F-01-06-BPS-EN

FOR PUBLIC USE

OKIN Networking Academy

JNCIA course
Lab testing

Overview
Lectures
| 1 | Junos introduction to Juniper devices
| 2 | Junos CLI, system and interface configuration
| 3 | Monitoring and maintenance
| 4 | Routing fundamentals
| 5 | Routing policy
| 6 | Firewall filters
| 7 | Class of Service and J-Web
| 8 | Final test
| 9 | Final lab

| 10-May |
| 17-May |
| 31-May |
| 07-Jun |
| 14-Jun |
| 21-Jun |
| 28-Jun |
| 05-Jul |
| 26-Jul |

Confidential and proprietary materials for authorized OKIN BPS personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any authorized persons or third parties except by written agreement.

Lab testing
Orange datacenter

Diagram

Prefix A: 10.0.10.0/24
Prefix B: 10.0.11.0/24
Prefix C: 10.0.12.0/24

Blue datacenter

R2

R1

WAN

BGP, OSPF or static routes

based on your task

R3

R4
R4 uses always
static default route

100.0.0.0/24

Confidential and proprietary materials for authorized OKIN BPS personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any authorized persons or third parties except by written agreement.

Lab testing
Lab task nr. 1

Configure the network to utilize datacenter resources in following manners.

Users should primarily use Orange DC to reach servers hosted within Prefix A.
Users should primarily use Blue DC to reach servers hosted within Prefix B.
Users traffic towards Prefix C should be load balanced between Orange and Blue DCs.
Should the primary path fails, traffic has to flow over backup path.
Use BGP as routing protocol.

Confidential and proprietary materials for authorized OKIN BPS personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any authorized persons or third parties except by written agreement.

Lab testing
Lab task nr. 2

Configure the network to utilize datacenter resources in following manners.

Users should utilize primarily Orange DC for all prefixes (A, B, C).
Should the primary path fails, traffic has to flow over backup path.
R1 should act as designated router (DR) for backbone area.
R3 should never negotiate for DR role.

Confidential and proprietary materials for authorized OKIN BPS personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any authorized persons or third parties except by written agreement.

Lab testing
Lab task nr. 3
Configure the network to utilize datacenter resources in following manners.
Establish site to DC connectivity using static routes.
Host A (100.0.0.10) can access web and DNS services on servers within Prefix A (.128 .141).
Hosts A and B (100.0.0.11) can access database servers (port 3306) within Prefix B (.1 .31).
Allow SSH into the routers only from other routers loopback interfaces.
Create a user profile that can view configuration but cant modify it.

Confidential and proprietary materials for authorized OKIN BPS personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any authorized persons or third parties except by written agreement.

Lab testing
Lab task nr. 4

Confidential and proprietary materials for authorized OKIN BPS personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any authorized persons or third parties except by written agreement.

Lab testing
Initial configurations
Copy and paste configuration snippets into your routers CLI and commit (or commit
confirm) :-)

Confidential and proprietary materials for authorized OKIN BPS personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any authorized persons or third parties except by written agreement.

Tom Grygier
ECSR Tier II Engineer
e: tomas.grygier@okinbps.com
OKIN GROUP, a. s.
Hornopoln 3308/40, 702 00, Ostrava, Czech Republic

www.okinbps.com