CCNP TSHOOT 300–135 Lab Exam Topology in GNS3

Certifications CCNP TSHOOT
1

Hello,
I recreated official Cisco TShoot topology winthin GNS3.
Official Cisco post: https://learningnetwork.cisco.com/thread/10965
This is what you get in GNS3:

CCNP%20TSHOOT%20300%E2%80%93135%20Lab%20Exam%20Topology%20in%20GNS3
CCNP TSHOOT 300–135 Lab Exam Topology in GNS3.png779×838 127 KB

Im sharing two GNS3 portable projects:
https://drive.google.com/drive/folders/1_vrXFL6k0gWerRFtMjn4OmlEaqF6HVux?usp=sharing

CCNP TSHOOT 300–135 Lab Exam Topology – 001 Initial Configuration.gns3project

  • Contains only initial configuration to enable reachability between nodes.
  • Everything is left as default, except DSW1 and DSW2 STP priority changed, switches are primary/secondary roots for specific vlans.

CCNP TSHOOT 300–135 Lab Exam Topology – 002 Basic Configuration.gns3project

  • Based on previous initial configuration and adds following stuff to the table.
  • Authentication for PPP line, R6 requires CHAP, R1 requires PAP.
  • BGP authentication.
  • Various OSPFv2 authentications configured.
  • Various OSPFv3 authentications configured (using AH/ESP).
  • Various EIGRP authentications configured.
  • LACP priority settings changed, DSW1 and DSW2 are now in charge.
  • Spanning-Tree mode changed to MST.
  • VTPv3 used to synchronize MST Instance-to-VLAN mapping.
  • Portfast enabled globally on ASW1 and ASW2 for all access operational ports.
  • BPDUfilter enabled globally on ASW1 and ASW2 for all Portfast operational ports.
  • BPDUguard enabled globally on ASW1 and ASW2 for all Portfast operational ports.
  • UDLD enabled in aggresive mode for trunking interfaces on all switches.
  • CDP disabled on ASW1 and ASW2 for all access client ports.
  • DHCP snooping configured for VLAN 10 on ASW1.
  • DSW1 and DSW2 are configured to accept DHCP requests with option 82 and 0.0.0.0 giaddr.
  • DAI configured for VLAN 10 on ASW1.
  • Port-security configured on ASW1 for client access ports, with sticky keyword.
  • Errdisable automatic recovery from psecure-violation configured on ASW1.
  • HSRP version changed to 2, authentication added, preempt reload delay added.
  • HSRP priority is now bound to tracked object.
  • VRRPv3 configuration added for VLAN 20.
  • uRPF configured on all routers.

In case you dont want to import full GNS3 project there are also shared running-configs in txt files for all nodes, thus you can take a look.

I hope this helps to someone, or at least saves you some time from creating topology from scratch.

2

Thanks you very much @fugazz

IT looks very helpfull and It is clrealy will help me get the whole picture and idea behind this lab and the required configuration!

3

Hello Michael

Wow, this is impressive, thanks so much for sharing that!! It is much appreciated.

Laz