10.17 SPOTO BJ H3

kirasawa

还是不错的哦

vty

路过路过

nhlmscql

谢谢分享

saadnwz

[First topo here] [thanks to the guys who shared this image from ccie 4 career dot com]
3 Y1 X& Z9 g9 _  b  h
# ]2 c$ ~1 a: g1 EQuestion 1: Layer 2
# ?4 B. ~5 i* g
- VLAN 12 is missing
- vlan 12 not ALLOWED over the trunk on SW2
! ~$ }9 p% L& X! h, O  l- Access vlan 100 to interface connect to PC 101.
- Passive-int in OSPF
% I& B& R. g# l  t- ACL on SW2 (?)

Question 2: PPP

4 `5 l9 S: h0 B" v$ R" l* {- Add command: peer default ip address pool in R12
4 [7 |. Y! N' G7 ~, w5 M- Remove ppp auth chap call out on R17 (WAN)
: X- u9 N' p" U# v: n6 \- Username was ..spoke1 on R12 but spoke1 on R17
" ?4 z5 @6 M( Y) G5 N  Q6 @1 q, h- Wrong password on R17
# z+ L" s4 M# l/ _8 W- R12 did not advertised the net in EIGRP

1 }. K+ @% {8 k# d3 KQuestion 3: OSPF

& T2 Y- X3 b' p5 I5 Q$ S9 Q- Correct IP address in R22 and remove max-metric router-lsa in R5.
- Remove cost on R1 (OSPF)
& A8 x4 M! [- Z  u' y6 {- passive-interface default on R22 and R21 was configured
- R22 : Wrong router-id

  P/ a8 o: z3 x4 u3 HQuestion 4: EIGRP
: ]1 M! `9 Q! G' U* d6 W
: O: v3 ^5 s! A& I- Modify access-list in R13.
- Remove delay on R13 and Set Metric (EIGRP)
+ _; w9 M! W3 @0 c: M+ x+ n- Metric weight of 0 1 1 1 1 was missing
6 F: j, m) u, C* \- Offset-list on R12 permitting any. Need to deny ip 145.15.15.15 above that.
: j% ^# j- h) q. `$ A  J% a- Passive Int on R14
$ R$ I, |" ?8 e3 Q$ {$ B
Question 5: BGP

/ D: s- `9 m3 U% u1 ]- Set metric in R4
3 R; a1 Y+ Z. G) u4 u9 g- Active neighborship between R4 & R5.
- set lower prefix to 123.XXXX on R4 and 134.xxx on R6
- Set max-path on R12 (BGP)
- R21 : Wrong ip prefix-list 194
- d% G8 Y; ]/ Y  P: w
Question 6: IPv6

- Correct advertise network in R25 (2525::25/64 instead of 25::/64)
0 F3 ?( [( m# p4 Q" o- Wrong next hop in R22 route-map (IPv6)

Question 7: DMVPN

; k( z0 z7 g% s3 b9 L- ACL was denying ESP traffic in R19.
2 g6 ?) |& e# a- Wrong NHRP config on R18/R19 (DMVPN)
- R17 missing nhrp multicast
& N3 Y  Q* T- I7 ]" e# H' |- no ip next-hop-self eigrp 200 in R15
( g" N+ G# w1 m* v, {0 M, p- NEW : ONLY 2 CORRECTIONS PERMITTED (Needs confirmation)

& A# R) t, S3 [6 U  f3 G/ XQuestion 8: MPLS VPN
7 e1 U  X1 O' m& x
; x) |& ?7 @) |" e; N1 r' K- Add R8's eth0/0.123 ip nat inside
- Advertise default-route in BGP on R7/8.
; _% z/ G9 j7 ?( ]4 H) s5 V- R6: add import and export Route-target.
  X/ j/ Q( j! T0 z/ H& ?- VRF import on R3/4
' n# E4 l% T5 S8 _* h3 D- R3 : advertise .125 network
- R4's and R6's e2/0 ip ospf cost 200 (backup path)
- DHCP issues on R9/SW3
- NEW : ONLY 2 CORRECTIONS PERMITTED (Needs confirmation)

" e+ Q: a& b% x+ i& C  {Question 9: DMVPN NAT

- Correct transform-set and mode in R24.
$ K# |: e# [( D) V6 {* J) [- Wrong crypto isakmp Address was configured on R7
- Wrong tunnel source on R7
- Wrong tunnel source on R24
) Z8 W2 O6 N2 H' C- R23 : no crypto udp transformation
1 m$ q; |1 L! }7 `! p
Question 10: NAT

- Modify NAT command in R23
! [* z4 z0 z. a9 \- Add command: ip domain lookup in R21.
0 _7 d8 h7 D/ J: `0 v- Add NAS mac add on R23 dhcp pool
- IP domain lookup and ip name-server was missing on both R23 and NAS
- NAS has no ip assigned (not even DHCP)
$ m( Q7 J* k  x3 p

水无月.流歌

H3最新的题目搞出来了吗？

just4lvzhou

正在备考，过来学习学习~

ethanliu263

恭喜恭喜！！！！！！！！