回想起十年前的“社交”，和现如今花样百出的社交方式相比，不可同日而语。在本届思科峰会，思科发布了约61件“新产品”，它们不一定都是产品，有些可能仅仅是升级功能或者其他的扩展服务，其中就包括了Cisco Show and Share。

Cisco Show and Share是一款社交型视频产品。通过注册用户可以简单快捷地自制视频节目并在视频社区内实现分享。它特有的可标记和可搜索语音–文字的功能，让我觉得很新奇。好奇之下，我点开了一个广告片仔细看了一下，事实上，这个功能就是可以让你通过该视频的语音转换成的文字来搜索相关的视频（你是否能明白我表达的意思？）还可以对视频发表评论。

相关日志

• No related posts.

相关日志

• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• Packet Tracer:Cisco的官方模拟器(5.0beta) (23)

Dynamips与Olive的出现大幅度降低了很多希望学习高端网络技术，但却缺乏硬件实验条件练习的朋友之困难。然而，使用虚拟机来运行毕竟还存在一个安装与配置的过程，而且Olive基于FreeBSD内核，对于习惯了使用Windows系统的人而言还存在一个熟悉UNIX类系统界面的问题。于是我在这两年发觉互联网关于Olive，逐渐衍生出了一种技术怪圈群体，本来大家都是为了学习JUNOS而研究的Olive虚拟机，而最终实现竟超越了JUNOS本身？不乏少数的人能够采用各种方式在各种系统平台上把Olive安装起来，这很好。问题是之后Olive就被丢在一旁，而又继续沉迷再研究在别的平台上安装，或者虚拟别的互联网操作系统之上，对JUNOS的研究更是隔靴搔痒。不知不觉的，就从一个JUNOS应用的学习者变成了安装技术专家。我很难想象大部分公司愿意聘请一个虚拟系统的安装者而不是一个Juniper技术工程师。而IOS方面的情况其实也不见得很乐观，搜索一下你会发现至今仍然有人在探讨关于Cisco的内部虚拟解决方案的话题。

我觉得很可惜，所以我将上述的两个虚拟机打包在一起，并将它们互联起来，我将这个盒子就叫做iJunOS，这仅仅是一个为方便写作的代号，我并没有在虚拟技术层面上做什么开发。我希望能够切断在进入学习之前的所有不必要的程序，马上开始实验！假如你真正希望学好IOS或者JUNOS技术，请不要浪费时间在如何安装上面了，还是多花点精力在技术的本身上面吧。Cisco IOS Debug Command Reference，不知道你翻过多少页了？

总而言之，真正的技术专家在于清楚技术的细节，而无谓浪费时间在安装虚拟机上面，因此ITAA提供下载即可用的虚拟机，并保持持续的更新，方便你立即进入学习状态。

iJunOS实现起来非常简单，它本身就跟一个影音文件一样不需要任何的安装程序，只不过，在欣赏电影之前，你需要在PC上安装这个影音文件的播放器而已。Windows用户可以使用VMware Player来播放iJunOS，另外如果你像我一样使用的是MAC OS X系统，可以使用VMware Fusion播放；而对于Linux用户则可以使用VMware Workstation。完成安装以后，注意确定网卡选项被设置为桥接模式 (Bridged)，然后直接播放iJunOS进入初始化配置流程。而且初始化配置只需要经过一次设置就可以了，以后你只需要播放iJunOS，便可以进入你的实验室练习。

使用步骤

在下载后，将虚拟机文件解压缩在一个文件夹里，使用VMWARE PLAYER播放该虚拟机（需先安装该软件）。按照以下步骤操作：

1. 播放虚拟机，如运行成功可看到启动界面。

2. 启动成功后，进入iJunOS登录界面后，请输入初始化用户名root；密码itaa登录。

3. 修改网卡配置，以便使用TELNET登录实验台，登录后在终端输入命令ee /etc/rc.conf进入配置文件编辑器。找到“ifconfig_le0“一行，将“inet“后的IP地址修改为与你当前PC上的网卡处于同一个IP子网的地址。如当前网卡的IP为192.168.13.1/24，因此我便将iJunOS的地址修改为192.168.13.254/24。

4. 修改完成后按ESC键，并且连续选择两次A项，保存并退出编辑器。

5. 已经到了最后一步了，输入终端命令reboot重启一次iJunOS，等重启完成以后，那么整个初始化配置过程就结束了。以后只要你本地的网卡IP地址不做修改，那么便再也不需要经历以上的初始化设置步骤。其实即便你修改了网卡的IP地址，只需要将本机的IP地址重新修改为与iJunOS在同一个网段的IP便可以了。下一步开始登录实验台。

6. 首先确认本机已经能够Ping通刚才为iJunOS设置的IP地址。

7. 通过Telnet登录到iJunOS上面，先启动Olive，你可以分别打开两个终端窗口同时Telnet到iJunOS上面，分别输入用户名与密码均一样的r1（用户名r1；密码r1登录）以及r2登录来分别启动两台Olive。

8. 不要关闭终端窗口。此时你便可以使用你熟悉的配置工具，如SecureCRT或者Putty之类Telnet到iJunOS的5001或者5002端口，进入Olive R1和Olive R2的Console接口，并观察JUNOS的启动信息。这里友情提醒一下，启动的时间可能比较长，大概5-10分钟左右。如果你需要可以在做实验前先去喝杯咖啡。而登录到JUNOS上本身并没有设置密码，第一次登录的时候你只需要使用root和空密码登录就可以了。

9. 下一步启动Dynamips，同样，通过Telnet登录到iJunOS上面，不过这次你只需要输入一次用户名与密码相同的ios，两台Dynamips路由器便被同时启动。如果你仅需操作JUNOS实验，那么无需启动IOS。

10. 在本机Telnet到iJunOS的2041端口，进入Dynamips R1的Console接口。

11. 在本机Telnet到iJunOS的2042端口，进入Dynamips R2的Console接口。

12. OK，四台设备全部启动后，你便可以根据JUNOS 101实验台配置及Juniper/Cisco互操作测试里面的配置开始实现互联JUNOS/IOS的练习了！你可以将iJunOS拷贝进你的U盘，无论到哪里，只要找到一台能上网的电脑下载播放器，那里便成为你的实验室了。看来再也没有不做实验的借口了吧？

最后贴1张清晰版的内部拓扑连接图：

点击下载种子

VMARE Player下载

Juniper/Cisco Interoperability Simulator – iJunOS

ITAA is offering the Juniper JUNOS and Cisco IOS interoperability simulating lab gear – iJunOS torrent for bt downloading now. iJunOS software subscriptions appliances deliver advanced routing and security in an affordable, flexible package that scales from the personal internetworking technology studying, lab practise to the multiple OS interoperability research.

NOTES: we DO NOT offer any system level installation and configuration supports. Bugs reporting will be acceptable by leaving comments under this post, yet adjusting recommendations is NOT guaranteed.

Tags: gotolab, cisco lab, vmware, itaa, junos, juniper

相关日志

• 影响我工作生活的几大应用软件 (6)
• 无良考场:拒绝为考生提供考试服务 (1)
• juniper—JN0-400免费认证团购 (11)
• ITAA:网络模拟平台+学习资料+学习视频=7.5G(Bit下载) (6)
• Linux:VMWare workstation 5 Install for Fedora Core8 (1)
• Juniper:FreeBSD安装olive的另一种方法(简便易行)–(三) (0)
• Juniper:FreeBSD安装olive的另一种方法(简便易行)–(二) (0)
• Juniper:FreeBSD安装olive的另一种方法(简便易行)–(一) (0)
• Juniper — 已收到Junios number at time of registration (0)
• JUNOS路由技术免费认证 (0)

“IT Pioneer” is a monthly magazine published by Pass4sure, including technology skills,analysis of stresses and
difficulties on certification.This magazine started its publication on 14th March,2009 provides IT professionals with platform to
share technical resources.

“IT Pioneer” contains the following contents:

Industry hot news

Certification Perspective

Technical Skills

Pass4sure Activity

Pass4sure Discount Voucher Issuance

官方同时说明,”IT Pioneer”杂志的第一期并不销售,只提供给购买了pass4sure的Cisco产品的客户下载.价格标注为29.99$.很惊人的价格.带着疑问,我下载并打开了杂志.总得来说,外观还不错.下面是我个人的一些评价:

1.杂志的封面及版式设计都很不错.很细致,看得出,P4S为这期杂志煞费苦心了

2.杂志的内容达100多页,却只有不到10M大小.可见P4S在细节上做的比较到位.没有使用臃肿的flash.每张杂志页都是独立设计的图片.

3.这一期杂志把内容分的比较细,主分”HotPosts”,”CCNA”,”CCNP”,”CCSP”,”CCIE”,
“P4S活动”六大版.尤其是CCNA版,几乎每篇文章都是采取了案例式的讲解方式,提供了一些练习题.我相信这些练 习题应该都是从pass4sure的产品中抽出来的.

4.看下面的眼镜样式列表.那是P4S赠送的.你可以向P4S的IT Pioneer杂志编辑部投稿,如果你的来稿被他们征用了,将会把你指定的眼镜免费寄给你.很让我心动,我也参加了…^_^

5.在封底,IT Pioneer杂志编辑部开办了有奖调查活动,当你参加调查后,将会获得一定数量的P4S积分.积分能干什么?看下面的积分兑换商品都有些什么吧.

这份价值29.99$的IT Pioneer我决定共享出来,供大家免费下载.下载地址: 点击下载

Flickr : pass4sure, 免费下载, 电子杂志, 资源共享

相关日志

• 超强备份：backup4all的使用（图文）之二 (7)
• 超强备份：backup4all的使用（图文）之一 (7)
• 超强备份：Backup4All让你从此数据无忧 (1)
• 兜兜推荐三款实用工具:File-Zilla,PowerCMD,nu2006 (18)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Affiliate:Pass4sure Affiliate Process (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• RDCR08301 pass4sure QA (0)
• 132-S-815.1 pass4sure Q&A (0)
• 132-S-708.1 pass4sure Q&A (1)

Flickr : ccie, certification, cisco, voice, wireless

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco CCIE R&S lab10月发布V4版 (0)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

一、实验目的：

1、掌握基本的MPLS-VPN的配置方法。

2、理解MPLS-VPN如何解决地址空间重叠问题。

二、实验步骤及要求：

1、由于本实验存在两个不同的VPN场点，Microsoft VPN和Cisco VPN，而且2个场点都使用192.168.0.0/16的相同的无类子网空间，同时部分地址同时存在2个VPN的场点中。另外本实验配置命令过多，为了避免实验失败，所以在配置本实验时，请按步骤完成实验。如果你对MPLS非常熟悉，则可以按自己意愿任意配置。

2、首先配置R1、R2、R3、R4、R5、R6的接口的IP，并且确保直接相连接口可以PING通。

3、配置MPLS骨干的IGP路由器，本实验采用OSPF路由协议，配置如下：

R2(config)#router ospf 100

R2(config-router)#passive-interface loopback 0

R2(config-router)#router-id 10.1.1.2

R2(config-router)#network 10.0.0.0 0.255.255.255 area 0

R2(config-router)#exit

R3(config)#router ospf 100

R3(config-router)#passive-interface loopback 0

R3(config-router)#router-id 10.1.1.3

R3(config-router)#network 10.0.0.0 0.0.0.255 area 0

R3(config-router)#exit

R4(config)#router ospf 100

R4(config-router)#passive-interface loopback 0

R4(config-router)#router-id 10.1.1.4

R4(config-router)#network 10.0.0.0 0.255.255.255 area 0

R4(config-router)#exit

R5(config)#router ospf 100

R5(config-router)#passive-interface loopback 0

R5(config-router)#router-id 10.1.1.5

R5(config-router)#network 10.0.0.0 0.255.255.255 area 0

R5(config-router)#exit

4、查看MPLS骨干路由器的路由表，以确认每一台的路由器其OSPF工作正常。

R2#show ip route ospf

10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks

O 10.1.1.3/32 [110/65] via 10.1.10.2, 00:05:58, Serial1/1

O 10.1.1.4/32 [110/129] via 10.1.10.2, 00:05:58, Serial1/1

O 10.1.1.5/32 [110/193] via 10.1.10.2, 00:05:58, Serial1/1

O 10.1.30.0/24 [110/192] via 10.1.10.2, 00:05:58, Serial1/1

O 10.1.20.0/24 [110/128] via 10.1.10.2, 00:05:58, Serial1/1

5、配置PE路由器R2和R5的MPLS。

R2(config)#ip cef 启用 CEF

R2(config)#mpls label protocol ldp 选择 LDP 标签分发协议

R2(config)#mpls ldp router-id loopback 0 force 选择使用回环口作为 LSR 的 Router-ID

R2(config)#interface s1/1

R2(config-if)#mpls ip

R2(config-if)#tag-switching ip 为 S1/1 接口启用 MPLS 的标签转发

R2(config-if)#exit

R5(config)#ip cef

R5(config)#mpls label protocol ldp

R5(config)#mpls ldp router-id loopback 0 force

R5(config)#interface s1/0

R5(config-if)#mpls ip

R5(config-if)#tag-switching ip

R5(config-if)#exit

6、配置骨干路由器P，即R3,R4路由器的MPLS。

R3(config)#ip cef

R3(config)#mpls label protocol ldp

R3(config)#mpls ldp router-id loopback0 force

R3(config)#interface s1/1

R3(config-if)#mpls ip

R3(config-if)#tag-switching ip

R3(config-if)#exit

R3(config)#interface s1/0

R3(config-if)#mpls ip

R3(config-if)#tag-switching ip

R3(config-if)#exit

R4(config)#ip cef

R4(config)#mpls label protocol ldp

R4(config)#mpls ldp router-id loopback0 force

R4(config)#interface s1/1

R4(config-if)#mpls ip

R4(config-if)#tag-switching ip

R4(config-if)#exit

R4(config)#interface s1/0

R4(config-if)#mpls ip

R4(config-if)#tag-switching ip

R4(config-if)#exit

7、在任意一台MPLS骨干路由器上查看FLIB（标签转发表），确认MPLS工作正常

R2#show mpls forwarding-table

Local Outgoing Prefix Bytes tag Outgoing Next Hop

tag tag or VC or Tunnel Id switched interface

16 Untagged 10.1.1.3/32 0 Se1/1 point2point

17 17 10.1.1.4/32 0 Se1/1 point2point

18 18 10.1.1.5/32 0 Se1/1 point2point

19 19 10.1.30.0/24 0 Se1/1 point2point

20 Pop tag 10.1.20.0/24 0 Se1/1 point2point

8、在两台PE路由器上配置BGP协议。配置BGP协议的目的是为了启用MP-BGP，用于在PE路由器之间交换VPN路由。由于BGP创建邻居时，不要求对等体体势物理直连的，因此BGP使用TCP179号端口进行邻居的会话，因此本实验中，只需要配置R2与R5路由器的BGP协议。

R2(config)#router bgp 64512

R2(config-router)#neighbor 10.1.1.5 remote-as 64512

R2(config-router)#neighbor 10.1.1.5 update-source loopback 0

CISCO 强烈建议使用一个掩码为 32 的接口指定为 BGP 的更新源。因此如果不这样做，

MPLS VPN 可能不能正常运行

R2(config-router)#no synchronization

R2(config-router)#no auto-summary

关闭自动汇总，其目的是确保后面重分布时，重分发到 BGP 的路由不会在主网络边界

被汇总

R5(config)#router bgp 64512

R5(config-router)#neighbor 10.1.1.2 remote-as 64512

R5(config-router)#neighbor 10.1.1.2 update-source loopback 0

R5(config-router)#no synchronization

R5(config-router)#no auto-summary

9、确认BGP的邻居创建成功

R2#show ip bgp summary

BGP router identifier 10.1.1.2, local AS number 64512

BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

10.1.1.5 4 64512 8 8 0 0 0 00:05:21 0

10、激活两台PE路由器MP-BGP协议，其目的是用于交换不同VPN场点的路由

R2(config)#router bgp 64512

R2(config-router)#address-family vpnv4

要启用 MP-BGP 协议，必须在 VPNv4 的地址家族下激活

R2(config-router-af)#neighbor 10.1.1.5 activate 用于激活 MP-BGP 邻居的路由交换

R2(config-router-af)#neighbor 10.1.1.5 send-community extended

启用 BGP 扩展共用体交换

R2(config-router-af)#no auto-summary

R2(config-router-af)#exit

R2(config-router)#exit

R5(config)#router bgp 64512

R5(config-router)#address-family vpnv4

R5(config-router-af)#neighbor 10.1.1.2 activate

R5(config-router-af)#neighbor 10.1.1.2 send-community extended

R5(config-router-af)#no auto-summary

R5(config-router-af)#exit

R5(config-router)#exit

启用扩展共用体交换的目的是，为了 MP-BGP 携带 RD 和起源场点属性。 RD ，可以确保 不同的 VPN 场点的路由是相对独立的。其可以确保 MP-BGP 为不同的 VPN 场点构建不 同的 VRF 转发表。 RD 可以解决客户端场点地址空间重叠的问题。另外 RT 也可以实现与

RD 相同的功能。但是 RD 灵活性不够，无法再 MPLS VPN 主干上支持复杂的网络拓扑。

11、查看R2或者R5的MP-BGP协议状态，此外会发现在目前MP-BGP并没有为VPN场点产生任何相关的路由

R2#show ip bgp vpnv4 all

12、配置VRF，即VPN路由转发表，其实质是配置RT和RD，而且需要注意的属于同一个VPN场点中的路由目标RT，其值必须一致。否则可能导致MPLS VPN的路由表构建出错

R2(config)#ip vrf microsoft_vpn 创建 VRF ， 名称区分大小写

R2(config-vrf)#rd 64512:100 配置路由区分符

R2(config-vrf)#route-target import 64512:100 指定路由目标为 64512 ： 100 的路由导入 VRF

R2(config-vrf)#route-target export 64512:100

指出从客户端的路由器重分布到 MP-BGP 中使用路由器区分符 64512 ： 100

R2(config-vrf)#exit

R5(config)#ip vrf microsoft_vpn

R5(config-vrf)#rd 64512:100

R5(config-vrf)#route-target import 64512:100

R5(config-vrf)#route-target export 64512:100

R5(config-vrf)#exit

13、分配在R2与R5路由器上配置VRF与接口的关联性

R2(config)#interface s1/0

R2(config-if)#ip vrf forwarding microsoft_vpn 将 microsoft_vpn 的 VRF 与 S1/0 接口关联起来

% Interface Serial1/0 IP address 192.168.1.2 removed due to enabling VRF microsoft_vpn

R2(config-if)#ip add 192.168.1.2 255.255.255.0

由于配置 VRF 会导致接口的 IP 丢失。因此需要重新配置一次 IP 地址

R2(config-if)#exit

R5(config)#interface s1/1

R5(config-if)#ip vrf forwarding microsoft_vpn

% Interface Serial1/1 IP address 192.168.4.1 removed due to enabling VRF microsoft_vpn

R5(config-if)#ip add 192.168.4.1 255.255.255.0

R5(config-if)#exit

14、确认VRF的详细信息。也可以使用show ip vrf命令，查看简单的VRF信息。

R5#show ip vrf detail

VRF microsoft_vpn; default RD 64512:100; default VPNID <not set>

Interfaces:

Serial1/1 VRF的工作接口

Connected addresses are not in global routing table

Export VPN route-target communities

RT:64512:100

Import VPN route-target communities

RT:64512:100

No import route-map

No export route-map

CSC is not configured.

15、配置PE与CE之间的路由选择协议和MP-BGP与RIP之间的路由重分发。目前需要配置的是R2与R1，R5与R6之间的路由选择协议，当然也可以配置静态路由。本实验采用RIPv2协议进行配置。首先配置CE端的RIP路由

R1(config)#router rip

R1(config-router)#version 2

R1(config-router)#net 192.168.1.0

R1(config-router)#net 192.168.2.0

R1(config-router)#net 192.168.3.0

R1(config-router)#exit

R6(config)#router rip

R6(config-router)#version 2

R6(config-router)#net 192.168.4.0

R6(config-router)#net 192.168.5.0

R6(config-router)#net 192.168.6.0

R6(config-router)#exit

其次再配置PE端的RIP路由

R2(config)#router rip

R2(config-router)#version 2

R2(config-router)#address-family ipv4 vrf microsoft_vpn

启用 IPV4 地址家族，配置 RIP 与 VRF 表转发表之间的关系。其指出在重分布式采用

VRF 中那个 RT 的值

R2(config-router-af)#version 2

R2(config-router-af)#redistribute bgp 64512 metric transparent

将 MP-BGP 中的带有 64512:100 的 RT 的路由重分布到 RIP 中， transparent 的关键字，

主要目的是保留 RIP 的原始的度量值。他们是被复制在 MED 属性中的。

R2(config-router-af)#network 192.168.1.0

R2(config-router-af)#no auto-summary

R2(config-router-af)#exit

R2(config-router)#exit

R5(config)#router rip

R5(config-router)#version 2

R5(config-router)#address-family ipv4 vrf microsoft_vpn

R5(config-router-af)#version 2

R5(config-router-af)#network 192.168.4.0

R5(config-router-af)#redistribute bgp 64512 metric transparent

R5(config-router-af)#no auto-summary

R5(config-router-af)#exit

R5(config-router)#exit

然后再配置BGP，确保RIP的路由重分布到MP-BGP中

R2(config)#router bgp 64512

R2(config-router)#address-family ipv4 vrf microsoft_vpn

R2(config-router-af)#redistribute rip

R2(config-router-af)#no auto-summary

R2(config-router-af)#no synchronization

R2(config-router-af)#exit

R2(config-router)#exit

R5(config)#router bgp 64512

R5(config-router)#address-family ipv4 vrf microsoft_vpn

R5(config-router-af)#redistribute rip

R5(config-router-af)#no auto-summary

R5(config-router-af)#no synchronization

R5(config-router-af)#exit

R5(config-router)#exit

16、查看microsoft_vpn场点中的R1和R6路由器的路由表，确认MPLS VPN配置成功。

R1#show ip route rip

R 192.168.4.0/24 [120/1] via 192.168.1.2, 00:00:15, Serial1/1

R 192.168.5.0/24 [120/2] via 192.168.1.2, 00:00:15, Serial1/1

R 192.168.6.0/24 [120/2] via 192.168.1.2, 00:00:15, Serial1/1

R6#show ip route rip

R 192.168.1.0/24 [120/1] via 192.168.4.1, 00:00:05, Serial1/0

R 192.168.2.0/24 [120/2] via 192.168.4.1, 00:00:05, Serial1/0

R 192.168.3.0/24 [120/2] via 192.168.4.1, 00:00:05, Serial1/0

17、使用PING命令确认路由的有效性。

R1#ping 192.168.5.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.5.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 396/535/668 ms

R6#ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 300/426/524 ms

18、查看MP-BGP关于microsoft_vpn场点的路由信息表。

R2#show ip bgp vpnv4 vrf microsoft_vpn

BGP table version is 16, local router ID is 10.1.1.2

Network Next Hop Metric LocPrf Weight Path

Route Distinguisher: 64512:100 (default for vrf microsoft_vpn)

*> 192.168.1.0 0.0.0.0 0 32768 ?

*> 192.168.2.0 192.168.1.1 1 32768 ?

*> 192.168.3.0 192.168.1.1 1 32768 ?

*>i192.168.4.0 10.1.1.5 0 100 0 ?

*>i192.168.5.0 10.1.1.5 1 100 0 ?

*>i192.168.6.0 10.1.1.5 1 100 0 ?

MP-BGP 学习到的远端的 microsoft_vpn 场点的路由

19、配置R8路由器IP地址，并且启用EIGRP路由协议。其中关于frame-relay的配置如下:

R8(config)#interface s1/2

R8(config-if)#encapsulation fr

R8(config-if)#encapsulation frame-relay

R8(config-if)#no frame-relay inverse-arp

R8(config-if)#frame-relay map ip 192.168.1.2 802 broadcast

R8(config-if)#no shutdown

R8(config-if)#exit

R8(config)#router eigrp 10

R8(config-router)#no auto-summary

R8(config-router)#net 192.168.0.0

R8(config-router)#net 192.168.1.0

R8(config-router)#net 192.168.3.0

R8(config-router)#exit

20、配置PE路由器R2的S1/2接口，并且一定要使用PING命令检测接口。配置如下：

R2(config)#interface s1/2

R2(config-if)#encapsulation frame-relay

R2(config-if)#no frame-relay inverse-arp

R2(config-if)#frame-relay map ip 192.168.1.1 208 broadcast

R2(config-if)#ip add 192.168.1.2 255.255.255.0

R2(config-if)#no shutdown

R2(config-if)#exit

21、在PE路由器R2上，为cisco_vpn场点配置VRF表。

R2(config)#ip vrf cisco_vpn

R2(config-vrf)#rd 64512:200 为 cisco_vpn 场点配置其路由目标 RT 为 200

R2(config-vrf)#route-target import 64512:200

R2(config-vrf)#route-target export 64512:200

R2(config-vrf)#exit

22、配置R2的EIGRP协议

R2(config)#router eigrp 100

启用 EIGRP 的 100 的 AS ，注意此处的 AS 编号与 CE 端的并不需要一致

R2(config-router)#no auto-summary

R2(config-router)#address-family ipv4 vrf cisco_vpn

R2(config-router-af)#redistribute bgp 64512 metric 10000 10 255 1 1500

R2(config-router-af)#net 192.168.1.0

R2(config-router-af)#no auto-summary

R2(config-router-af)#autonomous-system 10

指定客户 VPN 的 EIGRP 的 AS 号，如果与 CE 的路由器不一致将不会创建邻居

R2(config-router-af)#exit

R2(config-router)#exit

23、将cisco_vpn的VRF配置到相应场点接口上。

R2(config)#interface s1/2

R2(config-if)#ip vrf forwarding cisco_vpn

% Interface Serial1/2 IP address 192.168.1.2 removed due to enabling VRF cisco_vpn

R2(config-if)#ip add 192.168.1.2 255.255.255.0

R2(config-if)#no sh

R2(config-if)#exit

24、查看EIGRP的PE与CE之间的邻居关系

R2#show ip eigrp vrf cisco_vpn 10 neighbors

IP-EIGRP neighbors for process 10

H Address Interface Hold Uptime SRTT RTO Q Seq

(sec) (ms) Cnt Num

0 192.168.1.1 Se1/2 132 00:02:39 1 5000 0 1

25、根据VRF配置EIGRP的路由重分布到MP-BGP中

R2(config)#router bgp 64512

R2(config-router)#address-family ipv4 vrf cisco_vpn

R2(config-router-af)#redistribute eigrp 10

R2(config-router-af)#no auto-summary

R2(config-router-af)#no synchronization

R2(config-router-af)#exit

R2(config-router)#exit

26、查看MP-BGP关于cisoco_vpn场点的路由信息表

R2#show ip bgp vpnv4 vrf cisco_vpn

BGP table version is 22, local router ID is 10.1.1.2

Network Next Hop Metric LocPrf Weight Path

Route Distinguisher: 64512:200 (default for vrf cisco_vpn)

*> 192.168.0.0 192.168.1.1 2297856 32768 ?

*> 192.168.1.0 0.0.0.0 0 32768 ?

*> 192.168.3.0 192.168.1.1 2297856 32768 ?

27、配置R7路由器的IP地址和启用OSPF路由协议

R7(config)#interface s1/2

R7(config-if)#ip add 192.168.4.2 255.255.255.0

R7(config-if)#encapsulation frame-relay

R7(config-if)#frame-relay map ip 192.168.4.1 705 broadcast

R7(config-if)#no frame-relay inverse-arp

R7(config-if)#ip ospf network broadcast

R7(config-if)#exit

R7(config)#router ospf 100

R7(config-router)#redistribute bgp 64512 subnets

R7(config-router)#net 192.168.5.0 0.0.0.255 area 0

R7(config-router)#net 192.168.7.0 0.0.0.255 area 0

R7(config-router)#net 192.168.4.0 0.0.0.255 area 0

R7(config-router)#exit

28、在PE路由器R5上，为cisco_vpn场点配置VRF表。

R5(config)#ip vrf cisco_vpn

R5(config-vrf)#rd 64512:200

R5(config-vrf)#route-target import 64512:200

R5(config-vrf)#route-target export 64512:200

R5(config-vrf)#exit

29、配置R5的S1/2接口的IP地址和OSPF路由协议。

R5(config)#interface s1/2

R5(config-if)#ip ospf network broadcast

R5(config-if)#encapsulation frame-relay

R5(config-if)#no frame-relay inverse-arp

R5(config-if)#frame-relay map ip 192.168.4.2 507 broadcast

R5(config-if)#ip vrf forwarding cisco_vpn

% Interface Serial1/2 IP address 192.168.4.1 removed due to enabling VRF cisco_vpn

R5(config-if)#ip add 192.168.4.1 255.255.255.0

R5(config-if)#no shutdown

R5(config)#router ospf 200 vrf cisco_vpn

OSPF直接使用进程号与 VRF 进行关联，而不是用 IPV4 地址家族的配置方法

R5(config-router)#net 192.168.4.0 0.0.0.255 area 0

R5(config-router)#redistribute bgp 64512 subnets

R5(config-router)#exit

30、配置在MP-BGP中重分布CE端的OSPF路由

R5(config)#router bgp 64512

R5(config-router)#address-family ipv4 vrf cisco_vpn

R5(config-router-af)#redistribute ospf 200

R5(config-router-af)#no auto-summary

R5(config-router-af)#no synchronization

R5(config-router-af)#exit

R5(config-router)#exit

31、查看cisco_vpn场点中R8或者R7路由器的路由表

R7#show ip route ospf

O E2 192.168.0.0/24 [110/2297856] via 192.168.4.1, 00:03:34, Serial1/2

O E2 192.168.1.0/24 [110/1] via 192.168.4.1, 00:03:34, Serial1/2

O E2 192.168.3.0/24 [110/2297856] via 192.168.4.1, 00:03:34, Serial1/2

32、使用PING命令检测路由有效性

R7#ping 192.168.0.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 92/186/352 ms

33、在任意PE路由器上查看MP-BGP的信息库

R2#show ip bgp vpnv4 all

Network Next Hop Metric LocPrf Weight Path

Route Distinguisher: 64512:100 (default for vrf microsoft_vpn)

*> 192.168.1.0 0.0.0.0 0 32768 ?

*> 192.168.2.0 192.168.1.1 1 32768 ?

*> 192.168.3.0 192.168.1.1 1 32768 ?

*>i192.168.4.0 10.1.1.5 0 100 0 ?

*>i192.168.5.0 10.1.1.5 1 100 0 ?

*>i192.168.6.0 10.1.1.5 1 100 0 ?

Route Distinguisher: 64512:200 (default for vrf cisco_vpn)

*> 192.168.0.0 192.168.1.1 2297856 32768 ?

*> 192.168.1.0 0.0.0.0 0 32768 ?

*> 192.168.3.0 192.168.1.1 2297856 32768 ?

*>i192.168.4.0 10.1.1.5 0 100 0 ?

*>i192.168.5.1/32 10.1.1.5 65 100 0 ?

*>i192.168.7.1/32 10.1.1.5 65 100 0 ?

34、查看microsoft_vpn场点R6路由器与cisco_vpn场点R7路由器的路由表，观察路由表，

确认MPLS VPN可以切实有效的解决地址重叠问题。

R6#show ip route

Gateway of last resort is not set

C 192.168.4.0/24 is directly connected, Serial1/0

C 192.168.5.0/24 is directly connected, Loopback0

C 192.168.6.0/24 is directly connected, Loopback1

R 192.168.1.0/24 [120/1] via 192.168.4.1, 00:00:03, Serial1/0

R 192.168.2.0/24 [120/2] via 192.168.4.1, 00:00:03, Serial1/0

R 192.168.3.0/24 [120/2] via 192.168.4.1, 00:00:03, Serial1/0

R7#show ip route

Gateway of last resort is not set

C 192.168.4.0/24 is directly connected, Serial1/2

C 192.168.5.0/24 is directly connected, Loopback0

C 192.168.7.0/24 is directly connected, Loopback1

O E2 192.168.0.0/24 [110/2297856] via 192.168.4.1, 00:09:37, Serial1/2

O E2 192.168.1.0/24 [110/1] via 192.168.4.1, 00:09:37, Serial1/2

O E2 192.168.3.0/24 [110/2297856] via 192.168.4.1, 00:09:37, Serial1/2

加粗显示的路由条目，用于区分不用的VPN场点

35、再次使用PING确认各个场点的路由表的路由有效性。

文件名: MPLS-VPN-elab.rar
下载地址: http://www.rayfile.com/files/ef87a5a6-8875-11dd-8667-0019d11a795f/

Del.icio.us : , cisco, dynamips, lab, mpls

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• Packet Tracer:Cisco的官方模拟器(5.0beta) (23)

1.blackmaster.一款深色背景的CMS theme.便于设置AD,而且深色的背景色,如果采用高对比色的AD,来做英文站的话,点击率肯定很高.导航栏也是一大特色.不过美中不足的是,侧栏会下沉.需要比较了解CSS的朋友来使用.

下载地址: blackmaster

2.blog-simple-20 :一款橙色风格的theme,我不知道它算不算是一个CMS theme.但是,我敢肯定它肯定很适合女孩子.^_^

下载地址: blog-simple-20

3.blogger-cms: 我不知道该如何描述这个主题.没有明显的分界线.但是布局不错.风格比较简洁.如果有一个比较合适的header banner.再进一步的修改,这是一款很不错的主题.

下载地址: blogger-cms

4.blogohblog: 说起这个主题,兜兜其实是颇为欣赏的.兜兜的博客最早就用的是这款主题.仔细修改修改,很不错的哦.不过有个缺陷就是文字有点显小.CSS好的,改下就OK了.这款主题目前在作者的主页上似乎已经找不到了.不过它有了升级版.可以到这里去找到它的升级版blogohblogv2.如果想看下V2的实际效果.可以参看可能吧.不过阿禅(我对他无语了)已经把其改的面目全非.不过还是可以看出v2的影子.

下载地址: blogohblog

5.blue_green_harmony : 这是一款浅色背景theme.非常适合放AD.换一个banner.会很有家的感觉.

下载地址: blue_green_harmony

6.blueweed : 不做任何介绍.正如下面这张图片.自己用了才知道.

下载地址: blueweed

Del.icio.us : theme, wordpress

相关日志

• 转自芒果:20款wordpress的SEO插件[推荐] (3)
• 博客主题更换中… (21)
• wordpress:wp主题系列6 (0)
• wordpress:wp主题系列5 (2)
• wordpress:wp主题系列4 (7)
• wordpress: wp主题系列(3) (16)
• wordpress: wp主题系列(1) (4)
• wordpress theme:blogger-cms (0)
• wordpress theme:arthemia-CMS主题下载 (4)
• Vdoing:全线引爆网站统计 (11)

具体要求如下:

1.较好的英文阅读能力.这里的英文阅读能力指对CISCO技术文档或者study-guide能够快速阅读(或者借助翻译工具),并能迅速理解.
2.对Cisco认证体系比较了解,并且熟练掌握其中某些科目的80%以上的知识点.比如同时掌握CCNA,CCNP,CCIP等科目者优先考虑.
3.有较强的写作能力.语言组织能力较强.善于表达自己对某个知识点的理解.并能用较浅显的语言来表述出来.方便他人学习.
4.目前在中部地区就业或者居住者优先考虑.这里指的中部地区主要包括:华中地区—武汉及周边;重庆,成都及沿边城市.

对于组建这个团队,兜兜主要有如下目的:

1.完成当前的阶段性任务.并在后期分派长期性的阶段性任务.保证加入此团队的兄弟们都能够拿到一份较稳定的part-time薪水.
2.建立一个content圈子.并逐渐的完善外延业务,组建一个在华中地区乃至中国有影响力的教程编辑团队.具体的发展思路,将会在团队组建完善之后,线下见面具体磋商.
3.兜兜看到一些圈内人士,因为这样或者那样的原因,而屈就在一些小公司,拿着与自己实际能力不符的薪水.之前兜兜本人也是如此,有幸离开了这个怪圈.希望能够从组建这样一个圈子开始,拓展所有人的人脉关系.众所周知,在IT技术圈子里混,人脉关系是首要的.
4.定期或者不定期的线下聚会活动.并开设一些活动,比如有奖征文等.奖金及聚会费用,由兜兜寻找赞助商提供.

待遇问题:

任何工作或者是一件赏金任务,待遇无疑都是大家所要考虑的重要因素之一.如果有兴趣想加入这个团队的,请直接联系兜兜详谈待遇问题.^_^
你可以通过以下方式来找到兜兜:
E-mail: gotolab@yahoo.com (建议使用此方式)
Q   Q: 7033720 (建议不要用QQ)
T E L:  025-84485322 (找兜兜即可)
博 客: www.gotolab.cn (博客直接留言告知你的联系方式)

By the way:

本文发布的三个小时后,兜兜收到了很多邮件.看来圈子里的能人们平时都隐藏的很深啊.^_^这里兜兜需要补充的是:
1.参与者,需要具备P系列的证书.除CCNP外.CCNA和CCNP相关的study-guide已经到了泛滥的地步了.而我们这个团队需要完成的是一件比较有挑战性的工作.是针对CISCO整个认证体系进行分解.这需要参与者对voice,security,wireless等较难且非常符合网络往后发展趋势的知识有清晰透彻的了解.
2.当然,我们的目标是覆盖整个CISCO的认证体系.这个团队的成员不仅仅是对少数高端科目了解透彻.还需要对一些当前流行的,热门的科目有相当的了解.

根据这两点前提,兜兜这里需要声明一下参与的必要条件.

1.拥有A系列证书.(except 640-802,640-801,640-816,640-822.但是如果你通过了CCNA的安全,无线或者语音方向的认证,有优先权).如果你有CCDA,则可优先考虑.
2.拥有P系列证书.(except 642-901,642-812,642-892,642-825,642-845.即CCNP).如果你通过了CCDP,CCSP,CCVP,CCIP,并对该认证所涵盖的知识点有透彻的了解者优先.
3.拥有IE证书.这点不用赘述.但是唯一要强调的是:纯粹的paper请走开.

这个团队,要求的人数不会太多,

此次招聘,具体事务由兜兜负责.漏漏可以证明我的身份,及上述内容的真实性.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• Packet Tracer:Cisco的官方模拟器(5.0beta) (23)

8月27日，思科将在中国北京的CCIE R$S考场引入“领导者”
“领导者”将额外加入10分钟的面试来评估候选人的能力是否达到满足专家级的网络技能和知识用于解决工作中遇到的问题。
在LAB考试结束后，一个由三名专家组成的小组将会对每一个考生进行一个口头上的面试，询问一系列专家级别的网络问题（提问和回答讲使用英语）
正确回答这些问题的能力将会影响到考试的成绩。
完成了面试后，考生将有完整的8小时时间完成lab部分的考试。
这些成绩将被计算并综合成一个总成绩来决定考生pass还是fail。
这封email的目的在于让你知道，你的考试时间将要在原先的基础上增加大约1小时。
这额外的1小时将增加在原先的考试日之后。我们希望面试的过程能够让你获得启示并有助于我们继续为了全世界CCIE的标准而努力。

这条消息今日发布后,如晴天霹雳在圈子里炸开了锅.很显然,近期已经在备考的,会折戬沉沙,落马一片.先不发表任何的评论.且看一组统计数据:

截至2008年3月25日，全球CCIE总人数16355名（不包括已经失效的CCIE）

    中国CCIE总数：         2582
    全球CCIE路由交换:    14764
    全球CCIE安全:          1402
    全球CCIE服务提供商: 735
    全球CCIE存储:          111
    全球CCIE语音:          689

    全球拥有多个CCIE:                     1232
    全球路由交换与安全2CCIE:          517
    全球路由交换与服务提供商2CCIE: 300
    全球路由交换与存储2CCIE:          23
    全球路由交换与语音2CCIE:          182
    全球3CCIE或超过3CCIE：           210

*******************Cisco对中国CCIE认证下重手了*********************

让我们打开google或者baidu搜索一下CCIE这个关键词吧.看看中文的结果有多少.看看有多少人在讨论CCIE认证的必要性,看看有多少人在质疑CCIE在中国的技术地位……

相信大家都很清晰的记得,当年MCSE在中国的火爆.很多早期从事IT行业的朋友一定目睹了MCSE在中国迅速发展又迅速消融的过程.而CISCO就是在那个时候,几乎是取代了MCSE曾经辉煌的位置.于是一家家培训中心跟陈士美一样的把MCSE当做糟糠之妻一脚踢开,迎娶了年轻貌美的小妾:Cisco.

无论是培训中心还是社会发展现状所导致的这种现象,我们没必要去过多的争论.但是有一点,我们肯定是有共识的!—国际认证中国本土化推广,培训中心居功至伟! 培训中心就像电影公司,迅速的捧红了一个又一个小姐(噢.不好意思,这里说错了,应该是捧红了一个又一个认证).他们永远是认证市场的导向.

认证本身有错吗?没有!那些推出自己认证的厂商,哪一个不是站在业界顶端,去制订着整个业界的规范,规则的.他们推出自己的认证,无非两点:

1.通过认证来推广自己的产品.他们的认证人员,无非就类似于散布在世界各地的厂商的设备支持大军,一高效的支持团队.

2.认证太赚钱了!太赚了……

各大厂商的欲拒还迎睁只眼闭只眼的态度,深深的刺激了全世界各地的培训机构.一时间,纷纷高潮…认证的热潮自2002年开始疯狂喷涌.一直井喷到现在,未发现一点疲软的迹象,反而愈演愈烈,一个个认证被培训中心玩的死去活来.

太多的人质疑认证了.太多了!质疑归质疑,你还是得顺从市场.用人单位要看证书,你拿不出来就滚蛋.当你被QJ,且无法反抗,就顺从吧……IT业界人士的悲哀.我们都在被厂商被市场被培训中心轮J.

出来混,迟早还是要还的!

从珊瑚虫QQ,到番茄大家已经领会到了一个国家对版权的重视.

从MCSE到CISCO,大家已经可以体会到总是借鸡下蛋,总有一天会得意忘形,做些杀鸡取卵的事情.然后就鸡飞蛋打……

培训中心近几年遍地开花,大赚其钱.用的招数无非就这几种:

1.站街促销

2.增殖服务(殖我不是故意打错的^_^相信我)

3.保证无病

4.保证安全离开

兜兜简单解释一下吧,如果你想歪了.请去深深的忏悔一下.

1.站街促销:一个新的培训产品出来了.要去推广啊,推广最好的方式是什么?见过那些培训中心到处派发小广告不?见过拉皮条的不?见过超市打折不?那些都是方法.都已经用烂了.没有新意了.说来说去都这些玩意儿.一点技术含量都没有,这个就不再赘述了.

2.增殖服务^_^.你来我这里购买了一期培训产品.比如说是CCNP,那我送你一门NA.说是不算你钱.其实你就算不收,也不会少你钱.所以,还是老规矩,承受吧……装作占了一个很大便宜的样子,伪装高潮一把.意淫一下自己.

3.保证无病.这个……我不知道你们会想到哪里去.当然我不是指那个,肯定不是!保证通过认证,什么100%通过率啊,99%通过率啊.至于如何保证你通过,只有天知道了.背题是唯一的途径.

4.保证安全离开.我不知道你还会不会往歪处想.别忏悔了.你没救了.几乎所有的培训中心都像达成了攻守同盟一样,一夜之间,全部推荐就业.

总之,一切的一切,培训中心为了生存为了利益,培育了一批又一批IT”人才”.感谢CCTV,感谢XXXX,感谢培训中心.让中国的网络基础建设有了质的飞跃.IT技能平民化,深入人心,你们的功德无量.

Cisco怒了?

为了保证IE的含金量,不至于像MCSE一样被平民化.Cisco频繁的更换着lab实验的版本.当然,他们之前一直意淫的以为这样就能解决问题了.他们低估了中国,低估了这片神奇土地上成长起来的民族”制造”工业.一家家CCIE制造工厂,一个个CCIE批发市场…疯狂的解着IE LAB考试的新版本,乐此不疲.向解题的老师们致以最诚挚的敬意!你们为中国IE梯队的建设提供了强大的后勤力量!

Cisco终于想到了一个万全之策.为了保全CCIE这个金字塔顶端的认证,为了不让它在中国晚节不保.思科针对中国.针对中国的培训市场.针对那些被市场带动误解了CCIE含量的考生们发布了这条消息.

面试时间很短,但是它的分值却能直接影响你的成绩.你可以随意的应付一下,照样可以参加LAB,但是很可能会fail掉.

正视CCIE,正视技术,请不要再践踏技术了.

兜兜现在只有一句话要说.无论是厂商,还是培训,或者是IT从业人员,都应该清楚一个事实
出来混,迟早还是要还的!

和朋友们讨论了一会儿.其实CCIE和英文并没有必然的联系.但是通过这个途径却可以淘汰掉很多人.保证了CCIE的含金量.最后这个消息产生的后果,可以简单想象一下:
1.CCIE回到神坛之上.早期通过这样或者那样途径得到IE证书的人,都可以得瑟可以牛B可横着走路了.
2.中国因此而掀起一股英语培训热.当然,始作俑者肯定是IT培训中心无疑.IE是他们的摇钱树.他们被厂商QJ的时候,他们也得换个自己舒服的姿势吧.
3.这个面试到中国后,迅速感染了中国特色….这个就不细说了.

哦.对了.最后要补充一条.

很多人可能会放弃RS,改攻其他方向的IE.
那么又会有N种后果.最显而易见的就是

1.其他方向,比如安全,语音类的培训,在中国又火起来了.然后CISCO又怒了,又弄点对策出来.

2.其他高端方向的IE人才,被大量的造就,推动了世界IT行业的革命性进步.

3.英语培训挖空心思要挤进IT培训圈.并很可能会造出谣言如下:
  3.1.R&S的IE仅仅是一个开始,大头还在后面呢,大家赶紧来我这里来学英语吧.
  3.2.英文是世界语言,大家学好了英语再去考个IE,直接出国.我们还可以提供出国咨询等增殖服务(我保证,增殖不是我故意打错的)

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco CCIE R&S lab10月发布V4版 (0)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

Connection Encapsulation: PPP

Connection Type: PPPoE client

Connection Authentication: None

Connection MTU: 1492 bytes

Address: Dynamically assigned by the ISP

Outbound Interface: E0/0

You will know that the connection has been successfully enabled when you can ping the simulated Internet address of 172.16.1.1

Note: Routing to the ISP: Manually configured default route

CPE# show ip route

….

Gateway of last resort is not set

192.168.1.0/27 is subnetted, 7 subnets

C 192.168.1.0 is directly connected, Ethernet0/1

D 192.168.1.32 [90/307200] via 192.168.1.2, 00:02:16,Ethernet0/1

D 192.168.1.64 [90/307200] via 192.168.1.2, 00:02:17,Ethernet0/1

D 192.168.1.96 [90/307200] via 192.168.1.2, 00:02:17,Ethernet0/1

D 192.168.1.128 [90/307200] via 192.168.1.3, 00:02:17,Ethernet0/1

D 192.168.1.192 [90/307200] via 192.168.1.3, 00:02:17,Ethernet0/1

D 192.168.1.224 [90/307200] via 192.168.1.3, 00:02:17,Ethernet0/1

CPE# show run

….

no service password-encryption

!

hostname CPE

!

boot-start-marker

boot-end-marker

!

no aaa new-model

resource policy

clock timezone PST 0

ip subnet-zero

no ip dhcp use vrf connected

!

interface Ethernet0/0

description link to cable modem

no ip address

shutdown

!

interface Ethernet0/1

description link to corporate nework

ip address 192.168.1.1 255.255.255.224

!

interface Ethernet0/2

no ip address

!

interface Ethernet0/3

no ip address

shutdown

!

router eigrp 1

network 192.168.1.0

auto-summary

!

line con 0

line vty 0 15

end

下面的答案由大笨牛提供:

配置顺序：

cpe(config)#int e0/0

cpe(config-if)#pppoe enable ——打开pppoe

cpe(config-if)#pppoe-client dial-pool-number 1 加入拨号池1

cpe(config-if)#no sh

cpe(config-if)#exit

cpe(config)#vpdn enable 打开vpdn（拨号必须打开）

cpe(config)#vpdn-group 1 配置vpnd组1

cpe(config-vpdn)#request-dialin 配置客户端为请求拨号

cpe(config-vpdn-req-in)#protocol pppoe 配置协议

cpe(config-vpdn-req-in)#exit

cpe(config-vpdn)#exit

cpe(config)#dialer-list 1 protocol ip permit 配置感兴趣数据流，触发拨号

cpe(config)#int dialer 1 配置拨号配置1

cpe(config-if)#encapsulation ppp 封装协议

cpe(config-if)#ip address negotiated 配置ip地址为协商，也就是自动获取。

cpe(config-if)#dialer pool 1 加入到拨号池1

cpe(config-if)#dialer-group 1 引用感兴趣数据流，触发拨号，【这里1和dialer-list 后面的1必须一致】

cpe(config-if)#ip mtu 1492 配置MTU

cpe(config-if)#exit

结果图：

Sh run：【实验使用fa0/0替代E0/0】

Current configuration : 1254 bytes

!

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname cpe

!

boot-start-marker

boot-end-marker

!

!

no aaa new-model

ip subnet-zero

!

!

!

ip cef

vpdn enable

!

vpdn-group 1

request-dialin

protocol pppoe

!

!

interface FastEthernet0/0

no ip address

duplex half

pppoe enable

pppoe-client dial-pool-number 1

!

interface Serial1/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/3

no ip address

shutdown

serial restart-delay 0

!

interface Serial2/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial2/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial2/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial2/3

no ip address

shutdown

serial restart-delay 0

!

interface Dialer1

ip address negotiated

ip mtu 1492

encapsulation ppp

dialer pool 1

dialer-group 1

!

ip classless

no ip http server

!

!

dialer-list 1 protocol ip permit

!

!

!!

!

!

gatekeeper

shutdown

!

!

line con 0

stopbits 1

line aux 0

line vty 0 4

!

!

end

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• Packet Tracer:Cisco的官方模拟器(5.0beta) (23)

Acme is a small export comany that has an existing enterprise network that is made up exclusively of routers that are using EIGRP as the IGP. Their network is up and operating properly. As part of their network expansion, Acme has decided to connect to the internet via a broadband cable ISP. Your task is to enable this connection using the information below.

Connection Encapsulation: PPP

Connection Type: PPPoE client

Connection Authentication: None

Connection MTU: 1492 bytes

Address: Dynamically assigned by the ISP

Outbound Interface: E0/0

You will know that the connection has been successfully enabled when you can ping the simulated Internet address of 172.16.1.1

Note: Routing to the ISP: Manually configured default route

CPE# show ip route

….

Gateway of last resort is not set

192.168.1.0/27 is subnetted, 7 subnets

C 192.168.1.0 is directly connected, Ethernet0/1

D 192.168.1.32 [90/307200] via 192.168.1.2, 00:02:16,Ethernet0/1

D 192.168.1.64 [90/307200] via 192.168.1.2, 00:02:17,Ethernet0/1

D 192.168.1.96 [90/307200] via 192.168.1.2, 00:02:17,Ethernet0/1

D 192.168.1.128 [90/307200] via 192.168.1.3, 00:02:17,Ethernet0/1

D 192.168.1.192 [90/307200] via 192.168.1.3, 00:02:17,Ethernet0/1

D 192.168.1.224 [90/307200] via 192.168.1.3, 00:02:17,Ethernet0/1

CPE# show run

….

no service password-encryption

!

hostname CPE

!

boot-start-marker

boot-end-marker

!

no aaa new-model

resource policy

clock timezone PST 0

ip subnet-zero

no ip dhcp use vrf connected

!

interface Ethernet0/0

description link to cable modem

no ip address

shutdown

!

interface Ethernet0/1

description link to corporate nework

ip address 192.168.1.1 255.255.255.224

!

interface Ethernet0/2

no ip address

!

interface Ethernet0/3

no ip address

shutdown

!

router eigrp 1

network 192.168.1.0

auto-summary

!

line con 0

line vty 0 15

end

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• Packet Tracer:Cisco的官方模拟器(5.0beta) (23)

因公司业务发展需求，现急聘一名Cisco网络工程师。要求如下：

1．熟悉CISCO认证，熟练掌握CCXA~CCXP认证大纲中的知识点

2．具备CCNP证书。（07年10月之后的CCNP优先考虑）。

3．具备良好的写作能力，有个人博客者优先；具备良好的人际关系沟通能力。

4．具备较好的英文阅读和写作能力。

5．曾经担任Cisco或者其他网络设备厂商认证讲师者优先（有无系统集成项目经验均可）。

6．全日制本科学历（计算机或者网络类专业者优先）

应届毕业生或有一年以上同行业工作经验者，机会均等。

另本公司招聘3~4 part-time职员。工作内容与Cisco网络工程师类似。

1．按时按量完成任务

2．保密观念强

3．对CISCO热门认证大纲了解透彻。并有一年以上的系统集成经验。目前任职于系统集成公司者优先。

以上两种职位，如有意向可通过如下方式联系余先生（兜兜里有糖）。

Gtalk: thinkpid@gmail.com

MSN: netemu@hotmail.com

Blog: http://www.gotolab.cn

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• Packet Tracer:Cisco的官方模拟器(5.0beta) (23)

Cisco考试的费用上调,为方便众多的pass4sure客户,我们准备了一些Pearson VUE考试中心的Cisco折扣券提供给各位客户.现在购买pass4sure的Cisco系列产品还可获赠Pearson VUE的考试折扣(20%).点击此处购买Cisco系列Pass4sure产品.

1.什么是考试折扣号？
考试折扣号就是可以让你不必支付正常情况下的全部考试费，而是只需按折扣号规定的折扣支付考试费 就可以考试了。

2.Pass4sure的考试折扣是从哪来的？
Pass4sure的考试折扣号是直接从考试中心申请来的。

3.折扣号怎么使用？使用折扣号可以节约多少钱？
当您到考试中心去注册考试的时候,把从pass4sure购买产品获得的折扣号(折扣号是一串字母和数字)告诉考试中心的工作人员,并且告诉他们你要使用20%折扣的考试折扣号,他们就会用这个号帮你注册考试,并且会只收你折扣后的考试费用.
如果您去PRO考试中心的话只要把这个号交给考试管理员
考试管理员会帮您查询查询这个号是否可用.确认后将帮您注册考试.

4.折扣号的有效期是多长时间？
Pass4sure所提供的Cisco认证折扣号的有效期在11月31号截止

5.Pass4sure提供的Cisco认证折扣号什么时候能拿到?
折扣号只是一串数字和字母的混合排列,并不是实物卡或者券.因为折扣号是直接到Cisco数据库申请的，当你用这串字符注册Cisco考试的时候，考试中心只需要到数据库去验证是否有这个折扣号存在就可以了.而pass4sure所提供的折扣号都是已经事先申请好的,当您购买相应的Cisco产品后,我们的客服人员将提供给您这串号码.立即生效.

6.VUE和Prometric有什么区别?
VUE和Prometric都是国际性的认证考试公司,他们都有自己的一套国际考场,但是这两个公司的Cisco考试折扣不能通用,Pass4sure提供的Cisco考试折扣号是VUE考试中心的折扣.

7.使用考试折扣号去考试会影响题目的难易程度吗？
使用三折折扣号考试的试卷跟普通的考试难度一样，时间也一样。

详情请点击此处联系pass4sure中文站客服

相关日志

• 招聘:网络工程师(南京) (9)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Affiliate:Pass4sure Affiliate Process (0)

教育产品开发部门高级经理斯汀.吉田（Christine Yoshida）表示，这三项考试是思科经过调查全球1500位人力资源部经理后决定推出的。吉田同时表示，调查结果显示众多雇主特别是在那些经济快速发展的国家，现在正在寻找在安全、语音、无线领域中走在前列的网络人才，并且，这些雇主都认为这些都是最紧俏的专业。

   “我们经过调查确实证实了这些专业的巨大需求”，据吉田介绍，这些专项考试在思科认证不断改进的考试改革中充当了很重要的角色。举例来说，一旦安全思科网络设备（SCND）在今年11月停考，CCNA安全专项认证将成为公司中级思科认证资深安全工程师（CCSP）的前提考试科目。同样的，CCNA语音专项认证将于2009年6月成为思科认证资深语音工程师（CCVP）认证所必须的先决条件。

   尽管思科目前还没有关于无线的资深认证，但吉田补充到，如果哪家公司创建了这个部门，那么CCNA的无线认证将会成为一个很好的敲门砖。

(上述红字来源于互联网)本文将放出安全及语音的部分考试题(由pass4sure流出),及官方大纲.方便业内有认证需要的朋友查阅.由于版面限制,兜兜仅在文中放出大纲,如果需要参看试题的话,请在大纲后通过下载链接下载PDF格式的文档.文档系临时转存,可能会被删档.需要的话,请速度!

一.640-553 Pass4sure Q&A(安全)

CCNA Security Certification meets the needs of IT professionals who are responsible for network security. It confirms an individual’s skills for job roles such as Network Security Specialists, Security Administrators, and Network Security Support Engineers. This certification validates skills including installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices and develops competency in the technologies that Cisco uses in its security structure.

Students completing the recommended Cisco training will gain an introduction to core security technologies as well as how to develop security policies and mitigate risks. IT organizations that employ CCNA Security-holders will have IT staff that can develop a security infrastructure, recognize threats and vulnerabilities to networks, and mitigate security threats.

The following are some basic information about the examination:

640-553 IINS

Implementing Cisco IOS Network Security

Exam Number:640-553

Associated Certifications:CCNA Security

Duration:90 minutes (55-65 questions)

Available Languages:English

Click Here to Register:Pearson VUE

Exam Policies:Read current policies and requirements

Exam Tutorial:Review type of exam questions

Exam Description

The 640-553 IINS Implementing Cisco IOS Network Security exam is associated with the CCNA Security certification. This exam tests a candidate’s knowledge of securing Cisco routers and switches and their associated networks. It leads to validated skills for installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices and develops competency in the technologies that Cisco uses in its security infrastructure.
Candidates can prepare for this exam by taking the Implementing Cisco IOS Network Security (IINS)course.

Exam Topics

The following topics are general guidelines for the content likely to be included on the Implementing Cisco IOS Network Security exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Describe the security threats facing modern network infrastructures

• Describe and list mitigation methods for common network attacks
• Describe and list mitigation methods for Worm, Virus, and Trojan Horse attacks
• Describe the Cisco Self Defending Network architecture

Secure Cisco routers

• Secure Cisco routers using the SDM Security Audit feature
• Use the One-Step Lockdown feature in SDM to secure a Cisco router
• Secure administrative access to Cisco routers by setting strong encrypted passwords, exec timeout, login failure rate and using IOS login enhancements
• Secure administrative access to Cisco routers by configuring multiple privilege levels
• Secure administrative access to Cisco routers by configuring role based CLI
• Secure the Cisco IOS image and configuration file

Implement AAA on Cisco routers using local router database and external ACS

• Explain the functions and importance of AAA
• Describe the features of TACACS+ and RADIUS AAA protocols
• Configure AAA authentication
• Configure AAA authorization
• Configure AAA accounting

Mitigate threats to Cisco routers and networks using ACLs

• Explain the functionality of standard, extended, and named IP ACLs used by routers to filter packets
• Configure and verify IP ACLs to mitigate given threats (filter IP traffic destined for Telnet, SNMP, and DDoS attacks) in a network using CLI
• Configure IP ACLs to prevent IP address spoofing using CLI
• Discuss the caveats to be considered when building ACLs

Implement secure network management and reporting

• Use CLI and SDM to configure SSH on Cisco routers to enable secured management access
• Use CLI and SDM to configure Cisco routers to send Syslog messages to a Syslog server

Mitigate common Layer 2 attacks

• Describe how to prevent layer 2 attacks by configuring basic Catalyst switch security features

Implement the Cisco IOS firewall feature set using SDM

• Describe the operational strengths and weaknesses of the different firewall technologies
• Explain stateful firewall operations and the function of the state table
• Implement Zone Based Firewall using SDM

Implement the Cisco IOS IPS feature set using SDM

• Define network based vs. host based intrusion detection and prevention
• Explain IPS technologies, attack responses, and monitoring options
• Enable and verify Cisco IOS IPS operations using SDM

Implement site-to-site VPNs on Cisco Routers using SDM

• Explain the different methods used in cryptography
• Explain IKE protocol functionality and phases
• Describe the building blocks of IPSec and the security functions it provides
• Configure and verify an IPSec site-to-site VPN with pre-shared key authentication using SDM

The following are part of 640-553 Q&A from pass4sure. You can go to pass4sure and consult live-support for more information if you are interested in its products. Now let’s look at the following study-guides offered by pass4sure.

(点击此处下载完整版本的640-553PDF文档—包含试题)

二.640-460 Pass4sure Q&A(语音)

The Cisco® CCNA Voice certification confirms that you have the required skill set for specialized job roles in voice technologies such as voice technologies administrator, voice engineer, and voice manager. It validates skills in VoIP technologies such as IP PBX, IP telephony, handset, call control, and voicemail solutions. Candidates also get exposure to the Cisco Unified Communications architecture and design covering mobility, presence, and TelePresence applications.

The CCNA Voice Certification enables employers to validate that their staff possess a strong foundation in voice applications and infrastructure concepts; and are capable of performing baseline installation, operating, and maintenance tasks on Cisco VoIP solutions, particularly the Smart Business Communications System from 8-250 lines.

The following are some basic information about the examination:

640-460 IIUC

Implementing Cisco IOS Unified Communications

Exam Number:640-460

Associated Certifications:CCNA Voice

Duration:90 minutes (60-70 questions)

Available Languages:English

Click Here to Register:Pearson VUE

Exam Policies:Read current policies and requirements

Exam Tutorial:Review type of exam questions

Exam Description

The 640-460 IIUC Implementing Cisco IOS Unified Communications exam is associated with the CCNA Voice certification. This exam confirms basic IP telephony installation, configuration, and maintenance skills by testing a candidate’s knowledge of implementing and configuring small- to medium sized IP Telephony solutions using Cisco Unified Communications Manager Express, Cisco Unity Express, and the UC500 Smart Business Communications System solutions.

Exam Topics

The following topics are general guidelines for the content likely to be included on the Implementing Cisco IOS Unified Communications exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Describe the components of the Cisco Unified Communications Architecture

• Describe the function of the infrastructure in a UC environment
• Describe the function of endpoints in a UC environment
• Describe the function of the call processing agent in a UC environment
• Describe the function of messaging in a UC environment
• Describe the function of auto attendants and IVRs in a UC environment
• Describe the function of contact center in a UC environment
• Describe the applications available in the UC environment, including Mobility, Presence, and Telepresence
• Describe how the Unified Communications components work together to create the Cisco Unified Communications Architecture

Describe PSTN components and technologies

• Describe the services provided by the PSTN
• Describe time division and statistical multiplexing
• Describe supervisory, informational, and address signalling
• Describe numbering plans
• Describe analog circuits
• Describe digital voice circuits
• Describe PBX, trunk lines, key-systems, and tie lines

Describe VoIP components and technologies

• Describe the process of voice packetization
• Describe RTP and RTCP
• Describe the function of and differences between codecs
• Describe H.323, MGCP, SIP, and SCCP signalling protocols

Describe and configure gateways, voice ports, and dial peers to connect to the PSTN and service provider networks

• Describe the function and application of a dial plan
• Describe the function and application of voice Gateways
• Describe the function and application of voice ports in a Gateway
• Describe the function and operation of call-legs
• Describe and configure voice dial peers
• Describe the differences between PSTN and Internet Telephony Service Provider circuits

Describe and configure a Cisco network to support VoIP

• Describe the purpose of VLANs in a VoIP environment
• Describe the environmental considerations to support VoIP
• Configure switched infrastructure to support voice and data VLANs
• Describe the purpose and operation of PoE
• Identify the factors that impact voice quality
• Describe how QoS addresses voice quality issues
• Identify where QoS is deployed in the UC infrastructure

Implement UC500 using Cisco Configuration Assistant

• Describe the function and operation of Cisco Configuration Assistant
• Configure UC500 device parameters
• Configure UC500 network parameters
• Configure UC500 dial plan and voicemail parameters
• Configure UC500 SIP trunk parameters
• Configure UC500 voice system features
• Configure UC500 user parameters

Implement Cisco Unified Communications Manager Express to support endpoints using CLI

• Describe the appropriate software components needed to support endpoints
• Describe the requirements and correct settings for DHCP, NTP, and TFTP
• Configure DHCP, NTP and TFTP
• Describe the differences between key system and PBX mode
• Describe the differences between the different types of ephones and ephone-dns
• Configure Cisco Unified Communications Manager Express endpoints
• Configure call-transfer per design specifications
• Configure voice productivity features, including hunt groups, call park, call pickup, paging groups, and paging/intercom
• Configure Music on Hold

Implement voicemail features using Cisco Unity Express

• Describe the Cisco Unity Express hardware platforms
• Configure the foundational elements required for Cisco Unified Communications Manager Express to support Cisco Unity Express
• Describe the features available in Cisco Unity Express
• Configure AutoAttendant services using Cisco Unity Express
• Configure basic voicemail features using Cisco Unity Express

The following are part of 640-460 Q&A from pass4sure. You can go to pass4sure and consult live-support for more information if you are interested in its products. Now let’s look at the following study-guides offered by pass4sure.

(点击此处下载完整版本的640-460PDF文档—包含试题)

相关日志

• 招聘:网络工程师(南京) (9)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

我不知道这个软件对初学者来说是好事还是坏事.不过我没想那么多,既然有一个看起来还算过得去的东西,那就公布出来介绍一下吧.老规矩,没时间针对每个操作细节来做图文介绍.简单一个软件功能描述后.就放出软件下载地址.自己下了试吧.
Packet Tracer目前到5.0了.

packet tracer是Cisco公司开发的网络仿真工具软件，是一个为网络学员设计的用于设计，配置和解决复杂问题的基于CCNA层次的学习平台，媒体和仿真器，技持学生和教师建立仿真、虚拟、和活动网络模型，象任何仿真器的一样，通过一组简化的网络设备和协议模型，真实的计算机网络保留和基准来了解网络行为和开发网络的技巧，实现网络教学数字分隔，帮助缺乏使用网络设备、带宽交互的学生和教师.

它主要有如下几个方面的特点:

（1）支持多协议模型：支持常用协议HTTP, DNS, TFTP, Telnet, TCP, UDP, Single Area OSPF, DTP, VTP, and STP，同时支持IP, Ethernet, ARP, wireless, CDP, Frame Relay, PPP, HDLC, inter-VLAN routing, and ICMP等协议模型。
（2）支持大量的设备仿真模型：路由器，交换机，无线网络设备，服务器，各种连接电缆，终端等，这些设备是基于CISCO公司 ..还能仿真各种模块，在实际实验设备中是无法配置整齐的。提供图型化和终端两种配置方法。各设备模型有可视化的外观仿真。
（3）支持逻辑空间和物理空间的设计模式：逻辑空间模式用于进行逻辑拓扑结构的实现；物理空间模式支持构建城市，楼宇、办公室、配线间等虚拟设置
（4）可视化的数据报表示工具：配置有一个全局网络控测器，可以显示仿真数据报的传送路线，并显示各种模式，前进后退，或一步步执行。
（5）数据报传输采用实时模式和仿真模式，实时模式与实际传输过程一样，仿真模式通过可视化模式显示数据报的传输过程，使用户能对抽象的数据的传送具体化。

但是兜兜个人认为:官方说适合初学者—CCNA及刚入门学员.其实并不然.PT的使用较繁琐,对一个刚入门的学员来说,在对设备不熟悉的情况下再去学习这样一款相对复杂的软件,是件很让人头疼的事情!

有人说,在刚入门的时候用PT来做实验,等熟悉了之后,再换用dynamips…其实我很不赞成这种说法!dynamips也很适合初学者,当你在学完CCNA的前几章后,了解了IOS的启动过程.再来对照dynamips的文档搭建自己的实验平台.是件很容易,而且很惬意的事情.更何况,PT仍然是基于软件的模拟环境,更值得唾弃的是:它似乎是flash模拟….

如果是这样的话,我还不如就用最老最原始的模拟器:Boson呢.不过兜兜在这里还是建议大家使用dynamips吧!(dy全集下载).

总体上来说.PT的界面还算漂亮.如果有想尝试一下的朋友,请在看完下面的介绍后,到文末处自行下载.
（1）VLAN应用实训
如图1所示，在逻辑工作空间中创建如科所示网络：

分别给各台PC进相应的网络设置，在两台交换机上进行相应的VLAN划分。进行VLAN的测试工作。
VLAN(虚拟局域网)技术是企业局域网络资源进行划分管理的手段．在二层或三层交换机上实现。VLAN 也是学生应该掌握的网络核心技术之一，通过虚拟平台可以有效的实现单交换VLAN，多交换机VLAN等实验训练，不再受设备的限制。

（2）构建企业网络
企业网络是一个拥有多搂宇的网络结构，一般是有一个接入点，多建筑共享的结构模式，在实际设备训练中很难进行实战训练，采用仿真平台可以有效地实现企业网络的模拟。
下面为模拟两栋建筑物的企业实现网络的构建。
在Packet Tracer中，在LOGICAL模式下先建立先建立如图2的逻辑网络拓扑结结构：

切换到物理工作空间，设立两栋建筑物，如图3所示：

分别在两栋楼建立配线间，把路由器交换机0、交换机1置于公司办公楼，交换2置于另一办公楼的配线间，只要回到逻辑工作空间，对各个设备进行相应的配置，这样就完成了逻辑拓扑与物理拓扑的组建。
通过这个实训任务，学生不仅在逻辑了解了网络的组建过程，同时也了解了物理上各楼宇之间的设置方法，在实施过程中，城市，楼宇，配线间，设备都具有实际的外观的仿真效果，形象，提高了学习兴趣。

（3）协议，层次和数据报
协议、层次和数据报是贯穿于网络技术的核心。在实际网络传输时，学习者无法看到数据的层层变化，使得网络技术概念抽象化。
在Packet Tracer 提供了两种数据传输测试模式：Realtime模式与Simulation模式，在Simulation模式下，它可以展示数据包运行过程中，随时展现各层协议的内容及其变化。使学习者容易理解

（4）除此之外Packet Tracer4.11软件常用于多路由实验，多交换实验，无线网路实验等

（5）系统自带了许多CCNA的任务和和典型的网络拓扑实例，这有利于学员在深度和广度上对知识进一步拓展。

********************************软件下载************************************

1.Boson netsim最新版破解方式及下载:<<三步破解boson netsim for ccnp 7.06>>好友Kachy供文

2.Packet Tracer 下载.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

1.考试申请.
2.在线测试.
3.获取考试券.
4.预订考场.
5.考试.
仅此几步而已.在每一个考生都在准备着考试的时候,一篇贴子,引起了我的注意《万恶的成都电子科大科园那里的考试中心–呼吁抵制》.是啊.在大家按照正常流程备考,到最后信心满满的去参加考试.我们都忽视了一个问题:考场!!!
先看一段引用(右边图片就是此贴发布者在论坛的头像):

万恶的成都电子科大科园那里的考试中心–呼吁抵制

昨天下午我在Pro预约的400考试，原定今天上午10点考，结果9:40到了后，说不能考，和那考官小争吵了起来，我想可能是因为他们看我自己在网上预约的，他赚不到多少钱，就给我捣乱。
那家伙说服务器坏了，昨天重装了，还没弄好，不能考试。这些考场的考官，总以为考生都是糊涂的，不熟悉考试系统。结果当场叫我问住了：要重做系统之前，必须报Pro的技术支持那里做报备，并叫他们把预约时间改成灰色(就不能网上预约了)。
这家伙非跟我叫板，还说自己预约的必须提前三天通知他们，说这是Pro的规定(又给我鬼扯，根本没这规定，Pro的工作人员都说没有这个规定。)
没办法，只好回来了。直接打北京Pro投诉。
北京那边考场渠道的一个GG，态度很好，问了问情况，问我打算今天考还是过几天考，然后我叫他重新安排了考场。说安排好后打电话通知我。
成都的要去Pro考试的，建议不要去科园。目前科力特考场关门了，只有去金海洋考试。
另外还有一个小插曲：进大门时候是科园培训的前台，她们居然说考场和她们不是一起的，是分开的，真够乱的。

刚和该贴楼主聊天,随后得知北京考场渠道已经为她重新安排了考场.并已赶去考试.
下图为楼主发布的网注预定考试截图

这类事情已经不是第一次发生了,之前有几家考场也因为类似的事件被考生投诉.这些考场为了牟利,已经到了无耻的地步.大家可以发现一个很奇怪的问题:很少有考场是独立存在的.他们都是由培训中心申请组建.目的显而易见—是培训行业竞争的一个很重的法码!我有了考场,那么来我这里培训的学员,在培训完毕后,直接在我这里考试.一条龙服务.赚钱也是赚一整套….   [:)1b]     至于网上预订来的人,我要么推说没位置,要么就说机器坏了不能考…总之我编一大堆理由,就不让你考.你咬我呀?

但是今天发生的这次拒考事件中,让该考场碰了一鼻子灰.他们没想到的是—”直接受害人”竟然是一个对考试系统无比熟悉的人.换句话说,也许”受害人”在做考试的时候,他们还不知道在哪里混饭吃呢.”受害人”因为熟悉流程,所以能够很快的重新为自己安排考试,并找到渠道投诉了该考场.那么换做其他人呢,一些不了解考试系统的考生呢?估计很容易就被这些无良考场的工作人员给唬住了.

“受害人”为了不让考生朋友们再次遇到此类事件,提供了解决办法:
有遇到类似情况的考生，可以在上班时间直接打010-82617799，转考场渠道支持: 6500进行投诉。

大家请注意,无论你是网注的还是什么,你只要预定了该考场某一个时刻的考试,你就有权利享受考场为你提供的服务.(记住!–不得无故调戏考场工作人员…^_^)如果考场拒绝为你提供考试服务,那么就请你拿起手里的电话….维权吧!

我不知道成都电子科大科园最后会如何处理此事.但是兜兜这里提醒各个考场:请不要把考生当SB!!

相关日志

• [转]重磅炸弹—ITAA发布JUNOS实验用虚拟机 (7)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• juniper—JN0-400免费认证团购 (11)
• Juniper:FreeBSD安装olive的另一种方法(简便易行)–(三) (0)
• Juniper:FreeBSD安装olive的另一种方法(简便易行)–(二) (0)
• Juniper:FreeBSD安装olive的另一种方法(简便易行)–(一) (0)
• Juniper — 已收到Junios number at time of registration (0)
• JUNOS路由技术免费认证 (0)
• winPcap download (0)
• Install JuniperOS in FreeBSD 4.11 (Attachment download) (0)

锅巴发现用PIX722的OS,经过修改后,可以支持WebVPN.这里兜兜需要重申一下的是:该方法仅供大家学习实验之用,如果应用于其他任何超出范围的业务,一切责任及后果,你自负吧.
另外,请务必在722上.其他的OS不要轻易尝试.损毁不赔!
下面是锅巴提供的修改方法,如果需要去论坛查看原文.请点击这里

1.验证pix722.bin MD5
#md5sum pix722.bin
d2641f1441347b0204449da1d4a06758  pix722.bin
之后解压pix722.bin
#unzip pix722.bin

2.去除image 校验认证
原       : 000122a4: e8 57 fc f3 00 85 c0 0f 84 86 01 00 00
修改后: 000122a4: 90 90 90 90 90 90 90 90 90 90 90 90 90
注意我使用的是linux 下的16进制编辑器hexedit
#hexedit pix722.bin
然后 Ctrl+G 输入0×122a4
光标将定位到
000122A0   00 00 10 00  E8 57 FC F3  00 85 C0 0F  84 86 01 00 …..W……….
000122B0   00 8B 45 EC  89 44 24 04  8B 45 F0 89  04 24 E8 DD  ..E..D$..E…$..
将上面红色字段修改为以下蓝色字段
000122A0   00 00 10 00  90 90 90 90 90 90 90 90 90 90 90 90 …..W……….
000122B0   90 8B 45 EC  89 44 24 04  8B 45 F0 89  04 24 E8 DD  ..E..D$..E…$..
继续下一步操作

3.修改webvpn是否开启的函数
原       : 00d31c18: 55 89 e5 57
修改后: 00d31c18: 31 C0 40 C3
光标定位到:
00D31C10   00 8D BC 27  00 00 00 00  55 89 E5 57 56 83 EC 20  …’….U..WV..
将上面红色字段修改为以下蓝色字段
00D31C10   00 8D BC 27  00 00 00 00  31 C0 40 C3 56 83 EC 20  …’….U..WV..
继续下一步操作

4.修改返回得到许可的ssl peers数量的函数
原       : 00f5c990: 55 a1 70 4c 3a 01
修改后:  00f5c990: b8 00 01 00 00 c3
光标将定位到
00F5C990   55 A1 70 4C  3A 01 89 E5  5D C3 8D B6  00 00 00 00  U.pL:…]…….
将上面红色字段修改为以下蓝色字段
00F5C990   b8 00 01 00 00 c3 89 E5  5D C3 8D B6  00 00 00 00  U.pL:…]…….

完成上面三个步骤 按F2保存,Ctrl+C,退出
之后就可以使用PEMU来加载这个修改过的PIX OS 了

然后使用PEMU加载其.效果演示如下:

pixfirewall# show version
Cisco PIX Security Appliance Software Version 7.2(2)

Compiled on Wed 22-Nov-06 14:16 by builders
System image file is “Unknown, monitor mode tftp booted image”
Config file at boot was “startup-config”
pixfirewall up 51 secs
Hardware:   PIX-525, 128 MB RAM, CPU Pentium II 1 MHz
Flash E28F128J3 @ 0xfff00000, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
0: Ext: Ethernet0           : address is 00aa.0000.0202, irq 9
The Running Activation Key is not valid, using default settings:

pixfirewall# conf t
pixfirewall(config)# web
pixfirewall(config)# webvpn
pixfirewall(config-webvpn)# ?

WebVPN commands:
apcf                         Load Application Profile Customization Framework
(APCF) profile
authorization-dn-attributes  The DN of the peer certificate used as username
for authorization
authorization-required       Require users to authorize successfully in order
to connect
auto-signon                  Auto signon
cache                        Configure WebVPN cache
character-encoding           Configures the character encoding for WebVPN
portal pages
csd                          This specifies whether Cisco Secure Desktop is
enabled and the package file name to be used.
customization                Configure WebVPN GUI Customization object
default-idle-timeout         This is the default idle timeout in seconds
enable                       Enable WebVPN on the specified interface
exit                         Exit from WebVPN configuration mode
file-encoding                Configures the file encoding for a file sharing
server
help                         Help for WebVPN commands
http-proxy                   This is the proxy server to use for HTTP
requests
https-proxy                  This is the proxy server to use for HTTPS
requests
java-trustpoint              Configure WebVPN java trustpoint
memory-size                  Configure WebVPN memory size
no                           Remove a WebVPN command or set to its default
port                         WebVPN should listen for connections on the
specified port
port-forward                 Configure the port-forward list for WebVPN
proxy-bypass                 Configure proxy bypass
rewrite                      Configure content rewriting rule
sso-server                   Configure an SSO Server
svc                          This specifies whether the SSL VPN Client is
enabled and the package file name to be used.
tunnel-group-list            Configure WebVPN group list dropdown in login
page
url-list                     Configure a list of URLs for use with WebVPN
pixfirewall(config-webvpn)#

如果你需要了解如何使用QEMU来跑PIX防火墙,请参看:
1.由阿咩操刀的《【原创】Cisco实验模拟器 PIX个人版 v1.9》
2.由刀客制作的《重磅炸弹–PIX绿色实验下载->菜刀版(20M) 》
3.更多精彩,请前往netemu的PIX版块.那里有更多技术牛人提供更多的精彩文章.

如果你对Cisco设备硬件模拟还不是很明白的话,那么就去netmeu的基础区去翻翻吧.
1.刀客同学的《dynamips/dynagen/pemu中文教程11.7by网络刀客》
2.ICE.man同学的《Netemu论坛专帖 Dynamips基础教程系列—交换模块的使用》,顺便提一下,ICE9月就考安全IE的LAB了.祝他顺利pass考试咯!
3.锅巴同学的《dynagen视频教程(在线) 》.哪家公司把锅巴挖到了,绝对是个宝贝哦!

你也可以直接点击此处下载按照上述方式修改好的PIX722直接使用.(点此下载)

这里兜兜推荐CISCO官方的PIX Firewall命令参考：《Cisco PIX Firewall Software Command References》

• Cisco PIX Firewall Software Version 8.0
  • Cisco Security Appliance Command Reference, Version 8.0
• Cisco PIX Firewall Software Version 7.2
  • Cisco Security Appliance Command Reference, Version 7.2
• Cisco PIX Firewall Software Version 7.1
  • Cisco Security Appliance Command Reference, Version 7.1
• Cisco PIX Firewall Software Version 7.0
  • Cisco Security Appliance Command Reference, Version 7.0
• Cisco PIX Firewall Software Version 6.3
  • Cisco PIX Firewall Command Reference, Version 6.3
• Cisco PIX Firewall Software Version 6.2
  • Cisco PIX Firewall Command Reference, Version 6.2

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

by the way : 该考试免费截至 2008.8.31 自2008.9.1开始半价
这里兜兜需要确认一下,有多少人愿意参与此次团购JN0-400免费认证题库的?
有购买需要的朋友,请直接发电子邮件到:netemu@hotmail.com 兜兜收.标题注明为:团购JN0-400题库.
并附上个人信息,该信息由兜兜统一收集发送给pass4sure官方.

可能会有人怀疑我自己买了题之后,再分批卖给大家.这里我需要说明的是:团购的每个人,都可以得到官方的授权账号,并可以自动升级题库.最终的收款方在pass4sure!
团购规则如下:
1.目前已和pass4sure官方达成最终的购买协议.规则为分组购买,每组四人.每人一百元.
2.小组可自发组织,也可全权交由兜兜来临时组建.各小组指定一个组长收集本组所有成员的购买资金.如果相互都不认识,也可找兜兜负责收取.(前提是相信我的话^_^)
3.小组长或者兜兜向pass4sure官方付款后,将分组通知下载题库的具体步骤操作.这里不多做透露.
4.由于是团购,如果发生少数人使用此题未通过,但是大部分人却pass的情况.pass4sure不提供退款服务.因为未通过属于个人原因.但是可以依情况为其免费的延长更新周期.
5.从购买日起,该题的更新周期为90天.由于JN0-400为新考试科目,更新相对较频繁.P4S会同步更新,因此截屏共享肯定不是最合适的办法.
6.本活动发起人为兜兜.全权组织者是兜兜.活动平台仅限于bbs.junipers.cn论坛的会员.请在发邮件时告知你的论坛ID.非本论坛人士请求将不予受理.

100RMB,似乎已经很低的吧.如果还想再低,那么我无能为力.请自便.

兜兜这里把自己的联系方式提供出来.方便大家随时联系.呵呵.
有团购意向的请加QQ群:26973601 进群后把自己的群名片更改为:JNCIA团购-XX(例如:JNCIA团购-兜兜 )
Q Q: 16317065 (非主号.加友时请说明团购JN0-400)
Gtalk: thinkpid@gmail.com (加友请说明团购JN0-400)
MSN: netemu@hotmail.com (加友请说明团购JN0-400)
手机: 13584032893 (前段时间刚换的palm treo 680.缺点就是电池不够用.正常两天必须充电.请在上面的各种方式均无法联系本人时拨打手机.谢谢了.别发短信,短信我不回的!—点这里可以看我博客上关于我的新手机的文章)

OK.希望此次团购能够圆满成功!

最后,我需要声明一点:此次活动,我和此论坛的管理员是发起人.我全权组织.纯义务!无酬劳!在后面线下见面会的时候,如果要谢我的话…一定要请我喝酒!

相关日志

• [转]重磅炸弹—ITAA发布JUNOS实验用虚拟机 (7)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)
• 无良考场:拒绝为考生提供考试服务 (1)
• Cisco:思科考试涨价调整通知 (2)
• Cisco certification:部分考试代码更新 (0)
• Juniper:FreeBSD安装olive的另一种方法(简便易行)–(三) (0)

一.实验提示(Lab hints)

1、 本实验使用R1,SW1,SW2,PC1,PC2,PC3这6台设备，其中PC1,PC2,PC3用路由器代替。

This lab will use R1, SW1, SW2, PC1, PC2, and PC3, and PC1, PC2, PC3 are replaced by routers.

2、本实验要实现单臂路由，EthernetChannel和在路由器上实现DHCP服务。

This lab will achieve single-arm routing, EthernetChannel and DHCP service on router.

二．实验要求(Lab requirements)

1、SW1,SW2上划分3个VLAN，VLAN名称分别为LAB2,LAB3,LAB4，使用VTP来同步VLAN信息，SW1为server mode,SW2为client mode，VTP域名为CCNA LAB,VTP密码为cisco.

Divide 3 VLANs on SW1 and SW2, which are LAB2, LAB3 and LAB4. Use VTP to synchronize VLAN information, SW1 being server mode, SW2 being client mode，VTP domain being CCNA LAB,VTP password being cisco.

2、将SW1,SW2之间的链路设置为trunk link,并在2条链路上实现EhernetChannel.

Set the link between SW1 and SW2 as trunk link, and achieve EhernetChannel on the two links.

2、 使PC1成为LAB2的成员，PC2成为LAB3成员，PC3成为LAB4成员,IP地址分配如下：

Make PC1 a membership of LAB2, PC2 a membership of LAB3, PC3 a membership of LAB4. IP addresses distribution is as follows:

LAB2 172.16.1.0/24 gateway:172.16.1.254

LAB3 172.16.2.0/24 gateway:172.16.2.254

LAB4 172.16.3.0/24 geteway:172.16.3.254

4、 在R1上配置DHCP服务，让PC1,PC2,PC3能够获得IP地址。（注意PC1,PC2,PC3是路由器模拟的，即路由器成为DHCP Client）

Configure DHCP services on R1 so that PC1, PC2 and PC3 can obtain IP addresses. (Note that PC1, PC2 and PC3 are simulated by routers, i.e. router turns into DHCP Client)

5、 在R1上实现单臂路由使VLAN能互相访问。

Achieve single-arm routing on R1 so that VLAN can access each other.

三．试验步骤（Lab steps:）

1、 配置VTP 和VLAN

Configure VTP and VLAN

SW1#vlan database

SW1(vlan)#vtp server configure VTP Mode

SW1(vlan)#vtp domain CCNALAB configure VTP Domain

SW1(vlan)#vtp password cisco configure VTP Password

SW1(vlan)#vlan 2 name lab2 create VLAN

SW1(vlan)#vlan 3 name lab3

SW1(vlan)#vlan 4 name lab4

SW1(vlan)#exit

2、 为了让SW2同步SW1的VLAN信息，接下来配置TRUNK ，配置如下：

Configure TRUNK so that SW2 can synchronize VLAN information of SW1:

SW1(config)#interface fastEthernet 1/1

SW1(config-if)#switchport mode trunk

SW1(config-if)#switchport trunk encapsulation dot1q

SW1(config-if)#no shutdown

SW1(config-if)#exit

SW1(config)#interface fastEthernet 1/2

SW1(config-if)#switchport mode trunk

SW1(config-if)#switchport trunk encapsulation dot1q

SW1(config-if)#no shutdown

SW2(config)#interface fastEthernet 1/1

SW2(config-if)#switchport mode trunk

SW2(config-if)#switchport trunk encapsulation dot1q

SW2(config-if)#no shutdown

SW2(config-if)#exit

SW2(config)#interface fastEthernet 1/2

SW2(config-if)#switchport mode trunk

SW2(config-if)#switchport trunk encapsulation dot1q

SW2(config-if)#no shutdown

2、 将SW2配置成VTP Client模式，使其同步SW1上的VLAN 信息，配置如下

Configure SW2 as VTP Client mode, so that it can synchronize VLAN information on SW1:

SW2#vlan database

SW2(vlan)#vtp client

SW2(vlan)#vtp domain CCNALAB

SW2(vlan)#Vtp password cisco

SW2(vlan)#exit

完成以上配置后，使用show vlan-switch查看VLAN是否同步

After the above configuration, use show vlan-switch to check whether VLAN is synchronized.

SW2#show vlan-switch

VLAN Name Status Ports

—- ——————————– ——— ——————————-

1 default active Fa1/0, Fa1/3, Fa1/4, Fa1/5

Fa1/6, Fa1/7, Fa1/8, Fa1/9

Fa1/10, Fa1/11, Fa1/12, Fa1/13

Fa1/14, Fa1/15

2 lab2 active

3 lab3 active

4 lab4 active

3、 配置EtherChannel，配置如下：

Configure EtherChannel:

SW1(config)#interface range fastEthernet 1/1 -2

SW1(config-if-range)#channel-group 1 mode on

SW2(config)#interface range fastEthernet 1/1 -2

SW2(config-if-range)#channel-group 1 mode on

使用show etherchannel 1 port查看以太网通道的端口绑定信息

Use show etherchannel 1 port to check bundled information of Ethernet-channel port

SW2#show etherchannel 1 por

Port: Fa1/1

————

Port state = Up Mstr In-Bndl

Channel group = 1 Mode = On/FEC Gcchange = 0

Port-channel = Po1 GC = 0×00010001 Pseudo port-channel = Po1

Port index = 0

Age of the port in the current state: 00d:00h:01m:01s

Port: Fa1/2

————

Port state = Up Mstr In-Bndl

Channel group = 1 Mode = On/FEC Gcchange = 0

Port-channel = Po1 GC = 0×00010001 Pseudo port-channel = Po1

Port index = 1

Age of the port in the current state: 00d:00h:01m:00s

4、 将端口指派到VLAN中，配置如下：

Assign port to VLAN with the following configuration:

SW1(config)#interface fastEthernet 1/11

SW1(config-if)#switchport mode access

SW1(config-if)#switchport access vlan 2

SW1(config-if)#no shutdown

SW1(config)#interface fastEthernet 1/12

SW1(config-if)#switchport mode access

SW1(config-if)#switchport access vlan 3

SW1(config-if)#no shutdown

SW2(config)#interface fastEthernet 1/11

SW2(config-if)#switchport mode access

SW2(config-if)#switchport access vlan 4

SW2(config-if)#no shutdown

使用show vlan-swi tch查看VLAN配置信息

Use show vlan-swi tch to check VLAN configuration information

SW1#show vlan-switch

VLAN Name Status Ports

—- ——————————– ——— ——————————-

1 default active Fa1/0, Fa1/3, Fa1/4, Fa1/5

Fa1/6, Fa1/7, Fa1/8, Fa1/9

Fa1/10, Fa1/13, Fa1/14, Fa1/15

2 lab2 active Fa1/11

3 lab3 active Fa1/12

可以看到端口以加入到指定的VLAN中。

Here you can see port is assigned to VLAN.

5、 配置单臂路由，因为SW1的fastethernet1/5和R1相连，要实现单臂路由，需要将1/5配置成trunk ,配置如下：

Configure single-arm routing, because fastethernet1/5 of SW1 is connected to R1, in order to achieve single-arm routing, 1/5 need to be configured as trunk. Configuration is as follows:

SW1(config)#interface fastEthernet 1/5

SW1(config-if)#speed 100

SW1(config-if)#duplex full

SW1(config-if)#switchport mode trunk

SW1(config-if)#switchport trunk encapsulation dot1q

SW1(config-if)#no shutdown

R1(config)#interface fastEthernet 0/0

R1(config-if)#no shutdown

R1(config-if)#speed 100

R1(config-if)#duplex full

配置子接口，为每个VLAN提供路由子接口，配置如下：

Configure sub-interface, and provide route sub-interface for each VLAN. Configuration is as follows:

R1(config)#interface fastEthernet 0/0.1 VLAN1 子接口，本实验VLAN1是管理VLAN

VLAN1 sub-interface, VLAN1 manage VLAN in this lab.

R1(config-subif)#encapsulation dot1Q 1

R1(config-subif)#ip add 192.168.1.254 255.255.255.0 配置对应VLAN成员的网关

Configure gateway for corresponding VLAN member

R1(config)#interface fastEthernet 0/0.2

R1(config-subif)#encapsulation dot1Q 2

R1(config-subif)#ip add 172.16.1.254 255.255.255.0 配置对应VLAN成员的网关

Configure gateway for corresponding VLAN member

R1(config)#interface fastEthernet 0/0.3

R1(config-subif)#encapsulation dot1Q 3

R1(config-subif)#ip add 172.16.2.254 255.255.255.0 配置对应VLAN成员的网关

Configure gateway for corresponding VLAN member

R1(config)#interface fastEthernet 0/0.4

R1(config-subif)#encapsulation dot1Q 4

R1(config-subif)#ip add 172.16.3.254 255.255.255.0 配置对应VLAN成员的网关

Configure gateway for corresponding VLAN member

6、 在R1上配置DHCP服务，由于我们有3个VLAN，为3个VLAN的成员自动的分配IP地址，需要配置3个地址池，配置如下：

Configure DHCP services on R1. Since we have three VLANs, three address pools needs to be allocated for the automatic IP addresses of the three VLAN members. Configuration is as follows:

由于每个VLAN的网关是固定的，所以网关的IP地址不能分配给client，这些地址不能分配出去，配置如下：

As each VLAN Gateway is fixed, so the IP address of gateway can not be allocated to client. These addresses can not be assigned out. Configuration is as follows:

R1(config)#ip dhcp excluded-address 172.16.1.254 172.16.1.254 定义不能分配的IP空间

Define the IP space that can not be allocated

R1(config)#ip dhcp excluded-address 172.16.2.254 172.16.2.254

R1(config)#ip dhcp excluded-address 172.16.3.254 172.16.3.254

为每个VLAN定义一个地址池和网关，

Define address pool and gateway for each VLAN,

R1(config)#ip dhcp pool lab2

R1(dhcp-config)#network 172.16.1.0 255.255.255.0

R1(dhcp-config)#default-router 172.16.1.254 分配给 client端的网关IP

Gateway IP allocated to client

R1(dhcp-config)#dns-server 202.96.128.86 221.4.66.66 分配给clinet端的DNS服务器IP

DNS server IP allocated to client

R1(config)#ip dhcp pool lab3

R1(dhcp-config)#network 172.16.2.0 255.255.255.0

R1(dhcp-config)#default-router 172.16.2.254

R1(dhcp-config)#dns-server 202.96.128.86 221.4.66.66

R1(config)#ip dhcp pool lab4

R1(dhcp-config)#network 172.16.3.0 255.255.255.0

R1(dhcp-config)#default-router 172.16.3.254

R1(dhcp-config)#dns-server 202.96.128.86 221.4.66.66

7、 配置DHCP客户端，在PC1,PC2,PC3上面配置，配置如下

Configure DHCP server on PC1, PC2 and PC3 with the following configuration:

PC1(config)#interface fastEthernet 0/0

PC1(config-if)#duplex full

PC1(config-if)#speed 100

PC1(config-if)#ip address dhcp 配置为DHCP客户端

Configured as DHCP client server

PC2(config)#interface fastEthernet 0/0

PC2(config-if)#duplex full

PC2(config-if)#speed 100

PC2(config-if)#ip address dhcp 配置为DHCP客户端

Configured as DHCP client server

PC3(config)#interface fastEthernet 0/0

PC3(config-if)#duplex full

PC3(config-if)#speed 100

PC3(config-if)#ip address dhcp 配置为DHCP客户端

Configured as DHCP client server

分别在PC1,PC2,PC3上使用show ip interface brief查看端口是否分配到IP

Use command show ip interface brief on PC1, PC2 and PC3 respectively to check whether IP is allocated to port.

PC3#show ip interface brief

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 172.16.3.1 YES DHCP up up

分别在PC1,PC2,PC3上使用show ip route查看是否有一条默认路由，如下

Use command show ip route on PC1, PC2 and PC3 respectively to check whether a default route exists:

PC3#show ip route

Gateway of last resort is 172.16.3.254 to network 0.0.0.0

172.16.0.0/24 is subnetted, 1 subnets

C 172.16.3.0 is directly connected, FastEthernet0/0

S* 0.0.0.0/0 [254/0] via 172.16.3.254

可以看到在PC3上有一条指向172.16.3.354的默认路由

A default route pointed to 172.16.3.354 is found on PC3.

在PC1使用ping 172.16.3.1 检测是否能ping通。

Use ping 172.16.3.1 on PC1 to check whether it can ping successfully.

PC1#ping 172.16.3.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.3.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 140/226/304 ms

测试成功，同样也可以在PC2上进行测试。

Test succeeds. This can also be tested on PC2.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

本次实验拓扑如下,点击可在新窗口中看大图．Lab topology:

实验要求（Lab requirements）

1、配置好实验拓扑图中每个路由器的接口IP地址，使用ping命令测试相邻路由器的连通性！！同时思考还有其他方法可以用来说明2台相邻设备已经是连通的吗？

Configure interface IP addresses of each router in the topology, and use command ping to test the connectivity of adjacent routers! Have a think about whether there are other ways that can be used to test the connectivity of two neighbor advices?

2、 通过第一步配置后，在每台路由器上配置 RIPv1协议，使全网互通！！用什么命令可以查看路由器是否学习到所有网络的路由？

Set RIPv1 protocol on each router after the first step configuration to enable the connectivity of the entire network! Then what commands should be used to check whether the router has learnt all the network routing?

3、 在R5上的特权模式下（#模式）使用debug ip rip命令，查看路由器R5上接收和发送的RIP更新，并可以观察到网络路由的汇总和水平分割的效果，请将debug的输出截图下来。

Use command debug ip rip in the privilege mode (# mode) on R5 to view the RIP updates received and sent on router R5. And network routing summary and split-horizon effects can also be observed. Please screen shot debug output.

4、 在R1上使用show ip route命令查看路由表，查看RIP协议的汇总特性，并将R1的路由表截图！

Use command show ip route on R1 to check routing table, read RIP protocol summary, and screen shot routing table R1.

5、 在R1上使用ping 10.10.5.1, 是否能ping通？为什么？有什么办法解决？

Use ping 10.10.5.1 on R1 to check whether it can ping successfully. Why? How to solve the problem?

6、 在R5上使用show ip route查看路由表，可以看到一条如下路由条目：

Use show ip route on R5 to check routing table, and we’ll see a routing entries as follows:

R 172.16.0.0/16 [120/1] via 172.168.2.2, 00:00:10, Serial1/1

                          [120/1] via 172.17.1.2, 00:00:26, Serial1/2

为什么有2个到达172.16.0.0/16的下一跳地址？ [120/1]代表什么意思？能不能通过修改R5上的S1/1接口的带宽来修改这条路由的metric值？为什么？

Why are there two next hop addresses reaching 172.16.0.0/16? What is [120 / 1]? can we change the routing metric value by changing the bandwidth of S1/1 interface on R5? Why?

7、 在所有路由器上启用RIPv2路由协议并在所有路由器上禁用自动汇总后，在R1上再次ping 10.10.5.1 测试是否能ping通？为什么？

Enable RIPv2 routing protocol on all routers and disable auto summary on all routers, and then ping 10.10.5.1 on R1 again to check the result. Why?

此仅为练习题,提供给CCNA考生练习之用.兜兜在这里就不卖弄啥了.各位请自行独立思考.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

Price Increase For Cisco Exams
Cisco has announced a price increase for its exams effective June 24, 2008.  The following FAQ from Cisco provides
additional information on this increase.
FAQ for Price Adjustment to CCNA Comprehensive, Professional-level Composite and CCIE Exams
June 24, 2008

Q: What exactly is the price adjustment being made at this time?
A:  As of June 24, 2008, the price of the CCNA comprehensive exam #640-802, the single exam option for achieving CCNA
certification, will be $250 USD, the professional-level Composite exam #642-892, will be $300 USD and the CCIE written
exams will be $350 USD or the local currency equivalent in all regions.

Q: Why is the price being adjusted at this time?
A:  Our market analysis indicates the prices of these exams are out of line with the market value they provide and with
other IT certification exams at the Associate, Professional and Expert level.  Cisco Career Certifications is one of the
industry’s most recognizable and highly valued programs for IT professionals.  Achieving a CCNA, Professional or Expert
certification validates knowledge and hands-on skill with the world’s leading networking solutions.

Q: Will the price be adjusted in all worldwide locations?
A:  Yes, the price will be adjusted in all regions.  Cisco Certified Learning Partners in some areas may include the
exam along with a training course for a single price.

Q: Will the price to Networking Academy students also be changed?
A:  Consistent with our past years strategy, Cisco will provide financial assistance to Cisco Networking Academy
students in the form of discounts to offset the cost of key certification exams.

Q:  Will the price increase impact the Cisco CA employee discount?
A:  CA employee voucher program will not change ($50USD)

CCNA认证考试费价格翻倍！由125美元调到250美元(这门考试是CISCO认证体系中最低阶的一门,之前已经都很火爆.现在cisco下了黑手,直接翻番.^_^难道cisco此举意在逼大家伙儿都去考CCIE?)

CCNP认证考试642-901、642-812、642-825、642-845现在价格每门150美元，在原价125美元的基础涨了20%

CCNP认证的642-892考试费用现在为300美元，价格在原价187.5美元基础上上调60%

CCSP认证考试每门考试为150美元，均在原价125美元基础上调20%

CCIE认证笔试350美元，在原价315美元基础涨了11.11%

呵呵.兜兜提示大家一下,以前考CCNP的时候,可以选择三门或者四门的方式来通过该认证.当时兜兜自己选择的也是三门,不为别的,三门虽然难度较大,但是可以节省一门的费用.现在不行了.三门和四门价格一样.毫无价格优惠可言!

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco CCIE R&S lab10月发布V4版 (0)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

这是安装在vmdk中安装了一套windowsxp的操作系统,然后在虚拟系统中预先配置好dynamips的实验环境,并且在该系统中内置了大量的学习文档,及学习视频!

下面对其内容做一个简单的介绍,然后在本文的最下方公布Bit种子和配套软件下载地址.
一.VMDK中包含了哪些东东是我们所需要的?：

1.先看一下运行起来的虚拟系统.

2.运行一套rack,并直接利用内置的SecureCRT来配置设备.

3.利用内置的ethereal sniffer packet.

4.VMDK内置的部分学习文档

5.VMDK内置的部分学习视频

二.安装及使用

安装非常傻瓜…只要你装了VMWare.就OK了.或者直接去这里下载一个VMWare player即可直接使用.流畅运行整套系统建议你的宿主机装备了2G内存.VMDK尽量的分的更大一点哦.另外,在安装完VMWare workstation或者VMWare player后,系统会自动启动几个VM服务,DHCP和NAT可以把它设置成disable.然后关闭VM1和VM8两块网卡.那些对你模拟CISCO环境,基本上一点用都没有,开着徒增资源.

三.注意事项：

1. 请有下载需要的朋友们一起做种加速。刚开始做种，速度比较慢，请耐心挂机，下载的人越多，速度就会越来越快。下载完之后请继续提供做种。（流畅运行该系统要求电脑有1GB内存）
2. 下载完成后继续做种注意：下载完成运行过1次后，源文件大小会发生变化.为了方便其他朋友能够快速而准确的获取他们想要的内容,请在下载后,不要直接在共享文件中运行其.把这套文件拷贝到其他分区,然后再运行.把整套干净的源文件备份起来吧.呵呵.不要觉得它太大,而不愿意牺牲硬盘空间….删点AV就够了.   [:)4a]
3. 客户端推荐用比特彗星（据说比特精灵无法下载，但未证实）

四.下载地址：

• 下载虚拟机播放器：http://www.vmware.com/download/player/
• 下载《ITAA虚拟学习机》BT种子
  ITAA-OPEN-VM完整版.torrent [158.63 KB]

如果有关于这套open实验套装的疑问,你可以登陆这里提交你的问题.感谢ITAA实验室为各位思科圈子里的朋友提供了这么完整的一套实验环境和学习文档资料!   [:)1b]

相关日志

• 招聘:网络工程师(南京) (9)
• [转]重磅炸弹—ITAA发布JUNOS实验用虚拟机 (7)
• 影响我工作生活的几大应用软件 (6)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)

点击此处,直接进入下载页面.已经重传,该链接有效（解压密码gotolab.cn或者www.gotolab.cn）

进入下载页后,请耐心等待15秒.然后会跳转到真正的下载页面.请看清提示. [:)1b]
如果对本书的内容还不熟悉的话,可以先看一下目录吧.下面是该书的目录结构.

第一部分　外部网关协议(EGP)

第1章　外部网关协议　2
1.1　EGP的起源　2
1.2　EGP的操作　3
1.2.1　EGP拓扑问题　3
1.2.2　EGP的功能　5
1.2.3　EGP消息格式　12
1.3　EGP的不足　18
1.4　配置EGP　19
1.4.1　案例研究：一个EGP末梢网关　19
1.4.2　案例研究：一个EGP核心网关　22
1.4.3　案例研究：间接邻居　25
1.4.4　案例研究：缺省路由　27
1.5　EGP的故障排除　28
1.5.1　解释邻居表　29
1.5.2　案例研究：聚合到Syrup的速度　30
1.6　尾注　31
1.7　展望　32
1.8　复习问题　32
1.9　配置练习　33
1.10　故障排除练习　36

第2章　BGP4简介　38
2.1　无类域间路由　38
2.1.1　归纳摘要　39
2.1.2　无类路由　40
2.1.3　路由总结：优势、劣势以及不对称性　43
2.1.4　Internet：经过多年后还保持着分层结构　45
2.1.5　CIDR：减轻了路由表的爆炸性增长　48
2.1.6　CIDR：降低了B类地址空间的消耗　51
2.1.7　CIDR遇到的问题　51
2.2　谁需要BGP　54
2.2.1　一个单宿主自治系统　55
2.2.2　多宿主到一个单一的AS　57
2.2.3　多宿主到多个自治系统　60
2.2.4　“负载均衡”中应当注意的一个问题　62
2.2.5　BGP的危险　63
2.3　BGP基础知识　64
2.3.1　BGP消息类型　66
2.3.2　BGP有限状态机　67
2.3.3　路径属性　70
2.3.4　管理权值　78
2.3.5　AS_SET　79
2.3.6　BGP决策过程　80
2.3.7　路由抑制　82
2.4　IBGP和IGP的同步　83
2.5　管理大型BGP对等关系　88
2.5.1　对等组　88
2.5.2　团体　88
2.5.3　路由反射器　88
2.5.4　联盟　93
2.6　BGP消息格式　94
2.6.1　Open消息　95
2.6.2　Update消息　96
2.6.3　Keepalive消息　97
2.6.4　Notification消息　97
2.7　尾注　99
2.8　展望　99
2.9　推荐的读物　99
2.10　复习题　99

第3章　BGP4的配置以及故障排除　105
3.1　基本的BGP配置　105
3.1.1　案例研究：建立BGP路由器之间的对等　105
3.1.2　案例研究：向BGP中注入IGP路由　110
3.1.3　案例研究：向IGP注入BGP路由　115
3.1.4　案例研究：没有IGP的IBGP　120
3.1.5　案例研究：IGP上的IBGP　126
3.1.6　案例研究：EBGP多跳　132
3.1.7　案例研究：聚合路由　135
3.1.8　管理BGP连接　150
3.2　路由策略　153
3.2.1　重置BGP连接　153
3.2.2　案例研究：通过NLRI过滤路由　155
3.2.3　案例研究：通过AS_PATH过滤路由　161
3.2.4　案例研究：通过路由图过滤路由　164
3.2.5　案例研究：管理权值　166
3.2.6　案例研究：管理距离以及后门路由　173
3.2.7　案例研究：使用LOCAL_PREF 属性　178
3.2.8　案例研究：使用MULTI_EXIT_DISC属性　182
3.2.9　案例分析：附加AS_PATH　187
3.2.10　案例分析：路由标记　190
3.2.11　案例分析：路由抑制　194
3.3　大型BGP　197
3.3.1　案例分析：BGP对等组　198
3.3.2　案例分析：BGP 团体　201
3.3.3　案例分析：专用AS号　212
3.3.4　案例分析：BGP 联盟　215
3.3.5　案例分析：路由反射器　225
3.4　展望　230
3.5　推荐的读物　230
3.6　命令归纳　231
3.7　配置练习　235
3.8　故障排除练习　240

第二部分　高级IP路由问题

第4章　网络地址翻译　250
4.1　NAT的操作　250
4.1.1　NAT的基本概念　250
4.1.2　NAT和IP地址的保存　252
4.1.3　NAT和ISP的变更　254
4.1.4　NAT和多宿主AS　255
4.1.5　端口地址翻译　257
4.1.6　NAT和TCP负载分配　258
4.1.7　NAT和虚拟服务器　259
4.2　NAT的问题　260
4.2.1　信头校验和　260
4.2.2　分段　260
4.2.3　加密　260
4.2.4　安全性　261
4.2.5　具体协议涉及到的问题　261
4.3　配置NAT　268
4.3.1　案例研究：静态NAT　268
4.3.2　案例研究：动态NAT　274
4.3.3　案例研究：网络合并　278
4.3.4　案例研究：用NAT实现ISP多宿　281
4.3.5　端口地址翻译　286
4.3.6　案例研究：TCP负载均衡　287
4.3.7　案例研究：服务分配　288
4.4　NAT故障排除　290
4.5　尾注　292
4.6　展望　292
4.7　命令归纳　292
4.8　配置练习　293
4.9　故障排除练习　295

第5章　IP多播路由介绍　297
5.1　对IP多播的要求　299
5.2　组成员概念　303
5.2.1　加入和退出组　304
5.2.2　因特网组管理协议(IGMP)　308
5.2.3　Cisco组员资格协议(CGMP)　313
5.3　多播路由的问题　320
5.3.1　多播的前转　320
5.3.2　多播路由　321
5.3.3　稀疏与密集拓扑的比较　322
5.3.4　隐式加入与显式加入的比较　323
5.3.5　基于源的树与共享树的比较　325
5.3.6　多播的范围　326
5.4　距离向量多播路由协议(DVMRP)的操作　329
5.4.1　对邻居的发现和维护　330
5.4.2　DVMRP路由表　330
5.4.3　DVMRP包的前转　332
5.4.4　DVMRP消息的格式　332
5.5　MOSPF的操作　338
5.5.1　MOSPF基础　339
5.5.2　区域间的MOSPF　340
5.5.3　AS间的MOSPF　342
5.5.4　MOSPF扩展的格式　343
5.6　基于核心的树(CBT)的操作　345
5.6.1　CBT基础　345
5.6.2　寻找核心　346
5.6.3　CBT指定路由器　347
5.6.4　成员与非成员的多播源　348
5.6.5　CBT消息格式　349
5.7　与协议无关的多播(PIM)的介绍　353
5.8　与协议无关多播，密集模式(PIM-DM)的操作　354
5.8.1　PIM-DM基础　354
5.8.2　Prune 消息的覆盖　359
5.8.3　单播路由的改变　361
5.8.4　PIM-DM指定路由器　361
5.8.5　PIM前转器的选举　361
5.9　与协议无关的多播，稀疏模式(PIM-SM)的操作　364
5.9.1　PIM-SM基础　364
5.9.2　查找会聚点　365
5.9.3　PIM-SM和共享树　367
5.9.4　源的注册　369
5.9.5　PIM-SM与最短路径树　375
5.9.6　PIMv2消息格式　379
5.10　尾注　385
5.11　展望　386
5.12　推荐读物　386
5.13　命令归纳　386
5.14　复习问题　388

第6章　IP多播路由的配置和故障排除　394
6.1　配置IP多播路由　394
6.2　案例研究：配置与协议无关多播，密集模式(PIM-DM)　395
6.3　配置与协议无关多播，稀疏模式(PIM-SM)　403
6.3.1　案例研究：静态配置RP　403
6.3.2　案例研究：配置Auto-RP　409
6.3.3　案例研究：配置稀疏——密集模式　416
6.3.4　案例研究：配置自举协议　419
6.4　案例研究：多播负荷分担　423
6.5　IP多播路由的故障排除　429
6.5.1　使用mrinfo　430
6.5.2　mtrace与mstat的使用　432
6.6　展望　436
6.7　配置练习　436
6.8　排错练习　438

第7章　大范围IP多播路由　441
7.1　多播范围控制　441
7.2　案例学习：多播穿过非多播域　443
7.3　连接到DVMRP网络　445
7.4　AS间多播　448
7.4.1　BGP的多协议扩展(MBGP)　450
7.4.2　多播源发现协议(MSDP)运行　451
7.4.3　MSDP消息格式　453
7.5　案例学习：配置MBGP　456
7.6　案例学习：配置MSDP　460
7.7　案例学习：MSDP全连接组　464
7.8　案例学习：泛播 RP　466
7.9　案例学习：MSDP缺省对等实体　470
7.10　命令归纳　473
7.11　尾注　474
7.12　展望　474
7.13　复习问题　474

第8章　IPv6　476
8.1　IPv6的设计目标　476
8.1.1　提高可扩展性　477
8.1.2　易于配置　477
8.1.3　安全性　478
8.2　当前IPv6状态　478
8.2.1　IPv6规范(RFC)　478
8.2.2　厂商支持　479
8.2.3　实现　479
8.3　IPv6包格式　480
8.3.1　IPv6地址　480
8.3.2　地址空间　481
8.3.3　地址的文字表示　481
8.3.4　地址前缀的文字表示　482
8.3.5　地址类型分配　482
8.4　地址结构　484
8.4.1　可聚合全球地址格式　484
8.4.2　IPv6头　493
8.5　IPv6功能　497
8.5.1　在Cisco路由器上使能IPv6能力　497
8.5.2　ICMPv6　498
8.5.3　邻居发现　499
8.5.4　自动配置　506
8.5.5　路由　509
8.5.6　泛播处理过程　521
8.5.7　多播　522
8.5.8　服务质量　526
8.6　从IPv4向IPv6过渡　526
8.6.1　双协议栈　527
8.6.2　DNS　527
8.6.3　IPv4中的IPv6隧道　528
8.6.4　网络地址翻译-协议翻译　530
8.7　尾注　530
8.8　展望　530
8.9　推荐书目　531
8.10　复习问题　531
8.11　参考文献　533

第9章　路由器管理　535
9.1　规则和程序定义　536
9.1.1　服务等级协议　536
9.1.2　改变管理　536
9.1.3　扩大提交过程程序　538
9.1.4　更新规则　538
9.2　简单网络管理协议　538
9.2.1　SNMP概述　538
9.2.2　CiscoWorks　540
9.2.3　路由器的SNMP配置　540
9.3　RMON　545
9.3.1　RMON概述　545
9.3.2　路由器的RMON配置　546
9.4　记录日志　548
9.5　系统日志(Syslog)　551
9.5.1　Syslog概述　551
9.5.2　路由器上Syslog的配置　552
9.6　网络时间协议(NTP)　553
9.6.1　NTP概述　553
9.6.2　路由器的NTP配置　554
9.7　记账　557
9.7.1　IP记账　558
9.7.2　NetFlow　559
9.8　配置管理　564
9.9　故障管理　565
9.10　性能管理　567
9.11　安全管理　567
9.11.1　口令类型和加密　568
9.11.2　控制交互式访问　568
9.11.3　减少拒绝服务攻击的危险　569
9.11.4　TACACS+　570
9.11.5　RADIUS　575
9.11.6　安全的命令解释器　576
9.12　设计支持管理程序的服务器　577
9.13　网络健壮性　577
9.13.1　HSRP　577
9.13.2　多组HSRP　578
9.13.3　配置HSRP　579
9.13.4　配置MHSRP　582
9.14　实验室　583
9.15　推荐书目　584
9.16　尾注　585
9.17　展望　585
9.18　命令归纳　585
9.19　复习问题　589
9.20　配置练习　590
9.21　参考文献　590

第三部分　附录

附录A　show ip bgp neighbors的显示　594
附录B　正则表达式指南　599
附录C　保留的多播地址　603
附录D　复习问题的答案　619
附录E　配置练习的答案　631
附录F　故障排除练习答案　664

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco CCIE R&S lab10月发布V4版 (0)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

缅怀dynamips逐渐逝去的容光,因为自己的另一个英文博客的缘故,收集整理了dynamips的全系列程序.本来打算为每一个程序都配上readme的,当我下载完后,傻眼了.版本太多了.这个工程量惊人,兜兜是个懒人.就发布下载地址吧.如果有兴趣的话,可以download收藏起来咯.这个列表会随dynamips程序更新而适当增补.

目前最新版为dynamips-0.2.8RC2

The 0.2.8-RC2 release is available. It’s mainly a bug fix release that requires no Dynagen upgrade (except for the ATM/Ethernet bridge).

New feature:

• Ethernet/ATM bridge, conforming to the RFC1483 (bridged mode). I added this because I’ve this kind of devices on my network (xDSL modem). It will require a Dynagen upgrade to be usable.

Bug-fixes:

• Fixed a PowerPC JIT bug that caused crashes on some 2600 images and prevented OSPF to work correctly on this platform ;
• Fixed handling of CRC for WIC slots on 2691/3725/3745 ;
• Fixed a bootflash malfunction occuring on 3600/7200 platforms ;
• Added TCP keepalives for VTTY connections (ie console and aux ports) ;
• Added ISL support for 2691/3725/3745 on-board Ethernet ports.

Files:

0.2.8-RC2 binary for Linux x86 platforms

0.2.8-RC2 binary for Linux x86_64 platforms

0.2.8-RC2 binaries for Windows XP and 2000

0.2.8-RC2 source code

dynamips全集下载地址在本文最下方

Help for Cisco router simulator (dynamips-0.2.8)
================================================
Authors of this document: Fabien Devaux, Christophe Fillot, MtvE

Emulated hardware
*****************

The emulator currently supports the following platforms:
- Cisco 7200 (NPE-100 to NPE-400)
- Cisco 3600 (3620, 3640 and 3660)
- Cisco 2691
- Cisco 3725
- Cisco 3745
- Cisco 2600 (2610 to 2650XM)
- Cisco 1700 (1710 to 1760)

By default, a Cisco 7206VXR with NPE-200 (256 Mb of DRAM) is emulated.

To emulate another platform, use the “-P” command line option (for example,
“-P 3725″ or “-P 3600″).

For the 7200, you can change the NPE type with the “-t” option.
It is possible to select “npe-100″, “npe-150″, “npe-175″, “npe-200″,
“npe-225″, “npe-300″ and “npe-400″. The “npe-g1″ is not working.

For the 3600, a 3640 with 128 Mb is emulated by default. You can change this
with the “-t” option and by specifying “3620″ or “3660″.
Don’t forget to set the chassis type depending on your IOS image,
a c3660 image will not run on c3640 hardware and vice-versa.

Remark: PCMCIA card emulation is not supported yet with Cisco 3600.

Command Line Options overview
*****************************

-l : Set logging file (default is dynamips_log.txt)
-j : Disable the JIT compiler, very slow
–exec-area : Set the exec area size (default: 64 Mb)
–idle-pc
: Set the idle PC (default: disabled)
–timer-itv : Timer IRQ interval check (default: 1000)

-i : Set instance ID
-r : Set the virtual RAM size
-o : Set the virtual ROM size
-n : Set the NVRAM size
-c : Set the configuration register
-m : Set the MAC address of the chassis
(default: automatically generated)
-C : Import an IOS configuration file into NVRAM
-X : Do not use a file to simulate RAM (faster)
-R : Load an alternate ROM (default: embedded)
-k : Set the clock divisor (default: 4)

-T
: Console is on TCP
-U : Console in on serial interface
(default is on the terminal)

-A
: AUX is on TCP
-B : AUX is on serial interface
(default is no AUX port)

–disk0 : Set PCMCIA ATA disk0: size
–disk1 : Set PCMCIA ATA disk1: size

-a : Virtual ATM switch configuration file
-f : Virtual Frame-Relay switch configuration file
-E : Virtual Ethernet switch configuration file
-b : Virtual bridge configuration file
-e : Show network device list of the host machine

Options specific to the Cisco 7200 series:

-t : Select NPE type (default: “npe-200″)
-M : Select Midplane (“std” or “vxr”)
-p
: Define a Port Adapter
-s
: Bind a Network IO interface to a Port Adapter

Options specific to the Cisco 3600 series (“dynamips -P 3600 –help”):

-t : Select Chassis type (default: “3640″)
–iomem-size : IO memory (in percents, default: 5)
-p : Define a Network Module
-s : Bind a Network IO interface to a Network Module

Options specific to the Cisco 2691 series (“dynamips -P 2691 –help”):

–iomem-size : IO memory (in percents, default: 5)
-p : Define a Network Module
-s : Bind a Network IO interface to a Network Module

Options specific to the Cisco 3725 series (“dynamips -P 3725 –help”):

–iomem-size : IO memory (in percents, default: 5)
-p : Define a Network Module
-s : Bind a Network IO interface to a Network Module

Options specific to the Cisco 3745 series (“dynamips -P 3745 –help”):

–iomem-size : IO memory (in percents, default: 5)
-p : Define a Network Module
-s : Bind a Network IO interface to a Network Module

Command Line Options details
****************************

-k :

Specify the clock divider (integer) based on the host clock.
Alter the value to match the CISCO clock with the real time.
The command “show clock” at the IOS’ CLI will help you set this value.

–idle-pc
:

The “idle PC” feature allows you to run a router instance without having
a 100% CPU load. This implies that you can run a larger number of instances
per real machine.

To determine the “idle PC”, start normally the emulator with your Cisco IOS
image, and a totally IOS empty configuration (although not mandatory, this
will give better results). When the image is fully booted, wait for the
“Press RETURN to get started!” message prompt, but do not press Enter key.
Wait about 5 seconds, then press “Ctrl-] + i”. Some statistics will be
gathered during 10 seconds. At the end, the emulator will display a list of
possible values to pass to the “–idle-pc” option. You may have to try some
values before finding the good one. To check if the idle PC value is good,
just boot the Cisco IOS image, and check your CPU load when the console
prompt is available. If it is low, you have found a good value, keep it
preciously.

Important remarks:
==================

* An “idle PC” value is *specific* to a Cisco IOS image. You cannot
boot a different IOS image without proceeding as described above.

* Do not run the process while having the “autoconfiguration” prompt.

–exec_area :

The exec area is a pool of host memory used to store pages translated by
the JIT (they contain the native code corresponding to MIPS code pages).

Cisco 7200 Port Adapter Description ”
“:
————————————————
Format: slot:pa_driver

slot: the number of the physical slot (starts from 0)

pa_driver: the name of a Port Adapter driver in:
- C7200-IO-FE (FastEthernet, slot 0 only)
- PA-FE-TX (FastEthernet, slots 1 to 6)
- PA-4E (Ethernet, 4 ports)
- PA-8E (Ethernet, 8 ports)
- PA-4T+ (Serial, 4 ports)
- PA-8T (Serial, 8 ports)
- PA-A1 (ATM)

Cisco 3600 Network Module Description “”:
————————————————–
Format: slot:nm_driver

slot: the number of the physical slot (starts from 0)

nm_driver: the name of a Network Module driver in:
- NM-1E (Ethernet, 1 port)
- NM-4E (Ethernet, 4 ports)
- NM-1FE-TX (FastEthernet, 1 port)
- NM-4T (Serial, 4 ports)
- NM-16ESW (Ethernet switch module, 16 ports)
- Leopard-2FE (Cisco 3660 FastEthernet in slot 0, automatically used)

Cisco 2691/3725/3745 Network Module Description “”:
————————————————————
Format: slot:nm_driver

slot: the number of the physical slot (starts from 0)

nm_driver: the name of a Network Module driver in:
- NM-1FE-TX (FastEthernet, 1 port)
- NM-4T (Serial, 4 ports)
- NM-16ESW (Ethernet switch module, 16 ports)
- GT96100-FE (2 integrated ports, automatically used)

NIO binding to Port Adapter ”
” and Network Modules “”:
———————————————————————-

Format: slot:port:netio_type[:netio_parameters]

slot : the number of the physical slot (starts from 0)
port : the port in the specified slot (starts from 0)

netio_type : host interface for communication

unix::
Use unix sockets for local communication.
is created and represents the local NIC.
is the file used by the other interface.
(ex. “/tmp/local:/tmp/remote”)

vde::
For use with UML (User-Mode-Linux) or VDE switches.
VDE stands for “Virtual Distributed Ethernet”.
Please refer to : http://sourceforge.net/projects/vde/

tap:
Use a virtual ethernet device for communication.
is the name of the tap device (ex. “tap0″)

gen_eth:
Use a real ethernet device for communication, using libpcap 0.9
or WinPcap. Works on Windows and Unix systems.

is the name of the Ethernet device (ex. “eth0″)

The device list can be found using the “-e” option.

linux_eth:
Use a real ethernet device for communication (Linux specific).
is the name of the Ethernet device (ex. “eth0″)

udp:::
Use an UDP socket for connection between remote instances.
is the port we listen to.
is the host listening the port you want to connect to.
is the port you want to connect to.
(ex. “1000:somehost:2000″ and “2000:otherhost:1000″ on the other
side)

tcp_cli::
Client side of a tcp connection.
is the ip address of the server.

is the port to connect to.

tcp_ser:
Server side of a tcp connection.

is the port to listen to.

null
Dummy netio (used for testing/debugging), no parameters needed.

VTTY binding to real serial port device “”:
—————————————————-

Format: {:baudrate{:databits{:parity{:stopbits{:hwflow}}}}}}

device: character device name, e.g. /dev/ttyS0
baudrate: baudrate
databits: number of databits.
parity: data parity: N=none, O=odd, E=even,
stopbits: number of stop bits
hwflow: hardware flow control (0=disable, 1=enable)

Note that the device field is mandatory, however other fields are optional.
(dynamips will default to 9600, 8, N, 1, no hardware flow control)

Note that access to the escape commands (described below) through a serial
port are deliberately prevented, as the escape commands interfere with
serial encapsulation protocols.

Escape commands
***************

You can press ^] (Ctrl + ]) at any time, followed by one of these characters:

o : Show the VM object list
d : Show the device list
r : Dump MIPS CPU registers
t : Dump MIPS TLB entries
m : Dump the latest memory accesses
s : Suspend CPU emulation
u : Resume CPU emulation
q : Quit the emulator
b : Dump the instruction block tree
h : JIT hash table statistics
l : MTS64 cache statistics
c : Write IOS configuration to disk (ios_cfg.txt)
j : Non-JIT mode statistics
i : Determine an idling pointer counter
x : Experimentations (can crash the box!)
^]: Send ^]

If you press an unrecognized key, help will be shown.

Note: on Windows, it may be the “Ctrl + $” sequence.

Virtual Bridge
**************

The virtual bridge is used to emulate a shared network between emulator
instances.

Any emulator instance can act as a virtual bridge.

The configuration file (specified by the “-b” option) contains a list of
NetIO descriptors, with the following syntax:

interface_name:netio_type[:netio_parameters]

Example:

# Connection to instance “I0″
I0:udp:10000:127.0.0.1:10001

# Connection to instance “I1″
I1:udp:10002:127.0.0.1:10003

# Connection to instance “I2″
I2:udp:10004:127.0.0.1:10005

The “I0″ instance would be launched with the following parameters:

dynamips ios.bin -p 1:PA-FE-TX -s 1:0:udp:10001:127.0.0.1:10000

Virtual Ethernet switch
***********************

The virtual ethernet switch is used to emulate an Ethernet network between
emulator instances. This switch supports access and trunk ports (802.1Q).
ISL will be available in a future release.

Any emulator instance can act as a virtual ethernet switch.

The configuration file (specified by the “-E” option) contains a list of
NetIO descriptors (representing interfaces) and a list of interface properties
(access/trunk port, VLAN info…)

The interface definition is similar to Port Adapters:

IF:interface_name:netio_type[:netio_parameters]

1) Configuring an Access Port

syntax: ACCESS:interface_name:vlan_id

2) Configuration a 802.1Q Trunk Port

syntax: DOT1Q:interface_name:native_vlan

The native VLAN is not tagged. On Cisco devices, by default the native VLAN
is VLAN 1.

Example of configuration file:

IF:E0:udp:10000:127.0.0.1:10001
IF:E1:udp:10002:127.0.0.1:10003
IF:E2:gen_eth:eth0

DOT1Q:E0:1
ACCESS:E1:4
DOT1Q:E2:1

Virtual ATM switch
******************

The virtual ATM switch fabric is used to emulate an ATM backbone between
emulator instances. The use of this virtual switch is not mandatory, you
can directly connect emulator instances for point-to-point ATM connections.
Please note that only basic VP/VC switching is supported, there is no
support for ILMI/QSAAL/… or other specific ATM protocols.

Any emulator instance can act as a virtual ATM switch.

Example of configuration file (specified by the “-a” option):

# Virtual Interface List
IF:A0:udp:10001:127.0.0.1:10000
IF:A1:udp:10002:127.0.0.1:10003
IF:A2:udp:10004:127.0.0.1:10005

# VP connection between I0 and I1
VP:A0:10:A1:20
VP:A1:20:A0:10

# VP connection between I0 and I2
VP:A0:11:A2:30
VP:A2:30:A0:11

# VC connection between I1 and I2
VC:A1:5:2:A2:7:3
VC:A2:7:3:A1:5:2

In this example, we have 3 virtual interfaces, A0, A1 and A2. The syntax
for interface definition is similar to Port Adapters:

IF:interface_name:netio_type[:netio_parameters]

You can do VP switching or VC switching:

1) VP switching

syntax: VP:input_if:input_vpi:output_if:output_vpi

2) VC switching

syntax: VC:input_if:input_vpi:input_vci:output_if:output_vpi:output_vci

Testing the Virtual ATM switch with one dynamips instance
*********************************************************
(Contribution of Mtv Europe)

Virtual ATM switch configuration file (“atm.cfg”):

IF:A0:udp:10003:127.0.0.1:10001
IF:A1:udp:10004:127.0.0.1:10002
# a0/vpi=1/vci=100 connects to a1/vpi=2/vci=200
VC:A0:1:100:A1:2:200
VC:A1:2:200:A0:1:100

Invoking dynamips:

./dynamips -p 1:PA-A1 -s 1:0:udp:10001:127.0.0.1:10003 \
-p 2:PA-A1 -s 2:0:udp:10002:127.0.0.1:10004 \
-a atm.cfg IOS.BIN

(note input ports of IOS interfaces are output ports of ATM switch
interfaces, and vice versa).

IOS configuration:

ip cef
ip vrf test
rd 1:1
route-target both 1:1
int a1/0
no shut
int a1/0.2 p
ip addr 1.1.1.1 255.255.255.0
pvc 1/100
interface a2/0
no shut
interface a2/0.2 p
ip vrf forwarding test
ip addr 1.1.1.2 255.255.255.0
pvc 2/200
!

# ping 1.1.1.2
!!!!!

Virtual Frame-Relay switch
**************************

The virtual Frame-Relay switch fabric is used to emulate a Frame-Relay
backbone between emulator instances. The use of this virtual switch is not
mandatory, you can directly connect emulator instances with appropriate IOS
configuration.

Any emulator instance can act as a virtual Frame-Relay switch.

There is only a basic implementation of the LMI protocol (ANSI Annex D), which
is probably not conforming but works with Cisco IOS. Fortunately, Cisco IOS
is able to detect automatically the LMI protocol.

Example of configuration file (specified by the “-f” option):

# Virtual Interface List
IF:S0:udp:10001:127.0.0.1:10000
IF:S1:udp:10002:127.0.0.1:10003

# DLCI switching between S0 and S1
VC:S0:200:S1:100
VC:S1:100:S0:200

In this example, we have 2 virtual interfaces, S0 and S1. The syntax
for interface definition is similar to Port Adapters:

IF:interface_name:netio_type[:netio_parameters]

DLCI switching syntax:

VC:input_if:input_dlci:output_if:output_dlci

In the example above, the switch is configured to switch packets
received on interface S0 with DLCI 200 to interface S1 with DLCI 100,
and vice-versa.

== EOF ==

dynamips-download(此为地址列表文本,请下到本地选择所需版本自行下载)  [:)1b]

相关日志

• 招聘:网络工程师(南京) (9)
• 超强备份：backup4all的使用（图文）之二 (7)
• 超强备份：backup4all的使用（图文）之一 (7)
• 超强备份：Backup4All让你从此数据无忧 (1)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• 兜兜推荐三款实用工具:File-Zilla,PowerCMD,nu2006 (18)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)

获得CCVP证书,需要满足如下条件:
1.必须有CCNA证书
2.必须通过CCVP考试
而通过CCVP考试,可以通过两种途径:
2.1.For individuals using Cisco Unified Communications Manager the following path towards certification is recommended:

2.2. For individuals using Cisco Unified CallManager the following path towards certification is recommended:

(642-446)是思科CCVP认证的通信管理考试.4月初,VUE考试中心的642-446题库近期已经全部更新,pass4sure对此做出了同步更新.
如果需要更详细的了解该科目,请登陆: http://www.pass4sure.com/642-446.html

以下是该考试的一些基本信息
Exam Number: 642-446
Associated Certifications: CCVP
Duration: 75 minutes(非英语母语国家,增加30分钟)
Available Languages: English
考试题数: (60 – 70 questions)

试642-446是您获取思科CCVP认证所必须参加的指定考试之一。Pass4sure已经根据变化完成了642-446的更新，确保646-446考題的覆蓋率始終都在95％以上，您可以放心使用。
以下是642-446的考试大纲:
Exam Description
The 642-446 CIPT1 Implementing Cisco Unified Communications IP Telephony Part 1 is the exam associated with the CCVP certification. This exam tests a candidate’s knowledge of deploying a Cisco Unified Communications Manager to support single site and centralized call processing models. Candidates can prepare for this exam by taking the CIPT1 Implementing Cisco Unified Communications Manager Part 1 course.
Exam Topics
The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
Perform an installation and initial set up of a Cisco Unified Communications Manager cluster
• Describe administrative access to Cisco Unified Communications Manager
• Describe Cisco Unified Communications Manager cluster architecture
• Describe Cisco Unified Communications Manager redundancy designs
• Describe the requirements for Cisco Unified Communications Manager use of DHCP, TFTP, DNS, and NTP
• Determine the services necessary to support a Cisco Unified Communications Manager deployment and activate the appropriate services
• Perform an install and upgrade on Cisco Unified Communications Manager

Describe and configure Cisco Unified Communications Manager to support on-cluster calling
• Configure a Cisco Unified Communications Manager group
• Configure users, user groups, and roles
• Configure Cisco Unified Communications Manager to support Cisco SCCP & SIP Phones
• Configure Cisco Unified Communications Manager to support 3rd party SIP phones
• Describe how to harden an IP phone
• Configure LDAP integration
• Configure Cisco Unified Communications Manager profiles and device pools
• Configure Cisco Unified Communications Manager templates
• Configure a Cisco switch to support IP phones
• Use Cisco Unified Communications Manager BAT to manage phones and users
• Describe the function of TAPS

Describe and configure a route plan for Cisco Unified Communications Manager to support off-net calling
• Describe Cisco Unified Communications Manager digit analysis
• Implement an MGCP Gateway
• Configure route patterns and route filters
• Configure route lists and route groups
• Implement toll-fraud prevention
• Configure digit manipulation
• Describe the functions and usage of CSS and partitions
• Implement calling privileges
• Implement call coverage

Describe and configure Cisco Unified Communications Manager media resources
• Describe media resources
• Configure MeetMe conferencing, hardware conferencing resources, and software conferencing resources
• Configure MoH
• Configure MRGs and MRGLs

Configure the Cisco Unified Communications Manager to support features and applications
• Configure IP phone services
• Enable user web page access
• Integrate Cisco Unified Communications Manager with Unity and UnityConnection
• Configure Call Park, Privacy, Barge, Call Pickup, and Intercom
• Implement Presence

以下内容为pass4sure关于642-436考试的部分考题.有兴趣的朋友可以登陆pass4sure咨询客服人员.获得更详细的帮助信息.以下为部分由Pass4sure提供的考题资源.
(本日志中不附带考题,如您需要了解.请下载文末处的PDF文档.)
642-446-pass4sure-qa-update

相关日志

• 招聘:网络工程师(南京) (9)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

这两个方向的CCVP认证都需要考生们参加5门考试，其中3门是两个方向都必考的科目，都必须要通过思科的CVOICE考试，最新发布的考试号为(642-436)，这是随着CCVP:Cisco Unified CallManager认证而发布的–获得的过CCVP认证的人–可以选择在7月份参加老版本的CVOICE（642-432)考试，获得升级更新。 另外两门考试是思科服务质量（QoS）2.2考试，考试号为(642-642)和思科故障处理考试，考试号为(642-426)。

现在Cisco Unified CallManager方向考试的独特之处是思科的网关考试(642-453)和新的或老版本的思科IP电话考试，考试号分别为(642-444 )和。（642-445)。

Cisco Unified Communications Manager方向的考试要求考三门必考科目加上两门新的考试，这两门新的考试分别为：IP电话6.0 1 (642-446) 和 2 (642-456)。

另外，针对于所有新的考试，思科中所有以实验室为基础的模拟训练，都是可用的。

“世界范围内有50000以上的人和70%以上的世界500强企业使用Cisco Unified Communications证书，这就要求目前已有高水平IP电话技术的人不断的提高自身的技能。”思科总经理LeJeanne Beliveau-Dunn在一份声明中发表评论说。”CCVP给个人提供了在IP电话领域发挥自身潜力和推进事业发展的机会。”

获得CCVP证书,需要满足如下条件:

1.必须有CCNA证书
2.必须通过CCVP考试

而通过CCVP考试,可以通过两种途径:

2.1.For individuals using Cisco Unified Communications Manager the following path towards certification is recommended:

2.2. For individuals using Cisco Unified CallManager the following path towards certification is recommended:

(642-436)是思科CCVP认证的CVOICE考试.4月初,VUE考试中心的642-436题库近期已经全部更新,pass4sure对此做出了同步更新.

如果需要更详细的了解该科目,请登陆:www.pass4sure.com/642-436.html.

以下是该考试的一些基本信息

Exam Number: 642-436

Associated Certifications: CCVP

Duration: 75 minutes(非英语母语国家,增加30分钟)

Available Languages: English

考试题数: (60 – 70 questions)

试642-436是您获取思科CCVP认证所必须参加的指定考试之一。Pass4sure已经根据变化完成了642-436的更新，确保642-892考題的覆蓋率始終都在95％以上，您可以放心使用。

以下是642-436的考试大纲:

Exam Description

The 642-436 CVOICE Cisco Voice over IP is the exam associated with the CCVP certification. This exam tests a candidate’s knowledge of the foundational elements of VOIP calls, and the description of dial plans, and the implementation of gateways, gatekeepers and IP-IP gateways. Candidates can prepare for this exam by taking the CVOICE Cisco Voice over IP course.

Exam Topics

The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Describe the components of a gateway

Describe the function of gateways

Describe DSP functionality

Describe the different types of voice ports and their usage

Describe dial peer types

Describe codecs and codec complexity

Describe a dial plan

Describe a numbering plan

Describe digit manipulation

Describe path selection

Describe calling privileges

Describe call coverage

Describe the basic operation and components involved in a VoIP call

Describe VoIP call flow

Describe RTP, RTCP, cRTP, and sRTP

Describe H.323

Describe MGCP

Describe SCCP

Describe SIP

Identify the appropriate gateway signaling protocol for a given situation

Describe voice quality considerations

Choose the appropriate codec for a given situation

Implement a gateway

Describe the gateway call routing process

Configure analog voice ports

Configure digital voice ports

Describe considerations for PBX integration

Configure dial-peers

Configure hunt groups and trunk groups

Configure digit manipulation

Configure calling privileges

Verify dial-plan implementation

Implement fax and modem support on a gateway

Configure a gateway to provide DTMF support

Describe the function and interoperation of gatekeepers within an IP Communications network

Describe the function and types of gatekeepers

Describe the interoperation of devices with a gatekeeper

Describe gatekeeper signaling

Describe Dynamic Zone Prefix Registration with a gatekeeper

Describe gatekeeper redundancy

Implement a gatekeeper

Configure devices to register with a gatekeeper

Configure gatekeeper to provide dial-plan resolution

Configure gatekeeper to provide call admission control

Verify gatekeeper operation

Implement an IP-to-IP gateway

Describe the IP-to-IP gateway features and functionality

Configure gatekeeper to support an IP-to-IP gateway

Configure IP-to-IP gateway to provide address hiding

Configure IP-to-IP gateway to provide protocol and media interworking

Configure IP-to-IP gateway to provide call admission control

Verify IP-to-IP gateway implementations

以下内容为pass4sure关于642-436考试的部分考题.有兴趣的朋友可以登陆pass4sure咨询客服人员.获得更详细的帮助信息.以下为部分由Pass4sure提供的考题资源.

(本日志中不附带考题,如您需要了解.请下载文末处的PDF文档.)

642-436科目更新(PDF文档下载)

相关日志

• 招聘:网络工程师(南京) (9)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

Both of these two CCVP certification directions require candidates to participate in five examinations, three of which are compulsory subjects for both directions. One of them is CVOICE exam, the latest exam code released is (642-436), which is released with CCVP: Cisco Unified CallManager certification. Candidates who have already passed CCVP certification can choose to participate in the July testing of old versions of CVOICE (642-432) exam, and then obtain update. Another two examinations are Cisco Quality of Service (QoS) 2.2 examination, with exam code (642-642) and Cisco Troubleshooting examination, with exam code (642-426).

Now Cisco Unified CallManager direction examination’s uniqueness is the Cisco gateway exams (642-453) and the new or old version of Cisco IP phone examination, with respective exam codes (642-444) and (642-445).

Cisco Unified Communications Manager direction examination requires three compulsory subjects plus two new examinations. The two new examinations are as follows: IP phone 6.0 1 (642-446) and 2 (642-456).

In addition, in view of all the new examinations, all Cisco laboratory-based simulation trainings are available.

“Worldwide there are more than 50000 people and more than 70% of the world’s top 500 enterprises to use Cisco Unified Communications certificate, which requires that people with high level of IP phone constantly improve their own skills.” Cisco general manager LeJeanne Beliveau-Dunn commented in a statement: “CCVP provides opportunities for those who want to display their own potential and promote career development in the field of IP phone.”

To obtain CCVP certificate, the following conditions are required:
1. Must have CCNA Certificate
2. Must pass CCVP examinations
There are two ways to pass CCVP examinations:

2.1.For individuals using Cisco Unified Communications Manager the following path towards certification is recommended:

2.2. For individuals using Cisco Unified CallManager the following path towards certification is recommended:

(642-436) is Cisco CCVP certification CVOICE examination. In the beginning of April, 642-436 Q & A in the VUE test centre has been updated recently. Pass4sure too has made synchronous updates.

For detailed information about the subjects, please refer to:
www.pass4sure.com/642-436.html

The following are some basic information about the examination:

Exam Number: 642-436

Associated Certifications: CCVP

Duration: 75 minutes (Another 30 minutes are available for non-English countries.)

Available Languages: English

Q&A number: (60 – 70 questions)

642-436 is a compulsory exam for CISCO CCVP certificate. Pass4sure has recently updated 642-436 to make sure that its exam coverage being at least 95% so that candidates can pass the exam with our help.

Exam Description

The 642-436 CVOICE Cisco Voice over IP is the exam associated with the CCVP certification. This exam tests a candidate’s knowledge of the foundational elements of VOIP calls, and the description of dial plans, and the implementation of gateways, gatekeepers and IP-IP gateways. Candidates can prepare for this exam by taking the CVOICE Cisco Voice over IP course.

Exam Topics

The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Describe the components of a gateway

Describe the function of gateways

Describe DSP functionality

Describe the different types of voice ports and their usage

Describe dial peer types

Describe codecs and codec complexity

Describe a dial plan

Describe a numbering plan

Describe digit manipulation

Describe path selection

Describe calling privileges

Describe call coverage

Describe the basic operation and components involved in a VoIP call

Describe VoIP call flow

Describe RTP, RTCP, cRTP, and sRTP

Describe H.323

Describe MGCP

Describe SCCP

Describe SIP

Identify the appropriate gateway signaling protocol for a given situation

Describe voice quality considerations

Choose the appropriate codec for a given situation

Implement a gateway

Describe the gateway call routing process

Configure analog voice ports

Configure digital voice ports

Describe considerations for PBX integration

Configure dial-peers

Configure hunt groups and trunk groups

Configure digit manipulation

Configure calling privileges

Verify dial-plan implementation

Implement fax and modem support on a gateway

Configure a gateway to provide DTMF support

Describe the function and interoperation of gatekeepers within an IP Communications network

Describe the function and types of gatekeepers

Describe the interoperation of devices with a gatekeeper

Describe gatekeeper signaling

Describe Dynamic Zone Prefix Registration with a gatekeeper

Describe gatekeeper redundancy

Implement a gatekeeper

Configure devices to register with a gatekeeper

Configure gatekeeper to provide dial-plan resolution

Configure gatekeeper to provide call admission control

Verify gatekeeper operation

Implement an IP-to-IP gateway

Describe the IP-to-IP gateway features and functionality

Configure gatekeeper to support an IP-to-IP gateway

Configure IP-to-IP gateway to provide address hiding

Configure IP-to-IP gateway to provide protocol and media interworking

Configure IP-to-IP gateway to provide call admission control

Verify IP-to-IP gateway implementations

The following are part of 642-436 Q&A from pass4sure. You can go to pass4sure and consult live-support for more information if you are interested in its products. Now let’s look at the following study-guides offered by pass4sure.

(This is only a journal, which will not include the exam. Please download the PDF file if you need.)

642-436-pass4sure-qa-update

相关日志

• 招聘:网络工程师(南京) (9)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

现在FR中心的FR-S已经配置完毕.就好象-f参数定义好了.
接下来,该配置FR用户端了.
R1
R1(config)#int s1/0
R1(config-if)#ip address 192.168.12.1 255.255.255.0
R1(config-if)#encapsulation frame-relay
R1(config-if)#frame-relay lmi-type cisco
R1(config-if)#frame-relay map ip 192.168.12.2 18 broadcast
上面这条命令:协议地址映射.即远端IP映射到本地的DLCI.后面的Broadcast参数指明路由更新信息通过该电路穿越网络(让NBMA支持广播)

R2
R2(config)#int s1/0
R2(config-if)#ip address 192.168.12.2 255.255.255.0
R2(config-if)#encapsulation frame-relay
R2(config-if)#frame-relay lmi-type cisco
R2(config-if)#frame-relay map ip 192.168.12.1 28 broadcast

查看:
1．检查各个pvc是否处于active状态，命令show frame-relay pvc；
2．启动路由协议；
3．使用ping命令检查各个用于路由器是否连通；
4．用show frame-relay lmi看lmi信息；
5．用show frame-relay map看帧中继映射表；
6．用show ip route看路由表是否正确？

以上内容即为FR-S的简单配置,当然,大家可以尝试配置FR的子接口等等.

写此文目的:放弃dynamips的-f参数.自己来配置FR交换机,指定DLCI.对FR环境了解的更透彻.

以下内容为批处理文件:
FR-S
title FR-S
mkdir FR-S
cd FR-S
:reload
..\dynamips-wxp.exe -P 3745 -r 96 -c 0×2102 -p 0:GT96100-FE -T 2008 -p 1:NM-4T -p 2:NM-1FE-TX -s 1:0:udp:61100:127.0.0.1:11110 -s 1:1:udp:61101:127.0.0.1:11210 -s 1:2:udp:61102:127.0.0.1:11211 -s 1:3:udp:61103:127.0.0.1:11610 ..\c3745-adventerprisek9-mz124-12.bin –idle-pc=0×60486c04
goto reload

R1
title Router1
mkdir Router1
cd Router1
:reload
..\dynamips-wxp.exe -E ..\ETHERNET -T 2001 -P 3725 -r 96 -c 0×2102 -p 0:GT96100-FE -p 1:NM-4T -s0:0:udp:10110:127.0.0.1:10011 -s 1:0:udp:11110:127.0.0.1:61100 -s 1:1:udp:11111:127.0.0.1:11211 -s 1:2:udp:16161:127.0.0.1:16166 ..\c3725-is-mz.123-1a.bin –idle-pc=0×605b6e0c
goto reload

R2
title Router2
mkdir Router2
cd Router2
:reload
..\dynamips-wxp.exe -P 3725 -r 96 -T 2002 -c 0×2102 -p 0:GT96100-FE -p 1:NM-4T -s 0:0:udp:10220:127.0.0.1:10022 -s 1:1:udp:11211:127.0.0.1:11111 -s 1:0:udp:11210:127.0.0.1:61101 -s 1:2:udp:11212:127.0.0.1:11312 ..\c3725-is-mz.123-1a.bin –idle-pc=0×605b6e0c
goto reload

R3
title Router3
mkdir Router3
cd Router3
:reload
..\dynamips-wxp.exe -f ..\FRSWITCH2 -P 3725 -T 2003 -r 96 -c 0×2102 -p 0:GT96100-FE -p 1:NM-4T -s 0:0:udp:10330:127.0.0.1:10033 -s 1:0:udp:11211:127.0.0.1:61102 -s 1:2:udp:11312:127.0.0.1:11212 ..\c3725-is-mz.123-1a.bin –idle-pc=0×605b6e0c
goto reload

R4
title Router4
mkdir Router4
cd Router4
:reload
..\dynamips-wxp.exe -P 3725 -r 96 -c 0×2102 -p 0:GT96100-FE -T 2004 -p 1:NM-4T -s 0:0:udp:10440:127.0.0.1:10044 -s 1:1:udp:14747:127.0.0.1:17474 -s 1:2:udp:11454:127.0.0.1:11455 ..\c3725-is-mz.123-1a.bin –idle-pc=0×605b6e0c
goto reload

R5
title Router5
mkdir Router5
cd Router5
:reload
..\dynamips-wxp.exe -P 3725 -T 2005 -r 96 -c 0×2102 -p 0:GT96100-FE -p 1:NM-4T -s 0:0:udp:10550:127.0.0.1:10055 -s 1:1:udp:15757:127.0.0.1:17575 -s 1:2:udp:11455:127.0.0.1:11454 ..\c3725-is-mz.123-1a.bin –idle-pc=0×605b6e0c
goto reload

R6
title Router6
mkdir Router6
cd Router6
:reload
..\dynamips-wxp.exe -P 3725 -T 2006 -r 96 -c 0×2102 -p 0:GT96100-FE -p 1:NM-4T -s 1:1:udp:16166:127.0.0.1:16161 -s 1:0:udp:11610:127.0.0.1:61103 -s 1:2:udp:16676:127.0.0.1:16677 ..\c3725-is-mz.123-1a.bin –idle-pc=0×605b6e0c
goto reload

R7
title Router7
mkdir Router7
cd Router7
:reload
..\dynamips-wxp.exe -P 3725 -T 2007 -r 96 -c 0×2102 -p 0:GT96100-FE -p 1:NM-4T -s 1:0:udp:17474:127.0.0.1:14747 -s 1:1:udp:17575:127.0.0.1:15757 -s 1:2:udp:16677:127.0.0.1:16676 ..\c3725-is-mz.123-1a.bin –idle-pc=0×605b6e0c
goto reload

ETHERNET(-E参数)
IF:E0:gen_eth:\Device\NPF_{F72074D5-4AF1-4BD5-A0EE-4A337551B46D}
IF:E1:udp:10011:127.0.0.1:10110
IF:E2:udp:10022:127.0.0.1:10220
IF:E3:udp:10033:127.0.0.1:10330
IF:E4:udp:10044:127.0.0.1:10440
IF:E5:udp:10055:127.0.0.1:10550

当然,以上内容为bat的批处理方式来模拟cisco设备.如果你的机器性能较好.那么建议使用.net方式来做拓扑.该方式逻辑性更强,易懂.

兜兜刚找到以前写的一篇dynamips使用教程,一年未更新了吧….该更新更新然后重新放出来.本次更新的内容,大致透露一下:

1.新加入最新版dynamips模拟核心下载地址.
2.新加入最新版dynagen下载地址
3.新加入GNS-3简明教程
4.新加入GNS-3下载地址
5.新加入GNS-3拓展教程
6.新加入dynamips及dynagen拓展

兜兜希望达到的效果:给初学者提供最大化帮助.能一册在手,玩转dynamips.
呵呵.近期逐步更新.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

This tutorial will show you how to use Putty for console access instead of the default

点此查看本实验的SWF视频

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

GNS3 stands for Graphical Network Simulator. It is developed by a team of individuals from all over the world. I have to say, I was very impressed with my first run. Unlike other dynamips graphical front-ends, GNS3 just makes sense and it is strongly linked with dynagen. Anything you have learned about dynagen can be used with GNS3. Note: You will need your own IOS image to run GNS3.

Anyways, I will stop yapping and get to the video. Enjoy!
点击查看视频教程

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

642-892是BSCI和BCMSN的综合考试科目,难度相对较大,但是节省了考生的成本.如果准备充分,那么完全可以选择该方式来获取CCNP证书.4月初,VUE考试中心的642-892题库近期已经全部更新,pass4sure对此做出了同步更新.
如果需要更详细的了解该科目,请登陆:www.pass4sure.com/642-892.html.

以下是该考试的一些基本信息
Exam Number: 642-892
Associated Certifications: CCNP . CCDP
Duration: 120minutes(非英语母语国家,增加30分钟)
Available Languages: English
考试题数: 66 (以前为64道)

试642-892是您获取思科CCNP认证所必须参加的指定考试之一。Pass4sure已经根据变化完成了642-892的更新，确保642-892考題的覆蓋率始終都在95％以上，您可以放心使用。
以下是642-892的考试大纲:
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Implement EIGRP operations
• Explain the functions and operations of EIGRP (e.g., DUAL)
• Configure EIGRP routing. (e.g., Stub Routing, authentication, etc.)
• Verify or troubleshoot EIGRP routing configurations
Implement multi-area OSPF operations
• Explain the functions and operations of multiarea OSPF
• Configure multiarea OSPF routing. (e.g., Stub, NSSA, authentication, etc.)
• Verify or troubleshoot multiarea OSPF routing configurations
Describe integrated IS-IS
• Describe the features and benefits of integrated IS-IS
• Configure and verify integrated IS-IS
Implement Cisco IOS routing features
• Describe, configure or verify route redistribution between IP routing IGPs. (e.g., route-maps, default routes, etc.)
• Describe, configure or verify route filtering (i.e., distribute-lists and passive interfaces)
• Describe and configure DHCP services (e.g., Server, Client, IP helper address, etc.)
Implement BGP for enterprise ISP connectivity
• Describe the functions and operations of BGP
• Configure or verify BGP operation in a non-transit AS (e.g., authentication)
• Configure BGP path selection. (i.e., Local Preference, AS Path, Weight or MED attributes)
Implement multicast forwarding
• Describe IP Multicast (e.g., Layer-3 to Layer-2 mapping, IGMP, etc.)
• Describe, configure, or verify IP multicast routing (i.e., PIM Sparse-Dense Mode)
Implement IPv6
• Describe IPv6 addressing operations
• Describe IPv6 interoperation with IPv4
• Describe, configure or verify OSPF routing with IPv6 addressing
Implement VLANs
• Explain the functions of VLANs in a hierarchical network
• Configure VLANs (e.g., Native, Default, Static and Access)
• Explain and configure VLAN trunking (i.e., IEEE 802.1Q and ISL)
• Explain and configure VTP
• Verify or troubleshoot VLAN configurations
Conduct the operation of Spanning Tree protocols in a hierarchical network
• Explain the functions and operations of the Spanning Tree protocols (i.e., RSTP, PVRST, MISTP)
• Configure RSTP (PVRST) and MISTP
• ” Describe and configure STP security mechanisms (i.e., BPDU Guard, BPDU Filtering, Root Guard)
• Configure and Verify UDLD and Loop Guard
• Verify or troubleshoot Spanning Tree protocol operations
• Configure and verify link aggregation using PAgP or LACP
Implement Inter-VLAN routing
• Explain and configure Inter-VLAN routing (i.e., SVI and routed ports)
• Explain and enable CEF operation
• Verify or troubleshoot InterVLAN routing configurations
Implement gateway redundancy technologies
• Explain the functions and operations of gateway redundancy protocols (i.e., HSRP, VRRP, and GLBP)
• Configure HSRP, VRRP, and GLBP
• Verify High Availability configurations
Describe and configure wireless client access
• Describe the components and operations of WLAN topologies (i.e., AP and Bridge)
• Describe the features of Client Devices, Network Unification, and Mobility Platforms (i.e., CCX, LWAPP)
• Configure a wireless client (i.e., ADU)
Describe and configure security features in a switched network
• Describe common Layer 2 network attacks (e.g., MAC Flooding, Rogue Devices, VLAN Hopping, DHCP Spoofing, etc.)
• Explain and configure Port Security,802.1x, VACLs, Private VLANs, DHCP Snooping, and DAI
• Verify Catalyst switch (IOS-based) security configurations (i.e., Port Security, 802.1x, VACLs, Private VLANs, DHCP Snooping, and DAI)
Configure support for voice
• Describe the characteristics of voice in the campus network
• Describe the functions of Voice VLANs and trust boundaries
• Configure and verify basic IP Phone support (i.e. Voice VLAN, Trust and CoS options, AutoQoS for voice)

以下内容为pass4sure关于642-892考试的部分考题.有兴趣的朋友可以登陆pass4sure咨询客服人员.获得更详细的帮助信息.
(本文中不附带考题,如您需要了解.请下载文末处的PDF文档.)
<请在此处下载PDF文档>

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

To obtain the CCNP certification, you must:
1. Have the CCNA certification
2. Pass the CCNP exams.
There are two types of CCNP exams:

As a combination of 642-901 BSCI and 642-812 BCMSN, 642-892 Composite is more difficult than either of them but cheaper than the total cost of the two exams. 642-892 is a good option for well-prepared candidates.
642-892 has been updated in VUE exam center by the beginning of April. Pass4sure updated our 642-892 exam product to guarantee over 95% coverage of the exam. For details, go to http://www.pass4sure.com/642-892.html.

Basic Information of 642-892
Exam Number: 642-892
Associated Certifications: CCNP . CCDP
Duration: 120minutes(30 extra minutes for Non-English speaking countries)
Available Languages: English
Questions: 66 (2 more questions than the earlier version)
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Implement EIGRP operations
• Explain the functions and operations of EIGRP (e.g., DUAL)
• Configure EIGRP routing. (e.g., Stub Routing, authentication, etc.)
• Verify or troubleshoot EIGRP routing configurations
Implement multi-area OSPF operations
• Explain the functions and operations of multiarea OSPF
• Configure multiarea OSPF routing. (e.g., Stub, NSSA, authentication, etc.)
• Verify or troubleshoot multiarea OSPF routing configurations
Describe integrated IS-IS
• Describe the features and benefits of integrated IS-IS
• Configure and verify integrated IS-IS
Implement Cisco IOS routing features
• Describe, configure or verify route redistribution between IP routing IGPs. (e.g., route-maps, default routes, etc.)
• Describe, configure or verify route filtering (i.e., distribute-lists and passive interfaces)
• Describe and configure DHCP services (e.g., Server, Client, IP helper address, etc.)
Implement BGP for enterprise ISP connectivity
• Describe the functions and operations of BGP
• Configure or verify BGP operation in a non-transit AS (e.g., authentication)
• Configure BGP path selection. (i.e., Local Preference, AS Path, Weight or MED attributes)
Implement multicast forwarding
• Describe IP Multicast (e.g., Layer-3 to Layer-2 mapping, IGMP, etc.)
• Describe, configure, or verify IP multicast routing (i.e., PIM Sparse-Dense Mode)
Implement IPv6
• Describe IPv6 addressing operations
• Describe IPv6 interoperation with IPv4
• Describe, configure or verify OSPF routing with IPv6 addressing
Implement VLANs
• Explain the functions of VLANs in a hierarchical network
• Configure VLANs (e.g., Native, Default, Static and Access)
• Explain and configure VLAN trunking (i.e., IEEE 802.1Q and ISL)
• Explain and configure VTP
• Verify or troubleshoot VLAN configurations
Conduct the operation of Spanning Tree protocols in a hierarchical network
• Explain the functions and operations of the Spanning Tree protocols (i.e., RSTP, PVRST, MISTP)
• Configure RSTP (PVRST) and MISTP
• ” Describe and configure STP security mechanisms (i.e., BPDU Guard, BPDU Filtering, Root Guard)
• Configure and Verify UDLD and Loop Guard
• Verify or troubleshoot Spanning Tree protocol operations
• Configure and verify link aggregation using PAgP or LACP
Implement Inter-VLAN routing
• Explain and configure Inter-VLAN routing (i.e., SVI and routed ports)
• Explain and enable CEF operation
• Verify or troubleshoot InterVLAN routing configurations
Implement gateway redundancy technologies
• Explain the functions and operations of gateway redundancy protocols (i.e., HSRP, VRRP, and GLBP)
• Configure HSRP, VRRP, and GLBP
• Verify High Availability configurations
Describe and configure wireless client access
• Describe the components and operations of WLAN topologies (i.e., AP and Bridge)
• Describe the features of Client Devices, Network Unification, and Mobility Platforms (i.e., CCX, LWAPP)
• Configure a wireless client (i.e., ADU)
Describe and configure security features in a switched network
• Describe common Layer 2 network attacks (e.g., MAC Flooding, Rogue Devices, VLAN Hopping, DHCP Spoofing, etc.)
• Explain and configure Port Security,802.1x, VACLs, Private VLANs, DHCP Snooping, and DAI
• Verify Catalyst switch (IOS-based) security configurations (i.e., Port Security, 802.1x, VACLs, Private VLANs, DHCP Snooping, and DAI)
Configure support for voice
• Describe the characteristics of voice in the campus network
• Describe the functions of Voice VLANs and trust boundaries
• Configure and verify basic IP Phone support (i.e. Voice VLAN, Trust and CoS options, AutoQoS for voice)

The following PDF contains certain questions of 642-892 from pass4sure. You can go to www.pass4sure.com to obtain more information from our live support assistants.

642-892-compositeen

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

在该图中,左侧列表显示了九台虚拟的PC,命名分别从PC1~PC9,如下:
NAME IP/CIDR GATEWAY LPORT RPORT
PC1 0.0.0.0/0 0.0.0.0 30001 11121

NAME:虚拟PC的名字

IP/CIDR:虚拟PC的IP地址信息,及掩码前缀

GATEWAY:虚拟PC的网关信息

LPORT:顾名思义,L即指Local,本地端口.LPORT指该虚拟PC的UDP端口.

RPORT:同样R指Router,RPORT指该虚拟PC用于连接dynamips instance的UDP端口.

接下来介绍一下常用命令:

1.如何为一个虚拟PC设置IP地址
默认显示的是PC1，在命令行里面输入：ip 192.168.1.1 192.168.1.254 24
IP (IP地址) (网关) (子网位，子网位默认为24位)
2.如何在VPCS之间转换
输入各台PC的数字进入相应PC的控制台.比如你现在在默认提示符下.想要进入VPC1,那么就输入1,然后回车就行了.
3.如何让VPCS与dynamips的NET文件关连起来
普通的.net连接参数写法： f1/11 = PC1 f0/0
用VPCS后格式如 ： f1/11 = NIO_udp:11121:127.0.0.1:30001
路由UDP端口 连接IP VPC端口
4.修改VPC的UDP端口跟ROUTER的端口
手工修改两个设备的端口，就在VPCS的目录里面有一个startup的文本文件，如果有这个文件，那么VPCS启动时就会读取这个文件，如果没有就会生成一个自动的端口，

startup的端口修改，下面是我copy小漏的startup文件内容

1
conf rport 30001
2
conf rport 30002
3
conf rport 30003
4
conf rport 30004
5
conf rport 30005
6
conf rport 30006
1
conf lport 10001
2
conf lport 10002
3
conf lport 10003
4
conf lport 10004
5
conf lport 10005
6
conf lport 10006
7
conf lport 10007
8
conf lport 10008
9
conf lport 10009
1

其中Rport是路由器的UPD端口，LPORT是模拟PC的端口。
就照这个格式写一个也可以
最后面这个1是自动生成的，暂时还没有研究明白是什么意思，大家保留就可以了

最后面，我们把启动vpcs时读取到的LPORT跟RPORT写到我们的NET文件里面就可以做实验了，注意NET文件里两个端口（LPORT跟RPORT ）都要对应VPCS里的端口，如果想端口都照自己的想要的port号的话就把上面的些个
9
conf lport 100099
这些个字符复制下来放到startup里面。如果没有startup的话自己建立一个TXT文件，名字叫startup就可以了，就会让vpcs在启动时自动读取到我们的配置文件。

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

以下内容为VPs的readme内容,分中文及英文版.可以选择性的阅读.

英文版

   Welcome to Virtual PC Simulator, Ver 0.13a.

The VPCS can simulate up to 9 PCs. You can ping/traceroute them, or
ping/traceroute the other hosts/routers from the VPCS when you study the Cisco
routers in the dynamips. VPCS is not the traditional PC, it is just a program
running on the Linux or Windows, and only few network commands can be used in
it. But VPCS can give you a big hand when you study the Cisco devices in the
Dynamips. VPCS can replace the routers or VMware boxes which are used as PCs
in the dynamips network.

Now, VPCS can be run in udp or ether mode. In the udp mode, VPCS sends or
receives the packets via udp. In the ether mode, via /dev/tap, not support
on the Windows.

When VPCS started, it listens the ports from 20000 to 20008 and wait the
dynamips to connet, and send the packets to the ports from 30000 to 30008 which
should be listened by dynamips.

VPCS will look for the file named 'startup.vpc' in the current directory, and
execute the commands in it if you are not set the startup file from the command
line. All the commands in the startup file are the internal command of the VPCS.
The line started with '#' or '!' will be discarded.

vpcs [options]
-u        udp mode, default
-e        tap mode, using /dev/tapx
-s port   local udp port, default from 20000
-c port   remote udp port(dynamips udp ports), default from 30000
-r file   run startup file

NOTE: To make compatible with dynamips, VPCS does NOT use the cygwin1.dll
released by cygwin.com. The two files conflicted.

History：
0.13a   add ping localhost
fix a ping bug: get reply from any host ip.
0.12s   fix the tracert argument bug
0.10s   support udp mode
0.02s   fix a string copy bug
0.01s   first version

中文版

   欢迎使用 VPCS, 最新版本为 0.13a.

VPCS 可以模拟最多 9 个虚拟的 PC。你可以 ping/traceroute 这些 PC，或者
在这些 PC 中 ping/traceroute 其他的主机或路由器。当然这些虚拟的 PC，并不
完全意义上的 PC，它只是一个运行在 Linux 或 Windows 上的应用程序，仅可以
使用少数几个有关网络的命令。在借助 Dynamips 学习 Cisco 设备的过程中，会
起到非常大的帮助。它可以替代在实验中充当 PC 的路由器或者使用 Vmware 虚拟
的 PC。通常，这些被替代者会占用大量的内存和 CPU 资源。

VPCS 可以运行在 UDP 或者以太模式。在 UDP 方式下，VPCS 通过 UDP 发送和接
收数据包；以太方式下，使用 /dev/tapx 发送和接收数据包。在 Windows 下只支
持 UDP 方式。

当 VPCS 启动后， 缺省监听自 20000 到 20008 的 UDP 端口，并向 30000 到
30008 发送数据包。如果没有指定启动文件，且当前目录下存在缺省的启动文件
（文件名为：startup.vpc），VPCS 就会自动加载启动文件，并执行包含的命令。
startup.vpc 可以包含的命令即为 VPCS 的内部命令。

VPCS 的命令行选项
usage: vpcs [options]
-u        udp mode, default
-e        tap mode, using /dev/tapx
-s port   local udp port, default from 20000
-c port   remote udp port(dynamips udp ports), default from 30000
-r file   run startup file

注意：VPCS 使用的 cygwin1.dll 与 cygwin.com 发行的 cygwin1.dll 并不兼
容，但与 Dynamips 使用的 cygwin1.dll 兼容。

历史版本：
0.13a   增加 ping/tracert 本地 IP 回应
修订 ping 任何 IP，均存在错误
0.12s   修订 tracert 命令参数错误
0.10s   支持 upd 方式
0.02s   修订了一处字符串拷贝错误
0.01s   初始版本

关于VPs如何结合dynamips的批处理及dynagen的.net拓扑文件使用,在下一篇中兜兜将会做出详细的解说.
下载地址:vpcs

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

GNS3 is a graphical network simulator that allows you to design complex network topologies and to launch simulations on them.

To allow complete simulations, GNS3 is strongly linked with :

• Dynamips, an IOS emulator which allows users to run IOS binary images from Cisco Systems.
• Dynagen, a text-based front-end for Dynamips.
• Pemu, a PIX emulator.

GNS3 is a excellent complementary tool to real labs for administrators of Cisco networks or people wanting to pass their CCNA, CCNP, CCIP or CCIE certifications.

It can also be used to experiment features of Cisco IOS or to check configurations that need to be deployed later on real routers. This project is an open source product that may be used on multiple platforms, including Windows, Linux, and MacOS X.

Features overview

• Designing high quality complex network topologies.
• Emulating Cisco routers and PIX firewalls.
• Simulating simple Ethernet, ATM and Frame Relay switches.
• Load and save in Dynagen’s INI-like format.
• Image export (JPEG, PNG, BMP and XPM).
  

Important notice: users must provide their own Cisco IOS to use GNS3.

当你拥有GNS3后,你可以很方便的完成实验拓扑的绘制,用户的操作界面也很简洁.下面show出界面吧.

是不是很像boson啊.^_^
软件问世时,作者在国外论坛邀请不同国家的程序员为其提供了语言包.因此该软件在使用过程中,不会出现语言障碍…

下面把界面为大家做一个介绍:
1.工具条

以上图片中的按钮分布,依照功能从左到右介绍如下:

   1.1.New project  创建新的实验文件
1.2.Open network file 打开已存在的实验文件
1.3.Save network file  保存实验文件
1.4 Save network file as..  实验文件保存为...
1.5.Clear the topology  清除实验拓扑文件
1.6.Add a note  加入批注
1.7.Show hostnames  查看设备名称
1.8.Add a link  为设备定义连接.
1.9.Extract all startup-config 输出所有的配置文件
1.10.Telnet to all IOS  telnet到所有dy实例上.
1.11.开启/暂停/停止 运行所有DY实例.

GNS-3使用帮助一

持续更新中……请等待.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

Dynamips从最初的问世,到dynagen的开发,再到图形界面的出现……一直都让众多Cisco玩家期待万分.前面由小凡开发的基于dynamips核心的dynamipsGUI程序已经被大家所熟知,而且关于它的文档很多,兜兜这里就不再赘述了.另外还有GNS-3,dynamips-see等图形界面……大家可能有耳闻,但未在实际中使用.今天兜兜就针对这两款软件做一个详细的评测和说明.首先是第一个系列:GNS-3的使用帮助.(本文将以连载的形式进行,毕竟兜兜也只能利用业余时间来完成它.)

GNS-3是由一个法国的团队开发.其后,锅巴粥为其做了汉化支持.该软件可以支持多国语言.界面类似于Boson.更重要的是,作者公布了该软件源代码,未做任何商业上的运作,这个举措在如今物欲横流的世界里真的很难能可贵.(Dynamipsee的作者也公布了源代码)

GNS-3作者考虑到软件在不同平台上的应用区分,开发了win版及linux版.可以根据需要下载不同的版本.

GNS3-0.4.1-win32-all-in-one.exe(win下推荐版本:all in one)

Installer which includes Dynamips 0.2.8 RC2 (Cisco IOS emulator),
Pemu (PIX emulator),
WinPCAP 4.0.2 and the binary version of GNS3 0.4.
Recommended for beginners

GNS3-0.4.1-bin-win32.zip(win下需编译版本)

Binary version made with Py2exe (dependencies included).

GNS3-0.4.1-src.tar.gz (linux版本)

Gzip source archive.

GNS3-0.4.1-src.tar.bz2(linux版本)

Bzip2 source archive.

请关注第二篇:安装及界面介绍.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

If you need to read more,Please download PDF of integrity ....

Download link:analysis-on-ccna-exam-640-802-analysis-on-access-control-listsok

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

Pass4sure practice exam No.7
7.The command frame-relay map ip 10.121.16.8 102 broadcast was entered on the router. Which of the following statements is true concerning this command?
A: This command should be executed from the global configuration mode.
B: The IP address 10.121.16.8 is the local router port used to forward data.
C: 102 is the remote DLCI that will receive the information.
D: This command is required for all Frame Relay configurations.
E: The broadcast option allows packets, such as RIP updates, to be forwarded across the PVC.
Correct Answers: E
该题考察CISCO考生对Frame-relay静态映射作用的理解。
有命令如下：frame-relay map ip 10.121.16.8 102 broadcast 被应用到路由器上，以下哪些关于该命令的描述是正确的？
熟悉Frame-relay的考生都知道，该命令是在接口模式下配置到路由器上的，而选项A说该命令是在全局模式下配置，很显然是错误的；
对于frame-relay map ip 10.121.16.8 102 broadcast这条命令，就是把远端的IP映射到本地的DLCI号。选项B却说IP是本地路由器的IP，而选项C说102这个DLCI号是远端的，很显然BC均为错误选项；
对于选项D，并非所有结构的Frame-relay都需要配置，例如当在Frame-relay支持逆向ARP解析时，该命令就不需要配置，因此D也是错误的。
Pass4sure practice exam No.24
24.Refer to the exhibit. Which statement describes DLCI 17?

A: DLCI 17 describes the ISDN circuit between R2 and R3.
B: DLCI 17 describes a PVC on R2. It cannot be used on R3 or R1.
C: DLCI 17 is the Layer 2 address used by R2 to describe a PVC to R3.
D: DLCI 17 describes the dial-up circuit from R2 and R3 to the service provider.
Correct Answers: C

如图，在R2的接口上被配置了FR，并指定DLCI号为17。该DLCI作用是，当R2有数据要发往R3时，应该把数据交给哪一个PVC。

1、事件
现在给一台路由器配置上了一条frame-relay相关的命令，frame-relay map ip 10.121.16.8 102 broadcast
2、要求
对于事件描述之下的选项，由我们来选择在下列给出的关于该命令参数的说明中，哪些是正确的？

Frame-relay技术属于广域网技术，但是其参照的核心模型依然是有标准的，那么就是我们的OSI。（在这里，我再次的重申一次OSI模型的重要性，考生务必对其了如指掌）我们为什么要在接口上配置map ip参数？这个命令对应于OSI的哪一层的功能呢？

Map ip 命令是给frame-relay链路上配置“协议—地址”映射的，说起协议和地址的映射，我们自然而然的就能想到在以太网中的ARP协议。我们就以ARP的工作机制为参照物，进而展开对frame-relay配置中map ip命令参数的分析。
在常见的以太网环境中，当主机A要和通网段的某台主机B通信，主机A开始按照自上而下的顺序封装数据，如果主机A知道B的IP地址为192.168.1.2那么在网络层封装数据包（packet）时，可以顺利的将包头（packet header）完成，但是该数据包继续向底层封装时，会遇到一个问题—B的物理地址是什么呢？？？在第二层是需要通过MAC地址来寻址的。此时无法得知目标的MAC地址，封装无法进行。有一个解决办法就是ARP协议。当A要和B通信时，A先检查自己的ARP缓存表，看有没有B的协议地址映射记录（IP对应于MAC的一种映射关系），如果有，则直接取用，完成数据封装；如果没有，则先向外发送一个目标地址为全F的广播报文，来向网络中查询B的MAC地址，得到B的单播回应后，则A将该信息记录到ARP缓存表中。
在一条链路中，两台设备仅仅知道对方的网络层地址是不够的，它们还需要了解相互之间二层的寻址信息。Frame-relay技术是一个工作在第二层的面向连接的传输协议，它需要二层和三层的寻址信息来使两个站点通过PVC来相互通信。不同与以太网络，它的二层信息并非特定主机的MAC，而是DLCI（Data Link Connection Identifier数据链路连接标识）。

我们可以通过两种办法来使协议地址的映射关系保持正常。
1、通过手工静态的对其进行配置
命令如例题所示
Frame-relay map ：这个映射命令可以静态的创建一条到达远端的协议地址的映射。
详见下例：

2、使用帧中继反向地址解析协议（Inverse ARP）
帧中继的反向地址解析协议提供了将远端第三层的地址和本地第二层的DLCI通过某种非手工的方式联系起来的方法。

注：该题考察CISCO考生对Frame-relay静态映射作用的理解。有命令如下：frame-relay map ip 10.121.16.8 102 broadcast 被应用到路由器上，以下哪些关于该命令的描述是正确的？
熟悉Frame-relay的考生都知道，该命令是在接口模式下配置到路由器上的，而选项A说该命令是在全局模式下配置，很显然是错误的；
对于frame-relay map ip 10.121.16.8 102 broadcast这条命令，就是把远端的IP映射到本地的DLCI号。选项B却说IP是本地路由器的IP，而选项C说102这个DLCI号是远端的，很显然BC均为错误选项；
对于选项D，并非所有结构的Frame-relay都需要配置，例如当在Frame-relay支持逆向ARP解析时，该命令就不需要配置，因此D也是错误的。

Pass4sure practice exam No.64
64.Refer to the exhibit. What is the meaning of the term dynamic as displayed in the output of the show frame-relay map command shown?

A: The Serial0/0 interface is passing traffic.
B: The DLCI 100 was dynamically allocated by the router.
C: The Serial0/0 interface acquired the IP address of 172.16.3.1 from a DHCP server.
D: The DLCI 100 will be dynamically changed as required to adapt to changes in the Frame Relay cloud.
Answer B

路由器帧中继接口的状态可以通过show frame-relay map命令查看到,上图中,dynamic是指dlci号和ip的映射关系是通过Inverse ARP来动态获得的.因此答案选B.

相关日志

• 招聘:网络工程师(南京) (9)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

I.
Bridging and Switching
A.
Frame relay
Lab 1 Configuring a Cisco Router as a Frame-Relay Switch
Lab 2 Frame Relay Map Statements
Lab 3 Full Connectivity with a Partial PVC Mesh and Frame-Relay Map Statement
Lab 4 Full Connectivity with a Partial PVC Mesh and Subinterfaces
Lab 5 Configuring Frame Relay Networks and Controlling Frame Relay ARP
Lab 6 Monitoring and Troubleshooting Frame Relay Connections
B.
ATM: PVC, SVC, legacy ATM/PPP over ATM
Lab 7 Configure ATM PVC
Lab 8 Configure ATM SVC
Lab 9 Configure PPPoa
C.
DLSW over Ethernet
Lab 10 DLSW Full mesh
Lab 11 DLSW border peers
Lab 12 DLSW backup peers
D.
Catalyst configuration: VLANs, VTP, STP, trunk, management, features, advanced configuration, Layer 3
Lab 13 Configure VLAN
Lab 14 Configure Trunk
Lab 15 Configure VTP
Lab 16 Configure Ethernet-channel
Lab 17 Configure inter-vlan routing
Lab 18 Configure Layer-3 port

II.
IP IGP Routing
A.
OSPF
Lab 19 Basic OSPF Configuration
Lab 20 Configure OSPF Priority (DR election)
Lab 21 Configure OSPF Virtual-links
Lab 22 Configure OSPF neighbors authentication
Lab 23 Configure OSPF in NBMA network (NBMA mode)
Lab 24 Configure OSPF in NBMA network (broadcast mode)
Lab 25 Configure OSPF in NBMA network (Point-to-multipoint mode)
Lab 26 Configure OSPF interface Parameters
Lab 27 Inter-area and external route summarization
Lab 28 OSPF area configuration (stub, totally stub, NSSA)
Lab 29 Troubleshooting OSPF problem
B.
EIGRP
Lab 30 Basic EIGRP configuration
Lab 31 Passive-interface configuration
Lab 32 EIGRP unequal-cost load-balance
Lab 33 Configure EIGRP on NBMA network
Lab 34 Troubleshooting EIGRP problem
C.
IS-IS
Lab 35 Basic integrated IS-IS configuration
Lab 36 Changing the IS-IS router types
Lab 37 IS-IS route summarization
Lab 38 IS-IS authentication
Lab 39 Integrated IS-IS on NBMA networks
D.
RIP
Lab 40 Basic RIP configuration
Lab 41 Configure RIP unicast routing updates
Lab 42 Troubleshooting RIP problem
E.
Filtering, redistribution, summarization and other advanced features
Lab 43 Integrated RIP networks: Redistribution, route filtering and control
Lab 44 RIP and OSPF redistribution
Lab 45 Troubleshooting route redistribute problem
Lab 46 Policy routing based on source ip address
Lab 47 Policy routing based on packets size
Lab 48 Policy routing based on application
Lab 49 Load-balance across default routes
Lab 50 Troubleshooting policy-route problem

III.
BGP
Lab 51 BGP configuration (IBGP, EBGP, summarization)
Lab 52 BGP route-reflector
Lab 53 Manipulating BGP Path Selection
Lab 54 BGP confederations
Lab 55 BGP communities
Lab 56 BGP backdoor links
Lab 57 BGP troubleshooting
IV.
Dial
A.
ISDN configuration
Lab 58 ISDN basics and switch basics
Lab 59 PPP PAP authentication
Lab 60 PPP CHAP authentication
Lab 61 PPP multilink
B.
ODR, DDR
Lab 62 Floating static routes
Lab 63 Dialer profiles
C.
Dial backup, callback
Lab 64 Backup interfaces
Lab 65 Dialer watch
Lab 66 PPP callback
D.
Routing over ISDN
Lab 67 OSPF demand circuits
Lab 68 Troubleshooting ISDN problem

V.
IP and IOS Features
A.
IP addressing
Lab 69 IP address
Lab 70 IP broadcast
B.
DHCP
Lab 71 Basic DHCP configuration
C.
HSRP
Lab 72 Basic HSRP configuration
Lab 73 MHSRP configuration
Lab 74 Troubleshooting HSRP problem
D.
Mobile IP
Lab 75 Basic Mobile IP configuration
E.
NAT
Lab 76 Static inside source address translation
Lab 77 Dynamic inside source address translation
Lab 78 Overloading an inside global address
Lab 79 Translating overlapping address
Lab 80 Destination address rotary translation
F.
NTP
Lab 81 Use time server for NTP
Lab 82 Use time server and peers for NTP
Lab 83 NTP with authentication
Lab 84 Using LAN broadcast for NTP
G.
SNMP
Lab 85 Basic SNMP configuration
H.
RMON
Lab 86 Basic RMON configuration

VI.
IP Multicast
A.
PIM, bi-directional PIM
Lab 87 Basic PIM configuration
B.
MSDP
Lab 88 MSDP mesh group
C.
Anycast
Lab 89 Anycast RP

VII.
QoS
A.
NBAR
Lab 90 Basic NBAR configuration
B.
PBR
Lab 91 Basic PBR configuration
C.
PQ
Lab 92 Basic PQ configuration
D.
CQ
Lab 93 Basic CQ configuration
E.
WFQ
Lab 94 Basic WFQ configuration
F.
CBWFQ
Lab 95 Basic CBWFQ configuration
G.
CAR
Lab 96 Basic CAR configuration
H.
FRTS
Lab 97 FRTS configuration
I.
RSVP
Lab 98 Basic RSVP configuration

VIII.
Security
A.
AAA
Lab 99 AAA configuration
B.
Traffic filtering and firewalls
Lab 100 TCP intercept configuration
C.
Access lists
Lab 101 Standard ACL configuration
Lab 102 Extended ACL configuration
Lab 103 Extend ACL with Established option
Lab 104 Dynamic ACL configuration
Lab 105 Controlling VTY access
Lab 106 Time-of-day ACL configuration
Lab 107 Reflect ACL configuration

IX.
Voice over IP (VoIP)
Lab 108 Basic VOIP configuration
Lab 109 Private Line Automatic Ringdown
Lab 110 Number Expansion
Lab 111 IP precedence
Lab 112 Troubleshooting Voice problem

 download list:

http://ciscosim.net/thread-1495-1-1.html

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco CCIE R&S lab10月发布V4版 (0)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

CCNP

CISSP

CIW

IBM

MCDST

MCSD

MCSE

相关日志

• 招聘:网络工程师(南京) (9)
• IBM T400:如何让T400的ATI显卡支持OpenGL (11)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

Check details here:

Followings are the download links for all Cisco exams demo. Click the link for the exam you  want directly and download the demo!
    http://www.ciscosim.net/attachments/demo/642-661Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-691Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-801Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-811Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-812Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-821Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-825Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-831Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-845Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-871Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-873Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-891Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-892Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-901Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-961Demodemo.exe
    http://www.ciscosim.net/attachments/demo/642-964Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-002Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-003Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-011Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-056Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-057Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-058Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-096Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-102Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-151Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-171Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-202Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-203Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-222Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-227Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-228Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-229Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-301Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-361Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-362Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-391Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-392Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-561Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-562Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-573Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-574Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-588Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-589Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-590Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-653Demodemo.exe
    http://www.ciscosim.net/attachments/demo/646-967Demodemo.exe

相关日志

• 招聘:网络工程师(南京) (9)
• Pass4sure官方价值29.99$的电子杂志泄露(下载) (3)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

What can you do with the CCNA Official Exam Certification Library?

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

I.
Bridging and Switching
A.
Frame relay
Lab 1 Configuring a Cisco Router as a Frame-Relay Switch
Lab 2 Frame Relay Map Statements
Lab 3 Full Connectivity with a Partial PVC Mesh and Frame-Relay Map Statement
Lab 4 Full Connectivity with a Partial PVC Mesh and Subinterfaces
Lab 5 Configuring Frame Relay Networks and Controlling Frame Relay ARP
Lab 6 Monitoring and Troubleshooting Frame Relay Connections
B.
ATM: PVC, SVC, legacy ATM/PPP over ATM
Lab 7 Configure ATM PVC
Lab 8 Configure ATM SVC
Lab 9 Configure PPPoa
C.
DLSW over Ethernet
Lab 10 DLSW Full mesh
Lab 11 DLSW border peers
Lab 12 DLSW backup peers
D.
Catalyst configuration: VLANs, VTP, STP, trunk, management, features, advanced configuration, Layer 3
Lab 13 Configure VLAN
Lab 14 Configure Trunk
Lab 15 Configure VTP
Lab 16 Configure Ethernet-channel
Lab 17 Configure inter-vlan routing
Lab 18 Configure Layer-3 port

II.
IP IGP Routing
A.
OSPF
Lab 19 Basic OSPF Configuration
Lab 20 Configure OSPF Priority (DR election)
Lab 21 Configure OSPF Virtual-links
Lab 22 Configure OSPF neighbors authentication
Lab 23 Configure OSPF in NBMA network (NBMA mode)
Lab 24 Configure OSPF in NBMA network (broadcast mode)
Lab 25 Configure OSPF in NBMA network (Point-to-multipoint mode)
Lab 26 Configure OSPF interface Parameters
Lab 27 Inter-area and external route summarization
Lab 28 OSPF area configuration (stub, totally stub, NSSA)
Lab 29 Troubleshooting OSPF problem
B.
EIGRP
Lab 30 Basic EIGRP configuration
Lab 31 Passive-interface configuration
Lab 32 EIGRP unequal-cost load-balance
Lab 33 Configure EIGRP on NBMA network
Lab 34 Troubleshooting EIGRP problem
C.
IS-IS
Lab 35 Basic integrated IS-IS configuration
Lab 36 Changing the IS-IS router types
Lab 37 IS-IS route summarization
Lab 38 IS-IS authentication
Lab 39 Integrated IS-IS on NBMA networks
D.
RIP
Lab 40 Basic RIP configuration
Lab 41 Configure RIP unicast routing updates
Lab 42 Troubleshooting RIP problem
E.
Filtering, redistribution, summarization and other advanced features
Lab 43 Integrated RIP networks: Redistribution, route filtering and control
Lab 44 RIP and OSPF redistribution
Lab 45 Troubleshooting route redistribute problem
Lab 46 Policy routing based on source ip address
Lab 47 Policy routing based on packets size
Lab 48 Policy routing based on application
Lab 49 Load-balance across default routes
Lab 50 Troubleshooting policy-route problem

III.
BGP
Lab 51 BGP configuration (IBGP, EBGP, summarization)
Lab 52 BGP route-reflector
Lab 53 Manipulating BGP Path Selection
Lab 54 BGP confederations
Lab 55 BGP communities
Lab 56 BGP backdoor links
Lab 57 BGP troubleshooting
IV.
Dial
A.
ISDN configuration
Lab 58 ISDN basics and switch basics
Lab 59 PPP PAP authentication
Lab 60 PPP CHAP authentication
Lab 61 PPP multilink
B.
ODR, DDR
Lab 62 Floating static routes
Lab 63 Dialer profiles
C.
Dial backup, callback
Lab 64 Backup interfaces
Lab 65 Dialer watch
Lab 66 PPP callback
D.
Routing over ISDN
Lab 67 OSPF demand circuits
Lab 68 Troubleshooting ISDN problem

V.
IP and IOS Features
A.
IP addressing
Lab 69 IP address
Lab 70 IP broadcast
B.
DHCP
Lab 71 Basic DHCP configuration
C.
HSRP
Lab 72 Basic HSRP configuration
Lab 73 MHSRP configuration
Lab 74 Troubleshooting HSRP problem
D.
Mobile IP
Lab 75 Basic Mobile IP configuration
E.
NAT
Lab 76 Static inside source address translation
Lab 77 Dynamic inside source address translation
Lab 78 Overloading an inside global address
Lab 79 Translating overlapping address
Lab 80 Destination address rotary translation
F.
NTP
Lab 81 Use time server for NTP
Lab 82 Use time server and peers for NTP
Lab 83 NTP with authentication
Lab 84 Using LAN broadcast for NTP
G.
SNMP
Lab 85 Basic SNMP configuration
H.
RMON
Lab 86 Basic RMON configuration

VI.
IP Multicast
A.
PIM, bi-directional PIM
Lab 87 Basic PIM configuration
B.
MSDP
Lab 88 MSDP mesh group
C.
Anycast
Lab 89 Anycast RP

VII.
QoS
A.
NBAR
Lab 90 Basic NBAR configuration
B.
PBR
Lab 91 Basic PBR configuration
C.
PQ
Lab 92 Basic PQ configuration
D.
CQ
Lab 93 Basic CQ configuration
E.
WFQ
Lab 94 Basic WFQ configuration
F.
CBWFQ
Lab 95 Basic CBWFQ configuration
G.
CAR
Lab 96 Basic CAR configuration
H.
FRTS
Lab 97 FRTS configuration
I.
RSVP
Lab 98 Basic RSVP configuration

VIII.
Security
A.
AAA
Lab 99 AAA configuration
B.
Traffic filtering and firewalls
Lab 100 TCP intercept configuration
C.
Access lists
Lab 101 Standard ACL configuration
Lab 102 Extended ACL configuration
Lab 103 Extend ACL with Established option
Lab 104 Dynamic ACL configuration
Lab 105 Controlling VTY access
Lab 106 Time-of-day ACL configuration
Lab 107 Reflect ACL configuration

IX.
Voice over IP (VoIP)
Lab 108 Basic VOIP configuration
Lab 109 Private Line Automatic Ringdown
Lab 110 Number Expansion
Lab 111 IP precedence
Lab 112 Troubleshooting Voice problem

********************你需要它们吗？真的需要？********************
下载地址：http://www.ciscosim.net/thread-1495-1-1.html
在该地址二楼

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco CCIE R&S lab10月发布V4版 (0)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)

                 ************************验货分割线*************************
因为图片太多,所以只简单的把我的一些实验过程及说明贴到BLOG上了,如果需要详细的内容,可以在页面下方下载完整的PDF文档.(转载请注明出处:www.gotolab.cn)

本文为自己在学习动态访问列表(dynamic ACL)的一篇笔记.

在CCNA和NP中我们了解到了ACL—思科为网络访问提供的一种安全手段,它是运行在CISCO的IOS上的一种程序。传统的ACL分三大类：标准ACL/扩展ACL/命名ACL。这里对其做简单的回顾：

Cisco routers can identify access-list using two methods:
•access-list number—the number of the access list determines what protocol it is filtering：
–(1-99)and(1300-1399)——— standard IP access list
–(100-199)and(2000-2699)—- extended IP access list
•access list name (IOS versions gt 11.2)
Names contain alphanumeric characters
Names connot contain spaces or punctuation and must begin with alphabetic character
名称访问列表可以包含数字和字母，但其不可以包含空格及标点符号，而且第一个字符要是字母。

Cisco router support two basic types of IP access lists：
–standard—-Filter IP packets based on the source address only.
标准访问列表针对源IP地址进行过滤
–Extended—Fiter IP packets based on several attributes.including:
—Protocol type.
—Source and desination IP address
—Source and destination TCP/UDP ports
—ICMP and IGMP message types.
扩展访问列表针对几种属性对数据包进行过滤：
协议类型，源及目标的IP地址，源及目标的四层端口号，ICMP或者IGMP的报文类型。
一、标准ACL格式：access-list 列表号 deny或者permit 源IP地址 源IP掩码
Access-list 2 permit 1.1.1.0 0.0.0.255

如果是标准的命名ACL，则写法为：
(config)#ip access-list standard 名称
(config-std-nacl)#deny 1.1.1.0 0.0.0.255

二、扩展ACL格式：access-list 列表号 deny或permit 协议 {源IP 源反掩码|any|host} 源端口号 {目标IP 目标反掩码|any|host} 目标端口号 [established] [log| log-input]
Access-list 101 permit tcp 1.1.1.0 0.0.0.255 53 2.2.2.0 0.0.0.255 gt 1023

如果是扩展的命名ACL，则写法和标准类似，只是在定义访问策略时稍有不同

为访问列表打上标记，当你看到该ACL时，一目了然。
Remark message
例：Router(config)#access-list 100 remark traffic to http-server
Router(config)#access-list 100 permit ip any 1.1.1.1 0.0.0.255 eq 80

上面所说的仅仅是ACL的写法，都在全局配置模式下进行，但访问列表只是规则，需要有“人”来执行，那么执行者是谁？就是流量要通过的接口，访问列表编辑的再严密，逻辑性再强，安全性再高，如果不将其应用到接口上去，一切都是枉然！
在接口上的应用:
R(config)#int fa0/0
R(config-if)#ip access-group 100 in/out 或者 ip access-group cisco in/out
上面分别是标准和命名访问表在接口上的应用方式。方向是非常重要的，in和out完全是两码事！
1、标准的访问列表通常放置在离源最近的地方；
2、扩展的访问列表通常放置在离目标最近的地方。
(声明:因为兜兜的失误,这里出现了严重的技术性错误.兜兜把这个错误的地方留下,警示自己.)

动态ACL，顾名思义，动态访问表和传统的ACL之间的区别在于：一种是根据实际情况动态的创建访问列表，扩展性和安全性更强；一种是静态配置在设备上的表项，除非管理员删除它或者禁用，否则它要实现的功能将永远存在。

动态的ACL，可以根据用户的认证，临时的创建一条符合规则的特定的、临时的ACL。

为什么要使用动态ACL？

举例说明：对于远程的场站，如果需要向中心站点发送数据报文，那么传统的方式将是在边界设备上做一些访问规则，允许某些源地址进入。这样做的一个很大的安全隐患就是，在边界设备上向外敞开了一个永久性的大门，对于黑客来说，这个大门就是一个突破口。我们可以通过创建动态的ACL来增强安全性—–当远程用户通过telnet服务登陆中心站的边缘路由器的时候，需要通过一系列的认证，当验证pass后，该telnet服务关闭，在边缘设备上产生一条访问列表项，允许通过验证的源向中心站点发送数据报文，并为其规定一个时间，当时间耗尽，则需要远程用户重新telnet上来或者边缘设备自动断开。

动态访问列表的命令格式：
Access-list <访问列表号> dynamic <名称> [timeout n] [permit|deny] <协议> any <目标IP> <目标掩码>

访问列表号：与传统的扩展访问列表的格式相同；号码介于100~199之间；
名 称：是动态ACL表项的名称；
T i m e o u t：该参数可选，如果使用，则指定动态表的超时绝对时间；
协 议：可以是任何传统的IP、TCP/IP、UDP、ICMP等。
A n y： 因为在动态ACL中源IP地址总是使用认证主机的IP来代替，所以，我们无法事先预知，所以我们使用any；
目标IP和掩码：和传统的扩展ACL相同

注意：对于目的的IP，既然我们使用了动态ACL，那么肯定是为了网络的安全性着想，为了进一步的提高安全性，该参数，强烈建议使用单一子网或者单一主机，最好不要也弄个any~~~~；不要在一个访问表中创建多种动态访问表，那样做根本没有任何的意义！ (内容太长,后面的部分,请下载文档看吧.)
***************************吊胃口的分割线****************************
dynamic-acl.pdf  

下载该文的朋友请注意:文档中有一处明显的技术性错误,由于兜兜疏忽造成,近期因为一些特殊原因,无法连接FTP,不能更新该文档,请各位注意.该处错误在本日志中已经标明.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

640-802 CCNA Cisco Certified Network Associate
640-822 ICND1 Interconnecting Cisco Networking Devices Part 1
640-816 ICND2 Interconnecting Cisco Networking Devices Part 2

CCNP等内容未变动.但CCDP的部分科目讲会在2008年2月23日更新
642-873 ARCH Last day to test 2/23/08 Designing Cisco Network Service Architecture (ARCH)
OR
642-871 ARCH Designing Cisco Network Service Architectures (ARCH)

另CCSP的两门科目会在1月16日和2月1日更新.

Cisco IPS Specialist

在1月16日会有科目更新.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)
• Cisco:CCNA安全、语音认证帮助 (2)

2.cat-3550-core.pdf
由浅入深的介绍了cisco catalyst 3550从基础到高端的配置.一本非常使用的3550使用白皮书.而且可以以它为范例,来学习三层交换的内容.很好很强大

3.eigrp-core.pdf
涵盖了EIGRP的全部知识点.从基础配置,汇总,认证,KEY轮循,水平分割,被动接口,路由过滤等,详尽啊!很好很强大

4.frame-relay-atm.pdf
该文章节数量较少.但是却覆盖了整个FR配置的要点.和ATM的概要.主要还是集中在FR上.很好很强大.

5.GRE-tunnels.pdf
该文如其名.主要介绍GRE的通道.点到点,全网,点到多点.很好很强大

6.ios-encryption.pdf
本文介绍VPN的知识,并附带详细的配置和说明.非常好非常强大.

相关日志

• 招聘:网络工程师(南京) (9)
• Cisco CCIE R&S lab10月发布V4版 (0)
• Cisco Introduces New CCIE Wireless Certification and CCIE Voice Lab Exam Enhancements (1)
• Cisco:MPLS-VPN加强实验 (18)
• 虚位以待:组建Cisco内容运营团队 (8)
• cisco:CCIE考试新增英文面试环节 (5)
• CISCO: ccnp 642-825 lab Q (0)
• CISCO: ccnp 642-825 实验题(最新) (0)
• 兜兜招聘—思科网络工程师 (11)
• Pass4sure:提供来自Pearson VUE发放的Cisco考试20%折扣 (0)