Sunteți pe pagina 1din 10

1. Ticket - L2 Switching

User's that are located in VLAN 100 of the BancoBank Headquarters have lost access to Server1, which is located in VLAN 200. Fix the so that the following sequence of commands produces the same relevant output:

2 Marks

PC101#ping SERVER1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.200.200, timeout is 2 seconds:

!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

PC101#traceroute server1.bancobank.org Type escape sequence to abort. Tracing the route to server1.bancobank.org (172.16.200.200) VRF info: (vrf in name/id, vrf out name/id)

1 172.16.100.1 0 msec 0 msec 1 msec

2 172.16.0.21 0 msec 0 msec 1 msec

3 Server1.bancobank.org (172.16.200.200) 0 msec * 0 msec

0 msec 0 msec 1 msec 2 172.16.0.21 0 msec 0 msec 1 msec 3 Server1.bancobank.org

2. Ticket - PPP

Local Service Provider NOC connected to R11 has lost access to R17. Local service provider Gateways must authenticate their ppp subscribers using chap. Local service provider Gateways must offer Dynamic IP Adresses to ppp subscribers. Subscribers must have a default route in their routing table poitining to Local Service Provider. Subscribers must not use routing protocols to connect with Local Service Provider Gateways. Fix the solution so the connectivity is possible from R11 to R17 as follows:

2 Marks

aTS01_R11#telnet 145.67.89.22

Trying 145.67.89.22

Open

User Access Verification

Password:

aTS01_R17>

follows: 2 Marks aTS01_R11#telnet 145.67.89.22 Trying 145.67.89.22 Open User Access Verification Password: aTS01_R17>

3. Ticket - OSPF

Assume that there is a server located in OSPF Area 1 on the link between R21 and R22 in the Global Service Provider Network. The NOC team has identified that the traffic that originates in OSPF Area 0 and destined to this server is not load balanced by R1. Fix the so that R1 OSPF Database matches the following output:

2 Marks

aTS01_R1#sh ip ospf database summary 134.56.78.48

OSPF Router with ID (123.1.1.1) (Process ID 1)

Summary Net Link States (Area 0)

Routing Bit Set on this LSA in topology Base with MTID 0 LS age: 25 Options: (No TOS-capability, DC, Upward) LS Type: Summary Links(Network) Link State ID: 134.56.78.48 (summary Network Number) Advertising Router: 123.3.3.3 LS Seq Number: 80000001 Checksum: 0xDA93 Length: 28 Network Mask: /29

MTID: 0

Metric: 20

Routing Bit Set on this LSA in topology Base with MTID 0 LS age: 75 Options: (No TOS-capability, DC, Upward) LS Type: Summary Links(Network) Link State ID: 134.56.78.48 (summary Network Number) Advertising Router: 123.5.5.5 LS Seq Number: 80000002 Checksum: 0xAEB8 Length: 28 Network Mask: /29

MTID: 0

Metric: 20

Advertising Router: 123.5.5.5 LS Seq Number: 80000002 Checksum: 0xAEB8 Length: 28 Network Mask: /29 MTID: 0

4. Ticket - EIGRP

Traffic originating from R11 in Local Service Provider Core destined to loopback 0 of R14 must be load

balanced via EIGRP as shown in the exibit below:

2 Marks

aTS01_R11#show ip eigrp topology 145.14.14.14/32 EIGRP-IPv4 Topology Entry for AS(145)/ID(145.11.11.11) for 145.14.14.14/32 State is Passive, Query origin flag is 1, 2 Successor(s), FD is 1703 Descriptor Blocks:

145.67.89.2 (Ethernet0/0), from 145.67.89.2, Send flag is 0x0 Composite metric is (1703/1603), route is Internal Vector metric:

Minimum bandwidth is 10000 Kbit Total delay is 7000 microseconds Reliability is 255/255 Load is 1/255 Minimum MTU is 1500 Hop count is 2 Originating router is 145.14.14.14 145.67.89.6 (Ethernet1/0), from 145.67.89.6, Send flag is 0x0 Composite metric is (1703/1603), route is Internal Vector metric:

Minimum bandwidth is 10000 Kbit Total delay is 7000 microseconds Reliability is 255/255 Load is 1/255 Minimum MTU is 1500 Hop count is 2 Originating router is 145.14.14.14

microseconds Reliability is 255/255 Load is 1/255 Minimum MTU is 1500 Hop count is 2 Originating

5. Ticket - BGP

Networks hosted behind Internet must be able to be reached from R12 in EIGRP 145 Domain. R12 should be able to prefer the reachability thorugh R22 rather than R21. Fix the so that the following traceroute from R12 should be matched with the output as given below:

2 Marks

aTS01_R12#traceroute 8.8.8.8 Goes via R21

aTS01_R12#traceroute 194.1.1.1 Goes via R22

aTS01_R12#traceroute 123.3.3.3 Goes via R4

aTS01_R12#traceroute 134.21.21.21 Goes via R6

194.1.1.1 Goes via R22 aTS01_R12#traceroute 123.3.3.3 Goes via R4 aTS01_R12#traceroute 134.21.21.21 Goes via R6

6. Ticket - IPv6

The mobile phone which is connected in Mobile IPv6 network has lost access to remote server that is located in the BGP AS 65535. Fix the so that the follow ing sequence of commands produces the same relevant output:

Global SP does not allow any IGP over IPv6 traffic to or from the Mobile IPv6 network.

2 Marks

MOBILE#ping 2001:BEEF:CAFE::26 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:BEEF:CAFE::26, timeout is 2 seconds:

!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/14/36 ms MOBILE#

timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/14/36 ms

7. Ticket - DMVPN

R15 in UBER Market HQ is configured as DMVPN HUB, it should be able to connect R18 as Spoke Client. Fix the issue so thatyou have the following output:

4 Marks

SERVER2#traceroute 200.100.2.100 Type escape sequence to abort.

Tracing the route to User1Spoke2.ubermarket.com (200.100.2.100) VRF info: (vrf in name/id, vrf out name/id)

1 200.100.200.1 0 msec 0 msec 0 msec

2 200.100.0.1 0 msec 1 msec 0 msec

3 215.0.0.18 8 msec 9 msec 8 msec

4 User1Spoke2.ubermarket.com (200.100.2.100) 9 msec * 9 msec

PC112#traceroute 200.100.2.100 Type escape sequence to abort. Tracing the route to User1Spoke2.ubermarket.com (200.100.2.100) VRF info: (vrf in name/id, vrf out name/id)

1 200.100.3.129 0 msec 0 msec 0 msec

2 200.100.3.1 0 msec 0 msec 0 msec

3 215.0.0.1 9 msec 8 msec 9 msec

4 215.0.0.18 13 msec 17 msec 16 msec

5 User1Spoke2.ubermarket.com (200.100.2.100) 17 msec * 18 msec

9 msec 8 msec 9 msec 4 215.0.0.18 13 msec 17 msec 16 msec 5 User1Spoke2.ubermarket.com

8. Ticket MPLS

The BancoBank network design requires that any outbound traffic that generates from any remote site be routed via the HeadQuarters gateways, including internet traffic. R7 must be the primary gateway of the headquarters and R8 must take over if R7 is down. Both gateways must translate the source IP address of any private corporate traffic that is destined to the internet using their interface E1/0.125.

4 Marks

Part - 1 Output:

PC106#ping 172.16.200.200 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.200.200, timeout is 2 seconds:

!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

PC106#

Part - 2 Output:

PC105#traceroute 8.8.8.8 Type escape sequence to abort.

Tracing the route to 8.8.8.8 VRF info: (vrf in name/id, vrf out name/id)

1

192.168.12.1 0 msec 0 msec 0 msec

2

192.168.13.1 1 msec 0 msec 0 msec

3

123.45.67.33 0 msec 0 msec 0 msec

4

123.45.67.13 [MPLS: Labels 22/31 Exp 0] 1 msec 1 msec 0 msec

5

123.45.67.1 [MPLS: Labels 16/31 Exp 0] 0 msec 1 msec 1 msec

6

123.45.67.21 [MPLS: Label 31 Exp 0] 0 msec 7 msec 1 msec

7

123.45.67.22 7 msec 0 msec 1 msec

8

125.45.67.21 0 msec 0 msec 1 msec

9

123.45.67.38 1 msec 0 msec 0 msec

10

134.56.78.6 1 msec 1 msec 0 msec

11

8.8.8.8 1 msec 1 msec *

PC105#

9 123.45.67.38 1 msec 0 msec 0 msec 10 134.56.78.6 1 msec 1 msec 0 msec

9. Ticket - DMVPN There is DMVPN configured between R7 - R24 via Nat Network (R23). R7 is configured as HUB and R24 as Spoke. User (PC 109) attached to R24 has lost the access to Headquaters. It must be able to reach Server in Bancobank Headquaters in BGP AS 65100. Fix the issue so that the user can reach to the Server through DMVPN.

2 Marks

PC109#ping server1.bancobank.org Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.200.200, timeout is 2 seconds:

!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/11 ms

PC109#

PC109#traceroute server1.bancobank.org Type escape sequence to abort.

Tracing the route to server1.bancobank.org (172.16.200.200) VRF info: (vrf in name/id, vrf out name/id)

1 10.25.45.1 1 msec 1 msec 0 msec

2 172.247.247.1 9 msec 9 msec 10 msec

3 172.16.0.2 9 msec 9 msec 10 msec

4 server1.bancobank.org (172.16.200.200) 9 msec * 6 msec

PC109#

9 msec 9 msec 10 msec 3 172.16.0.2 9 msec 9 msec 10 msec 4 server1.bancobank.org

10. Ticket - NAS Internet user's have lost access to the NAS server that is located in the home network. Fix the s so that the following sequence of commands produces the same output:

aTS01_R21#telnet nas.home.net 8008 Trying net.home.net (134.56.78.10, 8008)

get HTTP/1.1 400 Bad Request Date: Sun, 12 Oct 2014 21:08:02 GMT Server: cisco-IOS Accept-Ranges: none 400 Bad Request [Connection to net.home.net closed by foreign host]

R21#

Open

2 Marks

The NAS must be able to reach an external server as per below output:

NAS#ping www.cciecloud.net Translating "www.cciecloud.net"

Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.4, timeout is 2 seconds:

!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms NAS#

domain

server (192.168.1.1) [OK]

seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms NAS# domain server