CCNP 题库tt14Word下载.docx

CCNP 题库tt14Word下载.docx

《CCNP 题库tt14Word下载.docx》由会员分享，可在线阅读，更多相关《CCNP 题库tt14Word下载.docx（20页珍藏版）》请在冰豆网上搜索。

Ans3）ipospfauthenticationmessage-digestcommandmustbegivenons0/0/0/0.12

2.HSRPwasconfiguredonDSW1&

DSW2.DSW1isconfiguredtobeactivebutitdoesnotbecomeactive.

ConfigurationonDSW1:

track1iproute10.1.21.128255.255.0.0metricthreshold

thresholdmetricup1down2

track10iproute10.2.21.128255.255.255.0metricthreshold

thresholdmetricup63down64

interfaceVlan10

ipaddress10.2.1.1255.255.255.0

standby10ip10.2.1.254

standby10priority200

standby10preempt

standby10track1decrement60

（useIPv4Layer3Topology）

Ondsw1interfacevlan10moderun:

nostandby10track1decrement60

standby10track10decrement60

（ipfortrackcommandnotexactforrealexam）

Ans1）DSW1

Ans2）HSRP

Ans3）deletethecommandwithtrack1andenterthecommandwithtrack10（standby10track10decrement60）.

3Problem:

Client1isabletoping209.65.200.226butcan’tpingtheWebServer209.65.200.241.

ConfigurationonR1:

routerbgp65001

nosynchronization

bgplog-neighbor-changes

network209.65.200.224mask255.255.255.252

neighbor209.56.200.226remote-as65002

noauto-summary

checkbgpneighborship.****showipbgpsum****

Theneighbor’saddressintheneighborcommandiswrongunderrouterBGP.（useipv4Layer3）

needchangeonroutermodeonR1neighbor209.65.200.226

Ans2）BGP

Ans3）deletethewrongneighborstatementandenterthecorrectneighboraddressintheneighborcommand（change“neighbor209.56.200.226remote-as65002″to“neighbor209.65.200.226remote-as65002″）

NAT

Client1&

2arenotabletopingthewebserver209.65.200.241,butalltherouters&

DSW1,2canpingtheserver.

NATproblem.（useipv4Layer3）

problemonR1Natacl

ConfigurationonR1

ipnatinsidesourcelistnat_poolinterfaces0/0/0/1overload

ipaccess-liststandardnat_pool

permit10.1.0.0

interfaceserial0/0/0/1

ipaddress209.65.200.224255.255.255.252

ipnatoutside

interfaceSerial0/0/0/0.12

addtoacl1permitip10.2.1.00.0.0.255

Ans2）NAT

Ans3）Addthecommandpermit10.2.0.0inthenat_poolaccess-list

5R1ACL

Clientisnotabletopingtheserver.ExceptforR1,nooneelsecanpingtheserver.（useipv4Layer3）

Problem:

onR1aclblockingip

neighbor209.65.200.226remote-as65002

access-list30permithost209.65.200.241

access-list30deny10.1.0.00.0.255.255

access-list30deny10.2.0.00.0.255.255

interfaceSerial0/0/0/1

ipaccess-group30in

addpermit209.65.200.2240.0.0.3commandtoR1′sACL

Ans2）IPAccesslist

Ans3）Addpermit209.65.200.2240.0.0.3toR1′sACL

6Client1isgettingthecorrectIPaddressfromDHCPbutClient1isnotabletopingtheserver.UnabletopingDSW1ortheFTPServer（UseL2Diagram）.

VlanAccessmapisappliedonDSW1blockingtheipaddressofclient10.2.1.3

ConfigurationonDSW1

vlanaccess-maptest110

drop

matchipaddress10

vlanfiltertest1vlan-list10

ipaccess-liststandard10

permit10.2.0.00.0.255.255

interfaceVLAN10

Ans1）DSW1（butintheexammaybeyouhavetochooseASW1）

Ans2）Vlanaccessmap

Ans3）Removevlanfiltertest1fromDSW1

Note:

ThereisabugintheexamasNirmalacommented:

“Forthisquestion,therewasabugintheexam.Inordertocorrectlyanswer2ndand3rdMCQ,Ihadtoselectthewrongdevice–ASW1.WhenichosethecorrectdeviceDSW1,thecorrectoptionsfor2ndand3rdMCQnotthere.IcheckedfewtimesandthereisnovlanfilterappliedonASW1,itsonDSW1.Aftercompletingallothertroubletickets,ispentaround45minutestocheckiftheresomethingelsewrong.

Finallyatthelastfewminutes,ichoseASW1forthe1stquestionandcorrectlyselectedtheothertwo.Igot1000.”

7Client1isgettinga169.x.x.xIPaddress&

isunabletopingClient2aswellasDSW1.Thecommand‘shinterfacesfa1/0/1′willshowfollowingmessageinthefirstline

‘enFastEthernet1/0/1isdown,lineprotocolisdown（err-disabled）’

OnASW1port-securitymac0000.0000.0001,interfaceinerr-disablestate

ConfigurationofASW1

interfacefa1/0/1

switchportmodeaccess

switchportport-security

switchportport-securitymac-address0000.0000.0001

onasw1deleleportsecurity&

dooninterfacesshutdown,noshutdown

Ans1）ASW1

Ans2）Portsecurity

Ans3）issue“noswitchportport-securitymac-address0000.0000.0001commandfollowedbyshutdown&

noshutdowncommandsonportfa1/0/1onASW1

8Client1&

2aregetting169.x.x.xipaddressesandcan’tpingDSW1orFTPServerbuttheyareabletopingeachother.

Situation:

inportchannelconfigurationofASW1vlan10isnotallowed.（UseL2Diagram）

interfaceFastEthernet1/0/1

switchportaccessvlan1

interfaceFastEthernet1/0/2

OnASW1,oninterfacesfa0/1,fa0/2switchportaccessvlan1

onASW1changeswitchportaccessvlan1toswitchportaccessvlan10

Ans2）Vlan

Ans3）givecommand:

interfacerangefa1/0/1-/2&

switchportaccessvlan10

9Client1isgetting169.x.x.xipaddress.

2canpingeachotherbuttheyareunabletopingDSW1orFTPServer 

（UseL2/3Diagram）

interfacePortChannel13

switchportmodetrunk

switchporttrunkallowedvlan1-9

interfacePortChannel23

switchportaccessvlan10

onportchannel13,23disablesallvlansandgiveswitchporttrunkallowedvlan10,200

Ans2）Switchtoswitchconnectivity

Ans3）intrangeportchannel13,portchannel23

switchporttrunkallowedvlannone

switchporttrunkallowedvlan10,200

10EIGRPAS

Client1isnotabletopingtheWebserver

DSW1canpingfa0/1ofR4butcan’tpings0/0/0/0.34

CheckipeigrpneighborsfromDSW1 

youwillnot 

seeR4asneighbor.（useipv4Layer3）

‘Showiproute’onDSW1youwillnotseeany10.x.x.xnetworkroute.

OnDSW1&

DWS2theEIGRPASnumberis10（routereigrp10）butonR4itis1（routereigrp1）

changerouterASonR4from1to10

Ans1）R4

Ans2）EIGRP

Ans3）ChangeEIGRPASnumberfrom1to10

11EIGRPTOOSPF

DSW1canpingfa0/1ofR4.HoweverclientsandDSW1can’tpingR4′sS0/0/0/0.34interface（10.1.1.10）

OnR4inroutereigrp:

routereigrp10

network10.1.4.50.0.0.0

redistributeospf1metric1001025511500route-mapEIGRP_to_OSPF

network10.1.1.80.0.0.0area34

redistributeeigrp10subnets

route-mapEIGRP->

OSPF

matchipaddress1

changeinroutereigrprouter-mapname

Ans2）Routeredistribution

Ans3）Changethenameoftheroute-mapundertherouterEIGRPorrouterOSPFprocessfrom‘EIGRP_to_OSPF’to‘EIGRP->

OSPF’.

11IPV6OSPF

DSW1&

R4can’tpingR2′sloopbackinterfaceors0/0/0/0.12IPv6address.

R2isnotanOSPFv3neighboronR3

ipv6ospfwasnotenabledonR2’sserialinterfaceconnectingtoR3.（useipv6Layer3）

ConfigurationofR2

ipv6routerospf6

router-id2.2.2.2

interfaces0/0/0/0.23

ipv6address2026:

:

1:

1/122

ConfigurationofR3

router-id3.3.3.3

2/122

ipv6ospf6area0

Ininterfaceconfigurationmodeofs0/0/0/0.23onR2:

ipv6ospf6area12

Ans1）R2

Ans2）OSPFv3

Ans3）ontheserialinterfaceofR2,enterthecommandipv6ospf6area0（noticethatitis“area0″,not“area12″）

13DHCPRANGE

Inthisticket,checktheIPonClient1,ifitgets169.x.x.xthenusethe“showrun”commandonR4.Ifyouseethe 

“ipdhcpexclude10.2.1.1-1.10.2.1.253″thentheDHCPrangehasbeenmisconfigured.

ConfigurationonR4was:

ipdhcpexclude10.2.1.1-10.2.1.253

Ans2）DHCP

Ans3）onR4deleteipdhcpexclude10.2.1.1-10.2.1.253andapplyipdhcp-excluded10.2.1.1-10.2.1.2

14EIGRPPASSIVEINTERFACE

theneighborshipbetweenR4andDSW1wasn’testablised.Client1can’tpingR4

passive-interfacedefault

redistributeospf1route-mapOSPF->

EIGRP

network10.1.4.40.0.0.3

network10.1.4.80.0.0.3

default-metric10000100255110000

Answer1）R4

Answer2）IPv4EIGRPRouting

Answer3）Remove“Passiveinterface”underEIGRP10（orinInterfacef0/1andf0/0,somethinglikethis）

ASW1

1.AccessportnotinVLAN10

2.PortChannelnotallowingVLAN10

3.PortSecurity

DSW1

1.HSRPtrack