weuzkzsrcdvtfchjjid

2weuzkzsrcdvtfchjjidSECTION I. Layer2 technologies weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1.1 Troubleshoot Layer 2 Switching Network weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidOne-two(or more)faults have been injected in to the pre-configuration. these in ssues may weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidimpede a working solution for certain portions of this labs exam and affect any labs exam section. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidyou must verify that all of your configurations work as expected. If someting is not working weuzkzsrcdvtfchjjidas expected then you must fix the underlying problem. Point will be a warded for solving each weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidproblem. However, If you fail to solve a particular problem, and the injected fault prevents weuzkzsrcdvtfchjjidyou from having a working solulations of this lab, then you will lose points for the fault and weuzkzsrcdvtfchjjidthe lab that is not working. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 4 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSolutions: There are 2 faults in pre-configuration, each one 2 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1. FastEthernet0/1.11 あるいは、 FastEthernet0/1.12 から native Optionが確認されれば、 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/1.12 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidencapsulation dot1Q 12 native weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.97 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2. native Option なしで再設定。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/1.12 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno encapsulation dot1Q 12 native weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidencapsulation dot1Q 12 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.97 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid(no encapsulation~ すると、ip address が削除される可能性があるので、 ip を再設定する) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1. monitor session が設定されていれば、 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidRack13SW3#show running-config | include monitor weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmonitor session 1 destination interface Fa0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2. 削除する。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidconfigure terminal weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno monitor session 1 destination interface Fa0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidpreconfigurations: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1.2 All loopback0 YY.YY.X.X/32 and vlans are as following: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid11 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidMarketing weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR1 G0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid12 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSales weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR1 G0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid20 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidZZ weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR2 G0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid30 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidHR weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR3 G0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid33 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidBB3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSw3 F0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid42 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidISP42 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR4 F0/0; SW2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidISP51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR5 F0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid54 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidISPBB weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR4 F0/1 ; R5 F0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSIPPORT weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR2 G0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidQA weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSW2, SW3, SW4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid300 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidAdmin weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR3 F0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. SW1/2/3/4 から下記の設定を確認 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid(参考） weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidLAB2/3 では vtp mode が transparent なので、`show run` or `show vlan brief`で vlan ID 情報weuzkzsrcdvtfchjjidを確認する。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<確認１> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidRack13SW1#show running-config weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvtp domain routingandSwitching weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvtp mode transparent weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvtp password cisco . 実際は見えない。（show vtp password から確認） weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 11 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname Marketing weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 12 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname Sales weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 20 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname ZZ weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 30 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname HR weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 33 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname BB3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 42 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname ISP42 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname ISP51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 54 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidname ISPBB weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname Support weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname QA weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidvlan 300 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidname Admin weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid~~ 以下省略 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<確認２> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidRack13SW1#show vtp status weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVTP Version : running VTP1 (VTP2 capable) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfiguration Revision : 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidMaximum VLANs supported locally : 1005 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidNumber of existing VLANs : 16 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVTP Operating Mode : Transparent weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVTP Domain Name : routingandSwitching weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVTP Pruning Mode : Disabled weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVTP V2 Mode : Disabled weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVTP Traps Generation : Disabled weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidMD5 digest : 0x89 0x98 0xC4 0x0A 0x75 0xD1 0x98 0x3A weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfiguration last modified by 0.0.0.0 at 0-0-00 00:00:00 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidRack13SW1# weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidRack13SW1#show vtp password weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVTP Password: cisco weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidRack13SW1# weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. SW1/2/3/4 で、上記の表と topology を参考とし、L2 access port/L3 port/SVI 設定を確認。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid(注意） weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSVI(ip address 含む) は設定されてない可能性が高い。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidまず、SW1/2/3/4 の fa1/19 . 24 区間を trunk 設定をし、区間ごとに ping をしながら、access-port weuzkzsrcdvtfchjjidと SVI 設定を確認すると、暗記せずに、把握可能! ^^/ weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 20 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 30 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 42 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 54 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno switchport weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 150.1.13.1 255.255.255.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan12 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.0.98 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.0.129 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet02 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 300 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 54 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno switchport weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 150.2.13.1 255.255.255.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan42 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.129 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.163 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport access vlan 33 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode access weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan33 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 150.3.13.1 255.255.255.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.195 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.161 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.194 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.162 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1.3 Layer 2 provisioning a robust L2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Use 802.1w on all four switches weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Ensure that spanning tree enters the forwarding state immediately only for access switchports weuzkzsrcdvtfchjjidbypassing the listening and learning states. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Avoiding transmitting BPDUs on any access switchport on any of these ports, the ports should weuzkzsrcdvtfchjjidbe shutdown immediately. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. Ensure that all four switches are able to read to unidirectional link failure for any switch weuzkzsrcdvtfchjjidto switchport. The affected port should be disabled in the event failure. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. SW3 fa0/10 port may receive some BPDU from BB3, disable the bpduguard function on this port. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid3Points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1/2/3/4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree mode rapid-pvst weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree portfast bpduguard default weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface range f0/19-24 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidudld port aggressive weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1/2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface range fastEthernet 0/2-5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree portfast weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface fastEthernet 0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree portfast weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree bpduguard disable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1.4 switching weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Use 802.1q weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Switchies should not actively attempt to convert the links to trunk link by negotiating weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidthe trunk mode. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Utilize Etherchannel between all switching interconnections using ieee standart to actively weuzkzsrcdvtfchjjidnegotiate channel. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. Etherchannel load balancing could be accomplished by destination ip address. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. Configure port 0/1 on SW2. Ensure that only vlan SALES and MARKETING are allowed. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidf. SW1 is the root bridge and SW4 should not become root for any VLAN. Ensure that this occurs weuzkzsrcdvtfchjjidwithout changing the switch priority. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1/2/3/4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidport-channel load-balance dst-ip weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree mode rapid-pvst weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface range FastEthernet0/19-20 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport trunk encapsulation dot1q weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode trunk weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport nonegotiate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidchannel-group 1 mode active weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface range FastEthernet0/21-22 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport trunk encapsulation dot1q weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode trunk weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport nonegotiate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidchannel-group 2 mode active weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface range FastEthernet0/23-24 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidswitchport trunk encapsulation dot1q weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode trunk weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport nonegotiate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidchannel-group 3 mode active weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface range Port-channel1-3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport trunk encapsulation dot1q weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode trunk weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport nonegotiate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree vlan 1-4096 priority 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Port-channel2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree guard root weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Port-channel1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree guard root weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport trunk encapsulation dot1q weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport trunk allowed vlan 11,12 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport mode trunk weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidswitchport nonegotiate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Port-channel3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidspanning-tree guard root weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1.5 port mirroring weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure port monitoring on SW3 according to the following requirement: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. The transmit and receive traffic on ports F0/1 through f0/8 and the etherchannel weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidport-channel for F0/19-20; should monitored. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. A copy of the traffic should be forwarded to Fa0/11 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmonitor session 1 source interface fastEthernet 0/1 - 8 , port-channel 1 both weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmonitor session 1 destination interface Fa0/11 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid1.6 MAC address table aging time weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid- On SW1 make sure that the MAC address table aging time applies to vlan 20 is set to half weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid of the other vlans. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmac address-table aging-time 150 vlan 20 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid1.7 frame-relay weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Use Cisco LMI on FR Switch on R5 and autosense on R1 and R3. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Do not use any static Frame-relay maps. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Use frame-relay encapsulation as "cisco". weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. Use DLCi assignment table below weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR1 0/0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidFR Switch 0/0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid221 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR3 0/0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidFR Switch 0/0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid223 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R5> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay switching weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial0/0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidencapsulation frame-relay weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclock rate 512000 (すでに設定されている。しかし、なければ入力。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay lmi-type cisco weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay intf-type dce weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay route 221 interface Serial0/0/1 223 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial0/0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidencapsulation frame-relay weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclock rate 512000 (すでに設定されている。しかし、なければ入力。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay lmi-type cisco weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay intf-type dce weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay route 223 interface Serial0/0/0 221 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial0/0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidencapsulation frame-relay weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno frame-relay inverse-arp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial0/0/1.13 point-to-point weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip unnumbered Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay interface-dlci 221 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial0/0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidencapsulation frame-relay weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno frame-relay inverse-arp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial0/0/0.13 point-to-point weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip unnumbered Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay interface-dlci 223 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidR1/R3(FrameRelay) と R3/R2(PPP) 区間を除いた、他の区間では隣のデバイスと Ping が可能。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSECTION II. Laye3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2.1 OSPF weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. only the network shown as topology will be notified in routing process. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Configure OSPF for SW1, R1 and R3. SW1 should inject default route. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. The link with BB1 should be seen as external route. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. only the network shown as topology will be notified in routing process weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. Configure OSPF for SW2 SW3 SW4 and R2, SW2 should inject default route weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidf. The link with BB2 should be seen as external route weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.7.7 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.7.7 0.0.0.0 area 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidnetwork 13.13.0.98 0.0.0.0 area 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.0.129 0.0.0.0 area 51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjiddefault-information originate always metric-type 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute connected metric-type 1 subnets route-map bb1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-map bb1 permit 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch interface FastEthernet0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.1.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.1.1 0.0.0.0 area 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.0.97 0.0.0.0 area 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.0.65 0.0.0.0 area 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.3.3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.3.3 0.0.0.0 area 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.0.1 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.0.33 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.2.2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.2.2 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.97 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.193 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.10.10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.10.10 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.162 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.194 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.9.9 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.9.9 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.161 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.195 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.8.8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.8.8 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.129 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.128.163 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjiddefault-information originate always metric-type 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute connected metric-type 1 subnets route-map bb2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-map bb2 permit 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch interface FastEthernet0/10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2.2 EIGRP weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Configure EIGRP10 between R4 and R5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Resditribute loopback 0 of R4 and R5 into Eigrp 10 (あったり、なかったり。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Configure EIGRP 100 as in the diagram weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. EIGRP updates should be advertised only out to the interfaces indicated in the IGP weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidtopology. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. Configure SW3 such that it will not receive any EIGRP queries. SW3 should also not weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsend out any information about BB3 routes to the EIGRP 100 neighbors. Do not configure weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidany kind of outgoing filtering to do this weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidf. Use route-maps to tag any Class A network address routes sourced from the external weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute with tag 200. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidg. SW3 redistribute EIGRP 100 to OSPF summarize to the following routers into an weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaggregate with prefix /8. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid: 198.1.1.4/30 198.2.1.0/24 198.2.3.0/24 198.2.5.0/24 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R5> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter eigrp 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno auto-summary weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.254.1 0.0.0.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute connected metric 10000 100 255 1 1500 route-map LP weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-map LP permit 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch interface Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidrouter eigrp 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno auto-summary weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.254.2 0.0.0.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute connected metric 10000 100 255 1 1500 route-map LB weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-map LB permit 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch interface Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<太い文字部分は、bに関する部分。もし、b 問題がない場合は、太い部分ではなく、以下のように weuzkzsrcdvtfchjjidloopback 0 を eigrp に追加する設定をする。> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R5> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter eigrp 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.5.5 0.0.0.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter eigrp 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.4.4 0.0.0.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter eigrp 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno auto-summary weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 150.3.13.1 0.0.0.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjideigrp stub receive-only weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjiddistribute-list route-map tag200 in weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-map tag200 permit 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch ip address 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidset tag 200 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-map tag200 permit 20 . 重要！ weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 10 permit 0.0.0.0 127.255.255.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute eigrp 100 metric-type 1 subnets weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsummary-address 198.0.0.0 255.0.0.0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2.3 BGP weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. SW1 connects to BB1(150.1.YY.254) and from BB1, SW1 receives 197.68.Z.0/24 networks with weuzkzsrcdvtfchjjidAS-Path : 254 253 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. SW2 connects to BB2(150.2.YY.254) and from BB2, SW2 receives 197.68.Z.0/24 networks with weuzkzsrcdvtfchjjidAS-Path : 254 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidc. SW2 should modify the As-Path of its learned routes; Adding AS 253 by using a single route-map weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. SW1 SW2 R3 R2 are IBGP peers, next-hop-self and route-reflector-client are not permitted weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. Use local BGP command to cause R2 to prefer SW2 as exit point for ASYY, and R3 to prefer weuzkzsrcdvtfchjjidSW1 and the exit point for ASYY weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidf. Both R2 and R3 should still have routes to the other exit point in their BGP table. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidg. Use only the loopback 0 ip address to propagate BGP route information. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidh. No iGP router should be advertised to AS 254. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 4 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.2.2 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.2.2 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.3.3 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.3.3 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.8.8 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.8.8 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 150.1.13.254 remote-as 254 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.2.2 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.2.2 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.3.3 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.3.3 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.7.7 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.7.7 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 150.2.13.254 remote-as 254 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 150.2.13.254 route-map addingAS-253 in weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-map addingAS-253 permit 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidset as-path prepend 253 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.2.2 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.2.2 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.7.7 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.7.7 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.8.8 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.8.8 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.7.7 weight 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.3.3 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.3.3 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.7.7 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.7.7 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.8.8 remote-as 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.8.8 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.8.8 weight 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2.4 MPLS weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Name the vrf as "VPNYY",rd and route-target should both be 100:1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Use OSPF as routing protocol between PE and CE weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Address the need MPLS introduces of connecting partitioned OSPF backbone, mpls prefer ospf weuzkzsrcdvtfchjjidbackdoor link between R2 and R3, Use the network YY.YY.100.x/24 to facilitate this. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 4 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. Use MPBGP AS 100 to exchange customer prefixes. Source all updates using weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidloopback0 address, R1 should reach prefixes learned from Site2 through mpls, but not case for weuzkzsrcdvtfchjjidR3. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmpls label protocol ldp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmpls ip weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrd 100:1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-target export 100:1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-target import 100:1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip vrf forwarding vpn13 . このコマンドを入れると、IP 削除されるので、再設定が必要。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.128.130 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.4.4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidlog-adjacency-changes weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidnetwork 13.13.128.130 0.0.0.0 area 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute bgp 100 subnets weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidbgp router-id 13.13.4.4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno bgp default ipv4-unicast weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.5.5 remote-as 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.5.5 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaddress-family vpnv4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.5.5 activate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.5.5 send-community extended weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidexit-address-family weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaddress-family ipv4 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute ospf 13 vrf vpn13 match internal external weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.100.4 mask 255.255.255.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidexit-address-family weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R5> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmpls label protocol ldp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmpls ip weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrd 100:1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-target export 100:1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidroute-target import 100:1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip vrf forwarding vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.0.130 255.255.255.224 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter-id 13.13.5.5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidlog-adjacency-changes weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidarea 51 virtual-link 13.13.7.7 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.0.130 0.0.0.0 area 51 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute bgp 100 subnets weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidbgp router-id 13.13.5.5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno bgp default ipv4-unicast weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.4.4 remote-as 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.4.4 update-source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaddress-family vpnv4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.4.4 activate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidneighbor 13.13.4.4 send-community extended weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidexit-address-family weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaddress-family ipv4 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidredistribute ospf 13 vrf vpn13 match internal external weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.100.5 mask 255.255.255.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidexit-address-family weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidarea 51 virtual-link 13.13.5.5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<回答 - c> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<参考> sham-link は /32 を使わなければならない。（しかし、問題では /24 と表示されている。--?） weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Loopback1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip vrf forwarding vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.100.4 255.255.255.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidarea 0 sham-link 13.13.100.4 13.13.100.5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaddress-family ipv4 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.100.4 mask 255.255.255.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R5> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Loopback1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip vrf forwarding vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip address 13.13.100.5 255.255.255.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter ospf 13 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidarea 0 sham-link 13.13.100.5 13.13.100.4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidrouter bgp 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaddress-family ipv4 vrf vpn13 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidnetwork 13.13.100.5 mask 255.255.255.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid2.5 IPv6 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidconfigure ipv6 unique local unicast address as following: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjida. R2 : f0/0: 2001:YY:200::2/64 f0/1:2001:YY:100::1/64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. SW3: SVI support vlan 234: 2001:YY:100::9/64 ; vlan33: 2001:YY:300::9/64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Configure Ripng between R2 and SW3, Ensure that R2 can receive default route from SW3. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 4points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 unicast-routing weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 router rip RIPng weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 address 2001:13:200::2/64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 rip RIPng enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 address 2001:13:100::1/64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 rip RIPng enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 unicast-routing weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 router rip RIPng weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan33 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 address 2001:13:300::9/64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 rip RIPng enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 address 2001:13:100::9/64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 rip RIPng enable weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidipv6 rip RIPng default-information originate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSECTION III. Multicast weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid3.1 Multicast weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. PIM-SM between SW2, SW3 and SW4 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidb. The QA and Support VLANs should handle multicast traffic. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Configure Auto-RP, with SW3 loopback0 serving as RP only for the multicast group 239.10.5.0/24 weuzkzsrcdvtfchjjidand SW4 serving as the mapping agent. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. Enable SW2 loopback0(OR vlan243) to join group 239.10.5.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. To verify you should be able to successfully generate multicast traffic for the group weuzkzsrcdvtfchjjid239.10.5.1 using R2 as the source. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 4 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip multicast-routing (3560 . ip multicast-routing distributed) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim autorp listener weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip igmp join-group 239.10.5.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip multicast-routing distributed weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim autorp listener weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim send-rp-announce Loopback0 scope 16 group-list 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 1 permit 239.10.5.0 0.0.0.255 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip multicast-routing distributed weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim autorp listener weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim send-rp-discovery Loopback0 scope 16 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid3.2 IPv4 SSM (pattern 1-LAB3) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid- PC off Vlan QA can only join in multicast groups 239.10.5.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid3points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2/3/4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 2 permit 239.10.5.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip igmp access-group 2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid3.2 IPv4 SSM (pattern 2-LAB2) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Add the Support VLAN off R2 to the multicast PIM tree configured earlier question weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. R2 should utility SSM specially for the multicast group 232.20.10.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Hosts off the R2 Gi0/0 will be providing source addresses for all multicast traffic. weuzkzsrcdvtfchjjid3points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2/3/4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim ssm range 5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 5 permit 232.20.10.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip multicast-routing weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim ssm range 5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 5 permit 232.20.10.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip igmp version 3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip igmp v3lite weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip urd weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip pim sparse-mode weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidSECTION VI. Advanced service weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid4.1 Link Fragmentation weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure on R1 and R3 by the flowing requirements: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Use end point identifier for multilink bundling weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Use a policy map to define a priority of 45 to all VOIP traffic only traffic whose proceeding weuzkzsrcdvtfchjjidas critical. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Apply a fragment delay of 8ms to the MPPP bundle weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. Use a multilink group interface for all QOS and IP commands weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. Define CIR and interface bandwidth as 128K weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidf. The committed burst size as 8Kbits and excess burst size is 1K bits weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidg. Use bandwidth command on both virtual interface and multilink interface for interleaving weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidto work (use ppp multilink interleave . この文はあったり、なかったり。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmultilink bundle-name endpoint weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial1/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay traffic-shaping weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial1/1.13 point-to-point weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno ip unnumbered weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay interface-dlci 221 ppp Virtual-Template1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass car weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmap-class frame-relay car weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay cir 128000 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay bc 8000 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay be 1000 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Virtual-Template1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink group 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidbandwidth 128 . 問題g があれば、設定 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 100 permit udp any any precedence critical weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass-map match-all voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch access-group 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidpolicy-map voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidpriority percent 45 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Multilink1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip unnumbered Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidbandwidth 128 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink (自動追加される) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink interleave weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink group 1 (自動で追加される) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink endpoint hostname weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink fragment delay 8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidservice-policy output voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmultilink bundle-name endpoint weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial1/0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay traffic-shaping weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Serial1/0.13 point-to-point weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidno ip unnumbered weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay interface-dlci 223 ppp Virtual-Template1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass car weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmap-class frame-relay car weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay cir 128000 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay bc 8000 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidframe-relay be 1000 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Virtual-Template1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink group 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidbandwidth 128 . 問題ｇがあれば、設定。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 100 permit udp any any precedence critical weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass-map match-all voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch access-group 100! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidpolicy-map voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidpriority percent 45 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Multilink1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip unnumbered Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidbandwidth 128 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink (自動で追加される。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink interleave . 問題ｇがあれば、設定。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink group 1 (自動で追加される。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink endpoint hostname weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidppp multilink fragment delay 8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidservice-policy output voice-ppp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid4.2 NTP weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidBetween R5 SW1 SW2 R3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. R5 should synchronize with a NTP source YY.YY.254.254 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. In the event of the R5 loses connection to NTP server it should act as a NTP server with weuzkzsrcdvtfchjjida stratum 5 and its calendar as an authoritative time source. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. SW1 SW2 R3 using loopback0 should use R5 as a authoritative time server. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 4 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPart2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. R3 and R5 shoud authenticate each other weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. SW1 and SW2 do not authenticate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidf. clock on R5 8:00:00 AM 1 JAN 2000 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidg. ultimately clock should be in synchronized weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R5> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclock calendar-valid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp update-calendar weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp source fastEthernet 0/1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp authentication-key 1 md5 cisco weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp authenticate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp trusted-key 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp server 13.13.254.254 source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp master 5 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp access-group peer 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp access-group serve-only 2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp peer vrf vpn13 13.13.3.3 key 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp peer vrf vpn13 13.13.7.7 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp peer vrf vpn13 13.13.8.8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 1 permit 13.13.3.3 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 1 permit 13.13.7.7 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 1 permit 13.13.8.8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 2 permit 13.13.254.254 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 2 permit 127.127.7.1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp authentication-key 1 md5 00071A150754 7 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp authenticate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp trusted-key 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp server 13.13.0.130 key 1 source Loopback0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1/2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidntp server 13.13.0.130 source loopback 0 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid4.3 Rsvp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Configure reservable bandwidth 64k with the largest reservable flow 64k. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Configure r3 to simulate a host generating a rsvp path message to r1. protocol should be weuzkzsrcdvtfchjjidtcp. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Configure r1 to simulate a host generating rsvp receive message to r3. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. Using loopback address to r1 and r3 and the message protocol should be tcp with a source weuzkzsrcdvtfchjjidport of telnet. (問題によっては、destination port として、1000 を要求する。その際は、以下のweuzkzsrcdvtfchjjid青い色の 23 を変更すれば、いい。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. The message should be for a single reservation with a guaranteed average bit rate of 10k weuzkzsrcdvtfchjjidand a max brust of 1k bytes. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 2 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip rsvp reservation-host 13.13.1.1 13.13.3.3 TCP 23 23 ff rate 10 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface multilink 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip rsvp bandwidth 64 64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip rsvp sender-host 13.13.1.1 13.13.3.3 tcp 23 23 10 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface multilink 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip rsvp bandwidth 64 64 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid4.4 MHSRP (Pattern 1 . LAB3) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure MHSRP on VLAN Support (234) according to the followings. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. SW4 has the priority of group 1, its virtual ip address is YY.YY.128.196. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. SW3 has the priority of group2, its virtual ip address is YY.YY.128.222. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. The Group 1 and Group 2 track SW3, SW4 to default-route. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidtrack 1 ip route 0.0.0.0 0.0.0.0 reachability weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 ip 13.13.128.196 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 priority 105 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 track 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 ip 13.13.128.222 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidtrack 1 ip route 0.0.0.0 0.0.0.0 reachability weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 ip 13.13.128.196 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 ip 13.13.128.222 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 priority 105 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 track 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid4.4 MHSRP (Pattern2 . LAB2) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure MHSRP on VLAN Support (234) according to the followings. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. SW4 has the priority of group 1, its virtual ip address is YY.YY.128.196. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. SW3 has the priority of group2, its virtual ip address is YY.YY.128.222. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Track object of the SW2(YY.YY.128.163)to provide failover. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidicmp-echo 13.13.128.163 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla schedule 10 life forever start-time now weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidtrack 1 rtr 10 state weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 ip 13.13.128.196 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 priority 105 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 track 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 ip 13.13.128.222 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla 10 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidicmp-echo 13.13.128.163 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla schedule 10 life forever start-time now weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidtrack 1 rtr 10 state weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid! weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 ip 13.13.128.196 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 ip 13.13.128.222 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 priority 105 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 track 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid4.4 MHSRP (Pattern 3) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure MHSRP on VLAN Support (234) according to the followings. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. SW4 has the priority of group 1, its virtual ip address is YY.YY.128.196. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. SW3 has the priority of group2, its virtual ip address is YY.YY.128.222. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Track object of the vlan243 to provide failover. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 ip 13.13.128.196 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 priority 105 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 track Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 ip 13.13.128.222 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface Vlan234 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 ip 13.13.128.196 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 1 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 ip 13.13.128.222 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 priority 105 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 preempt weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidstandby 2 track Vlan243 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid4.5 MLS Qos for Video (あったり、なかったり。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidPort F0/6 on SW4, will host a video server for streaming to devices off the Marketing weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidVlan on R1. Configure MLS QoS in the network according to: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. The video server ip YY.YY.128.98 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Use policy-maps to assign video traffic a DSCP 56. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. Define policer for the video traffic with rate of 3M and a burst size of 1M. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidAdditionally, when these routes are exceeded, the DSCP value for video traffic should be mark weuzkzsrcdvtfchjjiddown from 56 to 8. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. The Distribution ports between all 4 switches should trust the inbound DSCP values for weuzkzsrcdvtfchjjidclassification. Additionally, for untagged packets the default CoS value should be defined as weuzkzsrcdvtfchjjid1. Finally the expedite queue should be for all these ports. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid? weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos map policed-dscp 56 to 8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos map policed-dscp 56 to 8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaccess-list 100 permit udp host 13.13.128.98 13.13.0.64 0.0.0.31 range 16384 32767 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass-map match-all video weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmatch access-group 100 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidpolicy-map video weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidclass video weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidset dscp 56 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidpolice 3000000 1000000 exceed-action policed-dscp-transmit weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface FastEthernet0/6 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos cos 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidservice-policy input video weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1/SW2/SW3/SW4> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidinterface range FastEthernet0/19-24 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos cos 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidmls qos trust dscp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidpriority-queue out weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidSECTION V. Optimize the network weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid5.1 IP Service Level Agreement weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure IP SLA intented to monitor the response across between MPLS network and backdoor weuzkzsrcdvtfchjjidserials according to: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. SW2 will do all monitoring, SW1 act as a IP SLA responder, while R3 should have knowledge weuzkzsrcdvtfchjjidof IP SLA. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. SW2 should use TCP to monitor SW1. The operation should repeat every 3 min starting immediately weuzkzsrcdvtfchjjidand repeat every day. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. TCP SLAs should use the well-known telnet port. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. SW2 should use ICMP to monitor R3. The operation should repeat every 3 min starting immediately weuzkzsrcdvtfchjjidand repeat every day. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjide. Loopback addresses should be used and for all devices. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla 1 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidtcp-connect 13.13.7.7 23 source-ip 13.13.8.8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidfrequency 180 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla schedule 1 start-time now recurring weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla 2 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidicmp-echo 13.13.3.3 source-ip 13.13.8.8 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidfrequency 180 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla schedule 2 start-time now recurring weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW1> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla responder weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid5.2 SNMP weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure SNMP on SW2 and R3 according to the: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. All traps should be set to the SNMP server YY.YY.128.226 using the community string "public" weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. There should be 2 communities definde one (public) with read-only access and another weuzkzsrcdvtfchjjid(ciscoADMIN) wit read-write access. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. On SW2 enable SNMP traps for IP SLA in the event that round-trip value violates the upper weuzkzsrcdvtfchjjida lower threshold. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. On R3 enable SNMP traps for OSPF sham-link and for RSVP weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid(LAB2では sham-link でも trap 設定必要。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<SW2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server host 13.13.128.226 public weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server community public RO weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server community ciscoADMIN RW weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server enable traps rtr weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla reaction-configuration 1 react rtt threshold-value 40 20 threshold-type immediate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaction-type trapOnly weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip sla reaction-configuration 2 react rtt threshold-value 40 20 threshold-type immediate weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidaction-type trapOnly weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R3> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server host 13.13.128.226 public weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server community public RO weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server community ciscoADMIN RW weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server enable traps rsvp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid** R3 で sham-link に関する要求条件があれば、設定。** weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server enable traps ospf cisco-specific state-change shamlink weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server enable traps ospf cisco-specific errors config-error weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server enable traps ospf cisco-specific errors shamlink weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidsnmp-server enable traps ospf cisco-specific retransmit shamlink weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid5.3 Logging, Management, Core dumps weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidConfigure the following system management features on R2, according to: weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjida. Enable local time-stamps with date and time in msec debug and logged messages. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidb. Configure the local logging buffer to be 10000 bytes, logging messages with set the severity weuzkzsrcdvtfchjjidlevel 4(warning) and the higher. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidc. In the event that the local buffer is overwritten, enable the error counter. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidd. To facilitate troubleshooting, when there is unexpected system shutdown or reboot ensure weuzkzsrcdvtfchjjidthat core dump is generated and saved to the host YY.YY.128.196 using the passive FTP protocol. weuzkzsrcdvtfchjjid(赤い部分はあったり、なかったり。) weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidThe filename should be RackYYR2 and the file should be compressed. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidThe username/password for the ftp transfer should be reload/cisco. weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid 3 points weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid<R2> weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidservice timestamps debug datetime msec localtime weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidservice timestamps log datetime msec localtime weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjidlogging on weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidlogging count weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidlogging buffered 10000 warnings weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidexception core-file Rack13R2 compress weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidexception protocol ftp weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidexception dump 13.13.128.96 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip ftp username reload weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip ftp password cisco weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjidip ftp passive . 問題にある場合のみ、設定。 weuzkzsrcdvtfchjjidweuzkzsrcdvtfchjjid weuzkzsrcdvtfchjjid

wnzhyfehxan

61.2 VLAN TRUNKwnzhyfehxan● Configure all inter-switch links to use an industry standard dot1qwnzhyfehxan● Set the VTP Domain to “CCIE”. SW1 should be server and rest Clients.wnzhyfehxan● Set vtp ver 2 and password “cisco” config vlan as following.wnzhyfehxanVLAN ID VLAN NAME Router I/F or Functional Portwnzhyfehxan11 VLAN_BB1 R3 Fa0/0 SW1 Fa0/10wnzhyfehxan22 VLAN_BB2 SW2 Fa0/10、R2 Fa0/1 wnzhyfehxan33 VLAN_BB3 SW3 Fa0/10wnzhyfehxan42 VLAN_B R2 Fa0/0wnzhyfehxan44 VLAN_C R4 Fa0/0wnzhyfehxan55 VLAN_E R5 Fa0/1wnzhyfehxan123 VLAN_123 wnzhyfehxan999 VLAN_999 Remote-spanwnzhyfehxanwnzhyfehxanSW1 / SW2 / SW3 / SW4wnzhyfehxanint f0/19  24wnzhyfehxansw trunk en downzhyfehxansw mo trunwnzhyfehxanvtp domain CCIEwnzhyfehxanvtp version CCIEwnzhyfehxanvtp pass ciscownzhyfehxanvtp mode server (SW1)wnzhyfehxanvtp mode client (SW2/SW3/SW4)wnzhyfehxanwnzhyfehxanSW1wnzhyfehxanint f0/10wnzhyfehxan sw mode accesswnzhyfehxan sw access vlan 11wnzhyfehxan span bgduf enablewnzhyfehxanint f0/1wnzhyfehxan no switchportwnzhyfehxan ip add 13.13.17.7 255.255.255.0wnzhyfehxanint f0/2wnzhyfehxan sw mode accesswnzhyfehxan sw access vlan 42wnzhyfehxanint f0/3wnzhyfehxan sw mode accesswnzhyfehxan sw access vlan 11wnzhyfehxanint f0/4wnzhyfehxansw mode accesswnzhyfehxan sw access vlan 44wnzhyfehxanwnzhyfehxanSW2wnzhyfehxanint f0/10wnzhyfehxan sw mode accesswnzhyfehxan sw access vlan 22wnzhyfehxan span bpduf enablewnzhyfehxanint f0/2wnzhyfehxan sw mode accesswnzhyfehxan sw access vlan 22wnzhyfehxanint f0/5wnzhyfehxan sw mode accesswnzhyfehxan sw access vlan 55wnzhyfehxanwnzhyfehxanSW3wnzhyfehxanint f0/10wnzhyfehxan sw mode accesswnzhyfehxan sw access vlan 33wnzhyfehxan span bpduf enablewnzhyfehxanwnzhyfehxan1.3 Implement Spanning-tree (STP)wnzhyfehxanconfigure the additional spaning-tree on SW1,SW2,SW3 and SW4 according to the following requirement.wnzhyfehxan・Configure VLANs for Backbone should be in instance 1 and,VLANs through your network shoule ve in instance 2, ALL other VLAN shoule ve in default spanning-tree instance.wnzhyfehxan・Ensure that SW1 must be the root for instance 1 with SW2 being rhe backup for instance 1wnzhyfehxan・Ensure that SW2 must be the root for instance 2 with SW1 being the backup for instance 2wnzhyfehxanwnzhyfehxanwnzhyfehxanSW1 / SW2 / SW3 / SW4wnzhyfehxanspanning-tree mode mstwnzhyfehxanspanning-tree mst conwnzhyfehxanname ciscownzhyfehxanreversion 1wnzhyfehxaninstance 1 vlan 11,22,33wnzhyfehxaninstance 2 vlan 42,44,55,123,999wnzhyfehxanwnzhyfehxanSW1wnzhyfehxanspanning mst 1 root priwnzhyfehxanspanning mst 2 root seconwnzhyfehxanwnzhyfehxanSW2wnzhyfehxanspanning mst 1 root seconwnzhyfehxanspanning mst 2 root priwnzhyfehxan（SW1-SW4）spanning mst max-age 30  wnzhyfehxan(SW2ﾐﾅﾌｹ $ﾁ ﾈXﾕ牀 杏Lﾇ ,  SW1,SW2 ﾐﾅ $ﾁ ﾈDﾇ Hﾅ tﾕﾄｳ ｴ抜ﾀﾉ Uﾖxﾇtﾕ|ﾅ hﾕ )wnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13SW1#sh spanning-tree mst 1wnzhyfehxan##### MST1    vlans mapped:   11,22,33wnzhyfehxanBridge        address 0013.c3d1.9b00  priority      24577 (24576 sysid 1)wnzhyfehxanRoot          this switch for MST1wnzhyfehxanwnzhyfehxanInterface        Role Sts Cost      Prio.Nbr Typewnzhyfehxan---------------- ---- --- --------- -------- --------------------------------wnzhyfehxanFa0/3            Desg FWD 200000    128.5    Edge P2p wnzhyfehxanFa0/10           Desg FWD 200000    128.12   Edge P2p wnzhyfehxanFa0/19           Desg FWD 200000    128.21   P2p wnzhyfehxanFa0/20           Desg FWD 200000    128.22   P2p wnzhyfehxanFa0/21           Desg FWD 200000    128.23   P2p wnzhyfehxanFa0/22           Desg FWD 200000    128.24   P2p wnzhyfehxanFa0/23           Desg FWD 200000    128.25   P2p wnzhyfehxanFa0/24           Desg FWD 200000    128.26   P2pwnzhyfehxanwnzhyfehxanRack13SW2#sh spanning-tree mst 2wnzhyfehxan##### MST2    vlans mapped:   40,42,44,55,123wnzhyfehxanBridge        address 0013.c3d1.3c00  priority      24578 (24576 sysid 2)wnzhyfehxanRoot          this switch for MST2wnzhyfehxanwnzhyfehxanInterface        Role Sts Cost      Prio.Nbr Typewnzhyfehxan---------------- ---- --- --------- -------- --------------------------------wnzhyfehxanFa0/5            Desg FWD 200000    128.7    Edge P2p wnzhyfehxanFa0/19           Desg FWD 200000    128.21   P2p wnzhyfehxanFa0/20           Desg FWD 200000    128.22   P2p wnzhyfehxanFa0/21           Desg FWD 200000    128.23   P2p wnzhyfehxanFa0/22           Desg FWD 200000    128.24   P2p wnzhyfehxanFa0/23           Desg FWD 200000    128.25   P2p wnzhyfehxanFa0/24           Desg FWD 200000    128.26   P2pwnzhyfehxanwnzhyfehxanSW1 / SW2 / SW3 / SW4wnzhyfehxanspanning-tree portfast defaultwnzhyfehxanspanning-tree portfast bpduguard defaultwnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13SW1#show spanning-tree summarywnzhyfehxanRoot bridge for: MST1wnzhyfehxanExtended system ID         is enabledwnzhyfehxanPortfast Default             is enabledwnzhyfehxanPortFast BPDU Guard Default  is enabledwnzhyfehxanPortfast BPDU Filter Default is disabledwnzhyfehxanLoopguard Default            is disabledwnzhyfehxanEtherChannel misconfig guard is enabledwnzhyfehxanUplinkFast                   is disabledwnzhyfehxanBackboneFast                 is disabledwnzhyfehxanwnzhyfehxan1.4 Configure Additional Spanning-treewnzhyfehxanEnsure port f0/20 is forwarding rather than blocking for MST 1 on SW3.wnzhyfehxanEnsure port f0/20 is forwarding rather than blocking for MST 2 on SW4wnzhyfehxanYou cannot do any configuration on SW3wnzhyfehxanUse highest value to complete.wnzhyfehxanwnzhyfehxanSW1wnzhyfehxanint f0/19wnzhyfehxan spanning mst 1 port-priority 240wnzhyfehxanSW2wnzhyfehxanint f0/19wnzhyfehxan spanning mst 2 port-priority 240wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanSW4wnzhyfehxanint f0/19wnzhyfehxan spanning mst 2 cost 200000000wnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13SW4#sh spanning-tree mst 2wnzhyfehxan##### MST2    vlans mapped:   40,42,44,55,123wnzhyfehxanBridge        address 000f.238b.1180  priority      32770 (32768 sysid 2)wnzhyfehxanRoot          address 0013.c3d1.3c00  priority      24578 (24576 sysid 2)wnzhyfehxan              port    Fa1/0/20        cost          200000    rem hops 19wnzhyfehxanwnzhyfehxanInterface        Role Sts Cost      Prio.Nbr Typewnzhyfehxan---------------- ---- --- --------- -------- --------------------------------wnzhyfehxanFa1/0/19         Altn BLK 200000000 128.21   P2p wnzhyfehxanFa1/0/20         Root FWD 200000    128.22   P2p wnzhyfehxanFa1/0/21         Altn BLK 200000    128.23   P2p wnzhyfehxanFa1/0/22         Altn BLK 200000    128.24   P2p wnzhyfehxanFa1/0/23         Desg BLK 200000    128.25   P2p wnzhyfehxanFa1/0/24         Desg BLK 200000    128.26   P2pwnzhyfehxanwnzhyfehxan1.5 Configure EtherChannelwnzhyfehxan● Configure the industry standard Etherchannel between SW1 & SW2.wnzhyfehxan● Configure proprietary Etherchannel between SW3 & SW4 SW1 & SW3 should actively negotiate and SW4 &wnzhyfehxan   SW2 should only establish Etherchannel when requested.wnzhyfehxanwnzhyfehxanSW1wnzhyfehxanint range fa0/23  24wnzhyfehxan channel-pro lacpwnzhyfehxan channel-group 1 mode activewnzhyfehxanwnzhyfehxanwnzhyfehxanSW2wnzhyfehxanint range fa0/23  24wnzhyfehxanchannel-pro lacpwnzhyfehxan channel-group 1 mode passivewnzhyfehxanwnzhyfehxanSW3wnzhyfehxanint range fa0/23  24wnzhyfehxan channel-pro pagpwnzhyfehxan channel-group 1 mode desirablewnzhyfehxanwnzhyfehxanSW4wnzhyfehxanint range fa0/23  24wnzhyfehxanchannel-pro pagpwnzhyfehxan channel-group 1 mode autownzhyfehxanwnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13SW1#show etherchannel summary wnzhyfehxanFlags:  D - down        P - in port-channelwnzhyfehxan        I - stand-alone s - suspendedwnzhyfehxan        H - Hot-standby (LACP only)wnzhyfehxan        R - Layer3      S - Layer2wnzhyfehxan        U - in use      f - failed to allocate aggregatorwnzhyfehxan        u - unsuitable for bundlingwnzhyfehxan        w - waiting to be aggregatedwnzhyfehxan        d - default portwnzhyfehxanwnzhyfehxanwnzhyfehxanNumber of channel-groups in use: 1wnzhyfehxanNumber of aggregators:           1wnzhyfehxanwnzhyfehxanGroup  Port-channel  Protocol    Portswnzhyfehxan------+-------------+-----------+-----------------------------------------------wnzhyfehxan1      Po1(SU)         LACP      Fa0/23(P)   Fa0/24(P)   wnzhyfehxanwnzhyfehxanwnzhyfehxan1.6 RSPANwnzhyfehxanConfigure port mirroring receive from BB1 traffic on SW1 as the sourcewnzhyfehxanConfigure port mirroring receive from BB2 traffic on SW2 as the sourcewnzhyfehxanUse remote vlan 999 for the destination for SW1 and SW2.wnzhyfehxanTraffic should be sent to SW4 f0/15.wnzhyfehxanSW4 monitor the traffic from SW3 send f0/16wnzhyfehxanwnzhyfehxanSW1wnzhyfehxanvlan 999wnzhyfehxanremote-spanwnzhyfehxanmonitor session 1 source vlan 11 rxwnzhyfehxanmonitor session 1 destination remote vlan 999wnzhyfehxanwnzhyfehxanSW2wnzhyfehxanmonitor session 1 source vlan 22 rxwnzhyfehxanmonitor session 1 destination remote vlan 999wnzhyfehxanwnzhyfehxanSW4wnzhyfehxanmonitor session 1 source remote vlan 999wnzhyfehxanmonitor session 1 destination interface Fa0/15wnzhyfehxanmonitor session 2 source interface port1 bothwnzhyfehxanmonitor session 2 destination interface Fa0/16wnzhyfehxanwnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13SW1#sh monitor wnzhyfehxanSession 1wnzhyfehxan---------wnzhyfehxanType                   : Remote Source SessionwnzhyfehxanSource VLANs           :wnzhyfehxan    RX Only            : 11wnzhyfehxanDest RSPAN VLAN        : 999wnzhyfehxanwnzhyfehxanRack13SW2#sh monitor wnzhyfehxanSession 1wnzhyfehxan---------wnzhyfehxanType                   : Remote Source SessionwnzhyfehxanSource VLANs           :wnzhyfehxan    RX Only            : 22wnzhyfehxanDest RSPAN VLAN        : 999wnzhyfehxanwnzhyfehxanwnzhyfehxanRack13SW4#sh monitor wnzhyfehxanSession 1wnzhyfehxan---------wnzhyfehxanType                   : Remote Destination SessionwnzhyfehxanSource RSPAN VLAN      : 999wnzhyfehxanDestination Ports      : Fa1/0/15wnzhyfehxan    Encapsulation      : Nativewnzhyfehxan          Ingress      : DisabledwnzhyfehxanwnzhyfehxanwnzhyfehxanSession 2wnzhyfehxan---------wnzhyfehxanType                   : Local SessionwnzhyfehxanSource Ports           : wnzhyfehxan    Both               : Po1wnzhyfehxanDestination Ports      : Fa1/0/16wnzhyfehxan    Encapsulation      : Nativewnzhyfehxan          Ingress      : DisabledwnzhyfehxanwnzhyfehxanON Sw1-SW4wnzhyfehxanint ran fa0/19 - 24wnzhyfehxanduplex-halfwnzhyfehxanwnzhyfehxan1.7 PPP CHAPwnzhyfehxanUse PPP chap on R4 for R1 R2, one way. wnzhyfehxanR1 R2 cannot use ppp chap hostname, they can use ppp chap password with CCIE.wnzhyfehxanUse AAA and configure radius server YY.YY.44.200 password CISCO, this server is inexistence. wnzhyfehxanMake sure AAA is not affection any vty and console login.wnzhyfehxanUse authentication default list onlywnzhyfehxanwnzhyfehxanR1/R2wnzhyfehxanint s2/0wnzhyfehxan enca pppwnzhyfehxan no peer neiwnzhyfehxan no shutwnzhyfehxanwnzhyfehxanR4wnzhyfehxanaaa new-modelwnzhyfehxanaaa authentication login default line nonewnzhyfehxanaaa authentication ppp default group radius local-case (PPP\ｸ $ﾁ ﾈﾌｹ Xﾕ牀 xﾇ數 ﾈｩﾆ `ﾕ Lｵ抜 default\ｸ ｬﾀｩﾆXﾕ牀 杏Lﾇ,  \ﾆ ?? )wnzhyfehxanradius-server host 13.13.44.200 key CISCOwnzhyfehxanusername Rack13R1 password 0 CCIEwnzhyfehxanusername Rack13R2 password 0 CCIEwnzhyfehxanwnzhyfehxaninterface Serial1/0wnzhyfehxan ppp authentication chap wnzhyfehxanwnzhyfehxaninterface Serial1/1wnzhyfehxan ppp authentication chap wnzhyfehxanwnzhyfehxanwnzhyfehxanR1/R2wnzhyfehxaninterface Serial2/0wnzhyfehxan ppp chap password CCIEwnzhyfehxanwnzhyfehxanwnzhyfehxan1.8 Configure all necessary SVI’s on switches as per the L2 diagram.wnzhyfehxanConfigure all necessary SVI’s on switches as per the L2 diagram.wnzhyfehxanIf IP addresses are not specified, use any IP address from the same subnet.wnzhyfehxanDo not configure additional vlan’s.wnzhyfehxanwnzhyfehxanIt is already done in the basic config.wnzhyfehxanwnzhyfehxanSection 2 : Layer 3 Technologieswnzhyfehxan● After finishing each of the following questions, make sure that all configured interfaces and subnets areawnzhyfehxan   consistently visible on all pertinent routers and switches.wnzhyfehxan● Do not redistribute between any interior gateway protocol(IGP) and Board Gateway Protocol(BGP).wnzhyfehxan● You need to ping a BGP route only if it is stated in a question, otherwise the route should be only in thewnzhyfehxan   BGP table.wnzhyfehxan● At the end of section 2, all subnets in your topology, including the loopback interfaces, must be reachablewnzhyfehxan   via ping. Therefore redistribute as you wish unless directly stated in a question.wnzhyfehxan   The backbone interface must be reachable only if they are port of the solution to a question.wnzhyfehxan● The loopback interface can be seen as either /24 or /32 in the routing tables unless stated otherwise in awnzhyfehxan   question.wnzhyfehxan● The loopback interface can be added into your IGP either via redistribution or added to a routing processwnzhyfehxan   of your choice.wnzhyfehxanwnzhyfehxan2.1 Configure OSPF Area0, 142, 51 as diagramwnzhyfehxanUse any number for the process ID.wnzhyfehxanConfigure the Router ID to match Loopback 0wnzhyfehxanConfigure Area 0 between on the Ethernet segment shared by all switches.wnzhyfehxanif SW1 down SW2 should be the backup. (Use largest value)wnzhyfehxanConfigure OSPF AREA 142 between SW1-R1-R4-R2-SW4wnzhyfehxanConfigure OSPF AREA 51 between SW2-R5-R3wnzhyfehxanR4 can see three prefix from Backbone type OE2 in the routing tableswnzhyfehxanR1-R5 SW1-SW4wnzhyfehxanip cefwnzhyfehxanipv6 cefwnzhyfehxanwnzhyfehxanR1wnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.1.1wnzhyfehxan net 13.13.1.1 0.0.0.0 area 142wnzhyfehxan net 13.13.14.1 0.0.0.0 area 142wnzhyfehxan net 13.13.17.1 0.0.0.0 area 142wnzhyfehxanwnzhyfehxanR2wnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.2.2wnzhyfehxan net 13.13.2.2 0.0.0.0 area 142wnzhyfehxan net 13.13.24.2 0.0.0.0 area 142wnzhyfehxan net 13.13.29.2 0.0.0.0 area 142wnzhyfehxanwnzhyfehxanrouter ospf 13wnzhyfehxanredistribute connected subnets route-map BB1wnzhyfehxanroute-map BB1 permit 10wnzhyfehxan match interface FastEthernet0/1wnzhyfehxanwnzhyfehxanwnzhyfehxanR3wnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.3.3wnzhyfehxan net 13.13.3.3 0.0.0.0 area 51wnzhyfehxan net 13.13.35.3 0.0.0.0 area 51wnzhyfehxanwnzhyfehxanR4wnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.4.4wnzhyfehxan net 13.13.4.4 0.0.0.0 area 142wnzhyfehxan net 13.13.14.4 0.0.0.0 area 142wnzhyfehxan net 13.13.24.4 0.0.0.0 area 142wnzhyfehxannet 13.13.44.4 0.0.0.0 area 142wnzhyfehxannet 13.13.144.4 0.0.0.0 area 142wnzhyfehxanwnzhyfehxanR5wnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.5.5wnzhyfehxan net 13.13.5.5 0.0.0.0 area 51wnzhyfehxan net 13.13.35.5 0.0.0.0 area 51wnzhyfehxan net 13.13.58.5 0.0.0.0 area 51wnzhyfehxanwnzhyfehxanSW1wnzhyfehxanip routingwnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.7.7wnzhyfehxan net 13.13.7.7 0.0.0.0 area 0wnzhyfehxan net 13.13.17.7 0.0.0.0 area 142wnzhyfehxan net 13.13.123.7 0.0.0.0 area 0wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ip ospf priority 255wnzhyfehxanwnzhyfehxanSW2wnzhyfehxanip routingwnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.8.8wnzhyfehxan net 13.13.8.8 0.0.0.0 area 0wnzhyfehxan net 13.13.58.8 0.0.0.0 area 51wnzhyfehxan net 13.13.123.8 0.0.0.0 area 0wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ip ospf priority 254wnzhyfehxanwnzhyfehxanSW3wnzhyfehxanip routingwnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.9.9wnzhyfehxan net 13.13.9.9 0.0.0.0 area 0wnzhyfehxan net 13.13.123.9 0.0.0.0 area 0wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ip ospf priority 0wnzhyfehxanwnzhyfehxanwnzhyfehxanSW4wnzhyfehxanip routingwnzhyfehxanrouter ospf 13wnzhyfehxan router-id 13.13.10.10wnzhyfehxan net 13.13.10.10 0.0.0.0 area 0wnzhyfehxan net 13.13.29.10 0.0.0.0 area 142wnzhyfehxan net 13.13.123.10 0.0.0.0 area 0wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ip ospf priority 0wnzhyfehxanwnzhyfehxanwnzhyfehxan<Uﾖxﾇ> (R4 can see three prefix from Backbone type OE2 in the routing tables)wnzhyfehxanRack13R4#sh ip route | in 150wnzhyfehxan     150.1.0.0/24 is subnetted, 1 subnetswnzhyfehxanO E2    150.1.13.0 [110/20] via 13.13.24.2, 00:06:14, Serial1/1wnzhyfehxan     150.2.0.0/24 is subnetted, 1 subnetswnzhyfehxanO E2    150.2.13.0 [110/20] via 13.13.24.2, 00:00:37, Serial1/1wnzhyfehxan     150.3.0.0/24 is subnetted, 1 subnetswnzhyfehxanO E2    150.3.13.0 [110/20] via 13.13.24.2, 00:07:07, Serial1/1wnzhyfehxanwnzhyfehxan2.2 Implement IPv4 EIGRP.wnzhyfehxanConfigure EIGRP 100 on SW2.wnzhyfehxanDisable auto summary.wnzhyfehxanRedistribute EIGRP 100 into OSPF.wnzhyfehxanThe EIGRP routes should not be present in OSPF Area 51 but to Area 142,wnzhyfehxanSW2 should generate an inter-area default route.wnzhyfehxanwnzhyfehxanSW2wnzhyfehxanrouter eigrp 100wnzhyfehxan no auto-summarywnzhyfehxan net 150.3.13.0 0.0.0.255wnzhyfehxanwnzhyfehxanwnzhyfehxanrouter ospf 13wnzhyfehxan redistribute eigrp 100 subnetswnzhyfehxanarea 51 nssa no-redistribution no-summarywnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13R5#sh ip route wnzhyfehxanCodes: C - connected, S - static, R - RIP, M - mobile, B - BGPwnzhyfehxan       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area wnzhyfehxan       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2wnzhyfehxan       E1 - OSPF external type 1, E2 - OSPF external type 2wnzhyfehxan       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2wnzhyfehxan       ia - IS-IS inter area, * - candidate default, U - per-user static routewnzhyfehxan       o - ODR, P - periodic downloaded static routewnzhyfehxanwnzhyfehxanGateway of last resort is 13.13.58.8 to network 0.0.0.0wnzhyfehxanwnzhyfehxan     13.0.0.0/8 is variably subnetted, 4 subnets, 2 maskswnzhyfehxanC       13.13.5.5/32 is directly connected, Loopback0wnzhyfehxanO       13.13.3.3/32 [110/65] via 13.13.35.3, 00:07:38, Serial1/1wnzhyfehxanC       13.13.35.0/24 is directly connected, Serial1/1wnzhyfehxanC       13.13.58.0/24 is directly connected, FastEthernet0/1wnzhyfehxanO*IA 0.0.0.0/0 [110/2] via 13.13.58.8, 00:00:25, FastEthernet0/1wnzhyfehxanwnzhyfehxanR3wnzhyfehxanrouter ospf 13wnzhyfehxan Area 51 nssawnzhyfehxanwnzhyfehxanR5wnzhyfehxanrouter ospf 13wnzhyfehxan Area 51 nssawnzhyfehxan2.3 implement RIP version 2wnzhyfehxan・configure RIP Version 2 (RIPv2)er the IGP topology diagramwnzhyfehxan・RIP updates should br  advertise only out to the interface per the IGP topology diagramwnzhyfehxan・All Rip updates should be unicastwnzhyfehxan・The 16 routes from Backborn 3 is advertise to R3 Only 4 routes indicated on the below should be allowedwnzhyfehxan・You are allowed to use only one ACL line to accomplish this taskwnzhyfehxanN1 199.172.5.0wnzhyfehxanN1 199.172.7.0wnzhyfehxanN2 199.172.13.0wnzhyfehxanN2 199.172.15.0wnzhyfehxanwnzhyfehxanrouter ripwnzhyfehxanversion 2wnzhyfehxannetwork 150.1.0.0wnzhyfehxanpassive-interface default(いらんかも)wnzhyfehxanneighbor 150.1.13.254（いらんかも）wnzhyfehxandistribute-list 1 in fa0/0wnzhyfehxanno auto-summwnzhyfehxanaccess-list 1 permit 199.172.5.0 0.0.10.255wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxan2.4　Implement RIP-OSPF Redistributewnzhyfehxan・Configure to redistribute RIP into OSPD area 51wnzhyfehxan・The routing table must be shown on R5 as the below tablewnzhyfehxan・The redistribute routes must be advertised to all routers in OSPFwnzhyfehxan・You are allowed to use only one ACL linte to accomplish this taskwnzhyfehxanwnzhyfehxanN1 X.X.5.0/24 [110/115]wnzhyfehxanN1 X.X.7.0/24 [110/115]wnzhyfehxanN2 X.X.13.0/24[110/30]wnzhyfehxanN2 X.X.15.0/24[110/30]wnzhyfehxanN2 X.X.13.0/24[110/30]wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanrouter ospf 13wnzhyfehxan redistribute rip subnets route-map toospfwnzhyfehxanroute-map toospf permit 10wnzhyfehxan match ip address 2wnzhyfehxan set metric 50wnzhyfehxan set metric-type type-1wnzhyfehxanroute-map toospf permit 20wnzhyfehxan set metric 30wnzhyfehxan set metric-type type-2wnzhyfehxanaccess-list 2 permit 199.172.5.0 0.0.2.255wnzhyfehxanwnzhyfehxanwnzhyfehxan2.5 Implement IPv4 BGP.wnzhyfehxanConfigure one ibgp peering for R1,R2,R3,R5 in diagram except SW2.wnzhyfehxanPeer R2 with BB2. Configure community must have 254 208 104 for bgp route from BB3. wnzhyfehxanPeer R3 with BB1. Configure community must have 254 207 103 for bgp router from BB1 if physical links down, keep BGP peer connection also running on.wnzhyfehxanAll bgp route should prefer BB1 (even R2)wnzhyfehxanwnzhyfehxanR1 / R2 / R3 / R5wnzhyfehxanrouter bgp 13wnzhyfehxan no synchronizationwnzhyfehxanno auto-summarywnzhyfehxanbgp router-id 13.13.X.Xwnzhyfehxannei 13.13.8.8 remote 13wnzhyfehxannei 13.13.8.8 up lo 0wnzhyfehxannei 13.13.8.8 send-community  （R2 R3 のみ)wnzhyfehxanwnzhyfehxanR3wnzhyfehxanrouter bgp 13wnzhyfehxan nei 150.1.13.254 remote 254wnzhyfehxan nei 150.1.13.254 route-map BB1 inwnzhyfehxanroute-map BB1wnzhyfehxan set local-pre 200wnzhyfehxan set community 104,208 additivewnzhyfehxanwnzhyfehxanR2wnzhyfehxanrouter bgp 13wnzhyfehxan nei 150.2.13.254 remote 254wnzhyfehxan nei 150.2.13.254 route-map BB2 inwnzhyfehxanroute-map BB2wnzhyfehxan set community 103,207 additivewnzhyfehxanwnzhyfehxanSW2wnzhyfehxanrouter bgp 13wnzhyfehxan no autownzhyfehxan no sywnzhyfehxan bgp router-id 13.13.8.8wnzhyfehxan nei 13.13.1.1 remote 13wnzhyfehxan nei 13.13.1.1 up lo 0wnzhyfehxan nei 13.13.1.1 route-relflectwnzhyfehxan nei 13.13.1.1 send-communitywnzhyfehxannei 13.13.2.2 remote 13wnzhyfehxan nei 13.13.2.2 up lo 0wnzhyfehxan nei 13.13.2.2 route-relflectwnzhyfehxan nei 13.13.2.2 send-communitywnzhyfehxannei 13.13.3.3 remote 13wnzhyfehxan nei 13.13.3.3 up lo 0wnzhyfehxan nei 13.13.3.3 route-relflectwnzhyfehxan nei 13.13.3.3 send-communitywnzhyfehxannei 13.13.5.5 remote 13wnzhyfehxan nei 13.13.5.5 up lo 0wnzhyfehxan nei 13.13.5.5 route-relflectwnzhyfehxan nei 13.13.5.5 send-communitywnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13R1#sh ip bgpwnzhyfehxanBGP table version is 11, local router ID is 13.13.1.1wnzhyfehxanStatus codes: s suppressed, d damped, h history, * valid, > best, i - internal,wnzhyfehxan              r RIB-failure, S StalewnzhyfehxanOrigin codes: i - IGP, e - EGP, ? - incompletewnzhyfehxanwnzhyfehxan   Network          Next Hop            Metric LocPrf Weight Pathwnzhyfehxan*>i197.68.1.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*>i197.68.4.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*>i197.68.5.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*>i197.68.21.0      150.1.13.254             0    200      0 254 253 iwnzhyfehxan*>i197.68.22.0      150.1.13.254             0    200      0 254 253 iwnzhyfehxanwnzhyfehxanRack13R2#sh ip bgp wnzhyfehxanBGP table version is 11, local router ID is 13.13.2.2wnzhyfehxanStatus codes: s suppressed, d damped, h history, * valid, > best, i - internal,wnzhyfehxan              r RIB-failure, S StalewnzhyfehxanOrigin codes: i - IGP, e - EGP, ? - incompletewnzhyfehxanwnzhyfehxan   Network          Next Hop            Metric LocPrf Weight Pathwnzhyfehxan*>i197.68.1.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*                   150.2.13.254             0             0 254 iwnzhyfehxan*>i197.68.4.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*                   150.2.13.254             0             0 254 iwnzhyfehxan*>i197.68.5.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*                   150.2.13.254             0             0 254 iwnzhyfehxan*>i197.68.21.0      150.1.13.254             0    200      0 254 253 iwnzhyfehxan*                   150.2.13.254             0             0 254 iwnzhyfehxan*>i197.68.22.0      150.1.13.254             0    200      0 254 253 iwnzhyfehxan*                   150.2.13.254             0             0 254 iwnzhyfehxanwnzhyfehxanRack13R3#sh ip bgp wnzhyfehxanBGP table version is 6, local router ID is 13.13.3.3wnzhyfehxanStatus codes: s suppressed, d damped, h history, * valid, > best, i - internal,wnzhyfehxan              r RIB-failure, S StalewnzhyfehxanOrigin codes: i - IGP, e - EGP, ? - incompletewnzhyfehxanwnzhyfehxan   Network          Next Hop            Metric LocPrf Weight Pathwnzhyfehxan*> 197.68.1.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*> 197.68.4.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*> 197.68.5.0       150.1.13.254             0    200      0 254 253 iwnzhyfehxan*> 197.68.21.0      150.1.13.254             0    200      0 254 253 iwnzhyfehxan*> 197.68.22.0      150.1.13.254             0    200      0 254 253 iwnzhyfehxanwnzhyfehxan2.6 Implement IPv6.wnzhyfehxanUse any number for the process ID. wnzhyfehxanConfigure the Router ID to match Loopback 0. wnzhyfehxanConfigure Area 0 between on the Ethernet segment shared by all switches. wnzhyfehxanSW1 should control all routing, and SW2 should be the backup for area 0. (Use largest value) wnzhyfehxanSW3 and SW4 are not elected.wnzhyfehxanConfigure OSPF Area 142 between SW1-R1-R4-R2-SW4.wnzhyfehxanConfigure OSPF Area 51 between SW2-R5-R3.wnzhyfehxanSome ipv6 address is already configured.wnzhyfehxanThe ipv6 add prefix : fc01:cc1e:xy:z/64wnzhyfehxanwnzhyfehxan2.7 Implement IPv6 Filtering.wnzhyfehxanQuestion 1wnzhyfehxanAdd a Loopback 8 to SW2 with Global IPv6 Address and ospfv3 Area 0 have the route in OE2.wnzhyfehxanConfigure OSPF Filtering to allow SW2 Loopback 8 in Area 0 and 142 but not Area 51 wnzhyfehxanQuestion 2wnzhyfehxanAdd a Loopback 8 to SW2 with Global IPv6 Address and redistribute into OSPFv3 with OE2.wnzhyfehxanConfigure OSPF filtering to allow SW2 Loopback 8 in Area 0 to go into Area 51, but no Area 142.wnzhyfehxan2011:cc1e:88:88::88/128wnzhyfehxanwnzhyfehxanReduce link traffic, change icmp error message to 4 times a second.wnzhyfehxanSW1 Fa0/1 FC01:DB8:74:11::/64   V123 FC01:DB8:74:123::/64 wnzhyfehxanSW2 V55　FC01:DB8:74:52::/64   V123 FC01:DB8:74:123::/64 wnzhyfehxanSW3 V123 FC01:DB8:74:123::/64 wnzhyfehxanSW4 V42  FC01:DB8:74:24::/64   V123 FC01:DB8:74:123::/64 wnzhyfehxanwnzhyfehxanwnzhyfehxanR1wnzhyfehxanipv6 unicast-routingwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanip cefwnzhyfehxanipv6 cefwnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.1.1wnzhyfehxan area 142 nssawnzhyfehxanwnzhyfehxaninterface Serial0/1wnzhyfehxan ipv6 address FC01:DB8:74:14::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxaninterface Fast0/0wnzhyfehxan ipv6 address FC01:DB8:74:11::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxanR2wnzhyfehxanipv6 unicast-routingwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanip cefwnzhyfehxanipv6 cefwnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.2.2wnzhyfehxan area 142 nssawnzhyfehxanwnzhyfehxaninterface Serial0/1wnzhyfehxan ipv6 address FC01:DB8:74:42::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxaninterface Fast0/0wnzhyfehxan ipv6 address FC01:DB8:74:24::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxanR3wnzhyfehxanipv6 unicast-routingwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.3.3wnzhyfehxanwnzhyfehxaninterface Serial0/0wnzhyfehxan ipv6 address FC01:DB8:74:35::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 51wnzhyfehxanwnzhyfehxanR4wnzhyfehxanipv6 unicast-routingwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanip cefwnzhyfehxanipv6 cefwnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.4.4wnzhyfehxan area 142 nssawnzhyfehxanwnzhyfehxaninterface Serial0/0wnzhyfehxan ipv6 address FC01:DB8:74:14::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxaninterface Serial0/1wnzhyfehxan ipv6 address FC01:DB8:74:42::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxanR5wnzhyfehxanipv6 unicast-routingwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.5.5wnzhyfehxanwnzhyfehxaninterface Serial0/1wnzhyfehxan ipv6 address FC01:DB8:74:35::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 51wnzhyfehxanwnzhyfehxaninterface Fast0/0wnzhyfehxan ipv6 address FC01:DB8:74:52::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 51wnzhyfehxanwnzhyfehxanSW1wnzhyfehxansdm prefer dual-ipv4-and-ipv6 default ------瑩 You need save and reloadwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanip cefwnzhyfehxanipv6 cefwnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.7.7wnzhyfehxan area 142 nssawnzhyfehxanwnzhyfehxanint fa0/1wnzhyfehxan ipv6 add FC01:DB8:74:11::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ipv6 add FC01:DB8:74:123::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 0wnzhyfehxan ipv6 ospf priority 255wnzhyfehxanwnzhyfehxanSW2wnzhyfehxansdm prefer dual-ipv4-and-ipv6 default ------瑩 You need save and reloadwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.8.8wnzhyfehxan redistribute connected route-map loo8wnzhyfehxanwnzhyfehxanint vlan 55wnzhyfehxan ipv6 add FC01:DB8:74:52::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 51wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ipv6 add FC01:DB8:74:123::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 0wnzhyfehxan ipv6 ospf priority 254wnzhyfehxanwnzhyfehxanint loo8wnzhyfehxan ipv6 add 2011:cc1e:88:88::88/128wnzhyfehxanwnzhyfehxanroute-map loo8 per 10wnzhyfehxan match int loo8wnzhyfehxanwnzhyfehxanSW3wnzhyfehxansdm prefer dual-ipv4-and-ipv6 default ------瑩 You need save and reloadwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.9.9wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ipv6 add FC01:DB8:74:123::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 0wnzhyfehxan ipv6 ospf priority 0wnzhyfehxanwnzhyfehxanSW4wnzhyfehxansdm prefer dual-ipv4-and-ipv6 default ------瑩 You need save and reloadwnzhyfehxanipv6 icmp error-interval 250wnzhyfehxanwnzhyfehxanip cefwnzhyfehxanipv6 cefwnzhyfehxanwnzhyfehxanipv6 router ospf 13wnzhyfehxan router-id 13.13.10.10wnzhyfehxan area 142 nssawnzhyfehxanwnzhyfehxanint vlan 42wnzhyfehxan ipv6 add FC01:DB8:74:24::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 142wnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ipv6 add FC01:DB8:74:123::/64 eui-64wnzhyfehxan ipv6 ospf 13 area 0wnzhyfehxan ipv6 ospf priority 0wnzhyfehxanwnzhyfehxanwnzhyfehxan2.7 PFRwnzhyfehxan Configure OER between R1,R2 and R4 according ro the following requirements.wnzhyfehxan" Configure R4 as Master.wnzhyfehxan" Configure R1 and R2 as border routers.wnzhyfehxan" Ensure that PfR session area establishd using loopback0 interface onlywnzhyfehxan" Configure tunnel to have direct connecteivity between border routerswnzhyfehxan" A specific traffic(marked with DSCP"CS2")from VLAN_44 to VLAN_55 must be routed via R1wnzhyfehxan" Another traffic (marked with DSCP"CS4")from VLAN_44 to VLAN_55 must be routed via R2wnzhyfehxan" Use extended access-list  with a single entry.wnzhyfehxan" if required by your solution,you may use any prefix that in not used in your topologywnzhyfehxanwnzhyfehxanwnzhyfehxanON R1wnzhyfehxankey chain KEYwnzhyfehxankey 1wnzhyfehxankey-string CISCOwnzhyfehxanwnzhyfehxanoer borderwnzhyfehxanlocal loopback0wnzhyfehxanmaster 12.12.4.4 key-chain KEYwnzhyfehxanwnzhyfehxaninterface Tunnel 1wnzhyfehxan ip add 12.12.YY.1 255.255.255.0wnzhyfehxan tunnel source loopback0wnzhyfehxan tunnel destination 12.12.2.2wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanON R2wnzhyfehxankey chain KEYwnzhyfehxankey 1wnzhyfehxankey-string CISCOwnzhyfehxanwnzhyfehxanoer borderwnzhyfehxanlocal loopback0wnzhyfehxanmaster 12.12.4.4 key-chain CISCOwnzhyfehxanwnzhyfehxaninterface Tunnel 1wnzhyfehxan ip add 12.12.YY.2 255.255.255.0wnzhyfehxan tunnel source loopback0wnzhyfehxan tunnel destination 12.12.1.1wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanOn R4wnzhyfehxankey chain KEYwnzhyfehxankey 1wnzhyfehxankey-string CISCOwnzhyfehxanoer master wnzhyfehxanPolicy-rules OERwnzhyfehxanborder 12.12.1.1 key-chain KEYwnzhyfehxaninterface Tunnel 1 internalwnzhyfehxaninterface s0/0/0 internalwnzhyfehxaninterface fa0/0 externalwnzhyfehxanlink-group R1wnzhyfehxanborder 12.12.2.2 key-chain KEYwnzhyfehxaninterface Tunnel1 internalwnzhyfehxaninterface fa0/0 externalwnzhyfehxaninterface serial 0/0/0 internalwnzhyfehxanlink-group R2wnzhyfehxanoer-map OER 10wnzhyfehxanmatch trafic-class access-list cs2wnzhyfehxanset link-group R1 fallbackR1wnzhyfehxanoer-map OER 20wnzhyfehxanmatch traffic class access-list cs4wnzhyfehxanset link-group R2 fallback R2wnzhyfehxanip access-list extended cs2wnzhyfehxanpermit ip 12.12.44.0 0.0.0.255 13.13.55.0 0.0.0.255 dscp cs2wnzhyfehxanip access-list extended cs4wnzhyfehxanpermit ip 12.12.44.0 0.0.0.255 12.12.55.0 0.0.0.255 dscp cs4wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxan2.8 Optimized Edge Routing(OER) and Performance Routing(PFR)wnzhyfehxanwnzhyfehxanConfigure R4 to be the master controller and R1 and R2 to be the border routers.wnzhyfehxanThe OER implementation should be optimized such that when the packets with a DSCP CS4 is passing though the network,it is routerd out to R1 exit interface,from source vlan 44 to destination vlan 55wnzhyfehxanWhen dscp CS2 in passing through, it is routed out to R2 exit interface from source vlan 44 ro destination vlan 55wnzhyfehxanYou are allowed to create ACL but ouly one entry to accomplish this task. You are allowed to use any prefix-listwnzhyfehxanBecause of each border must be directly connected,You are allowed to use tunnel 1 and use any prefix except the diagram inusewnzhyfehxanuse active-prove onlywnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanON R4wnzhyfehxanip access-list extended VOICEwnzhyfehxanpermit udp 12.12.44.0 0.0.0.255 host 12.12.55.5 range 16384 32767 dscp efwnzhyfehxanoer-map OER 30wnzhyfehxanmatch ip add access-list VOICEwnzhyfehxanset delay threshold 40wnzhyfehxanset active-prove jitter 12.12.55.5 target-port (16385) it should be in between range of ACLwnzhyfehxanwnzhyfehxanset mode monitor fastwnzhyfehxanset mode route controlwnzhyfehxanset jitter threshold 5wnzhyfehxanset probe frequency 2 (default is 4 use monitr fast command to reduce it to 2)wnzhyfehxanwnzhyfehxanwnzhyfehxanOnR5wnzhyfehxanip sla responderwnzhyfehxanwnzhyfehxan2.10 Netflow Data Export.wnzhyfehxanConfigure Netflow on R1 for IPv6 traffic send to x.x.55.100 with port 9876 every 2 mins aggregate flow cache entry 20000, inactive for 3 mins.  ()ｼ幣2, ｶ抜 3Dﾇ 範慘)wnzhyfehxanwnzhyfehxanR1wnzhyfehxanipv6 cefwnzhyfehxanipv6 flow-cache timeout inactive 180wnzhyfehxanipv6 flow-export source loopback0wnzhyfehxanipv6 flow-export template timeout rate 2wnzhyfehxanipv6 flow-export destination yy.yy.55.100 9876wnzhyfehxanipv6 flow-aggregation cache protocol-portwnzhyfehxancache entries 20000   -wnzhyfehxancache inactive timeout 180wnzhyfehxanexport version 9 wnzhyfehxanwnzhyfehxaninterface f0/0wnzhyfehxan ipv6 flow egresswnzhyfehxanwnzhyfehxan<)ｼ幣2>wnzhyfehxan` ipv6 flow-export version 9wnzhyfehxan ipv6 flow-export destination YY.YY.44.100 9876wnzhyfehxan ipv6 flow-export template timeout 2wnzhyfehxan ipv6 flow-export template options export-stats wnzhyfehxan ipv6 flow-export source loopback0wnzhyfehxan ipv6 flow-aggregation cache protocol-portwnzhyfehxan cache entries 20000wnzhyfehxan cache timeout inactive 180wnzhyfehxan !wnzhyfehxan interface GigabitEthernet0/0wnzhyfehxan ipv6 flow egresswnzhyfehxanwnzhyfehxan<)ｼ幣3>wnzhyfehxanipv6 cefwnzhyfehxanipv6 flow-export version 9wnzhyfehxanipv6 flow-export destination YY.YY.44.100 9876wnzhyfehxanipv6 flow-export source loopback0wnzhyfehxanipv6 flow-export temp time 2wnzhyfehxanipv6 flow-aggregation cache protocol-portwnzhyfehxancache entries 20000wnzhyfehxancache timeout inactive 180wnzhyfehxanwnzhyfehxaninterface GigabitEthernet0/0wnzhyfehxanipv6 flow egresswnzhyfehxanwnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13R1#sh ipv6 flow export template wnzhyfehxan   Template Options Flag = 0wnzhyfehxan   Total number of Templates added = 1wnzhyfehxan   Total active Templates = 1wnzhyfehxan   Flow Templates active = 1wnzhyfehxan   Flow Templates added = 1wnzhyfehxan   Option Templates active = 0wnzhyfehxan   Option  Templates added = 0wnzhyfehxan   Template ager polls = 40wnzhyfehxan   Option Template ager polls = 0wnzhyfehxanMain cache version 9 export is enabledwnzhyfehxan Template export informationwnzhyfehxan   Template timeout = 2wnzhyfehxan   Template refresh rate = 20wnzhyfehxan Option export informationwnzhyfehxan   Option timeout = 30wnzhyfehxan   Option refresh rate = 20wnzhyfehxanwnzhyfehxanRack13R1#sh ipv6 flow cache aggregation protocol-port wnzhyfehxanIP Flow Switching Cache, 0 byteswnzhyfehxan  0 active, 0 inactive, 0 addedwnzhyfehxan  0 ager polls, 0 flow alloc failureswnzhyfehxan  Active flows timeout in 30 minuteswnzhyfehxan  Inactive flows timeout in 180 secondswnzhyfehxanwnzhyfehxanwnzhyfehxanSection 3 : IP Multicastwnzhyfehxanwnzhyfehxan3.1 IPv4 Multicast.wnzhyfehxan● Enable multicasting with PIM-SM between area 142 and area 0.wnzhyfehxan● Use a non-cisco proprietary based on the method to send RP information to the other routers joined inwnzhyfehxan   multicast routing.wnzhyfehxan● Configure R1 and R2 loopback 0 to be rendezvous point (RP)wnzhyfehxan● Ensure that R1 should be the preferred RP rather than R2wnzhyfehxan● Configure from backbone3 in SW3 as a receiver for the multicast group 239.YY.YY.1wnzhyfehxan● Make sure R4 f0/0 is able to ping this multicast IPwnzhyfehxanwnzhyfehxanR1wnzhyfehxanip multicast-routingwnzhyfehxanwnzhyfehxanint lo 0wnzhyfehxan ip pim sparse-modewnzhyfehxanint s0/1wnzhyfehxan ip pim sparse-modewnzhyfehxanint f0/0wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanip pim bsr-candidate loopback0 0wnzhyfehxanip pim rp-candidate loopback0wnzhyfehxanwnzhyfehxanR2wnzhyfehxanip multicast-routingwnzhyfehxanwnzhyfehxanint lo 0wnzhyfehxan ip pim sparse-modewnzhyfehxanint s0/1wnzhyfehxan ip pim sparse-modewnzhyfehxanint f0/0wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanip pim bsr-candidate loopback0 0wnzhyfehxanip pim rp-candidate loopback0 priority 1wnzhyfehxanwnzhyfehxanR4wnzhyfehxanip multicast-routingwnzhyfehxanwnzhyfehxanint lo 0wnzhyfehxan ip pim sparse-modewnzhyfehxanint s0/0wnzhyfehxan ip pim sparse-modewnzhyfehxanint s0/1wnzhyfehxan ip pim sparse-modewnzhyfehxanint f0/0wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanSW1wnzhyfehxanip multicast-routingwnzhyfehxanwnzhyfehxanint lo 0wnzhyfehxan ip pim sparse-modewnzhyfehxanint f0/1wnzhyfehxan ip pim sparse-modewnzhyfehxanint vlan 123wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanSW2wnzhyfehxanip multicast-routingwnzhyfehxanwnzhyfehxanint lo 0wnzhyfehxan ip pim sparse-modewnzhyfehxanint vlan 123wnzhyfehxan ip pim sparse-modewnzhyfehxanint vlan 33wnzhyfehxan ip igmp join-group 239.YY.YY.1wnzhyfehxanwnzhyfehxanSW3wnzhyfehxanip multicast-routingwnzhyfehxanwnzhyfehxanint lo 0wnzhyfehxan ip pim sparse-modewnzhyfehxanint vlan 123wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanSW4wnzhyfehxanip multicast-routingwnzhyfehxanwnzhyfehxanint lo 0wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanint vlan 42wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanint vlan 123wnzhyfehxan ip pim sparse-modewnzhyfehxanwnzhyfehxanNOTE : wnzhyfehxanSpecifies the priority of the C-RP. Range is from 0 to 255. The default priority value is 0.wnzhyfehxanThe BSR C-RP with the lowest priority value is preferred.wnzhyfehxanwnzhyfehxan<Uﾖxﾇ> wnzhyfehxanRack13R4#p 239.13.13.1wnzhyfehxanwnzhyfehxanType escape sequence to abort.wnzhyfehxanSending 1, 100-byte ICMP Echos to 239.13.13.1, timeout is 2 seconds:wnzhyfehxanwnzhyfehxanReply to request 0 from 13.13.123.8, 12 mswnzhyfehxanReply to request 0 from 13.13.123.8, 16 mswnzhyfehxanwnzhyfehxanRack13R4#sh ip pim rpwnzhyfehxanGroup: 239.13.13.1, RP: 13.13.1.1, v2, uptime 00:05:36, expires 00:02:08wnzhyfehxanwnzhyfehxanwnzhyfehxanRack13R1#sh ip pim rp mapping wnzhyfehxanPIM Group-to-RP MappingswnzhyfehxanThis system is a candidate RP (v2)wnzhyfehxanwnzhyfehxanGroup(s) 224.0.0.0/4wnzhyfehxan  RP 13.13.1.1 (?), v2wnzhyfehxan    Info source: 13.13.2.2 (?), via bootstrap, priority 0, holdtime 150wnzhyfehxan         Uptime: 00:08:49, expires: 00:01:59wnzhyfehxan  RP 13.13.2.2 (?), v2wnzhyfehxan    Info source: 13.13.2.2 (?), via bootstrap, priority 1, holdtime 150wnzhyfehxan         Uptime: 00:06:32, expires: 00:01:57wnzhyfehxanwnzhyfehxan3.2 PIM TuningwnzhyfehxanEnsure PIM register message should reach RP via SW1.wnzhyfehxanIf SW1 goes down, PIM register messages should reach RP via one of the switches in area 0wnzhyfehxanwnzhyfehxanSW1とSW4wnzhyfehxanint vlan 123wnzhyfehxan ip pim dr-priority 429467290wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanSection 4 : Advanced Serviceswnzhyfehxanwnzhyfehxan4.1 Network Address Translation (NAT).wnzhyfehxanYou are required to implement NAT.wnzhyfehxanYou need to match the output in the screenshots provided.wnzhyfehxanScreenshot :wnzhyfehxanScreenshot 1 indicated NAT is to be implemented on R4, with nat translations showing SW1 is pinging SW4.wnzhyfehxanScreenshot 2 indicates SW1 pinging 100.100.29.10 with lo100 ip 100.100.17.7wnzhyfehxanScreenshot 3 indicates SW4 pinging 100.100.17.7 with lo100 ip 100.100.29.10wnzhyfehxanwnzhyfehxanNote : You are allowed to add 1 static route on a maximum of 4 devices.wnzhyfehxanwnzhyfehxanNAT do not propagate any prefix from the network 100.0.0.0/8 in any routing protocol you are allowed to add one/24 static in to four devices do not add any static route in R4wnzhyfehxanwnzhyfehxanSW1wnzhyfehxaninterface loopback 100wnzhyfehxan ip add 13.13.100.1 255.255.255.255wnzhyfehxanwnzhyfehxanip route 13.13.200.4 255.255.255.255 13.13.17.1wnzhyfehxanwnzhyfehxanR1wnzhyfehxanip route 13.13.200.4 255.255.255.255 13.13.14.4wnzhyfehxanwnzhyfehxanSW4wnzhyfehxaninterface loopback 100wnzhyfehxan ip add 13.13.200.4 255.255.255.255wnzhyfehxanwnzhyfehxanip route 13.13.100.1 255.255.255.255 13.13.29.2wnzhyfehxanwnzhyfehxanR2wnzhyfehxanip route 13.13.100.1 255.255.255.255 13.13.24.4wnzhyfehxanwnzhyfehxanR4wnzhyfehxaninterface s1/0wnzhyfehxan ip nat outsidewnzhyfehxaninterface s1/1wnzhyfehxan ip nat outsidewnzhyfehxanip nat inside source static 13.13.17.7 13.13.100.1wnzhyfehxanip nat inside source static 13.13.29.10 13.13.200.4wnzhyfehxanwnzhyfehxanwnzhyfehxanRack13R4#sh ip nat translations wnzhyfehxanPro Inside global      Inside local       Outside local      Outside globalwnzhyfehxan--- 13.13.100.1        13.13.17.7         ---                ---wnzhyfehxan--- 13.13.200.4        13.13.29.10        ---                ---wnzhyfehxanwnzhyfehxanRack13SW1#ping 13.13.200.4 source lo 100wnzhyfehxanRack13SW4#ping 13.13.100.1 source lo 100  wnzhyfehxanwnzhyfehxanRack13R4#sh ip nat translations wnzhyfehxanPro Inside global      Inside local       Outside local      Outside globalwnzhyfehxanicmp 13.13.100.1:1     13.13.17.7:1       13.13.29.10:1      13.13.29.10:1wnzhyfehxanicmp 13.13.100.1:1     13.13.17.7:1       13.13.200.4:1      13.13.200.4:1wnzhyfehxan--- 13.13.100.1        13.13.17.7         ---                ---wnzhyfehxanicmp 13.13.200.4:1     13.13.29.10:1      13.13.17.7:1       13.13.17.7:1wnzhyfehxanicmp 13.13.200.4:1     13.13.29.10:1      13.13.100.1:1      13.13.100.1:1wnzhyfehxan--- 13.13.200.4        13.13.29.10wnzhyfehxanwnzhyfehxan4.2 MLS QoS.wnzhyfehxanMake sure that port SW1 f0/1 to f0/5 are making all untagged packets to “COS” 1amd for VOICE Packets to COS5wnzhyfehxanMake sure that these ports are trusting the cos value if packet are already maked.wnzhyfehxanEnsure that all switches are queuing packet marked witch “COS 1”, in the ingress gueue#1wnzhyfehxanEnsure that all switches are queuing packet marked witch “COS 5”, in the ingress gueue#2wnzhyfehxanEnsure that all switch drop ingress traffic marked witch “COS” 1 when the respective ingress queue level is between 40 and 100 persentwnzhyfehxanEnsure that all switch drop ingress traffic marked witch “COS” 5 in ingress until the respective ingress queue in completely fullwnzhyfehxanOnce you complateed this task,only one entry should beshown when taking the outputwnzhyfehxanwnzhyfehxanSW1 / SW2 / SW3 / SW4wnzhyfehxanmls qoswnzhyfehxanmls qos srr-queue input threshold 1 40 100wnzhyfehxanwnzhyfehxanSW1orSW3wnzhyfehxaninterface range f0/1  5wnzhyfehxan mls qos cos 1wnzhyfehxan mls qos trust coswnzhyfehxanwnzhyfehxanwnzhyfehxanshow mls qos input-queuewnzhyfehxanshow mls qos maps cos-input-qwnzhyfehxanwnzhyfehxan4.3 QoS  Class Based Weighted Fair Queuing (CBWFQ).wnzhyfehxanThe IT administrator requires that you implement QoS.wnzhyfehxanTraffic from bb2 need to limit to 10000kbit R2 g0/0.wnzhyfehxanTraffic from bb1 need to limit to 1000kbit R3 s0/0/0.wnzhyfehxanThis will not affect any other traffic.wnzhyfehxanwnzhyfehxanR2wnzhyfehxanclass-map BB2wnzhyfehxan match input interface f0/1wnzhyfehxanpolicy-map Qwnzhyfehxan class BB2wnzhyfehxan bandwidth 10000wnzhyfehxaninterface f0/0wnzhyfehxan service-policy output QwnzhyfehxanwnzhyfehxanR3wnzhyfehxanclass-map BB1wnzhyfehxan match input interface f0/0wnzhyfehxanpolicy-map Qwnzhyfehxan class BB1wnzhyfehxan bandwidth 1000wnzhyfehxaninterface s0/0/0wnzhyfehxan service-policy output Qwnzhyfehxanwnzhyfehxan4.4 Web Cashing System (WCCP).wnzhyfehxanThe IT department wants to implement a web-caching solution in neer futurewnzhyfehxan・This should be implemented on R4. wnzhyfehxan・R4 f0/1 connected to Web Server and fa0/0 connected client.wnzhyfehxan・service number 61 and 62 must be used to implement the task.wnzhyfehxan・Use service number 61 for traffic from server to client and service number 62 for traffic from client to server. wnzhyfehxan・traffic from R4 f0/0 to s0/0 or s0/1 need to redirect to f0/1.wnzhyfehxan・You are not allow to change any configuration on f0/0wnzhyfehxanwnzhyfehxanR4wnzhyfehxanip wccp 61wnzhyfehxanip wccp 62wnzhyfehxanip access-list extended STCwnzhyfehxanpermit ip any 13.13.44.0 0.0.0.255wnzhyfehxanip wccp 61 redirect-list STCwnzhyfehxanip access-list extended CTSwnzhyfehxanpermit ip 13.13.44.0 0.0.0.255 anywnzhyfehxanip wccp 62 redirect-list CTSwnzhyfehxaninterface s0/0/0wnzhyfehxanip wccp redirect outwnzhyfehxaninterface s0/0/1wnzhyfehxanip wccp 62 redirect outwnzhyfehxanintface fa0/1wnzhyfehxanip eccp redirect exclude inwnzhyfehxanwnzhyfehxan4.5 Use most secure connection for ospf area 0 with key Cisco. Cannot configure on router configure mode.wnzhyfehxanSecure the ospf Area0 according to the following requirementwnzhyfehxan・Use the strongest authentication typewnzhyfehxan・The password must be saved in clear in the config and must be see to "Cisco"(without quotes)wnzhyfehxan・you are not allowed to use any commands under the router configuration mode to accomplish this taskwnzhyfehxanwnzhyfehxanSW1 / SW2 / SW3 / SW4wnzhyfehxanint vlan 123wnzhyfehxanip ospf authentication message-digest-key 1 md5 Ciscownzhyfehxan ip ospf authentication message-digestwnzhyfehxan no service password-encriptionwnzhyfehxanwnzhyfehxanwnzhyfehxan4.6 DHCP.wnzhyfehxanThere is a DHCP server for vlan 44 on R4 f0/0.wnzhyfehxanYour task is to complete the DHCP configuration on R4 and SW1, R4 is the only one device which could provide DHCP service.wnzhyfehxanAt some point in the future, a printer will be added with mac address ABCD.ABCD.ABCD connect to SW1 f0/14.wnzhyfehxanEnsure that the printer always get the ip YY.YY.44.100 and can user after reboot, use flash:ccie.txt.wnzhyfehxanDisable the function to remove option 82.wnzhyfehxanwnzhyfehxanNote : R4 has full pre-configwnzhyfehxanwnzhyfehxanR4wnzhyfehxanip dhcp excluded-address 12.12.44.4wnzhyfehxanip dhcp excluded-address 12.12.44.200wnzhyfehxanip dhcp excluded-address 12.12.44.45wnzhyfehxanserveice dhcpwnzhyfehxanip dhcp poolwnzhyfehxannetwork 13.13.44.0/24wnzhyfehxandns-server 13.13.44.50 13.13.44.51wnzhyfehxandomain-name cisco.comwnzhyfehxandefault-router 13.13.44.4wnzhyfehxanwnzhyfehxanOnSW1wnzhyfehxanint fa0/14wnzhyfehxanswi acce vlan 44wnzhyfehxanswi mode accewnzhyfehxanwnzhyfehxan4.7 DHCP Security, Dynamic ARP Inspection (DAI).wnzhyfehxan4.7 DHCP Security, Dynamic ARP Inspection (DAI).wnzhyfehxanThe IP defatymrny id worried about DHCP security and invalid ARP /spoofed packets.wnzhyfehxanYou are required to implement a dynamic solution that will counter against an inbalidwnzhyfehxanspoofed DHCP request and arp packets on SW1 fa0/14 needs to secure the connection wnzhyfehxan・allow max 3 connectionwnzhyfehxan・use /flash:CCIE.TXT filewnzhyfehxan・The connection will be exceeded exceedeng the connection will shutdown the portwnzhyfehxan・R4 should be secured form SW1 attackwnzhyfehxan・Disable the switch to insert and to remove DHCP erlay information (option 82 field)wnzhyfehxan・The priinter is able to connect to the port and get the ip address on any timewnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanSW1wnzhyfehxanno ip dhcp snooping information optionwnzhyfehxanip dhcp snoopingwnzhyfehxanip dhcp snooping vlan 44wnzhyfehxanip dhcp snooping database flash:CCIE.TXTwnzhyfehxanip arp inspection vlan 44wnzhyfehxanint fa0/4wnzhyfehxanip dhcp snooping trustwnzhyfehxanip arp inspection trustwnzhyfehxanip source binding abcd.abcd.abcd vlan 44 66.66.44.45 interface fa0/14wnzhyfehxanint fa0/14wnzhyfehxanip verify sourcewnzhyfehxanswi port-securitywnzhyfehxanswi port-security maximum 3wnzhyfehxanswi poert-security violation shutwnzhyfehxanwnzhyfehxanwnzhyfehxanSection 5 : Optimize the Networkwnzhyfehxanwnzhyfehxan5.1 Imprelent SNMPwnzhyfehxanconfigure SNMP on R4 according to following requirementwnzhyfehxanThe NMS systen is located at 12.12.55.13wnzhyfehxanBGP traps shoule be sent to the NMS system using the community string"ciscoworks"wnzhyfehxanDevice having community "ciscoworks"should habe capability to change SNMP MIBs in R4wnzhyfehxanwnzhyfehxanon R4wnzhyfehxanaccess-list 5 permit host 12.12.55.13wnzhyfehxansnmp-server community ciscoworks rw 5wnzhyfehxansnmp-server enable trap BGPwnzhyfehxansnmp-server host 12,12,44,13 ciscoworks bgpwnzhyfehxanwnzhyfehxanwnzhyfehxan5.2Embedded Event Managerwnzhyfehxanconfigure event manager applets on R4 accourding to the following requirementswnzhyfehxan・EEM an applet name "Conf_Change"wnzhyfehxan・EEM applet needs to write the date and time to a file saves in flash(flash://wr_log.txt)or(flash://conf.txt)wnzhyfehxan・EEM applet needs to activate every time someone make changes to the runnning config.wnzhyfehxan・String to be generated "configuration has been changed"wnzhyfehxanwnzhyfehxanR4wnzhyfehxanevent manager applet Conf_Changewnzhyfehxanevent syslog pattern "%PARSER-5-CFGLOG_LOGGEDCMD"wnzhyfehxanaction 1.0 cli command "enable"wnzhyfehxanaction 2.0 cli command "show clock | append flash:Conf.txt"wnzhyfehxanaction 3.0 syslog msg "configuration has been changed"wnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxanwnzhyfehxan

MQC

【Config】

R1(config)#do show run
Building configuration...

Current configuration : 1392 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!        
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
class-map match-all voip
 match access-group 10
!
!        
policy-map voip
 class voip
  set dscp ef
!
!
!
!
!
!
interface Loopback0
 ip address 10.10.10.10 255.0.0.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet1/0
 speed 100
!
interface FastEthernet1/1
!
interface FastEthernet1/2
!
interface FastEthernet1/3
!
interface FastEthernet1/4
!
interface FastEthernet1/5
!
interface FastEthernet1/6
!
interface FastEthernet1/7
!
interface FastEthernet1/8
!
interface FastEthernet1/9
!
interface FastEthernet1/10
!
interface FastEthernet1/11
!
interface FastEthernet1/12
!
interface FastEthernet1/13
!
interface FastEthernet1/14
!
interface FastEthernet1/15
!
interface Vlan1
 ip address 1.1.1.1 255.0.0.0
 service-policy input voip
!
ip forward-protocol nd
!
!
ip http server
no ip http secure-server
!
access-list 10 permit 1.1.1.0 0.0.0.255
!        
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end

R1(config)#














R2(config)#do show run
Building configuration...

Current configuration : 696 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!        
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!        
interface FastEthernet0/0
 ip address 1.1.1.2 255.0.0.0
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 1.1.1.1
!
!
ip http server
no ip http secure-server
!
!
!
!
control-plane
!        
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end

R2(config)#




【検証】
R2#ping 10.10.10.10 re 1000

Type escape sequence to abort.
Sending 1000, 100-byte ICMP Echos to 10.10.10.10, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (1000/1000), round-trip min/avg/max = 4/20/60 ms




R1#show policy-map interface
 Vlan1

  Service-policy input: voip

    Class-map: voip (match-all)
      1000 packets, 114000 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: access-group 10
      QoS Set
        dscp ef
          Packets marked 1000

    Class-map: class-default (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any