|
发表于 2017-10-20 22:34:20
|
显示全部楼层
[First topo here] [thanks to the guys who shared this image from ccie 4 career dot com]! ] I$ _# W/ Q* C, p; V
6 n5 u' X O0 h3 n9 T2 H
Question 1: Layer 2
7 p- n! K% v# u/ F7 y: x
2 t. S/ Z8 e x9 n: G# c- VLAN 12 is missing7 j+ u' [1 q3 T. w
- vlan 12 not ALLOWED over the trunk on SW23 Z5 _( }# r3 ~" M' j$ s$ m
- Access vlan 100 to interface connect to PC 101.$ u! `- K) n l1 O2 M4 q* c. ^2 g
- Passive-int in OSPF
: P. J, [9 W& F9 @& a$ I/ F- ACL on SW2 (?)* ?8 ~" v9 P: s9 D) A: Z
) ~+ l$ Z8 R2 o, D( a/ GQuestion 2: PPP
( l. s, x3 ]# S2 I# w1 H8 @+ e& j% A# b b
- Add command: peer default ip address pool in R123 h! v) o! @- W( e9 O
- Remove ppp auth chap call out on R17 (WAN)
* A/ @% @) j& g- Username was ..spoke1 on R12 but spoke1 on R17
5 [1 M& h3 d2 p, y- Wrong password on R17, U w' P% s% H$ }6 c
- R12 did not advertised the net in EIGRP$ `+ O- \* q' W. |- }
5 {! t! l* j- v. c) n
Question 3: OSPF
* X; B( C- I! d, N( _$ V. z9 Q2 a8 ^4 S4 u% ?; w, s$ J
- Correct IP address in R22 and remove max-metric router-lsa in R5.' T; ?# g% f/ x8 Y
- Remove cost on R1 (OSPF)4 n5 _' R1 J2 |* O; _* a" \1 w
- passive-interface default on R22 and R21 was configured
E' }# H7 i, a0 ~. Y# e- R22 : Wrong router-id
7 p: O7 L8 g% y$ @
$ `) X/ \- a+ ^) {. V$ M! bQuestion 4: EIGRP
$ T& k" t1 G. I: ?9 q
: U, u2 m& B6 _1 u* r3 O- Modify access-list in R13.
) i i7 O) U; y9 a- Remove delay on R13 and Set Metric (EIGRP)$ T' ~- V7 W! m9 F3 c
- Metric weight of 0 1 1 1 1 was missing0 ]- x9 _1 K9 U3 N1 n
- Offset-list on R12 permitting any. Need to deny ip 145.15.15.15 above that.
, \5 n4 l; r1 F- Passive Int on R14
+ m+ v: g, L$ ^. u+ Q3 o6 q" U+ N8 ~3 v& W. u$ U! D
Question 5: BGP/ D% b( i) w+ A( [/ b" [4 X
* l8 H) V% R. V/ d- Set metric in R4
8 e1 g, V* g8 O9 V7 l- Active neighborship between R4 & R5.' C- Z# H* H, l
- set lower prefix to 123.XXXX on R4 and 134.xxx on R6
2 Y9 J/ {: x* D$ g4 H3 }- `- Set max-path on R12 (BGP)/ t3 [) T: ^# I$ Y) c- F
- R21 : Wrong ip prefix-list 194, Y9 I. o) W- q: n# b
, Q7 G/ |! v* P" s U. f( qQuestion 6: IPv69 g# H# r6 s" o- W& ]% t
9 u+ K! L8 `4 _
- Correct advertise network in R25 (2525::25/64 instead of 25::/64)
C4 {! o2 T" [- Wrong next hop in R22 route-map (IPv6)! r, j, g! d8 ?. v% N
0 R7 b3 A* @: |9 W9 ~Question 7: DMVPN
0 z0 @) ~" A1 [7 _
, q; b/ I. D; \- E- ACL was denying ESP traffic in R19.4 k" ^" f) i: I/ U) o3 J$ \. M
- Wrong NHRP config on R18/R19 (DMVPN)
7 o: c, E+ b+ [- R17 missing nhrp multicast
) C! V: K; D* E0 a: |; d+ K2 r- no ip next-hop-self eigrp 200 in R15! q; |& _9 Y5 h& N2 S2 S) G
- NEW : ONLY 2 CORRECTIONS PERMITTED (Needs confirmation)/ a# e" x' b$ R# t( o5 ~; U
. [9 X' I% c8 Z: `+ G; |( j$ QQuestion 8: MPLS VPN
, @4 b& H9 `1 e) W+ J2 L& i$ x7 |1 P. g! S
- Add R8's eth0/0.123 ip nat inside
- o9 k- F2 O6 Y- Advertise default-route in BGP on R7/8.
5 }0 w# V7 K8 D7 ?! ^' j+ `- R6: add import and export Route-target.
+ F! V1 F7 c& C; y- VRF import on R3/4
& P4 k. J! H" Q- R3 : advertise .125 network# s$ {0 U# D1 m4 m: g' [; ]" y
- R4's and R6's e2/0 ip ospf cost 200 (backup path)$ t1 z5 x0 r9 J
- DHCP issues on R9/SW3. b" i1 d' g. E |% s$ {4 u/ A
- NEW : ONLY 2 CORRECTIONS PERMITTED (Needs confirmation)
: g' j, v% v, c: a+ {0 t4 ?, r- M( j+ H
Question 9: DMVPN NAT
; W! `: Y# C# D
1 l2 j0 R; M+ y' F9 ~- Correct transform-set and mode in R24.0 N) w' @2 \. w0 V% |: S
- Wrong crypto isakmp Address was configured on R7
! ?: A2 p: s! W6 Y8 E+ C/ v- Wrong tunnel source on R7
9 c+ l" a: L7 }% h4 E- Wrong tunnel source on R24
( b+ k6 `7 x% |: U4 J1 f U- R23 : no crypto udp transformation
$ w+ ]9 u( \2 G1 H/ S* T0 W1 R" Q- S+ m4 n" S/ ~0 X1 f
Question 10: NAT. p, o! i% U. E! G! x0 J
' l1 S4 V" v4 N' k9 @3 {! a- Modify NAT command in R23
5 l+ Y- H/ [2 u; V- Add command: ip domain lookup in R21.% ^; O9 ?3 U6 `( u! W
- Add NAS mac add on R23 dhcp pool
+ ^8 O; Q: h& a, k1 e- IP domain lookup and ip name-server was missing on both R23 and NAS2 K6 i% P% u& o9 L$ S6 D! \
- NAS has no ip assigned (not even DHCP)9 ]! M. K D1 ^$ H. l$ K
|
19#
2017-10-20 22:34:20
回复(0)
收起回复
|