300-135 台北 1000 分 CCNP收官

ray35112018

TS十分順利，題庫有看熟1000分不是問題，建議看完其他人整理出來的資料後自己整理一份自己的秘笈出來這樣有助自己去理解。
8 v, {9 `- e3 o我的查詢法是先用ping 的，用ping 的較準 。
6 |; C! C" a" N8 ]" P: ]( g1 A
IPv6問題
查測: C1 ping 209.65.200.241 ok IPv6(ipv4 internet 可ping 通就為ipv6問題)
: {7 g" d% @( r: @     show run R2 R3 R4
: Z6 ]: t0 H: u4 U+ v$ J/ v4 j錯點: R2 show run interface s0/0/0.23 看看有沒有ipv6 ospf area0
問題點: IPv6 OSPF Routing
6 C  Q# K( v4 O" G7 c修改: Under the interface s0/0/0.23 configuration enter the ipv6 ospf 6 area 0

/ B* S+ ^- W$ F; j+ T% ^5 n1 V錯點: R3 show run interface tunnel 34 看有沒有多了tunnel mode ipv6
問題點: IPv4 and IPv6 Interoperability
修改: Under the interface Tunnel34 configuration delete the tunnel mode ipv6 command
& I, k0 d1 \4 E  p6 d3 w' a# J
4 m- y/ c( F0 y: P  {. ^7 G! {錯點:R4 sh run ip router ospf 6 缺少redistribute rip
/ w$ y  ~+ t6 o4 n問題點:IPv6 OSPF Routing
( z! f% G) B9 D# ?/ M% z2 }Under the IPv6 router ospf 6 configuration enter the redistribute rip RIP_ZONE include-connected command.
6 o5 K9 K# W+ `; M- c+ L

- M4 x# ^) h: j% ]) EIPv4問題
查測: C1 ping 209.65.200.241 not ok (internet)
# }( d. _! \, K$ fping 10.1.1.10 OK (R4 uplink)
Ping 10.1.1.1 not OK(R1 downlink) > R1有問題
=> R1 問題
錯點: show ip ospf neighbor
No ospf nei & sh run s0/0/0/0 沒有 ip ospf authentication message
問題點: IPv4 OSPF Routing
) G# V5 ?9 V( I( ~修改: Enable OSPF authentication on the s0/0/0 interface using the ip ospf authentication message digest command

錯點: show ip bgp summary NO BGP Peer , show run BGP neighbor IP 錯誤
問題點: BGP
修改: Under the BGP process , delete the neighbor 209.56.200.226 remote-as 65002 command and enter the neighbor 209.65.200.226 remote-as 65002 command

, Z& ~& z1 p2 E
/ m. R) b& Z' g9 C! `錯點: OSPF BGP OK show run 在 ip access-list edge_security 209.X 下面少一條
* x- u/ X  M1 e4 m問題點: IPv4 layer 3 Security
8 c, X3 e8 q6 }" ?& ]' H修改: Under the ip access-list extended edge_security configuration add the permit ip 209.65.200.224 0.0.0.3 any command
5 i& G0 o/ B# y  y+ i) @
錯點: OSPF BGP OK show run 在 ip access-list nat 下面少一條 10.2
$ _" z6 ^  U" s& S7 S! g問題點: IP NAT
7 |. W% s3 y0 k2 G+ l修改: Under the ip access-list standard nat_traffic configuration enter the permit 10.2.0.0 0.0.255.255 command
7 `* T/ r# n+ X4 x- r8 `+ l- b7 A
, `3 l7 Q8 d  z3 ^8 |查測: C1 ping 209.65.200.241 X(internet)
5 C" Z1 l* @3 ?3 |" FC1 ping 10.1.1.10 X (R4 uplink)
; c, y6 H9 X( j/ f% V. nC1 ping 10.1.4.5 OK(R4 downlink)
C1 ping 10.2.1.254 OK
=> R4 問題
5 p# J: k/ ]& ]6 P錯點: show ip eigrp nei , NO neighbor
     check ip eigrp 10 有沒有passive interface default
問題點: IPv4 EIGRP Routing
修改: Enable EIGRP on the f0/0 and f0/1 interface using the no passive int command

有 EIGRP neighbor
8 C, D# N9 d2 F% u( f  }6 ]0 c錯點: OSPF to EIGRP redistribution , sh run eigrp redistribute route-map 名稱錯誤
: `2 D% q  X3 x. S3 k4 D問題點: IPv4 Route Redistribution
修改: Under the EIGRP process , delete the redistribute ospf 1 route-map OSPF_to_EIGRP command and enter the redistribute ospf 1 route-map OSPF->EIGRP command
0 u& b9 F7 E. q' m
8 V6 v( [. n  U7 {8 k  F3 Z$ _9 ]9 J

, Z8 a: d4 z9 b& s- T
- ]( @7 I: g, w2 e' tSW問題
查測: ping 10.2.1.254 不通(SW HSRP IP)
% r4 G1 o8 C0 j% W1 W=> DSW1 issue
錯點: Show run DSW1 check does have vlan filter command
問題點: VLAN ACL / Port ACL
- u* a: k) E5 _9 ~2 h- v$ P9 ^, [修改: Under the global configuration mode enter no vlan filter test1 vlan-list 10
=> ASW1 issue
; n' y8 E9 N, Z+ C) j; _9 @' _; v) G錯點: ASW1 show interface fa1/0/1 & fa1/0/2 確認port是否有UP ,與show run 確認
     interface 設定
$ ~1 C- u, C( d; _4 D0 l+ F! e問題點: Port Security
, u) D/ I% o7 [, V* v0 H修改: In Configuration mode, using the interface range fa1/0/1-2, the no switchport-sercxurity, follow by shutdown , no shutdown interface configuration command
0 Y: f( C) _2 {$ v4 w7 n
錯點: ASW1 show run interface fa1/0/1 & fa1/0/2 確認access vlan 是否正確
問題點: Access Vlans
: d4 p7 b* g4 j: ]) {修改: In Configuration mode , using the interface range fa1/0/1-2 then
switchport access vlan 10 command
( Q9 N' K$ L9 w/ W6 j0 l
錯點: ASW1 show run interface portchannel13&23 確認trunk vlan 是否正確
問題點: Switch to Switch connectivity
, I8 @3 O6 `2 U修改: In configuration mode, using the interface port-channel 13 , port-channel 23 , the configure switch port trunk none allowed vlan none followed by switch port trunk allowed vlan 10, 200 command

給要考TS的人參考一下