ccnp switch exam questions

ccnp switch exam questions

This mechanism is very similar to CISCO 's BackboneFast feature. BackboneFast Debug dhcp detail The static manually configured security address on the interface will not be converted to a sticky mac address. Experiment 1 : Basic experiment Router(config-router)# passive-interface int- type int-num Vlans in spanning tree forwarding state and not pruned Other configuration commands: Family Identifier ) Load balancing mode 16 The length of the AS_PATH is to influence the path selection. It is not recommended in the actual environment. Show pvlan mapping Configure RIP unicast updates: Network Next Hop Metric LocPrf Weight Path Default route 108 Ip prefix-list ABC seq 5 permit 0.0.0.0/0 le 32 Example 2 of ip community-list (logical relationship): [123].[7-9] Ip nat inside source route-map nat1 interface serial0/0 overload ip nat inside source route-map nat2 interface serial0/1 overload ip nat inside source route-map nat3 interface serial0/1 overload The MAC sublayer is responsible for the following tasks: Weight 10.10.10.0/24 ? 0 100 i ? BGP routing table entry for 172.16.0.0/16, version 3 4 For example, if you go to a destination and there may be multiple equal-cost paths, you may actually use one of them when forwarding data. Use this command to see which interface is actually used for traffic forwarding. Network The switch sends data frames according to the discovered outbound interface. ? DUAL AS provides a migration solution: Allow R2 's BGP process to take into account both AS numbers, 200 and 201 , of which 200 Authenticate Fa0/20 The above command, the switch will accept the carry option82 information while giaddr is 0 the dhcp message, and then do the relay. In this way, the address can be successfully obtained. If there are multiple routes from the same neighboring AS and multiple paths are available through Maximum-paths , all routes with the same cost are added to Loc-RIB. R2(config)# access-list 1 deny 192.168.3.0 R2(config)# access-list 1 permit any R2(config)# router rip Neighbor 10.1.23.3 send-community neighbor 10.1.23.3 route-map test out Followed by ACL to match traffic. 10.1.25.2 Detailed rules At this time, he himself will still forward if he receives the data packet to 3.0.0.0 , but will not forward to other rips. Access-list 1 permit 3.3.3.0 router rip [Experiment 3 ] Cancel detailed route suppression for a specific neighbor Access-list 1 deny 192.168.1.0 Now let 's do the following configuration on R2 : Configuration and implementation Match ip address prefix-list 1 set metric 200 12:11 12:1111 no-export this comm list, to delete the no-export , then Run RIP between R1 and R2 (declare direct connection and their respective LOOPBACK ). At this time , the update package sent by R1 has the source address of 192.168.12.1 . VID OSPF and BGP 100 Note that, EIGRP the metric is a mixed type, metric. 1 100000 100 255 1500 Parameters specified here, from left to right is the bandwidth, delay, load, reliability, the MTU . It can be flexibly set according to actual needs. After the above configuration is completed, R2 will be in the routing table. Route-map defaults to permit , the default serial number is 10 , the serial number is not automatically incremented, and the serial number needs to be specified. Only vlan1 and vlan10 Field name Experiment continued, after the above configuration, R4 has passed BGP learned from the R1 two of BGP routes. TYPE indicates what type of frame this is, such as Ethernet, Token Ring, etc. Tool overview 62 AS_PATH several commands Match ip address 1 set tag 10 Interface vlan 100 You can use the show cef interface command to check which load balancing mode is used. This command gives the CEF information configured on this interface . Switchport access vlan 10 interface fast0/24 Community-List. 11 the permit IP no-export (or no-export into NO-ADV ) We restore the experimental environment to the basic configuration: BGP neighbor relationships are as follows 1 Bgp bestpath as-path ignore Static routes Next we SW1 of the Fa0 / 20 interface, do switchport allowed vlan the Remove Trunk 10 , the vlan10 traffic pruned, this time the PC between can not ping pass, go R1 speaking about: Windows system), at the same time reply a Gratuitous ARP response to inform the peer that there is a duplicate IP address. Access-list 1 permit 10.1.1.0 The standard ACL active part and destination part use the source matching route prefix and use the destination part matching route mask. The above command only re-advertises OSPF NSSA routes into BGP. Acl-match matchlog —Logs packets based on the DAI ACL configuration. If you specify the BGP activity 1/0 prefixes, 1/0 paths, scan interval 60 secs AS Hops 1 Here we are talking about is the switcher, as we all know, is not recognized by the switcher Layer 3 packet, which they will not see a three-tier I head, but this does not affect a switcher own IP address. On the router, we configure the IP address of the physical interface of the router , and the second layer 10.1.13.1 About PBR The cost of the route. Portfast,uplinkfast, backbonefast Use the clear port-security configured command to clear all manually configured security address entries. Use the clear port-security all command to clear all security address entries. Route-map test permit 10 set community ? Vlan 100 ? : 000a.8a07.8280 IP layer connectivity. 2bb4c2a1 Example of multiplication characters: Ip dhcp snooping Switch(config-if)# switchport mode dynamic {auto | desirable} ( Optional non-transitive ) ------------------ 00:B0:64:04:09:99 Risk of routing policy configuration loss Before the DAI is deployed , if the ARP spoofing behavior occurs on the intranet , for example, the PC sends an invalid ARP packet, the switch cannot detect and defend the defensive action. *>i2.2.2.2/32 Configuring Example 6 Deploying Distribution Lists When Republishing Between Protocols Between R1 , R2 and Layer 3 switches, it is assumed to be a static routing environment. So now, we hope that users under R3 will flow in the direction indicated by the red dotted arrow when accessing the production server, and will flow in the direction of the blue arrow when accessing the office server. Passing the value of Tag Penalize mode shutdown (enter err-disable state) while sending an SNMP trap * i100.0.1.0/24 You can also use the show ip dhcp bingding to capture the client-identifier of the client on the server. All clients in the route reflection cluster should establish IBGP connections with and only with all RRs in the cluster. 100.0.1.0 the BGP route, preferably up to R5 . OSPF . In this way, for R4 , it goes to 192.168.1.0 , there is a sub-optimal path , that is, around the long way, take R2-R3-R3-R5 Corresponding hwidb fast_if_number 4 Corresponding hwidb firstsw->if_number 4 Internet address is 10.1.12.2/24 Offset-list { access–list-number | name } {in|out} offset [ interface-type interface-number ] Routing time: The time elapsed since the last time the routing entry was modified. The routing time is reset to 0 each time the routing entry is modified . / / This is used to match 11 routes Bgp dampening network redistribute Lab topology and description As mentioned earlier, DAI performs ARP legality verification by means of the DHCP snooping binding database . Another basis for legality verification is the manually configured ARP ACL . IP address, and then take the destination IP address to look up in its own routing table. After finding the "best match" entry, the packet is forwarded according to the outbound interface or next hop IP indicated by the routing entry . This is the IP route. ( IP routing ) . And each router maintains a routing table locally. It takes effect on routes re-advertised from other dynamic routing domains. It does not take effect on direct routes (still 0 ) So far, we have completed the basic configuration, then can ping the same 100.0.1.1 and 2.1 from R4 ? After the trial , we must get a negative answer. This is because there is no route in AS345 on R1 and R2 , that is, the backhaul route has a problem. In this topology, we can configure the backhaul route on R1 and R2 or Default route to complete the test of the experiment It is recognized that the attributes must be followed, and the source of routing updates is clarified. OSPF and OSPF The configuration of R5 is as follows: ? On R1 , ip route 1.0.0.0 255.0.0.0 null 0 then ip defaut-network 1.0.0.0 , then R2R3 will learn the default route Add all ORIGINATOR_ID is a 32-bit value created by a route reflector . This value is the IBGP routerID of the route initiator in the local AS . Note that this initiator is not necessarily the initiator of this route (there is experimental verification below), if the initiator finds its RID In the received route About IP Routing 5 Route filtering or execution strategy during redistribution Routing via 192.168.12.1, Serial0/0 DTP 15 16 bits Neighbor 10.1.23.2 remote-as 200 Will be reflected to other clients, non-clients and EBGP neighbors. Redistribute routes to the protocol After receiving the BPDU sent by SW3, SW2 stops sending its own BPDU. Select the route with the smallest neighbor IP address ( the address of the neighbor in the neighbor configuration of BGP , that is, the update source IP of the neighbor ) ^$ OSPF Passive interface The bigger the priority Too many neighbors, managing these IBGP adjacencies will be a challenge and burden the device. Fortunately, we have two measures to help solve the problem, 1 is the route reflector 2 is federated. Ip arp inspection limit rate none , is unlimited Wherein SW1 is as follows: Decision summary 100 100 i RIPv2 35 1 On 100:200 , 100 of which will not be said,ccnp switch exam questions, AS200 said that this conditional route is for AS200 . Note that the main TC while timer is timed on the port, and the BPDU sent by the port will be set by the TC bit , and the BPDU will also be sent out from the root port. CAM table ORIGINATOR_ID and CLUSTER_LIST 3.3.3.3 port-security does not support etherchannel the port-channel interfaces Set community none router bgp 3 In this mode, a data flow (Flow) in the first packet (Packet) will be placed into the cache system (system buffer). The destination address to the routing table will get a match query , the processing of the router device (CPU or Processer) while for CRC check , check whether the packet correctly . then Layer packet MAC address will be rewritten , replaced by the next-hop interface MAC address, this process will continue , for this data flow (flow) in the first 2 th, . 3 packets ...... same operation , comprising a routing table is rewritten MAC address , CRC checking. This method is undoubtedly the most delayed , because it uses the system buffer and processor to process each received packet .But we still have the opportunity to use this type of exchange , such as when performing load balancing based on each package , or when debugging ip packets .