Old TS, New Diag, New Config !!! Passed

丝路明珠

Hi Guys,
& @, @/ o; D- i, i/ n
3 A' H+ `7 L( P; v2 G, \I just passed 3 days back.
. P8 H* p- Z- [" W
Troubleshooting Section :
, U; W" Q! S; [6 L) R
- j2 p% M7 D$ DTicket 1 :  

( v& n3 J# w& j& S5 z. QOn Switch 2 -  Access List configured for VLAN12 that allows traffic for 172.16.200.0 - needs to be changed to 172.16.200.0 0.0.255.255 to allow the return traffic from Server


Ticket 2 :  

On R17 - Interface Serial 4/0 - Encapsulation Frame Relay - change it to PPP , find which username and password is configured on R12 and use it for authentication (ppp chap hostname , ppp chap password) - also add ppp ipcp route default to get default route on R17
' p+ l8 ~- R8 n* `' z# b+ i, P

# l7 B$ O7 W! J2 l9 w9 I' |Ticket 3 :  

On R22 - Change router id as it was configured to use R5 router-id - you need to clear ospf process.
& [' z4 f! g( a& Q" S* qInterface connected to R1 was passive
; ?. {5 N% t8 E" k4 T7 L7 O& Z  T
Ticket 4 :  
7 q5 h7 k8 m; }1 L
+ t( a- T/ w% }$ ER12 interface connected to R14 was passive
8 q5 H  m* }8 j- ~# u& p. ?4 r- H

) T1 s& w& o; _$ f$ H# RTicket 5 :  
7 E& z5 S. S! {) V) I" W5 ?0 g
3 T8 E, h0 T0 f6 F3 f( d) ^6 {R2 interface connected to R1 need to add “mpls ip”
R5 wrong route-map causing all routes to be changed - need to add permit before this sequence.
1 d& g: f7 W9 a4 v0 S3 k, P: f, C
9 b7 z5 p% C) g9 Z& a( P; ~1 L9 b
7 x- n8 J2 W: G# @Ticket 6 :  
7 S, d% m/ {  W8 G
: l# ]8 Y8 y* L+ D$ h3 w3 b* s  B% uNo neighbor-ship between R22 and R25 - needs to add neighbors in IPV6 address family - also pre configured route-map that sets next hop needs to be applied

1 O; W# w  _3 d1 D8 I5 w
Ticket 7 :  

On R14 , access list configured that blocks ESP and UDP , adjust it to allow it.
On R17,R18,R19 - add “ip nhrp shortcut“
5 D% G5 G: _1 a8 k, vOn R15, add “ip nhrp redirect”
+ h. A; m. g( s5 N$ d* F* O! MOn R18, Tunnel interface ipsec profile line has shared keyword, delete this keyword.
4 Z: M3 a" n: f
Ticket 8 :
6 A; R0 q2 S. F6 I$ T' e7 o' ?
SW3 - needs to advertise VLAN 100 into ospf + DHCP snooping was configured on VLAN 100 - need to trust uplink towards R9 to get DHCP
R4,R6 - increase ospf cost for interface Ethernet 0/2
R8 - int e 0/0.124 - ip nat inside was missing
2 a. Z/ _9 x8 a" zR7 <-> R3 need to establish BGP for interface E 0/0.125
2 u; {# x3 T& ZR8 <-> R4 need to establish BGP for interface E 0/0.125

; o" t- N  r: G" e& w. \5 t! m8 _
- s: g3 e& G+ [Ticket 9 :  

R7 - interface Tunnel 10 was shutdown - make no shut
R21 - need to change the ACL to permit non-500-isakmp traffic
% S1 [6 T7 _" n# ]) B
Ticket 10 :
3 }. j( s9 A( z) T/ n. G. k
8 ^$ _! j1 w7 J" JNAS is getting wrong ip, change int E0/0 to ip address dhcp client-id E0/0 and will work.
2 N# D$ ]4 o* u$ P2 H0 I8 B
4 i1 _) t6 p1 n/ _==================================================================
3 C) s" E2 h$ H' z+ n" F
8 O5 ~5 F- s6 s% f8 X# Q8 BIt took me 140 minutes to solve it and last 10 minutes i reverified the output - everything was perfectly as requested.
$ l' X. G& A& m0 i

Diag Section:
: X1 P( x  [, K; w- ~/ I! @
6 Y2 p1 l+ X) e0 w( E/ q! U' FMulticast Question + IPv6 Question - same as guys reported in other posts.
1 O, {! p0 b! [* |
Config Section:

H2 Config - No VRF's for R19,R20,R21
: f  ~) d$ {8 N* b% t" o7 P( o
8 n6 A' H# d& n4 V0 Q6 X1 |Exactly the Same as Spoto solution that was shared earlier by the Guys.
4 L0 r' X. C  a6 J, N

+ Y9 c/ K8 d+ `2 zThanks you all for co-operation and help
% G6 q8 _3 w1 f- i0 [/ q& V

TTTTTTommy

Congratulation！

cciejs

Congratulation！

nickhuang1268

marcoyuen

Congratulation！

nvidiachi

Congratulation！