1、工大CCNP 實驗手冊CCNP Lab ManualIndexBuilding Scalable Cisco Internetworks3Lab 1.Lab 2.Lab 3.Lab 4.Lab 5.Lab 6.Lab 7.Lab 8.Lab 9.Lab 10.Lab 11.Lab 12.Lab 13.Lab 14.Lab 15.Lab 16.Lab 17.Lab 18.Lab 19.Lab 20.Lab 21.Lab 22.Lab 23.Lab 24.Lab 25.Lab 26.Lab 27.Lab 28.Lab 29.Lab 30.Configuring Basic EIGRP4Config

2、uring Default-network for EIGRP8Manually Summarizing EIGRP Routes15Configuring EIGRP Unequal-Cost Paths22Configuring EIGRP Authentication26Understand EIGRP Query30Configuring Basic Multi Area OSPF and Area Summary38Configuring OSPF in NBMA43Configuring OSPF Authentication51Configuring OSPF External

3、Summary58Configuring OSPF Default Route With Metric62Configuring OSPF Stub Area66Configuring OSPF Totally Stub Area71Configuring OSPF NSSA Area and NSSA Totally Stub75Configuring OSPF Virtual-Link83Configuring OSPF Virtual-Link（Cont.）87Understand OSPF Routing Between Inter Area91Configuring Basic IS

4、-IS94Configuring IS-IS Multi Area and Summary Route99Migrate IS-IS Area106Redistributing into RIP and OSPF111Redistributing into EIGRP and IS-IS115Redistribution Using Administrative Distance120Filtering Routing Updates with a Distribute List123Filtering Routing Updates with a Router Maps127Using Ro

5、ute Tag Filtering Routing Updates131Policy-based route135Configuring Basic BGP140Configuring BGP Using Loopback Addresses144Understand BGP Auto-Summary148© 2007 EduR, Inc.1s.工大CCNP 實驗手冊Lab 31.Lab 32.Lab 33.Lab 34.Lab 35.Lab 36.Lab 37.Lab 38.Lab 39.Lab 40.Lab 41.Lab 42.Configuring BGP Summarizat

6、ion153Understand BGP Sychronization Rule157BGP Neighbor Authentication165Configuring BGP Local Preference170Using Route Maps to Configuring BGP Local Preference176Configuring BGP Multi-Exit Discriminator183Configuring BGP Weight189Affects the BGP Routing By Path Prepend195Using Route Tag to Store BG

7、P AS-Path199Using Distribute-list to Filtering BGP Routing205Using Route-Map to Filtering BGP Routing208Using Prefix-List to Filtering BGP Routing211Building Cisco Multilayer Switched Networks216Lab 43.Lab 44.Lab 45.Lab 46.Lab 47.Lab 48.Configuring 802.1x Port-Based Authentication217Routing Between

8、VLANs and VTP Protocol224Configuring L2 & L3 EtherChannel with PAgP234Configuring L2 & L3 EtherChannel with LACP242Configuring Layer 3 Redundancy with HSRP247Configuring Layer 3 Redundancy with VRRP255Implementing Secure Converged Wide Area Networks262Lab 49.Lab 50.Lab 51.Lab 52.Lab 53.Lab 5

9、4.Lab 55.Lab 56.Lab 57.Lab 58.Lab 59.Lab 60.Lab 61.Lab 62.Lab 63.Configuring the CPE as the PPPoE Client263Configuring GRE Tunnels275Configuring IPsec Site-to-Site With Preshare-Key279Configuring IPsec Site-to-SiteUsing SDM292Configuring GRE Tunnels over IPsec With Preshare-key301Configuring GRE Tun

10、nels over IPsec using SDM308Configuring Cisco Easyand EasyServer Using SDM320Basic MPLS Frame-Mode Configuration336Basic MPLSConfiguration343Configuring Reflexive ACL358Configuring Two-Interface Firewall with CBAC365Configuring Three-Interface Firewall with CBAC372Configuring Cisco Router AutoSecure

11、379Enable Authentication Proxy388Configuring an SSH Server for Secure Management394Optimizing Converged Cisco Networks401© 2007 EduR, Inc.2s.工大CCNP 實驗手冊CCNP Lab ManualBuilding Scalable Cisco Internetworks© 2007 EduR, Inc.3s.工大CCNP 實驗手冊CCNP Lab ManualLab 1.Configuring Basic EIGRP實驗目的：1、掌握 E

12、IGRP 的基本配置。2、掌握 EIGRP 的通配符掩配置方法。3、掌握 EIGRP 的自動匯總特性，以及如何關閉自動匯總。4、掌握 EIGRP 的手工匯總。實驗拓撲圖：© 2007 EduR, Inc.4s.工大CCNP 實驗手冊實驗步驟及要求：1、配置各由器的 IP 地址，并且使用 ping 命令確認各器的直連口的互通性。2、在三由配置 EIGRP 自編號為 50。3、登錄到 R2器，作如下配置（其它器參照其進行配置）：4、在任意一由器上觀察 EIGRP 的鄰居關系：其中：列 H 指出鄰居學習的順序,Address 指出鄰居地址，Interface 指出鄰居所在本地接口。5、在任

13、意一由器上查看器，確認：6、在 R1器上使用更簡潔的查看關于 EIGRP 的命令：© 2007 EduR, Inc.5s.R2#show ip route eigrpR2#show ip route172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks C172.16.1.4/30 is directly connected, Serial1/1D172.16.0.0/16 is a summary, 00:06:33, Null0C172.16.1.0/30 is directly connected, Serial1/0D1

14、92.168.4.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1 D10.0.0.0/8 90/2297856 via 172.16.1.1, 00:06:34, Serial1/0C 131.131.0.0/16 is directly connected, Loopback0D 192.168.0.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1 D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1 D 19

15、2.168.2.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1 D 192.168.3.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1 R2#R2#show ip eigrp 50 neighborsIP-EIGRP neighbors for process 50HAddressInterfaceHold UptimeSRTTRTO Q Seq (sec)(ms)Cnt Num1172.16.1.6Se1/113 00:00:37 436 2616 0 20172.16.1.1Se

16、1/013 00:02:34 736 4416 0 4R2#configure terminal R2(config-if)#router eigrp 50R2(config-router)#network 172.16.0.0R2(config-router)#network 131.131.0.0 R2(config-router)#exit工大CCNP 實驗手冊7、我們注意到在 R2器上有一條指向 s1/0 口的 10.0.0.0/8 的匯總，這是 EIGRP協議自動匯總的特性體現。可以使用 noauto-summary 命令關閉。如下：隨后在 R2 上觀察表的變化，如下顯示：7、EIG

17、RP 也可以進行手工地址總結。手工地址總結，可以有效的減少表的大小。比如在 R2 上的中關于 R3 的 192.168.*.*的網絡顯示為四條具體，可以在 R3 上進行如下配置，減少通告條目。© 2007 EduR, Inc.6s.R3(config)#interface serail 1/0R3(config-if)#ip summary eigrp 50 192.168.0.0 255.255.252.0 R3(config-if)#exitR2#show ip route eigrp172.16.0.0/16 is variably subnetted, 3 subnets,

18、2 masks D172.16.0.0/16 is a summary, 00:07:26, Null0D192.168.4.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/110.0.0.0/24 is subnetted, 4 subnetsD10.1.3.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D10.1.2.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D10.1.1.0 90/2297856 via 172.16.1.1, 00

19、:02:31, Serial1/0D10.1.4.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 192.168.0.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1 D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1 D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1 D 192.168.3.0/24 90/2297856 via 172

20、.16.1.6, 00:05:09, Serial1/1 R2#R1(config) R1(config)#router eigrp 50R1(config-router)#no auto-summary R1(config-router)#exitR1(config)#172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks D 172.16.0.0/16 is a summary, 00:10:09, Null0D 192.168.4.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1

21、 D 10.0.0.0/8 90/2297856 via 172.16.1.1, 00:10:10, Serial1/0D 192.168.0.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1 D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1 D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1 D 192.168.3.0/24 90/2297856 via 172.16.1.6, 00:0

22、8:14, Serial1/1R2#工大CCNP 實驗手冊8、觀察 R2器的表:9、在 R2 上使用通配符掩碼進行配置 EIGRP:10、在 R2 確認鄰居，此處僅發現與 R1 建立了鄰居關系。11、查看 R1 的表，進行確認所學習到的。12、實驗完成。工大Cisco 課程開發小組© 2007 EduR, Inc.7s.R1#show ip route eigrp172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks D172.16.0.0/16 is a summary, 00:02:55, Null010.0.0.0/8 i

23、s variably subnetted, 5 subnets, 2 masks D10.0.0.0/8 is a summary, 00:02:55, Null0D131.131.0.0/16 90/2297856 via 172.16.1.2, 00:00:06, Serial1/1R1#R2#show ip eigrp neighborsIP-EIGRP neighbors for process 50HAddressInterfaceHold UptimeSRTTRTO Q Seq (sec)(ms)Cnt Num0172.16.1.1Se1/012 00:04:57 1510 500

24、0 0 5R2(config)#no router eigrp 50 R2(config)#router eigrp 50R2(config-router)#network 172.16.1.0 0.0.0.3R2(config-router)#network 131.131.0.0 R2(config-router)#exitR2#show ip route eigrpD10.1.1.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D10.1.4.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D

25、192.168.0.0/22 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1工大CCNP 實驗手冊CCNP Lab ManualLab 2.Configuring Default-network for EIGRP實驗目的：1、掌握通過 ipdefault-network 命令配置 EIGRP 默認網絡。實驗拓撲圖：© 2007 EduR, Inc.8s.工大CCNP 實驗手冊實驗步驟及要求：1、配置各由器的 IP 地址，并且使用 Ping 命令確認各器的直連口的互通性。2、配置 R3器用于模擬外部網絡，也可以把其假想為 Internet

26、 網絡，并且在 R3 上配置一條默認用于，以便來自于 EIGRP 內部網絡的數據包。3、配置 R1、R2 和 R5器的 EIGRP協議，配置如下所示：4、在 R2 上查看 EIGRP 的鄰居，確認 EIGRP 正常運行：5、在 R2 上配置靜態默認，用于到達外部網絡，配置如下：© 2007 EduR, Inc.9s.R2(config)#ip route 0.0.0.0 0.0.0.0 192.168.10.2R2(config)#R2#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Ech

27、os to 192.168.1.1, timeout is 2 seconds:.!Success rate is 80 percent (4/5), round-trip min/avg/max = 4/43/92 msR2#show ip eigrp neighborsIP-EIGRP neighbors for process 50HAddressInterfaceHold UptimeSRTTRTO Q Seq Type (sec)(ms)Cnt Num.16.1.1Et1/012 00:00:541 3000 0 21172.16.1.6Et1/211 00:00:54R2(conf

28、ig)#router eigrp 50R2(config-router)#network 172.16.0.0 R2(config-router)#exitR5(config)#router eigrp 50R5(config-router)#network 172.16.0.0 R5(config-router)#exitR1(config)#router eigrp 50R1(config-router)#network 172.16.0.0 R1(config-router)#exitR3(config)#R3(config)#ip route 0.0.0.0 0.0.0.0 192.1

29、68.10.1R3(config)#工大CCNP 實驗手冊6、器 R2 作為企業的出口器，由于其配置了靜態，因此其可以直接外部，但是內部的 R1 和 R5器由于缺少，因此無法。下面顯示了 R1器的表和其部發起 ping 的結果：7、為了解決問題，只需要在 R1 和 R5器上配置一條指向 R2器的靜態默認即可，如下所示：© 2007 EduR, Inc.10s.R1(config)#ip route 0.0.0.0 0.0.0.0 172.16.1.2R5#show ip routeGateway of last resort is not set 172.16.0.0/30 is s

30、ubnetted, 2 subnetsC172.16.1.4 is directly connected, Ethernet1/1D172.16.1.0 90/307200 via 172.16.1.5, 00:12:15, Ethernet1/1 R5#R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.Success rate is 0 percent (0/5) R5#R1#show ip routeGat

31、eway of last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsD172.16.1.4 90/284160 via 172.16.1.2, 00:06:40, FastEthernet0/1C172.16.1.0 is directly connected, FastEthernet0/1 R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 second

32、s:.Success rate is 0 percent (0/5) R1#R2#工大CCNP 實驗手冊8、根據上面配置，其實只需要給內部器配置默認指向出口器 R2 即可解決外部網絡無法的問題。但是如果內部網絡器數量較多時，采用手© 2007 EduR, Inc.11s.R5(config)#ip route 0.0.0.0 0.0.0.0 172.16.1.5 R5(config)#exitR5#R5#show ip routeGateway of last resort is 172.16.1.5 to network 0.0.0.0 172.16.0.0/30 is subne

33、tted, 2 subnetsC172.16.1.4 is directly connected, Ethernet1/1D172.16.1.0 90/307200 via 172.16.1.5, 00:13:57, Ethernet1/1 S*0.0.0.0/0 1/0 via 172.16.1.5R5#R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent

34、(5/5), round-trip min/avg/max = 32/53/64 ms R5#R1(config)#exit R1#show ip routeGateway of last resort is 172.16.1.2 to network 0.0.0.0172.16.0.0/30 is subnetted, 2 subnetsD172.16.1.4 90/284160 via 172.16.1.2, 00:09:19, FastEthernet0/1C172.16.1.0 is directly connected, FastEthernet0/1 S*0.0.0.0/0 1/0

35、 via 172.16.1.2R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 48/71/92 ms R1#工大CCNP 實驗手冊工配置靜態默認，則會顯得非常繁鎖。因此，建議采用默認網絡命令，讓R2器自動的向內部通告默認。9、將 R1 和 R5 的靜態默認刪除后，查看 R1 和 R5

36、的表。如下所示：© 2007 EduR, Inc.12s.R5(config)#no ip route 0.0.0.0 0.0.0.0 172.16.1.5 R5(config)#exitR5#R5#show ip routeGateway of last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsC172.16.1.4 is directly connected, Ethernet1/1D172.16.1.0 90/307200 via 172.16.1.5, 00:19:42, Ethernet1/1 R5#R5

37、#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.Success rate is 0 percent (0/5)R1(config)#no ip route 0.0.0.0 0.0.0.0 172.16.1.2 R1(config)#exitR1#R1#show ip routeGateway of last resort is not set 172.16.0.0/30 is subnetted, 2 subne

38、tsD172.16.1.4 90/284160 via 172.16.1.2, 00:19:02, FastEthernet0/1C172.16.1.0 is directly connected, FastEthernet0/1 R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.Success rate is 0 percent (0/5) R1#CCNP 實驗手冊工大10、在 R2 上配置默認網絡，配

39、置如下所示：11、查看 R1 和 R5器的表，并且嘗試外部網絡：© 2007 EduR, Inc.13s.R5#show ip routeR1#show ip routeGateway of last resort is 172.16.1.2 to network 192.168.10.0D*192.168.10.0/24 90/284160 via 172.16.1.2, 00:02:03, FastEthernet0/1172.16.0.0/30 is subnetted, 2 subnetsD172.16.1.4 90/284160 via 172.16.1.2, 00:02:

40、04, FastEthernet0/1C172.16.1.0 is directly connected, FastEthernet0/1 R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 48/105/188 ms R1#R2(config)#router eigrp 50R2(con

41、fig-router)#network 192.168.10.0 R2(config-router)#exitR2(config)#ip default-network 192.168.10.0 R2(config)#exitR2#show ip routeGateway of last resort is 192.168.10.2 to network 0.0.0.0*192.168.10.0/24 is variably subnetted, 2 subnets, 2 masks D*192.168.10.0/24 is a summary, 00:00:53, Null0C192.168

42、.10.0/30 is directly connected, Ethernet1/1 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masksC172.16.1.4/30 is directly connected, Ethernet1/2 D172.16.0.0/16 is a summary, 00:22:22, Null0C172.16.1.0/30 is directly connected, Ethernet1/0 S*0.0.0.0/0 1/0 via 192.168.10.2R2#R5#工大CCNP 實驗手冊12、使用 ip

43、 default-network 命令可以有效減少內部網絡配置任務。不過需要注意的是 ip default-network 其指出默認網絡，建議采用主類網絡。如果使用無類網絡，則可能會出現無法解釋的問題。38、實驗完成。工大Cisco 課程開發小組© 2007 EduR, Inc.14s.Gateway of last resort is 172.16.1.5 to network 192.168.10.0D*192.168.10.0/24 90/307200 via 172.16.1.5, 00:04:15, Ethernet1/1172.16.0.0/30 is subnette

44、d, 2 subnetsC172.16.1.4 is directly connected, Ethernet1/1D172.16.1.0 90/307200 via 172.16.1.5, 00:04:19, Ethernet1/1 R5#R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 7

45、6/87/96 ms R5#工大CCNP 實驗手冊CCNP Lab ManualLab 3.Manually Summarizing EIGRP Routes實驗目的：1、理解 EIGRP 的自動匯總的缺點。2、掌握 EIGRP 的手工自動總結的配置方法。實驗拓撲圖：© 2007 EduR, Inc.15s.工大CCNP 實驗手冊實驗步驟及要求：1、配置各由器的 IP 地址，并且使用 Ping 命令確認各器的直連口的互通性。2、配置各由器的 EIGRP 協議,并且不關閉自動總結。3、在 R2 上使用 ping 測試網絡，會發現 R2器無法 ping 通器 R4所連接的 10.1.X.

46、0/24 網絡子網。如下所示：4、查看 R2 的表：© 2007 EduR, Inc.16s.R2#show ip routeGateway of last resort is not set 172.16.0.0/30 is subnetted, 3 subnetsD172.16.1.8 90/307200 via 172.16.1.6, 00:06:25, Ethernet1/1C172.16.1.4 is directly connected, Ethernet1/1 C172.16.1.0 is directly connected, Ethernet1/0D10.0.0.0

47、/8 90/409600 via 172.16.1.1, 00:06:09, Ethernet1/0D192.168.0.0/24 90/409600 via 172.16.1.6, 00:06:25, Ethernet1/1R2#ping 10.1.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 1/46/92 ms R2#R

48、2#ping 10.1.16.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.16.1, timeout is 2 seconds: U.U.USuccess rate is 0 percent (0/5) R2#R2#ping 10.1.17.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.17.1, timeout is 2 seconds: U.U.USuccess rate is 0 percent (0

49、/5)R2#工大CCNP 實驗手冊5、查看 R2器的拓撲數據庫：6、導致 R2 無法 ping器 R4 所連接的 10.1.X.0/24 的網絡主要是：R1本身屬于主類的邊界，其會將本地表中的子網向主類網絡自動匯總。而 R4也屬于主類的界，也會與 R1 做出相同的動作。因此 R2 會從不同的接口，收到相同的匯總，即 10.0.0.0/8 網絡。由于 R2 在比較了兩條的可行距離后，選擇了較小的 FD 值的，即 R1 通告的 10.0.0.0/8 匯總。而忽略了另外一個接口收到匯總。其實真正的，并不是選擇出錯，而是自動匯總不能做到精確的導致的。7、為了解決匯總問題，需要在 R1 和 R2 上關閉

50、自動匯總，而采用手工匯總。配© 2007 EduR, Inc.17s.R2#show ip eigrp topology all-linksIP-EIGRP Topology Table for AS(50)/ID(172.16.1.5)Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply, r - Reply statusP 10.0.0.0/8, 1 successors, FD is 409600, serno 3 via 172.16.1.1 (409600/128256), Ethernet1/0

51、via 172.16.1.6 (435200/409600), Ethernet1/1P 192.168.0.0/24, 1 successors, FD is 409600, serno 4 via 172.16.1.6 (409600/128256), Ethernet1/1P 192.168.1.0/24, 1 successors, FD is 409600, serno 5 via 172.16.1.6 (409600/128256), Ethernet1/1P 192.168.2.0/24, 1 successors, FD is 409600, serno 6 via 172.1

52、6.1.6 (409600/128256), Ethernet1/1P 192.168.3.0/24, 1 successors, FD is 409600, serno 7 via 172.16.1.6 (409600/128256), Ethernet1/1P 172.16.1.8/30, 1 successors, FD is 307200, serno 8 via 172.16.1.6 (307200/281600), Ethernet1/1P 172.16.1.4/30, 1 successors, FD is 281600, serno 2 via Connected, Ether

53、net1/1P 172.16.1.0/30, 1 successors, FD is 281600, serno 1 via Connected, Ethernet1/0R2#D 192.168.1.0/24 90/409600 via 172.16.1.6, 00:06:25, Ethernet1/1 D 192.168.2.0/24 90/409600 via 172.16.1.6, 00:06:25, Ethernet1/1 D 192.168.3.0/24 90/409600 via 172.16.1.6, 00:06:25, Ethernet1/1R2#CCNP 實驗手冊工大置如下：

54、8、再次查看 R2表：9、再次使用 ping 命令確認網絡可達性：© 2007 EduR, Inc.18s.R2#ping 10.1.0.1Type escape sequence to abort.R2#show ip routeGateway of last resort is not set 172.16.0.0/30 is subnetted, 3 subnetsD172.16.1.8 90/307200 via 172.16.1.6, 00:21:08, Ethernet1/1C172.16.1.4 is directly connected, Ethernet1/1 C172.16.1.0 is directly connected, Ethe