CCNP排錯戰(zhàn)報題

1、給我提供了類似CCIE排錯考試的.net文件autostart = Falselocalhost    port = 7200    udp = 10000    workingdir = .tmp        3725        image = .iosunzip-c3725-adventerprisek9-mz.124-15.T5.bin        ram = 1

2、28        confreg = 0x2102        exec_area = 64        mmap = False        slot1 = NM-16ESW    2621        image = .iosunzip-c2600-i-mz.121

3、-3.T.bin        ram = 20        mmap = False        confreg = 0x2102        ghostios = true        sparsemem = true#    2691#   &#

4、160;    image = .iosunzip-c2691-advsecurityk9-mz.124-11.T2.bin#        ram = 100#        confreg = 0x2142#        exec_area = 64#        mmap = False#   &#

5、160;    slot1 = NM-4T    7200        image = .IOSunzip-c7200-js-mz.123-20.bin        npe = npe-400        ram = 96        confreg = 0x2102   

6、0;    exec_area = 64        mmap = False        slot0 = PA-C7200-IO-2FE        slot1 = PA-4T    router Client1        model = 2621      

7、;  console = 3011        f0/0 = ASW1 F1/1     router Client2        model = 2621        console = 3012        f0/0 = ASW1 F1/2     router FTP  &#

8、160;     model = 2621        console = 3013        f0/0 = ASW2 F1/1     router WEB        model = 2621        console = 3014      

9、  f0/0 = Cloud F0/0     router ASW1        model = 3725        console = 2001        f1/10 = DSW1 f1/10        f1/11 = DSW1 f1/11       

10、; f1/12 = DSW2 f1/12        f1/13 = DSW2 f1/13    router ASW2        model = 3725        console = 2002        f1/10 = DSW2 f1/10       

11、0;f1/11 = DSW2 f1/11        f1/12 = DSW1 f1/12        f1/13 = DSW1 f1/13    router DSW1        model = 3725        console = 2003        f1/

12、14 = DSW2 f1/14        f1/15 = DSW2 f1/15    router DSW2        model = 3725        console = 2004    router R1        model = 7200      

13、60; console = 3001        s1/0 = FR 1    router R2        model = 7200        console = 3002        s1/0 = FR 2    router R3       

14、; model = 7200        console = 3003        s1/0 = FR 3    router R4        model = 7200        console = 3004        s1/0 = FR 4 

15、       f0/0 = DSW1 f1/1        f0/1 = DSW2 f1/1   router Cloud        model = 7200        console = 3005        s1/1 = R1 s1/1    FRSW

16、FR        1:102 = 2:201        2:203 = 3:302        3:304 = 4:403有了初始TroubleShoting！讓我去排錯！然后是一個大實驗排錯題！(差不多30個環(huán)境排錯有L2 TOP /L3 TOP/IPv6 TOP4臺交換機(其中2臺是3層交換機 2臺2層交換  4臺路由器    2個PC屬于不同的VLAN 

17、 2臺服務(wù)器(一個是外網(wǎng)的涉及的知識比較多：(畢竟工作排錯的場景 可能比這個還困難 所以大部分的題 都能排出來！EIGRP OSPF eBGP Redistribution DHCP Client and Server NAT HSRP/VRRP/GLBP IPv6 Routing IPv6 Transition Techniques L2 Trunking L2 STP L2 DTP Private VLANs Port Security Switch Security VACLs/PACLs L2 SVIs Supervisor Redundancy NTPSwitch Supp

18、ort of Wireless, VOIP, and Video Router Security ACLs AAA IOS Service Security 我的排錯思路:(一定要有強大的路由和交換的理論知識及排錯經(jīng)驗，除非有題庫了！從2層開始 排錯  然后到IGP    BGP  IPv6  NAT ！后面就是一些高級服務(wù)的排錯！(1首先 2邊 Trunk的封裝類型 不一樣(一邊ISL  一邊是802.1q,VLNA 接入端口，本征VLAN是否一樣！交換機 連接路由器的單臂路由接口！端口安全&

19、#160;  L2的東西 還真多不記得 是不是跳過一個 Etherchannel題目！ 好像是這個以太網(wǎng)信道沒起作用的！(2特別 注意NAT  ip nat inside 打在主接口 是錯誤的！(3EIGRP的鄰居建立不起來  這個比較簡單  K值不一樣！Show ip protocals來看設(shè)定辦法是在路由進程下：Metric weights tos k1 k2 k3 k4 k5 (缺省是1 0 1 0 0(4OSPF NSSA區(qū)域 導(dǎo)致鄰居不起來  還有OSPF的認證(5ACL有錯(6重發(fā)布route

20、-map控制的時候有錯 ，要特別注意有空語句 那個才對(7BGP的nei 不對 一直在active狀態(tài)(8IPv6的OSPFv3   區(qū)域放錯了！(9HSRP的track 應(yīng)該去掉！Ticket1 Client 1 is not able to ping the serverSitution 1: Unable to ping DSW1(Use L2 DiagramVlan Access map is applied on DSW1 blocking the ip address of client Ans1 DSW1Ans2 Scroll down and

21、 click on vlan access mapAns3No vlan filter 102 Client 1 is not able to ping the serverSituation2: Unable to ping DSW1(Use L2 DiagramOn ASW1 fa1/0/1 and fa1/0/2 switchport access vlan 10 command is not thereAns1ASW1Ans2Access vlanAns3give command: inte*ce range fa1/0/1-/2 switchport access vlan 103

22、Client 1 is not able to ping the serverSituation3: Unable to ping DSW1 in port channel configuratioin of ASW1 vlan 10 is not allowed. (Use L2 DiagramAns1ASW1Ans2Switch to switch connectivityAns3on port channel 23 give switchport trunk allowed vlan 10,2004 Client 1 is not able to ping the serverSitua

23、tion4: Unable to ping DSW1(User layer 2.under running config the mac address for fa0/1 is 0000.0000.0000.0001 and fa0/2 it 0002.Also check show inte*ces fa1/0/1 and fa1/0/2, u will c that the inte*ce is in error disabledAns1ASW1Ans2Port securityAns3 On fa1/0/1 and fa1/0/2 do disable port security an

24、d do shut ,no shut.5 Client 1 is not able to ping the serverSituation 5: Unable to ping R4 fast ethernet port from dsw1.check ip eigrp neighbors from DSW1 u willnot c R4 as neighbor.(use ipv4 Layer 3Ans1 R4Ans2 IP4 EIGRPAns3 Change eigrp process no: from 1 tp 10 because DSW16 Client 1 is not able to

25、 ping the serverSituation 6: Unable to ping serial inte*ce of R4 from the clients. Do show run, check the names of the route-maps. (use ipv4 Layer 3Ans1 R4Ans2 route redistributionAns3 change the name of the route-map under the router EIGRP or router OSPF process from to to ->.7 Client 1 is not a

26、ble to ping the serverSituation 7: client is unable to ping R1s serial inte*ce from the client. Check where authentication is not given under router ospf of R1. (use ipv4 Layer 3Ans1 R1Ans2 ipv4 OSPFAns3 ip ospf authentication command must be given under router OSPF8 Client 1 is not able to ping the

27、 serverSituation 8: client is not able to ping the web server, but the routers can ping the server. NAT problem. (use ipv4 Layer 3Ans1 R1Ans2 IPV4 NATAns3 under NAT access list, enter the command permit 559 Client 1 is not able to ping the serverSituation 9: R1 is not able to ping

28、26. check bgp neighborship. The neighbors address in the neighbor command is wrong under router BGP. (use ipv4 Layer 3Ans1 R1Ans2 BGPAns3 delete the wrong neighbor statement and enter the correct neighbor address in the neighbor command (change 26 to 2610 Client 1

29、 is not able to ping the serverSituation 10: client is not able to ping the server. Except for R1, no one else can ping the server. (use ipv4 Layer 3Ans1 R1Ans2 IPv4 SecurityAns3 Add permit 24 to R1's ACL.11 IPV6 loopback of R2 cannot be pinged from DSW1s loopback.Situation 1

30、1: ipv6 ospf was not enabled on R2s serial inte*ce connecting to R3. (use ipv6 Layer 3Ans1 R2Ans2 IPV6 ospfAns3 on the serial inte*ce of R2, enter the command, ipv6 ospf 6 area 0 (check the IPV6 topology.12 HSRP: DSW1 does not become active.Situation 12: under the standby configuration of DSW1, the

31、command standby 10 track 1 decrement 60 is given, this has to be changed to track 10. (use ipv4 Layer 3Ans1 DSW1Ans2 HSRPAns3 delete the command with track 1 and enter the command with track 10.ASW1(3 TT1.Access vlan - add "switchport access vlan1"2.Port Security - "no switchport port sec" and "shut" and "no sh"3.Sw-to-Sw connection - in Po23 (in exam really write as this, "no switchport trunk allow vlan 20,200" and "switchport trunk allow vlan 10,200"DSW1(2 TT1.VACL/vlan filter - "no vlan filter . vlan-