成果詳解ccie rs lab k4 v1 8解法

1.1TroubleshootLayer21.2VLANandAccess-1.4SwitchTrunkingand1.1TroubleshootLayer21.2VLANandAccess-1.4SwitchTrunkingand1.5Layer2Protocol1.6PPPover2.1IPv42.2IPv42.3IPv42.4Redistribution:OSPFinto2.5Redistribution:EIGRPinto2.6IPv42.7IPv42.8Advanced2.9IPv62.10IPv63.2AdvancedMulticast4.1IGP4.2Zone-Based4.3Layer24.4Qualityof4.5Qualityof4.6FirstHop4.7Time-basedAccess-5.15.2NetworkTwofaultsTwofaultshavebeeninjectedintothepreconfigurationsjustdescribed.issuesmayimpedeaworkingsolutionforcertainportionsofthislabexam,theseissuescanaffectanylabexamsection.Youmustverifythatallofconfigurationsworksasexpected.Ifsomethingisnotworkingasexpected,youmustfixtheunderlyingDHCPsnooping/ARPinspectiononVLAN17onSW2noiparpinspectionvlaninterfacerangef0/19-24GuardrootonSW4andpossiblyincorrectvtppasswords--->VTP1.2VLANandAccess-ports3Vlan17–BetweenR1&Vlan29–BetweenR2&Vlan34–BetweenR3&Vlan38–BetweenR3&Vlan45–BetweenR4&Vlan56–BetweenR5&Vlan67–SVIBetweenVlan56–BetweenR5&Vlan67–SVIBetweenSW1&Vlan89–SVIBetweenSW3&Vlan100–BetweenR1&Vlan200–BetweenR2&Vlan300–BetweenSW3&Vlan333–CustomerVlan666–CarrierVlan999–Unusedports1.CompletetheVLANsconfigurationfortheaccessportsaspertheVLANabove(case2.Ensurethatallunusedphysicalportsonallswitchesareshutdownconfiguredasaccess-portsinVLAN999(DonotforgetGigabit3.ConfigureVTPtransparentmodeonallvtpdomainvtpversion2vtppasswordciscoswitchportmodetrunk!vlanvlanvlanvlanvlanvlanvlanvlanvlanvlanvlanvlanvlanvlanvlanvlanvlaninterfacef0/1swmodeaccswaccvlan!intswmodeacc!intswmodeacc!intswmodeacc!swaccvlan56!intswmodeacc!intrangef0/6-9,f0/11-18,g0/1-2swmodeaccswaccvlanintswmodeacc!int!intswmodeacc!intswmodeacc!intswmodeaccswaccvlan34intf0/5swmodeacc!intswmodeacc!intrangef0/6-9,f0/11-18,g0/1-2swmodeaccintswmodeacc!intrangef0/1-9,f0/11-18,g0/1-2swmodeaccswaccvlanintrangef0/1-18,g0/1-2swmodeaccswaccvlan1.Settheregion1.Settheregionnameas2.AssignallactiveoddVLANstoinstance3.AssignallactiveevenVLANstoinstance4.ExplicitlyassignallunusedVLANstoinstance5.EnsurethatSW1istheprimaryrootbridgeforoddVLANsandfor6.EnsurethatSW1isthesecondaryrootforeven7.EnsurethatSW2istheprimaryrootbridgeforeven8.EnsurethatSW2isthesecondaryrootforoddVLANsandforNote:Oddnumbersare1,3,5etcandevennumbersare2,4,6Don’tforgetanyotherVLANusedthroughouttheSW1-spanningmodespanning-treeextendsystem-idspanning-treemstconfigurationrevision1nameinstance3vlan1-instance1vlaninstance2vlanspanning-treemst0rootprimaryspanning-treemst1rootspanning-treemst0rootsecondaryspanning-treemst1rootspanning-treemst2rootshowspanning-treemst1.4SwitchTrunkingandEtherChannelshowspanning-treemst1.4SwitchTrunkingandEtherChannel31.Disable2.Useencapsulation3.ThenativeVLANisVLAN4.EnsurethatnativeVLANis5.Configurea200MbpslogicaltrunkbetweenSW1andSW2aspertheTheEtherChannelmustuseIEEESW2can'tinitiatetheTheloaddistributionmechanismmustusethesourceanddestinationMACIfmorechannelmemberswereaddedinthefuture,Fa0/24musthavethechancetobethefirstactiveSW1–vlandot1qtagnativeswitchporttrunknativevlan999switchportmodetrunkinterfacerangef0/23–!!port-channelload-balancingsrc-dst-interfacerangef0/23–24!!port-channelload-balancingsrc-dst-interfacerangef0/23–24!!port-channelload-balancingsrc-dst-1.5Layer2Protocoltunneling41.UsersconnectedtoVLAN333onSW3mustbeabletocommunicatetheconnectedtoVLAN333onSW4viatheinterfaceperspectiveconnectedtoand2.ConfiguretheVLAN333interfaceonSW3withtheIPaddress3.ConfiguretheVLAN333interfaceonSW4withtheIPaddress4.VLAN333mustbeallowedtoflowonlythroughSW3andSW4'sFa0/19,othertrunksmaycarrythis5.SW1andSW2mustcarrytheVLAN333dataacrossthenetworkusingVLAN6.VLAN666mayexistonlyonSW1and7.SW1andSW2mustnotallowVLAN333onanytrunksandmustallowVLANonlyonthetrunksbetween8.NootherportinanyswitchmaycarryVLAN9.Donotmodifyanyspanning-treecostorport-prioritytoachievethis10.Referringtotheexhibit10.ReferringtotheexhibitbelowSW3mustseeSW4asaCDPneighborinterfaceFa0/19andmustbeabletopingSW4’sVLAN!!mtu值更改后必須保存重啟C3560交換機(jī)OSPFv3功能啟動(dòng)intswaccvlan666intrangef0/20-24,port-channelswitchporttrunkallowedvlanremove!intrangef0/20-switchporttrunkallowedvlanremoveintswaccvlan666l2protocol-tunnelcdp!intrangef0/20-24,port-channel12switchporttrunkallowedvlanremove333intrangef0/20-22switchporttrunkallowedvlanremoveintrange!intrangef0/20-switchporttrunkallowedvlanremove!intvlanip YY.YY.33.8no!novlanintrange!novlanintrange!intrangef0/20-switchporttrunkallowedvlanremove!intvlanip YY.YY.33.9no!novlan1.6PPPoverEthernet31.ConfigureR3asaPPPoE2.ConfigureR4asaPPPoE3.Thelinkmustbeupevenifthereisnotrafficat4.R4mustalwaysreceivetheIPaddressYY.YY.34.4/32from5.DonotuseDHCPtoassigntheIP6.AvoidunnecessaryfragmentationonthePPPoE7.TheclientmustuseCHAPtoauthenticatewiththeserver(UsehostnameasCHAPusernameandany!virtual-template1!vpdn!vpdn-groupvpdn-group!iplocalpoolcisco!interfaceVirtual-ipaddressYY.YY.34.3pppauthenticationchapiptcpadjust-mss!nopppoeenablegrouphostnoshutdownpppoeenablegroupglobal!encapsulationpppdialerpool1mtudialerpersistentpppchappassword以上解法是滿分的，PPPoEServer與Client之間的ospfneighbor可以正常建立，但是要求IOS R3bba-grouppppoeCCIEvirtual-template!ipaddressYY.YY.34.3pppoeenablegroupno!mtu1492ipunnumberedno!mtu1492ipunnumberedFastEthernet0/0!iplocalpoolipcpR4hostinterfaceFastEthernet0/1noshutdown!mtu1492encapsulationpppdialerpool1dialerpersistentdialer-group1pppchappassword0!dialer-list1protocolip1.R1usesDLCI2.R2usesDLCI3.UseIETF4.EnsurebothDTEdonotbuilddynamicaddress5.Ensurethebroadcastpacketsarereplicatedontheframe-relay6.EnsurethatbothDTEareabletopingeachotheraswellastheir7.ConfigureonR17.ConfigureonR1andR2theadministrativebandwidthforbothFrame-interfaceto8.R4ispreconfiguredastheFrame-RelaySwitchDonotmodifyanyFrame-configurationonframe-relay!interfaceSerial0/0clockrate64000frame-relayintf-typedcenoshutinterfaceSerial0/1clockrate64000frame-relayintf-typedcenoshutinterfaces0/0/0noframe-relayinverse-arpipaddressYY.YY.12.1noframe-relaymapipYY.YY.12.1frame-relaymapipYY.YY.12.2102interfaces0/0/0noframe-relayinverse-arpipaddressYY.YY.12.2noframe-relaymapipYY.YY.12.2frame-relaymapipnoframe-relaymapipYY.YY.12.2frame-relaymapipYY.YY.12.12012.1IPv431.TheOSPFprocessIDcanbeany2.TheOSPFrouter-IDsmustbestableandmustbeconfiguredusingtheIPofinterfaceloopback3.Loopback0interfacesmustbeadvertisedintheOSPFareashownin“diagram1IGP4.DonotcreateadditionalOSPF5.DonotuseanyIPaddressnotlistedin“Diagram1IGP6.IncaseeitherR1orR5isdown,R4muststillbeabletoreachallotherprefixesvia7.DonotchangetheOSPFnetworktypeonFrame-Relay8.DonotpropagateanydefaultrouteinanyrouterospfYYnetworkYY.YY.1.1areanetworkYY.YY.17.1areanetworkYY.YY.15.1areanetworkYY.YY..0area1area1virtual-linkYY.YY.3.3neighborYY.YY.12.2!matchinterfaceg0/1！intipospfintipospfmtu-routerospfYYnetworkYY.YY.12.2areanetworkYY.YY.23.2areanetworkYY.YY.2.2arearedistributeconnectedsubnetsroute-mapBB2metric-type1neighborYY.YY.12.1!matchinterfaceg0/0routerospfYYnetworkYY.YY.3.3areanetworkYY.YY.23.3areanetworkYY.YY.35.3areanetworkYY.YY..0area2area1virtual-linkYY.YY.1.1area1virtual-linkrouterospfYYnetworkYY.YY.4.4areanetworkYY.YY.34.4area!routerospfYYnetworkYY.YY.5.5areanetworkYY.YY.35.5areanetworkYY.YY.15.5areanetworkYY.YY..0area0area1virtual-linkYY.YY.3.3！intipospfmtu-iprouitngnetworkiprouitngnetworkYY.YY.6.6areanetworkYY.YY.56.6areanetworkYY.YY.67.6areaiproutingnetworkYY.YY.7.7areanetworkYY.YY.67.7areanetworkYY.YY.17.7area2.2IPv4EIGRP21.ConfigureEIGRPASYYandEIGRPAS100asperthe“Diagram1IGP2.RedistributeEIGRPAS100intoEIGRPAS3.Disableautomaticsummarizationforbothautonomousiproutingnoauto-summary!routereigrpnoauto-summarynetworkYY.YY..0networkYY.YY.3YY.YYnetworkYY.YY.YY.YYredistributeeigrp100metric100001002551iproutingnetworkYY.YY.89.9networkYY.YY.9.9routereigrpnetworkYY.YY.9.9routereigrpnoauto-summarynetworkYY.YY..0routereigrpnoauto-summarynetworkYY.YY..02.3IPv411.Disableautomatic2.RIPmustbeenabledonlyfortherequiredinterfaces,nootherinterfacessendandRIProuterripnetworkYY.0.0.0passive-interfacerouterripnetworkYY.0.0.0passive-interface21.RedistributeOSPFintoRIPon2.R4mustroutetrafficdestinedtoSW12.R4mustroutetrafficdestinedtoSW1loopback0via3.R4mustrouteallotherOSPFprefixesviarouterrouterospfdistance125YY.YY.3.3access-list1permit如果考題有出現(xiàn)類似:MutualredistributebetweenOSPFandRIP:routerospf!matchipaddress10!access-list10permit2.5Redistribution:EIGRPintoOSPF41.ManuallyredistributeEIGRPandOSPFonbothR2and2.TheonlyEIGRPExternalroutesthatbothR2andR3mustseearetheoriginatedinEIGRP100andtheVLAN3003.AllinternalOSPFprefixes(i.e.allexistingsubnetsofYY.YY.0.0/16thatareoriginatedinEIGRPYYandEIGRP100)mustbeseenasOSPFinternalbybothand4.Withoutanyadditionalconfiguration.Yoursolutionmustcoveranyprefixesthatcouldeventuallybeadvertisedby5.Youmustusearoutefilteringmechanismbutdonotuseanyaccess-listprefix-listtoachievethis6.Ensureoptimalroutingprefix-listtoachievethis6.EnsureoptimalroutingisperformedonbothR2and7.DonotchangeanydefaultadministrativedistancetoachievethisrouterospfredistributeeigrpYYsubnetsmetric-type1tag100distribute-listroute-mapfilterin!matchtag100!!routereigrpredistributeospfYYmetric10000100025512.6IPv4eBGP21.ConfigureeBGPbetweenASYYandAS254asperthe“Diagram22.R2mustgenerateawarninglogmessageifitreceivesmorethan5prefixes3.BothR2andR3mustexchangetheBGPcapabilitythatindicatestheendofmarkeraftertheinitialroutingupdateis4.RedistributeOSPFintoBGPonbothR1and5.EnsurethatyoureceiveBGPPrefixesfrombothBB1and6.Donotusenext-hop-selfineitherR1androuterbgpbgprouter-idneighbor150.1.YY.254remote-asrouterneighbor150.1.YY.254remote-asrouterbgpneighbor150.2.YY.254remote-asredistributeospfYYrouterbgpbgpgraceful-restart2.7IPv4iBGP21.ConfigureBGPASYYbetweenallfive2.Useloopback0interfaceforallinternalBGP3.R3mustbetheRouteReflectorforAS4.Donotusepeer-routerbgpneighborYY.YY.3.3remote-asneighborYY.YY.3.3update-sourceloopbackrouterbgpneighborYY.YY.3.3remote-asneighborYY.YY.3.3update-sourceloopbackrouterbgpbgprouter-idYY.YY.4.4neighborYY.YY.3.3remote-asYYneighborYY.YY.3.3update-sourceloopbackrouterbgpbgprouter-idYY.YY.5.5neighborYY.YY.3.3remote-asYYneighborrouterbgpbgprouter-idYY.YY.5.5neighborYY.YY.3.3remote-asYYneighborYY.YY.3.3update-sourceloopbackrouterbgpneighborYY.YY.1.1remote-asneighborYY.YY.1.1update-sourceloopback0neighborYY.YY.1.1route-reflector-clientneighborYY.YY.2.2remote-asYYneighborYY.YY.2.2update-sourceloopback0neighborYY.YY.2.2route-reflector-clientneighborYY.YY.4.4remote-asYYneighborYY.YY.4.4update-sourceloopback0neighborYY.YY.4.4route-reflector-clientneighborYY.YY.5.5remote-asYYneighborYY.YY.5.5update-sourceloopbackneighborYY.YY.5.5route-reflector-2.8AdvancedBGP51.R1mustprefertheexternalpathtoreachdestinationsinAS254andthebreakerintheBGPbestpathselectionalgorithmmustbethe“ExternalInternal”2.R3mustpreferthepathviaR1andthechangemustnotimpactanyother3.R4mustbeabletosuccessfullypinghost4.TrafficsentfromR4todestinationsinAS254mustberoutedthrough5.BGPattributesofAS-Path,LocalPreferenceandWeightcan'tbechangedeitherR4or6.OSPFcostsmaybechangedforonlyoneaccess-list1permitmatchipaddressmatchipaddressrouterbgp8neighbor150.2.YY.254route-mapfrom_bb2routerbgpneighborYY.YY.1.1weightipospfcost2.9IPv6Addressing21.Refertothe“Diagram3IPv6Routing”andconfigureIPv6inyour2.Configureallglobalunicastaddressestomatch2001:YY:YY:SS::HH/MMYYStandsforyourtwo-digitsracknumber,writtenindecimalformatSSistheoctetoftheIPv4addressofthesameinterface,writtenindecimalformatHHisfourthoctetoftheIPv4addressofthesameinterface,writtenindecimalMMisthesubnetmaskandmustbe/128forloopbackinterfacesand/64other3.Disablesendingtheperiodicrouteradvertisementmessagesonall4.IPv6devicemustuseCisco'sproprietaryforwarding2.10IPv6Routing1.ConfigureOSPFv3accordingtothe“Diagram3IPv62.Usethenumber20012.Usethenumber2001astheOSPFv3process3.Usetheloopback0IPaddressastheOSPFv3router-4.Usingasinglecommand,theseriallinkbetweenR1andR5mustauthenticatedusingMD5key5.AllIPv6interfacesmustbereachablefromanyIPv6ipv6cefrouter-idY.Y.1.1!intipv6ospf2001area0!intipv6ospf2001area0ipv6ospfauthenticationipsecspi256md5!intipv6ospf2001area0ipv6ndraipv6cefrouter-idY.Y.5.5intipv6ospf2001area0intipv6ospf2001area0ipv6ospfauthenticationipsecspi256md51234567890ABCDEF1234567890ABCDEFintf0/0ipv6address2001:ipv6ospf2001ipv6ospf2001areaipv6ndraipv6cefrouter-idY.Y.6.6intipv6ospf2001area0!intvlanipv6address2001:YY:YY:56::6/64ipv6ospf2001area0ipv6ndra!intvlanipv6address2001:YY:YY:67::6/64ipv6ospf2001area0ipv6ndraipv6cefrouter-idYY.YY.7.7intlo0ipv6address2001:YY:YY:7::7/128ipv6ospf2001area0!intvlanipv6ospf2001area0ipv6ndra!intvlanipv6ospf2001area0ipv6ndrashowipv6showipv63.1Multicast31.showipv6showipv63.1Multicast31.ConfigureIPv4MulticastonR3and2.R3'sloopback0issimulatingamulticastvideoserverandreceiversconnectedtoR53.MulticastforwardingshouldnotrelyonanyRendezvous4.Thenetworkshouldnothavetofloodandprunemulticasttrafficipmulticast-routinginterfaceLoopback0ippimsparse-mode!ipmulticast-routingippimsparse-mode!ippimsparse-mode1.ConfigureastaticjoinonR5FastEthernet0/0forthegroupaddressensurethatonlythemulticastvideoserversimulatedbyYY.YY.3.3isallowedsendtrafficforthat2.ConsiderthattherearehostsconnectedtoR5thatonlysupportIGMPv2whoareinterestedtojointhewhoareinterestedtojointhegroupaddressesand3.Thesehostsmustbeabletojointhesetwogroupsforthesource4.RoutersshouldnotquerytheDomainNameSystem(DNS)foranyippimssmrange!access-list1permitaccess-list1permitaccess-list1permitintipigmpjoin-groupsourceYY.YY.3.3ipigmpv3lite!access-list15permitaccess-list15permitaccess-list15permit!ippimssmrangeipigmpssm-mapnoipigmpssm-mapqueryipigmpssm-mapstatic15!showippiminterfaceshowippimneighborshowipmroutepingsourceYY.YY.3.3pingsourceR3ping成功，R5pingshowipigmpssm-mapping4.1IGPAuthentication31.Complete4.1IGPAuthentication31.CompletetheconfigurationofMD5authenticationintheBGP2.Youarenotallowedtochangethepre-configuredkeyin3.R5mustsavethekeyasaplanetext(notencrypted)intheintipripauthenticationmodemd5!key1 !!此密碼按照pre-config，勿改。有部分更新說可大家一定要認(rèn)RIP驗(yàn)證已經(jīng)取消intipripauthenticationmodemd5!key1routerospfrouterospf4.2Zone-BasedFirewall31.Twooutputgiven,firstoneshowedyouthatpingfromSW2tosuccessfully,andpingfromR5to150.1.YY.254successfully,secondoneyoutheoutputof“showpolicy-maptypeyoutheoutputof“showpolicy-maptypeinspectzone-pair”,notethatactionundertheclass-maphitisClass-map:A_B(match-Class-class-default(match-0packets,0YouarerequiredtobuildZBFbaseonzone-zone-members,zone-pairsgiven,casematchprotocolicmp!classA_B!!classA_B!!zonesecurityZone_in!service-policytypeinspectA_B!zone-pairsecurityB_AsourceZone_outdestinationZone_inservice-policytypeinspectB_A!!!ipospfcost1!!ipospfcost14.3Layer2Security31.ConfigureSW1andSW2asperthefollowing2.R4andR5maycommunicateonlywitheachotherinVLAN45andnotwithotherhostinthat3.HostsconnectedtoportFa0/6ofbothSW1andSW2mustalsobepartof45,andmaycommunicateonlywitheach4.HostsconnectedtoportFa0/7ofbothSW1andSW2arenotallowedcommunicatewithanyhostinVLAN5.Alloftheaboveports(Fa0/6,Fa0/7fromSW1andSW2)mustbeallowedcommunicatewithadeviceconnectedtoportFa0/8of6.UseonlyoddVLANnumber(s)(between334and998)ifyouneedtocreatenew7.Currently,thereisnohostattachedtotheseportsbutensurethattheyareconfiguredandthatnointerventionisrequiredwhenactuallyphysicalhoststoinstance1vlan335,337,401vlanprivate-vlanvlanprivate-vlanvlanvlan337vlan401vlan45!intnointf0/7nointintfa0/8noswitchportmodeprivate-vlanpromiscuousswitchportprivate-vlanmapping45335337401int如果考題有要SW1SVI口也做成混雜端口intvlanipaddYY.YY.45.6 add4.4QualityofService21.Itappearsthatsomehostsattachedtothesubnet/24behindBB1sendingsuspicioustraffictomultipledevicesinOSPFsendingsuspicioustraffictomultipledevicesinOSPFArea2.ConfigureR1asperthefollowing3.UsetheModularQoS4.Limitonlythissuspicioustrafficto128kbpsper5.Donotpolicethis6.Useastandardaccess-listwithasingleentry,donotuseanamedaccess-access-list1permit!class-map!classbb1!int!int4.5Qualityof31.ConsiderthatusersconnectedtoVLAN56aresendingtrafficthatismarkedas2.ControlIPprecedence6or3.VoiceIPprecedence4.VideoIPprecedence5.BusinessIPprecedence6.InternetIPprecedence7.ConfigureR5'sinterfaceS0/0/1toshareits6.InternetIPprecedence7.ConfigureR5'sinterfaceS0/0/1toshareitsavailablebandwidthasperfollowing8.UsetheModularQoSCLIanduseclassnamesaspertheabove9.Usethematch-alloptionforallClass-10.Useonlythecriteria“matchipprecedence”forallClass-11.Incaseofcongestion,theVoicetrafficmustbesentinpriorityoverall12.Thelowlatencyqueuemayneverusemorethan20%ofthe14.OnlyincaseofcongestiontheVideotrafficmaynotexceed30%ofthe15.OnlyincaseofcongestiontheBusinesstrafficmaynotexceed30%of16.EnablethecongestionavoidancemechanismfortheBusinesstrafficusingweightfactorof10fortheaveragequeuesize17.TheInternettrafficshouldusetheremainingbandwidthwithno1.Kbps=Kilobits1.Kbps=Kilobitsper2.Usethefirstword(casesensitive)oftheabovetrafficdescriptiontonameclasses(ieclassControlclassVoicematchipprecedence6!class-mapmatchipprecedence!matchipprecedence!class-mapBusiness!class-mapInternet!classVoiceclassControlbandwidthper5classVideobandwidthper30classBusinessbandwidthper30classInternet!ints0/0/1max-reserved-bandwidth4.6FirstHopredundancy31.Considerthatusersare4.6FirstHopredundancy31.ConsiderthatusersareconnectedtoVLAN500onbothSW1andperthefollowing3.TheHSRPtopologymustfollowtheSTPtopology(i.e.thedefaultactivemustbethedefaultroot4.TheactivegatewayIPaddressisYY.YY.100.1/24andthestandbygatewayaddressis5.Usepriority120ontheactivegatewayandthedefaultpriorityonthe7.ThestandbygatewaymusttakeovertheactiverolewhentheactivelosesreachabilitytotheBB1subnet8.Theprimarygatewaymustrecoveritsactiverolewhenreachabilitytothesubnetis9.When5Hellopacketsaremissed,thesecondarygatewaymusttakeoveractiverolewithin110.MakesurenoIGPprotocolisrunningonVLANvlaninstance2vlan500!noshutipaddressYY.YY.100.2standby1ipYY.YY.100.254ipaddressYY.YY.100.2standby1ipYY.YY.100.254standby1preemptstandby1timersmsec2001vlaninstance2vlan500track1iproute/24reachabilityintvlan500noipaddressYY.YY.100.1standby1ipYY.YY.100.254standby1priority120standby1standby1timersmsec200standby1track1decrementshowtrack1.ConfigureSW1andSW2inordertorestrictaccessforVLAN500usersasperfollowing2.HTTP(fromanyuserworkstationtoanyremoteserver)isnotallowedofficehours(from09:00to16:59,Mondayto3.FTP(fromanyuserworkstationtoanyremoteserver)isallowedonlyeverynightforbackupbetween22:00to23:59andisnotallowedatany4.UDPtrafficisallowedonlyoutsidetheofficehours(everydayfrom17:00to5.AnyrequiredcontroltrafficmustbeallowedatanytimeandtheACLentry(-mustbeasspecificaspossible(i.e.specifythemustbeasspecificaspossible(i.e.specifytheLayer4withthecorrectnumberonthe6.SourcesinallACLentriesmustbeexplicitlyconfiguredtotime-rangeeveryday-udptime-rangeftpperiodicdaily00:00to!ipaccess-listextendeddenytcpy.y.100.0.055anyeqftptime-rangeftppermitipanyany!5.131.ConfigureSNMPversion3forthegroup“admin”onR1asperthe2.Locationis“San,Josie,US”,andthecontactis3.The“admin”group’sreadprivilegemustbecalled“adminview”andincludetheISOMIB4.The“admin”group’swriteprivi