TS Noted 2017 -2018

Update 1
1. Ticket 4 : If cisco ask you don’t touch BGP Attribute, then the solution is

In R20 loopback 0, change ospf cost to 1000.

2. Ticket 8 : if SW310 have enable DAI

Solution:
Sw300/sw301
Int vlan2000
Ip dhcp relay information trusted

Sw310
Ip dhcp snooping information option

3. Ticket 10 , if cisco use NAT Pool:

In question there are something special, instead of telnetting to R25’E0/0 they ask you telnet some
123’s IP from NAS. This IP is in Pool of R25. In initial CFG they have “ip nat inside source list 1 pool ABCD”

Solution:
Ip nat outside source static 201.90.70.2 123.x.x.x

==========================================================================

Update 2

1. Ticket 2
BGP on R14 WAN was Down » NEW

Solution: Check bgp configuration，check interface configuration connect to ISP

2. Ticket 7
MPLS VPN
R3 config wrong area on e0/1

Solution:

Fix R15 ospf Area on Loop0

Enable IP Cef on R1
enable mpls on R5-R1 interface
Fix VRF Import on R5

3. Ticket 8:
User3 have ip address but SW300 and SW301 HSRP not correct.

Check HSRP configuration

4. Ticket 9
R24
int tu0
ip ospf network point-to-multipoint
ip ospf hello-interval 10

R71
int tu0
tunnel key 4321

5. Ticket 10

NEW Fault is Here

NAT POOL was there without Overload NAT
POOL was for 123.1.1.x - 123.1.1x / 26

Solution : R24 R25 run ospf under that loopback ip to make them reachable

 Check in R24 and R25 together.

=========================================================
Update 3

Ticket 1
User4#ping 10.4.40.40
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.4.40.40, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/7 ms

User4#traceroute 10.4.40.40
Type escape sequence to abort.
Tracing the route to 10.4.40.40
VRF info: (vrf in name/id, vrf out name/id)
1 10.4.100.252 2 msec 1 msec 2 msec
2 10.4.10.1 5 msec * 3 msec

SW400#show stan brief

P indicates configured to preempt.
|
Interface Grp Pri P State Active Standby Virtual IP
Vl2000 1 120 P Active local 10.4.100.253 10.4.100.254
Vl2001 2 100 P Standby 10.4.101.252 local 10.4.101.254

Solution

Sw410

Int e0/0
No sw port-security mac-address 1234.5678.90aa
Sw port-security mac-address xxxx.xxxx.xxxx

This xxx.xxxx.xxxx is mac address of User4 E0/0. So you need get this mac
first. In User4 show int e0/0 | i bias

User 4

Shut
No shut

R40/R41

Ip dhcp pool xxx

Lease infinite

//Change lease to infinite ( no need delete it )

Ticket 2
Server 1 from Datacenter 1 unable to access 8.8.8.8 from internet ISP1. Trace
output given as below:
Server1#traceroute 8.8.8.8
Type escape sequence to abort.
Tracing the route to 8.8.8.8
VRF info: (vrf in name/id, vrf out name/id)
1 10.1.201.254 1 msec 1 msec 0 msec
2 10.1.214.1 1 msec 0 msec 1 msec
3 200.99.14.1 2 msec * 3 msec

Solution

R14
Int e0/2
Ip nat inside

Sw111
Ip dhcp pool Server1
Lease infinite

Interface vlan 2001

Ip ospf 65001 are 0

Variation 2:
R14
Have access list to block 10.1  Remove it

Ticket 3

Traffic engineering Vlan are not load balancing between datacenter 1 and datacenter
2. Trace output as below: Need 3, 4 hop match
SW110#traceroute 10.2.200.254
Type escape sequence to abort.
Tracing the route to 10.2.200.254
VRF info: (vrf in name/id, vrf out name/id)
 1 10.1.20.1 1 msec
10.1.22.1 0 msec
10.1.20.1 1 msec
2 10.1.212.1 1 msec
10.1.112.1 2 msec
10.1.212.1 1 msec
3 10.12.22.2 [AS 19999] 2 msec 1 msec 1 msec
4 10.2.122.2 [AS 65002] 2 msec 1 msec 1 msec
5 10.2.20.2 [AS 65002] 3 msec * 8 msec

SW110#traceroute 10.2.201.254
Type escape sequence to abort.
Tracing the route to 10.2.201.254
VRF info: (vrf in name/id, vrf out name/id)
1 10.1.22.1 1 msec
10.1.20.1 0 msec
10.1.22.1 1 msec
2 10.1.113.1 2 msec
10.1.213.1 1 msec
10.1.113.1 2 msec
3 10.12.23.2 [AS 19999] 2 msec 2 msec 2 msec
4 10.2.223.2 [AS 65002] 3 msec 3 msec 2 msec
5 10.2.21.2 [AS 65002] 3 msec * 2 msec

SW210#traceroute 10.1.200.254
Type escape sequence to abort.
Tracing the route to 10.1.200.254
VRF info: (vrf in name/id, vrf out name/id)
1 10.2.22.1 1 msec
10.2.20.1 1 msec
10.2.22.1 0 msec
2 10.2.122.1 2 msec
10.2.222.1 2 msec
10.2.122.1 1 msec
3 10.12.22.1 [AS 29999] 2 msec 2 msec 1 msec
4 10.1.212.2 [AS 65001] 3 msec 4 msec 2 msec
5 10.1.22.2 [AS 65001] 2 msec * 2 msec

SW210#traceroute 10.1.201.254
Type escape sequence to abort.
Tracing the route to 10.1.201.254
VRF info: (vrf in name/id, vrf out name/id)
1 10.2.20.1 1 msec
10.2.22.1 1 msec
10.2.20.1 1 msec
2 10.2.223.1 2 msec
10.2.123.1 1 msec
10.2.223.1 1 msec
3 10.12.23.1 [AS 29999] 3 msec 2 msec 2 msec
4 10.1.113.2 [AS 65001] 11 msec 5 msec 14 msec
5 10.1.23.2 [AS 65001] 13 msec * 3 msec
Solution

R22

Route-map MED permit 20

Match ip add 2
Set metric 1
Set origin igp

Clear ip bgp * soft

Int l0
Ip ospf 1 are 0

R23
Route-map MED permit 20
Match ip add 2
Set metric 1
Set origin incomplete

Clear ip bgp * soft

Ticket 4
Traffic from Server 1 and Server 2 as show in the exibit.
Server1#traceroute 10.4.100.254
Type escape sequence to abort.
Tracing the route to 10.4.100.254
 VRF info: (vrf in name/id, vrf out name/id)
1 10.1.201.254 1 msec 2 msec 0 msec
2 10.1.21.1 1 msec 0 msec 1 msec
3 10.1.212.1 1 msec 4 msec 2 msec
4 10.12.22.2 2 msec 3 msec 2 msec
5 10.2.122.2 3 msec 3 msec 2 msec
6 10.2.12.1 3 msec 3 msec 3 msec
7 101.21.0.1 4 msec 4 msec 6 msec
8 101.41.0.2 8 msec 5 msec 5 msec
9 10.4.11.2 4 msec 5 msec 5 msec
10 10.4.100.252 5 msec * 5 msec

Server2#traceroute 10.4.100.254
Type escape sequence to abort.
Tracing the route to 10.4.100.254
VRF info: (vrf in name/id, vrf out name/id)
1 10.2.200.254 1010 msec 0 msec 1 msec
2 10.2.20.1 2 msec 2 msec 1 msec
3 10.2.12.1 12 msec 3 msec 6 msec
4 101.21.0.1 3 msec 2 msec 6 msec
5 101.41.0.2 6 msec 7 msec 5 msec
6 10.4.11.2 12 msec 5 msec 3 msec
7 10.4.100.252 3 msec * 4 msec

Solution

R20/R21
Router bgp 65002
Neighbor DC2 route-map LP out

Clear ip bgp * soft

Q5. DMVPN

OSPF route are not received in small office efrom Datacenter1, required show ip
route ospf output given.
R60#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static
route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is 200.99.60.1 to network 0.0.0.0

O 10.100.0.1/32 [110/1000] via 10.100.0.1, 00:00:31, Tunnel0
 O 10.100.0.51/32 [110/2000] via 10.100.0.1, 00:00:00, Tunnel0

Solution

Int tunnel 0
Ip ospf network point-to-mulitpoint
Ip ospf 65006 area 1

Ticket 6

User 1 in Datacenter 1 unable to access IPv6 address from ISP, trace given as below:
Server1#ping 2001:CC1E:BEEF:9:8:8:8:8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:CC1E:BEEF:9:8:8:8:8, timeout
is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms

Server1#traceroute 2001:CC1E:BEEF:9:8:8:8:8
Type escape sequence to abort.
Tracing the route to 2001:CC1E:BEEF:9:8:8:8:8

1 2001:CC:1E:8BAD:2001::254 1 msec 0 msec 1 msec

2 2001:CC:1E:8BAD:154::1 2 msec 2 msec 2 msec
3 2001:CC:1E:8BAD:159::1 2 msec 2 msec 2 msec
Solution

SW111
Interface vlan 2001
Ipv6 dhcp server VLAN2001

Ticket 7 MPLS VPN

Update solution

R3/R1
Mpls ldp nei 100.0.0.xx password CISCO
Ticket 8.

Solution:
Sw300/sw301
Int vlan2000
Ip dhcp relay information trusted

Sw310
Ip dhcp snooping information option

Sw300
Router ospf 65003
No passive-interface vlan 2000

Ticket 9

R71#telnet 10.2.200.1
Trying 10.2.200.1 ... Open

User Access Verification

Password:
Server2>exit

[Connection to 10.2.200.1 closed by foreign host]

Solution

R24

Ip nat inside source list 1 interface e0/0 overload

Int tunnel0
Ip nhrp map multicast dynamic

Ticket 10

It is update 1, 2; and check my Video training