喜讯 642-823低调PASS－千分飘过－第三次CCNP重认证

cccisco

    642-823 PASS－千分飘过－第三次CCNP重认证
% C+ |' i% ~: I  s' J: V% ^
: X0 ~/ \. _# s鸿鹄V200全覆盖，感谢前期各位弟兄的战报，感谢客服5提供协助考试注册（虽然没有注册成功，原因是我支付宝问题）
, W7 ]: a% G# @) X# ]9 H, `5 s
关于筹备：周三决定参加642-832考试，一共筹备3个晚上，看完了视频和题目，稳定的做了FLASH和官方的Flash 。熟练掌握万金油精华，外加7年IT运维护经验，排错还是小CASE。
9 ]$ Y! p# N/ C" @7 R
考试介绍：周5注册的周6 11：30的考试，提前联系考试中心的MM，说可以早早的考试，早上9：00出发，9：20-30验证完成身份后 9:35－10：38完成考试出考场，低调满分通过。

823，很稳定，大家一定好好理解TT的错误点，认真排查和进行PING测试，避免搞错故障点。
9 W& q# `% n7 e1 f3 fFlash上面的4个模拟TT一定要排查出来原因，目的一是熟悉考试的环境，二是通过这个环境训练自己的排错能力。４个TT如果没有找到原因全做对的话不建议参加考试。

万金油，这个是一个排错的思路，像查HSRP、IPV6、169这几个都是很明显的，先把这几个明显的查出来后，剩余的就好找了。别着急考试时间，充足的很，足够排30个TT了。
, _: G8 X# k' T
关于TT排错总结：个人总结的是例如明确知道TT1是HSRP故障的话，可以在TT*不确定的话，可以来对比配置。通过对比可以排查出问题具体原因。　像当是我做的时候有几个确实很混淆。　另外注意使用除了C1/2外，其它R*路由器进行PING测试，保证完美。
－－－－－－－－－－－－－－－－－考试整理，摘录某个兄弟整理的－－－－－－－－－－－－－－－－
1
TT1  ：HSRP  ------------------- DSW1
在DSW1上Show run  看到standby  条目，show standby brief----看到状态没有UP
7 F5 P( ?, u; V0 l; W1 dTROUBLE TICKET STATEMENT:
$ W0 a# g$ V" H“The implementation group has been using the test bed to do a „proof-of-concept‟ that required
both client 1 and client 2 to access the Web Server at 209.65.200.241. After several changed
8 B; y& O5 Z( S) o7 s$ P2 h' xto interface status,network addressing, routing schemes and layer 2 connectivity, at trouble
ticket has been opened indicating that client 1 cannot ping the 209.65.200.241 (internet
# I4 |  v8 b4 b/ G# gServer)”
, s& Z; @" \- @% W7 d5 z. j以下信息需要自己show run获得：
& Q  x# h6 {! wHSRP has been configurationured between DSW1 and DSW2. DSW1 is configurationured to
be active
6 w/ P* }8 `4 h) t! s6 l, ?2 zrouter but it never becomes active even though the HSRP communication between DSW1 and
- Z0 Q9 z( G. ~2 L" ADSW2 is
" l. |* K$ A1 X$ R/ ^9 Eworking.
# i& T: o# a3 b: l/ PConfiguration on DSW1
3 M5 {5 E8 h3 m8 L4 g5 Z3 W, I( atrack 1 ip route 10.1.21.128 255.255.0.0 metric threshold threshold metric up 1 down 2
!
track 10 ip route 10.2.21.128 255.255.255.0 metric threshold threshold metric up 63 down 64
!
2 v/ G, d7 |1 A: L6 L' j' f  \interface Vlan10
  Y* w6 b9 _4 M7 [7 G1 G; f( wip address 10.2.1.1 255.255.255.0
standby 10 ip 10.2.1.254
standby 10 priority 200
& i2 Q. G  y) \standby 10 preempt
standby 10 track 1 decrement 60
Configuration on R4
% A9 i' f5 g) _interface loopback0
8 J) M9 z- C5 A  }  Pip address 10.2.21.128 255.255.255.0
QUESTION 1
. Z) g1 \) {; ^0 w/ f3 lOn which device is the fault condition located?
: e6 q9 k+ K* S3 eA. R4
$ [$ T5 b+ O) D1 ]* ]! ]# |B. DSW2
C. DSW1
- q4 _; _/ {/ ~; n1 b" B' GD. R3
8 n( J3 `# e# y9 y  dAnswer: C
QUESTION 2
Fault Condition is related to which technology?
A. GLBP
: m, d3 t  t% ]/ v& c. D" PB. HSRP
) w4 n7 E+ t, i$ eC. OSPF
6 N$ f* b2 f& j5 E0 e5 [D. Switch to Switch Connectivity
Answer: B
! C3 ^& o. Z% a% ~; j& S; bQUESTION 3
% a6 F7 w( [& a  q! F1 a  YWhat is the solution of fault condition?
% B9 h8 ]' ]% e2 jA. Change standby priority to 140
B. Change standby priority to 260
C. Under the interface vlan 10 configuration delete the standby 10 track 1 decrement 60
2
& d& e6 a- I+ L2 a+ qcommand and enter the standby 10 track 10 decrement 60 command.
D. Change standby 10 track 1 decrement 60 to standby 10 track 1 decrement 100
Answer: C
9 m9 @, @; {2 J- q/ ZTT2：IPV6-----------R2
在R2上show ipv6 router,只有直连和L链路本地，没有任何OSPF 路由
" e! P5 ^( e# J9 x* |" _# {1 q以下信息需要自己show run获得：
DSW1 and R4 cannot ping R2's loopback or R2's s0/0/0/0.12 IPv6 address. Initial
* D; v& ^. Q2 b; k5 btroubleshooting shows
) U6 G) F; W9 o" ~/ P4 n  [2 yand R2 is not an OSPFv3 neighbor on R3.
$ k( z* r6 H4 Z1 k6 p% n( U# aConfiguration on R2:
6 B  \1 p- N4 N% Y; S1 Fipv6 unicast-routing
!
# @/ Y% g$ D2 \% H: a, ripv6 router ospf 6
router-id 2.2.2.2
!
8 I# B$ n9 J( i! M. ?3 finterface s0/0/0/0.23
ipv6 address 2026::1:1/122
Configuration on R3
ipv6 unicast-routing
4 B" z, c" R/ v% h" R!
' q/ Z  z- U0 R: u( T, fipv6 router ospf 6
router-id 3.3.3.3
1 v* G! y. [  k' L!
interface s0/0/0/0.23
9 S6 [6 |9 T; E+ b0 _! t" Z* {ipv6 address 2026::1:2/122
ipv6 ospf 6 area 0
QUESTION 1
4 c. Z, o3 n4 z8 s' t  HOn Which device is the fault condition located?
; n! a' g8 d2 S) XA. DSW1
; f# j* l1 b" s+ P* S8 ^( _9 H( sB. DSW2
! B- a  e8 k1 @0 x. h: J* {$ x) hC. R2
7 r0 h$ z' }) [5 FD. R3
Answer: C
QUESTION 2
) f3 J: p* N- k, n1 U1 sThe Fault Condition is related to which technology?
8 Y2 D8 u5 a2 HA. IPv6 Addressing
$ ?0 s6 U5 ?3 P0 N8 yB. Route Redistribution
/ \+ c. a) b  F! @7 F6 A( ]/ ^C. IPv6 OSPF Routing
D. RIPng
+ F4 S! {" l. _" V) L' p9 yAnswer: C
9 y0 M/ N' V. ]! LQUESTION 3
What is the solution of the fault condition?
A. Under the interface Serial 0/0/0.23 configuration enter the ipv6 ospf 6 area 0 command.
B. Add ipv6 ospf 6 area 6 under s0/0/0/0.23 on R2
/ q' h- ^( J, m( G9 a9 \( MC. Remove IPv6 address from s0/0/0/0.23 on R2
$ [. ^5 b  G6 I3
2 }; M  ?; ?' W0 V) yD. Enable IPv6 routing on s0/0/0/0.23 on R2
Answer: A
TT3: DHCP range------------ R4
在4道题上，分别在R4上show run ，找到错误的DHCP,10.2.1.1  -10.2.1.253，确定为DHCP
; Q8 k& i: {/ a$ _以下信息需要自己show run获得：
Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
FTP Server.
7 Q3 k2 d# w+ Z& }  w# j: g$ bThey are able to ping each other.
Configuration on R4
- x* O3 |2 M0 H% |7 {!
3 J8 d/ j8 d+ l# v& Lno ip domain lookup
8 N9 j0 Y" v3 W  K6 B1 f1 Cip dhcp excluded-address 10.2.1.1 10.2.1.253
ip dhcp excluded-address 10.2.1.254
!
ip dhcp pool TSHOOT
network 10.2.1.0 255.255.255.0
default-router 10.2.1.254
!
QUESTION 1
On Which device is the fault condition located?
2 ^0 V, x3 z7 h- |* dA. R1
  A8 a) X) N0 e, Y' pB. R2
C. R3
D. R4
2 @4 d6 J3 h6 ~/ k. LE. DSW1
F. DSW2
% {2 h! ?! X( p. hG. ASW1
H. ASW2
, l& r, Y' d& a" h' E  v" iAnswer: D
, M( ?( L, p- V0 F% hQUESTION 2
The fault condition is related to which technology?
$ h+ a1 y* u3 [# B: B* `! C1 ]" TA. NTP
B. IP DHCP Server
C. IPv4 OSPF Routing
& A/ _! x! T- }( wD. IPv4 EIGRP Routing
  ~. |% e8 Z# c& \, t+ I' z3 `E. IPv4 Route Redistribution
( o9 |' N) a# r4 RF. IPv6 RIP Routing
G. IPv6 OSPF Routing
H. IPV4 and IPV6 Interoperability
I. IPV4 layer 3 security
Answer: B
( X" ]0 ~% V/ `/ I, dQUESTION 3
What is the soultion to the fault condition ?
' E! F' X8 {4 _. ?. H8 XA.  Under global configuration, delete the no ip dhcp use vrf connected command.
B.  Under IP DHCP pool configuration, delete the default-router 10.2.1.254 command and
/ P5 k5 d; N' N  J4
enter the defaultrouter 10.1.4.5 command.
C.  Under IP DHCP pool configuration, delete the network 10.2.1.0 255.255.255.0 command
and enter the network 10.1.4.0 255.255.255.0 command.
2 G$ a: `- l8 B0 g$ E% @/ q3 QD. Under the IP DHCP pool configuration, issue the no ip dhcp excluded-address 10.2.1.1
10.2.1.253 command and enter the ip dhcp excluded-address 10.2.1.1 10.2.1.2 command.
6 s) k" c; a! j3 O. N( {  u& e/ sAnswer: D
) r6 c. a- t. D/ L& i) a+ z0 lTT4 : port security -----------ASW1
在3道题上，在ASW1上，show interface f1/0/1,找到f1/0/1 is down,line protocol is
' ?( F8 H: d8 M5 B7 _" Odown,switchport port-security mac-address 0000.0000.0001,  并show run
以下信息需要自己show run获得：
Client one is getting a 169.x.x.x IP address and is not able to ping Client 2 or DSW1. Inital
: s1 j& e* B0 m  r0 B" otroubleshooting
3 ]% X' [, d4 p2 p+ eshows that port Fa1/0/1 on ASW1 is in errdisable state.
6 X/ I  s6 N7 I* K9 hConfiguration on ASW1
3 e* o7 T. Q0 v% j( d, _# ~/ PInterface FastEthernet1/0/1
+ g; ~$ G: `6 O, L4 ~switchport mode access
switchport port-security
switchport port-security mac-address 0000.0000.0001
Interface FastEthernet1/0/2
switchport mode access
switchport port-security
switchport port-security mac-address 0000.0000.0002
QUESTION 2
! U7 Q5 x& x$ q1 w% a+ B: ]( \' P8 ^, NOn which device is the fault condition located?
A. DSW1
# Z0 L# z# q5 L1 ~; WB. ASW1
. l; C. O  I$ o% B8 V2 wC. Client 1
D. FTP Server
) a0 B1 `9 u, rAnswer: B
QUESTION 3
The Fault Condition is related to which technology?
0 W" q8 c; h6 ~# ?: gA. VLAN Access Map
0 e, b5 E3 ~4 x3 z7 Z/ o  b8 UB. InterVLAN communication
C. DHCP
D. Port Security
# z: [- H* r( Y( k! L5 n! eAnswer: D
QUESTION 4
0 z' j" W+ W; U6 ?4 y& JWhat is the solution of the fault condition?
  D/ F; K. H6 U. V* S& mA.  Configurationure Static IP Address on Client 1
& h6 m3 d# X$ l0 t2 _B. Change the IP Address of VLAN 10 on DSW1
' Y3 M$ I$ v, B8 C( [' ~- mC. Issue shutdown command followed by no shutdown command on port fa1/0/1 -2 on ASW1
4 ]2 s$ i& L; _D. In Configuration mode, using the interface range Fa 1/0/1 -2, then no switchport-security
interface configuration commands. Then in exec mode clear errdisable interface fa 1/0/1, then
, e& i2 h' S6 B# g: o, w3 D5
# Y  [( d3 c1 O4 _# S2 \clear errdisable interface fa 1/0/2 commands
1 H$ B' e0 K, b0 g+ y  _# G6 O: eE. Issue no switchport port-security mac-address 0000.0000.0001 command on port fa1/0/1 -2
on ASW1
* o) ]  e, h+ }6 H) B4 KAnswer: D
5 F; n" Q* w3 h1 z$ V* B8 xTT5 : switchport vlan 10 ------------ ASW1
1 A9 b. @8 d4 y/ z/ s4 G1 l7 B在ASW1上 show vlan brief 和show run ,发现f1/0/1 和 f1/0/2 在默认vlan 1
中，没有任何在vlan 10
以下信息需要自己show run获得：
) _9 \0 q0 z! M$ V# vClient 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
FTP Server.
They are able to ping each other.
Configuration on ASW1
$ X! w3 D  W" v: e4 G$ d* qInterface FastEthernet1/0/1
switchport mode access
switchport access vlan 1
& K* k9 e0 e0 o* V3 w!
+ O0 u5 ^, |2 K: X: `5 s4 fInterface FastEthernet1/0/2
switchport mode access
switchport access vlan 1
QUESTION 1
On which device is the fault condition located?
A. DSW1
( l9 j4 M* b8 T( y/ ]. i% TB. ASW1
C. Client 1
D. FTP Server
Answer: B
. r; |5 u" y# a. B0 U2 RQUESTION 2
The Fault Condition is related to which technology?
A. Access vlans
$ N/ m5 b; r0 |7 o) L. c* UB. InterVLAN communication
C. DHCP
- N+ @: ^/ c5 a% \; ]# gD. Port Security
Answer: A
3 w/ w) W  A/ G' e* JQUESTION 3
% V4 E  A# ~' X" y7 d( E6 [. `( JWhat is the solution of the fault condition?
A. Given an IP address to VLAN 1 on DSW1
& Y. ]: j0 G  s5 C$ x* ]B. Change the IP Address of VLAN 10 on DSW1
. x# W6 }* V! L7 Z; Z# e$ Y1 _C. In Configuration mode, using the interface range Fastethernet 1/0/1 -2, then switchport
access vlan 10 command.
/ V0 ?0 u7 F& i1 |2 r! pD. Give static IP addresses to Client 1 and Client 2
Answer: C
TT6 : switchport trunk ------------ASW1
  X; @% Z& D; g4 m4 k在 ASW1上show run  
( [7 p) D/ u: I; l6
  `. W  I5 b2 e5 H( k( Y以下信息需要自己show run获得：
  ]0 s% \) q! e) g. c' gClient 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
FTP Server.
They are able to ping each other.
Configuration on ASW1
7 e- n. V6 E( Y( H9 A: a  ]0 XInterface PortChannel13
switchport mode trunk
& _- H! I5 T; G. Q: Z# Uswitchport trunk allowed vlan 1-9
!
Interface PortChannel23
switchport mode trunk
switchport trunk allowed vlan 1-9
; ]4 y: v/ y$ \" ?!
; P$ g, ~. o. }4 XInterface FastEthernet1/0/1
switchport mode access
switchport access vlan 10
!
; ~! L! v8 o/ ^Interface FastEthernet1/0/2
switchport mode access
switchport access vlan 10
$ r7 E0 `. K# F& n0 T+ P+ O$ {!
QUESTION 1
/ _' q8 S) D8 aOn Which device is the fault condition located?
; n& f2 J6 `$ q% @8 YA. ASW1
B. DSW1
- O6 j! Y) O  V7 TC. Client 1
0 Z) e+ p, [5 I; H  |# ~D. FTP Server
Answer: A
! y+ F/ m  ?& V5 s- j& p9 w7 H3 cQUESTION 2
The Fault Condition is related to which technology?
5 T! F. k) b6 q7 x+ L1 EA. VLAN
B. InterVLAN communication
" U  {, ]  x3 ]5 zC. DHCP
+ O. `0 x. `6 S) P  pD. Switch to Switch Connectivity
2 ?! ~5 W5 l5 d9 ?$ O& ~Answer: D
QUESTION 3
9 _( H- ^2 c% G+ V# \What is the solution of the fault condition?
A. Change the VLAN assignment on fa1/0/1 and fa1/0/2 on ASW1 to VLAN 1
8 Y. O6 p' a8 v9 [# hB. Change the IP Address of VLAN 10 on DSW1
C. In Configuration mode, using the interface port-channel 13, port-channel 23, the configure
9 `8 v+ S$ O' L/ s- H6 mswitchport trunk none allowed vlan none followed by switport trunk allowed vlan 10,200
# s4 G1 R6 E8 I/ `commands.
D. Issue switchport trunk allowed vlan none on interface portchannel13 and portchanngel23 on
ASW1
Answer: C
7
" q& O* Z0 \7 ?- x, L) }--------------------------------------------------------TT7 : VLAN ACL ------------------------DSW1
以下信息需要自己show run获得：
Client 1 is getting an IP address from the DHCP server but is not able to ping DSW1 or the
- z8 n2 m7 F) a+ X3 nFTP server.
* B4 B: Y. R% J" n2 sConfiguration on DSW1
vlan access-map test1 10
! n& e! `& a: C# y5 y. W7 s2 n2 sdrop
match ip address 10
!
vlan filter test1 vlan-list 10
!
ip access-list standard 10
permit 10.2.0.0 0.0.255.255
; O3 @) n+ M$ ~* j. B1 q: Z$ J!
' r/ j. p1 f$ J8 ^% G- `, TInterface VLAN10
ip address 10.2.1.1 255.255.255.0
!
- v$ |$ {, W+ L+ ~" W  x9 f8 nQUESTION 1
( \; C  c7 s! |On which device is the fault condition located?
& L. I2 o2 y( T- rA. R4
B. DSW1
; P7 P! C( G' A4 oC. Client 1
. l2 m1 i( A6 T; I7 Y* SD. FTP Server
6 }; t: E* m' T1 t& eAnswer: B
QUESTION 2
% C" j/ z% Z7 D% p; q0 pThe Fault Condition is related to which technology?
1 P, A3 |7 ]8 g( |A. VLAN ACL / Port ACL
B. InterVLAN communication
0 n$ P9 \3 I% v7 e9 ^$ fC. DHCP
D. IP Access List
  G* o) s5 ~) UAnswer: A
QUESTION 3
- e9 @; O0 L; ~" R8 T. }5 pWhat is the solution of the fault condition?
3 F  y% d. Z/ Z0 n6 RA. Configurationure Static IP Address on Client 1
B. Change the IP Address of VLAN 10 on DSW1
C. Add Permit any statement to access-list 10
D. Under the global configuration mode Remove vlan filter test1 from DSW1
; N; N) t$ w* ?8 O1 HAnswer: D
TT8 : EIGRP passive -------- R4
4 |8 A' i+ ^! ]以下信息需要自己show run获得：
the neighborship between R4 and DSW1 wasn‟t establised. Client 1 can‟t ping R4
Configuration on R4
router eigrp 10
; F3 T1 x% k: M9 ^8
& A9 g5 i: G5 f" Q) T. mpassive-interface default
% Q6 t2 k# ]1 C4 Uredistribute ospf 1 route-map OSPF->EIGRP
, t+ H0 T! i( Z' _- e3 nnetwork 10.1.4.4 0.0.0.3
network 10.1.4.8 0.0.0.3
default-metric 10000 100 255 1 10000
, P# I% G, _9 h  S) s3 ono auto-summary
QUESTION 1
( c2 g+ N# w# E! k) _On Which device is the fault condition located?
6 b7 A# H  |( f" BA. R1
7 t3 P0 P0 q. J! m' s  f+ hB. R2
C. R3
D. R4
5 w# J* R& x9 p2 RAnswer: D
4 K+ m( o0 i$ v* ?QUESTION 2
The fault condition is related to which technology?
A. NTP
B. IP DHCP Server
C. IPv4 OSPF Routing
8 e0 \, H) _  w3 \. VD. IPv4 EIGRP Routing
E. IPv4 Route Redistribution
1 m1 w+ j% n0 ~) ^- x. XF. IPv6 RIP Routing
G. IPv6 OSPF Routing
H. IPV4 and IPV6 Interoperability
I. IPV4 layer 3 security
% e+ z6 f6 w* ~# W! DAnswer: D
QUESTION 3
2 z; F$ K0 L* y3 _) ?* C- C# I- K' xWhat is the soultion to the fault condition ?
A. Remove “Passive interface” in Interface f0/1 and f0/0
) h/ L) W* M! l( VB.
4 Q' \7 f9 l  J! q( Y- aC.
* \7 W. U6 a) |% e9 Y6 }5 VD.
Answer: A
) N; l" H7 Q' E7 g* |  G: }7 kTT9 : Redistribute--------------R4
以下信息需要自己show run获得：
  j2 ]& w! ?3 J' U8 k+ l) gClient 1 is not able to reach the WebServer. Initial troubleshooting shows that DSW1 can ping
8 _6 P, b# r4 K4 e) pthe Fa0/1
; {. w3 o3 `& m& t- Xinterface of R4 but not the s0/0/0/0.34 interface.
; `  _7 ]. X1 P6 [# r3 F5 y9 iConfiguration on DSW1
router eigrp 10
0 a- y& u# i7 W7 Knetwork 10.1.4.4 0.0.0.0
CertKiller.com
network 10.2.1.1 0.0.0.0
network 10.2.4.13 0.0.0.0
no auto-summary
Configuration on DSW2
router eigrp 10
network 10.1.4.8 0.0.0.0
9
, U+ F& v* S5 Z7 P5 O* k9 inetwork 10.2.2.1 0.0.0.0
network 10.2.4.14 0.0.0.0
. @( W6 k: v. ~! L, B, t& @no auto-summary
Configuration on R4
, O: G6 l. h" v0 C- krouter eigrp 10
7 I5 i4 q6 ^" G& o: A, e% W5 fnetwork 10.1.4.5 0.0.0.0
no auto-summary
redistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF
router ospf 1
( O- `. I; B; M- o) u) k% H5 jnetwork 10.1.1.8 0.0.0.0 area 34
redistribute eigrp 10 subnets
/ ?/ I# B& g7 D/ F!
route-map EIGRP->OSPF
match ip address 1
!
! a9 w* P5 B# C0 W6 Z8 [/ yaccess-list 1 permit 10.0.0.0 0.255.255.255
/ R- ?- G% [* waccess-list 1 permit 209.0.0.0 0.255.255.255
QUESTION 1
7 Q2 a( E/ D$ }" gOn Which device is the fault condition located?
A. DSW1
B. DSW2
C. Client 1
0 g# L$ [  |& p- ^% FD. R4
- N' Q& A2 t( x3 d9 iAnswer: D
! Y8 O3 n3 a% e! `7 e; YQUESTION 2
The Fault Condition is related to which technology?
1 R  ~. B4 n# d: ~2 IA. EIGRP
B. IPv4 Router Redistribution
8 T% `: c8 ~3 I# Y8 hC. OSPF
D. IP Addressing
: P- J( D" a: ~& g' ]- Z! e1 LAnswer: B
* V  {- _7 s+ H) SQUESTION 3
3 W. H  N* h6 J- B" K* c. hWhat is the solution of the fault condition?
A. Remove the redistribute command from OSPF process on R4
' f! _" Y: J' @B. Under the EIGRP process, delete the distribute ospf 1 router-map
OSPF_to_EIGRPcommand enter the
redistribute ospf 1 route-map OSPF->EIGRP command.
C. Change EIGRP AS to 1 on R4
D. Advertise 10.1.1.8/30 network in EIGRP on R4
Answer: B
9 M" U$ G" Q/ k, Q" W8 @# k! p% F; OTT10 : OSPF Auth ---------------R1
以下信息需要自己show run获得：
Client 1 is able to ping 10.1.1.2 but not 10.1.1.1. Initial troubleshooting shows that R1 does not
have any
& B4 V& b8 D9 k/ P6 a! s$ A- u1 UOSPF neighbors or any OSPF routes
10
& _$ u/ ?3 \7 {7 b( k% A8 t1 ]Configuration on R1:
" M8 z' ]* x" W" U; g& {router ospf 1
log-adjacency-changes
1 n$ f% q3 U( Enetwork 10.1.1.0 0.0.0.3 area 12
$ G2 G( v5 T% k/ Q6 _default-information originate always
0 s/ u/ d' q5 K0 W: U1 x) l9 E!
% F6 G' y+ H. [% l5 jinterfaceSerial0/0/0/0.12 point-to-point
" v. c4 w) K$ C7 E8 c6 aip address 10.1.1.1 255.255.255.252
ip nat inside
ip ospf message-digest-key 1 md5 TSHOOT
- v9 t; l0 _4 {+ c* d0 z$ kConfiguration on R2:
; u" W. E) j8 _6 [router ospf 1
log-adjacency-changes
0 E7 s  z* d% c6 L# `2 e; q3 [- r. hnetwork 10.1.1.0 0.0.0.3 area 12
& V2 x3 E8 R+ l6 N' T!
- v# [6 G4 E" Q& EinterfaceSerial0/0/0/0.12 point-to-point
+ T" Y0 P! ^" x, k- k0 Lip address 10.1.1.2 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 TSHOOT
! W2 t/ O! }& dQUESTION 1 :
On which device is the fault condition located?
: S# B, x0 ]  RA. R1
B. R2
C. DSW1
! q6 x! w, B: i; e) Q& tD. Client1
% k* B  `* j/ f; @' jAnswer: A
6 R. \/ y2 ^+ qQUESTION 2
Fault Condition is related to which technology?
1 y4 y" x8 @& W& i& U* z" X9 ]A. NAT
/ W& f3 W' ?) w7 c& tB. IPV4 OSPF
# C3 h) w+ [3 @7 u. N/ Q! XC. Static Routing
D. Switch to Switch Connectivity
Answer: B
: m7 B8 Z/ Q( `QUESTION 3
What is the solution of the fault condition?
A. enable OSPF Authentication on the S0/0/0 interface using the ip ospf authentication
  X$ u9 x2 h, g1 q/ V% e# cmessage-digest
: \6 O3 F- c" d* a, M. kcommand
B. ip ospf authentication message-digest command has to be added under the OSPF routing
process
C. A static route to 10.1.1.4 must be added on R1
D. ipnat outside must be added on S0/0/0/0.12
Answer: A
6 O# Y$ X! B( m+ H* P" qTT11 : BGP neighbor ---------------R1
2 A7 D) [6 r, Q2 ?  m9 }9 p" U以下信息需要自己show run获得：
5 n3 d/ N+ i! X" c6 v" C! Q11
! P* |, C, ~/ l- A! K* F6 G4 m# fClient 1 is able to ping 209.65.200.226 but not the Web Server at 209.65.200.241. Initial
7 ~: e) E: c8 v2 A+ C. L- K  Qtroubleshooting
shows and R1 does not have any BGP routes. R1 also does not show any active BGP
! \  @+ c/ A+ c7 X( ]neighbor
Configuration on R1
: R# B0 A7 d/ `. J) lrouter bgp 65001
4 U& Q* r- m2 g2 hno synchronization
bgp log-neighbor-changes
network 209.65.200.224 mask 255.255.255.252
neighbor 209.56.200.226 remote-as 65002
7 ~9 Q' S4 a4 v: {* S) Uno auto-summary
2 H! g0 S4 s* q% gQUESTION 1
, }0 Q' {7 d( j+ j; mOn which device is the fault condition located?
A. R1
! I, [2 R! H4 e' lB. DSW1
: |, a: x4 U( X) @) hC. R4
7 c, v# h* c( l0 SD. R2
Answer: A
; a+ R+ s' V% n( |5 Y. ~" CQUESTION 2
The Fault Condition is related to which technology?
# m' z; s1 J) w/ G0 I4 e  c1 VA. EIGRP
B. HSRP
C. BGP
5 h$ g+ j0 t. L6 t+ kD. OSPF
Answer: C
QUESTION 3
# F" q) R. `: W; M8 u/ w9 xWhat is the solution of the fault condition?
A. Enable BGP synchronization
B. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.56.200.226
' v7 P0 C) U" r) Nremote-as 65001
C. Under the BGP process, delete the neighbor 209.56.200.226 remote-as 65002 command
enter the neighbor 209.65.200.226 remote-as 65002 command.
2 b9 g1 h7 i! D& `& eD. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.65.200.226
remote-as 65001
2 ]; `( f' b( ]6 C) e& eAnswer: C
& _9 d& z  b3 l+ [TT12 : NAT -----------------------------R1
QUESTION 26
以下信息需要自己show run获得：
Client 1 and Client 2 are not able to reach the WebServer at 209.65.200.241. Initial
( H' A( N* Z9 m7 ^& {; |) Ltroubleshooting shows
that DSW1, DSW2 and all the routers are able to reach the WebServer.
Configuration on R1
ip nat inside source list nat_pool interface Serial0/0/0/1 overload !
. I+ \5 ?' b, M" Q5 I4 R( U& }ip access-list standard nat_pool
" Q2 ]# M7 o6 R2 D- T/ q/ apermit 10.1.0.0
!
12
interface Serial0/0/0/1
ip address 209.65.200.224 255.255.255.252
" e( v# ]! s; I2 l! ^( X" Mip nat outside
!
# R4 `8 E' Q; ^. G% @interfaceSerial0/0/0/0.12
ip address 10.1.1.1 255.255.255.252
ip nat inside
ip ospf message-digest-key 1 md5 TSHOOT
! I/ a* k3 X4 [2 c- g: S1 [$ {ip ospd authentication message-digest
On Which device is the fault condition located?
7 w/ ]( Y% a/ S( MA. R1
+ f* k0 ]4 m& L9 E. Y, DB. DSW1
C. R4
! G" u* s! y  I  G& E3 G( GD. R2
Answer: A
QUESTION 27
The Fault Condition is related to which technology?
A. EIGRP
" K: ]2 G' P, A- t% |) z5 t: ]8 qB. HSRP
C. BGP
D. NAT
Answer: D
8 P' O4 H' A6 z$ i8 ?2 ]2 AQUESTION 28
What is the solution of the fault condition?
A. Under the ip access-list standar nat_trafic configuration enter the permit 10.2.0.0
: b6 a6 q3 T( e0.0.255.255 command
9 X4 |5 K1 I5 a& @7 B1 {B. Remove permit 10.1.0.0 statement from nat_pool access-list
/ A& P# \6 o4 O1 O0 x/ g* X3 M: QC. Change ip nat inside source list nat_pool interface Serial0/0/0/1 overload to ip nat inside
5 p! i: `, h3 G8 f% Q& Ksource list nat_pool interface Serial0/0/0/0.12 overload
; O/ o" d1 M) s4 w  \* R+ mD. Change ip nat outside statement under Serial0/0/0/1 configuration to ip nat inside
* ^2 B9 t( s7 i4 zAnswer: A
+ T' s" r! R5 @! XTT13 :    -------------R1
QUESTION 29
以下信息需要自己show run获得：
Client 1 is not able to reach the WebServer at 209.65.200.241. Initial troubleshooting shows
$ V' |; |$ C; y* x2 |that R1 is also
not able to reach the WebServer. R1 also does not have any active BGP neighbor.
+ s: v2 O: S* b0 s& Y! w& RConfiguration on R1
router bgp 65001
# c  y) _) E  \. Fno synchronization
2 V) r  J( @, ?! z; gbgp log-neighbor-changes
6 w! u7 c. }! s" i$ W5 enetwork 209.65.200.224 mask 255.255.255.252
- T- G2 x$ l; b2 f* Z* Fneighbor 209.65.200.226 remote-as 65002
& I. |! E/ e% r1 s4 ?' K0 cno auto-summary
!
access-list 30 permit host 209.65.200.241
& r; l: ?6 w* {3 c  o7 naccess-list 30 deny 10.1.0.0 0.0.255.255
13
access-list 30 deny 10.2.0.0 0.0.255.255
!
interface Serial0/0/0/1
ip address 209.65.200.224 255.255.255.252
ip nat outside
ip access-group 30 in
On which device is the fault condition located?
A. R1
4 |( f7 Z1 K7 WB. DSW1
. k7 ?1 v' I; n) UC. R4
# e0 z, U5 w$ ^( o2 lD. R2
Answer: A
QUESTION 30
The Fault Condition is related to which technology?
1 Q$ K0 G# n- D" |A. IP Access
B. IP NAT
C. BGP
D. IPv4 layer 3 security
Answer: D
; l, c: h5 L1 X9 t3 [& p. fQUESTION 31
What is the solution of the fault condition?
% b% V% @3 L# l2 I2 v( b, QA. Under the ip access-list 30 configuration add the permit ip 209.65.200.224 0.0.0.3 a ny
$ Q" |1 o$ R% dcommand
; i' {9 e- V5 X6 GB. Remove Deny Statements from access-list 30
, U- Q$ T2 \% t$ M0 C8 k. E. F/ sC. Change neighbor 209.65.200.226 remote-as 65002 statement to neighbor 209.65.200.226
( [- I( @9 r' |* f1 Vremote-as 65001
D. Use extended access-list instead of standard access-list
. X" P& h4 z0 o. o& @Answer: A
Explanation/Reference:
' ^6 k) I4 B5 n/ RExplanation:
0 n. q. `5 U( i6 m# b& C

Ｃｃ↑victory↓

我是好孩子

兄弟牛啊!

mamamiya

周老师CCIE公开课MPLS（2012年1月2日录制）

http://bbs.hh010.com/thread-129350-1-1.html

周老师CCIE#116XX CCNA视频教程-1-2012年1月5日录制

http://bbs.hh010.com/thread-129578-1-29.html

周老师CCIE#116XX CCNA视频教程-2-2012年1月5日录制

http://bbs.hh010.com/thread-129579-1-29.html

周老师CCIE#116XX CCNA视频教程-3-2012年1月5日录制

http://bbs.hh010.com/thread-129580-1-29.html

周军CCIE#116XX CCNA视频教程-(4-5)-2012年1月6日录制

http://bbs.hh010.com/thread-129818-1-29.html

周军CCIE#116XX CCNP视频教程-NP交换课程网络设计讲解（2012-1-13录制）

http://bbs.hh010.com/thread-130452-1-1.html

周军CCIE116XX CCNP视频教程-9-交换机安全实验(2012年1月19日录制)

http://bbs.hh010.com/forum.php?mod=viewthread&tid=133921&extra

周军CCIE116XX CCNP视频教程-10-交换机安全实验（2012年1月19日录制)

http://bbs.hh010.com/forum.php?mod=viewthread&tid=133932&extra

周军CCNA公开课-实验机架演示（2012-03-11录制）

http://bbs.hh010.com/forum.php?mod=viewthread&tid=153943&extra

周军CCIE_RS-OER技术（2012年3月17日CCIE集训营随堂录制的视频）

http://bbs.hh010.com/forum.php?mod=viewthread&tid=162134&extra

周军CCIE公开课-mpls-vpn（2012-3月18日录制）

http://bbs.hh010.com/forum.php?mod=viewthread&tid=162401&extra

woodward2012

ァE-ven

forgprincecjx

YDX1987

wysjwl

请问port-security那道题，答案是C还是D？

环保108胶

enter51

ethan.liao

恭喜

kaotomorrow

klarkchen

hu_wen_qiang123