JNCIA-Junos lab 15 of 15

Capstone troubleshooting

The final exam for the course: a three-router OSPF network with routing policy and a loopback filter, broken in six places that hide behind each other. Restore the design from four trouble tickets using everything you have learned.

Run this lab

It needs Standard: its 3 nodes are set to 12 vCPU and 15,360 MB in total.

In your workspace: Shared, then JNCIA-Junos JN0-106 guided labs, then 15 - Capstone troubleshooting

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 12 vCPU and 15,360 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 75 minutes
Nodes need
12 vCPU, 15,360 MB
Smallest plan
Standard

The scenario

This is the network you built across the course, and it has had a bad week. After several "small changes" by different people, four trouble tickets are open. The network contains six faults. Restore it to the design without adding anything the design does not contain.

The design

  • OSPF area 0 everywhere. Router-to-router links are point-to-point; LANs and loopbacks are passive. reference-bandwidth 100g on every router.
  • The HQ-DEPOT link is a microwave backup with OSPF metric 500 on both ends, so HQ-DEPOT traffic normally runs over the fibre through WH.
  • DEPOT exports the customer sites 10.40.0.0/24, 10.40.1.0/24 and 10.40.2.0/24 (static routes via 10.4.0.254) into OSPF with policy CUSTOMERS.
  • HQ protects its routing engine with filter PROTECT-RE on lo0: OSPF, SSH from the HQ LAN, ICMP and traceroute are accepted; everything else is counted, logged and discarded.
RouterRouter IDLANLinks
HQ192.168.255.110.1.0.1/24ge-0/0/0 172.16.14.1/30 (microwave to DEPOT), ge-0/0/1 172.16.12.1/30 (fibre to WH)
WH192.168.255.210.2.0.1/24ge-0/0/0 172.16.12.2/30 (fibre to HQ), ge-0/0/1 172.16.24.1/30 (fibre to DEPOT)
DEPOT192.168.255.410.4.0.1/24ge-0/0/0 172.16.14.2/30 (microwave to HQ), ge-0/0/1 172.16.24.2/30 (fibre to WH)

The tickets

  1. "HQ has no OSPF neighbours at all."
  2. "Nobody can reach the warehouse LAN, 10.2.0.0/24."
  3. "The customer sites behind the depot are unreachable from HQ and the warehouse."
  4. "Traffic from the depot to HQ is crossing the microwave link." (You can only see this one once the depot has a neighbour on that link.)

What you’ll practise

  • Diagnose OSPF adjacency failures: filtered packets, area mismatches and timer mismatches
  • Find interfaces missing from OSPF and paths that ignore the intended metrics
  • Find a routing policy whose term order blocks every route
  • Find a firewall filter whose term order discards routing-protocol traffic
  • Prove the fixed network against its design

The tasks

  1. Ticket 1: HQ has no neighbours
  2. Ticket 2: the warehouse LAN
  3. Ticket 3: customer sites
  4. Ticket 4: the microwave path

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Capstone troubleshooting3 nodes and 3 networks, 6 links. Every link is listed as text below the diagram.HQWHDEPOTHQ-LANWH-LANDEPOT-LANge-0/0/2ge-0/0/2ge-0/0/2ge-0/0/0ge-0/0/0ge-0/0/1ge-0/0/0ge-0/0/1ge-0/0/1
3 nodes and 3 networks, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Nodes in Capstone troubleshooting, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
HQJuniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB
WHJuniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB
DEPOTJuniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder JNCIA-Junos JN0-106 guided labs.

  3. Open 15 - Capstone troubleshooting and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More JNCIA-Junos labs

All JNCIA-Junos labs

Related labs in other courses

CloudLabBox is independent of Juniper Networks. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.