Share your TSHOOT v2.0 Experience

DANGER DANGER

We are all failing in Layer 2 Technologies and Layer 3 technologies, WHAT IS HAPENNING!!

anon here again, on my tickets I suspected HRSP and IP-helper I could not ping past DSW1, either failing on 10.2.1.1 or 10.1.4.6. (Ports to ASW1 and R4)

What tickets are referred to by Layer 2 technologies and Layer 3 technologies?

Does anyone know?

Anon entry #3, I checked ASW1 and there were no portsec issues, access vlan 10 was properly configured for clients, and trunks were properly configured for po interfaces.

Something else caused connectivity to fail past ASW1, but can’t say more than that.

@Hytch I think I had the same issue as you with port sec configured but port was not administratively down, and I picked IP helper as the answer on 2 tickets. the first I knew I goofed, and the second one could also have been something else than IP helper.

Hello Guys
Passed with full Mark.
First of all, I would like to thanks Networktut again.
Second I would like to say to someone of here don’t give wrong information. Keep away so we can help all the others.
Third, the exam isn’t so difficult but you must practice everything from here with a premium account and you have to be very careful with the technologies and answers.
Fourth, don’t hurry up and read again and again the answer that you give.

Now I give all the details

Been reading comments for this week, and it seems they have introduced a couple of new tickets on either ASW1 or DSW1. I didn’t get any tickets with access vlan or port security. I was so sure that studying the tickets would be enough, but I still got lost. Next time I will spend more time verifying ASW1 and DSW1 to make sure something matches exactly, and you can also do a bit of ‘brute forcing’ by checking the answers and see if the config already exists.

e.g. if you choose ASW1 VLAN to be the issue, if the fix is to configure access vlan 10, this answer is incorrect if the switch already has this config.

Basic logic, but something is clearly up with several people failing, especially on layer 2 tech.

After-thought, I just ran ‘show ip int brief’ on asw1, but never show interfaces status, or show interface status err-disabled. in the running config there was never a mac address of 0000.0000.0001, but they could have put a mac more similar to client 1…

Layer 2 tech is all about port security, VLANs, Dot1Q, trunks, so for sure the tickets will relate to ASW 1 or 2, or DSW 1 & 2…
source: https://learningnetwork.cisco.com/community/certifications/ccnp/tshoot_v2/exam-topics

First time 804/1000 fail

-Network Principles :100%
-Layer 2 Technologies :76%
-Layer 3 Technologies :86%
-VPN technologies :100%
-Infrastructure Security :100%
-Infrastructure Services :0%

Second time 804/1000 fail
Network Principles :100%
Layer 2 Technologies :53%
Layer 3 Technologies :100%
VPN technologies :100%
Infrastructure Security :100%
Infrastructure Services :0%

“Layer 2 Technologies” and “Infrastructure Services” maybe make you trouble.

@Shadow,
Buddy Ghost. Please email me, I have something to ask you. My exam is 13 hours from now.
Thanks.

onemant1m(at)yahoo(dot)com

MCQ is the same as here. In some MCQ you see a picture but the answer is the same as here.

Simlet is the same as here except BGP. In BGP you see different IP for the neighbor line but do not confuse because the configuration is the same. In scenario tell you what you have to see when end your configuration with the command ” show IP BGP ”. Additionally, the line that you change in IBGP, the word IBGP have to write it with capital letters, if you don’t is wrong.

example BGP:
First, give the command show run and focus on BGP.
Second, configuration the wrong. —> conf t —> router bgp 64520 —> begin to replace the wrong states.
Third, when you finished, do again the sh run (of course you have to exit from configuration). Check your change that you have done. If you see that all seems correct then do the command show IP BGP and cooperation what gives you with the scenario.

@1ManTim
everything you want please ask me here. So your question maybe help others

Mate he was asking me haha I’m from London.

Sorry about the result. A few users complained about a similar experience with the layer two technology. I think the issue might be related to the ASW1 and DSW1 related tickets. My advise is to practice every tickets carefully and understand the concept and also read the comments under every tickets from other users. The SAM strategy might also be helpful too. Good Luck

TICKETS IPv4 + Switch
From client 1 ping 10.1.1.1 (YES, REPLY for help) — 3 tickets + 1 FOR issue in R1. How to recognize easy that ticket the way is:

BGP neighbor ( give the command ”show IP BGP summary” ) if you see the wrong IP (.56) is that ticket. If you want after do the command sh run. If you don’t see (.56) and see the right IP (.65) go to another issue.

Authentication ( give the command ”show IP OSPF in R1). Under Area 12 you see that hasn’t authentication (no authentication…. ). Give the same command in R2 you see that has authentication in the same area. After go to sh run and see where the digest is missing.
If you see in R1 that has authentication under Area 12 then go to another issue.

IP NAT, here you can give the command ” show IP nat statistics ” you see 2 interfaces inside.
Then give the sh run and see that the 2 interface is inside. Look at the topology and see which interface has to go outside (the answer is the same as here).
The same do it for the IP NAT (B) if you have (B) and not the upper.

The last issue for R1 is
Extended Security. I try the command ” sh IP access-list” but not working. so you have to go to the show run.

IN MY EXAM I HAVE
AUTHENTICATE AND IP NAT (A) — > 2 INTERFACE INSIDE

TICKETS IPv4 + Switch
SORRY, I DO A WRONG UPPER. FOR ISSUE WITH AUTHENTICATE IS THE DOWN

From client 1 ping 10.1.1.1 (NO ) —-> PING 10.1.1.2 (YES) THAT IS THE AUTHENTICATE ISSUE AND FOLLOW THE UPPER ROAD IF YOU WANT.

SORRY FOR MISTAKE.

From client 1 ping 10.1.1.1 (NO) —-> Ping 10.1.1.2 (NO) —- > Ping 10.2.1.1 (YES)

R4 ISSUE

PING 10.2.1.1 (YES) —> PING 10.1.4.5 (YES) —-> PING 10.2.1.254 (YES)
ISSUE REDISTRIBUTE PROBLEM. COMMAND ”SHOW RUN”
A) IF YOU HAVE THE PROBLEM WITH OSPF —> EIGRP
OR YOU HAVE THE PROBLEM WITH
B) ROUTE-MAP, HAVE 2 DENY THE ONE HAVE TO BE PERMIT (ANSWER IS HERE)

ADDITIONALLY HERE YOU COULD GIVE THE COMMAND ” SHOW IP EIGRP NEIGHBOR” IF YOU SEE NEIGHBOR THEN YOU HAVE ONE OF THIS TICKETS IF YOU HAVE NO NEIGHBOR IS THE PASSIVE INTERFACE ISSUE UNDER EIGRP 10.

PING 10.2.1.1 (YES) —-> PING 10.1.4.5 (NO)
PASSIVE INTERFACE ISSUE.

IN MY EXAM HAVE ISSUES
OSPF —> EIGRP
PASSIVE INTERFACE

sir you absolutely correct.i think there is something about the layer 2 Technologies and gives some 53%. i just finally passed mine today after 2 attempts which i failed. same score for Layer 2 Tech. i bet there is something Cisco is doing that doesn’t add up . I will say dont give up and keep trying

ALL ISSUES FOR ROUTERS YOU MUST HAVE IN CLIENT 1 THE IP 10.X.X.X AND THEN DO THE PING.

NEXT, I CONTINUE WITH SWITCHES BECAUSE THERE I SEE I TRAP AND I EXPLAIN

@SHIN,
Does all of your exam attempts have different sets of questions?

@Shadow,
I actually have a request, and Ghost has already emailed me.
Unfortunately, he also cannot grant my wish due to we are on the same boat. Lol.
If you think you could help me please send me an email.
Thanks.

Thanks Networktut – 1000/1000, all MCQ Nov 19 release, same SIMs etc. All necessary info in the premium area. Follow the ping strategies mentioned, and practice enough times to be able to identify the different tickets. Good luck and see you for the next version of the CCNP exams.

SWITCHES ISSUES.
CLIENT 1: IPCONFIG — > HAVE APIPA (169.X.X.X) —> SWITCH ISSUE
CLIENT 1: HAVE IP 10.X.X.X BUT (BE CAREFULL) NO PING 10.1.1.1 + 10.1.1.2+10.2.1.1
AND THAT IS SWITCH ISSUE SO FOR SWITCH ISSUE FROM CLIENT MUST HAVE ONE OF THE TWO UPPER.
1st CASE : APIPA 169.X.X.X
2nd CASE : IN CLIENT IP 10.X.X.X BUT CAN’T PING NOTHING OF OTHER ELSE OF 10.X.X.X

NOW TICKETS
IN ASW1 GO WITH COMMAND ”SHOW VLAN” IF YOU SEE THAT THE VLAN HAVE THE 2 INTERFACE FA1/0/1 AND FA1/0/2 THEN GO TO DSW 1 AND CHECK FOR 2 ISSUES ONLY:
DSW1: SHOW RUN —> SEARCH FOR ”IP HELPER HAVE the WRONG IP.”
TO SEE WHAT IP MUST HAVE (ITS SAME AS HERE THE ANSWER) SCROLL DOWN AND SEE THE SERVER IP.

2ND ISSUE DSW1: VLAN FILTER (I DON’T HAVE TO SAY SOMETHING BECAUSE IT IS AS HERE)

IF YOU CHECK DSW1 AND DON’T FIND ANYTHING ABOUT THIS ISSUE THEN GO AGAIN TO ASW1.
SH RUN AND THEN SHOW IP INTERFACE BRIEF
FIRST CASE: THE 2 INTERFACES IT ISN’T IN VLAN 10 ( IF YOU GIVE THE COMMAND SHOW VLAN AND SEE THIS INTERFACE, IT ISN’T THAT TICKET)

SECOND CASE: ENCAPSULATION DOT1Q IN 2 INTERFACE. YOU CANNOT HAVE TO A PORT AS ACCESS AND AS TRUNK. BELIEVE ME, THAT IS PROBLEM AND IN REAL LIFE.

THIRD CASE: PORT CHANNEL

FOURTH CASE: PROBLE MAC ( HERE A BIG ATTENTION BECAUSE of A TRAP)
IN SWITCH ASW1 AND 2 INTERFACES YOU SEE MAC: XXXXX NOT AS HERE
(MAC 00000.000000.00000.000001).
IF YOU DON’T SEE THIS MAC (MAC 00000.000000.00000.000001) THEN THE PROBLEM IS OTHER AND SEARCH IT.

EXAMPLE: IN MY EXAM I DON’T SEE THIS MAC BUT IN 2 INTERFACE I SEE OTHER MAC. SO I GO TO DSW1 AND SEARCH FOR THE 2 ISSUES THAT I SAID YOU.
FINALLY, I DISCOVER THAT THE PROBLEM WAS IN DSW1 (IP HELPER).
BE CAREFULL VERY MUCH

AT THE LAST FOR HERE (SWITCHES ISSUES) EVERYTHING YOU DO CHECK WITH COMMAND ”SH IP INTERFACE BRIEF” IF INTERFACES IS UP OR NOT. BE CAREFUL, DON’T CONFUSED WITH VLAN (X) BECAUSE SOME VLAN IS SHUT DOWN .

Has anyone passed the exam and used the NULLZERO strategy instead of SAM?

Passed today . Evertthing in networktut

I have an aditional moth if premium account. If anyone os intereses, mail me. Franceskin91aegmail.com. Replace ae for @(at simbol)

Thanks networktut

hi guys, i will take exam tomorrow. I couldnt see any D&D question on November dumps. Also there are 10 MCQ. How many of them is exist on exam?

@1ManTimF
I AM SORRY FRIEND BUT I CAN’T GIVE YOU MY EMAIL. IF YOU WANT TO TELL ME HERE.

EVERYONE YOU WANT ME SOMETHING ASK ME HERE. I GIVE SO PLENTY OF INFORMATION.

TEST ALL THAT I SAID YOU TO PREMIUM AND YOU SEE THAT WORKS. WORKS IN EXAM.

@SDS

Both Strategies work if you understand the concept. Personally i think the NuLLZERO Strategy is pretty straight forward especially when dealing with the APIPA tickets.

IPv6 ISSUES
YOU CAN GO WITH PING BUT IN MY TEST I TEST OTHER WAYS FOR SURE.
3 WAYS:

1st way:
Ping 2026::1:2 (NO) —-> R2 problem (answer as here)

Ping 2026::1:2 (YES) — PING 2026::34:2 (NO) —–> R3 problem (answer as here BUT IN EXAM THE WRONG IS IN MIDDLE AND NOT AT THE END OF UNDER INTERFACE TUNNEL 34 )

Ping 2026::1:2 (YES) — PING 2026::34:2 (YES) —–> R4 problem (answer as here)

2nd way: FROM R2 AND R3 COMMAND ”SH IPv6 OSPF NEIGHBOR”

IF R2 HAVE 1 NEIGHBOR AND R3 HAVE 1 NEIGHBOR THEN THE PROBLEM IS IN R2

IF R2 HAVE 2 NEIGHBOR AND R3 HAVE 2 NEIGHBOR THEN THE PROBLEM IS IN R4

IF R2 HAVE 1 NEIGHBOR AND R3 HAVE 2 NEIGHBOR OR REVERSE (TOTAL FROM TWO ROUTERS 3 NEIGHBORS) THEN THE PROBLEM IS IN R3

3rd way ” sh ipv6 OSPF neighbor” only from R3:

IF YOU HAVE 1 NEIGHBOR WITH INTERFACE TUNNEL 34 —> PROBLEM R2

IF YOU HAVE 1 NEIGHBOR WITH INTERFACE SERIAL0/0/0.23 —> PROBLEM R3

IF YOU HAVE 2 NEIGHBOR WITH INTERFACE TUNNEL 34 AND SERIAL0/0/0.23 —>
PROBLEM R4

PAY ATTENTION
IF YOU GIVE COMMAND IN IPV6 ISSUE ”SH IP OSPF NEIGHBOR” YOU GET WRONG INFORMATION
THE COMMAND HAVE TO BE ” SH IPV6 OSPF NEIGHBOR”

BE CAREFUL THE UPPER IN IPV6. NO IP BUT IPV6.

THANK YOU

END

@Shadow I think you can chill with the all-caps for a bit.

@ purgatory

The D&D question is in here with all other questions from November.

2 D&D in exam