HCIP-Datacom Core lab 2 of 14
OSPF route control
Join a stranded area with a virtual link, summarise at the ABR and the ASBR, keep a network inside its area, send a default route, steer traffic with cost, and protect the backbone with HMAC-SHA256.
Run this lab
It needs Standard: its 6 nodes are set to 6 vCPU and 10,240 MB in total.
In your workspace: Shared, then HCIP-Datacom Core H12-821 guided labs, then 02 - OSPF route control
- Level
- Advanced
- Time
- About 80 minutes
- Nodes need
- 6 vCPU, 10,240 MB
- Smallest plan
- Standard
The scenario
Bristol (area 1) has four office networks and a lab network that must stay in Bristol. Leeds has two partner networks. A new Leeds office LAN has just been put in area 3 on R4, and nobody can reach it, because area 3 doesn't touch the backbone. The core link between R2 and R3 has been doubled, and security wants the backbone authenticated. Your job is to fix the stranded area and then make OSPF advertise only what it should.
| Router | LoopBack0 | Interfaces |
|---|---|---|
| R1 | 1.1.1.1 | GE0/0/0 10.0.12.1/24, GE0/0/1 192.168.1.1/24 (PC1 .10), LoopBack1-4 172.16.0-3.1/24 (offices), LoopBack5 10.99.0.1/24 (lab network) |
| R2 (ABR) | 2.2.2.2 | GE0/0/0 10.0.12.2/24 (area 1), GE0/0/1 10.0.23.2/24, GE0/0/2 10.0.32.2/24 (area 0) |
| R3 (ABR) | 3.3.3.3 | GE0/0/0 10.0.23.3/24, GE0/0/2 10.0.32.3/24 (area 0), GE0/0/1 10.0.34.3/24 (area 2) |
| R4 (ASBR) | 4.4.4.4 | GE0/0/0 10.0.34.4/24 (area 2), GE0/0/1 192.168.4.1/24 (area 3, PC2 .10), LoopBack8 198.51.100.1/25, LoopBack9 198.51.100.129/25 (partners) |
The office and lab loopbacks use ospf network-type broadcast, so they appear as /24 routes rather than /32.
What you’ll practise
- Repair a disconnected area with a virtual link
- Summarise inter-area routes with abr-summary and external routes with asbr-summary
- Filter Type 3 LSAs at an ABR, and say how that differs from filter-policy import
- Originate a default route with default-route-advertise
- Change ECMP to a single path with interface cost
- Authenticate an area with HMAC-SHA256
The tasks
- Task 0: Load the starting configuration
- Concept: virtual links
- Task 1: Connect area 3
- Concept: summarising
- Task 2: Summarise the Bristol offices
- Concept: two kinds of filter
- Task 3: Keep the lab network in Bristol
- Task 4: Summarise the partner networks
- Concept: default routes in OSPF
- Task 5: Send a default route from R3
- Concept: cost and reference bandwidth
- Task 6: Make GE0/0/2 the backup core link
- Concept: authentication
- Task 7: Authenticate the backbone
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- R1
GE0/0/0to R2GE0/0/0 - R2
GE0/0/1to R3GE0/0/0 - R2
GE0/0/2to R3GE0/0/2 - R3
GE0/0/1to R4GE0/0/0 - R1
GE0/0/1to PC1eth0 - R4
GE0/0/1to PC2eth0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| R1 | Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB |
| R2 | Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB |
| R3 | Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB |
| R4 | Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB |
| PC1 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
| PC2 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
HCIP-Datacom Core H12-821 guided labs.Open
02 - OSPF route controland start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More HCIP-Datacom Core labs
Related labs in other courses
CloudLabBox is independent of Huawei. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.