CCIE Lab分解实验练习(Plannet_Practice_Labs)_.Vol_2(4)

ccie,java,安全,教程,文集,资料,工具书

o use MD5 authentication with the password "cisco". Here we are going to authenticate area 100 using MD5 authentication. For area authentication, there are two steps. Under the router process, you tell it which type of authentication the area is going to use. Then, under the interfaces that are going to form a neighbor relationship with another router in the same area, you issue the key that they are going to exchange.
CK1:
router ospf 1 area 100 authentication message-digest interface Ethernet0 ip ospf message-digest-key 1 md5 cisco
CK2:
router ospf 1 area 100 authentication message-digest interface Ethernet0 ip ospf message-digest-key 1 md5 cisco interface Loopback0 ip ospf message-digest-key 1 md5 cisco
Study Guide From
IT认证部落 CCIE-LAB
CK8:
router ospf 1 area 100 authentication message-digest interface Ethernet0 ip ospf message-digest-key 1 md5 cisco
3.0 Redistribution STEP 1 (2 points)
1. Ensure that the RIP routes are seen as a single route past CAT1. No NULL0 routes should be seen in any routing table. All of the RIP routes should be visible to all of the OSPF routers. Now we need to summarize these RIP routes into a single route on CAT1 to keep our routing table small. We are going to use a summaryaddress command under the OSPF process on CAT1. The summary-address command is used to summarize external routes that have been redistributed into OSPF. It is always done on the ASBR. When this summary-address command is issued, it will inject a NULL0 route into the routing table of CAT1. We need to remove this NULL0 route. That is done with the no discard-route external command. This command will stop external NULL0 routes from being placed into the routing table. If we did an "area X range" to summarize internal OSPF routes on an ABR, we would use the no discard-route internal command to remove the internal NULL0 route.
CAT1:
router ospf 1 no discard-route external summary-address 192.168.0.0 255.255.252.0
4.0 BGP STEP 1 (2 points)
1. Shut down CK6's Frame Relay interface and ensure that CAT2 can still ping the 211.1.1.1 address and that CAT1 can still ping the 199.36.36.36 address. If we shut down CK6's Frame Relay interface, CAT2 will still be able to ping the 211.1.1.1 address. However, CAT1 will not be able to ping the 199.36.36.36 address. When CAT1 tries to ping the 199.36.36.36 address, it will first send the packet to CK8, so let's start there by looking at CK8's routing table: 170.1.0.0/24 is subnetted, 1 subnets Study Guide From
IT认证部落 CCIE-LAB
O E2 170.1.1.0 [110/20] via 140.4.88.35, 00:00:48, Ethernet1 140.4.0.0/16 is variably subnetted, 16 subnets, 2 masks
…… O E2 O E2 O O IA O E2 O E2 140.4.5.0/24 [110/20] via 140.4.68.6,
00:00:49, Serial0 140.4.6.0/24 [110/20] via 140.4.68.6, 00:00:49, Serial0 140.4.35.0/24 [110/11] via 140.4.88.35, 01:10:15, Ethernet1 140.4.36.