Combination: TS2, DIAG2+, CFG 2+. Test location: BJ
Q1 Deny all by default, add one to release.
Q2 R14: next-version op-self
Q3 Did not solve it, give up decisively, R23 had a neighbor but did not receive the route of 10.2.100/24, IGP checked no problem and BGP strategy was no problem, too.
Q4 The demand has indeed changed, not SERVER1, but SERVER2, the solution is consistent.
Q5 Change the network type of the tunnel to P2M. Note here that the R60 phenomenon map requires a route of 10.100.0.51. I didn’t pay attention to it for the first time. There is a problem with the tunnel IP address of R51 (/32).
Q6 Do Redis OSPF in R15 ipv6.
Q7 R1 did not announce the IGP; the RT import of R3 had a problem, I checked R4/R6 and changed it to the correct one.
Q8 D version CP snooping, add a trust, and then remove the lease of D version CP.
Q9 Tunnel key is wrong
Q10 Supplement the R24’s outside configuration and add R25 in parallel. (The address of telnet is 123.45.67.89).
DIAG2+
Just starting this, it’s really awkward, I don’t know what to do. Because you can’t easily click “next”, I probably guessed that the answer might be DIAG2. After the next question, I found that I can take a step forward.
Look at the picture and see the configuration.
Found that R2 has no route, R3 has a route.
After looking at the topology, I found that this topology was the opposite of the version 2+ topology. I subconsciously thought it was version 2, but later confirmed that there was a problem with R2, which was DIAG2+; the problem with R3 was DIAG2. Decisively chose the answer of DIAG2+.
The capture file has a link at the bottom of the test interface. After you click it, it will come out (the same as the cloud version ark given by the teacher).
Here, I personally analyze where the capture is very embarrassing. Filtering with the version SRPV6 first does not work. It is filtered out using the version srp later. I have been looking for a long time, I am very embarrassed, I don’t know which one to choose. Finally, I stared at the FE80 package. Note that it is the src column. Don’t find the dst column, confirm it and choose it. (The one of the FE80 that I chose dst at the beginning).
CFG 2+
When I got the version, I was so happy that it was so simple!
OSPF is basically pre-configured. When configuring DR/BDR, pay attention to “cle ip ospf pro”.
BGP is also full, the router-id can be added up.
All of Corenetwork’s VRFs don’t have RDs.
JacobsCorp’s VRF is also equipped with its own.
————Pick up your sleeves and do it!
Maybe I knocked too fast. When I was typing 2.4 EBGP, I did all of MPLS, VPNV4, VRF, and RT (version Q, Main office). I admire myself and dare to do this. I suggest that you don’t do this like me. In the end, you still have to slash all the way and stabilize! Because it is in this process, I was added to the wrong point by the teacher, and I will talk about it in detail later!
When I did DMVPN, I didn’t have any “fragile ingredients”. It was just a casual down, just add IPSEC.
Today, BJ’s Andy teacher is too strict. I will elaborate on my experience with TR (I remembered it three times at first, then calmly thought about it not only three times).
The first place: The IGP of R15 is all gone. At this time, when I configured EBGP of R15, I habitually checked the neighbors and configuration of IGP and found this problem.
Note: Recovery after reconfiguration.
The second place: the IP address of R52 was changed (not pre-configured, because I confirmed it is “up” when I configured).
Note: Recovery after reconfiguration.
The third place: the RD of the R52 was changed. Neighbors were all hanging, I reconfigured them all.
Note: Recovery after reconfiguration.
The fourth place: R19’s DMVPN IPSEC strategy.
Note: Modify algorithm.
The fifth place: Multicast can’t come up. When I fix the configuration, I just added the configuration, he removed it in the next second. (Change the global configuration of R17).
Note: Reconfigured, “shut” “no shut”, still does not work. In the end, I was courageous and reloaded R17 directly. Restart the card for nearly 4 minutes, fortunately, dmvpn is fine. Be sure to confirm the various configurations: Is the track of IGP, NAT, SW3/SW4 recovered?
The sixth place: the EBGP status of R16 became idle.
Note: Recovery after reconfiguration.
Before the volume was handed over, I saved the windows one by one. I confirmed the phenomena of the main and standby paths and the maps given by all the test sites. But before the results came out, my heart was hung.
Finally, express my feelings, “Calmly take care of everything that happens, and have a good mentality.” You have to understand the biscuit teacher’s problem-solving ideas.
Matters needing attention (personal position):
First, put the key equipment on the display, when all the configuration is checked, put the key equipment in the lower part of the display and do a check in five minutes! Avoid being TR and don’t know.
Second, the seat has two displays, it is recommended that you prepare for the split screen operation during the preparation period. (Clicking on the device defaults to the left screen, pulling all the questions to the right screen, making it a lot smoother)
Third, do not easily restart some important equipment, this is not recommended. Because there are likely to be some unexpected situations!
Fourth, the night before the test, do not eat spicy food.
finally, I especially recommend the cert collection ccie rs dumps and very useful for the exam.
Q2 R14: next-version op-self
Q3 Did not solve it, give up decisively, R23 had a neighbor but did not receive the route of 10.2.100/24, IGP checked no problem and BGP strategy was no problem, too.
Q4 The demand has indeed changed, not SERVER1, but SERVER2, the solution is consistent.
Q5 Change the network type of the tunnel to P2M. Note here that the R60 phenomenon map requires a route of 10.100.0.51. I didn’t pay attention to it for the first time. There is a problem with the tunnel IP address of R51 (/32).
Q6 Do Redis OSPF in R15 ipv6.
Q7 R1 did not announce the IGP; the RT import of R3 had a problem, I checked R4/R6 and changed it to the correct one.
Q8 D version CP snooping, add a trust, and then remove the lease of D version CP.
Q9 Tunnel key is wrong
Q10 Supplement the R24’s outside configuration and add R25 in parallel. (The address of telnet is 123.45.67.89).
DIAG2+
Just starting this, it’s really awkward, I don’t know what to do. Because you can’t easily click “next”, I probably guessed that the answer might be DIAG2. After the next question, I found that I can take a step forward.
Look at the picture and see the configuration.
Found that R2 has no route, R3 has a route.
After looking at the topology, I found that this topology was the opposite of the version 2+ topology. I subconsciously thought it was version 2, but later confirmed that there was a problem with R2, which was DIAG2+; the problem with R3 was DIAG2. Decisively chose the answer of DIAG2+.
The capture file has a link at the bottom of the test interface. After you click it, it will come out (the same as the cloud version ark given by the teacher).
Here, I personally analyze where the capture is very embarrassing. Filtering with the version SRPV6 first does not work. It is filtered out using the version srp later. I have been looking for a long time, I am very embarrassed, I don’t know which one to choose. Finally, I stared at the FE80 package. Note that it is the src column. Don’t find the dst column, confirm it and choose it. (The one of the FE80 that I chose dst at the beginning).
CFG 2+
When I got the version, I was so happy that it was so simple!
OSPF is basically pre-configured. When configuring DR/BDR, pay attention to “cle ip ospf pro”.
BGP is also full, the router-id can be added up.
All of Corenetwork’s VRFs don’t have RDs.
JacobsCorp’s VRF is also equipped with its own.
————Pick up your sleeves and do it!
Maybe I knocked too fast. When I was typing 2.4 EBGP, I did all of MPLS, VPNV4, VRF, and RT (version Q, Main office). I admire myself and dare to do this. I suggest that you don’t do this like me. In the end, you still have to slash all the way and stabilize! Because it is in this process, I was added to the wrong point by the teacher, and I will talk about it in detail later!
When I did DMVPN, I didn’t have any “fragile ingredients”. It was just a casual down, just add IPSEC.
Today, BJ’s Andy teacher is too strict. I will elaborate on my experience with TR (I remembered it three times at first, then calmly thought about it not only three times).
The first place: The IGP of R15 is all gone. At this time, when I configured EBGP of R15, I habitually checked the neighbors and configuration of IGP and found this problem.
Note: Recovery after reconfiguration.
The second place: the IP address of R52 was changed (not pre-configured, because I confirmed it is “up” when I configured).
Note: Recovery after reconfiguration.
The third place: the RD of the R52 was changed. Neighbors were all hanging, I reconfigured them all.
Note: Recovery after reconfiguration.
The fourth place: R19’s DMVPN IPSEC strategy.
Note: Modify algorithm.
The fifth place: Multicast can’t come up. When I fix the configuration, I just added the configuration, he removed it in the next second. (Change the global configuration of R17).
Note: Reconfigured, “shut” “no shut”, still does not work. In the end, I was courageous and reloaded R17 directly. Restart the card for nearly 4 minutes, fortunately, dmvpn is fine. Be sure to confirm the various configurations: Is the track of IGP, NAT, SW3/SW4 recovered?
The sixth place: the EBGP status of R16 became idle.
Note: Recovery after reconfiguration.
Before the volume was handed over, I saved the windows one by one. I confirmed the phenomena of the main and standby paths and the maps given by all the test sites. But before the results came out, my heart was hung.
Finally, express my feelings, “Calmly take care of everything that happens, and have a good mentality.” You have to understand the biscuit teacher’s problem-solving ideas.
Matters needing attention (personal position):
First, put the key equipment on the display, when all the configuration is checked, put the key equipment in the lower part of the display and do a check in five minutes! Avoid being TR and don’t know.
Second, the seat has two displays, it is recommended that you prepare for the split screen operation during the preparation period. (Clicking on the device defaults to the left screen, pulling all the questions to the right screen, making it a lot smoother)
Third, do not easily restart some important equipment, this is not recommended. Because there are likely to be some unexpected situations!
Fourth, the night before the test, do not eat spicy food.
finally, I especially recommend the cert collection ccie rs dumps and very useful for the exam.
评论
发表评论