Beruflich Dokumente
Kultur Dokumente
RouterA is currently configured correctly and is providing the routing function for devices on
SwitchA and SwitchB. SwitchA is currently configured correctly, but will need to be modified to
support the addition of SwitchB. SwitchB has a minimal configuration. You have been tasked
with competing the needed configuring of SwitchA and SwitchB. SwitchA and SwitchB use
Cisco as the enable password.
Configuration Requirements for SwitchA
- The VTP and STP configuration modes on SwitchA should not be modified.
SwitchA needs to be the root switch for vlans 11, 12, 13, 21, 22 and 23. All other vlans should
be left are their default values.
Configuration Requirements for SwitchB
- Vlan 21, Name: Marketing, will support two servers attached to fa0/9 and fa0/10
Vlan 22, Name: Sales, will support two servers attached to fa0/13 and fa0/14
Vlan 23, Name: Engineering, will support two servers attached to fa0/15 and fa0/16
Access ports that connect to server should transition immediately to forwarding state upon
detecting the connection of a device.
SwitchB VTP mode needs to be the same as SwitchA.
SwitchB must operate in the same spanning tree mode as SwitchA.
No routing is to be configured on SwitchB.
Only the SVI vlan 1 is to be configured and it is to use address 192.168.1.11/24.
Inter-switch Connectivity Configuration Requirements:
- For operational and security reasons trunking should be unconditional and Vlans 1, 21, 22 and
23 should tagged when traversing the trunk link.
The two trunks between SwitchA and SwitchB need to be configured in a mode that allows for
the maximum use of their bandwidth for all vlans. This mode should be done with a nonproprietary protocol, with SwitchA controlling activation.
Propagation of unnecessary broadcasts should be limited using manual pruning on this trunk
link.
Answer and Explanation:
Below is a good solution commented by Ruci. Please say thank to Ruci!
SW-A (close to router)
SW-A#configure terminal
SW-A(config)#spanning-tree vlan 11-13,21-23 root primary
SW-A(config)#vlan 21
SW-A(config-vlan)#name Marketing
SW-A(config-vlan)#exit
SW-A(config)#vlan 22
SW-A(config-vlan)#name Sales
SW-A(config-vlan)#exit
SW-A(config)#vlan 23
SW-A(config-vlan)#name Engineering
SW-A(config-vlan)#exit
SW-A(config)#interface range Fa0/3 4
SW-A(config-if)#no switchport mode access
SW-A(config-if)#no switchport access vlan 98 (These two commands must be deleted to form a
trunking link)
SW-A(config-if)#switchport trunk encapsulation dot1q (cannot issued this command on this
switch, but dont worry coz I still got 100%)
SW-A(config-if)#switchport mode trunk
SW-A(config-if)#switchport trunk native vlan 99
SW-A(config-if)#switchport trunk allowed vlan 1,21-23
SW-A(config-if)#channel-group 1 mode active
SW-A(config-if)#channel-protocol lacp
SW-A(config-if)#no shutdown
SW-A(config-if)#end
SW-B(config)#vlan 21
SW-B(config-vlan)#name Marketing
SW-B(config-vlan)#exit
SW-B(config)#vlan 22
SW-B(config-vlan)#name Sales
SW-B(config-vlan)#exit
SW-B(config)#vlan 23
SW-B(config-vlan)#name Engineering
SW-B(config-vlan)#exit
SW-B(config)#vlan 99
SW-B(config-vlan)#name TrunkNative // not necessary to name it but just name it same as
SwitchA
SW-B(config-vlan)#exit
SW-B(config)#interface range Fa0/9 10
SW-B(config-if-range)#switchport mode access
SW-B(config-if-range)#switchport access vlan 21
SW-B(config-if-range)#spanning-tree portfast
SW-B(config-if-range)#no shutdown
SW-B(config-if-range)#exit
SW-B(config)#interface range Fa0/13 14
SW-B(config-if-range)#switchport mode access
SW-B(config-if-range)#switchport access vlan 22
SW-B(config-if-range)#spanning-tree portfast
SW-B(config-if-range)#no shutdown
SW-B(config-if-range)#exit
SW-B(config)#interface range Fa0/15 16
SW-B(config-if-range)#switchport mode access
SW-B(config-if-range)#switchport access vlan 23
SW-B(config-if-range)#spanning-tree portfast
SW-B(config-if-range)#no shutdown
SW-B(config-if-range)#exit
SW-B(config)#vtp mode transparent
SW-B(config)#spanning-tree mode rapid-pvst
SW-B(config)#ip default-gateway 192.168.1.1 (you can get this IP from SW-A with command
show cdp neighbour detail) // not sure about this command because the question says No
routing is to be configured on SwitchB.
SW-B(config)#interface vlan 1
SW-B(config-if)#ip address 192.168.1.11 255.255.255.0
SW-B(config-if)#no shutdown
SW-B(config-if)#exit
SW-B(config)#interface range Fa0/3 4
SW-B(config-if)#switchport trunk encapsulation dot1q (yes I can issued this command on this
switch)
SW-B(config-if)#switchport mode trunk
SW-B(config-if)#switchport trunk native vlan 99
SW-B(config-if)#switchport trunk allowed vlan 1,21-23
SW-B(config-if)#channel-group 1 mode passive //mode passive because SwitchA controlling
activation
SW-B(config-if)#channel-protocol lacp
SW-B(config-if)#no shutdown
SW-B(config-if)#end
vlan
name
(VLANs must be created on
both switches if not exist)
interface range Fa0/x x
switchport mode access
switchport access vlan
spanning-tree portfast
everything again).
+ When using int range f0/x y command hit space bar before and after - otherwise the
simulator does not accept it.
+ You must create vlan 99 for the switchB. SwitchA already have vlan 99 configured.
+ At the end, you can try to ping from SwitchB to RouterA (you can get the IP on RouterA via
the show cdp neighbors detail on SwitchA), not sure if it can ping or not. If not, you can use the
ip default-gateway 192.168.1.1 on SwitchB.
We hope with this information our candidates can find the best solution in the exam. If you learn
anything new about this sim please share with us!
+ Use RouterC as a router on a stick and SwitchC as a pure Layer2 switch. Trunking must be
established between RouterC and SwitchC.
+ Only use SwitchC for interVLAN routing without using RouterC, SwitchC should be
configured as a Layer 3 switch (which supports ip routing function as a router). No trunking
requires.
The question clearly states No trunking has been configured on RouterC so RouterC does not
contribute to interVLAN routing of hosts H1 & H2 -> SwitchC must be configured as a Layer 3
switch with SVIs for interVLAN routing.
We should check the default gateways on H1 & H2. Click on H1 and H2 and type the ipconfig
command to get their default gateways.
C:\>ipconfig
We will get the default gateways as follows:
Host1:
+ Default gateway: 190.200.250.33
Host2:
+ Default gateway: 190.200.250.65
Now we have enough information to configure SwitchC (notice the EIGRP AS in this case is
650)
Note: VLAN2 and VLAN3 were created and gi0/10, gi0/11 interfaces were configured as access
ports so we dont need to configure them in this sim.
SwitchC# configure terminal
SwitchC(config)# int gi0/1
SwitchC(config-if)#no switchport -> without using this command, the simulator does not let
you assign IP address on Gi0/1 interface.
SwitchC(config-if)# ip address 10.10.10.2 255.255.255.0 ->RouterC has used IP 10.10.10.1 so
this is the lowest usable IP address.
SwitchC(config-if)# no shutdown
SwitchC(config-if)# exit
SwitchC(config)# int vlan 2
SwitchC(config-if)# ip address 190.200.250.33 255.255.255.224
SwitchC(config-if)# no shutdown
SwitchC(config-if)# int vlan 3
SwitchC(config-if)# ip address 190.200.250.65 255.255.255.224
SwitchC(config-if)# no shutdown
SwitchC(config-if)#exit
SwitchC(config)# ip routing (Notice: MLS will not work without this command)
SwitchC(config)# router eigrp 650
VTP Lab 2
April 20th, 2012 in LabSim Go to comments
Question:
Acme is a small export company that has an existing enterprise network comprised of 5
switches;
CORE,DSW1,DSW2,ASW1 and ASW2. The topology diagram indicates their desired preVLAN spanning tree mapping.
Previous configuration attempts have resulted in the following issues:
CORE should be the root bridge for VLAN 20; however, DSW1 is currently the root bridge for
VLAN 20.
Traffic for VLAN 30 should be forwarding over the gig 1/0/6 trunk port between DSW1 and
DSW2. However VLAN 30 is currently using gig 1/0/5.
Traffic for VLAN 40 should be forwarding over the gig 1/0/5 trunk port between DSW1 and
DSW2. However VLAN 40 is currently using gig 1/0/6.
You have been tasked with isolating the cause of these issuer and implementing the appropriate
solutions. You task is complicated by the fact that you only have full access to DSW1, with
isolating the cause of these issues and implementing the appropriate solutions. Your task is
complicated by the fact that you only have full access to DSW1, with the enable secret password
cisco. Only limited show command access is provided on CORE, and DSW2 using the enable 2
level with a password of acme. No configuration changes will be possible on these routers. No
access is provided to ASW1 or ASW2.
To determine the root bridge, switches send and compare their priorities and MAC addresses
with each other. The switch with the lowest priority value will have highest priority and become
the root bridge. Therefore, we can deduce that the priority of DSW1 switch is lower than the
priority of the CORE switch so it becomes the root bridge. To make the CORE the root bridge
we need to increase the DSW1s priority value, the best value should be 61440 because it is the
biggest value allowed to assign and it will surely greater than of CORE switch. (You can use
another value but make sure it is greater than the CORE priority value by checking if the CORE
becomes the root bridge or not; and that value must be in increments of 4096).
(Notice that the terms bridge and switch are used interchangeably when discussing STP)
DSW1#configure terminal
DSW1(config)#spanning-tree vlan 20 priority 61440
2) Traffic for VLAN 30 should be forwarding over the gig 1/0/6 trunk port between DSW1
and DSW2. However VLAN 30 is currently using gig 1/0/5
DSW1 is the root bridge for VLAN 30 (you can re-check with the show spanning-tree command
as above), so all the ports are in forwarding state for VLAN 30. But the question said that VLAN
30 is currently using Gig1/0/5 so we can guess that port Gig1/0/6 on DSW2 is in blocking state
(for VLAN 30 only), therefore all traffic for VLAN 30 will go through port Gig1/0/5.
The root bridge for VLAN 30, DSW1, originates the Bridge Protocol Data Units (BPDUs) and
switch DSW2 receives these BPDUS on both Gig1/0/5 and Gig1/0/6 ports. It compares the two
BPDUs received, both have the same bridge-id so it checks the port cost, which depends on the
bandwidth of the link. In this case both have the same bandwidth so it continues to check the
senders port id (includes port priority and the port number of the sending interface). The lower
port-id value will be preferred so the interface which received this port-id will be the root and the
other interface (higher port-id value) will be blocked.
In this case port Gig1/0/6 of DSW2 received a Priority Number of 128.6 (means that port priority
is 128 and port number is 6) and it is greater than the value received on port Gig1/0/5 (with a
Priority Number of 128.5) so port Gig1/0/6 will be blocked. You can check again with the show
spanning-tree command. Below is the output (notice this command is issued on DSW1 this is
the value DSW2 received and used to compare).
Therefore, all we need to do is to change the priority of port Gig1/0/6 to a lower value so the
neighboring port will be in forwarding state. Notice that we only need to change this value for
VLAN 30, not for all VLANs.
DSW1(config)#interface g1/0/6
DSW1(config-if)#spanning-tree vlan 30 port-priority 64
DSW1(config-if)#exit
3) Traffic for VLAN 40 should be forwarding over the gig 1/0/5 trunk port between DSW1
and DSW2. However VLAN 40 is currently using gig 1/0/6
Next we need to make sure traffic for VLAN 40 should be forwarding over Gig1/0/5 ports. It is a
similar job, right? But wait, we are not allowed to make any configurations on DSW2, how can
we change its port-priority for VLAN 40? There is another solution for this
Besides port-priority parameter, there is another value we can change: the Cost value (or Root
Path Cost). Although it depends on the bandwidth of the link but a network administrator can
change the cost of a spanning tree, if necessary, by altering the configuration parameter in such a
way as to affect the choice of the root of the spanning tree.
Notice that the Root Path Cost is the cost calculated by adding the cost in the received hello to
the cost of the interface the hello BPDU was received. Therefore if you change the cost on an
interface of DSW1 then only DSW1 will learn the change.
By default, the cost of a 100Mbps link is 19 but we can change this value to make sure that
VLAN 40 will use interface Gig1/0/5.
DSW1(config)#interface g1/0/5
DSW1(config-if)#spanning-tree vlan 40 cost 1
DSW1(config-if)#end
You should re-check to see if everything was configured correctly:
DSW1#show spanning-tree
Save the configuration:
DSW1#copy running-config startup-config
(Notice: Many reports said the copy running-config startup-config didnt work but they still got
the full mark)
Remember these facts about Spanning-tree:
Path Selection:
1) Prefer the neighbor advertising the lowest root ID
2) Prefer the neighbor advertising the lowest cost to root
3) Prefer the neighbor with the lowest bridge ID
4) Prefer the lowest sender port ID
Spanning-tree cost:
VTP Lab
April 16th, 2012 in LabSim Go to comments
Question:
The headquarter offices for a book retailer are enhancing their wiring closets with Layer3
switches. The new distribution-layer switch has been installed and a new access-layer switch
cabled to it. Your task is to configure VTP to share VLAN information from the distributionlayer switch to the access-layer devices. Then, it is necessary to configure interVLAN routing on
the distribution layer switch to route traffic between the different VLANs that are configured on
the access-layer switches; however, it is not necessary for you to make the specific VLAN port
assignments on the access-layer switches. Also, because VLAN database mode is being
deprecated by Cisco, all VLAN and VTP configurations are to be completed in the global
configuration mode. Please reference the following table for the VTP and VLAN information to
be configured:
Requirements:
VTP Domain name cisco
VLAN Ids
20
21
IP Addresses
172.16.71.1/24 172.16.132.1/24
1) Configure the VTP information with the distribution layer switch as the VTP server:
DLSwitch#configure terminal
DLSwitch(config)#vtp mode server
DLSwitch(config)#vtp domain cisco (use cisco, not CISCO because it is case sensitive)
(Requirement 2 will be solved later)
3) Configure VLANs on the distribution layer switch
To create VLANs on a switch, use the vlan vlanID# command:
DLSwitch(config)#vlan 20
DLSwitch(config)#vlan 21
Configure Ip addresses for Vlans:
DLSwitch(config)#interface vlan 20
DLSwitch(if-config)#ip address 172.16.71.1 255.255.255.0
DLSwitch(if-config)#no shutdown
DLSwitch(if-config)#interface vlan 21
DLSwitch(if-config)#ip address 172.16.132.1 255.255.255.0
DLSwitch(if-config)#no shutdown
DLSwitch(if-config)#exit
4) Configure inter-VLAN routing on the distribution layer switch
DLSwitch(config)#ip routing
DLSwitch(config)#exit
DLSwitch#copy running-config startup-config
2) Configure the VTP information with the access layer switch as a VTP client
ALSwitch#configure terminal
ALSwitch(config)#vtp mode client
Requirements:
You will configure FastEthernet ports 0/12 through 0/24 for users who belong to VLAN 20.
Also, all VLAN and VTP configurations are to be completed in global configuration mode as
VLAN database mode is being deprecated by Cisco. You are required to accomplish the
following tasks:
1. Ensure the switch does not participate in VTP but forwards VTP advertisements received on
trunk ports.
2. Ensure all non-trunking interfaces (Fa0/1 to Fa0/24) transition immediately to the forwarding
state of Spanning-Tree.
3. Ensure all FastEthernet interfaces are in a permanent non-trunking mode.
4. Place FastEthernet interfaces 0/12 through 0/24 in VLAN 20.
Answer and Explanation:
Switch>enable
Switch#configure terminal
Switch(config)#interface range fa0/1 24
Switch(config-if-range)#switchport mode access (Make all FasEthernet interfaces into access
mode)
Switch(config-if-range)#spanning-tree portfast (Enables the PortFast on interface)
Next, we need to assign FastEthernet ports 0/12 through 0/24 to VLAN 20.
By default, all ports on the switch are in VLAN 1. To change the VLAN associated with a port,
you need to go to each interface (or a range of interfaces) and tell it which VLAN to be a part of.
Switch(config-if-range)#interface range fa0/12 24
Switch(config-if-range)#switchport access vlan 20 (Make these ports members of vlan 20)
Switch(config-if-range)#exit
Next we need to make this switch in transparent mode. In this mode, switch doesnt participate in
the VTP domain, but it still forwards VTP advertisements through any configured trunk links.
Switch(config)#vtp mode transparent
Switch(config)#exit
Switch#copy running-config startup-config
(Notice: Many reports said the copy running-config startup-config didnt work but they still got
the full mark)