- 积分
- 125
- 鸿鹄币
- 个
- 好评度
- 点
- 精华
- 最后登录
- 1970-1-1
- 阅读权限
- 20
- 听众
- 收听
助理工程师
 
|
发表于 2018-5-25 21:15:20
|
显示全部楼层
& L! y7 C1 S* @6 c% l" }, _& Q+ m0 j
請問題目是像這樣嗎?
% N# T4 ^% S- i0 Q+ g3 l8 e/ j0 q9 o) ]& M
QUESTION 1
& b2 ^& Q4 A$ q2 |- yThe following commands are issued on a Cisco Router: # C, k8 `. @8 s. ]" |, f
Router(configuration)#access-list 199 permit tcp host 10.1.1.1 host : r% \4 I0 G2 J$ o
172.16.1.1
4 w% t1 B% x% C V# u' U1 BRouter(configuration)#access-list 199 permit tcp host 172.16.1.1 host ( N' W7 @5 X! g- O2 j, X
10.1.1.1
& K9 C+ V- H( URouter(configuration)#exit 5 H% N# C, M5 v& {) @ A
Router#debug ip packet 199
9 y' S, u9 k5 \+ T# m( yWhat will the debug output on the console show?
], W" D- `# M- v7 @, J$ bA. All IP packets passing through the router ; J! ] d( [$ B' C
B. Only IP packets with the source address of 10.1. 1.1
1 _0 k+ v# K' C8 ZC. All IP packets from 10.1.1.1 to 172.16.1.1
p+ }) [ D: T& y( M: @1 \7 R0 lD. All IP Packets between 10.1.1.1 and 172.16.1.1
/ N8 u/ o$ n; PAnswer: D
% [8 j" C6 d1 {& c( p6 d6 F
( ]: s7 E! Q% T# c8 u! u3 OExplanation:
+ w9 A# C# @2 [% f6 D3 D+ a9 |In this example, the "debug ip packet" command is tied to access list 199, specifying which IP
- i3 O5 n! D- T. opackets should be debugged. Access list 199 contains two lines, one going from the host with IP
* R5 Q( g2 F l yaddress 10.1.1.1 to 172.16.1.1 and the other specifying all TCP packets from host 172.16.1.1 to
+ p/ k) O4 }, ~' O/ V c, i10.1.1.1.
$ a/ u4 D% F! O; ^: ]) s; a% u7 Q
. F7 [7 ~2 y5 T: BQUESTION 2 ; F9 `) Y) n4 R+ i7 ^% Q2 c1 m
What level of logging is enabled on a Router where the following logs are seen? %LINK-3- ]6 c: i9 D# ?# L8 T. C% A8 i
UPDOWN:
0 G0 h/ D% ]- d: |2 RInterface FastEthernet0/1, changed state to up % LINEPROTO-5-UPDOWN:
0 J! h" M! k7 h; r( y4 hLine protocol on Interface FastEthernet0/1, changed state to up , c4 m) i1 E! A' j
A. alerts
- f/ C4 c2 F, k5 _B. critical 6 V+ e+ T4 m5 I' S; |6 h+ i
C. errors
& b5 W2 g( P( O: J2 ^) d8 kD. notifications
7 X* ~' C! w; sAnswer: D
7 Q5 m% |- ?5 [& d D: C+ h0 a4 c* L1 y$ k# Y1 d, k2 g8 l
Explanation:
* \1 g: d; s, J; n$ d! ICisco routers, switches, PIX and ASA firewalls prioritize log messages into 8 levels (0-7), as
! `5 h5 S3 K( t; T# f8 Fshown below: 6 }+ Z9 p# i* ^/ Q" }/ c, A# \
LevelLevel NameDescription
/ V. q5 H+ Y6 V5 F* k0 Emergencies System is unusable
U7 [- D0 n; f* F. I: S1 Alerts Immediate action needed 7 n2 n+ B& }) Z8 i2 A
2 Critical Critical conditions
' F' Z, x( S ~) v# v" K3 Errors Error conditions
# o1 b3 J+ i) V9 J4 Warnings Warning conditions
# E9 W, U5 d5 g1 ~" w3 O4 u. P5 Notifications Informational messages . H. C, Z# u0 C% m: q: S
6 Informational Normal but significant conditions
" [+ i4 R( M8 D. [0 ^9 |7 Debugging Debugging messages 9 o4 e; w& ~" m: ?
When you enable logging for a specific level, all logs of that severity and greater (numerically & x$ {4 M6 z Z L5 ?% B5 F
less) will be logged. In this case we can see that logging level of 3 (as seen by the 3 in "LINK-3-
, `* f3 ]6 _; k6 B9 ?2 ZUPDOWN") and level 5 (as seen by the 5 in "LINEPROTO-5-UPDOWN") are shown, which ! u, i. j# ~7 l( h b
means that logging level 5 must have been configured. As shown by the table, logging level 5 is ' X5 `+ A- y4 \' f# J! ^3 w5 }
" w; C% E9 W3 B' W- O* a* L7 g2 NQUESTION 3
. G! C/ I, d' J- }7 A) Z9 o8 `( nYou have the followings commands on your Cisco Router: 9 Z% ?; |" u# o9 q# `4 [) r
ip ftp username admin : ~' U& _' }. t5 Q: Z
ip ftp password backup
+ E2 I" V; R1 F3 i5 g! w$ tYou have been asked to switch from FTP to HTTP. Which two commands will you use to replace
9 b& r$ ~- N0 [4 t( Jthe existing commands? # r- {9 e! n1 B$ A4 J- {# [
A. ip http username admin
3 I0 g7 H4 V0 o2 f6 MB. ip http client username admin 2 Z- u' R, Y9 C8 t
C. ip http password backup ; `. v- E8 @/ ^( z1 T2 M) ]
D. ip http client password backup 9 O& N3 o. c" I! p, j4 W
E. ip http server username admin ) j' ^3 R# c' f* n
F. ip http server password backup
" m& C' H; e" @! h z( yAnswer: BD ) p1 d- F0 G( J2 F5 _& A
) m3 F; M2 d. t+ ~
Explanation: v% q8 J2 V" }+ F0 ?* t
Configuring the HTTP Client
* }( q4 J1 f, rPerform this task to enable the HTTP client and configure optional client characteristics. The
; D* X7 L5 a6 I- Ostandard HTTP 1.1 client and the secure HTTP client are always enabled. No commands exist to
& J% l$ a# }1 P% r1 |% j" edisable the HTTP client. For information about configuring optional characteristics for the HTTPS
: }* W! E0 S; |" ?3 Uclient, see the HTTPS-HTTP Server and Client with SSL 3.0, Release 12.2(15)T, feature module. |
|