Mix of Tylor, Networktut and Revisado 642-832 T-Shoot · PDF fileMix of Tylor, Networktut and...

Mixed

Number: 642-832Passing Score: 790Time Limit: 130 minFile Version: 6.1

http://www.gratisexam.com/

Mix of Tylor, Networktut and Revisado642-832 T-Shoot

Eyam A Q&A, D & D

QUESTION 1You enabled CDP on two Cisco Routers which are connected to each other. The Line and Protocol status forthe interfaces on both routers show as UP but the routers do not see each other a CDP neighbors. Which layerof the OSI model does the problem most likely exist?

A. PhysicalB. SessionC. ApplicationD. Data-LinkE. Network

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Answer: Data-Link

For more information: http://www.cisco.com/en/US/tech/tk962/technologies_tech_note09186a00801aa000.shtml

QUESTION 2You have the followings commands on your Cisco Router:

ip ftp username adminip ftp password backup

You have been asked to switch from FTP to HTTP. Which two commands will you use to replace the existingcommands?

A. ip http username adminB. ip http client username adminC. ip http password backupD. ip http client password backupE. ip http server username adminF. ip http server password backup

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:Answer:ip http client username adminip http client password backup

For more information: http://www.cisco.com/en/US/docs/ios/fundamentals/configuration/guide/cf_file-trnsfer_http_ps6441_TSD_Products_Configuration_Guide_Chapter.html

QUESTION 3% LINK-3-UPDOWN: Interface Serial0/0, change state to up% LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up

Refer to te graphic shown above. whate statement is correct regarding the output shown in the graphic?

A. These two log messages will not have serverity level. They are not erros but are just informationalmessages.

B. The first log message is categorized as a warning message.C. These messages regarding interface status are normal output and will always be displayed when you exit

config mode.D. The first log message is an error message with a severity level of 3.E. The second message would be shown if the logging console warning command had been issued.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Answer: These two log messages will not have serverity level. They are not erros but are just informationalmessages.

For more information: http://www.cisco.com/en/US/docs/ios/12_2/configfun/configuration/guide/fcf013_ps1835_TSD_Products_Configuration_Guide_Chapter.html

QUESTION 4Which two of the following options are categories of Network Maintenance tasks?


A. FirefightingB. Interrupt-drivenC. Policy-basedD. StructuredE. Foundational

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:Answer:Interrupt-drivenStructured

For more information:http://www.cisco.com/comm/applications/IPCApps/Docs/OnQ_whitepaper_RegulatoryandPolicyCompliance.pdfhttp://www.cisco.com/en/US/technologies/tk869/tk769/technologies_white_paper0900aecd806c3eee.html

QUESTION 5The following command is issued on a Cisco Router:

Router(configuration)#logging console warnings

Which alerts will be seen on the console?

A. Warnings onlyB. debugging, informational, notifications, warningsC. warnings, errors, critical, alerts, emergenciesD. notifications, warnings, errorsE. warnings, errors, critical, alerts

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Answer: warnings, errors, critical, alerts, emergencies


QUESTION 6You have 2 NTP servers in your network - 10.1.1.1 and 10.1.1.2. You want to configurationure a Cisco router touse 10.1.1.2 as its NTP server before falling back to 10.1.1.1. Which commands will you use toconfigurationure the router?

A. ntp server 10.1.1.1ntp server 10.1.1.2

B. ntp server 10.1.1.1ntp server 10.1.1.2 primary

C. ntp server 10.1.1.1ntp server 10.1.1.2 prefer

D. ntp server 10.1.1.1 fallbackntp server 10.1.1.2

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Answer:ntp server 10.1.1.1ntp server 10.1.1.2 prefer

For more infomation: http://www.cisco.com/en/US/docs/ios/12_1/configfun/configuration/guide/fcd303.html#wp1001170

QUESTION 7What level of logging is enabled on a Router where the following logs are screen?

%LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up %LINEPROTO-5-UPDOWN: Line protocolon Interface FastEthernet0/1, changed state to up

A. alertsB. criticalC. errorsD. notifications


Explanation/Reference:Answer: notifications


QUESTION 8FCAPS is a network maintenance model defined by ISO. It stands for which of the follwing?

A. Fault ManagementB. Action ManagementC. Configuration ManagementD. Protocol ManagementE. Security Management

Correct Answer: ACESection: (none)Explanation

Explanation/Reference:Answer:Fault ManagementConfiguration ManagementSecurity Management

For more information: http://www.cisco.com/en/US/technologies/tk869/tk769/technologies_white_paper0900aecd806c0d88.html

QUESTION 9The following commands are issued on a Cisco Router:

Router(configuration)#access-list 199 permit tcp host 10.1.1.1 host 172.16.1.1 Router(configuration)#access-list 199 permit tcp host 172.16.1.1 host 10.1.1.1 Router(configuration)#exitRouter#debug ip packet 199

What will the debug output on the console show?

A. All IP packets passing through the routerB. Only IP packets with the source address of 10.1.1.1C. All IP packets from 10.1.1.1 to 172.16.1.1D. All IP Packets between 10.1.1.1 and 172.16.1.1


Explanation/Reference:Answer: All IP Packets between 10.1.1.1 and 172.16.1.1

For more information: For more information: http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

QUESTION 10DRAG DROP

Match the items on the left to their purpose on the right

Select and Place:

Correct Answer:

Section: (none)Explanation

Explanation/Reference:Explanation:EEM -> CLI based Management and MonitoringSDM -> Provides a GUI for AdministrationFTP -> Used for Backup and Restore

For more information:http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6815/datasheet_c78-692254.htmlhttp://www.cisco.com/en/US/prod/collateral/routers/ps5318/product_data_sheet0900aecd800fd118.htmlhttp://www.cisco.com/en/US/docs/ios/12_1/configfun/command/reference/frd2001.html#wp1017386


FCAPS is a network maintenance model defined by ISO. FCAPS stands for:

Select and Place:

Correct Answer:


Explanation/Reference:Explanation:F-> Fault ManagementC-> Configurationuration ManagementA -> Accounting Management



There are many Network Maintenance models. Match the model names on the left to the options on the right:

Select and Place:

Correct Answer:


Explanation/Reference:Explanation:FCAPS -> Fault, Configurationuration , Accounting, Performance and Security (ISO) ITIL -> A collection of best practice recommendationsCisco Lifecycle -> Often referred to as the PPDIOO modelTMN -> Telecommunications Management Network


Exam B TT

QUESTION 1Trouble Ticket Statement:

Client is unable to ping 209.65.200.241. Client has IP.

Troubleshoot:

Client 1 is able to ping 10.1.1.2 but not 10.1.1.1. Initial troubleshooting shows that R1 does not have any OSPFneighbors or any OSPF routesPing Client from R1

Use show run on R1 and R2:

Configuration on R1:

router ospf 1log-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12default-information originate always!interface Serial0/0/0/0.12 point-to-pointip address 10.1.1.1 255.255.255.252ip nat insideip ospf message-digest-key 1 md5 TSHOOT

Configuration on R2:

router ospf 1log-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12!interfaceSerial0/0/0/0.12 point-to-pointip address 10.1.1.2 255.255.255.252ip ospf authentication message-digestip ospf message-digest-key 1 md5 TSHOOT

Exhibit:

A. R1B. R2C. DSW1D. Client1E. NATF. OSPFG. Static RoutingH. Switch to Switch ConnectivityI. ip nat outside must be added on S0/0/0/0.12J. ip ospf authentication message-digest command has to be added on S0/0/0/0.12K. ip ospf authentication message-digest command has to be added under the OSPF routing processL. A static route to 10.1.1.4 must be added on R1

Correct Answer: AFJSection: (none)Explanation

Explanation/Reference:

QUESTION 2Trouble Ticket Statement

HSRP has been configurationured between DSW1 and DSW2. DSW1 is configured to be active router but itnever becomes active even though the HSRP communication between DSW1 and DSW2 is working.

Client IP must not be shown.

Troubleshoot:

Look for HSRP track

Configuration on DSW1

track 1 ip route 10.1.21.128 255.255.0.0 metric threshold threshold metric up 1 down 2!track 10 ip route 10.2.21.128 255.255.255.0 metric threshold threshold metric up 63 down 64!interface Vlan10ip address 10.2.1.1 255.255.255.0standby 10 ip 10.2.1.254standby 10 priority 200standby 10 preemptstandby 10 track 1 decrement 60

Configuration on R4

interface loopback0ip address 10.2.21.128 255.255.255.0

Exhibit:

A. R4B. DSW2C. DSW1D. R3E. GLBPF. HSRPG. OSPFH. Switch to Switch ConnectivityI. Change standby priority to 140J. Change standby priority to 260K. Change standby 10 track 1 decrement 60 to standby 10 track 10 decrement 60L. Change standby 10 track 1 decrement 60 to standby 10 track 1 decrement 100

Correct Answer: CFKSection: (none)Explanation



Client 1 is able to ping 209.65.200.226 but not the Web Server at 209.65.200.241. Initial troubleshooting showsand R1 does not have any BGP routes. R1 also does not show any active BGP neighbor

Troubleshoot:

Check R1 neighborshow bgb summary, nothing is shown

Configuration on R1

router bgp 65001 no synchronization bgp log-neighbor-changes network 209.65.200.224 mask 255.255.255.252 neighbor 209.56.200.226 remote-as 65002 no auto-summary

Exhibit:

A. R1B. DSW1C. R4D. R2

E. EIGRPF. HSRPG. BGPH. OSPFI. Enable BGP synchronizationJ. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.56.200.226 remote-as 65001K. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.65.200.226 remote-as 65002L. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.65.200.226 remote-as 65001

Correct Answer: AGKSection: (none)Explanation



Client 1 and Client 2 are not able to reach the WebServer at 209.65.200.241. Initial troubleshooting shows thatDSW1, DSW2 and all the routers are able to reach the WebServer

Troubleshoot:

Client hast 10.2.X.XRouter 10.1.X.X

Configuration on R1

ip nat inside source list nat_pool interface Serial0/0/0/1 overload !ip access-list standard nat_pool permit 10.1.0.0!interface Serial0/0/0/1 ip address 209.65.200.224 255.255.255.252 ip nat outside!interfaceSerial0/0/0/0.12 ip address 10.1.1.1 255.255.255.252 ip nat inside ip ospf message-digest-key 1 md5 TSHOOT ip ospd authentication message-digest

Exhibit:

A. R1B. DSW1C. R4D. R2E. EIGRPF. HSRPG. BGPH. NATI. Add permit 10.2.0.0 statement in nat_pool access-listJ. Remove permit 10.1.0.0 statement from nat_pool access-listK. Change ip nat inside source list nat_pool interface Serial0/0/0/1 overload to ip nat inside source list nat_pool

interface Serial0/0/0/0.12 overloadL. Change ip nat outside statement under Serial0/0/0/1 configuration to ip nat inside

Correct Answer: AHISection: (none)Explanation



Client 1 is not able to reach the WebServer at 209.65.200.241. Initial troubleshooting shows that R1 is also notable to reach the WebServer. R1 also does not have any active BGP neighbor.

Troubleshoot:

Check Serial, there is an access list 30Network ist nor permit, only a host

Configuration R1

router bgp 65001 no synchronization bgp log-neighbor-changes network 209.65.200.224 mask 255.255.255.252 neighbor 209.65.200.226 remote-as 65002 no auto-summary!access-list 30 permit host 209.65.200.241access-list 30 deny 10.1.0.0 0.0.255.255access-list 30 deny 10.2.0.0 0.0.255.255!interface Serial0/0/0/1 ip address 209.65.200.224 255.255.255.252 ip nat outside ip access-group 30 in

On which device is the fault condition located?

A. R1B. DSW1C. R4D. R2E. IP AccessF. IP NATG. BGPH. IP Access listI. Add permit statement for 209.65.200.224/30 network in access list 30J. Remove Deny Statements from access-list 30K. Change neighbor 209.65.200.226 remote-as 65002 statement to neighbor 209.65.200.226 remote-as 65001L. Use extended access-list instead of standard access-list

Correct Answer: AHISection: (none)Explanation



Client 1 is getting an IP address from the DHCP server but is not able to ping DSW1 or the FTP Server

Troubleshoot:

show vlan acces mapshow ip access lists

Configuration DSW1

vlan access-map test1 10 drop match ip address 10!vlan filter test1 vlan-list 10!ip access-list standard 10 permit 10.2.0.0 0.0.255.255!Interface VLAN10 ip address 10.2.1.1 255.255.255.0!

Warning. Maybe Answer in Exam is ASW1

Exhibit:

A. R4B. DSW1C. Client 1D. FTP Server

E. VLAN Access MapF. InterVLAN communicationG. DHCPH. IP Access ListI. Configure Static IP Address on Client 1J. Change the IP Address of VLAN 10 on DSW1K. Add Permit any statement to access-list 10L. Remove VLAN filter test1 from DSW1

Correct Answer: BELSection: (none)Explanation



Client one is getting a 169.x.x.x IP address and is not able to ping Client 2 or DSW1. Inital troubleshootingshows that port Fa1/0/1 on ASW1 is in errdisable state.

Troubleshoot:

show ip int brief show port security

Configuration ASW1

Interface FastEthernet1/0/1switchport mode accessswitchport port-securityswitchport port-security mac-address 0000.0000.0001

Exhibit:

A. DSW1B. ASW1C. Client 1D. FTP ServerE. VLAN Access MapF. InterVLAN communicationG. DHCPH. Port SecurityI. Change the IP Address of VLAN 10 on DSW1J. Issue shutdown command followed by no shutdown command on port fa1/0/1 on ASW1K. Issue no switchport port-security mac-address 0000.0000.0001 command followed by shutdown and no

shutdown command on port fa1/0/1 on ASW1L. Issue no switchport port-security mac-address 0000.0000.0001 command on port fa1/0/1 on ASW1

Correct Answer: BHKSection: (none)Explanation



Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the FTP Server. Theyare able to ping each other.

Troubleshoot:

show run und check for vlan 10 on fa 10/1 und 1/0/2

Configuration ASW1

Interface FastEthernet1/0/1 switchport mode access switchport access vlan 1!Interface FastEthernet1/0/2 switchport mode access switchport access vlan 1

Exhibit:

A. DSW1B. ASW1C. Client 1D. FTP Server

E. VLANF. InterVLAN communicationG. DHCPH. Port SecurityI. Given an IP address to VLAN 1 on DSW1J. Change the IP Address of VLAN 10 on DSW1K. Issue switchport access vlan 10 command on interfaces fa1/0/1 and fa1/0/2 on ASW1L. Give static IP addresses to Client 1 and Client 2

Correct Answer: BEKSection: (none)Explanation




Troubleshoot:

Check Port Channel, here 23 and 13

Configurationon ASW1

Interface PortChannel13 switchport mode trunk switchport trunk allowed vlan 1-9!Interface PortChannel23 switchport mode trunk switchport trunk allowed vlan 1-9!Interface FastEthernet1/0/1 switchport mode access switchport access vlan 10!Interface FastEthernet1/0/2 switchport mode access switchport access vlan 10!

Exhibit:

A. ASW1B. DSW1C. Client 1D. FTP ServerE. VLANF. InterVLAN communicationG. DHCPH. Switch to Switch ConnectivityI. Change the VLAN assignment on fa1/0/1 and fa1/0/2 on ASW1 to VLAN 1J. Change the IP Address of VLAN 10 on DSW1K. Issue switchport trunk allowed vlan 10,200 on interface portchannel13 and portchannel23 on ASW1L. Issue switchport trunk allowed vlan none on interface portchannel13 and portchannel23 on ASW1

Correct Answer: AHKSection: (none)Explanation



Client 1 is not able to reach the WebServer. Initial troubleshooting shows that DSW1 can ping the Fa0/1interface of R4 but not the s0/0/0/0.34 interface.

Troubleshoot:

check ip protocols, DSW1 DSW 2 and R4

Configuration DSW1

router eigrp 10 network 10.1.4.4 0.0.0.0 network 10.2.1.1 0.0.0.0 network 10.2.4.13 0.0.0.0 no auto-summary

Configuration DSW2


Configuration R4

router eigrp 1 network 10.1.4.5 0.0.0.0 no auto-summary redistribute ospf 1

Exhibit:

A. DSW1B. DSW2C. Client 1D. R4E. EIGRPF. InterVLAN communicationG. OSPFH. Switch to Switch ConnectivityI. Change the VLAN assignment on fa1/0/1 and fa1/0/2 on ASW1 to VLAN 1J. Change the routing protocol on DSW1 and DSW2 to OSPFK. Change the EIGRP AS to 10 on R4L. Advertise 10.1.1.8/30 network in EIGRP on R4

Correct Answer: DEKSection: (none)Explanation




Troubleshoot:

Check for redistribution and route maps

Configuration DSW1


Configuration DSW2


Configuration R4

router eigrp 10 network 10.1.4.5 0.0.0.0 no auto-summary redistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF !router ospf 1 network 10.1.1.8 0.0.0.0 area 34 redistribute eigrp 10 subnets!route-map EIGRP->OSPF match ip address 1!access-list 1 permit 10.0.0.0 0.255.255.255access-list 1 permit 209.0.0.0 0.255.255.255

Exhibit:

A. DSW1B. DSW2C. Client 1D. R4E. EIGRPF. Route RedistributionG. OSPFH. IP AddressingI. Remove the redistribute command from OSPF process on R4J. Change the route-map name in the redistribute command under OSPF process to EIGRP- >OSPF on R4K. Change EIGRP AS to 1 on R4L. Advertise 10.1.1.8/30 network in EIGRP on R4

Correct Answer: DFJSection: (none)Explanation



DSW1 and R4 cannot ping R2's loopback or R2's s0/0/0/0.12 IPv6 address (2026:102:1). Initial troubleshootingshows and R2 is not an OSPFv3 neighbor on R3.R1 2026::111:1 cannot ping Loopback aud DSW1 (2026::102:1)

Troubleshoot:

R2: show ipv6 ospf neighborR3: show ipv6 ospf neighbor

Configuration R2

ipv6 unicast-routing!ipv6 router ospf 6 router-id 2.2.2.2!interface s0/0/0/0.23 ipv6 address 2026::1:1/122

Configuration R3

ipv6 unicast-routing!ipv6 router ospf 6 router-id 3.3.3.3!interface s0/0/0/0.23 ipv6 address 2026::1:2/122 ipv6 ospf 6 area 0

Exhibit:

A. DSW1B. DSW2C. R2D. R3E. IPv6 AddressingF. Route RedistributionG. OSPFv3H. RIPngI. Add ipv6 ospf 6 area 0 under S0/0/0/0.23 on R2J. Add ipv6 ospf 6 area 6 under s0/0/0/0.23 on R2K. Remove IPv6 address from s0/0/0/0.23 on R2L. Enable IPv6 routing on s0/0/0/0.23 on R2

Correct Answer: CGISection: (none)Explanation



Client 1 is not able to reach the WebServer. Initial troubleshooting shows that it has no IP address.

Troubleshoot:

Check for DCHP

Configuration on R4 was:!ip dhcp exclude 10.2.1.1-10.2.1.253!

A. DSW1B. DSW2C. Client 1D. R4E. EIGRPF. Route RedistributionG. DHCPH. IP AddressingI. Remove the redistribute command from OSPF process on R4J. Change the route-map name in the redistribute command under OSPF process to EIGRP- >OSPF on R4K. Change EIGRP AS to 1 on R4L. delete ip dhcp exclude 10.2.1.1-10.2.1.253 and apply ip dhcp-excluded 10.2.1.1-10.2.1.2

Correct Answer: DGLSection: (none)Explanation



the neighborship between R4 and DSW1 wasn’t establised. Client 1 can’t ping R4

Troubleshoot:

ping and show ip eigrp neighbros

Configuration on R4 :router eigrp 10 passive-interface default redistribute ospf 1 route-map OSPF->EIGRP network 10.1.4.4 0.0.0.3 network 10.1.4.8 0.0.0.3 default-metric 10000 100 255 1 10000 no auto-summary

A. DSW1

B. DSW2C. Client 1D. R4E. EIGRPF. Route RedistributionG. DHCPH. IP AddressingI. Remove the redistribute command from OSPF process on R4J. Change the route-map name in the redistribute command under OSPF process to EIGRP- >OSPF on R4K. Remove “Passive interface” under EIGRP 10 L. delete ip dhcp exclude 10.2.1.1-10.2.1.253 and apply ip dhcp-excluded 10.2.1.1-10.2.1.2

Correct Answer: DEKSection: (none)Explanation




Troubleshoot:

check vlans

Configuration ASW1

Interface FastEthernet1/0/1 switchport mode access switchport access vlan 1!Interface FastEthernet1/0/2 switchport mode access switchport access vlan 1

Exhibit:

A. DSW1B. ASW1C. Client 1D. FTP ServerE. VLANF. InterVLAN communicationG. DHCPH. Port SecurityI. Given an IP address to VLAN 1 on DSW1J. Change the IP Address of VLAN 10 on DSW1K. Issue switchport access vlan 10 command on interfaces fa1/0/1 and fa1/0/2 on ASW1L. Give static IP addresses to Client 1 and Client 2

Correct Answer: BEKSection: (none)Explanation




Configuration DSW1


Configuration DSW2


Configuration R4

router eigrp 10 network 10.1.4.5 0.0.0.0 no auto-summary redistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF !router ospf 1 network 10.1.1.8 0.0.0.0 area 34 redistribute eigrp 10 subnets!route-map EIGRP->OSPF match ip address 1!access-list 1 permit 10.0.0.0 0.255.255.255access-list 1 permit 209.0.0.0 0.255.255.255

A. DSW1B. DSW2C. Client 1D. R4E. EIGRPF. Route RedistributionG. OSPFH. IP AddressingI. Remove the redistribute command from OSPF process on R4J. Change the route-map name in the redistribute command under OSPF process to EIGRP- >OSPF on R4K. Change EIGRP AS to 1 on R4L. Advertise 10.1.1.8/30 network in EIGRP on R4

Correct Answer: DFJSection: (none)Explanation





Exhibit:

A. DSW1B. DSW2C. Client 1D. R4E. EIGRPF. Route RedistributionG. DHCPH. IP AddressingI. Remove the redistribute command from OSPF process on R4J. Change the route-map name in the redistribute command under OSPF process to EIGRP- >OSPF on R4K. Change EIGRP AS to 1 on R4

L. delete ip dhcp exclude 10.2.1.1-10.2.1.253 and apply ip dhcp-excluded 10.2.1.1-10.2.1.2






Exhibit:

A. DSW1B. DSW2C. Client 1D. R4E. EIGRPF. Route RedistributionG. DHCPH. IP AddressingI. Remove the redistribute command from OSPF process on R4J. Change the route-map name in the redistribute command under OSPF process to EIGRP- >OSPF on R4K. Change EIGRP AS to 1 on R4L. delete ip dhcp exclude 10.2.1.1-10.2.1.253 and apply ip dhcp-excluded 10.2.1.1-10.2.1.2



Mind Map

QUESTION 1NO Question, Mind Map

Exhibit:

A. Klick me



Strategy com DTUT

QUESTION 1Click A

A. Klick me


Explanation/Reference:Thnaks to Ena

I just come from MY exam and i passed T-shoot 1000/1000i want share some experience there i had Only one BUG IN exam For question access mapU need to choice Aswn1 to get correct Answerbecause if u make Dwsn1 U will see not there Option to get correct answer..Wellall those TT are the same allThe TT’s that I got are mentioned below:

1. ASW1 – Allowed Vlan2. ASW1 – Port Security3. ASW1 – Access Vlan4. DSW1 – Access Map5. DSW1 – HSRP6. R4 – IP DHCP – first delete ip dhcp excluded-address 10.2.1.1 10.2.1.253 and then enterip dhcp excluded-address 10.2.1.1 – 10.2.1.29. R2 – IPv610. R1 – NAT ACL11. R1 – L3 Security – ACL12. R1 – BGP – Wrong BGP Neighbor Address13. R1 – OSPF Authentication

I didn’t get there any IP Helper there also i checked all TT and IP helper was not configuredthere..Well now I want to Describe how to find more easy the TTfirst with 3 TT which be ON R1..IN 3 TT U can Ping 10.1.1.1 which tickets are Nat , BGP , Access list , remember IN 3 TT Ucan ping 10.1.1.1 which is R1totally are 4 TT on R1 which IN one Ticket u cannot ping 10.1.1.1 but u can ping 10.1.1.2which Ticket is Ospf authentication….Dont lose ur time use abort abort abort and abort First I found those 3 TT where I can ping10.1.1.1 and one ticket when u cannot ping 10.1.1.1 but u can ping 10.1.1.2 which isospf authenteticaton…4 TT Gone of R4now Find 2 TT HSRP and IPV6 which are so clearly as question….. Now totally 6 TTGOneeeeeNext steeepFIND 4 TT which Client 1 Get IP address 169.x.x

which are Access vlan 10 , port security issused on f0/1/0 , Trunking Interface Those 3 TT uMust must must Check ON ASW1 Remember…One TT is ON R4 Layer 3 Topology which Client get IP 169.x.x.xwhich Is DHCP ON R4 router R4 – IP DHCP – first delete ip dhcp excluded-address10.2.1.1 10.2.1.253 and then enter ip dhcp excluded-address 10.2.1.1 – 10.2.1.2Now 10 TT Goneeeeeeeeeeenow Find TT which Client get IP address 10.x.x.x but cannot ping the GatewayUsing abortthat Is Access Map but in this TT is one BUG and U need to choice ASW1 to get Correctanswer because doesn’t see any option Vlan acl / Port ACL *IF u select AWS1 U will see this One Vlan Acl POrtnow 11 TT GONeeeenow 2 TT Of R4 which Client get IP address 10..x.x.xRoute Redistribute , and Passive Interfaceee ,,I played with those 2 TT for more 20 MIN just to play and to spend the time because i didexaaamm so fast 30 MINand i stayed for 1 Hourwell now are ONLY 2 TTWhen select One TT of themIN one U will see wrong redistribute I mean name of spelling of Route map…if U use abort and JUMP another TT U will see then Correctly Route map spelling name andu will see another one new with Passive Interface Under EIGRPWell the First I end this one with wrong spelling route map..and for this one the last with passive interface i did in the endand u must selectR4EIGRPno passive interface under eigrp process in Interface f0/1 and f0/0now 13 TT GOneeeee 100%Well also i want tell YOU something is better to Useeee 46Q there are all all all all all theanswers the same when U select just there in that DUMPare 2 questions WRONGInterface Trunking allow vlan 10 , correct answer is 10.200now as that dump 10.20.200 keep this In Mind..and another one Port security In this dump 46Q are Wrongfor this one port security need to choice with shutdown and no shutdown there on dumpwrite somthing different rightI hope this have been Information for all OF youHere is the strategy which I UsedddddddProblem Device Problem DescriptionA – > ASW1 –> Access VLAN 10 ( Layer 2 )host 1- 169.x.x.xP – > ASW1 –> Port-Channel not allowing VLAN 10 ( layer 2 )host 1- 169.x.x.xS – > ASW1 –> Port Security needs to be disabled ( layer 2 )host 1- 169.x.x.xH – > DSW1 –> HSRP Track 10 ( layer 3 ) host 10.x.x.xV – > DSW1 –> VLAN Filter ( layer 2 ) host 1 -10.x.x.xE – > R4 –> DHCP wrong exclude address host 1- 169.x.x.xP – > R4 -> Passive Interface Under eigrp 10 host 1 – 10.x.x.xR – > R4 –> Route Redistribution ( layer 3 )host 1- 10.x.x.x6 – > R2 –> IPv6 OSPF ( Ipv6 topology ) ipv6 ip add

B – > R1 –> BGP wrong Neighbor IP ( layer 3 )host 1 – 10.x.x.xN – > R1 –> NAT ACL miss configured ( layer 3 ) host 1- 10.x.x.xA – > R1 –> ACL blocking traffic on int ( layer 3 )host 1- 10.x.x.xO – > R1 –> OSPF Authentication issue ( layer 3 ) host 1 – 10.x.x.xTry the following strategy.. if you have got time… This i have found from one of the post….your strategy is good, but how will you find out which ticket is having that particular issues…this may help you…If you can ping 10.1.1.1 Then faulty device is definitely R1. Check this website. This is 100%correct. From client ping 10.1.1.1. If successful then R1 is the faulty device. It is simpleconcept. Any device before that does not have faulty configuration. Because you can reachR1 it means DSW1, R4, R3, R2 is allowing you to reach R1. If any of them had wrongconfiguration then you would not be able to ping 10.1.1.1. From client I pinged 10.1.1.1more frequently then others. Once you can ping 10.1.1.1 then you definitely know the faultis with R1. No doubt about about that.1. Can be faulty BGP neighbour. Wrong ip address of neighbour. Use show run. You knowwhere to look. Under router bgp 65001.–> sh ip bgp sum2. Check NAT access list. Look for permit statement. If permit 10.2.0.0 0.0.255.255 is notpresent then it is NAT Access list.3. Check edge_security access list. If the permit statement is missing for — permit209.65.200.224 0.0.0.3 then it is IPV4 layer 3 security.So, you can see that if you can ping 10.1.1.1 but can not ping 209.65.200.241 then 3 TT forR1.Now if you can ping to 10.1.1.2 but can not ping 10.1.1.1 then it is definitely R1. ip ospfauthentication message-digest on serial0/0/0/0.12 interface. Check configuration on R1.You will see that — ip ospf authentication message-digest is missing. So it R1, OSPF, ipospf authentication message digest.In total R1 has 4 TT.3 TT — You can ping R1 but can not ping 209.65.200.2411 TT – You can ping 10.1.1.2 but can not ping 10.1.1.1.As soon as I opened a TT –> I used ipconfig to see the ip address. If it is 169.XXX then 3TT for ASW1. If it has valid ip address such as 10.2.1.3 then i immediately pined 10.1.1.1 tosee if the fault is with R1. 3 TT gone.Total 6 TT gone in the blink of an eye.ASW1 – 3 TT – if ip address is 169.xxxx(1.switch port security: Symptoms for this ticket:-1- Client 1 is getting 169.x.x.x ip address2- Client 1 is unable to ping Client 2 as well as DSW1.3- ‘sh interfaces fa1/0/1′ will show following message in the first line‘enFastEthernet1/0/1 is down, line protocol is down (err-disabled)’4- ‘sh running-config’, you will see ‘switchport port-security mac-address ’0000.0000.0001′configured under fa1/0/1.if u did not have the port in err-disable mode but in the config there was a port security mac0.0.0.0….. command assignedso if u do show int fa 1/0/1 it will show it as UP so do not get confused)(2.vlan1–> vlan10)(3.trunk allowed: int range portchannel13,portchannel23switchport trunk allowed vlan noneswitchport trunl allowed vlan 10,200)R1 – 3TT – if you can ping R1 10.1.1.1

R1 – 1TT if you can ping 10.1.1.2 but can not ping 10.1.1.1If HSRP mentioned then you know it is DSW1If ipv6 or ospfV3 mentioned then you know it is R2.9 TT very simple.Now if you can not ping 10.1.1.1 or 10.1.1.2 then you come back near client. Like DSW1,R4.DSW1 – 1 more TT — Vlan ACL – Look for VLAN Access MapR4 – 3 TT: EIGRP Passive interface , DHCP on R4 which get IP add 169.x.x , OSPF-to-EIGRP (OSPF->EIGRP).also now we have 2 TT new to idendify them if client now get ip add 169.x.x also check ONR4 for DHCPthis new One again ON R4 for passive Interfacenow totally we have 3 TT ON R44 TT on R1Dws1 2 TTR2 1 TTAsw1 3 TT

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

* Note: The bug has been fixed recently so you can select DSW1 device, next page youhave to scroll down and you will find the VLAN Access List/PACL option.


Mix of Tylor, Networktut and Revisado 642-832 T-Shoot · PDF fileMix of Tylor, Networktut and...

Documents

Transcript of Mix of Tylor, Networktut and Revisado 642-832 T-Shoot · PDF fileMix of Tylor, Networktut and...