JNCIA-EX Lab Diagrams _9.A

33
1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Operating Juniper Networks Switches in the Enterprise 9.a Lab Diagrams Course Number: EDU-JUN-OJXE Not For Reproduction

Transcript of JNCIA-EX Lab Diagrams _9.A

Page 1: JNCIA-EX Lab Diagrams _9.A

1194 North Mathilda AvenueSunnyvale, CA 94089USA408-745-2000www.juniper.net

Operating Juniper Networks Switches in the Enterprise9.a

Lab Diagrams

Course Number: EDU-JUN-OJXE

Not For

Reprod

uctio

n

Page 2: JNCIA-EX Lab Diagrams _9.A

Juniper Networks, the Juniper Networks logo, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. JUNOS, JUNOSe, and Virtual Chassis are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.

Juniper Networks reserves the right to change, modify, transfer or otherwise revise this publication without notice.

YEAR 2000 NOTICE

Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The JUNOS software has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

SOFTWARE LICENSE

The terms and conditions for using Juniper Networks software are described in the software license provided with the software, or to the extent applicable, in an agreement executed between you and Juniper Networks, or Juniper Networks agent. By using Juniper Networks software, you indicate that you understand and agree to be bound by its license terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the Juniper Networks software, may contain prohibitions against certain uses, and may state conditions under which the license is automatically terminated. You should consult the software license for further details.

Operating Juniper Networks Switches in the Enterprise Lab Diagrams, Revision 9.a

Copyright © 2008, Juniper Networks, Inc.

All rights reserved. Printed in USA.

Revision History:

Revision 9.a—May 2008

The information in this document is current as of the date listed above.

The information in this document has been carefully verified and is believed to be accurate for software Release 9.0R2. Juniper Networks assumes no responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.

Not For

Reprod

uctio

n

Page 3: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Mod

ule

A(s

1, s

2, s

3, s

4)

Lab

Dia

gram

s

Mod

ule

B(s

5, s

6, s

7, s

8)

Not

e: B

e su

re y

ou re

fere

nce

the

corr

ect d

iagr

am fo

r you

r mod

ule.

Not For

Reprod

uctio

n

Page 4: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr4-

age

-1/0

/6

vr2-

age

-1/0

/2

vr3-

age

-1/0

/4

vr1-

age

-1/0

/0

ge-0

/0/0

on

all s

witc

hes

Labs

3 a

nd 4

: Sec

onda

ry C

onfi

gura

tion

and

O

pera

tion

al M

onit

orin

g (M

odul

e A)

s2s1 s3

s4

Mgm

tSw

itch

me0

on

all s

witc

hes

Not

e: J2

320

with

virt

ual r

oute

rs is

als

o co

nnec

ted

to th

e m

anag

emen

t sw

itch.

Ref

er to

man

agem

ent

hand

out f

or d

etai

ls.

RAD

IUS

serv

erD

HCP

ser

ver

Sysl

og s

erve

rAr

chiv

al s

erve

r

Not For

Reprod

uctio

n

Page 5: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Labs

3 a

nd 4

: Sec

onda

ry C

onfi

gura

tion

and

O

pera

tion

al M

onit

orin

g (M

odul

e B)

vr8-

age

-2/0

/6

vr6-

age

-2/0

/2

vr7-

age

-2/0

/4

vr5-

age

-2/0

/0

ge-0

/0/0

on

all s

witc

hes

s6s5 s7

s8

Mgm

tSw

itch

me0

on

all s

witc

hes

RAD

IUS

serv

erD

HCP

ser

ver

Sysl

og s

erve

rAr

chiv

al s

erve

r

Not

e: J2

320

with

virt

ual r

oute

rs is

als

o co

nnec

ted

to th

e m

anag

emen

t sw

itch.

Ref

er to

m

anag

emen

t han

dout

for d

etai

ls.

Not For

Reprod

uctio

n

Page 6: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr4-

b

vr4-

a

ge-1

/0/7

ge-1

/0/6

vr2-

a

vr2-

bge

-1/0

/3

ge-1

/0/2

vr3-

b

vr3-

age

-1/0

/4

ge-1

/0/5

vr1-

a

vr1-

b

ge-1

/0/0

ge-1

/0/1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lab

5: V

irtu

al C

hass

is (M

odul

e A)

s2s1 s3

s4

VCEP

xe-0

/1/0

VCEP

xe-0

/1/0

Gro

up 1

Gro

up 2

Pri

orit

y =

255

Pri

orit

y =

254

Not For

Reprod

uctio

n

Page 7: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr8-

b

vr8-

a

ge-2

/0/7

ge-2

/0/6

vr6-

a

vr6-

bge

-2/0

/3

ge-2

/0/2

vr7-

b

vr7-

age

-2/0

/4

ge-2

/0/5

vr5-

a

vr5-

b

ge-2

/0/0

ge-2

/0/1

Lab

5: V

irtu

al C

hass

is (M

odul

e B)

s6s5 s7

s8

VCEP

xe-0

/1/0

VCEP

xe-0

/1/0

Pri

orit

y =

255

Pri

orit

y =

254

Gro

up 1

Gro

up 2

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hesNot For

Reprod

uctio

n

Page 8: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

ae0.

0ge

-0/0

/10

-12

.1.2

vr4-

b

vr4-

a

ge-1

/0/7

ge-1

/0/6

vr2-

a

vr2-

bge

-1/0

/3

ge-1

/0/2

vr3-

b

vr3-

age

-1/0

/4

ge-1

/0/5

vr1-

a

vr1-

b

ge-1

/0/0

ge-1

/0/1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lab

6: In

terf

ace

Conf

igur

atio

n (M

odul

e A)

s2s1 s3

s4

Gro

up 1

Gro

up 2

.1.2

Loop

back

add

ress

es: 1

92.1

68.X

.Y/3

2LA

G a

ddre

sses

: 172

.18.

35.X

/30

VR in

terfa

ce a

ddre

sses

: 172

.22.

X.Y/

24 Lo0:

10.

1Lo

0: 2

0.1

Lo0:

40.

1Lo

0: 3

0.1

ae0.

0ge

-0/0

/10

-12

1.1

2.1

4.1

3.1

3.2

4.2

2.2

1.2Not

For Rep

roduc

tion

Page 9: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr8-

b

vr8-

a

ge-2

/0/7

ge-2

/0/6

vr6-

a

vr6-

bge

-2/0

/3

ge-2

/0/2

vr7-

b

vr7-

age

-2/0

/4

ge-2

/0/5

vr5-

a

vr5-

b

ge-2

/0/0

ge-2

/0/1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lab

6: In

terf

ace

Conf

igur

atio

n (M

odul

e B)

s6s5 s7

s8

Gro

up 1

Gro

up 2

ae0.

0ge

-0/0

/10

-12

.1 .1.2.2

Loop

back

add

ress

es: 1

92.1

68.X

.Y/3

2LA

G a

ddre

sses

: 172

.18.

35.X

/30

VR in

terfa

ce a

ddre

sses

: 172

.22.

X.Y/

24 Lo0:

50.

1Lo

0: 6

0.1

Lo0:

80.

1Lo

0: 7

0.1

ae0.

0ge

-0/0

/10

-12

5.1

6.1

8.1

7.1

7.2

8.2

6.2

5.2Not

For Rep

roduc

tion

Page 10: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr4-

b

vr4-

a

ge-1

/0/7

ge-1

/0/6

vr2-

a

vr2-

bge

-1/0

/3

ge-1

/0/2

vr3-

b

vr3-

age

-1/0

/4

ge-1

/0/5

vr1-

a

vr1-

b

ge-1

/0/0

ge-1

/0/1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lab

7: E

ther

net S

wit

chin

g an

d VL

ANs

(Mod

ule

A)

s2s1 s3

s4

Gro

up 1

Gro

up 2

ae0.

0ge

-0/0

/10

-12

ae0.

0ge

-0/0

/10

-12

.10

.20

.20

.10

.10

.20

.20

.10

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

Trun

k Po

rt

Trun

k Po

rt

Acce

ss P

orts

Acce

ss P

orts

VLAN

v10

0: V

ID =

100

, Sub

net =

172

.22.

100.

0/24

VLAN

v20

0: V

ID =

200

, Sub

net =

172

.22.

200.

0/24

Not For

Reprod

uctio

n

Page 11: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr8-

b

vr8-

a

ge-2

/0/7

ge-2

/0/6

vr6-

a

vr6-

bge

-2/0

/3

ge-2

/0/2

vr7-

b

vr7-

age

-2/0

/4

ge-2

/0/5

vr5-

a

vr5-

b

ge-2

/0/0

ge-2

/0/1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lab

7: E

ther

net S

wit

chin

g an

d VL

ANs

(Mod

ule

B)

s6s5 s7

s8

Gro

up 1

Gro

up 2

ae0.

0ge

-0/0

/10

-12

ae0.

0ge

-0/0

/10

-12

.10

.20

.20

.10

.10

.20

.20

.10

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

v10

0: V

ID =

100

, Sub

net =

172

.22.

100.

0/24

VLAN

v20

0: V

ID =

200

, Sub

net =

172

.22.

200.

0/24

Trun

k Po

rt

Trun

k Po

rt

Acce

ss P

orts

Acce

ss P

orts

Not For

Reprod

uctio

n

Page 12: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

8, P

arts

1–2

: Spa

nnin

g Tr

ee P

roto

col

(Mod

ule

A)

s2s1 s3

s4

vr1-

avr

2-a

vr2-

bvr

1-b

vr3-

b

vr3-

a

vr4-

b

vr4-

a

ge-0

/0/1

0 -/

11

ge-0

/0/1

0 -/

11

ge-0/0/13 -/14

ge-0/0/13 -/14

ge-0/0

/16 -/

17ge

-0/0/1

6 - /17

ge-1

/0/0

ge-1

/0/4

ge-1

/0/1

ge-1

/0/5

ge-1

/0/3

ge-1

/0/7

ge-1

/0/6

ge-1

/0/2

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

ge-0

/0/0

and

ge-

0/0/

1 =

Acce

ss p

orts

on

all s

witc

hes

ge-0

/0/1

0, /

11, /

13, /

14, /

16, a

nd /

17 =

Tru

nk p

orts

on

all s

witc

hes

.1 .1.2 .2

.3 .3

VLAN

v10

0: V

ID =

100

, Sub

net =

172

.22.

100.

0/24

VLAN

v20

0: V

ID =

200

, Sub

net =

172

.22.

200.

0/24

.4 .4

Not For

Reprod

uctio

n

Page 13: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

8, P

arts

1–2

: Spa

nnin

g Tr

ee P

roto

col

(Mod

ule

B)

s6s5 s7

s8

vr5-

avr

6-a

vr6-

bvr

5-b

vr7-

b

vr7-

a

vr8-

b

vr8-

a

ge-0

/0/1

0 -/

11

ge-0

/0/1

0 -/

11

ge-0/0/13 -/14

ge-0/0/13 -/14

ge-0/0

/16 -/

17ge

-0/0/1

6 - /17

ge-2

/0/0

ge-2

/0/4

ge-2

/0/1

ge-2

/0/5

ge-2

/0/3

ge-2

/0/7

ge-2

/0/6

ge-2

/0/2

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

VLAN

: v10

0

VLAN

: v20

0

.1 .1.2 .2

.3 .3

VLAN

v10

0: V

ID =

100

, Sub

net =

172

.22.

100.

0/24

VLAN

v20

0: V

ID =

200

, Sub

net =

172

.22.

200.

0/24

.4 .4

ge-0

/0/0

and

ge-

0/0/

1 =

Acce

ss p

orts

on

all s

witc

hes

ge-0

/0/1

0, /

11, /

13, /

14, /

16, a

nd /

17 =

Tru

nk p

orts

on

all s

witc

hes

Not For

Reprod

uctio

n

Page 14: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

8, P

art 3

: Spa

nnin

g Tr

ee P

roto

col

(Mod

ule

A)

s2s1 s3

s4

vr1-

avr

2-a

vr2-

bvr

1-b

vr3-

b

vr3-

a

vr4-

b

vr4-

a

ge-0

/0/1

0 -/

11

ge-0

/0/1

0 -/

11

ge-0/0/13 -/14

ge-0/0/13 -/14

ge-0/0

/16 -/

17

ge-1

/0/0

ge-1

/0/4

ge-1

/0/1

ge-1

/0/5

ge-1

/0/3

ge-1

/0/7

ge-1

/0/6

ge-1

/0/2

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

VLAN

: v20

VLAN

: v10

VLAN

: v30

VLAN

: v40

VLAN

: v30

VLAN

: v20

.1 .1.2 .2

.3 .3.4 .4

VLAN

: v10

VLAN

: v40

ge-0/0

/16 - /

17

MST

I 40

Brid

ge P

riorit

y =

0M

STI 3

0Br

idge

Prio

rity

= 0

MST

I 10

Brid

ge P

riorit

y =

0M

STI 2

0Br

idge

Prio

rity

= 0

VLAN

v10

: VID

= 1

0, M

STI 1

0VL

AN v

20: V

ID =

20,

MST

I 20

VLAN

v30

: VID

= 3

0, M

STI 3

0VL

AN v

40: V

ID =

40,

MST

I 40

Not For

Reprod

uctio

n

Page 15: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

8, P

art 3

: Spa

nnin

g Tr

ee P

roto

col

(Mod

ule

B)

s6s5 s7

s8

vr5-

avr

6-a

vr6-

bvr

5-b

vr7-

b

vr7-

a

vr8-

b

vr8-

a

ge-0

/0/1

0 -/

11

ge-0

/0/1

0 -/

11

ge-0/0/13 -/14

ge-0/0/13 -/14

ge-0/0

/16 -/

17

ge-2

/0/0

ge-2

/0/4

ge-2

/0/1

ge-2

/0/5

ge-2

/0/3

ge-2

/0/7

ge-2

/0/6

ge-2

/0/2

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

VLAN

: v60

VLAN

: v50

VLAN

: v70

VLAN

: v80

VLAN

: v70

VLAN

: v60

.1 .1.2 .2

.3 .3.4 .4

VLAN

: v50

VLAN

: v80

ge-0/0

/16 - /

17

MST

I 80

Brid

ge P

riorit

y =

0M

STI 7

0Br

idge

Prio

rity

= 0

MST

I 50

Brid

ge P

riorit

y =

0M

STI 6

0Br

idge

Prio

rity

= 0

VLAN

v50

: VID

= 5

0, M

STI 5

0VL

AN v

60: V

ID =

60,

MST

I 60

VLAN

v70

: VID

= 7

0, M

STI 7

0VL

AN v

80: V

ID =

80,

MST

I 80

Not For

Reprod

uctio

n

Page 16: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

8, P

art 4

: Spa

nnin

g Tr

ee P

roto

col

(Mod

ule

A)

s1

s3

s2

s4

s3

s1

s4

s2

Acce

ss L

ayer

Dis

tribu

tion

Laye

r

ge-0/0/14

ge-0/0/13

ge-0/0/17

ge-0/0/17

ge-0/0/16

ge-0/0/13

ge-0/0/14

ge-0/0/16

rtg1

rtg2

rtg3

rtg4

Redu

ndan

t Tru

nk G

roup

Nam

es

Prim

ary

Prim

ary

Prim

ary

Not For

Reprod

uctio

n

Page 17: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

8, P

art 4

: Spa

nnin

g Tr

ee P

roto

col

(Mod

ule

B)

s5

s7

s6

s8

s7

s5

s8

s6

Acce

ss L

ayer

Dis

tribu

tion

Laye

r

ge-0/0/14

ge-0/0/13

ge-0/0/17

ge-0/0/17

ge-0/0/16

ge-0/0/13

ge-0/0/14

ge-0/0/16

rtg5

rtg6

rtg7

rtg8

Redu

ndan

t Tru

nk G

roup

Nam

es

Prim

ary

Prim

ary

Prim

ary

Not For

Reprod

uctio

n

Page 18: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

ae0.

0ge

-0/0

/10

-11

ae0.

0ge

-0/0

/10

-11

vr4-

b

vr4-

a

ge-1

/0/7

ge-1

/0/6

vr2-

a

vr2-

bge

-1/0

/3

ge-1

/0/2

vr3-

b

vr3-

age

-1/0

/4

ge-1

/0/5

vr1-

a

vr1-

b

ge-1

/0/0

ge-1

/0/1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lab

9, P

arts

1–3

: Int

er-V

LAN

Rou

ting

(M

odul

e A)

s2s1 s3

s4

Gro

up 1

Gro

up 2

.5 .5.5 .5

.5 .5.5 .5

VLAN

: v10

VLAN

: v11

VLAN

: v20

VLAN

: v21

VLAN

: v30

VLAN

: v31

VLAN

: v40

VLAN

: v41

VLAN

v10

: VID

= 1

0, S

ubne

t = 1

72.2

2.10

.0/2

4VL

AN v

11: V

ID =

11,

Sub

net =

172

.22.

11.0

/24

VLAN

v20

: VID

= 2

0, S

ubne

t = 1

72.2

2.20

.0/2

4VL

AN v

21: V

ID =

21,

Sub

net =

172

.22.

21.0

/24

VLAN

v30

: VID

= 3

0, S

ubne

t = 1

72.2

2.30

.0/2

4VL

AN v

31: V

ID =

31,

Sub

net =

172

.22.

31.0

/24

VLAN

v40

: VID

= 4

0, S

ubne

t = 1

72.2

2.40

.0/2

4VL

AN v

41: V

ID =

41,

Sub

net =

172

.22.

41.0

/24

Loop

back

Add

ress

: 192

.168

.X.Y

/32

LAG

Add

ress

es: 1

72.1

8.35

.X/3

0

Lo0:

10.

1Lo

0: 2

0.1

Lo0:

40.

1Lo

0: 3

0.1

.1.2

.1.2

Not For

Reprod

uctio

n

Page 19: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

ae0.

0ge

-0/0

/10

-11

vr8-

b

vr8-

a

ge-2

/0/7

ge-2

/0/6

vr6-

a

vr6-

bge

-2/0

/3

ge-2

/0/2

vr7-

b

vr7-

age

-2/0

/4

ge-2

/0/5

vr5-

a

vr5-

b

ge-2

/0/0

ge-2

/0/1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lab

9, P

arts

1–3

: Int

er-V

LAN

Rou

ting

(M

odul

e B)

s6s5 s7

s8

Gro

up 1

Gro

up 2

ae0.

0ge

-0/0

/10

-11

.5 .5.5 .5

.5 .5.5 .5

VLAN

: v50

VLAN

: v51

VLAN

: v60

VLAN

: v61

VLAN

: v70

VLAN

: v71

VLAN

: v80

VLAN

: v81

VLAN

v50

: VID

= 5

0, S

ubne

t = 1

72.2

2.50

.0/2

4VL

AN v

51: V

ID =

51,

Sub

net =

172

.22.

51.0

/24

VLAN

v60

: VID

= 6

0, S

ubne

t = 1

72.2

2.60

.0/2

4VL

AN v

61: V

ID =

61,

Sub

net =

172

.22.

61.0

/24

VLAN

v70

: VID

= 7

0, S

ubne

t = 1

72.2

2.70

.0/2

4VL

AN v

71: V

ID =

71,

Sub

net =

172

.22.

71.0

/24

VLAN

v80

: VID

= 8

0, S

ubne

t = 1

72.2

2.80

.0/2

4VL

AN v

81: V

ID =

81,

Sub

net =

172

.22.

81.0

/24

Loop

back

Add

ress

: 192

.168

.X.Y

/32

LAG

Add

ress

es: 1

72.1

8.35

.X/3

0

Lo0:

50.

1Lo

0: 6

0.1

Lo0:

80.

1Lo

0: 7

0.1

.1.2

.1.2

Not For

Reprod

uctio

n

Page 20: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr4-

b

vr4-

a

ge-1

/0/7

ge-1

/0/6

vr2-

a

vr2-

bge

-1/0

/3

ge-1

/0/2

vr3-

b

vr3-

age

-1/0

/4

ge-1

/0/5

vr1-

a

vr1-

b

ge-1

/0/0

ge-1

/0/1

Lab

9, P

art 4

: Int

er-V

LAN

Rou

ting

(Mod

ule

A)

s2s1 s3

s4

VLAN

: v10

VLAN

: v11

VLAN

: v20

VLAN

: v21

VLAN

: v30

VLAN

: v31

VLAN

: v40

VLAN

: v41

Virt

ual R

oute

r Add

ress

es: 1

72.2

2.X.

5/24

(X =

VLA

N-id

val

ue)

Loop

back

Add

ress

: 192

.168

.X.Y

/32

Inte

rface

Add

ress

es: 1

72.1

8.X.

Y/30

10.1

10.2

OSPF

Area

0

ge-0

/0/1

0

ge-0

/0/1

0

ge-0/0/13

ge-0/0/13

40.2

40.1

30.130.2

20.220.1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lo0:

10.

1Lo

0: 2

0.1

Lo0:

30.

1Lo

0: 4

0.1

Not For

Reprod

uctio

n

Page 21: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr8-

b

vr8-

a

ge-2

/0/7

ge-2

/0/6

vr6-

a

vr6-

bge

-2/0

/3

ge-2

/0/2

vr7-

b

vr7-

age

-2/0

/4

ge-2

/0/5

vr5-

a

vr5-

b

ge-2

/0/0

ge-2

/0/1

Lab

9, P

art 4

: Int

er-V

LAN

Rou

ting

(M

odul

e B)

s6s5 s7

s8

VLAN

: v50

VLAN

: v51

VLAN

: v60

VLAN

: v61

VLAN

: v70

VLAN

: v71

VLAN

: v80

VLAN

: v81

50.1

50.2

OSPF

Area

0

ge-0

/0/1

0

ge-0

/0/1

0

ge-0/0/13

ge-0/0/13

80.2

80.1

70.170.2

60.260.1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lo0:

50.

1Lo

0: 6

0.1

Lo0:

70.

1Lo

0: 8

0.1

Virt

ual R

oute

r Add

ress

es: 1

72.2

2.X.

5/24

(X =

VLA

N-id

val

ue)

Loop

back

Add

ress

: 192

.168

.X.Y

/32

Inte

rface

Add

ress

es: 1

72.1

8.X.

Y/30Not

For Rep

roduc

tion

Page 22: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

9, P

art 5

: Int

er-V

LAN

Rou

ting

(Mod

ule

A)

s2s1 s4s3

VRRP

Gro

up 1

0vr

10 vr20

ge-0

/0/1

5

ge-0

/0/1

8

ge-0

/0/1

6

ge-0

/0/1

5ge

-0/0

/5 o

n al

l sw

itche

s

VRRP

Gro

up 2

0

Inte

rnet

Hos

t Add

ress

: 172

.29.

100.

1

172.

22.2

0.10

0G

atew

ay =

172

.22.

20.1

172.

22.1

0.10

0G

atew

ay =

172

.22.

10.1

10.2

10.3

20.2

20.3

VLAN

: v10

VID

: 10

VLAN

: v20

VID

: 20

.10

.20

.30

.40

Virt

ual I

P Ad

dres

s: 1

72.2

2.X.

1/24

(X =

VRR

P gr

oup

valu

e)La

yer 3

VLA

N In

terfa

ce A

ddre

ss: 1

72.2

2.X.

Y/24

ge-0

/0/5

Inte

rface

Add

ress

: 172

.30.

0.X/

24In

tern

et G

atew

ay: 1

72.3

0.0.

1

Acce

ss S

witc

h

Acce

ss S

witc

h

Laye

r 3 V

LAN

inte

rface

add

ress

det

ails

VRRP

Prio

rity

s1: 1

10s2

: 90

s3: 1

10s4

: 90

Not For

Reprod

uctio

n

Page 23: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

9, P

art 5

: Int

er-V

LAN

Rou

ting

(M

odul

e B)

s6s5 s8s7

VRRP

Gro

up 3

0vr

30 vr40

ge-0

/0/1

5

ge-0

/0/1

8

ge-0

/0/1

6

ge-0

/0/1

5ge

-0/0

/5 o

n al

l sw

itche

s

VRRP

Gro

up 4

0

Inte

rnet

Hos

t Add

ress

: 172

.29.

100.

1

172.

22.4

0.10

0G

atew

ay =

172

.22.

40.1

172.

22.3

0.10

0G

atew

ay =

172

.22.

30.1

30.2

30.3

40.2

40.3

.50

.60

.70

.80

Virt

ual I

P Ad

dres

s: 1

72.2

2.X.

1/24

(X =

VRR

P gr

oup

valu

e)La

yer 3

VLA

N In

terfa

ce A

ddre

ss: 1

72.2

2.X.

Y/24

ge-0

/0/5

Inte

rface

Add

ress

: 172

.30.

0.X/

24In

tern

et G

atew

ay: 1

72.3

0.0.

1

Acce

ss S

witc

h

Acce

ss S

witc

h

Laye

r 3 V

LAN

inte

rface

add

ress

det

ails

VLAN

: v30

VID

: 30

VLAN

: v40

VID

: 40

VRRP

Prio

rity

s5: 1

10s6

: 90

s7: 1

10s8

: 90

Not For

Reprod

uctio

n

Page 24: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr4-

b

vr4-

a

ge-1

/0/7

ge-1

/0/6

vr2-

a

vr2-

bge

-1/0

/3

ge-1

/0/2

vr3-

b

vr3-

age

-1/0

/4

ge-1

/0/5

vr1-

a

vr1-

b

ge-1

/0/0

ge-1

/0/1

Lab

10: R

outi

ng P

olic

y an

d Fi

rew

all F

ilter

s (M

odul

e A)

s2s1 s3

s4

.5 .5.5 .5

.5 .5.5 .5

VLAN

: v10

VLAN

: v11

VLAN

: v20

VLAN

: v21

VLAN

: v30

VLAN

: v31

VLAN

: v40

VLAN

: v41

Loop

back

Add

ress

: 192

.168

.X.Y

/32

Inte

rface

Add

ress

es: 1

72.1

8.X.

Y/30

10.1

10.2

OSPF

Area

0

ge-0

/0/1

0

ge-0

/0/1

0

ge-0/0/13

ge-0/0/13

40.2

40.1

30.130.2

20.220.1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lo0:

20.

1

Lo0:

30.

1Lo

0: 4

0.1

Stat

ic R

oute

s:10

.10.

30.0

/24

10.1

0.31

.0/2

410

.10.

32.0

/24

Lo0:

10.

1

Stat

ic R

oute

s:10

.10.

20.0

/24

10.1

0.21

.0/2

410

.10.

22.0

/24

Stat

ic R

oute

s:10

.10.

10.0

/24

10.1

0.11

.0/2

410

.10.

12.0

/24

Stat

ic R

oute

s:10

.10.

40.0

/24

10.1

0.41

.0/2

410

.10.

42.0

/24

Not For

Reprod

uctio

n

Page 25: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

vr8-

b

vr8-

a

ge-2

/0/7

ge-2

/0/6

vr6-

a

vr6-

bge

-2/0

/3

ge-2

/0/2

vr7-

b

vr7-

age

-2/0

/4

ge-2

/0/5

vr5-

a

vr5-

b

ge-2

/0/0

ge-2

/0/1

Lab

10: R

outi

ng P

olic

y an

d Fi

rew

all F

ilter

s (M

odul

e B)

s6s5 s7

s8

.5 .5.5 .5

.5 .5.5 .5

VLAN

: v50

VLAN

: v51

VLAN

: v60

VLAN

: v61

VLAN

: v70

VLAN

: v71

VLAN

: v80

VLAN

: v81

Loop

back

Add

ress

: 192

.168

.X.Y

/32

Inte

rface

Add

ress

es: 1

72.1

8.X.

Y/30

50.1

50.2

OSPF

Area

0

ge-0

/0/1

0

ge-0

/0/1

0

ge-0/0/13

ge-0/0/13

80.2

80.1

70.170.2

60.260.1

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

Lo0:

60.

1

Lo0:

70.

1Lo

0: 8

0.1

Stat

ic R

oute

s:10

.10.

70.0

/24

10.1

0.71

.0/2

410

.10.

72.0

/24

Lo0:

50.

1

Stat

ic R

oute

s:10

.10.

60.0

/24

10.1

0.61

.0/2

410

.10.

62.0

/24

Stat

ic R

oute

s:10

.10.

50.0

/24

10.1

0.51

.0/2

410

.10.

52.0

/24

Stat

ic R

oute

s:10

.10.

80.0

/24

10.1

0.81

.0/2

410

.10.

82.0

/24

Not For

Reprod

uctio

n

Page 26: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

11: S

wit

chin

g Se

curi

ty (M

odul

e A)

vr4-

b

vr4-

a

ge-1

/0/7

ge-1

/0/6

vr2-

a

vr2-

bge

-1/0

/3

ge-1

/0/2

vr3-

b

vr3-

age

-1/0

/4

ge-1

/0/5vr

1-a

vr1-

b

ge-1

/0/0

ge-1

/0/1

s2s1

s3s4

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

ge-0

/0/5

on

all s

witc

hes

NOT

E: T

he g

e-0/

0/0,

ge-

0/0/

1, a

nd g

e-0/

0/5

inte

rface

s sh

ould

be

conf

igur

ed a

s ac

cess

por

ts

and

asso

ciat

ed w

ith V

LAN

v10

0 (V

LAN

-id 1

00)

User

PC

172.

28.1

5.2/

24

DH

CP/R

ADIU

S Se

rver

172.

28.1

5.1/

24Sh

ared

Sec

ret:

JuN

iPeR

!

Not For

Reprod

uctio

n

Page 27: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

11: S

wit

chin

g Se

curi

ty (M

odul

e B)

vr8-

b

vr8-

a

ge-2

/0/7

ge-2

/0/6

vr6-

a

vr6-

bge

-2/0

/3

ge-2

/0/2

vr7-

b

vr7-

age

-2/0

/4

ge-2

/0/5vr

5-a

vr5-

b

ge-2

/0/0

ge-2

/0/1

s6s5

s7s8

ge-0

/0/0

on

all s

witc

hes

ge-0

/0/1

on

all s

witc

hes

ge-0

/0/5

on

all s

witc

hes

NOT

E: T

he g

e-0/

0/0,

ge-

0/0/

1, a

nd g

e-0/

0/5

inte

rface

s sh

ould

be

conf

igur

ed a

s ac

cess

por

ts

and

asso

ciat

ed w

ith V

LAN

v10

0 (V

LAN

-id 1

00)

User

PC

172.

28.1

5.2/

24

DH

CP/R

ADIU

S Se

rver

172.

28.1

5.1/

24Sh

ared

Sec

ret:

JuN

iPeR

!

Not For

Reprod

uctio

n

Page 28: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

12: I

P Te

leph

ony

Serv

ices

(Mod

ule

A)

s2s1 s3

s4

ge-0

/0/1

0

ge-0

/0/1

0

ge-0/0/13

ge-0/0/13

ge-0/0

/16

ge-0/0

/16

Pow

ered

D

evic

es

Pow

ered

D

evic

esPo

wer

ed

Dev

ices

Pow

ered

D

evic

es

ge-0

/0/0

–ge

-0/0

/7

on a

ll sw

itche

sNot For

Reprod

uctio

n

Page 29: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

12: I

P Te

leph

ony

Serv

ices

(Mod

ule

B)

s6s5 s7

s8

ge-0

/0/1

0

ge-0

/0/1

0

ge-0/0/13

ge-0/0/13

ge-0/0

/16

ge-0/0

/16

Pow

ered

D

evic

es

Pow

ered

D

evic

esPo

wer

ed

Dev

ices

Pow

ered

D

evic

es

ge-0

/0/0

–ge

-0/0

/7

on a

ll sw

itche

sNot For

Reprod

uctio

n

Page 30: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

13: D

esig

n an

d Im

plem

enta

tion

(M

odul

e A)

s1 s2

Inte

rnet

Hos

t Add

ress

: 172

.29.

100.

1

.10

.20

vr10

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.10

.1

VLAN

: v10

VID

: 10

vr20

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.20

.1

VLAN

: v20

VID

: 20

s3

vr10

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.10

.1

VLAN

: v10

VID

: 10

vr20

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.20

.1

VLAN

: v20

VID

: 20

s4

Virt

ual I

P Ad

dres

s: 1

72.2

2.X.

1 (X

= V

RRP

grou

p va

lue)

Laye

r 3 V

LAN

Inte

rface

Add

ress

: 172

.22.

X.Y/

24ge

-0/0

/5 In

terfa

ce A

ddre

ss: 1

72.3

0.0.

X/24

Inte

rnet

Gat

eway

: 172

.30.

0.1

ge-0

/0/5

on

s1 a

nd s

2

ge-0

/0/0

on

s3 a

nd s

4

ge-0

/0/1

on

s3 a

nd s

4

xe-0/1/0

ae0

ge-0

/0/1

3 -/

14

ae1

ge-0

/0/1

6 - /17

ae1

ge-0/0

/16 -/

17

ae0

ge-0

/0/1

3 - /

14

VRRP

Prio

rity

Valu

ess1

: 110

(gro

up 1

0 an

d 20

)s2

: 90

(gro

up 1

0 an

d 20

)

L3 V

LAN

inte

rface

s1: v

lan.

10 =

10.

2s1

: vla

n.20

= 2

0.2

s2: v

lan.

10 =

10.

3s2

: vla

n.20

= 2

0.3

Brid

ge P

riorit

ys1

: 4k

s2: 8

k

s3, s

4: 3

2k

ge-1

/0/4

ge-1

/0/5

ge-1

/0/6

ge-1

/0/7

Not For

Reprod

uctio

n

Page 31: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

Lab

13: D

esig

n an

d Im

plem

enta

tion

(M

odul

e B)

s5 s6

Inte

rnet

Hos

t Add

ress

: 172

.29.

100.

1

.50

.60

vr30

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.30

.1

VLAN

: v30

VID

: 30

vr40

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.40

.1

VLAN

: v40

VID

: 40

s7

vr30

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.30

.1

VLAN

: v30

VID

: 30

vr40

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.40

.1

VLAN

: v40

VID

: 40

s8

Virt

ual I

P Ad

dres

s: 1

72.2

2.X.

1 (X

= V

RRP

grou

p va

lue)

Laye

r 3 V

LAN

Inte

rface

Add

ress

: 172

.22.

X.Y/

24ge

-0/0

/5 In

terfa

ce A

ddre

ss: 1

72.3

0.0.

X/24

Inte

rnet

Gat

eway

: 172

.30.

0.1

ge-0

/0/5

on

s5 a

nd s

6

ge-0

/0/0

on

s7 a

nd s

8

ge-0

/0/1

on

s7 a

nd s

8

xe-0/1/0

ae0

ge-0

/0/1

3 -/

14

ae1

ge-0

/0/1

6 - /17

ae1

ge-0/0

/16 -/

17

ae0

ge-0

/0/1

3 - /

14

VRRP

Prio

rity

Valu

ess5

: 110

(gro

up 3

0 an

d 40

)s6

: 90

(gro

up 3

0 an

d 40

)

L3 V

LAN

inte

rface

s5: v

lan.

30 =

30.

2s5

: vla

n.40

= 4

0.2

s6: v

lan.

30 =

30.

3s6

: vla

n.40

= 4

0.3

Brid

ge P

riorit

ys5

: 4k

s6: 8

k

s7, s

8: 3

2k

ge-2

/0/4

ge-2

/0/5

ge-2

/0/6

ge-2

/0/7

Not For

Reprod

uctio

n

Page 32: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

virtu

alch

assi

s

Lab

13: V

irtu

al C

hass

is Im

plem

enta

tion

(M

odul

e A)

s1 s2

Inte

rnet

Hos

t Add

ress

: 172

.29.

100.

1

.10

.20

vr10

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.10

.1

VLAN

: v10

VID

: 10

vr20

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.20

.1

VLAN

: v20

VID

: 20

s3

vr10

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.10

.1

VLAN

: v10

VID

: 10

vr20

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.20

.1

VLAN

: v20

VID

: 20

s4

Laye

r 3 V

LAN

Inte

rface

Add

ress

: 172

.22.

X.Y/

24ge

-0/0

/5 In

terfa

ce A

ddre

ss: 1

72.3

0.0.

10/2

4ge

-1/0

/5 In

terfa

ce A

ddre

ss: 1

72.3

0.0.

20/2

4In

tern

et G

atew

ay: 1

72.3

0.0.

1

ge-1

/0/5

ge-0

/0/0

on

s3 a

nd s

4

ge-0

/0/1

on

s3 a

nd s

4

vcp-255/1/0

ae0

ge-0

/0/1

3 -/

14

ae1

ge-0

/0/1

6 - /17

ge-0

/0/1

6 -/17

ae1

ge-1

/0/1

3 - /

14

ge-

0/0/

13 -

/14

L3 V

LAN

inte

rface

vlan

.10

= 10

.1vl

an.2

0 =

20.1

ge-1

/0/4

ge-1

/0/5

ge-1

/0/6

ge-1

/0/7

s1 m

embe

r ID

: 0s1

mas

ters

hip-

prio

rity:

255

ge-0

/0/5

ge-1

/0/1

6 -/17ae

0

Not For

Reprod

uctio

n

Page 33: JNCIA-EX Lab Diagrams _9.A

Copy

right

©20

08 Ju

nipe

r Net

wor

ks, I

nc.

Educ

atio

n Se

rvic

es

virtu

alch

assi

s

Lab

13: V

irtu

al C

hass

is Im

plem

enta

tion

(M

odul

e B)

s5 s6

Inte

rnet

Hos

t Add

ress

: 172

.29.

100.

1

.50

.60

vr30

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.30

.1

VLAN

: v30

VID

: 30

vr40

-a

DH

CP C

lient

Gat

eway

= 1

72.2

2.40

.1

VLAN

: v40

VID

: 40

s3

vr30

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.30

.1

VLAN

: v30

VID

: 30

vr40

-b

DH

CP C

lient

Gat

eway

= 1

72.2

2.40

.1

VLAN

: v40

VID

: 40

s4

Laye

r 3 V

LAN

Inte

rface

Add

ress

: 172

.22.

X.Y/

24ge

-0/0

/5 In

terfa

ce A

ddre

ss: 1

72.3

0.0.

50/2

4ge

-1/0

/5 In

terfa

ce A

ddre

ss: 1

72.3

0.0.

60/2

4In

tern

et G

atew

ay: 1

72.3

0.0.

1

ge-1

/0/5

ge-0

/0/0

on

s7 a

nd s

8

ge-0

/0/1

on

s7 a

nd s

8

vcp-255/1/0

ae0

ge-0

/0/1

3 -/

14

ae1

ge-0

/0/1

6 - /17

ge-0

/0/1

6 -/17

ae1

ge-1

/0/1

3 - /

14

ge-

0/0/

13 -

/14

L3 V

LAN

inte

rface

vlan

.30

= 30

.1vl

an.4

0 =

40.1

ge-2

/0/4

ge-2

/0/5

ge-2

/0/6

ge-2

/0/7

s5 m

embe

r ID

: 0s5

mas

ters

hip-

prio

rity:

255

ge-0

/0/5

ge-1

/0/1

6 -/17ae

0

Not For

Reprod

uctio

n