CCNP TSHOOT 6.0 - Cisco Learning Home

CCNPv6 TSHOOT
Background
Routers and Layer 3 switches are typically segmented into three planes of operation, each with a clearly
identified objective. The data plane (also called the forwarding plane) forwards user data packets. The control
plane routes data correctly, and the management plane manages the network devices.
The control plane is typically associated with packets generated by the network elements themselves. End
users typically do not interact with the control plane. Examples of Layer 3 control plane protocols and related
security functions include neighbor authentication for routing protocols and HSRP. Examples of securityrelated
Layer 2 control plane protocols include root guard, BPDU guard, DHCP snooping, Dynamic ARP
Inspection, IP source guard, and the use of special VLANs for trunks and unused ports.
This lab focuses on control plane security issues related to DHCP snooping and EIGRP authentication for
routers and Layer 3 switches.
For each task or trouble ticket, the trouble scenario and problem symptom is described. While
troubleshooting, you will discover the cause of the problem, correct it, and then document the process and
results.
Lab Structure
This lab is divided into two main sections.
Section 1—Trouble Tickets and Troubleshooting Logs
This section includes two tasks. Each task is associated with a trouble ticket (TT) and introduces one or more
errors on one or more devices. If time is a consideration, each task or trouble ticket can be performed
independently.
Section 2—Troubleshooting Reference Information
This section provides general troubleshooting information that can be applied to any of the trouble tickets in
this lab. Examples of useful commands and output are provided. If time permits, it is recommended that you
read through Section 2 prior to starting on the trouble tickets.
Note: This lab uses Cisco 1841 routers with Cisco IOS Release 12.4(24)T1 and the advanced IP image
c1841-advipservicesk9-mz.124-24.T1.bin. The switches are Cisco WS-C2960-24TT-L with the Cisco IOS
image c2960-lanbasek9-mz.122-46.SE.bin and Catalyst 3560-24PS with the Cisco IOS image c3560advipservicesk9-mz.122-46.SE.bin.
Other routers (such as 2801 and 2811), switches (such as 2950 or 3550),
and Cisco IOS Software versions can be used if they have comparable capabilities and features. Depending
on the router or switch model and Cisco IOS Software version, the commands available and output produced
might vary from what is shown in this lab.
Any changes made to configurations or topology (other than errors introduced) are noted in the lab and
trouble tickets so that you are aware of them prior to beginning the troubleshooting process.
Required Resources
• 3 routers (Cisco 1841 with Cisco IOS Release 12.4(24)T1 Advanced IP Service or comparable)
• 1 switch (Cisco 2960 with the Cisco IOS Release 12.2(46)SE C2960-LANBASEK9-M image or
comparable)
• 2 switches (Cisco 3560 with the Cisco IOS Release 12.2(46)SE C3560-advipservicesk9-mz image or
comparable)
• SRV1 (Windows PC with static IP address) with TFTP and syslog servers plus an SSH client (PuTTY
or comparable) and WireShark software
• PC-B (Windows PC DHCP client) with PuTTY and WireShark software
• PC-C (Windows PC DHCP client) with PuTTY and WireShark software
• Serial and Ethernet cables
All contents are Copyright © 1992–2010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 17