Share your SWITCH v2.0 Experience

layer 2 technologies 80%
infra security 33%
Infra service 100%

i learned 164Q & galvin.158Q
i believe i messed up with AAA lab although i typed cmds exactly from this site , i had no idea what was wrong

SWITCH.com is an IT company that has an existing enterprise network comprised of two layer 2 only switches; DSW1 and ASW1. The topology diagram indicates
their layer 2 mapping. VLAN 20 is a new VLAN that will be used to provide the shipping personnel access to the server. Corporate polices do not allow layer 3
functionality to be enabled on the switches. For security reasons, it is necessary to restrict access to VLAN 20 in the following manner:
· Users connecting to VLAN 20 via portfO/1 on ASW1 must be authenticated before they are given access to the network. Authentication is to be done via a Radius
server:
· Radius server host: 172.120.40.46
· Radius key: rad123
· Authentication should be implemented as close to the host as possible. · Devices on VLAN 20 are restricted to the subnet of 172.120.40.0/24. · Packets from
devices in the subnet of 172.120.40.0/24 should be allowed on VLAN 20. · Packets from devices in any other address range should be dropped on VLAN 20. ·
Filtering should be implemented as close to the serverfarm as possible. The Radius server and application servers will be installed at a future date. You have been
tasked with implementing the above access control as a pre-condition to installing the servers. You must use the available IOS switch features.

my answer:

ASW1(config)#aaa new-model
config# radius-server host 172.120.39.46 key rad123 ( i beleive u should use what question mentioned to use address)
config# aaa authentication dot1x default group radius
conf# dot1x system-auth-control

ASW1(config)#interface fastEthernet 0/1
(config) #switchport mode access (otherwise it won’t accept to type dot1x cmd)
(config)# dot1x port-control auto

2) Configure DSW1:
DSW1(config)#ip access-list standard 10
DSW1(config-std-nacl)#permit 172.120.40.0 0.0.0.255
DSW1(config-std-nacl)#exit

DSW1(config)#vlan access-map MYACCMAP 10
DSW1(config-access-map)#match ip address 10 )
DSW1(config-access-map)#action forward
DSW1(config-access-map)#exit

DSW1(config)#vlan access-map MYACCMAP 20
DSW1(config-access-map)#action drop
DSW1(config-access-map)#exit

Apply a vlan-map into a vlan:
DSW1(config)#vlan filter MYACCMAP vlan-list 20
DSW1#copy running-config startup-config

DSW1#show vlan access-map , show vlan filter
ASW1#show dot1x ,show dot1xall ,show ip access-list

i had some trouble with lacp lab: i can’t call show int trunk on SWB and i wasn’t seeing port channel on trunk alwdthougt i was able to ping
SWB#ping 192.168.1.1 (Router address)
i see ip address default on SWA int vlan 1 , ip add 192.168.1.10
SWB as well int vlan 1 , ip add 192.168.1.11
make sure type SWA & SWB #int range fa0/3 – 4 ,shut & no shut ,

Drag and Drop – SPAN Source and Destination Ports
Source port: 1. It can be trunk or an access port
2. It can be monitored as a bundled logical port or as individual physical ports
3. Multiple VLANs can be included in a single session
Destination switch:
1. It acts as twshe monitoring port
2. It is not supported as part of a VLAN
3. Its original configuration is overwritten by the SPAN configuration

Drag and Drop – AVG/AVF/ARP/Gateway Priority

Anyone had AAA radius exam lab?

The commands mentioned by Anonymous should be deprecated on iOS 15, so in the exam these commands still works?

E.g.

config# radius-server host 172.120.39.46 key rad123 ( i beleive u should use what question mentioned to use address)
config# aaa authentication dot1x default group radius
conf# dot1x system-auth-control

ASW1(config)#interface fastEthernet 0/1
(config) #switchport mode access (otherwise it won’t accept to type dot1x cmd)
(config)# dot1x port-control auto

For those who recently took the exam, does any of Questions 6, 7, 8 show up on the Switch exam?

Passed yesterday 3rd February , got 867
44 Questions.
Same Labs HSRP vtpv3, LACP, but about 10 new questions.

I have the exam in couple of days, is pass4sure 143 question is valid?

Hi Guys,

Question with regards to DND

Does anyone have the DND for RSPAN? I was reading previous comments and some users are getting RSPAN as DND (just want to make sure I cover that part of the exam as well)

Thank you

@Portuguese Guy, The actual VCE file with the same 1056q, was not included in the folder you shared, please attach.

Done, please confirm now.

Thank you @Portuguese Guy

Thank you!!!! @Portuguese Guy

@Portuguese Guy
Thank you uor are the best.

Just passed exam everything covered under premium account. Study all question not just under 8, 7, 6 and you should be good.
Same Labs HSRP vtpv3, LACP Dnd HSRP/VRRP and Stackwise/VSS. Three question that are new.
Thanks everyone and good luck

Hi guys,

Thanks certprepare !!!

I got today 88x

I had HSRP, VTPv3 and LACP with STP (on SW B remember to put first of all the “switchport trunk encapsulation dot1q” command when entering to conf-if-range fa0 / 3-4).

For Dnd: HSRP / VRRP and Stackwise / VSS.

Maybe 2 or 3 new questions (or maybe rewritten), but with all the information about the premium certprepare i think is enough to understand the concepts and pass the exam (I can’t understand how some people say they had a lot of new questions that never seen on certprepare).

Good luck for all, see you on Tshoot.

Passed the exam with 8xx.

I have to say from my experience, I am obviously on cloud nine and feel relieved, stunned and surprised I passed, but thank God almighty he steered me in the right direction.

I had VTP3, LACP-STP, HSRP

As CCNP-Switch mentioned with the HSRP SIM “This had the e0/1 interface which meant that the 40 percent increment is not valid, you would need choose the HSRP 100 default option, why you ask?… because it is not the e0/0 interface, it was asking the e0/1 interface. If it is e0/0 then the answer on cert prepare is correct, if not, then its HSRP 100.

Had no issues with the VTP, “just as the site, all answers correct.
LACP-STP – “Just as the site, all configurations is spot on”.
On switch A, no need to enter the encapsulation dot1q or rather it does not allow you.
On switch B, the switchport trunk encapsulation dot1q is accepted.
Just check and SAVE your config and all would be fine.

The Drag and Drop was RSPAN True or False, with 4 that was true and 3 that was false.
This site has it all correct and all fine, “i actually got flustered with this, so unsure if I got this correct”

Now the tricky part, and everyone is asking are the questions the same in the exam is it is on the site, which were posted by Rick & M.Shanin.

Yes and no, I have there were about 12 or so questions were from those, so I do recommend studying those.

There are about 10 – 15 new questions not to be found on this site or dumps i’ve looked at.
“I spent over a month meretriciously going through cert prepare “PREMIUM” looking at each section, updated questions and quizzes and the new questions are not in there.

I really had to think on each question and used my own thinking to select the right answer, “so when someone says you need to understand the general concept and then the detail, you really need to, in order to guarantee a pass, there is no quick solution around it, as Cisco is now changing questions regularly… I would say every 3 months on exams, adding or rewording questions”…

Questions I had were around IP Source Guard, Private VLAN Types, RSPAN, DHCP snooping, root guard, CDP, port security, the election process of STP, the best route to a switch “from PC1 to DW2″…..

If you scavenged the site and gone through the latest dumps and studied like a lunatic like me, then you would most likely pass, however don’t just rely on memory, really look at the question and use your head… and you would pass… if you just memorised the question and think that would be enough to pass, you would be in for a big disappointment…. it’s worth understanding the question and what it is asking… then go from there…

That completes and concludes all of my CCNP Adventures… it’s been emotional, hard, taxing and also very satisfying, No more studying now until I need to re-certify in 3 years time.

I wish everyone good luck and bid you all good bye for now!

@Anon, so are you saying you just tested and got the AAA lab?????

Thanks @Portuguese Guy !

Can anyone confirm me the commands about AAA lab??

On IOS 15 the commands on certprepare has been deprecated.

Thanks

Got same as @anon, i personally didn’t see any new questions besides wha’ts already covered on this site. I think In an exam environment though, even old questions can look new because there is just a lot of content.

I am thankful to Jesus and i am glorifying his name for the pass. @Anon has just managed to desribe how i am feeling right now.

Just Passed with 9xx, all the 42 questions from this site, 2 new questions but very easy.

———————————————

On LACP lab, I did create the vlans 21-23 on both Switches and Vlan 99 on Switch B

I´ve shot down the etherchannel interfaces before the changes and numbered with number 2 my channel-group, as some people said there´s a bug when channel-group 1 is created (of course you have to NO SHUT the interfaces after configurations on both switches are made).
I did the command ip default gateway pointing to Switch´s A vlan 1 ip adddress on Switch B as in my opinion this is not a routing command.
also copy run start before move on to the next question.

———————————————————————-

DnD – SPAN, BPDU FILTER VS GUARD, HSRP vs VRRP

What answers did you guys choose in the VTPv3 Sim?
I think the site is wrong… Everyone has different answers

@Angel – Congratulation on passing the Cisco Switch!

With regards to the LAB LACP, may I ask for your assistance if the following configuration below are correct?

======================================

Switch A:

config terminal
spanning-tree vlan 11-13,21-23 root primary

vlan 21
name Marketing
exit
vlan 22
name Sales
exit
vlan 23
name Engineering
exit

interface range fa0/3 – 4
shutdown
no switchport mode access
no switchport access vlan 98
switchport mode trunk
switchport trunk allowed vlan 1,21-23
switchport trunk native vlan 99
channel-group 1 mode active
channel-protocol lacp
exit

Switch B:

config terminal
vtp mode transparent
spanning-tree mode rapid-pvst

vlan 21
name Marketing
exit
vlan 22
name Sales
exit
vlan 23
name Engineering
exit
vlan 99
name TrunkNative
exit

interface range fa0/9 – 10
switchport mode access
switchport access vlan 21
spanning-tree portfast
no shutdown
exit

interface range fa0/13 – 14
switchport mode access
switchport access vlan 22
spanning-tree portfast
no shutdown
exit

interface range fa0/15 – 16
switchport mode access
switchport access vlan 23
spanning-tree portfast
no shutdown
exit

ip default-gateway 192.168.1.1

interface vlan 1
ip address 192.168.1.11 255.255.255.0
no shutdown
exit

interface range fa0/3 – 4
shutdown
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 1,21-23
switchport trunk native vlan 99
channel-group 1 mode passive
channel-protocol lacp

Switch A , B:

interface range fa0/3 – 4
no shutdown
exit
copy running-config startup-config

Thank you in advance

Hiii… Passed today with 8xx exam was easy if you have updated dump labs are still LACP WITH STP , HSRP , VTPv3 … guys some questions answer are changed especially labs so read every question … observe output and answer.. I have remembered most of the questions .. I buy paid material from another site also everything is their .. be confident.. i can give you in 10$ only if you are interested… you can get 44 today exam questions + paid certprepare files + paid my maked dump which I used to pass today contact me .. (why I charged??? Because I have also purshased with double amount )…. This is not a scam .. interested peoples can talk USD 300$ exam vs 10$ what you do with this if you don’t buy and cleared exam…bye

interface range fa0/13 – 14
switchport mode access
switchport acfcess vlan 22
spanning-tree portfast
no shutdown
exit

interface range fa0/15 – 16
switchport mode access
switchpofrt access vlan 23
spanning-tree portfast
no shutdown
exit

Passed yesterday 9xx

Labs: LACP WITH STP , HSRP , VTPv3
Answer same as certprepare, DO NOT DEVIATE

HSRP references E0/1 in the exam. answer is the same. do a show run to check the tracking object

LLDP question this site has interface disabled, but its enabled on the exam.
Note this: LLDP is enabled by default on all supported interfaces to send and to receive LLDP packets.

Question about mac-address table.
Answer = mac-addresses are asscociated with a vlan.

Question about time between MST bpdu’s
Answer = Spanning-tree mst hello-time

Question about phone connected to access port and QOS
Answer = mls qos trust cos

One D&D RSPAN true or false

Question about MEC links
A. PagP
B. PagP and LACP
C. ?
D. Static ON
E. Static Auto

Wasn’t sure on the answer to this….

for the VTP-LACP laboratory the interfaces on switch B 0 / 9-10,0 / 13-14,15 and 16 could you leave them active? I had trouble showing them to be active but if I could ping switch B to the router

@uBit, congratulations on passing Cisco Switch.

May I ask if you can verify the LACP with STP LAB Configuration below?

======================================

Switch A:

config terminal
spanning-tree vlan 11-13,21-23 root primary

vlan 21
name Marketing
exit
vlan 22
name Sales
exit
vlan 23
name Engineering
exit

interface range fa0/3 – 4
shutdown
no switchport mode access
no switchport access vlan 98
switchport mode trunk
switchport trunk allowed vlan 1,21-23
switchport trunk native vlan 99
channel-group 1 mode active
channel-protocol lacp
exit

Switch B:

config terminal
vtp mode transparent
spanning-tree mode rapid-pvst

vlan 21
name Marketing
exit
vlan 22
name Sales
exit
vlan 23
name Engineering
exit
vlan 99
name TrunkNative
exit

interface range fa0/9 – 10
switchport mode access
switchport access vlan 21
spanning-tree portfast
no shutdown
exit

interface range fa0/13 – 14
switchport mode access
switchport access vlan 22
spanning-tree portfast
no shutdown
exit

interface range fa0/15 – 16
switchport mode access
switchport access vlan 23
spanning-tree portfast
no shutdown
exit

ip default-gateway 192.168.1.1

interface vlan 1
ip address 192.168.1.11 255.255.255.0
no shutdown
exit

interface range fa0/3 – 4
shutdown
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 1,21-23
switchport trunk native vlan 99
channel-group 1 mode passive
channel-protocol lacp

Switch A , B:

interface range fa0/3 – 4
no shutdown
exit
copy running-config startup-config

Thank you in Advance and GodBless

For those who’s already done with the exam can you please verify the DND for HSRP VRRP? I notice that there are two sets in VCE.

Thank you

Hi everyone,

Yesterday I passed my switching exam (so one more left :) )
As far as I can remember I had only 1 D&D (true/false Rspan) and the labs the above mentioned (no problem with those)
However the questions are not really the same, there were just few from the Miscellaneous questions and some from the individual (so go through also those) but mostly they were new or different. (May be from the old questions? I don’t know)
So study also the topics don’t do only the dumps, and you will pass with no issues.

@Proton

Looks good

I didn’t put in default gateway.
Probably won’t cause an issue if you put it in

Interface Vlans were already configured on the switches
Check the running config