CCNP（642-813）題庫 題庫戰報500人超 題庫/戰報發布區 /forum-263-正版題庫、看考試戰報，請隨時關注鴻鵠報名考試，請聯系鴻鵠區----613523108[唯一]報名思科CCNP考試，送思科真機試驗 /thread-153631-1-CCNP.642-813.V200（2013.11.7）實驗部

Acmeisasmallshipcompanythathasanexistingenterprisenetworkcomprisedof2switches;DSW1andASW1.Thetopologydiagramindicatestheirlayer2map.VLAN40isanewVLANthatwillbeusedtoprovidetheshipnelaccesstotheserver.Forsecurityreasons,itisnecessarytorestrictaccesstoVLAN20inthefollowingUsersconnectingtoASW1’sportmustbeauthenticatebeforetheyaregivenaccesstothenetwork.AuthenticationistobedoneviaaRadiusserver:Radiusserverhost:Radiuskey:AuthenticationshouldbeimplementedasclosetothehostdeviceDevicesonVLAN20arerestrictedtointheaddressrangeofPacketsfromdevicesintheaddressrangeof/24shouldbepassedonVLAN20.PacketsfromdevicesinanyotheraddressrangeshouldbedroppedonVLANFilteringshouldbeimplementedasclosetotheserverfarmasTheRadiusserverandapplicationserverswillbeinstalledatafuturedate.Youhavebeentaskedwithimplementingtheaboveaccesscontrolasapre-conditiontoinstallingtheservers.YoumustusetheavailableIOSswitchfeatures.AnswerandconfigureASW1ASW1(config)#aaaauthenticationdot1xdefaultgroupradiusASW1(config)#radius-serverhost6keyrad123ASW1(config)#dot1xsystem-auth-controlASW1(config)#interfacefastEthernet0/1ASW1(config-if)#switchportmodeaccessASW1(config-if)#dot1xport-controlautoConfigureDSW1(config)#ipaccess-liststandard10Defineanaccess-mapwhichusestheaccess-listabove:DSW1(config)#vlanaccess-mapMYACCMAP10DSW1(config-access-map)#matchipaddress10DSW1(config-access-map)#actionforwardDSW1(config-access-map)#actiondropApplyavlan-mapintoaDSW1(config)#vlanfilterMYACCMAPvlan-list20DSW1#copyrunning-configstartup-config端口f0/1updotx時，命令縮寫不恰當會報錯。不要以為是系統的bug。請用完整命令配置或修改縮寫長度到被系統接受。pacl一定要應用到vlan20上。

MLSandEIGRPIamstillnotsureaboutthequestionbutweneedtoconfiguretheMultilayerSwitchsothatPCsfromVLAN2andVLAN3cancommunicatewiththeServer.Answerandmls#configureterminalmls(config)#intgi0/1mls(config-if)#ipaddressmls(config-if)#noshutdownmls(config-if)#exitmls(config)#intvlan2mls(config-if)#ipaddress324mls(config-if)#noshutdownmls(config-if)#intvlanmls(config-if)#ipaddress524mls(config-if)#noshutdownmls(config)#iproutingmls(config)#routereigrp650mls(config-router)#networkmls(config-router)#network2mls(config-router)#network4SpanningAcmeisasmallexportcompanythathasanexistingenterprisenetworkcomprisedof5switches;CORE,DSW1,DSW2,ASW1andASW2.Thetopologydiagramindicatestheirdesiredpre-VLANspanningtreemap.PreviousconfigurationattemptshaveresultedinthefollowingCOREshouldbetherootbridgeforVLAN20;however,DSW1iscurrentlytherootbridgeforVLAN20.TrafficforVLAN30shouldbeforwardingoverthegig1/0/6trunkportbetweenDSW1andDSW2.HoweverVLAN30iscurrentlyusinggig1/0/5.TrafficforVLAN40shouldbeforwardingoverthegig1/0/5trunkportbetweenDSW1andDSW2.HoweverVLAN40iscurrentlyusinggig1/0/6.Youhavebeentaskedwithisolatingthecauseoftheseissuerandimplementingtheappropriatesolutions.YoutaskiscomplicatedbythefactthatyouonlyhavefullaccesstoDSW1,withisolatingthecauseoftheseissuesandimplementingtheappropriatesolutions.YourtaskiscomplicatedbythefactthatyouonlyhavefullaccesstoDSW1,withtheenablesecretpasswordcisco.OnlylimitedshowcommandaccessisprovidedonCORE,andDSW2usingtheenable2levelwithswordofacme.Noconfigurationchangeswillbepossibleontheserouters.NoaccessisprovidedtoASW1orASW2.AnswerandDSW1#configureDSW1(config)#spanning-treevlan20priority CORE成為rootDSW1(config-if)#spanning-treevlan30port-priority64DSW1(config-if)#spanning-treevlan40costSavetheconfiguration:

VTPTheheadquarterofficesforabookretailerareenhancingtheirwiringclosetswithLayer3switches.Thenewdistribution-layerswitchhasbeeninstalledandanewaccess-layerswitchcabledtoit.YourtaskistoconfigureVTPtoshareVLANinformationfromthedistribution-layerswitchtotheaccess-layerdevices.Then,itisnecessarytoconfigureinterVLANroutingonthedistributionlayerswitchtoroutetrafficbetweenthedifferentVLANsthatareconfiguredontheaccess-layerswitches;however,itisnotnecessaryforyoutomakethespecificVLANportassignmentsontheaccess-layerswitches.Also,becauseVLANdatabasemodeisbeingdeprecatedbyCisco,allVLANandVTPconfigurationsaretobecompletedintheglobalconfigurationmode.PleasereferencethefollowingtablefortheVTPandVLANinformationtobeconfigured:VTP VLAN IP 172.16TheseareyourspecifiConfiguretheVTPinformationwiththedistributionlayerswitchastheVTPConfiguretheVTPinformationwiththeaccesslayerswitchasaVTPConfigureVLANsonthedistributionlayerConfigureinter-VLANroutingonthedistributionlayerSpecificVLANportassignmentswillbemadeasusersareaddedtotheaccesslayerswitchesinthefuture.AllVLANsandVTPconfigurationsaretocompletedintheglobalconfiguration.Toconfiguretheswitchclickonthehosticonthatisconnectedtotheswitchbewayofaserialconsolecable.DLSwitch#configureterminalDLSwitch(config)#vtpcisco(usecisco,notCISCObecauseitiscase(Requirement2willbesolvedConfigureVLANsonthedistributionlayerTocreateVLANsonaswitch,usethevlan DLSwitch(config)#vlan20DLSwitch(config)#vlan21ConfigureIpaddressesforVlans:DLSwitch(config)#interfacevlanDLSwitch(if-config)#ipaddressDLSwitch(if-config)#noshutdownDLSwitch(if-config)#interfacevlanDLSwitch(if-config)#ipaddressDLSwitch(if-config)#noshutdownDLSwitch(if-Configureinter-VLANroutingonthedistributionlayerDLSwitch(config)#iproutingDLSwitch#copyrunning-configstartup-2)ConfiguretheVTPinformationwiththeaccesslayerswitchasaVTPALSwitch#configureterminalALSwitch(config)#vtpmodeclientALSwitch#copyrunning-configstartup-

TheheadquarterofficeforacementmanufacturerisinstallingatemporaryCatalyst3550inanIDFtoconnect24additionalusers.Topreventnetworkcorruption,itisimportanttohavethecorrectconfigurationpriortoconnectingtotheproductionnetwork.ItwillbenecessarytoensurethattheswitchdoesnotparticipateinVTPbutforwardsVTPadvertisementsthatarereceivedontrunkports.Becauseoferrorsthathavebeenexperiencedonofficecomputers,allnontrunkinginterfacesshouldtransitionimmediaytotheforwardingstateofSpanningtree.Also,configuretheuserports(allFastEthernetports)sothattheportsarepermanentlyYouwillconfigureFastEthernetports0/12through0/24foruserswhobelongtoVLAN20.Also,allVLANandVTPconfigurationsaretobecompletedinglobalconfigurationmodeasVLANdatabasemodeisbeingdeprecatedbyCisco.Youarerequiredto plishthefollowingtasks:EnsuretheswitchdoesnotparticipateinVTPbutforwardsVTPadvertisementsreceivedontrunkports.Ensureallnon-trunkinginterfaces(Fa0/1toFa0/24)transitionimmediaytotheforwardingstateofSpanning-Tree.EnsureallFastEthernetinterfacesareinrmanentnon-trunkingPlaceFastEthernetinterfaces0/12through0/24inVLANSwitch(config)#interfacerangefa0/1–24Switch(config-if-range)#spanning-treeportfastNext,weneedtoassignFastEthernetports0/12through0/24toVLANBydefault,allportsontheswitchareinVLAN1.TochangetheVLANassociatedwithaport,youneedtogotoeachinterface(orarangeofinterfaces)andlitwhichVLANtobeapartof.Switch(config-if-range)#interfacerangefa0/12–24Switch(config-if-range)#switchportaccessvlan20Switch(config)#vtpmodetransparentSwitch#copyrunning-configstartup-LACPwithYouworkfor .Theyhavejustaddedanewswitch(SwitchB)totheexistingnetworkasshowninthetopologydiagram.RouterAiscurrentlyconfiguredcorrectlyandisprovidingtheroutingfunctionfordevicesonSwitchAandSwitchB.SwitchAiscurrentlyconfiguredcorrectly,butwillneedtobemodifiedtosupporttheadditionofSwitchB.SwitchBhasaminimalconfiguration.YouhavebeentaskedwithcompetingtheneededconfiguringofSwitchAandSwitchB.SwitchAandSwitchBuseCiscoastheenablepassword.TheVTPandSTPconfigurationmodesonSwitchAshouldnotbeSwitchAneedstobetherootswitchforvlans11,12,13,21,22and23.Allothervlansshouldbeleftaretheirdefaultvalues.Vlan21,Name:Marketing,willsupporttwoserversattachedtofa0/9andVlan22,Name:Sales,willsupporttwoserversattachedtofa0/13andVlan23,Name:Engineering,willsupporttwoserversattachedtofa0/15andAccessportsthatconnecttoservershouldtransitionimmediaytoforwardingstateupondetectingtheconnectionofadevice.SwitchBVTPmodeneedstobethesameasSwitchBmustoperateinthesamespanningtreemodeasNoroutingistobeconfiguredonOnlytheSVIvlan1istobeconfiguredanditistouseaddressInter-switchConnectivityConfigurationForoperationalandsecurityreasonstrunkingshouldbeunconditionalandVlans1,21,22and23shouldtaggedwhentraversingthetrunklink.ThetwotrunksbetweenSwitchAandSwitchBneedtobeconfiguredinamodethatallowsfortheumuseoftheirbandwidthforallvlans.Thismodeshouldbedonewithanon-proprietaryprotocol,withSwitchAcontrollingactivation.Propagationofunnecessarybroadcastsshouldbelimitedusingmanualpruningonthistrunklink.AnswerandSW-A(closetorouter)SW-A(config)#spanning-treevlan11-13,21-23rootprimarySW-A(config)#vlan21SW-A(config)#interfacerangeFa0/3–SW-A(config-if-range)#noswitchportmodeaccessSW-A(config-if-range)#noswitchportaccessvlan98SW-A(config-if-range)#switchporttrunkencapsulationdot1q(此交換機上不會接受SW-A(config-if-range)#switchportmodeSW-A(config-if-range)#switchporttrunkallowedvlan1,21-23SW-A(config-if-range)#channel-group1modeactiveSW-A(config-if-range)#noshutdownSW-A(config-if-——————————————————————————————SW-B(farfromSW-B(config)#vlan21SW-B(config-vlan)#nameTrunkNative//notnecessarytonameitbutjustnameitsameasSwitchASW-B(config-SW-B(config)#interfacerangeFa0/9–SW-B(config-if-range)#switchportmodeaccessSW-B(config-if-range)#spanning-treeportfastSW-B(config-if-range)#noshutdownSW-B(config-if-SW-B(config)#interfacerangeFa0/13–SW-B(config-if-range)#switchportmodeaccessSW-B(config-if-range)#spanning-treeportfastSW-B(config-if-range)#noshutdownSW-B(config-if-SW-B(config)#interfacerangeFa0/15–SW-B(config-if-range)#switchportmodeaccessSW-B(config-if-range)#spanning-treeportfastSW-B(config-if-range)#noshutdownSW-B(config-if-SW-B(config)#vtpmodeSW-B(config)#ipdefault-gateway(youcangetthisIPfromSW-Awithcommandshowcdpneighbourdetail)SW-B(config)#interfacevlanSW-B(config-if)#noshutdownSW-B(config-SW-B(config)#interfacerangeFa0/3–SW-B(config-if-range)#switchportmodetrunkSW-B(config-if-range)#switchporttrunkallowedvlan1,21-SW-B(config-if-range)#channel-group1modepassive//modepassivebecause“SwitchAcontrollingactivation”SW-B(config-if-range)#noshutdownSW-B(config-if-

HSRPQuestionDuringroutinemaintenance,itbecamenecessarytoshutdownG1/0/1onDSW1.Allotherinterfacewereup.Duringthistime,DSW1remainedtheactivedeviceforVlan102′sgroup.YouhavedeterminedthatthereisanissuewiththedecrementvalueinthetrackcommandinVlan102′sHSRPgroup.WhatneedtobedonetomakethegroupfunctionTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom5toTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom9toTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom11toTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom195tolessthanTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom200tolessthanTheDSW1′sdecrementvalueshouldbegreaterthan190andlessAnswer:ThequestionclearlystatedthattherewasanissuewiththedecrementvalueinVLAN102soweshouldcheckVLAN102onbothDSW1andDSW2switches.ClickonthePCConsole1andPCConsole2toaccesstheseswitchesthenusethe“showrunning-config”commandonbothswitchesAsshownintheoutputs,theDSW1′spriorityis200andishigherthanthatofDSW2so esactiveswitchforthegroup.NoticethattheinterfaceGig1/0/1onDSW1isbeingtrackedsowhenthisinterfacegoesdown,HSRPautomaticallyreducestherouter’sprioritybyaconfigurableamount,inthiscase5.ThereforethepriorityofDSW1goesdownfrom200to195.ButthisvalueisstillhigherthanthatofDSW2(190)soDSW1remainstheactiveswitchforthegroup.TomakeDSW2takesoverthisrole,wehavetoconfigureDSW1′sdecrementvaluewithavalueequal reaterthan11sothatitsresultissmallerthanthatofDSW2(200–11<190).ThereforeCisthecorrectanswer.QuestionDuringroutinemaintenance,G1/0/1onDSW1wasshutdown.Allotherinterfacewereup.DSW2becametheactiveHSRPdeviceforVlan101asdesired.However,afterG1/0/1onDSW1wasreactivated.DSW1didnot etheactiveHSRPdeviceasdesired.WhatneedtobedonetomakethegroupforVlan101functionEnablepreemptonDSW1′sVlan101HSRPDisablepreemptonDSW1′sVlan101HSRPDecreaseDSW1′spriorityvalueforVlan101HSRPgrouptoavaluethatislessthanpriorityvalueconfiguredonDSW2′sHSRPgroupforVlan101DecreasethedecrementinthetrackcommandforDSW1′sVlan101HSRPgrouptoavaluelessthanthevalueinthetrackcommandforDSW2′sVlan101HSRPgroup.Answer:AContinuetocheckVLAN101onbothWelearnedthatDSW1doesn’thavethe“standby1preempt”commandsoitcan’ttakeovertheactiveroleagainevenifitspriorityisthehighest.SoweneedtoenablethiscommandonVLAN101ofDSW1.QuestionDSW2hasnot etheactivedeviceforVlan103′sHSRPgroupeventhoughallinterfacesareactive.AsrelatedtoVlan103′sHSRPgroup.Whatcanbedonetomakethegroupfunctionproperly?OnDSW1,disableOnDSW1,decreasethepriorityvaluetoavaluelessthan190andgreaterthanOnDSW2,increasethepriorityvaluetoavaluegreater241andlessthanOnDSW2,increasethedecrementvalueinthetrackcommandtoavaluegreaterthan10andlessthan50.Answer:BorCThereasonDSW2has etheactiveswitchforVlan103isbecausethevalueofDSW1ishigherthanthatofDSW2.InordertomakeDSW2 etheactiveswitch,w