GNS3 Lab & Exercise: VPN troubleshooting Lab Scenario

Scenario: A simple IPsec tunnel between fast Ethernet interfaces of routers SW1 (f1/1) and R1(f0/0). But it doesn’t work..

SW1#ping 10.0.0.2 source 10.0.10.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:
Packet sent with a source address of 10.0.10.1
…..
Success rate is 0 percent (0/5)

R1#ping 10.0.10.1 source 10.0.0.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.10.1, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.2
…..
Success rate is 0 percent (0/5)

Find out why without looking into initial configuration files, all IOS commands are allowed.

Routers Used: Cisco C3745
IOS: (C3745-ADVENTERPRISEK9-M), Version 12.4(23)
Feature of Topology: VPN, IPSEC, ISAKMP,RIP
Download GNS3 files: http://www.uploadhookup.com/index.php/files/get/YA4jjABr6Z/vpn-troubleshooting.rar

Solution:

Looking into initial configuration file will help !

GNS3 Lab Exercise: Load Sharing Lab Scenario

Scenario: R0 is connected to R1, R2 and R3 through DS3 (or OC3). Additionally R1, R2 And R3 are connected by Metro-Ethernet (simulated by SW1). All interfaces are in EIGRP 1. In case DS3 R0-R1 is broken traffic from R0 (source 100.100.100.100) to R1 (destination 1.1.1.1) should be shared between remaining two DS3s:

1) 1:1, traffic equally distributed between R0-R2 and R0-R3

2) 1:2, twice as much traffic on R0-R2 as on R0-R3

Traffic distribution has to be proven by test with ICMP traffic

Routers Used: Cisco 3640

IOS: c3640-ik9o3s-mz.124-25b, (C3640-IK9O3S-M), Version 12.4(25)

Feature of Topology: EIGRP Metric Weights, EIGRP unequal cost load balancing

Download GNS3 files: http://www.uploadhookup.com/index.php/files/get/luHPhnCS40/load-sharing.zip plus setup vlan 100 as shown below:

SW1#vlan database
SW1(vlan)#vlan 100
VLAN 100 added:
Name: VLAN0100
SW1(vlan)#apply
APPLY completed.
SW1(vlan)#exit
APPLY completed.

Solution:

Read More »