模块 C:网络构建答题卡(C-2)
VSU 设备收集信息(40 分)
VSU#show switch virtual | 6 分 | |||||||||||||||||||||||
VSU#show switch virtual
----------------------------------------------------------------------------------------------------------------
| 标黄处每处 1 分。 | |||||||||||||||||||||||
VSU#show switch virtual dual-active bfd | 4 分 | |||||||||||||||||||||||
VSU#show switch virtual dual-active bfd BFD dual-active detection enabled: Yes BFD dual-active interface configured: GigabitEthernet 1/0/48: UP GigabitEthernet 2/0/48: UP | Yes 得 2 分 端口正确,全 up 得 2 分 | |||||||||||||||||||||||
VSU#show ip ospf neighbor | 5 分 | |||||||||||||||||||||||
VSU#show ip ospf neighbor OSPF process 10, 2 Neighbors, 2 is Full:
| 每行标黄处完全匹配 得 2.5 分 |
1
VSU#show aggregatePort summary | 6 分 | ||||||||||||||||||||||||||||||||||||||||||||||
VSU#show aggregatePort summary
------------- -------- ---------- ------ ---------------------------- -----------------------------------
| 每行标黄处完全匹配 得 2 分 | ||||||||||||||||||||||||||||||||||||||||||||||
| 10 分 | ||||||||||||||||||||||||||||||||||||||||||||||
| 每行标黄处完全匹配 得 5 分 | ||||||||||||||||||||||||||||||||||||||||||||||
VSU#show ip interface brief | 4 分 | ||||||||||||||||||||||||||||||||||||||||||||||
VSU#show ip interface brief
...... | 每行标黄处完全匹配 得 1 分 | ||||||||||||||||||||||||||||||||||||||||||||||
VSU#show ip route | include 172.17.20.0 | 5 分 |
2
VSU#show ip route | include 172.17.20.0 Running this command may take some time, please wait or press "Ctrl+C" to break. O IA172.17.20.0/24 [110/4] via 10.1.0.10, 09:26:00, VLAN 200 | 标黄处完全匹配得 5 分 |
S3 设备收集信息(30 分)
S3#show vrrp brief | 10 分 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
S3#show vrrp brief
| 每行标黄处完全匹配 得 2 分 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
S3#show ipv6 vrrp brief | 20 分 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
S3#show ipv6 vrrp brief
| 每行标黄处完全匹配 得 5 分 |
3
S4 设备收集信息(20 分)
S4#show ip ospf neighbor | 4 分 | |||||||||||||||
S4#show ip ospf neighbor OSPF process 30, 1 Neighbors, 1 is Full:
| 标黄处完全匹配得 4 分 | |||||||||||||||
S4#show ip ospf interface vlan 10 | include Hellos | 5 分 | |||||||||||||||
S4#show ip ospf interface vlan 10 | include Hellos No Hellos (Passive interface) | 标黄处完全匹配得 5 分 | |||||||||||||||
S4#show interface switchport | include TRUNK | 6 | |||||||||||||||
S4#show interface switchport | include TRUNK
| 每行标黄处完全匹配 得 3 分 | |||||||||||||||
S4#show ip route | include 172.18.20.0 | 5 分 | |||||||||||||||
S4#show ip route | include 172.18.20.0 Running this command may take some time, please wait or press "Ctrl+C" to break. O IA172.18.20.0/24 [110/5] via 10.1.0.6, 09:52:03, GigabitEthernet 0/24 | 标黄处完全匹配得 5 分 |
4
S5 设备收集信息(15 分)
S5#show interface gigabitEthernet 0/1 | be Bridge attributes | 9 分 | |||||||||||||
S5#show interface gigabitEthernet 0/1 | be Bridge attributes Bridge attributes: Port-type: trunk Native vlan: 10 Allowed vlan lists: 10,20 Active vlan lists: 10,20 ...... | 标黄处每处 3 分。 | |||||||||||||
S5#show ip ospf neighbor | 6 分 | |||||||||||||
S5#show ip ospf neighbor OSPF process 40, 1 Neighbors, 1 is Full:
| 标黄处完全匹配得 6 分 |
5
S6 设备收集信息(40 分)
S6#show run interface gigabitEthernet 0/13 | 12 分 | ||||||
S6#show run interface gigabitEthernet 0/13 Building configuration... Current configuration: 214 bytes interface GigabitEthernet 0/13 errdisable recovery interval 300 switchport protected switchport access vlan 40 spanning-tree bpduguard enable spanning-tree portfast rldp port loop-detect shutdown-port | 每行标黄处完全匹配 得 2 分 | ||||||
S6#show spanning-tree mst configuration | 8 分 | ||||||
S6#show spanning-tree mst configuration Multi spanning tree protocol : Enable
Revision : 1
-------- --------------------------------------------
----------------------------------------------------- | 每行标黄处完全匹配 得 4 分 |
6
S6#show spanning-tree summary | include Gi0/23 | 10 分 | |||||||||||||
S6#show spanning-tree summary | include Gi0/23
| 标黄处完全匹配得 10 分 | |||||||||||||
S6#show ip dhcp snooping binding (PC 连接交换机 13 端口自动获取地址后收集信息) | 6 分 | |||||||||||||
S6#show ip dhcp snooping binding Total number of bindings: 1
----- ------------------ --------------- ------------ ------------- ----- --------------------
| 每行标黄处完全匹配 6 分 | |||||||||||||
ping 2001:193:20::254(PC 连接交换机 13 端口自动获取地址后收集信息) | 4 分 | |||||||||||||
正在 Ping 2001:193:20::254 具有 32 字节的数据: 来自 2001:193:20::254 的回复: 时间=2ms 来自 2001:193:20::254 的回复: 时间=2ms 来自 2001:193:20::254 的回复: 时间=2ms 来自 2001:193:20::254 的回复: 时间=2ms 2001:193:20::254 的 Ping 统计信息: 数据包: 已发送 = 4,已接收 = 4,丢失 = 0 (0% 丢失), 往返行程的估计时间(以毫秒为单位): 最短 = 2ms,最长 = 2ms,平均 = 2ms | 可 Ping 通得 4 分 |
7
S7 设备收集信息(15 分)
S7#show interface gigabitEthernet 0/1 switchport | 5 分 | ||||||||||
S7#show interface gigabitEthernet 0/1 switchport
-------------------------------- ---------- --------- ------ ------ --------- ----------------------
| 标黄处完全匹配得 5 分 | ||||||||||
S7#show run | include snmp | 5 分 | ||||||||||
S7#show run | include snmp snmp-server host 172.16.0.254 traps version 2c Test snmp-server host 172.16.0.254 traps version 2c public snmp-server enable traps snmp-server community Test rw snmp-server community public ro | 每行完全匹配得 1 分 | ||||||||||
S7#show run | include password | 5 分 | ||||||||||
S7#sh run | include password username admin password 7 1014162a0c1c service password-encryption enable password 7 073f07221c1c password 7 073f07221c1c | 密码为加密方式得 5 分 |
8
R1 设备收集信息(50 分)
R1#show mpls ldp neighbor all | include Peer LDP Ident | 10 分 | ||||||||||||||||||||||||||||
R1#show mpls ldp neighbor all | include Peer LDP Ident Peer LDP Ident: 11.1.0.3:0; Local LDP Ident: 11.1.0.1:0 Peer LDP Ident: 11.1.0.2:0; Local LDP Ident: 11.1.0.1:0 | 每行标黄处完全匹配 得 5 分 | ||||||||||||||||||||||||||||
R1#show bgp vpnv4 unicast all summary | 10 分 | ||||||||||||||||||||||||||||
R1#show bgp vpnv4 unicast all summary BGP router identifier 11.1.0.1, local AS number 100 BGP VRF (Global VRF) Route Distinguisher: (none) BGP table version is 4 1 BGP AS-PATH entries 0 BGP Community entries 17 BGP Prefix entries (Maximum-prefix:4294967295)
Total number of neighbors 2 | 每行标黄处完全匹配 得 5 分 | ||||||||||||||||||||||||||||
R1#show ip vrf detail | 10 分 | ||||||||||||||||||||||||||||
R1#show ip vrf detail VRF VPNA (VRF ID = 1); default RD 100:1 Interfaces: | 每处标黄处完全匹配 得 2.5 分 |
9
VLAN 200 VRF Table ID = 1 Export VPN route-target communities RT: 1:1 Import VPN route-target communities RT: 1:1 | ||||||||||
R1#show ip route vrf VPNA ospf | include 172.16.100.0/24 | 5 分 | |||||||||
R1#show ip route vrf VPNA ospf | include 172.16.100.0/24
| 标黄处完全匹配得 5 分 | |||||||||
R1#show ip route vrf VPNA bgp | include 172.17.20.0/24 | 5 分 | |||||||||
R1#show ip route vrf VPNA bgp | include 172.17.20.0/24
| 标黄处完全匹配得 5 分 | |||||||||
R1#show ip route vrf VPNA bgp | include 172.18.20.0/24 | 5 分 | |||||||||
R1#show ip route vrf VPNA bgp | include 172.18.20.0/24
| 标黄处完全匹配得 5 分 | |||||||||
R1#show mpls forwarding-table | include PP | 5 分 | |||||||||
R1#show mpls forwarding-table | include PP PP--POP label
| 每行标黄处完全匹配 得 2.5 分 |
10
R2 设备收集信息(20 分)
R2#show mpls forwarding-table detail | begin 172.18.20.0/24 | 5 分 | ||||||||||||||||||||||||||||||
R2#show mpls forwarding-table detail | begin 172.18.20.0/24
Added by Route(vrf VPNA), Tag Stack: { 1024 1537 } ...... | 标黄处为双标签得 5 分(数值不限制) | ||||||||||||||||||||||||||||||
R2#show ip ospf neighbor | 15 分 | ||||||||||||||||||||||||||||||
R2#show ip ospf neighbor OSPF process 20, 1 Neighbors, 1 is Full:---5 分
OSPF process 30, 1 Neighbors, 1 is Full:-----5 分
| 标黄处完全匹配 |
11
R3 设备收集信息(20 分)
R3#show mpls forwarding-table | include PI | 5 分 | |||||||||||||||
R3#show mpls forwarding-table | include PI PI--POP label and do ip lookup forward
| 标黄处完全匹配得 5 分 | |||||||||||||||
R3#show ip ref route vrf VPNA 172.18.20.0 255.255.255.0 | 5 分 | |||||||||||||||
R3#show ip ref route vrf VPNA 172.18.20.0 255.255.255.0 Codes: * - default route # - zero route R - recursive route
| 标黄处完全匹配得 5 分 | |||||||||||||||
R3#traceroute mpls ipv4 11.1.0.2/32 | 10 分 | |||||||||||||||
R3#traceroute mpls ipv4 11.1.0.2/32 Tracing MPLS Label Switched Path to 11.1.0.2/32, timeout is 2 seconds Codes: '!' - success, 'Q' - request not sent, '.' - timeout, 'L' - labeled output interface, 'B' - unlabeled output interface, 'D' - DS Map mismatch, 'F' - no FEC mapping, 'f' - FEC mismatch, 'M' - malformed request, 'm' - unsupported tlvs, 'N' - no label entry, 'P' - no rx intf label prot, 'p' - premature termination of LSP, 'R' - transit router, 'I' - unknown upstream index, | 标黄处完全匹配得 10 分 |
12
'X' - unknown return code, 'x' - return code 0 Press Ctrl+C to break.
! 2 12.1.1.2<1 ms |
13
VAC 设备收集信息(50 分)
VAC#show virtual-ac | 10 分 | |||||||||||||||||||||||||||
VAC#show virtual-ac
-------------------------------------------------------------------------------------------------------
| 每行标黄处完全匹配 得 5 分 | |||||||||||||||||||||||||||
VAC#show cap stat | 5 分 | |||||||||||||||||||||||||||
VAC#show cap stat CAPWAP tunnel state, 3 peers, 3 is run:
| 标黄处完全匹配 | |||||||||||||||||||||||||||
VAC#show wlan-config cb 1 | 5 分 | |||||||||||||||||||||||||||
VAC#show wlan-config cb 1 WLAN ID.................................. 1 SSID..................................... Test-GZ_XX Profile.................................. MAC Mode................................. Local Tunnel Mode.............................. Local Bridging | 每处标黄点完全匹配 得 2.5 分 |
14
VAC#show wlan security 1 | include WPA version | 5 分 | |||||||||||||||||||||||||
VAC#show wlan security 1 | include WPA version
| 标黄处完全匹配得 5 分 | |||||||||||||||||||||||||
| 5 分 | |||||||||||||||||||||||||
wlan-based per-user-limit down-streams average-data-rate 800 burst-data-rate 1600 | 标黄处完全匹配得 5 分 | |||||||||||||||||||||||||
VAC#show run | include disabled | 5 分 | |||||||||||||||||||||||||
VAC#sh run | include disabled 802.11g network rate 1 disabled 802.11g network rate 2 disabled 802.11g network rate 5 disabled 802.11b network rate 1 disabled 802.11b network rate 2 disabled 802.11b network rate 5 disabled 802.11a network rate 6 disabled 802.11a network rate 9 disabled | 每行标黄处完全匹配 得 1 分 | |||||||||||||||||||||||||
tracert 172.16.20.254(无线用户关联 Test-GZ_XX 成功后,在 PC 端收集) | 5 分 | |||||||||||||||||||||||||
C:\Users\Lenovo>tracert 172.16.20.254 通过最多 30 个跃点跟踪到 172.16.20.254 的路由
| 下一跳 IP 地址完全 匹配得 5 分 |
15
跟踪完成。 | ||||||||||||||||||||||||||||||||||||
tracert 172.17.20.254(无线用户关联 Test-JL_XX 成功后,在 PC 端收集) | 5 分 | |||||||||||||||||||||||||||||||||||
C:\Users\Lenovo>tracert 172.17.20.254 通过最多 30 个跃点跟踪到 172.17.20.254 的路由
跟踪完成。 | 下一跳 IP 地址完全 匹配得 5 分 | |||||||||||||||||||||||||||||||||||
tracert 172.18.20.254(无线用户关联 Test-BJ_XX 成功后,在 PC 端收集) | 5 分 | |||||||||||||||||||||||||||||||||||
C:\Users\Lenovo>tracert 172.18.20.254 通过最多 30 个跃点跟踪到 172.18.20.254 的路由
跟踪完成。 | 下一跳 IP 地址完全 匹配得 5 分 |
16
EG1 设备收集信息(10 分)
EG1#show ip route | include 172.16.100.0 | 5 分 | ||
EG1#show ip route | include 172.16.100.0 Running this command may take some time, please wait or press "Ctrl+C" to break.
| 标黄处完全匹配得 5 分 | ||
EG1#show ip route | include 172.18.20.0 | 5 分 | ||
EG1#show ip route | include 172.18.20.0 Running this command may take some time, please wait or press "Ctrl+C" to break.
| 标黄处完全匹配得 5 分 |
EG2 设备收集信息(40 分)
| 20 分 | ||
channel-group telnet parent root cir 10000 pir 10000 pri 4 per-net per-pir 500 limit 1000 channel-group telnet parent root cir 10000 pir 10000 pri 4 per-net per-pir 500 limit 1000 | 每行标黄处完全匹配 得 10 分 | ||
EG2#show url-class user-cfg | 10 分 | ||
EG2#show url-class user-cfg url-class:un_audit_class comment:unaudit url-class:forbidClass url: 172.16.100.1 | 标黄处完全匹配得10 分 |
17
EG2#show content-policy | 10 分 |
EG2#show content-policy content-policy _TOP_PRIORITY (active)url-rule 997 url-object un_audit_object time-range any action permit comment 不审计的网址 content-policy P2P (active)app-rule 1 time-range Work app-group P2P 应用软件 action deny audit comment P2P-app-1558515178424 content-policy _AUDIT_DEFAULT (active)url-rule audit-default-enable (active)web-search-rule audit-default-enable (active)web-bbs-rule audit-default-enable (active)web-mail-rule audit-default-enable (active)im-rule audit-default-enable (active)mail-rule audit-default-enable | 标黄处完全匹配,每 处 1 分 |
18
无线地勘设备收集信息(50 分)
AP 点位规划设计 | 15 分 |
1. AP 部署位置合理 (5 分) 2. AP 编号正确(型 号+位置+编号) (5 分) 3.AP 信道规划正确 (5 分) |
19
无线热图 | 15 分 |
1. 型号覆盖无死角 (楼道、洗手间、 杂物房等无需覆 盖)(15 分) 2.覆盖区域有紫色 或白色部分扣 5 分 |
20
无线设备清单和价格 | 20 分 | ||||||
网络设备型号 | 单价 | 数量 | 总价 | 分值 | |||
AP330-I | 6000 | 5 | 30000 | 4 分 | |||
AP110W | 2500 | 7 | 17500 | 4 分 | |||
S2928G-24P | 15000 | 1 | 15000 | 4 分 | |||
WS6008 | 50000 | 1 | 50000 | 4 分 | |||
总价 | 112500 | 4 分 |
21