1.

Ticket - L2 Switching 2 Marks

User's that are located in VLAN 100 of the BancoBank Headquarters have lost access to Server1, which
is located in VLAN 200. Fix the so that the following sequence of commands produces the same
relevant output:

PC101#ping SERVER1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.200.200, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

PC101#traceroute server1.bancobank.org
Type escape sequence to abort.
Tracing the route to server1.bancobank.org (172.16.200.200)
VRF info: (vrf in name/id, vrf out name/id)
1 172.16.100.1 0 msec 0 msec 1 msec
2 172.16.0.21 0 msec 0 msec 1 msec
3 Server1.bancobank.org (172.16.200.200) 0 msec * 0 msec
2. Ticket - PPP 2 Marks
Local Service Provider NOC connected to R11 has lost access to R17.
Local service provider Gateways must authenticate their ppp subscribers using chap.
Local service provider Gateways must offer Dynamic IP Adresses to ppp subscribers.
Subscribers must have a default route in their routing table poitining to Local Service Provider.
Subscribers must not use routing protocols to connect with Local Service Provider Gateways.
Fix the solution so the connectivity is possible from R11 to R17 as follows:

aTS01_R11#telnet 145.67.89.22
Trying 145.67.89.22 ... Open

User Access Verification

Password:
aTS01_R17>
3. Ticket - OSPF 2 Marks
Assume that there is a server located in OSPF Area 1 on the link between R21 and R22 in the Global
Service Provider Network. The NOC team has identified that the traffic that originates in OSPF Area 0
and destined to this server is not load balanced by R1. Fix the so that R1 OSPF Database matches the
following output:

aTS01_R1#sh ip ospf database summary 134.56.78.48

OSPF Router with ID (123.1.1.1) (Process ID 1)

Summary Net Link States (Area 0)

Routing Bit Set on this LSA in topology Base with MTID 0

LS age: 25
Options: (No TOS-capability, DC, Upward)
LS Type: Summary Links(Network)
Link State ID: 134.56.78.48 (summary Network Number)
Advertising Router: 123.3.3.3
LS Seq Number: 80000001
Checksum: 0xDA93
Length: 28
Network Mask: /29
MTID: 0 Metric: 20

Routing Bit Set on this LSA in topology Base with MTID 0

LS age: 75
Options: (No TOS-capability, DC, Upward)
LS Type: Summary Links(Network)
Link State ID: 134.56.78.48 (summary Network Number)
Advertising Router: 123.5.5.5
LS Seq Number: 80000002
Checksum: 0xAEB8
Length: 28
Network Mask: /29
MTID: 0 Metric: 20
4. Ticket - EIGRP 2 Marks
Traffic originating from R11 in Local Service Provider Core destined to loopback 0 of R14 must be load
balanced via EIGRP as shown in the exibit below:

aTS01_R11#show ip eigrp topology 145.14.14.14/32

EIGRP-IPv4 Topology Entry for AS(145)/ID(145.11.11.11) for 145.14.14.14/32
State is Passive, Query origin flag is 1, 2 Successor(s), FD is 1703
Descriptor Blocks:
145.67.89.2 (Ethernet0/0), from 145.67.89.2, Send flag is 0x0
Composite metric is (1703/1603), route is Internal
Vector metric:
Minimum bandwidth is 10000 Kbit
Total delay is 7000 microseconds
Reliability is 255/255
Load is 1/255
Minimum MTU is 1500
Hop count is 2
Originating router is 145.14.14.14
145.67.89.6 (Ethernet1/0), from 145.67.89.6, Send flag is 0x0
Composite metric is (1703/1603), route is Internal
Vector metric:
Minimum bandwidth is 10000 Kbit
Total delay is 7000 microseconds
Reliability is 255/255
Load is 1/255
Minimum MTU is 1500
Hop count is 2
Originating router is 145.14.14.14
5. Ticket - BGP 2 Marks
Networks hosted behind Internet must be able to be reached from R12 in EIGRP 145 Domain. R12
should be able to prefer the reachability thorugh R22 rather than R21. Fix the so that the following
traceroute from R12 should be matched with the output as given below:

aTS01_R12#traceroute 8.8.8.8
Goes via R21

aTS01_R12#traceroute 194.1.1.1
Goes via R22

aTS01_R12#traceroute 123.3.3.3
Goes via R4

aTS01_R12#traceroute 134.21.21.21
Goes via R6
6. Ticket - IPv6 2 Marks
The mobile phone which is connected in Mobile IPv6 network has lost access to remote server that is
located in the BGP AS 65535. Fix the so that the follow ing sequence of commands produces the same
relevant output:
Global SP does not allow any IGP over IPv6 traffic to or from the Mobile IPv6 network.

MOBILE#ping 2001:BEEF:CAFE::26
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:BEEF:CAFE::26, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/14/36 ms
MOBILE#
7. Ticket - DMVPN 4 Marks
R15 in UBER Market HQ is configured as DMVPN HUB, it should be able to connect R18 as Spoke Client.
Fix the issue so thatyou have the following output:

SERVER2#traceroute 200.100.2.100
Type escape sequence to abort.
Tracing the route to User1Spoke2.ubermarket.com (200.100.2.100)
VRF info: (vrf in name/id, vrf out name/id)
1 200.100.200.1 0 msec 0 msec 0 msec
2 200.100.0.1 0 msec 1 msec 0 msec
3 215.0.0.18 8 msec 9 msec 8 msec
4 User1Spoke2.ubermarket.com (200.100.2.100) 9 msec * 9 msec

PC112#traceroute 200.100.2.100
Type escape sequence to abort.
Tracing the route to User1Spoke2.ubermarket.com (200.100.2.100)
VRF info: (vrf in name/id, vrf out name/id)
1 200.100.3.129 0 msec 0 msec 0 msec
2 200.100.3.1 0 msec 0 msec 0 msec
3 215.0.0.1 9 msec 8 msec 9 msec
4 215.0.0.18 13 msec 17 msec 16 msec
5 User1Spoke2.ubermarket.com (200.100.2.100) 17 msec * 18 msec
8. Ticket MPLS 4 Marks
The BancoBank network design requires that any outbound traffic that generates from any remote site
be routed via the HeadQuarters gateways, including internet traffic. R7 must be the primary gateway
of the headquarters and R8 must take over if R7 is down. Both gateways must translate the source IP
address of any private corporate traffic that is destined to the internet using their interface E1/0.125.

Part - 1 Output:
PC106#ping 172.16.200.200
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.200.200, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
PC106#

Part - 2 Output:
PC105#traceroute 8.8.8.8
Type escape sequence to abort.
Tracing the route to 8.8.8.8
VRF info: (vrf in name/id, vrf out name/id)
1 192.168.12.1 0 msec 0 msec 0 msec
2 192.168.13.1 1 msec 0 msec 0 msec
3 123.45.67.33 0 msec 0 msec 0 msec
4 123.45.67.13 [MPLS: Labels 22/31 Exp 0] 1 msec 1 msec 0 msec
5 123.45.67.1 [MPLS: Labels 16/31 Exp 0] 0 msec 1 msec 1 msec
6 123.45.67.21 [MPLS: Label 31 Exp 0] 0 msec 7 msec 1 msec
7 123.45.67.22 7 msec 0 msec 1 msec
8 125.45.67.21 0 msec 0 msec 1 msec
9 123.45.67.38 1 msec 0 msec 0 msec
10 134.56.78.6 1 msec 1 msec 0 msec
11 8.8.8.8 1 msec 1 msec *
PC105#
9. Ticket - DMVPN 2 Marks
There is DMVPN configured between R7 - R24 via Nat Network (R23).
R7 is configured as HUB and R24 as Spoke.
User (PC 109) attached to R24 has lost the access to Headquaters.
It must be able to reach Server in Bancobank Headquaters in BGP AS 65100.
Fix the issue so that the user can reach to the Server through DMVPN.

PC109#ping server1.bancobank.org
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.200.200, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/9/11 ms
PC109#

PC109#traceroute server1.bancobank.org
Type escape sequence to abort.
Tracing the route to server1.bancobank.org (172.16.200.200)
VRF info: (vrf in name/id, vrf out name/id)
1 10.25.45.1 1 msec 1 msec 0 msec
2 172.247.247.1 9 msec 9 msec 10 msec
3 172.16.0.2 9 msec 9 msec 10 msec
4 server1.bancobank.org (172.16.200.200) 9 msec * 6 msec
PC109#
10. Ticket - NAS 2 Marks
Internet user's have lost access to the NAS server that is located in the home network.
Fix the s so that the following sequence of commands produces the same output:

aTS01_R21#telnet nas.home.net 8008

Trying net.home.net (134.56.78.10, 8008)... Open
get
HTTP/1.1 400 Bad Request
Date: Sun, 12 Oct 2014 21:08:02 GMT
Server: cisco-IOS
Accept-Ranges: none
400 Bad Request
[Connection to net.home.net closed by foreign host]
R21#

The NAS must be able to reach an external server as per below output:

NAS#ping www.cciecloud.net
Translating "www.cciecloud.net"...domain server (192.168.1.1) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
NAS#