国外论坛上摘下来的K8详细配置，可以看看！

henanwz · 发表于 2013-4-15 11:34:54

这是据说的K8详细配置，拓扑是其他人传的那种！
有没有谁能给个确定的答案，能否确定K8真的出来了？

2 M* J8 J' Y0 n: A& i7 NSection 1 - Layer 2

----------------------------------
1.1 Troubleshoot Layer 2 Switching
----------------------------------
Cisco says that there are two faults injected. Each fault will give you 2 points. The whole Lab had 78 points to get, so you must have 62 points in order to be over 80%.

- VTP password about sw2,3,4 with sw1 mismatch
- no ip cef on some routers (not sure if that is a fault)

-----------------------------------------------------
1.2 Implement Access Switch Ports of Switched Network
-----------------------------------------------------
Configure all of the appropriate non-trunking switch ports on SW1 – SW4 according to the following

- SW1 is the server for the VLAN Trunking Protocol version 2 domain "CCIE" (VTP password "cisco" )
- SW2, SW3, SW4 are expecting SW1 update their VLAN database when needed
- Configure the VLAN ID and Name according to the table below (case sensitive)
- Configure the access ports for each VLAN as per the diagram
- Configure all the Switch mode are Transparent after synchronization the VLAN database.

VLAN_ID NAME
28 VLAN_28_R2toSW3
36 VLAN_36_R3toSW1
69 VLAN_69_SW1toSW4
89 VLAN_89_SW3toSW4
500 VLAN_500_Client

--------------------------------------------------------------------------------------------------------------
1.3 Spanning-Tree Domains for Switched Network Configure the switches according to the following requirements:
--------------------------------------------------------------------------------------------------------------

- Both switches must have one instance per vlan.

- Ensure that SW1 is the Root Switch, and SW2 the Backup Switch for all vlans(obtain the future vlan)

- Configure instance per vlan and rapid transition for forwarding

-------------------------------------
1.4 Switch Trunking and Ether Channel
-------------------------------------
Use the following requirements to configure the Etherchannel of SW1, SW2, SW3 and SW4:

- Use encapsulation 802.1q for all cross interface
- Configure Etherchannel use the 802.3ad standard

-------------------------------------
1.5 Frame-relay configuration
-------------------------------------
- Back to back frame-relay between router R5 and R1 and R1 and R4
- R1 use the sub-interface connect to R4

Section 2 - Layer 3
--------------------------------
2.1 Implement IPv4 OSPF
--------------------------------
- OSPF process ID must be used the YY number
- Router ID must be stable and must be configed using the IP Address of Lo0
- Lo0 interfaces must be advertised in the OSPF area as shown in the IGP topology diagram and must appear as /32 routes
- Do not create any additional OSPF areas. Do not use any IP address not listed in the diagram

--------------------------
2.2 – Implement IPv4 EIGRP
--------------------------

Configure Enhanced Interior Gateway Routing Protocol (EIGRP) 100 on SW3 and SW4 in order to establish EIGRP neighbor with Backbone 3 in the IGP topology diagram.
- BB3 has IP address 150.3.YY.254 and is using AS number 100
- R1,R2,R4,R5,SW3 configure the EIGRP AS YY to build the IGP part
- Disable auto-summary

--------------------------
2.3 – Implement IPv4 RIP
--------------------------

- Configure RIP on SW1 and SW3
- Disable auto-summary

------------------------------

Redistribute EIGRP into RIP( Y5 o- A2 f3 V* n$ d5 u

------------------------------
-Redistribute EIGRP 100 into RIP on SW1 and SW3

--------------------------------
2.5 Redistribute EIGRP into OSPF
--------------------------------
- Redistribute EIGRP into OSPF.

--------------------------------
2.6 Redistribute OSPF into RIP
--------------------------------
- Redistribute OSPF into RIP
- Do not redistribute RIP into OSPF
- Area 0 prefix was a IA route and wasn’t allowed to go into any area existing

----------------------
2.7 Implement IPv4 iBGP
----------------------
-Configure iBGP peering for R1, R2, R3, R4, R5, SW1,SW2 as per the following requirement.
- Minimize number of BGP peering sessions and all BGP speakers in AS YY except R1 must have only one iBGP peer
- R1 is the only one allowed to start the tcp connection for the BGP neighbor
-SW4 is AS 144, peering with SW1 and SW3

----------------------
2.7 Implement IPv4 eBGP
----------------------
-BB1 and BB2 are AS 254,peering with R4 and R5
-BB1 and BB2 are advertising the same routes with different AS Path.
-SW4 should see 2 equal paths to the AS 254 routes.
-Sw4 should load-share and have to paths to the backbones which are placed beneath r5 and r4 on your topology
-Sw3 should load balance between R1 and R2 on your topology all though Sw2

Configure BGP as per diagram

- When you done the BGP neighbor , you should implement all your address should be reachable from any device, except SW2

----------------------
2.8 Implement MPLS VPN
----------------------1 `6 Q  `+ G5 p: K: C6 A
- Sw2 with two loopbacks connected to r3 and r2 on two different VRF
- SW2 and R3 stay in CE1 area ,and SW2 use another interface with R2 stay in CE2 area
- R2 and R3 are PE devices , run the BGP and vpnv4 and mpls
- R1,R4,R5 are P devices, transport the traffic in mpls area
- R2 and R3 should go through R5 when they start the traffic.
- Use the standard protocol to transport the label in MPLS area
- Need to enable LDP on all serial interfaces only.
9 \. ^2 J, f# N+ [7 q: q- Mpls must use stable update source
- Sw2 must have two different routing instances in the global one only l0 should be seen

----------------------
2.9 Implement IPv6 EIGRP
----------------------
-use the EIGRP to make the ipv6 neighbor
- You must ping success for every ipv6 address

Section 3 – Mulitcast

----------------------
3.1 Implement multicast part 1
----------------------
- There has a client located on the link between R4 and R5
- Need to create Loopback 1 on R1 and R2 as RP address9 @- _. s2 Z  {* T
- Both Loopbacks with same IP address.
- Use the standard RP-select method

----------------------

Implement multicast part 2
+ @! M9 A# v7 K3 e

----------------------
-Some router must be the source , and can be get the reply from the client

Section 4 – Feature

----------------------

Implement Gateway load balance protocol' E& c0 n: D. M% k! \1 b

----------------------
- SW1 and SW3 use the cisco proprietary protocol to implement the hot switch-over
- Use GLBP to achieve the request
- Both two devices use the MD5 Auth to keep the GLBP safe
- One of them increase the weight to become the AVG ,the other device is AVF

----------------------

Implement Layer-2 switchport security8 d/ g- ?+ V- J" D; C0 D7 Z7 `/ ?

----------------------

- Switch-port protected, not allowed to use private vlans. Should use port security to dynamicly add mac add to the configuration.

- Five users connect to Vlan 500 ( SW2)

- These users will connect from SW4 ( Fa0/1 - 5).5 h, S& H% P: D% K7 [) G+ Y
- This ports should move to forwarding quick.
5 [, S/ h1 @: B3 `0 ?- These ports should be protected and mac address learn dynamically.
1 {9 l" i; F; D0 |0 [* n- Shut down the ports if violation occurs.

----------------------

Implement SSH
9 g- Y$ k, T2 m) v& z( R0 D

----------------------
- To keep the VTY line security ,you must implement the SSH to ensure the line safe
- Two users connect via ssh will go directly to enable mode
- It is not allowed to cause line con 0 a user prompt when trying to login
- Using only one single extended acl.

----------------------

Implement Mpls QoS+ J& z$ X! E# `1 ]

----------------------" ~- n3 @3 j- f0 {0 I
- policy maps to match different type of qos in mpls is predefined. they just want you to do stuff with it like preserve bandwidth and such.

----------------------

Implement PBR
9 o4 d1 m$ k1 z+ P& T1 g

----------------------
4 T; B' C; l6 j2 J& |- Create Lo100 on SW38 a) I8 A3 i7 t
- Create Lo100 on R5
' K1 Q" E' V9 b+ L) D& E: F-All traffic sourced from SW3 Lo100 destined to R5 Lo100 ( and only this traffic) needs to so via interface between SW3 and R1.% U6 D7 H1 k% ]( U3 E5 t* G
-The rest should load balance.
- ~8 k. `, z1 b' Y& S( K-Use the policy-map and route-map to implement

Section 5 – Network optimize
' I( `! o7 o1 P
}/ N9 X" a& Y6 p----------------------
5.1 Implement SNMP
----------------------
-Rite the configuration to configuration log and something about saving the last 10 lines

----------------------
5.2 Implement EEM
----------------------
/ \7 g) q* N$ N- {-The administer ask you implement a simple script on R3
-Need to match " %SYS-5-RELOAD: ", then do a shut / no shut to gigabit interfaces.

cisco_2012 · 发表于 2013-4-15 12:42:05

alex_zhu18 · 发表于 2013-4-15 14:41:51

看情况吧看香港有没有人遇到了

light333 · 发表于 2013-4-15 22:37:40

早晚都是个K5

llw_annie · 发表于 2013-4-16 04:18:18

不管你信不信，反正我是信了。

ciscojerry · 发表于 2013-4-16 09:44:13

顶一个~~~~~~~~~

xiaoanyu · 发表于 2013-4-16 11:34:08

wwtc8778 · 发表于 2013-4-16 14:06:25

啥也不说了，楼主就是给力！

iry · 发表于 2013-4-17 08:12:50

onlyccie · 发表于 2013-4-17 16:12:50

，菜鸟来报道，赶紧出绝招

aili_tree · 发表于 2013-4-18 22:11:24

论坛boss · 发表于 2013-4-19 10:15:04

gouzhao103964 · 发表于 2013-5-2 13:35:55

有没有人出解法

henanwz · 发表于 2013-5-3 09:03:19

gouzhao103964 发表于 2013-5-2 13:35
9 O" p$ {( Q1 X& t9 G& ^7 d有没有人出解法

这个不全，相对较完全的题目和解法已经存在了。

Songokus · 发表于 2013-5-19 22:31:29

账号		自动登录	找回密码
密码			论坛注册

[LAB战报] 国外论坛上摘下来的K8详细配置，可以看看！

点评

浏览过的版块

客服中心

投诉建议