CCNP TSHOOT 6.0 - The Cisco Learning Network

CCNPv6 TSHOOT
Background
Routers and Layer 3 switches are typically segmented into three planes of operation, each with a clearly
identified objective. The data plane (also called the forwarding plane) forwards user data packets. The control
plane routes data correctly, and the management plane manages the network devices.
The management plane deals with the traffic used to access, manage, and monitor all the network elements.
It supports all required provisioning, maintenance, and monitoring functions for the network. Like the other IP
traffic planes, management plane traffic is handled in-band with all other IP traffic. Most service providers and
many large enterprises also build separate, out-of-band (OOB) management networks to provide alternate
reachability when the primary in-band IP path is not reachable.
Processes and protocols that are associated with this plane include Telnet, AAA, SSH, FTP, TFTP, SNMP,
syslog, TACACS+, RADIUS, DNS, NetFlow, ROMMON, and other management protocols.
This lab focuses on management plane security issues related to SSH, AAA, and RADIUS for management
access to routers and Layer 3 switches.
For each task or trouble ticket, the trouble scenario and problem symptom are described. While
troubleshooting, you will discover the cause of the problem, correct it, and then document the process and
results.
Lab Structure
This lab is divided into two main sections.
Section 1—Trouble Tickets and Troubleshooting Logs
This section includes two tasks. Each task is associated with a trouble ticket (TT) and introduces one or more
errors on one or more devices. If time is a consideration, each task or trouble ticket can be performed
independently.
Section 2—Troubleshooting Reference Information
This section provides general troubleshooting information that can be applied to any of the trouble tickets in
this lab. Examples of useful commands and output are provided. If time permits, it is recommended that you
read through Section 2 prior to starting on the trouble tickets.
Note: This lab uses Cisco 1841 routers with Cisco IOS Release 12.4(24)T1 and the advanced IP image
c1841-advipservicesk9-mz.124-24.T1.bin. The switches are Cisco WS-C2960-24TT-L with the Cisco IOS
image c2960-lanbasek9-mz.122-46.SE.bin and Catalyst 3560-24PS with the Cisco IOS image c3560advipservicesk9-mz.122-46.SE.bin.
Other routers (such as 2801 and 2811), switches (such as 2950 or 3550),
and Cisco IOS Software versions can be used if they have comparable capabilities and features. Depending
on the router or switch model and Cisco IOS Software version, the commands available and output produced
might vary from what is shown in this lab.
Any changes made to configurations or topology (other than errors introduced) are noted in the lab and
trouble tickets so that you are aware of them prior to beginning the troubleshooting process.
Required Resources
• 3 routers (Cisco 1841 with Cisco IOS Release 12.4(24)T1 Advanced IP Service or comparable)
• 1 switch (Cisco 2960 with the Cisco IOS Release 12.2(46)SE C2960-LANBASEK9-M image or
comparable)
• 2 switches (Cisco 3560 with the Cisco IOS Release 12.2(46)SE C3560-advipservicesk9-mz image or
comparable)
• SRV1 (Windows PC with static IP address) with TFTP and syslog servers plus an SSH client (PuTTY
or comparable) and WireShark software
• PC-B (Windows PC DHCP client) with PuTTY and WireShark software
• PC-C (Windows PC DHCP client) with PuTTY and WireShark software
• Serial and Ethernet cables
All contents are Copyright © 1992–2010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 22