Ce diaporama a bien été signalé.
Le téléchargement de votre SlideShare est en cours. ×

Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution

Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Leader of IT Certifications
Website: https://cciedump.spoto.net Email: support@spoto.net
Leader of IT Certifications
Websi...
Leader of IT Certifications
Website: https://cciedump.spoto.net Email: support@spoto.net
Leader of IT Certifications
Websi...
Leader of IT Certifications
Website: https://cciedump.spoto.net Email: support@spoto.net
Leader of IT Certifications
Websi...
Publicité
Publicité
Publicité
Publicité
Publicité
Publicité
Prochain SlideShare
Mikrotik basic configuration
Mikrotik basic configuration
Chargement dans…3
×

Consultez-les par la suite

1 sur 33 Publicité

Plus De Contenu Connexe

Similaire à Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution (20)

Plus récents (20)

Publicité

Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution

  1. 1. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie 【CCIE】SPOTO CCIE LAB RS V5.0 H1 TS1 BT1 Solution Content Q1:Layer 2(2 point)............................................................................................................................................................................... 2 Q2:PPP(2 point)........................................................................................................................................................................................... 4 Q3:OSPF(2 point)........................................................................................................................................................................................ 6 Q4:EIGRP(2 point)...............................................................................................................................................................................10 Q5:BGP(2point)....................................................................................................................................................................................13 Q6:IPv6(2 point)...................................................................................................................................................................................17 Q7:DMVPN(4 point)...........................................................................................................................................................................19 Q8:MPLS VPN(4 point)......................................................................................................................................................................25 Q9:DMVPN NAT(2 point) .................................................................................................................................................................29 Q10:NAT(2 point)................................................................................................................................................................................31
  2. 2. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Q1:Layer 2(2 point) PC101 should successfully access Server 1 behind SW1. PC101 cannot access R7/R8, fix the problem so that PC101 can ping R7.
  3. 3. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: SW2: vlan12 ! interface e0/0 switchport trunk allowed vlan add 12 ! interface Ethernet1/0 switchport access vlan 100 ! interface Vlan100 ip address 172.16.100.1 255.255.255.0
  4. 4. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie You can shutdown/no shutdown the interface, if PC101 cannot get IP address. interface Ethernet1/0 shutdown no shutdown Q2:PPP(2 point) R17 should have one default route which points to R12 via PPP as shown below.
  5. 5. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R17 interface s4/0 ppp chap hostname UberMarket_spoke_R17 ! interface s4/0 ppp ipcp route default ! interface Serial4/0

  6. 6. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie no ppp authentication chap callout R12 no ip local pool SPOKE1 145.67.89.0 ip local pool SPOKE1 145.67.89.22 Q3:OSPF(2 point)
  7. 7. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie When R1 tries to access the network 123.45.67.48/29, which is between R21 and R22, the traffic should be load balanced as shown in the exhibit.
  8. 8. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie
  9. 9. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R3 router ospf 12345 no area 1 range 134.56.78.0 255.255.255.0 R5 router ospf 12345 no max-metric router-lsa R21 interface Ethernet2/0 no ip ospf cost 1
  10. 10. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Q4:EIGRP(2 point) Traffic from R11 destined to loopback 0 of R14 should be load balanced via EIGRP as shown in the exibit
  11. 11. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R13
  12. 12. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie router eigrp 145 metric weights 0 1 1 1 1 1 R13 ip access-list standard 10 no 10 R14 no ip prefix-list DENY seq 5 deny 145.14.14.14/32 R12 ip access-list standard 1 5 deny 145.14.14.14 R12 interface Ethernet1/0 no bandwidth 1000 R13 interface Ethernet1/0 no delay 1000
  13. 13. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Q5:BGP(2point) When R12 traces the following routes 194.1.1.0/24 8.8.8.8/32 123.0.0.0/8 134.0.0.0/8 it should get the same result as shown in the following exibit
  14. 14. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R22 router bgp 12345
  15. 15. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie address-family ipv4 neighbor PEER next-hop-self ! clear ip bgp * soft R6 route-map MED permit 20 match ip address prefix-list 134 set metric 50 ! clear ip bgp * soft R4 route-map MED permit 10 match ip address prefix-list 123 set metric 50 R21 ip prefix-list 194 seq 10 permit 194.1.0.0/16 le 32 !
  16. 16. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie route-map MED permit 10 match ip address prefix-list 194 set metric 300 clear ip bgp * soft R12
 router bgp 14567 maximum-paths 2
  17. 17. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Q6:IPv6(2 point) Phone is not able to ping 2001:BEEF:CAFE::26/64 located on Server4, fix the problem so that the following is successful
  18. 18. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R25 router bgp 65101 address-family ipv6 network 2001:CC1E:BEEF:25::/64 R22 router bgp 12345 address-family ipv6 neighbor 123.1.2.18 route-map NEXT-HOP out ! clear ip bgp * soft R25 route-map NEXT-HOP permit 10 no set ipv6 next-hop 2001:3::3 set ipv6 next-hop 2001:CC1E:BEEF:2225::18 clear ip bgp * soft
  19. 19. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Q7:DMVPN(4 point)
  20. 20. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie
  21. 21. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie DMVPN is configured on R15,17,18 and 19. R15 is hub and rest of devices are spokes. fix the problem so that server 2 can access PC 107 as shown below
  22. 22. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R15 interface Tunnel0 ip nhrp redirect
  23. 23. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie R18/R19 interface Tunnel0 ip nhrp shortcut R15 router eigrp 200 no redistribute connected metric 1 1 1 1 1 R19 interface Tunnel0 no ip nhrp authentication uSER789 ip nhrp authentication USER789 R18 interface Tunnel0 ip nhrp map multicast 145.67.89.10 R18 interface Tunnel0
  24. 24. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie no ip nhrp nhs 215.1.1.1 ip nhrp nhs 215.0.0.1 R19 ip access-list extended DMVPN permit esp any any /--Note: you can use permit ip any any, if you cannot ensure. --/ R19 router eigrp 200 no eigrp stub connected summary /--R17 and R18 configured EIGRP stub, this is normal, you don’t need remove. --/ R15 interface tunnel 0
 no ip split-horizon eigrp 200 R20 router eigrp 200

  25. 25. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie no passive-interface e0/0 /--Note: You don’t need remove passive-interface E0/1. --/ Q8:MPLS VPN(4 point) R7 and R8 are configured as backbone for VPN network. R9, R10, PC 104 and PC 106 are VPN clients. ensure that the output matches the following exhibit.
  26. 26. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie You need shutdown the interface E1/0 on R3, when you test backup path. Remember to no shutdown after test. Faults:
  27. 27. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie R7 router bgp 65100 neighbor 123.45.67.21 default-originate R8 router bgp 65100 neighbor 123.45.67.25 default-originate R3 ip vrf BancoBank_ToHub route-target import 65100:102 R9 router ospf 65101 default-information originate R7 no ip nat source list 100 interface Ethernet0/0.125 overload ip nat inside source list 100 interface Ethernet0/0.125 overload
  28. 28. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie R3 router bg 12345 address-family ipv4 network 125.45.67.20 mask 255.255.255.252
  29. 29. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Q9:DMVPN NAT(2 point) There is DMVPN configured between R7 (Hub) and R24 (Spoke) via Nat Network (R23). ensure that PC 110 can access Server 1 as shown
  30. 30. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R7 no crypto isakmp key CCIE address 192.168.1.2 crypto isakmp key CCIE address 0.0.0.0 R24 crypto ipsec nat-transparency udp-encapsulation no crypto ipsec transform-set CCIEXFORM esp-3des esp-md5-hmac crypto ipsec transform-set CCIEXFORM esp-aes mode transport R24/R7 interface tunnel 10 shutdown no shutdown
  31. 31. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Q10:NAT(2 point) R21 should manage NAS via telnet. Fix the problem so that telnet to NAS is successful as shown in exibit.
  32. 32. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie Faults: R24 interface Ethernet0/0 no ip address 192.168.1.200 255.255.255.0 secondary R23 ip dns server NAS ip domain lookup R23 no access-list 194 permit ip host 192.168.1.0 any
  33. 33. Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Leader of IT Certifications Website: https://cciedump.spoto.net Email: support@spoto.net Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie access-list 194 permit ip 192.168.1.0 0.0.0.255 any R23 no ip nat outside source static tcp 192.168.1.200 80 134.56.78.10 8008 extendable ip nat inside source static tcp 192.168.1.200 80 134.56.78.10 8008 extendable

×