lab setup picture and config



Includes the picture, comments from whiteboard and also the
config i already sent you (+ terminalserver, dialin-server configs).


Mcohort Lab setup summary
20/6/2002 <eckert @ cisco.com>

Index:
   1. Overview: (see picture below)
   2. Setup
   3. Operational procedures
      -  Logging in:
      -  Connecting to a router via telnet service
      -  Connecting to a router console
      -  Clear console line
   4. Actual configurations
      -  Configs of g3r1, g3r2, g3r3, g3r4
      -  "show ip route" of g3r1, g3r3
      -  Configs of workshop-gateway and one terminal server

1. Overview: (see picture below)

   Each lab consists of five routers that are set up for a topology
   interesting with respect to PIM-SM. There are two ethernets connecting
   the labs amongst each others, representing an exchange point. The
   first of these ethernets is also used to connect to the outside world.
   One Juniper router (R5) and 4 Cisco routers are connected to each other.

   A gateway router is set up to connect to the outside world, providing
   telnet connections into the virtual terminals of the routers (loopback 0).
   This requires unicast routing in the labs to work. In addition,
   the gateway router also allows students to connect to the consoles
   of the routers via a terminal server - good for booting but not
   sufficient for all students to have sessions into all routers open.

   The lab routers are preconfigured with a working unicast routing
   setup (OSPF), but without any multicast.

2. Setup

   Addresses used in lab:

      All addresses within a lab are within one /16 block>

      172.16.X.x = first lab, G = 1, X = 16 
      172.17.X.x = first lab, G = 2, X = 17 
      ...

   R = Router number: 1 for R1, 2 for R2, ...
   dce = Set interface clock rate on this interface

   Full names of routers: gGrR, eg: g1r1 ... g1r5
                                       
             To other labs access routers                     
             Multicast IX                            +--------+ 128.22.229.100
                                                     |gateway |----->
                ^ ... ^        ^ ... ^               +--------+
                |     |        |     |             e1 .1 |       To outside
            --+-+-----+-+-  -+-+-----+-------------------+-+-    world
              |         |    | 172.30.1.x                  |
    enable    .         .    |                             |
    either    .         .    |                             | e0 .252
    R1 or R5  | .10G e1 |    | e0 .10G                    +---------+
              |   (RP)+--------+ loopback0 172.X.254.R/32 | Terminal|
              |       |   R1   | (on all routers)         | Server  |
              |       +--------+                          +---------+
              |      e2 | .2  \ s0 .2 dce                   | ... |
              |         |      \                            |     |
              |  -+-----+-      \ 172.X.5.x/24           <--+     |
              |   | 172.X.1.x/24 \                                |
   fa0/3/3    |   | fa0/3/0 .1    \ s0 .1                <--------+
        (RP)+--------+         +--------+                  Router Consoles
            |JNPR R5 |         |   R2   |
            +--------+         +--------+
   fa0/3/1 .2 |    | fe0/3/2 .2       | s1 dce .1
              |    |                  |
              |   -+--------------+-  |
             -+-+-   172.X.3.x/24 |   | 172.X.6.x/24
   172.X.2.x/24 |                 |   |
                |                 |   |
          e0 .1 |           e0 .1 |   | s0 .1
            +--------+         +--------+         
            |   R4   |         |   R3   |         
            +--------+         +--------+         
            e1 | .2              e1 | .2
               |  172.X.4.x/24      |  172.X.7.x/24
            ---+--+---         ---+-+----
                  |               |
                  |               |
          Multicast Source     ( Multicast Receiver )

3. Operational procedures

   -  Logging in:
   -  Connecting to a router via telnet service
   -  Connecting to a router console
   -  Clear console line

   a) Logging in:

      Telnet to gateway "telnet 128.223.229.100"
      Login with username from email,
      password "poclab". Username "anonymous"
      can be used if own login name does not work:
         
        Trying 128.223.229.100...
        Connected to 128.223.229.100.
        Escape character is '^]'.
        
        User Access Verification
        
        Username: eckert
        Password:
        Type g1r1 ... g6r5 to connect to your routers (loopback 0, ucast ...
        Type g1r1-cons ... g6r5 to connect to your routers consoles

        workshop-gateway>

   b) Connecting to a router via telnet service
      
      To a router telnet service - up to 5 stduents can access this
      in parallel. Simply type in the name of the router "g1r1" ... "g1r5"

        workshop-gateway> g1r1
        Translating "g1r1"
        Trying g1r1 (172.16.254.1)... Open
  
        g1r1>

        g1r1> enable
        Password: poclab
      
      To disconnect, simply exit:

        g1r1>exit

        [Connection to g1r1 closed by foreign host]
        workshop-gateway>

   c) Connecting to a router console

      Use this when you need to reboot the router or if the telnet service
      to the router is not accessibl because unicast routing is broken
      or had to be reconfigured to make a router inaccessible. Only one
      person at a time can connect to a console.

      Type the name of the router with -cons: "g1r1-cons" ... "g1r5-cons".

        workshop-gateway>g1r1-cons
        Translating "g1r1-cons"
        Trying g1r1-cons (172.30.1.252, 6001)... Open
        
        g1r1>
      
      Disconnecting from a console:

        g1r1> 
        >> type <ctrl><shift>6 x
        workshop-gateway> disconnect
        Closing connection to g1r1-cons [confirm] y
        workshop-gateway> 

   d) Clear console line

      If a console is not accessible, figure out, if somebody is logged
      into it, and if necessary kick him out:

        workshop-gateway> who
           Line      User       Host(s)              Idle       Location
        66 vty 0     eckert     g1r1-cons            00:10:00   128.223.229.62
        ^^ ....

        workshop-gateway> enable
        Password:
        workshop-gateway# clear line 66
        [confirm]y

   e) Upgrade software

      The gateway has NAT configured, so even with the rfc1918 addresses
      172.16... being used, it is possible to reach an outside ftp/tftp
      server to load different images. 

      For example, uoregon tftp server is limestone = 128.223.229.162.20

      Add following config to R1:

         ip route 128.223.229.162.20 255.255.255.255 172.30.1.1 200
         router ospf 1
           redistribute static metric 100 subnets
      
      then all routers in the lab will be able to access the external
      addresses.

4. Actual configurations

   Some notes:

     - OSPF costs of all links should be the same. for serial and 10/100
       Mbps links this is enforced via ospf cost configuration (to
       10 Mbps default of 10). 
     - With this routing config, the router ip addresses become important.
       Namely, R3 should select R3 as the RPF neighbor towards the RP R1 and
       not R5!
     - the gateway router must run an IOS image that allows for
       sufficiently many virtual terminals for telnet login.
       The best image is a -c- image (async/terminal server image).
     - more notes inline in the appended configs.

   Appended:

    - Configs of g3r1, g3r2, g3r3, g3r4
    - "show ip route" of g3r1, g3r3
    - Configs of workshop-gateway and one terminal server

-----------------------------------------------------------------------------
g3r1#show running-config
Building configuration...

Current configuration : 1392 bytes
!
version 12.1
!
hostname g3r1
!
ip subnet-zero
ip cef                  ! must be enabled
no ip domain-lookup     ! helps to avoid waiting for show ip rpf lookup et. al.
!
!
!
interface Loopback0 
 description unicast loopback
 ! address scheme: 172.x.254.<router>, eg: 172.18.254.1...172.18.254.5 for G3
 ip address 172.18.254.1 255.255.255.255
!
interface Ethernet0/0
 ! your groups address on here is 172.30.1.(100+group)
 description unicast interdomain
 ip address 172.30.1.103 255.255.255.0
!
interface Ethernet0/1
 ! your groups address on here is 172.30.2.(100+group)
 description interdomain multicast keep shut down until told
 ip address 172.30.2.103 255.255.255.0
 shutdown
!
interface Ethernet0/2
 description connection to R5
 ip address 172.18.1.2 255.255.255.0
!
interface Serial1/0
 description connection to R2
 ip address 172.18.5.2 255.255.255.0
 ip ospf cost 10                   ! set cost to 10 to have same cost as ether
 keepalive 1                       ! set keepalive to one on serial for
                                   ! quick status check
 clockrate 4032000                 ! must set clockrate only n DCE side of link
!
router ospf 1
 log-adjacency-changes             ! get's automatically enabled
 redistribute connected metric 100 subnets ! to redistribute 172.30 nets
 passive-interface Ethernet0/0 ! just for safety, don't run OSPF here
 passive-interface Ethernet0/1 ! just for safety, don't run OSPF here
 network 172.18.0.0 0.0.255.255 area 0.0.0.0 ! only run it in our own lab
!
line con 0
line aux 0
line vty 0 4
 no login     ! so you can log in without a password
!
end

------------------------------------------------------------------------------

g3r2#term length 0
g3r2#wr term
!
hostname g3r2
!
ip subnet-zero
ip cef
no ip domain-lookup
!
interface Loopback0
 description unicast loopback
 ip address 172.18.254.2 255.255.255.0
!
interface Serial0/0
 description connection to R1
 ip address 172.18.5.1 255.255.255.0
 ip ospf cost 10
 keepalive 1
!
interface Ethernet0/1
 no ip address
 shutdown
!
interface Serial0/1
 description connection to R3
 ip address 172.18.6.2 255.255.255.0
 ip ospf cost 10
 keepalive 1
 clockrate 4000000
!
router ospf 1
 log-adjacency-changes
 network 172.18.0.0 0.0.255.255 area 0.0.0.0
!
line con 0
line aux 0
line vty 0 4
 no login
!
end

------------------------------------------------------------------------------

g3r3#term length 0
g3r3#wr term

hostname g3r3
!
ip cef
no ip domain-lookup
!
interface Loopback0
 description unicast loopback
 ip address 172.18.254.3 255.255.255.255
!
interface Ethernet0/0
 description connection to R5
 ip address 172.18.3.1 255.255.255.0
!
interface Serial0/0
 description connection to R2
 ip address 172.18.6.1 255.255.255.0
 ip ospf cost 10
 keepalive 1
!
interface Ethernet0/1
 description connection to multicast receiver
 ip address 172.18.7.2 255.255.255.0
 no keepalive
!
router ospf 1
 log-adjacency-changes
 network 172.18.0.0 0.0.255.255 area 0.0.0.0
!
ip classless
!
line con 0
 exec-timeout 0 0
line aux 0
line vty 0 4
 no login
!
end

------------------------------------------------------------------------------

g3r4#term length 0
g3r4#wr term
!
hostname g3r4
!
ip subnet-zero
ip cef
no ip domain-lookup
!
!
interface Loopback0
 description unicast loopback
 ip address 172.18.254.4 255.255.255.255
!
interface Ethernet0/0
 description connection to R5
 ip address 172.18.2.1 255.255.255.0
!
interface Ethernet0/1
 description connection to multicast source
 ip address 172.18.4.2 255.255.255.0
 no keepalive
!
router ospf 1
 log-adjacency-changes
 network 172.18.0.0 0.0.255.255 area 0.0.0.0
!
ip classless
!
!
line con 0
line aux 0
line vty 0 4
 no login
!
end

-----------------------------------------------------------------------------

g3r1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is not set

     172.18.0.0/16 is variably subnetted, 12 subnets, 2 masks
C       172.18.254.1/32 is directly connected, Loopback0
O       172.18.254.2/32 [110/11] via 172.18.5.1, 00:06:30, Serial1/0
O       172.18.254.3/32 [110/21] via 172.18.5.1, 00:06:30, Serial1/0
                        [110/21] via 172.18.1.1, 00:06:30, Ethernet0/2
O       172.18.254.4/32 [110/21] via 172.18.1.1, 00:06:30, Ethernet0/2
O       172.18.254.5/32 [110/10] via 172.18.1.1, 00:06:30, Ethernet0/2
O       172.18.6.0/24 [110/20] via 172.18.5.1, 00:06:31, Serial1/0
O       172.18.7.0/24 [110/30] via 172.18.5.1, 00:06:31, Serial1/0
                      [110/30] via 172.18.1.1, 00:06:31, Ethernet0/2
O       172.18.4.0/24 [110/30] via 172.18.1.1, 00:06:31, Ethernet0/2
C       172.18.5.0/24 is directly connected, Serial1/0
O       172.18.2.0/24 [110/20] via 172.18.1.1, 00:06:31, Ethernet0/2
O       172.18.3.0/24 [110/20] via 172.18.1.1, 00:06:31, Ethernet0/2
C       172.18.1.0/24 is directly connected, Ethernet0/2
     172.30.0.0/24 is subnetted, 1 subnets
C       172.30.1.0 is directly connected, Ethernet0/0
g3r1#exit

------------------------------------------------------------------------------

g3r3#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is not set

     172.18.0.0/16 is variably subnetted, 12 subnets, 2 masks
O       172.18.254.1/32 [110/21] via 172.18.6.2, 00:07:30, Serial0/0
                        [110/21] via 172.18.3.2, 00:07:30, Ethernet0/0
O       172.18.254.2/32 [110/11] via 172.18.6.2, 00:07:30, Serial0/0
C       172.18.254.3/32 is directly connected, Loopback0
O       172.18.254.4/32 [110/21] via 172.18.3.2, 00:07:30, Ethernet0/0
O       172.18.254.5/32 [110/10] via 172.18.3.2, 00:07:30, Ethernet0/0
C       172.18.6.0/24 is directly connected, Serial0/0
C       172.18.7.0/24 is directly connected, Ethernet0/1
O       172.18.4.0/24 [110/30] via 172.18.3.2, 00:07:31, Ethernet0/0
O       172.18.5.0/24 [110/20] via 172.18.6.2, 00:07:31, Serial0/0
O       172.18.2.0/24 [110/20] via 172.18.3.2, 00:07:31, Ethernet0/0
C       172.18.3.0/24 is directly connected, Ethernet0/0
O       172.18.1.0/24 [110/20] via 172.18.3.2, 00:07:31, Ethernet0/0
     172.30.0.0/24 is subnetted, 1 subnets
O E2    172.30.1.0 [110/100] via 172.18.6.2, 00:07:31, Serial0/0
                   [110/100] via 172.18.3.2, 00:07:31, Ethernet0/0
g3r3#

------------------------------------------------------------------------------

! The gateway router 
workshop-gateway#show running-config
Building configuration...

Current configuration : 4688 bytes
!
version 12.2
!
hostname workshop-gateway
!
enable password XXXX
!
username anonymous password 0 poclab
username bwilliam password 0 poclab
username eckert   password 0 poclab
! ... add other users
no ip domain-lookup
!
ip host g1r1 172.16.254.1
ip host g1r1-cons 6001 172.30.1.252
ip host g1r2 172.16.254.2
ip host g1r2-cons 6002 172.30.1.252
ip host g1r3 172.16.254.3
ip host g1r3-cons 6003 172.30.1.252
ip host g1r4 172.16.254.4
ip host g1r4-cons 6004 172.30.1.252
ip host g1r5 172.16.254.5
ip host g1r5-cons 6005 172.30.1.252
ip host g2r1 172.17.254.1
ip host g2r1-cons 6009 172.30.1.252
ip host g2r2 172.17.254.2
ip host g2r2-cons 6010 172.30.1.252
ip host g2r3 172.17.254.3
ip host g2r3-cons 6011 172.30.1.252
ip host g2r4 172.17.254.4
ip host g2r4-cons 6012 172.30.1.252
ip host g2r5 172.17.254.5
ip host g2r5-cons 6013 172.30.1.252
ip host g3r1 172.18.254.1
ip host g3r1-cons 6001 172.30.1.251
ip host g3r2 172.18.254.2
ip host g3r2-cons 6002 172.30.1.251
ip host g3r3 172.18.254.3
ip host g3r3-cons 6003 172.30.1.251
ip host g3r4 172.18.254.4
ip host g3r4-cons 6004 172.30.1.251
ip host g3r5 172.18.254.5
ip host g3r5-cons 6005 172.30.1.251
ip host g4r1 172.19.254.1
ip host g4r1-cons 6009 172.30.1.251
ip host g4r2 172.19.254.2
ip host g4r2-cons 6010 172.30.1.251
ip host g4r3 172.19.254.3
ip host g4r3-cons 6011 172.30.1.251
ip host g4r4 172.19.254.4
ip host g4r4-cons 6012 172.30.1.251
ip host g4r5 172.19.254.5
ip host g4r5-cons 6013 172.30.1.251
ip host g5r1 172.20.254.1
ip host g5r1-cons 6001 172.30.1.250
ip host g5r2 172.20.254.2
ip host g5r2-cons 6002 172.30.1.250
ip host g5r3 172.20.254.3
ip host g5r3-cons 6003 172.30.1.250
ip host g5r4 172.20.254.4
ip host g5r4-cons 6004 172.30.1.250
ip host g5r5 172.20.254.5
ip host g5r5-cons 6005 172.30.1.250
ip host g6r1 172.21.254.1
ip host g6r1-cons 6009 172.30.1.250
ip host g6r2 172.21.254.2
ip host g6r2-cons 6010 172.30.1.250
ip host g6r3 172.21.254.3
ip host g6r3-cons 6011 172.30.1.250
ip host g6r4 172.21.254.4
ip host g6r4-cons 6012 172.30.1.250
ip host g6r5 172.21.254.5
ip host g6r5-cons 6013 172.30.1.250
ip host limestone 128.223.162.20

ip host limestone 128.223.162.20
!
!
interface Ethernet0/0
 description Outside connection
 ip address 128.223.229.100 255.255.255.0
 ip nat outside
!
interface Ethernet0/1
 ip address 172.30.1.1 255.255.255.0
 ip nat inside
!
ip nat pool outside-dynamic 128.223.229.102 128.223.229.103 prefix-length 30
ip nat inside source list inside-dynamic pool outside-dynamic overload
ip classless

ip default-network 0.0.0.0
ip route 0.0.0.0 0.0.0.0 128.223.229.1
!
! routes to the labs
ip route 172.16.0.0 255.255.0.0 172.30.1.101
ip route 172.17.0.0 255.255.0.0 172.30.1.102
ip route 172.18.0.0 255.255.0.0 172.30.1.103
ip route 172.19.0.0 255.255.0.0 172.30.1.104
ip route 172.20.0.0 255.255.0.0 172.30.1.105
ip route 172.21.0.0 255.255.0.0 172.30.1.106
!
!
ip access-list standard inside-dynamic
 permit 172.0.0.0 0.255.255.255
!
banner exec ^C
Type g1r1 ... g6r5 to connect to your routers (loopback 0, ucast routing reqd.)
Type g1r1-cons ... g6r5 to connect to your routers consoles
^C
!
line con 0
line aux 0
line vty 0 4
 exec-timeout 0 0
 login local
line vty 5 100
 exec-timeout 0 0
 login local
!
end

------------------------------------------------------------------------------
! Terminal server for g1 and g2 routers. g1 routers take first 8
! serial ports (only 5 needed) and g2 takes second set of 8 cables.
!
g1g2-console#wr term
!
version 11.2
!
hostname g1g2-console
!
enable password poclab
!
no ip routing
no ip domain-lookup
ip host g2r2-cons 6010 172.30.1.252
ip host g2r5-cons 6013 172.30.1.252
ip host g1r2-cons 6002 172.30.1.252
ip host g1r3-cons 6003 172.30.1.252
ip host g1r5-cons 6005 172.30.1.252
ip host g1r4-cons 6004 172.30.1.252
ip host g2r8-cons 6016 172.30.1.252
ip host g1r8-cons 6008 172.30.1.252
ip host g2r4-cons 6012 172.30.1.252
ip host g2r3-cons 6011 172.30.1.252
ip host g2r1-cons 6009 172.30.1.252
ip host g1r1-cons 6001 172.30.1.252
ip host g1r6-cons 6006 172.30.1.252
ip host g1r7-cons 6007 172.30.1.252
ip host g2r6-cons 6014 172.30.1.252
ip host g2r7-cons 6015 172.30.1.252
!
interface Ethernet0
 ip address 172.30.1.252 255.255.255.0
 no ip route-cache
!
!
banner exec ^C
I2 multicast workshop group1 / group2 console server
^C
!
line con 0
 password XXXX
line 1 16
 no exec
 transport input telnet
line vty 0 4
 exec-timeout 1 0
 no login
line vty 5 15
 exec-timeout 1 0
 no login
!
end