CCNP2 Case tudy (Cisco Acedamy 2006)

[dhphuc]

Cac ban tham khao.

[dhphuc]

Day la dap an gan nhu day du. Than.

R1
================
There is 1 mistakes in this configuration.
================

sh run
Building configuration...

Current configuration : 3090 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!card type command needed for slot 1
enable password cisco
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default local
!
aaa session-id common
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
!
!
!
!
isdn switch-type primary-ni
!
chat-script R165k ABORT ERROR "" "AT Z" OK "ATDT \T" TIMEOUT 30 CONNECT \c
!
!
!
!
!
!
!
!
!
!
!
!
username R3 password 0 cisco
username USERS password 0 cisco
username R2 password 0 cisco
username R1 password 0 cisco

!
class-map match-all CBWFQ
match access-group 101
!
!
policy-map CBWFQ-TS
class CBWFQ
bandwidth 16
!
!
!
crypto isakmp policy 100
authentication pre-share
crypto isakmp key 6 CISCO123 address 10.1.1.22
!
!
crypto ipsec transform-set MYSET esp-des
!
crypto map MYMAP 110 ipsec-isakmp
set peer 10.1.1.22
set transform-set MYSET
match address 120
!
!
!
!
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
shutdown
duplex auto
speed auto
!
interface Serial0/0
no ip address
encapsulation frame-relay
no fair-queue
frame-relay traffic-shaping
frame-relay lmi-type ansi


interface Serial0/0.102 point-to-point
ip address 10.1.1.21 255.255.255.252
frame-relay class R2
frame-relay interface-dlci 102
crypto map MYMAP


interface Serial0/0:23
no ip address
encapsulation ppp
dialer pool-member 1
dialer load-threshold 1 outbound
dialer idle-timeout 60
ppp authentication chap

!!!!!!!!!!!!!!!!!!!!!!
! <+++> Fair queue is missing ???
!!!!!!!!!!!!!!!!!!!!!!
!

interface BRI0/0
no ip address
encapsulation hdlc
shutdown
isdn switch-type basic-ni
isdn point-to-point-setup
!
interface Serial0/1
no ip address
shutdown
!
interface Async65
ip address 10.1.1.17 255.255.255.252
encapsulation ppp
dialer in-band
dialer idle-timeout 300
dialer wait-for-carrier-time 60
dialer map ip 10.1.1.8 name R3 class dialback modem-script R156k broadcast 5556001
dialer hold-queue 50
dialer callback-secure
dialer-group 1
async mode dedicated
ppp callback accept
ppp authentication chap
ppp authentication chap callin


!
interface Dialer0
ip address 10.1.1.1 255.255.255.248
encapsulation ppp
dialer pool 1
dialer remote-name R2
dialer string 5551000
dialer watch-disable 15
dialer watch-group 2
dialer-group 2
ppp authentication chap
!
router eigrp 100
network 10.1.1.20 0.0.0.3
network 10.0.0.0
network 192.168.1.0
auto-summary
!
ip route 192.168.3.0 255.255.255.0 10.1.1.18

!!!!!!!!!!!!!!!!!!!!!!
! ip default-network missing ???
!!!!!!!!!!!!!!!!!!!!!!

!
!
ip http server
no ip http secure-server
!
!
map-class dialer dialback
dialer callback-server username
!
map-class frame-relay R2
frame-relay cir 16000
frame-relay bc 64000
frame-relay be 64000
frame-relay adaptive-shaping becn
access-list 101 permit tcp any any eq telnet
access-list 102 deny eigrp any any
access-list 102 permit ip any any
access-list 120 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
dialer watch-list 2 ip 10.1.1.20 255.255.255.252
dialer-list 1 protocol ip permit
dialer-list 2 protocol ip list 102
!
!
!
control-plane
!
!
controller t1 1/0
framing esf
linecode b8zs
pri-group timeslots 1-24
!
!
!
!
!
!
!
line con 0
line aux 0
password cisco
modem InOut
modem autoconfigure discovery
transport input all
stopbits 1
speed 115200
flowcontrol hardware
line vty 0 4
password cisco
!
!
end

R1#

[dhphuc]

R2:
===========================
There are two mistakes in this configuration.
===========================


sh run
Building configuration...

Current configuration : 2816 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default local
!
aaa session-id common
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
!
!
!
!
isdn switch-type basic-ni
!
!
!
!
!
!
!
!
!
!
!
!
!
username R1 password 0 cisco
username USERS password 0 cisco
!
!
class-map match-all CBWFQ
match access-group 101
!
!
policy-map CBWFQ-TS
class CBWFQ
bandwidth 16
!
!
!
crypto isakmp policy 100
authentication pre-share
crypto isakmp key 6 CISCO123 address 10.1.1.21
!
!
crypto ipsec transform-set MYSET esp-des
!
crypto map MYMAP 110 ipsec-isakmp
set peer 10.1.1.21
set transform-set MYSET
match address 120
!
!
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
no ip address
encapsulation frame-relay
no fair-queue
frame-relay traffic-shaping
frame-relay lmi-type ansi


!
interface Serial0/0.201 point-to-point
ip address 10.1.1.22 255.255.255.252
frame-relay class R1
frame-relay interface-dlci 201
crypto map MYMAP
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
interface BRI1/0
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type basic-ni
isdn point-to-point-setup
isdn spid1 51055510000001 5551000
isdn spid2 51055510010001 5551001
ppp authentication chap
!
interface BRI1/1
no ip address
encapsulation hdlc
shutdown
isdn switch-type basic-ni
isdn point-to-point-setup
!
interface BRI1/2
no ip address
encapsulation hdlc
shutdown
isdn switch-type basic-ni
isdn point-to-point-setup
!
interface BRI1/3
no ip address
encapsulation hdlc
shutdown
isdn switch-type basic-ni
isdn point-to-point-setup
!
interface Dialer0
ip address 10.1.1.2 255.255.255.248
encapsulation ppp
dialer pool 1
dialer remote-name R1
dialer string 5555000
dialer load-threshold 1 either
dialer watch-disable 15
dialer watch-group 2
dialer-group 2
ppp authentication chap
ppp multilink
!
router eigrp 100
network 10.0.0.0
network 192.168.2.0
auto-summary
!
!
!
ip http server
no ip http secure-server
!
!
map-class frame-relay R1
frame-relay cir 16000
frame-relay bc 64000
frame-relay be 64000


!!!!!!!!!!!!!!!!!!!!!!
! <+++> frame-relay adaptive-shaping becn
! <+++> service-policy output xxxxxx
!!!!!!!!!!!!!!!!!!!!!!



access-list 101 permit tcp any any eq telnet
access-list 102 deny eigrp any any
access-list 102 permit ip any any
access-list 120 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
dialer watch-list 2 ip 10.1.1.20 255.255.255.252
dialer-list 2 protocol ip list 102
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
!
!
end

R2#

[dhphuc]

R3
================================
There is no mistake in this configuration.
================================

sh run
Building configuration...

Current configuration : 1443 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default local
!
aaa session-id common
no network-clock-participate slot 1
network-clock-participate wic 0
ip cef
!
!
!
!
!
!
!
!
chat-script R156k ABORT ERROR "" "AT Z" OK "ATDT \T" TIMEOUT 30 CONNECT \C
!
!
!
!
!
!
!
!
!
!
!
!
username R1 password 0 cisco
username R2 password 0 cisco
username R3 password 0 cisco
username USER password 0 cisco
!

!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.3.1 255.255.255.0
no shutdown
duplex auto
speed auto
!
interface BRI0/0
no ip address
encapsulation hdlc
shutdown
!
interface Serial0/0
physical-layer async
ip address 10.1.1.18 255.255.255.252
encapsulation ppp
dialer in-band
dialer idle-timeout 300
dialer wait-for-carrier-time 60
dialer map ip 10.1.1.17 name R1 modem-script R156k 5556001
dialer hold-queue 50
dialer-group 1
async mode dedicated
ppp callback request
ppp authentication chap
!
interface Serial0/1
no ip address
shutdown
!
ip route 0.0.0.0 0.0.0.0 10.1.1.17
!
!
ip http server
no ip http secure-server
!
dialer-list 1 protocol ip permit
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line 1
modem InOut
transport input all
stopbits 1
speed 115200
flowcontrol hardware
line aux 0

??? no password ???


line vty 0 4
password cisco

!
end

R3#