TSHOOT - Layer 2 and Layer 3 topology Question

Like I post it before I'm trying to complete the TSHOOT topology on GNS3. So far no need on hardware, just GNS3. I'm stuck on the Layer 2 and Layer 3 topology config. If you see the second page on the TSHOOT topology PDFhttps://learningnetwork.cisco.com/servlet/JiveServlet/download/52366-8599/TSHOOT Exam Topology.pdf
As you can see they want VLAN 10 going DSW1. Let see if I'm right. Do they want us to config all the portchannel with the switchport allow vlan command?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

AlanJames

ASW1 has two trunks to to both DSW1 and DSW2 both set up as a ether channel. vlan 10 will be allowed through both of them, Just the active gateway for vl 10 resides on DSW1

stuh84

Have a look at my blog on it if you need help

TSHOOT - How to do the topology with only minor bastardizations | Working From My Shed

Thats how I went about it.

creamy_stew

stuh84 wrote: »

Have a look at my blog on it if you need help

TSHOOT - How to do the topology with only minor bastardizations | Working From My Shed

Thats how I went about it.

You did that in 3 hours? Looks great! Bookmarked for when I finish ROUTE.

stuh84

creamy_stew wrote: »

You did that in 3 hours? Looks great! Bookmarked for when I finish ROUTE.

Yeah, I'm a quick typer

I'd already built the topology a day or two before, so it was a case of documenting it all and going through each bit.

Bear in mind that so far, the TSHOOT is the only networking exam I passed on my first attempt, so I definitely found something in the TSHOOT that sat right with me, hence being able to knock all that out

creamy_stew

stuh84 wrote: »

Yeah, I'm a quick typer

I'd already built the topology a day or two before, so it was a case of documenting it all and going through each bit.

Bear in mind that so far, the TSHOOT is the only networking exam I passed on my first attempt, so I definitely found something in the TSHOOT that sat right with me, hence being able to knock all that out

You're probably one of those "learn by doing" types (who tend to remember things) , me, I'm more of the bookworm type

I mean, I can usually apply what I've learned fairly quickly, as long as it hasn't been a couple of years, but it never becomes second nature until I've tried it out in production.

edit: I just updated my sig in your honour

Trifidw

stuh84 wrote: »

Have a look at my blog on it if you need help

TSHOOT - How to do the topology with only minor bastardizations | Working From My Shed

Thats how I went about it.

Book marked for future reference too.

Thanks.

amb1s1

stuh84 wrote: »

Have a look at my blog on it if you need help

TSHOOT - How to do the topology with only minor bastardizations | Working From My Shed

Thats how I went about it.

Nice post, that post just confirm that I was doing the right way. The way that you config yout topology is the exact way that I config mine, but the part that I'm not sure what is the right way is the only thing that you didn't write in your post. Unless I missed it, I don't see where did you config the vlan trunk allow. I already bookmaker, and BTW, I'm learning by doing.

amb1s1

I'm actually asking questions instead of testing on my lab because I don't have access to my lab, and everything that I'm doing is on my head and thinking does this work or not, Ping doesn't work on my brain.

stuh84

creamy_stew wrote: »

You're probably one of those "learn by doing" types (who tend to remember things) , me, I'm more of the bookworm type

I mean, I can usually apply what I've learned fairly quickly, as long as it hasn't been a couple of years, but it never becomes second nature until I've tried it out in production.

edit: I just updated my sig in your honour

Haha thanks for the mention in the sig

I'd say I'm half and half, I go through the books, pick up what I can, but I dont REALLY understand it until I'm making my own labs, and then go back and re-read everything.

It means I end up covering everything a good 3 or 4 times, and also means for anything that is purely theory (the Wireless and Voice sections in the BCMSN/SWITCH for example) I have to spend a LOT longer on than I'd like.

amb:
I'm configuring the VLAN allows on the port channels rather than on any individual trunks. Thats how the topology seems to point towards, so its how I approached it: -

DSW1(config)# int Po13
DSW1(config-if)# switchport mode trunk
DSW1(config-if)# switchport trunk allowed vlan 10,200
DSW1(config-if)# switchport trunk native vlan 200

It's on the page, theres just a lot of info on that page....

Edit: Forgot to mention, if you go to the very bottom of the page before the comments on my TSHOOT post, I've got the configs I used in there on all switches and routers, so if you get stuck, you can take a look there and see what you may be missing.

creamy_stew

stuh84 wrote: »

Haha thanks for the mention in the sig

It means I end up covering everything a good 3 or 4 times, and also means for anything that is purely theory (the Wireless and Voice sections in the BCMSN/SWITCH for example) I have to spend a LOT longer on than I'd like.

Well, that actually sounds a bit like me after all. I have a pretty good grasp of the basics of VoIP, having designed and implemented QoS on a corporate WAN. The actual VoIP equipment wasn't cisco, though.

The Wireless just makes me wanna punch a mutha out, though

amb1s1

Ok I configure the allowing vlan and everything looks good. So I pass that part of the topology, now I configured EIGRP on Router 4, DSW1 and DSW2, I can see all the network on the ip route. I can ping the 192.168.1.129 and .130 on DSW1 and DSW2, but when I try to ping 192.168.1.131 and .132 from ASW1 and ASW2, ping failed.

Router4:

router eigrp 10
 network 10.1.4.4 0.0.0.3
 network 10.1.4.8 0.0.0.3
 auto-summary

DSW1:

router eigrp 10
 network 10.1.4.4 0.0.0.3
 network 10.2.1.0 0.0.0.255
 network 10.2.2.0 0.0.0.255
 network 192.168.1.128 0.0.0.31
 no auto-summary

DSW2:

router eigrp 10
 network 10.1.4.8 0.0.0.3
 network 10.2.1.0 0.0.0.255
 network 10.2.2.0 0.0.0.255
 network 192.168.1.128 0.0.0.31
 no auto-summary

The IP Route Output for

Router4:

     10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
C       10.1.1.8/30 is directly connected, Serial0/0.1
C       10.1.4.8/30 is directly connected, FastEthernet2/0
D       10.2.1.0/24 [90/30720] via 10.1.4.10, 00:19:22, FastEthernet2/0
                    [90/30720] via 10.1.4.6, 00:19:22, FastEthernet1/0
D       10.2.2.0/24 [90/30720] via 10.1.4.10, 00:19:22, FastEthernet2/0
                    [90/30720] via 10.1.4.6, 00:19:22, FastEthernet1/0
C       10.1.4.4/30 is directly connected, FastEthernet1/0
     192.168.1.0/27 is subnetted, 1 subnets
D       192.168.1.128 [90/30720] via 10.1.4.10, 00:19:22, FastEthernet2/0
                      [90/30720] via 10.1.4.6, 00:19:22, FastEthernet1/0

DSW1

     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
D       10.1.4.8/30 [90/30720] via 192.168.1.130, 00:15:33, Vlan200
                    [90/30720] via 10.2.2.1, 00:15:33, Vlan20
                    [90/30720] via 10.2.1.2, 00:15:33, Vlan10
                    [90/30720] via 10.1.4.5, 00:15:33, FastEthernet0/0
C       10.2.1.0/24 is directly connected, Vlan10
C       10.2.2.0/24 is directly connected, Vlan20
C       10.1.4.4/30 is directly connected, FastEthernet0/0
     192.168.1.0/27 is subnetted, 1 subnets
C       192.168.1.128 is directly connected, Vlan200

DSW2

     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
C       10.1.4.8/30 is directly connected, FastEthernet0/0
C       10.2.1.0/24 is directly connected, Vlan10
C       10.2.2.0/24 is directly connected, Vlan20
D       10.1.4.4/30 [90/30720] via 192.168.1.129, 00:16:15, Vlan200
                    [90/30720] via 10.2.2.2, 00:16:15, Vlan20
                    [90/30720] via 10.2.1.1, 00:16:15, Vlan10
                    [90/30720] via 10.1.4.9, 00:16:15, FastEthernet0/0
     192.168.1.0/27 is subnetted, 1 subnets
C       192.168.1.128 is directly connected, Vlan200

stuh84

Just to make sure, are you using vlan 200 as the Native VLAN on all the trunks? If so, do you have an SVI for Vlan200 on ASW1 and ASW2?

amb1s1

stuh84 wrote: »

Just to make sure, are you using vlan 200 as the Native VLAN on all the trunks? If so, do you have an SVI for Vlan200 on ASW1 and ASW2?

Yes, I have. I can ping 192.168.1.129 and 130 (DSW1 and DSW2) From 192.168.1.131 and .132 (ASW1 and ASW2).

stuh84

How about if you ping with a source interface of vlan 200?

amb1s1

stuh84 wrote: »

How about if you ping with a source interface of vlan 200?

I ping DSW1 from ASW2 source ip, I was getting reply.

amb1s1

Hey Stuh84, how many interface on DSW1 and DSW2 you have on layer 3 cause I just notice that I havent assign an ip address to the interfaces on DSW1 and DSW2. While I was going back to the Layer 3 topology on the PDF, I noticed that I see that the DSW1 and DSW2 have four interfaces with IP address. For Example on DSW1, ip address .6, .13, .2 and 1. Does .1 and .2 for vlan 10 and 20?

stuh84

Yeah just noticed that, I think I eventually did do the IPs later, but initially I didn't have enough cables. I did assign IPs to the ones in the Layer2/3 topology, and just kind of ignored the trunk between DSW1 and DSW2