Old TS, New Diag, New Config !!! Passed

丝路明珠

Hi Guys,
; D# o3 ?8 }2 ?6 s
I just passed 3 days back.

Troubleshooting Section :

4 b) q* I- ?' e  U" ]7 n" vTicket 1 :  

% Z7 n, ~' Q# c/ M, j; hOn Switch 2 -  Access List configured for VLAN12 that allows traffic for 172.16.200.0 - needs to be changed to 172.16.200.0 0.0.255.255 to allow the return traffic from Server


; L: B) ^# k+ ]; X3 X0 \Ticket 2 :  
+ V/ W, M5 S6 p( x+ W7 [( E
& p) s. `9 @  L' v, iOn R17 - Interface Serial 4/0 - Encapsulation Frame Relay - change it to PPP , find which username and password is configured on R12 and use it for authentication (ppp chap hostname , ppp chap password) - also add ppp ipcp route default to get default route on R17


# k8 K/ F+ o* M7 z0 `& PTicket 3 :  
$ F4 b1 b- h3 W$ }
On R22 - Change router id as it was configured to use R5 router-id - you need to clear ospf process.
4 w) ~- D# b4 g" j+ K/ r9 ?Interface connected to R1 was passive

Ticket 4 :  

R12 interface connected to R14 was passive

9 e! t& g8 P$ N; t: L" T0 L. c
; F5 S% X+ \5 B1 ~9 A7 wTicket 5 :  
, V; s5 A% }% ?9 O7 K3 \/ ]
- K+ d; [2 u# y3 J9 r' \+ P, L" bR2 interface connected to R1 need to add “mpls ip”
. Z. t2 w0 Q& [R5 wrong route-map causing all routes to be changed - need to add permit before this sequence.
, ]2 ?7 ~- ]5 i- X

1 }: B, ~* P8 J) |Ticket 6 :  

7 h( L& j3 L' TNo neighbor-ship between R22 and R25 - needs to add neighbors in IPV6 address family - also pre configured route-map that sets next hop needs to be applied


0 D9 n: q, I+ ?1 ATicket 7 :  

On R14 , access list configured that blocks ESP and UDP , adjust it to allow it.
On R17,R18,R19 - add “ip nhrp shortcut“
2 t1 a- K6 b; @6 ^0 BOn R15, add “ip nhrp redirect”
& U3 z1 R, I  T: i7 m* iOn R18, Tunnel interface ipsec profile line has shared keyword, delete this keyword.
4 O& ~7 ?3 K) l! e6 ^9 D
Ticket 8 :

6 ]5 Y- n1 D% J6 Y0 g! h0 _SW3 - needs to advertise VLAN 100 into ospf + DHCP snooping was configured on VLAN 100 - need to trust uplink towards R9 to get DHCP
R4,R6 - increase ospf cost for interface Ethernet 0/2
! D; F- h; ]/ _1 E6 t2 H! l1 B7 I" e* g: d, `R8 - int e 0/0.124 - ip nat inside was missing
8 Q+ i& `8 ?' X' z# c% yR7 <-> R3 need to establish BGP for interface E 0/0.125
. z: X& ?2 [% r$ c2 o) tR8 <-> R4 need to establish BGP for interface E 0/0.125


, s4 Z( K) A8 FTicket 9 :  

R7 - interface Tunnel 10 was shutdown - make no shut
3 F- d. ~9 }  \! |R21 - need to change the ACL to permit non-500-isakmp traffic

Ticket 10 :

NAS is getting wrong ip, change int E0/0 to ip address dhcp client-id E0/0 and will work.
+ h& A0 |/ {7 g6 g" }
9 M; d5 j4 T7 v6 G5 u( ~5 `- N8 E- {==================================================================

" k: z2 I) v; vIt took me 140 minutes to solve it and last 10 minutes i reverified the output - everything was perfectly as requested.

3 T+ l8 g) L4 p
Diag Section:

Multicast Question + IPv6 Question - same as guys reported in other posts.
3 a/ Z5 z9 Y1 G  W  ~- U
Config Section:

  r9 @. z* ~+ j5 w5 `H2 Config - No VRF's for R19,R20,R21
7 J  r2 i% X+ Y- S( X
7 k, }- r3 x& A0 m0 P. J2 U& EExactly the Same as Spoto solution that was shared earlier by the Guys.

/ F4 |& `, Z: a
Thanks you all for co-operation and help
1 U. {8 U- e. e# K

TTTTTTommy

Congratulation！

cciejs

Congratulation！

nickhuang1268

marcoyuen

Congratulation！

nvidiachi

Congratulation！