Home > Ticket 1 – OSPF Authentication

Ticket 1 – OSPF Authentication

May 6th, 2018 in TSHOOT v2 Go to comments

1.Client is unable to ping R1’s serial interface from the client.

Problem was disable authentication on R1, check where authentication is not given under router ospf of R1. (use ipv4 Layer 3)

Configuration of R1:

interface Serial0/0/0
 description Link to R2
 ip address 10.1.1.1 255.255.255.252
 ip nat inside
 encapsulation frame-relay
 ip ospf message-digest-key 1 md5 TSHOOT
 ip ospf network point-to-point
!
router ospf 1
 router-id 1.1.1.1
 log-adjacency-changes
 network 10.1.2.0 0.0.0.255 area 12
 network 10.1.10.0 0.0.0.255 area 12
 default-information originate always
!

Configuration of R2:
interface Serial0/0/0.12 point-to-point
 ip address 10.1.1.2 255.255.255.252
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 TSHOOT
!

Answer: on R1 need command ip ospf authentication message-digest”

Ans1) R1
Ans2) IPv4 OSPF Routing
Ans3) Enable OSPF authentication on the s0/0/0 interface using the “ip ospf authentication message-digest” command.

Note:

There are two ways of configuring OSPF authentication:

interface Serial0/0/0
  ip ospf message-digest-key 1 md5 TSH00T
!
router ospf 1
  area 12 authentication message-digest

OR

interface Serial0/0/0
  ip ospf authentication message-digest
  ip ospf message-digest-key 1 md5 TSH00T

So you have to check carefully in both interface mode and “router ospf 1”. If none of them has authentication then it is a fault.

Comments (30) Comments
Comment pages
1 25 26 27 28 29 50 38
  1. Mike
    December 8th, 2014

    Snoopy – Also Pls be aware that the TSHOOT.com Companny WANT’s indeed OSPF Auth between the R1 and R2 Devices within their “Proof of Concepts” Test Bed – Due to the TSHOOT Main Scenario Description provided @ exam!!!
    So, it is very important, that you read this description very CAREFULLY, since it contains much important and usefull Info when solving Tickets @ exam!!!

  2. Mike
    December 8th, 2014

    Snoopy – Yep, I’ve studied the ticket on top of this page once more, and you’re actually right about, that the config on R1 seems wrong:

    R1:
    router ospf 1
    log-adjacency-changes
    area 12 authentication message-digest <— THIS command should definitley NOT be there within Ticket 1!!!
    default-information originate always
    !
    The OSPF MD5 command should be missing within Ticket 1, and the Answer 3 Solution for the Ticket, is to pu the command on the s0/0/0.12 Interface pointing towards R2!

    You're defnitley right about that! – It was really a good observation by you! – 10 / 4 !!!

    Nobody else here has ever complained about this :-)

  3. Mike
    December 8th, 2014

    a small correction:
    The OSPF MD5 command should be missing on R1 within Ticket 1, and the Answer 3 Solution for this Ticket 1, is to put the command on the s0/0/0.12 Interface pointing towards R2!

  4. mouala
    December 9th, 2014

    hey guys

    i passed my TSHOOT exam yesterday, 8/12 with a score of 990, i had 3 Multiple questions and no DD, 13 tickets. no EIGRP wrong AS.

    All tickets all still valid…. thanks to GOD and networktut… Good luck to everyone

  5. snooper
    December 9th, 2014

    @mike

    Lol… would have been best if you would try to

  6. Mike
    December 9th, 2014

    snooper: Yep, you’re right on, that it probably would…
    However the remaining lifetime for the current TSHOOT tickets here is now very short (about a month or so from now), so the Net Tut Admin here is probably very very busy right now, in preparing for the new CCNP Exam’s starting by Jan next year, one could think :)
    However it was a real GOOD finding above by you as the FIRST real “awake” TSHOOT student, I think :)
    Good luck ahead!

  7. fornamas
    December 9th, 2014

    On 11/12 I will have my exam: I’ve read about some change in DD and MCQ, can anyone define the difference?
    Same argument and different choice or other argument?
    Thanks

  8. Alauddin
    December 14th, 2014

    Hi Guys,

    I’ve Passed the exam on Dec 13,2014 , it was all from this site even the DD questions I’ve got two + 13 Tickets all valid.

    good luck

  9. Bayo Kolade
    December 14th, 2014

    Pls how much is the fee for the exam now and can anyone tell me what this version 2 stuff is all about?

  10. tSHOOOT
    December 16th, 2014

    Ticket 1 – OSPF Authentication
    Client is unable to ping R1’s serial interface from the client.

    Ticket 2 – HSRP Track
    HSRP was configured on DSW1 & DSW2. DSW1 is configured to be active but it does not become active.

    Ticket 3 – BGP Neighbor
    Client 1 is able to ping 209.65.200.226 but can’t ping the Web Server 209.65.200.241.

    Ticket 4 – NAT ACL
    Client 1 & 2 are not able to ping the web server 209.65.200.241, but all the routers & DSW1,2 can ping the server.

    Ticket 5 – R1 ACL
    Client is not able to ping the server. Except for R1, no one else can ping the server. (use ipv4 Layer 3)

    Ticket 6 – VLAN filter
    Client 1 is getting the correct IP address from DHCP but Client 1 is not able to ping the server. Unable to ping DSW1 or the FTP Server(Use L2 Diagram).

    Ticket 7 – Port Security
    Client 1 is getting a 169.x.x.x IP address & is unable to ping Client 2 as well as DSW1. The command ‘sh interfaces fa1/0/1′ will show following message in the first line
    ‘enFastEthernet1/0/1 is down, line protocol is down (err-disabled)’

    Ticket 8 – Switchport VLAN 10
    Client 1 & 2 are getting 169.x.x.x ip addresses and can’t ping DSW1 or FTP Server but they are able to ping each other.

    Ticket 9 – Switchport trunk
    Client 1 is getting 169.x.x.x ip address.
    Client 1 & 2 can ping each other but they are unable to ping DSW1 or FTP Server (Use L2/3 Diagram)

    Ticket 10 – EIGRP AS
    Client 1 is not able to ping the Webserver
    DSW1 can ping fa0/1 of R4 but can’t ping s0/0/0/0.34

    Ticket 11 – EIGRP to OSPF
    Client 1 is not able to ping the Webserver
    DSW1 can ping fa0/1 of R4. However clients and DSW1 can’t ping R4′s S0/0/0/0.34 interface (10.1.1.10)

    Ticket 12 – IPv6 OSPF
    DSW1 & R4 can’t ping R2′s loopback interface or s0/0/0/0.12 IPv6 address.
    R2 is not an OSPFv3 neighbor on R3
    Situation: ipv6 ospf was not enabled on R2’s serial interface connecting to R3. (use ipv6 Layer 3)

    Ticket 13 – DHCP Range
    the IP on Client1, if it gets 169.x.x.x , DHCP range has been misconfigured

    Ticket 14 – EIGRP Passive Interface
    the neighborship between R4 and DSW1 wasn’t establised. Client 1 can’t ping R4

  11. Aachis
    December 16th, 2014

    guys Wish me good luck, I’m going on coming Saturday

  12. Angana
    December 16th, 2014

    Passes today with 1000 marks. Thanks to networktut. All tickets are still valid. There was 1 bug in eigrp ticket.Though the As number was perfectly configured in “sh ip eigrp neighbor” command it was reflecting a wrong AS number. There was a twist in IPV6 ticket. if you check properly, the answer should be the same.

  13. patel
    December 18th, 2014

    Thanks to network tut I pass tshoot exam today all the tt valid stile date.

    thanks

  14. lastexam
    December 19th, 2014

    Just a question as I have read in this exam u are not allowed to modify any configuration?? am I right or is just my imagination…loooks very easy that way to resolve an exam!!!!

    thankss for answering ;D

  15. Jimmy
    December 20th, 2014

    lastexam:
    Yes, it is correct that @ exam u are not allowed or requested to modify any configuration, but instead you’re just requested to troubleshoot the problem within each ticket, and based on that, then select the correct answer for each of the 3 questions within each ticket.
    So, in that way, it’s an easy that way to resolve the exam, you can say.

  16. dog
    December 21st, 2014

    Guys the tickets at this site are 14 but the packet tracer files from the download link are 15 (PT 642_832 TSHOOT Ticket 15.pkt), how can we work parallel one by one, for example:

    Ticket 1 – OSPF Authentication = to which .pkt file it goes?
    Ticket 11 – OSPF to EIGRP = to which .pkt file it goes?
    Thanks !

  17. Cat
    December 21st, 2014

    @dog:

    It’s very simple – The Packet Tracer Ticket order within the downloaded .zip Package, is just like the Ticket order here on Net Tut…

    The “PT 642_832 TSHOOT Ticket 15.pkt” Lab is just an extra potential Ticket (IP Helper problem), that might show up @ exam…

    Hope this helps.

  18. dog
    December 21st, 2014

    thank you very much!

  19. Chris
    December 22nd, 2014

    Hi guys,

    I have one question. On Tshoot demo-exam Cisco shows that you can use tracert from the PC’s 1 and 2. The question is. Is the tracert is permited on the exam or we need to ping from devices on the path to the target?

    Thank you for your answers.
    Cheers

    Chris

  20. Balwant
    December 22nd, 2014

    HelloAll,

    I have done my tshhot Exam today everthing was from this site.My score is 986. there is no changes even in single ip address same as LABs shared by Networktut.

    Very very thanks to Networktut. I got 3 MCQ and 13 TTs all from here. Use below PDF file and packet tracer files shared by networktut.

    https://www.networktut.com/download/TSHOOT_Strategy_by_Khattak.pdf

    Thanks again networktut ..

  21. yoblr
    December 25th, 2014

    Hi All, who are all pass this exam

    Q1 : do we need to do any modification on the existing setup (in simulation) or only identify the faulty devices and answer the ticket questions?

    Q2: what are all the command it will you to execute on simulations ?

    Q3: is config t will work on the simulations ?

  22. yoblr
    December 26th, 2014

    can any one respond on above query ?

  23. John
    December 26th, 2014

    A1: Only identify the faulty devices and answer the ticket questions
    A2: IOS Show commands as needed
    A3: No

  24. navy_diver2
    December 27th, 2014

    Hello everybody.
    I passed the TSHOOT exam on Christmas Eve with score 1000/1000. I am now CCNP certified, all tickets and MC & DD’s are valid. I used the strategy that was posted here by several people, if you follow this you will have no problems with this exam. Good luck!

    1- Find 4 tickets for R1. ***OBS*** number in parentheses represent ticket’s order on Networktut.com
    -> If can ping 10.1.1.1 the tickets will be:
    – Nat ACL(4),BGP Neighbor (3) R1 ACL (5)
    -> if can’t ping 10.1.1.1 but can ping 10.1.1.2 ticket will be:
    – OSPF Authentication (1)
    2- find the 2 tickets for HSRP TRACK (2) DSW1 and IPV6 OSPF (12) R2
    3- find 4 tickets 3 for ASW1 and 1 for R4
    -> If client get ip 169.x.x.x or no IP address, tickets will be:
    -Switchport vlan 10 (8)
    -Port security (7) int 1/0/1 shutdown in **error disable** .
    -Switchport trunk (9) All in ASW1
    The other ticket will be in R4
    -DHCP Range (13)
    4- find one ticket where client get ip 10.x.x.x but can’t ping default gateway, ticket willl be:
    -Vlan filter (6) it will be DSW1 or ASW1 check for option port/acl
    5- 2 tickets where client get 10.x.x.x these two tickets will be:
    -OSPF to EIGRP (11) R4
    -EIGRP Passive Interface (14) R4

  25. Mohsin
    December 27th, 2014

    I’m wondering if all the TTs will be shown in the configuration at once, I mean if R1 have 4 TTs for BGP Neighbor wrong IP, missing IP in ACL, missing IP in NAT ACL and OSPF Authentication. while the question will still say that the client 1 can’t ping WebServer???

    question 2, how many TTs we have to resolve out of 13 or 14 ? all of them?

    thanks for those who are reading and answering questions.

  26. Johnny
    December 28th, 2014

    @Mohsin:

    Please try think your question (above) over once more –

    If ALL the TTs @ exam will be shown in the configuration AT ONCE – How would you then be able to – at the same time – both distinguish and Troubleshoot each and every single Ticket issue from that COMMON (set of) configuration(s) on each Device within the TSHOOT exam Topology???

    Yes, you’re right about the fact, that it don’t seems to be possible, and that’s excactly why the individual configurations on the relevant Devices within the TSHOOT Topology – for sure – changes Ticket by Ticket @ exam.

    Regarding your question 2:

    It differs – There might be 12, 13 or even 14 Tickets @ exam due to exam experience from earlier TSHOOT exam takers…

    Wish you well on exam.

  27. navy_diver2
    December 28th, 2014

    @Mohsin:
    I had 2 multiple choice questions (found on this site under multiple choice)
    1 drag & drop question (found on this site under drag & drop)
    13 TT’s (all on this site)

    You have to look at the configuration of each device, use ping, ipconfig and show run,
    I used a few more commands (sh int trunk, sh vlans, sh ip bgp summ) but you can get away with just using ipconfig, ping and show run. Each ticket has a different fault if you follow the information below the you should do just fine:

    1- Find 4 tickets for R1. ***OBS*** number in parentheses represent ticket’s order on Networktut.com
    -> If can ping 10.1.1.1 the tickets will be:
    – Nat ACL(4),BGP Neighbor (3) R1 ACL (5)
    -> if can’t ping 10.1.1.1 but can ping 10.1.1.2 ticket will be:
    – OSPF Authentication (1)
    2- find the 2 tickets for HSRP TRACK (2) DSW1 and IPV6 OSPF (12) R2
    3- find 4 tickets 3 for ASW1 and 1 for R4
    -> If client get ip 169.x.x.x or no IP address, tickets will be:
    -Switchport vlan 10 (8)
    -Port security (7) int 1/0/1 shutdown in **error disable** .
    -Switchport trunk (9) All in ASW1
    The other ticket will be in R4
    -DHCP Range (13)
    4- find one ticket where client get ip 10.x.x.x but can’t ping default gateway, ticket willl be:
    -Vlan filter (6) it will be DSW1 or ASW1 check for option port/acl
    5- 2 tickets where client get 10.x.x.x these two tickets will be:
    -OSPF to EIGRP (11) R4
    -EIGRP Passive Interface (14) R4

    I hope this helps and good luck!

  28. Mohsin
    December 30th, 2014

    @Johnny/Navy,

    Guys actually I had an old experience of CCIE SP Lab (which I failed :) where each fault is based on previous one, if you didn’t fix the old one the new one wouldnt work because the old one was related – CCIE SP is race against time really. anyway, thanks for your answer.

    Well its all done now, went for exam this morning 10am and left the exam center @ 11 with 1000.
    Everything is still valid. I got 2 MCQs, 1DnD and 13 TTs all from this website.

    once again thanks alot everyone.

  29. Johnny
    December 30th, 2014

    Mohsin:
    Congrats on u’r exam – Good job bro :)
    Yes, I’ve heard about the CCIE SP Lab exam “Lab” inter dependencies too, but luckily this is not the case for the current (642-832) TSHOOT exam – so far…
    However, it will be interesting to see, how the new 300-xxx TSHOOT exam has been arranged regarding all this!?
    Happy N Y and good luck in your future networking career!

  30. samer
    December 30th, 2014

    (ip authentication message-digest) command , is missing on inetrface serial 0/0/0.12 in all packet tracer topoligies even the full working topology !
    so how would i know ?

Comment pages
1 25 26 27 28 29 50 38