ISC Capstone Network Design Proposal

ITT TECHNICAL INSTITUTENETWORK DESIGN PROPOSAL PREPARED FOR ISC CAPSTONE Student Name XVI ·· MARCH ·· MMXIV Abstract: This document is part of the ITT Technical Institute Information Systems and Cybersecurity Bachelorette Degree Capstone project for the graduating class of March 2014. It is part of a collaboration of many different elements which make up the overall ISC Capstone class project. Table of Contents I. INTRODUCTION 2 II. DESIGN CONSIDERATIONS 2 WAN Services 2 LAN Services 2 Network Fundamentals 2 Security Services 3 III. NETWORK DIAGRAMS AND TOPOLOGIES 4 WAN Topology 4 IV. SYSTEM COMPONENTS 4 V. CONFIGURATIONS 5 1 The design. and video traffic LAN Services       Hierarchical network design to simplify deployment. The goal of the Services Ready Medium Branch Network is to make deployment of these services fast. II. rapid recovery. and predictable. test and deployment of this Services Ready Medium Branch Network will focus on the key elements to ensure the consistent connectivity and mandatory security requirements for data. voice. INTRODUCTION The implementation of a Service Ready Medium Branch Network enables enterprises with branch offices of 50 to 100 users to deploy high-value network services such as unified communication and application optimization on top of a secure branch network infrastructure that is connected to a campus or data center core (central site) over a variety of WAN technologies. and application optimization services. and disaster recovery Rapid recovery in case of component failure Automatic switchover to backup WAN link that has a minimum one-quarter of the bandwidth of the primary WAN link Ability to restore service within 24 hours in the event of a disaster Quality of service (QoS) 2 . simple. troubleshooting.I. DESIGN CONSIDERATIONS WAN Services   Layer 3 Multiprotocol Label Switching (MPLS) Virtual Private Network (VPN) for increased flexibility and reduced bandwidth cost Dedicated bandwidth ranging from 6 to 44 Mb/s to handle data. voice. and management Connectivity to branch devices at Fast Ethernet or Gigabit Ethernet speeds Near-wire-speed performance between all devices Provisions for accommodating future expansion Networking device redundancy without traffic loops Power-over-Ethernet (PoE) Network Fundamentals      High availability. and mitigation Blocking of unauthorized traffic from entering or leaving the branch Access to servers in the branch by home office users Verification of source addresses for incoming traffic Identification and mitigation of common DoS attacks and worms Prevention of malicious attacks on the branch office network from outside Prevention of attacks and security breaches from within the branch office 3 . and data separation on the LAN Separation of network management traffic Access to the server in the branch by home office users Threat protection. video. detection. critical and bulk data applications Provisions to mitigate denial of service (DoS) and worm attacks Identification and classification of critical application flows for QoS IP routing and addressing Routing within the enterprise and between the branch and the service provider network Direct Internet access from the branch Support for multicast applications Translation of private addresses and ports in order to access the Internet Dynamic allocation of IP addresses for end devices Security Services                      Infrastructure protection Physical securing of access to networking devices Disabling of unused services that may be used to exploit the network Authentication of routing protocol updates Access control Authentication and authorization services for controlling access to network resources Logging capabilities for auditing access to network devices and resources Integration with global access management system to enforce access privileges Secure connectivity Secure interoffice connectivity for full-mesh and hub-and-spoke WAN topologies Secure access into the branch network for remote or home office workers Voice. business video.           Application-specific traffic prioritization both within the branch office and across the enterprise Bandwidth management for WAN-based traffic Provisions for IP telephony. SYSTEM COMPONENTS Device P1 P2 PE1 PE2 PE3 PE4 VRF1 CE1 Platform Cisco 2851 IS Router Cisco 2851 IS Router Cisco 2811 IS Router Cisco 2811 IS Router Cisco 2811 IS Router Cisco 2811 IS Router Cisco 2610XM Router Modules 4 .WIC 1DSU-T1 V2 WAN Interface Card 3 .WIC 1DSU-T1 V2 WAN Interface Card 3 . NETWORK DIAGRAMS AND TOPOLOGIES WAN Topology IV.WIC 1DSU-T1 V2 WAN Interface Card 4 .WIC 1DSU-T1 V2 WAN Interface Card Cisco NM-1FE-TX 10/100 Fast Ethernet VRF1 CE2 Cisco 2610XM Router 4 .III.WIC 1DSU-T1 V2 WAN Interface Card 3 .WIC 1DSU-T1 V2 WAN Interface Card 3 .WIC 1DSU-T1 V2 WAN Interface Card 2 .WIC 1DSU-T1 V2 WAN Interface Card Cisco NM-1FE-TX 10/100 Fast Ethernet 2 . 5 255.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface Serial0/0/0 description Connected to PE1 S1/0 ip address 10.255.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface GigabitEthernet0/1 description Connected to P2 Fa2/0 ip address 10.0.1.0. CONFIGURATIONS hostname P1 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.1.255.255.1.255.1 255.255.1.HQ GW BR GW HQ CORE SW BR CORE SW HQ ACCESS SW BR ACCESS SW Cisco 2610XM Router Cisco 2610XM Router Catalyst 3550-24 EMI Catalyst 3550-24 EMI Catalyst 3524-24 EMI Cisco NM-1FE-TX 10/100 Fast Ethernet Cisco NM-1FE-TX 10/100 Fast Ethernet N/A N/A N/A Catalyst 3524-24 EMI N/A V.255.255 ! interface GigabitEthernet0/0 description Connected to P2 Fa0/0 ip address 10.1 255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1/0 5 .255.0.1 255.0. 0.0.1.2 send-community extended neighbor 10.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.13 255.1 peer-group MPLS neighbor 10.7 area 0 network 10.15 area 0 ! router bgp 65000 bgp router-id 10.0.1.0.0.1 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.0.2 peer-group MPLS neighbor 10.0.0.0.2 remote-as 65000 neighbor 10.2 update-source Loopback0 neighbor 10.1.1.1.1 0.255.1 network 10.1.0.description Connected to PE2 S1/0 ip address 10.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to PE3 S1/0 ip address 10.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to PE4 S1/0 ip address 10.1.0.0.0.4 peer-group MPLS ! address-family vpnv4 neighbor MPLS send-community extended neighbor MPLS route-reflector-client 6 .0.0.0.0 area 0 network 10.0 0.255.0.255.1.0.255.0.1.0 0.1.255.9 255.255.1.1.0.0.0.0.3 peer-group MPLS neighbor 10.1.5 255. 2 activate neighbor 10.255 ! interface GigabitEthernet0/0 description Connected to P1 Fa0/0 ip address 10.4 activate exit-address-family hostname P2 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.1.255.0.0.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface Serial0/0/0 description Connected to PE1 S1/1 ip address 10.0.neighbor 10.1.0.2 255.2 255.255.1.1 activate neighbor 10.255.0.1.0.255.5 255.2.0.255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to PE2 S1/1 ip address 10.255.1.3 activate neighbor 10.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface GigabitEthernet0/1 description Connected to P1 Fa2/0 ip address 10.1.1.255.0.1.2.1.255.255.6 255.252 7 .1 255.9 255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to PE3 S1/1 ip address 10.255.2. 1.0.0.0.1 activate neighbor 10.1 send-community extended neighbor 10.0.1.100.2.2 network 10.0.0.0.1 update-source Loopback0 neighbor 10.0 area 0 network 10.2.1.15 area 0 ! router bgp 65000 bgp router-id 10.4 activate exit-address-family hostname PE1 ip cef no ip dhcp use vrf connected ip dhcp excluded-address 172.0.3 peer-group MPLS neighbor 10.2 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.1 peer-group MPLS neighbor 10.0.16.ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to PE4 S1/1 ip address 10.1.1.2 activate neighbor 10.3 activate neighbor 10.0.13 255.0.0.7 area 0 network 10.0.0.0.1.0.0.255.0 0.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.2 0.1 8 .0.0.0.0.0.0.0 0.0.1.0.2 peer-group MPLS neighbor 10.0.1.4 peer-group MPLS ! address-family vpnv4 neighbor MPLS send-community extended neighbor MPLS route-reflector-client neighbor 10.1.0.1 remote-as 65000 neighbor 10.255.1.1. 3 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 3 dynamic no routing dynamic ! interface Tunnel4 ip unnumbered Loopback0 tunnel destination 10.1.2 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 2 dynamic no routing dynamic ! interface Tunnel3 ip unnumbered Loopback0 tunnel destination 10.255.0 255.1.255.255.0.4 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 4 dynamic no routing dynamic 9 .255 ! interface Tunnel2 ip unnumbered Loopback0 tunnel destination 10.1 255.16.1.100.1.255.! ip dhcp pool sdm-pool1 network 172.0.16.0.100.0.252 default-router 172.1 ! ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! no ip domain lookup ! multilink bundle-name authenticated mpls traffic-eng tunnels ! interface Loopback0 ip address 10. 2.1 255.1.2 255.100.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE1 S0/1 ip vrf forwarding vrf1 ip address 192.168.255.255.1.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE1 S0/0 ip vrf forwarding vrf2 ip address 192.255.255.255.1.2 255.252 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S0/0/0 ip address 10.! interface FastEthernet0/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/1 description $ETH-LAN$ ip address 172.1.2 255.168.255.1.255.16.252 ip ospf network point-to-point 10 .255.2 255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S0/0/0 ip address 10. 0.0.2 0.2.1.1.0.0.0.2 0.0 area 0 ! router bgp 65000 bgp router-id 10.1 remote-as 64512 neighbor 192.0.0.1.0.1 activate neighbor 192.0.1 activate no neighbor 10.1 0.0.0.1 as-override maximum-paths 2 no synchronization exit-address-family ! address-family ipv4 vrf vrf1 11 .1.1.1.0.0.0.2 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.1.0 area 0 network 10.0.1 activate neighbor 10.168.0.0.mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.1.1 peer-group MPLS neighbor 10.0.0.0.0.1.1 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.168.0 area 0 network 10.168.2 peer-group MPLS ! address-family ipv4 neighbor MPLS send-community extended no neighbor 10.1 log-adjacency-changes network 10. 2 255.168.1 remote-as 64512 neighbor 192.0 0.1 as-override maximum-paths 2 no synchronization exit-address-family ! ip nat inside source list 1 interface FastEthernet0/0 overload ! access-list 1 remark SDM_ACL Category=2 access-list 1 permit 172.100.1.255.168.3 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 3 dynamic no routing dynamic ! interface Tunnel4 ip unnumbered Loopback0 12 .1.0.3 hostname PE2 ip cef ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.neighbor 192.16.255 ! interface Tunnel1 ip unnumbered Loopback0 tunnel destination 10.0.255.1.1.1 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 1 dynamic no routing dynamic ! interface Tunnel3 ip unnumbered Loopback0 tunnel destination 10.168.0.1.0.0.1.1 activate neighbor 192. 1.255.255.255.2.1.255.6 255.1.1.4 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 4 dynamic no routing dynamic ! interface FastEthernet0/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S1/1 ip address 10.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE1 S1/1 ip vrf forwarding vrf1 ip address 192.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE1 S1/1 ip vrf forwarding vrf2 ip address 192.6 255.1.6 255.6 255.255.168.168.255.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S1/1 ip address 10.255.0.252 13 .tunnel destination 10.1. 0.1.2 peer-group MPLS no neighbor 10.0.1 activate neighbor 10.6 0.1.2 log-adjacency-changes network 10.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.0.0.0.1.1 activate neighbor 10.6 0.0.0.1.0.2.5 activate neighbor 192.2 activate no auto-summary ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.1.1.168.service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.0 area 0 network 10.1 peer-group MPLS no neighbor 10.0.1.2 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor MPLS send-community extended neighbor 10.168.168.0.0.0.0.0.5 activate neighbor 192.5 as-override maximum-paths 2 14 .1.5 remote-as 64512 neighbor 192.168.0.5 as-override maximum-paths 2 no synchronization exit-address-family ! address-family ipv4 vrf vrf1 neighbor 192.0 area 0 ! router bgp 65000 no synchronization bgp router-id 10.0.0.1.5 remote-as 64512 neighbor 192.2 0.0.168.1.168.0.1.0.1.0 area 0 network 10. 16.1 ! ip dhcp pool sdm-pool1 network 172.16.252 default-router 172.1.1.1.255.200.0.0.255.1 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 1 dynamic no routing dynamic ! interface Tunnel2 ip unnumbered Loopback0 tunnel destination 10.0.3 255.200.4 15 .no synchronization exit-address-family hostname PE3 ! ip cef ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! no ip dhcp use vrf connected ip dhcp excluded-address 172.0 255.1.255 ! interface Tunnel1 ip unnumbered Loopback0 tunnel destination 10.200.2 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 2 dynamic no routing dynamic ! interface Tunnel4 ip unnumbered Loopback0 tunnel destination 10.255.0.255.1 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.16. 255.255.255.10 255.200.1.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE2 S1/0 ip vrf forwarding vrf1 ip address 192.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S1/2 ip address 10.252 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S1/2 ip address 10.1 255.255.16.1.10 255.168.255.255.tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 4 dynamic no routing dynamic ! interface FastEthernet0/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/1 description $ETH-LAN$ ip address 172.1.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE2 S1/0 16 .10 255.255.2.1. 0.0.1 peer-group MPLS neighbor 10.0.0.0.255.0.168.1 activate neighbor 10.1.0.0 area 0 network 10.2.0.10 0.0 area 0 network 10.0.1.3 log-adjacency-changes network 10.9 activate neighbor 192.0.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.1 activate no neighbor 10.10 0.0.168.0 area 0 ! router bgp 65000 bgp router-id 10.9 as-override maximum-paths 2 no synchronization exit-address-family ! 17 .0.168.0.0.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.0.1.0.9 remote-as 64512 neighbor 192.1.3 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.0.1.1.10 255.2 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.0.1.0.1.1.2 peer-group MPLS ! address-family ipv4 neighbor MPLS send-community extended no neighbor 10.255.ip vrf forwarding vrf2 ip address 192.0.3 0.168.1. 200.255.9 activate neighbor 192.1.9 as-override maximum-paths 2 no synchronization exit-address-family ! ip nat inside source list 1 interface FastEthernet0/0 overload ! access-list 1 remark SDM_ACL Category=2 access-list 1 permit 172.4 255.0 0.1.0.1.0.1.255 ! interface Tunnel1 ip unnumbered Loopback0 tunnel destination 10.16.0.168.255.1.1.9 remote-as 64512 neighbor 192.3 hostname PE4 ! ip cef ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.address-family ipv4 vrf vrf1 neighbor 192.1 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 1 dynamic no routing dynamic ! interface Tunnel2 ip unnumbered Loopback0 tunnel destination 10.168.0.2 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 2 dynamic no routing dynamic ! 18 .0.168. 252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S1/3 ip address 10.2.168.0.14 255.255.1.1.3 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 3 dynamic no routing dynamic ! interface FastEthernet0/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S1/3 ip address 10.255.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE2 S1/1 ip vrf forwarding vrf2 19 .1.interface Tunnel3 ip unnumbered Loopback0 tunnel destination 10.255.1.255.14 255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE2 S1/1 ip vrf forwarding vrf1 ip address 192.255.255.1.14 255. 0.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.13 activate neighbor 192.1.0.1.1.1.13 as-override maximum-paths 2 no synchronization exit-address-family ! address-family ipv4 vrf vrf1 20 .1 activate neighbor 10.0.ip address 192.0.0.0.0.0.168.0.2 peer-group MPLS ! address-family ipv4 neighbor MPLS send-community extended no neighbor 10.0.0.0.0.255.4 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.1.4 0.0 area 0 ! router bgp 65000 bgp router-id 10.1.1.0.0 area 0 network 10.0.14 255.13 remote-as 64512 neighbor 192.0 area 0 network 10.1.2.0.2 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.255.1.1 activate no neighbor 10.0.14 0.168.0.168.4 log-adjacency-changes network 10.0.0.0.14 0.168.1 peer-group MPLS neighbor 10.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.1. 10.100.1.100.2 ip auth-proxy max-nodata-conns 3 ip admission max-nodata-conns 3 ! interface Loopback0 ip address 10.168.1.1.255.10.13 as-override maximum-paths 2 no synchronization exit-address-family hostname VRF1-CE1 ! ip cef ! no ip dhcp use vrf connected ip dhcp excluded-address 10.100.1 dns-server 10.100.10.LOCAL ! no ip domain lookup ip name-server 10.168.13 remote-as 64512 neighbor 192.255.1 255.255.255.10.200 10.1 10.10.2.252 21 .neighbor 192.1 255.0.100.5 255.13 activate neighbor 192.168.255 ! interface FastEthernet0/0 ip address 10.255.100.1.2.255.10.100 ip dhcp excluded-address 10.100.21 4.168.10.10.10.0 default-router 10.0 255.255.1 255.168.1 ip name-server 4.2.2 domain-name CAPSTONE.255.2.100.100.252 no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1 description Connected to PE2 S1/2 ip address 192.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0 description Connected to PE1 S1/2 ip address 192.255.254 ! ip dhcp pool sdm-pool1 import all network 10.255.1.255. 10.200.1.0 0.168.2 ip name-server 4.10.2.10.100 ip dhcp excluded-address 10.168.0.21 4.0.100.10.2.10.2 remote-as 65000 neighbor 192.10.255.1.2 default-router 10.LOCAL dns-server 10.255 hostname VRF1-CE2 ip cef ! no ip dhcp use vrf connected ip dhcp excluded-address 10.service-module t1 timeslots 1-24 ! interface FastEthernet1/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! router bgp 64512 no synchronization bgp log-neighbor-changes timers bgp 12 36 redistribute connected neighbor 192.255.200.255.2 ip auth-proxy max-nodata-conns 3 ip admission max-nodata-conns 3 ! interface Loopback0 ip address 10.2.0 domain-name CAPSTONE.255.1 10.10.2.200 10.10.254 ! ip dhcp pool sdm-pool2 import all network 10.200.0 255.1 ! no ip domain lookup ip name-server 10.200.0.200.255.6 remote-as 65000 no auto-summary ! ip forward-protocol nd ! ip nat inside source list 1 interface FastEthernet1/0 overload ! access-list 1 permit 10.10.200.2 255.200.255 ! 22 .200. interface FastEthernet0/0 ip address 10.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0 description Connected to PE3 S1/2 ip address 192.0 0.14 remote-as 65000 no auto-summary ! ip forward-protocol nd ! ip nat inside source list 1 interface FastEthernet1/0 overload ! access-list 1 permit 10.168.255.252 no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1 description Connected to PE4 S1/2 ip address 192.1.0.255.10.10.255.1.0.255.13 255.255 23 .9 255.200.1.168.168.200.168.255.252 service-module t1 timeslots 1-24 ! interface FastEthernet1/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! router bgp 64512 no synchronization bgp log-neighbor-changes timers bgp 12 36 redistribute connected neighbor 192.255.1 255.1.10 remote-as 65000 neighbor 192.