CPS B12 v2.

2 Questions and Solutions

CPS B12 v2.2 With OSPF

Notes: DC1 and DC2 have many more Inter-switch links that showed on
topology. Learn IP addressing scheme in order to find IP listed in traces

TS1 - 2 points

User4 (VLAN2000) to R40's loopback 0 interface in Large Office

blocking forming HSRP relationship. Get following outputs:
Note: Fault works only with IRON Images on Sw400-2

Problem configuration on Sw401 and Sw402:

vlan filter ATTACK vlan-list 1-4094

vlan access-map ATTACK
match ip address 100
action drop
access-list 100 permit tcp 192.168.1.252 0.0.0.0 eq 666 any

Solution is to Add following:

vlan access-map ATTACK 20

action forward

TS2 2 points
Server1 from datacenter 1 unable to access 8.8.8.8 from internet isp 1. Trace output given to
match following:

Solutions:

R14
router bgp 65001
address-family ipv4
neighbor IBGP next-hop-self
R14#clear ip bgp * soft

Note: Switch Sw110 is configured with dhcp snooping for vlan 2001. If your image does
not support it, disable dhcp snooping for vlan 2001.
TS3 4 points

Vlans are load balancing between datacenter 1 and datacenter 2. Fix so that to
match following Trace outputs:
Note: Traces are from Sw101 to Sw210 and vice versa
Part 2
Make sure trace from SW210 to 10.1.100.2 goes via R12 202.2.3.1;
and trace to 10.1.110.2 goes via R13 202.2.4.1
Solutions:

SW11 0
interface Ethernet 1/2
no ip ospf cost 1

R12/R13
Remove entry #20 Standard IP access list 1
access-list 1 permit 10.1.201.0 0.0.0.255
R12/R13#clear ip bgp * soft

On exam, you just configure the acl on R12 R13

access-list 1 permit 10.1.1.0 0.0.254.255
access-list 1 permit 10.1.0.0 0.0.254.255
TS4 2 points

Branch office unable to access DataCenter1 with the required path. trace output
given to match.
Note: Topology change

Solutions:

R22
Interface e0/0
ip ospf cost 100

R21

route-map LP permit 10
match ip address prefix-list 10
set local-preference 200
R21#clear ip bgp * soft

Exam Information:
R11
route-map LP permit 10
match ip address prefix-list AS65005
set local-preference 200
R11#clear ip bgp * soft

TS 5 4 points
In Large Office, Bgp connectivity failed with global service provider.

Soluitions:

Check IP CEF, MPLS Interfaces, MPLS LDP Neighbors.

Check DMVPN Tunnel and OSPF between Spoke R41 and Hub R14

R1
interface Loopback0
ip ospf 65011 area 0

R3
interface Ethernet0/0
mpls ip

R5
ip vrf GLOBALISP
no route-target export 65005:5
route-target export 65003:3

R3
ip vrf GLOBALISP
no route-target import 65005:5
route-target import 65003:3

R14 and R41 add/change interface tunnel 0 to

interface Tunnel 0

ip ospf network point-to-multipoint

Note: Make sure HSRP and Etherchannels work on Swithces in area. Depending
on your L2 images and PC resources, those features may not load properly or be
unavaivalble at all.
TS 6 2 point

OSPF route are not received in small office from DataCenter 1. Fix the problem to
produce following output:

Solutions:

R14/41/ R60
interface tunnel 0
ip ospf network point-to-multipoint
TS 7 2 point

User in datacenter 1 unable to access ipv6 address from ISP. Fix the problem to
produce following output:

Solution:

R15
router bgp 65001
address-family ipv6
network 2001:CC:1E:8BAD:10:1:100:0/104
aggregate-address 2001:CC:1E:8BAD::/64 summary-only

Ts 8 2 point
User1 in DC1 should ping User 3 in HQ. Fix the problem to produce following
output:

Note: Sw301 interface loopback 0 IP is 10.3.1.1 and Sw 302 l0 IP is 10.3.2.2

IP 202.2.2.2 belongs to R31; 202.2.1.2 to R30

Solutions:
Add following on SW301 / SW302
int vlan 2000
ip dhcp relay information trusted

Also check SW100 for following:

ip dhcp pool User1
default-router 10.1.100.1
interface Vlan2000
ip dhcp relay information trusted

TS9 2 point
Home office user unable to access server in DataCenter 2. Produce following
output:
Soluiton:

On R71 add or change tunnel key value to match R25s value

interface Tunnel0
tunnel key 10000

Ts 10 2 point (pending verification)

Nas server unable to telnet in datacenter 2. Fix the problem to produce following
output:

Solutions

R24
no ip nat inside source static tcp 201.1.24.1 23 10.2.200.1 23
ip nat inside source static tcp 10.2.200.1 23 201.1.24.1 23

ip nat outside source static 201.1.70.1 10.13.99.99

201.1.70.1 is R70 S1/0 WAN address

10.13.99.99 is location address

Previous:

Solution:

R25
ip nat outside source static 201.1.70.1 10.2.25.25

where 10.2.25.25 is R25 loopback address; 201.1.70.1 is R70's public interface S1 / 0 address