JNCIS-SP lab 16 of 16
Capstone - a new provider site
Build a customer service from a design sheet: dual-stack IS-IS, RSVP LSPs with a standby, a LACP bundle to the customer's switch with IRB, and BGP with aggregates, a conditional default and communities. Then fail the core and prove it survives.
Run this lab
It needs Standard: its 6 nodes are set to 11 vCPU and 14,592 MB in total.
In your workspace: Shared, then JNCIS-SP JN0-364 guided labs, then 16 - Capstone - a new provider site
- Level
- Advanced
- Time
- About 150 minutes
- Nodes need
- 11 vCPU, 14,592 MB
- Smallest plan
- Standard
The scenario
Skerry has won a contract: join a customer's Malton offices (H1, behind SW1) to its remote site (CE2, AS 65002). You have three new routers with addresses and nothing else. SW1, H1 and CE2 are ready. Build the service from this design, with no step-by-step help. The hints and solution are there if you need them.
| Item | Design |
|---|---|
| Loopbacks | PE1 10.255.0.1, P1 10.255.0.2, PE2 10.255.0.3. IPv6 2001:db8:255::N/128 |
| Core links | PE1 to P1 10.0.12.0/30, P1 to PE2 10.0.23.0/30, PE1 to PE2 10.0.13.0/30. IPv6 2001:db8:0:XY::N/64, as on the IPv4 subnet names |
| IS-IS | Level 2 only, wide metrics only, NETs 49.0001.0000.0000.000N.00, point-to-point, loopbacks passive. Metric 100 on the direct link |
| MPLS | RSVP on all core links. LSPs TO-PE2 and TO-PE1 between the PEs |
| Protection | TO-PE2 has a primary path with no hops and a standby DIRECT through 10.0.13.2. |
| Core rule | P1 runs no BGP |
| BGP | AS 64510, IBGP between PE loopbacks with next-hop self. EBGP from PE2 to CE2 at 172.16.2.2 |
| PE1 to SW1 | ae0, LACP active, members ge-0/0/2 and ge-0/0/3, trunk for VLAN 100 |
| Customer VLAN | Bridge domain V100, irb.100 198.19.1.1/24 and 2001:db8:1::1/64 |
| Announcements | PE1 announces only the aggregate 198.19.0.0/16 in IBGP |
| CE2 receives | Only 198.19.0.0/16, and a default generated on PE2 that exists only while 198.19.0.0/16 is present |
| CE2 sends | Accept only 198.18.2.0/24, tagged with community 64510:200 |
What you’ll practise
- Plan and build a provider service end to end
- Combine IS-IS, RSVP, BGP, bridging and LAG
- Express a design as routing policy
- Test the protection by failing the active path
The tasks
- The core IGP
- MPLS with a standby path
- The customer edge at Layer 2
- BGP and policy
- Prove the protection
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- H1
eth0to SW1Gi0/2 - SW1
Gi0/0to PE1ge-0/0/2 - SW1
Gi0/1to PE1ge-0/0/3 - PE1
ge-0/0/0to P1ge-0/0/0 - P1
ge-0/0/1to PE2ge-0/0/0 - PE1
ge-0/0/1to PE2ge-0/0/1 - PE2
ge-0/0/2to CE2Gi0/0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| H1 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
| SW1 | Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB |
| PE1 | Juniper vJunos-router | vjunosrouter-24.2R1-S2.5 | 4 vCPU, 5,120 MB |
| P1 | Juniper vSRX NextGen template | vsrxng-24.4R1.9 | 2 vCPU, 3,584 MB |
| PE2 | Juniper vSRX NextGen template | vsrxng-24.4R1.9 | 2 vCPU, 3,584 MB |
| CE2 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
JNCIS-SP JN0-364 guided labs.Open
16 - Capstone - a new provider siteand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More JNCIS-SP labs
Related labs in other courses
CloudLabBox is independent of Cisco and Juniper Networks. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.