ccnp题库-ccnp.642-813.v200交换实验题

CCNP（642-813）题库 题库战报500人超 题库/战报发布区 /forum-263-正版题库、看考试战报，请随时关注鸿鹄报名考试，请联系鸿鹄区----613523108[唯一]报名思科CCNP考试，送思科真机试验 /thread-153631-1-CCNP.642-813.V200（2013.11.7）实验部

Acmeisasmallshipcompanythathasanexistingenterprisenetworkcomprisedof2switches;DSW1andASW1.Thetopologydiagramindicatestheirlayer2map.VLAN40isanewVLANthatwillbeusedtoprovidetheshipnelaccesstotheserver.Forsecurityreasons,itisnecessarytorestrictaccesstoVLAN20inthefollowingUsersconnectingtoASW1’sportmustbeauthenticatebeforetheyaregivenaccesstothenetwork.AuthenticationistobedoneviaaRadiusserver:Radiusserverhost:Radiuskey:AuthenticationshouldbeimplementedasclosetothehostdeviceDevicesonVLAN20arerestrictedtointheaddressrangeofPacketsfromdevicesintheaddressrangeof/24shouldbepassedonVLAN20.PacketsfromdevicesinanyotheraddressrangeshouldbedroppedonVLANFilteringshouldbeimplementedasclosetotheserverfarmasTheRadiusserverandapplicationserverswillbeinstalledatafuturedate.Youhavebeentaskedwithimplementingtheaboveaccesscontrolasapre-conditiontoinstallingtheservers.YoumustusetheavailableIOSswitchfeatures.AnswerandconfigureASW1ASW1(config)#aaaauthenticationdot1xdefaultgroupradiusASW1(config)#radius-serverhost6keyrad123ASW1(config)#dot1xsystem-auth-controlASW1(config)#interfacefastEthernet0/1ASW1(config-if)#switchportmodeaccessASW1(config-if)#dot1xport-controlautoConfigureDSW1(config)#ipaccess-liststandard10Defineanaccess-mapwhichusestheaccess-listabove:DSW1(config)#vlanaccess-mapMYACCMAP10DSW1(config-access-map)#matchipaddress10DSW1(config-access-map)#actionforwardDSW1(config-access-map)#actiondropApplyavlan-mapintoaDSW1(config)#vlanfilterMYACCMAPvlan-list20DSW1#copyrunning-configstartup-config端口f0/1updotx时，命令缩写不恰当会报错。不要以为是系统的bug。请用完整命令配置或修改缩写长度到被系统接受。pacl一定要应用到vlan20上。

MLSandEIGRPIamstillnotsureaboutthequestionbutweneedtoconfiguretheMultilayerSwitchsothatPCsfromVLAN2andVLAN3cancommunicatewiththeServer.Answerandmls#configureterminalmls(config)#intgi0/1mls(config-if)#ipaddressmls(config-if)#noshutdownmls(config-if)#exitmls(config)#intvlan2mls(config-if)#ipaddress324mls(config-if)#noshutdownmls(config-if)#intvlanmls(config-if)#ipaddress524mls(config-if)#noshutdownmls(config)#iproutingmls(config)#routereigrp650mls(config-router)#networkmls(config-router)#network2mls(config-router)#network4SpanningAcmeisasmallexportcompanythathasanexistingenterprisenetworkcomprisedof5switches;CORE,DSW1,DSW2,ASW1andASW2.Thetopologydiagramindicatestheirdesiredpre-VLANspanningtreemap.PreviousconfigurationattemptshaveresultedinthefollowingCOREshouldbetherootbridgeforVLAN20;however,DSW1iscurrentlytherootbridgeforVLAN20.TrafficforVLAN30shouldbeforwardingoverthegig1/0/6trunkportbetweenDSW1andDSW2.HoweverVLAN30iscurrentlyusinggig1/0/5.TrafficforVLAN40shouldbeforwardingoverthegig1/0/5trunkportbetweenDSW1andDSW2.HoweverVLAN40iscurrentlyusinggig1/0/6.Youhavebeentaskedwithisolatingthecauseoftheseissuerandimplementingtheappropriatesolutions.YoutaskiscomplicatedbythefactthatyouonlyhavefullaccesstoDSW1,withisolatingthecauseoftheseissuesandimplementingtheappropriatesolutions.YourtaskiscomplicatedbythefactthatyouonlyhavefullaccesstoDSW1,withtheenablesecretpasswordcisco.OnlylimitedshowcommandaccessisprovidedonCORE,andDSW2usingtheenable2levelwithswordofacme.Noconfigurationchangeswillbepossibleontheserouters.NoaccessisprovidedtoASW1orASW2.AnswerandDSW1#configureDSW1(config)#spanning-treevlan20priority CORE成为rootDSW1(config-if)#spanning-treevlan30port-priority64DSW1(config-if)#spanning-treevlan40costSavetheconfiguration:

VTPTheheadquarterofficesforabookretailerareenhancingtheirwiringclosetswithLayer3switches.Thenewdistribution-layerswitchhasbeeninstalledandanewaccess-layerswitchcabledtoit.YourtaskistoconfigureVTPtoshareVLANinformationfromthedistribution-layerswitchtotheaccess-layerdevices.Then,itisnecessarytoconfigureinterVLANroutingonthedistributionlayerswitchtoroutetrafficbetweenthedifferentVLANsthatareconfiguredontheaccess-layerswitches;however,itisnotnecessaryforyoutomakethespecificVLANportassignmentsontheaccess-layerswitches.Also,becauseVLANdatabasemodeisbeingdeprecatedbyCisco,allVLANandVTPconfigurationsaretobecompletedintheglobalconfigurationmode.PleasereferencethefollowingtablefortheVTPandVLANinformationtobeconfigured:VTP VLAN IP 172.16TheseareyourspecifiConfiguretheVTPinformationwiththedistributionlayerswitchastheVTPConfiguretheVTPinformationwiththeaccesslayerswitchasaVTPConfigureVLANsonthedistributionlayerConfigureinter-VLANroutingonthedistributionlayerSpecificVLANportassignmentswillbemadeasusersareaddedtotheaccesslayerswitchesinthefuture.AllVLANsandVTPconfigurationsaretocompletedintheglobalconfiguration.Toconfiguretheswitchclickonthehosticonthatisconnectedtotheswitchbewayofaserialconsolecable.DLSwitch#configureterminalDLSwitch(config)#vtpcisco(usecisco,notCISCObecauseitiscase(Requirement2willbesolvedConfigureVLANsonthedistributionlayerTocreateVLANsonaswitch,usethevlan DLSwitch(config)#vlan20DLSwitch(config)#vlan21ConfigureIpaddressesforVlans:DLSwitch(config)#interfacevlanDLSwitch(if-config)#ipaddressDLSwitch(if-config)#noshutdownDLSwitch(if-config)#interfacevlanDLSwitch(if-config)#ipaddressDLSwitch(if-config)#noshutdownDLSwitch(if-Configureinter-VLANroutingonthedistributionlayerDLSwitch(config)#iproutingDLSwitch#copyrunning-configstartup-2)ConfiguretheVTPinformationwiththeaccesslayerswitchasaVTPALSwitch#configureterminalALSwitch(config)#vtpmodeclientALSwitch#copyrunning-configstartup-

TheheadquarterofficeforacementmanufacturerisinstallingatemporaryCatalyst3550inanIDFtoconnect24additionalusers.Topreventnetworkcorruption,itisimportanttohavethecorrectconfigurationpriortoconnectingtotheproductionnetwork.ItwillbenecessarytoensurethattheswitchdoesnotparticipateinVTPbutforwardsVTPadvertisementsthatarereceivedontrunkports.Becauseoferrorsthathavebeenexperiencedonofficecomputers,allnontrunkinginterfacesshouldtransitionimmediaytotheforwardingstateofSpanningtree.Also,configuretheuserports(allFastEthernetports)sothattheportsarepermanentlyYouwillconfigureFastEthernetports0/12through0/24foruserswhobelongtoVLAN20.Also,allVLANandVTPconfigurationsaretobecompletedinglobalconfigurationmodeasVLANdatabasemodeisbeingdeprecatedbyCisco.Youarerequiredto plishthefollowingtasks:EnsuretheswitchdoesnotparticipateinVTPbutforwardsVTPadvertisementsreceivedontrunkports.Ensureallnon-trunkinginterfaces(Fa0/1toFa0/24)transitionimmediaytotheforwardingstateofSpanning-Tree.EnsureallFastEthernetinterfacesareinrmanentnon-trunkingPlaceFastEthernetinterfaces0/12through0/24inVLANSwitch(config)#interfacerangefa0/1–24Switch(config-if-range)#spanning-treeportfastNext,weneedtoassignFastEthernetports0/12through0/24toVLANBydefault,allportsontheswitchareinVLAN1.TochangetheVLANassociatedwithaport,youneedtogotoeachinterface(orarangeofinterfaces)andlitwhichVLANtobeapartof.Switch(config-if-range)#interfacerangefa0/12–24Switch(config-if-range)#switchportaccessvlan20Switch(config)#vtpmodetransparentSwitch#copyrunning-configstartup-LACPwithYouworkfor .Theyhavejustaddedanewswitch(SwitchB)totheexistingnetworkasshowninthetopologydiagram.RouterAiscurrentlyconfiguredcorrectlyandisprovidingtheroutingfunctionfordevicesonSwitchAandSwitchB.SwitchAiscurrentlyconfiguredcorrectly,butwillneedtobemodifiedtosupporttheadditionofSwitchB.SwitchBhasaminimalconfiguration.YouhavebeentaskedwithcompetingtheneededconfiguringofSwitchAandSwitchB.SwitchAandSwitchBuseCiscoastheenablepassword.TheVTPandSTPconfigurationmodesonSwitchAshouldnotbeSwitchAneedstobetherootswitchforvlans11,12,13,21,22and23.Allothervlansshouldbeleftaretheirdefaultvalues.Vlan21,Name:Marketing,willsupporttwoserversattachedtofa0/9andVlan22,Name:Sales,willsupporttwoserversattachedtofa0/13andVlan23,Name:Engineering,willsupporttwoserversattachedtofa0/15andAccessportsthatconnecttoservershouldtransitionimmediaytoforwardingstateupondetectingtheconnectionofadevice.SwitchBVTPmodeneedstobethesameasSwitchBmustoperateinthesamespanningtreemodeasNoroutingistobeconfiguredonOnlytheSVIvlan1istobeconfiguredanditistouseaddressInter-switchConnectivityConfigurationForoperationalandsecurityreasonstrunkingshouldbeunconditionalandVlans1,21,22and23shouldtaggedwhentraversingthetrunklink.ThetwotrunksbetweenSwitchAandSwitchBneedtobeconfiguredinamodethatallowsfortheumuseoftheirbandwidthforallvlans.Thismodeshouldbedonewithanon-proprietaryprotocol,withSwitchAcontrollingactivation.Propagationofunnecessarybroadcastsshouldbelimitedusingmanualpruningonthistrunklink.AnswerandSW-A(closetorouter)SW-A(config)#spanning-treevlan11-13,21-23rootprimarySW-A(config)#vlan21SW-A(config)#interfacerangeFa0/3–SW-A(config-if-range)#noswitchportmodeaccessSW-A(config-if-range)#noswitchportaccessvlan98SW-A(config-if-range)#switchporttrunkencapsulationdot1q(此交换机上不会接受SW-A(config-if-range)#switchportmodeSW-A(config-if-range)#switchporttrunkallowedvlan1,21-23SW-A(config-if-range)#channel-group1modeactiveSW-A(config-if-range)#noshutdownSW-A(config-if-——————————————————————————————SW-B(farfromSW-B(config)#vlan21SW-B(config-vlan)#nameTrunkNative//notnecessarytonameitbutjustnameitsameasSwitchASW-B(config-SW-B(config)#interfacerangeFa0/9–SW-B(config-if-range)#switchportmodeaccessSW-B(config-if-range)#spanning-treeportfastSW-B(config-if-range)#noshutdownSW-B(config-if-SW-B(config)#interfacerangeFa0/13–SW-B(config-if-range)#switchportmodeaccessSW-B(config-if-range)#spanning-treeportfastSW-B(config-if-range)#noshutdownSW-B(config-if-SW-B(config)#interfacerangeFa0/15–SW-B(config-if-range)#switchportmodeaccessSW-B(config-if-range)#spanning-treeportfastSW-B(config-if-range)#noshutdownSW-B(config-if-SW-B(config)#vtpmodeSW-B(config)#ipdefault-gateway(youcangetthisIPfromSW-Awithcommandshowcdpneighbourdetail)SW-B(config)#interfacevlanSW-B(config-if)#noshutdownSW-B(config-SW-B(config)#interfacerangeFa0/3–SW-B(config-if-range)#switchportmodetrunkSW-B(config-if-range)#switchporttrunkallowedvlan1,21-SW-B(config-if-range)#channel-group1modepassive//modepassivebecause“SwitchAcontrollingactivation”SW-B(config-if-range)#noshutdownSW-B(config-if-

HSRPQuestionDuringroutinemaintenance,itbecamenecessarytoshutdownG1/0/1onDSW1.Allotherinterfacewereup.Duringthistime,DSW1remainedtheactivedeviceforVlan102′sgroup.YouhavedeterminedthatthereisanissuewiththedecrementvalueinthetrackcommandinVlan102′sHSRPgroup.WhatneedtobedonetomakethegroupfunctionTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom5toTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom9toTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom11toTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom195tolessthanTheDSW1′sdecrementvalueshouldbeconfiguredwithavaluefrom200tolessthanTheDSW1′sdecrementvalueshouldbegreaterthan190andlessAnswer:ThequestionclearlystatedthattherewasanissuewiththedecrementvalueinVLAN102soweshouldcheckVLAN102onbothDSW1andDSW2switches.ClickonthePCConsole1andPCConsole2toaccesstheseswitchesthenusethe“showrunning-config”commandonbothswitchesAsshownintheoutputs,theDSW1′spriorityis200andishigherthanthatofDSW2so esactiveswitchforthegroup.NoticethattheinterfaceGig1/0/1onDSW1isbeingtrackedsowhenthisinterfacegoesdown,HSRPautomaticallyreducestherouter’sprioritybyaconfigurableamount,inthiscase5.ThereforethepriorityofDSW1goesdownfrom200to195.ButthisvalueisstillhigherthanthatofDSW2(190)soDSW1remainstheactiveswitchforthegroup.TomakeDSW2takesoverthisrole,wehavetoconfigureDSW1′sdecrementvaluewithavalueequal reaterthan11sothatitsresultissmallerthanthatofDSW2(200–11<190).ThereforeCisthecorrectanswer.QuestionDuringroutinemaintenance,G1/0/1onDSW1wasshutdown.Allotherinterfacewereup.DSW2becametheactiveHSRPdeviceforVlan101asdesired.However,afterG1/0/1onDSW1wasreactivated.DSW1didnot etheactiveHSRPdeviceasdesired.WhatneedtobedonetomakethegroupforVlan101functionEnablepreemptonDSW1′sVlan101HSRPDisablepreemptonDSW1′sVlan101HSRPDecreaseDSW1′spriorityvalueforVlan101HSRPgrouptoavaluethatislessthanpriorityvalueconfiguredonDSW2′sHSRPgroupforVlan101DecreasethedecrementinthetrackcommandforDSW1′sVlan101HSRPgrouptoavaluelessthanthevalueinthetrackcommandforDSW2′sVlan101HSRPgroup.Answer:AContinuetocheckVLAN101onbothWelearnedthatDSW1doesn’thavethe“standby1preempt”commandsoitcan’ttakeovertheactiveroleagainevenifitspriorityisthehighest.SoweneedtoenablethiscommandonVLAN101ofDSW1.QuestionDSW2hasnot etheactivedeviceforVlan103′sHSRPgroupeventhoughallinterfacesareactive.AsrelatedtoVlan103′sHSRPgroup.Whatcanbedonetomakethegroupfunctionproperly?OnDSW1,disableOnDSW1,decreasethepriorityvaluetoavaluelessthan190andgreaterthanOnDSW2,increasethepriorityvaluetoavaluegreater241andlessthanOnDSW2,increasethedecrementvalueinthetrackcommandtoavaluegreaterthan10andlessthan50.Answer:BorCThereasonDSW2has etheactiveswitchforVlan103isbecausethevalueofDSW1ishigherthanthatofDSW2.InordertomakeDSW2 etheactiveswitch,w