央邦全部學(xué)習(xí)-真題題庫ccie rs k

CCIERS全真實驗 SECTION1.Layer2 TroubleshootLayer2 VLAN Implement RemoteSwitchedPortyzer SecurePPP Section2:Layer3 ImplementIPv4 ImplementIPv4 ImplementRIPVersion ImplementRIP-OSPF ImplementIPv4EIGRP-OSPF ImplementIPv4 OptimizedOERandPerformance IPv6 IPv6 Section3IPMulImplementPIMSparesModeforIPv4 PIM Section4Advanced NetworkAddress MLS QOS–ClassBasedWeightedFairQueueing( OSPF 4.7WebCachingCommunicationProtocol(W Section5.Optimizethe Implement EmbeddedEven 實驗拓SECTION1.Layer2HasPre-ConfigurationonyourVLANTrunkingProtocol(VTP)isCCIERoutingandSwitching+YY(forexample,theracknumberof3wouldhaveaVTPof802.1Qtrunksbetweenallswitches)UseVTPSW1shouldbeVTPserverandtheotherswitchesshouldbeVTPPPPontheseriallinksbetweenR1andR4.R2andTroubleshootLayer2Afewfaultshavebeeninjectedintothepre-configurationsjustdescribed.Theseissuesmayimpedeaworkingsolutionforcertainportionsofthislabsexamandaffectanylabsexamsection.Youmustverifythatallofyouryoumustfixtheproblems.Pointwillbeawardedforsolvingeachproblem.However,ifyoufailtosolveaparticularproblem,andtheinjectedfaultpreventsyoufromhavingaworkingsolutionsofthislab,thenyouwilllosepointsforthefaultandthescenariothatisnotworking.IDn是2，另外R1、R2R4Serial接口以進行了配置（IP，PPP封裝）SW2SW3portfast，需要移除該配置(config-if)#nospanning-treeportfasttrunk(config-if)#nospanning-treebpduguardenable有一臺交換機的VTP 不是CCIERoutingandSwitchingYY，需要統(tǒng)一vtpCCIERoutingandSwitchingYYnovlanfilterOSPFvlan-list1-4094ipPPP線應(yīng)增加"nopeerneighbor-route"interfaceserial0/0nopeerneighbor-routeVLANConfigureallinter-switchlinkstouseanindustrystandardSettheVTPtoSW1shouldbeserver,andrestSetvtpver2andpassword“cisco”ConfigvlanasVLANVLANRouterI/ForFunctionalR3Fa0/0SW1R2Fa0/1SW2SW3R2R4R4R5SW1是Server，其他都是clientvlanvlanvtpvtppasswordciscovtpversion2vtpmodeservervlan11vlan22vlan33vlan42vlan44vlan144vlan55vlan123vlan999nameVLAN_RSPANnoswitchportipaddressYY.YY.17.7interfaceFastEthernet0/2switchportaccessvlan42switchportmodeaccessinterfaceFastEthernet0/3switchportaccessvlan11switchportmodeaccessinterfaceFastEthernet0/4switchportaccessvlan44switchportmodeaccessswitchportaccessvlan11switchportmodeaccessinterfacerangeFastEthernet0/19-24switchporttrunkencapsulationdot1qswitchportmodetrunkvtpvtppasswordciscovtpversion2vtpmodeinterfaceFastEthernet0/2switchportaccessvlan22switchportmodeaccessinterfaceFastEthernet0/4switchportaccessvlan144switchportmodeaccessinterfaceFastEthernet0/5switchportaccessvlan55switchportmodeaccessinterfaceFastEthernet0/10switchportaccessvlan22switchportmodeaccessinterfacerangeFastEthernet0/19-24switchporttrunkencapsulationdot1qswitchportmodetrunkvtpvtppasswordciscovtpversion2vtpmodeinterfaceFastEthernet0/10switchportaccessvlan33switchportmodeaccessinterfacerangeFastEthernet0/19-24switchporttrunkencapsulationdot1qswitchportmodetrunk vtppasswordciscovtpversion2vtpmodeinterfacerangeFastEthernet0/19-24switchporttrunkencapsulationdot1qswitchportmodetrunkvlanRackYYsw1#showvlanVLAN Fa0/5,Fa0/6,Fa0/7,Fa0/8Fa0/9,Fa0/11,Fa0/12,Fa0/13Fa0/14,Fa0/15,Fa0/16,Fa0/17Fa0/18, Fa0/3, 123 144 999 1005trbrf-default RackYYsw2#showvlanbriefVLAN

Fa0/1,Fa0/3,Fa0/6,Fa0/7Fa0/8,Fa0/9,Fa0/11,Fa0/12Fa0/13,Fa0/14,Fa0/15,Fa0/16Fa0/17,Fa0/18,Gi0/1, Fa0/2, 123 144 999 RackYYsw3#showvlanVLAN Fa0/1,Fa0/2,Fa0/3,Fa0/4Fa0/5,Fa0/6,Fa0/7,Fa0/8Fa0/9,Fa0/11,Fa0/12,Fa0/13Fa0/14,Fa0/15,Fa0/16,Fa0/17

Fa0/18,

123 144 999 RackYYsw4#showvlanVLAN Fa0/1,Fa0/2,Fa0/3,Fa0/4Fa0/5,Fa0/6,Fa0/7,Fa0/8Fa0/9,Fa0/10,Fa0/11,Fa0/12Fa0/13,Fa0/14,Fa0/15,Fa0/16Fa0/17,Fa0/18,Gi0/1, 123 144 999 RackYYsw1#showvtpVTPversion ::VTPversion ::VTPPruning :VTPTraps :DeviceID :0019.2ffd.6YY0ConfigurationlastmodifiedbyYY.YY.17.7at3-1-9300:49:41FeatureVTPVTPOperating :umVLANssupportedlocally NumberofexistingVLANs :14 :MD5digest :0x400x9A0xFB0x760xFD0xF70x910x260x130x280xEE0x480xC90xA60xA30x62VTPversion : Name :VTPVTPversion : Name :VTPPruning :VTPTraps :DeviceID :0019.aab4.ad00ConfigurationlastmodifiedbyYY.YY.17.7at3-1-9300:49:41FeatureVVTPOperating :umVLANssupportedlocally NumberofexistingVLANs :14 :MD5digest :0x400x9A0xFB0x760xFD0xF70x910x260x130x280xEE0x480xC90xA60xA30x62#showinterfacestrunkNative111111ImplementSpanning-TreeConfiguretheadditionalspanning-treesSW1,SW2,SW3andSW4accordingtothefollowingrequirementsEachofthevlansmusthaveaseparatespanning-treeEnsurethatSW1istheRootSwitch,andSW2isBackupforalloddEnsurethatSW2istheRootSwitch,andSW1isBackupforallevenUsespanning-treemodethatenablesrapidtransitionofportsforDonotforgetConfigureto30secondsthetimethatallswitcheswaitbeforetheirspanning-treeprocessesattemptstore-convergeifitdidn’treceiveanyspanning-treeconfigurationmessageforallunusedvlans.4臺交換機配置每個vlan一個生成樹，而且生成樹快速收斂（快速生成樹）SW1是奇數(shù)vlan的主根橋，SW2是備份根橋。SW2是偶數(shù)vlna的主根橋，SW1是備份根橋。所有交換機在收不到BPDU30秒后才進入重新收斂的計算（max-age為30秒）spanning-treemoderapid-pvstspanning-treevlan1-4094max-age30SW1vlan的主根橋，SW2是備份根橋，SW2vlan的主根橋，SW1是spanning-treevlan1,11,33,55,123,999rootprimaryspanning-treevlan22,42,44rootsecondaryspanning-treevlan1,11,33,55,123,999rootsecondaryspanning-treevlan22,42,44priority122YYvlan42的優(yōu)先級就是122YY+42，直接滿足后面的需求Configuretheadditionalspanning-treesSwitchesaccordingtothefollowingConfigureSpanning-treetimerssuchthat,ifnoBPDUwasreceived30seconds,thenthenetworkre-FindthevlanbetweenR2andSW4.TheBIDpriorityofthatVlanmustbe12330onsw2.EnsureportFa0/20isforwardingratherthanblockingforevenvlansonYoumustdothiswithoutanyconfigurationonUsethehighestnumericalvalue plishtheSW2Fa0/19的端口優(yōu)先級（SW4interfacespanning-treevlan22,42,44port-prioritySW4STP（RackYYsw4#showspanning-treevlan42 Spanningtreeenabledprotocol 22o 2secMaxAge20secForwardDelay15BridgeID 32810(priority32768sys-id-ext o 2secMaxAge30secForwardDelay15AgingTime300 RoleSts Prio.NbrImplementUsethefollowingrequirementstoconfiguretheEtherchannelonSW1,SW2SW3andSW4.ConfigureaLayer2EtherChannelbetweenswitchesSw3andSW4usingaproprietaryprotocol.ConfigureaLayer2EtherChannelbetweenswitchesSW1andSW2usingastandardprotocol.Sw1andSw3mustinitiatethenegotiationandSw2andSw4mustnotstartthenegotiation.SW3和SW4之間使用私有協(xié)議建立EtherChannel（PAGP）SW1和SW2之間使用開放協(xié)議建立EtherChannel（LACP）SW1和SW3是會話發(fā)起者（desirable/active）SW3SW4interfacerangefastethernet0/23-24channel-protocolpagpchannel-group34modedesirableinterfacerangefastethernet0/23-24channel-protocolpagpchannel-group34modeSW1SW2interfacerangefastethernet0/23-24channel-protocollacpchannel-group12modeactiveinterfacerangefastethernet0/23-24channel-protocollacpchannel-group12modeFlags:D-down P-bundledinport-channelI-stand-alones-suspendedH-Hot-standby(LACPonly)R-Layer3 S-Layer2U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobeaggregatedd-defaultportNumberofchannel-groupsinuse:1Numberofaggregators: GroupPort-channel Flags:D-down P-bundledinport-channelI-stand-alones-suspendedH-Hot-standby(LACPonly)R-Layer3 S-Layer2U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobeaggregatedd-defaultportNumberofchannel-groupsinuse:1Numberofaggregators: GroupPort-channel Flags:D-down P-bundledinport-channelI-stand-alones-suspendedH-Hot-standby(LACPonly)R-Layer3 S-Layer2U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobeaggregatedd-defaultportNumberofchannel-groupsinuse:1Numberofaggregators: GroupPort-channel Flags:D-down P-bundledinport-channelI-stand-alones-suspendedH-Hot-standby(LACPonly)R-Layer3 S-Layer2U-in f-failedtoallocateM-notinuse,minimumlinksnotmetu-unsuitableforbundlingw-waitingtobeaggregatedd-defaultportNumberofchannel-groupsinuse:1Numberofaggregators: GroupPort-channel Native11111Native11111RemoteSwitchedPortyzerAnytrafficreceivedfromVLAN_BB1andVLAN_BB2mustbereplicatedtoatrafficyzerconnectedtoSW4-fa0/15viaVLAN999,namedVLAN_RSPAN.YouneedtomonitoranyfutureinterfacesconnectiontoVLAN_BB1andAnytrafficflowingthroughthetrunksbetweenSW3andSW4mustbereplicatedtoanothertrafficyzerconnectedtoSW4-Fa0/16DonotcreateanynewVLANwhileconfiguringvlan11vlan12rx流量（BB1、BB2接收的流量）SW4Fa0/15上另外SW3和SW4之間的Trunk線路的流量（雙向）要鏡像到SW4的Fa0/16口上vlan999SW1、SW2SW4BB1/BB2SW4monitorsession1sourcevlan11monitorsession1destinationremotevlanmonitorsession1sourcevlan22monitorsession1destinationremotevlanmonitorsession1sourceremotevlan999monitorsession1destinationinterfacefa0/15SW4Port-channel34SW4monitorsession2sourceinterfaceport-channel34bothmonitorsession2destinationinterfacefa0/164Fa0/19Fa0/24interfacerangefa0/19-24duplexhalfSW4RackYYsw4#showmonitorsessionallSession1 :RemoteDestinationSourceRSPAN :DestinationPorts : :Session :LocalSourcePorts DestinationPorts : :SecurePPPtoR1andR2accordingtothefollowingrequirementsUseauthentication,authorization,andaccountingR4mustauthenticateR1andR2,butR1andR2shouldnotauthenticateDonotuseany“PPPchaphostname”commandonR1andR4shouldfirsttrytheRadiusServer12.12.44.200usingakeyof“CISCO”andfallbacktolocalloginintheeventofafailuretoconnecttotheRadiusServerMakesurethatthisshouldnotaffectanyusername/passwordsettingonLineconsoleorlineVTYR1R4R2R4PPPCHAPR4接受認證，R1和R2只發(fā)送驗證信息R1R2pppchaphostname命令（R1R2hostnameR4，R4（YY.YY.44.200，key=CISCOR4AAA、username/passwordpppaaanew-aaaauthenticationlogindefaultlineaaaauthenticationpppdefaultgroupradiuslocal-caseradius-serverhostYY.YY.44.200keyCISCOusernameRackYYR1passwordciscousernameRackYYR2passwordciscointerfaceserial0/0pppauthenticationchapdefaultinterfaceserial0/1pppauthenticationchapR1R2PPPchapinterfaceserial0/0encapsulationpppnopeerneighbor-routepppchappasswordcisco確保R4 通R1和TypeescapesequencetoSending5,100-byteICMPEchostoYY.YY.14.1,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/1/4msRackYYR4#YY.YY.24.2TypeescapesequencetoSending5,100-byteICMPEchostoYY.YY.24.2,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/1/4msSection2:Layer3Afterfinishingeachofthefollowingquestions,makesurethatallconfiguredDonotredistributebetweenanyIGPandYouneedtoaBGProuteonlyifitisstatedinthequestion,otherwisetherouteshouldintheBGPtableAttheendofsection2,allsubnetsinyourtopology,includingtheloopbackinterfaces,mustbereachablevia.Therefore,redistributeasyouwishunlessdirectlystatedinaquestion.ThebackbonemustbereachableonlyiftheyarepartofthesolutiontoaquestionTheloopbackinterfacescanbeseenaseither/24or/32intheroutingtableunlessstatedotherwiseinaquestionTheloopbackinterfacescanbeaddedintoyourIGPeitherviaredistributionoraddedtoaroutingprocessofyourchoice不要在IGP和BGP之間實施重分布，如果BB網(wǎng)段（150.x.YY.0)的可達性直接影響題目需求的實現(xiàn)，那么BB網(wǎng)段必須是可達的ImplementIPv4OSPFprocessIDcanbeanyTheOSPFrouterIDmustbestableandmustbeconfiguredusingtheipaddressofinterfaceloopback0Loopback0interfacesshouldbeadvertisedintheOSPFareaasshownintheIGPtopologydiagramandmustappearas/32hostroutes.EnsurethatallswitchesattachedtotheVLAN123exchangeroutingupdatesprimarilywithSW1andthenwithSW2(incaseSW1goesdown).Usethehighestnumericvalues.MakesurethatallthreeprefixesforthebackbonelinksappearasOSPFexternaltype2routersinR4’sroutingDonotcreateadditionalOSPFNonotuseanyIPaddressnotlistedin確保vlan123中的所有交換機首選由SW1負責轉(zhuǎn)發(fā)路由更新，當SW1不可用后，優(yōu)選SW2交換路由（使用確保所有的BB網(wǎng)段（150.x.yy.0/24）在R4的路由表中以“E2”形式出現(xiàn)SW1iproutingrouterospf1router-idnetworkYY.YY.7.70.0.0.0areanetworkYY.YY.123.70.0.0.0areanetworkYY.YY.17.70.0.0.0areaSW2iproutingrouterospf1router-idnetworkYY.YY.8.80.0.0.0areanetworkYY.YY.123.80.0.0.0areanetworkYY.YY.55.80.0.0.0areaSW3iproutingrouterospf1router-idnetworkYY.YY.9.90.0.0.0areanetworkYY.YY.123.90.0.0.0areaSW4iproutingrouterospf1router-idnetworkYY.YY.10.100.0.0.0areanetworkYY.YY.123.100.0.0.0areanetworkYY.YY.42.100.0.0.0areaR1routerospf1networkYY.YY.1.10.0.0.0areanetworkYY.YY.14.10.0.0.0areanetworkYY.YY.17.10.0.0.0areaR2routerospf1networkYY.YY.2.20.0.0.0areanetworkYY.YY.24.20.0.0.0areanetworkYY.YY.42.20.0.0.0areaR3routerospf1networkYY.YY.3.30.0.0.0areanetworkYY.YY.35.30.0.0.0areaR4routerospf1networkYY.YY.4.40.0.0.0areanetworkYY.YY.144.40.0.0.0areaR5routerospf1networkYY.YY.5.50.0.0.0areanetworkYY.YY.35.50.0.0.0areanetworkYY.YY.55.50.0.0.0areaSW1SW2vlan123OSPFSW1DR，SW2interfacevlan123ipospfpriority255interfacevlan123ipospfpriority254如果要看到效果，關(guān)閉四臺交換機的vlan123，再開啟死臺交換機的R2BB2route-mapconn_bb2permit10matchinterfacefa0/1routerospf1redistributeconnectedroute-mapconn_bb2RackYYR4#showipCodes:C-connected,S-static,R-RIP,M-mobile,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevel-2ia-IS-ISinterarea,*-candidatedefault,U-per-userstaticrouteo-ODR,P-periodicdownloadedstaticrouteGatewayoflastresortisnotO YY.YY.10.10/32[110/66]viaYY.YY.24.2,00:07:26,OIA YY.YY.9.9/32O YY.YY.10.10/32[110/66]viaYY.YY.24.2,00:07:26,OIA YY.YY.9.9/32[110/67]viaYY.YY.24.2,00:03:29,Serial0/1[110/67]viaYY.YY.14.1,00:03:28,Serial0/0[110/67]viaYY.YY.14.1,00:03:23,YY.YY.8.8/32[110/67]viaYY.YY.24.2,00:03:28,OO YY.YY.7.7/32[110/66]viaYY.YY.14.1,00:05:40,O YY.YY.5.5/32[110/68]viaYY.YY.24.2,00:02:01,[110/68]viaYY.YY.14.1,00:02:01, YY.YY.4.4/32isdirectlyconnected,O YY.YY.3.3/32[110/132]viaYY.YY.24.2,00:02:01, [110/132]viaYY.YY.14.1,00:02:01, YY.YY.2.2/32[110/65]viaYY.YY.24.2,00:07:27, YY.YY.1.1/32[110/65]viaYY.YY.14.1,00:07:28, YY.YY.14.0/24isdirectlyconnected, YY.YY.17.0/24[110/65]viaYY.YY.14.1,00:07:28, YY.YY.24.0/24isdirectlyconnected,O YY.YY.35.0/24[110/131]viaYY.YY.24.2,00:02:02,[110/131]viaYY.YY.14.1,00:02:02, YY.YY.42.0/24[110/65]viaYY.YY.24.2,00:07:28, YY.YY.44.0/24isdirectlyconnected,O YY.YY.55.0/24[110/67]viaYY.YY.24.2,00:03:30,[110/67]viaYY.YY.14.1,00:03:25,O YY.YY.123.0/24[110/66]viaYY.YY.24.2,00:04:14,[110/66]viaYY.YY.14.1,00:04:15,150.2.0.0/24issubnetted,1 YY.YY.144.0/24150.2.0.0/24issubnetted,1OO 150.2.YY.0[110/20]viaYY.YY.24.2,00:07:28,SW4SW1DR，SW2BDRRackYYsw4#showipospfNeighbor Dead 11ImplementIPv4intheIGPtopologyBB3hasIPaddress150.3.YY.254andisusingASnumberDisableautoRedistributeEIGRP100intoTheEIGRProutesshouldnotbepresentinOSPFArea51buttoArea142,SW2shouldgenerateainter-areadefaultroute.配置SW2的EIGRP100，并將Area51配置為完全NSSA，并SW2向Area51發(fā)送重分布routereigrpnetwork150.3.YY.1routerospf1area51nssano-redistributionno-summaryredistributeeigrp100subnetsR3R5OSPFArea51routerospfarea51SW2會從BB3收到一些EIGRP路由RackYYsw2#showiprouteeigrpCodes:L-local,C-connected,S-static,R-RIP,M-mobile,B-D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevel-2ia-IS-ISinterarea,*-candidatedefault,U-per-userstaticrouteo-ODR,P-periodicdownloadedstaticroute,H-NHRP,l-LISP+-replicatedroute,%-nexthopoverrideGatewayoflastresortisnotsetD4.0.0.0/32issubnetted,14.1.1.1[90/130816]via150.3.YY.254,00:00:04,128.28.0.0/24issubnetted,1D128.28.2.0[90/130816]via150.3.YY.254,00:00:04,198.1.1.0/30issubnetted,1D198.1.1.4[90/130816]via150.3.YY.254,00:00:04,D198.2.1.0/24[90/130816]via150.3.YY.254,00:00:04,D198.2.3.0/24[90/130816]via150.3.YY.254,00:00:04,D198.2.5.0/24[90/130816]via150.3.YY.254,00:00:04,RackYYR3#showiprouteYY.0.0.0/8isvariablysubnetted,4subnets,2 YY.YY.5.5/32[110/65]viaYY.YY.35.5,00:01:35,Serial0/0 YY.YY.55.0/24[110/65]viaYY.YY.35.5,00:01:35,Serial0/0O*IA0.0.0.0/0[110/66]viaYY.YY.35.5,00:01:35,Serial0/0置為完全NSSARackYYR4#showiprouteospf4.0.0.0/32issubnetted,1O4.1.1.1[110/20]viaYY.YY.24.2,00:01:47,[110/20]viaYY.YY.14.1,00:01:47,128.28.0.0/24issubnetted,1O128.28.2.0[110/20]viaYY.YY.24.2,00:01:47,[110/20]viaYY.YY.14.1,00:01:47,O198.2.3.0/24[110/20]viaYY.YY.24.2,00:01:47,[110/20]viaYY.YY.14.1,00:01:47,198.1.1.0/30issubnetted,1O198.1.1.4[110/20]viaYY.YY.24.2,00:01:47,[110/20]viaYY.YY.14.1,00:01:47,O198.2.1.0/24[110/20]viaYY.YY.24.2,00:01:47,[110/20]viaYY.YY.14.1,00:01:47,YY.0.0.0/8isvariablysubnetted,18subnets,2OYY.YY.10.10/32[110/66]viaYY.YY.24.2,00:17:35,OYY.YY.9.9/32[110/67]viaYY.YY.24.2,00:07:17,[110/67]viaYY.YY.14.1,00:07:15,OYY.YY.8.8/32[110/67]viaYY.YY.24.2,00:07:18,[110/67]viaYY.YY.14.1,00:07:21,OYY.YY.7.7/32[110/66]viaYY.YY.14.1,00:15:50,OYY.YY.5.5/32[110/68]viaYY.YY.24.2,00:02:36,[110/68]viaYY.YY.14.1,00:02:36,OYY.YY.3.3/32[110/132]viaYY.YY.24.2,00:02:36,[110/132]viaYY.YY.14.1,00:02:36,OYY.YY.2.2/32[110/65]viaYY.YY.24.2,00:17:37,OYY.YY.1.1/32[110/65]viaYY.YY.14.1,00:17:37,OYY.YY.17.0/24[110/65]viaYY.YY.14.1,00:17:37,OYY.YY.35.0/24[110/131]viaYY.YY.24.2,00:02:37,[110/131]viaYY.YY.14.1,00:02:37,OYY.YY.42.0/24[110/65]viaYY.YY.24.2,00:17:37,OYY.YY.55.0/24[110/67]viaYY.YY.24.2,00:07:18,[110/67]viaYY.YY.14.1,00:07:21,OYY.YY.123.0/24[110/66]viaYY.YY.24.2,00:08:02,[110/66]viaYY.YY.14.1,00:08:06,O198.2.5.0/24[110/20]viaYY.YY.24.2,00:01:48,[110/20]viaYY.YY.14.1,00:01:48,150.2.0.0/24issubnetted,1O 150.2.YY.0[110/20]viaYY.YY.24.2,00:17:37,150.3.0.0/24issubnetted,1OE2 150.3.YY.0[110/20]viaYY.YY.24.2,00:01:50,Serial0/1[110/20]viaYY.YY.14.1,00:01:50,Serial0/0ImplementRIPVersionConfigureRIPVersion2(RIPv2)pertheIGPtopologyRIPupdatesshouldbeadvertiseonlyouttotheinterfacepertheIGPtopologydiagramAllRIPupdatesshouldbeonthebelowshouldbeallowed.YouareallowedtouseonlyoneACLline plishthis只用一個條目的ACL來實現(xiàn)R3RIPv2distribute-listversionnetwork150.1.0.0distribute-list1infa0/0noauto-summaryaccess-list1permit199.172.4.0確認R3能看到4條RIP路由RackYYR3#showiprouterip 199.172.14.0/24[120/1]via150.1.YY.254,00:00:05, 199.172.12.0/24[120/1]via150.1.YY.254,00:00:05,FastEthernet0/0 199.172.6.0/24[120/1]via150.1.YY.254,00:00:05,FastEthernet0/0 199.172.4.0/24[120/1]via150.1.YY.254,00:00:05,FastEthernet0/0ImplementRIP-OSPFConfiguretoredistributeRIPintoOSPFareaTheroutingtablemustbeshownonR5asthebelowTheredistributedroutesmustbeadvertisedtoallroutersinYouareallowedtouseonlyoneACLline plishthisUseStandardACLwithasingleOOOOO被重分布的路由必須傳輸?shù)剿蠴SPF路由器上如果是用ACL，必須只用包含一個條目的ACLR3access-list2permit199.172.4.00.0.2.255route-mapRIP_TO_OSPFpermit10matchipaddress2setmetric-typetype-1route-mapRIP_TO_OSPFpermitrouterospfredistributeripsubnetsroute-map確認R5的路由表中外部路由和需求一致RackYYR5#showiprouteospf|includeNON2199.172.14.0/24[110/20]viaYY.YY.35.3,00:00:33,ON2199.172.12.0/24[110/20]viaYY.YY.35.3,00:00:33,ON1199.172.6.0/24[110/85]viaYY.YY.35.3,00:00:33,Serial0/1ON2 150.1.YY.0[110/20]viaYY.YY.35.3,00:00:33,Serial0/1ON1199.172.4.0/24[110/85]viaYY.YY.35.3,00:00:33,ImplementIPv4EIGRP-OSPFConfigureSW2toredistributeEIGRP100intoEIGRPlearnedroutesshouldbeseenasexternaltype2onOSPFareaEnsurethattheEIGRProuteshouldNOTbepresentedintoOSPFarea51andSW2shouldgenerateainter-areadefaultrouteSW2EIGRP100routerospfarea51nssano-redistributionno-summaryredistributeeigrp100subnetsImplementIPv4ReferringtheBGPRoutingdiagram.ConfigureBGPwithintheseConfigureiBGPpeeringinASYY.iBGPpeeringneedstoestablishedbetweenSW2,R1,R2,R3andR5EachiBGPpeershouldhaveonlyoneneighbour,expectMakesurethatiBGPneighbourrelationshipshouldnotbeaffectedbythephysicalstatusofthelink.ExternalBorderGatewayProtocol(EBGP):R2EBGPpeerswiththerouter150.2.YY.254onBackbone2AS254withcommunity254.EBGP:R3EBGPpeerswiththeroutes150.1.YY.254onBackbone1,ASThisrouteradvertisesfiverouteswiththeformat197.68.Z.0/24andtheASpath254253withcommunity254.RoutersthatarereceivedfromBB2shouldbetaggedwithcommunity254104androutesreceivedfromBB1shouldbetaggedwithcommunity254109103withinASYY.ThiscommunityshouldbeshowninallotheriBGPpeers.ThenexthopforAS254routesshouldbeAlliBGPneighbours(evenR2)withinASYYshouldpreferpaththroughR3forallBGPlearnedroutes.useanymethodtoidentitytheBB1andBB2IPASYYIBGPpeer，SW2、R1、R3R5IBGPBB1那里收到的路由，community254109103community屬性要整個ASYY中傳遞到所有IBGP鄰居到AS254的路由下一跳確保是BB的IP地址IP150.1.YY.254，BB2IpRackYYR3(config)#access-list100permitiphost150.1.YY.1anyRackYYR3(config)#loggingconsole7RackYYR3(config)#noip-lookupRackYYR3#debugippacketIPpacketdebuggingisonforaccesslist100RackYYR3#150.1.YY.255repeat1TypeescapesequencetoSending1,100-byteICMPEchosto150.1.YY.255,timeoutis2*Mar115:52:58.514:IP:s=150.1.YY.1(local),d=255.255.255.255(FastEthernet0/0),len100,sendingbroad/multicastReplytorequest0

RackYYR3#showarpHardware-關(guān)閉debug刪除ACLRackYYR3#nodebugallAllpossibledebugginghasbeenturnedoffRackYYR3(config)#noaccess-list100R2BB2SW2BGPIBGPpeerpeer-grouprouterbgpnobgprouter-idYY.YY.8.8neighborIBGPpeer-groupneighborIBGPremote-asYYneighborIBGPupdate-sourceloopback0neighborIBGProute-reflector-clientneighborIBGP neighborYY.YY.1.1peer-groupIBGPneighborYY.YY.2.2peer-groupIBGPneighborYY.YY.3.3peer-groupIBGPneighborYY.YY.5.5peer-groupIBGProuterbgpnobgprouter-idYY.YY.1.1neighborYY.YY.8.8remote-asYYneighborYY.YY.8.8update-sourceloopbackrouterbgpnobgprouter-idYY.YY.2.2neighborYY.YY.8.8remote-asYYneighborYY.YY.8.8update-sourceloopback0neighborYY.YY.8.8 routerbgpnobgprouter-idYY.YY.3.3neighborYY.YY.8.8remote-asYYneighborYY.YY.8.8update-sourceloopback0neighborYY.YY.8.8 routerbgpnobgprouter-idYY.YY.5.5neighborYY.YY.8.8remote-asYYneighborYY.YY.8.8update-sourceloopbackR2BB2EBGPpeer，并修改communityroute-mapCOMMUNITYpermit10setcommunity254108104routerbgpYYneighbor150.2.YY.254remoteneighbor150.2.YY.254route-mapCOMMUNITYR3BB3EBGPpeer并修改communitylocal-proference，確保內(nèi)部所有路由器優(yōu)選R3到達AS254route-mapCOMMUNITYpermit10setcommunity254109103setlocal-preference1000routerbgpYYneighbor150.1.YY.254remoteneighbor150.1.YY.254route-mapCOMMUNITYRackYYR2#showipbgp197.68.1.0BGProutingtableentryfor197.68.1.0/24,versionPaths:(2available,best#1,tableDefault-IP-Routing-Table)Flag:0x8A0Advertisedtoupdate-2254YY.254(metric20)fromYY.YY.8.8OriginIGP,metric0,localpref1000,valid,internal,bestCommunity:103109254Originator:YY.YY.3.3,Clusterlist:YY.YY.8.8YY.254from150.2.YY.254OriginIGP,metric0,localpref100,valid,externalCommunity:104108254ASYYBGPBB1（BB1到達AS254）RackYYR1#showiproutebgp 197.68.1.0/24[200/0]via150.1.YY.254,00:05:18 197.68.5.0/24[200/0]via150.1.YY.254,00:05:18 197.68.21.0/24[200/0]via150.1.YY.254,00:05:18 197.68.4.0/24[200/0]via150.1.YY.254,00:05:18 197.68.22.0/24[200/0]via150.1.YY.254,00:05:18RackYYR2#showiproute 197.68.1.0/24[200/0]via150.1.YY.254,00:06:17 197.68.5.0/24[200/0]via150.1.YY.254,00:06:17 197.68.21.0/24[200/0]via150.1.YY.254,00:06:17 197.68.4.0/24[200/0]via150.1.YY.254,00:06:17 197.68.22.0/24[200/0]via150.1.YY.254,00:06:17RackYYR3#showiproute 197.68.1.0/24[20/0]via150.1.YY.254,00:06:27 197.68.5.0/24[20/0]via150.1.YY.254,00:06:27 197.68.21.0/24[20/0]via150.1.YY.254,00:06:27 197.68.4.0/24[20/0]via150.1.YY.254,00:06:27 197.68.22.0/24[20/0]via150.1.YY.254,00:06:27RackYYR5#showiproute 197.68.1.0/24[200/0]via150.1.YY.254,00:06:40 197.68.5.0/24[200/0]via150.1.YY.254,00:06:40 197.68.21.0/24[200/0]via150.1.YY.254,00:06:40 197.68.4.0/24[200/0]via150.1.YY.254,00:06:40 197.68.22.0/24[200/0]via150.1.YY.254,00:06:40RackYYsw2#showiproute 197.68.1.0/24[200/0]via150.1.YY.254, 197.68.4.0/24[200/0]via150.1.YY.254,00:02:36 197.68.5.0/24[200/0]via150.1.YY.254,00:02:36 197.68.21.0/24[200/0]via150.1.YY.254,00:02:36 197.68.22.0/24[200/0]via150.1.YY.254,PerformanceRouting(ConfigureOERonR1,R2andR4accordingtothefollowingR1mustbethemasterR1andR2mustbetheBorderEnsurethatPfRsessionareestablishedusingLoopback0interfaceConfiguretunneltohavedirectconnectivitybetweenborderAspecifictraffic(markedwithDSCP“CS2”)fromVlan_44toVlan_55mustberoutedviaR1Anothertraffic(markedwithDSCP“CS4”)fromVlan_44toVlan_55mustberoutedviaR2Useextendedaccess-listwithasingleIfrequiredbyyoursolution,youmayuseanyprefixthatisnotusedinyourtopologyMustuseuse80%onexternallinkR1and90%onR2,andsetlowestloadintervalto30sonexternallinkR1、R2R4OERR4配置為master（tunnel從vlan44到vlan55的，且DSCP為cs2的流量需要通過R1轉(zhuǎn)發(fā)vlan44vlan55DSCPcs4R2轉(zhuǎn)發(fā)R4ipaccess-listextendedpermitipYY.YY.44.00.0.0.255YY.YY.55.00.0.0.255dscpipaccess-listextendedpermitipYY.YY.44.00.0.0.255YY.YY.55.00.0.0.255dscpkeychainKEYkey1oermasterborderYY.YY.1.1key-chainKEYinterfaceFastEthernet0/0externalmax-xmit-utilizationpercentage80link-groupR1interfaceSerial0/0internalinterfaceTunnel1internalborderYY.YY.2.2key-chainKEYinterfaceFastEthernet0/0externalmax-xmit-utilizationpercentage90link-groupR2interfaceSerial0/0internalinterfaceTunnel1internaloer-mapOERmatchtraffic-classaccess-listcs2setlink-groupR1fallbackR1!oer-mapOERmatchtraffic-classaccess-listcs4setlink-groupR2fallbackR2R1R2OERkeychainKEYkey1oerlocalloopbackmasterYY.YY.4.4key-chainKEYinterfacetunnel1ipaddressYY.YY.YY.1tunnelsourceloopback0tunneldestinationYY.YY.2.2keychainKEYkey1oerlocalloopbackmasterYY.YY.4.4key-chainKEYinterfacetunnel1ipaddressYY.YY.YY.2tunnelsourceloopback0tunneldestinationYY.YY.1.1R1R2Fa0/0Load-interfacefa0/0OERRackYYR1#showoerOERBRYY.YY.1.1ACTIVE,MCYY.YY.4.4UP/DOWN:UPAuthFailures:ConnStatus:SUCCESS,PORT:Version:2.1MCVersion:2.1 RackYYR2#showoerOERBRYY.YY.2.2ACTIVE,MCYY.YY.4.4UP/DOWN:UPAuthFailures:ConnStatus:SUCCESS,PORT:Version:2.1MCVersion:2.1 OptimizedOERandPerformanceImplementsperformanceroutingasthefollowingPfRmustensurethatvoicetrafficmustberoutedviatheexitwhichprovidesumdelayof40millisecondsandumjitterof5Setfrequencyofprobesto2MakesurethatallexitsareconstantlyR5(YY.YY.55.5)markwithdscpefVOICE40msvlna44vlan55voiceDSCPipaccess-listext