几乎按题库答的题,除了以下几题:
F' ]4 k U9 e! k实验 OSPF CASE:
_; C3 S2 [: T# U QUESTION2 我选的A,实际考试中R1和R3之间serial连接已建立邻居关系,OSPF类型为NON_BROADCAST,timer 30 120 120
; p! y9 J8 j" X8 g3 q% U R1和R2之间serial连接,类型POINT_TO_POINT,timer 10,40,40。- L+ M3 b' \9 z3 }7 \2 Z
故排除B,C项。
9 n) h# X- `5 ^实验ROUTE MAP:& V+ i" O. A% Q" `9 S7 H
题目中all outbound HTTP traffic use the frame relay link when it is available.意思是在FR链路有效时走FR,否则走101.2。! ~* G" L7 R8 ?1 L& ^
测试发现set ip next-hop 10.1.100.2 10.1.101.2会报错,也就无法实现when it is not available 时走101.2! x: K& A3 n2 i7 ]
又测试了一下ip sla 命令也是不支持的,所以也不能用IP SLA 控制PBR选路。9 _8 A0 [* s x& A1 p2 Z
选择204:1 Y* ^- Z, O" I5 s9 [
题目要求选择两项,我选择了
2 d. s2 f# \) q1 V R(config-if)ipv6 traffic-filter xxx out# w; Z/ J q0 ^/ ^8 d8 O
R(config-line)ipv6 access-class xxx out
4 u- U/ P$ ^: c; f9 d' X选择197:- }/ X9 s7 m* k
真题应该是:In point to multipoint FR topology, which two methods ensure that all routing updates are receiving by all EIGRP routers within the FR networks (thoose two)?0 O; s8 y3 ]6 E/ H. J1 E
A.use subinterfaces
, N, k" d$ _$ |$ f5 L# `- ~ B.Disable split horizon
# ?' F$ [) r/ s; [- ^1 O C.use statistically defined EIGRP neighbors on the hub site$ A% N) o( Q' H1 q; g$ e
D.disable eigrp auto summary7 t, v6 ^) H/ T9 f" Z3 D! I
E. create separate address family
# ?" i4 L. L8 K8 ]0 I选择202:
6 l5 m) N6 ]0 w1 V6 S* {( Q 我选择的是It check the ingress access list
( K1 D# Y2 w# O4 Q/ b 依据:http://www.cisco.com/c/en/us/td/ ... secur_c/scfrpf.html; S+ w! c) R+ A# f/ S" l0 v
When a packet is received at the interface where Unicast RPF and ACLs have been configured, the following actions occur:1 q, n) n. Z* S* b9 P u) G
Step 1  Input ACLs configured on the inbound interface are checked. Step 2  Unicast RPF checks to see if the packet has arrived on the best return path to the source, which it does by doing a reverse lookup in the FIB table. Step 3  CEF table (FIB) lookup is carried out for packet forwarding. Step 4  Output ACLs are checked on the outbound interface. Step 5  The packet is forwarded. 可以想象的到uRPF需要查CEF表(是全局行为,查询量大),而ACL针对某个接口生效(部分行为,内容较少),必先查找内容较少的过滤器。 选择191: 我选了CE C:题图中source-interface f0/0,而ISP1(R2)无法获知R1内网细节,R1 ping 172.20.20.2 source f0/0肯定是ping不通的。 4 H0 m% q1 u- ^) r, k, L, g0 t
0 Z5 J J: f2 T6 ~8 z9 g
|