Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution

Leader of IT Certifications
Website: https://cciedump.spoto.net Email: support@spoto.net
Phone / WhatsApp: +86 18344981205 Facebook page: https://www.facebook.com/spotoccie
【CCIE】SPOTO CCIE LAB RS V5.0 H1 TS1 BT1 Solution
Content
Q1：Layer 2（2 point）............................................................................................................................................................................... 2
Q2：PPP(2 point)........................................................................................................................................................................................... 4
Q3：OSPF(2 point)........................................................................................................................................................................................ 6
Q4：EIGRP（2 point）...............................................................................................................................................................................10
Q5：BGP（2point）....................................................................................................................................................................................13
Q6：IPv6（2 point）...................................................................................................................................................................................17
Q7：DMVPN（4 point）...........................................................................................................................................................................19
Q8：MPLS VPN（4 point）......................................................................................................................................................................25
Q9：DMVPN NAT（2 point） .................................................................................................................................................................29
Q10：NAT（2 point）................................................................................................................................................................................31

Q1：Layer 2（2 point）
PC101 should successfully access Server 1 behind SW1.
PC101 cannot access R7/R8, fix the problem so that PC101 can ping R7.

Faults:
SW2:
vlan12
!
interface e0/0
switchport trunk allowed vlan add 12
!
interface Ethernet1/0
switchport access vlan 100
!
interface Vlan100
ip address 172.16.100.1 255.255.255.0

You can shutdown/no shutdown the interface, if PC101 cannot get IP address.
shutdown
no shutdown
Q2：PPP(2 point)
R17 should have one default route which points to R12 via PPP as shown below.

Faults:
R17
interface s4/0
ppp chap hostname UberMarket_spoke_R17
!
interface s4/0
ppp ipcp route default
!
interface Serial4/0

no ppp authentication chap callout
R12
no ip local pool SPOKE1 145.67.89.0
ip local pool SPOKE1 145.67.89.22
Q3：OSPF(2 point)

When R1 tries to access the network 123.45.67.48/29, which is between R21
and R22, the traffic should be load balanced as shown in the exhibit.

Faults:
R3
router ospf 12345
no area 1 range 134.56.78.0 255.255.255.0
R5
router ospf 12345
no max-metric router-lsa
R21
no ip ospf cost 1

Q4：EIGRP（2 point）
Traffic from R11 destined to loopback 0 of R14 should be load balanced via
EIGRP as shown in the exibit

Faults:
R13

router eigrp 145
metric weights 0 1 1 1 1 1
R13
ip access-list standard 10
no 10
R14
no ip prefix-list DENY seq 5 deny 145.14.14.14/32
R12
ip access-list standard 1
5 deny 145.14.14.14
R12
no bandwidth 1000
R13
no delay 1000

Q5：BGP（2point）
When R12 traces the following routes
194.1.1.0/24
8.8.8.8/32
123.0.0.0/8
134.0.0.0/8
it should get the same result as shown in the following exibit

Faults:
R22
router bgp 12345

address-family ipv4
neighbor PEER next-hop-self
!
clear ip bgp * soft
R6
route-map MED permit 20
match ip address prefix-list 134
set metric 50
!
clear ip bgp * soft
R4
set metric 50
R21
ip prefix-list 194 seq 10 permit 194.1.0.0/16 le 32
!

set metric 300
clear ip bgp * soft
R12 
router bgp 14567
maximum-paths 2

Q6：IPv6（2 point）
Phone is not able to ping 2001:BEEF:CAFE::26/64 located on Server4, fix the
problem so that the following is successful

Faults:
R25
router bgp 65101
address-family ipv6
network 2001:CC1E:BEEF:25::/64
R22
router bgp 12345
address-family ipv6
neighbor 123.1.2.18 route-map NEXT-HOP out
!
clear ip bgp * soft
R25
route-map NEXT-HOP permit 10
no set ipv6 next-hop 2001:3::3
set ipv6 next-hop 2001:CC1E:BEEF:2225::18
clear ip bgp * soft

Q7：DMVPN（4 point）

DMVPN is configured on R15，17，18 and 19. R15 is hub and rest of devices
are spokes. fix the problem so that server 2 can access PC 107 as shown
below

Faults:
R15
interface Tunnel0
ip nhrp redirect

R18/R19
interface Tunnel0
ip nhrp shortcut
R15
router eigrp 200
no redistribute connected metric 1 1 1 1 1
R19
interface Tunnel0
no ip nhrp authentication uSER789
ip nhrp authentication USER789
R18
interface Tunnel0
ip nhrp map multicast 145.67.89.10
R18
interface Tunnel0

no ip nhrp nhs 215.1.1.1
ip nhrp nhs 215.0.0.1
R19
ip access-list extended DMVPN
permit esp any any
/--Note: you can use permit ip any any, if you cannot ensure. --/
R19
router eigrp 200
no eigrp stub connected summary
/--R17 and R18 configured EIGRP stub, this is normal, you don’t need remove. --/
R15
interface tunnel 0 
no ip split-horizon eigrp 200
R20
router eigrp 200

no passive-interface e0/0
/--Note: You don’t need remove passive-interface E0/1. --/
Q8：MPLS VPN（4 point）
R7 and R8 are configured as backbone for VPN network. R9, R10, PC 104 and
PC 106 are VPN clients. ensure that the output matches the following exhibit.

You need shutdown the interface E1/0 on R3, when you test backup path. Remember
to no shutdown after test.
Faults:

R7
router bgp 65100
neighbor 123.45.67.21 default-originate
R8
router bgp 65100
neighbor 123.45.67.25 default-originate
R3
ip vrf BancoBank_ToHub
route-target import 65100:102
R9
router ospf 65101
default-information originate
R7
no ip nat source list 100 interface Ethernet0/0.125 overload
ip nat inside source list 100 interface Ethernet0/0.125 overload

R3
router bg 12345
address-family ipv4
network 125.45.67.20 mask 255.255.255.252

Q9：DMVPN NAT（2 point）
There is DMVPN configured between R7 (Hub) and R24 (Spoke) via Nat
Network (R23).
ensure that PC 110 can access Server 1 as shown

Faults:
R7
no crypto isakmp key CCIE address 192.168.1.2
crypto isakmp key CCIE address 0.0.0.0
R24
crypto ipsec nat-transparency udp-encapsulation
no crypto ipsec transform-set CCIEXFORM esp-3des esp-md5-hmac
crypto ipsec transform-set CCIEXFORM esp-aes
mode transport
R24/R7
interface tunnel 10
shutdown
no shutdown

Q10：NAT（2 point）
R21 should manage NAS via telnet. Fix the problem so that telnet to NAS is
successful as shown in exibit.

Faults:
R24
no ip address 192.168.1.200 255.255.255.0 secondary
R23
ip dns server
NAS
ip domain lookup
R23
no access-list 194 permit ip host 192.168.1.0 any

access-list 194 permit ip 192.168.1.0 0.0.0.255 any
R23
no ip nat outside source static tcp 192.168.1.200 80 134.56.78.10 8008 extendable
ip nat inside source static tcp 192.168.1.200 80 134.56.78.10 8008 extendable

Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution

Recommended

Recommended

More Related Content

Similar to Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution

Similar to Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution (20)

Recently uploaded

Recently uploaded (20)

Spoto ccie lab rs v5.0 h1 ts1 bt1 version 1.0 solution