LAB config

Section 1:
*******


1.1
===
vtp version 2
vtp domain CCIE
vtp mode
vtp password
mac addressing-table

1.2:
==
inter range 2/0-3
inter range 1/0-3, eth3/0-3
sw mode acc
sw ac vl 999


1.3:
===

sp port de
sp port bpdugua de
span mode mst
spa mst con
name CCIE
revision 1
instance 1
instance 2

SW1,2 - vlan 14,15,23,24,35,46,57,67,999
SW3,4 - vlan 34,38,89,49,110,411,310,999


1.4:
==
inter ser1/0
encap ppp
ppp chap host name ACME-R18
ppp chap pass CCIE

***
no peer neighbor-route
ppp ipcp route default

Section 2-3:
********
2.1/3.1:
=====

ip cef
mpls ldp router-id lo0 force
no mpls ip prop
router ospf 12345
mpls ldp autoconf
router-id 123.***
network *** 0.0.0.0 area 0


->On R1:

max-metric router-lsa

2.2:
==
router eigrp 34567
no auto
eigrp router-id
network *.*.*.* 0.0.0.0

-> SW3, SW4:

inter vlan 34
delay 100

2.3:
===
router eigrp CCIE
add ipv4 au 45678
eigrp router-id ****
network ****


key chain KC_EIGRP
 key 1
  key-string CCIE
af-interface default
   authentication mode hmac-sha-256 CCIE
   authentication key-chain KC_EIGRP
  exit-af-interface
  !
-> On R17:

  af-interface Tunnel0
   no authentication mode
   no authentication key-chain
   no next-hop-self
   no split-horizon
  exit-af-interface
  !    


2.4/3.3/3.4:
========

int tunnel 0
tunnel vrf LOCALSP
bandwidth 1000
delay 1000
ip mtu 1400
ip tcp 1380
ip nhrp authen 45678key
ip nhrp netw 45678
ip nhrp hold 300
ip nhrp multicast dynamic
tunnel mode gre multipoint
tunnel source eth0/0
tunnel key 10000


-> On R18 and R19:

router eigrp CCIE
 !      
 address-family ipv4 unicast autonomous-system 45678
  !
  topology base
  exit-af-topology
  network 10.2.18.1 0.0.0.0
  network 10.20.1.26 0.0.0.0
  network 123.18.18.18 0.0.0.0
 exit-address-family
!


crypto isakmp policy 10
en aes
auth pre-share
group 2

crypto keyring DMVPN vrf LOCALSP
 pre-shared-key address 203.3.19.2 key CCIE
 pre-shared-key address 203.3.17.2 key CCIE


crypto ipsec tran CCIEXFORM esp-aes 128
mode transport

crypto ipsec profile DMVPNPROFILE
set tran CCIEXFORM

int tun 0
tunnel prot ipsec pro DMVPNPROFILE


2.5/3.2:
=====
->R1:
router bgp 12345
bgp router-id
bgp listen range 123.0.0.0/8 peer-group iBGP
neighbor iBGP peer-group
nei iBGP 12345
nei iBGP up lo0

add ipv4 uni
neig iBGP activate
nei iBGP route-re

add vpnv4
neigh iBGP activa
neigh iBGP send-commun e
nei iBGP route-re

-R2:

router bgp 12345
neigh 123.1.1.1 remote-as 12345
neigh 123.1.1.1 upda lo0

add ipv4
neigh 123.1.1.1 next-ho
neigh ac

add vpnv4
neigh 123.1.1.1 next-ho
neigh ac

2.6:
==

router bgp 34567
bgp router-id
bgp listen range 123.0.0.0/8 peer-group iBGP
neighbor iBGP peer-group
nei iBGP 34567
nei iBGP up lo0

add ipv4 uni
neig iBGP activate
nei iBGP route-re
nei iBGP next-hop-self


router bgp 34567
bgp default local-pref

router bgp 34567
add ipv4
redistribute eigrp 34567

ip prefix-li pf 0.0.0.0/0

route-map DEFAULT
match ip add pre pf

- > On R9,R11:

router eigrp 34567
redistribute bgp 34567 metric 10000 10 255 1 1500 route-map DEFAULT

2.7:
==

-> R15:

router bgp 45678
nei 103.2.45.1 remote 10003