ccie r&s v5 lab v2.1 (h2) · practical information to help candidates in the preparation for...

CCIE R&S v5 Lab v2.1 (H2)

Web: www.ccielabcenter.com / Mail: [email protected]



Disclaimer : CCCIE RSv5 lab Exam Workbook is designed to provide extensive

practical information to help candidates in the preparation for CISCO Systems CCIE RSv5 Lab Exam. We do not take liability or responsibility to any person or entity with respect to loss or damage caused by the information presented in the workbook Cisco, Cisco Systems,and CCIE (Cisco Certified Internetwork Expert) are registered trademarks of Cisco Systems, Inc.And of its affiliates in the USA and other countries . The information presented in the workbook is not necessarily related to Cisco Systems, Inc. This workbook is not affiliated, endorsed or sponsored by Cisco Systems, Inc.This workbook provides detailed and comprehensive practical examples for the preparation of CCIE RSv5 labs but cannot be used as a replacement of other supplementary books or prescribed materials. Purpose of the workbook is to provide more practical information about the CCIE RSv5 lab Exam. This workbook is prepared for the individual candidates who have purchased it with non-disclosure agreement. Imitation, copying, editing or posting contents of the workbook over the internet is part of copyright and non-disclosure agreement violation.



There has been pre‐configured in Jameson’s Datacenter. SW3 is the server and the other three switches are clients. Do not modify this configuration. Some other configuration was already started but it is your responsibility to verify and complete them. Configure all four switches in Jameson’s datacenter network (AS 65002) as per the following requirements:

1. All unused ports must be configured in VLAN 999 and administratively shutdown. Refer to “Table 1: Jameson’s VLAN to Port Mapping” to figure out which ports are used and unused.

2. Access‐ports must immediately transition to the forwarding state upon link up, as long as they do not receive a BPDU. Use a unique command per switch to enable this feature.

3. If an access‐port received a BPDU, it must automatically shutdown, generate a syslog and a SNMP trap (to solve this issue add. Use a unique command per switch to enable to this feature.

4. Ports that were shutdown must always rely on a manual intervention to recover. 5. VLAN 911 (10.2.100.X/24) will be used as the management VLAN in Jameson’s datacenter.

Ensure that all datacenter switches are able to ping each other IP address in the management VLAN. 6. SW5 and SW6 are low‐end access switches and they do not have much processing power.

Ensure that their only Layer 3 interfaces are Loopback0 and VLAN 911. 7. SW3 and SW4 are robust and powerful distribution switches. Ensure that they maintain a Layer 3

interface for all local VLANs as well as all access VLANs, as specified in “Table 1: Jameson’s VLAN to Port Mapping”. E0/3 , E1/0-3 , E2/0-3 , E3/0-3 are unused on SW3 and SW4 E1/0-3 , E2/0-3 , E3/0-3 are unused on SW5 and SW6

QUESTION

SECTION 1: LAYER 2 TECHNOLOGIES SECTION 1.1: ACCESS PORTS



SW3 ------ Configuration

SW3>enable SW3#configure terminal SW3(config)#vtp domain CCIE SW3(config)#vtp mode server SW3(config)#vlan 34,100,153,156,164,184,911,999 SW3(config)#interface ethernet 0/0 SW3(config-if)#switchport mode access SW3(config-if)#switchport access vlan 156 SW3(config)#interface ethernet 0/1 SW3(config-if)#switchport mode access SW3(config-if)#switchport access vlan 173 SW3(config-if)#exit SW3(config)# SW3(config)#interface ethernet 0/2 SW3(config-if)#switchport mode access SW3(config-if)#switchport access vlan 153 SW3(config-if)#exit SW3(config)# SW3(config)#interface range ethernet 0/3, ethernet 1/0-3, ethernet 3/2-3 SW3(config-if-range)#switchport mode access SW3(config-if-range)#switchport access vlan 999 SW3(config-if-range)#shutdown SW3(config-if-range)#exit SW3(config)# SW3(config)#spanning-tree portfast default SW3(config)#spanning-tree portfast bpduguard default SW3(config)#errdisable recovery cause bpduguard SW3(config)#snmp-server enable traps syslog SW3(config)#write SW3(config)#

SOLUTION



SW4 ------ Configuration

SW4>enable SW4#configure terminal SW4(config)#vtp domain CCIE SW4(config)#vtp mode client SW4(config)# SW4(config)#interface ethernet 0/0 SW4(config-if)#switchport mode access SW4(config-if)#switchport access vlan 156 SW4(config-if)#exit SW4(config)# SW4(config)#interface ethernet 0/1 SW4(config-if)#switchport mode access SW4(config-if)#switchport access vlan 184 SW4(config-if)#exit SW4(config)# SW4(config)#interface ethernet 0/2 SW4(config-if)#switchport mode access SW4(config-if)#switchport access vlan 164 SW4(config-if)#exit SW4(config)# SW4(config)#interface range ethernet 0/3, ethernet 1/0-3, ethernet 3/2-3 SW4(config-if-range)#switchport mode access SW4(config-if-range)#switchport access vlan 999 SW4(config-if-range)#shutdown SW4(config-if-range)#exit SW4(config)# SW4(config)#spanning-tree portfast default SW4(config)#spanning-tree portfast bpduguard default SW4(config)#errdisable recovery cause bpduguard SW4(config)#snmp-server enable traps syslog SW4(config)#write SW4(config)#



SW5 ------ Configuration SW5>enable SW5#configure terminal SW5(config)#vtp domain CCIE SW5(config)#vtp mode client SW5(config)#interface range ethernet 0/0-3 SW5(config-if-range)#switchport mode access SW5(config-if-range)#switchport access vlan 100 SW5(config-if-range)#exit SW5(config)# SW5(config)#interface range ethernet 1/0-3, ethernet 3/0-3 SW5(config-if-range)#switchport mode access SW5(config-if-range)#switchport access vlan 999 SW5(config-if-range)#shutdown SW5(config-if-range)#exit SW5(config)# SW5(config)#spanning-tree portfast default SW5(config)#spanning-tree portfast bpduguard default SW5(config)#errdisable recovery cause bpduguard SW5(config)#snmp-server enable traps syslog SW5(config)#write SW5(config)#



SW6 ------ Configuration SW6>enable SW6#configure terminal SW6(config)#vtp domain CCIE SW6(config)#vtp mode client SW6(config)#interface range ethernet 0/0-3 SW6(config-if-range)#switchport mode access SW6(config-if-range)#switchport access vlan 100 SW6(config-if-range)#exit SW6(config)# SW6(config)#interface range ethernet 1/0-3, ethernet 3/0-3 SW6(config-if-range)#switchport mode access SW6(config-if-range)#switchport access vlan 999 SW6(config-if-range)#shutdown SW6(config-if-range)#exit SW6(config)# SW6(config)#spanning-tree portfast default SW6(config)#spanning-tree portfast bpduguard default SW6(config)#errdisable recovery cause bpduguard SW6(config)#snmp-server enable traps syslog SW6(config)#write SW6(config)#



On SW3

VERIFICATION



On SW4



On SW5



On SW6



Configure Jameson’s datacenter network (AS 65002) as per the following requirements:

1. All inter‐switch links must be configured to use dot1q encapsulation. 2. Ensure that no switch attempt to negotiate the trunk parameters. 3. DO NOT configure any ether channel 4. All four switches must maintain a separate Spanning‐tree instance for each VLAN. 5. Spanning‐tree must immediately delete dynamically learned MAC address entries on a per-port basis

upon receiving a topology change. 6. SW3 must be the root switch for all VLANs. SW4 must be the backup root switch for all VLANs. Ensure

that they both have the best chances of maintaining their respective role even if any new normal‐range VLAN were to be added in the future.

SW3 ------ Configuration SW3(config)#interface range ethernet 2/0 -3, ethernet 3/0 -1 SW3(config-if-range)#switchport trunk encapsulation dot1q SW3(config-if-range)#switchport mode trunk SW3(config-if-range)#switchport nonegotiate SW3(config-if-range)#exit SW3(config)# SW3(config)#spanning-tree mode rapid-pvst SW3(config)#spanning-tree vlan 1-4094 priority 0

SW4 ------ Configuration SW3(config)#interface range ethernet 2/0 -3, ethernet 3/0 -1 SW3(config-if-range)#switchport trunk encapsulation dot1q SW3(config-if-range)#switchport mode trunk SW3(config-if-range)#switchport nonegotiate SW3(config-if-range)#exit SW3(config)#

SECTION 1.2: TRUNKING & STP

QUESTION

SOLUTION



SW4(config)#spanning-tree mode rapid-pvst SW4(config)#spanning-tree vlan 1-4094 priority 4096

SW5 ------ Configuration SW5(config)#interface range ethernet 2/0 -3 SW5(config-if-range)#switchport trunk encapsulation dot1q SW5(config-if-range)#switchport mode trunk SW5(config-if-range)#switchport nonegotiate SW5(config-if-range)#exit SW5(config)# SW5(config)#spanning-tree mode rapid-pvst

SW6 ------ Configuration SW6#configure terminal SW6(config)#interface range ethernet 2/0 -3 SW6(config-if-range)#switchport trunk encapsulation dot1q SW6(config-if-range)#switchport mode trunk SW6(config-if-range)#switchport nonegotiate SW6(config-if-range)#exit SW6(config)# SW5(config)#spanning-tree mode rapid-pvst



On SW3

VERIFICATION



On SW4



On SW5



On SW6



Configure the ACME network as per the following requirements.

1. All four switches must bundle trunk ports so that they maintain a single logical link to each other

(excepted between SW5 and SW6), as shown in the “Diagram 2: Initial Topology”. 2. Ensure that no switch attempt to negotiate which ports should become active in the bundle. 3. The distribution switches SW3 and SW4 must balance traffic between all members of the link bundle

based on source and destination IP addresses. 4. The access switches SW5 and SW6 must balance the income traffic (that is originated from server)

between all members of the link bundle based on the servers’ MAC address.

SW3 ------ Configuration SW3(config)#interface range ethernet 2/0-1 SW3(config-if-range)#channel-group 35 mode on SW3(config-if-range)#exit SW3(config)# SW3(config)#interface range ethernet 2/2-3 SW3(config-if-range)#channel-group 36 mode on SW3(config-if-range)#exit SW3(config)# SW3(config)#interface range ethernet 3/0-1 SW3(config-if-range)#channel-group 34 mode on SW3(config-if-range)#exit SW3(config)# SW3(config)#port-channel load-balance src-dst-ip

SECTION 1.3: ETHER-CHANNEL

QUESTION

SOLUTION



SW4 ------ Configuration SW4(config)#interface range ethernet 2/0-1 SW4(config-if-range)#channel-group 46 mode on SW4(config-if-range)#exit SW4(config)# SW4(config)#interface range ethernet 2/2-3 SW4(config-if-range)#channel-group 45 mode on SW4(config-if-range)#exit SW4(config)# SW4(config)#interface range ethernet 3/0-1 SW4(config-if-range)#channel-group 34 mode on SW4(config-if-range)#exit SW4(config)# SW4(config)#port-channel load-balance src-dst-ip

SW5 ------ Configuration SW5(config)#interface range ethernet 2/0-1 SW5(config-if-range)#channel-group 35 mode on SW5(config-if-range)#exit SW5(config)# SW5(config)#interface range ethernet 2/2-3 SW5(config-if-range)#channel-group 45 mode on SW5(config-if-range)#exit SW5(config)# SW5(config)#port-channel load-balance src-mac

SW6 ------ Configuration SW6(config)#interface range ethernet 2/0-1 SW6(config-if-range)#channel-group 46 mode on SW6(config-if-range)#exit SW6(config)# SW6(config)#interface range ethernet 2/2-3 SW6(config-if-range)#channel-group 36 mode on SW6(config-if-range)#exit



SW6(config)# SW6(config)#port-channel load-balance src-mac

On SW3

VERIFICATION



On SW4



On SW5

On SW6



Configure interface Ethernet0/0 in Jameson’s branch routers R19, R20 and R21 as per the following requirements:

1. The Ethernet WAN links must rely on a Layer 2 protocol that supports link negotiation and

authentication. 2. The service provider expects that the branch routers complete a three‐way handshake by providing the

expected response of a challenge that is sent by R49. 3. R19 must use the username “Jamesons‐R19” and password “CCIE” (without quotes). 4. R20 must use the username “Jamesons‐R20” and password “CCIE” (without quotes). 5. R21 must use the username “Jamesons‐R21” and password “CCIE” (without quotes). 6. The interface Eth0/0 of all three routers must receive an IP address from R49. 7. Ensure that all three routers can ping the IP address of each other’s interface Eth0/0. 8. You are allowed to configure a single static route in each branch router to achieve the previous

requirement.

R19 ------ Configuration R19(config)#interface dialer 1 R19(config-if)#ip address negotiated R19(config-if)#encapsulation ppp R19(config-if)#ppp chap hostname Jamesons-R19 R19(config-if)#ppp chap password CCIE R19(config-if)#dialer pool 1 R19(config-if)#exit R19(config)# R19(config)#interface ethernet 0/0 R19(config-if)#pppoe enable R19(config-if)#pppoe-client dial-pool-number 1 R19(config-if)#no shutdown R19(config-if)#exit R19(config)#

SECTION 1.4: WAN TECHNOLOGIES

QUESTION

SOLUTION



R19(config)#ip route 0.0.0.0 0.0.0.0 dialer 1

R20 ------ Configuration R20(config)#interface dialer 1 R20(config-if)#ip address negotiated R20(config-if)#encapsulation ppp R20(config-if)#ppp chap hostname Jamesons-R20 R20(config-if)#ppp chap password CCIE R20(config-if)#dialer pool 1 R20(config-if)#exit R20(config)# R20(config)#interface ethernet 0/0 R20(config-if)#pppoe enable R20(config-if)#pppoe-client dial-pool-number 1 R20(config-if)#no shutdown R20(config-if)#exit R20(config)# R20(config)# ip route 0.0.0.0 0.0.0.0 dialer 1

R21 ------ Configuration R21(config)# R21(config)#interface dialer 1 R21(config-if)#ip address negotiated R21(config-if)#encapsulation ppp R21(config-if)#ppp chap hostname Jamesons-R21 R21(config-if)#ppp chap password CCIE R21(config-if)#dialer pool 1 R21(config-if)#exit R21(config)# R21(config)#interface ethernet 0/0 R21(config-if)#pppoe enable R21(config-if)#pppoe-client dial-pool-number 1 R21(config-if)#no shutdown R21(config-if)#exit R21(config)# R21(config)# ip route 0.0.0.0 0.0.0.0 dialer 1



On R19

VERIFICATION



On R20



On R21

ccie r&s v5 lab v2.1 (h2) · practical information to help candidates in the preparation for...

Documents