Professional Documents
Culture Documents
Skills Assessment
Base Topology
2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.
Page 1 of 13
CCNPv7 TSHOOT
Skills Assessment
Overlay Topology
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 2 of 13
CCNPv7 TSHOOT
Skills Assessment
Interface
To Device
Interface
ALS1
F0/1
DLS1
F0/1
ALS1
F0/2
DLS1
F0/2
ALS1
F0/3
DLS2
F0/1
ALS1
F0/4
DLS2
F0/2
ALS1
F0/18
PC-B
NIC
100Base-T
ALS1
F0/18
R2
G0/0
100Base-T
DLS1
F0/3
DLS2
F0/3
DLS1
F0/4
DLS2
F0/4
DLS1
F0/5
R1
G0/1
DLS1
F0/6
SRV1
NIC
100Base-T
DLS2
F0/5
R3
G0/1
R1
S0/0/0.1
R2
S0/0/0.1
R1
S0/0/0.2
R2
S0/0/0.2
R2
S0/0/1.1
R3
S0/0/1.1
R2
S0/0/1.2
R3
S0/0/1.2
R3
G0/0
PC-C
NIC
100Base-T
Name
Description
VLAN Members
99
MANAGEMENT
Management VLAN
100
SERVERS
Internal Servers
110
GUEST
Guest VLAN
120
OFFICE
Office VLAN
200
VOICE
Voice VLAN
300
O-PEER
666
NATIVE
999
PARKING_LOT
Subnet Table
Description
IPv4 Subnet
IPv6 Prefix
Devices/Descriptions
10.1.99.0/24
2001:DB8:CAFE:99::/64
VLANs
MANAGEMENT VLAN 99
SERVERS VLAN 100
10.1.100.0/24
2001:DB8:CAFE:100::/64
SRV1
10.1.110.0/24
2001:DB8:CAFE:110::/64
N/A
10.1.120.0/24
2001:DB8:CAFE:120::/64
PC-B
10.1.200.0/24
2001:DB8:CAFE:200::/64
10.1.30.0/24
2001:DB8:CAFE:300::/64
N/A
N/A
N/A
N/A
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 3 of 13
CCNPv7 TSHOOT
Skills Assessment
Description
IPv4 Subnet
IPv6 Prefix
Devices/Descriptions
DLS1-R1
10.1.2.0/30
2001:DB8:CAFE:20::/64
DLS2-R3
10.1.2.12/30
2001:DB8:CAFE:212::/64
209.165.200.224/30
2001:DB8:FEED:10::/126
209.165.200.228/30
2001:DB8:CAFE:6::/126
209.165.200.220/30
2001:DB8:FEED:14::/126
10.1.90.2/31
2001:DB8:CAFE:90::/126
ALS1-R2
10.1.120.0/64
2001:DB8:CAFE:120::/64
IP Address Table
Device Name
Interface
IPv4 Address/Prefix
IPv6 Address/Prefix
Additional Information
ALS1
VLAN 99
10.1.99.251/24
2001:DB8:CAFE:99::A1/64
SVI
ALS1
VLAN 110
10.1.110.251/24
2001:DB8:CAFE:110::A1/64
SVI
ALS1
VLAN 120
10.1.120.251/24
2001:DB8:CAFE:120::A1/64
SVI
ALS1
VLAN 200
10.1.200.251/24
2001:DB8:CAFE:200::A1/64
SVI
ALS1
VLAN 300
10.1.30.251/24
2001:DB8:CAFE:300::A1/64
SVI
DLS1
VLAN 99
10.1.99.252/24
2001:DB8:CAFE:99::D1/64
SVI
DLS1
VLAN 100
10.1.100.252/24
2001:DB8:CAFE:100::D1/64
SVI
DLS1
VLAN 110
10.1.110.252/24
2001:DB8:CAFE:110::D1/64
SVI
DLS1
VLAN 120
10.1.120.252/24
2001:DB8:CAFE:120::D1/64
SVI
DLS1
VLAN 200
10.1.200.252/24
2001:DB8:CAFE:200::D1/64
SVI
DLS1
VLAN 300
10.1.30.252/24
2001:DB8:CAFE:300::D1/64
SVI
DLS1
F0/5
10.1.2.1/30
2001:DB8:CAFE:20::D1/64
Routed Port to R1
DLS1
Loopback 0
10.1.211.1/32
2001:DB8:CAFE:2110::D1/128
Anchor
DLS1
Tunnel 0
N/A
FC00::D1/7
DLS2
VLAN 99
10.1.99.253/24
2001:DB8:CAFE:99::D2/64
SVI
DLS2
VLAN 100
10.1.100.253/24
2001:DB8:CAFE:100::D2/64
SVI
DLS2
VLAN 110
10.1.110.253/24
2001:DB8:CAFE:110::D2/64
SVI
DLS2
VLAN 120
10.1.120.253/24
2001:DB8:CAFE:120::D2/64
SVI
DLS2
VLAN 200
10.1.200.253/24
2001:DB8:CAFE:200::D2/64
SVI
DLS2
VLAN 300
10.1.30.253/24
2001:DB8:CAFE:300::D2/64
SVI
DLS2
F0/5
10.1.2.13/30
2001:DB8:CAFE:212::D2/64
Routed Port to R3
R1
G0/1
10.1.2.2/30
2001:DB8:CAFE:20::1/64
R1
S0/0/0.1
209.165.200.225/30
2001:DB8:FEED:10::1/126
R1
S0/0/0.2
209.165.200.229/30
2001:DB8:CAFE:6::1/126
R1
Loopback 0
192.168.1.1/32
2001:DB8:CAFE:201::1/128
iBGP Peer
R1
Tunnel 0
N/A
ABCD::1/16
R2
G0/0
DHCPv4 in range
10.1.120.6-10.1.120.250
SLAAC in
2001:DB8:CAFE:120::/64
R2
S0/0/0.1
209.165.200.226
2001:DB8:FEED:10::2/126
R2
S0/0/0.2
209.165.200.230/126
2001:DB8:CAFE:6::2/126
R2
S0/0/1.1
209.165.200.222/30
2001:DB8:FEED:14::2/126
R2
S0/0/1.2
10.1.90.2/31
2001:DB8:CAFE:90::2/126
R2
Loopback 0
2.2.2.2/32
2001:DB8:FEED:222::2/128
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
VRF VPN_A
Page 4 of 13
CCNPv7 TSHOOT
Skills Assessment
R2
Loopback 1
2.2.2.2/32
2001:DB8:FEED:222::2/128
VRF VPN_B
R2
Loopback 2
20.20.20.20/32
2001:DB8:CAFE:2020::2/128
R2
Loopback 3
22.22.22.22/8
2001:DB8:EFAC::2/48
Internet (Global)
R2
Loopback 4
22.22.22.22/8
2001:DB8:EFAC::2/48
R2
Loopback 5
22.22.22.22/8
2001:DB8:EFAC::2/48
R2
Tunnel 0
N/A
FC00:2/7
R3
G0/0
10.1.80.1/25
2001:DB8:CAFE:800::1/64
R3
G0/1
10.1.2.14/30
2001:DB8:CAFE:212::3/64
R3
S0/0/1.1
209.165.200.221/30
2001:DB8:FEED:14::3/126
R3
S0/0/1.2
10.1.90.3/31
2001:DB8:CAFE:90::3/126
R3
Loopback 0
192.168.3.1/32
2001:DB8:CAFE:203::1/128
iBGP Peer
R3
Loopback 1
2001:DB8:CAFE:801::1/64
R3
Tunnel 0
N/A
ABCD::3/16
SRV1
NIC
10.1.100.1/24
2001:DB8:CAFE:100::1/64
Static addresses
PC-B
NIC
In range
10.1.120.6-10.1.120.250
In
2001:DB8:CAFE:120:ABCD::/80
PC-C
NIC
In range
10.1.80.4-10.1.80.126
In
2001:DB8:CAFE:800:ABCD::/80
Devices
Target Server
All
SRV1
Syslog server
Configuration archive
All
SRV1
TFTP server
SNMPv2c traps
All
SRV1
SNMP Monitor
NTPv4
All
R2
NetFlow Top-Talkers
Local
Password security
Login authentication
Telnet disabled on all devices; SSH IPv6 access list on ALS1 vty ports 0-4
no ip proxy-arp
VLAN security
Unused ports placed in PARKING_LOT VLAN 999; only VLANs 99, 100, 110,
120, 200, 300 allowed on the trunks
VTPv3 security
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 5 of 13
CCNPv7 TSHOOT
Skills Assessment
Objectives
Part 1: Build the physical network topology.
Part 2: Load the functioning base device config file from flash to the running config for each device and test
network connectivity.
Part 3: Copy the Skills Assessment error file from the TFTP server into flash for each device.
Part 4: Erase the startup config and copy the Skills Assessment error file from flash to the running config for
each device.
Part 5: Troubleshoot the errors introduced.
Exam Overview
This Skills Assessment is the final practical exam for the course CCNPv7 TSHOOT. The exam is divided into
five parts, which must be completed sequentially. In Part 1, you build the physical network. In Part 2, you load
functioning config files on all devices and verify access to the TFTP server. In Part 3, you copy the error files
from the TFTP server to flash for the respective devices and in Part 4 you erase the base configs and load the
error configs. You troubleshoot and resolve the errors in Part 5. This exam combines the process of course
setup with the actual troubleshooting process.
In addition to correcting configurations and restoring basic connectivity, network protocols such as SSH and
NTP must also be verified.
Note: Refer to the Base Topology and Overlay Topology diagrams and accompanying tables at the beginning
of this document when building the network or troubleshooting issues. All necessary data is provided to
methodically troubleshoot the network issues.
This lab uses Cisco ISR G2 routers running Cisco IOS 15.4(3) images with IP Base and Security packages
enabled, and Cisco Catalyst 3560 and 2960 switches running Cisco IOS 15.0(2) IP Services and LAN Base
images, respectively. The 3560 and 2960 switches are configured with the SDM templates dual-ipv4-andipv6 routing and lanbase-routing, respectively. Depending on the router or switch model and Cisco IOS
Software version, the commands available and output produced might vary from what is shown in this lab.
Required Resources
2 multilayer switches and 1 access layer switch (Cisco IOS Release 15.0(2) or comparable with Fast
Ethernet interfaces)
SRV1 (PC with static IP address): Windows 7 with RADIUS, TFTP, and syslog servers, plus an SSH
client, SNMP monitor, and WireShark software
PC-B (DHCP client): Windows 7 with SSH client and WireShark software
PC-C (DHCP client): Windows 7 with SSH client and WireShark software
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 6 of 13
CCNPv7 TSHOOT
Skills Assessment
Part 2: Load the Skills Assessment Base Device Configuration Files from
Flash
Use the following procedure to copy the functional base Skills Assessment configuration (non-error) file from
flash to the running config for each device and test network connectivity.
Step 1: Verify the existence and location of the Skills Assessment base configuration files.
The base configuration files should be present in flash under the tshoot directory for a given device. Use the
show flash command to verify the presence of this directory. You can also verify the contents of the
directory using the cd and dir commands. If the directory and files are not present, contact your
administrator.
ALS1# show flash
Directory of flash:/
9
3
5
6
7
8
10
-rwx
drwx
-rwx
-rwx
-rwx
-rwx
-rwx
916
512
11792247
7192
106
1906
7199
Feb
Sep
Feb
Sep
Feb
Sep
Sep
28
22
28
26
28
26
26
1993
2014
1993
2014
1993
2014
2014
16:04:03
10:40:59
16:24:48
10:53:31
18:13:09
10:53:31
10:53:31
-08:00
-07:00
-08:00
-07:00
-08:00
-07:00
-07:00
vlan.dat
tshoot
c2960-lanbasek9-mz.150-2.SE6.bin
multiple-fs
info
private-config.text
config.text
7979
SA-ALS1-BASE-Cfg.txt
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 7 of 13
CCNPv7 TSHOOT
Skills Assessment
Step 8: Repeat steps 2 through 7 for all other devices in the network.
Step 9: Set the time on the NTP server R2.
Set the correct time on the NTP server R2 using the clock set command.
Part 3: Copy the Skills Assessment Error Files from the TFTP Server
Step 1: Verify connectivity with the TFTP server SRV1.
You must be able to access the TFTP server on SRV1 from each network device to copy the error files. From
each device (ALS1, DLS1, DLS2, R1, R2, and R3) ping SRV1 at 10.1.100.1.
Note: If the pings are not successful, verify physical network cabling and connections and verify that the Skills
Assessment base config file is loaded as the running config in each device. You can exit from the user EXEC
mode prompt to see the MOTD login banner, which indicates the file currently loaded. For example:
*** Switch ALS1 Skills Assessment BASE Config ***
If you still cannot access SRV1 from a particular device, contact your administrator.
Step 3: Copy the TFTP server Skills Assessment error file to flash.
Copy the appropriate Skills Assessment error file from the TFTP server into the flash:/tshoot directory for
each device.
Step 4: Release and renew the DHCP leases on PC-B and PC-C. Verify that R2 has received
DHCPv4 and SLAAC addresses.
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 8 of 13
CCNPv7 TSHOOT
Skills Assessment
Part 4: Load the Skills Assessment Error Files from Flash to the Running
Config
For each device, follow the procedure similar to what is described in Part 2. An abbreviated version is
provided below.
From Device/Interface/IP
To Device/Interface/IP
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Result
Page 9 of 13
CCNPv7 TSHOOT
Skills Assessment
Problem or Error
Discovered
Verification Commands
(more than one command
can be used)
ALS1
ALS1
DLS1
DLS1
DLS2
DLS2
R1
R1
R2
R2
R3
R3
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 10 of 13
CCNPv7 TSHOOT
Skills Assessment
Notes
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
To Device/Interface/IP
PC-C
HSRP default gateway
SRV1
ALS1 MANAGEMENT
DLS1 MANAGEMENT
DLS2 MANAGEMENT
R1 F0/1
R2 Lo1
R2 Lo2
R2 Lo3
R3 G0/0
PC-C
PC-C
PC-C
PC-C
PC-C
PC-C
PC-C
PC-C
R3 default gateway
SRV1
ALS1 MANAGEMENT
DLS1 MANAGEMENT
DLS2 MANAGEMENT
R1 G0/1
R2 Lo0
R3 G0/1
DLS1 MANAGEMENT
DLS2 MANAGEMENT
R1 G0/1
R2 Lo1
R3 G0/1
Successful (Y/N)
Notes
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 11 of 13
CCNPv7 TSHOOT
Skills Assessment
To Device/Interface/IP
ALS1 MANAGEMENT
DLS1 MANAGEMENT
DLS2 MANAGEMENT
R1 G0/1
R2 S0/0/0.1
R3 G0/1
SSH (Y/N)
Renew and release the PC-B IP address. PC-B should be able to obtain an IP address on subnet
10.1.120.0/24. If not, there are issues that need to be resolved.
To Device/Interface/IP
HSRP default gateway
PC-C
SRV1
ALS1 MANAGEMENT
DLS1 MANAGEMENT
DLS2 MANAGEMENT
R1 S0/0/1.1
R2 Lo1
R3 S0/0/1.1
Result
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 12 of 13
CCNPv7 TSHOOT
Skills Assessment
Notes
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
__________________________________________________________________________________________
All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 13 of 13