cccisco 发表于 2012-8-11 17:18:28

喜讯 642-823低调PASS－千分飘过－第三次CCNP重认证

本帖最后由 cccisco 于 2012-8-11 17:25 编辑

    642-823 PASS－千分飘过－第三次CCNP重认证

鸿鹄V200全覆盖，感谢前期各位弟兄的战报，感谢客服5提供协助考试注册（虽然没有注册成功，原因是我支付宝问题）

关于筹备：周三决定参加642-832考试，一共筹备3个晚上，看完了视频和题目，稳定的做了FLASH和官方的Flash 。熟练掌握万金油精华，外加7年IT运维护经验，排错还是小CASE。

考试介绍：周5注册的周6 11：30的考试，提前联系考试中心的MM，说可以早早的考试，早上9：00出发，9：20-30验证完成身份后 9:35－10：38完成考试出考场，低调满分通过。

823，很稳定，大家一定好好理解TT的错误点，认真排查和进行PING测试，避免搞错故障点。
Flash上面的4个模拟TT一定要排查出来原因，目的一是熟悉考试的环境，二是通过这个环境训练自己的排错能力。４个TT如果没有找到原因全做对的话不建议参加考试。

万金油，这个是一个排错的思路，像查HSRP、IPV6、169这几个都是很明显的，先把这几个明显的查出来后，剩余的就好找了。别着急考试时间，充足的很，足够排30个TT了。

关于TT排错总结：个人总结的是例如明确知道TT1是HSRP故障的话，可以在TT*不确定的话，可以来对比配置。通过对比可以排查出问题具体原因。　像当是我做的时候有几个确实很混淆。　另外注意使用除了C1/2外，其它R*路由器进行PING测试，保证完美。
－－－－－－－－－－－－－－－－－考试整理，摘录某个兄弟整理的－－－－－－－－－－－－－－－－
1
TT1：HSRP------------------- DSW1
在DSW1上Show run看到standby条目，show standby brief----看到状态没有UP
TROUBLE TICKET STATEMENT:
“The implementation group has been using the test bed to do a „proof-of-concept‟ that required
both client 1 and client 2 to access the Web Server at 209.65.200.241. After several changed
to interface status,network addressing, routing schemes and layer 2 connectivity, at trouble
ticket has been opened indicating that client 1 cannot ping the 209.65.200.241 (internet
Server)”
以下信息需要自己show run获得：
HSRP has been configurationured between DSW1 and DSW2. DSW1 is configurationured to
be active
router but it never becomes active even though the HSRP communication between DSW1 and
DSW2 is
working.
Configuration on DSW1
track 1 ip route 10.1.21.128 255.255.0.0 metric threshold threshold metric up 1 down 2
!
track 10 ip route 10.2.21.128 255.255.255.0 metric threshold threshold metric up 63 down 64
!
interface Vlan10
ip address 10.2.1.1 255.255.255.0
standby 10 ip 10.2.1.254
standby 10 priority 200
standby 10 preempt
standby 10 track 1 decrement 60
Configuration on R4
interface loopback0
ip address 10.2.21.128 255.255.255.0
QUESTION 1
On which device is the fault condition located?
A. R4
B. DSW2
C. DSW1
D. R3
Answer: C
QUESTION 2
Fault Condition is related to which technology?
A. GLBP
B. HSRP
C. OSPF
D. Switch to Switch Connectivity
Answer: B
QUESTION 3
What is the solution of fault condition?
A. Change standby priority to 140
B. Change standby priority to 260
C. Under the interface vlan 10 configuration delete the standby 10 track 1 decrement 60
2
command and enter the standby 10 track 10 decrement 60 command.
D. Change standby 10 track 1 decrement 60 to standby 10 track 1 decrement 100
Answer: C
TT2：IPV6-----------R2
在R2上show ipv6 router,只有直连和L链路本地，没有任何OSPF 路由
以下信息需要自己show run获得：
DSW1 and R4 cannot ping R2's loopback or R2's s0/0/0/0.12 IPv6 address. Initial
troubleshooting shows
and R2 is not an OSPFv3 neighbor on R3.
Configuration on R2:
ipv6 unicast-routing
!
ipv6 router ospf 6
router-id 2.2.2.2
!
interface s0/0/0/0.23
ipv6 address 2026::1:1/122
Configuration on R3
ipv6 unicast-routing
!
ipv6 router ospf 6
router-id 3.3.3.3
!
interface s0/0/0/0.23
ipv6 address 2026::1:2/122
ipv6 ospf 6 area 0
QUESTION 1
On Which device is the fault condition located?
A. DSW1
B. DSW2
C. R2
D. R3
Answer: C
QUESTION 2
The Fault Condition is related to which technology?
A. IPv6 Addressing
B. Route Redistribution
C. IPv6 OSPF Routing
D. RIPng
Answer: C
QUESTION 3
What is the solution of the fault condition?
A. Under the interface Serial 0/0/0.23 configuration enter the ipv6 ospf 6 area 0 command.
B. Add ipv6 ospf 6 area 6 under s0/0/0/0.23 on R2
C. Remove IPv6 address from s0/0/0/0.23 on R2
3
D. Enable IPv6 routing on s0/0/0/0.23 on R2
Answer: A
TT3: DHCP range------------ R4
在4道题上，分别在R4上show run ，找到错误的DHCP,10.2.1.1-10.2.1.253，确定为DHCP
以下信息需要自己show run获得：
Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
FTP Server.
They are able to ping each other.
Configuration on R4
!
no ip domain lookup
ip dhcp excluded-address 10.2.1.1 10.2.1.253
ip dhcp excluded-address 10.2.1.254
!
ip dhcp pool TSHOOT
network 10.2.1.0 255.255.255.0
default-router 10.2.1.254
!
QUESTION 1
On Which device is the fault condition located?
A. R1
B. R2
C. R3
D. R4
E. DSW1
F. DSW2
G. ASW1
H. ASW2
Answer: D
QUESTION 2
The fault condition is related to which technology?
A. NTP
B. IP DHCP Server
C. IPv4 OSPF Routing
D. IPv4 EIGRP Routing
E. IPv4 Route Redistribution
F. IPv6 RIP Routing
G. IPv6 OSPF Routing
H. IPV4 and IPV6 Interoperability
I. IPV4 layer 3 security
Answer: B
QUESTION 3
What is the soultion to the fault condition ?
A.Under global configuration, delete the no ip dhcp use vrf connected command.
B.Under IP DHCP pool configuration, delete the default-router 10.2.1.254 command and
4
enter the defaultrouter 10.1.4.5 command.
C.Under IP DHCP pool configuration, delete the network 10.2.1.0 255.255.255.0 command
and enter the network 10.1.4.0 255.255.255.0 command.
D. Under the IP DHCP pool configuration, issue the no ip dhcp excluded-address 10.2.1.1
10.2.1.253 command and enter the ip dhcp excluded-address 10.2.1.1 10.2.1.2 command.
Answer: D
TT4 : port security -----------ASW1
在3道题上，在ASW1上，show interface f1/0/1,找到f1/0/1 is down,line protocol is
down,switchport port-security mac-address 0000.0000.0001,并show run
以下信息需要自己show run获得：
Client one is getting a 169.x.x.x IP address and is not able to ping Client 2 or DSW1. Inital
troubleshooting
shows that port Fa1/0/1 on ASW1 is in errdisable state.
Configuration on ASW1
Interface FastEthernet1/0/1
switchport mode access
switchport port-security
switchport port-security mac-address 0000.0000.0001
Interface FastEthernet1/0/2
switchport mode access
switchport port-security
switchport port-security mac-address 0000.0000.0002
QUESTION 2
On which device is the fault condition located?
A. DSW1
B. ASW1
C. Client 1
D. FTP Server
Answer: B
QUESTION 3
The Fault Condition is related to which technology?
A. VLAN Access Map
B. InterVLAN communication
C. DHCP
D. Port Security
Answer: D
QUESTION 4
What is the solution of the fault condition?
A.Configurationure Static IP Address on Client 1
B. Change the IP Address of VLAN 10 on DSW1
C. Issue shutdown command followed by no shutdown command on port fa1/0/1 -2 on ASW1
D. In Configuration mode, using the interface range Fa 1/0/1 -2, then no switchport-security
interface configuration commands. Then in exec mode clear errdisable interface fa 1/0/1, then
5
clear errdisable interface fa 1/0/2 commands
E. Issue no switchport port-security mac-address 0000.0000.0001 command on port fa1/0/1 -2
on ASW1
Answer: D
TT5 : switchport vlan 10 ------------ ASW1
在ASW1上 show vlan brief 和show run ,发现f1/0/1 和 f1/0/2 在默认vlan 1
中，没有任何在vlan 10
以下信息需要自己show run获得：
Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
FTP Server.
They are able to ping each other.
Configuration on ASW1
Interface FastEthernet1/0/1
switchport mode access
switchport access vlan 1
!
Interface FastEthernet1/0/2
switchport mode access
switchport access vlan 1
QUESTION 1
On which device is the fault condition located?
A. DSW1
B. ASW1
C. Client 1
D. FTP Server
Answer: B
QUESTION 2
The Fault Condition is related to which technology?
A. Access vlans
B. InterVLAN communication
C. DHCP
D. Port Security
Answer: A
QUESTION 3
What is the solution of the fault condition?
A. Given an IP address to VLAN 1 on DSW1
B. Change the IP Address of VLAN 10 on DSW1
C. In Configuration mode, using the interface range Fastethernet 1/0/1 -2, then switchport
access vlan 10 command.
D. Give static IP addresses to Client 1 and Client 2
Answer: C
TT6 : switchport trunk ------------ASW1
在 ASW1上show run
6
以下信息需要自己show run获得：
Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the
FTP Server.
They are able to ping each other.
Configuration on ASW1
Interface PortChannel13
switchport mode trunk
switchport trunk allowed vlan 1-9
!
Interface PortChannel23
switchport mode trunk
switchport trunk allowed vlan 1-9
!
Interface FastEthernet1/0/1
switchport mode access
switchport access vlan 10
!
Interface FastEthernet1/0/2
switchport mode access
switchport access vlan 10
!
QUESTION 1
On Which device is the fault condition located?
A. ASW1
B. DSW1
C. Client 1
D. FTP Server
Answer: A
QUESTION 2
The Fault Condition is related to which technology?
A. VLAN
B. InterVLAN communication
C. DHCP
D. Switch to Switch Connectivity
Answer: D
QUESTION 3
What is the solution of the fault condition?
A. Change the VLAN assignment on fa1/0/1 and fa1/0/2 on ASW1 to VLAN 1
B. Change the IP Address of VLAN 10 on DSW1
C. In Configuration mode, using the interface port-channel 13, port-channel 23, the configure
switchport trunk none allowed vlan none followed by switport trunk allowed vlan 10,200
commands.
D. Issue switchport trunk allowed vlan none on interface portchannel13 and portchanngel23 on
ASW1
Answer: C
7
--------------------------------------------------------TT7 : VLAN ACL ------------------------DSW1
以下信息需要自己show run获得：
Client 1 is getting an IP address from the DHCP server but is not able to ping DSW1 or the
FTP server.
Configuration on DSW1
vlan access-map test1 10
drop
match ip address 10
!
vlan filter test1 vlan-list 10
!
ip access-list standard 10
permit 10.2.0.0 0.0.255.255
!
Interface VLAN10
ip address 10.2.1.1 255.255.255.0
!
QUESTION 1
On which device is the fault condition located?
A. R4
B. DSW1
C. Client 1
D. FTP Server
Answer: B
QUESTION 2
The Fault Condition is related to which technology?
A. VLAN ACL / Port ACL
B. InterVLAN communication
C. DHCP
D. IP Access List
Answer: A
QUESTION 3
What is the solution of the fault condition?
A. Configurationure Static IP Address on Client 1
B. Change the IP Address of VLAN 10 on DSW1
C. Add Permit any statement to access-list 10
D. Under the global configuration mode Remove vlan filter test1 from DSW1
Answer: D
TT8 : EIGRP passive -------- R4
以下信息需要自己show run获得：
the neighborship between R4 and DSW1 wasn‟t establised. Client 1 can‟t ping R4
Configuration on R4
router eigrp 10
8
passive-interface default
redistribute ospf 1 route-map OSPF->EIGRP
network 10.1.4.4 0.0.0.3
network 10.1.4.8 0.0.0.3
default-metric 10000 100 255 1 10000
no auto-summary
QUESTION 1
On Which device is the fault condition located?
A. R1
B. R2
C. R3
D. R4
Answer: D
QUESTION 2
The fault condition is related to which technology?
A. NTP
B. IP DHCP Server
C. IPv4 OSPF Routing
D. IPv4 EIGRP Routing
E. IPv4 Route Redistribution
F. IPv6 RIP Routing
G. IPv6 OSPF Routing
H. IPV4 and IPV6 Interoperability
I. IPV4 layer 3 security
Answer: D
QUESTION 3
What is the soultion to the fault condition ?
A. Remove “Passive interface” in Interface f0/1 and f0/0
B.
C.
D.
Answer: A
TT9 : Redistribute--------------R4
以下信息需要自己show run获得：
Client 1 is not able to reach the WebServer. Initial troubleshooting shows that DSW1 can ping
the Fa0/1
interface of R4 but not the s0/0/0/0.34 interface.
Configuration on DSW1
router eigrp 10
network 10.1.4.4 0.0.0.0
CertKiller.com
network 10.2.1.1 0.0.0.0
network 10.2.4.13 0.0.0.0
no auto-summary
Configuration on DSW2
router eigrp 10
network 10.1.4.8 0.0.0.0
9
network 10.2.2.1 0.0.0.0
network 10.2.4.14 0.0.0.0
no auto-summary
Configuration on R4
router eigrp 10
network 10.1.4.5 0.0.0.0
no auto-summary
redistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF
router ospf 1
network 10.1.1.8 0.0.0.0 area 34
redistribute eigrp 10 subnets
!
route-map EIGRP->OSPF
match ip address 1
!
access-list 1 permit 10.0.0.0 0.255.255.255
access-list 1 permit 209.0.0.0 0.255.255.255
QUESTION 1
On Which device is the fault condition located?
A. DSW1
B. DSW2
C. Client 1
D. R4
Answer: D
QUESTION 2
The Fault Condition is related to which technology?
A. EIGRP
B. IPv4 Router Redistribution
C. OSPF
D. IP Addressing
Answer: B
QUESTION 3
What is the solution of the fault condition?
A. Remove the redistribute command from OSPF process on R4
B. Under the EIGRP process, delete the distribute ospf 1 router-map
OSPF_to_EIGRPcommand enter the
redistribute ospf 1 route-map OSPF->EIGRP command.
C. Change EIGRP AS to 1 on R4
D. Advertise 10.1.1.8/30 network in EIGRP on R4
Answer: B
TT10 : OSPF Auth ---------------R1
以下信息需要自己show run获得：
Client 1 is able to ping 10.1.1.2 but not 10.1.1.1. Initial troubleshooting shows that R1 does not
have any
OSPF neighbors or any OSPF routes
10
Configuration on R1:
router ospf 1
log-adjacency-changes
network 10.1.1.0 0.0.0.3 area 12
default-information originate always
!
interfaceSerial0/0/0/0.12 point-to-point
ip address 10.1.1.1 255.255.255.252
ip nat inside
ip ospf message-digest-key 1 md5 TSHOOT
Configuration on R2:
router ospf 1
log-adjacency-changes
network 10.1.1.0 0.0.0.3 area 12
!
interfaceSerial0/0/0/0.12 point-to-point
ip address 10.1.1.2 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 TSHOOT
QUESTION 1 :
On which device is the fault condition located?
A. R1
B. R2
C. DSW1
D. Client1
Answer: A
QUESTION 2
Fault Condition is related to which technology?
A. NAT
B. IPV4 OSPF
C. Static Routing
D. Switch to Switch Connectivity
Answer: B
QUESTION 3
What is the solution of the fault condition?
A. enable OSPF Authentication on the S0/0/0 interface using the ip ospf authentication
message-digest
command
B. ip ospf authentication message-digest command has to be added under the OSPF routing
process
C. A static route to 10.1.1.4 must be added on R1
D. ipnat outside must be added on S0/0/0/0.12
Answer: A
TT11 : BGP neighbor ---------------R1
以下信息需要自己show run获得：
11
Client 1 is able to ping 209.65.200.226 but not the Web Server at 209.65.200.241. Initial
troubleshooting
shows and R1 does not have any BGP routes. R1 also does not show any active BGP
neighbor
Configuration on R1
router bgp 65001
no synchronization
bgp log-neighbor-changes
network 209.65.200.224 mask 255.255.255.252
neighbor 209.56.200.226 remote-as 65002
no auto-summary
QUESTION 1
On which device is the fault condition located?
A. R1
B. DSW1
C. R4
D. R2
Answer: A
QUESTION 2
The Fault Condition is related to which technology?
A. EIGRP
B. HSRP
C. BGP
D. OSPF
Answer: C
QUESTION 3
What is the solution of the fault condition?
A. Enable BGP synchronization
B. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.56.200.226
remote-as 65001
C. Under the BGP process, delete the neighbor 209.56.200.226 remote-as 65002 command
enter the neighbor 209.65.200.226 remote-as 65002 command.
D. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor 209.65.200.226
remote-as 65001
Answer: C
TT12 : NAT -----------------------------R1
QUESTION 26
以下信息需要自己show run获得：
Client 1 and Client 2 are not able to reach the WebServer at 209.65.200.241. Initial
troubleshooting shows
that DSW1, DSW2 and all the routers are able to reach the WebServer.
Configuration on R1
ip nat inside source list nat_pool interface Serial0/0/0/1 overload !
ip access-list standard nat_pool
permit 10.1.0.0
!
12
interface Serial0/0/0/1
ip address 209.65.200.224 255.255.255.252
ip nat outside
!
interfaceSerial0/0/0/0.12
ip address 10.1.1.1 255.255.255.252
ip nat inside
ip ospf message-digest-key 1 md5 TSHOOT
ip ospd authentication message-digest
On Which device is the fault condition located?
A. R1
B. DSW1
C. R4
D. R2
Answer: A
QUESTION 27
The Fault Condition is related to which technology?
A. EIGRP
B. HSRP
C. BGP
D. NAT
Answer: D
QUESTION 28
What is the solution of the fault condition?
A. Under the ip access-list standar nat_trafic configuration enter the permit 10.2.0.0
0.0.255.255 command
B. Remove permit 10.1.0.0 statement from nat_pool access-list
C. Change ip nat inside source list nat_pool interface Serial0/0/0/1 overload to ip nat inside
source list nat_pool interface Serial0/0/0/0.12 overload
D. Change ip nat outside statement under Serial0/0/0/1 configuration to ip nat inside
Answer: A
TT13 :    -------------R1
QUESTION 29
以下信息需要自己show run获得：
Client 1 is not able to reach the WebServer at 209.65.200.241. Initial troubleshooting shows
that R1 is also
not able to reach the WebServer. R1 also does not have any active BGP neighbor.
Configuration on R1
router bgp 65001
no synchronization
bgp log-neighbor-changes
network 209.65.200.224 mask 255.255.255.252
neighbor 209.65.200.226 remote-as 65002
no auto-summary
!
access-list 30 permit host 209.65.200.241
access-list 30 deny 10.1.0.0 0.0.255.255
13
access-list 30 deny 10.2.0.0 0.0.255.255
!
interface Serial0/0/0/1
ip address 209.65.200.224 255.255.255.252
ip nat outside
ip access-group 30 in
On which device is the fault condition located?
A. R1
B. DSW1
C. R4
D. R2
Answer: A
QUESTION 30
The Fault Condition is related to which technology?
A. IP Access
B. IP NAT
C. BGP
D. IPv4 layer 3 security
Answer: D
QUESTION 31
What is the solution of the fault condition?
A. Under the ip access-list 30 configuration add the permit ip 209.65.200.224 0.0.0.3 a ny
command
B. Remove Deny Statements from access-list 30
C. Change neighbor 209.65.200.226 remote-as 65002 statement to neighbor 209.65.200.226
remote-as 65001
D. Use extended access-list instead of standard access-list
Answer: A
Explanation/Reference:
Explanation:

Ｃｃ↑victory↓ 发表于 2012-8-11 17:23:02

{:6_267:}{:6_267:}

我是好孩子 发表于 2012-8-11 17:30:02

{:6_267:}兄弟牛啊!

mamamiya 发表于 2012-8-11 17:36:17

周老师CCIE公开课MPLS（2012年1月2日录制）http://bbs.hh010.com/thread-129350-1-1.html周老师CCIE#116XX CCNA视频教程-1-2012年1月5日录制http://bbs.hh010.com/thread-129578-1-29.html周老师CCIE#116XX CCNA视频教程-2-2012年1月5日录制http://bbs.hh010.com/thread-129579-1-29.html周老师CCIE#116XX CCNA视频教程-3-2012年1月5日录制http://bbs.hh010.com/thread-129580-1-29.html周军CCIE#116XX CCNA视频教程-(4-5)-2012年1月6日录制http://bbs.hh010.com/thread-129818-1-29.html周军CCIE#116XX CCNP视频教程-NP交换课程网络设计讲解（2012-1-13录制）http://bbs.hh010.com/thread-130452-1-1.html周军CCIE116XX CCNP视频教程-9-交换机安全实验(2012年1月19日录制)http://bbs.hh010.com/forum.php?mod=viewthread&tid=133921&extra周军CCIE116XX CCNP视频教程-10-交换机安全实验（2012年1月19日录制)http://bbs.hh010.com/forum.php?mod=viewthread&tid=133932&extra周军CCNA公开课-实验机架演示（2012-03-11录制）http://bbs.hh010.com/forum.php?mod=viewthread&tid=153943&extra周军CCIE_RS-OER技术（2012年3月17日CCIE集训营随堂录制的视频）http://bbs.hh010.com/forum.php?mod=viewthread&tid=162134&extra周军CCIE公开课-mpls-vpn（2012-3月18日录制）http://bbs.hh010.com/forum.php?mod=viewthread&tid=162401&extra

woodward2012 发表于 2012-8-11 18:25:07

{:6_267:}{:6_290:}

ァE-ven 发表于 2012-8-11 18:58:59

{:6_267:}

forgprincecjx 发表于 2012-8-11 19:01:40

{:6_267:}{:6_290:}

YDX1987 发表于 2012-8-11 19:03:09

{:6_299:}

wysjwl 发表于 2012-8-11 20:20:21

请问port-security那道题，答案是C还是D？

环保108胶 发表于 2012-8-11 21:26:19

{:6_290:}{:6_290:}{:6_290:}

enter51 发表于 2012-8-12 02:20:31

{:6_290:}

ethan.liao 发表于 2012-8-12 14:32:26

恭喜{:6_299:}{:6_290:}

kaotomorrow 发表于 2012-8-12 15:46:57

{:6_290:}

klarkchen 发表于 2012-8-13 22:35:44

{:6_267:}{:6_267:}

hu_wen_qiang123 发表于 2012-8-14 13:28:57

{:6_267:}{:6_267:}{:6_267:}
页: [1] 2
查看完整版本: 喜讯 642-823低调PASS－千分飘过－第三次CCNP重认证