• If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.
Xin chào ! Nếu đây là lần đầu tiên bạn đến với diễn đàn, xin vui lòng danh ra một phút bấm vào đây để đăng kí và tham gia thảo luận cùng VnPro.

Announcement

Collapse
No announcement yet.

CCNP2 Case tudy (Cisco Acedamy 2006)

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • CCNP2 Case tudy (Cisco Acedamy 2006)

    Cac ban tham khao.
    Attached Files
    Last edited by dhphuc; 15-11-2006, 05:23 PM.

  • #2
    Day la dap an gan nhu day du. Than.

    R1
    ================
    There is 1 mistakes in this configuration.
    ================

    sh run
    Building configuration...

    Current configuration : 3090 bytes
    !
    version 12.4
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    !
    hostname R1
    !
    boot-start-marker
    boot-end-marker
    !
    !card type command needed for slot 1
    enable password cisco
    !
    aaa new-model
    !
    !
    aaa authentication login default local
    aaa authentication ppp default local
    !
    aaa session-id common
    no network-clock-participate slot 1
    no network-clock-participate wic 0
    ip cef
    !
    !
    !
    !
    !
    !
    !
    isdn switch-type primary-ni
    !
    chat-script R165k ABORT ERROR "" "AT Z" OK "ATDT \T" TIMEOUT 30 CONNECT \c
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    username R3 password 0 cisco
    username USERS password 0 cisco
    username R2 password 0 cisco
    username R1 password 0 cisco

    !
    class-map match-all CBWFQ
    match access-group 101
    !
    !
    policy-map CBWFQ-TS
    class CBWFQ
    bandwidth 16
    !
    !
    !
    crypto isakmp policy 100
    authentication pre-share
    crypto isakmp key 6 CISCO123 address 10.1.1.22
    !
    !
    crypto ipsec transform-set MYSET esp-des
    !
    crypto map MYMAP 110 ipsec-isakmp
    set peer 10.1.1.22
    set transform-set MYSET
    match address 120
    !
    !
    !
    !
    interface FastEthernet0/0
    ip address 192.168.1.1 255.255.255.0
    shutdown
    duplex auto
    speed auto
    !
    interface Serial0/0
    no ip address
    encapsulation frame-relay
    no fair-queue
    frame-relay traffic-shaping
    frame-relay lmi-type ansi


    interface Serial0/0.102 point-to-point
    ip address 10.1.1.21 255.255.255.252
    frame-relay class R2
    frame-relay interface-dlci 102
    crypto map MYMAP


    interface Serial0/0:23
    no ip address
    encapsulation ppp
    dialer pool-member 1
    dialer load-threshold 1 outbound
    dialer idle-timeout 60
    ppp authentication chap

    !!!!!!!!!!!!!!!!!!!!!!
    ! <+++> Fair queue is missing ???
    !!!!!!!!!!!!!!!!!!!!!!
    !

    interface BRI0/0
    no ip address
    encapsulation hdlc
    shutdown
    isdn switch-type basic-ni
    isdn point-to-point-setup
    !
    interface Serial0/1
    no ip address
    shutdown
    !
    interface Async65
    ip address 10.1.1.17 255.255.255.252
    encapsulation ppp
    dialer in-band
    dialer idle-timeout 300
    dialer wait-for-carrier-time 60
    dialer map ip 10.1.1.8 name R3 class dialback modem-script R156k broadcast 5556001
    dialer hold-queue 50
    dialer callback-secure
    dialer-group 1
    async mode dedicated
    ppp callback accept
    ppp authentication chap
    ppp authentication chap callin


    !
    interface Dialer0
    ip address 10.1.1.1 255.255.255.248
    encapsulation ppp
    dialer pool 1
    dialer remote-name R2
    dialer string 5551000
    dialer watch-disable 15
    dialer watch-group 2
    dialer-group 2
    ppp authentication chap
    !
    router eigrp 100
    network 10.1.1.20 0.0.0.3
    network 10.0.0.0
    network 192.168.1.0
    auto-summary
    !
    ip route 192.168.3.0 255.255.255.0 10.1.1.18

    !!!!!!!!!!!!!!!!!!!!!!
    ! ip default-network missing ???
    !!!!!!!!!!!!!!!!!!!!!!

    !
    !
    ip http server
    no ip http secure-server
    !
    !
    map-class dialer dialback
    dialer callback-server username
    !
    map-class frame-relay R2
    frame-relay cir 16000
    frame-relay bc 64000
    frame-relay be 64000
    frame-relay adaptive-shaping becn
    access-list 101 permit tcp any any eq telnet
    access-list 102 deny eigrp any any
    access-list 102 permit ip any any
    access-list 120 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
    dialer watch-list 2 ip 10.1.1.20 255.255.255.252
    dialer-list 1 protocol ip permit
    dialer-list 2 protocol ip list 102
    !
    !
    !
    control-plane
    !
    !
    controller t1 1/0
    framing esf
    linecode b8zs
    pri-group timeslots 1-24
    !
    !
    !
    !
    !
    !
    !
    line con 0
    line aux 0
    password cisco
    modem InOut
    modem autoconfigure discovery
    transport input all
    stopbits 1
    speed 115200
    flowcontrol hardware
    line vty 0 4
    password cisco
    !
    !
    end

    R1#

    Comment


    • #3
      R2:
      ===========================
      There are two mistakes in this configuration.
      ===========================


      sh run
      Building configuration...

      Current configuration : 2816 bytes
      !
      version 12.4
      service timestamps debug datetime msec
      service timestamps log datetime msec
      no service password-encryption
      !
      hostname R2
      !
      boot-start-marker
      boot-end-marker
      !
      enable password cisco
      !
      aaa new-model
      !
      !
      aaa authentication login default local
      aaa authentication ppp default local
      !
      aaa session-id common
      no network-clock-participate slot 1
      no network-clock-participate wic 0
      ip cef
      !
      !
      !
      !
      !
      !
      !
      isdn switch-type basic-ni
      !
      !
      !
      !
      !
      !
      !
      !
      !
      !
      !
      !
      !
      username R1 password 0 cisco
      username USERS password 0 cisco
      !
      !
      class-map match-all CBWFQ
      match access-group 101
      !
      !
      policy-map CBWFQ-TS
      class CBWFQ
      bandwidth 16
      !
      !
      !
      crypto isakmp policy 100
      authentication pre-share
      crypto isakmp key 6 CISCO123 address 10.1.1.21
      !
      !
      crypto ipsec transform-set MYSET esp-des
      !
      crypto map MYMAP 110 ipsec-isakmp
      set peer 10.1.1.21
      set transform-set MYSET
      match address 120
      !
      !
      !
      !
      interface FastEthernet0/0
      no ip address
      shutdown
      duplex auto
      speed auto
      !
      interface Serial0/0
      no ip address
      encapsulation frame-relay
      no fair-queue
      frame-relay traffic-shaping
      frame-relay lmi-type ansi


      !
      interface Serial0/0.201 point-to-point
      ip address 10.1.1.22 255.255.255.252
      frame-relay class R1
      frame-relay interface-dlci 201
      crypto map MYMAP
      !
      interface FastEthernet0/1
      no ip address
      shutdown
      duplex auto
      speed auto
      !
      interface Serial0/1
      no ip address
      shutdown
      !
      interface BRI1/0
      no ip address
      encapsulation ppp
      dialer pool-member 1
      isdn switch-type basic-ni
      isdn point-to-point-setup
      isdn spid1 51055510000001 5551000
      isdn spid2 51055510010001 5551001
      ppp authentication chap
      !
      interface BRI1/1
      no ip address
      encapsulation hdlc
      shutdown
      isdn switch-type basic-ni
      isdn point-to-point-setup
      !
      interface BRI1/2
      no ip address
      encapsulation hdlc
      shutdown
      isdn switch-type basic-ni
      isdn point-to-point-setup
      !
      interface BRI1/3
      no ip address
      encapsulation hdlc
      shutdown
      isdn switch-type basic-ni
      isdn point-to-point-setup
      !
      interface Dialer0
      ip address 10.1.1.2 255.255.255.248
      encapsulation ppp
      dialer pool 1
      dialer remote-name R1
      dialer string 5555000
      dialer load-threshold 1 either
      dialer watch-disable 15
      dialer watch-group 2
      dialer-group 2
      ppp authentication chap
      ppp multilink
      !
      router eigrp 100
      network 10.0.0.0
      network 192.168.2.0
      auto-summary
      !
      !
      !
      ip http server
      no ip http secure-server
      !
      !
      map-class frame-relay R1
      frame-relay cir 16000
      frame-relay bc 64000
      frame-relay be 64000


      !!!!!!!!!!!!!!!!!!!!!!
      ! <+++> frame-relay adaptive-shaping becn
      ! <+++> service-policy output xxxxxx
      !!!!!!!!!!!!!!!!!!!!!!



      access-list 101 permit tcp any any eq telnet
      access-list 102 deny eigrp any any
      access-list 102 permit ip any any
      access-list 120 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
      dialer watch-list 2 ip 10.1.1.20 255.255.255.252
      dialer-list 2 protocol ip list 102
      !
      !
      !
      control-plane
      !
      !
      !
      !
      !
      !
      !
      !
      !
      !
      line con 0
      line aux 0
      line vty 0 4
      password cisco
      !
      !
      end

      R2#

      Comment


      • #4
        R3
        ================================
        There is no mistake in this configuration.
        ================================

        sh run
        Building configuration...

        Current configuration : 1443 bytes
        !
        version 12.4
        service timestamps debug datetime msec
        service timestamps log datetime msec
        no service password-encryption
        !
        hostname R3
        !
        boot-start-marker
        boot-end-marker
        !
        enable password cisco
        !
        aaa new-model
        !
        !
        aaa authentication login default local
        aaa authentication ppp default local
        !
        aaa session-id common
        no network-clock-participate slot 1
        network-clock-participate wic 0
        ip cef
        !
        !
        !
        !
        !
        !
        !
        !
        chat-script R156k ABORT ERROR "" "AT Z" OK "ATDT \T" TIMEOUT 30 CONNECT \C
        !
        !
        !
        !
        !
        !
        !
        !
        !
        !
        !
        !
        username R1 password 0 cisco
        username R2 password 0 cisco
        username R3 password 0 cisco
        username USER password 0 cisco
        !

        !
        !
        !
        !
        !
        interface FastEthernet0/0
        ip address 192.168.3.1 255.255.255.0
        no shutdown
        duplex auto
        speed auto
        !
        interface BRI0/0
        no ip address
        encapsulation hdlc
        shutdown
        !
        interface Serial0/0
        physical-layer async
        ip address 10.1.1.18 255.255.255.252
        encapsulation ppp
        dialer in-band
        dialer idle-timeout 300
        dialer wait-for-carrier-time 60
        dialer map ip 10.1.1.17 name R1 modem-script R156k 5556001
        dialer hold-queue 50
        dialer-group 1
        async mode dedicated
        ppp callback request
        ppp authentication chap
        !
        interface Serial0/1
        no ip address
        shutdown
        !
        ip route 0.0.0.0 0.0.0.0 10.1.1.17
        !
        !
        ip http server
        no ip http secure-server
        !
        dialer-list 1 protocol ip permit
        !
        !
        control-plane
        !
        !
        !
        !
        !
        !
        !
        !
        !
        !
        line con 0
        line 1
        modem InOut
        transport input all
        stopbits 1
        speed 115200
        flowcontrol hardware
        line aux 0

        ??? no password ???


        line vty 0 4
        password cisco

        !
        end

        R3#

        Comment

        Working...
        X