Capstone: CCIE-Style Full Lab
CCIE Enterprise Infrastructure EVE-NG / GNS3
مقصدObjectiveObjective
اس capstone کے بعد آپ routing، switching، VPN، services اور security کو ایک ہی کام کرتی ٹوپولوجی میں جوڑ سکیں گے — ایک اصلی CCIE-style مشق۔Is capstone ke baad aap routing, switching, VPN, services aur security ko ek hi kam karti topology mein jor sakenge — ek asli CCIE-style mashq.After this capstone you will integrate routing, switching, VPN, services, and security into one working topology — a true CCIE-style exercise.
آسان مثالSimple AnalogySimple Analogy
یہ capstone dress rehearsal ہے — course کی ہر چیز ایک ہی topology میں: routing، switching، VPN، services، اور security۔ ایک خراب حصہ پوری rehearsal fail کر سکتا ہے۔Ye capstone dress rehearsal hai — course ki har cheez ek hi topology mein: routing, switching, VPN, services, aur security. Ek kharab hissa poori rehearsal fail kar sakta hai.This capstone is the dress rehearsal — everything from the course in one topology: routing, switching, VPN, services, and security. One broken piece can fail the whole show.
سیٹ اپLab SetupLab Setup
ٹوپولوجی: دو core routers (P)، دو PE روٹرز، دو CE روٹرز، دو switches VLANs کے ساتھ، ایک DHCP/NTP سرور host۔ شروع کرنے سے پہلے snapshot لیں۔Topology: do core routers (P), do PE routers, do CE routers, do switches VLANs ke saath, ek DHCP/NTP server host. Shuru karne se pehle snapshot lein.Topology: two core routers (P), two PE routers, two CE routers, two switches with VLANs, one DHCP/NTP server host. Snapshot before you start.
اقداماتStepsSteps
Step 1
Checklist 1 — Underlay: physical links up، CDP neighbors درست، ہر جگہ بنیادی IP connectivity۔ Healthy underlay کے بغیر کوئی overlay نہیں چلتا۔Checklist 1 — Underlay: physical links up, CDP neighbors durust, har jagah bunyadi IP connectivity. Healthy underlay ke baghair koi overlay nahi chalta.Checklist 1 — Underlay: physical links up, CDP neighbors correct, base IP connectivity everywhere. No overlay works without a healthy underlay.
show cdp neighbors show ip interface brief ping 10.0.0.1 ping 10.0.0.2
Step 2
Checklist 2 — Routing: OSPF adjacencies full، BGP peers established، DMVPN tunnels up NHRP registrations کے ساتھ۔Checklist 2 — Routing: OSPF adjacencies full, BGP peers established, DMVPN tunnels up NHRP registrations ke saath.Checklist 2 — Routing: OSPF adjacencies full, BGP peers established, DMVPN tunnels up with NHRP registrations.
show ip ospf neighbor show ip bgp summary show dmvpn
Step 3
Checklist 3 — Switching: VLANs بنی ہوئی، trunks پر درست VLANs، STP root صحیح جگہ، کوئی غیرمتوقع blocked link نہیں۔Checklist 3 — Switching: VLANs bani hui, trunks par durust VLANs, STP root sahi jagah, koi ghair-mutawaqqa blocked link nahi.Checklist 3 — Switching: VLANs created, trunks carrying the right VLANs, STP root in the right place, no blocked links you didn't expect.
show vlan brief show interfaces trunk show spanning-tree vlan 10
Step 4
Checklist 4 — VPN: MPLS LDP neighbors up، VPNv4 prefixes PEs کے درمیان exchange ہو رہے، VRF isolation confirmed (cross-customer ping fail)۔Checklist 4 — VPN: MPLS LDP neighbors up, VPNv4 prefixes PEs ke darmiyan exchange ho rahe, VRF isolation confirmed (cross-customer ping fail).Checklist 4 — VPN: MPLS LDP neighbors up, VPNv4 prefixes exchanged between PEs, VRF isolation confirmed (no cross-customer ping).
show mpls ldp neighbor show ip bgp vpnv4 all summary show ip route vrf CUST-A ping vrf CUST-A 192.168.20.2
Step 5
Checklist 5 — Services & QoS: DHCP bindings موجود، NTP synchronized، HSRP active/standby درست، QoS policy متوقع classes match کر رہی۔Checklist 5 — Services & QoS: DHCP bindings maujood, NTP synchronized, HSRP active/standby durust, QoS policy mutawaqqa classes match kar rahi.Checklist 5 — Services & QoS: DHCP bindings exist, NTP synchronized, HSRP active/standby correct, QoS policy matching expected classes.
show ip dhcp binding show ntp status show standby brief show policy-map interface
Step 6
Checklist 6 — Security: ACLs ضروری ٹریفک allow کر رہی، CoPP control plane کی حفاظت کر رہا، edge interfaces پر uRPF active۔Checklist 6 — Security: ACLs zaroori traffic allow kar rahi, CoPP control plane ki hifazat kar raha, edge interfaces par uRPF active.Checklist 6 — Security: ACLs permitting required traffic, CoPP protecting the control plane, uRPF active on edge interfaces.
show access-lists show policy-map control-plane show ip interface GigabitEthernet0/1 | include verify
Step 7
Checklist 7 — End-to-end: پورے stack میں CE-to-CE ping، traceroute متوقع راستہ دکھائے، ہر hop کی وضاحت ہو سکے۔Checklist 7 — End-to-end: pooray stack mein CE-to-CE ping, traceroute mutawaqqa rasta dikhaye, har hop ki wazahat ho sake.Checklist 7 — End-to-end: CE-to-CE ping across the whole stack, traceroute shows the expected path, every hop explainable.
ping 192.168.20.2 source 192.168.10.2 traceroute 192.168.20.2 show ip route 192.168.20.2
Step 8
آخر میں: سب save کریں، reload کے بعد پوری checklist دوبارہ چلائیں۔ جو lab reboot کے بعد کام کرے وہی اصلی کام کرتا lab ہے۔Aakhir mein: sab save karein, reload ke baad poori checklist dobara chalayein. Jo lab reboot ke baad kam kare wahi asli kam karta lab hai.Final: save everything, re-run the full checklist after a reload. A lab that survives a reboot is a lab that works.
show running-config copy running-config startup-config
تصدیقVerifyVerify
یقین کریں کہ 7وں checklist groups کامیاب ہیں: underlay، routing، switching، VPN، services/QoS، security، اور end-to-end — reload کے بعد بھی۔Yaqeen karein ke 7on checklist groups kamyab hain: underlay, routing, switching, VPN, services/QoS, security, aur end-to-end — reload ke baad bhi.Confirm all 7 checklist groups pass: underlay, routing, switching, VPN, services/QoS, security, and end-to-end — after a reload.
show ip ospf neighbor show ip bgp summary show ip bgp vpnv4 all summary show standby brief ping vrf CUST-A 192.168.20.2
خرابی دور کرناTroubleshootingTroubleshooting
⚠️ سب کام کر رہا تھا، پھر ایک تبدیلی سے سب خراب ہو گیا۔Sab kam kar raha tha, phir ek tabdeeli se sab kharab ho gaya.Everything worked, then one change broke it all.
✅ Snapshot پر واپس جائیں، تبدیلی ایک ایک کر کے لگائیں، ہر کے بعد checklist چلائیں۔ اسی لیے snapshots ہوتے ہیں۔Snapshot par wapas jayein, tabdeeli ek ek kar ke lagayein, har ke baad checklist chalayein. Isi liye snapshots hote hain.Roll back to the snapshot, re-apply changes one by one, re-running the checklist after each. That's why snapshots exist.
⚠️ End-to-end ping fail ہے لیکن ہر segment الگ الگ ping ہو رہا ہے۔End-to-end ping fail hai lekin har segment alag alag ping ho raha hai.End-to-end ping fails but each segment pings fine.
✅ Classic routing/redistribution gap — traceroute سے راستہ حصہ در حصہ چیک کریں اور یقین کریں ہر device کو return route معلوم ہے۔Classic routing/redistribution gap — traceroute se rasta hissa-dar-hissa check karein aur yaqeen karein har device ko return route maloom hai.Classic routing/redistribution gap — check the path segment by segment with traceroute and confirm each device knows the return route.
انٹرویو سوالاتInterview Q&AInterview Q&A
❓ Individual labs سے full-stack capstone کیوں مشکل ہے؟Individual labs se full-stack capstone kyun mushkil hai?Why is a full-stack capstone harder than individual labs?
Interdependency: security (ACL/CoPP) routing خراب کر سکتا ہے، QoS bandwidth مسائل چھپا سکتا ہے، اور services (DHCP/NTP) خاموشی سے سب بگاڑ دیتی ہیں۔ ہمیشہ layer by layer verify کریں۔Interdependency: security (ACL/CoPP) routing kharab kar sakta hai, QoS bandwidth masail chhupa sakta hai, aur services (DHCP/NTP) khamoshi se sab bigar deti hain. Hamesha layer by layer verify karein.Interdependency: security (ACL/CoPP) can break routing, QoS can hide bandwidth issues, and services (DHCP/NTP) break everything silently. Always verify layer by layer.
❓ Capstone کے لیے کون سی build order recommend کریں گے؟Capstone ke liye kaun si build order recommend karenge?What build order do you recommend for the capstone?
Bottom-up بنائیں، top-down verify کریں: پہلے physical/connectivity، پھر IGP، پھر overlays، پھر services — اور آگے بڑھنے سے پہلے ہر کو ٹیسٹ کریں۔Bottom-up banayein, top-down verify karein: pehle physical/connectivity, phir IGP, phir overlays, phir services — aur aage barhne se pehle har ko test karein.Build bottom-up, verify top-down: first physical/connectivity, then IGP, then overlays, then services — and test each before moving on.