Question-Set HCIE

R&s
Figure 1
Figure 2
Figure 3
Figure 4
Figure 5
Figure 6
Figure 7
 HCIE Lab Exam Paper

I. Exam Description

1. The full score is 100 and the pass mark is SO.

II. Exam Requirements

1. Complete the tasks in sequence.
2. If there are multiple choices for a task, select the one that best suits the requirements of the task.
3. Unless otherwise specified in a task, the following operations are prohibited

a) Create or delete interfaces.

b) Create a tunnel.
c) Create additional VLANs.
d) Change the interlace encapsulation mode.
e) Configure policy-based routing (PBR).
f) Summarize routes.
g) Use additional IP addresses,
h) Change IP addresses that have been assigned.

4. Do not create static route: to achieve the objective of each step except static route creations in
steps 1 and 2 of task 4.1
5. You must not log in to the ISP device.
6. Save the configuration at any time.
III. Exam Tasks

1 Layer 2 and VRRP (16 Marks)

1.1 Link Aggregation (2 Marks)
1. Assume that S1 does not support LACP. Bundle GE0 0/23 and GE0 0/24 connecting S1 and S2 into a
logical layer 2 interface, and configure member interfaces to load balance traffic based on the source
and destination MAC addresses. (2 marks)

1.2 Link Type (7 Marks)

1. Set the link type of interfaces connecting S1, S2, S3, and S4 to trunk, and configure the interfaces to
allow packets of all VLANs except VLAN 1 to pass through. (3 marks)

2. The VRRP group configured on CE1 and CE2 is assigned the virtual IP address 10.3.1.254, and functions
as the gateway for PCI. CE1 periodically sends gratuitous .ARP packets with the sender IP address as
10.3.1.254 and the source MAC address as 00-00-5E-00-01-01. The data frames transmitted between
PC1 and the gateway are tagged with VLAN 10 (PC1 sends and receives untagged frames).

3. The VRRP group configured on CE1 and CE2 is assigned the virtual IP address 10.3.2.2.254, and
functions as the gateway for Server 1. CE2 periodically sends gratuitous .ARP packets with the sender
IP address as 10.3.2.254 and the source MAC address as 00-00-5E-00-01-02. The data frames
transmitted between Saver 1 and the gateway are tagged with VLAN 20 (Server 1 sends and receives
untagged frames).

4. When the device acting as the VRRP master is restarted , the device should become the master
minute after GE0/0/2 goes up (4 Marks)
1.3 MSTP (5 Marks)

1. Configure SI, S2, S3, and S4 to run MSTP Configure the mapping between VLAN 10 and MSTI 10, and
configure S1 as the primary root bridge and S2 as the secondary root bridge. Configure the mapping
between VLAN 20 and MSTI 20, and configure S2 as the primary root bridge and S1 as the secondary
root bridge Set the MST region name to HUAWEL, and set the revision level of the MST region to 12. (3
marks)

2. Except the interconnection interfaces between switches, other interfaces should not participate in
MSTP calculation and can enter the Forwarding state immediately after their physical status becomes
up. (2 marks)

1.4 WAN (2 Marks)

1. Bundle the serial interfaces connecting PE1 and RR1 into a logical interface, and set the type of member
links to HDLC. Configure the IPv4 and IPv6 addresses of the logical interface according to Figure 1 and
Figure 5.(1 mark)

2. Bundle the POS interfaces connecting PE3 and CE3 into a logical interface, and set the type of member
links to PPP Configure the IPv4 address of the logical interface according to Figure 1.(1 mark)
2 IPv4 IGP (12 Marks)

1.5 Basic Configurations

1. Configure IPv4 addresses for interfaces on all devices according to Figure 1 Only the IPv4 addresses of
the logical interfaces between PE1 and RR1 have not been configured.

1.6 OSPF (6 Marks)

1. The IP addresses of Loopback 0 interfaces on CE1 and CE2 and the interconnection interfaces between
them have been advertised to OSPF area 0.

2. Advertise IP addresses of GEO 0/2.10 and GEO 0/2.20 on CE1 and CE2 to OSPF area 0: and disable these
interfaces from sending or receiving OSPF packets. (2 marks)

3. RR2. P2, PE3, and PE4 are located in OSPF area 0, and costs have been pre-configured according to
Figure 2.

4. Set the network type of OSPF interconnection interfaces between PE3 and PE4 to P2P. ( 1 mark)

5. Import the address of Loopback 0 on PE4 to OSPF In AS 200, the route from each OSPF NE to Loopback
0 on PE4 should contain the internal cost (3 marks)
1.7 IS IS (6 Marks)

1. In AS 100, enable IS-IS on all Loopback 0 and interconnection interfaces. The IS level and area ID of PE1
and PE2 are Level-1 and 49.0001, respectively. The IS level and area ID of RR1 and P1 are Level-1-2 and
49.0001, respectively The IS level and area ID of ASBR1 and ASBR2 are Level-2 and 49.0002,
respectively. The system ID of each NE is unique and the cost style is wide. The cost values are those
listed in Figure 2. (All the configurations except the logical interfaces between PE1 and RR1 have been
pre-configured)(1 mark)

2. In AS 200, IS-IS has been enabled on Loopback 0 and interconnection interfaces of RR2, P2, ASBR3, and
ASBR4. The IS level is Level-2 and the area ID is 49.0003. The system ID of each NE is unique and the
cost style is wide. The cost values are those listed in Figure 2. (Pre-configured)

3. Set the network type of IS-IS interconnection interlaces between RR2 and P2 to P2P (1 mark)

4. Perform the following configurations on P1: The maximum delay for generating an LSP is 1s the initial
delay is 50 ms, And the incremental delay is 50 ms. The fast LSP flooding function is enabled. The
maximum delay in SPF calculation is 1s, the initial delay is 100 ms, and the incremental delay is 100ms.
(4 marks)
3 MPLS VPN (45 Marks)

1. CE1 and CE2 is hub CEs in VPN1 and PE1 and PE2 are hub PEs. CE3 and CE4 are spoke CEs in VPN1 and
PE3 and PE4 are spoke PEs

2. CE4 is a multi -VPN - instance customer edge (MCE), the VRF instance for CE4 is VPN1, and CE4 is
connected to PE4 through GE0/0/ 1.1.

3. Set parameters for VPN1 properly so that the traffic between spoke devices must pass through the hub
CEs. If the link between CE1 and PE1 is disconnected, PE1 can still learn the service route to CE1. (The RD
of VPN 1 on PE3 is 100:13, the export RT is 100:1, and the import RT is 200:1.) (2 marks)

4. On the network shown in Figure 4, configure CE1 to establish direct EBGP peer relationships with PE 1
through GE0/ 0/1.1 and GE0/ 0/2. In the BGP updates advertised by CE1 to PEI through GE0/0/2, the AS-
path attribute values of some routes contain 200. (2 marks)

5. Configure CE2 to establish direct EBGP peer relationships with PE2 through GE0/0/1.1 and GE0/0/1.2. In
the BGP updates advertised by CE2 to PE2 through GE0/0/ 0.2, the AS-path attribute values of some routes
contain 200. (2 marks)

6. Configure CE3 to connect to PE3 through OSPF area 1 and logical interfaces created in step 2 of task 1.4,
and advertise IP addresses of loopback interfaces on CE3 to OSPF area 1 Configure CE4 to connect to PE4
through OSPF area 0 and GE0/0/1.1 interfaces, and advertise IP addresses of loopback interfaces on CE4 to
OSPF area 0. (2 marks)

7. As shown in Figure 3, an MPLS LSR ID has been pre-configured for each NE in AS 100 and AS 200, and
MPLS and MPLS LDP have been enabled globally. Establish LDP peer relationships between directly
connected NEs in AS 100 and AS 200 (all the configurations except the logical interfaces between PE1 and
RR1 have been pre-configured) (1 mark)

8. BGP peer relationships are established between ASBR1 and ASBR3 and between ASBR2 and ASBR4
through the directly connected interfaces. On ASBRs, import IS-1S routes of Loopback 0 interfaces to BGP.
Assume that the addresses of Loopback 0 interfaces in AS 100 and AS 200 are on the network segment
172.16.A.Y/32.

If Y is an odd number, traffic is preferentially transmitted through ASBR1 and ASBR3 when a device in an
AS accesses Loopback 0 in the peer .AS. If Y is an even number traffic is preferentially transmitted through
ASBR2 and ASBR4 when a device in an AS accesses Loopback 0 in the peer AS. The configuration should
have the best scalability (10 marks)
9. Perform configurations on RR2 and P2 to achieve the following Objectives: ASBR1 and ASBR2 learn
routes to Loopback 0 interfaces of PE3 and PE4. PE3 and PE4 learn routes to Loopback 0 interfaces of all
devices in AS 100 and AS 200. Loopback 0 interfaces of P2 and PE4 communicate with each other through
the optimal path. The configuration should have the best scalable (6 marks)

10. On the network shown in Figure 4, configure NEs to learn routes from each other through inter-AS
MPLS BGP VPN Option C Solution 2. Configure Loopback 0 as the source interface for establishing a TCP
session between IBGP peers (10 marks)

11. If the link between CE1 and PE1 is disconnected, CE1 can still learn the service network segment of
spoke devices. If the link between CE2 and PE2 is disconnected, CE2 can still learn the network segment of
spoke services. The configuration should have the best scalability (6 marks)

12. When links are normal, it is required that CE1 and CE2 do not bypass the local AS when they access the
service network segment of spoke devices (1 mark)

13 Modify the BGP Local-Preference attribute on PE3 and PE4, so that when CE3 and CE4 access the non-
directly connected network segment 10.3.X.0 24. PE3 and PE4 preferentially, select PE1 as the next hop if X
is at odd number, or preferentially select PE2 as the next hop if X is an even number Consist«:: of the
round- trip paths does not need to be considered (3 marks)
4 Features (12 Marks)
4.1 HA (5 Marks)
1. Configure a static default route on CE1 to access the ISP device, with the next-hop IP address as 100.0
1.2. The static default route should be bound to the BFD session between CE1 and the ISP device (the
ISP device does not support BFD). The fault detection time should be less than 150ms (2 marks)

2. Configure a static default route on CE2 to access the ISP device, with the next-hop IP address as
200.0.2.2. The static default route should be bound to an NQA, ICMP test instance on the link between
CE2 and the ISP device The test instance is performed once every 5s. (2 marks)

3. CE3 and CE4 can access the ISP device through default routes. If the link between CE1 and the ISP device
is disconnected, CE1 can still access the ISP device. If the link between CE2 and the ISP device is
disconnected, CE2 can still access the ISP device. (1 mark)

4.2 NAT (4 Marks)

1 .Configure NAT on CE1 to translate the private IP address segment of 10.3.0.0 16 (excluding 10.3.2 10) to
public IP addresses m the range from 102.0 1.2 to 102.0.1 6, and configure CE1 to access the ISP device
through GE2/0/1. Configure NAT on CE2 to translate the private IP address segment of 10.3.0. 0/16
(excluding 10.3.2.10) to public IP addresses in the range from 102.0.1.2 to 102.0.1.6 and configure CE2
to access the ISP device through GE2/0/2 Configure a dedicated public IP address, that is, 102.0.1.1, for
Server1 that provides FTP and HTTP device for the ISP device (4 Marks)

4.3 QoS (3 Marks)

1. Set the CIR to 1 Mbit/s for outgoing traffic with the destination TCP port number in the range from 6881
to 6999 on GE2/0/1 of CE1 and CE2/0/2 of CE2, and configure this QoS policy to take effect during 08:00
to 18:00 on Monday to Friday. (3 Marks)
5 IPv6 (15 Marks)
5.1 Basic Configurations

1. Configure IPv6 address for interfaces on all devices according to Figure 5 . Only the IPv6 addresses of the
logical interfaces between PE1 and RR1 have not been configured

5.2 IPv6 IGP (5 Marks)

1. On the network shown in Figure 6, configure PE1, PE2, RR1, P1, ASBR1, and ASBR2 to run IS-IS. Advertise
the directly connected network segments to IS-IS and configure the cost of each link (5 Marks)

5.3 IPv6 Multicast (10 Marks)

1. On the network shown in Figure 7, configure adjacent device in AS 100 to establish PIM IPv6 SM
neighbour relationships. Add E0/0/0 of PE1 to the static multicast group FF1E::AA. (4 Marks)

2. Configure Loopback 0 interfaces of ASBR1 and ASBR2 as C-BSRs and also C-RPs for FF1E::/112.
Loopback 0 of ASBR1 is elected as the BSR, and Loopback of ASBR2 is as the RP for FF1E::/112. (3
Marks)

3. No matter which C-RP is elected as the RP, ensure that no sub-optimal path exists in the (*, G)
entry generated in the PIM IPv6 SM domain (3 Marks)