新版NP642-832Ts排错890分Pass(破 处了)

和气生财

今天下午 考完！由于公司只报销一次200美元的考试费，所以比较认真做题！差不多把考试时间耗光光！
对于不会使用show  debug  ping 等命令来排错的兄弟(没有任何中小型网络设计 经验的兄弟 就不要去送钱了)！ 估计3个小时时间 不够用的！！！
5 ]- B# V9 ?5 r/ z
首先比较感谢
NP642-832备考QQ群:105918054
7 D* d# v8 ^) i. h的群主及兄弟姐妹 (注意网上的题库不可信，那都是假的！群主说那些网上832题库是05年CIT考试题库的改版)
给我提供了类似CCIE排错考试的.net文件
. C7 a! M; V4 t3 S6 W0 o0 pautostart = False
3 ]* X7 R% m0 B[localhost]
    port = 7200
    udp = 10000
: Z, p- o+ r. l0 u4 Q2 x4 L    workingdir = ..\tmp\
   
; X( W% }+ H, n, G    [[3725]]
        image = ..\ios\unzip-c3725-adventerprisek9-mz.124-15.T5.bin
        ram = 128
% v( x. s  U0 h% R        confreg = 0x2102
        exec_area = 64
" B8 a7 ^; h# T        mmap = False
        slot1 = NM-16ESW
2 K& [+ V+ B! t# ^9 K    [[2621]]
+ I7 I, x7 }1 w% x        image = ..\ios\unzip-c2600-i-mz.121-3.T.bin
        ram = 20
        mmap = False
        confreg = 0x2102
! c) w9 K- I1 Z9 J8 {        ghostios = true
0 q8 d0 c( t8 m( x        sparsemem = true
- Y, D4 M" e+ `6 C1 h#    [[2691]]
: ~% _" b2 J6 G$ s1 }8 o* L* _#        image = ..\ios\unzip-c2691-advsecurityk9-mz.124-11.T2.bin
#        ram = 100
#        confreg = 0x2142
" S( {' ^, G  H0 w5 S#        exec_area = 64
8 `6 x# S. _0 a#        mmap = False
#        slot1 = NM-4T
    [[7200]]
( @, @" v4 ~$ E9 _* A        image = ..\IOS\unzip-c7200-js-mz.123-20.bin
: d' Q8 e7 m9 D) O% V: W        npe = npe-400
        ram = 96
0 Q5 t$ m* z$ p0 {        confreg = 0x2102
        exec_area = 64
        mmap = False
0 [) h. c# O6 i        slot0 = PA-C7200-IO-2FE
        slot1 = PA-4T
5 x1 e/ W0 P* D    [[router Client1]]
        model = 2621
        console = 3011
        f0/0 = ASW1 F1/1
" _( L& d- j' v& o    [[router Client2]]
        model = 2621
        console = 3012
, S; J/ P2 t* O7 V) ?9 y' m1 Z        f0/0 = ASW1 F1/2
    [[router FTP]]
0 g- k$ s7 ?+ P& d& f2 h" Q3 D        model = 2621
2 }5 |9 X7 m) n* c/ p        console = 3013
* O! U7 u" Q# f' S9 x' @" b        f0/0 = ASW2 F1/1
( a/ h6 r# b+ N5 g    [[router WEB]]
        model = 2621
- k+ q% n* N8 Y' p3 A! X( m$ q" F        console = 3014
        f0/0 = Cloud F0/0
    [[router ASW1]]
        model = 3725
        console = 2001
. }' w$ B2 ]' q1 F6 S  f0 `        f1/10 = DSW1 f1/10
        f1/11 = DSW1 f1/11
        f1/12 = DSW2 f1/12
1 ~$ _$ o' y9 e. z, ]& P; \        f1/13 = DSW2 f1/13
4 O; |7 u" J& Z% A$ W    [[router ASW2]]
        model = 3725
6 Z3 y& t/ g9 a4 g        console = 2002
        f1/10 = DSW2 f1/10
2 i' m2 [1 G' U% {0 f/ B        f1/11 = DSW2 f1/11
2 n6 p0 ^; n! \! o; Q3 x        f1/12 = DSW1 f1/12
8 O% W* r# q/ m" Y        f1/13 = DSW1 f1/13
    [[router DSW1]]
2 E. Y( b% V- Q$ e% W        model = 3725
& R+ t4 S7 K" e9 t        console = 2003
        f1/14 = DSW2 f1/14
  s1 M! Q; V# Y4 o: o        f1/15 = DSW2 f1/15
! y, o" @) q* {1 l    [[router DSW2]]
        model = 3725
        console = 2004
    [[router R1]]
        model = 7200
        console = 3001
        s1/0 = FR 1
    [[router R2]]
        model = 7200
        console = 3002
) g( E8 K- |8 v" F        s1/0 = FR 2
+ u- y* u; r  Y' d! f7 h    [[router R3]]
        model = 7200
        console = 3003
        s1/0 = FR 3
    [[router R4]]
        model = 7200
* R7 t6 W3 f/ S" D% i4 w+ t, D        console = 3004
        s1/0 = FR 4
        f0/0 = DSW1 f1/1
        f0/1 = DSW2 f1/1
$ j' f8 A% I! g, [7 `   [[router Cloud]]
        model = 7200
" Y5 l+ D: H0 P        console = 3005
) H" }6 U% E5 k2 P% q        s1/1 = R1 s1/1
    [[FRSW FR]]
        1:102 = 2:201
0 w. b- f" D0 o9 F" f- h        2:203 = 3:302
        3:304 = 4:403
有了初始TroubleShoting！让我去排错！
  A6 _2 J# R' C( B考试时间应该是140+20分钟
5 k" K9 S1 r$ l+ T' K题目数量45–55 questions
16个选择(包括多项)和2-3个拖拽(拖图)题！ 这部分只能使用show  debug  ping trancer等排错命令来完成！！！
( I9 v* [0 J/ [0 J2 B9 g3 X然后是一个大实验排错题！(差不多30个环境排错)
# Q2 ^! T5 i! N9 r2 `' N有L2 TOP /L3 TOP/IPv6 TOP
: i# o& P/ f3 f6 ~* R; _0 j4台交换机(其中2台是3层交换机 2台2层交换)  4台路由器    2个PC属于不同的VLAN  2台服务器(一个是外网的)
类似：
http://www.cisco.com/web/learning/le3/le2/le37/le10/tshoot_demo.html
* |5 t+ Q1 Q8 g5 m, U* c6 F4 d涉及的知识比较多：(毕竟工作排错的场景 可能比这个还困难 所以大部分的题 都能排出来！)
( k9 {* ^* M$ Y  p8 q# r: ^( NEIGRP
OSPF
eBGP
; g" N) Q+ o3 BRedistribution
DHCP Client and Server
NAT
HSRP/VRRP/GLBP
IPv6 Routing
' i6 j. x5 w* f, dIPv6 Transition Techniques
L2 Trunking
' U$ }/ E5 l( E+ q7 sL2 STP
L2 DTP
* {2 F  G+ c9 l) r6 rPrivate VLANs
Port Security
; U% a9 N, O' q3 G! s4 zSwitch Security
VACLs/PACLs
: Q5 m) n8 Y1 u# K, yL2 SVIs
Supervisor Redundancy
& P/ f2 @, Q: i/ T$ zNTP
Switch Support of Wireless, VOIP, and Video
Router Security
: J& B: m* r: A& {6 W1 i4 p' S+ C; xACLs
AAA
) A6 Y  n# F: W% E) VIOS Service Security
我的排错思路一定要有强大的路由和交换的理论知识及排错经验，除非有题库了！！！)
从2层开始 排错  然后到IGP    BGP  IPv6  NAT ！！后面就是一些高级服务的排错！
! N7 T- p& y( _7 T. x6 r(1)首先 2边 Trunk的封装类型 不一样(一边ISL  一边是802.1q),VLNA 接入端口，本征VLAN是否一样！
% H4 \: w1 G1 m3 h交换机 连接路由器的单臂路由接口！
- J" ?% J8 S3 S端口安全   L2的东西 还真多
% k: D) k( J9 w$ r% p3 U9 Q不记得 是不是跳过一个 Etherchannel题目！ 好像是这个以太网信道没起作用的！
: l, x) Q* j- ?- n(2)特别 注意NAT  ip nat inside 打在主接口 是错误的！
(3)EIGRP的邻居建立不起来  这个比较简单  K值不一样！
6 @7 o" [" m( ^. w- p3 s% V9 f" @(4)OSPF NSSA区域 导致邻居不起来  还有OSPF的认证
7 O* Q4 Q9 d, m% t8 }5 R(5)ACL有错
(6)重发布route-map控制的时候有错 ，要特别注意有空语句 那个才对
(7)BGP的nei 不对 一直在active状态
: P& U1 o7 _2 `/ s(8)IPv6的OSPFv3   区域放错了！
4 }$ R: v; M8 t(9)HSRP的track 应该去掉！！
; |9 {- c( _2 ?3 c4 B7 f& c& G! ^0 nTicket
% u' U7 C; t" g4 y1) Client 1 is not able to ping the server
' p3 j1 Z+ v( l' M) A/ xSitution 1: Unable to ping DSW1(Use L2 Diagram)
Vlan Access map is applied on DSW1 blocking the ip address of client 10.2.1.3
# v% ~2 ^& v- u& kAns1) DSW1
Ans2) Scroll down and click on vlan access map
% k3 ~/ v4 n# k, CAns3)No vlan filter 10
2) Client 1 is not able to ping the server
4 W" N8 C& H) R1 SSituation2: Unable to ping DSW1(Use L2 Diagram)
! Y8 W4 t4 ?& `1 C8 rOn ASW1 fa1/0/1 and fa1/0/2 switchport access vlan 10 command is not there
6 E2 \& u4 |5 }! f# |Ans1)ASW1
Ans2)Access vlan
& |; n! ^. s4 lAns3)give command: inte**ce range fa1/0/1-/2 switchport access vlan 10
" [* X. p# J! w8 ^& ~3) Client 1 is not able to ping the server
Situation3: Unable to ping DSW1 in port channel configuratioin of ASW1 vlan 10 is not allowed. (Use L2 Diagram)
/ s* T- P0 k  _' I, Q% `Ans1)ASW1
Ans2)Switch to switch connectivity
4 A  X" \/ Y  O6 X2 _  c* iAns3)on port channel 23 give switchport trunk allowed vlan 10,200
4) Client 1 is not able to ping the server
Situation4: Unable to ping DSW1(User layer 2).
under running config the mac address for fa0/1 is 0000.0000.0000.0001 and fa0/2 it 0002.
Also check show inte**ces fa1/0/1 and fa1/0/2, u will c that the inte**ce is in error disabled
Ans1)ASW1
3 F( g$ f6 A: p8 F& iAns2)Port security
7 x/ \# S$ i; iAns3) On fa1/0/1 and fa1/0/2 do disable port security and do shut ,no shut.
+ @( o9 Z! K( R6 c' W1 o9 r5) Client 1 is not able to ping the server
Situation 5: Unable to ping R4 fast ethernet port from dsw1.
check ip eigrp neighbors from DSW1 u willnot c R4 as neighbor.(use ipv4 Layer 3)
Ans1) R4
" Y0 j9 ~0 I- r: \) CAns2) IP4 EIGRP
  L) C' Z4 v2 K9 W2 _# W% j+ e9 n' oAns3) Change eigrp process no: from 1 tp 10 because DSW1
% v/ k) ^9 E8 @6 o, \
! b4 m- P" g9 D6) Client 1 is not able to ping the server
; x& b' w9 E; }% }& I# bSituation 6: Unable to ping serial inte**ce of R4 from the clients.
, [; G' @+ P8 s% J, hDo show run, check the names of the route-maps. (use ipv4 Layer 3)
Ans1) R4
( j+ d, Q% C# |: m# M  f4 s5 u2 iAns2) route redistribution
Ans3) change the name of the route-map under the router EIGRP or router OSPF process from ‘to’ to ‘->’.
  @0 {6 V3 z6 ^" ^# ?7) Client 1 is not able to ping the server
: s0 j; i5 h9 a6 r/ eSituation 7: client is unable to ping R1’s serial inte**ce from the client.
9 [6 \& p) W4 p5 k2 D/ MCheck where authentication is not given under router ospf of R1. (use ipv4 Layer 3)
Ans1) R1
Ans2) ipv4 OSPF
9 j; t! {# A, L$ r6 BAns3) ip ospf authentication command must be given under router OSPF
( J9 H( g5 O' j9 T6 \& j! H8) Client 1 is not able to ping the server
Situation 8: client is not able to ping the web server, but the routers can ping the server. NAT problem. (use ipv4 Layer 3)
Ans1) R1
Ans2) IPV4 NAT
Ans3) under NAT access list, enter the command permit 10.2.0.0 0.0.255.255
# ]3 o$ m- k) z# i6 J2 h
, N! e2 G, S# f. @' J9) Client 1 is not able to ping the server
Situation 9: R1 is not able to ping 209.65.200.226.
. f. B& e5 `- \  X3 f6 Wcheck bgp neighborship.
! Y. ~; t+ }1 K0 wThe neighbor’s address in the neighbor command is wrong under router BGP. (use ipv4 Layer 3)
/ s% x# E% @. l1 Y7 t! HAns1) R1
Ans2) BGP
Ans3) delete the wrong neighbor statement and enter the correct neighbor address in the neighbor command (change 209.56.200.226 to 209.65.200.226)
; }4 b8 f! l6 f) I& v* B) Q10) Client 1 is not able to ping the server
Situation 10: client is not able to ping the server. Except for R1, no one else can ping the server. (use ipv4 Layer 3)
Ans1) R1
0 G8 g  O* m8 W, |5 v4 T7 U" v' ?: BAns2) IPv4 Security
Ans3) Add permit 209.65.200.224 0.0.0.3 to R1's ACL.
11) IPV6 loopback of R2 cannot be pinged from DSW1’s loopback.
Situation 11: ipv6 ospf was not enabled on R2’s serial inte**ce connecting to R3. (use ipv6 Layer 3)
Ans1) R2
Ans2) IPV6 ospf
1 y& q5 w2 z2 w; P! eAns3) on the serial inte**ce of R2, enter the command, ipv6 ospf 6 area 0 (check the IPV6 topology.)
% Q5 K0 b3 y! k12) HSRP: DSW1 does not become active.
Situation 12: under the standby configuration of DSW1, the command standby 10 track 1 decrement 60 is given, this has to be changed to track 10. (use ipv4 Layer 3)
7 m' i. J7 ?3 b( gAns1) DSW1
3 B; _/ t, u9 [Ans2) HSRP
3 l0 x7 r- c& @1 X4 W' u  T1 nAns3) delete the command with track 1 and enter the command with track 10.
ASW1(3 TT)
1.Access vlan - add "switchport access vlan1"
2.Port Security - "no switchport port sec" and "shut" and "no sh"
& L2 [: _5 |3 c3.Sw-to-Sw connection - in Po23 (in exam really write as this), "no switchport trunk allow vlan 20,200" and "switchport trunk allow vlan 10,200"
. Q3 h7 j2 H* j% Z2 XDSW1(2 TT)
1.VACL/vlan filter - "no vlan filter ... vlan-list 10"
(This is on the last line, pls scroll down to see)
/ O: z9 f; C, D1 x; e2.HSRP - int vlan10, "no standby 10 track 1..." and "standby 10 track 10..."
0 g  b$ h9 y* i' M0 [R4(2 TT)
* Z$ R5 u  Q( |1.IPv4 EIGRP - change as no. from 1 to 10
- j  m  C- G! s. O# x) T2.Redis. - change "redis ospf 1 route-map ..to" to "... ->"
  \: G& N0 n- e) @+ d* G" q5 Z; RRemember that no TT on R3
R2(1 TT)
# [0 l- ^. p$ r  t5 H1.IPv6 OSPF - enable ipv6 ospf on s0/0/0
5 e8 _; h& |) P0 ^; i: k7 fR1(4 TT)
1 J  a" }0 Q! b% ^* P1.NAT - add "permit 10.2.0.0 0.0.255.255" to let client1 ping server
. a: P: T3 a6 }* w6 s2.BGP - change nei from "202.56..." to "202.65..." to form nei with ISP
3 Z+ ~+ v% x  t3.Access list - in ip extended..., add "permit 202....22 0.0.0.3" to let every device ping server
1 ~" x5 M8 d& Z1 _. `! ^# O4.IPv4 OSPF - add "ip ospf authen" on s0/0/0 to form nei with R2
. }. b! |" n! P9 P* a& t4 I. j' h! |
. O, d" @4 a5 A0 M* s+ e+ J" }建议：没有准备充足的兄弟 还没有题库的情况下！ 就不要去考了！除非你钱多！！！！

淅灵神见

你这个考的是NP么? 这么复杂..

崔凯

haidong

wwcc890817

鸿鹄十一

这个  我看来要两年后了

minlecun

buishithahaha

Congratulations!!