Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,131 @@
# CCNP TSHOOT Troubleshooting 1

This is a containerlab implementation of the CCNP TSHOOT Troubleshooting Lab 1, converted from the original GNS3 topology.

## Overview

This lab provides a pre-configured troubleshooting scenario based on the official Cisco CCNP TSHOOT topology. The network is intentionally "broken" to help you develop troubleshooting skills.

## Topology

The lab consists of:
- **5 Routers**: R1, R2, R3, R4, ISP
- **4 Switches**: DSW1 (L3), DSW2 (L3), ASW1 (L2), ASW2 (L2)
- **4 Endpoints**: Client1, Client2, FTPServer, WebServer

### Network Segments

- **Core Network**: OSPF routing between R1-R2-R3-R4
- **BGP AS 65001**: R1 connected to ISP
- **BGP AS 65002**: ISP providing external connectivity
- **Distribution Layer**: EIGRP between R4 and DSW1/DSW2
- **Access Layer**: VLANs 10, 20, and 200

### VLANs

- **VLAN 10**: Client network (10.2.1.0/24)
- **VLAN 20**: FTP server network (10.2.2.0/24)
- **VLAN 200**: Management network (192.168.1.128/27)

## Deployment

To deploy this lab:

```bash
cd containerlab/labs/troubleshooting/cisco/ccnp-tshoot-troubleshooting-1
sudo containerlab deploy -t ccnp-tshoot-troubleshooting-1.clab.yml
```

To destroy the lab:

```bash
sudo containerlab destroy -t ccnp-tshoot-troubleshooting-1.clab.yml
```

## Troubleshooting Tickets

### Important Note
**Do not use `show run`!** This will spoil the troubleshooting experience. Use appropriate `show` and `debug` commands to develop your troubleshooting skills.

### Ticket #1: Client1 Connectivity
One of the users was working on Client1 but is complaining about no connectivity. A message on the Windows taskbar stated "no network connectivity". A colleague mentioned this might be related to DHCP.

**Investigation areas:**
- DHCP configuration
- VLAN assignments
- Interface status

### Ticket #2: FTP Server Access
After fixing Client1, users from VLAN 10 are unable to connect to the FTP server.

**Investigation areas:**
- Inter-VLAN routing
- EIGRP configuration
- Access lists

### Ticket #3: WebServer Connectivity
Users can connect to the FTP server but cannot reach the external webserver.

**Investigation areas:**
- BGP configuration
- NAT configuration
- Default routing

### Ticket #4: IPv6 Connectivity
The IPv6 team reports they cannot reach 2026::12:/122 from DSW1 or DSW2.

**Investigation areas:**
- IPv6 routing (OSPFv3, RIPng)
- IPv6 addressing
- Tunnel configuration

## Key Technologies

- **OSPF**: Multi-area design with NSSA
- **EIGRP**: Redistribution with OSPF
- **BGP**: eBGP between AS 65001 and AS 65002
- **HSRP**: First Hop Redundancy Protocol
- **Port-channels**: EtherChannel between switches
- **VLANs**: Multiple VLANs with inter-VLAN routing
- **IPv6**: OSPFv3, RIPng, and IPv6 tunnels
- **NAT**: Network Address Translation on R1
- **DHCP**: Dynamic host configuration

## Differences from GNS3 Topology

This Containerlab implementation has the following changes from the original GNS3 topology:

1. **Frame Relay replaced**: Frame Relay interfaces (Serial0/0.12, Serial0/0.23, Serial0/0.34) replaced with point-to-point Ethernet links
2. **Interface naming**:
- GNS3: Serial/FastEthernet interfaces
- Containerlab: Ethernet interfaces (Ethernet0/0, Ethernet0/1, etc.)
3. **No shutdown**: All interfaces include `no shutdown` command (required in Containerlab)
4. **Removed obsolete commands**: Commands specific to GNS3/Dynamips removed

## Management Access

After deployment, devices are accessible via:
- **CLI**: `sudo containerlab exec -t ccnp-tshoot-troubleshooting-1.clab.yml -n <device-name> -- telnet`
- **Management network**: 10.65.98.0/24
- R1: 10.65.98.11
- R2: 10.65.98.12
- R3: 10.65.98.13
- R4: 10.65.98.14
- ISP: 10.65.98.15
- DSW1: 10.65.98.21
- DSW2: 10.65.98.22
- ASW1: 10.65.98.31
- ASW2: 10.65.98.32
- Client1: 10.65.98.41
- Client2: 10.65.98.42
- FTPServer: 10.65.98.43
- WebServer: 10.65.98.44

## Original Topology

This lab is based on the GNS3 topology located in:
`gns3vault-archive/Troubleshooting/ccnp-tshoot-troubleshooting-1/`

## License

This lab is part of the NetworkLessons.com lab collection.
Original file line number Diff line number Diff line change
@@ -0,0 +1,142 @@
# CCNP TSHOOT Troubleshooting Lab 1
# Converted from GNS3 topology to Containerlab
# This is a pre-configured troubleshooting scenario

name: ccnp-tshoot-troubleshooting-1

mgmt:
network: statics
ipv4-subnet: 10.65.98.0/24

topology:
kinds:
cisco_iol:
image: docker-registry.nwl.lab/cisco_iol:17.12.01
nodes:
# Routers
R1:
kind: cisco_iol
mgmt-ipv4: 10.65.98.11
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/R1/startup-config.cfg.partial

R2:
kind: cisco_iol
mgmt-ipv4: 10.65.98.12
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/R2/startup-config.cfg.partial

R3:
kind: cisco_iol
mgmt-ipv4: 10.65.98.13
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/R3/startup-config.cfg.partial

R4:
kind: cisco_iol
mgmt-ipv4: 10.65.98.14
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/R4/startup-config.cfg.partial

ISP:
kind: cisco_iol
mgmt-ipv4: 10.65.98.15
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/ISP/startup-config.cfg.partial

# Distribution Layer Switches (L3)
DSW1:
kind: cisco_iol
mgmt-ipv4: 10.65.98.21
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/DSW1/startup-config.cfg.partial

DSW2:
kind: cisco_iol
mgmt-ipv4: 10.65.98.22
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/DSW2/startup-config.cfg.partial

# Access Layer Switches (L2)
ASW1:
kind: cisco_iol
mgmt-ipv4: 10.65.98.31
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/ASW1/startup-config.cfg.partial

ASW2:
kind: cisco_iol
mgmt-ipv4: 10.65.98.32
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/ASW2/startup-config.cfg.partial

# Clients and Servers
Client1:
kind: cisco_iol
mgmt-ipv4: 10.65.98.41
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/Client1/startup-config.cfg.partial

Client2:
kind: cisco_iol
mgmt-ipv4: 10.65.98.42
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/Client2/startup-config.cfg.partial

FTPServer:
kind: cisco_iol
mgmt-ipv4: 10.65.98.43
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/FTPServer/startup-config.cfg.partial

WebServer:
kind: cisco_iol
mgmt-ipv4: 10.65.98.44
startup-config: ./clab-ccnp-tshoot-troubleshooting-1/WebServer/startup-config.cfg.partial

links:
# Core Router Links (replacing Frame Relay)
# R1 <-> R2 (was Serial0/0.12 frame-relay)
- endpoints: ["R1:Ethernet0/0", "R2:Ethernet0/0"]

# R2 <-> R3 (was Serial0/0.23 frame-relay)
- endpoints: ["R2:Ethernet0/1", "R3:Ethernet0/0"]

# R3 <-> R4 (was Serial0/0.34 frame-relay)
- endpoints: ["R3:Ethernet0/1", "R4:Ethernet0/0"]

# R1 <-> ISP (was Serial0/1)
- endpoints: ["R1:Ethernet0/2", "ISP:Ethernet0/0"]

# ISP <-> WebServer (was Serial0/0)
- endpoints: ["ISP:Ethernet0/1", "WebServer:Ethernet0/0"]

# Router to Distribution Switch Links
# R4 <-> DSW1 (was FastEthernet1/0 <-> FastEthernet0/0)
- endpoints: ["R4:Ethernet0/1", "DSW1:Ethernet0/0"]

# R4 <-> DSW2 (was FastEthernet2/0 <-> FastEthernet0/0)
- endpoints: ["R4:Ethernet0/2", "DSW2:Ethernet0/0"]

# Distribution Switch Links (Port-channel 3)
# DSW1 <-> DSW2 (was FastEthernet1/4-5 <-> FastEthernet1/4-5)
- endpoints: ["DSW1:Ethernet1/0", "DSW2:Ethernet1/0"]
- endpoints: ["DSW1:Ethernet1/1", "DSW2:Ethernet1/1"]

# Distribution to Access Switch Links (Port-channel 1)
# DSW1 <-> ASW1 (was FastEthernet1/2-3 <-> FastEthernet1/2-3)
- endpoints: ["DSW1:Ethernet1/2", "ASW1:Ethernet1/0"]
- endpoints: ["DSW1:Ethernet1/3", "ASW1:Ethernet1/1"]

# Distribution to Access Switch Links (Port-channel 5)
# DSW1 <-> ASW2 (was FastEthernet1/8-9 <-> FastEthernet1/8-9)
- endpoints: ["DSW1:Ethernet1/4", "ASW2:Ethernet1/0"]
- endpoints: ["DSW1:Ethernet1/5", "ASW2:Ethernet1/1"]

# Distribution to Access Switch Links (Port-channel 4)
# DSW2 <-> ASW2 (was FastEthernet1/6-7 <-> FastEthernet1/6-7)
- endpoints: ["DSW2:Ethernet1/2", "ASW2:Ethernet1/2"]
- endpoints: ["DSW2:Ethernet1/3", "ASW2:Ethernet1/3"]

# Distribution to Access Switch Links (Port-channel 2)
# DSW2 <-> ASW1 (was FastEthernet1/10-11 <-> FastEthernet1/10-11)
- endpoints: ["DSW2:Ethernet1/4", "ASW1:Ethernet1/2"]
- endpoints: ["DSW2:Ethernet1/5", "ASW1:Ethernet1/3"]

# Access to Client/Server Links
# ASW1 <-> Client1 (was FastEthernet1/5)
- endpoints: ["ASW1:Ethernet1/4", "Client1:Ethernet0/0"]

# ASW1 <-> FTPServer (was FastEthernet1/4)
- endpoints: ["ASW1:Ethernet1/5", "FTPServer:Ethernet0/0"]

# ASW2 <-> Client2 (was FastEthernet1/4)
- endpoints: ["ASW2:Ethernet1/4", "Client2:Ethernet0/0"]
Original file line number Diff line number Diff line change
@@ -0,0 +1,112 @@
hostname ASW1
!
no ip domain lookup
ip domain name lab.local
!
vtp mode transparent
!
vlan 10,20,200
!
interface Port-channel1
switchport trunk allowed vlan 1-9,11-4094
switchport mode trunk
!
interface Port-channel2
switchport trunk allowed vlan 1-9,11-4094
switchport mode trunk
!
interface Ethernet0/0
no shutdown
no ip address
!
interface Ethernet0/1
no shutdown
no ip address
!
interface Ethernet0/2
no shutdown
no ip address
!
interface Ethernet0/3
no shutdown
no ip address
!
interface Ethernet1/0
no shutdown
switchport trunk allowed vlan 1-9,11-4094
switchport mode trunk
channel-group 1 mode on
!
interface Ethernet1/1
no shutdown
switchport trunk allowed vlan 1-9,11-4094
switchport mode trunk
channel-group 1 mode on
!
interface Ethernet1/2
no shutdown
switchport trunk allowed vlan 1-9,11-4094
switchport mode trunk
channel-group 2 mode on
!
interface Ethernet1/3
no shutdown
switchport trunk allowed vlan 1-9,11-4094
switchport mode trunk
channel-group 2 mode on
!
interface Ethernet1/4
no shutdown
switchport access vlan 10
spanning-tree portfast
!
interface Ethernet1/5
no shutdown
switchport access vlan 200
spanning-tree portfast
!
interface Ethernet1/6
no shutdown
!
interface Ethernet1/7
no shutdown
!
interface Ethernet1/8
no shutdown
!
interface Ethernet1/9
no shutdown
!
interface Ethernet1/10
no shutdown
!
interface Ethernet1/11
no shutdown
!
interface Ethernet1/12
no shutdown
!
interface Ethernet1/13
no shutdown
!
interface Ethernet1/14
no shutdown
!
interface Ethernet1/15
no shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan200
ip address 192.168.1.131 255.255.255.224
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
end
Loading