LAB 1

Sự cố 1 :
Kiểm tra :

SW2#show ip inter br
Interface IP-Address OK? Method Status Protocol
Vlan1 unassigned YES unset up up
FastEthernet0/1 unassigned YES unset down down
FastEthernet0/2 unassigned YES unset up up
Port-channel12 unassigned YES unset up up
Port-channel23 unassigned YES unset down down
Loopback0 10.1.1.7 YES manual up up

Nguyên nhân :
Sw2 cấu hình sai etherchannel

Khắc phục : chuyển mode của etherchannel từ mode auto sang mode designable

SW2(config)#interface range fa0/15 - 16

SW2(config-if-range)#channel-group 23 mode desirable

Kết quả :

SW2# show inter trunk

Port Mode Encapsulation Status Native vlan

Fa0/13 on 802.1q trunking 1

Po23 on 802.1q trunking 1

Po12 on 802.1q trunking 1

…..

Cấu hình A :

- Trên Router R1 :

R1(config)#router ospf 1

R1(config-router)#net 172.18.12.1 0.0.0.0 area 0

R1(config-router)#net 172.18.13.1 0.0.0.0 area 0

R1(config-router)#net 10.1.1.1 0.0.0.0 area 0

R1(config-router)#

- Trên Router R2 :

R2(config)#router ospf 1

R2(config-router)#net 172.18.234.2 0.0.0.0 area 0

R2(config-router)#net 172.18.12.2 0.0.0.0 area 0

R2(config-router)#net 10.1.2.2 0.0.0.0 area 0

- Trên Router R3 :

R3(config)#router ospf 1

R3(config-router)#net 172.18.13.3 0.0.0.0 area 0

R3(config-router)#net 172.18.234.3 0.0.0.0 area 0

R3(config-router)#net 172.18.35.3 0.0.0.0 area 35

- Trên Router R4:

R4(config)#router ospf 1

R4(config-router)#net 172.18.234.4 0.0.0.0 area 0

R4(config-router)#net 172.18.234.4 0.0.0.0 area 0

R4(config-router)#net 10.1.4.4 0.0.0.0 area 0

- Trên Router R5 :

R5(config)#router ospf 1

R5(config-router)#net 172.18.35.5 0.0.0.0 area 35

R5(config-router)#net 10.1.5.5 0.0.0.0 area 35

Sự cố 2 :
Kiểm tra :

SW3#show vlan

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

…..
12 VLAN0012 active

35 VLAN0035 active Fa0/3

100 VLAN0100 active

234 VLAN0234 active

Nguyên nhân : cổng fa0/4 chưa được gán vào VLAN 234

Khắc phục :

SW3(config)#interface fa0/4

SW3(config-if)#switchport access vlan 234

Kiểm tra :

R4#show ip route

……

172.18.0.0/24 is subnetted, 4 subnets

C 172.18.234.0 is directly connected, FastEthernet0/1

O IA 172.18.35.0 [110/2] via 172.18.234.3, 00:00:04, FastEthernet0/1

O 172.18.12.0 [110/3] via 172.18.234.3, 00:00:04, FastEthernet0/1

O 172.18.13.0 [110/782] via 172.18.234.3, 00:00:04, FastEthernet0/1

10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks

O IA 10.1.5.5/32 [110/3] via 172.18.234.3, 00:00:04, FastEthernet0/1

O 10.1.2.2/32 [110/3] via 172.18.234.3, 00:00:04, FastEthernet0/1

O 10.1.1.1/32 [110/783] via 172.18.234.3, 00:00:04, FastEthernet0/1

C 10.1.4.0/24 is directly connected, Loopback0

Sự cố 3:

- Tại switch SW4:

Cấu hình :
SW4(config)#ip routing
SW4(config)#router ospf 1
 SW4(config-router)#network 172.18.234.0 0.0.0.255 area 0
SW4(config-router)#network 10.0.0.0 0.255.255.255 area 0

Lỗi 1 :
Nguyên nhân :
Trên cổng fa0/13 và fa0/14 trên SW1 và SW2 có câu lệnh “spanning-tree bpduguard enable” làm SW4 không
nhận được gói BPDU nên 2 đường trunk kết nối từ SW1 và SW2 bị lỗi.
Khắc phục :
Tắt tính năng bpduguard trên SW1 và SW2 :
- Tại SW1 :
SW1(config)#interface range FastEthernet0/13 - 14
SW1(config-if)#no spanning-tree bpduguard enable
- Tại SW2 :
SW2(config)#interface fa0/13
SW2(config-if)#no spanning-tree bpduguard
SW2(config-if)#

Lỗi 2 :
Nguyên nhân : Đặt sai interface vlan
Khắc phục : Sửa lại vlan 243 thành vlan 234

SW4(config)#interface vlan 243

SW4(config-if)#no ip address
SW4(config)#interface vlan 234
SW4(config-if)#ip address 172.18.234.44 255.255.255.0
SW4(config-if)#no shutdown

Lỗi 3 :

Kiểm tra :

R2#debug ip ospf events

OSPF events debugging is on

*Jan 17 02:48:32.611: OSPF: Rcv LS UPD from 10.1.3.3 on FastEthernet0/0 length 88 LSA count 1

R2#

*Jan 17 02:48:35.287: OSPF: Send DBD to 10.1.9.9 on FastEthernet0/0 seq 0x186D opt 0x52 flag 0x7
len 32

*Jan 17 02:48:35.287: OSPF: Retransmitting DBD to 10.1.9.9 on FastEthernet0/0 [13]

*Jan 17 02:48:35.807: OSPF: Rcv DBD from 10.1.9.9 on FastEthernet0/0 seq 0x156B opt 0x52 flag 0x7
len 32 mtu 1504 state EXSTART

*Jan 17 02:48:35.807: OSPF: Nbr 10.1.9.9 has larger interface MTU

Nguyên nhân :

Giá trị MTU của SW4 lớn hơn R2 :

Khắc phục :

Sửa giá trị MTU của SW4 lại là 1500 sau đó reload lại switch:

SW4(config)#system mtu 1500

Changes to the system MTU will not take effect until the next reload is done

SW4(config)#exit

SW4#wr

SW4#reload

Sự cố 4 :
Kiểm tra :

R5#show ip inter br

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 172.18.53.5 YES manual up up

FastEthernet0/1 unassigned YES unset administratively down down

Serial0/1/0 unassigned YES unset administratively down down

Serial0/1/1 unassigned YES unset administratively down down

Loopback0 10.1.5.5 YES manual up up

Nguyên nhân :

R5 khai báo sai địa chỉ IP , sửa lại ip cổng fa0/0

Khắc phục : Đổi ip cổng fa0/0 từ 172.18.53.3 thành 172.18.35.3

R5(config)#interface fa0/0

R5(config-if)#no ip address
R5(config-if)#ip address 172.18.35.5 255.255.255.0

Kết quả :

R5#show ip route

……

172.18.0.0/24 is subnetted, 3 subnets

O IA 172.18.234.0 [110/2] via 172.18.35.3, 00:00:25, FastEthernet0/0

C 172.18.35.0 is directly connected, FastEthernet0/0

O IA 172.18.13.0 [110/782] via 172.18.35.3, 00:00:25, FastEthernet0/0

10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks

O IA 10.1.9.9/32 [110/3] via 172.18.35.3, 00:00:25, FastEthernet0/0

O IA 10.1.4.4/32 [110/3] via 172.18.35.3, 00:00:25, FastEthernet0/0

O IA 10.1.2.2/32 [110/3] via 172.18.35.3, 00:00:25, FastEthernet0/0

O IA 10.1.1.1/32 [110/783] via 172.18.35.3, 00:00:25, Fast

Sự cố 5 : Sai mật khẩu chứng thực PPP

R1#show ip inter br

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 220.2.3.1 YES manual up down

FastEthernet0/1 172.18.12.1 YES manual up up

Serial0/1/0 172.18.13.1 YES manual up down

Serial0/1/1 unassigned YES unset administratively down down

NVI0 unassigned NO unset up up

Loopback0 10.1.1.1 YES manual up up

R1#

Khắc phục : Sử lại password chứng thực pap từ Ttgtc.com thành ttgtc.com

R1(config)#interface Serial0/1/0

R1(config-if)#no ppp pap sent-username r1 password 0 Ttgtc.com

R1(config-if)#ppp pap sent-username r1 password 0 ttgtc.com

Kết quả :

R1#show ip inter br

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 220.2.3.1 YES manual up down

FastEthernet0/1 172.18.12.1 YES manual up up

Serial0/1/0 172.18.13.1 YES manual up up

Serial0/1/1 unassigned YES unset administratively down down

NVI0 unassigned NO unset up up

Loopback0 10.1.1.1 YES manual up up

Cấu hình B:
Kiểm tra :

SW3#show spanning-tree vlan 234

VLAN0234

Spanning tree enabled protocol ieee

Root ID Priority 33002

Address 000a.b85f.dc00

Cost 19

Port 232 (Port-channel23)

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 33002 (priority 32768 sys-id-ext 234)

Address 000a.b860.0080

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 300 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Fa0/4 Desg FWD 19 128.6 P2p

Po13 Altn BLK 12 128.152 P2p

Po23 Root FWD 19 128.232 P2p

Khắc phục : Cấu hình SW3 là root primary cho vlan 234

SW3(config)#spanning-tree vlan 234 root primary

SW3#show spanning-tree vlan 234

VLAN0234

Spanning tree enabled protocol ieee

Root ID Priority 24810

Address 000a.b860.0080

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24810 (priority 24576 sys-id-ext 234)

Address 000a.b860.0080

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 15 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Fa0/4 Desg FWD 19 128.6 P2p

Po13 Desg LRN 12 128.152 P2p

Po23 Desg FWD 19 128.232 P2p

Sự cố 6 :
Kiểm tra :

R4#traceroute 10.1.1.1

Type escape sequence to abort.

Tracing the route to 10.1.1.1

1 172.18.234.3 0 msec 0 msec 0 msec

2 172.18.13.1 8 msec 8 msec *

R4#show ip route

…….

172.18.0.0/24 is subnetted, 4 subnets

C 172.18.234.0 is directly connected, FastEthernet0/1

O IA 172.18.35.0 [110/2] via 172.18.234.3, 00:03:37, FastEthernet0/1

O 172.18.12.0 [110/2] via 172.18.234.2, 00:03:37, FastEthernet0/1

O 172.18.13.0 [110/66] via 172.18.234.2, 00:03:37, FastEthernet0/1

10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks

O 10.1.9.9/32 [110/2] via 172.18.234.44, 00:03:37, FastEthernet0/1

O 10.1.3.3/32 [110/2] via 172.18.234.3, 00:03:37, FastEthernet0/1

O 10.1.2.2/32 [110/2] via 172.18.234.2, 00:03:37, FastEthernet0/1

O 10.1.1.1/32 [110/3] via 172.18.234.2, 00:03:37, FastEthernet0/1

C 10.1.4.0/24 is directly connected, Loopback0

R4#

Khắc phục : Sửa lại giá trị metric của cổng fa0/1 của R2 là 5000

R2(config)#interface fa0/1

R2(config-if)#ip ospf cost 5000

R2(config-if)#

Kiem tra :

R4#show ip route

……

172.18.0.0/24 is subnetted, 4 subnets

C 172.18.234.0 is directly connected, FastEthernet0/1

O IA 172.18.35.0 [110/2] via 172.18.234.3, 00:00:02, FastEthernet0/1

O 172.18.12.0 [110/783] via 172.18.234.3, 00:00:02, FastEthernet0/1

O 172.18.13.0 [110/782] via 172.18.234.3, 00:00:02, FastEthernet0/1

10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks

O 10.1.9.9/32 [110/2] via 172.18.234.44, 00:00:02, FastEthernet0/1

O 10.1.3.3/32 [110/2] via 172.18.234.3, 00:00:02, FastEthernet0/1

O 10.1.2.2/32 [110/2] via 172.18.234.2, 00:00:02, FastEthernet0/1

O 10.1.1.1/32 [110/783] via 172.18.234.3, 00:00:02, FastEthernet0/1

Cấu hình :
R1(config)#router bgp 100

R1(config-router)#network 172.18.12.0 mask 255.255.255.0

R1(config-router)#network 172.18.13.0 mask 255.255.255.0

R1(config-router)# network 220.2.3.0 mask 255.255.255.0

R1(config-router)# neighbor 220.2.3.254 remote-as 200

Sự cố 7:
R1#show interfaces fa0/0

FastEthernet0/0 is up, line protocol is up

Hardware is Gt96k FE, address is 000a.b8d9.18d2 (bia 000a.b8d9.18d2)

Internet address is 220.2.3.1/30

 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

reliability 255/255, txload 1/255, rxload 1/255

Nguyên nhân :

Cổng fa0/0 của R1 cấu hình sai subnet mask.

Khắc phục:

Đổi giá trị subnet mask của cổng fa0/0 trên R1 từ 255.255.255.252 thành 255.2555.255.0

R1(config)#interface fa0/0

R1(config-if)#no ip add

R1(config-if)#no ip address

R1(config-if)#ip add

R1(config-if)#ip address 220.2.3.1 255.255.255.0

Kết quả :

R1#show ip route

……

B 212.2.2.0/24 [20/0] via 220.2.3.254, 00:00:18

B 213.3.3.0/24 [20/0] via 220.2.3.254, 00:00:18

B 211.1.1.0/24 [20/0] via 220.2.3.254, 00:00:18

B 214.4.4.0/24 [20/0] via 220.2.3.254, 00:00:18

Sự cố 8 :
Nguyên nhân : Cấu hình sai ACL chỉ định lưu lượng cần NAT

R1(config)#no access-list 1

R1(config)#access-list 1 permit 10.0.0.0 0.255.255.255

Kết quả :

R1#ping

Protocol [ip]:
Target IP address: 211.1.1.1

Repeat count [5]:

Datagram size [100]:

Timeout in seconds [2]:

Extended commands [n]: y

Source address or interface: 10.1.1.1

Packet sent with a source address of 10.1.1.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

R1#show ip nat translations

Pro Inside global Inside local Outside local Outside global

icmp 220.2.3.1:1 10.1.1.1:1 211.1.1.1:1 211.1.1.1:1