新版NP642-832Ts排错890分Pass(破 处了)

和气生财

今天下午 考完！由于公司只报销一次200美元的考试费，所以比较认真做题！差不多把考试时间耗光光！
( a3 G& ?" X: @$ y. J- x, y对于不会使用show  debug  ping 等命令来排错的兄弟(没有任何中小型网络设计 经验的兄弟 就不要去送钱了)！ 估计3个小时时间 不够用的！！！
9 ?* M% A2 t, T  J% E% i0 C4 i! d3 G
首先比较感谢
. `3 D& p' b2 h, i2 |$ g2 VNP642-832备考QQ群:105918054
- [3 H) v6 Q6 s的群主及兄弟姐妹 (注意网上的题库不可信，那都是假的！群主说那些网上832题库是05年CIT考试题库的改版)
% {; b) O5 U, R) G' X给我提供了类似CCIE排错考试的.net文件
- s: \8 Y5 I% @* x$ f7 o% qautostart = False
[localhost]
    port = 7200
: B4 x" h8 B: F. i    udp = 10000
+ E3 ]  x( D! T    workingdir = ..\tmp\
6 R. `7 A8 Q: X9 M  o/ @   
    [[3725]]
, X# y7 j% d/ z2 X        image = ..\ios\unzip-c3725-adventerprisek9-mz.124-15.T5.bin
- t( L  j9 D' w        ram = 128
6 Z5 r5 @. ~4 B& Y; _0 D        confreg = 0x2102
        exec_area = 64
: A- Y8 i! k: q# e/ T4 N, R# Z        mmap = False
4 [. b$ L0 Y5 W3 S$ B        slot1 = NM-16ESW
' ~& H& c# L! H    [[2621]]
        image = ..\ios\unzip-c2600-i-mz.121-3.T.bin
5 Y! {6 S& `3 t2 v' k# g        ram = 20
        mmap = False
; W9 S+ w3 _. N5 Q, H& u& C        confreg = 0x2102
        ghostios = true
        sparsemem = true
4 h; k- m* Y0 Z#    [[2691]]
#        image = ..\ios\unzip-c2691-advsecurityk9-mz.124-11.T2.bin
#        ram = 100
2 z4 M4 g% I0 _, w4 @. H$ r; |#        confreg = 0x2142
#        exec_area = 64
+ h( y1 ^! Y  M; d/ {$ N#        mmap = False
#        slot1 = NM-4T
    [[7200]]
) h$ R* e0 w9 ?, y5 ?        image = ..\IOS\unzip-c7200-js-mz.123-20.bin
        npe = npe-400
4 D8 |5 t% P  O7 q        ram = 96
; ^8 {  s% h; h2 e/ [        confreg = 0x2102
! F4 L1 U- T; k* x8 d        exec_area = 64
        mmap = False
. J7 \1 Y. ~% D' j( `: j        slot0 = PA-C7200-IO-2FE
% C- n8 d0 D$ i5 ^        slot1 = PA-4T
4 _) ]/ `! B1 H; M1 b3 p    [[router Client1]]
        model = 2621
        console = 3011
2 z2 W; {6 z7 D9 z) P$ D        f0/0 = ASW1 F1/1
    [[router Client2]]
* l$ ?* ~& x% j/ @% W        model = 2621
        console = 3012
        f0/0 = ASW1 F1/2
/ _) B  z5 a) w. q    [[router FTP]]
        model = 2621
        console = 3013
        f0/0 = ASW2 F1/1
    [[router WEB]]
        model = 2621
        console = 3014
$ e/ _* X+ M  x" ~        f0/0 = Cloud F0/0
    [[router ASW1]]
  m$ h* [! A9 p* C3 ^        model = 3725
        console = 2001
0 V# E# k4 b! [5 `2 n1 I1 m$ L& W        f1/10 = DSW1 f1/10
) G3 |; V6 `2 \; Q1 B. {: O        f1/11 = DSW1 f1/11
        f1/12 = DSW2 f1/12
        f1/13 = DSW2 f1/13
    [[router ASW2]]
1 z. G$ W% H6 i' L1 ?9 X        model = 3725
        console = 2002
: u9 {+ Q+ i% ^4 n! t- a! z; I        f1/10 = DSW2 f1/10
        f1/11 = DSW2 f1/11
        f1/12 = DSW1 f1/12
        f1/13 = DSW1 f1/13
% L4 q$ N/ E& u; Y9 ^! K    [[router DSW1]]
5 U) G+ B4 C6 @( Y6 I% S9 _( R        model = 3725
; _; a: l; O4 r4 v        console = 2003
- Y, T  e9 e6 R: e/ w        f1/14 = DSW2 f1/14
        f1/15 = DSW2 f1/15
1 W3 K; I1 s% U9 l5 y    [[router DSW2]]
: o1 a  v- k; J% e3 Y) R        model = 3725
% q1 V4 [& m: b. ]# q) p/ i' T        console = 2004
& ]8 e4 T9 W4 d9 c1 a* P* i    [[router R1]]
        model = 7200
        console = 3001
        s1/0 = FR 1
2 J  x! j$ _2 z; \    [[router R2]]
        model = 7200
        console = 3002
3 H! g3 A5 s8 E        s1/0 = FR 2
! q9 D4 e# P5 g# c0 z) G    [[router R3]]
        model = 7200
        console = 3003
        s1/0 = FR 3
    [[router R4]]
, c# k! ~8 w. u        model = 7200
, j9 |  C% K! C3 W8 _        console = 3004
        s1/0 = FR 4
        f0/0 = DSW1 f1/1
        f0/1 = DSW2 f1/1
; o5 u/ P6 \5 ]7 n2 G   [[router Cloud]]
        model = 7200
        console = 3005
! `& ?* N; N/ g8 T: o2 |) T: f        s1/1 = R1 s1/1
, M' M  c; v9 W- m' g3 w    [[FRSW FR]]
        1:102 = 2:201
        2:203 = 3:302
        3:304 = 4:403
. R5 K! @0 n0 s7 o# Y有了初始TroubleShoting！让我去排错！
5 V) B( k# K" y考试时间应该是140+20分钟
题目数量45–55 questions
16个选择(包括多项)和2-3个拖拽(拖图)题！ 这部分只能使用show  debug  ping trancer等排错命令来完成！！！
然后是一个大实验排错题！(差不多30个环境排错)
有L2 TOP /L3 TOP/IPv6 TOP
9 j& f6 j* t5 s: |4台交换机(其中2台是3层交换机 2台2层交换)  4台路由器    2个PC属于不同的VLAN  2台服务器(一个是外网的)
类似：
http://www.cisco.com/web/learning/le3/le2/le37/le10/tshoot_demo.html
/ \3 ^/ e- ]4 P) p( j$ O涉及的知识比较多：(毕竟工作排错的场景 可能比这个还困难 所以大部分的题 都能排出来！)
EIGRP
/ V! I# H. Y8 H9 @OSPF
* H3 e$ l' a* o  L) }2 Q& j" L* _1 |eBGP
Redistribution
0 n" m! _3 _3 B; dDHCP Client and Server
NAT
# k2 {7 n! \( ~$ Q' AHSRP/VRRP/GLBP
8 o# W& f* p" |$ E0 |IPv6 Routing
( x# v2 L4 S( v, [+ P, m) u$ Q, S$ |IPv6 Transition Techniques
" M' R' t( B$ P% SL2 Trunking
L2 STP
- d$ s4 ]1 v$ M. I0 d$ s1 gL2 DTP
Private VLANs
Port Security
Switch Security
VACLs/PACLs
$ o+ h, X8 O" U  c$ }L2 SVIs
% d+ `# b4 H4 Q( K3 ISupervisor Redundancy
1 W: j: P( g, NNTP
Switch Support of Wireless, VOIP, and Video
Router Security
ACLs
AAA
IOS Service Security
3 \: n/ \# F+ }! B我的排错思路一定要有强大的路由和交换的理论知识及排错经验，除非有题库了！！！)
从2层开始 排错  然后到IGP    BGP  IPv6  NAT ！！后面就是一些高级服务的排错！
(1)首先 2边 Trunk的封装类型 不一样(一边ISL  一边是802.1q),VLNA 接入端口，本征VLAN是否一样！
# a3 b, ^* Q2 g( Q( f9 P' g交换机 连接路由器的单臂路由接口！
; W& c/ z* @4 S' u5 J# T端口安全   L2的东西 还真多
2 D# E0 h% Z4 d( A/ p. G( |8 u不记得 是不是跳过一个 Etherchannel题目！ 好像是这个以太网信道没起作用的！
8 a1 K  o# \) ^5 ]7 H$ G(2)特别 注意NAT  ip nat inside 打在主接口 是错误的！
! x# |# H( {2 P# B4 f(3)EIGRP的邻居建立不起来  这个比较简单  K值不一样！
8 v' X& j  Y. }* t" ^$ }(4)OSPF NSSA区域 导致邻居不起来  还有OSPF的认证
6 l2 h* ]% a+ Z3 E' ^) k$ J(5)ACL有错
(6)重发布route-map控制的时候有错 ，要特别注意有空语句 那个才对
  V% m' R+ f+ Z. _: s(7)BGP的nei 不对 一直在active状态
0 f6 G* k+ d5 V$ t1 V0 U2 S(8)IPv6的OSPFv3   区域放错了！
(9)HSRP的track 应该去掉！！
Ticket
1) Client 1 is not able to ping the server
+ t8 q/ v; g" lSitution 1: Unable to ping DSW1(Use L2 Diagram)
Vlan Access map is applied on DSW1 blocking the ip address of client 10.2.1.3
Ans1) DSW1
/ C" }! d" w% j# v8 h* u/ T: ~* D# ZAns2) Scroll down and click on vlan access map
Ans3)No vlan filter 10
7 M. u. `) ^$ y+ t. n1 a2) Client 1 is not able to ping the server
Situation2: Unable to ping DSW1(Use L2 Diagram)
" e8 B5 c( Y0 ^* g9 wOn ASW1 fa1/0/1 and fa1/0/2 switchport access vlan 10 command is not there
/ G. z* b9 A! FAns1)ASW1
Ans2)Access vlan
Ans3)give command: inte**ce range fa1/0/1-/2 switchport access vlan 10
3) Client 1 is not able to ping the server
8 v; e1 \0 d6 H- _# S: a' z$ USituation3: Unable to ping DSW1 in port channel configuratioin of ASW1 vlan 10 is not allowed. (Use L2 Diagram)
Ans1)ASW1
Ans2)Switch to switch connectivity
4 E% @/ z, z0 [$ b6 b% aAns3)on port channel 23 give switchport trunk allowed vlan 10,200
4) Client 1 is not able to ping the server
Situation4: Unable to ping DSW1(User layer 2).
+ I6 m" f0 ]7 Z: c9 C" S, sunder running config the mac address for fa0/1 is 0000.0000.0000.0001 and fa0/2 it 0002.
. N! B- M+ i, x; P8 d9 C% fAlso check show inte**ces fa1/0/1 and fa1/0/2, u will c that the inte**ce is in error disabled
/ l1 J" a0 Q, z( r2 mAns1)ASW1
$ y6 y' [3 L" OAns2)Port security
$ |/ y# h+ _2 r2 q7 Y/ K: LAns3) On fa1/0/1 and fa1/0/2 do disable port security and do shut ,no shut.
5) Client 1 is not able to ping the server
+ z% d5 `" q+ i" ^2 [Situation 5: Unable to ping R4 fast ethernet port from dsw1.
: z2 E( P/ z  l* Y. tcheck ip eigrp neighbors from DSW1 u willnot c R4 as neighbor.(use ipv4 Layer 3)
Ans1) R4
# V7 T& ^5 Z4 D. xAns2) IP4 EIGRP
( p% K# e" y7 ~8 d2 MAns3) Change eigrp process no: from 1 tp 10 because DSW1
3 O, T% a* r& }/ w8 u% {2 N
6 `4 y: O, s' j2 B1 K9 `$ e( g' }6) Client 1 is not able to ping the server
9 x# D$ r( U  c' rSituation 6: Unable to ping serial inte**ce of R4 from the clients.
Do show run, check the names of the route-maps. (use ipv4 Layer 3)
& M! n) S, j1 s1 w4 T) nAns1) R4
Ans2) route redistribution
/ S; M! E! ^( tAns3) change the name of the route-map under the router EIGRP or router OSPF process from ‘to’ to ‘->’.
7) Client 1 is not able to ping the server
& Q! Q# Q6 F! F& }. |: ~+ q, Y  X2 jSituation 7: client is unable to ping R1’s serial inte**ce from the client.
Check where authentication is not given under router ospf of R1. (use ipv4 Layer 3)
+ e. ^' k; r" {: {4 bAns1) R1
Ans2) ipv4 OSPF
- y8 i* s& B5 J9 [0 L6 q+ FAns3) ip ospf authentication command must be given under router OSPF
8) Client 1 is not able to ping the server
) u8 ^' c- v! {( Y! I2 ^7 wSituation 8: client is not able to ping the web server, but the routers can ping the server. NAT problem. (use ipv4 Layer 3)
2 u/ e4 f" J$ h: A) M& XAns1) R1
' z4 D. j# F) l; zAns2) IPV4 NAT
# V4 X2 z; N2 `! g+ V$ QAns3) under NAT access list, enter the command permit 10.2.0.0 0.0.255.255

9) Client 1 is not able to ping the server
' W( T- _% F) o% D0 tSituation 9: R1 is not able to ping 209.65.200.226.
check bgp neighborship.
The neighbor’s address in the neighbor command is wrong under router BGP. (use ipv4 Layer 3)
Ans1) R1
Ans2) BGP
Ans3) delete the wrong neighbor statement and enter the correct neighbor address in the neighbor command (change 209.56.200.226 to 209.65.200.226)
10) Client 1 is not able to ping the server
# {% \; P. |9 C4 QSituation 10: client is not able to ping the server. Except for R1, no one else can ping the server. (use ipv4 Layer 3)
* r& G/ Q4 n! k0 Q  nAns1) R1
Ans2) IPv4 Security
% U$ k4 v# E7 A+ N) \& X  B4 p3 TAns3) Add permit 209.65.200.224 0.0.0.3 to R1's ACL.
11) IPV6 loopback of R2 cannot be pinged from DSW1’s loopback.
! W1 w- Z1 }; ~4 o  z, y. S9 l; k1 vSituation 11: ipv6 ospf was not enabled on R2’s serial inte**ce connecting to R3. (use ipv6 Layer 3)
Ans1) R2
! U. N( h$ F4 @6 @! u+ zAns2) IPV6 ospf
2 k& f( k6 {8 \) ]* O  |Ans3) on the serial inte**ce of R2, enter the command, ipv6 ospf 6 area 0 (check the IPV6 topology.)
12) HSRP: DSW1 does not become active.
/ z. ^$ b# b2 D  w5 gSituation 12: under the standby configuration of DSW1, the command standby 10 track 1 decrement 60 is given, this has to be changed to track 10. (use ipv4 Layer 3)
8 [. ^0 P: w. S9 |; J: fAns1) DSW1
Ans2) HSRP
Ans3) delete the command with track 1 and enter the command with track 10.
/ z9 {5 r5 R- a  Z5 z/ n" q$ VASW1(3 TT)
1.Access vlan - add "switchport access vlan1"
2.Port Security - "no switchport port sec" and "shut" and "no sh"
3.Sw-to-Sw connection - in Po23 (in exam really write as this), "no switchport trunk allow vlan 20,200" and "switchport trunk allow vlan 10,200"
DSW1(2 TT)
1.VACL/vlan filter - "no vlan filter ... vlan-list 10"
(This is on the last line, pls scroll down to see)
7 C0 ?2 B9 Q' n( |# t' Z! T- q2.HSRP - int vlan10, "no standby 10 track 1..." and "standby 10 track 10..."
R4(2 TT)
: u3 z8 O5 i% Q1.IPv4 EIGRP - change as no. from 1 to 10
2.Redis. - change "redis ospf 1 route-map ..to" to "... ->"
Remember that no TT on R3
R2(1 TT)
1.IPv6 OSPF - enable ipv6 ospf on s0/0/0
R1(4 TT)
/ ~8 M+ @5 v- a; x  L, b7 @1.NAT - add "permit 10.2.0.0 0.0.255.255" to let client1 ping server
( A% |  ~/ \7 D5 d6 W0 l$ t2.BGP - change nei from "202.56..." to "202.65..." to form nei with ISP
0 i! F8 ^9 t2 g3 {' `. D+ n6 m3.Access list - in ip extended..., add "permit 202....22 0.0.0.3" to let every device ping server
0 d# O5 z2 G: i  g' m4.IPv4 OSPF - add "ip ospf authen" on s0/0/0 to form nei with R2

建议：没有准备充足的兄弟 还没有题库的情况下！ 就不要去考了！除非你钱多！！！！

1 O4 x7 I4 L) }7 y

淅灵神见

你这个考的是NP么? 这么复杂..

崔凯

haidong

wwcc890817

鸿鹄十一

这个  我看来要两年后了

minlecun

buishithahaha

Congratulations!!