400:1c::/64
fa0/0
e1/0
2 30
11
fa0/0
fa0/5
fa0/8
R7
172.16.10.48/30
2406:6400:e:20::/64
fa0/11
172.16.11.128/30
2406:6400:20::/64 r17-CAR3
129 1
2 130
11
fa0/1
fa0/0
fa0/0
172.16.24.0/27
2406:6400:c000:0001::/64
SW2
172.16.22.0/27
2406:6400:b800:0001::/64
e1/1
22
172.16.12.0/24
2406:6400:2::/48
172.16.10.28/30
2406:6400:e:11::/64
22
11
fa0/0
e1/1
1 25
fa0/0
r15-CAR2
2 66
fa0/1
1 33
172.16.10.32/30
2406:6400:e:12::/64
R5
11
172.16.13.0/24
2406:6400:3::/48
172.16.10.24/30
2406:6400:e:10::/64
lo 0
172.16.15.5/32
2406:6400::5/128
e1/0
2 26
fa0/0
172.16.20.0/27
2406:6400:a000:0001::/64
Infra
172.16.2.0/27
2406:6400:0a00:0000::/64
fa0/2
fa0/1
e1/0
e1/1
e1/1
e1/1
172.16.26.0/27
2406:6400:d800:0001::/64
e1/3
172.16.10.56/30
2406:6400:e:22::/64
11
172.16.10.52/30
2406:6400:e:21::/64
2 50
config t
1 57
hostname Router4
lo 0
ip routing
172.16.15.7/32
2406:6400::7/128
ipv6 unicast-routing
R8
ip cef
33
ipv6 cef
1 49
fa0/0
no ip domain-lookup
1 53
no ip http server
no ip http secure-server
lo 0
172.16.15.9/32
no ip finger
2406:6400::9/128
0
no service lopad
172.16.15.8/32
no service
udp-small-servers
2 58
2406:6400::8/128
r18-CBR3
R9
no service tcp-small-server
11
fa0/0
fa0/1
e1/0
fa0/0
no ip bootp server
2 162
161 1
2 54
172.16.11.160/30
no ip source-route
2406:6400:24::/64
CPE
Infra
no ipv6 source-route
172.16.4.0/27
2406:6400:0c00:0000::/64
logging source-interface
loopback 0
service timestamps log datetime localtime msec show-timezone year
Training Lab Topology
service timestamps debug datetime localtime msec show-timezone
year
!!!!"!APNIC Training
DNS MAIL WWW
Created: 25/09/2009
clock timezone AEST 10
Last update: 06/05/2011
ip subnet-zero
ip classless
line console 0
logging synchronous
transport preferred none
ip tcp synwait-time 15
security authentication failure rate 3 log
exit
exit
wr
33
AS17821
11
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
12
13
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
e1/1
2 34
r16-CBR2
R6
fa0/1
2 98
172.16.11.96/30
2406:6400:1c::/64
fa0/0
e1/
e1/0
97 1
2 30
11
fa0/0
172.16.22.0/27
2406:6400:b800:0001::/64
fa0/
72.16.10.28/30
6:6400:e:11::/64
fa0/2
SW2
fa0/8
R7
e1/0
1 57
e1/1
fa0/1
R8
2 50
172.16.10.56/30
2406:6400:e:22::/64
33
172.16.12.0/24
2406:6400:2::/48
172.16.10.48/30
2406:6400:e:20::/64
fa0/11
172.16.13.0/24
2406:6400:3::/48
e1/0
33
1 49
fa0/0
e1/1
R9
fa0/0
r18-CBR3
fa0/1
2 162
161 1
172.16.11.160/30
2406:6400:24::/64
e1/3
2 54
lo 0
172.16.15.9/32
2406:6400::9/128
2 58
e1/0
172.16.4.0/27
2406:6400:0c00:0000::/64
lo 0
172.16.15.7/32
2406:6400::7/128
Infra
11
fa0/0
CPE
172.16.26.0/27
2406:6400:d800:0001::/64
172.16.10.52/30
2406:6400:e:21::/64
e1/1
1 53
11
lo 0
172.16.15.8/32
2406:6400::8/128
172.16.11.128/30
2406:6400:20::/64 r17-CAR3
129 1
2 130
11
fa0/1
fa0/0
fa0/0
172.16.24.0/27
2406:6400:c000:0001::/64
172.16.15.6/32
2406:6400::6/128
config t
hostname Router7
ip routing
ipv6 unicast-routing
ip cef
ipv6 cef
no ip domain-lookup
no ip http server
no ip http secure-server
no ip finger
no service pad
no service udp-small-servers
no service tcp-small-server
no ip bootp server
no ip source-route
no ipv6 source-route
logging source-interface loopback 0
service timestamps log datetime localtime msec show-timezone year
service timestamps debug datetime localtime msec show-timezone year
clock timezone AEST 10
ip subnet-zero
ip classless
line console 0
logging synchronous
transport preferred none
ip tcp synwait-time 15
security authentication failure rate 3 log
exit
exit
wr
14
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
16
fa0/1
fa0/0
34 2
1 33
172.16.11.32/30
2406:6400:14::/64
fa0/1
11
e1/1
e1/0
62
R10
1 193
fa0/0
fa0/0
CPE
fa0/1
fa0/0
1 225
226 2
172.16.11.224/30
2406:6400:2c::/64
fa0/0
44
e1/0
e1/1
172.16.10.80/30
2406:6400:e:32::/64
82 2
44
33
fa0/0
11
e1/3
e1/1
77 1
R12
R8
172.16.13.0/24
2406:6400:3::/48
fa0/1
73 1
e1/1
r20-CBR4
11
R11
fa0/8
11
lo 0
172.16.15.12/32
2406:6400::12/128
172.16.10.72/30
2406:6400:e:30::/64
74 2
81 1
lo 0
172.16.15.10/32
2406:6400::10/128
172.16.12.0/24
2406:6400:2::/48
e1/0
172.16.10.76/30
2406:6400:e:31::/64
fa0/0
194 2
fa0/1
fa0/5
SW2
e1/3
r19-CAR4
fa0/8
fa0/11
172.16.11.192/30
2406:6400:28::/64
11
SW1
33
172.16.30.0/27
2406:6400:f800:0001::/64
fa0/2
fa0/11
172.16.28.0/27
2406:6400:e000:0001::/64
fa0/1
R3
10 2
22
fa0/5
11
fa0/0
fa0/0
172.16.10.4/30
2406:6400:e:1::/64
172.
2406:6
e1/1
r14-CBR1
11
fa0/2
172.16.18.0/27
2406:6400:9800:0001::/64
51
22
lo 0
172.16.15.3/32
2406:6400::3/128
lo 0
172.16.15.11/32
2406:6400::11/128
lo 0
172.16.15.8/32
2406:6400::8/128
e1/0
78 2
Infra
172.16.6.0/27
2406:6400:0e00:0000::/64
172.16.4
2406:6400:0c0
DNS MAIL
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
18
19
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
Infra
CPE
fa0/1
fa0/0
34 2
1 33
172.16.11.32/30
2406:6400:14::/64
e1/3
11
22
172.16.12.0/24
2406:6400:2::/48
e1/0
62
fa0/2
SW1
fa0/11
172.16.11.192/30
IPv4 Interface2406:6400:28::/64
Conf Router1:
fa0/8
fa0/0
44
R8
33
fa0/0
11
e1/3
e1/0
e1/1
172.16.10.72/30
2406:6400:e:30::/64
172.16.10.76/30
2406:6400:e:31::/64
e1/1
172.16.10.80/30
2406:6400:e:32::/64
e1/1
172.16.30.0/27
2406:6400:f800:0001::/64
fa0/8
fa0/11
194 2
1 193
config
t
e1/0
fa0/0
fa0/1
fa0/0
74 2
interface loopback 0
81 1
description Router1 Loopback
no ip redirects
lo 0
no ip directed-broadcast
172.16.15.10/32
2406:6400::10/128
no ip unreachables
R11
ip address 172.16.15.1 255.255.255.255
44
no shutdown
73 1
fa0/1
interface e1/0
77 1
description WAN R1-R2
lo 0
no ip redirects
172.16.15.12/32
no ip directed-broadcast
2406:6400::12/128
lo 0
no ip unreachables
172.16.15.11/32
ip address 172.16.10.2
255.255.255.252
2406:6400::11/128
82 2
r20-CBR4
R12
no shutdown
11
fa0/1
fa0/0
e1/0
interface
e1/1
fa0/0
1 225
226 2
78 2
description 172.16.11.224/30
WAN R1-R3
2406:6400:2c::/64
no ip CPE
redirects
Infra
172.16.6.0/27
no ip directed-broadcast
2406:6400:0e00:0000::/64
no ip unreachables
ip address 172.16.10.9 255.255.255.252
no shutdown
DNS MAIL WWW
exit
exit
wr
fa0/5
SW2
R10
r19-CAR4
11
fa0/0
11
fa0/5
R3
10 2
R5
172.16.13.0/24
2406:6400:3::/48
fa0/1
51
172.16.10.4/30
2406:6400:e:1::/64
11
fa0/0
11
172.16.10.0/30
2406:6400:e::/64
e1/1
r14-CBR1
R2
11
e1/1
lo 0
172.16.15.3/32
2406:6400::3/128
lo 0
172.16.15.5/32
2406:6400::5/128
lo 0
172.16.15.2/32
2406:6400::2/128
fa0/2
172.16.18.0/27
2406:6400:9800:0001::/64
lo 0
172.16.15.1/32
2406:6400::1/128
172.16.28.0/27
2406:6400:e000:0001::/64
e1/0
22
91
fa0/0
fa0/1
17
2406:640
R1
11
fa0/0
e1/0
22
DNS
172.16.0.0/27
2406:6400:0800:0000::/64
e1/1
r13-CAR1
11
fa0/0
172.16.11.0/30
2406:6400:10::/64
172.16.10.8/30
2406:6400:e:2::/64
172.16.16.0/27
2406:6400:8000:0001::/64
[!!!!!]
[!!!!!]
20
AS17821
lo 0
172.16.15.8/32
2406:6400::8/128
17
2406:640
DNS
[!!!!!]
[!!!!!]
21
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
no ip directed-broadcast
no ip unreachables
ip address 172.16.0.1 255.255.255.224
no shutdown
exit
exit
wr
[!!!!!]
[!!!!!]
172.16.12.2
172.16.12.3
172.16.12.4
172.16.13.2
172.16.13.3
172.16.13.4
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
2406:6400:0002:0000::2
2406:6400:0002:0000::3
2406:6400:0002:0000::4
2406:6400:0003:0000::2
2406:6400:0003:0000::3
2406:6400:0003:0000::4
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
22
[!!!!!]
[!!!!!]
23
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
CPE
172.16.11.64/30
2406:6400:18::/64
R4
65 1
e1/3
e1/0
e1/1
1 25
fa0/0
1 29
lo 0
172.16.15.6/32
2406:6400::6/128
e1/1
fa0/1
lo 0
172.16.15.4/32
2406:6400::4/128
2 34
r16-CBR2
R6
fa0/1
2 98
97 1
172.16.11.96/30
2406:6400:1c::/64
fa0/0
e1/0
2 30
11
fa0/0
fa0/5
fa0/8
R7
172.16.10.48/30
2406:6400:e:20::/64
fa0/11
172.16.11.128/30
2406:6400:20::/64 r17-CAR3
129 1
2 130
11
fa0/1
fa0/0
fa0/0
2 50
172.16.24.0/27
2406:6400:c000:0001::/64
SW2
172.16.22.0/27
2406:6400:b800:0001::/64
e1/1
22
172.16.12.0/24
2406:6400:2::/48
172.16.10.28/30
2406:6400:e:11::/64
22
11
fa0/0
1 33
172.16.10.32/30
2406:6400:e:12::/64
R5
11
172.16.13.0/24
2406:6400:3::/48
172.16.10.24/30
2406:6400:e:10::/64
lo 0
172.16.15.5/32
2406:6400::5/128
e1/0
2 26
r15-CAR2
2 66
fa0/1
fa0/0
172.16.20.0/27
2406:6400:a000:0001::/64
Infra
172.16.2.0/27
2406:6400:0a00:0000::/64
fa0/2
fa0/1
e1/0
e1/1
e1/1
e1/1
172.16.26.0/27
2406:6400:d800:0001::/64
e1/3
172.16.10.56/30
2406:6400:e:22::/64
11
172.16.10.52/30
2406:6400:e:21::/64
1 57
config t
interface loopback 0
lo 0
172.16.15.7/32
description Router4 Loopback
2406:6400::7/128
no ip redirects
R8
no ip directed-broadcast
33
1 49
no ip unreachables
fa0/0
1 53
ip address 172.16.15.4 255.255.255.255
no shutdown
lo 0
interface e1/0
172.16.15.9/32
2406:6400::9/128
descriptionlo 0WAN R4-R5
172.16.15.8/32
no ip redirects
2 58
2406:6400::8/128
r18-CBR3
R9
no ip directed-broadcast
11
fa0/0
fa0/1
e1/0
no ip unreachables
fa0/0
2 162
161 1
2 54
172.16.11.160/30
ip address 172.16.10.26 255.255.255.252
2406:6400:24::/64
CPE
Infra
no shutdown
172.16.4.0/27
interface e1/1 2406:6400:0c00:0000::/64
description WAN R4-R6
Training Lab Topology
no ip redirects DNS MAIL WWW
!!!!"!APNIC Training
Created: 25/09/2009
Last update: 06/05/2011
no ip directed-broadcast
no ip unreachables
ip address 172.16.10.33 255.255.255.252
no shutdown
exit
exit
wr
33
AS17821
[!!!!!]
[!!!!!]
24
[!!!!!]
[!!!!!]
25
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
no ip directed-broadcast
no ip unreachables
ip address 172.16.2.1 255.255.255.224
no shutdown
exit
exit
wr
[!!!!!]
[!!!!!]
172.16.12.1
172.16.12.3
172.16.12.4
172.16.13.1
172.16.13.3
172.16.13.4
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
2406:6400:0002:0000::1
2406:6400:0002:0000::3
2406:6400:0002:0000::4
2406:6400:0003:0000::1
2406:6400:0003:0000::3
2406:6400:0003:0000::4
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
26
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
27
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
e1/1
2 34
R6
r16-CBR2
fa0/1
fa0/0
2 98
97 1
172.16.11.96/30
2406:6400:1c::/64
e1/1
e1/0
2 30
11
fa0/0
e1/0
1 57
e1/1
fa0/1
R8
2 50
172.16.10.56/30
2406:6400:e:22::/64
33
172.16.12.0/24
2406:6400:2::/48
172.16.10.48/30
2406:6400:e:20::/64
fa0/11
172.16.13.0/24
2406:6400:3::/48
e1/0
33
1 49
fa0/0
e1/1
e1/3
lo 0
172.16.15.9/32
2406:6400::9/128
2 58
R9
fa0/0
e1/0
2 54
172.16.4.0/27
2406:6400:0c00:0000::/64
lo 0
172.16.15.7/32
2406:6400::7/128
fa0/1
2 162
161 1
172.16.11.160/30
2406:6400:24::/64
Infra
r18-CBR3
[!!!!!]
[!!!!!]
28
11
fa0/0
CPE
172.16.26.0/27
2406:6400:d800:0001::/64
172.16.10.52/30
2406:6400:e:21::/64
11
e1/1
1 53
lo 0
172.16.15.8/32
2406:6400::8/128
172.16.11.128/30
2406:6400:20::/64 r17-CAR3
129 1
2 130
11
fa0/1
fa0/0
fa0/0
172.16.24.0/27
2406:6400:c000:0001::/64
SW2
172.16.22.0/27
2406:6400:b800:0001::/64
fa0/1
30
::/64
172.16.10.28/30
2406:6400:e:11::/64
22
fa0/2
lo 0
172.16.15.6/32
2406:6400::6/128
[!!!!!]
[!!!!!]
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
no ip directed-broadcast
no ip unreachables
ip address 172.16.4.1 255.255.255.224
no shutdown
exit
exit
wr
[!!!!!]
[!!!!!]
172.16.12.1
172.16.12.2
172.16.12.4
172.16.13.1
172.16.13.2
172.16.13.4
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
2406:6400:0002:0000::1
2406:6400:0002:0000::2
2406:6400:0002:0000::4
2406:6400:0003:0000::1
2406:6400:0003:0000::2
2406:6400:0003:0000::4
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
30
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
31
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
fa0/1
fa0/0
34 2
1 33
172.16.11.32/30
2406:6400:14::/64
62
fa0/
fa0/5
R3
10 2
e1/
172.16.10.4/3
2406:6400:e:1::
e1/1
172.16.18.0/27
2406:6400:9800:0001::/64
11
fa0/0
fa0/2
Tuesday,r14-CBR1
August 27, 2013
2406:6400::3/128
e1/0
R10
r19-CAR4
1 193
fa0/0
172.16.12.0/24
2406:6400:2::/48
fa0/0
CPE
fa0/0
e1/1
82 2
fa0/1
fa0/0
1 225
226 2
172.16.11.224/30
2406:6400:2c::/64
44
R12
fa0/1
R8
33
fa0/0
11
e1/1
fa0/8
e1/3
lo 0
172.16.15.11/32
2406:6400::11/128
lo 0
172.16.15.8/32
2406:6400::8/128
e1/0
78 2
Infra
172.16.6.0/27
2406:6400:0e00:0000::/64
fa0/5
SW2
172.16.13.0/24
2406:6400:3::/48
77 1
172.16.10.76/30
2406:6400:e:31::/64
r20-CBR4
11
R11
73 1
e1/1
lo 0
172.16.15.12/32
2406:6400::12/128
172.16.10.80/30
2406:6400:e:32::/64
lo 0
172.16.15.10/32
2406:6400::10/128
44
74 2
81 1
e1/0
e1/0
172.16.10.72/30
2406:6400:e:30::/64
fa0/0
194 2
fa0/1
fa0/8
fa0/11
172.16.11.192/30
2406:6400:28::/64
11
SW1
33
172.16.30.0/27
2406:6400:f800:0001::/64
fa0/2
fa0/11
172.16.28.0/27
2406:6400:e000:0001::/64
[!!!!!]
[!!!!!]
32
172.
2406:6400
DNS
[!!!!!]
[!!!!!]
33
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/
no ip directed-broadcast
no ip unreachables
ip address 172.16.6.1 255.255.255.224
no shutdown
exit
exit
wr
[!!!!!]
[!!!!!]
172.16.12.1
172.16.12.2
172.16.12.3
172.16.13.1
172.16.13.2
172.16.13.3
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
2406:6400:0002:0000::1
2406:6400:0002:0000::2
2406:6400:0002:0000::3
2406:6400:0003:0000::1
2406:6400:0003:0000::2
2406:6400:0003:0000::3
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
34
[!!!!!]
[!!!!!]
[!!!!!]
[!!!!!]
35
APNIC V2.0
Created: 02 June 2010
Updated: 16 July 2013
nurul/documents/traininglab/