7/10 CCNP 300-410 PASS
I just finished the exam and wanted to share it with you all while I still remember it clearly. I had 3 experimental questions and 40 multiple-choice questions. There were no questions with drag-and-drop diagrams. There were two or three new multiple-choice questions. The experimental questions will have pre-configured settings, including configurations that do not meet the requirements of the task. You need to troubleshoot them. First, the first one is: (1) DHCP corresponds to q728 in the question bank. However, the topology of q728 in the question bank is DMVPN, not that topology. Please pay attention to this. I’ve included the correct topology below for your reference.
This question’s content is similar to the question bank: DHCP + IP SLA + FLOW.
TASK12: The network in R1’s pre-configured DHCP pool doesn’t match the TASK requirements, so we need to change it. We also need to configure an IP helper-address (the IP address of R1) on SW2’s VLAN interface. Then, initially, running `show ip int br` on R6 might not show the obtained IP address; `shutdown no` will show it.
TASK2: The pre-configured `track 5 ip sla 1 reachability` is actually `sla 5`, so we need to remove it and change it to `track 5 ip sla 5 reachability`. The floating route’s master route will also be missing `track 5`.
We need to remove `ip route 0.0.0.0 0.0.0.0 192.168.1.1`, otherwise, we can directly configure `ip route 0.0.0.0 0.0.0.0 192.168.1.1 track`. 5. The command before is still in TASK3. This question is relatively simple; just add an IP flow ingress under the interface. That completes the first experimental question.
(2) DMVPN This question is relatively simple. Most of the configuration is already set up, and the topology is almost identical to the question bank. The `transform-set` call is missing under the `crypto ipsec profile` on the hub side; complete it. IP authentication is missing under the tunnel on the B1/B2 side… (I forgot the rest). Anyway, it’s visible on the hub side. After completing it here, `show dmvpn` on the hub side will show the result.
(3) vrf+eigrp The topology for this question is the same as the question bank. Pay special attention to the `autonomous-system` command; if even one letter is missing, tab completion won’t work, so you must type the entire command. The question I took, besides the standard configuration from the question bank, also included additional steps on R3:
key chain <name>
key <number>
key-string <password name 1>
on the R3-R4 interface:
ip authentication mode eigrp 100 md5
ip authentication key-chain eigrp 100 <password name 1>.
Initially, I found that R1 couldn’t ping R4, and then the neighbor wasn’t up. After searching for a while, I discovered this configuration needed to be done on R4 to enable the neighbor.
The lab questions took a lot of time; I only had about 30 minutes left after finishing them. Luckily, I was familiar with the multiple-choice questions.
My overall feeling after the exam is that once you fully understand the entire principle of the lab, you can usually spot the errors directly by showing the run during the exam.
