v1044题库和完美修正ccnalab实验

答案：EIGRP这题实验题主要是排错，找出4台路由器的AS 错误，按照图里给出的自己Showrun查看下，考试的时候也可能出现3处错误。做完后记得一下每个网段是否通，最后记得Copyrunning-configStartup-config不然就白做了。 nable(youhavetoenterciscoasitspasswordhere)R3#configureterminalR3(config)#noroutereigrp22R3(config)#routereigrp212R3(config-router)#noauto-summaryR3#copyrunning-configstartup-R1>enable(youhavetoenterciscoasitspasswordhere)R1#configureterminalR1(config)#routereigrpR1(config-router)#nonetworkR1#copyrunning-configstartup-Topas号和网络地址有些许变化AnetworkassociateisaddingsecuritytotheconfigurationoftheCorp1router.useronhostshouldbeabletouseawebbrowsertoaccessfinancialinformationfromtheFinanceWebServer.NootherhostsfromtheLANnortheCoreshouldbeabletouseawebbrowsertoaccessthisserver.SincetherearemultipleresourcesforthecorporationatthislocationincludingotherresourcesontheFinanceWebServer,allothertrafficshouldbeThetaskistocreateandapplyanaccess-listwithnomorethanthreestatementsthatwillallowONLYhostCwebaccesstotheFinanceWebServer.NootherhostswlhavewebaccesstotheFinanceWebServer.Allothertrafficispermitted.注:红色关键单词记住，代表只允许C主机FinanceWeb服务器AccesstotherouterCLIcanbegainedbyclickingontheappropriateh Allpasswordshavebeentemporarilysetto"cisco".TheCoreconnectionusesanIPaddressof198.18.196.65←Corp1路由器的SThecomputersintheHostsLANhavebeenassignedaddressesof192.168.33.1-HostAHostBHostCHostDTheserversintheServerLANhavebe ssignedaddressesof172.22.242.17-TheFinanceWebServerisasgne nIPaddressof172.22.242.23.Corp1#showrunning-确定连接服器的接口为Corp1#onfigureCop1 nfig)#access-list100permittcphost192.168.33.3host172.22.242.23eq80 (config)#access-list100denytcpanyhost172.22.242.23eq80Corp1(config)#access-list100permitipanyanyCorp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100outCorp1#copyrunning-configstartup-Corp1路由器的S口的IP，考试时要show下IP对不对，不对就改，修改IPCorp1#configureCorp1(config)#ints1/0(具体端自己showrun看一下Corp1(config-if)#ipadd198.18.196.65255.255.255.252(ip改为题目给的，掩码用showrun得到的原先错误IP的掩码)1允许hostc通过浏览器Financeweb2不允许hostc的其他类型Financeweb3不许其他主机Financewebserver（没有说明类型4允许所有主机publicwebserver（没有说明类型）5允许core所在的主机可以内部网络的public服务器Corp1#configureterminalCorp1(config)#access-list100permittcphost192.163.3hst172.22.242.23eqCorp1(config)#access-list100denyipanyhost17222.222Corp1(config)#access-list100permitipanyanyCorp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100outCorp1#copyrunning-config 1.Corp1(config)#access-st100permittcphost192.168.33.3host172.22.242.23 许TCP流量从源主机为IP：192.168.33.3到目的主机IP为：172.222534的80端口。eq的意思是等于这里不必要纠扩展列表使用的数字100还是128，只要是100-199范围内的都可Corp(config)#access-list100denytcpanyhost172.22.242.23eq 条扩展列表，TCP流量从所有源主机目的主机IP为1222.242.2380Corp1(config)#access-list100permitipanyCorp1#showrunning-Showrun.30IP.30show找出IP为.30的接口就OK了然后把ACLCorp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100out最后就是这2Showrun.30IP是在f0/1口上。直接进入F0/1把创建的扩展列表应用进去，最后千万记得CopyrunStartWhatin edidSw-AC3associatewithMACaddress0010.5a0c.ffbaFa0showmac来看macWhatportson areoperatinghastrunks(chooseFa 答案查看trunk端口令showinterfacestrunkWhatkindofrouterisVLAN-R1?使用showcdpneighbors命令查看Whchswitchistherootbridgeforvlan 由由showspanning-treevlan1Whataddress uldbeconfiguredasthedefault-gatewayforthehost interfacefa0/4ofSW-AC3? B.192 C.192D. 答案由vlan信息可以得到fa0/4属于vlan44，题目拓扑图上已经给出了每个vla的网FromwhichswitchdidSw-Ac3 iveVLAN解释：SW-AC3la地址，再由showcdpneighborsdetail得到此IPRefertotheexhibit,SWXwastakenoutofthep dutionnetworkformaintenance.ItwillbereconnectedtotheFa 16portofSW-AC3.Whathappenstothenetworkwhenitisre nneedandatrunkexistsbetweenthetwoswitches?AllVLANsexceptthedefaultVLANwillberemovedfromallAllexitingswitcheswillhavetheC.TheVLANsServers,Management,Production,andno-wherewillrecetheVLANsonSWX.D.TheVLANsServers,Management,Production,andno-wherewillberemovedfromeexistingswitches.showvtpstatus察看SW-AC3交换机的vtp相关信息。新交换机接入当前网络，如果vtp的修订版本号高于当前网络（vtp、相同），当前网络的vlan 还是vtpserver。如果Outofwhichportswillaframebeforwardthathassourcemac-address00d0.d3a1.9a1banddestinationmac-address0 .8a7e612?(choose解释：以00d0.d3a19a 在交换机SW-AC3从哪端口转发？如数据帧中的目的M