nerdexam
CiscoCisco

350-401 · Question #1247

350-401 Question #1247: Real Exam Question with Answer & Explanation

Lab Simulation 29 — Explanation Overall Goal You are completing a partially-configured Cisco switching environment at a new site. All three tasks converge on one goal: make SW20 a fully functional switch that bridges PC3 to both PC1 (via SW30) and PC2 (via SW10), using proper L

Submitted by hans_de· Mar 6, 2026Infrastructure

Question

Lab Simulation 29 Guidelines This is a lab item in which tasks will be performed on virtual devices. - Refer to the Tasks tab to view the tasks for this lab item. - Refer to the Topology tab to access the device console(s) and perform the tasks. - Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. - All necessary preconfigurations have been applied. - Do not change the enable password or hostname for any device. - Save your configurations to NVRAM before moving to the next item. - Click Next at the bottom of the screen to submit this lab and move to the next question. - When Next is clicked, the lab closes and cannot be reopened. Topology Tasks The operations team started configuring network devices for a new site. Complete the configurations to achieve these goals: 1. Configure Rapid PVST+ on SW20. 2. The trunk between SW20 and SW30 is not operational. Troubleshoot the issue and ensure PC3 can ping PC1 (10.10.100.10) across the link. 3. The LACP port channel between SW10 and SW20 is not operational. Troubleshoot the issue and ensure PC3 can ping PC2 (10.10.100.20) across the port channel. Note: No access is provided to SW10 or SW30. Resolve these issues by making changes only to SW20. Traffic on all trunks should be restricted to only active VLANs. Answer:

Options

  • taskComplete the network device configurations to achieve the following goals: 1. Configure Rapid PVST+ on SW20. 2. Troubleshoot the trunk between SW20 and SW30 to ensure it is operational and PC2 can ping PC1 (10.10.100.10) across the link. 3. Troubleshoot the LACP port channel between SW10 and SW20 to ensure it is operational and PC3 can ping PC2 (10.10.100.20) across the port channel. Traffic on all trunks should be restricted to only active VLANs.
  • prerequisitesConsole access is available for all required devices. Make changes only to SW20; no access is provided to SW10 or SW30. All necessary preconfigurations have been applied. Do not change the enable password or hostname for any device.

Explanation

Lab Simulation 29 — Explanation

Overall Goal

You are completing a partially-configured Cisco switching environment at a new site. All three tasks converge on one goal: make SW20 a fully functional switch that bridges PC3 to both PC1 (via SW30) and PC2 (via SW10), using proper Layer 2 redundancy and link aggregation. Because you can only touch SW20, every problem and its fix lives there.


Task 1: Configure Rapid PVST+

What it does

Rapid PVST+ (802.1w per-VLAN) replaces the default PVST+ (802.1D) STP mode. It converges in ~1–2 seconds instead of 30–50 seconds, eliminating long waits when a link fails or a port comes up.

Commands on SW20

SW20# configure terminal
SW20(config)# spanning-tree mode rapid-pvst

Why it matters

Without this, STP convergence is slow. When troubleshooting the trunk or port-channel in tasks 2 and 3, ports would sit in the Listening/Learning states for ~30 seconds before forwarding — making ping tests appear to fail even after you fixed the underlying issue.

What goes wrong if skipped

Pings may time out or flap during convergence, giving you a false negative during verification. Also, the exam task explicitly requires it.


Task 2: Troubleshoot the Trunk to SW30

Background

A trunk link carries multiple VLANs between switches using 802.1Q encapsulation. Common reasons a trunk "is not operational":

  • Encapsulation mismatch (dot1q vs. ISL)
  • Native VLAN mismatch
  • Mode mismatch (trunk vs. access or dynamic desirable vs. dynamic auto)
  • Allowed VLAN list doesn't include the required VLANs

Diagnosis first

SW20# show interfaces trunk
SW20# show interfaces <int> switchport

Look at: Mode, Encapsulation, Native VLAN, and VLANs allowed and active in management domain.

Typical fix (mode mismatch)

SW20(config)# interface <interface-facing-SW30>
SW20(config-if)# switchport mode trunk
SW20(config-if)# switchport trunk encapsulation dot1q   ! if required by platform
SW20(config-if)# switchport trunk allowed vlan add <active-vlans-only>

Restricting to active VLANs

The task says "traffic on all trunks should be restricted to only active VLANs." First identify which VLANs exist:

SW20# show vlan brief

Then restrict:

SW20(config-if)# switchport trunk allowed vlan <vlan-list>

This prevents unnecessary broadcast flooding across trunks for VLANs that have no active ports.

What goes wrong if skipped

PC3 cannot reach PC1 (10.10.100.10) because VLAN traffic cannot cross SW20↔SW30. Even if both switches are powered, without a working trunk the VLANs are isolated.


Task 3: Troubleshoot the LACP Port Channel to SW10

Background

An EtherChannel (port channel) bundles multiple physical links into one logical link for bandwidth and redundancy. LACP (802.3ad) is the IEEE standard for negotiating the bundle. Common failure causes:

  • One side is active, the other is on (LACP vs. static mismatch — LACP won't negotiate with on)
  • Channel-group number mismatch (doesn't actually break LACP, but worth noting)
  • Mismatched port parameters (speed, duplex, VLAN config, trunk mode)

Diagnosis first

SW20# show etherchannel summary
SW20# show interfaces port-channel <#>
SW20# show lacp neighbor

Look for flags: (D) = down, (P) = bundled in port-channel, (I) = stand-alone (not bundled).

Typical fix (mode mismatch — SW10 is active, SW20 is on)

Since SW10 uses LACP (active), SW20's ports must be active or passive — NOT on:

SW20(config)# interface range <ports-in-bundle>
SW20(config-if-range)# channel-group <#> mode active

Or passive (one side must be active):

SW20(config-if-range)# channel-group <#> mode passive

Also ensure the port-channel interface itself is trunking:

SW20(config)# interface port-channel <#>
SW20(config-if)# switchport mode trunk
SW20(config-if)# switchport trunk allowed vlan <active-vlan-list>

What goes wrong if skipped

  • If SW20 ports are set to on (static), they won't respond to LACP PDUs from SW10, and the bundle stays down.
  • PC3 cannot reach PC2 (10.10.100.20) because the only path between SW20 and SW10 is through this port channel.

Save Configuration

Always save before moving on — the lab explicitly requires it:

SW20# copy running-config startup-config

or

SW20# write memory

Failure to save means your changes are lost if the device reloads, and the grader may evaluate the startup config.


Verification Sequence

SW20# show spanning-tree          ! Confirm rapid-pvst mode
SW20# show interfaces trunk       ! Confirm both trunks are up, correct VLANs
SW20# show etherchannel summary   ! Confirm port-channel shows (P) flags, not (D)

Then confirm end-to-end:

  • PC3 → ping 10.10.100.10 (PC1 via SW30)
  • PC3 → ping 10.10.100.20 (PC2 via SW10/port-channel)

Memory Tips

TaskRoot cause patternFix keyword
Rapid PVST+Missing configspanning-tree mode rapid-pvst
Trunk downMode/encap mismatchswitchport mode trunk
LACP downon vs. LACP mismatchchannel-group X mode active

Mnemonic: "RTA" — Rapid STP, Trunk fix, Aggregation fix. Fix them in this order because Rapid PVST+ must be running before you verify that trunk/port-channel ports converge correctly.

Topics

#Rapid PVST+#VLAN Trunking#EtherChannel LACP#Layer 2 Troubleshooting

Community Discussion

No community discussion yet for this question.

Full 350-401 PracticeBrowse All 350-401 Questions