Cisco Dumps Feedbacks

CCIE Written And Lab Feedbacks

TS2 DIAG H3++ CFG H1+

Q1
No 10
No 30
Ospf: no passive interface
Dhcp: change to infinite because lease is short

Q2
SW 111: ospf cost is 100
It deleted

Q3

This problem did not go well.
TE will succeed by changing origin.
However, the displayed AS-path was not displayed
My result was that the AS number of the third hop was 19999.
But the question was AS number 65002.

Q4
the content of BGP was that it did not touch.
I changed the route by setting the OSPF cost of R20 Lo 0  is 0 to   100.

Q5
R60 subnet is different. / 32 / 24

Q6
VLAN 111 was not advertised to OSPFv 3 by SW 111.

Q7
The process ID of OSPF was different for R1 Lo 0.
In R 10 ospf  external was 19.
It changed to 201.

 There were things
I was wasted in in ignoring.
There was a router with mpls ldp router-id lo 0 and mpls label  protocol ldp set in R1 - R6, and a router not configured.

The route-target imports its own export
I was worried about  changing.
However, it was described as separete 2 faults in the problem
sentence, and traceroute was the result that was requested and I
ignored it.

Q8
SW 300/301: vlan 2000 & 2001 ip dhcp relay information trust
SW 310: ip arp inspection
Dhcp: change to infinite because lease is short

Q9
Ospf network type is change

Q 10
Nat pool was set up.
I set up the ip nat outside source static 201.99.70.2 . . .  
Command on R24 and R25 and it was able to telnet.

DIAG H3++ same   as spoto solutions

CFG H1+ same


TS1 DIAG H2++ CFG H1+

TS1
1 - ACL on SW1

2- ppp and chap config on R17

3- R22 interface was not in OSPF,
some problem on R5

4- very simple, just R12 with a shut interface

5- always takes me forever.
I changed many things.
R22 had bad RID for Ospf,
R3 had no ospf Nei towards R21

6- Simple fix to next hop

7- R18 had ACL on serial interface and was missing some nhrp commands. All routers needed shortcut, R15 needed redirect

8- Fixed LDP between R1/2,
bad nat on R8, added cost for interface E2/0 on R4/6,
fixed dhcp problem on R104

9- R21 had ACL that needed fixing,
R24 had bad encryption for tunnel,
R23 had bad NAT

10- fixed dhcp config on NAS
Diag  H2++ - same as spoto

CFG H1+ - looked like spoto .
I couldn't solve ssh  R20, did everything as per solution but ssh  was denied

Couldn't remember encryption commands for DMVPN tunnel on VRF Trace  
routes worked beautifully Really ran out of time but happy I made it


TS2 DiagH2+ CFG H3

Date: 15th May
Location: Beijing
Passed

Thank you Tutor Lambert and all partners who han been working hardly these months, focus in study and you will get your rewards in the righ time.

TS2:
---
Uptades has been uptaded in the RDP. My advise is practice and undertand the topology so if questions change you can resolve by yourself.

Diag H2
---
Diag: H2+ Same with WB
filter key word: icmpv6.type == 134
and first frame id is 227 (FE80::666)
I remember the static route command:
R2(config)#ip mroute 10.4.1.1 255.255.255.255 10.0.0.14

Multicast:
1)What is the issue
R3 has no route to RP

2)You will ask what to your engineer ?
why is 10.4.1.0/24 not in R3's RIB.

3)how to deal with current issues temporary ?
R3 (config) ip route 10.4.1.1 255.255.255.255 10.0.0.17

H2+
---> follow workbook to finish it

CFG H3

Recommend:
dont configure ip help-address 10.2.0.5/10.255.1.15 and ip dhcp relay infor trusted on SW3/SW4 first.

5.2,5.3,5.4
Same wb

Advise when you are preparing
-Undertand very well the topology and protocols used in each TS or CFG
-Practice verifications commands (for preconfiguration)
-Read and undertand the requirements.
-follow workbook solution in its way or your way to practice.

Good luck for all you.


TS2 Diag2 H3

Date: 10th May
Location: Beijing
Passed

Configuration H3:
-ON HQ and DC1 I add ip multicast routing over all devices, whitout it, the multicast dont work.
-On The DC1 check the routers IDs for OSPF. Add bgp routers IDs in any Devices.
-The ospf proceess between R42 and R100 is 2 not 10.

Diag2 the same with Yang's feedback

TS2
Q1 SW400/SW401 add vlan access-map ATTACK 20 action forward,R40 rent time 2hours.
Q2. Same
Q3.same
Q4 route-map add to BGP out
Q5 same
Q6 same
Q7 R12,R2,R3,R5 ldp lost( it has mpls ip, but wrong one),R1 loopback0 add to OSFP,R5 RT export wrong
Q8 SW300/SW301 的vlan2000/vlan2001 all without ip dhcp reley information trust,SW310 without ip dhcp snooping imfomation op
Q9 same
Q10 R24/R25 ,NAT without outside,delete and add outside

Advice: plz read Yang's feedback on lab,it really helpful to me and two guys we took exam the same


TS1 DiagH2++ H3

Date: 8th May
Location: Dubai
Passed

TS1.
Q1. LAYER 2
The PC101 dont get IP.
-Mac Security configuration has the mac incorrect on SW2 port. Solution, delete bad mac and add correct mac in the Sw2 port security configuration to pc101.
-The configuration on e0/0 on PC101 was ip address dhcp client-id Ethernet0/0 hostname PC101. Solution: Scope R8 to PC101 add the host option.
Q2 Q3 Q4 Q5 Q6 Q7…. R3 R4 R5 R6…..

I change the route target export on R5 and R6 by 65100:5 and 65100:6 and also I change the Route target imports over R3 and R4.

Diag

Diag 2++
Same as spoto.

Config H3.
Same as spoto. I follow spoto solution.
-ON HQ and DC1 I add ip multicast routing over all devices, whitout it, the multicast dont work.
-On The DC1 check the routers IDs for OSPF. Add bgp routers IDs in any Devices.
-The ospf proceess between R42 and R100 is 2 not 10.

If anyone want the further I wrote u can ask for SPOTO


TS2 H3 H2+

LAB Combo
Location: Hongkong
Passed

Troubleshooting : TS2 (new updates)
Diagnostics : H3
Configuration : H2+
Troublshooting - TS2
Recommendations: Strategize your troubleshooting techniques
==================
Diagnostics - H3
================

No suprises here. Same as SPOTO.

In the 1st part, seq number was 133 for DHCP discovery packet with source 0.0.0.0. Use 'bootp' here.
In the 2nd part, Server was 10.1.1.1 and Attacker was 10.1.1.2. Use tcp.port==1337 here.

===================
Configuration - H2+
===================

Almost same as SPOTO.

Recommendation: Understand the topology and traffic flow very well


TS1 DiagH3 CFG H2+

Date: 20th April
Location: Hongkong
Passed
============
Troubleshooting : TS1
Diagnostics : H3
Configuration : H2+

====================
Troublshooting - TS1
====================

I did all the SPOTO TS Labs and get completely familiar with the scenario, I finished the TS in 90 Min.

================
Diagnostics - H3
================
Same as Spoto's workbook.

====================================
Configuration - H2+
====================================
General speaking a lot compatible with SPOTO work book, only 4.1 about QOS, it was saying "do not use access list". I left it un-answered.

Basic config (time consuming) were already done, e.g. putting the branch routers in the VRF and re-enter the IP address. it was good as you can focus on main items.

Important note: although basic configs where there, some of the IP addresses where not configured properly, I was troubleshooting the BGP connection and finally realized that the IP address is not based on the diagram. So, verify the IPs and basic config. one router-id not configured correctly and one BGP network command, was used for a loopback interface with the wrong IP, needed to correct the network in BGP.

Try to have some kind of guideline for yourself, I explain more, I had in my mind that I have to put 6 of "ip nhrp" command in tunnel, then I put the rest of commands in front of each (e.g ip nhrp nhs 1.2.3.4). during the exam , there is a lot of stress, I didn't want to forget one command and waste my time for troubleshooting, so for configuration of the DMVPN, I knew that I need 6 "ip nhrp" and 4 "tunnel " commands. Similar concept for iBGP or MPLS.

My last recommendation, keep the last half an hour, I did one more review for the whole requirements and realized some small items were missed, fixed them and verified again.

Good luck all in your hard way and God bless you and your family
(CCIE path gives you and your family a hard time)


TS2 DIAG3 H2

Q1
SW acl no seq 10 and 30
Q2
SW111 int et 1/2  no ip ospf cost  9
Q3
R23 loo0    no ip ospf  10 a 0 change to ip ospf 1 a 0。R22 change origin to igp
Q4
R21 route-map do not use , use it under bgp  
Q5
Change R60 tunnel0 mask 255.255.255.0
Q6
R15 bgp do not network ipv6 segment ,SW111 vlan2001 do not network ipv6 segment
Q7
R10 ospf :change AD ,R5 vrf RT config wrong 。

Q8
Do not solve it .

Q9
Ospf neighbor do not come up,R24tunnel OSPF  network is  PTM,R71 tunnel OSPF network is PTP,change R71 network to PTM

Q10
R25 acl do not config outside,copy R24 ip nat outside configuration .

 

H2 CFG
R101
   int et0/0  add ip add dhcp cli e 0/0
R51 had config vrf,do not change RD ,change RT.
R11 R12 R13 R14 R15 R16 ospf had config ,bgp had config,


TS1 H3+DIAG H1+CFG

TS1
Q1:SW2 E1/0 MAC address wrong,
shutdown interface first ,
delete the command ,
config correct mac address
no shutdown
Q2:R17 add ppp ipcp route default, clear ip route *
Q3:R2E E2/0 mask is wrong
Q4:R14 distribute list had deny  145.14.14.14, no the seq of access-list
Q5:R21,ip prefix add 194 segment,R22:BGP add ip next-hop-self
Q6:R25,network mask is wrong
Q7:copy  key configuration of R18 interface tunnel 0  to R19,
     R20  no passive E1/0
Q8:R7 R8  nat, add ip nat inside   R4 R6 E2/0  add ip ospf cost 1000
Q9:compare IPSec VPN configuration of R24 and  R7
Q10:R24 E0/0 config secondary address,delete it ,NAS  E0/0, shutdown no shutdown


TS1 H2 Diag H2 CFG

TS1

Q1, did not finish

Q2. r17 missing ppp ipcp route def

Q3. wrong subnet on R21

Q4. amended the access list or something like that on R13, R11 got load balance route to 145.14.14.14,
but the strange thing was, the metric does not match exam outcome request, R11 is showing both incoming links with large metric
something like xxxxx/7xxxxx.(exam request 1603/1703)

i used over 20 mins checking everything but cant find out why is that, i couldnt match exam request, so i gave up and as long
as they both had the same incoming metric and load balance

Q5. R12 : max path 2 , and someting else inside the mpls , i cant remember.

Q6. R22 had a wrong ipv6 next hop address

Q7 no ip split-horizon eigrp xxx missing on R15, R15 can ping R19 but not R17 and R18, i copied R19 int t0 config to R17 and R18,
it worked. also, while PC109 trace user1spokeX, the domain name out come mismatch with request in exam, amend it on R15,
i tried 20 mins to sort the issue with lots of different ways, suddenly the updated outcome matching exam equest after 20 mins later,
so dont panic it takes time

Q8. R7 ip nat outside missing, R5 and R6 missing export rt , R4 missing net 125.45.67.24

Q9. cryto map mismatch between R24 and R7, i think it was the group no.

Q10. add a mac address on PC

 

H2 CFG
Same as work book nothing special


TS1 DIAG H2++ CFG H1+

1 - ACL on SW1
Tkt

2- ppp and chap config on R17
Tkt

3- R22 interface was not in OSPF,
some problem on R5
Tkt

4- very simple, just R12 with a shut interface
Tkt

5- always takes me forever.
I changed many things.
R22 had bad RID for Ospf,
R3 had no ospf Nei towards R21
Tkt

6- Simple fix to next hop
Tkt

7- R18 had ACL on serial interface and was missing some nhrp commands. All routers needed shortcut, R15 needed redirect
Tkt

8- Fixed LDP between R1/2,
bad nat on R8, added cost for interface E2/0 on R4/6,
fixed dhcp problem on R104
Tkt

9- R21 had ACL that needed fixing,
R24 had bad encryption for tunnel,
R23 had bad NAT
Tkt

10- fixed dhcp config on NAS

Diag

H2++ - same as spoto

 

CFG H1+ - looked like spoto .
I couldn't solve ssh
R20, did everything as per solution but ssh was denied

Couldn't remember encryption commands for DMVPN tunnel on VRF
Trace routes worked beautifully

Really ran out of time but happy I made it


TS2 H3 Diag H2 CFG

TS2

1.VACL is wrong,change access-list ,no seq 10 and no seq 30
2.no ip ospf cost 9 (the interface of SW111 connect R15)
3.R23 loopback: OSPF process is wrong ,change OSPF 10 to OSPF 1
R22 and R23 use origina to control path, compare R12 and R13
SW210 ping 10.254.101.1 one of the hop is wrong ,,R13 interface add ip os cost 11
4. R21 had config LP,but do not use it
5. R60 tunnel mask is /32,change to /24
6. SW111, OSPF DO NOT network VLAN 2001,
R15 redistribute OSPFv3 to BGP

7.R10 ospf config “DISTANCE OSPF EXTERNAL 19” ,change 19 to219.
R3 RT import wrong,R5 lo0 network wrong ospf process
8. SW300,SW301,SW310. add “IP ARP INSPECTION TRUST” Under PORT-CHANNEL.
9.R24 change tunnel interface ospf network,ip os net p2mp change to p2p
10.
ip nat inside source static 123.45.67.100 10.2.200.1
Change to
ip nat inside source static 10.2.200.1 123.45.67.100

ip nat inside source static 201.99.70.2 201.99.25.70
Change to
ip nat outside source static 201.99.70.2 201.99.25.70




CCIE DUMPS TAGS:

number of ccie in the world cisco ccie documentation ccie study plan excel ccie written exam training ccie security preparation time ccie 400 101 testking ccie pass4sure ccie success rate cisco ccie collaboration lab v3 solution guide ccie routing and switching v5 1 dump