CCIELAB考试排错部分案例详解上Word文档格式.docx
《CCIELAB考试排错部分案例详解上Word文档格式.docx》由会员分享,可在线阅读,更多相关《CCIELAB考试排错部分案例详解上Word文档格式.docx(22页珍藏版)》请在冰豆网上搜索。
下面是我考试通过的原版做法,凭记忆写的,可能多少会有点小出入,关键还要考场上发挥-clarkgu
loopback:
YY.YY.X.X/32,物理接口YY.YY.15.0/27
BB1:
150.1.YY.254/24BB2:
150.2.YY.254/24BB3:
150.3.YY.254/24
IGP不能发进BGP中;
路由不进BB,我在lab中使用的yy是32;
第一部分----要求看拓扑图,了解IP地址分配,熟悉拓扑
第二部分--明确预配中有两个错误,请找出并改正。
这里的vlan_F和vlan_H写反了
预配:
预配中包含VTP、VLANs及所有Router上部分物理接口IP
VTPdomain:
CCIERoutingandSwitchingYYpassword:
cisco
Sw2vtppassword错写为cisc0
Sw1为server,domainname是CCIERoutingandSwitchingYY,其他设备domain为CCIERoutingandSwitching,还有好多接口乱七八糟的接入一些vlan中。
sw2的f0/10口被switchportbackupinterfacef0/4;
导致F0/4经常up和down
1.Sw1上有SVI11,SVI13,Sw2上有SVI2,SVI22,Sw4上有SVI44,SVI45。
SW1:
Interfacevlan11Ipaddyy.yy.15.162255.255.255.224
Interfacevlan13Ipaddyy.yy.15.194255.255.255.224
SW2:
Interfacevlan2Ipadd150.2.yy.1255.255.255.0
Interfacevlan22Ipaddyy.yy.15.194255.255.255.224
SW4:
Interfacevlan44Ipaddyy.yy.15.66255.255.255.224
Interfacevlan45Ipaddyy.yy.16.98255.255.255.224
2.在R1与R2之间使用Frame-relay,不能用静态的map不能用InverseARP,R1的DLCI100,R2的DLCI200,要求封装标准符合RFC1490/RFC2427文档标准,要求lmi-type为ANSI,图上标示使用子接口。
R1:
Interfaces0/0
Encapsulationframe-relayietf
Frame-relaylmi-typeansi
Noarpframe-relay
Noframe-relayinverse-arp
Ints0/0.1point-to-point
Frame-relayinterface-dici100ietf
R2:
Ints0/0.2point-to-point
Frame-relayinterface-dici200ietf
R4:
frame-relayswitching
ints0/0(s0/0连接R1)
encapsulationframe-relayIETF
clockrate64000
frame-relaylmi-typeansi
frame-relayintf-typedce
frame-relayroute100interfaces0/1200
ints0/1(s0/1连接R2)
frame-relayroute200interfaces0/0100
这里R4是模拟帧中继交换机的配置,实际拓扑是r1-r4-r2;
3.交换机有以下VLAN。
Vlan2nameVLAN_BB2
Vlan3nameVLAN_BB3
Vlan11nameVLAN_C
Vlan13nameVLAN_D
Vlan15nameVLAN_BB1
Vlan22nameVLAN_E
Vlan24nameVLAN_F
Vlan44nameVLAN_G
Vlan45nameVLAN_H
4.Trunk要求使用dot1q,不能有DTP存在,要求做allowvlan3,11,13,44,45
Sw1/sw2/sw3/sw4:
Interfacerangef0/19–24
Switchporttrunkencapsulationdot1q
Switchportmodetrunk
Switchprotnonegotiate
Switchprottrunkallowedvlan3,11,13,44,45
这里allowedvlan可能只有2个左右,具体考试看题目;
6.要求所有access接口做一个需求使得一旦接入设备立即跳过listening和learning。
有需求说一旦接口收到BPDU那么立刻重新开始进行listening,learning。
Sw1/sw2/sw3:
spanning-treeportfastbpdufilterdefault
interfacef0/x(x代表加入vlan的接口,包括bb)
Spanning-treeportfast
7.TrafficcontrolprotectionfromtheBackbones,
Confignretrafficcontrolonthethreebacebonelinks,protectingyournetworkfromabroadcaststorm,thisprotectionshouldbehinoncebroadcasttrafficishalfoftheavailablebandwidth,theportshouldremainfactioningduringthistime
Sw1/sw2/sw3:
Interfacef0/10
storm-controlbroadcastlevel50.00
第四部分Layer3Techonologies
Whenyoufinishthissection,youmustbeabletopingallloopbackinterfacesinyourY.Y.X.Xnetwork,BUTNOTSW3.
1.OSPF
YoumaychooseyourownOSPFprocessIDyourself.自己确定R1和R2的FR的接口类型,要求requireDR,BDR的选举,所有路由器不能手工写ROUTER-ID。
Area1要求没有5类LSA存在,ConfigureR1sothatisgeneratesanOSPFdefaultrouteinjectedintoArea1.
(有的有fastconvergence)
R1:
RouterospfYY
Area1nssadefault-informationoriginate
Networkyy.yy.15.2420.0.0.0area1
Networkyy.yy.15.1610.0.0.0area0
Networkyy.yy.1.10.0.0.0area0
Ints0/0.1
Ipospfnetworkbroadcast
R2:
Area1nssa
Networkyy.yy.15.2410.0.0.0area1
Networkyy.yy.15.1290.0.0.0area1
Networkyy.yy.2.20.0.0.0area1
Interfaces0/0.2
R3:
RouterospfYY
Networkyy.yy.15.1930.0.0.0area0
Networkyy.yy.3.30.0.0.0area0
Sw1:
Networkyy.yy.15.1620.0.0.0area0
Networkryy.yy.15.1940.0.0.0area0
Networkyy.yy.7.70.0.0.0area0
Sw2:
Networkyy.yy.15.1300.0.0.0area1
Networkyy.yy.8.80.0.0.0area1
2.EIGRP
PlacetheBackbones3networkinEIGRP100。
R3上将EIGRP100重分布进EIGRPYY和OSPF,且重分布进EIGRPYY的时候要求汇总以下三个路由为一条(198.2.1.0,198.2.3.0,198.2.5.0)。
R1上进行OSPF和EIGRP的双向重分布,要求重分布的时候不能包括以下路由198.2.Z.0/24(Z=1-5),198.1.1.4/30,4.1.1.0/24,128.28.2.0/24,要求使用ACL与route-map完成需求,且两次重分布使用同一个ACL(BB3发送的EIGRP100路由只包含题目中提到的六条路由)
Routereigrp100
Noauto-summary
Network150.3.yy.10.0.0.0
RoutereigrpYY
Networkyy.yy.15.2450.0.0.0
Networkyy.yy.3.30.0.0.0
Redistributeeigrp100
Interfaces0/0
Encapsulationppp
Ipaddressyy.yy.15.245255.255.255.252
Ipsummary-addresseigrpYY198.2.0.0255.255.248.0
Nopeerneighbor-route
RouterospfYY
Redistributeeigrp100subnets
R5:
RoutereigrpYY
Networkyy.yy.15.2460.0.0.0
Networkyy.yy.15.2500.0.0.0
Networkyy.yy.15.970.0.0.0
Networkyy.yy.5.50.0.0.0
Interfaces0/0
Encapsulationppp
Ipaddressyy.yy.15.246255.255.255.252
Clockrate128000//预配
Bandwidth128//预配导致muliti-link
Interfaces0/1
Ipaddressyy.yy.15.250255.255.255.252
Bandwidth128//预配
Sw4:
Networkyy.yy.15.980.0.0.0
Networkyy.yy.15.2490.0.0.0
RedistributeospfYYmetric12800010025511500route-mapospf-eigrp
RedistributeeigrpYYsubnetsroute-mapospf-eigrpmetric30
Access-list10permit198.2.0.00.0.7.0
Access-list10permit198.1.1.4
Access-list10permit4.1.1.0
Access-list10permit128.28.2.0
Route-mapospf-eigrpdeny10
Matchipaddress10
Route-mapo2epermit20
Interfaces0/1
Nopeerneighbor-route
Ipaddressyy.yy.15.249255.255.255.252
3.RIPV2
Rip图示上标示是RIPv2,DONOTusemulticasttopropagateyourriproutes.SW4和R2上作双向重分布。
Routesfromeigrpispreferredoverospfinripdomain.
R2:
Routerrip
Version2
Networkyy.0.0.0
Passive-interfacedefault
Neighboryy.yy.15.33
Redistributeripmetric50subnets
Routerrip
RedistibureospfYYmetric6
NetworkYY.0.0.0
Neighboryy.yy.15.34
Neighboryy.yy.15.66
Neighboryy.yy.15.65
RedistributeeigrpYYmetric3
Disatance175yy.yy.15.650.0.0.01
Redistributeripmetric12800010025511500route-maprip2eigrp
Access-list1denyyy.yy.4.4
Access-list1deny30.30.15.32
Access-list1deny30.30.15.64
Access-list1permitany
Access-list2permit0.0.0.0
Route-maprip2eigrpdeny10
Matchipaddress2
Route-maprip2eigrppermit20
4.IPV6Protocol
IPV6接口要求使用EUI-64,运行接口为:
R4和R2互联的接口,R2与R1互联的接口,R1连接vlan11的接口,之后R1可以PING通R4的接口地址。
要求在IPv6接口上运行OSPFv3,要求R4与R2间运行Area0,R2、R1和sw1间运行Area1
R4–G0/1andR2–G0/1.Z(VLAN24)FC01:
DB8:
74:
9:
:
/64
R2–S0/0.ZandR1–S0/0.ZFC01:
A:
/64
R1–G0/1FC01:
B:
R4:
Ipv6unicast-routing
Interfacee0/1
Ipv6addressFC01:
/64eui-64
Ipv6ospfYYarea1
Ipv6routerospfYY
Router-id4.4.4.4
R2:
Interfacee0/1.24
Ipv6addFC01:
Ipv6ospfYYarea0
Router-id2.2.2.2
Ipv6unicast-routing
Ints0/0.1
Ipv6routerospf30
Router-id1.1.1.1
Interfacee0/0
Ipv6ospfYYarea0
Sw1:
Sdmpreferdual-ipv4-and-ipv6routing(开启交换机对ipv6的支持,保存重启后才能生效);
Ipv6routerospfYY
Router-id7.7.7.7
Intvlan11
5、implementipv4BGP(这部分我配置完后,路由学到了,可后来检查的时候发现bb来的路由全部没了,但是可以ping同bb地址,删除bgp进程再配上还是没学到,崩溃了2个小时,到endexam时还是没通,但最后却过了,我估计是考官做的手脚)
R1与R2,R2与SW4使用loopback0口建立联邦内EBGP
R1,R3,R5,SW4使用loopback0口建立ASYY2中的IBGP
R2,SW2使用loopback0口建立ASYY1的IBGP;
SW2与BB2建立EBGP,R5与BB1建立EBGP
对于从BB学到的路由197.68.21.0/24,197.68.22.0/24,所有BGP路由器选择R5作为下一跳;
对于从BB学到的路由197.68.1.0/24,197.68.4.0/24,197.68.5.0/24,所有的IBGP路由器选择SW2作为下一跳
routerbgpYY2
bgpconfederationidentifierYY
bgpconfederationpeersYY1
neighborYY.YY.2.2remote-asYY1
neighborYY.YY.2.2ebgp-multihop255
neighborYY.YY.2.2update-sourceLoopback0
neighborYY.YY.5.5remote-asYY2
neighborYY.YY.5.5update-sourceLoopback0
routerbgpYY1
bgpconfederationidentifierYY
bgpconfederationpeersYY2
neighborYY.YY.1.1remote-asYY2
neighborYY.YY.1.1ebgp-multihop255
neighborYY.YY.1.1update-sourceLoopback0
neighb