CCNP ENCOR lab 24 of 36
Diagnose with ping, traceroute, debugs, syslog and SNMP
Use the network engineer's everyday tools on Fernhill's WAN: extended ping to find a path MTU, traceroute and conditional debugging to find a filter, then send every router's logs to the NOC and poll them with SNMPv2c and SNMPv3 from a Linux workstation.
Run this lab
It needs Lite: its 4 nodes are set to 4 vCPU and 2,560 MB in total. That fits the free demo too.
In your workspace: Shared, then CCNP ENCOR 350-401 guided labs, then 24 - Diagnose with ping traceroute debugs syslog and SNMP
- Level
- Intermediate
- Time
- About 75 minutes
- Nodes need
- 4 vCPU, 2,560 MB
- Smallest plan
- Lite
The scenario
Two complaints have reached Fernhill Freight's network team: Bristol users say file uploads to HQ hang while web browsing works, and the NOC says its traceroutes to the HQ servers "die after the WAN". The NOC also wants every router's log messages in one place and wants to poll the routers with SNMP from its Linux workstation (NMS). You'll diagnose both complaints with the standard tools, then set up syslog and SNMP.
| Device | Interface | Address |
|---|---|---|
| R1 (Bristol) | Gi0/0 / Lo0 / Lo10 | 10.0.12.1/30 / 10.255.0.1 / 10.20.10.1/24 |
| R2 (WAN) | Gi0/0 / Gi0/1 / Lo0 | 10.0.12.2/30 / 10.0.23.1/30 (carrier link) / 10.255.0.2 |
| R3 (HQ) | Gi0/0 / Gi0/1 / Lo0 / Lo10 | 10.0.23.2/30 / 10.10.50.1/24 / 10.255.0.3 / 10.10.30.1/24 |
| NMS (Ubuntu desktop) | eth0 | 10.10.50.100/24 |
OSPF connects everything. NMS's console is a desktop: open Applications → System Tools → MATE Terminal (you're root).
Lab values: SNMPv2c community Fh-RO-2026; SNMPv3 user nms, group NMS-RO, SHA password AuthPass1!, AES-128 password PrivPass1!.
Topology: R1 — R2 — R3 — NMS.
What you’ll practise
- Use extended ping (size, DF bit, source, sweep) and traceroute to locate a problem
- Limit debug output with ACLs and conditional debugging, and use terminal monitor safely
- Configure syslog levels, timestamps, source interface and a remote syslog server
- Configure SNMPv2c with an ACL-protected community and SNMPv3 with authentication and encryption
- Poll routers with snmpget and snmpwalk and read remote syslog on a Linux NOC host
The tasks
- Find the path MTU with extended ping
- Fix the uploads
- Find where traceroute dies
- Watch it with a conditional debug
- Let traceroute through
- Send the logs to the NOC
- Poll the routers with SNMP
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- R1
Gi0/0to R2Gi0/0 - R2
Gi0/1to R3Gi0/0 - R3
Gi0/1to NMSeth0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| R1 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| R2 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| R3 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| NMS | EVE-NG GUI server (Docker) | eve-gui-server:latest | 1 vCPU, 1,024 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
CCNP ENCOR 350-401 guided labs.Open
24 - Diagnose with ping traceroute debugs syslog and SNMPand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More CCNP ENCOR labs
Related labs in other courses
CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.