New TS2 Variation solution
Hi IE Forum,
Based on the EVE-NG I shared in this link below:
**Hidden Content: Thanks to see the content**
I would like to start a topic and discussing the solution. I will keep updating the solution in the first post.
1- TS2 Variation Set 1 - Thank Robin
**Hidden Content: Thanks to see the content**
Thanks,
NEXUS
Re: New TS2 Variation solution
Thank you Nexus, I just moved from Certcollection to this forum, I hope that we can find the TS2 variation solution soon. now in Certcollection no one want to discuss about the new TS2.
Re: New TS2 Variation solution
Thank Nexus for your help.
Re: New TS2 Variation solution
This is my solution for TS2 variation set 1, please check it
Ticket 1:
Switch 400 and 401
vlan access-map ATTACK
Ticket 2:
R14
router bgp 65001
neighbor DC1 next-hop-self
cle ip bgp * soft
Ticket 3:
SW 101
interface Ethernet1/2
no ip ospf cost 1
R12, R13
access-list 1 permit 10.1.1.0 0.0.254.255
access-list 2 permit 10.1.0.0 0.0.254.255
cle ip bgp * soft
Ticket 4:
R21
route-map LP permit 10
match ip address prefix-list LP
set local-preference 999
cle ip bgp * soft
Ticket 5:
R1
int l0
ip os 10000 are 0
R3
int e0/1
mpl ip
Ticket 6:
R51, R60
int tun 0
ip os network point-to-multipoint
R14
int tun 0
ip os network point-to-multipoint
no shut
Ticket 7:
R15
router bgp 65001
address-family ipv6
network 2001:CC:1E:8BAD:154::/104
Ticket 8:
SW 300, SW301
interface Vlan2000
ip dhcp relay information trusted
Ticket 9:
R70
int tun 0
tunnel key 10000
shut
no shut
Ticket 10:
R25
no ip nat inside source static tcp 201.99.25.2 23 10.2.200.1 23 extendable
ip nat inside source static tcp 10.2.200.1 23 201.99.25.2 23 extendable
ip nat outside so static 201.99.70.2 200.8.8.8 add-route
Re: New TS2 Variation solution
Quote:
Originally Posted by
Robin
This is my solution for TS2 variation set 1, please check it
Ticket 1:
Switch 400 and 401
vlan access-map ATTACK
Ticket 2:
R14
router bgp 65001
neighbor DC1 next-hop-self
cle ip bgp * soft
Ticket 3:
SW 101
interface Ethernet1/2
no ip ospf cost 1
R12, R13
access-list 1 permit 10.1.1.0 0.0.254.255
access-list 2 permit 10.1.0.0 0.0.254.255
cle ip bgp * soft
Ticket 4:
R21
route-map LP permit 10
match ip address prefix-list LP
set local-preference 999
cle ip bgp * soft
Ticket 5:
R1
int l0
ip os 10000 are 0
R3
int e0/1
mpl ip
Ticket 6:
R51, R60
int tun 0
ip os network point-to-multipoint
R14
int tun 0
ip os network point-to-multipoint
no shut
Ticket 7:
R15
router bgp 65001
address-family ipv6
network 2001:CC:1E:8BAD:154::/104
Ticket 8:
SW 300, SW301
interface Vlan2000
ip dhcp relay information trusted
Ticket 9:
R70
int tun 0
tunnel key 10000
shut
no shut
Ticket 10:
R25
no ip nat inside source static tcp 201.99.25.2 23 10.2.200.1 23 extendable
ip nat inside source static tcp 10.2.200.1 23 201.99.25.2 23 extendable
ip nat outside so static 201.99.70.2 200.8.8.8 add-route
I tested your solution, and it worked, but in EVE-NG we need to modify MAC address for router to get the IP address from DHCP.
Re: New TS2 Variation solution
Solution for TS2 Variation set 2 (5 tickets)
Ticket-1- [Layer2]
=============
User4 can ping and Trace on [10.4.40.40]
1-Fix DHCP pool on R40&R41 for User4
2-Fix EC between SW410,SW400,SW401
3-Fix ACL 100 on SW400&SW401
SW400&SW401::
-----------------
ip access-list ex 100
no 20 permit udp 10.4.0.0 0.0.255.255 host 224.0.0.102 eq 1985
20 deny udp 10.4.0.0 0.0.255.255 host 224.0.0.102 eq 1985
==============================
Ticket-2- [BGP1]
=============
Server1 can Trace on [8.8.8.8] through R15 not 14 with 3 Hops not 2
1-Fix DHCP pool on SW111 for Server1
2-ON R14 increase the ospf cost to 100 and back to default ospf cost on SW111 as the following.
R14:
------
int ran e0/1 -2
ip ospf cost 100
SW111:
--------
int e1/2
no ip ospf cost
==============================
Ticket-3- [BGP2]
=============
SW110 trace on 10.2.200.254 in DC2 and must go through R12-R22[EVEN]
SW110 trace on 10.2.201.254 in DC2 and must go through R13-R23[ODD]
SW210 trace on 10.1.200.254 in DC2 and must go through R22-R12[EVEN]
SW210 trace on 10.1.201.254 in DC2 and must go through R23-R13[ODD]
1-Fix ACL on R12&R13&R22
R12&R13::
----------
access-list 1 permit 10.1.1.0 0.0.254.255
access-list 2 permit 10.1.0.0 0.0.254.255
R22::
----------
access-list 1 permit 10.2.1.0 0.0.254.255
access-list 2 permit 10.2.0.0 0.0.254.255
2-On R23 change the PID of int e0/2 from 65001 to 65002
R23::
------
int e0/2
ip ospf 65002 area 0
==============================
Ticket-4- [BGP3]
=============
Server2 can Trace on [10.4.100.1] through R21 not R20
1-Fix DHCP pool on SW210 for Server2
2-We must back to default the ip ospf cost under SW201of int e0/0
SW201:
---------
int e0/0
no ip ospf cost
==============================
Ticket-5- [DMVPN]
=============
On R60 must show the routes the below:
#show ip route ospf
O 10.100.0.1/32 [110/1000] via 10.100.0.1, 00:00:28, Tunnel0
O 10.100.0.51/32 [110/2000] via 10.100.0.1, 00:00:28, Tunnel0
Under int Tunnel0 of R60 must change the ospf area from 1 to 0
R60:
-----
int tunn 0
ip ospf 65006 a 0
==============================
Re: New TS2 Variation solution
thank for sharing, Please share the solution for other set also.
Re: New TS2 Variation solution
Re: New TS2 Variation solution
Quote:
Originally Posted by
ccierscisco
this is old variation
That is not old variation, many guys reported to get this version.
Re: New TS2 Variation solution
Quote:
Originally Posted by
Nexus
That is not old variation, many guys reported to get this version.
Please update the solution for TS2 new variation.