CCIE Routing & Switching: TS2 + + Diag3 LAB1

Speaking about the overall feeling of the test, the examination room except the desktop mouse control is not very sensitive and other parts are very smooth. I have (shift + Insert) that DELL keyboard and mouse feel great. txt shortcut that  you can create multiple texts on your desktop. There has a sheet of personal information white paper that you can use as scratch paper. Also , there has a water fountain, a bread and a pen,etc.

To thanks, I want to thank my family for their support. I also want to thank the teachers of PASSHOT and everyone who helped me along the way. Finally, I wish all the friends on the CCIE road can get their CCIE number as soon as possible!

(1) TS2++ Q3 SW110-SW210 exchange visits did not occur. At the beginning, I was nervous but I thought it would not be a Bug. In fact, to the back of the same and finally also according to the solution to complete. Set 9 phenomena. Tip: I suggest you don't go directly to the wrong spot. First, use the methods of ping and trace to see the phenomenon so that it is easier to find the wrong spot.

(2) LAB1 that this is an old version, nothing in particular. The most is to remember the features. In fact, there were not so many bugs in the whole exam as what the war report said before or I was lucky enough to say that trace and features, multicast, NAT, NTP, VPN, all of which came out in seconds after the phenomenon was finished. So it is suggested not to beat the question which should be done properly. All EBGP neighbors except R20 have been equipped. Tip: LAB1 is my phenomenon. In order to avoid being added by the examiner in secret, I have repeated the phenomenon with repeat 100  multicast, so that it is easy to judge whether it has been modified or not. Fortunately, I didn't get wrong by the examiner.

(3) It is important to remember the answers of Diag and understand the answers.

 The first question (do not remember the number of the device, the test room may change) 1. Select the relay device command: show ip dhcp rely information trust-source (corresponding to the aggregation switch - SW1) OR: show ip dhcp snooping2.  A packet of wires between relay device switches.  Filter out the dchp discover packet with source address 0.0.0.0 (destination address 255.255.255.255) by bootp (113 or 114, 133 - I just draw to 133) 3. Access layer and trunk connection (SW1-  SW3)

 The second question: 1. Through the packet capture software, use tcp to filter out the data packet and find a data packet with [SYN]=0, where the source address is the victim address. The destination address is the hacker and the available authentication: tcp.port  ==1337 (Source is hacker, the purpose is the victim) The data hacked in the examination room may be continuous. If continuous, the option to verify the answer!