CCIE Routing and Switching V5.0 Lab Dumps & Training

Pass FeedbacksView More >

CCNA Other Written
Sep 23, 2020
CCNA Other Written
Other Other Written
Sep 22, 2020
Other Other Written
CISA/CISM Other Written
Sep 22, 2020
CISA/CISM Other Written
Other Other Written
Sep 22, 2020
Other Other Written
CISA/CISM Other Written
Sep 22, 2020
CISA/CISM Other Written
Other Other Written
Sep 22, 2020
Other Other Written
CCNP Data Center Written
Sep 22, 2020
CCNP Data Center Written
Other Other Written
Sep 22, 2020
Other Other Written
CCNP Enterprise Written
Sep 22, 2020
CCNP Enterprise Written
AWS Other Written
Sep 22, 2020
AWS Other Written

CCIE RS Lab Exam Information:
  CFG :H1&H1+ CFG、H2&H2+ CFG、H3 CFG
  DIAG:DIAG 1~DIAG 8(8 sets)
Special Dicount
Get special offers
Latest Solutions and feedback
Workbook & Solution & Feedbak

Product Advantages

  • Update Timely
  • Lab Mock Exam
  • 100% Cover Real Exam
  • Latest Lab Exam Feedbacks
  • 7/24 Online Technical Support
  • 100% Pass
  • Tutorial Video Guide
  • Average 64 Days Pass Period
  • 3 CCIE LAB Pass Everyday
  • 16 Years of IT training Experience
TS1 Topology
Q1:Layer 2(2 point)

PC101 should successfully access Server 1 behind SW1.

PC101 cannot access R7/R8, fix the problem so that PC101 can ping R7.



  vlan 12

interface e1/0

  switch access vlan 100

router ospf 65100

  no passive-interface vlan12

Q2:PPP(2 point)

R17 should have one default route which points to R12 via PPP as shown below.



interface s4/0

  ppp ipcp route default

interface s4/0

  no ppp authentication chap callout


router bgp 14567

  network mask

Q3:OSPF(2 point)

When R1 tries to access the network, which is between R21 and R22, the traffic should be load balanced as shown in the exhibit.



router ospf 12345

  no max-metric router-lsa


interface Ethernet2/0

  no ip ospf cost 1

Q4:EIGRP(2 point)

Traffic from R11 destined to loopback 0 of R14 should be load balanced via EIGRP as shown in the exibit



interface Ethernet1/0

  no bandwidth 1000


interface Ethernet1/0

  no delay 1000


When R12 traces the following routes

it should get the same result as shown in the following exibit



ip prefix-list 194 permit

router bgp 12345

  no neighbor route-map MED out

  neighbor route-map MED in

R21#clear ip bgp * soft


router bgp 14567

  maximum-paths 2


route-map MED permit 10

  match ip address prefix-list 194

  set metric 100

R6#clear ip bgp * soft

Q6:IPv6(2 point)

Phone is not able to ping 2001:BEEF:CAFE::26/64 located on Server4, fix the problem so that the following is successful



route-map NEXT-HOP permit 10

  no set ipv6 next-hop 2001:2::2

  set ipv6 next-hop 2001:CC1E:BEEF:2225::17

R22#clear ip bgp * soft


route-map NEXT-HOP permit 10

  no set ipv6 next-hop 2001:3::3

  set ipv6 next-hop 2001:CC1E:BEEF:2225::18

R25#clear ip bgp * soft

Q7:DMVPN(4 point)

DMVPN is configured on R15,17,18 and 19. R15 is hub and rest of devices are spokes. fix the problem so that server 2 can access PC 107 as shown below



router eigrp 200

  no redistribute connected metric 1 1 1 1 1

interface tunnel 0

  ip nhrp redirect


interface tunnel 0

  ip nhrp shortcut

  no ip nhrp map

  ip nhrp map


interface tunnel 0

  ip nhrp map multicast


Interface tunnel 0

  no ip split-horizon eigrp 200

Q8:MPLS VPN(4 point)

R7 and R8 are configured as backbone for VPN network. R9, R10, PC 104 and PC 106 are VPN clients. ensure that the output matches the following exibit.



router bgp 65100

  neighbor default-originate


router bgp 65100

  neighbor default-originate


ip vrf BancoBank_ToHub

  route-target import 65100:101

  route-target import 65100:102


router ospf 65101

  default-information originate


router ospf 65102

  default-information originate


no ip nat source list 100 interface Ethernet0/0.125 overload

ip nat inside source list 100 interface Ethernet0/0.125 overload


router bg 12345

  address-family ipv4

   network mask

Q9:DMVPN NAT(2 point)

There is DMVPN configured between R7 (Hub) and R24 (Spoke) via Nat Network (R23).

ensure that PC 110 can access Server 1 as shown



crypto ipsec nat-transparency udp-encapsulation


crypto isakmp policy 10

  group 14

router ospf 65100

  network area 3

Q10:NAT(2 point)

R21 should manage NAS via telnet. Fix the problem so that telnet to NAS is successful as shown in exibit.


no ip nat source static tcp 23 interface Serial4/0 2323

ip nat inside source static tcp 23 interface Serial4/0 2323

no ip nat source static tcp 80 8008 extendable

ip nat inside source static tcp 80 8008 extendable


interface Ethernet0/0

  mac-address aabb.cc00.0000


  no shutdown


Customer just setup a IPv6 Network, with HSRPv6 on R1 & R2.

After setting up, all hosts lose connection.

What would you recommend to your L1 Engineer as a Quick Fix?

CE1 key configuration

  • standby 1 priority 200
  • standby 1 preempt
  • ipv6 nd router-preference low

CE2 key configuration

  • standby 1 preempt
  • ipv6 nd router-preference high

CE1 HSRP priority is 200, Active

CE2 HSRP priority is 100, Standby

host had the default route FE80::666.

Customer just setup a lPv6 Network, with HSRPv6 onR1 & R2.

After setting up, all hosts lose connection.

Q1:What would you recommend to your L1 Engineer as a Quick Fix?

Q2:What is the root cause of the problem caused by the current? Which Device

Q3:Choose the first frame id that demonstrate your doubt


Site 1 (Hub/Server), Site 2 (Spoke), Site 3 (Spoke), Site 4 (Spoke)

Q1:What is the issue

Q2:You will ask what to your engineer?

Q3:How to deal with current issues temporary?

Section 1 Layer 2 TechnologiesDownload Now

Section 1.1: LAN Access

The following requirements were pre-configured.

  • VTP is turned off in all switches.
  • All required VLAN, including access-ports configuration in all relevant switches are provisioned.
  • All required SVI interfaces in all relevant switches (including IP address and subnet mask) are provisioned.

Configure the network in all sites as per the following requirements:

  • Access-ports must immediately transition to the forwarding state upon link up, as long as they do not receive a BPDU. Use the minimal number of commands per switch to enable this feature.
  • If an access-port receives a BPDU, it must automatically shutdown. Use the minimal number of commands per switch to enable this feature.
  • Ports that were shutdown must attempt to automatically recover after 10 minutes.
  • None of the switches may generate a TC when any of access ports goes down.

Section 1.2: LAN Distribution

  • Configure the headquarters’ network, as well as the large and medium office networks as per the following requirements:
  • All trunks must always use dot1Q encapsulation.
  • Negotiation of trunking protocol must be disabled in all switches.
  • Distribution switches (SW300, SW301, SW400, SW401, SW500, SW501) must initiate etherchannel negotiation using LACP.
  • Access switches (SW310, SW410, SW510) must never initiate etherchannel negotiation.
  • Configure layer 2 etherchannels’ number as shown in the “Diagram 1: Main topology” and “Diagram 5: Layer 2 Connections” (that is, use only Po1 and/or Po2).
  • Ensure that all ports included in etherchannels are effectively in use and bundled in the expected channel.
  • Access switches must see similar output as shown below:

Section 1.3: LAN Resiliency: Spanning-Tree


Section 1.4: WAN Switching Technologies


Section 2 Layer 3 TechnologiesDownload Now

Section 2.1: OSPF in HQ

Configure the headquarters network (BGP AS#65003) as per the following requirements:

  • Both gateway routers of the headquarters network must always advertise a default route into the OSPF domain.
  • All four devices produce the exact same output as shown below. Everything must match, except the “Dead Time” counters and line order.

Section 2.2: OSPF in DC#1


Section 2.3: B2B Connection with Partner#1


Section 2.11: Multicast in HQ


Section 3 VPN TechnologyDownload Now

Section 3.1: MPLS VPN

Section 3.2: DMVPN

Complete the DMVPN phase 3 configuration in the network as per the following requirements:

  • R14 must be configured as the DMVPN hub router.
  • R51 and R60 must be the DMVPN spoke routers.
  • NHRP must be allowed to properly populate routing tables on spoke routers, on an on-demand basis.
  • Both spoke routers must receive a default route from the ISP#1 via BGP and must install it into their VRF INTERNET.
  • Protect the tunneled traffic by attaching the preconfigured IPsec profile to the tunnel interface on all tunnel end-points.
  • Use the preconfigured interface Tunnel 0 on all three routers in order to accomplish this task.
  • BGP must be used to exchange routing information between hub and spokes:
    • The hub must be configured in a way that does not require any additional configuration if new spokes in the same subnet were added to the network.
    • All BGP peerings between the hub and any spoke must be established between AS 65001 and AS 65100.
    • Both spokes must receive the aggregate prefixes (10.x.0.0/16) for all corporate sites from R14.
    • Both spokes must not receive any other prefixes in from R14.
  • Do not remove any existing configuration on R14, R51 and R60.
  • At the end of the exam, ensure that the following sequence of commands produces the same output:

Section 3.3: Internet Access


Section 3.4 LAN to LAN IPsec


Section 4 Infrastructure SecurityDownload Now

Section 4.1: Device Security

The network architect decided to secure the datacenter #1 VLAN 2001 against unwanted or rogue Router Advertisement (RA) messages in order to ensure that SW111 is always selected as the default router by any host that is located in VLAN 2001.

Configure the datacenter #1 network as per the following requirements:

  • SW111 must analyze all RAs received on any ports of VLAN 2001 (including Eth0/0, Eth0/1, Eth0/2, Eth0/3) and it must filter out RAs that are sent by unauthorized devices.
  • SW111 must sent its own RA with the Default Router Preference(DRP)bits set to “high”.
  • You are not allowed RA with more than 2 Hop.



 interface vlan2001

  ipv6 nd router-preference high

 ipv6 nd raguard policy Vlan2001

 hop-limit maximum 2

 interface range Ethernet 0/0-3

  ipv6 nd raguard

  ipv6 nd raguard attach-policy Vlan2001

Section 4.2: Network Security

The network architect requires the link with partner #1 (connected to R42 in the large office) to be secured against spoofing attacks.

Configure the large office network as per the following requirements:

  • R42 must drop traffic received from the partner if the source IP address is not reachable via its interface e1/0.
  • No additional configuration must be required if any new prefix is received from the partner #1.
  • Do not configure any access-list in order to achieve the previous requirements.



ip cef

interface e1/0

 ip verify unicast source reachable-via rx allow-default

Section 5 Infrastructure ServicesDownload Now

Section 5.1: System Management

SW200 is experiencing high CPU when a Network Management System (“NMS”, located in the datacenter #1) polls its dot1dBridge MIB.

Configure SW200 as per the following requirements:

  • Exclude the dot1dBridge MIB from the available MIBS all other MIB supported by SW200 must still be available to the NMS.
  • Only hosts residing in the network are allowed to poll SW200 using the read-only community string ‘ccie’ (without quotes!)
  • SW200 must ignore SNMP v1 requests for that community and must respond to SNMP v2c requests.

Section 5.2: Quality of Service


Section 5.3: Network Services


Section 5.4: Network Services


CCIE Routing and Switching V5.0 Lab Dumps

You can complete CCIE R&S Lab online training within 12 weeks if you practice lab materials 3 hours per day. Tutors and services will assist you along the whole preparation. Every module we do provide workbooks, solutions, and videos tutorial. You can watch videos first, and practice materials.
Phase 1: Two weeks to practice H2 CFG
Phase 2: Two weeks to practice TS1
Phase 3: Two weeks to practice CFG H1, H1
Phase 4: Five days to practice all incidents of TS2
Phase 5: Two days to practice DIAG
Phase 6: One week to practice CFG H2+
Phase 7: You can access to H3 CFG+, TS2 new faults after you compete phase1 to phase6
Phase 8: Two weeks to review
Phase9: We will provide a DIAG VCE test 10 days before your Lab exam

How soon can I receive the CCIE R&S Lab v5.0 materials?
The followings will be sent to your email no later than 8 hours after verification of your payment.
-Software and setup instructions
-SPOTO CCIE R&S Lab Exam v5.0 Learning Materials, including Workbooks, Solutions, and Instruction Video. (except H3 CFG, TS2 BT1 workbook and solutions)
-CCIE R&S Lab Exam v5.0 Study Plan
When can I access R&S H3 server to practice H3 CFG and TS2 BT1?
1、If this is your first attempt on the lab exam, we highly recommend that you read the CCIE R&S Lab v5.0 study plan. Complete other CFG and TS on your laptop first.
2、If you already attempted before, we suggest you try to pass our virtual exam (contact our tutor for access) before scheduling your CCIE R&S LAB Exam date and start practicing H3 CFG.
How many remote lab hours are included for H3 CFG and TS2 BT1?

Up to 200 hours within your service period. You can purchase additional hours at USD$ 200 per 40 hours within your service period. Please contact our tutor for server hour suspension.

When can I access DIAG server?

10 days before your exam during your service period. Please contact our tutor to authorize your access. But You will need provide schedule screenshot (OLSM website screenshot) or payment invoice.

What kind of PC do I need to prepare the CCIE R&S Lab exam v5.0?

Minimum PC Specification for CCIE LAB practice
CPU: More Than the 2.5GHZ
RAM: 12 GB
Hard Drive: 100GB
Network: internet access
Software: Windows 7 or later (except Server OS) and Mac OS

What happens if the exam becomes unstable?

We make sure you will receive updated information and materials of CCIE R&S Lab exam as soon as we learned any changes to the exam. In case we learned any major changes happened during your service period, your remaining service period will be calculated from the date we learned the exam becomes stable again.


We only provide our materials to one of your hardware devices. This is done by the software (Locklizard and EV Player) we provide you to read our proprietary materials. If the tech spec (such as memory capacity) of your device changes, you may not be able to open the files we sent you. Before your setup, make sure your device meets our minimum spec.

CCIE Routing and Switching Lab Training Videos

Matched mac address on SW and PC.
R17: ppp ipcp route default is missing
Wrong mask length on R22.
R3 has deny ospf acl
R13 had deny prefix . i had to remove that line
R5: had many missing neighbors. I had configured them all
R21: modified to negh x route-map x in
R25:didnot have neighbor activated under ipv6, activated it
R19 tunnel has missing config. added them to match with R15
R7,R8- Missing neighbors configuration
R3: one interface was not part of VRF. Configured the interface accordingly
R4/R6: ip ospf cost 1000 on int e2/0
Tunnel 10 had ospf broadcast.
R21 had ACL and i had to put permit ip any any
R24 e2/0 had IP of NAS as secondary IP. Removed secondary IP.

H2- Same as spoto but each questions had more options than what we had on RDP.

SEC1: Same as spoto but i had to bounce por-channels on SW300,301,310 after i configured MST. PO were not in a consistant state

2.1 Same as spoto
2.2 Same as spoto
2.3 Same as spoto
2.4 Same as spoto
2.5 Same as spoto
2.6 Same as spoto
2.7 Same as spoto
2.8 Same as spoto
2.9- Same as spoto- ipv6 unicast routing is not enable on SW111
2.10 &2.11 - Mutlicasting is same as spoto but ip multicast-routing is not enabled on all devices. It took some time to see things stable.

3.1 . SAME as spoto. Only OSPF is preconfigured. had to configure RD, MPLS, BGP
3.2 Same as spoto. Crypto was not configured properly on R51 & R60. Matched it with R14.
3.3 same as spoto
3.4 Same as spoto

4.1 Same as spoto
4.2 Same as spoto
SEC5: All same as Spoto . I didnot configure EEM script


1) vlan 12 SVI access-list edited the access-list to allow prefix
2) wrong encap, config on R17
3) Duplicate router-id
4) passive interface
5) next hop applied on R5
6) its ipv6 over ipv6 - activate on R25 not applied under add fam, ipv6 access-list blocking tcp
7) Tricky DMVPN - the image of problem area not include R14, R14 has access-list
- make tunnel phase 3
8) Tested both paths backup and main, default originate, ospf not advertise on SW, ip nat in missing from backup, increase cost on non mpls interfaces
9) access-list on R21
10) ip dhcp client-id int eth0/0 missing.

DIAG - Usinging syslog, config- multicast and HSRPv6

Same - BGP in DC not comeup i get weird error on TCP-AUTH. I remove config and config again
- Switchports on diagrams in exam, make all access
- DMVPN the pre-share key no cypto-keyring config, i configure
- nat access-list on the preconfig for lan to lan ipsec wrong--use same list name, edit the nat rules
- use diagrams to proof check requirements.
-cannot right click to paste config..i use shift+insert...waste time to right click and click again space.



Ticket 1:
- SW2: Port security - wrong MAC address

Ticket 2:
- R17: "ppp ipcp route default" was missing

Ticket 3:
- R22: E2/0 wrong subnet mask

Ticket 4:
- R13: prefix-list blocking

Ticket 5:
- R22: "next-hop-self" missing

Ticket 6:
- R25: E0/0 subnet not advertised
- It stared to work after clearing BGP

Ticket 7:
- R15: "ip nhrp redirect" missing
- R15: incorret host entry "user1spoke2"
- R19: "ip nhrp shortcut" missing
- R19: wrong nhrp authentication

Ticket 8:
- R7: neighbor not configured
- R7: neighbor not configured
- R8: interface E0/0.125 missing "ip nat inside"
- R6: BGP neighbor not activated under vpnv4 address-family

Ticket 9:
- Crypto config mismatch between R7 and R24. I copied everything from R7 and past it to R24.

Ticket 10: - R24: E0/0 Secondary IP address duplicated with NAS IP address.

- HSRPv6 + Multicast: The same as Spoto including packet sequence number in packet capture.

Overal it was very similar to Spoto. Only minor differences. A lot of configuration has been pre-configured.

1.1 - Same as Spoto
1.2 - Same as Spoto
1.3 - SW300 and SW301 had "no spanning-tree mst simulate pvst" configured
1.4 - Same as Spoto

2.1 - Same as Spoto
2.2 - OSPF already pre-configured. Only Lo1 on SW100 and Sw101 missing. There was strange interface Lo2001 with IP address 10.255.X.X on either SW110 or SW111. I do not remember anymore which switch it was. I advertised it to OSPF anyway, but I guess it is not necessary.
Passive interface was not configured in SW110/SW110.
2.3 - Same as Spoto. Only difference. The OSPF process ID was 2 and not 10. Also, there is no access R100. They explicitly asked: Confirm desired output from OSPF database on R42.
2.4 - Same as Spoto
2.5 - Same as Spoto
2.6 - Same as Spoto
2.7 - Same as Spoto
2.8 - Same as Spoto
2.9 - Same as Spoto, only IPv6 was not enabled in SW111
2.10 - Same as Spoto
2.11 - Same as Spoto

3.1 - Loopback IPs are different. For example while Spoto has RD and RT import/export has to be configured. Rest is the same.
3.2 - Partially preconfigured. crypto keyring missing on R60 and R51.
3.3 - Same as Spoto
3.4 - Same as Spoto. I copied ipsec related configuration from R24 and modified it for R71. NAT was already pre-configured.

4.1 - Same as Spoto. Requirement to have maximum hop limit 2
4.2 - Same as Spoto

5.1 - Same as Spoto. I configured EEM as well.
5.2 - Same as Spoto
5.3 - Same as Spoto
5.4 - Same as Spoto

CCIE Lab Pass Results


Customers passed CCIE Lab exam


First-attempt pass rate


SPOTO Lab materials Cover real exam

Product Reviews * The most recent comment are at the top

Garland D. Oberlin 2020-04-26

Days are getting hard in this very special period, Many Companies have fallen down in coronavirus days. So i decide to pass the CCIE, hope i can get upgraded as the company demands. Cisco will update the ccie lab, in the meantime, SPOTO offer me a special price for ccie lab exam training, i would be very preciated especially in the rough days. And keep it up guys, hope all you can pass your own exam, get raised up.

May 2020-01-18

these CCIE RS LAB dumps are still valid and today i got 100% marks, thanks guys for this great help.

Ann 2020-01-17

Thanks god and thank you all. 100% valid. 90% ccie rs lab questions are included in this dump.

Yvonne 2020-01-16

Thanks for my friend's introduction, I passed the CCIE RS LAB exam by using this study material luckily. Good lucky to you!

Mercedes 2020-01-15

SPOTO CCIE R&S LAB Dump is valid, I think it is enough to pass the exam. I am an engineer and have not much time to prepare my ccie r&s lab exam. And I was worried about it. One day I found this material and studied it in my spare time. After a week, I found it is useful and I have learned many new knowledge. So I think it is useful especially for the people who have not many time to prepare their exam.Recommend strongly.

May 2020-01-14

Quickly Get My CCIE RS LAB material. I passed my exam earlier this morning.You know what? I just use study materials from this site, no other books at all! It is really helpful if you do not get much time to prepare your exam. You should have a try. It will not let you down. Why do you want to take roundabout ways if there is a shortcut? Trust me or not. Good luck to you all.

Ellie 2020-01-13

Passed today...100% careful all the answers are not in order...Best of luck to others..

Kitty 2020-01-12

Nice and valid CCIE R&S LAB test questions. it helped me understand CCIE LAB topics and pass my CCIE routing and switching Lab exam 2 months ago.

Juliana 2020-01-11

Just passed CCIE LAB Exam a few hours ago. This sim is valid. Had probably 90% of the questions on here. Thanks

Gwendolyn 2020-01-10

brilliant CCIE RS LAB exam dumps. found them at the right time. i am so excited that i aced my exam after using them. great SPOTO!

  • CCNA Other Written
    CCNA Other Written
    09.23, 2020
  • Other Other Written
    Other Other Written
    09.22, 2020
  • Other Other Written
    Other Other Written
    09.22, 2020
  • CCNP Data Center Written
    CCNP Data Center Written
    09.22, 2020
  • AWS Other Written
    AWS Other Written
    09.22, 2020