Ticket 6 – VLAN filter

In my exam i chose DSW1 but 2nd question didnt contain VACL/PACL that’s why i changed to ASW1 then VACL/PACL then 3rd one No Vlan Filter 10

Symptoms of this ticket.
1- Client 1 is getting the correct IP address from DHCP (i.e 10.2.1.3)
2- But Client 1 is unable to ping DSW1.
3- Client 1 is unable to ping FTP Server (10.2.2.10)

Additonal information:
VACL/PACL can be chosen for DSW1. You have to SCROLL DOWN to find the option.

Ans1) DSW1
Ans2) Vlan access map (Scroll down )
Ans3) No vlan filter test1 vlan-list 10 ( last option)

exam config

vlan access-map test1 10
drop
match ip address 10 (10 is the access-list number)

vlan filter test1 vlan-list 10 (Apply vlan access-map to vlan 10)

ip access-list standard 10
permit 10.2.0.0 0.0.255.255
ip access-list standard 20
permit 10.1.0.0 0.0.255.255
ip access-list standard 30

Thanks anonymous, it helps a lot when you can see the sample output from exam or just something similar , i hope if there is someone who can do this for all the tickets available will help a lot to locate the problem …

Thanks in advance

my exam is within 2 Houres , in case of Vlan access mp will the pc get an ip address ,plz reply ASAP /.

thanx

Naveed and Network tut…thanks to u guys..i have been doing self study reading the materials and the video mentor….i just want to know if configurations will be required or we are just to detect the network problem and perform the necessary IOS commands to get the right answer..Your quick response is really appreciated…

@ gazza, you dont need to perform any configuration on the devices, all you need to do is run the approprite show commands on the ios devices as explained in this forum and dont forget to start from the client using “ipconfig” to know if the client has a valid ip(10.2.*.*) and its not getting an ip i.e its having 169.*.*.*.

hope this helps, NO CONFIGS ALLOWED, JUST USE SHOW COMMANDS AND SELECT THE ANSWERS !!!!!!!!!!!!!!!

@Naveed, my exam tomorrow, same concern as @tomorrow. Can the PC get IP address? For DHCP discovery it does not use the ’10.2.2.*’ IP address, but for DHCP request I think it uses the given ’10.2.1.*’ IP address which may be dropped. Will DHCP succeed and client have correct IP address? Thank you in advance.

Sorry, I checked the doc and it does not use the IP address during IP address negotiation

@ki
pls dnt’ forget to share your experience after your exam with us here.
Wish you the best!
Taking my exam next week.

Thanks Adoga for your response..I want to know if the TT comes in the order listed on this sites..if not how do we know the Technology listed with each question…Naveed or any other helpful person should help me…thanks

@ gazza, ure welcome. the trouble tickets in the real exam exam does not come in the exact format as mentioned here, so please do not cram the format. All you need to do is to know what fault is associated with which device and the right answer choices as mentioned on networktut.com. hope this helps…………….. Try to link the trouble tickets with the devices and not concentrate on the series, cuz the arrangement is defferent in the real exam.
i.e asw1=3tts
dsw1=2tts
r4=2tts
r2=ipv6 tt
r1=4tts
thats a total of 12 tts.
go through the tts i just listed and associate/identify tickets using the devices specied and the technology involved, all the answers are on this forum.
wish you all the best, by the way my exam is on monday 4/10/2010

thanks man(Adoga)…am still going thru the Video..shud be writing the exam first week of November

Guys i found some problem in this ticket in my exam…. There was no any option given related to vlan access map or vlan acl/ port acl in DSW1.. i saw the running config n found that the client1′s ip was getting blocked due to vlan access map.. But there was no any related option is available..

I have to agree with Sam, there was no option on the list, and in the one for Access-list, didn’t appear to have anything relating.

Sam,

I took the exam recently and i saw the option there. If you scrolled down, u would have seen it. But it is irrelevant now if you have passed the exam…:)

Today i’ve failed exam :( Examination software is very bad. Three times i’ve had an error and relaunched it with help of certification manager.

One TT was about vlan filter. It was VACL in DSW1, 100% ! But i didn’t find the VACL/PACL in answers.

take it with all this god willing shit , half you lot are cheating Muslims.. read the Koran brother and you will see that the profit said ” at the point of stealing, cheating the Muslim is no longer a believer”

you have just become a infidel for the sake of a cert. well done

@guest you gotta be one think mother ? the give you the answers and you failed… a nearly fell of my chair laughing at your misfortune

@ guest. billions of sperm and you was the fastest….

plz guys send me a valid dumps

@CCIE interested people
This is an open invitation for the serious people about CCIE. You are advised to send an email to the below mentioned address for enrolling your willingness. We’ll be utilizing the concept of 1+1 = 11 by putting our minds together to study/practice the right thing. Here it doesn’t require a mention for a CCIE candidate but let me clear one thing, ‘THERE IS NO SHORTCUT TO CCIE’, so any body looking for shortcuts, please accept my advance excuse. However, we’ll try to do our best to find out the fastest way and most effective material of practice/study.
Kindly, enroll your willingness at following email address. Also if you have any question, send to the same address.
ask_ccie@yahoo.com

@networktut
I wish you could have a managed discussion forum for CCIE as you have for CCNP

what show command is appropriate to troubleshoot NAT ACL, R1 ACL and Vlan Filter? any suggestion? Thanks

in client ipconfig-10.2.1.3,then ping 10.2.1.254 not sucess.
so problem is in asw1 or dswi
check asw1
1. int fa 1/0/1- switchport access vlan 10-if yes
2.int fa 1/0/1-port condition-error disabled-if no
3.int fa 1/0/13 and 23 allowed vlan 10-if yes
NO PROBLEM IN ASW1
THEN GO TO DSW1
check dsw1
1.check VACL or any filter in vlan 10
2.check stand by status of track command is wrong
THESE ARE THE SYMPTOMS

MY DOUBT IS WHICH ALL COMMANDS I CAN USE HERE TO FIND (I MEAN SUPPORT HERE).here the prioblem is VACL.so which command i should use in dsw1 to find the filter list .the only show run or any other commands.

i like

I see alot of references to using the specific commands to find the portions of the configs where you’ll find the answer, but if in doubt can’t we just run “sh run” on any device to get the entire config? Alot of times in Cisco exams, they have certain commands disabled or shortcuts (I.E. Cisco exam usually doesn’t let you run “sh run | i …. or sh run | be …)

To rephrase, on this exam can I just run “sh run” on any device if I don’t know or have forgotten the specific command????

Naveed/Anyone??

@Anonymous

If you asking if you can show run on all devices, then yes you moron.

This makes no sense… and would drop the packet before reading the access-list.
vlan access-map test1 10
drop
match ip address 10

I think it would look more like this…
vlan access-map test1 10
match ip address 10
action drop

hi guys somebody help i am tr to do the demo but there is only 4 tt qu and all releated to l3 topology plz help is there more or just this is it
and how i know this q releated to which topology my cordial thanks to u guys

hi

Remove vlan filter test1 vlan-list 10

from:

DSW1

OR

ASW1

@abolayan..

you will see vlan filter test1 vlan-list 10 from ASW1 switch. so remove it from ASW1. However, kindly double check it both on DSW1 and ASW1.

Already passsed TSHOOT. 1000/1000. thanks last DEC 06

@Goose

thanks

but if I remove it from ASW1 should be can not able to ping ASW1

Is it right

@Anonymous
You cannot use “sh run | i or sh run | be” or any type of such option to narrow down your results in TSHOOT exam simulator. So in exam, what u have is only basic version of ‘sh run’.

@Cozzmo,

I agree with u.

Based on: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/vacl.html

The sequence of creating VLAN ACL [VACL] is:
(1)Define VLAN access map

(2)Configure a Match Clause in a VLAN access map

(3)configure an Action clause in a VLAN access map

(4)Apply a VLAN access map using ‘vlan filter’ command

Based on the config given at the begining of this thread:
-IP range in ACL 10 is 10.2.0.0/16
-action ‘drop’ in access-map test1 will block all IP with 10.2.x.x

If there is an option in the solution to change the action of ‘drop’ to ‘forward’, that would be correct.

Though simply removing ‘vlan filter test1 vlan-list 10′ is also a Righ answer.

to All;

just want to confirm, is VLAN ACL is only for L3 switch?

or can be applied to pure L2 switch… please confirm,,,, thanks….

@simple
I guess VLAN ACL filter works on L3 and PACL filters on L2.
so that means VACL can work only on L3 switch not on L2 switch.

correct me if i am wrong
what say naveed, am I right?

@ naveed

pls reply…. we’re waiting ,,,, thnks….

@Name

do u have sample of PACL, thnx a lot…

@simple

I did some study on this ACLs and found this.

VACL apply on VLAN and PACL apply on L2 port or L2 channel(L2 etherchannel). In L2 switch we can have vlan so i guess we could apply VACL on L2 switch.
We don’t need in in/out direction command in VACL because it is direction less. that mean it applies to all traffic comming in or out.
PACL is like a normal ACL and you have to specify direction on which you want to apply.following is simplified explainantion of PACL config.

Step 1 Create the standard or extended IP ACLs or named MAC extended ACLs that you want to apply to the interface.

Step 2 Use the ip access-group or mac access-group interface command to apply a IP ACL or MAC ACL to one or more Layer 2 interfaces.

if want more details on ACLs, I found following list very useful

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/31sga/configuration/guide/secure.html#wp1071428

Hi,
In exam i dont find

vlan filter test1 vlan-list 10 –.cmd , what will be the solution for this ticket

@Naveed you say we cannot use “sh run | i or sh run | be”;
are you saying that we cannot use “show running-config” for the Tshoot exam?

@ipv6
In Tshoot exam, we can use ‘show running-config’ ['sh run' in abbreviation].

More specific parameters under ‘sh run’ are not supported. e.g. ‘sh run | i xxx’ or ‘sh run | beg xxx’ are NOT supported.

But we can execute other troubleshooting commands such as PING, Traceroute, ‘sh route’, ‘sh ip route ospf’, ‘sh ip route eigrp’, ‘sh ip route bgp’, ‘sh ip ospf nei’, ‘sh ip eigrp nei’, ‘sh ip bgp nei’ etc.

is this the area that I will find the line:

(vlan filter test1 vlan-list 10)

#################################

interface Vlan10
ip address 10.2.1.1 255.255.255.0
ip helper-address 10.1.4.5
standby 10 ip 10.2.1.254
standby 10 priority 150
standby 10 preempt
standby 10 track 10 decrement 60
!
interface Vlan20
ip address 10.2.2.2 255.255.255.0
##################################

This is my last TT to prepare for before my test, and I could use a little help on this one.

I am not finding any of the configuration entries from the top of this page in any of the pre-configured TT folder files.

Thanks dave

@ipv6

No, u will not find it under VLAN 10 & 20 config.

Its under the Global Config, not under any specific VLAN config. Its provided by networktut at the very begining of this webpage.

I Ask about the series of tt if in vlan filter (firstly search in DSW1)
if not found problem (Secondly search in DSW2) or
Search in all deviece

I Ask about the series of tt if in vlan filter (firstly search in DSW1)
if not found problem (Secondly search in DSW2) or
Search in all deviece

I got out-of marks today…..thanks 9tut.com
In Exam vlan filter problem is very confusing que…..
but dont get confused.
If client 1 is able to ping 10.2.1.1 but not able to ping 10.2.1.254 means problem is related to vlan filter, that time u check “sh running-Config on DSW1″

I found in Exam under configuration:-

!
vlan access-map test 1 10
action drop
match ip add 10
!
vlan access-map test 1 20
action drop
match ip add 20
!
vlan access-map test 1 30
action forward
match ip add 30
!
vlan access-map test 1 40
action forward
match ip add 40
!
!
vlan filter test 1 vlan-list 10
!
!

Ans:
1)Device is DSW1,
2)Technology is vacl / pacl,
3)Solution:remove vlan filter test 1 from DSW1

Hi everyone! I’m going to take the exam next week. Guys please let me know if there is anything changed or updated.

Are these questions still valid?

Please help me……!

Thank you

I did the exam yesterday and got 1000……………..!

Thanks for everybody here supporting me for this achievement.

All the questions in the exam are the things appear here. Nothing has been changed.

But i would like to give an important advice for the people who wish to take the exam soon.

Please read the comments in following link by Geno and Lisa. Those instructions were really

helpful to me…!

http://www.networktut.com/tshoot-ticket-1

For this question, there was a bug in the exam. In order to correctly answer 2nd and 3rd MCQ, i had to select the wrong device – ASW1. When i chose the correct device DSW1, the correct options for 2nd and 3rd MCQ not there. I checked few times and there is no vlan filter applied on ASW1, its on DSW1. After completing all other trouble tickets, i spent around 45 minutes to check if there something else wrong.
Finally at the last few minutes, i chose ASW1 for the 1st question and correctly selected the other two. I got 1000.

Dear All;
just passed Tshoot,& um CCNP.Got 1000 ;i ve got the following:
4 MCQ
NO Drag & Drop.
12 TT (1 new TT,the old TT with wrong ip 209.56.200.241 has been removed)all other TT are VALID.
Thanks Networktut for charing knowledge.

Can anyone tell me are the MCQs presented with tickets or are they presented seperately i.e. do you do a TT and there is an MCQ associated with it, or are you presented with a number of MCQs after you have finished the TTs. Cheers

Passed the exam with 982/1000.

For everyone saying that there is a bug in the exam where you have to choose ASW1 instead of DSW1… you are clearly sheep.

On this questions, I picked DSW1, and then YOU HAVE TO SCROLL DOWN to get to the next option of VACL / PACL. If you don’t scroll down you cannot see this option and might be inclined to think what most people here are saying is true, but it is not. You just have to scroll down to get to it.

I think the reason why most people thought this is because, due to a very poorly designed GUI and usually crappy monitors in testing centers, the scroll bar is a very light colour and it can be hard to tell that the scroll bar is usable (looks like it’s greyed out).

Anyway, NetworkTut, PLEASE PLEASE update this question so we stop leading people astray. The correct answer IS available, it’s just not everyone has the brainpower to select it.

.Lets cover Monitor Session and VLAN access maps configuration and use below..Recommended reading list to further expand your brain on this subject . After you choose your source and destination port you can monitor the traffic and analyze it by plugging in your laptop into the chosen destination port fa0 3 below and start sniffing with wireshark.org.monitor session 1 source interface fastethernet 0 2.monitor session 1 destination interface fastethernet 0 3.You can all so use VLAN Access maps.VLAN access maps are pretty cool. VLAN Access maps also dont hit the switches CPU near as hard as monitor sessions..Here are the commands to use..

Thats where VACLs come in..VLAN access-lists can handle packets within a VLAN since there are no actual IN OUT direction to be applied as you would normally a RACL interface. ..Heres the configuration on the Cisco 3550 switch..Create the ACL.SW-3550-01 config ip access-list extended bt subnet.SW-3550-01 config-ext-nacl permit ip host 192.168.10.5 host 192.168.10.10.SW-3550-01 config-ext-nacl exit.Create the access-map.SW-3550-01 config vlan access-map brandontek 1.SW-3550-01 config-access-map match ip address bt subnet.SW-3550-01 config-access-map action drop.SW-3550-01 config-access-map exit.SW-3550-01 config vlan access-map brandontek 2.SW-3550-01 config-access-map action forward.SW-3550-01 config-access-map exit.Apply to VLAN.SW-3550-01 config vlan filter brandontek vlan-list 1.Before we go onto the behavior of this configuration well talk a little bit about the access-map and what the commands mean.. In any event this is yet another security feature that you can take advantage of if your switch supports VLAN access-lists!.

@anon there is a BUG in this TT ,i’ve passed tshoot today and i scored 945 because of ur stupid comment !!!!

@ahmad TT with wrong ip 209.56.200.241 has NOOOOT been removed , its still valid

So finally which is right? Because i intend to take the exam in a few days.need help!

Has anyone seen the TSHOOT 642-832 Dump for Testinside? It has not Trouble tickets questions. Something is really wrong there…

The 642-832 TSHOOT Topology made available by cisco on the PDF is not the same as their online Topology demo. Could someone please confirm the actually topology used in the real exam?

Exam has a bug for this question, all other ticket from this site only. Easy to clear TSHOOT.
I have got 945/1000

Hi manjit,
what kind of bug it is ?
on the port channels of ASW1 what vlans are normally allowed- 10,20,200 or 10,200?

Nope there is no bug, you have to scroll down to get the correct answer. But I do believe that this question is one of the questions that is worth 0 marks.

If there isn’t a bug, it makes no sense that some people selected a wrong answer and still got 1000……..hmmmm, maybe that’s the bug!

Can anybody give me an example of exactly how the TT Questions are asked i the exam?

Can someone please clarify which option do i have to select for this TT in exam ? ASW1 or DSW1 ?

I will trust Anon. Cross my fingers for next week Tshoot test.

Cheers.

Take a look at http://www.cisco.com/web/learning/le3/le2/le37/le10/tshoot_demo.html

@ Anonymous

Although the selection is available for DSW1 and that is obviously the correct answer, I have a strong feeling that their marking software still has bug and accepts ASW1 as correct answer- I got all MCQs and TTs correct, but got 945 (100% in MCQ & 92% in TT) as I had selected DSW1- I saw similar comments from couple of other guys elsewhere on this forum- I guess someone needs to this report to Cisco if this is confirmed as an issue- So be careful

Does the CCNP 642-832 TSHOOT exam ROUTERS and SWITCHES resetS themselves, or do we have logout of all DEVICES after every Trouble Ticket?

How does the routers refreshes themselves between trouble tickets

Hello everybody, I did the test today with 930/1000 – there is a tt of bgp and drag drop a question that is not available on the site that went into my exam, the rest are equal.
Thank you!

Please let me TSHOOT exam is objective (or) we have configure to router and switches to fix the issue…..

Please help me in this regard

I have completed my CCNP certification today by passing my last exam TSHOOP.
The exam itself was kind of straight forward with almost all of the TT well know
as state on this site. I had 2 DD, 2 MCQ & 13 TT

One of the issues with this TSHOOP exam is that you have to constantly move windows around whiles you are trying to keep your concentration. I was also working on small screen. (Frustrating)

TIP
Have a strategy with your PING command
Make sure you properly exit all devices after each ticket.
Abort and move to the next TT if you can’t find the problem. (You can always come back)

I think cisco should have offered a PRINT OUT OF THE TOPOLOGY to all candidates on exam day and collect them afterwards. Anyway! I have a good dump. Interested? Drop me a line donald.bart-williams@stjohns.surrey.sch.uk

I am now going to be focus on ASA5510 firewall

To all you CCNP Candidates on this forum including SWITCH & ROUTE, Good Luck and have a nice summer. It has been fun

the 2 client can ping to 1 client

What?

I failed the exam twice and have been wasted almost 420$ because tickets were given randomly i was failed to find which ticket has be handled according the dumps, tickets were not the same please suggest me how can i identify the tickets like ticket number 1,2.4 an so on how can i find that which ticket has what issue and which device needs to be chosen? Like in dumps it says ticket number 1 and title is “switch port trunk” but it doesn’t happen the same way In exams the give TT randomly and since all the question have same wording! What’s the remedy? How can one identify and come to know about the TT? Please I need expert and right suggestion what needs to be prepared?

yesterday I passed the exam , got 1000/1000.

For the VLAN filter TT:

In pass4sure mentioned the answer is vlan access-map test1 10

But the correct answer is

Remove vlan filter test1 from DSW1

as mentwio
=================================================

For the R1 ACl : Littel bit correction

“IP Access list” mentioned in networktut in exam it is “IPV4 layer3 security”

Hi All, If Suppose i am unable to solve 2-3 TT, it will create problem for passing.

hey guys!! can somebody please tell me about the t-shoot tickets!! i mean do we have to correct them by entering the right configuration commands or is it in multiple choice just like the rest of the questions???

@smith, see the link below for a demo of the exam, it should answer your question.

http://www.cisco.com/web/learning/le3/le2/le37/le10/tshoot_demo.html

@B.F thank you very much!! well it seems easier compared to the other 2 exams but i bet its not!!

ohh and another question! well it might be kind of a dumb question but in the real exam well it give as the ticket names just like in this site or is it going to say ticket 1 , ticket 2 and so on??

Hello everyone,

I passed Tshoot exam yesterday got 890/1000 for Vlan filter list above experience is true..

Also guys dont forget to study ipv6 bcoz i got 1 question in exam where IPV6 cofigured between R1 through DSW1 & trouble shoot between R1 loopback address not able to ping DSW1 interface ip.. in that tkt “ping ipv6(ipaddress)” is very useful…

Thanks for this blog really helped…

passed with 1000/1000

Wouldn’t the config on DSW1 (the way it’s show at the top) deny all packets? Including the DHCP packets to and from the DHCP server since VACLs have an implicit deny at the end of the map.

Hello Guys,
Need CBT Nuggets TSHOOT .Pls call if anybody has got it. Happy to share Route and Switch study and P4S Q&A plus all Sims for route and switch. Routes in GNS3 and Switch in Packet Tracer.
Thanks
email:kripa.jyoti@gmail.com

Did folks that pass choose:

Ans3)Remove vlan filter test1 from DSW1

or

Ans3)no vlan access-map test1 10

P4S say’s it’s the ladder…but this site say’s it’s the former…

Alsalam Alikom
How r u all ? Hope u r fine

Alhamdo Lellah (Thanks God) I passed Tshoot Exam in 15-6-2011 with 1000\1000
I had 3 MCQ and 13 TT and all of them from this site

and no bug at this Question, The problem in DSW1 and u can choose Remove vlan filter test1 from DSW1 normally

Walay kum assalam.. brother
congratulations!!!

Guy.. Any changes in the current update????? if any1 of u got updated dumps. plz update me on shariq2009@live.com

I m giving congrats to Ahmad
brother.. Masha Allah..
gud!!

thx networktut.com and other people providing these info.
I passed TSHOOT today, with 945 of 1000 and everything here is valid.
As it mention also by Nirmala, Please read the comments in following link by Geno and Lisa.
This instructions was very helpful.

http://www.networktut.com/tshoot-ticket-1

All my Dears, friend and brother.I have a problum my TSHOOT Paper exam date 5-July-2011
If anyone have Updat Pass4Sure, and Dumps. so plz send to my E-mail.

k_afridi1@hotmail.com

kgul@etisalat.ae

Hello folks, I just did my tshoot and got with 1000.
Regarding the above question (VLAN filter), even you select DSW1 or ASW1 as the answer for Q1, you can see “VLAN Accessmap” as answer for Q2 and “Remove vlan filter test1″ as the answer for Q3. Therefore, dont confuse yourself with this. Answer for Q1 should be DSW1 as filter map is applied in DSW1. Networktut, you could update the answer.
Thanks alot for networktut as well as all other valuable comments & knowledge sharing. I am thinking whether I could go ahead for CCSP or CCIE..!!!

Anyone plz tell me the qucation format in real exam

Client 1 is getting the correct IP address from DHCP but Client 1 is not able to ping the server. Unable to ping DSW1 or the FTP Server

hi dear one Q changes make confuse but answer is same.
VLAN filter–
their is three statement
vlan access-map test1 10
drop
match ip address 10
vlan access-map test1 20
drop
match ip address 10
vlan access-map test1 30
forward
match ip address 10
vlan access-map test1 40
forward
match ip address 10

ip access-list standard 10
permit 10.1.0.0 0.0.255.255
permit 10.2.0.0 0.0.255.255
permit x.x.x.x x.x.x.x.x

vlan filter test1 vlan-list 10(filtering vlan 10)

Ans1) DSW1
Ans2) Vlan access map (Scroll down )
Ans3) No vlan filter test1 vlan-list 10 ( last option)

Hi,

I passed TSHOOT on Jul 02 2011, Score is 1000/1000.

networktut is valid. Please study wiht networktut. and visit the link

http://www.cisco.com/web/learning/le3/le2/le37/le10/tshoot_demo.html

This demo has some tickets ant these are like the real exam topology, it will give advice to you from real exam. You will have an idea how are tickets. Try it please.

Visit to link http://www.examcollection.com/642-832.html
and
Cisco BrainDump 642-832 v2011-04-21 by w1zard 53q.vce dump. This is valid.

Thanks

how do you know the topology you are required to use for each tt plsssssss
is it stated or do i have to figure it out for myself?

@ ali
d demo helped me a lot but i need to kno if its a valid question in the tshoot exam
pls reply asap

@sugar

This is valid. All questions are valid. If you study with networktut.com and examcollection.com and, demos of cisco you will not have problem.

I had DD question for FCAPS, FTP, SDM. One question was from loggin message and other questions were tickets. Real tickets were have many options.

I allvays used ping to destination, if not reachibility after second one, if not reachibility after then other one. When I pinging wich one device after then I was checked running config it devices and neighbor device.

@ali
thanks so much,hope to write my tshoot at the end of this month!!!!

Passed TSHOOT today with 1000

I strongly believe Cisco have corrected the bug because I chose DSW1 as the first response and after I could choose Vlan Access-map, and then “Vlan filter test1″.

The most important is that you must scroll down to see the choice of Vlan accessmap in DSW1 (attention!!! because with the choice of ASW1, you can choose this option without scrolling down and might thinks of a bug that is still existed).

Thanks to networktut and I’m happy with any question for more detail to my mail indicated in my name.

i have given exam yestrday and still cisco has not cleard BUG and i was not getting any option on DSW1 so i have select ASW1 for answer and i that i found vlan access map.
Thanks Network TUT

any update?

I passed Tshoot yesterday…with 945. and now CCNP.
I lost marks due the bug in exam software, as few other guys faced the same issue with one TT , where we need to select the ASW1 which is incorrect to get the rest 2 correct answers.
As the fault lies in DSW1 but there are no correct options to select for second and third answer in TT.

Please leave a comment in TT if you face the same issue.. may be cisco will see the comment in answer to find any issue.

I got 13 TT all from this site and few drag and drops.

Thanks to this site and active blogers.

gud luck for future exam takers…….Cheers!!!

2 time i failed tshoot exam some one help me which truble ticket are valid

whan we select DSW1 the next Q we see VLAN ACL\PORT ACL no VLAN ACCESS-MAP i see their.

hi guys, i got 1000/1000 alhamdullah

the correct answer for this question is:
DSW1
VACL/PACL
NO vlan filter test1

BEST WISHES EVERY ONE

bro, passive interface wala ticket tha ua phr eigrp as wala

OSAMA bro, which dumps are u prepare can u tell me p4s or other dumps.

Valid, pass today witch 941/1000 all questions fron this side

I did my test today and got 1000 :-).
For this question, there were three ACL (10, 20, 30) as already mentioned above.
Take care which command must be removed. Some choices looking quite logic.

plz guys how to get the video of the rest of the ticket plzzzzzzzzzzzzzzzzzz thank u GOD bless u just give the link

hi, why the client able to get the DHCP ip address but able to ping DSW1? Since the DHCP request packets will be dropped, why it able to get the IP address? hmmmm… please help

any one done exam very recently …any changes?? pls update…i’m going to do exam on tuesday…

Did u pass the exam on tuesday? are the dumps still valid?

In this ticket there is no bug. It is only necessary to scroll down the options and find the answer. Good luck to all.

Hi All,
took the exam yesterday and this ticket is still wrong. i.e. have to select ASW1 for the answer.

Are there any social site like 9tut for CCNP Security?

Here, the best thing to verify is that client 1 which is in VLAN 10 can’t ping FTP server which is in VLAN 20 due to applied VACL. This is what they have

done – there is a standard ACL which allows whole 10.2.0.0. network in VACL named test1, then action is drop. It’s applied using VLAN filter command on

interface VLAN 10, which is trying to communicate from our client. The only solution is to remove this filter command.
ANS: DSW1, Vlan access map, Remove vlan filter test1 from DSW1

Understand this properly from
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/vacl.pdf

To add on to the above, if you sense that client 1 from vlan 10 can’t ping FTP server in VLAN 20, issue below commands to verify that this is a VLAN access-map issue

Show vlan access-map test1

or

Show vlan filter access-map test1

If you see that 10.2.0.0 is blocked from above output command, how will client 1 can ping its default gateway? I hope this helps.

passed today.

On DSW1, there are three ACLS in real exams numbered 10, 20 and 30. ACL number 10 is permitting only client 1 [10.1.2.3], ACL 20 permitting client 2[ 10.1.2.4] and ACL 30 permitting whole 10.1.2.0 network. Now, in VLAN filter, with ACL 10 and 20 the actions are DROP so, client 1 and 2 won’t be able to ping FTP server [10.2.2.10] which is in VLAN 20. Now, with ACL 30 the action is FORWARD. Yeah :-) so if we have one more computer in VLAN 10, it should ping but it’s not. So, the only solution is to remove that VLAN Filter command.

vlan access-map test1 10
drop
match ip address 10
!
vlan filter test1 vlan-list 10
!
ip access-list standard 10
permit 10.2.0.0 0.0.255.255
!
interface VLAN10
ip address 10.2.1.1 255.255.255.0

Which Command should I use to get these configuration ?

Today, I have passed TSHOOT with full mark Alhamdulleah (thanks for GOD). All the dumps are valid.

13 TT (EIGRP AS ticket is not in the exam).

All 13 TT is the same.

I failed today with 725points.Most of the questions ware the same but not all. During the test the problem with the network occured and the connection was lost. I managed to finish TT7. I started 8 and everything looked Ok, but TT9 was weird. I could find the problem, because PC1 could ping the WebServer, so there were no errors in the configuration. I showed it to the lady from the Examintion Centre. TT10,10 were OK, but TT12 again something weird. I could ping WebServer from PC1 but not from PC2. From PC2 ping couldn’t leave R1. There was no entry on R! to block the trafic from PC2. The ACL in NAT was to permit from 10.2.1.3 (PC1) and 10.2.1.4(PC4)-??? The last one TT13 also weird. ON DSW1 there were VACL so I thought there will be no vlan filter XXX vlan-list 10 like in the answers I found here (and it was the only reasonable answer), but this answer was not assigned to DSW1, but I found it in ASW1 which is Layer 2 switch and you can’t configure VACL on it I wrote the trouble ticket to Pearson V about it. Or maybe I did somethin wrong with the above Trouble Tickets. Any suggestions?

Hi all,
Just passed the exam with 980 marks AlhamduliAllah, some weird MCQs there were three though…don’t really remember…got 100% on Labs…
NOTE: THERE IS STILL BUG IN THE EXAM FOR VLAN ACCESS MAP TICKET, IN MY CASE I WAS NOT ABLE TO FIND THE ACCESS MAP ANSWER WHEN I SELECT DSW1 BUT I FOUND IT UNDER ASW1, SO WATCH OUT FOR THIS BUG (even though this site says its fixed but its’ not in my case at least)…ALSO AFTER SUBMITTING TICKET 12 (THE SECOND LAST ONE) I SUBMITTED THE TICKET AND THEN TICKET CAME BACK ‘ON’…I CHECKED AGAIN ITS THE SAME TICKET (I THOUGHT THEY MUST HAVE CHANGED SOMETHING AS A TRICK BUT NONE)…

Material I used..
CBT nuggets by jeremy..
Cisco Tshoot test exam..
All done in three days…good luck to all and remember the exam is very easy if you know what they are asking and you know the stuff for troubleshooting, done in 45 minutes..no D&D.
I am CCNP now!

Passed Yst :
appears this bug has been fixed !!
when i picked DSW1, i saw the PACL/VACL option

Alhumdullilah I have passed my exam with score 945. Thanks to Allah and network tut.

aleemyousuf@gmail.com

Passed my TShoot Exam on 5th January, 2012 with 1000/1000, Allhamdulilah.
“Networktut” website and my brother Sohaib Fouzi helped me to prepare this exam, thanks for both of you.
All TTs are still valid and same as mentioned under “networktut”. I got multiple choices and 13 TTs. Except EIGRP AS all TTs came. In All TTS Client1 will have valid IPs (except 4 TTs of 169.x.x.x).
I did my complete exam using only “ipconfig”, “ping” and “show run” commands and never felt to use any other command. One thing is very important that you should have complete understandings of TTs other wise you will not able to understand 2 or 3 TTs because Cisco made very minor changes in mulitple choices or in configuration. The IP scheme between R4, DSW1 and DSW2 is 10.1.4.x.
When i entered in LAB, before starting my exam i wrote the below lines on the provided sheet and then it became very easy to solve the TTs. To solve the TTs i followed the following scheme and order: (remember to use “ipconfig” and “ping” always in Client1 for all TTs)

->> If it is 169.x.x.x there are 4-TTs
1.ASW1 – port security (show-run ASW1 if 1/0/1 and 1/0/2 are in Vlan10, apply sh int for both)
2.ASW1 – access vlan 10 (show-run and check ASW1 if 1/0/1 and 1/0/2 are in Vlan1, if they are… stop!)
3.ASW1 – switch-to-switch (show-run ASW1)
4.R4 – DHCP excluded (show-run R4)
——————————————————————-

->> If client got IP address then 2 options:
-First, if client1 can ping 10.1.1.1 not to server 209.65.200.241 (3TT) ALL IN R1
1.R1 – NAT (10.2.0.0) (show-run R1)(sh ip BGP summary)
2.R1 – BGP (56-65) (show-run R1)(sh ip BGP summary)
3.R1 – ACL (show-run R1)(sh ip BGP summary)
-Second , Client can’t ping 10.1.1.1 but it can ping to 10.1.1.2) then: (1TT)
4-R1 – OSPF authentication (show-run R1 + R2)
-Thirdly, if client1 cannot ping 10.1.1.1, then (4 TTs)
1. DSW1(ASW1) – vlan access map(vlan acl port) *** this one cannot ping even gateway (Check vlan-filter command, which contain vlan access-map, this contain access-list no., now check access-list no. It can drop the packet for PC conntected to ASW1.)
2. R4 – Route redistribution: (show-run R4)(EIGRP->OSPF is created and EIGRP-TO-OSPF is used)
3. R4 – EIGRP Passive Interface: passive interface (show-run R4)(sh IP protocols )
4-R4-EIGRP AS: AS number of EIGRP is different is used To verify – show IP protocols.
——————————————————————-

->> Finally, there are 2 distinct TTs,
- HSRP on DSW1: Check DSW1 Use track 10 instead of track 1 (show run) and this is the only question you will see tracking.
- OSPF IPv6 on R2: On serial interface use area 0, not area 12 (show run), you will recognize this TT by reading ticket because it is the only TT which says about IPv6.

Note: The above scheme i copied from one comment under “networktut”, i dont remember the name. Sory to mention under my comments but it was just to help others. Please feel free for any query, my email address belal_fouzi@yahoo.com

Hi all, passed today :-)
All TT’s are as discussed on networktut. THX a lot for great help !!!

There’s only one bug in test Q about vlan filtering.
The error is in DWS1 (vlan filter)
!!! but you have to choose ASW1 instead of DSW1 , which is a little bit tricky

My recommendation is to draw diagram a know very good all IP add, areas and types of TT. Even if you know what to do, the time goes on and on.

good luck

A big congratulations to everyone who just passed THOOT paper, if possible please share the Dump of TSHOOT to this mail please and thanks a lot ! kkk278@hotmail.co.uk also if you have any packet tracer software 5.3+ pls send me one and really appreciated ! (Urgent)

Hi ,kindly help any one for Vlan filetr Qust,

which one is correct for the below in this answers

1. Under the global configuration mode enter no vlan access-map test1 10 command
Or
2. Under the global configuration mode enter no vlan filter test1 vlan-list 10 command.

Can anyone please send me the latest dump? I would be much appreciated. My e-mail is 123.sube@gmail.com Thank you.

Hi I pass t-Shoot exam my score 945,Thanks to all

This 14 questions its enogh for the exam.

Hi i pass tshoot today score 1000 thanks to networktut and all the people who comments
al the tickets the same except for:
R1 acl the accless-ist is something like:
– access-list extended… and the answer is the same (add permit 209.65.200.224 0.0.0.3)

the proble with ticket VACL is totally solve you have to scroll down to find the tecnology in dsw1

MCQ & D&D exactly the same

Ans1) DSW1 (but in the exam maybe you have to choose ASW1)
Ans2) Vlan access map
Ans3)Remove vlan filter test1 from DSW1

is the above ticket was change from ASW1 to DSW1

passed tshoot today with 972 marks…same 13 tickets and mcqs.leave the confusing tickets to last.in access vlan ticket,switchport access vlan 10 command will not be ter to identify the ticket.we hav to give show vlan command and u can see vlan 10 having no ports in it.

Cleared CCNP today with 945….
All TTs and MC from this site only.
But Cisco has made sum changes in answer i.e it has made it tricky if u just mug up the answers.
Also got 13 TTs but it was mentioned that there is 12 tickets. So i solved 12 TTs but in 13th TT the rite solution was not there so i left that ticket, as a result i got 945 instead of 1000

So Best of luck…