喜讯 642-823低调PASS－千分飘过－第三次CCNP重认证

cccisco

    642-823 PASS－千分飘过－第三次CCNP重认证
3 ?, l/ H# ]1 T' [% A
. G- B4 O: T! D" W6 Y: K鸿鹄V200全覆盖，感谢前期各位弟兄的战报，感谢客服5提供协助考试注册（虽然没有注册成功，原因是我支付宝问题）
; r5 S1 A0 p; Q/ C8 t: G% a
. O+ W: c* S2 T& G$ F( S% L关于筹备：周三决定参加642-832考试，一共筹备3个晚上，看完了视频和题目，稳定的做了FLASH和官方的Flash 。熟练掌握万金油精华，外加7年IT运维护经验，排错还是小CASE。

4 [; |" V3 v' e( Q; o考试介绍：周5注册的周6 11：30的考试，提前联系考试中心的MM，说可以早早的考试，早上9：00出发，9：20-30验证完成身份后 9:35－10：38完成考试出考场，低调满分通过。
6 J! ^  K; G  q0 I" K1 z, V* A
% U* R8 m) F& R4 [2 Q823，很稳定，大家一定好好理解TT的错误点，认真排查和进行PING测试，避免搞错故障点。
0 J0 w% R) Y. b/ {/ ]% d1 G! aFlash上面的4个模拟TT一定要排查出来原因，目的一是熟悉考试的环境，二是通过这个环境训练自己的排错能力。４个TT如果没有找到原因全做对的话不建议参加考试。

万金油，这个是一个排错的思路，像查HSRP、IPV6、169这几个都是很明显的，先把这几个明显的查出来后，剩余的就好找了。别着急考试时间，充足的很，足够排30个TT了。

关于TT排错总结：个人总结的是例如明确知道TT1是HSRP故障的话，可以在TT*不确定的话，可以来对比配置。通过对比可以排查出问题具体原因。　像当是我做的时候有几个确实很混淆。　另外注意使用除了C1/2外，其它R*路由器进行PING测试，保证完美。
－－－－－－－－－－－－－－－－－考试整理，摘录某个兄弟整理的－－－－－－－－－－－－－－－－
  e6 P% F) z7 B( b% Y4 G4 O4 |1
/ J* J. d0 _* L# u8 O7 dTT1  ：HSRP  ------------------- DSW1
在DSW1上Show run  看到standby  条目，show standby brief----看到状态没有UP
. h5 [) f$ E+ x5 o8 ITROUBLE TICKET STATEMENT:
, U/ `7 }9 V: A& a! }- L. f“The implementation group has been using the test bed to do a „proof-of-concept‟ that required
' Z  u6 \4 a! l6 }both client 1 and client 2 to access the Web Server at 209.65.200.241. After several changed
to interface status,network addressing, routing schemes and layer 2 connectivity, at trouble
$ F! H1 p& c: h6 B1 y$ Q9 Eticket has been opened indicating that client 1 cannot ping the 209.65.200.241 (internet
Server)”
6 f6 p( u/ _- |以下信息需要自己show run获得：
; W' v( M9 ]2 fHSRP has been configurationured between DSW1 and DSW2. DSW1 is configurationured to
6 B* N% t) s! O0 j0 k0 ?0 Ebe active
0 _* g; `6 s5 }; W1 V, ?router but it never becomes active even though the HSRP communication between DSW1 and
0 ^1 v# N  }8 W% ODSW2 is
working.
Configuration on DSW1
3 ^0 t2 S, \% `track 1 ip route 10.1.21.128 255.255.0.0 metric threshold threshold metric up 1 down 2
!
; {( m8 W/ C  G1 @' Y( ptrack 10 ip route 10.2.21.128 255.255.255.0 metric threshold threshold metric up 63 down 64
!
interface Vlan10
3 H% h0 v# @7 R4 h) `ip address 10.2.1.1 255.255.255.0
standby 10 ip 10.2.1.254
* Z" ~$ r3 E) estandby 10 priority 200
# d8 i! q/ f% p( g, |standby 10 preempt
standby 10 track 1 decrement 60
Configuration on R4
interface loopback0
; f$ z8 K" j5 r( U7 B# l. n) v( rip address 10.2.21.128 255.255.255.0
QUESTION 1
; N" q: L5 ~$ _7 E) a& h: \On which device is the fault condition located?
A. R4
8 J& s1 ]5 _$ {! h- c( [B. DSW2
C. DSW1
D. R3
) h$ C( a2 k( p4 Z& h0 U7 q9 B" UAnswer: C
QUESTION 2
& ?; V# N: e' PFault Condition is related to which technology?
3 r, x, G8 _5 c4 SA. GLBP
B. HSRP
2 c* k6 x: Q1 y3 w1 L* E# q0 vC. OSPF
: z# J; J) A' N  ~5 uD. Switch to Switch Connectivity
Answer: B
* X& z7 Z2 m8 {QUESTION 3
. {- C7 [7 \/ @* yWhat is the solution of fault condition?
A. Change standby priority to 140
B. Change standby priority to 260
C. Under the interface vlan 10 configuration delete the standby 10 track 1 decrement 60
  z) Q* R9 k9 V( X2
command and enter the standby 10 track 10 decrement 60 command.
D. Change standby 10 track 1 decrement 60 to standby 10 track 1 decrement 100
Answer: C
TT2：IPV6-----------R2
1 i: T" x5 s8 j0 n. u- p2 C在R2上show ipv6 router,只有直连和L链路本地，没有任何OSPF 路由
8 C6 i$ G- `9 p0 D以下信息需要自己show run获得：
DSW1 and R4 cannot ping R2's loopback or R2's s0/0/0/0.12 IPv6 address. Initial
% _( w0 [( M2 t. u& Stroubleshooting shows
2 g0 V7 V' k1 \+ T# B; Gand R2 is not an OSPFv3 neighbor on R3.
Configuration on R2:
1 Y$ H- H3 r+ W7 `4 |ipv6 unicast-routing
. Y  a" r; `4 W# @+ U7 _; r* [!
; L3 ]$ V2 H! V7 d2 Zipv6 router ospf 6
/ q) A. B! a  j6 J! j) vrouter-id 2.2.2.2
& c8 W( p' Y% o# h; b* b; J!
interface s0/0/0/0.23
ipv6 address 2026::1:1/122
Configuration on R3
ipv6 unicast-routing
!
: L0 J( b$ H* ^7 V" t8 lipv6 router ospf 6
router-id 3.3.3.3
( D: V- J' W$ a- y!
2 f1 C9 s& b1 K, X" ~interface s0/0/0/0.23
ipv6 address 2026::1:2/122
0 O/ ?; c! n; u  U2 Eipv6 ospf 6 area 0
QUESTION 1
On Which device is the fault condition located?
A. DSW1
' J' f7 W/ X$ W# |, X/ a$ H  k8 WB. DSW2
C. R2
D. R3
7 x, n9 u3 N5 {9 J9 cAnswer: C
7 w7 c+ N) o  E% ^2 Y  L) B3 wQUESTION 2
The Fault Condition is related to which technology?
A. IPv6 Addressing
B. Route Redistribution
7 F& l. A7 T& y6 R0 C  fC. IPv6 OSPF Routing
D. RIPng
Answer: C
QUESTION 3
* a- c; h. H$ h( mWhat is the solution of the fault condition?
A. Under the interface Serial 0/0/0.23 configuration enter the ipv6 ospf 6 area 0 command.
' s: I$ E, K0 F. Z; P6 P+ @B. Add ipv6 ospf 6 area 6 under s0/0/0/0.23 on R2
. I! A( y& B& k+ }8 sC. Remove IPv6 address from s0/0/0/0.23 on R2
+ K8 N: |$ |+ |$ T- A3
D. Enable IPv6 routing on s0/0/0/0.23 on R2
Answer: A
TT3: DHCP range------------ R4
在4道题上，分别在R4上show run ，找到错误的DHCP,10.2.1.1  -10.2.1.253，确定为DHCP
6 d9 F% r9 O6 K9 j; H以下信息需要自己show run获得：
, G2 m: c0 }+ f3 pClient 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
, A8 n! |, N9 [+ [FTP Server.
They are able to ping each other.
7 {- B1 O" s; p: W% ?  gConfiguration on R4
!
6 ]) @1 T% ~; P8 c% ]3 x) Eno ip domain lookup
1 H8 _) _2 U1 s, |ip dhcp excluded-address 10.2.1.1 10.2.1.253
ip dhcp excluded-address 10.2.1.254
8 Y% S( ~6 m" Q$ p: w& b, R. }* U1 I7 ~!
ip dhcp pool TSHOOT
* d& b5 e/ z5 x9 ^network 10.2.1.0 255.255.255.0
default-router 10.2.1.254
/ r  R" `/ T* w- x+ C!
QUESTION 1
On Which device is the fault condition located?
A. R1
B. R2
/ z9 V! S7 E' g7 a' f0 iC. R3
D. R4
, Q, _  u0 {: V0 S; {) tE. DSW1
3 E9 z$ H2 t% C4 @F. DSW2
" N( `) r- U6 _$ J7 Z) O2 B4 [G. ASW1
H. ASW2
2 Y# y& o: N& jAnswer: D
1 H/ p" h) O' g% e) }9 ]  W3 D. XQUESTION 2
The fault condition is related to which technology?
) U, |# s" F9 d0 uA. NTP
+ d9 S( H0 F1 q3 c/ tB. IP DHCP Server
C. IPv4 OSPF Routing
D. IPv4 EIGRP Routing
  T3 z/ ?& A+ A' {E. IPv4 Route Redistribution
7 x1 h, k+ D+ n' G, J6 zF. IPv6 RIP Routing
G. IPv6 OSPF Routing
H. IPV4 and IPV6 Interoperability
+ `5 p3 M2 |7 ]* K$ w0 ]I. IPV4 layer 3 security
Answer: B
& q, \! X3 G, B. E9 b( BQUESTION 3
' I3 @# }; _  d0 ?7 s+ n7 C* q. _What is the soultion to the fault condition ?
A.  Under global configuration, delete the no ip dhcp use vrf connected command.
B.  Under IP DHCP pool configuration, delete the default-router 10.2.1.254 command and
4
1 J6 ~$ t, e: c+ Menter the defaultrouter 10.1.4.5 command.
( u. G; J& y* I5 @5 _  A/ O. vC.  Under IP DHCP pool configuration, delete the network 10.2.1.0 255.255.255.0 command
" o2 ~1 j" ]4 \# @and enter the network 10.1.4.0 255.255.255.0 command.
8 D  K6 r( g2 d  j  vD. Under the IP DHCP pool configuration, issue the no ip dhcp excluded-address 10.2.1.1
9 J% ]& Q$ g9 ~1 d10.2.1.253 command and enter the ip dhcp excluded-address 10.2.1.1 10.2.1.2 command.
! _  e7 ^  t$ W# EAnswer: D
TT4 : port security -----------ASW1
: b! S- W  G/ `! v! O! J1 O, ^# X0 O3 N在3道题上，在ASW1上，show interface f1/0/1,找到f1/0/1 is down,line protocol is
2 U, z) `4 f" z* A- ]$ M! sdown,switchport port-security mac-address 0000.0000.0001,  并show run
, @! r8 M7 T, M4 I. e9 D6 w以下信息需要自己show run获得：
$ j2 C7 D9 ~+ E( s  p  `4 J. {+ x- EClient one is getting a 169.x.x.x IP address and is not able to ping Client 2 or DSW1. Inital
troubleshooting
shows that port Fa1/0/1 on ASW1 is in errdisable state.
8 O: M# P' Y# C( n5 l$ {$ ?Configuration on ASW1
Interface FastEthernet1/0/1
" W% _1 }( }+ Y' kswitchport mode access
* T$ j2 ~8 P+ N$ [/ s# mswitchport port-security
switchport port-security mac-address 0000.0000.0001
  \& \* z) }6 S# b8 M$ sInterface FastEthernet1/0/2
: q- o# B, O- n' m( r0 ~switchport mode access
# K& d: s+ ]$ d( i: Lswitchport port-security
5 E- B9 `2 g  Q" qswitchport port-security mac-address 0000.0000.0002
* b" M2 }" t2 g  y. A9 f) b9 yQUESTION 2
$ ?2 N4 I+ i4 c+ W4 BOn which device is the fault condition located?
A. DSW1
B. ASW1
0 |- H# ~- Q+ \- x" vC. Client 1
D. FTP Server
Answer: B
' [* I* C8 U# j4 I6 ^QUESTION 3
The Fault Condition is related to which technology?
# o  [2 |) J: X/ e6 t1 FA. VLAN Access Map
3 p( c# ^- `, _B. InterVLAN communication
C. DHCP
D. Port Security
Answer: D
QUESTION 4
' ]. q0 {  {( ~- h4 ?: sWhat is the solution of the fault condition?
A.  Configurationure Static IP Address on Client 1
8 F3 H( v9 k& F. x2 ZB. Change the IP Address of VLAN 10 on DSW1
' B0 _, O2 ]) yC. Issue shutdown command followed by no shutdown command on port fa1/0/1 -2 on ASW1
D. In Configuration mode, using the interface range Fa 1/0/1 -2, then no switchport-security
: u: A" |% ~6 \6 n" Finterface configuration commands. Then in exec mode clear errdisable interface fa 1/0/1, then
5
clear errdisable interface fa 1/0/2 commands
4 `9 D1 S0 c3 h2 w6 o  L5 M9 u) }E. Issue no switchport port-security mac-address 0000.0000.0001 command on port fa1/0/1 -2
on ASW1
Answer: D
9 s- S5 q' e- w/ q9 KTT5 : switchport vlan 10 ------------ ASW1
! A; a3 h9 O7 k% X- L/ x在ASW1上 show vlan brief 和show run ,发现f1/0/1 和 f1/0/2 在默认vlan 1
- J% o% N( r9 O/ L3 I中，没有任何在vlan 10
+ X/ Z* R2 j) e4 ?: [7 t4 N以下信息需要自己show run获得：
Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
3 m# D# ~& g% B9 G* hFTP Server.
3 S/ W" e( r* v: FThey are able to ping each other.
Configuration on ASW1
Interface FastEthernet1/0/1
switchport mode access
. X6 z  h" Y& u5 G! c, \switchport access vlan 1
!
( y" r: b0 v; U; l! M  |Interface FastEthernet1/0/2
switchport mode access
switchport access vlan 1
QUESTION 1
On which device is the fault condition located?
' o: R+ j! J! @' P/ c% oA. DSW1
B. ASW1
C. Client 1
D. FTP Server
Answer: B
) ^7 l2 w# G# e8 Z9 b4 vQUESTION 2
1 I2 y) N5 N- k1 D, i) ]5 s& ?7 sThe Fault Condition is related to which technology?
A. Access vlans
! N. `& G9 M1 ~$ k4 rB. InterVLAN communication
) y5 g7 C# \: y, u, QC. DHCP
D. Port Security
Answer: A
QUESTION 3
2 Q5 m0 t* s9 t5 Y6 ^# fWhat is the solution of the fault condition?
& z8 C& W! I. |- {# W4 D" eA. Given an IP address to VLAN 1 on DSW1
B. Change the IP Address of VLAN 10 on DSW1
: m9 G2 L0 j# Y6 |/ qC. In Configuration mode, using the interface range Fastethernet 1/0/1 -2, then switchport
access vlan 10 command.
. T6 n2 ?8 j% FD. Give static IP addresses to Client 1 and Client 2
Answer: C
TT6 : switchport trunk ------------ASW1
4 c0 X5 x. O$ `* L7 V) I  s7 b在 ASW1上show run  
2 ^  C8 u. g2 J2 g; p; ~6
! D1 s6 ?5 t3 j, w以下信息需要自己show run获得：
Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
FTP Server.
$ z  p+ W: P9 b0 @They are able to ping each other.
  m7 m9 n4 m' t- q- X* qConfiguration on ASW1
& b! j/ B/ |: H( L' f6 s; [Interface PortChannel13
( H- e. A' u3 y7 @8 D1 rswitchport mode trunk
switchport trunk allowed vlan 1-9
" a& s  w9 E" Y2 N4 q" A!
- j# C2 V& @2 e) A# b- |" `( AInterface PortChannel23
switchport mode trunk
switchport trunk allowed vlan 1-9
; y& o; s  y8 A* t( V!
' B: c! p/ v6 @5 ?& _Interface FastEthernet1/0/1
1 T* a- l; r' V. \# a# Y3 C1 {" M6 gswitchport mode access
switchport access vlan 10
4 K( u6 D  v4 _. Q# p: S# h  n!
Interface FastEthernet1/0/2
) d& c0 k$ J' o; l. P* r% O+ cswitchport mode access
switchport access vlan 10
' s1 u; I# K9 Q! P/ Y5 H!
4 m, K$ ?  R6 ^1 X7 U0 j$ bQUESTION 1
On Which device is the fault condition located?
/ }1 t4 m! u, N3 Y7 V& N: r# pA. ASW1
) W* D3 s$ t/ ?: U0 SB. DSW1
C. Client 1
D. FTP Server
Answer: A
2 o# e, [$ U  B& oQUESTION 2
( }& n& e' F  v: BThe Fault Condition is related to which technology?
& G, H9 _" d' xA. VLAN
B. InterVLAN communication
C. DHCP
D. Switch to Switch Connectivity
Answer: D
QUESTION 3
/ O+ ]" C7 F0 k" d* |( nWhat is the solution of the fault condition?
7 [! }2 v$ r  X8 r! [A. Change the VLAN assignment on fa1/0/1 and fa1/0/2 on ASW1 to VLAN 1
! L$ T( {, q0 c0 ]+ ?B. Change the IP Address of VLAN 10 on DSW1
C. In Configuration mode, using the interface port-channel 13, port-channel 23, the configure
switchport trunk none allowed vlan none followed by switport trunk allowed vlan 10,200
5 x9 B6 p" b; P! }% u$ r- mcommands.
D. Issue switchport trunk allowed vlan none on interface portchannel13 and portchanngel23 on
, B; y6 J6 w5 N+ f# vASW1
Answer: C
7
" n  _0 ?2 r9 A( W. M: f--------------------------------------------------------TT7 : VLAN ACL ------------------------DSW1
以下信息需要自己show run获得：
* |$ U- X( o# B+ H1 O& U. W% J2 X  pClient 1 is getting an IP address from the DHCP server but is not able to ping DSW1 or the
; k; `5 Q0 u( Y+ \8 K1 Q$ ]. @FTP server.
Configuration on DSW1
vlan access-map test1 10
drop
match ip address 10
+ H5 s  u& E% y3 W$ T* P" f; M  I!
: D4 l$ G5 o) |& v* x$ X$ O, Vvlan filter test1 vlan-list 10
, E7 q" c& Z, G7 h% R' d, f& x9 }!
  w4 b  k9 @4 d: w; iip access-list standard 10
permit 10.2.0.0 0.0.255.255
0 B* I8 T5 P6 @!
& a9 U8 Q* E8 ZInterface VLAN10
ip address 10.2.1.1 255.255.255.0
" C! p. s. T8 v0 Q( I!
" `( ^9 O9 b  Q: {QUESTION 1
On which device is the fault condition located?
0 A# J+ z0 W* ?5 D+ tA. R4
B. DSW1
5 b& n+ e8 K6 CC. Client 1
D. FTP Server
' u7 f" ]' J& ?1 {3 }2 a7 }Answer: B
4 h( E2 U/ P9 l9 o* X% t# R1 kQUESTION 2
# m. I6 E9 Z6 l( O$ ]& DThe Fault Condition is related to which technology?
# M/ {  s, Y. d. ]  ~A. VLAN ACL / Port ACL
B. InterVLAN communication
4 b5 n2 ]# t9 D. O, N. pC. DHCP
' w! [* ]6 j. @" CD. IP Access List
1 }) G. X  ]& `& M8 PAnswer: A
QUESTION 3
What is the solution of the fault condition?
: Q( R, J2 Q; WA. Configurationure Static IP Address on Client 1
B. Change the IP Address of VLAN 10 on DSW1
1 b* Z8 J1 Y8 K' P3 L$ v- t1 b- \0 HC. Add Permit any statement to access-list 10
( }  u) l1 T6 i, d( g, YD. Under the global configuration mode Remove vlan filter test1 from DSW1
0 u$ Z5 m0 `( I9 B. o. sAnswer: D
TT8 : EIGRP passive -------- R4
以下信息需要自己show run获得：
the neighborship between R4 and DSW1 wasn‟t establised. Client 1 can‟t ping R4
Configuration on R4
3 ?8 X% M4 L" z$ T+ crouter eigrp 10
8
9 _. E0 n/ E8 s: K2 M  _passive-interface default
redistribute ospf 1 route-map OSPF->EIGRP
network 10.1.4.4 0.0.0.3
4 z* b! ~* q# h  _network 10.1.4.8 0.0.0.3
* ~/ i5 y! i+ P9 j6 }* @default-metric 10000 100 255 1 10000
no auto-summary
QUESTION 1
- W+ e0 b7 `3 Z0 ?! LOn Which device is the fault condition located?
A. R1
B. R2
C. R3
D. R4
7 a  @1 M9 W* ^% [Answer: D
QUESTION 2
The fault condition is related to which technology?
A. NTP
! I0 t3 P; X2 u' a: g  ?4 bB. IP DHCP Server
C. IPv4 OSPF Routing
) o  F! G% j/ D* f" i2 DD. IPv4 EIGRP Routing
* P5 v+ H. n# m/ y" X: w. wE. IPv4 Route Redistribution
, s% n* u0 n9 hF. IPv6 RIP Routing
. C6 S% G4 e1 g0 L, K2 I; J* }G. IPv6 OSPF Routing
H. IPV4 and IPV6 Interoperability
I. IPV4 layer 3 security
Answer: D
* I; H% h1 v" z% `9 }4 w4 T) C& GQUESTION 3
# W" {" q- _5 a9 W8 i1 uWhat is the soultion to the fault condition ?
# u; {8 }" j; T0 F- R# dA. Remove “Passive interface” in Interface f0/1 and f0/0
. A$ h& U$ r4 p# F( E0 {B.
C.
8 L% G7 S& M( Q* W) M& C4 BD.
0 D+ \1 _* ?5 H  {: f  ~Answer: A
% A' C2 J0 Z1 \- N/ E+ _9 QTT9 : Redistribute--------------R4
/ k- a# ?% H0 P/ X! r2 ~以下信息需要自己show run获得：
7 T, o- \0 u/ C, D0 ], v( qClient 1 is not able to reach the WebServer. Initial troubleshooting shows that DSW1 can ping
the Fa0/1
( R) _6 |  k; ~4 Y& {interface of R4 but not the s0/0/0/0.34 interface.
& D$ d4 b2 l- ]( V8 s4 aConfiguration on DSW1
router eigrp 10
network 10.1.4.4 0.0.0.0
CertKiller.com
network 10.2.1.1 0.0.0.0
network 10.2.4.13 0.0.0.0
no auto-summary
Configuration on DSW2
, w% k8 D! }( \8 S! h6 ?router eigrp 10
network 10.1.4.8 0.0.0.0
9
network 10.2.2.1 0.0.0.0
2 h& A' t5 t5 p) [5 Y  F  lnetwork 10.2.4.14 0.0.0.0
  ~7 R7 z* _% R% Yno auto-summary
Configuration on R4
router eigrp 10
network 10.1.4.5 0.0.0.0
# T( E4 D$ v" p+ H) t9 ^no auto-summary
redistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF
router ospf 1
. F& y) z, }4 @1 J, Q$ V6 [8 ?network 10.1.1.8 0.0.0.0 area 34
) ?3 B% c7 ?3 j4 l8 C% P# B' _: S5 Aredistribute eigrp 10 subnets
: ^/ G* D- [9 y!
2 ]/ T4 Y5 O; R# ]8 y4 Yroute-map EIGRP->OSPF
match ip address 1
; D. t' \% b& F  t- @; M8 e& Q!
& T  I+ X6 ]& x$ J: x7 O$ iaccess-list 1 permit 10.0.0.0 0.255.255.255
& D* F, w: u7 c, _. Faccess-list 1 permit 209.0.0.0 0.255.255.255
4 S, G- B* {$ f! n+ VQUESTION 1
On Which device is the fault condition located?
A. DSW1
B. DSW2
C. Client 1
D. R4
Answer: D
QUESTION 2
: B4 b4 Q* J  \: TThe Fault Condition is related to which technology?
( P% i& \8 ~5 N" u5 c1 G! M$ oA. EIGRP
6 `% A/ ?8 W" S0 x( d/ Z: G: J. EB. IPv4 Router Redistribution
3 `+ m+ ~/ `5 \; T$ P* z$ |& AC. OSPF
D. IP Addressing
Answer: B
QUESTION 3
What is the solution of the fault condition?
/ B% M7 v9 ]! l  Q* YA. Remove the redistribute command from OSPF process on R4
B. Under the EIGRP process, delete the distribute ospf 1 router-map
OSPF_to_EIGRPcommand enter the
, H8 N$ r% Q  {8 n& {3 Q/ D0 Kredistribute ospf 1 route-map OSPF->EIGRP command.
8 \0 X, O+ g" UC. Change EIGRP AS to 1 on R4
D. Advertise 10.1.1.8/30 network in EIGRP on R4
Answer: B
  R+ I/ n9 F8 _* f6 R7 v6 ?TT10 : OSPF Auth ---------------R1
以下信息需要自己show run获得：
4 v5 C5 `) I0 m9 z% iClient 1 is able to ping 10.1.1.2 but not 10.1.1.1. Initial troubleshooting shows that R1 does not
have any
OSPF neighbors or any OSPF routes
10
- A6 f- S. I& c" g# \Configuration on R1:
0 K: u9 n; Q& }( N. V& D! r: I  brouter ospf 1
log-adjacency-changes
' |2 e8 b* W! W% X1 @; v' X! fnetwork 10.1.1.0 0.0.0.3 area 12
: ?. A0 r/ v: L, S) \6 Q' p$ Adefault-information originate always
# H4 z- q5 J  s* |" l: }!
- i4 k9 y9 L7 B1 linterfaceSerial0/0/0/0.12 point-to-point
ip address 10.1.1.1 255.255.255.252
, A. {! N- w+ K3 F6 Z* eip nat inside
* C" Q% S0 b$ ]ip ospf message-digest-key 1 md5 TSHOOT
Configuration on R2:
router ospf 1
6 \' i- a# [7 q$ z* Y2 P8 w7 Q% A( Ylog-adjacency-changes
network 10.1.1.0 0.0.0.3 area 12
% [! f  k* D" J8 Y7 h4 E!
& Y4 w0 ~- R. binterfaceSerial0/0/0/0.12 point-to-point
+ ]* t6 G9 M/ E" A; Yip address 10.1.1.2 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 TSHOOT
QUESTION 1 :
0 [5 r: `8 k9 V. [# }6 X5 V7 ^On which device is the fault condition located?
8 g5 Q4 X7 h/ @, i! |- aA. R1
B. R2
C. DSW1
D. Client1
Answer: A
% J+ o2 F( i* {0 B2 E! q5 CQUESTION 2
Fault Condition is related to which technology?
A. NAT
B. IPV4 OSPF
0 T0 d. _  X, A2 A( `" E+ B6 p; HC. Static Routing
D. Switch to Switch Connectivity
Answer: B
4 a9 I$ d7 T+ D0 iQUESTION 3
3 S  ]6 O/ v8 r+ `6 Q8 I+ g: NWhat is the solution of the fault condition?
A. enable OSPF Authentication on the S0/0/0 interface using the ip ospf authentication
message-digest
& `$ H$ F* `/ s* u. Ycommand
2 w5 _. x6 _* E7 gB. ip ospf authentication message-digest command has to be added under the OSPF routing
process
4 a' e; n7 y& E% Y" pC. A static route to 10.1.1.4 must be added on R1
D. ipnat outside must be added on S0/0/0/0.12
: |8 I2 z! R6 _2 {" ?+ x5 R5 g1 J+ \8 sAnswer: A
TT11 : BGP neighbor ---------------R1
) a7 n% C' d( @5 u8 E% x以下信息需要自己show run获得：
  y" s4 Y  e- A$ R! w! K  x" o11
' I3 l/ r) H3 S1 m+ t7 WClient 1 is able to ping 209.65.200.226 but not the Web Server at 209.65.200.241. Initial
( G! X2 }+ B' h& ^3 f, @troubleshooting
5 q, y  {% K8 ?shows and R1 does not have any BGP routes. R1 also does not show any active BGP
neighbor
+ M& ^( j) m  k: L  {Configuration on R1
router bgp 65001
% U9 H" {" M' D! Jno synchronization
bgp log-neighbor-changes
network 209.65.200.224 mask 255.255.255.252
- ~  }& m* V. q$ [! M5 I: Tneighbor 209.56.200.226 remote-as 65002
no auto-summary
$ E- D- F6 O! e& N) \4 l! ?QUESTION 1
On which device is the fault condition located?
; }6 z$ ~  x3 g( HA. R1
B. DSW1
C. R4
: l$ P* n, }, b* q, X" Z. GD. R2
Answer: A
QUESTION 2
6 a! H$ ~& a9 K, Q6 W- A, o% wThe Fault Condition is related to which technology?
A. EIGRP
* |! T. y& b! P2 F; o6 Q( C( GB. HSRP
  }% m. g! l4 y; d; Q3 {4 GC. BGP
D. OSPF
5 A; P- t0 {3 L+ ]9 tAnswer: C
; W& j# S8 ^8 D* }. |+ sQUESTION 3
What is the solution of the fault condition?
A. Enable BGP synchronization
9 G9 U1 N, G" R7 J  i+ [B. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.56.200.226
" t3 t& Z. I5 Jremote-as 65001
C. Under the BGP process, delete the neighbor 209.56.200.226 remote-as 65002 command
enter the neighbor 209.65.200.226 remote-as 65002 command.
/ f) x' ]/ o# M5 A3 j% yD. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.65.200.226
, \* m) E1 E: vremote-as 65001
Answer: C
" w; s* d$ X: v# b8 d* lTT12 : NAT -----------------------------R1
$ {1 d4 q- e9 T! N% ?8 G7 bQUESTION 26
以下信息需要自己show run获得：
Client 1 and Client 2 are not able to reach the WebServer at 209.65.200.241. Initial
5 O8 T" u- C0 X2 d, }, |7 }1 ctroubleshooting shows
that DSW1, DSW2 and all the routers are able to reach the WebServer.
Configuration on R1
ip nat inside source list nat_pool interface Serial0/0/0/1 overload !
) `0 q6 q* z, {& ~0 dip access-list standard nat_pool
5 y/ c# E5 N: r% k; q8 r% a( Gpermit 10.1.0.0
" ?/ D' e" w3 t4 W/ g!
12
" U/ i' W3 k+ j" finterface Serial0/0/0/1
/ r0 x: l5 H) o5 nip address 209.65.200.224 255.255.255.252
ip nat outside
!
) z- X" C6 P! w: |# b+ s( i, binterfaceSerial0/0/0/0.12
ip address 10.1.1.1 255.255.255.252
) M+ E/ z; {8 c1 Lip nat inside
# ^4 i7 ~' V. T1 bip ospf message-digest-key 1 md5 TSHOOT
ip ospd authentication message-digest
/ u$ B# R8 t4 C7 IOn Which device is the fault condition located?
; a+ x+ N8 x# W0 h- q4 A6 WA. R1
B. DSW1
# S$ w8 H( B+ X$ p4 FC. R4
D. R2
Answer: A
8 N2 |9 ?0 h1 D& s2 KQUESTION 27
% x  H! {" k2 `7 y+ P3 i9 I! X( VThe Fault Condition is related to which technology?
A. EIGRP
B. HSRP
3 V1 k$ \& _8 G; }: ]4 tC. BGP
D. NAT
, B- b  D7 o! P  M6 @8 v: \6 `; v, ^Answer: D
0 c4 a( ?$ b( e$ s  y1 lQUESTION 28
What is the solution of the fault condition?
4 g/ M9 m' a. d9 V, V+ XA. Under the ip access-list standar nat_trafic configuration enter the permit 10.2.0.0
0.0.255.255 command
B. Remove permit 10.1.0.0 statement from nat_pool access-list
$ B) k3 Q3 O1 u+ g5 L% XC. Change ip nat inside source list nat_pool interface Serial0/0/0/1 overload to ip nat inside
" k) R* N; _4 K# l6 c: Vsource list nat_pool interface Serial0/0/0/0.12 overload
D. Change ip nat outside statement under Serial0/0/0/1 configuration to ip nat inside
+ i( G! T4 t, n# lAnswer: A
2 [7 |. V5 L! m) YTT13 :    -------------R1
) \8 i+ h* X2 DQUESTION 29
) z# l& C7 L2 @8 k以下信息需要自己show run获得：
Client 1 is not able to reach the WebServer at 209.65.200.241. Initial troubleshooting shows
that R1 is also
not able to reach the WebServer. R1 also does not have any active BGP neighbor.
Configuration on R1
router bgp 65001
/ ~! c5 z6 w9 g7 E' Sno synchronization
bgp log-neighbor-changes
network 209.65.200.224 mask 255.255.255.252
neighbor 209.65.200.226 remote-as 65002
no auto-summary
: F. Q) J  {7 U+ C+ g$ f9 M3 x% \$ j!
1 k& h& \5 u- A7 V/ i2 U7 Jaccess-list 30 permit host 209.65.200.241
access-list 30 deny 10.1.0.0 0.0.255.255
13
5 Z5 i2 m, Z8 Z9 i6 P0 Kaccess-list 30 deny 10.2.0.0 0.0.255.255
, K  ^/ y; R3 o4 C!
interface Serial0/0/0/1
ip address 209.65.200.224 255.255.255.252
ip nat outside
ip access-group 30 in
2 P) C* o# P- T& i$ F# AOn which device is the fault condition located?
0 Y8 G. q, M) R( |3 iA. R1
/ J% j7 k* q, `( ^! AB. DSW1
C. R4
3 r# d' f* u% UD. R2
9 {, z" G, b$ Q5 M4 eAnswer: A
QUESTION 30
6 d7 B  [4 O: ?9 b  ?8 BThe Fault Condition is related to which technology?
* h: N5 G  r; \$ z- @. M& S# m5 kA. IP Access
9 E* E+ _- e: H: B: cB. IP NAT
C. BGP
D. IPv4 layer 3 security
' [% Q, {+ J8 V# ~Answer: D
QUESTION 31
What is the solution of the fault condition?
  Z& `8 r: m( h, ZA. Under the ip access-list 30 configuration add the permit ip 209.65.200.224 0.0.0.3 a ny
  v/ X5 G/ n$ ~8 k0 Mcommand
6 u% I8 G( n4 F  S$ q4 I' d/ d# h* VB. Remove Deny Statements from access-list 30
: L& ?/ f- J. o' B# v: c  L3 IC. Change neighbor 209.65.200.226 remote-as 65002 statement to neighbor 209.65.200.226
7 w0 p5 j5 s' U. s5 W. ~) Zremote-as 65001
0 V4 c9 @4 {( n" \0 l6 u. vD. Use extended access-list instead of standard access-list
* q% u$ x- ?3 \* v! T! V$ g+ ]Answer: A
Explanation/Reference:
9 g( a8 j- H3 s( g- g6 GExplanation:

# r! c! [) a( x0 a7 k9 A) Q

Ｃｃ↑victory↓

我是好孩子

兄弟牛啊!

mamamiya

周老师CCIE公开课MPLS（2012年1月2日录制）

http://bbs.hh010.com/thread-129350-1-1.html

周老师CCIE#116XX CCNA视频教程-1-2012年1月5日录制

http://bbs.hh010.com/thread-129578-1-29.html

周老师CCIE#116XX CCNA视频教程-2-2012年1月5日录制

http://bbs.hh010.com/thread-129579-1-29.html

周老师CCIE#116XX CCNA视频教程-3-2012年1月5日录制

http://bbs.hh010.com/thread-129580-1-29.html

周军CCIE#116XX CCNA视频教程-(4-5)-2012年1月6日录制

http://bbs.hh010.com/thread-129818-1-29.html

周军CCIE#116XX CCNP视频教程-NP交换课程网络设计讲解（2012-1-13录制）

http://bbs.hh010.com/thread-130452-1-1.html

周军CCIE116XX CCNP视频教程-9-交换机安全实验(2012年1月19日录制)

http://bbs.hh010.com/forum.php?mod=viewthread&tid=133921&extra

周军CCIE116XX CCNP视频教程-10-交换机安全实验（2012年1月19日录制)

http://bbs.hh010.com/forum.php?mod=viewthread&tid=133932&extra

周军CCNA公开课-实验机架演示（2012-03-11录制）

http://bbs.hh010.com/forum.php?mod=viewthread&tid=153943&extra

周军CCIE_RS-OER技术（2012年3月17日CCIE集训营随堂录制的视频）

http://bbs.hh010.com/forum.php?mod=viewthread&tid=162134&extra

周军CCIE公开课-mpls-vpn（2012-3月18日录制）

http://bbs.hh010.com/forum.php?mod=viewthread&tid=162401&extra

woodward2012

ァE-ven

forgprincecjx

YDX1987

wysjwl

请问port-security那道题，答案是C还是D？

环保108胶

enter51

ethan.liao

恭喜

kaotomorrow

klarkchen

hu_wen_qiang123