Huawei Certification Training HCIA-Datacom Datacom Engineers’ Lab Guide V1.0 Wiz HUAWEI Huawei Technologies Co., Ltd.Copyright © Huawei Technologies Co., Ltd. 2020. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co,, Ltd. Trademarks and Permissions Nowe: and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice ‘The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided “AS IS" without warranties, guarantees or representations of any kind, either express or implied. The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied. Huawei Technologies Co., Ltd. Address: Huawei Industrial Base Bantian, Longgang Shenzhen 518129 People's Republic of China Website: https://e huawei.com/ Huawei confidential. Page 1 of 186_Huawet HCIA-Datacom Lab Guide Huawei Certification System Huawei Certification follows the "platform + ecosystem" development strategy, which is a new collaborative architecture of ICT infrastructure based on "Cloud-Pipe-Terminal”. Huawei has set up a complete certification system consisting of three categories: ICT infrastructure certification, platform and service certification, and ICT vertical certification. It is the only certification system that covers all ICT technical fields in the industry. Huawei offers three levels of certification: Huawei Certified ICT Associate (HCIA), Huawei Certified ICT Professional (HCIP), and Huawei Certified ICT Expert (HCIE). Huawei Certification covers all ICT fields and adapts to the industry trend of ICT convergence. With its leading talent development system and certification standards, itis committed to fostering new ICT talent in the digital era, and building a sound ICT talent ecosystem. Huawei Certified ICT Associate-Datacom (HCIA-Datacom) is d engineers and anyone who want to understand Huawei's datacom products and technologies. The HCIA-Datacom certification covers routing and switching principles, basic WLAN principles, network security basics, network management and O&M basics, SDN and programmability and automation basics. The Huawei certification system introduces the industry, fosters innovation, and imparts cutting- edge datacom knowledge. Huawei Certification ing a Bota ALT | easels conmamisin cose en ones stn Deere! ove Compt da Senie aces cress sue Inept Comping G sect ater coon um cn Troneison cs ue 6 Huawei confidential. Page 2 of 186_Huawet HCIA-Datacom Lab Guide About This Document Introduction This document is an HCIA-Datacom certification training course and is intended for trainees who are going to take the HCIA-Datacom exam or readers who want to understand routing and switching principles, basic WLAN principles, network security basics, network management and O8M basics, SDN and programmability and automation basics. Background Knowledge Required This course is for Huawei's basic certification. To better understand this course, familiarize yourself with the following requirements: © Basic computer skills * Basic understanding of data communication Symbol Conventions Es Chi Switch Pc Ethernet Cable FIT AP Router Serial Cable Huawei confidential Page 3 of 186_Huawet HCIA-Datacom Lab Guide Lab Environment Network Description This lab environment is intended for datacom engineers who are preparing for the HCIA-Datacom exam. Each lab environment includes two switches (PoE not supported), two PoE switches, two wireless access points (APs), and two routers. Device Requirements To meet exercise requirements, the recommended configurations of the environment are as follows: The following table lists required devices: Device Name Device Model Software Version Switch (CloudEngine $5731-H24T4xC ¥V200R019C00 or later PoE switch (CloudEngine $5731-H24P4XC V200R019C00 or later AP AirEngine 5760-10 V200R009 or later Router Neténgine AR6S1C V300R019 or later CO NoTE The port, output, and configuration information of devices in this document is provided based on the recommended topology. The actual information may vary according to the lab environment, Huawei confidential. Page 4 of 186we _Huawet HCIA-Datacom Lab Guide Contents About This Document. 1 Huawei VRP and Configuration Basics 1.1 Introduction 4 1.1.1 About This Lab 4 1.1.2 Objectives 4 1.1.3 Networking Topology. 1.2 Lab Configuration nu. 1.2.1 Configuration Roadmap... 1.2.2 Configuration Procedure. 1.3 Verification. 1.4 Configuration Reference 18 1.5 QUIZ. cn 1.6 Appendix 2 Creating an Interconnected IP Network ....svssssseesnee 2.1 Lab 1: IPv4 Addressing and Routing 2.1.1 Introduction... 2.1.1.1 About This Lab. 2.1.1.2 Objectives... 2.1.1.3 Networking Topolog 2.1.2 Lab Configuration .. 2.1.2.1 Configuration Roadmap 2.1.2.2 Configuration Procedure... 2.1.3 Verification 2.1.4 Configuration Reference. 31 2.1.5 Quiz 32 2.2 Lab 2: OSPF Routing... 2.2.1 Introduction... 2.2.1.1 About This Lab. 2.2.1.2 Objectives... a 2.2.1.3 Networking Topology. 33 2.2.2 Lab Configuration 34 Huawei confidential. Page 5 of 186_Huawet HCIA-Datacom Lab Guide 2.2.3 Verification... 2.2.4 Configuration Referenc 2.25 Quiz 3 Creating a Switched Ethernet Network 3.1 Lab 1: Ethernet Basics and VLAN Configuratior 3.1.1 Introduction. 3.1.1.1 About This Lab. 3.1.1.2 Objectives... 3.1.1.3 Networking Topology 3.1.2 Lab Configuration .. 3.1.2.1 Configuration Roadmap 3.1.2.2 Configuration Procedure... 3.1.3 Ver 3.1.4 Configuration Reference. 3.15 Quiz. 3.2 Lab 2: Spanning Tree. 3.2.1 Introduction... 3.2.1.1 About This Lab. 3.2.1.2 Objectives... 3.2.1.3 Networking “Topology 3.2.2 Lab Configuration .. 32. 3.2.2.2 Configuration Procedure... 3.23 Verification ication 11 Configuration Roadmap. 3.2.4 Configuration Reference. 61 3.25 Quiz 62 3.3 Lab 3: Ethernet Link Aggregation ....nsmennnnnonnnnninnninnnininnnnnnnnsnnanmnnnminnnneSS 3.3.1 INtFOdUCBION sssnssesnnnsnnnnsinnnnsinnnnnnsnnnnsnnn sesnuimonnseiannnsnnnne®S 3.3.1.1 About This Lab... 3.3.1.2 Objectives.. 3.3.1.3 Networking Topology. 3.3.2 Lab Configuration 3.3.2.1 Configuration Roadmap 64 3.3.22 Configuration Procedure 64 3.3.3 Verification... Huawei confidential. Page 6 of 186_Huawet HCIA-Datacom Lab Guide 3.3.4 Configuration Referenc BBS QUIZ enn “ 3.4 Lab 4: Inter-VLAN Communication... 3.4.1 Introduction... “ “ ssomnnnsen “ 3.4.1.1 About This Lab. 2 3.4.1.2 Objectives 72 3.4.1.3 Networking Topology. 72 3.4.2 Lab Configuration 7B 3.4.2.1 Configuration Roadmap... 73 3.4.2.2 Configuration Procedure. 73 3.4.3 VerifICAtION.vsrnnsennnnsnnsinnnnninnnnnsnnnnnsnn sesenmonnnsinnnnsensnnne TS 3.4.4 Configuration Reference vc.ninnnnuononnnnsnnnnnsnn sesnnnennninnnnsenenne 3.45 Quiz 7 4 Network Security Basics and Network Access 4.1 Lab 1: ACL Configuration 4.1.1 Introduction. 4.1.1.1 About This Lab. 4.1.1.2 Objectives 4.1.1.3 Networking Topology. 4.1.2 Lab Configuration... 4.1.2.1 Configuration Roadmap 4.1.22 Configuration Procedure... 4.1.3 Verification... “ 4.1.4 Configuration Reference (Method 1 4.1.5 Configuration Reference (Method 2 4.1.6 Quiz 42 Lab 2: Local AAA Configuration 86 4.2.1 Introduction 86 4.2.1.1 AbOUE THIS Lb onsnsnnmmsnsninnnmnnnnnninnnnsnnn sesnninennninnnnsnsenns BB 4.21.2 OBJOCIVES rsnninnsnnnnnnnsinnnnnnnnnsnnnnnsnnn seseninonnnsinnnnsnsnnne BS 4.2.1.3 Networking Topology. 4.2.2 Lab Configuration... 4.2.2.1 Configuration Roadmap “ sense “ 4.2.2.2 Configuration Procedure 87 4.2.3 Verification 89 4.2.4 Configuration Reference. 39 4.25 Qui Huawei confidential. Page 7 of 186_Huawet HCIA-Datacom Lab Guide 43 Lab 3: NAT Configuration 43.1 Introduction... 4.3.1.1 About This Lab. 4.3.1.2 Objectives... 43.1.3 Networking Topology. 90 4.3.2 Lab Configuration 21 43.2.1 Configuration Roadmap 21 4.3.2.2 Configuration Procedure 21 4.3.3 Verification... - . - - “ - see 4.3.4 Configuration Reference .vssmnnnnn - “ senna 9B 435 Quiz. - sn - - “ sensinnnsenne 7 5 Basic Network Service and Application Configuration: 5.1 Lab 1: FTP Configuration 5.1.1 Introduction. 5.1.1.1 About This Lab. 5.1.1.2 Objectives. 5.1.1.3 Networking Topology. 5.1.2 Lab Configuration 5.1.2.1 Configuration Roadmap 5.1.22 Configuration Procedure... 5.1.3 Verification... “ 5.1.4 Configuration Referenc 5.15 Quiz. 5.2 Lab 2: DHCP Configuration 5.2.1 Introduction. 5.2.1.1 About This Lab. 5.2.1.2 Objectives. 5.2.1.3 Networking Topology. 5.2.2 Lab Configuration... 5.2.2.1 Configuration Roadmap 5.2.22 Configuration Procedure 5.23 Verification... . - - 5.2.3.1 Display the IP addresses and routes of R1 and R3.... 5.2.3.2 Display the address allocation on R2. 5.2.4 Configuration Reference. 5.25 Quiz. 6 Creating a WLAN. Huawei confidential. Page 8 of 186_Huawet HCIA-Datacom Lab Guide 6.1 Introduction. 6.1.1 About This Lab.. 6.1.2 Objectives... 6.1.3 Networking Topology 1m 1 1 . ss a m1 6.1.4 Data Planning 112 6.2 Lab Configuration 13 6.2.1 Configuration Roadmap. 13 6.2.2 Configuration Procedure. 13 6.3 Verification. 120 6.4 Configuration Reference 120 65 Quiz 122 6.6 Appendix 122 7 Creating an IPv6 Network. 124 7.1 Introduction... 124 7.1.1 About This Lab.. ssn “ 124 7.1.2 Objectives. 124 7.1.3 Networking Topology 124 7.2 Lab Configuration 125 7.2.1 Configuration Roadmap. 7.2.2 Configuration Procedure 7.3 Verification sun 7.4 Configuration Reference TS QUi2 we 125 125 ve 132 ve 132 133 134 134 134 134 134 135 135 135 137 139 139 139 140 8 Network Programming and Automation Basics 8.1 Introduction. 8.1.1 About This Lab.. 8.1.2 Objectives... 8.1.3 Networking Topology. 8.2 Lab Configuration wns 8.2.1 Configuration Roadmay 8.2.2 Configuration Procedure 8.2.3 Code Interpretation... 8.3 Verification. 8.4 Configuration Reference BS QUiz.nn 9 Configuring a Campus Network Huawei confidential. Page 9 of 186_Huawet HCIA-Datacom Lab Guide 9.1 Reference Information... 9.2 Introduction... 9.2.1 About This Lab.. 9.2.2 Objectives. 140 140 9.2.3 Networking Topology 141 9.3 Lab Tasks. 141 9.3.1 Requirement Collection and Analysis 141 9.3.2 Planning and Design 142 9.3.3 Implementation... 152 9.3.4 Network O&M - 157 9.3.5 Network Optimization. .....snmnnnnuonnnnnnsnnnnnsnnn socosnmnnnnniannnsnnnn 159 9.4 VerIFiCAtiON ..oossnnnnnsnnnnnsinnnninnnnnsinnnnsnnn seoovmmnnnnniannnsnn 159 9.5 Configuration Reference 160 9.6 Quiz, 180 Reference Answers.. 182 Huawei confidential. Page 10 of 186“Huawer HCIA-Datacom Lab Guide Huawei VRP and Configuration Basics 1.1 Introduction 1.1.1 About This Lab In this lab activity, you will learn the basic operations of Huawei VRP system by configuring Huawei devices. 1.1.2 Object es Upon completion of this task, you will be able to: Understand the meaning of command line views and how to access and exit ‘command line views Understand common commands Understand how to use the command line online help Learn how to negate a command Learn how to use command line shortcut keys 1.1.3 Networking Topology As shown in the following networking diagram, the router is a new router without any configuration. The PC is connected to the console port of the router through a serial cable. You need to initialize the router. Figure 1-1 Lab topology for understanding the VRP operating system PC Router Huawei confidential Page 11 of 186“Huawer HCIA-Datacom Lab Guide 1.2 Lab Configuration 1.2.1 Configuration Roadmap 1. Complete basic configurations, such as device name and router interface IP address. 2. Save the configurations. 3. Restart the device. 1.2.2 Configuration Procedure Step 1 Step 2 Step 3 Log in to the CLI of the router through the console port. The details are not provided here Display the basic device information # Display device version information. emp command group gmp Specify parameters for IGMP ip —_ ip command group ipsee Specify PSec(IP Security) configuration information| ipx6 — ipy6 command group isis Configure interface parameters for ISIS If you enter only the first or first several characters of a command keyword, you can use the context-sensitive help function to obtain all the keywords that begin with a character or character string, The meaning of each keyword will also be layed. For example: In the Gigabitetherneto/0/1 interface view, enter i and a question mark (?) to display the options of all commands starting with i in the current view. You can press Tab to complete the command of manually enter the complete command based on the help information. in the preceding information, icmp and igmp are keywords, icmp command group, and Specify parameters for IGMP are the descriptions of the keywords. [Datacom-Router-GigabitEthernet0/0/TIip? accounting + accounting command aroun adress ‘ adress command group binding Enable binding ofan interface with a VPN instance fast-forwarding Enable fast forwarding forward- broadcast Specify IP cirected broadcast information retstream IP netstream feature verity IP verity When you enter some keywords of a command and a question mark (?) separated by a space, all keywords associated with this command, as well as simple descriptions, are displayed. For example: If you enter ip, a space, and a question mark (?), all commands containing keyword ip and the corresponding descriptions are displayed. [Datacom-Router-GigabitEthernet0/0/TIp address ? IPADDROG> WP adress bootp-alloc IP address allocated by BOOTP shep-alloc IP adress allocated by DHCP unnumbered ‘Share an adress with another interface [Datacom-Router-Gigabitfshernet0/0/tJip address 192.168.1.17 Huawei confidential. Page 13 of 186_Huawet HCIA-Datacom Lab Guide INTEGER«O-32> Length of IP address masie IP_ADOREKXXX> IP adress mask [Datacom-Router-GigabitEthernet0/0/TJip address 192168.1.1 247 sub Indicate @ subordinate address co Please press ENTER to execute command indicates that no keyword or parameter exists in this position. You can press Enter to run the command. [Datacom-Router-GigabitEthernet0/0/1}ds this + ineerface GigabitEthernet0/0/1 ip address 192,168.11 255.255.2550 * The display this command displays the running configuration in the current view, Effective arguments set to their defaults are not displayed. Configured arguments that are not committed successfully are not displayed, either. This command is used to check the configuration. You do not need to enter complete keywords if the entered characters can match a unique keyword in the current view. This function improves efficiency. For example: The dis this command can be executed on an interface because only the display this command matches the entered characters in the current view. Similarly, the cu or d cu command can also be executed because they are equivalent to lay current-configuration command. [Datacom-Router-GigabitEthernet0/0/1}quit The quit command returns a device from the current view to a lower-level view. If the current view is the user view, this command exits from the system. # Negate the IP address configuration because the IP address should be signed to interface GigabitEthemet 0/0/2. [Datacom-RouterJinterface Gigabitethernet 0)0/1 [Datacom-Router-Gigabitésherner0/0/ undo ip address To do so, you must negate the IP address configuration of GigabitEthernet0/0/1 Otherwise, an IP address conflict occurs and the configuration fails. To negate a command, use the undo keyword with the command. An undo command is generally used to restore a default configuration, disable a function, or delete a configuration. Almost each command line has a corresponding undo command. [Datacom-RouterJinterface Gigabitethemet 0/0/2 [Datacom-Router-GigabitEthernet0/0/2]ip address 192.168.1.1 24 [Datacom-Router-GigabtEshernet0/0/2]quit # Display the current device configuration. [Datacom-Router]Hisplay current-configuration [vzo0R003c09) Huawei confidential. Page 14 of 186_Huawet HCIA-Datacom Lab Guide Step 4 * sysname Datacom-Router * snmp-agent local-enginelé 8000070803000¢00000000 snmp-agent * clock timezone China-Standard-Time minus 06:0000, portal local server load portalpagezip = 4109 illegal-mac alarm * set cpuusage threshold 80 restore 75 suthenticationschame default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher 9656SKBim. NIBADZ}e#<0'BbmESLI)9S555 local-user admin senice-ype http # More ~ When the information cannot be completely displayed on one screen, the system. will pause for you can view the information. If ---- More --- is displayed at the bottom of the command output, you can 1. Press Ctrl+C or Ctrl+Z to stop the display or command execution. 2. Press the space bar to display the next screen. 3. Press Enter to display the next line. Save the current configuration of the device. # Return to the user view. [Datacom-Routerlauit In addition to the quit command, you can also: 1. Run the return command to return to the user view from any view. 2. Press Ctrl+Z to return to the user view from any view. # Save the configuration. Datacom Router>save ‘The current configuration will be written tothe device. Are you sure to continue? (y/n)ioky ester y to contin. Iwill ake several minutes to save configuration file, please wait... Configuration fle had bean saved successfully Note: The configuration ile wil take effet after being activated The curent configuration is saved successfully. Huawei confidential. Page 15 of 186_Huawet HCIA-Datacom Lab Guide Step 5 Configuration changes must be saved in the configuration file to survive system restart. You can run the save command to save the current configuration to the default path and overwrite the original configuration file. You can also run the save configuration-file command to save the current configuration to a specified file in the storage device. This command does not affect the current startup configuration file of the system. # Compare the running configuration with the configuration in the startup configuration file. -eompare configuration ‘The curcent configuration is the same asthe next startup configuration fl The running configuration isthe same as the configuration in the startup configuration file Perform operations on the file system, # List all the files in the current directory. save testcfg ‘re you sure to save the configuration to test.cfg? (yin) ny [ater y to conti, Iwill take several minutes to save configuration file, please wait. Configuration file had been saved successfully Note: The configuration file wil take effect after being activated # List all the files in the current directory agai Datacom Router>dir Directory of flasi/ Huawei confidential. Page 16 of 186_Huawet HCIA-Datacom Lab Guide Step 6 x Attr —Size(Byte) —Date_TimeLMT) FileName 0 rw. 126538240 ul 04 2016 17:57:22 _a651e- v300r019c00Sspe100.cc 1 ow 22622 Feb202020103518 mon flene 2 tw 737 Feb 202020103836 vipctgzip 3 dw. Jul 042016 18:51:04 CPM_ENCRYPTED FOLDER 4 ow 7e3 ul 102018 1446:16 ‘default lncal.cer 5 ow © Sep 11 201700:0054 —_brdxpon_snmp_cfa.efs 6 dew. Sep 11 20170091:22 update 7 dew = Sep 11 20170001:48 ——shalidr 8 dw Sep 21 2019 171424 localuser 9 dew Sep 15 2017043552 dhcp 10 ow 1,408 Feb 202020115517 test.cfg 1 ow 509 Feb 2020201115578 —_private-data.ot 12 ow 2686 Dec 192019 15.0518 mon Ipu_filetxt 13 ow 3072 Dec iA 2019 181554 Boot Logfile 510,484 KB total avallable (386,452 KB free) The configuration fle is saved successfull. # Set the file as the startup configuration file. ‘startup saved-configuration testefg This operation will take several minutes, please walt. Inf: Succeeded in setting the file for booting system # Display the startup configuration file. The device is restarted. o~End 1.3 Verification The details are not provided here 1.4 Configuration Reference The details are not provided here, 1.5 Quiz 1. Familiarize yourself with the function keys of Huawei VRP system according to section 2.6 2. Instep 5, the reset saved-configuration command is executed to clear the configuration. Why is the configuration still retained after the device is restarted? 1.6 Appendix Table 1-1 System function keys Key Function Moves the cursor to the beginning of the current line. Moves the cursor back one character. Stops performing current functions. Deletes the character where the cursor is located at. Moves the cursor to the end of the last line. Moves the cursor forward one character. Deletes the character to the left of the cursor. Huawei confidential. Page 18 of 186_Huawet HCIA-Datacom Lab Guide Key Function Terminates the connection of an outgoing call during connection establishment. or the down arrow key Displays the next command in the command history. or the up arrow key Displays the previous command in the command history. Enters a question mark (?) Deletes the character string (word) to the left of the cursor. Deletes all characters on the left of the cursor. Deletes the character at the cursor and all characters to the right of the cursor. Returns to the user view. ‘Stops or redirects incoming connections. Moves the cursor back one character string (word). Deletes one character string (word) to the right of the cursor. Moves the cursor forward one character string (word). Huawei confidential. Page 19 of 186“Huawer HCIA-Datacom Lab Guide Creating an Interconnected IP Network 2.1 Lab 1: IPv4 Addressing and Routing 2.1.1 Introduction 2.1.1.1 About This Lab Internet Protocol version 4 (IPv4) is a core protocol of the TCP/IP protocol suite and works at the Internet layer in the TCP/IP model or the network layer in the Open System Interconnection (OSI) model. The network layer provides connectionless data transmission. Each IP datagram is transmitted independently, removing the need to establish a connection before IP datagrams are sent. Routing is the basic element of data communication networks. It is the process of selecting paths on a network along which packets are sent from a source to a destination. In this lab activity, you will configure IPv4 addresses and static IPv4 routes, and understand basic routing principles in the process. 2.1.1.2 Object es Upon completion of this task, you will be able to: * Learn how to configure an IPv4 address on an interface © Understand the functions and meanings of loopback interfaces * Understand how direct routes are generated © Learn how to configure static routes and understand the conditions for the static routes to take effect * Learn how to test the connectivity of the network layer by using the ping tool * Learn how to configure static routes and understand their application scenarios 2.1.1.3 Networking Topology R1, R2, and R3 are gateways of their networks. You need to configure these gateways to connect these networks. Huawei confidential Page 20 of 186_Huawet HCIA-Datacom Lab Guide Figure 2-1 Lab topology for IPv4 addressing and routing R2 GE0/0/3, & GEO/0/4 2.1.2 Lab Configuration 2.1.2.1 Configuration Roadmap 1. Configure IP addresses for the interfaces on the routers, 2. Configure static routes to interconnect the routers. 2.1.2.2 Configuration Procedure Step 1 Step 2 Complete basic device configuration. # Name the devices. The details are not provided here. Display the IP address of the current interface and the routing table of the router. # Display the interface status on the router (R1 in this example) [rT]display ip interface brief “dow: administratively down ‘down: standby (): loopback (6): spoofing (© E-Trunk down ‘The numberof interface that is UP in Physical 3 ‘The number of interface that is DOWN in Physical is S The number of interface that is UP in Protocol is 1 ‘The numberof interface thet is DOWN in Protocol is 10 Inserface IP Address/Mask Physical Protocol Gigabitetherneto/0/1 unassigned up down Gigabitetnemer0/0/2 unassigned up own GGigabitethernet0/0/3 unassigned up down Huawei confidential. Page 21 of 186_Huawet HCIA-Datacom Lab Guide Step 3 The display ip interface brief command displays the brief information about interface IP addresses, including the IP addresses, subnet masks, physical status, link-layer protocol status, and number of interfaces in different states. GigabitEthernet0/0/1 and GigabitEthernet0/0/3 on R1 are not configured with IP addresses. Therefore, the IP Address/Mask field is in the unassigned state, the Protocol field is in the down state, and the Physical field is in the up state. # Display the routing table on the router (R1 in this example). [R]dsplay ip routing table Route Flags: R- relay, D - download to fi Routing Tables: Public Destinations 4 Routes: 4 Destination/Mask Proto Pre Cost’ «= Flags, «—NextHop. Interface weno Direct «00 ° 127001 IntoopBacko 12700:/32 Direct 0 0 o 127.001 InloopBacko 127255255.255/32 Direct 0 0 o 127001 InboopBacko 255.255.255255/32 Direct 00 . 127001 IntoopBacko InLoopBack0 is a default loopback interface InLoopBack0 uses the fixed loopback address 127.0.0.1/8 to receive data packets destined for the host where InLoopBack0 resides. The IP address of the InLoopBack0 interface cannot be changed or advertised using a routing protocol Configure IP addresses for physical interfaces. # Configure IP addresses for physical interfaces based on the following table. Table 2-1 IP addresses of physical interfaces Router Interface IP Address/Mask R1 GigabitEtheneto/o/1 10.0.13.1/24 GigabitEtherneto/0/3 10.0.12.1/24 R2 Gigabittherneto/0/3 10.0.12.2/24 GigabitEthemneto/o/4 10.0.23.2/24 RB Gigabittherneto/0/1 10.0.13.3/24 GigabitEthernet0/0/3 10.0.23.3/24 system view [Rfinterface GigabitEtherneto/0/1 [R1-Gigabitethermet0/0/1]ip address 10.0131 24 [R1-Gigabitetherneto/0/ quit [Rifinerface GigabitEthernet0/0/3 Huawei confidential. Page 22 of 186_Huawet HCIA-Datacom Lab Guide [R1-Gigabicethermer0/0/3]ip address 10.0121 24 [R-Gigabitethernet0/0/3}quit system-view [R2Jinterface GigabitEthernet0/0/3, [R2-Gigabitethernet0/0/slin address 10.0122 24 [2-Gigabietnemet0/0/3]quit [R2Jinterface GigabitEthernet0/0/s [R2-Gigabitethernet0/0/4]in address 10.0232 24 [2-Gigabietnemet0/0/4)quit system view [Rlinterface GigabitEthernet0/0/1 [R3-Gigabitethernet0/0/1]ip address 10.0133.24 [R3-Gigabitetherneto/0/I]quit [Rlinterface GigabitEthernet0/0/3 [R3-Gigabitethernet0/0/3]ip address 10.0233 24 [R3-Gigabitethemeto/0/s}quit # Use the ping tool to test the connectivity. [Rt}ping 10.0122 PING 100.122: 56 data bytes, press CTRL_C to break Reply from 10.0:122: byt Reply from 10.0122: bytes Reply from 10.0.122: by Reply from 10.0.122: bytes Reply from 10.0.122: bytes 1000122 pina statistics —- 5 packets) transmitted 5 packet(s) received 0.00% packet loss round-trip min/ava/ma [Rt}ping 10.0133 6 Sequence=4 tt=255 time- Sequence=s tl=255 time=50 ms 30/48/70 ms PING 100.132: 56 data bytes, press CTRLC to break Reply from 10.0133: byx Reply from 10.0.133: byt Reply from 10.0133: bytes Reply from 10.0133: bys Reply from 10.0133: bytes 100.133 ping statistics —- 5 packets) transmitted 5 packets) received 0.00% packet loss Sequence=1 t=255 time=50 ms 6 Sequence=2 tt-255 time: Sequence=3 tl=255 time Sequences 1 Sequence 182255 time: roundtrip min/avg/max = 30/44/60 ms # Display the routing table of RI [R1cispay ip routing-table Route Flags: R- relay, D - download to fib Routing Tables: Public Huawei confidential. Page 23 of 186_Huawet HCIA-Datacom Lab Guide Step 4 Destinations: 19 Routes: 10 Destination/Mask Proto Pre Cost Flags NextHop Interface to0i20724 diet 0 0 D 100121 Gigabiteshernet0/0/3 yo00.121/32 Direct 0 0 D 127.001 Gigabitethernet0/0/3 10012255/32 | Direct 00 D 127001 GigabitE:hernet0/0/3 100130724 Direct 0 0 D 100131 Gigabitexherneto/0/1 y00.131/32 Direct 0 0 D 127.001 GigabitEtherneto/0/1 10013255/32 Direct «00 D 127001 —_Gigabitetherneto/0/1 1270008 Diet «00 D 127.001 Intoopacko 1e700./32 Direct 0 0 D 127.001 InboopBacko 127255255255/32 Direct «00 D 127.001 _—_Intoopacko 255255255255/32 Direct. 0 0 D 127.001 Intoopsacko The preceding command output shows that three direct routes are automatically generated for each interface after the IP addresses of the interfaces are configured, which are A route to the network where the interface resides 2. The host route to the interface 3. The host route to the broadcast address of the network where the interface resides CO NOTE ‘A host route is a route with a 32-bit mask Create a loopback interface. # Configure the loopback interface according to the following table. Table 2-2 IP addresses of loopback interfaces Router Interface IP Address/Mask R1 LoopBackO 10.0.1.1/32 R2 LoopBackO 10.0.1.2/32 RB LoopBackO 10.0.1.3/32 Loopback interfaces are logical interfaces manually configured and do not exist physically. Logical interfaces can be used to exchange data. A loopback interface is always Up at the physical layer and link layer unless it is manually shut down. Generally, a loopback interface uses a 32-bit mask. Loopback interfaces are used for the following purposes: 1. Used as the address for identifying and managing the router 2. Used as the router ID in OSPF 3. Used for improving network reliability Huawei confidential. Page 24 of 186_Huawet HCIA-Datacom Lab Guide Step 5 In this lab activity, the loopback interfaces are used to simulate clients. [Rlinterface LoopBacko [R1-LoopBackOlip address 10.0.1 32 [R2Jinterface Looptacko [R2-LoopBackOlin address 10.012 32 [R3Jinterface Looptacko [f3-LoopBackOip address 10.013 32 # Display the routing table on the router (R1 in this example). {Rtdisolay ip routing table Route Flags - relay, D - download to fib Routing Tables: Public Destinations:11 Routes 11 Destination/Mask Prato—-«Pre Cost Flags NextHop Interface 100.1.1/32 Direct 0 0 D 127.001 ——_LoopBacko 100120724 Direct 00 D 100121 Gigabitethernet0/0/3 100.121/32 Direct 0 0 D 127001 Gigabitetnernet0/0/3 10012255/32 Direct 00 D 127001 Gigabitetherneio/0/3 100130/24 Direct 00 D 10131 Gigabitetherne:0/0/1 100.131/32 Direct 0 0 D 127001 Gigabitethernet0/0/1 10013255/32 Direct 00 D 127003 GGigabitethernei0/0/1 tongs Direct «0 D 127001 IntoopBacko 12700:/32 Direct 0 0 D 127001 InLoopBack0 1272552952552 Direct 0 0 D 127003 IntoopBacko 255255.255255/32 Direct 0 0 D 127001 InLoopBacko Direct routes have been generated, # Test the connectivity between the loopback interfaces. [Rifping -a 1001.1 100012 PING 10.0.2: 56. data bytes, press CTRL_C to break Request time out Request time out Request time out Request time out, Request time out 10.0.2 ping statistics — 5 packets) transmitted 0 packet(s) received 100.00% packet loss Using the ping -a source-jp-address destination-ip-address command to specify the source and destination IP addresses of ping packets. At this point, the router does not have a route to the destination IP address. Therefore, the ping operation fails. Configure static routes. # On R1, configure a route to the loopback0 interfaces of R2 and R3. [Rif route-statc 10.012 32 10.0122 Huawei confidential. Page 25 of 186_Huawet HCIA-Datacom Lab Guide [Rip rourestaie 10013 32 100.133 # Display the routing table of R1 [Rildisplay ip routing table Route Flags R= relay, D - download to fib Routing Tables: Public Destinations:13 Routes : 13 Destination(Mask Proto «Pre. Cost Flags. NextHiop Interface toa11s2 Direct 0 0 D 127001 LeopBacko 10.01.2/32 Static 600 RD 10.0122 Gigabitetherneto/0/3 10.01.3/32 Static 600 RD 100133 Gigabitethernet0/0/1 yo0i20724 Direct 00 D 10.0121 Gigabitethernet0/0/3 yo0i21/32 Direct 0 0 D 127.001 Gigabitethernet0/0/3 10012255/32 Direct 00 D 127001 Gigabitethernet0/0/3 100130724 Direct 0 0 10.0131 Gigabitethernexo/ay1 yo0131/32 Direct 0 0 D 127001 Gigabitethernet0/0/1 100.13255/32 Direct 00 D 127.001 Gigabitethernes0/0/1 1270008 Diet «00 D 127.001 IntoopBacko wreny32 Direct 0 0 D 127001 InteopBacko 127255255255/32 Direct 0 0 D 127.001 intoopBcko 255255.255255/32 Direct 0 0. D 127.001 InboopBacko The configured static routes are added to the IP routing table. # Test connectivity. [rrpping -a 1.01.1 10012 PING 10.0.1.2:56 data bytes, press CTRL_Cto break Request time out Request time out Request time out, Request time out Request time out, = 1000.2 ping statistics —~ 5 packets) transmitted 0 packet(s) received 10.00% packet loss ‘The loopbackd interface of R2 sill cannot be pinged because R2 does not have a route to the loopbacko ineerface of RI # On R2, add a route to LoopBackO of R1 (Rap roue-saie 100.11 32 100121 # Test connectivity. <ping -a 1001.1 1001.2 PING 10.01.2:56 data bytes, press CTRL_C to break Reply from 10.012: bytes=56 Sequence Reply from 1.0.1.2: bytes=56 Sequence=2 Huawei confidential. Page 26 of 186_Huawet HCIA-Datacom Lab Guide Step 6 10.0:1.2 ping statistics —~ 5 packets) transmitted 5 packets) received 0.00% packet loss round-tria minfavg/max = 10/36/60 ms “Loopback0 on RI can communicate with laopback® on R2 # Configure other necessary routes. [Rap route-static 10.013 32 100233 [Ral route static 10.01.1 32 10.0131 [Rati route-static 10.01.2.32 10.0232 # Test the connectivity between the loopback0 interfaces of the routers by referring to the proceeding description. Configure a path from R1 to R2 via R3 as the backup path from LoopBack0 of R1 to LoopBack0 of R2. # Configure static routes on R1 and R2. [Rif route-statc 1001.2 32 10.0133 preference 100 [Rep route-statc 10.01.1 32 10.0233 preference 100 # Display the routing tables of R1 and R2. IR1}sisplay ip routing-table Route Flags: R- relay, D - download to fib Routing Tables: Public Destinations:13 Routes : 13 Destination/Mask Proto Pre Cost Flags NextHop Interface 10011/32 Direct oo D 127001 ——LoopBacko 100.1.2/32 static © 0 RD 10.0122 —_GigabitEshernet0/0/3 100:13/32 Static 60 0 RD 100133 GigabitEtherneto/0/1 10012024 Direct 0 0 D 100121 ——_Gigabitethernero/0/3 100.12:/32 Direct 0 0 D 127001 —_Gigabitexhernero/0/3 100:12255/32 Direct 0 0 D 127001 Gigabittthernetoyo/3 10013024 Direct 0 0 D 100131 Gigabitethernero/o/1 100.131/32 Direct 0 0 D 127001 —_Gigabitexhernero/0/1 100:13255/32 Direct 0 0 D 127001 GigabitEtherneto/0/1 1270008 Direct 00 D 127001 ——InLoopBacko 12700:/32 Direct 0 0 D 127.001 Intoapacko 127255295.255/32 Direct 0 0 D 127001 InLoopBacko 255.255.255255/32 Direct 00 D 127001 IntoopBacko [aldisplay ip routing table Route Flags R= relay, D - download to fb Routing Tables: Public Huawei confidential. Page 27 of 186_Huawet HCIA-Datacom Lab Guide Destinations: 13. Routes: 13 Destination/Mask Proto Pre Cost Flags NextHop Interface 100.1.1/32 Static © 0 RD 100121 GigabitEtherner/0/3 1012/32 Direct 0 0 D 127001 LoopBacko 10013/32 Static 0 0 RD 100233 GigabitEthernero/o/a 100120724 Direct 0 0 D 100122 ——_GigabitEthernero/0/3 10012232 Direct 0 0 D 127001 Gigabitetherneto/o/3 10012255/32 Direct 0 0 D 127001 ——_Gigabitethernero/0/3 10022024 Direct 0 0 D 100232 —_Gigabitéxhernetoj0/4 100282/32 Direct 0 0 D 127001 —_Gigabitethernetoyo/4 10028255/32 Direct 00 D 127001 Gigabitethernero/o/a 1270008 Direct 00 D 127001 InLoopBacko r700./32 Direct a0 D 127001 IntoopBacko 127255255255/32 Direct 00 D 127001 ——IntoopBacko 255255.255.255/32 Direct 0 0 D 127.001 Inteopaacko The static route with a preference value of 100 isnot added to the routing table # Shut down GigabitEthernet0/0/3 interface on R1 and R2 to invalidate the route with the highest priority. [Rfinteface Gigabitetherneto/o/3 [R1-Gigabitetnemet0/0(3]shutdown # Display the routing table on R1 and R2. The command output shows that the routes with a lower priority are activated when the routes with a higher pi are invalidated. [rer]éisplay iF routing-table Route Flags: R- relay, D - download to fib Routing Tables: Public Destinations 19 Routes: 10 Destination/Mask Proto Pre Cost «Flags NexHop interface 100.1.1/32 Direct 0 0 > 127001 Loopéacko 100.1.2/32 static 100 0 RD 10.0133 Gigabitetherneto/o/1 1013/32 Static 600 RD 100133 _Gigabitetherneto/0/1 10130724 Direct 0 0 D 100131 ——_Gigabitethernex0/0/1, y00131/32 Direct 0 0 D 127001 Gigabitethernet0/0/1 10013255/32 Direct 00 D 127001 Gigabtethernex0/0/1, 1270008 Direct «00 > 127001 InLoopBack0 w7eo./32 Direct 0 0 D 127001 IntoopBacko 127255255255/32 Direct «00 D 127001 InLoopBacko 255.255255.255/32 Direct 0 0 D 127001 InLoopBack0 [R2\sisplay ip routing table Route Flags: R- relay, D - download to fib Routing Tables: Public Destinations 10 Routes: 10 Huawei confidential. Page 28 of 186_Huawet HCIA-Datacom Lab Guide Step 7 Destination/Mask Proto Pre Flags NewHop Interface 100.1.1/32 static 1000 RD 100.233 Gigabitetherneto/o/4 1012/32 Direct 0 0 D 127001 Loopaacko 100.13/32 Static 6 0 RD 100233 GigabitEthererojo/4 yo02%0/24 Direct 0 0 D 100232 Gigabtethernet0/0/4 100237/32 Direct 0 0 D 127001 Gigabtetherneto/0/4 10028255/32 Direct 0 0 D 127001 ——_Gigabitethernex0/0/4 w7eag/8 Direct 0 0 D 127001 IntoopBacko w7en132 Direct 0 0 D 127001 InLoopBacko 127.255255255/32 Direct OO > 127001 InLoopBacko 255.255.255255/32 Direct 0 0 D 127001 IntoopBacko In this case, the original static route becomes invalid and the static route with a lower priority is activated, # Test connectivity. (rtfping -a 10.01. 10012 PING 10.0.2: 96. dats bytes, press CTRL_C to break Reply from 10.0.1.2 bytes 54 time=B0 ms Reply from 10.0.12: bytes: 54 time=60 ms Reply from 10.0:1.2: bytes 54 time=60 ms Reply from 10.0.1 bytes moms Reply from 10.0.2: bytes=56 Sequence=5 tI=254 time=80 ms 1001.2 ping statistics ~ 5 packet(s) transmitted 5 packet{s) received 0.00% packet loss round-trip min/ava/ma 0/78/10 ms # Trace the path of the data packets. [Rr}tacer-2 1001.1 10012 traceroute to 10.01.2(10.01.2), max hops 30 packet lenath: 40,pre55 CTRL_C to break 110013340 ms 30ms 50m 210028260ms ems 6Oms The tracert command displays the path of packets from the source to the destination The command output shows that the data packets pass through Gigabitéthernet0/0/1 and GigabitEthernet0/0/3 of R3 and are then forwarded to GigabitEthernet0/0/4 of R2. CO NoTE In some lab environments, the devices may not respond to ICMP packets for security reasons. Therefore, the results may vary. You can press Ctrl+C to end the tracert operation, Configure default routes to connect the LoopBack0 interface of R1 and the LoopBack0 interface of R2. Huawei confidential. Page 29 of 186_Huawet HCIA-Datacom Lab Guide # Restore the interfaces and delete the configured routes. [Rilinterface GigabitEtheret0/0/3, [R1-Gigabitéthernet0/0/3]undo shutdown [R1-Gigabitethemeto/0/a}quit [Rt ]undo ip route-static 10.0.1.2 255.255.255.255 100.122 [Rt]undo ip route-static 10.0.2 255.255.255.255 100.133 preference 100 # Display the routing table of RI [rr]display ip routing-table Route Flags: R- relay, D - download to fib Routing Tables: Public Destinations:12 Routes: 12 Destination/Mask Proto Pre Cost Flags. NextHop Interface 100.1.1/32 Direct 0 0 D 127001 ——_LoopBacko 100:13/32 Static 60 0 RD 100133 _GigabitEtherneto/0/1 100120724 Direct 00 D 100121 Gigabitethernero/0/3 100.12:/32 Direct 0 0 D 127001 —_GigabitEthernero/0/3 100:12255/32 Direct 0 0 D 127001 —_GigabitEtherneto/o/3 10013024 Direct 0 0 D 100131 GigabitEshernera/0/1 100:131/32 Direct 0 0 D 127001 —_GigabitEthernero/0/1 10013255/32 Direct 0 0 D 127001 GigabitEtherneto/0/1 1270008 Direct 00 D 127001 ——IntoopBacko 12700:/32 Direct 0 0 D 127.001 InLoopBacko 1272552952553 Direct 0 0 D 127001 InLoopBacko 255.255.255255/32 Direct 0 0 D 127001 IntoopBacko At does not havea route to LoopBack0 (101.1.2/32) of R2 # Configure a default route on R1 [Rip roure-stavie 00000 100122 # Display the routing table of R1 IRieisplay ip routing table Route Flags: R- relay, D - download to fi Routing Tables: Public Destinations: 13. Routes: 13 Destination/Mask Proto Pre Cost Flags NextHop Interface 00.00/09 static 60 0 RO 10.0122 Gigabitethernet0/0/3 t0011/32 Direct 0 0 D 127001 LoopBacko 10013/32 Static 0 0 RD 100133 Gigabitetherne:0/0/1 100120724 Direct 0 0 D 100121 GGigabitethernet0/0/3 yo0i21/32 Direct a 0 D 27001 Gigabitetherneto/0/3 10012255/32 Direct 0 0 D 127001 Gigabitethernet0/0/3 100130724 Direct 0 0 D 100131 GGigabitethernet0/0/1, 100131/32 Direct a 0 D 27001 Gigabitethernet0/0/1 100.13255/32 Direct 0 0 D 127001 GGigabitetherneto/0/1 1270008 Direct 00 D 127001 InLoopBack0 ver00./32 Direct 0 0 D 27001 InLoopBacko Huawei confidential. Page 30 of 186_Huawet HCIA-Datacom Lab Guide 127255.255255/32 Direct 00 D 127001 InLoopBacko 255:255.255,255/32 Direct 0 0 D 127001 InLoopBack0 The default route has been activated, # Test the connectivity between LoopBackO of R1 and LoopBack0 of R2. [etfping -a 10.0121 1001.2 PING 10.0112:56 dats bytes, press CTRL_C to break Reply from 10.0.1.2: bytese56 Sequence=t tl=255 time=50 ms Reply from 10.0.1. bytes=56 Sequencesé ti=255 time=d0 ms Reply from 10.0.2: bytes=56 Sequence=5 tI=255 time=20 ms 10.0.2 ping statistics ~ 5 packet(s) transmitted 5 packet(s) received (0.00% packet loss rouncl-rip min/ava/max = 20/22/50 ms Loop Back0 of RI can communicate with LoopBack® of R2. End 2.1.3 Verification You can run the ping and tracert commands to test the connectivity between loopback0 interfaces on different devices. 2.1.4 Configuration Reference Configuration on R1 * sysname Rt * ineerface GigabitEthernet0/0/1 ip address 100.131 255.255.2550 * ineerface GigabitEthernet0/0/3 ip address 100.121 255.255.2550 * interface LoopBacko ip address 1001.1 285,255255.255 * ip roue-static 0.000000 10.0122 ip route-static 10.7.3 255.255.255255 10.0133, * Configuration on R2 * sysname R2 interface Gigabitethernet0/0/3 Huawei confidential. Page 31 of 1862.1.5 Quiz HCIA-Datacom Lab Guide ip address 10.0122 2552552550 interface Gigabitethernet/0/4 ip address 100.232 255.255.2550 interface LoopBacko ip address 10.0.1.2 255.255.255.255 ip route-static 1.01.1 255.255.255.255 100121 ip roue-static 10.1.1 255255 255.255 100233 preference 100, ip route-static 10.7.3 255.255.255255 100233, * Configuration on R3 * sysname RS interface GigabitEthernet0/0/1 ip address 100.133 255.255.2550 interface Gigabitethernet00/3 ip address 100.233 255.255.255.0 # interface LoopBacko ip address 10.0.1.3 285,255,255.255 # ip route-static 10.1.1 255.255.255.255 100131 ip route-static 10.01.2 255.255.255.255 10.0232 * 1. Inwhat situations will the configured static route be added to the IP routing table? Can a route be added to the IP routing table if the configured next hop is unreachable? 2. In step 3, if the -a argument is not specified during the connectivity test, between loopback interfaces, what is the source IP address of ICMP packets? Why? Huawei confidential. Page 32 of 186“Huawer HCIA-Datacom Lab Guide 2.2 Lab 2: OSPF Routing 2.2.1 Introduction 2.2.1.1 About This Lab The Open Shortest Path First (OSPF) protocol is a link-state Interior Gateway Protocol (IGP) developed by the Internet Engineering Task Force (IETF). Currently, OSPF Version 2 (RFC2328) is used for IPv4. As a link-state protocol, OSPF has the following advantages: Multicast packet transm running OSPF Classless Inter-Domain Routing (CIDR) jon to reduce load on the switches that are not Load balancing among equal-cost routes Packet authentication With the preceding advantages, OSPF is widely accepted and used as an IGP. In the lab activity, you will understand basic OSPF configurations and principles by configuring single-area OSPF. 2.2.1.2 Objectives Upon completion of this task, you will be able to: Learn the basic commands of OSPF Learn how to check the OSPF running status Learn how to control OSPF route selection using costs Understand the advertisement of default routes in OSPF Learn how to configure OSPF authentication 2.2.1.3 Networking Topology R1, R2, and R3 are gateways of their networks. You need to configure OSPF to enable connectivity between the networks Figure 2-2 Lab topology for configuring OSPF R2 GEO/O/3 GEO/O/4 hscam cea ee? Huawei confidential. Page 33 of 186_Huawet HCIA-Datacom Lab Guide 2.2.2 Lab Configura’ 2.2.2.1 Configuration Roadmap n 1. Create OSPF processes on the devices and enable OSPF on the interfaces. 2. Configure OSPF authentication. 3. Configure OSPF to advertise default routes. 4. Control OSPF route selection using costs. 2.2.2.2 Configuration Procedure Step 1 Complete basic device configuration, # Follow steps 1, 2, 3, and 4 in lab 1 to name the routers and configure the IP addresses of the physical and loopback interfaces. # Display the routing table on the router (R1 in this example). [Rtdisplay ip routing table Route Flags R= relay, D - download to fib Routing Tables: Public Destinations: 11 Routes : 11 Destnation/Mask Prato Pre Cost Flags. NextHop Interface 1001/32 Direct © 0 D 127001 LoopBacko 100120724 Direct 00 D 100121 Gigabitethernero/0/3 100:12:/32 Direct 0 0 D 127001 —_Gigabitexhernero/0/3 100:12255/32 Direct 0 0 D 127001 Gigabitethernetoyo/3 10013024 Direct 0 0 D 100131 Gigabitethernero/o/1 100131/32 Direct 0 0 D 127001 —_Gigabitezhernero/0/1 100:13255/32 Direct 0 0 D 127001 Gigabitetherneto/o/1 1270008 Direct oo D 127001 ——InLoopBacko 12700:/32 Direct 0 0 D 127.001 Intoapaacko 127255255.255/32 Direct 00 D 127001 InLoopBacko 255.255.255255/32 Direct 00 D 127001 IntoopBacko AC tis point only direct routes exist onthe device Step 2 Complete the basic OSPF configuration. # Create an OSPF process. IRtJospt 1 You can set OSPF parameters only after creating an OSPF process. OSPF supports ‘multiple independent processes on one device. Route exchange between different OSPF processes is similar to that between different routing protocols. You can specify a process ID when creating an OSPF process. If no process ID is specified, the default process ID 1 is used. # Create an OSPF area and specify the interfaces on which OSPF is to be enabled. Huawei confidential. Page 34 of 186_Huawet HCIA-Datacom Lab Guide Step 3 [R1-ospf-t]area 0 The area command creates an OSPF area and displays the OSPF area view. [Rt-ospf-t-ares-0.0.00]network 10.0121 6.00255 [R1-ospF-1-area-0.00.0]network 10.013.1 000.255 [R1-ospf-1-ares-0.00,0}network 1001.1 00.00 The network network-address wildcard-mask command specifies the interfaces on which OSPF is to be enabled. OSPF can run on an interface only when the following two conditions are met: 1. The mask length of the interface's IP address is not shorter than that specified in the network command. OSPF uses reverse mask. For example 0.0.0.255 indicates that the mask length is 24 bits. 2. The address of the interface must be within the network range specified in the network command. In this example, OSPF can be enabled on the three interfaces, and they are all added to area 0. IR2losof [R2-osof-t]area 0 [R2-ospf-1-area-0000}network 1001220000 [f2-ospf-1-area-0.000]network 1002320000 [R2-ospf-t-area-0.000)network 100120000 If the wildcard mask in the network command is all 0s and the IP address of the interface is the same as the IP address specified in the network-address command, the interface also runs OSPF. [R3losee [R3-05pF-t]area 0 [r3-ospf-1-area-0.0.00]network 10.0133 0.000 [R3-ospf-t-area-0.0.00)network 100233 0.000 [R3-ospf-1-area-0.0.0.0}network 10.01.3 00.00 Display the OSPF status. # Displays the OSPF neighbor information. [Ri}cislay ospf peer (O5PF Process 1 with Router ID 10.0.1.1 Neighbors ‘Area 0.0.00 interface 100.13.1(GigabitEtheret0/0/1)s neighbors Router 0: 10.0.1. Address: 10.0.13.3, State: Full ModeNbr is Master Priority 1 DR: 10.0.133 BOR 10.0131 MTU:O Dead timer due in 36 sec Retrans timer interval: 0 Neighbor is up for 00:00:30 ‘Authentication Sequence: [0] Neighbors, Huawei confidential. Page 35 of 186_Huawet HCIA-Datacom Lab Guide Step 4 ‘area 0.0.0.0 interface 10.0:12:(GigabitEthernet0/0/2)'s neighbors, Router ID: 10.0.2 ‘Address: 10.0.12.2 State Full Mode:Nbrie Master Priority 1 DR:10.0122 80R:100.121 MTU:O Dead timer due in 39 sec Retrans timer interval 4 Neighbor is up for 00:00.28 ‘Authentication Sequence: [0] The display ospf peer command displays information about neighbors in each OSPF area. The information includes the area to which the neighbor belongs, router ID of the neighbor, neighbor status, DR, and BDR. # Display the routes learned from OSPF. [RT]display ip routing table protocol ospf Route Flags: R- relay, D - download to fi Public routing table: OSPF Destinations :3 Routes: 4 (OSPF routing table status: Destinations :3 Routes: 4 Destination/Mask Proto Pre Cost -Hags_NextHop Interface 100.12/32 OSPF 10 1 D 100122 ——_Gigabitethernetajoy3 1013/32 OSPF 10 1 D 100133 Gigabitetherneto/oy1 100230724 aseF 10 2 D 100133 Gigabitethernesa/o/t spr 10 2 D 100122 ——_—Gigabitéthernerayo/3 (OSPF routing table status: Destinations :0 Routes :0 Configure OSPF authentication, # Configure interface authentication on R1 [RJinteface GigabitEtherneto/0/1 [R1- Gigabitethemero/o/t]ospF authentication-made mdS 1 cipher HCIA-Datacom [Rifintertace GigabitEthernet0/0/3 [RI- Gigabiteshernet0/0/sJespf authentcation-mode md 1 ciaher HCIA-Datacom [R- Gigabitethemero/o/3]display tis interface Gigabitethernet0/0/3 ip address 100.121 2552552550 ‘spf authentication-mode mdS 1 cipher foCQTYsq-4.8\*38)1DVWQOe * The password is displayed in cipher text when you view the configuration because cipher means cipher-text. # Display OSPF neighbors. [Rt]display ospf peer brief Huawei confidential. Page 36 of 186_Huawet HCIA-Datacom Lab Guide Step 5 (05PF Process 1 with Router ID 70.01. tic Information Neighbor id State Total peer(s): 0 Authentication s nat configured on other routers Therefore, the authentication falls and no neighbor is available # Configuring interface authentication on R2. [R2Jintertace GigabitEthernet0/0/3 [R2- Gigabitethernet0/0/Jospf authentication-made mds 1 cipher HCIA-Datacom [R2Jintesface GigabitEthemet0/0/4 [R2- Gigabitetheret0/0/4Jospt authentication-mode ma 1 cipher HCIA-Datacom # Display OSPF neighbors on R2. [R2}display ospf peer brief (OSPF Process 1 with Router ID 10.0.2 Peer Statistic Information ‘Area id Interface Neighbord State ono Gigabitetherneto/0y3 yoo1.1 Full Total Peer(s): 1 ‘2 has established 2 neighbor relationship with RT # Configure area authentication on R3. [R3losf [RG-ospt-tJarea 0 {R3-ospf-1-area-0.00.0jauthentication-mode mdS 1 cipher HCIA-Datacom # Display OSPF neighbors on R3. [Risley ospf peer brief OSPF Process 1 with Router ID 10.0.2 Peer Statistic Information area id Interface Neighbor id State 0000 Gigabitetinerneto/0/1 100.1. Full o000 Gigabitethernes0/0/3 ro012 Full Total Peei(s): 2 ‘3 has established 3 neighbor relationship with RT and R2. Note: OSPF interface authentication and area authentication implement OSPF packet authentication an OSPF interfaces. Assume that R1 is the egress of all networks. Therefore, R1 advertises the default route to OSPF. # Advertise the default route on R1 [those IR1-ospf-t]defaule-route-adverise always Huawei confidential. Page 37 of 186_Huawet HCIA-Datacom Lab Guide The default-route-advertise command advertises the default route to a common OSPF area, If the always argument is not specified, the default route is advertised to other routers only when there are active non-OSPF default routes in the routing table of the local router. In this example, no default route exists in the local routing table. Therefore, the always argument needs to be used. # Display the IP routing tables of R2 and R3. [FeJdispay ip routing table Route Flags: R- relay, D - download to fib Routing Tables: Public Destinations 13 Routes: 16, Destination/Mask Proto Pre 0000/0 ro01.1/32 100:1.2/32 100.1.3/32 ro0120/24 100122/32 100:12255/32 ro01 30/24 ro0280/24 ro0232/32 10023255/32 s27000/8 r27001/32 121.255.255.255/32 255.255,255,255/32 OASE spr Direct, (5PF Direct Direct, Direct, spr spr Direct Direct Direct, Direct, Direct Direct, Direct, [Raldisplay ip routing table Route Flags R= relay, D - download to fib Routing Tables: Public Destinations Destnation/Nask oaoo/o 100:1.1/32 100.1.2/32 100.1.3/32 100:120/24 ro0130724 100.133/32 10013255732 ro0230/24 10.023.3/32 100.23255/32 1s Proto OASE ser (spr Direct, ser (spr Direct, Direct, Direct, Direct, Direct, Direct 150 10 o 10 o o ° 10 10 ° Routes: 16 Pre 150 10 10 o 10 10 o cost Flags NewHep 100.121 10.121 127001 100233 roo122 127001 127001 10.21 100233 100232 127001 127001 127001 127001 127001 127001 Nesthion 100131 100131 100232 vz7001 100232 100131 100133 127001 127001 100283 127001 127001 Interface Gigabitetne net0/0/3 Gigabitethernet0/0/3 LoopBacko Gigabitetnerneto/0/4 Gigabitethernet0/0/3 Gigabitetnemeto/0/2 Gigabitetnernet0/0/3 Gigabitethernet0/0/3 Gignbitetnemeto/0/4 Gigabitetnernet0/0/4 Gigabitethernet0/0/4 Gigabitetnerneto/0/4 Inboop8acko Inbooptacko InboopBacko Inboop8acko Interface Gigabitetherneta/0/1 Gigabitethernet0/0/1 Gigabicetherner0/0/3 LoopBacko Gigabitethernet0/0/3 Gigabicethernexo/o/ Gigabitetherneta/0/1 Gioabitthernex0/0/1 Gigabicethernex0/0/1 Gigabitetherneto/0/3 Gigabitetnerner0/0/3 GGigabitetnernet0/0/3 Huawei confidential. Page 38 of 186_Huawet HCIA-Datacom Lab Guide w7eng/s Direct 0 0 D 127001 IntoopBacko 12700:/32 Direct 0 0 D 12700. InLoopBacko 127255255.255/32 Direct 0 0 D 127001 InLooptacko 255.255255255/32 Direct 0 0 D 177001 InLoopBacko R2and R3 have learned the default route Step 6 Change the cost values of interfaces on R1 so that LoopBack0 on R1 can reach LoopBack0 on R2 via R3. # According to the routing table of R1, the cost of the route from R1 to LoopBack0 of R2 is 1, and the cost of the route from RI to R2 via R3 is 2. Therefore, you only need to change the cost of the route from R1 to LoopBack0 of R2 to ensure that the value is greater than 2. [Rifinterface Gigabitétheret0/0/3 [R- Gigabitetheret0/0/Jospf cost 10 # Display the routing table of R1 [rr]éisplay ip routing-table Route Flags: R- relay, D - download to fib Routing Tables: Public Destinations: 14 Routes: 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 100.1.1/32 Direct 0 0 D 127001 Loopéacko 100.1.2/32 OSPF 10 2 D 100.133 Gigabitetherneto/o/1 1013/32 OSPF 10 1 D 100133, Gigabitetherne:0/0/1 rooi20724 direct 0 0 D 100.121 Gigabitetnernet0/0/3 yooi21/32 dre 0 0 D 127001 Gigabitetnernes0/0/3 10012255/32 Direct 0 0 D 127001 Gigabitethernet0/0/3 to0130724 Direct 0 0 D 100.131 Gigabitethernet0/0/1 y00131/32 Direct 0 0 D 127001 GGigabitethernei0/0/1 10013255/32 Direct 0 0 D 127001 Gigabitetherne:0/0/1 yo0230/24 OSPF 10 2 D 100133 Gigabitethernex0/0/1, w7e00/8 Direct (0 0 D 127001 IntoopBacko s700./32 Direct 0 0 D 127001 InLoopBacko 121 255255.255/32 Direct 0 0 D 127001 InLoopBack0 255:255.255255/32 Direct 0 0 D 127001 InLoopBack In this case, te next hop of the route fram Rt to Laopack0 on R2 is GigabiteenernetQ/0/1 on R3 # Verify the result by issuing Tracert commands. [Ri}tracert -0 10.0.1.1 10.0.1.2 traceroute to. 100:12(100.1.2), max hops: 20 packet length: Apress CTRL_C to break 4 10013340ms soms 50ms 210028260 ms 110ms 70ms End Huawei confidential. Page 39 of 186_Huawet HCIA-Datacom Lab Guide 2.2.3 Verification 1. Test the connectivity between interfaces on different devices using Ping. 2. Shut down interfaces to simulate link faults and check the changes in routing tables. 2.2.4 Configuration Reference Configuration on R1 sysname 1 * interface GigabitExhernet0/0/1 Ip address 10.0131 255255.255.0 cespf authentication-mode md 1 cipher S6AB6# Y*R'Sq/RMa(15%q(sP-SB8CQ49.907WEOTPTAWSSAS6H interface GigabitEthernet0/0/3, ip address 10.0121 2552552550 ospf cost 10, c2pf authentication- mode mdS 1 cisher %96#}¢)pBf-7B0.FM-U:LRAVgESU>95X>T\M\LLIYR296“96# * Interface Loopackd ip address 10.1.1 255.255.255.255 * spf defoult-route-advertie abvays area 0.000 network 1000.1. 00.00 network 10.0120 000.255 retwork 100130000255 Configuration on R2 sysname R2 = interface GigabitEthernet0/0/3 ip address 10.0122 255.255.2550 csp authantication-made mds 1 cinhar SAdis2+ 72ZaTk2tv/q7E~AmR’NFVAKCSLZ8-¥'["Gh-806A06= interface GigabitEtherneto/0/4 ip address 100.232 255.255.2550 spf authentication-mode md5 1 cipher %9i#=@7jEBU!BUYOBY(RDVLCSt-<1B_a-PwCSWHO5IQ3%A96e * interface LoopBacko ip address 10.01.2 285,255,255255 * ost area 0.0.00 network 100120000 reswork 10:0.1220000 Huawei confidential. Page 40 of 186_Huawet HCIA-Datacom Lab Guide retwork 1002220000 Configuration on R3 * sysname RS interface GigabitEthernet0/0/1 ip address 100.133 255.255.2550 interface Gigabitethernet0/0/3 ip address 100.233 255.255.2550 interface LoopBacko ip address 10.0.3 255.255.255.255 = ospft area 0.0.00 authentication-mode md5 1 cipher S"6#R/IGK'W/OeSEWLO:¢*hbl-aN"S (96 network 1001.3 00.00 retwork 100.123.0000 reswork 10.0233.0.000 # 2.2.5 Quiz 1. In step 6, what is the path for R2 to return ICMP packets to R1? Try to explain the reason. Huawei confidential. Page 41 of 186“Huawer HCIA-Datacom Lab Guide Creating a Switched Ethernet Network 3.1 Lab 1: Ethernet Basics and VLAN Configuration 3.1.1 Introduction 3.1.1.1 About This Lab Ethernet technology allows data communication over shared media through Carrier Sense Multiple Access/Collision Detection (CSMA/CD). When an Ethernet network has a large number of hosts, collision becomes a serious problem and can lead to broadcast storms. This can degrade network performance or even result a complete breakdown. Using switches to connect LANs can mitigate collisions, but broadcast may still pose an issue To alleviate broadcast storms, VLAN technology divides a physical LAN into multiple VLANs so that the broadcast domains are smaller. Hosts within a VLAN can only directly communicate with hosts in the same VLAN. They must use a router to communicate with hosts in other VLANs. In this lab activity, you will learn how to configure VLAN on Huawel switches. 3.1.1.2 Objectives Upon completion of this task, you will be able to: * Learn how to create a VLAN * Learn how to configure access, trunk, and hybrid ports * Learn how to configure VLANs based on ports, * Learn how to configure VLANs based on MAC addresses © Learn how to view the MAC address table and VLAN information 3.1.1.3 Networking Topology A company needs to divide a Layer 2 network into multiple VLANs based on service requirements. In addition, VLAN 10 requires a higher level of security and only specified PCs can be added to VLAN 10. Huawei confidential Page 42 of 186we _Huawet HCIA-Datacom Lab Guide To meet this requirement, user ports of identical services on $1 and $2 can be assigned to the same VLAN, and ports with specified MAC addresses on $2 can be assigned to a VLAN. Figure 3-1 Lab topology for VLAN configuration s1 S2 GE0/0/10 6 Ge0/0/1 R3 ’ (Simulating the \ special PC) VLAN 10 3.1.2 Lab Configuration 3.1.2.1 Configuration Roadmap 1. Create a VLAN. 2. Configure a port-based VLAN. 3. Configure a MAC address-based VLAN. 3.1.2.2 Configuration Procedure Step 1 Configure names for $1 and S2 and disable unnecessary ports. # Name the devices The details are not provided here. # Shut down GEO/0/11 and GEO/0/12 on S1. This step applies only to the environment described in HC/A-Datacom Lab Construction Guide V1.0. [stinterface Gigabitetnemet 0/0/11 [st-Gigabitethemeto/0/1 shutdown. [s1-Gigabitzthemet0/0/11quit [Stinterface Gigabitéthemet 0/0/12 [st-Gigabitethemeto/0/12Jshutdown, [s1-Gigabitethemet0/0/12}quit # Shut down GE0/0/11 and GE0/0/12 on S2. [s2]interface Gigabitethernet 0/0/11 [52-Gigabitéthemet0/0/11]shutdown [52-Gigabitétinemet0/0/1 1jquit Huawei confidential. Page 43 of 186_Huawet HCIA-Datacom Lab Guide Step 2 [s2]interface GigabitEthermet 0/0/12 [52-Gigabitétnemet0/0/12Jshutdown [s2-Gigabitethemet0/0/1Z}quit Configure the device IP addresses. # Set the IP addresses for R1 and R3 to 10.1.2.1/24 and 10.1.10.1/24, respectively. [Rfinterface Gigabitetherneto/0/1 [R1-Gigabitetnemer0/0/ lip address 10.1.2.1 24 [Rlimerface Gigabitetherneto/0/2 [R3-Gigabitethemet0/0(2Iio address 10:.10.1 24 # Set the IP addresses of S3 and S4 to 10.1.3.1/24 and 10.1.3.2/24, respectively. (For scenario 1: 3 and $4 support switching from Layer 2 interfaces to Layer 3 interfaces.) [SSlinterface Gigabitfthemer0/0/1 {53 Gigabitthemet0/0/1 undo portswitch The interface changes to Layer 3 mode. The undo portswitch command changes the working mode of Ethernet interfaces from Layer 2 mode to Layer 3 mode. [53-Gigabitéthemet0/0/1}ip address 10.1.2.1 24 [sAlinterface Gigabitetheeet0/0/2 [s4-Gigabitethemeto/0/2]undo portswitch (S4-Gigabitethemet0/0/2Jip address 10.132 24 # Set the IP addresses of VLANIF3 on S3 and S4 to 10.1.3.1/24 and 10.1.3.2/24, respectively. (For scenario 2: $3 and S4 do not support switching from Layer 2 interfaces to Layer 3 interfaces.) 1. Create VLAN 3 on $3 and S4. (s3}vlan 3 [53-3] [s4vtan 3 [5e-tana] 2. Configure ports on $3 and S4 as access ports and assign them to corresponding VLANs. [SSlinterface Gigabitfthemer0/0/1 {53-Gigabitetemet0/0/1}port tink-type access {53-Gigabitethemet0/0/1Jport defeule van 3 [53-Gigabiternemet0/0/t]euie [sAlinterface Gigabitethernet0/0/2 Huawei confidential. Page 44 of 186_Huawet HCIA-Datacom Lab Guide Step 3 Step 4 [s4-Gigabitéthemet0/0/2]port link-type access [54-Gigabitéthnemet0/0/2]port default van 3 [54-Gigabitethemeto/0/2]quit 3. # Create VLANIF interfaces and configure IP addresses. [53] imertace Vian 3 The interface vlanif vian-id command creates a VLANIF interface and displays the VLANIF interface view. [S3-Vlanityip address 10.1.3 24 [54] interface Vlanif 3 [S4-Vlanit}ip address 10.1.3224 Create a VLAN. Create VLANs 2, 3, and 10 on $1 and $2. [st}vian batch 2 to 3 10 Inf: This operation may take a few seconds. Please wait for a moment..done. VANS 2, 3,and 10 are created successfully The vlan vian-id command creates a VLAN and displays the VLAN view. If the VLAN exists, the VLAN view is displayed. The vlan batch { vian-id? [ to vian-id2] } command creates VLANs in batches. {52vlan batch 2to 310 Configure port-based VLANs. # Configure user ports on $3 and 4 as access ports and assign them to corresponding VLANs. [stlinterface Gigabitetheret0/0/1 [s1-Gigabitethemeto/0/1]port link-type access The port link-type { access | hybrid | trunk } command specifies the link type of an interface, which can be Access, Trunk, or Hybrid. [S1-Gigabitéthnemet0/0/T]port default van 2 The port default vlan v/an-id command configures the default VLAN of an interface and assigns the interface to the VLAN. [51-Gigabitéthemet0/0/tJquit [sT]interface GigabitEthernet0/0/13 [51-Gigabitéthemet0/0/13Jpor link type access [51-Gigabitéthemet0/0/13}port default vlan 3 [st-Gigabitethemet0/0/1 quit [s2linterface Gigabitethemeto/o/i4 [52-Gigabitethemet0/0/14Jportlink-type access Huawei confidential. Page 45 of 186_Huawet HCIA-Datacom Lab Guide Step 5 [s2-Gigabitéthemet0/0/14Jport default van 3 [52-Gigabitéthnemet0/0/14}quit # Configure the ports connecting S1 and S2 as trunk ports and allow only packets from VLAN 2 and VLAN 3 to pass through. [Stlinterface Gigabitéthemet0/0/10 [st-Gigabitethemet0/0/1OJportlink-type trunk [51-Gigabitéthemeto/0/10Jport trunk allow-pass vlan 23 The port trunk allow-pass vlan command assigns a trunk port to the specified VLANs. [st-Gigabitethemeto/0/1ojundo port unk allow-pass vlan 1 The undo port trunk allow-pass vlan command deletes a trunk port from the specified VLANs. By default, VLAN 1 is in the allowed list. If VLAN 1 is not used for any service, it needs to be deleted for security purposes. [s2]interface Gigabitethernesoyo/10 [52-Gigabitétheret0/0/1 pot link-type trunkc [52-Gigabitéthemet0/0/10}port trunk allow-pass vian 23 [s2-Gigabitethemeto/0/1o]undo port trunk allow-pass lan 1 Configure MAC address-based VLANs. As shown in the networking diagram, R3 simulates a special service PC. Assume that the MAC address of the PC is a008-6fe1-0c46. The PC is expected to connect to the network through any of GigabitEthernet0/0/1, GigabitEthernet0/0/2, and GigabitEthernet0/0/3 on S2 and transmit data through VLAN 10. # Configure $2 to associate the MAC address of the PC with VLAN 10. The VLAN membership depends on the source MAC addresses of packets, and VLAN tags are added accordingly. This VLAN assignment method is independent, of the location, providing a higher level of security and flexibility 152] van 10 [s2-vlan1 0] mac-vian mac-address 2008-6fe1-0c46 The mac-vlan mac-address command associates a MAC address with a VLAN. # Set Gigabitethernet0/0/1, GigabitEthernet0/0/2, and GigabitEthernet0/0/3 on S2 to hybrid ports and configure them to allow packets from MAC address-based VLANs to pass through. (On access and trunk ports, MAC address-based VLAN assignment can be used only when the VLAN is the same as the PVID. Therefore, it is recommended that you configure MAC address-based VLAN assignment on a hybrid port to receive untagged packets from multiple VLANs. [s2]interface Gigabitethernet0/o/t [52-Gigabitéthemet0/0/1]pore link-type hybrid [52-Gigabitétiemet0/0/t]port hybrid untagged van 10, Huawei confidential. Page 46 of 186_Huawet HCIA-Datacom Lab Guide Step 6 The port hybrid untagged vlan command assigns a hybrid port to the specified VLAN to allow untagged frames to pass through, [52-Gigabitéthemet0/0/1}auit [s2]interface Gigabitethernet0/0/2 [s2-Gigabitéthemet0/0/2]pore link-type hybrid [52-Gigabitéthemet0/0/2]port rybrid untagged van 10, [s2-Gigabitethemeto/o/z]quit [sZ]interface GigabitEthemet0/0/3 [52-Gigabitéthemet0/0/3]port link-type hybrid [52-Gigabitethemet0/0/3]port hybrid untagged van 10, [s2-Gigabitetnemeto/0/3}quit # Configure the ports connecting $1 and $2 to allow packets from VLAN 10 to pass through. The ports need to allow tagged frames from multiple VLANs to pass through. Therefore, the ports can be configured as trunk ports. [Stinterface GigabitEthernet0/0)/10 [S1-Gigabitéthemet0/0/1O]port trunk allow-pass vlan 10 [s1-Gigabitethemet0/0/1O}quit [s2interface Gigabitetheret0/0/10 [52-Gigabitethemet0/0/10}port trunk allow-pass vlan 10 [s2-Gigabiteenemet0/0/10}quit # Configure S2 and enable MAC address-based VLAN assignment on GE0/0/1, GE0/0/2, and GEO/0/3. To enable a port to forward packets based on associations between MAC addresses and VLANs, you must run the mac-vlan enable command. [s2]interface GigabitEthernet0/0)1 [52-Gigabitéthemet0/0/1]macvian enable The mac-vlan enable command enables MAC address-based VLAN assignment on a port. [52-Gigabitéthemet0/0/1]auit [s2]interface Gigabitethernet0/0/2 [s2-Gigabitéthemet0/0/2]mac-vian enable [52-Gigabitéthemet0/0/2}quit [sZ]interface Gigabitethernet0/0/3 [s2-Gigabitétnemet0/0/3]mac-ian enable [52-Gigabitéthemet0/0/3]auit Display the configuration informa n # Display the VLAN information on the switch. {S11dspiay van The display vlan command displays information about VLANs Huawei confidential. Page 47 of 186_Huawet HCIA-Datacom Lab Guide The display vlan verbose command displays detailed information about a specified VLAN, including the ID, type, description, and status of the VLAN, status of the traffic statistics function, ports in the VLAN, and mode in which the ports are assigned to the VLAN. The total number of Vans is: 4 uur, D: Down, Te: Tagged UT: Untagged IMP: Vian-mapping; ST: Vian-stacking; # ProtocolTransparent-vian; _: Management-vian; VID Type Ports 1 common UT: GEQ/O/2(0)__GEDIOVE{D)—__GEO/AVA(D) __GEDIOYS(D) ‘SE0/0/6(0) GeO/O/7(0) —GED/0/B(0)_GEOIOy/3(0) Ge0/0/11(0) GeD/O/12(0) —GEN/O/I4(0) __GEDIO/15(0) GE0/0/16(0) GED/O/I7(0) —_GEO/ONIB(D) —_GEDIO/19(0) Ge0/0/20(0) GED/O/21(0) —_GED/O/z2(0) —_GED/0/23(0) Ge0/0/24(0) 2 common UT: GEO/ON(U) Te: GEO/0/10(U) 2 common Ur: GE0/0/13() TG: GEO/O/10(U) 10 common TG: GE0/0/10(U) VID Status Property MAC-LRN Statistics Description enable default enable disable VLAN 000" 2 enable default enable sable VLAN 0002 3 enable default enable disable VLAN 0003 40 enable defoult enable isable VLAN ODI (s2]display vian The total number of ans is: 4 us Us: 1: Downy Te: Tagged UT: Untaeged; MP: Vian-mapping: ST: Vian stacking; 4: ProtocelTransparent-vian; : Management-vian; VID Type Ports 1 common UT-GEO/ON(L) ——_GEDIOVA{0)_—_GEOIOVSID) —_GEDIOFAKO) Ge0/0/5(0) Geo/o/6(0) —GEO/O/7(0) —_GENIOya(0) G=0/0/9(0) GED/O/11(0) —_GEN/O/I2(0) —_GEDIO/13(0) GE0/0/15(0) GED/O/16(0) —_GEO/ONIT{O) —_GEDIO/&(0) Ge0/0/19(0) GE0/0/20(0) GEN/Oy21(0)—_GEO/0/22(0) GE0/0/23(0) GE0/0/24¢0) 2 common TG: GEO/O/10(U) 3 common Ur: Ge0/o/14(U) Ts: GEO/O/10(U) 10. common UT-GEQON(W) ——_GEDIONAID)._-—_GEO/O/3{0) Huawei confidential. Page 48 of 186we _Huawet HCIA-Datacom Lab Guide TG: GEO/0/10(U) VID Status Property MAC-LRN Statistics Description 1 enable default enable disable VLAN 0001 2 enable default enable sable VLAN ODUZ 2 enable default enable sable VLAN 0D03 10 enable default enable dsable VLAN 0010 # Display the MAC address-based VLAN configuration on the switch. [S2)display mac-vian van 10 MAC Address. MASK. Oteo-fere-a7a7_ A-R-AE Total MAC VLAN address count: 1 The display mac-vlan command displays the configuration of MAC address-based VLAN assignment. 3.1.3 Verification Test the device connectivity and verify the VLAN configuration. 1. Ping S4 from S3 and ensure that the ping operation is successful. 2. Ping other devices from R1 and ensure that the ping operation fails. Ping R1 from R3, capture packets on the link between S1 and $2, and ensure that the ping operation fails but data frames with VLAN 10 tag can be captured. 4. Run the display mac-address verbose command on S1 and S2 to check the MAC address tables on the switches. 3.1.4 Configuration Reference Configuration on $1 = sysname St * vlan batch 210.3 10 interface GigabitEthernet0/0/1 ore link-type access pore default vian 2 * Interface GiaabitEtherner0/0/10 ort link-type trunk Lunde port trun allow-pass vlan 7 ore trunk allov-pass vian 2 t0 310, * interface Gigabitethernet0/0/11 Huawei confidential. Page 49 of 186_Huawet HCIA-Datacom Lab Guide shutdown interface GigabitEthernet0/0/12 shutdown interface GigabitEthernet0/0/13 pore link-type access pore default vian 3 * Configuration on S2 + sysname S2 * vlan batch 2 to 3 10 = vlan 10 ‘mac-vian mac-address a008-6fe1-0¢46 priariy 0 + ierface GigabitEthernet0/0/1 port link-type hybrid ore hybrid untagged vlan 10, ‘mac-vian enable * Interface GigabitEthernet0/0/2 ore link-type hybrid port hybrid untagged wlan 10, rmac-vian enable * interface GigabitEthernet0/0/3 ore link-type hybrid port hybrid untagged vlan 10, rmac-vian enable Interface Gigabitethernero/o/10 pore link-type trunk undo port trunk allow-pass ian 1 ore trunk allow-pass van 2 t0 310 * interface GigabitEthernet0/0/11 shutdown * interface GigabitExhernet0/0/12 shutdown * interface GigabitExhernet0/0/14 port linketype access pore default vian 3 Huawei confidential. Page 50 of 186_Huawet HCIA-Datacom Lab Guide 3.1.5 Quiz 1. As shown in the following figure, to ensure the information security of a special service, only some special PCs can access the network through VLAN 10. How can this requirement be implemented on $1? GEO/0/2 GEO/0/1 GEO/0/1 \ {Simulating the . ‘special PC) Huawei confidential. Page 51 of 186we -HUAWEL HCIA-Datacom Lab Guide 3.2 Lab 2: Spanning Tree 3.2.1 Introduction 3.2.1.1 About This Lab On a switched Ethemet network, redundant links are used to implement link backup and enhance network availability. However, redundant links may produce loops, leading to broadcast storms and an unstable MAC address table, deteriorating or even interrupting communications. To prevent loops, IEEE introduced the Spanning Tree Protocol (STP). STP defined in IEEE 802.1D has evolved to the Rapid Spanning Tree Protocol (RSTP) defined in IEEE 802.1W, and the Multiple Spanning Tree Protocol (MSTP) defined in IEEE 802.15. In this lab activity, you will learn the basic STP configuration and understand its principles and some features of RSTP. 3.2.1.2 Objectives Upon completion of this task, you will be able to: Learn how to enable and disable STP/RSTP * Lear how to change the STP mode of a switch © Learn how to change bridge priorities to control the root bridge election © Learn how to change port priorities to control the election of the root port and designated port * Learn how to change port costs to control the election of the root port and designated port * Learn how to configure edge ports * Learn how to enable and disable RSTP 3.2.1.3 Networking Topology A company need to deploy redundant links on its Layer 2 switched network to improve network availability. In the meantime, the company also needs to deploy STP to prevent redundant links from forming loops and causing broadcast storms and MAC address flapping. Huawei confidential. Page 52 of 186we _Huawet HCIA-Datacom Lab Guide Figure 3-2 Lab topology for configuring STP S1 GEO/O/10 AGEO/0/11 GEO/O/13 \eg5* vor ‘o, lg GEO/0/1 3.2.2 Lab Configuration 3.2.2.1 Configuration Roadmap Enable STP. Change bridge priorities to control the root bridge election. Modify port parameters to determine the port role. Change the protocol to RSTP. Configure edge ports. yaw Ne 3.2.2.2 Configuration Procedure Step 1 Step 2 # Shut down unnecessary ports. This step applies only to the environment described in HCIA-Datacom Lab Construction Guide V1.0. # Shut down GigabitEthernet0/0/12 between S1 and $2. [sT]interface Gigabitsthernet 0/0/12 [51-Gigabitéthemet0/0/12}shutdown, [sZ]interface GigabitEtheret 0/0/12 [52-Gigabitétnemet0/0/12jshutdown Enable STP. # Enable STP globally. gstemview Enter system view, return user lew with CislsZ_ [st]stp enable Huawei confidential. Page 53 of 186_Huawet HCIA-Datacom Lab Guide The stp enable command enables STP, RSTP, or MSTP on a switching device or port. By default, STP, RSTP, or MSTP is enabled on switches. # Change the spanning tree mode to STP. [st]ste mode stp Ine: This operation may take a few seconds. Please wait for a moment .done. The stp mode{mstp | rstp | stp} command sets the operation mode of the spanning tree protocol on a switching device. By default, the switching device operates in MSTP mode. The spanning tree mode of the current device has been changed to STP. [s2]stp mode stp Ine: This operation may take a few seconds. Please wait for a moment..done. [stp mode stp Info: This operation may take a few seconds. Please wait for a moment .done. [s4]stp mode stp Info: This operation may take a few seconds, Please wait for a moment..done. # Display the spanning tree status. $1 is used as an example. [stsplay stp [OST Global Info][Mode ST?) cist Bridge ‘2768 dctf-cc33-7359 [ridge 10 of the device Config Times Hello 2s MawAge 20s FwDly 15s MaxHop 20 Active Times Hello 2s MawAge 20s FwDly 15s MaxHop 20 CIST Root/ERPC :32768.actf.cc10-5913 / 20000 JAD and path cast of the curent root bridge. IST RagRooW/iRPC 32768 4elF-cc33-7359 /0 GIST RootPorid 12814 BPOU-Protection Disabled TCorTCN received 47 TCcount perhello 0 STP Converge Mode Normal Time since last TCO days Oh:Om:38s, Number of TC 15 Last TC occured .Gigabitéthemeto/0/14 The displayed information also includes port status information, which isnot incladed inthe preceding output # Display the brief spanning tree information on each switch. [sTdisplay tp brief MSTID. Por Role STP State Protection 0 Gigabitethernew/oni0 DESL FORWARDING NONE © Gigabitethernet/o/11 DESL FORWARDING NONE 0 Gigabitetherneto/on's DESL FORWARDING NONE © Gigabitetherneto/o/'¢ ROOT FORWARDING. NONE Huawei confidential. Page 54 of 186we -HUAWEL HCIA-Datacom Lab Guide [s2]isplay sp brief MSTID Port Role STP State Protection © Gigabitetherneto/o/10 ALTE DISCARDING NONE © Gigabitetherneto/o/11 ALTE DISCARDING NONE 0 Gigabitetherneto/o/13 DES! FORWARDING NONE © Gigabitetherneto/o/14 ROOT FORWARDING NONE [sSldisplay tp bret MSTID Pore Role STP State Protection © Gigabitetherneto/o/1 ALTE DISCARDING NONE © Gigabitetherneto/oy2 ALTE DISCARDING NONE 0 Gigabitetherneto/0/3 ROOT FORWARDING NONE [s4]display stp bret MSTID_ Port Role STP State Protection 0 Gigabitétherneto/oy DESI FORWARDING NONE © Gigabitetherneto/0y2 DES! FORWARDING NONE © Gigabitetherneto/oys DESI FORWARDING NONE # Based on the root bridge ID and port information on each switch, the current topology is as follows: S1 S2 GE0/0/10 DP AP GE0/0/' GEO/O/3 Root Bridgee RP DP DP Designated po 53 s4 AP Alternate Port RP Root Port The dotted line indicates that the link does not forward service data. CO NoTE ‘This topology is for reference only and may not be the same as the actual spanning tree topology in the lab environment. ‘Step 3. Modify device parameters to make S1 the root bridge and S2 the secondary root bridge. Huawei confidential. Page 55 of 186_Huawet HCIA-Datacom Lab Guide # Change the bridge priorities of $1 and S2. {51Isto root primary Owning to the importance of the root bridge, the switch with high performance and network hierarchy is generally chosen as a root bridge. The priority of such a device, however, may be not that high. Therefore, setting a high priority for the switch is necessary so that the switch can be elected as the root bridge. The stp root command configures the switch as a root bridge or secondary root bridge of a spanning tree. © The stp root primary command specifies a switch as the root switching device. In this case, the priority value of the switch is 0 in the spanning tree and the priority cannot be changed. The stp root secondary command specifies a switch as the secondary root bridge. In this case, the priority value of the switch is 4096 and the priority cannot be changed. [S2]sp root secondary # Display the STP status on S1 [stldisplay stp [CST Global nfo][Mode st?) ist Bridge 0 dct fec33-7359 [fridge 1D ofthe device, Config Times Hello 25 MaxAge 20s FeyDly 153 MaxtHop 20, Active Times Hello 2s MaxAge 20s FevDly 15s Maxtop 20, IST Root/ERPC © Ac1foce33-7359/ 0 71D and path cost ofthe current root bridge IST RegRoat/IRPC 0 Aeifer32-7359/0 ST RootPortd 00 POU Protection Disabled ST Root Type Primary root TCor TEN received a4 TC count per hello 2 STP Converge Mode Normal Time since last TC ‘0 days Oh-im44s Number of TC 2 Lam TC occured co pe op ve RP AP GEO/O/1_GEO/O/2 £0/0/3 GE0/0/3 AP DP DP Designated Pot 93 s4 AP Alternate Port RP Root Port Step 4 Modify device parameters to make GigabitEthernet0/0/2 of S4 the root port. # Display the STP information on S4. (séldisplay stp {CST Global Info] Mode STP]-——~ st Bridge 2768 4cIf-cc10-5913 Config Times Hello 25 MaxAge 20s FwDly 15s Maxton 20 Active Times Hello 25 MaxAge 20s FeyDly 15s MaxHop 20 CisT Root/ERPC ‘0 Acif-ce33-7359 / 20000 ST ReaRootiRPC S27684c1f-cc10-5913 / 0 ST RootPortd 128.1 Huawei confidential. Page 57 of 186_Huawet HCIA-Datacom Lab Guide POU Protection Disabled TCor TEN received 3 TC count per hello 2 STP Converge Mode ‘Normal Time since last TC 0 days OnSm5s Number of TC 18 Lar TC occured Gigabitetnernet0/0/1 The cost ofthe oot path from $4 to St is 20000 # Change the STP cost of GigabitEthernet 0/0/1 on $4 to 50000. [Sélinterface Gigabitethemet 0/0/1 [54-Gigabitéthemet0/0/"]stp cost 50000 # Display the brief STP status information. [S]isplay stp bret MSTID Port Role STP State Protection © Gigabitetherneto/o/t ALTE DISCARDING NONE 0 Gigabitetherneto/0y2 ROOT FORWARDING NONE © Gigabitetherneto/0y3 ALTE DISCARDING NONE Gigabit thermet0/0/2 on 54 has become the root port # Display the current STP status information. [sldisplay stp [OST Global InfolEMode STP) cast Bridge S2768AcIf-» GEO/O/13 eae “On> GEO/0/1 2. Disable any port on any switch and check whether the traffic can reach all other switches through the backup links. Huawei confidential. Page 60 of 186we _Huawet HCIA-Datacom Lab Guide 3.2.4 Configuration Reference Configuration on $1 sysname ST * stp mode stp stp instance 0 root primary * interface GigabitExhernet0/0/12 shutdown * return Configuration on S2 * sysname 52 * sip mode rtp stp instance 0 root secondary * ineerface GigabitEthernet0/0/12 shutdown * Configuration on $3 = sysname S3 * sip mode rtp interface GigabitEthernet0/0/10 stp edged-por enable interface Gigabitetherneto/0/11 stp edged-por enable interface GigabitEthernet0/0/12 stp edged-por enable interface GigabitEthernet0/0/13 sto edged-por enable interface GigabitEthernet0/0/14 sto edged-por enable # interface GigabitEthernet0/0/15 stp edged-port enable + Interface GigabitEthernet0/0/16 stp edged-port enable Huawei confidential. Page 61 of 186_Huawet HCIA-Datacom Lab Guide incerface GigabitEthernet0/0/17 sto edged-port enable * ineerface GigabitEthernet0/0/18 sto edged-port enable * ineerface GigabitEtherner0/0/19 stp edged-por enable * ineerface GigabitEthernet0/0/20 stp edged-port enable * incerface GigabitEthernet0/0/21 stp edged-port enable * ineerface GigabitEthernet0/0/22 stp edged-port enable * Interface GiaabitEtherner0/0/23 stp edged-port enable * interface GiaabitEtherner0/0/24 sto edged-port enable * reum Configuration on S4 * sysname 54 z stp mode rtp Interface Gigabitethernero/0/1 stp instance O cost 5000 3.2.5 Quiz 1. In step 3, if the cost of GigabitEthernet 0/0/14 on S1 is changed to 50000, can the desired result be achieved? Why? In the current topology, modify the configuration to make GigabitEthernet0/0/11 of $2 the root port. 3. Can the two links between S1 and S2 be in the forwarding state at the same time? Why? Huawei confidential. Page 62 of 186“Huawer HCIA-Datacom Lab Guide 3.3 Lab 3: Ethernet Link Aggregation 3.3.1 Introduction 3.3.1.1 About This Lab As networks grow in scale, users require Ethernet backbone networks to provide higher bandwidth and availability. In the past, the only way to increase bandwidth was to upgrade the network with high-speed LPUs, which is costly and inflexible. In contrast, link aggregation increases bandwidth by bundling a group of physical port into a single logical port, without the need to upgrade hardware. In addition, link aggregation provides link backup mechanisms, greatly improving link availat Link aggregation has the following advantages: Improving bandwidth: The maximum bandwidth of a link aggregation group (LAG) is the combined bandwidth of all member links. © Improving availability: Ifa link is faulty, the traffic can be switched to other available member links. * Load balancing: The traffic load can be balanced among the active member links in a LAG. In this lab activity, you will learn how to configure Ethernet link aggregation in manual and LACP modes. 3.3.1.2 Objectives Upon completion of this task, you will be able to: * Learn how to manually configure link aggregation * Learn how to configure link aggregation in static LACP mode * Lear how to determine active links in static LACP mode * Learn how to configure some static LACP features 3.3.1.3 Networking Topology In the spanning tree lab activity, the two links between $1 and $2 cannot be in the data forwarding state at the same time. To make full use of the bandwidth of the two links, you need to configure Ethernet link aggregation between $1 and 2. Figure 3-3 Lab topology for configuring Ethernet link aggregation S1 GEO/0/10 GEO/0/10. $2 RR seo cn JA sE0/of12_—— 002 Huawei confidential. Page 63 of 186we _Huawet HCIA-Datacom Lab Guide 3.3.2 Lab Configuration 3.3.2.1 Configuration Roadmap Configure link aggregation manually. Configure link aggregation in LACP mode, Modify parameters to determine active links. Beno Change the load balancing mode. 3.3.2.2 Configuration Procedure Step 1 Configure link aggregation manually. # Create an Eth-Trunk. [Stlinerface Eth-Teunk 1 The interface eth-trunk command displays the view of an existing Eth-Trunk or creates an Eth-Trunk and displays its view. The number 1 in this example indicates the port number. [s2]interface Eth-Trunke 1 # Configure the link aggregation mode of the Eth-Trunk. [S1-£th-Trunkt]mode manual load-balance: The mode command configures the working mode of the Eth-Trunk, which can be LACP or manual load balancing. By default, the manual load balancing mode is used, Therefore, the preceding operation is unnecessary and is provided for demonstration purpose only. # Add a port to the Eth-Trunk. [Stinterface Gigabitetheret 0/0/10 [s1-Gigabitéthemeto/0/1Ojet-trunk 1 Info: This operation may take a few seconds. Please wait for a moment..done. [S1-Gigabitéthnemet0/0/10}quit [sTinterface Gigabitethernet 0/0/11 [S1-Gigabitéthemet0/0/11eth-trunk 1 Inf: This operation may take a few seconds, Please wait for a moment..done. [s1-Gigabitethemet0/0/1 Tquit [Stinterface GigabitEtheret 0/0/12 [51-Gigabitéthemet0/0/12eth-trunk + Inf: This operation may take a few seconds, Please wait for a moment..done. [st-Gigabitzenemet0/0/12}quit You can enter the interface view of an individual port and add it to an Eth-Trunk, You can also run the trunkport command in the Eth-Trunk interface view to add multiple ports to the Eth-Trunk. [s2]interface Eth-Trunke 1 [52-Eth-Trunk1]trunkport GigabitEthernet 0/0/10 to 0/0/12 Info: Ths operation may take a few seconds, Please walt for a moment..done. Huawei confidential. Page 64 of 186_Huawet HCIA-Datacom Lab Guide Step 2 Note the following points when adding physical ports to an Eth-Trunk: © An Eth-Trunk contains a maximum of 8 member ports. © An Eth-Trunk cannot be added to another Eth-Trunk, * An Ethernet port can be added to only one Eth-Trunk. To add an Ethernet port to another Eth-Trunk, delete it from the original one first. * The remote ports directly connected to the local Eth-Trunk member ports must also be added to an Eth-Trunk; otherwise, the two ends cannot communicate. * Both endpoints of an Eth-Trunk must use the same number of physical ports, port rate, and duplex mode. # Display the status of an Eth-Trunk. [St}splay eth-trnk 1 Eth-Trunk''s state information is WerkinaMode: NORMAL Hash arithmetic: According to SIP-XOR-DIP Least Actve-linkaumber: 1 ‘Max Banduwidth-affected-linknumber: 32 Operate status: up Number Of Up Port In Trunke 3 PortName staus Weight Gigabitetherneto/a/10 Up 1 Gigabitetnernet0/0/11 Up 1 GGigabitethernero/a/12 up 1 Configure link aggregation in LACP mode. # Delete member ports from an Eth-Trunk. [sTlinterface Eth-Trunk 1 [51-£th-TrunktJundo trunkport GigabitEthernet 0/0/10 t 0/0/12 Inf: This operation may take a few seconds, Please wait for a moment..done. [s2]interface Eth-Trunke 1 [S2-Eth-Trunkt]undo trunkport GigabitEthernet 0/0/10 to 0/0/12 Inf: This operation may take a few seconds. Please wait for a moment..done. Before changing the working mode of an Eth-Trunk, ensure that the Eth-Trunk has no member port: # Change the aggregation mode. [STlinterface Eth-Trunke 1 [st-Eth-Trunkt]mode laco The mode lacp command sets the working mode of an Eth-Trunk to LACP. Note: The command is mode lacp-static in some versions. [s2]interface Eth-Trunk 1 [s2-Eth-Trunki]mode lacp # Add a port to the Eth-Trunk. Huawei confidential. Page 65 of 186