931是个神奇的数字:-)

popeye2008

请看近期300-135战报：
# I& G2 R( H( m; ?- x看来得931左右分数的人不少啊，这个是不是题库的极限啊
- y+ p$ t$ e( f

tony10395

不是  不過我只確定一題答案有錯  ipsec拖圖
$ a' U- {: Y8 w7 g- t
3 l+ R/ H: |; p- m$ W) h
還在找其他的
; Z& |4 I9 W4 {$ ^

blk

tony10395 发表于 2019-6-25 10:03
7 U2 F* Z  h3 T不是  不過我只確定一題答案有錯  ipsec拖圖

請問有答案嗎?

coolbo66

blk 发表于 2019-6-25 10:16
6 [$ T0 D  ^+ `. l3 Z5 a7 ?% c請問有答案嗎?

大家能不能一起研究一下哪里有误

彷徨中的鱼

过来学习

blk

1 L" _5 \/ F0 t: L) J, I* t& O% v
  C/ }/ v# W: \R1#show crypto isakmp sa detail
! I: s" s+ m0 S: C+ Y; jCodes: C - IKE configuration mode, D - Dead Peer Detection
. T) q8 m/ `7 u8 m' g K - Keepalives, N - NAT-traversal
T - cTCP encapsulation, X - IKE Extended Authentication
psk - Preshared key, rsig - RSA signature
renc - RSA encryption
# R+ u/ J; z% E0 X# zIPv4 Crypto ISAKMP SA
. m- Y9 O& L/ R; u7 k& i0 uC-id Local    Remote   I-VRF Status Encr Hash Auth DH Lifetime Cap.
1001 10.1.1.1 10.1.1.2       ACTIVE 3des md5  psk  2  23:58:03
: M6 A1 h/ g4 |3 h: v Engine-id:Conn-id = SW:1
  z$ c% v1 Y( \" N: L8 j
R1#show crypto isakmp peers
Peer: 10.1.1.2 Port: 500 Local: 10.1.1.1
2 ?1 r+ G7 Z9 a8 V Phase1 id: 10.1.1.2
0 z4 {2 [' y. A% h* A
4 S0 F! m  F0 ]5 y) b: |debug crypto isakmp

$ `2 n& @6 i- M; z" v' R3 K5 `! wThis output shows an example of the debug crypto isakmp command.
% r7 M: L. {. `$ `" G7 `
  W3 q: }9 ?0 Y2 P8 f& B    processing SA payload. message ID = 0
5 H4 {. g4 H& M    Checking ISAKMP transform against priority 1 policy
' r. `2 ?- y( S7 ~4 M! q- a        encryption DES-CBC
              hash SHA
        default group 2
        auth pre-share
) h! h2 y3 z* f5 Y        life type in seconds
  h8 P) m; G  A$ i        life duration (basic) of 240
    atts are acceptable. Next payload is 0
7 t9 [  ^6 X7 B+ N1 S' w    processing KE payload. message ID = 0
    processing NONCE payload. message ID = 0
    processing ID payload. message ID = 0
  }1 m- T" c8 K4 V( c. W    SKEYID state generated
    processing HASH payload. message ID = 0
    SA has been authenticated
6 f. Y; a0 {$ D& ^! z    processing SA payload. message ID = 800032287
1 A; c+ a; N9 N
& E4 P& F( f9 j/ y% Y( g; `; P) ~* f$ W
- j( ^4 x/ S* c5 m! w' ~: z我想SHOW EIGRP 和 SHOW CRYPTO ISAKMP PEERS 那2個是沒有爭議的
我相信是爭議在show crypto isakmp sa detail  和debug crypto
isakmp

tony10395

對 還有選擇題 VTY登入那題也很怪

kunpengmai

6月24日考我都是931的，而且连续3题TT是IPV4 R4上有问题，考到我怀疑人生系列

blk

tony10395 发表于 2019-6-25 15:27
對 還有選擇題 VTY登入那題也很怪

9 c; U3 E  w' @那個似乎沒問題, 我在實機試過了~~
4 Q1 K5 j" b% x' s

resetct.

haha

gudazh

kunpengmai 发表于 2019-6-25 15:31
; m; R6 E0 U$ j2 z# p6月24日考我都是931的，而且连续3题TT是IPV4 R4上有问题，考到我怀疑人生系列

哈哈怀疑人生了

blk

我找到正確答案了~~~
https://www.cisco.com/c/en/us/su ... troubleshoot-00.pdf
) o& a8 D8 c# O* d" N7 o5 P- ZBGP > routing adjacency
show crypto isakmp sa detail > lifetime and the time for next renegotiation
1 b4 r" m4 W1 z3 A+ Cshow crypto ipsec sa peer > traffic flows in only one direction
debug crypto isakmp > verify that the spoke router is (s)?ending udp

blk

我找到答案了~
https://www.cisco.com/c/en/us/su ... troubleshoot-00.pdf
bgp > routing adjacency
3 [) x; o2 A9 i9 lshow crypto isakmp sa detail > lifetime and the time for next renegotiation
show crypto isakmp sa peer > traffic flows in only one direction
1 f# K. b4 H5 [; a: n! Z' Gdebug crypto isakmp > verify that the spoke router is (s)?ending UDP

hor5651

thank you !!!

tony10395

不過光這題就會被扣那麼多分嗎?