ccie rs 5 0 备考资料含录屏lab版本1解法

1、Section 1（layer 2 technology）1.1 Switch AdministrationSW1 SW2 SW5 SW6vtp domain CCIE vtp version 2vtp mode transparentvtp password CCIErocks？SW3vtp domain CCIE vtp version 2 vtp mode servervtp password CCIErocks？ mac address-table aging-time 10800SW4vtp domain CCIE vtp version 2 vtp mode clientvtp p

2、assword CCIErocks？ mac address-table aging-time 10800校验：show vtp status/SW3 服务器SW4 客户端 其他透明show mac address-table aging-time/SW3 SW4 10800sshow vtp password1.2 Layer 2 portsSW1 SW2 的 vlan 自己划分（考场可能有预配，注意检查） SW3 的 vlan 自己划分（考场可能有预配，注意检查） SW4 的 vlan 可以通过 vtp 同步，但是端口需要自己划分进 vlan SW5 SW6 的 vlan 自己划分，端口是

3、否划分进 vlan，注意检查 SW1 SW2 SW3 SW4interface range e2/0 -3switchport trunk encapsulation dot1q switchport mode trunkswitchport nonegotiate/这条命令 SW3 SW4 不支持，据反映考场也不支持今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 SW1 SW2interface range e3/0 -3 switchport access vlan 999 switchport mode accessshutdownSW3 SW4interface

4、 range e1/0 -3,e3/0 -3 switchport access vlan 999 switchport mode access shutdown校验：show vlan brishow ip int bri1.3 spanning-treeSW1 SW2 SW3 SW4int range e0/0 -3,e1/0 -3,e3/0 -3spanning-tree guard rootSW1 SW2 SW3 SW4 SW5 SW6/可能有的交换机没有 edge 这个单词spanning-tree portfast edge defaultspanning-tree portfas

5、t edge bpduguard defaultSW1 SW2spanning-tree mode mst spanning-tree mst configuration name ciscorevision 1instance 1 vlan 1, 15, 23, 35, 57, 67, 999instance 2 vlan 14, 24, 46SW3 SW4spanning-tree mode mst spanning-tree mst configuration name ciscorevision 1instance 1 vlan 1, 49, 89, 111, 411, 999inst

6、ance 2 vlan 34, 38, 310SW5spanning-tree mode mstspanning-tree mst configuration今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 name ciscorevision 1instance 1 vlan 5instance 2 vlan 55SW6spanning-tree mode mst spanning-tree mst configuration name ciscorevision 1instance 1 vlan 6instance 2 vlan 66SW1 SW3spanning-t

7、ree mst 1 priority 0spanning-tree mst 2 priority 4096SW2 SW4spanning-tree mst 1 priority 4096spanning-tree mst 2 priority 0校验：show run | sec span show span1.4 wan switchingR18interface Serial4/0 encapsulation pppno peer neighbor-routeppp chap hostname ACME-R18 ppp chap password CCIER19interface Seri

8、al4/0 encapsulation pppno peer neighbor-routeppp chap hostname ACME-R19 ppp chap password CCIE校验：R18#ping vrf LOCALSP 203.3.18.1 R19#ping vrf LOCALSP 203.3.19.1今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 Section 2（layer 3 technology）2.1 OSPF in AS12345R1#show run | sec router osrouter ospf 12345router-id 12

9、3.1.1.1max-metric router-lsa/R1 需要做这个network 123.1.1.1 0.0.0.0 area 0network 123.10.1.2 0.0.0.0 area 0network 123.10.1.5 0.0.0.0 area 0R2#show run | sec router osrouter ospf 12345router-id 123.2.2.2network 123.2.2.2 0.0.0.0 area 0network 123.10.1.9 0.0.0.0 area 0network 123.10.1.17 0.0.0.0 area 0R3#

10、show run | sec router osrouter ospf 12345router-id 123.3.3.3network 123.3.3.3 0.0.0.0 area 0network 123.10.1.10 0.0.0.0 area 0network 123.10.1.13 0.0.0.0 area 0R4#show run | sec router osrouter ospf 12345router-id 123.4.4.4network 123.4.4.4 0.0.0.0 area 0network 123.10.1.1 0.0.0.0 area 0network 123.

11、10.1.18 0.0.0.0 area 0network 123.10.1.21 0.0.0.0 area 0R5#show run | sec router osrouter ospf 12345router-id 123.5.5.5network 123.5.5.5 0.0.0.0 area 0network 123.10.1.6 0.0.0.0 area 0network 123.10.1.14 0.0.0.0 area 0network 123.10.1.29 0.0.0.0 area 0今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 R6#show run

12、| sec router osrouter ospf 12345router-id 123.6.6.6network 123.6.6.6 0.0.0.0 area 0network 123.10.1.22 0.0.0.0 area 0network 123.10.1.25 0.0.0.0 area 0R7#show run | sec router osrouter ospf 12345router-id 123.7.7.7network 123.7.7.7 0.0.0.0 area 0network 123.10.1.26 0.0.0.0 area 0network 123.10.1.30

13、0.0.0.0 area 0校验：查看 R1 R4 R5 OSPF 邻居 查看 R1 OSPF 条目 show ip route ospf效果图的 metric 值不一致，IOS 问题2.2 EIGRP in AS34567R8#show run | sec router eirouter eigrp 34567network 123.8.8.8 0.0.0.0network 123.10.2.1 0.0.0.0network 123.10.2.5 0.0.0.0R9#show run | sec router eirouter eigrp 34567network 123.9.9.9 0.0

14、.0.0network 123.10.2.2 0.0.0.0network 123.10.2.9 0.0.0.0R10#show run | sec router eirouter eigrp 34567今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 network 123.10.2.18 0.0.0.0network 123.10.2.25 0.0.0.0network 123.10.10.10 0.0.0.0R11#show run | sec router eirouter eigrp 34567network 123.10.2.22 0.0.0.0network

15、 123.10.2.26 0.0.0.0network 123.11.11.11 0.0.0.0sw3#show run | sec router eirouter eigrp 34567network 123.10.2.6 0.0.0.0network 123.10.2.13 0.0.0.0network 123.10.2.17 0.0.0.0network 123.203.3.3 0.0.0.0sw4#show run | sec router eirouter eigrp 34567network 123.10.2.10 0.0.0.0network 123.10.2.14 0.0.0.

16、0network 123.10.2.21 0.0.0.0network 123.204.4.4 0.0.0.0sw3#show run int vlan 34interface Vlan34delay 100sw4#show run int vlan 34interface Vlan34 delay 100校验：show ip ei neiR8#show ip route eiR9#show ip route ei2.3 EIGRP in AS 45678R15#show run | sec router eirouter eigrp acmeaddress-family ipv4 unica

17、st autonomous-system 45678 network 123.15.15.15 0.0.0.0network 123.20.1.1 0.0.0.0network 123.20.1.9 0.0.0.0今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 af-interface Ethernet0/1authentication mode hmac-sha-256 ccie af-interface Ethernet0/2authentication mode hmac-sha-256 ccieR16#show run | sec router eirouter

18、 eigrp acmeaddress-family ipv4 unicast autonomous-system 45678 network 123.16.16.16 0.0.0.0network 123.20.1.2 0.0.0.0network 123.20.1.17 0.0.0.0af-interface Ethernet0/1authentication mode hmac-sha-256 ccie exit-af-interfaceaf-interface Ethernet0/2authentication mode hmac-sha-256 ccieR17#show run | s

19、ec router eirouter eigrp acmeaddress-family ipv4 unicast autonomous-system 45678 network 123.17.17.17 0.0.0.0network 123.20.1.10 0.0.0.0network 123.20.1.18 0.0.0.0af-interface Ethernet0/1authentication mode hmac-sha-256 ccie af-interface Ethernet0/2authentication mode hmac-sha-256 cciesw5#show run |

20、 sec router eirouter eigrp acmeaddress-family ipv4 unicast autonomous-system 45678 af-interface Vlan55authentication mode hmac-sha-256 ccie network 123.20.1.3 0.0.0.0network 123.55.55.5 0.0.0.0network 123.205.5.5 0.0.0.0sw6#show run | sec router eirouter eigrp acmeaddress-family ipv4 unicast autonom

21、ous-system 45678 af-interface Vlan66authentication mode hmac-sha-256 ccie network 123.20.1.11 0.0.0.0network 123.66.66.6 0.0.0.0今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 network 123.206.6.6 0.0.0.0校验：show ip ei nei2.4 EIGRP in AS 65222R17interface Tunnel0ip address 10.18.19.1 255.255.255.0 R18interface Tu

22、nnel0ip address 10.18.19.18 255.255.255.0 R19interface Tunnel0ip address 10.18.19.19 255.255.255.0R17#show run | sec router eirouter eigrp acmeaddress-family ipv4 unicast autonomous-system 45678 network 10.18.19.1 0.0.0.0af-interface Tunnel0no split-horizon/给 DMVPN 用，为了让 Spoke 相互学到对方的路由R18#show run

23、| sec router eirouter eigrp 45678network 10.0.0.0network 123.18.18.18 0.0.0.0eigrp stubR19#show run | sec router eirouter eigrp 45678network 10.0.0.0network 123.19.19.19 0.0.0.0eigrp stub2.5 BGP in AS12345R1#show run | sec router bgprouter bgp 12345bgp router-id 123.1.1.1bgp cluster-id 123.1.1.1/可敲可

24、不敲，路由反射器的 RID no bgp default ipv4-unicastneighbor iBGP peer-group今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 neighbor iBGP remote-as 12345neighbor iBGP update-source Loopback0 neighbor 123.2.2.2 peer-group iBGP neighbor 123.3.3.3 peer-group iBGP neighbor 123.6.6.6 peer-group iBGP neighbor 123.7.7.7 peer-gro

25、up iBGP!address-family ipv4neighbor iBGProute-reflector-client neighbor 123.2.2.2 activateneighbor 123.3.3.3 activateneighbor 123.6.6.6 activateneighbor 123.7.7.7 activate exit-address-familyR2R3R6R7/多台设备相同的配置，可以复制router bgp 12345no bgp default ipv4-unicast neighbor 123.1.1.1 remote-as 12345neighbor

26、 123.1.1.1 update-source Loopback0 address-family ipv4neighbor 123.1.1.1 activateneighbor 123.1.1.1 next-hop-selfexit-address-familyR1#show run | sec router bgprouter bgp 12345bgp router-id 123.1.1.1R2#show run | sec router bgprouter bgp 12345bgp router-id 123.2.2.2R3#show run | sec router bgprouter

27、 bgp 12345bgp router-id 123.3.3.3R6#show run | sec router bgprouter bgp 12345bgp router-id 123.6.6.6R7#show run | sec router bgprouter bgp 12345bgp router-id 123.7.7.7今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 校验：R1#show ip bgp sumR20#show run | sec router bgprouter bgp 65112bgp router-id 123.20.20.20 bgp

28、log-neighbor-changesaggregate-address 123.0.0.0 255.0.0.0 summary-onlyaggregate-address 10.0.0.0 255.0.0.0 summary-onlyneighbor 10.120.12.1 remote-as 12345neighbor 10.120.12.1 default-originateneighbor 10.120.12.5 remote-as 12345neighbor 10.120.12.5 default-originateneighbor 10.120.13.1 remote-as 12

29、345neighbor 10.120.13.1 default-originateneighbor 10.120.13.5 remote-as 12345neighbor 10.120.13.5 default-originateneighbor 10.120.14.1 remote-as 12345neighbor 10.120.14.1 default-originateneighbor 10.120.14.5 remote-as 12345neighbor 10.120.14.5 default-originateneighbor 10.120.15.1 remote-as 12345n

30、eighbor 10.120.15.1 default-originateneighbor 10.120.15.5 remote-as 12345neighbor 10.120.15.5 default-originateneighbor 10.120.99.1 remote-as 12345neighbor 10.120.99.5 remote-as 12345另外还有两个修改权重的命令R12 和 R18 内网互通以及 R12 ping1.2.3.4 的路径需求，数据包出去优先走 R2，R3 做备份 neighbor 10.120 15.1 weight 60000neighbor 10.1

31、20 99.5 weight 600002.6 BGP in AS34567三步走-BGP 邻居-重分布-本地优先级的策略BGP 邻居 R8#show run | sec router bgp router bgp 34567bgp router-id 123.8.8.8no bgp default ipv4-unicast neighbor iBGP peer-group neighbor iBGP remote-as 34567neighbor iBGP update-source Loopback0 neighbor 101.1.34.1 remote-as 10001neighbor

32、123.9.9.9 peer-group iBGP今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 neighbor 123.10.10.10 peer-group iBGPneighbor 123.11.11.11 peer-group iBGP!address-family ipv4neighbor iBGP next-hop-self neighbor 101.1.34.1 activateneighbor 123.9.9.9 activateneighbor 123.10.10.10 activateneighbor 123.11.11.11 activate e

33、xit-address-familyR9#show run | sec router bgprouter bgp 34567bgp router-id 123.9.9.9no bgp default ipv4-unicast neighbor iBGP peer-group neighbor iBGP remote-as 34567neighbor iBGP update-source Loopback0 neighbor 33.34.4.1 remote-as 30000neighbor 102.2.34.1 remote-as 10002 neighbor 123.8.8.8 peer-g

34、roup iBGP neighbor 123.10.10.10 peer-group iBGP neighbor 123.11.11.11 peer-group iBGP!address-family ipv4neighbor iBGP next-hop-self neighbor 33.34.4.1 activateneighbor 102.2.34.1 activateneighbor 123.8.8.8 activateneighbor 123.10.10.10 activateneighbor 123.11.11.11 activate exit-address-familyR10#s

35、how run | sec router bgprouter bgp 34567bgp router-id 123.10.10.10 no bgp default ipv4-unicast neighbor iBGP peer-groupneighbor iBGP remote-as 34567 neighbor iBGP update-source Loopback0 neighbor 123.8.8.8 peer-group iBGP neighbor 123.9.9.9 peer-group iBGP neighbor 123.11.11.11 peer-group iBGPneighb

36、or 201.1.34.1 remote-as 20001今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 !address-family ipv4 redistribute eigrp 34567 neighbor iBGP next-hop-self neighbor 123.8.8.8 activateneighbor 123.9.9.9 activateneighbor 123.11.11.11 activateneighbor 201.1.34.1 activate exit-address-familyR11#show run | sec router bgp

37、router bgp 34567bgp router-id 123.11.11.11 no bgp default ipv4-unicast neighbor iBGP peer-groupneighbor iBGP remote-as 34567 neighbor iBGP update-source Loopback0 neighbor 33.34.3.1 remote-as 30000 neighbor 123.8.8.8 peer-group iBGP neighbor 123.9.9.9 peer-group iBGP neighbor 123.10.10.10 peer-group

38、 iBGP neighbor 202.2.34.1 remote-as 20002!address-family ipv4neighbor iBGP next-hop-self neighbor 33.34.3.1 activateneighbor 123.8.8.8 activateneighbor 123.9.9.9 activateneighbor 123.10.10.10 activateneighbor 202.2.34.1 activate exit-address-family校验：show ip bgp sum重分布 R8 R9 R10 R11router bgp 34567

39、address-family ipv4redistribute eigrp 34567R9 R11access-list 1 permit 0.0.0.0 route-map Default permit 10 match ip address 1router eigrp 34567今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 redistribute bgp 34567 metric 10000 100 255 1 1500 route-map Default本地优先级的策略 R9route-map LP-300 permit 10 set local-prefer

40、ence 300router bgp 34567 address-family ipv4neighbor 33.34.4.1 route-map LP-300 in neighbor 102.2.34.1 route-map LP-300 inR11route-map LP-200 permit 10 set local-preference200 router bgp 34567address-family ipv4neighbor 33.34.3.1 route-map LP-200 in neighbor 202.2.34.1 route-map LP-200 in校验：show ip

41、route/看默认路由，R9 显示为 B，R8,R10,R11 显示为 D EXshow ip bgp/R8 R10 R11 都优选 R9 发来的默认 2.7 BGP in AS 45678 and AS 65222R15#show run | sec router bgprouter bgp 45678bgp router-id 123.15.15.15aggregate-address 123.20.1.0 255.255.255.0 summary-onlyredistribute eigrp 45678neighbor 103.2.45.1 remote-as 10003R15#sho

42、w run | sec router eigrprouter eigrp acmeaddress-family ipv4 unicast autonomous-system 45678 topology baseredistribute bgp 45678 metric 10000 100 255 1 1500conf trouter bgp 45678bgp router-id 123.16.16.16 address-family ipv4 vrf LOCALSPneighbor 203.3.16.1 remote-as 20003neighbor 203.3.16.1 activaten

43、eighbor 203.3.16.1 prefix-list 1 in exit-address-family今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 ip prefix-list 1 seq 5 permit 0.0.0.0/0endwrconf trouter bgp 45678bgp router-id 123.17.17.17 address-family ipv4 vrf LOCALSPneighbor 203.3.17.1 remote-as 20003neighbor 203.3.17.1 activateneighbor 203.3.17.1 pr

44、efix-list 1 in exit-address-familyip prefix-list 1 seq 5 permit 0.0.0.0/0 endwrconf trouter bgp 65222bgp router-id 123.18.18.18 address-family ipv4 vrf LOCALSPneighbor 203.3.18.1 remote-as 20003neighbor 203.3.18.1 activateneighbor 203.3.18.1 prefix-list 1 in exit-address-familyip prefix-list 1 seq 5

45、 permit 0.0.0.0/0 endwrconf trouter bgp 65222bgp router-id 123.19.19.19 address-family ipv4 vrf LOCALSPneighbor 203.3.19.1 remote-as 20003neighbor 203.3.19.1 activateneighbor 203.3.19.1 prefix-list 1 in exit-address-familyip prefix-list 1 seq 5 permit 0.0.0.0/0 endwr校验：show bgp vpnv4 unicast all sum

46、maryshow bgp vpnv4 unicast all/只有一条默认等 MPLS VPN，DMVPN 做完再回过头来做 2.82.92.102.11今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 Section 3 VPN technology3.1 MPLS VPN part1第一步：ISP 内部的 IGP第二步：ISP 设备运行 LDP-所有 ISP 内部接口开启 MPLS IP第三步：创建 VRF（为了让 PE 本地区分路由）RD 值（为了让 P 设备区分路由-本地唯一）RT 值（导出 RT导入 RT-全网唯一-控制 VPNV4 路由传递）第四步：PE PE

47、 VPNV4 邻居 PE CE IPV4 邻居（PE vrf 里面做CE 正常做） MPLS VPN,PE 给另一个 PE 发了 VPNV4，别人没有接收 - 一般都是 RT 问题R2#show bgp vpnv4 unicast all labels /查看 VPNV4路由携带的标签R2#show mpls ldp bindings/查看LDP 产生的标签 MPLS VPN 数据包的走向： R1 ping 172.16.1.1 so lo0R2 R2#show ip cef vrf A 172.16.1.1 detail300(LDP) 506(VPNV4)R3 R3#show mpls f

48、orwarding-table查看标签转发表 R4 R4#show mpls forwarding-tablePOP弹出最外层标签，直接转发 untag（nolabel） 弹出最外层标签，如果没有其他标签了，就转发数据包如果还有标签，就丢包 R5 R5#show mpls forwarding-tablePOP下游给我发来了他本地直连的网段-空标签（imp-null-3） UNTAG下游没有给我发来关于某个条目的标签 R1 R2 R3 R4 R5 R6 R7conf t ip cef mpls ipmpls label protocol ldp mpls ldp router-id lo0 f

49、orce int range e0/1 -2mpls ip endwrR4 R5int range e0/0mpls ip今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 R2 R3 R6 R7no mpls ip propagate-ttl校验：R1 R4 R5#show mpls ldp neighbor/查看LDP 邻居 3.2 MPLS VPN part 2R1conf trouter bgp 12345 address-family vpnv4neighbor iBGProute-reflector-client neighbor 123.2.2.2 activ

50、ateneighbor 123.3.3.3 activateneighbor 123.6.6.6 activateneighbor 123.7.7.7 activateR2 R3 R6 R7conf trouter bgp 12345 address-family vpnv4neighbor 123.1.1.1 activate endwrR1#show bgp vpnv4 unicast all summaryR1#show ip bgp summaryR2#show run | sec router bgprouter bgp 12345address-family ipv4 vrf BL

51、UEneighbor 10.120.13.2 remote-as 65112neighbor 101.1.123.1 remote-as 10001 exit-address-family!address-family ipv4 vrf GREENneighbor 10.120.12.2 remote-as 65112neighbor 101.1.123.1 remote-as 10001 exit-address-family!address-family ipv4 vrf INETneighbor 10.120.99.2 remote-as 65112neighbor 101.1.123.

52、1 remote-as 10001 exit-address-family!今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 address-family ipv4 vrf REDneighbor 10.120.14.2 remote-as 65112neighbor 101.1.123.1 remote-as 10001 exit-address-family!address-family ipv4 vrf YELLOW neighbor 10.120.15.2 remote-as 65112neighbor 101.1.123.1 remote-as 10001exi

53、t-address-familyR3#show run | sec router bgprouter bgp 12345address-family ipv4 vrf BLUEneighbor 10.120.13.6 remote-as 65112neighbor 102.2.123.1 remote-as 10002 exit-address-family!address-family ipv4 vrf GREENneighbor 10.120.12.6 remote-as 65112neighbor 102.2.123.1 remote-as 10002 exit-address-fami

54、ly!address-family ipv4 vrf INETneighbor 10.120.99.6 remote-as 65112neighbor 102.2.123.1 remote-as 10002 exit-address-family!address-family ipv4 vrf REDneighbor 10.120.14.6 remote-as 65112neighbor 102.2.123.1 remote-as 10002 exit-address-family!address-family ipv4 vrf YELLOW neighbor 10.120.15.6 remo

55、te-as 65112neighbor 102.2.123.1 remote-as 10002exit-address-familyR6#show run | sec router bgprouter bgp 12345address-family ipv4 vrf BLUEneighbor 201.1.123.1 remote-as 20001 exit-address-family!address-family ipv4 vrf GREEN今日头条号：新盟教育 CCIE 讲师琪麟不断更新 CCIE 考试知识点 neighbor 201.1.123.1 remote-as 20001exit-address-family!address-family ipv4 vrf INETneighbor 201.1.123.1 remote-as 20001 exit-address-familyR7#show run | sec router bgprouter bgp 12345address-family ipv4 vrf BLUEneighbor 202.2.123.1 remote-as 20002 exit-address-family!address-family ipv4 vrf INETneighbor 202.2.123.1 remote-