Article

avatar

Core and 2 distribution blocks with L3 and L2 access switches

Written by pierky from http://pierky.tel/ on March 7th, 2009 | 24 Comments

I just arranged this lab I used when I was studying for CCNP, I hope someone will find it useful.

We have a 2 distribution blocks network linked with the core layer; all elements are dual linked to the upstream layer for redundancy.

Block 1 has L3 access switches, running EIGRP as stub routers. Distribution routers send default route only to the access switches, and perform route aggregation toward core routers.

Block 2 has L2 access switches, with 2 local Vlans and 1 spanning Vlan. Local Vlans upstream traffic is load-balanced toward the distribution switches using GLBP, having STP blocking distrib-to-distrib link. The spanning vlan’s traffic is not load-balanced, but HSRP and STP grant redundancy in case of link failure.

Multicasting is implemented with anycast RP.

The included startup.vpc file contains the configuration for VPCS.
Remember to add Vlan to the switches!!

vlan database

vlan XX

Vlans to add:
A1 – Vlan 10
A2 – Vlan 20
D3, D4 – Vlan 3, 4 and 100
A3 – Vlan 3 and 100
A4 – Vlan 4 and 100

I strongly recommend you to read Cisco Solution Reference Design Guide at www.cisco.com/go/srnd.

Routers Used: 3640

IOS: c3640-jk9s-mz.124-16.bin

Feature of Topology: L2/L3 switching, VLan, HSRP, GLBP, spanning-tree, trunking, etherchannel, EIGRP, L2/L3 access switches, spanning vlan.

Image:

Download: GNS3-Labs::L2L3Access-Pierky

38,970 views

Tags: , , , , , , ,

24 Responses to “Core and 2 distribution blocks with L3 and L2 access switches”

  1. avatar GNS3 Lab: Core and 2 distribution blocks with L3 and L2 access switches « Pierky’s Blog

    [...] Open this lab on GNS3-Labs.com [...]

  2. avatar Petchged

    Thank you so much sir. this is useful

  3. avatar guled

    thanks so much mate. it’s really useful for me.
    thanks

  4. avatar Naif

    Thanks >>>

  5. avatar Yat

    Thank you so much. this really useful in understanding cisco design architecture and the configuration which goes into it.

    Regards

  6. avatar Jonathan

    I couldn’t open the lab. It looks like it’s going to open…”starting hypervisors”…then I get a dynamips error saying “could not connect to server”
    Thoughts?

  7. avatar pierky

    Umh… you can try to edit the .net file with Notepad and replace “127.0.0.1″ occurrencies with “localhost”.

  8. avatar sanjay

    Hi pierky

    I am trying to run PIX firewall on GNS but not able to do that , reason being i doesn’t have PIX IOS , can u pls help me ..

  9. avatar pierky

    Sorry Sanjay, I can’t help you.

  10. avatar LBSources

    @sanjay http://www.blindhog.net/gns3-how-to-find-pix-images-pix-serial-numbers-and-ios-images-using-google/

    Good luck ..

  11. avatar Bandar

    Hi all ,
    I am looking for a lab for ISIS over DMVPN, any one can help.

  12. avatar LBSources

    @Bandar .. All I have at the moment is http://www.gns3-labs.com/2008/12/01/gns3-topology-bsci-eigrp-isis-redistribution-lab/

  13. avatar pierky

    @Bandar

    Hi, I think you can’t use ISIS over DMVPN. ISIS neighbors need to be Layer-2 (datalink) adjacent, and DMVPN peers are not. If you have a ISIS backbone and DMVPN spokes I think you should redistributes spokes routes into ISIS using another protocol, such as OSPF or EIGRP.

  14. avatar Bandar

    Thank you all for your reply.
    I tried ISIS over normal GRE tunnel and it work fine without any problem.
    With DMVPN i received below error.

    ISIS-Adj: Encapsulation failed for L2 LAN IIH on Tunnel0

  15. avatar pierky

    Hi Bandar,

    as far as I know IS-IS works fine in broadcast and point-to-point networks only; other network types have to be rearranged to one of these two topologies, or need some kind of “emulation” such as “frame-relay map clns 123 broadcast”.

    Standard tunnels are point-to-point links, and GRE grants ISIS PDUs encapsulation as it would be on a data-link frame. No problems for ISIS here.

    DMPVN networks are NBMA. If you setup spokes with a ptp tunnel, using DMVPN just to simplify hub configuration, you have them sending ISIS Hello, but hub shows you errors:

    ISIS-Adj: Rec serial IIH from *Tunnel* (Tunnel0), cir type L1L2, cir id 01, length 1513
    ISIS-Adj: Point-to-point IIH received on multi-point interface: ignored IIH

    On the hub side, you have encapsulation error for outgoing Hellos:

    ISIS-Adj: Encapsulation failed for L1 LAN IIH on Tunnel0

    You have the same error if you setup spokes with “tunnel mode gre multipoint”.

    As I see it, with multipoint networks IOS can’t know what to put on top of outgoing ISIS PDUs. I don’t know about workarounds to make DMVPNs seem like broadcast or ptp networks.

  16. avatar Spyros

    Hi guys,

    I am ready to build a really powerful pc and to be honest just to run GNS3 as I am ready to study my CCIE.

    I know that GNS3 doesn’t support IOS for layer 3 switches apart of the 3xxx router with the problem module.

    So … what my plan is to buy 4 layer 3 switches plug eachone in a nic card on my pc and create trunk ports with virtual routers.

    So my main query is if I can use physical layer3 switch and create a trunk port with a virtual router via my desktops’s nic card?

    Is that possible guys?

    I have searched the web and study the gns3 documantation but I couldn’t find anything.

    Any idea guys I will appreciate for your help.

    Thanks,
    Spyros

  17. avatar pierky

    Hi Spyros,

    I found this: http://wiki.gns3.net/index.php/Documentation

    The main question seems to be: do GNS3 clouds support 802.1q trunking?

    At that URL they say:

    You can also connect a switchport to the “real world” by connecting the switch to a “Cloud” device. Here we are connecting a trunk port (dotq1 encapsulation) with a native vlan of 1 to the host’s eth1, or Windows network device using the NIO_gen_eth Winpcap NIO (see Communicating with Real Networks section). If this host interface is connected to a real switch that is configured for trunking, you can now easily connect any router instance to any VLAN you wish.

    So, it seems it does support trunking on clouds.

    You can look here too: http://www.sadikhov.com/forum/lofiversion/index.php?t155313.html

    Have fun!

    Bye,
    Pierky

  18. avatar LBSources

    @Spyros Yes this is possible and works just as you would expect. I did this when testing using a virtual (GNS3) router as my home router with real traffic flowing. Of course now you’re complicating your topology between the physical and virtual, but if you don’t get confused, you should be able to do it.

    Just get yourself some dual/quad cards from ebay or surplus company.

    Good luck on the IE exam!

    -Lenny

  19. avatar Spyros

    Thanks you guys,

    definetely you will see me here chasing you ….:)

    I am surprized that there are so many good guys around that are willing to help.

    Once more.. Thank you

  20. avatar hamid

    i run this lab but get this error
    nonexistent device c2
    please help me

  21. avatar wassim

    great website. I’ve already added a link to it on my blog.
    keep up the good work man !

  22. avatar kamlesh

    Hi,

    I am trying to connect Pix to Ethernet Swtich, but it’s not.

    Please suggest, how to connect.

    Error: can’t connect these devices.

  23. avatar LBSources

    @kamlesh Upgrade to the latest version and you should be OK..

    http://www.gns3-labs.com/2010/02/28/gns3-announcement-official-release-of-gns3-07-stable/

  24. avatar kafee

    nonexistent device C2

Leave a Reply



Subscribe To GNS3-Labs

Subscribe to GNS3 Labs :: Cisco Router Simulator Network Topologies


Show Love!

If you would like to donate for the time it takes to do all of this, feel free to use the link below. Thank you in advance for any contribution you make :)

Categories