ccie r&s v5 lab v3 (h3) · ccie r&s v5 lab v3 (h3) web: / mail: [email protected] page...
TRANSCRIPT
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 2
Disclaimer : CCCIE RSv5 lab Exam Workbook is designed to provide extensive
practical information to help candidates in the preparation for CISCO Systems CCIE RSv5 Lab Exam. We do not take liability or responsibility to any person or entity with respect to loss or damage caused by the information presented in the workbook Cisco, Cisco Systems,and CCIE (Cisco Certified Internetwork Expert) are registered trademarks of Cisco Systems, Inc.And of its affiliates in the USA and other countries . The information presented in the workbook is not necessarily related to Cisco Systems, Inc. This workbook is not affiliated, endorsed or sponsored by Cisco Systems, Inc.This workbook provides detailed and comprehensive practical examples for the preparation of CCIE RSv5 labs but cannot be used as a replacement of other supplementary books or prescribed materials. Purpose of the workbook is to provide more practical information about the CCIE RSv5 lab Exam. This workbook is prepared for the individual candidates who have purchased it with non-disclosure agreement. Imitation, copying, editing or posting contents of the workbook over the internet is part of copyright and non-disclosure agreement violation.
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 4
The following requirements were pre-configured:
1. VTP is turned off in all switches. 2. All required VLAN, including access-ports configuration in all relevant switches are provisioned. 3. All required SVI interfaces in all relevant switches (including ip address and subnet mask) are already
provisioned.
Configure the network in all sites as per the following requirements:
1. Access-ports must immediately transition to the forwarding state upon link up, as long as they do not receive a BPDU. Use the minimal number of commands per switch to enable this feature.
2. If an access-port receives a BPDU, it must automatically shutdown. Use the minimal number of commands per switch to enable this feature.
3. Ports that were shutdown must attempt to automatically recover after 10 minutes. None of the switches may generate a TC when any of access ports goes down.
SW100 ------ Configuration SW100(config)#vtp mode off -------------------------- May be pre-configured SW100(config)#spanning-tree portfast default SW100(config)#spanning-tree portfast bpduguard default SW100(config)#errdisable recovery cause bpduguard SW100(config)#errdisable recovery interval 600 SW100(config)#
QUESTION
SOLUTION
SECTION 1: LAYER 2 TECHNOLOGIES SECTION 1.1: LAN ACCESS
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 5
SW101 ------ Configuration
SW101(config)#vtp mode off -------------------------- May be pre-configured SW101(config)#spanning-tree portfast default SW101(config)#spanning-tree portfast bpduguard default SW101(config)#errdisable recovery cause bpduguard SW101(config)#errdisable recovery interval 600 SW101(config)#
SW110 ------ Configuration
SW110(config)#vtp mode off -------------------------- May be pre-configured SW110(config)#spanning-tree portfast default SW110(config)#spanning-tree portfast bpduguard default SW110(config)#errdisable recovery cause bpduguard SW110(config)#errdisable recovery interval 600 SW110(config)#
SW111 ------ Configuration
SW111(config)#vtp mode off -------------------------- May be pre-configured SW111(config)#spanning-tree portfast default SW111(config)#spanning-tree portfast bpduguard default SW111(config)#errdisable recovery cause bpduguard SW111(config)#errdisable recovery interval 600 SW111(config)#
SW200 ------ Configuration
SW200(config)#vtp mode off -------------------------- May be pre-configured SW200(config)#spanning-tree portfast default SW200(config)#spanning-tree portfast bpduguard default SW200(config)#errdisable recovery cause bpduguard SW200(config)#errdisable recovery interval 600 SW200(config)#
SW201 ------ Configuration
SW201(config)#vtp mode off -------------------------- May be pre-configured SW201(config)#spanning-tree portfast default SW201(config)#spanning-tree portfast bpduguard default SW201(config)#errdisable recovery cause bpduguard SW201(config)#errdisable recovery interval 600 SW201(config)#
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 6
SW210 ------ Configuration
SW210(config)#vtp mode off -------------------------- May be pre-configured SW210(config)#spanning-tree portfast default SW210(config)#spanning-tree portfast bpduguard default SW210(config)#errdisable recovery cause bpduguard SW210(config)#errdisable recovery interval 600 SW210(config)#
SW211 ------ Configuration
SW211(config)#vtp mode off -------------------------- May be pre-configured SW211(config)#spanning-tree portfast default SW211(config)#spanning-tree portfast bpduguard default SW211(config)#errdisable recovery cause bpduguard SW211(config)#errdisable recovery interval 600 SW211(config)#
SW300 ------ Configuration
SW300(config)#vtp mode off -------------------------- May be pre-configured SW300(config)#spanning-tree portfast default SW300(config)#spanning-tree portfast bpduguard default SW300(config)#errdisable recovery cause bpduguard SW300(config)#errdisable recovery interval 600 SW300(config)#
SW301 ------ Configuration
SW301(config)#vtp mode off -------------------------- May be pre-configured SW301(config)#spanning-tree portfast default SW301(config)#spanning-tree portfast bpduguard default SW301(config)#errdisable recovery cause bpduguard SW301(config)#errdisable recovery interval 600 SW301(config)#
SW310 ------ Configuration
SW310(config)#vtp mode off -------------------------- May be pre-configured SW310(config)#spanning-tree portfast default SW310(config)#spanning-tree portfast bpduguard default SW310(config)#errdisable recovery cause bpduguard SW310(config)#errdisable recovery interval 600 SW310(config)#
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 7
SW400 ------ Configuration
SW400(config)#vtp mode off -------------------------- May be pre-configured SW400(config)#spanning-tree portfast default SW400(config)#spanning-tree portfast bpduguard default SW400(config)#errdisable recovery cause bpduguard SW400(config)#errdisable recovery interval 600 SW400(config)#
SW401 ------ Configuration
SW401(config)#vtp mode off -------------------------- May be pre-configured SW401(config)#spanning-tree portfast default SW401(config)#spanning-tree portfast bpduguard default SW401(config)#errdisable recovery cause bpduguard SW401(config)#errdisable recovery interval 600 SW401(config)#
SW410 ------ Configuration
SW410(config)#vtp mode off -------------------------- May be pre-configured SW410(config)#spanning-tree portfast default SW410(config)#spanning-tree portfast bpduguard default SW410(config)#errdisable recovery cause bpduguard SW410(config)#errdisable recovery interval 600 SW410(config)#
SW500 ------ Configuration
SW500(config)#vtp mode off -------------------------- May be pre-configured SW500(config)#spanning-tree portfast default SW500(config)#spanning-tree portfast bpduguard default SW500(config)#errdisable recovery cause bpduguard SW500(config)#errdisable recovery interval 600 SW500(config)#
SW501 ------ Configuration
SW501(config)#vtp mode off -------------------------- May be pre-configured SW501(config)#spanning-tree portfast default SW501(config)#spanning-tree portfast bpduguard default SW501(config)#errdisable recovery cause bpduguard SW501(config)#errdisable recovery interval 600 SW501(config)#
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 8
SW510 ------ Configuration
SW510(config)#vtp mode off -------------------------- May be pre-configured SW510(config)#spanning-tree portfast default SW510(config)#spanning-tree portfast bpduguard default SW510(config)#errdisable recovery cause bpduguard SW510(config)#errdisable recovery interval 600 SW510(config)#
SW600 ------ Configuration
SW600(config)#vtp mode off -------------------------- May be pre-configured SW600(config)#spanning-tree portfast default SW600(config)#spanning-tree portfast bpduguard default SW600(config)#errdisable recovery cause bpduguard SW600(config)#errdisable recovery interval 600 SW600(config)#
VERIFICATION
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 27
Configure Jameson’s datacenter network (AS 65002) as per the following requirements:
Configure the HQ network as well as the large and medium office networks as per the following requirements:
1. All trunks must always use dot1q encapsulation. 2. Negotiation of trunking protocol must be disabled in all switches. 3. Distribution switches (SW300 , SW301 , SW400 , SW401 , SW500 , SW501) must initiate ether channel
negotiation using LACP. 4. Access switches (SW310 , SW410 , SW510) must never initiate ether channel negotiation. 5. Configure layer 2 ether channels' number as shown in the "Diagram 1 : Main Topology" and "Diagram 5 :
Layer 2 Connections" (that is , use only Port1 and/or Port2). 6. Ensure that all ports included in ether channel are effectively in use and bundled in the expected
channel: Access Switches must see similar output as shown below:
SECTION 1.2: LAN Distribution
QUESTION
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 28
SW300 ------ Configuration SW300(config)#interface range ethernet 2/0-1 SW300(config-if-range)#switchport trunk encapsulation dot1q SW300(config-if-range)#switchport mode trunk SW300(config-if-range)#switchport nonegotiate SW300(config-if-range)#channel-group 1 mode active SW300(config-if-range)#exit SW300(config)# SW300(config)#interface port-channel 1 SW300(config-if)#switchport trunk encapsulation dot1q SW300(config-if)#switchport mode trunk SW300(config-if)#switchport nonegotiate SW300(config-if)#exit SW300(config)# SW301 ------ Configuration SW301(config)#interface range ethernet 2/2-3 SW301(config-if-range)#switchport trunk encapsulation dot1q SW301(config-if-range)#switchport mode trunk SW301(config-if-range)#switchport nonegotiate SW301(config-if-range)#channel-group 2 mode active SW301(config-if-range)#exit SW301(config)# SW301(config)#interface port-channel 2 SW301(config-if)#switchport trunk encapsulation dot1q SW301(config-if)#switchport mode trunk SW301(config-if)#switchport nonegotiate SW301(config-if)#exit SW301(config)# SW310 ------ Configuration SW310(config)#interface range ethernet 2/0-1 SW310(config-if-range)#switchport trunk encapsulation dot1q
SOLUTION
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 29
SW310(config-if-range)#switchport mode trunk SW310(config-if-range)#switchport nonegotiate SW310(config-if-range)#channel-group 1 mode passive SW310(config-if-range)#exit SW310(config)# SW310(config)#interface range ethernet 2/2-3 SW310(config-if-range)#switchport trunk encapsulation dot1q SW310(config-if-range)#switchport mode trunk SW310(config-if-range)#switchport nonegotiate SW310(config-if-range)#channel-group 2 mode passive SW310(config-if-range)#exit SW310(config)# SW310(config)#interface range port-channel 1-2 SW310(config-if-range)#switchport trunk encapsulation dot1q SW310(config-if-range)#switchport mode trunk SW310(config-if-range)#switchport nonegotiate SW310(config-if-range)#exit SW310(config)# SW400 ------ Configuration
SW400(config)#interface range ethernet 2/0-1 SW400(config-if-range)#switchport trunk encapsulation dot1q SW400(config-if-range)#switchport mode trunk SW400(config-if-range)#switchport nonegotiate SW400(config-if-range)#channel-group 1 mode active SW400(config-if-range)#exit SW400(config)#interface port-channel 1 SW400(config-if)#switchport trunk encapsulation dot1q SW400(config-if)#switchport mode trunk SW400(config-if)#switchport nonegotiate SW400(config-if)#exit SW400(config)# SW401 ------ Configuration
SW401(config)#interface range ethernet 2/2-3 SW401(config-if-range)#switchport trunk encapsulation dot1q SW401(config-if-range)#switchport mode trunk SW401(config-if-range)#switchport nonegotiate
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 30
SW401(config-if-range)#channel-group 2 mode active SW401(config-if-range)#exit SW401(config)# SW401(config)#interface port-channel 2 SW401(config-if)#switchport trunk encapsulation dot1q SW401(config-if)#switchport mode trunk SW401(config-if)#switchport nonegotiate SW401(config-if)#exit SW401(config)# SW410 ------ Configuration SW410(config)#interface range ethernet 2/0-1 SW410(config-if-range)#switchport trunk encapsulation dot1q SW410(config-if-range)#switchport mode trunk SW410(config-if-range)#switchport nonegotiate SW410(config-if-range)#channel-group 1 mode passive SW410(config-if-range)#exit SW410(config)# SW410(config)#interface range ethernet 2/2-3 SW410(config-if-range)#switchport trunk encapsulation dot1q SW410(config-if-range)#switchport mode trunk SW410(config-if-range)#switchport nonegotiate SW410(config-if-range)#channel-group 2 mode passive SW410(config-if-range)#exit SW410(config)# SW410(config)#interface range port-channel 1-2 SW410(config-if-range)#switchport trunk encapsulation dot1q SW410(config-if-range)#switchport mode trunk SW410(config-if-range)#switchport nonegotiate SW410(config-if-range)#exit SW410(config)#
SW500 ------ Configuration SW500(config)#interface range ethernet 2/2-3 SW500(config-if-range)#switchport trunk encapsulation dot1q SW500(config-if-range)#switchport mode trunk SW500(config-if-range)#switchport nonegotiate SW500(config-if-range)#channel-group 2 mode active SW500(config-if-range)#exit
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 31
SW500(config)#interface port-channel 2 SW500(config-if)#switchport trunk encapsulation dot1q SW500(config-if)#switchport mode trunk SW500(config-if)#switchport nonegotiate SW500(config-if)#exit SW500(config)#
SW501 ------ Configuration SW501(config)#interface range ethernet 2/0-1 SW501(config-if-range)#switchport trunk encapsulation dot1q SW501(config-if-range)#switchport mode trunk SW501(config-if-range)#switchport nonegotiate SW501(config-if-range)#channel-group 1 mode active SW501(config-if-range)#exit SW501(config)#interface port-channel 1 SW501(config-if)#switchport trunk encapsulation dot1q SW501(config-if)#switchport mode trunk SW501(config-if)#switchport nonegotiate SW501(config-if)#exit SW501(config)#
SW510 ------ Configuration SW510(config)#interface range ethernet 2/0-1 SW510(config-if-range)#switchport trunk encapsulation dot1q SW510(config-if-range)#switchport mode trunk SW510(config-if-range)#switchport nonegotiate SW510(config-if-range)#channel-group 1 mode passive SW510(config-if-range)#exit SW510(config)# SW510(config)#interface range ethernet 2/2-3 SW510(config-if-range)#switchport trunk encapsulation dot1q SW510(config-if-range)#switchport mode trunk SW510(config-if-range)#switchport nonegotiate SW510(config-if-range)#channel-group 2 mode passive SW510(config-if-range)#exit SW510(config)# SW510(config)#interface range port-channel 1-2 SW510(config-if-range)#switchport trunk encapsulation dot1q SW510(config-if-range)#switchport mode trunk SW510(config-if-range)#switchport nonegotiate SW510(config-if-range)#exit SW510(config)#
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 32
On SW300
On SW301
VERIFICATION
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 33
On SW310
On SW400
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 34
On SW401
On SW410
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 35
On SW500
On SW501
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 37
Configure the HQ network as per the following requirements :
1. SW300 must be the spanning-tree root bridge and must maintain a single spanning-tree instance for the
following VLANs: 2000 , 2002 , 2004 , 2006 , 2008 (use instance number 2).
2. SW301 must be the spanning-tree root bridge and must maintain a single spanning-tree instance for the
following VLANs: 2001 , 2003 , 2005 , 2007 , 2009 (use instance number 1).
3. All other VLANs, except 3001, must share the default spanning-tree instance.
4. Ensure that interface E0/2 of SW300 and SW301 is a dot1q trunk and that it switches frames for VLAN
3001 only.
5. SW300 , SW301 and SW310 must not have any blocked ports for any access VLAN (i.e. 2000 – 2009).
6. SW310 must have the least chance of being elected the root bridge for any VLAN.
7. None of the three switches may run more than four instances of Spanning-Tree at any point in time.
Configure all access switches in both Datacenter networks (SW110. SW111, SW210, SW211) as per the following requirements :
1. Use 32-bit based values for default port path costs.
1. All four switches must use the default value for their interface cost.
SW110 ------ Configuration SW110(config)#spanning-tree pathcost method long SW111 ------ Configuration SW111(config)#spanning-tree pathcost method long
SECTION 1.3: Trunking & Spanning-Tree
QUESTION
SOLUTION
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 38
SW210 ------ Configuration SW210(config)#spanning-tree pathcost method long
SW211 ------ Configuration SW211(config)#spanning-tree pathcost method long
SW300 ------ Configuration SW300(config)#spanning-tree mode mst SW300(config)#spanning-tree mst configuration SW300(config-mst)#instance 1 vlan 2001, 2003, 2005, 2007, 2009 SW300(config-mst)#instance 2 vlan 2000, 2002, 2004, 2006, 2008 SW300(config-mst)#instance 3 vlan 3001 SW300(config-mst)#spanning-tree mst 2 priority 0 SW300(config-mst)#exit SW300(config)# SW300(config)#interface ethernet 0/2 SW300(config-if)#switchport trunk allowed vlan 3001 SW300(config-if)#switchport trunk encapsulation dot1q SW300(config-if)#switchport mode trunk SW300(config-if)#switchport nonegotiate SW300(config-if)#spanning-tree mst 2 priority 0 SW300(config-if)#exit SW300(config)#
SW301 ------ Configuration SW301(config)#spanning-tree mode mst SW301(config)#spanning-tree mst configuration SW301(config-mst)#instance 1 vlan 2001, 2003, 2005, 2007, 2009 SW301(config-mst)#instance 2 vlan 2000, 2002, 2004, 2006, 2008 SW301(config-mst)#instance 3 vlan 3011 SW301(config-mst)#spanning-tree mst 2 priority 0 SW301(config-mst)#exit SW301(config)#
SW301(config)#interface ethernet 0/2 SW301(config-if)#switchport trunk allowed vlan 3001 SW301(config-if)#switchport trunk encapsulation dot1q SW301(config-if)#switchport mode trunk SW301(config-if)#switchport nonegotiate
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 39
SW301(config-if)#spanning-tree mst 2 priority 0 SW301(config-if)#exit SW301(config)#
SW310 ------ Configuration SW310(config)#spanning-tree mode mst SW310(config)#spanning-tree mst configuration SW310(config-mst)#instance 1 vlan 2001, 2003, 2005, 2007, 2009 SW310(config-mst)#instance 2 vlan 2000, 2002, 2004, 2006, 2008 SW310(config-mst)#instance 3 vlan 3101 SW310(config-mst)#spanning-tree mst 2 priority 0 SW310(config-mst)#exit SW310(config)# SW310(config)#spanning-tree mst 0-3 priority 61440
On SW300
VERIFICATION
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 42
On SW110
On SW111
On SW210
On SW211
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 43
Configure the home router R70 as per the following requirements:
1. The Ethernet WAN link must rely on Layer 2 protocol that supports authentication and layer 3 protocol negotiation.
2. The service provider excepts that R70 completes a three-way handshake by providing the expected response of challenge requested.
3. R70 must user the hostname “R70” and password “CCIE” (without quotes) 4. R70 must receive an IP address from R8 and must install a default route pointing to 201.99.8.8 5. Ensure that R70 can successfully ping 8.8.8.8, which is located in the ISP#2 cloud 6. You are not allowed to configure any static route in R70 in order to achieve the previous requirements
7. Use the –pre-configured Dialar1 interface as appropriate.
R70 ------ Configuration R70(config)#interface ethernet0/0 R70(config-if)#no ip address R70(config-if)#pppoe enable group global R70(config-if)#pppoe-client dial-pool-number 1 R70(config-if)#exit R70(config)# R70(config-if)#interface dialer1 R70(config-if)#ip address negotiated R70(config-if)#ip nat outside R70(config-if)#encapsulation ppp R70(config-if)#dialer pool 1 R70(config-if)#ppp chap hostname R70 R70(config-if)#ppp chap password 0 CCIE R70(config-if)#ppp ipcp route default R70(config-if)#exit R70(config)#
SECTION 1.4: WAN TECHNOLOGIES
QUESTION
SOLUTION
CCIE R&S v5 Lab v3 (H3)
Web: www.ccielabcenter.com / Mail: [email protected] Page 44
On R70
VERIFICATION
