Practice Labs

Three practice labs are provided here to help you consolidate and practice the skills learned in this chapter.

Figure 8-19 illustrates the topology used for the labs.

Figure 8-19. IPSec Lab Topology

[View full size image]

In each of the three labs, you must restore IP connectivity over the IPSec tunnel between the LANs at the Tokyo and Fukuoka sites.

To verify that you have restored IP connectivity over the IPSec tunnel, use extended ping (to ping from the LAN interface on Tokyo to the LAN interface on Fukuoka, and vice versa), and the show crypto engine connections active command to verify that the traffic is encrypted when it is transmitted between Tokyo and Fukuoka.

Base configurations for the labs can be found on the Cisco Press Web site (www.ciscopress.com/1587051044).

Detailed instructions for loading these base configurations onto your lab routers can be found in Appendix B.

Troubleshooting Lab 1

Q1:

In this scenario, network administrators at the Tokyo site report that when user traffic for the Fukuoka site arrives at the router from the local LAN, IKE negotiation is not initiated. Troubleshoot this issue end-to-end, and record the symptoms, actions, and resolution in the space provided below: Symptoms: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Actions: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Resolution: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________

Troubleshooting Lab 2

Q1:

In this scenario, network administrators report that IKE negotiation begins between Tokyo and Fukuoka, but that it soon fails. Troubleshoot this issue end-to-end, and record the symptoms, actions, and resolution in the space provided below: Symptoms: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Actions: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Resolution: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________

Troubleshooting Lab 3

Q1:

Network administrators are now complaining that, although IPSec tunnel setup is successful, user traffic is not successfully transmitted over the tunnel between Tokyo and Fukuoka. Troubleshoot this issue end-to-end, and record the symptoms, actions, and resolution in the space provided below: Symptoms: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Actions: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Resolution: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________