这组CCIE lab组合,歪果仁表示通过很easy!

2018年思科华为报班咨询请点我

Hi Guys,

Got my magic number in 2nd attempt, First attempt I got H2+ but unfortunately could not make it ( Pass+Pass+Pass= Fail).

I would like to thank you everyone in spoto group for your help and support and I would like to extend my special thanks to Mr Lambert and his whole team for continuous support.

I would like to dedicate my CCIE to Mr Lambert :J you’re the great.

In short I just follow spoto sol for H3, 100 % same like spoto the questions wording everygthing, so don’t need to worry about.

TS1 ( completed:  40 min)

Q1. Sw2---> int valn 100-----wrong IP address

Q2. R12à int s4/0----peer default was missing

R17à int s4/0---ppp ipcp route-default was missing

Q3. R22à int e2/0----wrong mask

R3à area range cmd need to remove

Q4. R13à prefix-list configured blocking 145.14.14.14 network, just make permit

Q5. R5à need to active Ipv4 neighbor with 123.4.4.4

R21à wrong prefix-list , need to add 194.1.0.0/16 le 32

Q6. R25à need to create IPv6 nei with R22

R22à need to create Route-map ( ipv6 next-hop) , advertise the network b/w R22 to R25, IPV6 acl need to permit tcp any any

Q7. R15à acl only per 0.0.0.0 so need to per 0.0.0.0/0 le 32, IP nhrp multicast was missing

R18à shortcut missing + wrong nhrp Map

R19à need to per esp any any

R20à passive-interface e1/0—( PC connected int)

Q8. R7àNeed to create nei 125.45.67.21 , nei 123.45.67.21 default –orig,

Ø Static route need to correct

Ø Int e0/0.123 , ip nat inside

R3à nei 125.45.67.22 ,

Ø Wrong vrf import/export  ( be very careful here , check the rd number and import/export)

Ø Advertise net 125.45.67.20 mask 255.255.255.252

Q9. R7à wrong Ospf network advertise

Q10. R23à wrong acl

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Diag: H3++---------------( 5min)

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

CFG- H3 ( I did whole Lab 2hrs except DMVPN (R14/51/60)

First thing I would like to say, Cfg is 100% same as spoto , I will share only the small tips and tricks.

In section 1, Sw300/301--- need to check show run | s spanning

"no spanning-tree mst simulate pvst global"

Just remove NO and your good to go.

Ø Carefully check Layer 2 diagram for Ether channel, it was very clear from the diag.

Ø Sw301à e0/2  ( trunk port ) need to shut/ unshut twice at least

Ø Sw300/301à passive-int vlan 2000/2001 need to do

Section 2::> 

Sw100/101 à int loo1 need to advertise in OSPF

è Prefix-suppression  on all the devices in DC

DC1 >>> BGP need to configure , EBGP is pre-configured on all the devices, just need to add aggregate-address and advertise loopback.

>>  Create ip prefix-list FILTER ( same spoto) on R10/11/20/21/14/15 ) , I did not apply prefix-list on R15, just created .

>> R100>> ospf 10 was pre-configured, I removed and config ospf 2 because its ospf 2 area 0 on the diagram. Also need to shutdown loo1 with IP . 10.4.42.42

>> R14 I applied , nei 10.1.13.13 route-map LOW-LP out , but there was no such output to match.

>> Multicast, I followed 100 % spoto sol , its worked both for me.

Section 3:J

Ø R3/4/5/6 , rd need to config ospf was pre-configured, ebgp need to config

Ø No bgp default ipv4-uni was pre-configured and I only made vpnv4 neighor not IPV4.

Shit thing here DMVPN:J)

Very big BUG guys dnt loss hope, do your best in this part, I spent more then 2 hrs on this part, DMVPN was working the issue is with CRYPTO , most of the things pre-configured shortcut/redist and on spokes

Crypto keyring was missing that’s it.

I did the same crypto configuration again and again more then 15 times, in the middle its come up and the went down, I restart three time ( R14/51/60), finally its works when the time was 3:53 pm , just  20 min before the  LAB time END.

Tips : Before configuring crypto keyring on Spokes , remove the pre-configured crypto key on R14, then do it. My friend was also with me same day , he also got H3 , he did like this and its worked. My friend also PASSED.

>> R24 need to configure static route

>>R71 NAT acl was pre-configured , you only need to do is , just config crypoto ACL ( make it simple just copy from R24 and edit it.) also be very careful the crypto map name/acl name are different not like spoto  sol.

Again thanks a lot, you can connect my any time, its my pleasure to HELP you guys.  I hope you all will get you Magic Number very soon. My spoto account is almost finished , any time Lambert can kick me out from the Group. My next journey will be CCIE – Security , if anyone of you join me , most weillcome.

Many thanks,

(0)

相关推荐