- 积分
- 737
- 鸿鹄币
- 个
- 好评度
- 点
- 精华
- 注册时间
- 2012-8-24
- 最后登录
- 1970-1-1
- 阅读权限
- 40
- 听众
- 收听
中级工程师
|
QUESTION 11
Two routers configured to run BGP have been connected to a firewall, one on the inside interface and one on the outside interface. BGP has been configured so the
two routers should peer, including the correct BGP session endpoint addresses and the correct BGP session hop-count limit (EBGP multihop). What is a good first
test to see if BGP will work across the firewall?
A. Attempt to TELNET from the router connected to the inside of the firewall to the router connected to the outside of the firewall. If telnet works, BGP will work,
since telnet and BGP both use TCP to transport data.
B. Ping from the router connected to the inside interface of the firewall to the router connected to the outside interface of the firewall. If you can ping between them,
BGP should work, since BGP uses IP to transport packets.
C. There is no way to make BGP work across a firewall without special configuration, so there is no simple test that will show you if BGP will work or not, other than
trying to start the peering session.
D. There is no way to make BGP work across a firewall.
这题奇怪,有的版本答案是A,有的版本答案是C.
个人认为:
1.防火墙铁定能支持BGP 通过的,C不对??
2.防火墙上BGP相关组播端口必须开放,仅因为TELNET或ICMP通就认为网络支持BGP也不科学.
到底答案是什么?????
|
|