Packet Tracer - Use LLDP to Map a Network

Addressing Table

Objectives
Map a network using LLDP and SSH remote access.

Background / Scenario
A senior network administrator requires you to map the Remote Branch Office network and
discover information about all of the devices in the network. You must record all of the network
device names, IP addresses and subnet masks, and physical interfaces interconnecting the
network devices.
To map the network, you will use SSH for remote access and the Link Layer Discovery Protocol
(LLDP) to discover information about neighboring network devices. Because LLDP is a Layer 2
protocol, it can be used to discover information about devices that do not have Layer 3
connectivity. You will record the information that you gather to complete the Addressing Table
and provide a topology diagram of the Remote Branch Office network.

You will need the IP address for the remote branch office, which is 209.165.200.10. The local
and remote administrative usernames and passwords are:

Local Network

Username: admin01

Password: S3cre7P@55

Remote Branch Office Network

Username: RBOadmin

Password: S3cre7P@55

Instructions
Part 1: Use SSH to Remotely Access Network Devices
In Part 1, you will use the Admin-PC to remotely access the Edge gateway router. Next, from
the Edge router you will SSH into the Remote RBO Office.

a. On the Admin-PC, open a command prompt.

b. SSH into the gateway router at 192.168.1.1 using the username admin01 and the
password S3cre7P@55.

PC> ssh –l admin01 192.168.1.1

Open

Password:

Edge#

Note: Notice that you are placed directly into privileged EXEC mode. This is because the
admin01 user account is set to privilege level 15.
c. The Edge router was previously configured to use CDP. Switch S1 has already been
configured to use LLDP. Issue the show cdp command to verify CDP is currently active. Disable
CDP by issuing the following command:

Edge(config)# no cdp run

d. LLDP can be configured to both transmit and receive on a specific interface. Configure
Edge so that it receives LLDP messages from S1 but does not send messages to S1 for
security purposes Enable LLDP.

Edge(config)# lldp run

Edge(config)# int g0/0

Edge(config-if)# no lldp transmit

Edge(config-if)# exit

e. Use the show lldp neighbors command to verify that Edge is receiving messages from S1.

f. Connect to S1 with SSH from Edge router using the admin01 credentials. Issue the show
lldp neighbors command. Notice that S1 did not receive information from Edge.

Edge# ssh –l admin01 192.168.1.2

Password:

S1> show lldp neighbors

S1> exit

g. Exit from the connection with S1 to return to the Edge router CLI. Use the show ip interface
brief and show interfaces commands to document the Edge router’s physical interfaces, IP
addresses, and subnet masks in the Addressing Table.

Edge# show ip interface brief

Edge# show interfaces

h. From your session with Edge router, connect with SSH to the Remote RBO Office at
209.165.200.10 with the username RBOadmin and the same password used for admin01.

Edge# ssh –l RBOadmin 209.165.200.10

Password:
RBO-Edge#

After connecting to the Remote RBO Office at 209.165.200.10 what piece of previously missing
information can now be added to the Addressing Table above?
The RBO-Edge router hostname

Part 2: Use LLDP to Discover Neighboring Devices

You are now remotely connected to the RBO-Edge router. Using LLDP, begin looking for
connected network devices.

a. Issue the show ip interface brief and show interfaces commands to document the RBO-
Edge router’s network interfaces, IP addresses, and subnet masks. Add the missing information
to the Addressing Table.

b. Security best practice recommends only running LLDP when needed, so LLDP may need
to be turned on. Use a show lldp command to test its status.

RBO-Edge# show lldp

% LLDP is not enabled

c. You need to turn on LLDP, but it is a good idea to only send LLDP information to internal
network devices and not to external networks. Discover which interface is connected to the
internet by issuing the command show ip interface brief. Enable the LLDP protocol and
completely disable LLDP on the interface that is connected to the internet.

RBO-Edge# configure terminal

RBO-Edge(config)# lldp run

RBO-Edge(config)# interface g0/0

RBO-Edge(config-if)# no lldp transmit

RBO-Edge(config-if)# no lldp receive

RBO-Edge(config-if)# exit

d. Issue a show lldp neighbors command to find any neighboring network devices.
Note: LLDP will only show connected devices that are also running LLDP.

RBO-Edge# show lldp neighbors

Is there a neighboring network device? What type of device is it? What is its name? On what
interface is it connected? Is the device’s IP address listed? Record the information in the
Addressing Table.
It is a router. Its name is RBO-Firewall and it is connected on interface G0/0. The IP address of
the device is not listed.

e. Use the show ip route command to determine the address of the device that you found with
the show lldp neighbors command. Based on the information provided about the local address
in the routing table and the prefix length of the network use that information to determine the
neighbor address.

f. To find additional information from the neighboring device, use the show lldp neighbors
detail command:

RBO-Edge# show lldp neighbors detail

What other piece of potentially sensitive information is listed?

The neighboring device’s IOS software version.

Note: The current version of Packet Tracer does not provide the Management Address of the
neighbor device. In this activity several neighbor device addresses have been provided in the
Addressing Table.

g. Connect to the neighbor device with SSH to discover other devices that may be its
neighbors.

Note: To connect with SSH use the same Remote RBO Office username and password.

RBO-Edge# ssh –l RBOadmin <the ip address of the neighbor device>

After successfully connecting with SSH, what does the command prompt show?
RBO-Firewall#
h. You are remotely connected to the next neighbor. Use the show lldp neighbors command,
and the show lldp neighbors detail command, to discover other connected neighbor devices.

What types of network devices neighbor this device? Record any newly discovered devices in
the Addressing Table. Include their hostname, interfaces, and IP addresses.
A router (RBO-Edge) and a switch (sw-rbo1). The sw-rbo1 switch is a newly discovered device
on the G0/1 interface.

Add the newly discovered device name next to the SVI entry for address 192.168.4.131.

i. Connect to the SVI for address 192.168.4.131 using SSH and credentials used previously.
If prompted for an enable secret password, use the same password as used for RBOAdmin.
Use the show lldp neighbors command, and the show lldp neighbors detail command, to
discover other connected neighbor devices.

What types of network devices neighbor this device? Record any newly discovered devices in
the Addressing Table. Include their hostname, interfaces, and IP addresses.
A router (RBO-Firewall), a switch (sw-rbo2). The sw-rbo2 switch is a newly discovered device
on the G0/2 interface.

Place the newly discovered device name next to the SVI entry for address 192.168.4.132.

j. Connect to the SVI for address 192.168.4.133 using SSH and credentials used previously.
Issue the command show lldp, you should receive a message:

% LLDP is not enabled

Enable lldp globally as in Step C. There is no need to configure transmit or receive options
because they are on by default. Use the show lldp neighbors command, and the show lldp
neighbors detail command, to discover other connected neighbor devices.

What types of network devices neighbor this device? Record any newly discovered devices in
the Addressing Table. Include their hostname, interfaces, and IP addresses. It may be beneficial
to reconnect to the previously discovered devices to display neighbors one more time to
complete the entire addressing table now that all devices are configured for LLDP.
A switch (sw-rbo1) that is connected to Fa0/24, a switch (sw-rbo2) that is connected to G0/1.

k. Draw a topology of the Remote RBO Office network using the information that you have
gathered with LLDP.