TT832 finalWord格式文档下载.docx
- 文档编号:16635645
- 上传时间:2022-11-25
- 格式:DOCX
- 页数:7
- 大小:17.58KB
TT832 finalWord格式文档下载.docx
《TT832 finalWord格式文档下载.docx》由会员分享,可在线阅读,更多相关《TT832 finalWord格式文档下载.docx(7页珍藏版)》请在冰豆网上搜索。
area12authenticationmessage-digest
Ans1)R1
Ans2)ipv4OSPF
Ans3)ipospfauthenticationmessage-digestcommandmustbegivenons0/0/0
Replacethe‘Answer’withfollowingstatement
OnR1needthecommandininterfaceconfigurationmodeofS0/0/0(notinroutermode)
Symptomsofaboveticketareasbelow:
-
1-Nooneisabletoping10.1.1.1(R1’sS0/0/0int)exceptR2.
2-Client1isabletopingupto10.1.1.2(R2’sS0/0.12int).
3-‘Shipospfneighbor’commandonR1willnotshowanyneighbor
4-‘shiprouteospf’commandonR1willnotshowanyOSPFroute
Ticket2
HSRP:
DSW1doesnotbecomeactive.
confondw1:
track1iproute10.28.123.123255.255.0.0metricthreshold
thresholdmetricup1down2
!
track10iproute11.11.11.11255.255.255.0metricthreshold
thresholdmetricup63down64
interfaceVlan10
ipaddress10.2.1.1255.255.255.0
standby10ip10.2.1.254
standby10priority200
standby10preempt
standby10track1decrement60
(useIPv4Layer3Topology)
Ondsw1interfacevlan10moderun:
nostandby10track1decrement60
standby10track10decrement60
(ipfortrackcommandnotexactforrealexam)
Ans1)DSW1
Ans2)HSRP
Ans3)deletethecommandwithtrack1andenterthecommandwithtrack10.
Ticket3
configurationonR1:
routerbgp65001
nosynchronization
bgplog-neighbor-changes
network209.65.200.224mask255.255.255.252
neighbor209.56.200.226remote-as65002
noauto-summary
checkbgpneighborship.****showipbgpsum****
Theneighbor’saddressintheneighborcommandiswrongunderrouterBGP.(useipv4Layer3)
needchangeonroutermodeonR1neighbor209.65.200.226
Ans2)BGP
Ans3)deletethewrongneighborstatementandenterthecorrectneighboraddressintheneighborcommand(change209.56.200.226to209.65.200.226)
Correctioninproblemstatement:
IntheaboveticketR1andallothersareabletoping209.65.200.226butnottheWebServeronly.ThisisbecauseR1isdirectlyconnectedto209.65.200.226andBGPisnotrequiredinordertopingdirectlyconnectednetworkandassoonasR1knowsabout209.65.200.224networkallotherdevicesarealsoabletoping209.65.200.226,sincetheyarecomingtoR1foranyunknownroute,becauseofdefaultroutepropagatethroughR1′sOSPF(using‘default-informationoriginatealways’command).HoweverWebServerisnotaccessibleuntilBGPconfiguredproperlybetweenR1andISP(209.65.200.226)becauseonlythenR1willreceivetheinformationaboutWebServer’snetwork.
Followingarethesymptomsofaboveticket:
1-NooneisabletopingWebServer.
2-Client1andallotherscanpingupto209.65.200.226.
3-‘shiprouteBGP’,youwillnotseeanyBGProute.
4-‘shipbgpneighbor’onR1,youwillnotseeanyactiveBGPneighbor.
Ticket4
Clientisnotabletopingthewebserver,buttherouterscanpingtheserver.NATproblem.(useipv4Layer3)
problemonR1Natacl
addtoacl1permitip10.2.1.00.0.0.255
Ans2)IPNAT
Ans3)underNATaccesslist,enterthecommandpermit10.2.0.00.0.255.255
R4,R3,R2canping209.65.200.241
Ticket5
Clientisnotabletopingtheserver.ExceptforR1,nooneelsecanpingtheserver.(useipv4Layer3)
Problem:
onR1aclblockingip
aclsomethinglikethis:
deny10.2.1.0
deny10.1.4.0
deny10.1.1.0
addpermit209.65.200.241commandtoR1′sACL
Ans2)IPv4Layer3Security
Ans3)Addpermit209.65.200.2240.0.0.3toR1′sACL
EvenR1alsowouldnotbeabletopingthewebserverorISP(209.65.200.226).SinceexplicitdenyofthisACLwillnotallowareplytocomebackintoR1(sincethisACLisappliedinthe‘in’direction)fromoutsideuntilapermitentryisincludedinACL.ThiswillalsocausetheBGPneighborrelationshipgetdown.
Youwillseeonepermitentryforwebserveronly,whichisnotenough.YouwillseethecontentsofthisACLasbelow.
ipaccess-listextendededge_security
permitiphost209.65.200.241any
denyip10.2.0.00.0.255.255any
denyip10.1.0.00.0.255.255any
denyiphost127.0.0.1any
Thatswhyanentryof‘permit209.65.200.2240.0.0.3any’isrequiredtosolvethisproblem.Andbytheway,theentriesfor10.x.x.xnetworkisneitherhaveanyeffectnorrequiredinthisACL,theyputtheseuponlytoconfusethecandidates.
R4,R3,R2cannotping209.65.200.226
Ticket6
Client1isnotabletopingtheserver.UnabletopingDSW1(UseL2Diagram).
VlanAccessmapisappliedonDSW1blockingtheipaddressofclient10.2.1.3
Ans2)Vlanaccessmap
Ans3)Novlanfilter10
Symptomsofthisticket.
1-Client1isgettingthecorrectIPaddressfromDHCP(i.e10.2.1.3)
2-ButClient1isunabletopingDSW1.
3-Client1isunabletopingFTPServer(10.2.2.10)
Ticket7
Client1isnotabletopingtheserver
Situation:
UnabletopingDSW1(Userlayer2).
OnASW1portsecuritymac0000.0000.0001,interfaceinerr-disablestate
onasw1deleleportsecurity&
dooninterfacesshutdown,noshutdown
Ans1)ASW1
Ans2)Portsecurity
Ans3)Onfa1/0/1andfa1/0/2dodisableportsecurityanddoshut,noshut.
Symptomsforthisticket:
1-Client1isgetting169.x.x.xipaddress
2-Client1isunabletopingClient2aswellasDSW1.
3-‘shinterfacesfa1/0/1′willshowfollowingmessageinthefirstline
‘enFastEthernet1/0/1isdown,lineprotocolisdown(err-disabled)’
4-‘shrunning-config’,youwillsee‘switchportport-securitymac-address’0000.0000.0001′configuredunderfa1/0/1.
Ticket8
UnabletopingDSW1&
inportchannelconfiguratioinofASW1vlan10isnotallowed.(UseL2Diagram)
OnASW1,oninterfacesfa0/1,fa0/2switchportaccessvlan1
onASW1changeswitchportaccessvlan1toswitchportaccessvlan10
Ans2)Accessvlan
Ans3)givecommand:
interfacerangefa1/0/1-/2switchportaccessvlan10
Kindlycorrectthesituationintheaboveticket.Becauseyouhavementionedsituationofanotherticketandsolutionofanother.Thecorrectsituationis:
ClientsareunabletopingDSW1,becausetheiraccessportsaren’tconfiguredforVLAN10onASW1(bothportsareinthedefaultVLAN1).
Symptoms:
1-Clinetsaregetting169.x.x.xIpaddress.
2-Clinet1canpingClient2andviceversa.
3-‘shrunning-config’commandwillnotdisplay‘switchportaccessvlan10′undertheinterfacesfa1/0/1andfa1/0/2.
Ticket9
cantpingtowebserver209.65.200.241
inportchannelconfiguratioinofASW1vlan10isnotallowed.(UseL2Diagram)questionwasaboutEtherChanel
clientcan’tobtainipaddress(169.x.x.x)
onASW1trunksallowvlan20,200
Answ:
onportchannel23giveswitchporttrunkallowedvlan10,200
Ans2)Switchtoswitchconnectivity
Ans3)onportchannel23giveswitchporttrunkallowedvlan10,200
Symptomsofaboveticket:
1-Client1isgetting169.x.x.xipaddress.
3-‘shinterfacestrunk’youwillnotseevlan10inPO13andPO23underallowedVlansontrunk
Ticket10
UnabletopingR4fastethernetportfromdsw1.
CheckipeigrpneighborsfromDSW1youwillnotseeR4asneighbor.(useipv4Layer3)
OnDSW1&
DWS2theEIGRPASnumberis10(routereigrp10)butonR4itis1(routereigrp1)
changerouterASonR4from1to10
Ans1)R4
Ans2)IP4EIGRP
Ans3)ChangeeigrpASnumberfrom1to10
Kindlycorrecttheabovesituationasperfollowing:
DSW1isstillabletopingR4′sfastEthernetinterface,becausethisinterfaceisdirectlyconnectedtoDSW1,sonomatterEIGRPisconfiguredcorrectlyornotDSW1canpingfa0/0interface(10.1.4.5).HoweverclientsandDSW1willnotbeabletopingR4′sS0/0/0.34interface(10.1.1.10).Becausetoreachthatside,itisrequiredtoworkEIGRPproperly.Followingarethesymptomsforaboveticket:
1-ClientsandDSW1isunabletopingR4′sS0/0/0/0.34interface
2-ClientsandDSW1canpinguptoR4′sFa0/0interface.
3-‘shipeigrpneighbor’onDSW1youwillnotseeR4asneighbor.
4-‘shiproute’onDSW1youwillnotseeany10.x.x.xnetworkroute.
Ticket11
UnabletopingserialinterfaceofR4fromtheclients.
OnR4inroutereigrp:
redistributeospf1route-mapEIGRP_to_OSPF
BUTroute-mapwasnamed:
route-mapEIGRP->
OSPF
changeinroutereigrprouter-mapname
Ans2)routeredistribution
Ans3)changethenameoftheroute-mapundertherouterEIGRPorrouterOSPFprocessfrom‘to’to‘->
’.
Ticket12
IPV6loopbackofR2cannotbepingedfromDSW1’sloopback.
ipv6ospfwasnotenabledonR2’sserialinterfaceconnectingtoR3.(useipv6Layer3)
interfaceconfigurationmode:
ipv6ospf6area12
Ans1)R2
Ans2)IPV6ospf
Ans3)ontheserialinterfaceofR2,enterthecommandipv6ospf6area0(makesuretochecktheIPV6topologybeforechooseAnswer3becausetheoptionslooksimilar)
Kindlyupdatethequestionstatement.Theabovementionednotaspertheexam.Althought
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- TT832 final