CCIE R&S v5 Exam Review on 02 July 2015
I’m happy to say that I recently passed the CCIE lab. Here is what I remember. Enjoy!
1. VLAN 12 was not created on SW2.
2. Don’t remember but it was a simple fix.
3. On one of the originating routers, the interface was configured with ospf prio 1, changed it to 10.
4. Delay was wrong on R13. Had to do metric weights 0 1 1 1 1 1 under the EIGRP process as well to obtain identical outputs.
5. On R12 I added the maximum-paths 2.
6. The BGP next-hop was wrong on R22. Changed it to the correct one under the route-map.
7. Not 100% sure that I solved this one. Took me along time because I did not catch that the ip nhrp map [tunnel-ip] [NBMA-ip] was wrong on R18 and R19, also the ip nhrp map multicast was wrong (it had the tunnel-ip) after like 30 minutes. Its so easy to miss even though I practicly never miss this configuration otherwise. R19 had a summary-address configured on one of its ethernet interfaces faces downstream. I did get 100% samt outputs and I also had to configure the dns host statements on R15 the get it 100% identical.
8. The VRF import/export values was not correct. NAT configuration on R7 and R8, default-originate missing under BGP config as well. MPLS was broken because of the R4 and R6 having a better OSPF cost on one of their interfaces, changed the cost.
9. R7 had a different group in the isakmp policy.
10. Very easy this one. Just something with the NAT configuration.
1. The first one was sw3, interface to the host was shutdown because of port-security. Second answer was host1, check the mac-address.
2. The DMVPN hub clearly had redistribute connected without a route-map denying the NBMA-interface.
3. Oh, this one was a mess. Not sure if I got this one. I’ll not even attempt to explain it. In short it was about uRPF and assymetric routing. Just make sure you have atleast 20 minutes to take this one step by step. Do some drawing and verify the outputs one by one.
I had a version with VRF on the DMVPN-Routers. The OSPF/MPLS-network had R1 configured with max-metric router-lsa and also all the routers had mpls ip no propagate-ttl configured. One the Sydnet EIGRP-network eigrp was configured in Named mode with sha1-authentication. I also configured the authentication on the DMVPN-spokes. Multicast was very straighforward, just enable ip pim sparse-mode in the Sydney/APAC and configure ip pim rp/bsr-candidate lo0 on R15. There was no netflow config. Had to configure shell processing full on order to obtain one output. In the IPv6 section I had to configure OSPFv3 (not the ipv6 router OSPF). There was IPv6 general prefix configured, just get the IPv6 addresses with show ipv6 int bri.
Thats all. Just a generalt advice that I really think helped me with the speed (as this is very important). Maybe it works for you, maybe not 😎 . Try not to get the configuration unique in the notepad window if you dont have to. I for example configured the network statements with network 126.96.36.199 0.255.255.255 and also skipped router-id’s if the question did not ask about it – it is so easy to paste the same config on multiple routers, and if the same router-id is on multiple routers then there is an interesting problem introduced by one selfs over-configuration. I also configured alot of the stuff att the same time, for example OSPF and LDP (auto-config under the process). Also configuring the IPv4 Unicast and VPNv4 Unicast iBGP peerings inside as 12345 can save alot of time.