CCIE Security Practice Labs

Section 9.0: IP Services and Protocol-Independent Features (10 points)

9.1. NTP (3 points)

1. Configure R7 as the NTP server with R2 and Sw1 as clients.

2. Configure strong authentication.

3. Make sure Switch1 is always NTP synchronized.

9.2. Congestion Management—QoS (4 points)

1. Configure QoS on the R4 WAN link for the following traffic in the following order:

   1. All Telnet traffic

   2. OSPF Routing protocol

   3. All ICMP traffic to VLAN6

   4. All web traffic

   5. All other traffic

2. Select a QoS technique that works in round-robin fashion, giving each queue a fair bandwidth share.

3. Increase the byte count to 2000 for the web traffic queue.

4. Configure the ICMP queue to be able to hold 40 packets enqueued at any time.

9.3. HSRP (3 points)

1. Sw1 should always be reachable in case any router ...