CCNP 题库tt14Word下载.docx
《CCNP 题库tt14Word下载.docx》由会员分享,可在线阅读,更多相关《CCNP 题库tt14Word下载.docx(20页珍藏版)》请在冰豆网上搜索。
Ans3)ipospfauthenticationmessage-digestcommandmustbegivenons0/0/0/0.12
2.HSRPwasconfiguredonDSW1&
DSW2.DSW1isconfiguredtobeactivebutitdoesnotbecomeactive.
ConfigurationonDSW1:
track1iproute10.1.21.128255.255.0.0metricthreshold
thresholdmetricup1down2
track10iproute10.2.21.128255.255.255.0metricthreshold
thresholdmetricup63down64
interfaceVlan10
ipaddress10.2.1.1255.255.255.0
standby10ip10.2.1.254
standby10priority200
standby10preempt
standby10track1decrement60
(useIPv4Layer3Topology)
Ondsw1interfacevlan10moderun:
nostandby10track1decrement60
standby10track10decrement60
(ipfortrackcommandnotexactforrealexam)
Ans1)DSW1
Ans2)HSRP
Ans3)deletethecommandwithtrack1andenterthecommandwithtrack10(standby10track10decrement60).
3Problem:
Client1isabletoping209.65.200.226butcan’tpingtheWebServer209.65.200.241.
ConfigurationonR1:
routerbgp65001
nosynchronization
bgplog-neighbor-changes
network209.65.200.224mask255.255.255.252
neighbor209.56.200.226remote-as65002
noauto-summary
checkbgpneighborship.****showipbgpsum****
Theneighbor’saddressintheneighborcommandiswrongunderrouterBGP.(useipv4Layer3)
needchangeonroutermodeonR1neighbor209.65.200.226
Ans2)BGP
Ans3)deletethewrongneighborstatementandenterthecorrectneighboraddressintheneighborcommand(change“neighbor209.56.200.226remote-as65002″to“neighbor209.65.200.226remote-as65002″)
NAT
Client1&
2arenotabletopingthewebserver209.65.200.241,butalltherouters&
DSW1,2canpingtheserver.
NATproblem.(useipv4Layer3)
problemonR1Natacl
ConfigurationonR1
ipnatinsidesourcelistnat_poolinterfaces0/0/0/1overload
ipaccess-liststandardnat_pool
permit10.1.0.0
interfaceserial0/0/0/1
ipaddress209.65.200.224255.255.255.252
ipnatoutside
interfaceSerial0/0/0/0.12
addtoacl1permitip10.2.1.00.0.0.255
Ans2)NAT
Ans3)Addthecommandpermit10.2.0.0inthenat_poolaccess-list
5R1ACL
Clientisnotabletopingtheserver.ExceptforR1,nooneelsecanpingtheserver.(useipv4Layer3)
Problem:
onR1aclblockingip
neighbor209.65.200.226remote-as65002
access-list30permithost209.65.200.241
access-list30deny10.1.0.00.0.255.255
access-list30deny10.2.0.00.0.255.255
interfaceSerial0/0/0/1
ipaccess-group30in
addpermit209.65.200.2240.0.0.3commandtoR1′sACL
Ans2)IPAccesslist
Ans3)Addpermit209.65.200.2240.0.0.3toR1′sACL
6Client1isgettingthecorrectIPaddressfromDHCPbutClient1isnotabletopingtheserver.UnabletopingDSW1ortheFTPServer(UseL2Diagram).
VlanAccessmapisappliedonDSW1blockingtheipaddressofclient10.2.1.3
ConfigurationonDSW1
vlanaccess-maptest110
drop
matchipaddress10
vlanfiltertest1vlan-list10
ipaccess-liststandard10
permit10.2.0.00.0.255.255
interfaceVLAN10
Ans1)DSW1(butintheexammaybeyouhavetochooseASW1)
Ans2)Vlanaccessmap
Ans3)Removevlanfiltertest1fromDSW1
Note:
ThereisabugintheexamasNirmalacommented:
“Forthisquestion,therewasabugintheexam.Inordertocorrectlyanswer2ndand3rdMCQ,Ihadtoselectthewrongdevice–ASW1.WhenichosethecorrectdeviceDSW1,thecorrectoptionsfor2ndand3rdMCQnotthere.IcheckedfewtimesandthereisnovlanfilterappliedonASW1,itsonDSW1.Aftercompletingallothertroubletickets,ispentaround45minutestocheckiftheresomethingelsewrong.
Finallyatthelastfewminutes,ichoseASW1forthe1stquestionandcorrectlyselectedtheothertwo.Igot1000.”
7Client1isgettinga169.x.x.xIPaddress&
isunabletopingClient2aswellasDSW1.Thecommand‘shinterfacesfa1/0/1′willshowfollowingmessageinthefirstline
‘enFastEthernet1/0/1isdown,lineprotocolisdown(err-disabled)’
OnASW1port-securitymac0000.0000.0001,interfaceinerr-disablestate
ConfigurationofASW1
interfacefa1/0/1
switchportmodeaccess
switchportport-security
switchportport-securitymac-address0000.0000.0001
onasw1deleleportsecurity&
dooninterfacesshutdown,noshutdown
Ans1)ASW1
Ans2)Portsecurity
Ans3)issue“noswitchportport-securitymac-address0000.0000.0001commandfollowedbyshutdown&
noshutdowncommandsonportfa1/0/1onASW1
8Client1&
2aregetting169.x.x.xipaddressesandcan’tpingDSW1orFTPServerbuttheyareabletopingeachother.
Situation:
inportchannelconfigurationofASW1vlan10isnotallowed.(UseL2Diagram)
interfaceFastEthernet1/0/1
switchportaccessvlan1
interfaceFastEthernet1/0/2
OnASW1,oninterfacesfa0/1,fa0/2switchportaccessvlan1
onASW1changeswitchportaccessvlan1toswitchportaccessvlan10
Ans2)Vlan
Ans3)givecommand:
interfacerangefa1/0/1-/2&
switchportaccessvlan10
9Client1isgetting169.x.x.xipaddress.
2canpingeachotherbuttheyareunabletopingDSW1orFTPServer
(UseL2/3Diagram)
interfacePortChannel13
switchportmodetrunk
switchporttrunkallowedvlan1-9
interfacePortChannel23
switchportaccessvlan10
onportchannel13,23disablesallvlansandgiveswitchporttrunkallowedvlan10,200
Ans2)Switchtoswitchconnectivity
Ans3)intrangeportchannel13,portchannel23
switchporttrunkallowedvlannone
switchporttrunkallowedvlan10,200
10EIGRPAS
Client1isnotabletopingtheWebserver
DSW1canpingfa0/1ofR4butcan’tpings0/0/0/0.34
CheckipeigrpneighborsfromDSW1
youwillnot
seeR4asneighbor.(useipv4Layer3)
‘Showiproute’onDSW1youwillnotseeany10.x.x.xnetworkroute.
OnDSW1&
DWS2theEIGRPASnumberis10(routereigrp10)butonR4itis1(routereigrp1)
changerouterASonR4from1to10
Ans1)R4
Ans2)EIGRP
Ans3)ChangeEIGRPASnumberfrom1to10
11EIGRPTOOSPF
DSW1canpingfa0/1ofR4.HoweverclientsandDSW1can’tpingR4′sS0/0/0/0.34interface(10.1.1.10)
OnR4inroutereigrp:
routereigrp10
network10.1.4.50.0.0.0
redistributeospf1metric1001025511500route-mapEIGRP_to_OSPF
network10.1.1.80.0.0.0area34
redistributeeigrp10subnets
route-mapEIGRP->
OSPF
matchipaddress1
changeinroutereigrprouter-mapname
Ans2)Routeredistribution
Ans3)Changethenameoftheroute-mapundertherouterEIGRPorrouterOSPFprocessfrom‘EIGRP_to_OSPF’to‘EIGRP->
OSPF’.
11IPV6OSPF
DSW1&
R4can’tpingR2′sloopbackinterfaceors0/0/0/0.12IPv6address.
R2isnotanOSPFv3neighboronR3
ipv6ospfwasnotenabledonR2’sserialinterfaceconnectingtoR3.(useipv6Layer3)
ConfigurationofR2
ipv6routerospf6
router-id2.2.2.2
interfaces0/0/0/0.23
ipv6address2026:
:
1:
1/122
ConfigurationofR3
router-id3.3.3.3
2/122
ipv6ospf6area0
Ininterfaceconfigurationmodeofs0/0/0/0.23onR2:
ipv6ospf6area12
Ans1)R2
Ans2)OSPFv3
Ans3)ontheserialinterfaceofR2,enterthecommandipv6ospf6area0(noticethatitis“area0″,not“area12″)
13DHCPRANGE
Inthisticket,checktheIPonClient1,ifitgets169.x.x.xthenusethe“showrun”commandonR4.Ifyouseethe
“ipdhcpexclude10.2.1.1-1.10.2.1.253″thentheDHCPrangehasbeenmisconfigured.
ConfigurationonR4was:
ipdhcpexclude10.2.1.1-10.2.1.253
Ans2)DHCP
Ans3)onR4deleteipdhcpexclude10.2.1.1-10.2.1.253andapplyipdhcp-excluded10.2.1.1-10.2.1.2
14EIGRPPASSIVEINTERFACE
theneighborshipbetweenR4andDSW1wasn’testablised.Client1can’tpingR4
passive-interfacedefault
redistributeospf1route-mapOSPF->
EIGRP
network10.1.4.40.0.0.3
network10.1.4.80.0.0.3
default-metric10000100255110000
Answer1)R4
Answer2)IPv4EIGRPRouting
Answer3)Remove“Passiveinterface”underEIGRP10(orinInterfacef0/1andf0/0,somethinglikethis)
ASW1
1.AccessportnotinVLAN10
2.PortChannelnotallowingVLAN10
3.PortSecurity
DSW1
1.HSRPtrack