Home > Troubleshooting Lab Challenge 2

Troubleshooting Lab Challenge 2

June 6th, 2015 in Lab Challenges Go to comments

Troubleshooting Lab Challenge 2:

Note: We created this lab challenge to help you get some practice with networking problems only. These labs are only for fun and do not appear in the TSHOOT exam.


Recently our corporation has just acquired some companies. Our networking engineers are working to merge their networks into ours. An engineer has edited the network configuration and now our users are experiencing network issues. They have contacted you to resolve the issues and return the network to full functionality.

Below are the IPv4 Layer 3 Topology and IPv6 Topology (No switch is used in this challenge so we don’t have a Layer 2 Topology):




To troubleshooting effectively you should understand how this network operates. We summarize it as follows:

+ OSPF process 1 is running between R1, R2, R3, R4 and R5
+ RIP version 2 is running between R2 and R6
+ EIGRP AS 10 is running between R3, R7 and R8
+ Redistribution is configured on R2 & R3 to exchange OSPF, RIP and EIGRP information
+ R5 is connected to an Internet Service Provider (ISP) via BGP 65002. R5 is also providing NAT translation between inside networks ( & and outside network ( &
+ R5 is connected to the OSPF backbone area via a OSPF virtual-link. It is a temporary solution for merging them
+ Two access-lists are applied on R5 to increase security for the inside networks
+ Users are allocated prefixes of & They are represented by Client 1 & Client 2
+ R1, R2 and R3 are connected via DMVPN (this is a new topic in the ROUTEv2 exam. If you don’t understand about DMVPN and NHRP, please ignore ticket 14 & 15.)
+ For security reason, the network between R4 & R5 ( is hidden from all other routers via a filter-list on R4.
+ In the IPv6 Topology R1, R3, R4 and R5 are running OSPFv3 AS#10 while R3 and R8 are running RIPng. Redistribution is performed on R3 so that these two IPv6 routing protocols can see each other.
+ Traceroute commands are not supported in this challenge (that would make the challenge too easy)

There are 15 tickets waiting for you to resolve. Each ticket only contains one error. Below are the links to access them:

Ticket 1 Ticket 2 Ticket 3 Ticket 4 Ticket 5 Ticket 6 Ticket 7 Ticket 8
Ticket 9 Ticket 10 Ticket 11 Ticket 12 Ticket 13 Ticket 14 Ticket 15  

We hope you can solve all these problems. The difficulty of this challenge is same of the TSHOOT exam (for routers only). Please tell us if you like them or not so that we can continue making more in the future.

Note: This lab challenge is run on IOS v15 so “no auto-summary” is the default value and this command is hidden by default.

Comments (50) Comments
Comment pages
1 2 3 4 6 889
  1. Luiz
    August 3rd, 2015

    Please take a look at NOTE on top of page.

  2. ccnp_exam
    August 4th, 2015

    can someone please tell about the exam how many ticket and how many multiple choice .
    and for the ticket . . do look like this or we fix the problem by changing configuration on CLI . or just detect the problem like here . thanks .

  3. Anonymous
    August 5th, 2015



  4. networktut
    August 7th, 2015

    @ccnp_exam: You are only allowed to use the “show …” and ping commands to get the outputs to answer three questions. You cannot go to configuration mode. Please read this link to learn more about TSHOOT exam: https://www.networktut.com/tshoot-faqs-tips

  5. Haris
    September 1st, 2015

    I passed TSHoot exam with full marks.
    Get latest Dumps and new easy leanable strategy at below URL:

    remove spaces:
    tshoot-networktut. b l o g s p o t . c o m

  6. James
    September 21st, 2015

    For each ticket, the last question always ask about the solution of the fault.

    Do we need to type the command to the faulty device? Or just choose the command as multiple choice?

  7. Dan
    September 23rd, 2015

    Awesome job networktut!!!!
    Super fun tickets to practice on :)

    @ James: You can’t edit the configs, just answer the questions at the end (final tab) and click done.

  8. 0Coll
    September 30th, 2015

    All tickets are equal! Ticket1=Ticket2=All

  9. Anonymous
    October 4th, 2015

    Great job!
    Please correct the image for IPv6 Topology. OSPF doesn’t have a concept of AS number. In this case (ospfv3) #10 is an instance tag.

  10. networktut
    October 5th, 2015

    @Anonymous: Thanks for your detection. We have just updated the image for IPv6 topology.

    October 13th, 2015

    Lab 2 is awesome… thnx !!!!

    October 13th, 2015

    Please explain Ticket 14 of Lab Challenge 2….

  13. Feng
    October 19th, 2015


    ticket 14

    on the interface tun 123 of R1 ospf priority is zero
    for the dmvpn that R1 as a hub for ospf type broadcast. so, R1 must be the Designated router. its mean that ospf priority cannot be 0 because if R1’s ospf priority is 0 then R1 will never be the DR.

    so the solution is on R1, you must change OSPF Priority to greater than 1 <== So R1 will be the DR, then the DMVPN connection will be establish

  14. BaldySmurf
    October 20th, 2015

    Question 7 – ‘show ip protocols’ shows eigrp 10, but the config shows 1, and is ultimately the answer to the question.

  15. BaldySmurf
    October 22nd, 2015

    Just finished working through all tickets in prep for my CCNP recertification. Thanks for putting these challenges together, they’ve really helped! Onward now to premium membership I think!

  16. networktut
    November 1st, 2015

    @BaldySmurf: Thanks for your information. We have just fixed it!

  17. g0nzo
    November 9th, 2015

    Hi all.. could you help me with ticket 2 ? I know what is the answer but in my opinion this ticket has some config issue…
    R5 has “access-group Limitted_Internet in” but it cannot works because
    permit ip any host transmit packets only with one address destination. R5 can ping only interface of R4 with address right ?
    If we want to ping host from network the packet will be deny due to access-list Limitted…

  18. Marcello
    November 14th, 2015

    Can you give tshoot strategy to solve Q3 with ipv6?

  19. Marcello
    November 14th, 2015

    I cannot use ipv6 ping or traceroute need help please for ticket 3.

  20. networktut
    November 15th, 2015

    @Marcello: For IPv6 ping just use like IPv4 ping. For example: ping 2026::1:1.

  21. what-the
    November 15th, 2015

    In Ticket1: if there is an issue with the backbone area, how come R1 still has R4’s loopback address in its table?

  22. networktut
    November 16th, 2015

    @what-the: In Ticket 1 the problem is at R4 (virtual-link) so R1 can still see R4’s loopback interface.

  23. help me
    November 18th, 2015

    I took CCNP SWITCH 300-115 exam today
    I failed on this exam take 741.
    All of my answer to Questions corrects only save configration problem in the similator but in the end the result was failure in the exam knowing this second exam
    to me in a month and faced the same problem, which most settings, I am sure I am oppressed in this result because I was sure that my answers corrective,
    Please Please help me so that I can overcome this exam.

  24. Anonymous
    November 24th, 2015

    @networktut , Ticket in the real exam is totally different, Please update your record, really it will be very helpfull. Thanks !

  25. networktut
    November 25th, 2015

    @Anonymous: As we clearly stated above: “We created this lab challenge to help you get some practice with networking problems only. These labs are only for fun and do not appear in the TSHOOT exam.”

  26. MOMO
    November 25th, 2015

    @help me

    If the exam is the same, and your answers were the same and the result is failing, the only meaning is something there is something wrong in your way of handling the exam. for example you didn’t select the right answers or clicked done without completing the answer!

    @RAK EGA

    Do you mean , the exam version is changed???

    can anyone confirm if the exam is still exist or no!

  27. Toto Wahyu
    December 4th, 2015

    Sorry seems I did comment on the wrong forum :) it should be 300-115 not for 300-135…
    apologize me :)

  28. addey 1
    December 9th, 2015

    hey toto wahyu may I have ur email address

  29. Arsalan
    December 19th, 2015

    Hi guys, please confirm if dumps are still valid or not. Route dumps have been changed as far i have come across.
    If still valid then please email me at mr.arsalan@live.com

  30. ahmed
    December 26th, 2015

    does that topology have a gns3 or packet tracer file ???

  31. guercy
    December 27th, 2015

    for ticket #1 I am selecting the R4 adding area 1 virtual-link as the answer but i am not getting the correct response.

  32. guercy
    December 27th, 2015


  33. guercy
    December 29th, 2015

    Can someone assist with ticket 9 & 11 please? not sure where to go. I see the default route is being redistributed then it is in the eigrp topology but not sure where the issues are for either.

  34. Sonikboom
    December 29th, 2015

    Ticket 9. So PC 1 gets no IP address. I would instantly look from R4 back to PC1. R4 can ping DHCP looks good, Neighbors are fine. I would go back to ASW1 and do a sh int trunk command and you will see that on Po13 and Po20 there is no vlan 10 listed. We need to add vlan 10.

    1. ASW1
    2. Switch-to-switch
    3. int port-channel 13,23
    switchport trunk none allowed vlan none
    int port-chan13,23 switchp trunk allow vlan 10,200

  35. guercy
    December 29th, 2015

    sorry i meant ticket 9 & 11 from the IPv4 layer 3 Topology.

  36. Anonymous
    January 1st, 2016

    Please send B11.

  37. tree
    January 12th, 2016

    Why under “sh ipv6 route ospf” command on R3 there isn`t L0 from R8 ? It is redistributed..
    the next router R1 already has. Funny huh ?

  38. networktut
    January 14th, 2016

    @tree: R3 learned Lo0 of R8 via RIPng so you cannot see it with “sh ipv6 route ospf” command.

  39. zyad
    February 7th, 2016

    TKT1 here
    device R4
    technology : IPv4 OSPF
    condition : virtual tunnel ip should be area 1

  40. new’here
    February 9th, 2016

    Hi folkes,
    can somebody explain as to why it has to be the same metric in redistribution for ipv6 RIPng and OSPFv3? I did have to put/answer metric 3 when doing two-way redistribution.

  41. new’here
    February 9th, 2016

    yes Lo0 belongs to ospfv3 and that’s the problem you needed to solve because of wrong redistribution statement. R1 has that route because they belong to the same ospfv3 domain.
    All the best!

    I believe there’s no such thing as vitual tunnel, it’s virtual-link to be exact.

  42. Charles
    February 19th, 2016

    Someone please help me find the actual questions and not just the explanation

  43. Mubi
    February 25th, 2016

    First of All thanks to All mighty God,
    9tut is good website for practice all labs are valid I have cleared 300-135 today.

  44. 7up
    March 2nd, 2016

    What’s the solution to Ticket 3?

  45. APnkand
    March 5th, 2016

    Where is the answer for the tickets …its complex to handle the Tshoot site here ..can some one please tell me how to use this site.

  46. fox
    March 14th, 2016

    Any news about CCIE written R$S dumps ???

  47. Nomi
    March 16th, 2016

    Some One please help me to handle these tickets . I have Planned to take my exam in the comming
    week any one help me.( tshoot 300-135 ) we have to make configuration or just we have to troubleshoot the problem ..Any One please…shall be very thankful

  48. TsilvaBrazil
    March 21st, 2016

    Hello @networktut
    This Lab is very good for exam 300-135.
    I have one question about the exam.
    In exam, we can use the command “traceroute”?
    I think that this command will help me very very..
    Thanks advanced.

  49. networktut
    March 22nd, 2016

    @TsilvaBrazil: In the exam you can only use traceroute at DSW1 (with source and

  50. TsilvaBrazil
    March 22nd, 2016

    Ohh Very Good..
    Thank you @networktut.
    This scenario is identical with the exam?

Comment pages
1 2 3 4 6 889