Lab_Guide

HCDA-HNTD

HUAWEI TECHNOLOGIES

Huawei Certification

HCDA-HNTD

Huawei Networking Technology and Device

Lab Guide

Huawei Technologies Co.,Ltd

HCDA-HNTD

HUAWEI TECHNOLOGIES

Copyright Huawei Technologies Co., Ltd. 2010. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei

Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei

Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The information in this document is subject to change without notice.

Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of

any kind, express or implied.

Huawei Certification

HCDA-HNTD Huawei Networking Technology and Device

Lab Guide

Jan 2012 v1.5

HCDA-HNTD

HUAWEI TECHNOLOGIES

Huawei Certification System

Relaying on its strong technical and professional training system, according to different customers at different levels of ICT technology, Huawei certification is committed to provide customs with authentic,

professional certification.

Based on characteristics of ICT technologies and customersneeds at different levels, Huawei certification provides customers with

certification system of four levels.

HCDA (Huawei Certification Datacom Associate) is primary for IP network maintenance engineers, and any others who want to learn the IP

network knowledge. HCDA certification covers the TCP/IP basics, routing, switching and other common foundational knowledge of IP networks, together with Huawei communications products, versatile routing

platform VRP characteristics and basic maintenance.

HCDP (Huawei Certification Datacom Professional-Enterprise) is aimed at enterprise-class network maintenance engineers, network

design engineers, and any others who want to in depth grasp routing, switching, network adjustment and optimization technologies. HCDP-Enterprise is consist of IESN (Implement Enterprise Switch

Network), IERN (Implement Enterprise Routing Network), and IENP (Improving Enterprise Network performance), which includes advanced IPv4 routing and switching technology principle, IP technology of

network security, high availability and Qos, as well as the implementation in Huawei products.

HCIE (Huawei Certified Internetwork Expert) is designed to endue

engineers with a variety of IP network technology and proficiency in maintenance, diagnostics and troubleshooting of Huawei products, which equips the engineers with competence in planning, design and

optimization of large-scale IP network.

HCDA-HNTD

HUAWEI TECHNOLOGIES

Referenced icon

Router L3 Switch L2 Switch Firewall Net cloud

Ethernet line Serial line

HCDA-HNTD

HUAWEI TECHNOLOGIES

Lab environment specification

The Lab environment is suggested below:

Identifier Device OS version

R1 AR 2220 Version 5.90 ( V200R001C01SPC300)



S1 S5700-28C-EI-24S Version 5.70 (V100R006C00SPC800)

S2 S5700-28C-EI-24S Version 5.70 (V100R006C00SPC800)

S3 S3700-28TP-EI-AC Version 5.70 (V100R006C00SPC800)

S4 S3700-28TP-EI-AC Version 5.70 (V100R006C00SPC800)

FW Eudemon 200E-X2 Version 5.30 (V100R005C00SPC100)

HCDA-HNTD

HUAWEI TECHNOLOGIES

CONTENTS

Chapter 1 Basic Operations on the VRP Platform ............................................................................................... 1

Lab 1-1 Basic Operations on the VRP Platform ............................................................................................... 1

Chapter 2 Configuring Static Routes and Default Routes .................................................................................. 23

Lab 2-1 Configuring Static Routes and Default Routes .................................................................................. 23

Chapter 3 RIP Configuration ............................................................................................................................. 41

Lab 3-1 Configuring RIPv1 and RIPv2 ............................................................................................................ 41

Lab 3-2 RIPv2 Route Aggregation and Authentication .................................................................................. 58

Chapter 4 OSPF Configuration .......................................................................................................................... 74

Lab 4-1 OSPF Single-area Configuration ....................................................................................................... 74

Lab 4-2 OSPF Multi-area and Authentication Configuration ......................................................................... 89

Chapter 5 RIP and OSPF Route Import ............................................................................................................ 103

Lab 5-1 RIP and OSPF Route Import ........................................................................................................... 103

Chapter 6 Ethernet and STP ........................................................................................................................... 114

Lab 6-1 Ethernet Interface and Link Configuration ..................................................................................... 114

Lab 6-2 STP Configuration .......................................................................................................................... 122

Lab 6-3 VLAN Configuration ....................................................................................................................... 134

Chapter 7 Layer3 Configuration and VRRP ...................................................................................................... 146

Lab 7-1 Configuring Layer 3 Switching ........................................................................................................ 146

Lab 7-2 Configuring the VRRP .................................................................................................................... 160

Chapter 8 WAN Configuration ........................................................................................................................ 176

Lab 8-1 HDLC and PPP Configuration.......................................................................................................... 176

Lab 8-2 FR Configuration (Back to Back) ..................................................................................................... 192

HCDA-HNTD

HUAWEI TECHNOLOGIES

Lab 8-3 FR Configuration (Using FR Switch) ................................................................................................ 213

Chapter 9 Firewall Configuration .................................................................................................................... 230

Lab 9-1 Eudemon Firewall Configuration ................................................................................................... 230

Lab 9-2 Packet Filtering Configuration ....................................................................................................... 245

Lab 9-3 Eudemon Firewall Zone Configuration ........................................................................................... 260

Lab 9-4 NAT Configuration on the Eudemon Firewall ................................................................................. 277

Chapter 10 Comprehensive Exercise .............................................................................................................. 290

Lab 10-1 Comprehensive Exercise .............................................................................................................. 290

HCDA-HNTD

HUAWEI TECHNOLOGIES

HCDA-HNTD Chapter 1 Basic Operations on the VRP Platform

HC Series HUAWEI TECHNOLOGIES 1

Chapter 1 Basic Operations on the VRP Platform

Lab 1-1 Basic Operations on the VRP Platform

Learning Objectives

The objectives of this lab are to learn and understand how to perform the following operations:

Configure the connection from a personal computer (PC) to a

router using the Windows built-in terminal software.

Configure a device name, time, and time zone.

Configure the value for Console port idle timeout.

Configure the login information.

Configure the login password and super password.

Save and delete a configuration file.

Configure IP addresses for router interfaces.

Test the connectivity between two routers that are connected

directly.

Control a router after using Telnet to another router.

Copy configuration files from one router to another using File

Transfer Protocol (FTP).

Restart a router.


2 HUAWEI TECHNOLOGIES HC Series

Topology

Figure 1.1 Lab topology of the basic operations on the VRP platform

Scenario

A company purchases two AR G3 routers. You need to commission the two AR G3 routers before using them. Items to be commissioned include configuration modes, device names, time, passwords, file

management, and restart operations.

Tasks

Step 1 Connect devices.

This step describes how to connect to a router using the Windows XP

built-in HyperTerminal.

Connect a PC to a router using a console cable. Run a terminal emulation program such as Windows XP HyperTerminal on the PC to create a

connection, as shown in Figure 3.1. The name and icon provided in the figure are only examples.Creating a connection



Select a COM port.Selecting a COM port

If the PC has multiple COM ports, select a proper one. The serial port of a PC is usually COM1.Setting port communication parameters



In the COM1 Properties dialog box, click Restore Defaults to retain the default settings. Click OK.

Turn on the power switch to start the router. If the preceding parameters

are set properly, the terminal window displays the startup information until the startup process is complete, and the system asks you to press

Enter. If the command prompt, such as , is displayed on the user interface, you have successfully entered the user view configuration environment.

Step 2 View the system information.

Run the display version command to view the software version and hardware information for the system.

display version

Huawei Versatile Routing Platform Software

VRP (R) software, Version 5.90 (AR2200 V200R001C01SPC300)

Copyright (C) 2011 HUAWEI TECH CO., LTD

Huawei AR2220 Router uptime is 0 week, 0 day, 0 hour, 2 minutes

BKP 0 version information:



......output omit......

The command output includes the VRP operating system version, device model, and startup time.

Step 3 Change the system time parameter.

The system automatically saves the time. If the time is incorrect, run the clock datetime command in the user view to change the system time.

clock datetime 12:00:00 2011-09-15

Run the display clock command to check that the new system time has

taken effect.

display clock

2011-09-15 12:00:21

Thursday

Time Zone(Default Zone Name) : UTC+00:00

Step 4 Use the question mark (?) or press Tab to enter

commands.

The question mark (?) is a wildcard, and the Tab is used as a shortcut to

enter commands.

display ?

aaa AAA

access-user User access

accounting-scheme Accounting scheme

acl acl command group

adp-ipv4 Ipv4 information

adp-mpls Adp-mpls module

anti-attack Specify anti-attack configurations

arp arp command group

arp-limit Display the number of limitation

atm ATM status and configuration information

authentication-scheme Authentication scheme

authorization-scheme Display AAA authorization scheme

If you want to display all the commands that start with a specific letter or string of letters, enter the desired letters and the question mark (?). The



system displays all the commands that start with the letters you enter.

For example, if you enter dis?, the system displays all the commands that start with dis.

Make sure that there is a space between the string and the question mark (?). The system identifies the command corresponding to the string and displays the parameters of the command. For example, if you enter

dis ? and only the display command starts with dis, the system displays the parameters of the display command. If multiple commands start with dis, the system displays an error.

You can also press Tab to complete a command. For example, if you enter dis and press Tab, the system completes the display command. If multiple commands start with dis, you can select the appropriate one.

If there are no other commands start with the same letters, you can type dis or disp to indicate display, and int or inter to indicate interface.

Step 5 Access the system view.

Run the system-view command to access the system view where you configure interfaces and protocols.

system-view

Enter system view, return user view with Ctrl+Z.

[Huawei]

Step 6 Change device names.

To more easily identify devices, set device names during the device configuration. Change device names based on the lab topology, as shown below:

Change the name of the R1 router to R1.

[Huawei]sysname R1

[R1]

Change the name of the R2 router to R2.

[Huawei]sysname R2

[R2]



Step 7 Configure the login information.

Configure the login information to indicate the login result.

[R1]header shell information "Welcome to Huawei certification lab"

Run the preceding command to configure the login information. To

check whether the login information has been changed, quit out of the router command line interface, and log back in to view the login information.

[R1]quit

quit

Configuration console exit, please retry to log on

Password:

Welcome to Huawei certification lab

Note: Login information usually provides warnings of illegal logins. Do not use words that are welcoming.

Step 8 Configure the login authentication mode and

timeout interval of the console port.

The console port by default does not have a login password. Therefore, users can log in to the device without passwords.

This presents a serious risk to the device. You need to change the login

mode of the console port to the password authentication mode. The password in the password authentication mode is huawei in plain text.

If there is no activity on the console port for the period of time specified

by the timeout interval, the system automatically exits. When this occurs, you need to log in to the system again using the password.

The default timeout interval is 10 minutes. If 10 minutes are not a

reasonable amount of time for the timeout interval, change the timeout interval to 20 minutes.

[R1]user-interface console 0

[R1-ui-console0]authentication-mode password

[R1-ui-console0]set authentication password simple huawei

[R1-ui-console0]idle-timeout 20 0



Run the display this command to check the configuration results.

[R1-ui-console0]display this

[V200R001C01SPC300]

#

user-interface con 0

authentication-mode password

set authentication password simple huawei

idle-timeout 20 0

Log out of the system and log back in to verify that you need to enter the password.

[R1-ui-console0]return

quit

Configuration console exit, please retry to log on

Password:


Step 9 Configure IP addresses and descriptions for the

interfaces.

Configure an IP address for the S1/0/0 interface of R1. The IP address can use the subnet mask length or use a complete subnet mask, such as 24

or 255.255.255.0.

[R1]interface Serial 1/0/0

[R1-Serial1/0/0]ip address 10.0.12.1 24

[R1-Serial1/0/0]description This interface connects to R2-S1/0/0


[R1-Serial1/0/0]display this

[V200R001C01SPC300]

#

interface Serial1/0/0

link-protocol ppp

description This interface connect to R2-S1/0/0

ip address 10.0.12.1 255.255.255.0

#



Return

Run the display interface command to view the interface description.

[R1-Serial1/0/0]display interface Serial2/0/0

Serial1/0/0 current state : UP

Line protocol current state : UP

Last line protocol up time : 2011-09-15 17:38:48

Description:This interface connect to R2-S1/0/0

Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)

Internet Address is 10.0.12.1/24

Link layer protocol is PPP

LCP opened, IPCP stopped

Last physical up time : 2011-09-16 17:38:45

Last physical down time : 2011-09-16 17:38:34

Current system time: 2011-09-16 17:42:58

Physical layer is synchronous, Baudrate is 64000 bps

Interface is DCE, Cable type is V35, Clock mode is DCECLK

Last 300 seconds input rate 2 bytes/sec 16 bits/sec 0 packets/sec

Last 300 seconds output rate 2 bytes/sec 16 bits/sec 0 packets/sec

Input: 212 packets, 2944 bytes

broadcasts: 0, multicasts: 0

errors: 0, runts: 0, giants: 0

CRC: 0, align errors: 0, overruns: 0

dribbles: 0, aborts: 0, no buffers: 0

frame errors: 0

Output: 216 packets, 2700 bytes

errors: 0, underruns: 0, collisions: 0

deferred: 0

DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP

Input bandwidth utilization : 0.13%

Output bandwidth utilization : 0.13%

[R1-Serial1/0/0]

The command output shows that the physical status and protocol status of the interface are UP, and the corresponding physical layer and data

link layer are functional.

The interface link cables are V.35 DCE.

Once you have verified the status, configure the IP address and

description for the interface of R2.




[R2-Serial1/0/0]ip address 10.0.12.2 255.255.255.0

[R2-Serial1/0/0]description This interface connect to R1-S2/0/0

[R2-Serial1/0/0]

After completing the configuration, run the ping command to test the connection between R1 and R2.

[R1]ping 10.0.12.2

PING 10.0.12.2: 56 data bytes, press CTRL_C to break

Reply from 10.0.12.2: bytes=56 Sequence=1 ttl=255 time=35 ms





--- 10.0.12.2 ping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 32/32/35 ms

Step 10 Configure the telnet login mode.

Set the telnet login mode of R1 to password authentication mode, password to huawei, and user privilege level to 3.

[R1]user-interface vty 0 4

[R1-ui-vty0-4]authentication-mode password

[R1-ui-vty0-4]set authentication password simple huawei

[R1-ui-vty0-4]user privilege level 3


[R1-ui-vty0-4]display this

[V200R001C01SPC300]

#




idle-timeout 20 0

user-interface vty 0 4

user privilege level 3





#

Return

Set the telnet login mode of R2 to user name and password authentication mode.

[R2]user-interface vty 0 4

[R2-ui-vty0-4]authentication-mode aaa

[R2-ui-vty0-4]quit

Note: You can run the quit command to return to the previous view or

the return command to return to the user view.

[R2]aaa

[R2-aaa]local-user huawei password simple huawei

[R2-aaa]local-user huawei privilege level 15

[R2-aaa]local-user huawei service-type telnet


[R2-aaa]display this

[V200R001C01SPC300]

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password simple admin

local-user admin service-type http

local-user huawei password simple huawei

local-user huawei privilege level 15

local-user huawei service-type telnet

#

Return

Telnet to R2 from R1.

telnet 10.0.12.2

Press CTRL_] to quit telnet mode

Trying 10.0.12.2 ...

Connected to 10.0.12.2 ...

Login authentication



Username:huawei

Password:

----------------------------------------------------------------------------

-

User last login information:

----------------------------------------------------------------------------

-

Access Type: Telnet

IP-Address : 10.0.12.1

Time : 2011-09-14 13:19:59+00:00

----------------------------------------------------------------------------

-

Based on the output above, the login is successful.

Telnet to R1 from R2.

telnet 10.0.12.1

Press CTRL_] to quit telnet mode

Trying 10.0.12.1 ...

Connected to 10.0.12.1 ...

Login authentication

Password:


Based on the output above, the login is successful.

Step 11 Configure a super password for the device.

When there are low user rights, for example, the value of user privilege

level is 0 or 1 for the telnet login, you can use the super command to

increase the user rights. To minimize risks caused by illegal right elevations, set super passwords.

Set a super password for R1. The super password is stored in simple



(plain text) mode.

[R1]super password simple Huawei

Run the display current-configuration command to check the configuration results.

[R1]display current-configuration


#

super password level 3 simple huawei




As shown in the command output, the super password is stored in plain text, which is relatively unsecure and unsafe.

Set a super password for R2. The super password is stored in cipher

(cipher text) mode.

[R2]super password cipher huawei



#

super password level 3 cipher Q;L]@C0S3[%;LEEP8+INFQ!!




As shown in the command output, the super password is stored in cipher text, which is more secure and safe.

Step 12 View the file list stored on the current device.

Run the dir command in the user view to display the list of files in the current directory.

dir

Directory of sd1:/

Idx Attr Size(Byte) Date Time(LMT) FileName

0 -rw- 1,738,816 Sep 14 2011 11:50:24 web.zip

1 -rw- 68,288,896 Jul 12 2011 14:17:58 ar2220_V200R001C01SPC300.cc



1,927,476 KB total (1,856,548 KB free)

dir

Directory of sd1:/


0 -rw- 1,738,816 Sep 14 2011 11:50:58 web.zip


1,927,476 KB total (1,855,076 KB free)

Step 13 Upload and download files between R1 and R2

using FTP.

Routers are considered as FTP clients by default. In this lab, R1 is considered as an FTP client, and R2 is considered as an FTP server.

Enable the FTP server function on R2.

[R2]ftp server enable

Info: Succeeded in starting the FTP server

[R2]set default ftp-directory sd1:/

Create a local account ftpuser as the FTP login account on R2.

[R2]aaa

[R2-aaa]local-user ftpuser password cipher huawei

[R2-aaa]local-user ftpuser service-type ftp

[R2-aaa]local-user ftpuser privilege level 15

Log in to R2 from R1 using FTP.

ftp 10.0.12.2

Trying 10.0.12.2 ...

Press CTRL+K to abort

Connected to 10.0.12.2.

220 FTP service ready.

User(10.0.12.2:(none)):ftpuser

331 Password required for ftpuser.

Enter password:

230 User logged in.

[R1-ftp]



If the [R1-ftp] prompt is displayed, you have successfully logged in to

the R2 FTP server.

Transfer a file from R1 to the R2 FTP server using FTP.

[R1-ftp]put hq-r.cfg file-from-R1.bak

200 Port command okay.

150 Opening ASCII mode data connection for file-from-R1.bak.

226 Transfer complete.

FTP: 0 byte(s) sent in 0.627 second(s) 0.00byte(s)/sec.

[R1-ftp]

Note: The source file names on the lab device may be different. You need to use the actual file name. Run the dir command in the R1 user view to

check the file names in the file list.

Run the dir command to view the result of the transfer.

[R1-ftp]dir


150 Opening ASCII mode data connection for *.

-rwxrwxrwx 1 noone nogroup 1738816 Sep 14 11:50 web.zip

-rwxrwxrwx 1 noone nogroup 68288896 Jul 12 14:19

ar2220_V200R001C01SPC300.cc

-rwxrwxrwx 1 noone nogroup 0 Sep 14 14:10 file-from-r1.bak


FTP: 551 byte(s) received in 0.619 second(s) 890.14byte(s)/sec.

The command output lists files on the R2 FTP server.

Download the file-from-r1.bak file from the R2 FTP server to R1 and

change the file name to file-from-r2.bak.

[R1-ftp]get file-from-r1.bak file-from-r2.bak


150 Opening ASCII mode data connection for file-from-r1.bak.


FTP: 0 byte(s) received in 0.591 second(s) 0.00byte(s)/sec.

Exit from the R2 FTP server and check the file list on R1. Make sure that the file-from-r2.bak file has been downloaded successfully.

[R1-ftp]quit

221 Server closing.



dir

Directory of sd1:/


0 -rw- 1,738,816 Sep 16 2011 18:44:54 web.zip


2 -rw- 0 Sep 16 2011 19:13:00 file-from-r2.bak

1,927,476 KB total (1,856,548 KB free)

Delete the files on the devices.

Warning: Delete only the two lab files file-from-r1.bak and

file-from-r2.bak. Do not delete other files; otherwise, the devices

may fail to boot.

Delete the file-from-r1.bak file from R2.

dir

Directory of sd1:/


0 -rw- 1,738,816 Sep 14 2011 11:50:58 web.zip


2 -rw- 0 Sep 14 2011 14:10:08 file-from-r1.bak

1,927,476 KB total (1,855,076 KB free)

delete /unreserved file-from-r1.bak

Warning: The contents of file sd1:/file-from-r1.bak cannot be recycled. Continue?

(y/n)[n]:y

Info: Deleting file sd1:/file-from-r1.bak...succeed.

The /unreserved parameter indicates that the file is to be deleted

permanently and cannot be restored. Use this parameter with caution.

dir

Directory of sd1:/


0 -rw- 1,738,816 Sep 14 2011 11:50:58 web.zip


1,927,476 KB total (1,855,076 KB free)



Compare the file list with the preceding file list and make sure that

the file-from-r1.bak file has been deleted.

Delete the file-from-r2.bak file from R1.

delete /unreserved file-from-r2.bak

Warning: The contents of file sd1:/file-from-r2.bak cannot be recycled. Continue?

(y/n)[n]:y

Info: Deleting file sd1:/file-from-r2.bak...succeed.

dir

Directory of sd1:/


0 -rw- 1,738,816 Sep 16 2011 18:44:54 web.zip


1,927,476 KB total (1,856,548 KB free)

Step 14 Manage configuration files of a device.

Save the current configuration file.

save

The current configuration will be written to the device.

Are you sure to continue? (y/n)[n]:y

It will take several minutes to save configuration file, please wait............

Configuration file had been saved successfully

Note: The configuration file will take effect after being activated

Run the following command to view the saved configuration

information:

display saved-configuration

[V200R001C01SPC300]

#

sysname R1

header shell information "Welcome to Huawei certification lab"

#

board add 0/1 1SA

board add 0/2 1SA

............



Run the following command to view the current configuration

information:

display current-configuration

[V200R001C01SPC300]

#

sysname R1


#

board add 0/1 1SA

board add 0/2 1SA

board add 0/3 2FE

............

A router can store multiple configuration files. You can select the configuration file to be used after the next startup of the router as required.

startup saved-configuration iascfg.zip

This operation will take several minutes, please wait.........

Info: Succeeded in setting the file for booting system

Run the following command to select the configuration file to be used after the next startup:

display startup

MainBoard:

Startup system software: sd1:/ar2220_V200R001C01SPC300.cc

Next startup system software: sd1:/ar2220_V200R001C01SPC300.cc

Backup system software for next startup: null

Startup saved-configuration file: null

Next startup saved-configuration file: sd1:/iascfg.zip

Startup license file: null

Next startup license file: null

Startup patch package: null

Next startup patch package: null

Startup voice-files: null

Next startup voice-files: null

Delete configuration files from the flash memory.

reset saved-configuration

This will delete the configuration in the flash memory.



The device configurations will be erased to reconfigure.

Are you sure? (y/n)[n]:y

Clear the configuration in the device successfully.

Step 15 Restart a router.

Run the reboot command to restart a router.

reboot

Info: The system is now comparing the configuration, please wait.

Warning: All the configuration will be saved to the next startup configuration.

Continue ? [y/n]:n

System will reboot! Continue ? [y/n]:y

Info: system is rebooting ,please wait...

The system asks whether you want to save the current configuration.

Determine whether to save the current configuration based on the requirements for the lab. If you are unsure whether you should save the current confirmation, do not save it.

Additional Exercises: Analyzing and Verifying

1. You can use USB cables to connect to the USB ports of AR G3 routers to perform configuration management. For more information,

see the related product guide.

2. Currently, most laptops do not have COM ports. How do we configure routers without laptop COM ports? List all the methods you have in mind.

Final Configurations


[V200R001C01SPC300]

#

sysname R1

tftp client-source -i Serial2/0/0


#

board add 0/1 1SA

board add 0/2 1SA



board add 0/3 2FE

#

voice

#

http server enable

#

drop illegal-mac alarm

#

l2tp aging 0

#

aaa




domain default




#

interface Ethernet3/0/0

#


#


link-protocol ppp

description This interface connect to R2-S2/0/0

ip address 10.0.12.1 255.255.255.0

#


link-protocol ppp

#

interface GigabitEthernet0/0/0

#


#


#

interface Cellular0/0/0

link-protocol ppp

#

interface Cellular0/0/1

link-protocol ppp

#



interface NULL0

#

super password level 3 simple huawei




idle-timeout 10 0


user privilege level 3



#

return


[V200R001C01SPC300]

#

sysname R2

ftp server enable

set default ftp-directory sd1:/

#

board add 0/1 1SA

board add 0/2 1SA

board add 0/3 2FE

#

voice

#

http server enable

#

drop illegal-mac alarm

#

l2tp aging 0

#

dhcp enable

#

aaa




domain default






local-user ftpuser password cipher N`C55QK

HCDA-HNTD Chapter 2 Configuring Static Routes and Default Routes


Chapter 2 Configuring Static Routes and Default

Routes

Lab 2-1 Configuring Static Routes and Default Routes

Learning Objectives

The objectives of this lab are to learn and understand:

Advantages of static routes and default routes over dynamic

routes

Routing functions and operation processes

Procedure for configuring a static route with the next hop as an

interface

Procedure for configuring a static route with the next hop as an IP

address

Method of testing connectivity of a static route

Method of implementing interconnection between the distal

network and external network by configuring a default route

Procedure for testing a default route

Procedure for configuring a backup static route on a router with

redundant links

Method of testing a backup static route



Topology

Figure 2.1 Lab topology of static routes and default routes

Scenario

Assume that you are a network administrator of a company with a headquarters (HQ) and two branches. R1 is the router in the HQ, and the HQ has a network segment. R2 and R3 are the routers in the two

branches. R1 is connected to R2 and R3 through the Ethernet and serial cables. R2 and R3 are connected through serial cables.

Because the network scale is small, static routes and default routes

are used to implement interworking. For the IP addressing information, see Figure 2.1.



Tasks

Step 1 Perform basic configurations and configure IP

addresses.

Configure the device names and IP addresses for R1, R2, and R3.

system-view


[Huawei]sysname R1



[R1-Serial1/0/0]description this port connect to R2-S1/0/0

[R1-Serial1/0/0]quit

[R1]interface GigabitEthernet 0/0/0

[R1- GigabitEthernet 0/0/0]ip address 10.0.13.1 24

[R1- GigabitEthernet 0/0/0]description this port connect to R3-G0/0/0

[R1- GigabitEthernet 0/0/0]interface loopback 0

[R1-LoopBack0]ip address 10.0.1.1 24

[R1-LoopBack0]

Run the display current-configuration command to check the configurations.

[R1-LoopBack0]display current-configuration


#

interface GigabitEthernet 0/0/0

description this port connects to R3-G0/0/0

ip address 10.0.13.1 255.255.255.0

#


#


link-protocol ppp

description this port connects to R2-S1/0/0

ip address 10.0.12.1 255.255.255.0

#


interface LoopBack0

ip address 10.0.1.1 255.255.255.0



#


system-view


[Huawei]sysname R2

[R2]interface serial 1/0/0



[R2-Serial1/0/0]interface serial 2/0/0



[R2-Serial2/0/0]interface loopback0





link-protocol ppp

description this port connect to R1-S1/0/0

ip address 10.0.12.2 255.255.255.0

#


link-protocol ppp


ip address 10.0.23.2 255.255.255.0

#


#

interface LoopBack0

ip address 10.0.2.2 255.255.255.0

system-view


[Huawei]sysname R3



[R3-Serial2/0/0]description this port connects to R2-S2/0/0


[R3]interface GigabitEthernet 0/0/0

[R3-GigabitEthernet0/0/0]ip address 10.0.13.3 24

[R3-GigabitEthernet0/0/0]description this port connects to R1-G0/0/0

[R3-GigabitEthernet0/0/0]interface loopback 0






#


link-protocol ppp


ip address 10.0.23.3 255.255.255.0

#


description this port connect to R1-G0/0/0

ip address 10.0.13.3 255.255.255.0

#


interface LoopBack0

ip address 10.0.3.3 255.255.255.0

#


Run the ping command to test network connectivity.

ping 10.0.12.2










0.00% packet loss


ping 10.0.13.3












0.00% packet loss


ping 10.0.23.3










0.00% packet loss


Step 2 Test connectivity from R2 to 10.0.13.0/24 and

10.0.3.0/24.

[R2]ping 10.0.13.3


Request time out

Request time out

Request time out

Request time out

Request time out




100.00% packet loss

[R2]ping 10.0.3.3


Request time out

Request time out

Request time out

Request time out



Request time out




100.00% packet loss

Note: If R2 needs to communicate with the network segment 10.0.3.0, the routes destined for this network segment must be configured on R2, and the routes destined for the R2 interface must be configured on R3.

The preceding test result shows that R2 cannot communicate with 10.0.3.3 and 10.0.13.3.

Run the display ip routing-table command to view the routing table

of R2. The routing table does not contain the routes of the two networks.

[R2]display ip routing-table

Route Flags: R - relay, D - download to fib

----------------------------------------------------------------------------

Routing Tables: Public

Destinations : 15 Routes : 15

Destination/Mask Proto Pre Cost Flags NextHop Interface

10.0.2.0/24 Direct 0 0 D 10.0.2.2 LoopBack0

10.0.2.2/32 Direct 0 0 D 127.0.0.1 InLoopBack0


10.0.12.0/24 Direct 0 0 D 10.0.12.2 Serial1/0/0

10.0.12.1/32 Direct 0 0 D 10.0.12.1 Serial1/0/0



10.0.23.0/24 Direct 0 0 D 10.0.23.2 Serial2/0/0


10.0.23.3/32 Direct 0 0 D 10.0.23.3 Serial2/0/0








Step 3 Configure static routes on R2.

Configure a static route for destination networks 10.0.13.0/24 and 10.0.3.0/24, with the next hop as R3 interface's IP address 10.0.23.3 ,

preference of 60 is the default and not needed to be set. Also in the example the preference is not set.

system-view


[R2]ip route-static 10.0.13.0 24 10.0.23.3

[R2]ip route-static 10.0.3.0 24 10.0.23.3

Note: In the ip route-static command, 24 indicates the subnet mask

length, which can also be expressed in 255.255.255.0.

Step 4 Configure backup static routes.

The data exchanged between R2 and 10.0.13.3 and 10.0.3.3 is

transmitted through the link between R2 and R3. R2 fails to communicate with 10.0.13.3 and 10.0.3.3 if the link between R2 and R3 is faulty.

According to the topology, R2 can communicate with R3 through R1 after the link between R2 and R3 is faulty. You can configure a backup static route to solve the preceding problem. Backup static routes do not

take effect in normal cases. If the link between R2 and R3 is faulty, backup static routes are used to transfer data.

You must configure preferences for backup static routes to ensure

that the backup static routes are used only when the primary link is faulty. In this example, the preference of the backup static route is set to 80.

[R1]ip route-static 10.0.3.0 24 10.0.13.3

[R2]ip route-static 10.0.13.0 255.255.255.0 Serial 1/0/0 preference 80

[R2]ip route-static 10.0.3.0 24 Serial 1/0/0 preference 80

[R3]ip route-static 10.0.12.0 24 10.0.13.1



Step 5 Test the static routes.

View the routing table of R2.



----------------------------------------------------------------------------







10.0.3.0/24 Static 60 0 RD 10.0.23.3 Serial2/0/0

10.0.12.0/24 Direct 0 0 D 10.0.12.2 Serial1/0/0

10.0.12.1/32 Direct 0 0 D 10.0.12.1 Serial1/0/0



10.0.13.0/24 Static 60 0 RD 10.0.23.3 Serial2/0/0

10.0.23.0/24 Direct 0 0 D 10.0.23.2 Serial2/0/0


10.0.23.3/32 Direct 0 0 D 10.0.23.3 Serial2/0/0






The routing table contains two static routes that are configured in

step 3. The value of the Proto field is Static, indicating a static route. The value of the Pre field is 60, indicating the default preference of a route.

Test network connectivity when the link between R2 and R3 works

properly.

[R2]ping 10.0.13.3












0.00% packet loss


ping 10.0.3.3










0.00% packet loss


The command output shows that communication is normal.

You can also run the tracert command to view the routers through which data is transferred.

tracert 10.0.13.3

traceroute to 10.0.13.3(10.0.13.3), max hops: 30 ,packet length: 40,

press CTRL_C to break

1 10.0.23.3 40 ms 31 ms 30 ms

tracert 10.0.3.3

traceroute to 10.0.3.3(10.0.3.3), max hops: 30 ,packet length: 40,

press CTRL_C to break

1 10.0.23.3 40 ms 30 ms 30 ms

The command output shows that R2 directly sends data to R3.

Step 6 Test the backup static routes.

Disable Serial2/0/0 on R2 and observe the changes in the routing

tables.

Compare the routing tables with the previous routing tables before



Serial2/0/0 was disabled.

[R2]int Serial 2/0/0

[R2-Serial2/0/0]shutdown




----------------------------------------------------------------------------







10.0.3.0/24 Static 80 0 D 10.0.12.2 Serial1/0/0

10.0.12.0/24 Direct 0 0 D 10.0.12.2 Serial1/0/0

10.0.12.1/32 Direct 0 0 D 10.0.12.1 Serial1/0/0



10.0.13.0/24 Static 80 0 D 10.0.12.2 Serial1/0/0





The next hops and preferences of the two routes in the preceding information are changed.

Test connectivity between R2 and the destination addresses 10.0.13.3 and 10.0.3.3 on R2.

ping 10.0.3.3












0.00% packet loss


ping 10.0.13.3










0.00% packet loss


The network is not disconnected when the link between R2 and R3 is shut down.

You can also run the tracert command to view the routers through

which data is transferred.

tracert 10.0.13.3

traceroute to 10.0.13.3(10.0.13.3), max hops: 30 ,packet length: 40,press CTRL_C

to break

1 10.0.12.1 40 ms 21 ms 21 ms

2 10.0.13.3 30 ms 21 ms 21 ms

tracert 10.0.3.3


to break

1 10.0.12.1 40 ms 21 ms 21 ms

2 10.0.13.3 30 ms 21 ms 21 ms

The command output shows that the data sent by R2 reaches R3 through R1.



Step 7 Configure a default route on R1 to implement

network connectivity.

Enable the interface that was disabled in step 6 on R2.

[R2]int Serial 2/0/0

[R2-Serial2/0/0]undo shutdown

Test connectivity between R1 and R3.

[R1]ping 10.0.23.3


Request time out

Request time out

Request time out

Request time out

Request time out




100.00% packet loss

R3 cannot be pinged because the route destined for 10.0.23.3 is not configured on R1.

You can configure a default route on R1 to implement network

connectivity.

[R1]ip route-static 0.0.0.0 0.0.0.0 10.0.13.3

After the configuration is complete, test connectivity between R1 and 10.0.23.3.

[R1]ping 10.0.23.3












0.00% packet loss


Step 8 Configure a backup default route.

If the link between R1 and R3 is faulty, R1 can communicate with

10.0.23.3 and 10.0.3.3 through R2.

However, R1 does not learn about this route by default. You can also configure a backup default route in this step.

[R1]ip route-static 0.0.0.0 0.0.0.0 10.0.12.2 preference 80

[R3]ip route-static 10.0.12.0 24 10.0.23.2 preference 80

Step 9 Test the backup default route.

View the routes of R1 when the link between R1 and R3 works properly.

display ip routing-table


----------------------------------------------------------------------------




0.0.0.0/0 Static 60 0 RD 10.0.13.3 GigabitEthernet0/0/0




10.0.3.0/24 Static 80 0 RD 10.0.13.3 GigabitEthernet0/0/0

10.0.12.0/24 Direct 0 0 D 10.0.12.1 Serial1/0/0


10.0.12.2/32 Direct 0 0 D 10.0.12.2 Serial1/0/0


10.0.13.0/24 Direct 0 0 D 10.0.13.1 GigabitEthernet0/0/0









Disable GigabitEthernet0/0/0 on R1, and then view the routes of R1. Compare the current routes with the routes before GigabitEthernet0/0/0 was disabled.

[R1]interface GigabitEthernet0/0/0

[R1-GigabitEthernet0/0/0]shutdown

[R1-GigabitEthernet0/0/0]quit



----------------------------------------------------------------------------




0.0.0.0/0 Static 80 0 RD 10.0.12.2 Serial1/0/0




10.0.12.0/24 Direct 0 0 D 10.0.12.1 Serial1/0/0


10.0.12.2/32 Direct 0 0 D 10.0.12.2 Serial1/0/0






According to the preceding routing table, the value of 80 in the Pre column indicates that backup default route 0.0.0.0 is valid.

Test network connectivity on R1.

[R1]ping 10.0.23.3












0.00% packet loss


[R1]tracert 10.0.23.3


to break

1 10.0.12.2 30 ms 26 ms 26 ms

2 10.0.23.3 60 ms 53 ms 56 ms

The data packets reach R3 through R2.

Additional Exercises: Analyzing and Verifying

You can run the ping command to control other information about forwarded data packets, such as the source address, data packet size,

and data packet quantity. Consider the following questions:

1. What is the source address of the ping data packets sent from a router by default?

2. In this lab, is connectivity implemented for all the network segments?

3. What is the simplest static route configuration for this lab topology

if only static route are configured to implement connectivity?

4. You can specify the next hop address or an interface when configuring a static route. Consider the differences between the two

configurations. How do non-Huawei vendors configure static routes?

Appendix A: Default Preference of Each Routing Protocol

of Huawei Routers

Routing Protocol and Routing Type Preference



Direct 0

OSPF 10

IS-IS 15

Static 60

RIP 100

OSPF ASE 150

BGP 255

Final Configurations


[V200R001C01SPC300]

#

sysname R1

#


link-protocol ppp


ip address 10.0.12.1 255.255.255.0

#



ip address 10.0.13.1 255.255.255.0

#

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

#

ip route-static 0.0.0.0 0.0.0.0 10.0.13.2

ip route-static 0.0.0.0 0.0.0.0 10.0.12.2 preference 80


#

return


[V200R001C01SPC300]

#

sysname R2

#




link-protocol ppp


ip address 10.0.12.2 255.255.255.0

#


link-protocol ppp


ip address 10.0.23.1 255.255.255.0

#

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

#

ip route-static 3.3.3.3 255.255.255.255 10.0.23.2

ip route-static 3.3.3.3 255.255.255.255 Serial1/0/0 preference 80

ip route-static 10.0.13.0 255.255.255.0 10.0.23.2

ip route-static 10.0.13.0 255.255.255.0 Serial1/0/0 preference 80

#

return


[V200R001C01SPC300]

#

sysname R3

#


link-protocol ppp


ip address 10.0.23.2 255.255.255.0

#



ip address 10.0.13.2 255.255.255.0

#

interface LoopBack0

ip address3.3.3.3 255.255.255.255

#



#

return

HCDA-HNTD Chapter 3 RIP Configuration


Chapter 3 RIP Configuration

Lab 3-1 Configuring RIPv1 and RIPv2

Learning Objectives

The objectives of this lab are to learn and understand:

Loop prevention mechanism of the Routing Information Protocol

(RIP)

Method of using RIP to exchange routing information between

two routers

Method of configuring RIPv1

Method of enabling RIP on a specified network and interface

Method of using the display and debug commands to test RIP

Procedure for testing connectivity of the RIP network

Formats of the network prefixes sent to or received by RIP

Method of configuring RIPv2

Differences between RIPv1 and RIPv2

Method of importing a static route to RIP



Topology

Figure 3.1 Lab topology of RIPv1 and RIPv2

Scenario

Assume that you are a network administrator of a company that has a small intranet with three routers and five networks. You want to use RIP to transfer routing information. Considering compatibility, you want to

use RIPv1 at first, but you realize that RIPv2 also has many advantages. After certain tests, you finally select RIPv2.



Tasks

Step 1 Perform basic configurations and IP addressing.

Configure basic device information and set IP addresses based on the topology.

system-view


[Huawei]sysname R1




[R1- Serial1/0/0]interface loopback 0


[R1-LoopBack0]quit

Run the display current-configuration command to check the configuration results.



#


link-protocol ppp


ip address 10.0.12.1 255.255.255.0

#


interface LoopBack0

ip address 10.0.1.1 255.255.255.0

#


system-view


[Huawei]sysname R2

[R2]interface serial 1/0/0



[R2-Serial1/0/0]interface serial 2/0/0





[R2-Serial2/0/0]interface loopback0




#


link-protocol ppp


ip address 10.0.12.2 255.255.255.0

#


link-protocol ppp


ip address 10.0.23.2 255.255.255.0

#


#

interface LoopBack0

ip address 10.0.2.2 255.255.255.0

#

system-view


[Huawei]sysname R3




[R3- Serial1/0/0]interface loop0




#


link-protocol ppp


ip address 10.0.23.3 255.255.255.0

#


interface LoopBack0

ip address 10.0.3.3 255.255.255.0

#




R1 and R2 can communicate with each other.

ping 10.0.12.2










0.00% packet loss


R2 can successfully ping the IP address 10.0.23.3 of R3.

ping 10.0.23.3










0.00% packet loss


Step 2 Configure RIPv1.

Enable RIP on R1, and then advertise the 10.0.0.0 network segment to RIP.

[R1]rip 1

[R1-rip-1]network 10.0.0.0

Enable RIP on R2, and then advertise the 10.0.0.0 network segment to

RIP.

[R2]rip 1



[R2-rip-1]network 10.0.0.0

Enable RIP on R3, and then advertise the 10.0.0.0 network segment to RIP.

[R3]rip 1

[R3-rip-1]net 10.0.0.0

Step 3 Verify RIPv1 routes.

View the routing tables of R1, R2, and R3. Make sure that these routers have learned the RIP routes that are highlighted in gray in the following command output.



----------------------------------------------------------------------------







10.0.2.0/24 RIP 100 1 D 10.0.12.2 Serial1/0/0

10.0.3.0/24 RIP 100 2 D 10.0.12.2 Serial1/0/0

10.0.12.0/24 Direct 0 0 D 10.0.12.1 Serial1/0/0


10.0.12.2/32 Direct 0 0 D 10.0.12.2 Serial1/0/0


10.0.23.0/24 RIP 100 1 D 10.0.12.2 Serial1/0/0







----------------------------------------------------------------------------






10.0.1.0/24 RIP 100 1 D 10.0.12.1 Serial1/0/0




10.0.3.0/24 RIP 100 1 D 10.0.23.3 Serial2/0/0

10.0.12.0/24 Direct 0 0 D 10.0.12.2 Serial1/0/0

10.0.12.1/32 Direct 0 0 D 10.0.12.1 Serial1/0/0



10.0.23.0/24 Direct 0 0 D 10.0.23.2 Serial2/0/0


10.0.23.3/32 Direct 0 0 D 10.0.23.3 Serial2/0/0








----------------------------------------------------------------------------




10.0.1.0/24 RIP 100 2 D 10.0.23.2 Serial2/0/0

10.0.2.0/24 RIP 100 1 D 10.0.23.2 Serial2/0/0




10.0.12.0/24 RIP 100 1 D 10.0.23.2 Serial2/0/0

10.0.23.0/24 Direct 0 0 D 10.0.23.3 Serial2/0/0

10.0.23.2/32 Direct 0 0 D 10.0.23.2 Serial2/0/0







Test connectivity from R1 to IP address 10.0.23.3. R1 and R3 can



communicate with each other.

[R1]ping 10.0.23.3










0.00% packet loss


You can run the debug command to view RIP periodic updates.

Run the debug command to enable the RIP debugging function. The

debug command can be used only in the user view. Then run the terminal debugging and terminal monitor commands to display the debugging information.

The information about RIP interactions between routers is displayed.

debug rip 1

terminal debugging

Info: Current terminal debugging is on.

terminal monitor

Info: Current terminal monitor is on.

Sep 19 2011 19:15:22.630.1+00:00 R1 RM/6/RMDEBUG: 6: 11647: RIP 1: Receiving v1

response on Serial1/0/0 from 10.0.12.2 with 2 RTEs

Sep 19 2011 19:15:22.630.2+00:00 R1 RM/6/RMDEBUG: 6: 11698: RIP 1: Receive response

from 10.0.12.2 on Serial1/0/0

Sep 19 2011 19:15:22.630.3+00:00 R1 RM/6/RMDEBUG: 6: 11709: Packet: Version 1,

Cmd response, Length 44

Sep 19 2011 19:15:22.630.4+00:00 R1 RM/6/RMDEBUG: 6: 11758: Dest 10.0.3.0, Cost

2


1

Sep 19 2011 19:15:52.650.1+00:00 R1 RM/6/RMDEBUG: 6: 11647: RIP 1: Receiving v1

response on Serial1/0/0 from 10.0.12.2 with 2 RTEs

Sep 19 2011 19:15:52.650.2+00:00 R1 RM/6/RMDEBUG: 6: 11698: RIP 1: Receive response

from 10.0.12.2 on Serial1/0/0



Sep 19 2011 19:15:52.650.3+00:00 R1 RM/6/RMDEBUG: 6: 11709: Packet: Version 1,

Cmd response, Length 44


1

You can run the undo debug rip or undo debug all command to disable debugging functions.

undo debug rip 1

In addition, you can run the commands that have more parameters

to view the debugging information of a certain type. For example, run the debug rip 1 event command to view the periodical update events sent or received by routers. You can add the question mark (?) to the

command to query other parameters.

debug rip 1 event

Sep 19 2011 19:23:44.200.1+00:00 R1 RM/6/RMDEBUG: 25: 3873: RIP 1: Periodic timer

expired for interface Serial1/0/0 (10.0.12.1) and its added to periodic update

queue

Sep 19 2011 19:23:44.210.1+00:00 R1 RM/6/RMDEBUG: 25: 4201: RIP 1: Interface

Serial1/0/0 (10.0.12.1) is deleted from the periodic update queue

undo debug all

Info: All possible debugging has been turned off

Warning: If too many debugging functions are enabled, a large number of router resources are used. This may lead to break down.

Therefore, use the commands (such as debug all) for enabling debugging functions in batches with caution.

Step 4 Configure RIPv2.

After the preceding configuration, you need to configure only version 2 in the RIP sub view.

[R1]rip 1

[R1-rip-1]version 2

[R2]rip 1

[R2-rip-1]version 2

[R3]rip 1

[R3-rip-1]version 2



Step 5 Verify RIPv2 routes.

View the routing tables of R1, R2, and R3.

Run the display ip routing-table command to view the routing

tables of R1, R2, and R3. Compare the routes that are highlighted in gray with RIPv1 routes.



----------------------------------------------------------------------------







10.0.2.0/24 RIP 100 1 D 10.0.12.2 Serial1/0/0

10.0.3.0/24 RIP 100 2 D 10.0.12.2 Serial1/0/0

10.0.12.0/24 Direct 0 0 D 10.0.12.1 Serial1/0/0


10.0.12.2/32 Direct 0 0 D 10.0.12.2 Serial1/0/0


10.0.23.0/24 RIP 100 1 D 10.0.12.2 Serial1/0/0







----------------------------------------------------------------------------




10.0.1.0/24 RIP 100 1 D 10.0.12.1 Serial1/0/0






10.0.3.0/24 RIP 100 1 D 10.0.23.3 Serial2/0/0

10.0.12.0/24 Direct 0 0 D 10.0.12.2 Serial1/0/0

10.0.12.1/32 Direct 0 0 D 10.0.12.1 Serial1/0/0



10.0.23.0/24 Direct 0 0 D 10.0.23.2 Serial2/0/0


10.0.23.3/32 Direct 0 0 D 10.0.23.3 Serial2/0/0








----------------------------------------------------------------------------




10.0.1.0/24 RIP 100 2 D 10.0.23.2 Serial2/0/0

10.0.2.0/24 RIP 100 1 D 10.0.23.2 Se

Lab_Guide

Documents

Transcript of Lab_Guide