Infrastructure, Systems, and Connectivity
This hands-on lab configures AAA authentication against an external RADIUS server, defines a method list that tries RADIUS first with local authentication as a fallback, and verifies the fallback activates correctly when the RADIUS server becomes unreachable.
This hands-on lab configures DHCP snooping to establish trusted and untrusted ports, then enables Dynamic ARP Inspection using the resulting binding table, demonstrating how the two features work together to block a simulated rogue DHCP server and ARP spoofing attempt.
This hands-on lab configures a local SPAN session that mirrors traffic from a specific switch port to a monitoring port, allowing a packet capture tool to inspect traffic without being directly inline with it.
This hands-on lab enables NetFlow on a router interface to collect traffic flow statistics, exports the data to a collector, and verifies flow records accurately reflect actual traffic passing through the monitored interface.
This hands-on lab configures an IPv6 ACL to permit only specific traffic between two networks, applying it to an interface and verifying both permitted and denied IPv6 traffic behave as expected.
This hands-on lab configures OSPFv3 between two routers to dynamically route IPv6 traffic, comparing its configuration syntax against the OSPFv2 labs covered earlier in this series while highlighting the interface-level activation approach OSPFv3 uses.
This hands-on lab configures EIGRP for IPv6 between two routers, activating the protocol directly on each interface similar to OSPFv3's approach, and highlights the mandatory router ID requirement unique to EIGRPv6.
This hands-on lab configures multi-area OSPF across three routers, designating an ABR that summarizes several subnets from a leaf area into a single route advertised toward the backbone, tying together the area design and summarization concepts covered earlier in this series.
This hands-on lab configures a leaf area as a standard stub area, then upgrades it to a totally stubby area, comparing the routing table size at each stage and verifying only a default route remains once fully configured.
This hands-on lab configures Area 1 as an NSSA, redistributing a local external route directly from within that area and verifying it propagates as a Type 7 LSA before being translated to Type 5 at the ABR, while inter-area routes from elsewhere remain blocked exactly as in a standard stub area.
This hands-on lab connects a disconnected area to the backbone using an OSPF virtual link, addressing a design violation where an area does not have a direct physical connection to Area 0, and verifies routes flow correctly once the virtual link is established.
This hands-on lab configures MD5 authentication on an OSPF link between two routers, verifying the neighbor relationship requires a matching key on both sides and observing the resulting failure when the keys are mismatched.
