Anda di halaman 1dari 36

www.passsplabs.

com Final Release Lab1:20-Aug-2018

M
O
C
S.
AB
PL
SS
AS
.P
W
W
W

Configuration - Question
Lab 1
Real Labs
v4.1

WWW.PASSSPLABS.COM

www.passsplabs.com 1 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

M
O
C
S.
AB
PL
This page is Intentionally Left Blank
SS
AS
.P
W
W
W

www.passsplabs.com 2 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Pass Service Provider Labs Policies:

1. We highly discourage sharing of the workbook hence the workbooks are mapped to Laptop/Desktop
MAC address. If one tries to open the workbook on other desktop or laptop than the registered MAC
address; account will get locked and we will not unlock it for any reasons.

2. The workbook does not have print access; kindly do not request to enable to print access.

3. One will be provided with free updates up to 90 days from the date of purchase, post that one need

M
to renew his/her account to access the latest update. Post 90 days the workbooks will cease to open.

O
C
4. If one wish to renew their subscription/account, you need to renew within 90 days or before the
account gets expired. Post 90 days one can renew their account however the renewal will be

S.
considered has a new purchase. Hence we encourage one to renew within 90 days of the purchase.

AB
5. The renewal cost is 1999 USD if one pay within 90 days, if one fail to renew then the cost will be
equivalent of a new purchase. (The renewal price can be changed at any time, without informing the
PL
client)
SS

6. Every workbook is uniquely identified for each user with hidden words. If one shares his/her
workbooks with others, and if the system detects the share, the account will be banned and we will not
AS

entertain any explanation of any sort.


.P

7. For any queries regarding Questions/Solutions, you can contact us on email @


support@passsplabs.com or skype @ cciesplabs. Response time to any of the queries is 24 hours.
W

8. We do require CSCO ID, CCIE number and Official email id for security purposes. One should have
W

CCIE written passed and CCIE lab should be booked within 90 days. We do not sell without these
W

details. We do background verification of the details provided, so request to give us the correct CSCO
ID and official email id.

9. The workbooks are in secured pdf format and delivered via email.

10. License is provided for only one Device. And we don’t give license again if the device crashes or
company security policies. Please install license on the device cautiously as the license will not be
provided again.

11. We do support devices running Windows OS, Mac OS, Android and Mac iOS only

12. We do not provide Refund in any circumstances once the product is sold.

www.passsplabs.com 3 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

13. This policy is in effect from 23 November 2016 and in immediate effect for new clients and new
renewals. Old clients will continue with the old Policies until the accounts get expired.

14. If there is any update, one will receive the update automatically on their registered email-id.

15. For any future update you can check our update page on www.passsplabs.com

M
O
C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 4 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Configuration Guideline
1. Read all Questions before processing with any configurations.

2. If you need to clarity a question or if you suspect that your lab might have problem, contact the lab
proctor as soon as possible.

3. Before you start the exam, confirm that all devices in your rack area are working and are accessible.

M
 During the exam, if any device becomes looked or inaccessible for any reason, it is your

O
responsibility to recover it.

C
 If you are sure that the issue is related to the virtual environment, contact the lab proctor as

S.
soon as possible.

AB
4. When you finish the lab exam, make sure that all devices are accessible for the grading proctor, by
having it in an EXEC mode prompt and console window closed. A device that is not accessible for
PL
grading cannot be marked and this might cause you to lose substantial points.

5. For Cisco IOS XR devices, make sure that you commit all of your changes and have the prompt in the
SS

EXEC mode. Failure to do this delays your lab grading.


AS

6. Knowledge of implementation techniques are included in the skills that are tested in the lab exam.
.P

7. Points are awarded only for working configurations. It is highly recommended that all the end of the
exam; you go back and test the functionality according to what appears in the exam question. You
W

might have configured one part of the exam in way that break a previous requirements or
W

configuration.
W

8. All exam questions requirements must be met in obtain the points of the exam questions. There is
no partial score, if you met up 900% of the exam questions requirements.

9. In the Configuration section of the exam, you are presented with preconfigured devices on your
topology.

a. IPv4 and IPv6 addresses are configured in all routers


b. Basic IGP is configured in SAN-FRAN and EURO device providers
c. Basic IBGP with route reflector architecture with IPv4,IPv6,VPNv4 and VPNv6 address families is
configured in two service providers
d. External BGP is also partially configured
e. BGP might not be completely configured. It is your responsibility to ensure that the BGP
requirements are met as per exam question specifications.

www.passsplabs.com 5 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

f. Basic MPLS LDP is enabled inside of the two service providers SAN-FRAN and EURO.
g. RD and RT are configured (one RD and one RT are used per customer vpn), You might need to
change this configuration by removing and adding new value, Ensure that you meet the exam
requirements.
h.IPv4/IPv6 PE-CE routing is also configured.

Do not change the following configuration

1. Hostname

M
2. Any Password (the default password is “cisco”)
3. Line Console

O
C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 6 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

CCIE SP Lab –CFG module –IPv4 Topology

M
O
C
S.
AB
PL
SS
AS
.P
W
W
W

4th Octets is the router-id


Example: PE23, router Id is 23, All IP addresses for this router have “.23” in the 4 octet

www.passsplabs.com 7 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

CCIE SP Lab –CFG module –IPv6 Topology

M
O
C
S.
AB
PL
SS
AS
.P
W
W
W

All IPv6 address start with 2001:DB8::


The last 32 bits of the IPv6 address is the digit used for router id.
Example: PE23, router id is 23; All IPv6 addresses for this router have “//23” in the last 32 digits

www.passsplabs.com 8 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

CCIE SP Lab –CFG module –BGP and IGP Topology

M
O
C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 9 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

CCIE SP Lab –CFG module –Layer 2 and Layer 3 VPNv4 Topology

M
O
C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 10 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

CCIE SP Lab –CFG module –Layer 2 and Layer 3 VPNv6 Topology

M
O
C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 11 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

LOOPBACK 0 ADDRESSES

Router IPv4 Address /32 IPv6 Address/ 128


SAN-FRAN-RR51 10.0.0.51 2001:DB8::51
SAN-FRAN-RR52 10.0.0.52 2001:DB8::52
SAN-FRAN-P11 10.0.0.11 2001:DB8::11
SAN-FRAN-P12 10.0.0.12 2001:DB8::12

M
SAN-FRAN-PE21 10.0.0.21 2001:DB8:21

O
SAN-FRAN-PE22 10.0.0.22 2001:DB8:22

C
SAN-FRAN-PE23 10.0.0.23 2001:DB8:23

S.
SAN-FRAN-ASBR71 10.0.0.71 2001:DB8:71
SAN-FRAN-ASBR72 10.0.0.72 AB
2001:DB8:72
PL
EURO-RR61 20.0.0.61 n/a
EURO-P41 20.0.0.41 n/a
SS

EURO-P42 20.0.0.42 n/a


AS

EURO-PE31 20.0.0.31 n/a


EURO-PE32 20.0.0.32 n/a
.P

EURO-PE33 20.0.0.33 n/a


W

EURO-ASBR81 20.0.0.81 n/a


W

EURO-ASBR82 20.0.0.82 n/a


W

ASIA-ASBR111 30.0.0.111 2001:DB8:30:111


AFRO-ASBR91 40.0.0.91 2001:DB8:40:91
AFRO-PE61 40.0.0.61 2001:DB8:40:61
AFRO-PE62 40.0.0.62 2001:DB8:40:62
Silver-CE1 n/a 2001:DB8:4:40
BLUE-CE1 120.0.0.1 2001:DB8:120:1
BLUE-CE21 120.0.0.21 2001:DB8:120:21
BLUE-CE22 120.0.0.22 2001:DB8:120:22

www.passsplabs.com 12 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

BLUE-CE3 120.0.0.3 2001:DB8:120:3


BLUE-CE4 120.0.0.4 2001:DB8:120:4
GREEN-CE1 110.0.0.1 2001:DB8:110:1
GREEN-CE1 110.0.0.2 2001:DB8:110:2
RED-CE2 130.0.0.2 2001:DB8:130:2
130.0.0.3
RED-CE3 2001:DB8:130:3

M
RED-CE4 130.0.0.4 2001:DB8:130:4

O
C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 13 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Table 2 - Other Loopback Interface Address.


LOOPBACKS

Router Loopback Interface IPv4 Address IPv6 Address


EURO-PE31 Loopback 1 22.0.0.31/32 N/a
EURO-PE32 Loopback 1 22.0.0.31/32 N/A
AFRO-ASBR91 Loopback 1 60.60.60.60/24 2001:DB8:60::60/64
AFRO-ASBR91 Loopback 2 70.70.70.70/24 2001:DB8:70::70/64
AFRO-ASBR91 Loopback 3 80.80.80.80/24 2001:DB8:80::80/64

M
AFRO-ASBR91 Loopback 4 90.90.90.90/24 2001:DB8:90::90/64

O
AFRO-ASBR91 Loopback 5 50.50.50.50/24 2001:DB8:50::50/64

C
RED-CE3 Loopback 1 130.3.3.3/24 N/A

S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 14 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Domain 1: Core Routing

Question 1.1

AFRO service provider uses only one IGP for IPv4 and IPv6 routing configure OSPFv3 in all AFRO devices
as the IGP for the IPv4 and IPv6 prefixes. Refer to the diagrams for the IGP design details. The OSPF
network type for all transit interfaces must be point-to-point

M
O
Score: 3 Points

C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 15 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 1.2

ASA Service provider changed the AS number from 30 to 30 10(4 bytes)


Reconfigure the BGP on the ASIA-ASBR11 router only to meet this new requirement. This change,
however, must not impact SAN-FRAN and EURO service providers. This implies that the AS path
information for IPv4 and IPv6 prefixes on these devices must be exactly the same before and after this
implementation.

M
O
C
Score: 4 Points

S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 16 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 1.3

EURO service provider design team indicated that all interfaces that are enabled for IGP must be
enabled for LDP Enable the feature that globally configure LDP on every associated with IS-IS

Note: The mpls ip command must be removed from the interface configuration to complete this task

M
O
Score: 2 Points

C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 17 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 1.4

SAN-FRAN service provider must deploy Segment Routing in their core network. Configure Segment
Routing on SAN-FRAN device as per these requirements.

a. LDP is the preferred label packet forwarding method


b. SR Global Block starts at 16000 and hold up to 2000 labels
c. Loopback0 interface must have the prefix SID configured as an index in the SR Global Block
d. Prefix SID value must be the last octet of the ipv4 addresses configured on Loopback 0 interfaces

M
O
C
S.
Score: 4 Points

AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 18 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 1.5

EURO service provider must implement IPv4 MVPN by using MPLS label encapsulation for multicast
data. Configure Next Generation MVPN on the EURO service provider core to transport the multicast
traffic for BLUE customer. This implementation must meet the requirements.

a. Multicast core tree must be portioned MDT


b. MVPN-PE members must use BGP auto discovery
c. EURO network must use up to 50 MDT data group for Blue vrf

M
d. Blue customer sites use only one-to-many multimedia applications. Few multicast sources are in a

O
few sites.

C
Note: Only Control plane functionality is verified of this question. Data plane forwarding may not work

S.
in certain scenarios due to the limitations of the virtualized testing infrastructure used on this lab.

AB
PL
SS

Score: 4 Point
AS
.P
W
W
W

www.passsplabs.com 19 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 1.6

EURO service provider must deploy the DiffServ Pip tunneling mode. Configure EURO PE31 device
meeting these requirements.

a. Traffic received from the MPLS core that is forwarded to BLUE site 21 must be classified and queued
by using the LLQ CBWFQ queuing mechanism.
b. The LLQCBWFQ classes must use these marking and bandwidth specification

M
Class EURO-Marking Bandwidth

O
(MPLS-EXP bit)
Voice 5 Priority 38%

C
## Critical 4 Remaining 48%

S.
Data 3 Remaining 38%
Scavenger 1 Remaining 5%
Everything else All other marking AB Remaining 25%
PL

Notes:
SS

1. The original marking for BLUE customer cannot be modified


AS

2. EURO service provider markings are different from original marking of the BLUE customers
.P
W

Score: 3 Points
W
W

www.passsplabs.com 20 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Domain 2: Service Provider Architecture and Services

Question 2.1

SAN-FRAN service provider must provider Layer 2 connectivity to GREEN customer. Create a Layer 2
point-to-point circuit that provides IPv4 and IPv6 connectivity between GREEN site 1 and Green site 2.
The SAN-FRAN-PE23 device must be used to reroute this Layer 2 service in case a failure occurs in the
SAN-FRAN-PE22 device.

M
Note: Only control plane functionality is verified for this question. Data plane forwarding they not work

O
in certain scenarios due to the limitations of the virtualized testing infrastructure used on this lab

C
S.
AB Score: 3 Points
PL
SS
AS
.P
W
W
W

www.passsplabs.com 21 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 2.2

BLUE customer plans to extend its Layer 3 VPN through SAN-FRAN and EURO service providers. Enable
the MPLS inter-AS Layer 3 VPN between SAN-FRAN and EURO devices for VPNv4 and VPNv6 services.
The MPLS inter-AS L3VPN solution must meet these requirements

a. BUE customer traffic must be labeled between ASBRs


b. You cannot enables LDP on the links between ASBRS
c. The SAN-FRAN IGP must be completely isolated from the EURO ISP and vice versa

M
d. The two ASBRs links between SAN-FRAN and EURO must be used for the Layer 3 VPNs route

O
exchange

C
Notes:

S.
1. You are not allowed to use redistribute connected command on the ASBRs
AB
2. You are not allowed to remove any BGP configuration already in use
3. You are not allowed to create new BGP session between SAN-FRAN and EURO
PL
4. You are allowed to add new BGP address families in the existing BGP sessions
5. You are allowed to create up to two static routes
SS
AS
.P

Score: 5 Points
W
W
W

www.passsplabs.com 22 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 2.3

BLUE-CE4 and BLUE-CE3 require a L2 VPN circuit via AFRO service provider. Add a L2VPN tunnel
through AFRO service provider.
Remember that AFRO has an IP only enabled network and MPLS is not configured

Notes:

1. You are not allowed to use GRE tunnel to complete this question

M
2. You are not to use any label forwarding technology such as MPLS LDP segment routing on the BGP

O
send-label feature.
After you complete this task, BLUE-CE3 should be able to establish an OSPF neighbor ship with BLUE-

C
CE4 as shown here.

S.
AB
Output is required between customer CE4 and CE3 for ospf neighbor ship
PL
SS

Score: 2 Points
AS
.P
W
W
W

www.passsplabs.com 23 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 2.4

SILVER corporate has a web server that uses IPv6 addresses only Users connected via AFRO service
provider must access this web server. AFRO service provider provides Internet connectivity to EURO
service provider. Configure EURO network to provide IPv6 connectivity between SILVER and AFRO
network. You must leverage the MPLS that is enabled on the WURO network.

Note: You are not allowed to enable IPv6 routing in the core of the EURO network.

M
After you complete this task, SILVER CE1 must be able to ping one of this ipv6 loopback address

O
Configured on AFRO-ASBR-91

C
S.
After completing task we should get ping from silver CE1 to AFRO-ASBR-91(need ref output).

AB Score: 4 Points
PL
SS
AS
.P
W
W
W

www.passsplabs.com 24 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Domain 3: Access and Aggregation

Question 3.1

BLUE site 21 and BLUE site 22 plan to migrate the OSPFv2 backbone through the EURO core network.
BLUE customer must use the legacy link between site 21 and site 22 only as a backup path for IPv4
routes Configure the EURO PE routers to meet these requirements.

a. All IPv4 routes learned from EURO service provider must be seen as intra-area routes on BLUE

M
devices

O
b. Path via EURO must be preferred path between BLUE-site 21 and BLUE site 22. Only if a link failure

C
occurs between PE and CE, the legacy link can be used for the communication between BLUE site 21
and BLUE site 22

S.
c. Only prefixes from BLUE network can be in the BLUE OSPF database. None of the EURO prefixes can
be in the BLUE OSPF database.
AB
After you complete this task, BLUE-CE21 and BLUE-CE22 must reach each other Loopback 0 IPv4
PL
address via EURO Network.
SS

In this they ask us to trace from CE 22 to loop address of CE21


AS
.P
W

Score: 4 Points
W
W

www.passsplabs.com 25 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 3.2

EURO-PE33 router connects BLUE and RED customers via a shared interface the GigEth 4 interface.
Configure this router to provide IPV4 connectivity between BLUE site 3 and all other BLUE sites.

Notes:

1. You are not allowed to create sub interface


2. You are not allowed to create any type of Layer 2 connectivity

M
3. You are not allowed to leak the VRF routes onto global table and vice versa

O
4. You are not allowed to use static routes to complete the reachability for this question

C
After you complete this task, BLUE-CE3 must use EURO-PE33 to reach the Loopback interface of BLUE-

S.
CE21 Also, RED-CE3 must be able to ping the Loopback 0 interface of RED-CE4 as per this output:

AB
Trace ask from From BLUE-CE3 to BLUE-CE21 loop back address with trace x.x.x.x timout 1 pro 1 ttl 1
10
PL
Ping ask from RED-CE3 to loop of RED-CE4 with source loop 0 address
SS
AS

Score: 3 Point
.P
W
W
W

www.passsplabs.com 26 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 3.3

BLUE site 21 and BLUE site 22 have hosts interested in multicast traffic using 230.130.0.22 address.
Enable IPv4 multicast routing between EURO-PE31, EURO-PE32, BLUE-CE21, and BLUE-CE22 with these
requirements:

1. BLUE-CE21 must be the RP and it must be elected dynamically. The method used for this selection
must use a reserved-well known multicast group
2. BLUE-CE22 must have a join-group command for 230.130.0.22 address applied on Loopback 0

M
interface

O
Note:

C
You are not allowed to create any multicast static routes.

S.
AB Score: 3 Points
PL
SS
AS
.P
W
W
W

www.passsplabs.com 27 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 3.4

EURO-PE32 must deploy an egress QoS policy that takes advantage of the congestion control
mechanism of TCP. Deploy QoS requirements on the EURO-PE32 router interface that focus BLUE-CE22
(interface GigEth 5) by dropping selectively based on DSCP, using these parameters.

Traffic type DSCP Min Threshold Max Threshold


(Packets) (Packets)

M
Voice 46 30 40

O
## Critical 38 40 40
Data 22 20 40

C
Scavenger 8 1 28

S.
Default 0 10 30

AB
PL
SS

Score: 4 Points
AS
.P
W
W
W

www.passsplabs.com 28 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Domain 4: High Availability and Fast Convergence

Question 4.1:

ASIA service provider must improve network convergence and avoid impact of very small interface
state flaps. Deploy the convergence mechanism on the ASIA-ASBR111 router on interfaces facing SAN-
FRAN-ASBR71 (GigEth 0/0/0/0 interface) and EURO-ASBR81 (GigEth 0/0/0/1 interface) based on those
requirements.

M
1. Add a half second of the delay to notify the upper layer protocol when a physical link goes down

O
2. Add 100 miliseconds of the delay when a physical link goes up

C
S.
AB Score: 2 Points
PL
SS
AS
.P
W
W
W

www.passsplabs.com 29 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 4.2

A EURO operations engineer found an issue related to slow convergence of customers VPN services
when a link failure occurs in the core optimize the current IGP routing protocol b creating backup
routes that are precomputed and installed in the router as a backup for the primary paths. To
complete this task you must meet these requirements:

1. Pre-calculate a protected path for Loopback 0 interface for all routers in the EURO network
You do not need to apply this for the RR (EURO-RR61)

M
You must apply this on EURO-P41, EURO-P42, EURO-PE31, EURO-PE32, EURO-PE33, EURO-ASBR81,

O
EURO-ASBR82
2. Ensure that each router has protected paths for the Loopback 0 interface for any other routers in the

C
EURO network excluding EURO-RR61

S.
Note: You are not allowed to use the MPLS-TE FRR features to achieve this goal
AB
PL
Score: 4 Points
SS
AS
.P
W
W
W

www.passsplabs.com 30 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 4.3:

EURO service provider has a requirement to increase LDP convergence when a link recovers after an
outage, Configure on LDP feature that maintains the LDP binding when a link fails. Routers must retain
the LDP binding no longer than 5 minutes following the loss of the LDP link adjacency.

M
O
Score: 3 Points

C
S.
AB
PL
SS
AS
.P
W
W
W

www.passsplabs.com 31 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Domain 5: Service Provider Security, Operation, and Management

Question 5.1

AFRO service provider has a requirement to increase security on the network devices. Configure CPP
(on AFRO-ASBR91 with these class identification and actions.

a. You must configured the sub interface category that is used by traffic that is destined to the IP
address space of ARO-ASBR91

M
b. Critical traffic (BGP traffic) This traffic should never be dropped or rate limited

O
c. Normal traffic (ping packet) this traffic must be rated limited 10,000 bit per second

C
d. known undesirable traffic (TCP,UDP and IGMP fragments packet) All traffic must be dropped

S.
AB Score: 2 Points
PL
SS
AS
.P
W
W
W

www.passsplabs.com 32 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 5.2

An attack has been detected on the SAN-FRAN network. The attack is based on Source address in the
range 192.168.100.0/24. Configure SAN-FRAN-RR51 to be the trigger router. You must also configure
all edge routers in the SAN-FRAN network to deploy a technique that uses routing protocol to force
edge routers to drop all the attack traffic. This security technique enhanced the network security in
these ways.

a. Efficiency mitigate DDoS and worm attack

M
b. Guarantee all attack traffic

O
c. Enhance Blacklist filtering

C
Notes:

S.
1. You are allowed to ask one static route in each router in this SAN-FRAN network
AB
2. Guarantee all traffic that is sourced in the range 192.168.100.0/24
3. You are allowed to add another static route in the trigger router (SAN-FRAN-RR51)
PL
SS

Score: 3 Points
AS
.P
W
W
W

www.passsplabs.com 33 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

Question 5.3

SILVER-CE1 device must use the EEM feature to track the CPU usage. Configure an EEM script on
SILVER-CE1 with these parameters

a. The EEM applet must run when the CPU usage is greater then 75percent (Use the SNMP 1 1 6 1 4 1 9
8 109 1 1 1 1 3 1 for CPU usage checking)
b. When the EEM applet run, run the enable and show process cpu commands
c. An email containing the result of the show process cpu command must be sent to an engineer

M
O
1. Email server 192.168.1.146
2. Engineer email: engineer@silver.com

C
3. Source Email: device@silver.com

S.
4. Support Alert

AB
PL

Score: 3 Points
SS
AS
.P
W
W
W

www.passsplabs.com 34 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

ALL OUR ACTIVE CLIENTS CAN GET DIRECT SUPPORT FROM


SKYPE: CCIESERVICEPROVIDERLABS

OUR CCIE SP ENGINEERS ARE AVAILABLE ON SKYPE CHAT OR LIVE SUPPORT


CHAT FROM WEBSITE

http://passsplabs.com/contactus.html (LIVE SUPPORT)

YOUR GATEWAY TO SUCCESS TOWARDS CCIE LAB

M
O
ACTIVE CLIENTS WILL GET VERY SPECIAL DISCOUNTS ON OTHER CCIE TRACKS

C
KINDLY VISIT FOR FURTHER INFORMATION

S.
CCIE R&S -- WWW.PASSRNSLABS.COM (PRL)
AB
CCIE SECURITY ----> WWW.PASSSECURITYLABS.COM (PSL)
PL
CCIE WIRELESS ----> WWW.PASSWIRELESSLABS.COM (PWL)
SS

CCIE DATACENTER ----> WWW.PASSDATACENTERLABS.COM (PDL)


AS

CCIE COLLABORATION ----> WWW.PASSCOLLABORATIONLABS.COM (PCL)


.P

CCIE SERVICEPROVIDER -----> WWW.PASSSPLABS.COM (PSL)


W

CCDE LABS -- WWW.PASSCCDELAB.COM (PCL)


W

CCIE WRITTEN ---- WWW.PASSWRITTEN.COM (PW)


W

VCIX -- WWW.VCIXLABS.COM (VL)

WORLD FIRST REAL LAB RACK RENTAL FOR ALL CCIE TRACKS
CCIE RACK RENTALS -----> WWW.CCIERACK.RENTALS (CRR)

KINDLY CONTACT US AT SALES@PASSSPLABS.COM FOR FURTHER INFORMATION


ON OTHER TRACKS

www.passsplabs.com 35 www.cciesplabs.com
www.passsplabs.com Final Release Lab1:20-Aug-2018

M
O
C
S.
AB
PL

Thank You for Choosing PASSSPLABS Workbooks.


SS
AS
.P
W
W
W

www.passsplabs.com 36 www.cciesplabs.com

Anda mungkin juga menyukai