mumabo
05-08-2018, 04:50 PM
Hi,
I just got my number. This is my feedback.
I got TS1/H3+/H2+.
TS1
you have number of fault before you starting ticket and this is very helpful. (1-2 issues per ticket).
some ticket is different that our WB tickets, but very easy.
1. Server2 receive 172.16.200.2 instead of 172.16.200.200
2. R12 use ppp dhcp pool instead of ip, and r17 does not have ppp ipcp route default command
3. r22 and r21 does not have ospf adjajency.
4. All eigrp routers have incorect K values. i Change K values on all router in eigrp 145
5 same as our wbs
6 r25 annouce only /128 address of e0/0 interface to r22 ( change network statement in r25 address-family ipv6 to announcing all network from e0/0 interface, not only /128)
7 same as our wbs
8. not corrent nat on R7 ( ip nat without inside keyword) and no bgp peering between r3 and r7 in 124 vlan.
9. not equal ipsec transform-sets
10. NAS cann't receive ip address ( because of secondary ip of r23)
DIAG H3+
1. used bootp and my sequence number was 114 ( source ip 0.0.0.0 destination 255.255.255.255, 82 option is set, but no relay agent address).
When you you need to find a place on topology you can use filter CDP ( 2 packet one from SW3, other from SW1)
2. TCL script
http.request.method==GET to find a victim, then you can follow that tcp stream to find text to the tcl script. Within the tcl script you can find command that can immediataly interrupt router.
in my exam i see
":)" you succesfully paid 100 btc, thanks
":(" you did not pay 100 btc at time, hope you have backup ( and then cli commands, erase nvram, change register and reboot)
i choose ":(")
when you know who is a victim it is very easy to find answers on another questions.
CFG H2+
main terms
1. in my case, I got H2+ CFG and section 1.1 for example did not require "snmp-server enable traps syslog"
2. There was no ospf preconfiguration on DC (AS 65002) devices and Cisco requested not to use the "network" command anywhere in the ospf configuration in the DC. ( core network and other sites jamesons sites have ospf config)
3. Watch the vrf name: it was Corp instead of CORP in the Branch Network.
4. vrfs did not have RD preconfigured.
5. Headquarters and Main office had ospf and bgp pre-configured but needed to be tweaked to get the desired output requested by Cisco. Same with Jacobs Office network
6. Jacobs Core Network PE routers didn't have vrf configured at all.
7. Jacob CE routers (R55/56) had a bare BGP configuration. no prefix-list , no route-map for redistribution and redistribution between the EIGRP and BGP completely not pre-configured. had to configure all of that.
8. R57 initialy have redistribution from eigrp to bgp 65005, i delete this and do as our wb.
9. Jamesons CE routers needed to allow AS in and not PE routers overriding the AS.
10. section 4.1 actually required the use of only "permit" in solution
11. No need to raise Local preference on R51. ( traces going accross r50)
12. R58 and r52 have wrong ip addressing in their common network.
13. no need to change summary 0.0.0.0/0 distance on R58( already configured)
14. RT are described very clearly in the task.
I just got my number. This is my feedback.
I got TS1/H3+/H2+.
TS1
you have number of fault before you starting ticket and this is very helpful. (1-2 issues per ticket).
some ticket is different that our WB tickets, but very easy.
1. Server2 receive 172.16.200.2 instead of 172.16.200.200
2. R12 use ppp dhcp pool instead of ip, and r17 does not have ppp ipcp route default command
3. r22 and r21 does not have ospf adjajency.
4. All eigrp routers have incorect K values. i Change K values on all router in eigrp 145
5 same as our wbs
6 r25 annouce only /128 address of e0/0 interface to r22 ( change network statement in r25 address-family ipv6 to announcing all network from e0/0 interface, not only /128)
7 same as our wbs
8. not corrent nat on R7 ( ip nat without inside keyword) and no bgp peering between r3 and r7 in 124 vlan.
9. not equal ipsec transform-sets
10. NAS cann't receive ip address ( because of secondary ip of r23)
DIAG H3+
1. used bootp and my sequence number was 114 ( source ip 0.0.0.0 destination 255.255.255.255, 82 option is set, but no relay agent address).
When you you need to find a place on topology you can use filter CDP ( 2 packet one from SW3, other from SW1)
2. TCL script
http.request.method==GET to find a victim, then you can follow that tcp stream to find text to the tcl script. Within the tcl script you can find command that can immediataly interrupt router.
in my exam i see
":)" you succesfully paid 100 btc, thanks
":(" you did not pay 100 btc at time, hope you have backup ( and then cli commands, erase nvram, change register and reboot)
i choose ":(")
when you know who is a victim it is very easy to find answers on another questions.
CFG H2+
main terms
1. in my case, I got H2+ CFG and section 1.1 for example did not require "snmp-server enable traps syslog"
2. There was no ospf preconfiguration on DC (AS 65002) devices and Cisco requested not to use the "network" command anywhere in the ospf configuration in the DC. ( core network and other sites jamesons sites have ospf config)
3. Watch the vrf name: it was Corp instead of CORP in the Branch Network.
4. vrfs did not have RD preconfigured.
5. Headquarters and Main office had ospf and bgp pre-configured but needed to be tweaked to get the desired output requested by Cisco. Same with Jacobs Office network
6. Jacobs Core Network PE routers didn't have vrf configured at all.
7. Jacob CE routers (R55/56) had a bare BGP configuration. no prefix-list , no route-map for redistribution and redistribution between the EIGRP and BGP completely not pre-configured. had to configure all of that.
8. R57 initialy have redistribution from eigrp to bgp 65005, i delete this and do as our wb.
9. Jamesons CE routers needed to allow AS in and not PE routers overriding the AS.
10. section 4.1 actually required the use of only "permit" in solution
11. No need to raise Local preference on R51. ( traces going accross r50)
12. R58 and r52 have wrong ip addressing in their common network.
13. no need to change summary 0.0.0.0/0 distance on R58( already configured)
14. RT are described very clearly in the task.