ccie V50.docx

1、ccie V50V50Bridging and Switching桥接交换Lo0=YY.YY.X.X/241.1 VTPSw1 / Sw2 / Sw3 / Sw4 VTP domain VTPYY VTP mode Transparent交换机 1234 domain VTPYY 模式为Transparentsw 1 2 3 4 vtp mode transparent vtp domain VTPYY 1.2 Port-Channel between Sw1 and Sw2Sw1 and Sw2 Layer 3 Ether channel use port-channel 21 onlyAs

2、sign YY.YY.100.1/24 to Sw1 port-channel 21Assign YY.YY.100.2/24 to Sw2 port-channel 21 Ensure interface F0/23 and F0/24 are channel member for both Switch Do not reply on PAGP or LACP to facilitate the connection Verify Layer 2 and Layer 3 connectivity via the channel link交换机1 2 的potr-channel是一个三层的,

3、只能使用channelID21sw1 ip address y.y.100.1 sw2 ip address y.y.100.223-24口划入channel，不能让开启PAGP or LACP 只能使用 on2层和三层都可以ping通Sw1*(config)# interface range f0/23 -24(config-if)# no switchport（先把物理口变为三层口）(config-if)# channel-gourp 21 mode on(config)# interface port 21(config-if)# no switchport(config-if)# ip

4、 address YY.YY.100.1 255.255.255.0Sw2*(config)# interface range f0/23 -24(config-if)# no switchport（先把物理口变为三层口）(config-if)# channel-gourp 21 mode on(config)# interface port 21(config-if)# no switchport(config-if)# ip address YY.YY.100.2 255.255.255.0 PING Y.Y.100.11.3 Port-Channel between Sw1 , Sw3

5、and Sw2 , Sw4Sw1, Sw3, Sw2, Sw4 Layer 2 Ether-channels use port 10 only, F0/19 and F0/20 are members of the Switches.On Sw2 and Sw4 assign all interface in the EC as static-access ports in VLAN_200Unconditional enable PAGP to facilitate the connection.Verify Layer 2 connectivity via the channel link

6、sw1与sw3 sw2与sw4 都是2层channel 使能使用port10 使用1920口划入channelsw2与sw4 channel里边所有的端口都静态的加入vlan200无条件的开启PAGP，使之形成 就是说使用 desirable 要求最后ping通Sw2与sw4 是access port sw1与sw3使用trunk islsw1:int range f0/19 -20channel-g 10 mode desirable（使用动态协商PAGP）int port 10sw trunk enca islsw mode trunkint ran fa0/21 -22shsw3:int

7、 range f0/19 -20channel-g 10 mode desirable （使用动态协商PAGP）int port 10sw trunk enca isl sw mode trunkint ran fa0/21 -24shsw2:int range f0/19 -20 channel-g 10 mode desirable （使用动态协商PAGP）int port 10 sw mode acc sw acc vlan 200int ran fa0/21 -22 shsw4:int range f0/19 -20 channel-g 10 mode desirable （使用动态协

8、商PAGP） int port 10 sw mode acc sw acc vlan 200int ran fa0/21 -24sh1.4 VLANSw1:VLAN Name Status Ports-40 VLAN_BB1 active Fa0/4, Fa0/1055 VLAN_55 active Fa0/560 VLAN_BB3 active Fa0/6100 VLAN_100 active Fa0/1,Fa0/2200 VLAN_200 active Sw2:VLAN Name Status Ports-50 VLAN_BB2 active Fa0/6,Fa0/10100 VLAN_10

9、0 active Fa0/1,Fa0/2200 VLAN_200 active Po10Sw3:VLAN Name Status Ports-60 VLAN_BB3 active Fa0/10200 VLAN_200 active Sw4:VLAN Name Status Ports-200 VLAN_200 active Po101.5 Catalyst Layer 3 Configuration - Part I (3Points)Configure Sw1 and Sw2 IP address as outlined in Diagram #1 Connectivity to R3 us

10、es routed ports 连接R3都是用的路由接口 R1 and R2 are members of VLAN_100 on Sw1 and Sw2R1R2都是sw12vlan100成员 NOTE:VLAN_100 on Sw1 and Sw2 use different IP subnets Once complete verify you can ping all neighbor interface on Sw1,Sw2,R1,R2 and R3 可以ping通SW1 SW2 R1 R2 R31.6 Catalyst Layer 3 Configuration - Part II

11、(3Points)Configure Sw3 and Sw4 IP addressing as outlined in Diagram #1 Configure VLAN_200 in Sw1 with IP Address YY.YY.34.1/24建立SVI Configure VLAN_200 in Sw2 with IP Address YY.YY.43.1/24建立SVI Verify the connectivity between Sw1 and Sw3 as well as Sw2 and Sw4 VLAN_200 NOTE:VLAN_200 on Sw1 and Sw3 as

12、 well as Sw2 and Sw4 use different subnetssw1in vlan 100ip add Y.Y.12.254 255.255.255.0in vlan 200ip add Y.Y.34.1 255.255.255.0in fa0/3no swip add Y.Y.13.2 255.255.255.0sw3in vlan 200ip add Y.Y.34.254 255.255.255.0sw2in vlan 100ip add Y.Y.21.254 255.255.255.0in vlan 200ip add Y.Y.43.1 255.255.255.0i

13、n fa0/3no swip add Y.Y.31.2 255.255.255.0sw4in vlan 200ip add Y.Y.43.254 255.255.255.0帧中继 FR ping all the interface in the FR cloud (not include self) R3是多点子接口R4 R5是两个点对点子接口，R6in e0ip add 150.3.y.1 255.255.255.0in e1ip add 150.2.y1 255.255.255.0in s0ip add y.y.16.6 255.255.255.0fram map ip y.y.16.1

14、601 bR1in s0ip add y.y.16.1 255.255.255.0fram map ip y.y.16.6 106 bin e0ip add y.y.12.1 255.255.255.0in e1ip add y.y.21.1 255.255.255.0R2in e0ip add y.y.12.2 255.255.255.0in e1ip add y.y.21.2 255.255.255.0R3Int s0/0.3 m(多点子接口)No fram inv（注意在敲一遍）Ip add y.y.11.3 255.255.255.0Fram map ip y.y.11.4 301 b

15、Fram map ip y.y.11.5 305 bInt e0Ip add y.y.13.1 255.255.255.0Int e1Ip add y.y.31.1 255.255.255.0R4in s0.4 p（点对点子接口）no fram inv（注意在敲一遍）ip add y.y.11.4 255.255.255.0fram interface-dhci 403（点对点只能使用这个）in e0ip add 150.1.y.1 255.255.255.0R5in s0.5 p（点对点子接口）no fram inv （注意在敲一遍）ip add y.y.11.5 255.255.255.0

16、fram interface-dhci 503（点对点只能使用这个）in e0ip add y.y.55.254 255.255.255.01.7 Catalyst Feature (2Points) 可随突然变 设备 端口 速率Configure Sw1 - F0/10 so that the interface will stop forwarding unicast traffic if theinput rate exceeds 55 Mb/s配置Sw1的F0/10（变化）如果input流量超过55Mb/s就停止转发单播流量Sw1()#int f0/10 storm-control u

17、nicast level 55 show run int f0/101.8 Catalyst Tuning (2Points) 可变设备 时间参数 Configure the amount of time a neighbor should hold CDP information sent by Sw1 before discarding it to 2.2 minutes.交换机的所有CDP邻居可以保留2.2分钟，默认是180秒Tuning在Sw1（变化）修改CDP hold时间到2.2minutes这个是由发送方决定的 Sw1()#cdp holdtime 132 clear cdp t

18、able show cdp neighbor 检查1.9 Catalyst Feature (3Points) 可变设备 端口 组播单播 Configure Sw1 to control and block the flood of unknown Multicast traffic on theinterface F0/5在Sw1的F0/5上配置控制阻塞掉未知组播流量Sw1()#int f0/5 switchport block multicast IP IGP Routing ProtocolsAfter finishing each question below , ensure tha

19、t all interfaces are reachable unless specified. Route redistribution is required to achieve some objectives even if not explicitly in a question.完成时 所有接口可达，除非指定端口，有肯定做重分布，但是体目中有可能没有提到2.1 OSPF Backbone (3Points) no routerIDOSPF area 0 consists of the following interfaces: The link between Sw1 and Sw

20、2 All interfaces in VLAN_100 on Sw1,Sw2,R1 and R2 R3 G0/0 and G0/1 and the Fa0/3 on Sw1 and Sw2 Loopback0 interfaces on Sw1,Sw2,R2 and R3 R1 lo0不参与到AREA 0 Verify that all OSPF neighbors have built their adjacencies lo0的网络类型改为P-T-PR1()#router os 1net Y.Y.12.1 0.0.0.0 a 0net Y.Y.21.1 0.0.0.0 a 0 R2()#

21、int lo0ip ospf network point-to-point#router os 1 net Y.Y.2.2 0.0.0.0 a 0net Y.Y.12.2 0.0.0.0 a 0net Y.Y.21.2 0.0.0.0 a 0 Sw1()#int lo0ip ospf network point-to-point#ip routing #router os 1net Y.Y.7.7 0.0.0.0 a 0net Y.Y.12.254 0.0.0.0 a 0net Y.Y.13.2 0.0.0.0 a 0net Y.Y.100.1 0.0.0.0 a 0Sw2()#int lo0

22、ip ospf network point-to-point#ip routing#router os 1 net Y.Y.8.8 0.0.0.0 a 0net Y.Y.21.254 0.0.0.0 a 0net Y.Y.31.2 0.0.0.0 a 0net Y.Y.100.2 0.0.0.0 a 0R3()#int lo0 ip ospf network point-to-point#router os 1net Y.Y.3.3 0.0.0.0 a 0net Y.Y.13.1 0.0.0.0 a 0 net Y.Y.31.1 0.0.0.0 a 0 show ip route show i

23、p ospf neighbor2.2 OSPF over NBMA (2Points)OSPF area 11 consists of the following interfaces and attributes:The Frame Relay network between R3,R4 and R5Loopback0 on R4 and R5VLAN_55Ensure there is no DR/BDR election over the NBMA network.没有DR/BDR选举R3 R4 R5的FR网络，R4 R5的Lo0，vlan55,在本区不能有DR/BDR选举R3()#in

24、t lo0 ip ospf network point-to-point#int s0/0.3 multicast ip ospf network point-to-multicast #router ospf 1net Y.Y.11.3 0.0.0.0 a 11R4()#int lo0 ip ospf net point-to-point#int s0/0.4 point-to-pointip ospf network point-to-multicast #router os 1 net Y.Y.4.4 0.0.0.0 a 11net Y.Y.11.4 0.0.0.0 a 11R5()#i

25、nt lo0ip os net point-to-point#int s0/0.5 point-to-pointip ospf network point-to-multicast #router ospf 1net Y.Y.5.5 0.0.0.0 a 11net Y.Y.11.5 0.0.0.0 a 11net Y.Y.55.254 0.0.0.0 a 112.3 OSPF ASBR and RIP Version 2 - Part I (3Points) Configure R4 to receive RIP v2 routes from Backbone 1. When properly

26、 configured you will receive RIP v2 routes in the Class B address range of 199.172.Z.Z Configure R4 so that the external RIP routes are injected into area 11 and appear throughout that OSPF domain Ensure external routes originates from autonomous system boundary routers (ASBR) outside area 11 cannot

27、 be flooded within the area Permit OSPF Type-3 routes into area 11R4和bb1运行ripv2，完成时能收到B类路由 199.172.Z.Z（前16位是199.172后16位任意）把R4的rip重分布到ospf 11中 5类的LSA不能进入区域11 配置NSSA区域R4()#router rip ver 2no aunet 150.1.0.0distribute-list 1 in e0 最新需求没有入向过滤 #acc 1 per 199.172.0.0 0.0.255.255#router os 1 redistribute r

28、ip subnetsarea 11 nssa R3()#router os 1area 11 nssa default-information-originateR5()#router os 1area 11 nssa 2.4 AREA 34 and AREA 43 (3Points) OSPF Area 34 consists of the VLAN_200 interfaces on Sw1 and Sw3 and Loopback0 in Sw3 OSPF Area 43 consists of the VLAN_200 interfaces on Sw2 and Sw4 and Loo

29、pback0 in Sw4 Verify Sw3 and Sw4 can ping all interfaces within your OSPF networkSw3()#int lo0ip ospf network point-to-point#ip routing#router os 1net Y.Y.9.9 0.0.0.0 a 34net Y.Y.34.254 0.0.0.0 a 34Sw1() #router os 1net Y.Y.34.1 0.0.0.0 a 34Sw4()#int lo0ip ospf network point-to-point#ip routing#router os 1 net Y.Y.10.10 0.0.0.0 a 43net Y.Y.43.254 0.0.0.0 a 43Sw2()#router os 1net Y.Y.43.1 0.0.0.0 a 432.5 OSPF ABR (3Points)Static routes are not permitted for this question: