国外论坛上摘下来的K8详细配置，可以看看！

henanwz · 发表于 2013-4-15 11:34:54

这是据说的K8详细配置，拓扑是其他人传的那种！
有没有谁能给个确定的答案，能否确定K8真的出来了？
% ~3 p# A8 @0 E* R
Section 1 - Layer 2

----------------------------------
1.1 Troubleshoot Layer 2 Switching
----------------------------------
Cisco says that there are two faults injected. Each fault will give you 2 points. The whole Lab had 78 points to get, so you must have 62 points in order to be over 80%.

- VTP password about sw2,3,4 with sw1 mismatch
- no ip cef on some routers (not sure if that is a fault)

-----------------------------------------------------
1.2 Implement Access Switch Ports of Switched Network
-----------------------------------------------------
Configure all of the appropriate non-trunking switch ports on SW1 – SW4 according to the following

- SW1 is the server for the VLAN Trunking Protocol version 2 domain "CCIE" (VTP password "cisco" )
- SW2, SW3, SW4 are expecting SW1 update their VLAN database when needed
- Configure the VLAN ID and Name according to the table below (case sensitive)
- Configure the access ports for each VLAN as per the diagram
- Configure all the Switch mode are Transparent after synchronization the VLAN database.

VLAN_ID NAME
28 VLAN_28_R2toSW3
36 VLAN_36_R3toSW1
69 VLAN_69_SW1toSW4
89 VLAN_89_SW3toSW4
500 VLAN_500_Client

--------------------------------------------------------------------------------------------------------------
1.3 Spanning-Tree Domains for Switched Network Configure the switches according to the following requirements:
--------------------------------------------------------------------------------------------------------------

- Both switches must have one instance per vlan.

- Ensure that SW1 is the Root Switch, and SW2 the Backup Switch for all vlans(obtain the future vlan)

- Configure instance per vlan and rapid transition for forwarding

-------------------------------------
1.4 Switch Trunking and Ether Channel
-------------------------------------
Use the following requirements to configure the Etherchannel of SW1, SW2, SW3 and SW4:

- Use encapsulation 802.1q for all cross interface
- Configure Etherchannel use the 802.3ad standard

-------------------------------------
1.5 Frame-relay configuration
-------------------------------------
- Back to back frame-relay between router R5 and R1 and R1 and R4
- R1 use the sub-interface connect to R4

Section 2 - Layer 3
--------------------------------
2.1 Implement IPv4 OSPF
--------------------------------
- OSPF process ID must be used the YY number
- Router ID must be stable and must be configed using the IP Address of Lo0
- Lo0 interfaces must be advertised in the OSPF area as shown in the IGP topology diagram and must appear as /32 routes
- Do not create any additional OSPF areas. Do not use any IP address not listed in the diagram

--------------------------
2.2 – Implement IPv4 EIGRP
--------------------------

Configure Enhanced Interior Gateway Routing Protocol (EIGRP) 100 on SW3 and SW4 in order to establish EIGRP neighbor with Backbone 3 in the IGP topology diagram.
- BB3 has IP address 150.3.YY.254 and is using AS number 100
- R1,R2,R4,R5,SW3 configure the EIGRP AS YY to build the IGP part
- Disable auto-summary

--------------------------
2.3 – Implement IPv4 RIP
--------------------------

- Configure RIP on SW1 and SW3
- Disable auto-summary

------------------------------

Redistribute EIGRP into RIP: I/ r; i0 a: a6 v) x( g7 N

------------------------------
-Redistribute EIGRP 100 into RIP on SW1 and SW3

--------------------------------
2.5 Redistribute EIGRP into OSPF
--------------------------------
- Redistribute EIGRP into OSPF.

--------------------------------
2.6 Redistribute OSPF into RIP
--------------------------------
- Redistribute OSPF into RIP
- Do not redistribute RIP into OSPF
- Area 0 prefix was a IA route and wasn’t allowed to go into any area existing

----------------------
2.7 Implement IPv4 iBGP
----------------------
-Configure iBGP peering for R1, R2, R3, R4, R5, SW1,SW2 as per the following requirement.
- Minimize number of BGP peering sessions and all BGP speakers in AS YY except R1 must have only one iBGP peer
- R1 is the only one allowed to start the tcp connection for the BGP neighbor
-SW4 is AS 144, peering with SW1 and SW3

----------------------
2.7 Implement IPv4 eBGP
----------------------
-BB1 and BB2 are AS 254,peering with R4 and R5
-BB1 and BB2 are advertising the same routes with different AS Path.
-SW4 should see 2 equal paths to the AS 254 routes.
-Sw4 should load-share and have to paths to the backbones which are placed beneath r5 and r4 on your topology
-Sw3 should load balance between R1 and R2 on your topology all though Sw2

Configure BGP as per diagram

- When you done the BGP neighbor , you should implement all your address should be reachable from any device, except SW2

----------------------
2.8 Implement MPLS VPN
----------------------
0 O; n4 u% K! T" j3 K- Sw2 with two loopbacks connected to r3 and r2 on two different VRF
- SW2 and R3 stay in CE1 area ,and SW2 use another interface with R2 stay in CE2 area
- R2 and R3 are PE devices , run the BGP and vpnv4 and mpls
- R1,R4,R5 are P devices, transport the traffic in mpls area
- R2 and R3 should go through R5 when they start the traffic.
- Use the standard protocol to transport the label in MPLS area
- Need to enable LDP on all serial interfaces only.( s: y( ?/ V* G1 w( b s+ ^
- Mpls must use stable update source
- Sw2 must have two different routing instances in the global one only l0 should be seen

----------------------
2.9 Implement IPv6 EIGRP
----------------------
-use the EIGRP to make the ipv6 neighbor
- You must ping success for every ipv6 address

Section 3 – Mulitcast

----------------------
3.1 Implement multicast part 1
----------------------
- There has a client located on the link between R4 and R5
- Need to create Loopback 1 on R1 and R2 as RP address
6 Z: i8 ~- T# `# e1 n. [* Q- Both Loopbacks with same IP address.
- Use the standard RP-select method

----------------------

Implement multicast part 2
" {+ J' m/ Z4 X2 r7 K

----------------------
-Some router must be the source , and can be get the reply from the client

Section 4 – Feature

----------------------

Implement Gateway load balance protocol
6 ^7 E6 S; [+ ^; L. y* I

----------------------
- SW1 and SW3 use the cisco proprietary protocol to implement the hot switch-over
- Use GLBP to achieve the request
- Both two devices use the MD5 Auth to keep the GLBP safe
- One of them increase the weight to become the AVG ,the other device is AVF

----------------------

Implement Layer-2 switchport security3 |8 ~* ]! i9 o6 k: v

----------------------

- Switch-port protected, not allowed to use private vlans. Should use port security to dynamicly add mac add to the configuration.

- Five users connect to Vlan 500 ( SW2)

- These users will connect from SW4 ( Fa0/1 - 5).
9 o* L! h1 }- h- This ports should move to forwarding quick.
( l! \: \' f q- These ports should be protected and mac address learn dynamically.: h, H3 o y' h$ h1 I4 Q6 R$ Y, N6 B
- Shut down the ports if violation occurs.

----------------------

Implement SSH) I$ x: |& Z' S& N. N

----------------------
- To keep the VTY line security ,you must implement the SSH to ensure the line safe
- Two users connect via ssh will go directly to enable mode
- It is not allowed to cause line con 0 a user prompt when trying to login
- Using only one single extended acl.

----------------------

Implement Mpls QoS
) f# h3 J$ i+ n5 \* E& @2 G8 {

----------------------: x7 b6 Z8 @1 p
- policy maps to match different type of qos in mpls is predefined. they just want you to do stuff with it like preserve bandwidth and such.

----------------------

Implement PBR; q: o+ l; k1 L% ?; f" k5 |0 T' I

----------------------
, m5 z& h1 j" w$ S! \- Create Lo100 on SW3
: Y. v7 k' i: R& m, p" _3 l$ H$ r- Create Lo100 on R5: h0 o5 |* e( j
-All traffic sourced from SW3 Lo100 destined to R5 Lo100 ( and only this traffic) needs to so via interface between SW3 and R1.1 G/ j/ y! I/ r. g% i' q3 c/ D7 h
-The rest should load balance.
" r* b U Z6 i2 @-Use the policy-map and route-map to implement

Section 5 – Network optimize h1 m( N+ S* O) _+ L5 W
+ }8 ^5 t2 Y0 y3 k
----------------------
5.1 Implement SNMP
----------------------
-Rite the configuration to configuration log and something about saving the last 10 lines

----------------------
5.2 Implement EEM
----------------------
' p7 a+ S; c9 {1 r5 t-The administer ask you implement a simple script on R3
-Need to match " %SYS-5-RELOAD: ", then do a shut / no shut to gigabit interfaces.

cisco_2012 · 发表于 2013-4-15 12:42:05

alex_zhu18 · 发表于 2013-4-15 14:41:51

看情况吧看香港有没有人遇到了

light333 · 发表于 2013-4-15 22:37:40

早晚都是个K5

llw_annie · 发表于 2013-4-16 04:18:18

不管你信不信，反正我是信了。

ciscojerry · 发表于 2013-4-16 09:44:13

顶一个~~~~~~~~~

xiaoanyu · 发表于 2013-4-16 11:34:08

wwtc8778 · 发表于 2013-4-16 14:06:25

啥也不说了，楼主就是给力！

iry · 发表于 2013-4-17 08:12:50

onlyccie · 发表于 2013-4-17 16:12:50

，菜鸟来报道，赶紧出绝招

aili_tree · 发表于 2013-4-18 22:11:24

论坛boss · 发表于 2013-4-19 10:15:04

gouzhao103964 · 发表于 2013-5-2 13:35:55

有没有人出解法

henanwz · 发表于 2013-5-3 09:03:19

gouzhao103964 发表于 2013-5-2 13:35
# Y( M8 J* `8 [# s有没有人出解法

这个不全，相对较完全的题目和解法已经存在了。

Songokus · 发表于 2013-5-19 22:31:29

账号		自动登录	找回密码
密码			论坛注册

[LAB战报] 国外论坛上摘下来的K8详细配置，可以看看！

点评

浏览过的版块

客服中心

投诉建议