CCIELAB考试排错部分案例详解上Word文档格式.docx

1、下面是我考试通过的原版做法，凭记忆写的，可能多少会有点小出入，关键还要考场上发挥-clarkguloopback: YY.YY.X.X/32，物理接口YY.YY.15.0/27BB1:150.1.YY.254/24 BB2: 150.2.YY.254/24 BB3: 150.3.YY.254/24IGP不能发进BGP中;路由不进BB，我在lab中使用的yy是 32 ；第一部分-要求看拓扑图，了解IP地址分配，熟悉拓扑第二部分-明确预配中有两个错误，请找出并改正。这里的vlan_F和vlan_H写反了预配：预配中包含VTP、VLANs及所有Router上部分物理接口IPVTP domain: C

2、CIERoutingandSwitchingYY password: ciscoSw2 vtp password 错写为cisc0Sw1为server, domain name 是CCIERoutingandSwitchingYY，其他设备domain为CCIERoutingandSwitching，还有好多接口乱七八糟的接入一些vlan中。sw2的f0/10口被 switchport backup interface f0/4;导致F0/4经常up和down1. Sw1上有SVI11,SVI13，Sw2上有SVI2,SVI22，Sw4上有SVI44,SVI45。SW1 ： Interface

3、 vlan 11 Ip add yy.yy.15.162 255.255.255.224 Interface vlan 13 Ip add yy.yy.15.194 255.255.255.224 SW2: Interface vlan 2 Ip add 150.2.yy.1 255.255.255.0 Interface vlan 22 Ip add yy.yy.15.194 255.255.255.224SW4 : Interface vlan 44 Ip add yy.yy.15.66 255.255.255.224 Interface vlan 45 Ip add yy.yy.16.9

4、8 255.255.255.2242. 在R1与R2之间使用Frame-relay，不能用静态的map不能用Inverse ARP，R1的DLCI 100，R2的DLCI 200，要求封装标准符合RFC1490/RFC2427文档标准，要求lmi-type为ANSI，图上标示使用子接口。R1: Interface s0/0 Encapsulation frame-relay ietf Frame-relay lmi-type ansi No arp frame-relay No frame-relay inverse-arp Int s0/0.1 point-to-point Frame-re

5、lay interface-dici 100 ietfR2: Int s0/0.2 point-to-point Frame-relay interface-dici 200 ietf R4: frame-relay switchingint s0/0 （s0/0 连接R1） encapsulation frame-relay IETFclock rate 64000 frame-relay lmi-type ansi frame-relay intf-type dce frame-relay route 100 interface s0/1 200 int s0/1 （s0/1 连接R2）

6、frame-relay route 200 interface s0/0 100 这里R4是模拟帧中继交换机的配置，实际拓扑是r1-r4-r2 ；3.交换机有以下VLAN。Vlan2 name VLAN_BB2 Vlan3 name VLAN_BB3 Vlan11 name VLAN_C Vlan13 name VLAN_D Vlan15 name VLAN_BB1 Vlan22 name VLAN_E Vlan24 name VLAN_F Vlan44 name VLAN_G Vlan45 name VLAN_H 4.Trunk要求使用dot1q，不能有DTP存在，要求做allow vlan

7、 3,11,13,44,45 Sw1/sw2/sw3/sw4: Interface range f0/19 24 Switchport trunk encapsulation dot1q Switchport mode trunk Switchprot nonegotiate Switchprot trunk allowed vlan 3,11,13,44,45 这里allowed vlan 可能只有 2个左右，具体考试看题目；6.要求所有access接口做一个需求使得一旦接入设备立即跳过listening和learning。有需求说一旦接口收到BPDU那么立刻重新开始进行listening，

8、learning。 Sw1/sw2/sw3： spanning-tree portfast bpdufilter defaultinterface f0/x （x 代表加入vlan 的接口，包括bb）Spanning-tree portfast 7. Traffic control protection from the Backbones, Confignre traffic control on the three bacebone links, protecting your network from a broadcast storm, this protection should b

9、ehin once broadcast traffic is half of the available bandwidth, the port should remain factioning during this time Sw1/sw2/sw3:Interface f0/10 storm-control broadcast level 50.00第四部分Layer 3 Techonologies When you finish this section, you must be able to ping all loopback interfaces in your Y.Y.X.X n

10、etwork, BUT NOT SW3. 1. OSPFYou may choose your own OSPF process ID yourself.自己确定R1和R2的FR的接口类型，要求require DR,BDR的选举，所有路由器不能手工写ROUTER-ID。Area1 要求没有5类LSA存在，Configure R1 so that is generates an OSPF default route injected into Area 1. （有的有fast convergence） R1: Router ospf YY Area 1 nssa default-informat

11、ion originate Network yy.yy.15.242 0.0.0.0 area 1 Network yy.yy.15.161 0.0.0.0 area 0 Network yy.yy.1.1 0.0.0.0 area 0 Int s0/0.1 Ip ospf network broadcast R2: Area 1 nssa Network yy.yy.15.241 0.0.0.0 area 1 Network yy.yy.15.129 0.0.0.0 area 1 Network yy.yy.2.2 0.0.0.0 area 1 Interface s0/0.2R3: Rou

12、ter ospf YY Network yy.yy.15.193 0.0.0.0 area 0 Network yy.yy.3.3 0.0.0.0 area 0 Sw1: Network yy.yy.15.162 0.0.0.0 area 0 Networkr yy.yy.15.194 0.0.0.0 area 0 Network yy.yy.7.7 0.0.0.0 area 0Sw2: Network yy.yy.15.130 0.0.0.0 area 1 Network yy.yy.8.8 0.0.0.0 area 12. EIGRPPlace the Backbones 3 networ

13、k in EIGRP 100。R3上将EIGRP100重分布进EIGRP YY和OSPF，且重分布进EIGRP YY的时候要求汇总以下三个路由为一条（198.2.1.0，198.2.3.0，198.2.5.0）。R1上进行OSPF和EIGRP的双向重分布，要求重分布的时候不能包括以下路由198.2.Z.0/24（Z=1-5），198.1.1.4/30，4.1.1.0/24，128.28.2.0/24，要求使用ACL与route-map完成需求，且两次重分布使用同一个ACL（BB3发送的EIGRP100路由只包含题目中提到的六条路由）Router eigrp 100 No auto-summar

14、y Network 150.3.yy.1 0.0.0.0Router eigrp YY Network yy.yy.15.245 0.0.0.0 Network yy.yy.3.3 0.0.0.0 Redistribute eigrp 100 Interface s0/0 Encapsulation ppp Ip address yy.yy.15.245 255.255.255.252 Ip summary-address eigrp YY 198.2.0.0 255.255.248.0 No peer neighbor-route Router ospf YY Redistribute ei

15、grp 100 subnets R5: Router eigrp YY Network yy.yy.15.246 0.0.0.0 Network yy.yy.15.250 0.0.0.0 Network yy.yy.15.97 0.0.0.0 Network yy.yy.5.5 0.0.0.0Interface s0/0 Encapsulation ppp Ip address yy.yy.15.246 255.255.255.252 Clock rate 128000 / 预配 Bandwidth 128 /预配 导致muliti-link Interface s0/1 Ip address

16、 yy.yy.15.250 255.255.255.252Bandwidth 128 /预配Sw4: Network yy.yy.15.98 0.0.0.0Network yy.yy.15.249 0.0.0.0 Redistribute ospf YY metric 128000 100 255 1 1500 route-map ospf-eigrp Redistribute eigrp YY subnets route-map ospf-eigrp metric 30 Access-list 10 permit 198.2.0.0 0.0.7.0 Access-list 10 permit

17、 198.1.1.4 Access-list 10 permit 4.1.1.0 Access-list 10 permit 128.28.2 .0 Route-map ospf-eigrp deny 10 Match ip address 10 Route-map o2e permit 20Interface s0/1 No peer neighbor-route Ip address yy.yy.15.249 255.255.255.2523. RIPV2Rip图示上标示是RIPv2，DO NOT use multicast to propagate your rip routes.SW4

18、和R2上作双向重分布。Routes from eigrp is preferred over ospf in rip domain. R2： Router rip Version 2 Network yy.0.0.0 Passive-interface default Neighbor yy.yy.15.33 Redistribute rip metric 50 subnetsRouter rip Redistibure ospf YY metric 6 Network YY.0.0.0 Neighbor yy.yy.15.34Neighbor yy.yy.15.66 Neighbor yy.

19、yy.15.65 Redistribute eigrp YY metric 3 Disatance 175 yy.yy.15.65 0.0.0.0 1 Redistribute rip metric 128000 100 255 1 1500 route-map rip2eigrpAccess-list 1 deny yy.yy.4.4Access-list 1 deny 30.30.15.32Access-list 1 deny 30.30.15.64Access-list 1 permit anyAccess-list 2 permit 0.0.0.0Route-map rip2eigrp

20、 deny 10Match ip address 2Route-map rip2eigrp permit 204.IPV6 Protocol IPV6接口要求使用EUI-64，运行接口为：R4和R2互联的接口，R2与R1互联的接口，R1连接vlan11的接口,之后R1可以PING通R4的接口地址。要求在IPv6接口上运行OSPFv3,要求R4与R2间运行Area 0，R2、R1和sw1间运行Area 1R4 G0/1 and R2 G0/1.Z （VLAN 24） FC01:DB8:74:9:/64 R2 S0/0.Z and R1 S0/0.Z FC01:A:/64R1 G0/1 FC01:

21、B: R4： Ipv6 unicast-routing Interface e0/1 Ipv6 address FC01:/64 eui-64 Ipv6 ospf YY area 1 Ipv6 router ospf YY Router-id 4.4.4.4 R2 : Interface e0/1.24 Ipv6 add FC01: Ipv6 ospf YY area 0 Router-id 2.2.2.2Ipv6 unicast-routingInt s0/0.1 Ipv6 router ospf 30 Router-id 1.1.1.1Interface e0/0 Ipv6 ospf YY

22、 area 0Sw1: Sdm prefer dual-ipv4-and-ipv6 routing （开启交换机对ipv6的支持,保存重启后才能生效）；Ipv6 router ospf YY Router-id 7.7.7.7Int vlan 115 、implement ipv4 BGP（这部分我配置完后，路由学到了，可后来检查的时候发现bb来的路由全部没了，但是可以ping同bb地址，删除bgp进程再配上还是没学到，崩溃了2个小时，到end exam时还是没通，但最后却过了，我估计是考官做的手脚）R1与R2，R2与SW4使用loopback 0口建立联邦内EBGPR1，R3，R5，SW4使

23、用loopback0口建立AS YY2中的IBGPR2，SW2使用loopback0口建立AS YY1的IBGP；SW2与BB2建立EBGP，R5与BB1建立EBGP对于从BB学到的路由197.68.21.0/24，197.68.22.0/24，所有BGP路由器选择R5作为下一跳；对于从BB学到的路由197.68.1.0/24，197.68.4.0/24，197.68.5.0/24，所有的IBGP路由器选择SW2作为下一跳 router bgp YY2 bgp confederation identifier YY bgp confederation peers YY1 neighbor YY

24、.YY.2.2 remote-as YY1 neighbor YY.YY.2.2 ebgp-multihop 255 neighbor YY.YY.2.2 update-source Loopback0 neighbor YY.YY.5.5 remote-as YY2 neighbor YY.YY.5.5 update-source Loopback0 router bgp YY1bgp confederation identifier YY bgp confederation peers YY2 neighbor YY.YY.1.1 remote-as YY2 neighbor YY.YY.1.1 ebgp-multihop 255 neighbor YY.YY.1.1 update-source Loopback0 neighb