CCIE pass

zhaoke0727

I tried my second attempt in Dubaï the June 2011, but I failed it.in attached the
topology of the troubleshooting section
My configuration section(K1) was successful, but I failed troubleshooting section (68%).
; m( q$ |2 H% e* tBelow the kind of questions I got in troubleshooting section :
2 K+ Y8 i/ O2 D1- BGP peering issue. the question also said that you should establish the peering int the safest
" y' b5 d6 O, P  O9 N$ wway.
# |  ~5 \& K. H2 {( aWhen I check the config, I see that there is "neighbor xxxx password cisco".
I did " no neighbor xxxx password cisco", and then "neighbor xxxx password cisco" on each peer,
" n1 l& q: r6 W* Mand the peering comes up.
) D1 e4 @! B& ^" H3 R6 H; B7 Z; S! zAbout the safest way, the use the "service password-encryption" command on each peer
2- reachibility issue: PC1 in one AS(AS 300) cannot ping PC2 in another AS (AS 100)
I see that the router connected to PC1 do not have the route to PC2 , because there is already AS
6 m8 _; a- k7 s! J) i; H3 }; k300
% F( g- ]) k( A; R; Vin the as-path to reach PC1.
to solve it, I modify the route-map on the router (on router on the path between the two PCs) on
which the as-pas preprend is configured.
8 J& o! l- f8 qI just remove AS 300 in the as-path prepend command, and it worked.
9 C/ F0 b2 E# }+ ?/ l3- OSPF neighbor issue : R13 and R15 cannot establish ospf neighboring with R14.
7 Y1 ]9 o1 p/ Y4 ^6 @. F# o# lon R14, I see that the serial interface is configured as DCE, not DTE; also the lmi-type was ansi.
I changed the interface to DTE and the lmi-type to cisco.
4- Load-balancing issue in EIGRP domain: there was on router with "bandwidth 1000" configured
' X' u0 k3 Q5 ], T$ |4 \on and interface,
and another router configured with "delay 120". I delete these two commands, and I saw the two
paths in the routing table
5- Reachibility issue between two PCs accross OSPF domain : here the problem was an virtual-link
( D+ d+ r' S0 b' @) w5 p) F# kdown, because of a network type mismatch
7 u' U9 a( i/ s: @& i! x(between R16 and R17). I remove the network type pont-to-multipoint on R17 Ethernet
# S' ]. L2 }0 S: ~interfaces connecting R16, and it worked.
6- reachibility issue :there was a redistribution problem, missing default-metric when
redistributing ospf in eigrp
7- SNMP issue: failed to send link-status traps. I used these two commands:
' j: B# B; ?8 W) {7 D* Y(conf-if)#snmp trap link-status)
* O1 Q$ o9 t4 p: ]) k: j, x: J$ s(config)#snmp-server trap-source loopback 0
8- Multicast issue (autorp): some routers (R11) are not able to get by autorp the addres of the rp
! L$ j( G& ]+ w(R3).
5 a! q; Y9 J% @; Q5 K; f) KI did not resolved this issue.
: l; o* _+ O+ n% @% C: v& XThere was an access-list in R3 with the wrong multicast-group. I changed the address from
224.1.1.2 (wrong address)to 224.1.1.1 (right address)
: K( s+ Q4 m3 y: y0 h$ G9 nAfter that, R5 get the address of the RP, but not R9 nor R11. the PIM neighbor relationship was
" P+ q) W9 i% S( n7 G6 N3 o1 x. @7 ?OK between these router.
the "ip pim sparse-dense-mode " was configured on all interfaces between R3 and R11.
* l9 |1 }: x+ s2 E! I9- Control-plane Policing issue. R9 loopback cannot telnet R10 loopback. there was many
restrictions on this question like:
7 H' a, n- H% k  n  }) C. n-don't remove any configuration, don't remove any access-list, don't delete any line
2 |5 @1 Q, [+ F0 {  o& t' [configuration.But you can create your access-list
/ d  c& v  y$ `8 Z  K$ eWhen I check R9, I see that there is a CoPP , with a class-map (TELNET) which deny all telnet
traffic.
below what I did:
; Z2 W: G- S5 E- create an access-list : access-list 101 permit tcp host R9_lo0 hos R10_lo0 eq telnet
- create a class-map which matches the new access-list :
class-map ACCESS
match ip address 101
7 `! G2 t0 p4 |& |, d: W- modify the policy-map like this :
policy-map R10_POLICY
0 @$ A# ]9 m& C! U& T+ pno class TELNET
/ X" @2 G3 C* v1 k/ f2 ]class ACCESS
class TELNET
9 P0 m" A/ r. l) U4 R# E  X! gthere was also "transport input none" in line vty of R9. I configured "transport input telnet" , and
+ P0 W- M$ a0 n2 Y1 Y. m, @+ Yit worked
10- tunnel issue between R5 and R13: tunnel is flapping.I used the debug tunnel and I see a
: l: ~$ p( z" v$ E" ~' Irecursive routing issue.
; J. V; _% \: I! c/ oAfter that, I check the routing table and the config of each router .We have the configuration
below:
1 U- Y+ J' a8 T( }% \( NR5
int tunnel0
* n& _; r" u' X1 `4 S2 j% ?+ Sip address 135.0.0.5 255.255.255.0
tunnel source R5_lo0
5 F6 l0 {7 k/ N& J! g) t! [tunnel destination R13_lo0
ip route 135.0.0.13 255.255.255.0 tunnel0
* \! _% j+ u" \3 M) IR13
int tunnel0
ip address 135.0.0.13 255.255.255.0
. o, I, E" U9 Ztunnel source R5_lo0
tunnel destination R13_lo0
ip route 135.0.0.5 255.255.255.0 tunnel0
2 b$ h( j  w, J8 ?% Jeach router learn the loopback of the other by ospf. I delete the static route in each router, and it
6 W; @1 p. S; k1 T) z. Kworked.
I was sure that I will pass the troubleshooting sestion, but no luck.
At the break, when we discuss with the proctor, he said that there is only one way to solve each
7 v4 B( {5 D1 k/ i+ b" |" [! Missue in troubleshooting section.
2 I7 l- J8 t7 j- U: ~Also, I see that there is a lot of restrictions on each ticket, so be very careful about that.
I also see that Cisco can smoothly modify each question by adding restrictions, so two guys can
have the same topology, apparently
8 u  O( w$ c3 `8 _! S8 }" |the same kind of questions, but different way to solve these tickets because of restrictions.
" v5 ]. f3 S7 k4 f  _/ j4 nWhen I see my troubleshooting score (68%) , I'm sure that my tickets 2,3,4,5,6,7 was good. I'm
* W$ l  ?( L! ~( D4 ynot sure about the other.
I want to share this experience with you because I think we can all get this CCIE number.
! n4 ^: F8 Y# B; d6 X- w  Cplease , if somebody in the forum get the same tickets and pass this section, please share with
. t; t9 W6 h5 i* E1 J2 mme your answer.
I don't want to make the CCIE exam all my life. I want to make my third and last attempt next
/ J' O* \( v! \$ c! k0 ]3 R! H# c. cmonth.

ozweego

英文不好捉寄

shidi

谢谢楼主分享！！！！！

tonyshengxia

aaaaaaaaaa

JamesSmith001

1111111