題目解法121-6.0泰克網(wǎng)絡(luò)實(shí)驗(yàn)室版本121V6.0注意

1、TroubleshootingThere are 3 or 4 faults beenroduced in your rack lab and there pois 6,if you were not able to solve these faultsof the questiont you are not able to completethen you will not only lose the pos ofbecause of the fault been added in your labt fault but also lose the po（1）（2）（3）（4）（5）（6）注

2、意 FR 的封裝格式可能需要自己配置，不過很簡(jiǎn)單，在 ospf 上增加了匯總，主意要過濾。-X port of sw:correct duplex auto通就可以了。ATM 已經(jīng)被去除了，取代的是 BB3，需要在 R6 上做單臂路由，大家先在 RACK4 上做一遍。vtp 域檢查是否匹配。1Bridging & SwitchingAll deviLoack 0 is Y.Y.x.x/241.1 configurate ip across your frame relay networkThe frame could provided for you is fully meshed. Howe

3、ver you must only use the PVCS medicated on Diagram user of any dynamic circuits is not permittedDont use sub-erfafor the frame relay links on All router.Configure the frame-relay connections according to the diagram use only DLCI numberd.Ensure you canallframe realyerfa（include self）1.2 VTP configu

4、ration: Rack YY （1）Password: ciscoSW1 will propagated all VLAN configuration changes to SW2 SW 3 SW4he future these four Switches will be configured as VTP transparent mode. They shouldnt inspect the VTP（4）name and ver/ Rack YY, and they support unrecognized TLV.SW1:VtpVtp mode serverVtp ver 2 * Vtp

5、 password ciscoSW2/SW3/SW4VtpRack YYVtp mode cntVtp ver2Vtp password ciscoVTP 不通注意事項(xiàng)：1VLAN 11VLAN_BB1VLAN 12VLAN_BB2VLAN 13VLAN_BB3VLAN 21VLAN_AVLAN 22VLAN_BVLAN 23VLAN_CVLAN 100VLAN_SWICHESVLAN 50CUSTOMER_1VLAN 70CUSTOMER_21，TRUNK PASSWORD 從新配一下。MD5 值是否一樣1.3 Trunk（1） Trunong four Switches（2） Trunk

6、will be formed unconditionally use ISL choose encapsulation/*此處注意是 ISL（3） Create area Trunk betR6:erface fa0/0.1 Encapsulation ISL 13n R6 and SW2, only VLAN BB3 and VLAN B must be allowhe Trunk/*如果沒讓用 dot1q 就用 ISLIp address 150.3.y.1 255.255.255.0erface fa0/0.2 Encapsulation ISL 23Ip address y.y.62.

7、6 255.255.255.0（注意，此處老題目的掩碼是 25 位的）SW2:erface fa0/6switchport trunk encaplucation ISL switchport trunk allowed vlan list 13,23 switchport mode trunk注意要 shut down 接口1.4 Ether-ChannelsAll the four switches are connected to the 3 other switches. configure an ISLl theseer-switch links so as to passall t

8、he vlans. The includes the configuration of an IEEE protocolt provides increased bandwidnd efficientutilization of this links and make sure fault tolerance and load-balance .Dont use PAGP or LACPSW1/SW2/SW3/SW4：erface range fa0/19-24 switchportSwithport trunk encapsulation islswitchport mode trunkch

9、annel-groupmode on1.5 Ether-Channels load- balance (此題目可能不考了)（1） R4 is sending packets to many hosts on VLAN_BB2（2） Configure SW1 SW2 sot the traffic is efficiently distributed across the physical linksSW1-SW2/*注意看是所有還是某臺(tái) sw，如果沒說就全部都做port-channel load-balance dst-mac/src-dst-mac1.6 MST為減少 cpu 開銷，con

10、solidate the spanning tree of the vlan 11,21,100 要求如下：vlan 11 21 share one common spanning tree ,and sw1 is root bridgevlan 100 is another spanning tree ,and sw4 is root bridgeall of the vlans share the default instance解法和 1.6 步驟合起來做。1.7 Vlan BB2 root bridgeConfig sw2 sot the device will be be the r

11、oot for vlan_bb2.（vlan12）考官說，該題目只要滿足題目要求即分SW1/SW2/SW3/SW4:Spanning-tree mode mst Spanning-tree mst configurationName cisco2revi1insrance 1 vlan11,21insrance 2 vlan100 SW1:Spanning-tree mst 1 root primary SW4:Spanning-tree mst 2 root primary SW2:Spanning-tree mst 0 root primary1.8 when Flow-control（1

12、） Sometimes hosts on VLAN_C are sending very heavy traffic to R2, sot R2 droppackets. Configure SW2sot it can receive instruction from R2 to stop sending packet（2） You do noSW2:erface fa0/6ve to configure R2 outer announced congestion.the switch reduce the throughput/* no mls qos作在那個(gè)接口題目會(huì)明確說明白flowco

13、ntrol receive desire1.9 UDLD（1） To avoid Spanning-tree topology loopst caused by area bad-cabetn SW3 SW4（2） Configure your Switches soSW3/SW4:t the affected ports are disabled if area unidirectional link is detectederface range F0/19-20（注意，看好是哪兩個(gè)交換機(jī)兩兩相連的接口）udld port aggressive1.10 Storm-ControlConfi

14、gure SW1 FastEthernet0/10When the flood reach 85% bandwidth traffic will block when drop to 60% begin forwardSW1erface FastEthernet0/10/*題目會(huì)明確告訴是 broadcastswitchport acs vlan 11switchport mode acsstorm-control broadcast level 85.00 60.001.11 overlavlan，802.1q tunnelconfig sw1,sw2 for 802.1q tunnelcr

15、eate VLan 50 (custom 1)sw1 f0/5 connect with R5 G0/0 ,do not assign an ip address to thiserface(R5 or SW1)（4） sw2 f0/3 connect with R3g0/1,do not assign an ip address to thiserface(R3 or SW2)（5） you are not allowed to configure thed ip mtu under sw1s ports f0/3 and f0/5（6） 注意：igp 后面說了，you are not al

16、lowed to change the mtu on any router。SW1/SW2/SW3/SW4:System mtu 1504 （要重新啟動(dòng)的）Vlan dot1q native tag SW1：erface fa0/3Switchport acs vlan 503Swithport mode dot1q-tunnelL2protocol-tunnelSW2:erface fa0/3Switchport acs vlan 50Switchport mode dot1q-tunnelL2protocol-tunnel驗(yàn)證：做好之后 R3,R5 show cdp neighbor 看到

17、的是對(duì)方L2protocol-tunnel 打進(jìn)去之后 l2protocol-tunnel cdp l2protocol-tunnel stp l2protocol-tunnel vtp1.12 SwitanagementConfigure area VLAN subnet Y.Y.90.0/24 includes Switches only SW1, SW2, SW3, SW4The VLAN number is 1001.13 STP (Score: 3 Po第一種問法：s)SW1 F0/2 接口所在的 VLANxx，接口動(dòng)態(tài) mac 地址最大保持時(shí)間為 10 分鐘。SW1/SW2/SW3

18、/SW4:-mac-address-table aging-time 600 vlan第二種問法：xx(看好時(shí)間)Configure SW4 soSW4t the Mac-address aging time is 500 seconds for VLAN BB3mac-address-table aging-time 500 vlan 131.14 在 SW1 和 R3 之間的接口啟用 3 層接口，ip 地址為 12.12.37.7/24。 SW1：-erface f0/3No switchportip address 12.12.27.7 255.255.255.0IGPRip Confi

19、gurationDont use multicast to propagate RIP routesNo subnet aggregated（3） RIP update only sends to RIP-enablederfa（4） 注意看一下 BB1 過來的路由要不要做過濾R1:-erfaerial1/0ip address 12.12.13.1 255.255.255.04SW1Y.Y.90.1/24SW2Y.Y.90.2/24SW3Y.Y.90.3/24SW4Y.Y.90.4/24ip split-horizonrouter ripver2passive-erface defaultn

20、etwork 12.0.0.0network 150.1.0.0neighbor 150.1.12.254neighbor 12.12.13.3distribuist prefix frombb1 in FastEthernet0/0 /注意此處要仔細(xì)審題看是否要求過濾，如果沒要求就不做no auto-summaryip prefix-list frombb1 seq 5 permit 199.172.0.0/16 le 32 /注意此條目可能不做，要仔細(xì)審題看是否有需求要過濾。ip prefix-list frombb1 seq 5 permit 150.100.1.0/24/注意此條目可能

21、不做，要仔細(xì)審題看是否有需求要過濾。R3 :-erfaerial1/0ip address 12.12.13.3 255.255.255.0ip split-horizon router ripver2network 12.0.0.0passive-erface defaultneighbor 12.12.13.1 no auto-summary2.2 OSPF Configuration (Score: 3 Pos)Configure OSPF on routers R2, R3, R4, R5, R6, Sw1 and Sw2.Configure OSPF on routers R2, R

22、3, R4, R5 and R6 and Sw1/Sw2 as indicatedgram #2. You may use anOSPF pros ID of your choice.（3） Do not create any additional areas orerfaunless specified.（4） Do not use the “ipf network po-to-multipo” or “ipf network broadcast”d on any FrameRelayerfaof R2, R4 and R5 in Area 0.（5） Ensure all OSPF中的。e

23、rfaare visible on all routers. 注意，IGP 的 loack 0 除了 R4 之外都是放在非 area 0（6） you should2.3 OSPF area 0all yy.yy.0.0 network and bb1 an bb3Loack 0 接口的分布情況R2-erface Loack0ipf network po-to-po!erfaerial1/15R3Loack 0Area 3SW1 Loack 0Area 3R6Loack 0Area 26R2Loack 0Area 4R5Loack 0Area 5R4Loack 0Area 0ip addres

24、s 12.12.245.2 255.255.255.0ipf priority 0!router ospf 1router-id 12.12.2.2network 12.12.2.2 0.0.0.0 area 4network 12.12.20.2 0.0.0.0 area 4network 12.12.26.2 0.0.0.0 area 26network 12.12.62.2 0.0.0.0 area 26network 12.12.245.2 0.0.0.0 area 0 area 26 virtual-link 12.12.6.6R3-erface Loack0ip address 1

25、2.12.3.3 255.255.255.0ipf network po-to-porouter ospf 1router-id 12.12.3.3network 12.12.3.3 0.0.0.0 area 3network 12.12.37.3 0.0.0.0 area 3R4-erface Loack0ipf network po-to-poerfaerial1/0ip address 12.12.245.4 255.255.255.0ipf priority 0 router ospf 1router-id 12.12.4.4redistribute connected subnets

26、 route-map bb2 network 12.12.4.4 0.0.0.0 area 0network 12.12.245.4 0.0.0.0 area 0route-map bb2 permit 10matcherface FastEthernet0/0R5:-erface Loack0ipf network po-to-porouter ospf 1router-id 12.12.5.5network 12.12.5.5 0.0.0.0 area 5network 12.12.50.5 0.0.0.0 area 5network 12.12.245.5 0.0.0.0 area 0n

27、eighbor 12.12.245.4neighbor 12.12.245.2R6-erface Loack0ipf network po-to-porouter ospf 16router-id 12.12.6.6network 12.12.6.6 0.0.0.0 area 26network 12.12.26.6 0.0.0.0 area 26network 12.12.62.6 0.0.0.0 area 26network 12.12.67.6 0.0.0.0 area 0area 26 virtual-link 12.12.2.2SW1-erface Loack0ipf network

28、 po-to-poerface vlan67ip address 12.12.67.7 255.255.255.0router ospf 1router-id 12.12.7.7network 12.12.7.7 0.0.0.0 area 3network 12.12.37.7 0.0.0.0 area 3network 12.12.67.7 0.0.0.0 area 02.4 AREA 26R2 S0/1 and r6 s0/0/1 and vlan_b on frame-relay segment ,configure sot it will conserve bandwith ospf

29、adjacency establishment time by avoiding DR select.R2:and shortererfaerial1/0ip address 12.12.26.2 255.255.255.0ipf network po-to-poipf flood reductionR6:erfaerial1/0ip address 12.12.26.6 255.255.255.0ipf network po-to-poipf flood reductionAREA 4config R2 sot only the default route generate by ospf

30、is injectR2:Router ospf 1Area 4 nssa no-summary no-redistributeAREA 5o area4. 這題說法很長(zhǎng)，總的下來就這么做config R5 sot it generate an ospf default route injecto area 5,the routing table of any ospf area5sernal routershould have the ospfR5 :Router ospf 1ra-area routes but not the ospf exeternal routes.Area 5 stu

31、b no-summary（或者做 Area 5 stub），問問考官吧。2.7 EIGRPYY 和 EIGRP 100（1） place vlan 100 in eigrp pros（2） Configure Eigrp AS yy as the routing protocol betn the switches，place router loack0 for sw2,SW3,SW4 in7eigrp yydont summarize subnetsplace bb3 net in eigrp 100the R6 eigrp 100 neighbor on bb3 ,will noSW1 :

32、router eigrp YYnetwork YY.YY.90.0 0.0.0.255no auto-summary SW2 :router eigrp YYnetwork YY.YY.8.0 0.0.0.255network YY.YY.90.0 0.0.0.255no auto-summary SW3 :router eigrp YYnetwork YY.YY.9.0 0.0.0.255network YY.YY.90.0 0.0.0.255no auto-summary SW4 :router eigrp YYnetwork YY.YY.10.0 0.0.0.255network YY.

33、YY.90.0 0.0.0.255no auto-summaryR6:router eigrp 100network 150.3.12.0 0.0.0.255no auto-summaryeigrp stub connected redistributedd eigrp query pathes to R6.do not summarize subnets2.8 RIP and Ospf redistribute（1） perform muntual redistribute betn rip and ospf.（2） consolidate all rip routes beging wit

34、h the 199.172 prefix on one route,not /16 prefix.（3） redistribute themo ospf,R1 adn R3 should still have on their routing table all 199.172s rip routesR3-router ospf 1sumddress 199.172.0.0 255.255.224.0（注意看好子網(wǎng)的掩碼）此處的子網(wǎng)掩碼自己計(jì)算。redistribute ripsubnets route-map fromRip metric-type 2 route-map fromRip p

35、ermit 10match ip address prefix-list RIP set metric-type type-1route-map fromRip permit 20 router ripredistribute ospf 1 metric 2 route-map denysum route-map denysum deny 10match ip address prefix-list sumroute-map denysum permit 208ip prefix-list RIP permit 199.172.0.0/19 le 32ip prefix-list RIP pe

36、rmit 150.100.1.0/24/*寫個(gè)范圍ip prefix-list sum permit 199.172.0.0/19掩碼自己計(jì)算，根據(jù)你進(jìn)來的匯總路由的掩碼。2.9 Eigrp YY and Ospf redistribute/*把 OSPF 生成的匯總 deny 掉（1） perform mutual redistribute betn eigrp and ospf（2） the routes 150.100.1.0 and consolidated 199.172 routes should not appearance SW2,SW3,SW4.do not use rout

37、e filter.SW1:Router eigrp 12he routing tables ofredistribute ospf 1 metric 10000 100 1 255 1500 matchRouter ospf 1Redistribute eigrp 12 subneternal external 22.10 eigrp 100 and ospf route summarization and redistribution（1） Redistribute bewteen ospf and eigrp 100 ,redistribute eigrp 100 routes 150.3

38、.12.0 and ( only use extend acl permiting)198.2.0.0 onlyo ospfredistribute ospf routes 12.12.6.0 and 12.12.9.0summaization all 198.2 prefix routes as one routeo eigrp 100,do not the distribuist（4） 做完之后將會(huì)從 bb3 收到 3 條路由 198.2.1.0，198.2.3.0，198.2.5.0。R6:Router ospf 1Redistribute eigrp 100 subnets route

39、-map frombb3sumddress 198.2.0.0 255.255.248.0 /具體匯總的詳細(xì)掩碼自己判斷 route-map frombb3 permit 10match ip address 100/*eto 的時(shí)候別忘匯總acacs-list 100 permit 198.2.1.0 0.0.6.255 host 255.255.255.0 /還是不要改動(dòng)。就這么做。s-list 100 permit host 150.3.12.0 host 255.255.255.0router eigrp 100Eigrp stubconnectredistributeredistri

40、bute ospf 1 metric 10000 100 255 1 1500 route-map tobb3 Route-map tobb3 permit 10Match address prefix tobb3ip prefix-list tobb3 seq 5 permit 12.12.90.0/24 ip prefix-list tobb3 seq 10 permit 12.12.6.0/24!注意：在 SW1 和 R3、R6 相連的接口上，將 OSPF 的 MTU 忽略掉，配置省略了。共 2 個(gè)接口要做。/*這題時(shí)候有回憶不讓 BB2 的路由重分部進(jìn)來，稍微注意下.但還是要看 BGP

41、 最后一問2.11 ipv6 addressR2 LoR4 LoR5 Loack 0 Serial 0/0ack 0 Serial 0/0 ack 0 Serial 0/0Use 3007: abc: def: /64 in addressR2 Serial 0/0 subnet id is 245erfa.,config eui address as host id.（6） 用 3007:ABC:DEF:ipv4 第三位:/64,這里后面是加 eui64,注意使用 10 進(jìn)制的地址轉(zhuǎn)換，大家要92.12 OSPF v3Dont change network types configure O

42、SPF v3 area 0R5 must be DRR2/R4/R5ipv6 unicast-routingerfa0/0ipv6 address 3007:ABC:DEF :245:/64 EUI-64ipv6 ospf 1 area 0（以下兩條語句只在 R5 上做）ipv6 ospf neighbor R2 和 R4 的 local-link 地址 /指向其余的兩個(gè)鄰居的 local-link 地址frame-relay map ipv6 其余的兩個(gè) local-link 地址（每個(gè)上面影射兩條）frame-relay map ipv6 其余的兩個(gè)全局 ipv6 地址（每個(gè)上面影射兩條）

43、R2erface loack 0ipv6 address 3007:ABC:DEF :2:/64 EUI-64ipv6 ospf network poipv6 ospf 1 area 0-poR4 :erface loack 0ipv6 address 3007:ABC:DEF :4:/64 EUI-64ipv6 ospf network poipv6 ospf 1 area 0-poR5 :erface loack 0ipv6 address 3007:ABC:DEF :5:/64 EUI-64ipv6 ospf network poipv6 ospf 1 area 0-po3IP EGP

44、Protocols3.1 BGP Configuration (Score: 3 Pos) Your network contains 1 autonomous system, AS YY. Configure BGP betn R1, R3, and R4.The BGP connections bet routers.Do NOT use route reflectors.n R1, R3 and R4 should be active as long as there is an active TCP/IP path betn these Ensure R3 contains BGP e

45、ntries in its routing table once all BGP questons are complete.大家，題目說了，在 BB1 和 BB2 的鄰居上要求做 bgp inbound soft inbound3.2 EBGP Configuration (Score: 2 Pos) Configure EBGP betn R4 and the external lab router on Backbone 2. The neighbor on Backbone 2 has an IP addressof 150.100.2.254 and is in Autonomous

46、 System 254. Configure EBGP betn R1 and the external lab router on Backbone 1. The neighbor on Backbone 1 has an IP addressof 150.100.1.254 and is in Autonomous System 254./*R4 過來的條目 AS-PATH 長(zhǎng)，R1 上來的 AS-PATH 短3.3 Route Reduction and Filtering The Backbone 2 router is advertising prefixes from 197.68

47、.X.0. ON R4, generate a minimum supernet addresstcontains all the 197.68.Z.0 prefixes(be as specificsible; the supernet should not include the entire 197.68.0.0/1610address space). Advertise thi pernet and the mor specific prefixes of 197.68.Z.0 to R1 and R3 不要作 summaryonly R1 and R3 musve the super

48、net poing to R4heir BGP routing tables.to 150.100.1.254 as the best next hop. Make sure 150.100.2.254 is On R1 and R3 the more specific routes should poternative valid next hop.R1router bgp 1no synchronization bgp router-id 12.12.1.1neighbor 12.12.4.4 remote-as 1 neighbor 12.12.4.4 update-source Lo

49、neighbor 4.4. 3.3 remote-as 1 neighbor 12.12.3.3 update-source Lo neighbor 150.12.1.254 remote-as 254neighbor 150.12.1.254 weight 30/*這題看一下.BB2 是否要重分部ack0ack0/*neighbor 150.12.1.254 soft-reconfigurationinboundno auto-summaryR3router bgp 1no synchronization bgp router-id 12.12.3.3neighbor 12.12.4.4 r

50、emote-as 1 neighbor 12.12.4.4 update-source Lo neighbor 12.12.1.1 remote-as 1 neighbor 12.12.1.1 update-source Lo neighbor 12.12.1.1 weight 30no auto-summaryR4router bgp 1no synchronization bgp router-id 12.12.4.4bgp log-neighbor-changesack0ack0/*aggregate-address 197.68.0.0 255.255.224.0 as-set adv

51、ertise-map from_bb2neighbor 12.12.1.1 remote-as 1neighbor 12.12.1.1 update-source Lo neighbor 12.12.1.1 next-hop-selfneighbor 12.12.3.3 remote-as 1 neighbor 12.12.3.3 update-source Lo neighbor 12.12.3.3 next-hop-selfneighbor 150.12.2.254 remote-as 254ack0ack0neighbor 150.12.2.254 soft-reconfiguratio

52、ninbound no auto-summaryroute-map from_bb2 permit 10match ip next-hop 10acs-list 10 permit host 150.12.2.2544Qos114.1 Congestion control (Score: 3 PoConfigure the R3 Frame Relay considering the following:s)erface for raimiting by configuring the parameters CIR, Bc and MINCIR,Your um througput is 128

53、kbpsDuring congestion, your provider will mark any traffic in exs of 48kbps as discard eligible, Make sure yourthroughphanges accordingly, based upons received, only. Your token bucketerval is 125 ms1秒=1000毫秒(ms)BC=TC*CIR0.125*128000 Use a “map-class” to apply this feature to all PVCs.R3：erfaerial0/

54、0frame-relay class FRTS frame-relay traffic-shamap-class frame-relay FRTS frame-relay cir 128000frame-relay mincir 48000frame-relay bc 16000 frame-relay adaptive-shaCIR(Committed Information Rate)(單位: Bits Per Second) Bc(Committed Burst)(單位: Bytes)Tc(Committed Timeerval)(單位: Seconds)4.2 Traffic Clas

55、sification onr-Port Per-VLAN Basis Using Class Maps (Score: 2 Pos) Sw1-Fa0/8 is assigned to VLAN_B./*此題不考 Mark all packets on VLAN_B with cirtical IP precedence.SW1：Ip cef mls qosclass-map match-any trafficmatch acs-group name trafficclass-map match-all vlanb match vlan62match class-map trafficip ac

56、s-list stand trafficpermit YY.YY.62.0 0.0.0.127! licy-map set_pre class vlanbset ip precedence 5erface FastEthernet0/8switchport acs vlan 62switchport mode acsservice-policy input set_prepo4.3 Classification and Policing (Score: 2 Pos)，此題目現(xiàn)在已經(jīng)不考了，要看題目。ON R2-Fa0/1, mark alling traffic up to 128 Kbps

57、with IP Precedence of 3 and all traffic exceeding 128 Kbps with12an IP Precedence of 2. You can not use the “raip cefclass-map match-all vlan20imit”d.match input-erface F0/1policy-map rate_limit class vlan20cir 128000conform-action set-prec-transmit 3exceed-action set-prec-transmit 2ip acs-list stan

58、dard vlan20permit 12.12.20.0 0.0.0.255erface F0/1service-policy input rate_limit4.4 Congestion Management (Score: 3 Pos) On R2 make sure all traffic leaving Fa0/0 set with IP Precedence 3 AND/OR(題目里可能只剩下 OR 了) traffic fromVLAN_C(yy.yy.22.0) destined to VLAN_BB1 has a guaranteed minimum bandwidth of

59、128000bps. Make sure, in caseof congestion,t these packets get dropped randomly./*此句話不一定有，關(guān)于 randomdetectLimit all traffic leaving R2 Fa0/0 with IP Precedence 2 to 128000bps. Do NOT use policing or raDo not use an ACL to match on IP Precedence. ，use mqc .出現(xiàn) guaranteed 就用bandwitchR2:-ip cefimiting.cl

60、ass-map match-any pre3_vlan20tobb1matchprecedence 3/*特別注意！match acs-group name vlan20tobb1class-map match-all pre2 match ip precedence 2!policy-map cbwfqclass pre3_vlan20tobb1 bandwidth 128 random-detectclass pre2/*shaverage 128000/*average 是平均值,peak 是峰值erface F0/0/(此處大家注意是否在這個(gè)接口上或者是 F0/1 接口)service