jfreoialjfiqofiqo

1. FRAME RELAY (2points)jfreoialjfiqofiqo  jfreoialjfiqofiqoRequires R15 to telnet to R13 and R14 loopbacksjfreoialjfiqofiqo※SubInt無い版jfreoialjfiqofiqojfreoialjfiqofiqoR13jfreoialjfiqofiqojfreoialjfiqofiqointerface Serial0/0jfreoialjfiqofiqoip address 172.16.13.2 255.255.255.252jfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip ospf network point-to-pointjfreoialjfiqofiqoip ospf priority 255jfreoialjfiqofiqoserial restart-delay 0jfreoialjfiqofiqono snmp trap link-statusjfreoialjfiqofiqono fair-queuejfreoialjfiqofiqoframe-relay map ip 172.16.13.1 341jfreoialjfiqofiqoframe-relay map ip 172.16.13.3 345jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqojfreoialjfiqofiqoR14jfreoialjfiqofiqojfreoialjfiqofiqointerface Serial0/0jfreoialjfiqofiqoip address 172.16.13.3 255.255.255.252jfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip ospf network point-to-pointtjfreoialjfiqofiqoserial restart-delay 0jfreoialjfiqofiqono fair-queuejfreoialjfiqofiqoframe-relay lmi-type ansijfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR15jfreoialjfiqofiqojfreoialjfiqofiqointerface Serial1/0jfreoialjfiqofiqoip address 172.16.13.1 255.255.255.252jfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip ospf network point-to-pointjfreoialjfiqofiqoserial restart-delay 0jfreoialjfiqofiqono fair-queuejfreoialjfiqofiqoframe-relay lmi-type ansijfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo2. HRSP (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoEnsure the output of "show standby" on R22 and R23 is the same as shown belowjfreoialjfiqofiqojfreoialjfiqofiqoR22 being the active unit with a priority configured of 100 (not by default), and also a track 1 configured and up, with a decrement value of 60.jfreoialjfiqofiqoR23 is the standby unit, using the default priority value (100), no authentication, with preempt, track 1 configured and up, with a decrement value of 60.jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoInitial Configs ()jfreoialjfiqofiqoR22jfreoialjfiqofiqotrack 1 ip route 0.0.0.0 0.0.0.0 reachability→R13へjfreoialjfiqofiqotrack 1 ip route 1.1.70.0 255.255.255.0 reachability→R21へjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.10.10 255.255.255.248jfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqostandby 1 ip 172.16.10.14jfreoialjfiqofiqostandby 1 priority 150jfreoialjfiqofiqostandby 1 preemptjfreoialjfiqofiqostandby 1 track 1 shutdownjfreoialjfiqofiqojfreoialjfiqofiqoR23jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.10.11 255.255.255.248jfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqostandby 1 ip 172.16.10.14jfreoialjfiqofiqostandby 1 priority 150jfreoialjfiqofiqostandby 1 track 1 shutdownjfreoialjfiqofiqostandby 1 preemptjfreoialjfiqofiqostandby 1 authentication md5 key-string ciscojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR21(1.1.70.0/24 だった場合)jfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqoredistribute ospf 1 route-map PREFIXjfreoialjfiqofiqonetwork 172.16.10.22 0.0.0.0jfreoialjfiqofiqonetwork 172.16.10.26 0.0.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqoroute-map PREFIX permit 10jfreoialjfiqofiqomatch ip address 1jfreoialjfiqofiqo!jfreoialjfiqofiqoaccess-list 1 permit 10.0.0.0 0.255.255.255jfreoialjfiqofiqoaccess-list 1 permit 172.16.0.0 0.0.255.255jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR13(DefaultRouteだった場合)jfreoialjfiqofiqo!jfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqo log-adjacency-changesjfreoialjfiqofiqo area 1 nssajfreoialjfiqofiqo network 10.1.1.13 0.0.0.0 area 0jfreoialjfiqofiqo network 172.16.13.2 0.0.0.0 area 1jfreoialjfiqofiqo network 172.16.14.42 0.0.0.0 area 0jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo3. NTP (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR13 NTP cannot synchronize with R5, Fix itjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoInitial Configs ()jfreoialjfiqofiqoR5jfreoialjfiqofiqontp authentication-key 1 md5 030758020337jfreoialjfiqofiqontp master 2jfreoialjfiqofiqojfreoialjfiqofiqoR13jfreoialjfiqofiqojfreoialjfiqofiqontp authentication-key 1 md5 ciscojfreoialjfiqofiqontp server 10.1.1.5 key 1jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR9jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.14.1 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip igmp access-group 10jfreoialjfiqofiqoip access-group deny_udp injfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqoip access-list extended deny_udpjfreoialjfiqofiqodeny udp any any eq ntpjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR11jfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.14.34 255.255.255.248jfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqoip access-group deny_udp injfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqoip access-list extended deny_udpjfreoialjfiqofiqodeny udp any any eq ntpjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoSummary of issuesjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR5/R13#show ntp association detail <--should be synchronized and sanejfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo4. PPP/RIP (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR24 cannot ping R29 192.168.20.1, Fix itjfreoialjfiqofiqojfreoialjfiqofiqoInitial Configs ()jfreoialjfiqofiqoR25jfreoialjfiqofiqoservice password-encryptionjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqointerface Serial1/0 ---> connecting to R29jfreoialjfiqofiqoip address 172.16.9.1 255.255.255.248jfreoialjfiqofiqoencapsulation pppjfreoialjfiqofiqoserial restart-delay 0jfreoialjfiqofiqono fair-queuejfreoialjfiqofiqoppp authentication chapjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqoredistribute rip metric 100000 100 255 1 1500jfreoialjfiqofiqonetwork 10.1.1.25 0.0.0.0jfreoialjfiqofiqonetwork 172.16.10.77 0.0.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqorouter ripjfreoialjfiqofiqoversion 1jfreoialjfiqofiqonetwork 172.16.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR29jfreoialjfiqofiqono service password-encryptionjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback1jfreoialjfiqofiqoip address 192.168.20.1 255.255.255.255jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Serial1/0jfreoialjfiqofiqoip address 172.16.9.2 255.255.255.248jfreoialjfiqofiqoencapsulation pppjfreoialjfiqofiqoserial restart-delay 0jfreoialjfiqofiqono fair-queuejfreoialjfiqofiqoppp chap hostname cciejfreoialjfiqofiqoppp chap password 0 ciscojfreoialjfiqofiqo!jfreoialjfiqofiqorouter ripjfreoialjfiqofiqoversion 2jfreoialjfiqofiqonetwork 172.16.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR25/R29#show ip interface brief <--serial1/0 should be upjfreoialjfiqofiqoR25#show ip route <--should see the network 192.168.20.0jfreoialjfiqofiqoR24#telnet 192.168.20.1jfreoialjfiqofiqoopen...jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo5. OSPF (3 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoPC 10.1.1.20 on R20 cannot ping PC 10.1.1.28 on R28, Fix itjfreoialjfiqofiqojfreoialjfiqofiqoInitial Configs ()jfreoialjfiqofiqoR18jfreoialjfiqofiqojfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqorouter-id 10.1.1.18jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqoarea 3 virtual-link 10.1.1.16 authentication message-digestjfreoialjfiqofiqoarea 3 virtual-link 10.1.1.16 message-digest-key 1 md5 ciscojfreoialjfiqofiqonetwork 10.1.1.18 0.0.0.0 area 0jfreoialjfiqofiqonetwork 10.10.10.1 0.0.0.0 area 0jfreoialjfiqofiqonetwork 172.16.12.6 0.0.0.0 area 3jfreoialjfiqofiqo!jfreoialjfiqofiqoip route X.X.X.X 0.0.0.X.172.16.12.5 --->pointing toward R17jfreoialjfiqofiqojfreoialjfiqofiqoR17jfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.12.5 255.255.255.252jfreoialjfiqofiqoip access-group 111 injfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.12.2 255.255.255.252jfreoialjfiqofiqoip ospf network point-to-pointjfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoip access-list extended 111jfreoialjfiqofiqo  deny icmp any anyjfreoialjfiqofiqo  permit udp any anyjfreoialjfiqofiqo  permit ospf any anyjfreoialjfiqofiqo  permit tcp any anyjfreoialjfiqofiqo!jfreoialjfiqofiqoip route X.X.X.X 0.0.0.X 172.16.12.6 --->pointing toward R18jfreoialjfiqofiqojfreoialjfiqofiqoR16jfreoialjfiqofiqointerface Ethernet2/0 ---> facing R17jfreoialjfiqofiqoip address 172.16.12.1 255.255.255.252jfreoialjfiqofiqoip ospf network broadcastjfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqorouter-id 10.1.1.16jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqoarea 3 virtual-link 10.1.1.18 authentication message-digestjfreoialjfiqofiqoarea 3 virtual-link 10.1.1.18 message-digest-key 1 md5 cisc0jfreoialjfiqofiqonetwork 10.1.1.16 0.0.0.0 area 3jfreoialjfiqofiqonetwork 172.16.12.1 0.0.0.0 area 3jfreoialjfiqofiqonetwork 172.32.10.2 0.0.0.0 area 1jfreoialjfiqofiqodistribute-list 12 in e1/0jfreoialjfiqofiqojfreoialjfiqofiqoR8jfreoialjfiqofiqojfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqoredistribute ospf 1 metric 100000 100 255 1 1500jfreoialjfiqofiqonetwork 10.1.1.8 0.0.0.0jfreoialjfiqofiqonetwork 172.16.16.21 0.0.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqoredistribute eigrp 200 subnetsjfreoialjfiqofiqonetwork 172.32.10.1 0.0.0.0 area 1jfreoialjfiqofiqo!jfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.8 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.6 remote-as 200jfreoialjfiqofiqoneighbor 10.1.1.6 password ciscojfreoialjfiqofiqoneighbor 10.1.1.6 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.6 route-reflector-clientjfreoialjfiqofiqoneighbor 10.1.1.6 next-hop-selfjfreoialjfiqofiqoneighbor 197.68.3.2 remote-as 300jfreoialjfiqofiqoredistribute ospf 1jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqoR27jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqonetwork 10.1.1.27 0.0.0.0 area 0jfreoialjfiqofiqonetwork 172.16.17.9 0.0.0.0 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqorouter bgp 300jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqobgp default local-preference 200jfreoialjfiqofiqonetwork 10.1.1.27 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.28 remote-as 300jfreoialjfiqofiqoneighbor 10.1.1.28 update-source Loopback0jfreoialjfiqofiqoneighbor 197.68.3.1 remote-as 200jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo6. ZBFW (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR30 cannot telnet R31, fix itjfreoialjfiqofiqoR30#telnet 10.1.1.31jfreoialjfiqofiqoTrying open 10.1.1.31jfreoialjfiqofiqoUser verificationjfreoialjfiqofiqo..... jfreoialjfiqofiqo--> Should match the given "show policy‐map type inspect zone-pair sessions" output.  R31 is in outside zone, R30 was in inside zone.jfreoialjfiqofiqojfreoialjfiqofiqoInitial Configs ()jfreoialjfiqofiqoR29jfreoialjfiqofiqoclass-map type inspect match-all telneticmpjfreoialjfiqofiqomatch protocol telnetjfreoialjfiqofiqomatch protocol icmpjfreoialjfiqofiqoclass-map type inspect match-all httpjfreoialjfiqofiqomatch protocol httpjfreoialjfiqofiqoclass-map type inspect match-all outboundjfreoialjfiqofiqomatch access-group name from R30toR31jfreoialjfiqofiqo!jfreoialjfiqofiqo!jfreoialjfiqofiqopolicy-map type inspect outboundjfreoialjfiqofiqoclass type inspect outboundjfreoialjfiqofiqo  inspectjfreoialjfiqofiqopolicy-map type inspect inboundjfreoialjfiqofiqoclass type inspect telneticmpjfreoialjfiqofiqo  inspectjfreoialjfiqofiqoclass type inspect httpjfreoialjfiqofiqo  inspectjfreoialjfiqofiqo!jfreoialjfiqofiqozone security zoneinjfreoialjfiqofiqozone security zoneoutjfreoialjfiqofiqo!jfreoialjfiqofiqo!jfreoialjfiqofiqo!jfreoialjfiqofiqo!jfreoialjfiqofiqo!jfreoialjfiqofiqozone-pair security inbound source zoneout destination zoneinjfreoialjfiqofiqozone-pair security outbound source zonein destination zoneoutjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet2/0<-- to R30jfreoialjfiqofiqoip address 172.16.39.29 255.255.255.248jfreoialjfiqofiqono shutdownjfreoialjfiqofiqozone-member security zoneoutjfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet2/1 <-- to R31jfreoialjfiqofiqoip address 172.16.129.29 255.255.255.248jfreoialjfiqofiqono shutdownjfreoialjfiqofiqozone-member security zoneinjfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqoip access-list extended R30toR31jfreoialjfiqofiqopermit ip host 172.16.39.30 host 10.1.1.31jfreoialjfiqofiqopermit ip host 10.1.1.30 host 10.1.1.31jfreoialjfiqofiqopermit ip host 10.1.1.30 host 172.16.129.31jfreoialjfiqofiqopermit ip host 172.16.39.30 host 172.16.129.31jfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqorouter ripjfreoialjfiqofiqoversion 2jfreoialjfiqofiqonetwork 172.16.0.0jfreoialjfiqofiqonetwork 192.168.20.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqoR30jfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.30 255.255.255.255jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.39.30 255.255.255.248jfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqono shutdownjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqoR31jfreoialjfiqofiqojfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.31 255.255.255.255jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.129.31 255.255.255.248jfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqono shutdownjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo7. BGP (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR28 must see two next hop for the network 1.100.100.100 in show ip bgp tablejfreoialjfiqofiqo R28 must see 2 paths in BGP tableｷ・
 R28 must select path through R26ｷ・
 Not allowed to touch AS100ｷ・& 300 configuration (variable depending on the Lab)jfreoialjfiqofiqojfreoialjfiqofiqoInitial Configs ()jfreoialjfiqofiqoR6jfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.6 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.2 remote-as 200jfreoialjfiqofiqoneighbor 10.1.1.2 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.2 route-reflector-clientjfreoialjfiqofiqoneighbor 10.1.1.7 remote-as 200jfreoialjfiqofiqoneighbor 10.1.1.7 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.7 route-reflector-clientjfreoialjfiqofiqoneighbor 10.1.1.8 remote-as 200jfreoialjfiqofiqoneighbor 10.1.1.8 update-source Loopback0 jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR7jfreoialjfiqofiqojfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqosynchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.7 mask 255.255.255.255jfreoialjfiqofiqobgp maxas-limit 1jfreoialjfiqofiqoneighbor 10.1.1.6 remote-as 200jfreoialjfiqofiqoneighbor 10.1.1.6 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.6 route-reflector-clientjfreoialjfiqofiqoneighbor 10.1.1.6 next-hop-selfjfreoialjfiqofiqoneighbor 197.68.2.2 remote-as 300jfreoialjfiqofiqoneighbor 197.68.2.2 route-map toas300 outjfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqoroute-map toas300 permit 10jfreoialjfiqofiqomatch ip address toas300jfreoialjfiqofiqoset metric 99jfreoialjfiqofiqo!jfreoialjfiqofiqoip access-list extended toas300jfreoialjfiqofiqopermit ip any anyjfreoialjfiqofiqojfreoialjfiqofiqoR8jfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.8 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.6 remote-as 200jfreoialjfiqofiqoneighbor 10.1.1.6 password cisc0jfreoialjfiqofiqoneighbor 10.1.1.6 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.6 next-hop-selfjfreoialjfiqofiqoneighbor 197.68.3.2 remote-as 300jfreoialjfiqofiqoneighbor 197.68.3.2 route-map toas300 outjfreoialjfiqofiqoredistribute ospf 1jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqoroute-map toas300 permit 10jfreoialjfiqofiqomatch ip address toas300jfreoialjfiqofiqo!jfreoialjfiqofiqoip access-list extended toas300jfreoialjfiqofiqopermit ip any anyjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR26jfreoialjfiqofiqorouter bgp 300jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.26 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.28 remote-as 300jfreoialjfiqofiqoneighbor 10.1.1.28 update-source Loopback0jfreoialjfiqofiqoneighbor 197.68.2.1 remote-as 200jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR27jfreoialjfiqofiqorouter bgp 300jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.27 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.28 remote-as 300jfreoialjfiqofiqoneighbor 10.1.1.28 update-source Loopback0jfreoialjfiqofiqoneighbor 197.68.3.1 remote-as 200jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqoSummary of issuesjfreoialjfiqofiqojfreoialjfiqofiqoa. R7/R8 Metric (MED) mismatch <-- Make sure R7 and R8 have the same MED value to their neighbor R26 and R27.jfreoialjfiqofiqob. R7 Synchronization enabled <-- disable it "no synchronization"jfreoialjfiqofiqoc. R7 maxas-limit enabled <-- remove that commandjfreoialjfiqofiqod. R7/R8 BGP local-preference mismatch <-- Make sure they have the same value.jfreoialjfiqofiqoe. R6 missing route-reflector-client command to neighbor R8 <-- put that commandjfreoialjfiqofiqoOthers possible issues being reported:jfreoialjfiqofiqo- R26 next-hop-self command missing (if permission is not restricted to touch AS 300)jfreoialjfiqofiqo- R6/R6 BGP password mismatchjfreoialjfiqofiqo- R26/R27 bgp local-preference value mismatchjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR28# sh ip bgp 1.100.100.100 <-- should see two possible next hops R26 & R2R with R26 being the preferred next hopjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo8. IPv6 (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR1 can not telnet R4 IPv6 address 2011:ABC:34::4, fix the problemjfreoialjfiqofiqojfreoialjfiqofiqoNote: Not allowed to delete any configuration!jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoInitial Configs ()jfreoialjfiqofiqoR1jfreoialjfiqofiqoipv6 unicast-routingjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback1jfreoialjfiqofiqo ip address 10.1.1.1 255.255.255.255jfreoialjfiqofiqo ip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.15.1 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:13::1/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqoipv6 router ospf 1jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqorouter-id 10.1.1.4jfreoialjfiqofiqojfreoialjfiqofiqoR3jfreoialjfiqofiqoipv6 unicast-routingjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.15.9 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:34::3/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.15.2 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:13::3/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqoipv6 traffic-filter filter injfreoialjfiqofiqo!jfreoialjfiqofiqoipv6 access-list filterjfreoialjfiqofiqodeny ipv6 any any routingjfreoialjfiqofiqojfreoialjfiqofiqoR4jfreoialjfiqofiqoipv6 unicast-routingjfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.15.10 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:34::4/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqoipv6 router ospf 1jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqojfreoialjfiqofiqoSummary of issuesjfreoialjfiqofiqojfreoialjfiqofiqoa. R3 ACL Blocking Ipv6 traffic <-- should add explicit rules for link‐local addressesjfreoialjfiqofiqoipv6 access-list filterjfreoialjfiqofiqojfreoialjfiqofiqopermit 89 any host FF02::5 seq 1  <-- OSPFv3 Multicast dest IPjfreoialjfiqofiqopermit 89 any host FF02::6 seq 2jfreoialjfiqofiqopermit 89 host <R1 link local> host <R3 link local> seq 3jfreoialjfiqofiqopermit icmp any any seq 4jfreoialjfiqofiqodeny ipv6 any any (by default seq 10) <-- don't touchjfreoialjfiqofiqob. R1/R4 Duplicate router-id <-- make sure R1 router-id is set to its Loopback1 IPjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR1# ping 2011:ABC:34::4jfreoialjfiqofiqojfreoialjfiqofiqo9. MST (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR10 must reach R9 in a single hop, SW1 (or SW2) is not allowed to be touchedjfreoialjfiqofiqoSW1jfreoialjfiqofiqohostname  SW1jfreoialjfiqofiqono aaa new-modeljfreoialjfiqofiqoclock timezone CSRT 8jfreoialjfiqofiqo!jfreoialjfiqofiqoip cefjfreoialjfiqofiqo!jfreoialjfiqofiqono ipv6 cefjfreoialjfiqofiqo!jfreoialjfiqofiqospanning-tree mode mstjfreoialjfiqofiqospanning-tree extended system-idjfreoialjfiqofiqo!jfreoialjfiqofiqospanning-tree mst configurationjfreoialjfiqofiqoname ciscojfreoialjfiqofiqoinstance 1 vlan 102,119jfreoialjfiqofiqoinstance 2 vlan 109,129jfreoialjfiqofiqo!jfreoialjfiqofiqospanning-tree mst 2 priority 0jfreoialjfiqofiqovlan internal allocation policy ascendeingjfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/0jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 102jfreoialjfiqofiqoswi mode acce jfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/1jfreoialjfiqofiqoswi jfreoialjfiqofiqoshutdownjfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/2jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 129jfreoialjfiqofiqoswi mode accejfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/3jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 109jfreoialjfiqofiqoswi mode accejfreoialjfiqofiqo!jfreoialjfiqofiqoint e1/0jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 102jfreoialjfiqofiqoswi mode accejfreoialjfiqofiqo!jfreoialjfiqofiqoint e1/1jfreoialjfiqofiqoswi jfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint 1/2jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 110jfreoialjfiqofiqoswi mode accejfreoialjfiqofiqo!jfreoialjfiqofiqoint e1/3jfreoialjfiqofiqoswijfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/0jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi trunk encapsualtion dot1qjfreoialjfiqofiqoswi mode trunkjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/1jfreoialjfiqofiqoswijfreoialjfiqofiqoswi trunk enc dot1qjfreoialjfiqofiqoswi mode trunkjfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/2jfreoialjfiqofiqoswijfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/3jfreoialjfiqofiqoswijfreoialjfiqofiqoshutjfreoialjfiqofiqojfreoialjfiqofiqoSW2jfreoialjfiqofiqohostname  SW2jfreoialjfiqofiqono aaa new-modeljfreoialjfiqofiqoclock timezone CSRT 8jfreoialjfiqofiqo!jfreoialjfiqofiqoip cefjfreoialjfiqofiqo!jfreoialjfiqofiqono ipv6 cefjfreoialjfiqofiqo!jfreoialjfiqofiqospanning-tree mode mstjfreoialjfiqofiqospanning-tree extended system-idjfreoialjfiqofiqo!jfreoialjfiqofiqospanning-tree mst configurationjfreoialjfiqofiqoname ciscojfreoialjfiqofiqoinstance 1 vlan 102,119jfreoialjfiqofiqoinstance 2 vlan 109,129jfreoialjfiqofiqo!jfreoialjfiqofiqospanning-tree mst 2 priority 24576jfreoialjfiqofiqovlan internal allocation policy ascendeingjfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/0jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 110jfreoialjfiqofiqoswi mode acce jfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/1jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 109jfreoialjfiqofiqoswi mode accejfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/2jfreoialjfiqofiqoswi jfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e0/3jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 119jfreoialjfiqofiqoswi mode accjfreoialjfiqofiqo!jfreoialjfiqofiqoint e1/0jfreoialjfiqofiqoswi jfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e1/1jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 129jfreoialjfiqofiqoswi mode acccejfreoialjfiqofiqo!jfreoialjfiqofiqoint 1/2jfreoialjfiqofiqoswi jfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e1/3jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi acce vlan 119jfreoialjfiqofiqoswi mode accessjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/0jfreoialjfiqofiqoswi jfreoialjfiqofiqoswi trunk encapsualtion dot1qjfreoialjfiqofiqoswi mode trunkjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/1jfreoialjfiqofiqoswijfreoialjfiqofiqoswi trunk enc dot1qjfreoialjfiqofiqoswi mode trunkjfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/2jfreoialjfiqofiqoswijfreoialjfiqofiqoshutjfreoialjfiqofiqo!jfreoialjfiqofiqoint e2/3jfreoialjfiqofiqoswijfreoialjfiqofiqoshutjfreoialjfiqofiqojfreoialjfiqofiqoR9jfreoialjfiqofiqoversion 12.4jfreoialjfiqofiqoservice timestamps debug datetime msecjfreoialjfiqofiqoservice timestamps log datetime msecjfreoialjfiqofiqono service password-encryptionjfreoialjfiqofiqo!jfreoialjfiqofiqohostname R9jfreoialjfiqofiqo!jfreoialjfiqofiqoboot-start-markerjfreoialjfiqofiqoboot-end-markerjfreoialjfiqofiqo!jfreoialjfiqofiqoenable password ciscojfreoialjfiqofiqo!jfreoialjfiqofiqono aaa new-modeljfreoialjfiqofiqomemory-size iomem 5jfreoialjfiqofiqo!jfreoialjfiqofiqoip cefjfreoialjfiqofiqono ip domain lookupjfreoialjfiqofiqo!jfreoialjfiqofiqoip multicast-routing jfreoialjfiqofiqo!jfreoialjfiqofiqomultilink bundle-name authenticatedjfreoialjfiqofiqo!jfreoialjfiqofiqoarchivejfreoialjfiqofiqo log configjfreoialjfiqofiqo  hidekeysjfreoialjfiqofiqo! jfreoialjfiqofiqo!jfreoialjfiqofiqovlan internal allocation policy ascendingjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqo ip address 10.1.1.9 255.255.255.255jfreoialjfiqofiqo ip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet0/0jfreoialjfiqofiqo ip address 172.16.14.1 255.255.255.248jfreoialjfiqofiqo ip pim sparse-dense-modejfreoialjfiqofiqo ip ospf authentication message-digestjfreoialjfiqofiqo ip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqo duplex autojfreoialjfiqofiqo speed autojfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet0/1jfreoialjfiqofiqo no ip addressjfreoialjfiqofiqo shutdownjfreoialjfiqofiqo duplex autojfreoialjfiqofiqo speed autojfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/0jfreoialjfiqofiqo no switchportjfreoialjfiqofiqo ip address 172.16.14.33 255.255.255.248jfreoialjfiqofiqo ip pim sparse-dense-modejfreoialjfiqofiqo ip ospf authentication message-digestjfreoialjfiqofiqo ip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqo ip igmp access-group 10jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/1jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/2jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/3jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/4jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/5jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/6jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/7jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/8jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/9jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/10jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/11jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/12jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/13jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/14jfreoialjfiqofiqo!jfreoialjfiqofiqointerface FastEthernet1/15jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Vlan1jfreoialjfiqofiqo no ip addressjfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqo log-adjacency-changesjfreoialjfiqofiqo network 10.1.1.9 0.0.0.0 area 0jfreoialjfiqofiqo network 172.16.14.1 0.0.0.0 area 0jfreoialjfiqofiqo network 172.16.14.33 0.0.0.0 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqono ip http serverjfreoialjfiqofiqono ip http secure-serverjfreoialjfiqofiqoip forward-protocol ndjfreoialjfiqofiqo!jfreoialjfiqofiqoip pim rp-address 10.1.1.3jfreoialjfiqofiqo!jfreoialjfiqofiqoaccess-list 10 deny   10.1.1.3jfreoialjfiqofiqo!jfreoialjfiqofiqocontrol-planejfreoialjfiqofiqo!jfreoialjfiqofiqoline con 0jfreoialjfiqofiqo exec-timeout 0 0jfreoialjfiqofiqo password ciscojfreoialjfiqofiqo logging synchronousjfreoialjfiqofiqo stopbits 1jfreoialjfiqofiqoline aux 0jfreoialjfiqofiqo stopbits 1jfreoialjfiqofiqoline vty 0 4jfreoialjfiqofiqo exec-timeout 0 0jfreoialjfiqofiqo password ciscojfreoialjfiqofiqo logging synchronousjfreoialjfiqofiqo loginjfreoialjfiqofiqo!jfreoialjfiqofiqoendjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoNote: This question has 02 completely different requirements depending on the Lab. On Some Lab, you are required to not SW1 and on some you are required to not touched SW2.jfreoialjfiqofiqojfreoialjfiqofiqoa. Vlan R9-R10 is blocked on the trunk1 and allowed on trunk2. But trunk2 is in spanning blocking state for MSTX (which contains) Vlan R9-R10. Which make the link between R9-R10 being down <-- Just lower the port-priority on trunk2 so it can became the forwarding port or raise the port-priority on trunk1 son trunk2 can be preferred.jfreoialjfiqofiqointerface ex/yjfreoialjfiqofiqo  spanning-tree mst x port-priority 0jfreoialjfiqofiqoNote: The switch denied to be touched is the root for the mst containing the vlan between R9-R10jfreoialjfiqofiqob. R9 Exiting route-map dropping some traffic <-- the  route map selects certain traffic and has an explicit deny. Put another route‐map with the permit statementjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo10. MSDP (3 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR13 cannot ping R28 group 224.8.8.8 in AS 200, Fix itjfreoialjfiqofiqojfreoialjfiqofiqo(R8->R6->R2)->(R1->R3->R5)->R9->R11->R13jfreoialjfiqofiqoAS200 AS100jfreoialjfiqofiqojfreoialjfiqofiqoR8jfreoialjfiqofiqoip multicast-routingjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.8 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqoip igmp join-group 224.8.8.8jfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.16.21 255.255.255.248jfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqoredistribute ospf 1 metric 100000 100 255 1 1500jfreoialjfiqofiqoredistribute bgp 200 metric 100000 100 255 1 1500jfreoialjfiqofiqonetwork 10.1.1.8 0.0.0.0jfreoialjfiqofiqonetwork 172.16.16.21 0.0.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqoip pim rp-address 10.1.1.2jfreoialjfiqofiqojfreoialjfiqofiqoR6jfreoialjfiqofiqoip multicast-routingjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.6 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.16.19 255.255.255.248jfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.16.2 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqonetwork 10.1.1.6 0.0.0.0jfreoialjfiqofiqonetwork 172.16.16.2 0.0.0.0jfreoialjfiqofiqonetwork 172.16.16.19 0.0.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqoR2jfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.2 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback1jfreoialjfiqofiqoip address 200.0.0.1 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 197.68.1.2 255.255.255.252jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:12::2/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.16.1 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqonetwork 10.1.1.2 0.0.0.0jfreoialjfiqofiqonetwork 172.16.16.1 0.0.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.1 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.6 remote-as 200jfreoialjfiqofiqoneighbor 10.1.1.6 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.6 next-hop-selfjfreoialjfiqofiqoneighbor 197.68.1.1 remote-as 100jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqoaddress-family ipv4 unicastjfreoialjfiqofiqo  no synchronizationjfreoialjfiqofiqo  network 10.1.1.2 mask 255.255.255.255jfreoialjfiqofiqo  redistribute eigrp 200jfreoialjfiqofiqo  neighbor 10.1.1.6 activatejfreoialjfiqofiqo  neighbor 10.1.1.6 next-hop-selfjfreoialjfiqofiqo  neighbor 197.68.1.1 activatejfreoialjfiqofiqo  exit-address-familyjfreoialjfiqofiqo!jfreoialjfiqofiqoaddress-family  ipv4 multicast  jfreoialjfiqofiqo  network 200.0.0.1 mask 255.255.255.255jfreoialjfiqofiqo  neighbor 197.68.1.1 activatejfreoialjfiqofiqo  no auto-summaryjfreoialjfiqofiqo  exit-address-familyjfreoialjfiqofiqo!jfreoialjfiqofiqoip msdp peer 10.1.1.3 connect-source Loopback1 remote-as 100jfreoialjfiqofiqo!jfreoialjfiqofiqoip pim rp-address 10.1.1.2jfreoialjfiqofiqojfreoialjfiqofiqoR1jfreoialjfiqofiqojfreoialjfiqofiqoip multicast-routingjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.1 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 197.68.1.1 255.255.255.252jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:12::1/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.15.1 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:13::1/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqonetwork 10.1.1.1 0.0.0.0 area 3jfreoialjfiqofiqonetwork 172.16.15.1 0.0.0.0 area 3jfreoialjfiqofiqo!jfreoialjfiqofiqorouter bgp 100jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 1.100.100.100 mask 255.255.255.255jfreoialjfiqofiqonetwork 10.1.1.1 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.3 remote-as 100jfreoialjfiqofiqoneighbor 10.1.1.3 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.3 next-hop-selfjfreoialjfiqofiqoneighbor 197.68.1.2 remote-as 200jfreoialjfiqofiqoneighbor 197.68.1.2 route-map as100 outjfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqoaddress-family ipv4 unicastjfreoialjfiqofiqo  no synchronizationjfreoialjfiqofiqo  neighbor 10.1.1.3 activatejfreoialjfiqofiqo  neighbor 10.1.1.3 next-hop-selfjfreoialjfiqofiqo  neighbor 197.68.1.2 activatejfreoialjfiqofiqo  exit-address-familyjfreoialjfiqofiqo!jfreoialjfiqofiqoaddress-family  ipv4 multicastjfreoialjfiqofiqo  neighbor 10.1.1.3 activatejfreoialjfiqofiqo  no auto-summaryjfreoialjfiqofiqo  exit-address-familyjfreoialjfiqofiqojfreoialjfiqofiqoip pim rp-address 10.1.1.3jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR3jfreoialjfiqofiqoip multicast-routingjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.3 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqointerface Loopback1jfreoialjfiqofiqoip address 200.0.0.3 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.15.9 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:34::3/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.15.2 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqoipv6 address 2011:ABC:13::3/64jfreoialjfiqofiqoipv6 ospf 1 area 0jfreoialjfiqofiqoipv6 traffic-filter filter injfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqolog-adjacency-changesjfreoialjfiqofiqonetwork 10.1.1.3 0.0.0.0 area 3jfreoialjfiqofiqonetwork 172.16.15.2 0.0.0.0 area 3jfreoialjfiqofiqonetwork 172.16.15.9 0.0.0.0 area 3jfreoialjfiqofiqo!jfreoialjfiqofiqorouter bgp 100jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp log-neighbor-changesjfreoialjfiqofiqonetwork 10.1.1.3 mask 255.255.255.255jfreoialjfiqofiqoneighbor 10.1.1.1 remote-as 100jfreoialjfiqofiqoneighbor 10.1.1.1 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.1 route-reflector-clientjfreoialjfiqofiqoneighbor 10.1.1.4 remote-as 100jfreoialjfiqofiqoneighbor 10.1.1.4 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.4 route-reflector-clientjfreoialjfiqofiqoneighbor 10.1.1.5 remote-as 100jfreoialjfiqofiqoneighbor 10.1.1.5 update-source Loopback0jfreoialjfiqofiqoneighbor 10.1.1.5 route-reflector-clientjfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqoaddress-family ipv4 unicastjfreoialjfiqofiqo  no synchronizationjfreoialjfiqofiqo  network 10.1.1.3 mask 255.255.255.255jfreoialjfiqofiqo  neighbor 10.1.1.1 activatejfreoialjfiqofiqo  exit-address-familyjfreoialjfiqofiqo!jfreoialjfiqofiqoaddress-family  ipv4 multicast  jfreoialjfiqofiqo  network 200.0.0.3 mask 255.255.255.255jfreoialjfiqofiqo  neighbor 10.1.1.1 activatejfreoialjfiqofiqo  no auto-summaryjfreoialjfiqofiqo  exit-address-familyjfreoialjfiqofiqo!jfreoialjfiqofiqoip msdp peer 10.1.1.2 connect-source loopback 0 remote-as 200jfreoialjfiqofiqo!jfreoialjfiqofiqoip pim rp-address 10.1.1.3jfreoialjfiqofiqojfreoialjfiqofiqoR9jfreoialjfiqofiqojfreoialjfiqofiqointerface Loopback0jfreoialjfiqofiqoip address 10.1.1.9 255.255.255.255jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.14.1 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip igmp access-group 10jfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.14.33 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqoaccess-list 10 deny 10.1.1.3jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoSummary of issuesjfreoialjfiqofiqojfreoialjfiqofiqoa. Wrong MSDP source and peer IPs <---jfreoialjfiqofiqo  R3:ip msdp peer 200.0.0.2 connect-source loopback 1 remote-as 200jfreoialjfiqofiqoR2:ip msdp peer 200.0.0.3 connect-source Loopback1 remote-as 100jfreoialjfiqofiqob. R6/R9 Missing RP config <-- R6: ip pim rp-address 10.1.1.2, R9: ip pim rp-address 10.1.1.3jfreoialjfiqofiqoc. R8 Missing PIM command on R8 interface <-- enable ip pim sparse-dense-mode on the interface connecting R8->R6jfreoialjfiqofiqod. R9 IGMP traffic being blocked <-- change the ACL 10 to permit any jfreoialjfiqofiqoe. R1 Missing OSPF/BGP address-family ipv4 multicast redistribution<-- under R1 address-family ipv4 multicast, add the command "redistribute ospf 1"jfreoialjfiqofiqojfreoialjfiqofiqoGood luck in your CCIE journey,jfreoialjfiqofiqojfreoialjfiqofiqoBR ccie36060 jfreoialjfiqofiqojfreoialjfiqofiqoEdited by ccie36060, 18 July 2012 - 06:08 AM.jfreoialjfiqofiqojfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo#########################################################################################################################################################################jfreoialjfiqofiqo1. FRAME RELAY (2points)jfreoialjfiqofiqo  jfreoialjfiqofiqoRequires R15 to telnet to R13 and R14 loopbacksjfreoialjfiqofiqo※SubInt無い版jfreoialjfiqofiqoR13jfreoialjfiqofiqojfreoialjfiqofiqointerface Serial0/0jfreoialjfiqofiqoip address 172.16.13.2 255.255.255.248jfreoialjfiqofiqoencapsulation frame-relayjfreoialjfiqofiqoip ospf network broadcast or point-to-multipointjfreoialjfiqofiqoframe-relay map ip 172.16.13.4 341 broadcastjfreoialjfiqofiqoframe-relay map ip 172.16.13.3 345 broadcastjfreoialjfiqofiqoframe-relay lmi-type ciscojfreoialjfiqofiqono frame-relay inverse arpjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR14jfreoialjfiqofiqointerface Serial0/0jfreoialjfiqofiqoip address 172.16.13.4 255.255.255.248jfreoialjfiqofiqoencapsulation frame-relayjfreoialjfiqofiqoip ospf network broadcast or point-to-multipointjfreoialjfiqofiqoframe-relay map ip 172.16.13.2 314 broadcastjfreoialjfiqofiqoframe-relay map ip 172.16.13.3 315 broadcastjfreoialjfiqofiqoframe-relay lmi-type ciscojfreoialjfiqofiqono frame-relay inverse arpjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR15jfreoialjfiqofiqointerface Serial1/0jfreoialjfiqofiqoip address 172.16.13.3 255.255.255.248jfreoialjfiqofiqoencapsulation frame-relayjfreoialjfiqofiqoip ospf network broadcast or point-to-multipointjfreoialjfiqofiqoframe-relay map ip 172.16.13.4 351 broadcastjfreoialjfiqofiqoframe-relay map ip 172.16.13.2 354 broadcastjfreoialjfiqofiqoframe-relay lmi-type ciscojfreoialjfiqofiqono frame-relay inverse arpjfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoshow frame‐relay map <--DLCI should be activejfreoialjfiqofiqosh run interface s0/0/0jfreoialjfiqofiqoR15# telnet 10.1.1.14jfreoialjfiqofiqo....openjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR15# telnet 10.1.1.14jfreoialjfiqofiqo....openjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo2. HRSP (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoEnsure the output of "show standby" on R22 and R23 is the same as shown belowjfreoialjfiqofiqojfreoialjfiqofiqoR22 being the active unit with a priority configured of 100 (not by default), and also a track 1 configured and up, with a decrement value of 60.jfreoialjfiqofiqoR23 is the standby unit, using the default priority value (100), no authentication, with preempt, track 1 configured and up, with a decrement value of 60.jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR22jfreoialjfiqofiqoとくになしjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR23jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqono standby 1 priority 150jfreoialjfiqofiqono standby 1 authentication md5 key-string ciscojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR21(1.1.70.0/24 だった場合)jfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqoredistribute ospf 1 metric 10000 100 255 1 1500 route-map PREFIXjfreoialjfiqofiqo!jfreoialjfiqofiqoroute-map PREFIX permit 10jfreoialjfiqofiqomatch ip address 1jfreoialjfiqofiqo!jfreoialjfiqofiqoaccess-list 1 permit 1.1.70.0 0.0.0.255jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR13(DefaultRouteだった場合)jfreoialjfiqofiqo!jfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqo area 1 nssa default-information originate allwaysjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqoR22/R23#show standby <--should match exactly the output givenjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo3. NTP (2 points)jfreoialjfiqofiqo  jfreoialjfiqofiqoR13 NTP cannot synchronize with R5, Fix itjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR5jfreoialjfiqofiqontp authentication-key 1 md5 ciscojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR13jfreoialjfiqofiqontp authentication-key 1 md5 ciscojfreoialjfiqofiqontp server 10.1.1.5 key 1jfreoialjfiqofiqontp authentication jfreoialjfiqofiqontp trusted-keyjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR9jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip address 172.16.14.1 255.255.255.248jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip igmp access-group 10jfreoialjfiqofiqoip access-group deny_udp injfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqoip access-list extended deny_udpjfreoialjfiqofiqopermit ip  any anyjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR11jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip address 172.16.14.34 255.255.255.248jfreoialjfiqofiqoip ospf authentication message-digestjfreoialjfiqofiqoip ospf message-digest-key 1 md5 ciscojfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqoip access-group deny_udp injfreoialjfiqofiqohalf-duplexjfreoialjfiqofiqo!jfreoialjfiqofiqoip access-list extended deny_udpjfreoialjfiqofiqopermit ip  any anyjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqoR5/R13#show ntp association detail <--should be synchronized and sanejfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo4. PPP/RIP (2 points)jfreoialjfiqofiqoR24 cannot ping R29 192.168.20.1, Fix itjfreoialjfiqofiqojfreoialjfiqofiqoR25jfreoialjfiqofiqoservice password-encryptionjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Serial1/0 ---> connecting to R29jfreoialjfiqofiqoip address 172.16.9.1 255.255.255.248jfreoialjfiqofiqoencapsulation pppjfreoialjfiqofiqoserial restart-delay 0jfreoialjfiqofiqono fair-queuejfreoialjfiqofiqoppp authentication chapjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqorouter eigrp 200jfreoialjfiqofiqoredistribute rip metric 100000 100 255 1 1500jfreoialjfiqofiqonetwork 10.1.1.25 0.0.0.0jfreoialjfiqofiqonetwork 172.16.10.77 0.0.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqo!jfreoialjfiqofiqorouter ripjfreoialjfiqofiqoversion 1jfreoialjfiqofiqonetwork 172.16.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR29jfreoialjfiqofiqono service password-encryptionjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Loopback1jfreoialjfiqofiqoip address 192.168.20.1 255.255.255.255jfreoialjfiqofiqo!jfreoialjfiqofiqointerface Serial1/0jfreoialjfiqofiqoip address 172.16.9.2 255.255.255.248jfreoialjfiqofiqoencapsulation pppjfreoialjfiqofiqoserial restart-delay 0jfreoialjfiqofiqono fair-queuejfreoialjfiqofiqoppp chap hostname cciejfreoialjfiqofiqoppp chap password 0 ciscojfreoialjfiqofiqo!jfreoialjfiqofiqorouter ripjfreoialjfiqofiqoversion 2jfreoialjfiqofiqonetwork 172.16.0.0jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqoR25/R29#show ip interface brief <--serial1/0 should be upjfreoialjfiqofiqoR25#show ip route <--should see the network 192.168.20.0jfreoialjfiqofiqoR24#telnet 192.168.20.1jfreoialjfiqofiqoopen...jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo5. OSPF (3 points)jfreoialjfiqofiqoR18jfreoialjfiqofiqono ip route X.X.X.X 0.0.0.X.172.16.12.5 --->pointing toward R17jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR17jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoip ospf network broadcastjfreoialjfiqofiqo!jfreoialjfiqofiqoip access-list extended 111jfreoialjfiqofiqo  permit icmp any anyjfreoialjfiqofiqo!jfreoialjfiqofiqono ip route X.X.X.X 0.0.0.X 172.16.12.6--->pointing toward R18jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR16jfreoialjfiqofiqointerface Ethernet2/0 ---> facing R17jfreoialjfiqofiqoip ospf network broadcastjfreoialjfiqofiqo!jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqoarea 3 virtual-link 10.1.1.18 message-digest-key 1 md5 ciscojfreoialjfiqofiqodistribute-list 12 in e1/0jfreoialjfiqofiqo!jfreoialjfiqofiqoaccess-list 12 permit anyjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR8jfreoialjfiqofiqorouter ospf 1jfreoialjfiqofiqoredistribute bgp 200 subnetsjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR27jfreoialjfiqofiqorouter bgp 300jfreoialjfiqofiqoneighbor 10.1.1.28 next-hop-selfjfreoialjfiqofiqojfreoialjfiqofiqoSummary of issuesjfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqoR20#ping 10.1.1.28 source loopback0jfreoialjfiqofiqotrying open 10.1.1.28jfreoialjfiqofiqouser verificationjfreoialjfiqofiqopassword:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo6. ZBFW (2 points)jfreoialjfiqofiqoR29jfreoialjfiqofiqoclass-map type inspect match-all telneticmpjfreoialjfiqofiqono match protocol icmpjfreoialjfiqofiqojfreoialjfiqofiqo!jfreoialjfiqofiqozone-pair security inbound source zoneout destination zoneinjfreoialjfiqofiqoservice-policy type inspect inboundjfreoialjfiqofiqozone-pair security outbound source zonein destination zoneoutjfreoialjfiqofiqoservice-policy type inspect outboundjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqointerface Ethernet2/0<-- to R30jfreoialjfiqofiqozone-member security zoneinjfreoialjfiqofiqo!jfreoialjfiqofiqointerface Ethernet2/1 <-- to R31jfreoialjfiqofiqozone-member security zoneoutjfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR30jfreoialjfiqofiqoip route 0.0.0.0 0.0.0.0 172.16.39.29jfreoialjfiqofiqojfreoialjfiqofiqoR31jfreoialjfiqofiqoip route 0.0.0.0 0.0.0.0 172.16.129.29jfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR30#telnet 10.1.1.31jfreoialjfiqofiqoTrying open 10.1.1.31jfreoialjfiqofiqoUser verificationjfreoialjfiqofiqo..... jfreoialjfiqofiqothen -->R29#show policy‐map type inspect zone-pair sessions  <-- should match exactly the given outputjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo7. BGP (2 points)jfreoialjfiqofiqo R28 must see two next hop for the network 1.100.100.100 in show ip bgp tablejfreoialjfiqofiqo R28 must see 2 paths in BGP tableｷ・
 R28 must select path through R26ｷnot allowed to touch AS100ｷ・& 300 configuration (variable depending on the Lab)jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR6jfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqoneighbor 10.1.1.8 route-reflector-clientjfreoialjfiqofiqoneighbor 10.1.1.8 password cisco  jfreoialjfiqofiqono auto-summaryjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR7jfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqono synchronizationjfreoialjfiqofiqobgp default local-preference 200jfreoialjfiqofiqono bgp maxas-limit 1jfreoialjfiqofiqo!jfreoialjfiqofiqoroute-map toas300 permit 10jfreoialjfiqofiqoset metric 100jfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR8jfreoialjfiqofiqorouter bgp 200jfreoialjfiqofiqobgp default local-preference 200jfreoialjfiqofiqoneighbor 10.1.1.6 password ciscojfreoialjfiqofiqoneighbor 10.1.1.6 route-reflector-clientjfreoialjfiqofiqo!jfreoialjfiqofiqoroute-map toas300 permit 10jfreoialjfiqofiqoset metric 100jfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR26jfreoialjfiqofiqorouter bgp 300jfreoialjfiqofiqobgp default local-preference 200jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR27jfreoialjfiqofiqorouter bgp 300jfreoialjfiqofiqobgp default local-preference 200jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqoR28# sh ip bgp 1.100.100.100 <-- should see two possible next hops R26 & R2R with R26 being the preferred next hopjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo8. IPv6 (2 points)jfreoialjfiqofiqoR1 can not telnet R4 IPv6 address 2011:ABC:34::4, fix the problemjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR1jfreoialjfiqofiqoipv6 router ospf 1jfreoialjfiqofiqorouter-id 10.1.1.1jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR3jfreoialjfiqofiqointerface Ethernet1/0jfreoialjfiqofiqoipv6 traffic-filter filter injfreoialjfiqofiqo!jfreoialjfiqofiqoipv6 access-list filterjfreoialjfiqofiqopermit 89 any host FF02::5 seq 1  <-- OSPFv3 Multicast dest IPjfreoialjfiqofiqopermit 89 any host FF02::6 seq 2jfreoialjfiqofiqopermit 89 host <R1 link local> host <R3 link local> seq 3jfreoialjfiqofiqopermit icmp any any seq 4jfreoialjfiqofiqodeny ipv6 any any jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR4jfreoialjfiqofiqoipv6 router ospf 1jfreoialjfiqofiqoSummary of issuesjfreoialjfiqofiqojfreoialjfiqofiqoVerification steps:jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR1# ping 2011:ABC:34::4jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo9. MST (2 points)jfreoialjfiqofiqoR10 must reach R9 in a single hop, SW1 (or SW2) is not allowed to be touchedjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoSW2jfreoialjfiqofiqoint e0/1jfreoialjfiqofiqospanning-tree mst 1 port-priority 0jfreoialjfiqofiqo!jfreoialjfiqofiqojfreoialjfiqofiqoR9jfreoialjfiqofiqoでroute-map が入ってる場合は新しいのをもうひとつつくること。jfreoialjfiqofiqob. R9 Exiting route-map dropping some traffic <-- the  route map selects certain traffic and has an explicit deny. Put another route‐map with the permit statementjfreoialjfiqofiqoroute-map kakuninnhituyoujfreoialjfiqofiqomatch ip add 1jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo10. MSDP (3 points)jfreoialjfiqofiqoR13 cannot ping R28 group 224.8.8.8 in AS 200, Fix itjfreoialjfiqofiqo(R8->R6->R2)->(R1->R3->R5)->R9->R11->R13jfreoialjfiqofiqoAS200 AS100jfreoialjfiqofiqojfreoialjfiqofiqoR8jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR6jfreoialjfiqofiqointerface Ethernet0/0jfreoialjfiqofiqoip pim sparse-dense-modejfreoialjfiqofiqo!jfreoialjfiqofiqoip pim rp-address 10.1.1.2jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR2jfreoialjfiqofiqoip msdp peer 200.0.0.3 connect-source Loopback1 remote-as 100jfreoialjfiqofiqo!jfreoialjfiqofiqoip pim rp-address 10.1.1.2jfreoialjfiqofiqojfreoialjfiqofiqoR1jfreoialjfiqofiqorouter bgp 100jfreoialjfiqofiqoaddress-family  ipv4 multicastjfreoialjfiqofiqo  redistribute ospf 1 jfreoialjfiqofiqo  exit-address-familyjfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR3jfreoialjfiqofiqoip msdp peer 200.0.0.3 connect-source loopback 1 remote-as 200jfreoialjfiqofiqo!jfreoialjfiqofiqoip pim rp-address 10.1.1.3jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqoR9jfreoialjfiqofiqoaccess-list 10 permit any jfreoialjfiqofiqoip pim rp-address 10.1.1.3jfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqojfreoialjfiqofiqo