本帖最后由 andrewc 于 2018-10-12 11:36 编辑
5 J# G" m5 k+ u6 h3 z2 j
4 B9 I/ Q1 Q0 \+ S2 B0 q7 y* q! ]6 Q. e4 e" e# [1 m; g1 l" q: ]
6 q; @/ f! U- _# p% B& K– which tunnel technology provide multicast, security and simplicity ( ~5 P3 X4 W+ D4 B
1. Ipsec 2.gre over ipsec Other 2 Option * O/ W& v5 U5 _5 A
I think that the correct answer is “gre over ipsec”
. N$ \' K) k; i# a0 A- [( O3 |– Which options we have with debug crypto condition
: E0 D/ {7 ?% P* Y1. Destination address 2.isakmp profile name 3. Group
& }; u" V7 j6 T5 A! UI′m sure that “isakmp profile name” is ok I have doubts about what is the other option 5 o; e3 ]: d; P( Y- Z; q6 O3 s
– what are components of GRE packet ( select 2) ( j* s3 P! C- G" z7 ?2 a
1. GRE header 2. Data payload 3.othr 2 option 7 C0 Q& l/ p, ]1 v
GRE header is ok but Data Payload… I don′t remember if there was an option with “Outer ip header” 9 T+ K$ Y' H% }+ Z
– What are properties of GRE ( select 2) 1. Data encapsulation 2. Multicast support 3.other option
* c! V* y4 L1 o0 X! g1 GMulticast support is ok I have doubts “Data encapsulation” 7 ~6 B* K% W# M% ?+ _4 ?8 K
– what are requirements for GRe ( select 2,) 1. Protocol 47 should b allow 2. Destination of the tunnel should b reachable 3. Other options . ^/ f( w2 E( u4 O2 n; ]$ o/ k: |
I think that both are ok
! \, o' ^# d8 ^# u0 p" n– the question = Which login procedure will ask first
: y+ k7 q+ w; J0 _# P" pYou see a running config user logins.
3 X' I' v7 ~& W- H* ^aaa new-model aaa authentication default tacacs+ enable (in fact the correct must be aaa authentication login default tacacs+ enable ) aaa authentication login ONLYLOCAL local (I didn′t saw the list ONLYLOCAL ) aaa authentication pptp default radius local (in fact the correct must be aaa authentication ppp default radius local)
# R5 m% X: e+ n G7 C' ~username xxx password xxx - l. T6 c' Z; z8 K
line vty 0 4 password xxxxx
0 }- y7 I) z8 X' S/ Tline
4 T5 Z1 y$ S9 O! r5 bI dont know the answer 5 y- q/ L2 V& v8 z! `5 e
RAGHU October 10th, 2018 there was question about MPP , user was not able to login using telnet & j; m7 ~) `0 I, x3 Z
show management-interface
1 s( q- H, a" q' W+ ]Management interface FastEthernet0/0 Protocol Packets processed ssh 0 snmp 0
% V0 |7 u, G* y! k' joptions were
4 J3 ^' p. k+ g1 P+ @5 b1. mpp applied on wrong interface 2. MPP doesnt allow telnet by default 3. MPP is not configured for telnet 4. forgot other options 3 _1 F* g/ X0 @8 H
i chose 3 , not sure though
6 y. Q8 b/ N5 X8 [/ z3 ^+ S+ ~8 Q/ T* R- T: t _
7 K! d8 X" N$ y1 M" g7 d- X- I |