A customer of an ISP requests support to setup a BGP routing policy. Which BGP attribute should be configured to choose specific BGP speakers as preferred points for the customer AS?
Answer(s): D
R1 serves as a route reflector on a BGP-enabled network and has dual RPs installed. To ensure that all routes have been processed when an RP fails over, R1 must send the router request to all peers configured with NSR to refresh the route database. Which action completes the implementation?
Answer(s): C
Enabling bgp sso route-refresh-enable ensures that when the standby RP takes over under NSR, R1 automatically issues Route Refresh messages to all BGP peers so their full route tables are re-advertised and the RIB/RIB-IN stays synchronized.
Refer to the exhibit. A network engineer just upgraded the Cisco IOS XE Software to the newest version on OSPF routers R1 and R2, added the point-to-point network type under Gi0/0 on R2, and configured ip route 192.168.10.0 255.255.255.0 192.168.1.2 on R1. After the engineer restarted the routers, R1 entered the Exstart state with its neighbor, but the adjacency has not been established. Which action must the engineer take to resolve the issue?
Answer(s): A
Because R1's GigabitEthernet0/0 is using the default (broadcast) network type while R2 was manually set to point-to-point, their OSPF option bits don't match and the adjacency can't progress past Exstart. Restoring R2's interface to broadcast (so both sides use the same network type) allows them to elect DR/BDR and finish the adjacency.
Refer to the exhibit. The network manager asked a network engineer to increase data-plane security on an Edge router connected to the internet with these requirements:Allow incoming HTTP traffic from any source to the Web server with IP address 192.168.1.10.Allow incoming SSH traffic from the management host with IP address 10.0.0.10.Block incoming Telnet traffic from all sources.Which action must the engineer take to meet the requirements?
You meet those requirements by applying an IP ACL on the internet-facing interface (Gi1/0) that permits TCP port80 to 192.168.1.10, permits TCP port22 from 10.0.0.10, explicitly denies TCP port23, then permits any other traffic.ip access-list extended INTERNET-INpermit tcp any host 192.168.1.10 eq 80permit tcp host 10.0.0.10 host 192.168.1.10 eq 22deny tcp any any eq 23permit ip any any!interface GigabitEthernet1/0ip access-group INTERNET-IN in
Refer to the exhibit. A network operations team is implementing eBGP on the service provider network. Data traffic between routers R1 and R4 must use the R2-R3 link, which connects AS 65101 and AS65201. iBGP sessions with adjacent routers are up on 10.10.10.1 and 10.10.10.4. The team is now updating the configuration for eBGP peers on routers R2 and R3. Which action must be taken to meet the requirements?
Answer(s): B
Because R2 and R3 are peering eBGP over their loopback interfaces, you must enable ebgp-multihop so that the TTL isn't limited to 1 hop. For example on R2:router bgp 65101neighbor 10.0.0.6 remote-as 65201neighbor 10.0.0.6 update-source Loopback0neighbor 10.0.0.6 ebgp-multihop 2- and the mirror command on R3 - allowing the eBGP session to form over the indirect link.
Refer to the exhibit. Company A has two offices that communicate via a service provider in AS 65516. CE1 arid CE2 provide connections to the service provider from site 1 and site 2 respectively. Both customer sites use BGP as the PE-CE routing protocol. Which configuration must the engineer apply to ensure that traffic passes between the two sites?
Because both CE routers share AS65514, routes learned via the SP (AS65516) carry AS65514 in their AS-PATH and would be rejected as loops. Applying neighbor <PE-IP> allowas-in on the CE lets it accept prefixes that contain its own AS in the path, so CE1 can learn the Site2 routes (and likewise you would mirror it on CE2 for Site1).CE1(config)# router bgp 65514CE1(config-router)# neighbor 192.168.1.2 allowas-in
SIMULATIONGuidelinesThis is a lab item in which tasks will be performed on virtual devices.Refer to the Tasks tab to view the tasks for this lab item.Refer to the Topology tab to access the device console(s) and perform the tasks.Console access is available for all required devices by clicking the device icon or using the tab(s) above theconsole window.All necessary preconfigurations have been applied.Do not remove any existing configurations from the devices, only those necessary to make the appropriatechanges required to fulfill the listed tasks.Do not change the enable password or hostname for any device.Save your configurations to NVRAM before moving to the next item.Click Next at the bottom of the screen to submit this lab and move to the next question.When Next is clicked, the lab closes and cannot be reopened.TopologyTasksAlpha company has decided to implement OSPF. As per the network design, it is a multi-Area OSPF configuration both for OSPFv2 and OSPFv3. The engineer has already completed the configuration on R2. The below tasks are needed to complete the implementation.Task 1:Configure OSPFv2 on R1 and R3 and advertise all networks.Process ID = 1Router ID = Loopback 0Passive Interface = EthernetTask 2:Configure OSPFv3 on R1 and R3 and advertise all networks.Process ID = 10Router ID = Loopback 0Passive Interface = Ethernet
Task 1: OSPFv2 on R1 and R3R1:R1(config)# router ospf 1R1(config-router)# router-id 1.1.1.1R1(config-router)# passive-interface Ethernet0/0R1(config-router)# network 192.168.1.0 0.0.0.255 area 5R1(config-router)# network 10.1.0.0 0.0.0.255 area 5R1(config-router)# network 1.1.1.1 0.0.0.0 area 5 !--Loopback0 R1(config-router)# exitR1(config)# interface loopback0R1(config-if)# ip address 1.1.1.1 255.255.255.255R1(config-if)# exitR1(config)# write memoryDefines OSPF process1 with router-ID set to Loopback0, advertises each directly-connected IPv4 network into area5, and suppresses hellos on the LAN-facing Ethernet0/0.R3:R3(config)# router ospf 1R3(config-router)# router-id 3.3.3.3R3(config-router)# passive-interface Ethernet0/0R3(config-router)# network 192.168.3.0 0.0.0.255 area 10R3(config-router)# network 10.2.0.0 0.0.0.255 area 10R3(config-router)# network 3.3.3.3 0.0.0.0 area 10 !--Loopback0 R3(config-router)# exitR3(config)# interface loopback0R3(config-if)# ip address 3.3.3.3 255.255.255.255R3(config-if)# exitR3(config)# write memorySame process1 on R3, router-ID from Loopback0, all local networks into area10, and Ethernet0/0 passive.Task2: OSPFv3 on R1 and R3R1:R1(config)# ipv6 unicast-routingR1(config)# interface loopback0R1(config-if)# ipv6 address 2001:DB8:1::1/128R1(config-if)# exitR1(config)# ipv6 router ospf 10R1(config-rtr)# router-id 1.1.1.1R1(config-rtr)# passive-interface Ethernet0/0R1(config-rtr)# exitR1(config)# interface Ethernet0/0R1(config-if)# ipv6 ospf 10 area 5R1(config-if)# exitR1(config)# interface Ethernet0/1R1(config-if)# ipv6 ospf 10 area 5R1(config-if)# exitR1(config)# interface loopback0R1(config-if)# ipv6 ospf 10 area 5R1(config-if)# exitR1(config)# write memoryEnables IPv6 routing, assigns a /128 on Loopback0, creates OSPFv3 process10 with router-ID from Loopback0, makes Ethernet0/0 passive, and binds each interface's IPv6 subnet into area5.R3:R3(config)# ipv6 unicast-routingR3(config)# interface loopback0R3(config-if)# ipv6 address 2001:DB8:3::3/128R3(config-if)# exitR3(config)# ipv6 router ospf 10R3(config-rtr)# router-id 3.3.3.3R3(config-rtr)# passive-interface Ethernet0/0R3(config-rtr)# exitR3(config)# interface Ethernet0/0R3(config-if)# ipv6 ospf 10 area 10R3(config-if)# exitR3(config)# interface Ethernet0/2R3(config-if)# ipv6 ospf 10 area 10R3(config-if)# exitR3(config)# interface loopback0R3(config-if)# ipv6 ospf 10 area 10R3(config-if)# exitR3(config)# write memoryMirrors R1's OSPFv3 setup on R3 with process10, router-ID from Loopback0, passive LAN interface, and all IPv6 subnets into area10.
SIMULATIONGuidelinesThis is a lab item in which tasks will be performed on virtual devices.Refer to the Tasks tab to view the tasks for this lab item. Refer to the Topology tab to access the device console(s) and perform the tasks. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.All necessary pre-configurations have been applied.Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.Do not change the enable password or hostname for any device.Save your configurations to NVRAM before moving to the next item. Click Next at the bottom of the screen to submit this lab and move to the next question. When Next is clicked, the lab closes and cannot be reopened.TopologyTasksBGP peering has been pre-configured. Perform the following control-plane security features given the topology below.Task 1:Configure MD5 authentication between the BGP peers across both R1 and R2's Loopback 0 interface using the password Ci$c012345!!Task 2:Configure five as the maximum number of BGP prefixes allowed to be leaned between R1 and R2.Initial configuration with IP addressing has been completed. The candidate must not make any changes to the configurations except to fulfill the tasks listed above.
BGP MD5 authentication is enabled per-neighbor by configuring a shared password on both peers; it must match on each side or the TCP session will not establish. The maximum-prefix feature protects the control plane by limiting how many routes a neighbor can advertise/receive before triggering the configured action. Apply both settings on each router for the Loopback0-based eBGP neighbor.R1 (AS 100), neighbor = R2 Loopback0 (10.2.2.2):router bgp 100neighbor 10.2.2.2 password Ci$c012345!!neighbor 10.2.2.2 maximum-prefix 5R2 (AS 200), neighbor = R1 Loopback0 (10.1.1.1):router bgp 200neighbor 10.1.1.1 password Ci$c012345!!neighbor 10.1.1.1 maximum-prefix 5
Post your Comments and Discuss Cisco 350-501 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-501 content, but please register or login to continue.