10.17 SPOTO BJ H3

kirasawa

还是不错的哦

vty

路过路过

nhlmscql

谢谢分享

saadnwz

[First topo here] [thanks to the guys who shared this image from ccie 4 career dot com]

Question 1: Layer 2

- VLAN 12 is missing
- vlan 12 not ALLOWED over the trunk on SW2
) b& D7 A7 j+ e" \- Access vlan 100 to interface connect to PC 101.
( N2 s* I5 {0 m5 p' ^7 ^" g- Passive-int in OSPF
- ACL on SW2 (?)

Question 2: PPP

& Z. y& w8 P: l7 O- Add command: peer default ip address pool in R12
- Remove ppp auth chap call out on R17 (WAN)
- Username was ..spoke1 on R12 but spoke1 on R17
4 }$ J6 u5 ?8 ~% J3 r# b- Wrong password on R17
- R12 did not advertised the net in EIGRP
( T$ Z2 E. v" \$ a
Question 3: OSPF
! }7 }1 P0 V' ^, w$ D3 @
8 G" E$ D: d. r" {4 X& O- Correct IP address in R22 and remove max-metric router-lsa in R5.
0 n/ S3 i8 j/ s! }) d" O2 G4 Y- Remove cost on R1 (OSPF)
- passive-interface default on R22 and R21 was configured
- R22 : Wrong router-id
0 y' Z8 P+ ~: v/ ~- u8 n+ E+ v
Question 4: EIGRP
# k$ _: D: l1 U9 T, d
- Modify access-list in R13.
+ k" S# s- g+ z- Remove delay on R13 and Set Metric (EIGRP)
- Metric weight of 0 1 1 1 1 was missing
0 {  G7 H: ^( M- Offset-list on R12 permitting any. Need to deny ip 145.15.15.15 above that.
- Passive Int on R14

" `8 |* }/ K( f- y6 OQuestion 5: BGP

$ X6 J3 H( g3 q4 k- Set metric in R4
- Active neighborship between R4 & R5.
% }; {$ c! ?( G) `- set lower prefix to 123.XXXX on R4 and 134.xxx on R6
2 v3 G( V9 f! u" c: a5 R8 G$ k4 t" o- Set max-path on R12 (BGP)
' m- t5 G  z3 e. |, B& f- R21 : Wrong ip prefix-list 194

Question 6: IPv6

4 m$ M/ ~! D1 v: @4 Q1 l3 N- Correct advertise network in R25 (2525::25/64 instead of 25::/64)
9 x8 q6 i8 L# L- ^5 g- Wrong next hop in R22 route-map (IPv6)
' l1 d; C8 }) G" [$ J" t1 b) r
Question 7: DMVPN

0 z+ o5 ~  v3 G( D3 t- ACL was denying ESP traffic in R19.
6 L9 Y% a! c" U. y' s. Q- Wrong NHRP config on R18/R19 (DMVPN)
; v0 G8 q; T& \9 n" p- R17 missing nhrp multicast
; b7 ~$ k9 J: s) ~- no ip next-hop-self eigrp 200 in R15
+ l/ c0 o) W- ]$ }7 L1 t2 c: ^. _3 {- NEW : ONLY 2 CORRECTIONS PERMITTED (Needs confirmation)
$ u" Q* Y* x9 s
Question 8: MPLS VPN
8 T. l) s- c# Y0 h- `
& F8 U# \0 E$ f0 ^- Add R8's eth0/0.123 ip nat inside
- Advertise default-route in BGP on R7/8.
! W5 n1 r7 i9 K, I- R6: add import and export Route-target.
- VRF import on R3/4
- R3 : advertise .125 network
- R4's and R6's e2/0 ip ospf cost 200 (backup path)
* B  D/ w7 @  t& f: s- DHCP issues on R9/SW3
- NEW : ONLY 2 CORRECTIONS PERMITTED (Needs confirmation)

Question 9: DMVPN NAT
4 J3 O! x& ]- u2 Q* u" L
( J+ ~" s1 A9 J& B6 a2 J- Correct transform-set and mode in R24.
/ n+ {+ _* u9 I, k% Z) B- Wrong crypto isakmp Address was configured on R7
2 \& e) D3 c0 N- z1 r. n- Wrong tunnel source on R7
- Wrong tunnel source on R24
- R23 : no crypto udp transformation

Question 10: NAT
' j( u. }* z5 P$ l- V! {$ }
' v  D: }2 C$ z6 x- Modify NAT command in R23
- Add command: ip domain lookup in R21.
( x( |& @8 H5 c# {  e- Add NAS mac add on R23 dhcp pool
$ f+ k- m! J6 P! K) r; H+ s0 a% y% j- IP domain lookup and ip name-server was missing on both R23 and NAS
7 a$ v  \: W  c" _6 Q+ ]$ P2 O- NAS has no ip assigned (not even DHCP)
+ P; [+ _: d7 b, u) E5 q

水无月.流歌

H3最新的题目搞出来了吗？

just4lvzhou

正在备考，过来学习学习~

ethanliu263

恭喜恭喜！！！！！！！！