Hi Guys,
Got my magic number in 2nd attempt, First attempt I got H2+ but unfortunately could not make it ( Pass+Pass+Pass= Fail).
I would like to thank you everyone in spoto group for your help and support and I would like to extend my special thanks to Mr Lambert and his whole team for continuous support.
I would like to dedicate my CCIE to Mr Lambert :J you’re the great.
In short I just follow spoto sol for H3, 100 % same like spoto the questions wording everygthing, so don’t need to worry about.
TS1 ( completed: 40 min)
Q1. Sw2---> int valn 100-----wrong IP address
Q2. R12à int s4/0----peer default was missing
R17à int s4/0---ppp ipcp route-default was missing
Q3. R22à int e2/0----wrong mask
R3à area range cmd need to remove
Q4. R13à prefix-list configured blocking 145.14.14.14 network, just make permit
Q5. R5à need to active Ipv4 neighbor with 123.4.4.4
R21à wrong prefix-list , need to add 194.1.0.0/16 le 32
Q6. R25à need to create IPv6 nei with R22
R22à need to create Route-map ( ipv6 next-hop) , advertise the network b/w R22 to R25, IPV6 acl need to permit tcp any any
Q7. R15à acl only per 0.0.0.0 so need to per 0.0.0.0/0 le 32, IP nhrp multicast was missing
R18à shortcut missing + wrong nhrp Map
R19à need to per esp any any
R20à passive-interface e1/0—( PC connected int)
Q8. R7àNeed to create nei 125.45.67.21 , nei 123.45.67.21 default –orig,
Ø Static route need to correct
Ø Int e0/0.123 , ip nat inside
R3à nei 125.45.67.22 ,
Ø Wrong vrf import/export ( be very careful here , check the rd number and import/export)
Ø Advertise net 125.45.67.20 mask 255.255.255.252
Q9. R7à wrong Ospf network advertise
Q10. R23à wrong acl
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Diag: H3++---------------( 5min)
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
CFG- H3 ( I did whole Lab 2hrs except DMVPN (R14/51/60)
First thing I would like to say, Cfg is 100% same as spoto , I will share only the small tips and tricks.
In section 1, Sw300/301--- need to check show run | s spanning
"no spanning-tree mst simulate pvst global"
Just remove NO and your good to go.
Ø Carefully check Layer 2 diagram for Ether channel, it was very clear from the diag.
Ø Sw301à e0/2 ( trunk port ) need to shut/ unshut twice at least
Ø Sw300/301à passive-int vlan 2000/2001 need to do
Section 2::>
Sw100/101 à int loo1 need to advertise in OSPF
è Prefix-suppression on all the devices in DC
DC1 >>> BGP need to configure , EBGP is pre-configured on all the devices, just need to add aggregate-address and advertise loopback.
>> Create ip prefix-list FILTER ( same spoto) on R10/11/20/21/14/15 ) , I did not apply prefix-list on R15, just created .
>> R100>> ospf 10 was pre-configured, I removed and config ospf 2 because its ospf 2 area 0 on the diagram. Also need to shutdown loo1 with IP . 10.4.42.42
>> R14 I applied , nei 10.1.13.13 route-map LOW-LP out , but there was no such output to match.
>> Multicast, I followed 100 % spoto sol , its worked both for me.
Section 3:J
Ø R3/4/5/6 , rd need to config ospf was pre-configured, ebgp need to config
Ø No bgp default ipv4-uni was pre-configured and I only made vpnv4 neighor not IPV4.
Shit thing here DMVPN:J)
Very big BUG guys dnt loss hope, do your best in this part, I spent more then 2 hrs on this part, DMVPN was working the issue is with CRYPTO , most of the things pre-configured shortcut/redist and on spokes
Crypto keyring was missing that’s it.
I did the same crypto configuration again and again more then 15 times, in the middle its come up and the went down, I restart three time ( R14/51/60), finally its works when the time was 3:53 pm , just 20 min before the LAB time END.
Tips : Before configuring crypto keyring on Spokes , remove the pre-configured crypto key on R14, then do it. My friend was also with me same day , he also got H3 , he did like this and its worked. My friend also PASSED.
>> R24 need to configure static route
>>R71 NAT acl was pre-configured , you only need to do is , just config crypoto ACL ( make it simple just copy from R24 and edit it.) also be very careful the crypto map name/acl name are different not like spoto sol.
Again thanks a lot, you can connect my any time, its my pleasure to HELP you guys. I hope you all will get you Magic Number very soon. My spoto account is almost finished , any time Lambert can kick me out from the Group. My next journey will be CCIE – Security , if anyone of you join me , most weillcome.
Many thanks,
联系客服
