Here's the latest CCIE DUMPS, stable and cheap.

1. Question: The interface is turned on authentication and it can see the mac address learned on the interface by showing mac before authentication. If the interface's device is authenticated , dose show mac can't see the device? Answer: This can be resolved by the following command: show dot su 2.  Question:  Turn off mac address learning on SVI interface Answer: The mac address learning function cannot be turned off on the SVI interface, the physical port and the global can be turned off. 3. Question: Do i find two mac addresses for the switch? Answer: The switch has two mac addresses, one is two-tier, the third-tier mac is two-tier mac plus 1 show menber sees the second floor. 4.  Question:  How do I view my device's mac table usage statistics? Answer: Use the command: show mac count 5. Question: Will vrrp's virtual gateway mac change? Answer: There will be no change in the same vrrp group, 00-00-5e-00-01-XX to indicate that the next two bits of XX

1. Question: Does ip source guard cause cpu to rise? Answer: No, ip source guard is hardware-based, and filtering the ip message smac plus ip that does not conform to the dhcp snooping table item does not cause cpu to rise. 2. Question: What is the difference between source-based ip and source ip and mac? Answer: If the port filtering mode is source-based ip, mac and vlan can be configured at will when configuring a static legitimate entry based on the port. If the port filtering mode is configured for source-based ip-mac, the mac and vlan must be precisely configured correctly when configuring port-based static legitimate entries. 3. Question: What is the hardware binding entry configured by ip source guard? Answer: The hardware binding entry for the ip source guard configuration is loaded in the same software table item as dhcp Snooping. Remember to ingest the table item signed for static configuration. 4. Question: How do Isee the delegated status of the ipv6 stateless

1. Question: Why does the SVI interface down use ACL that cannot take effect? Answer: (1) Check ACL configuration (2) Confirm the direction of the ACL call (3) Confirm whether the physical interface for data communication has invoked the ACL rule 2. Question: Does the switch block message information such as port number 1194? Answer: The switch does not block the message information of the port number identification by default unless the acl is set and the positioning switch filters the information to see if the acl is set. 3. Question: Policy route calls route-map, can match int-interface be used in the match field? Answer: The  route-map match and interface is called when the route is republished. The meaning of matching the interface and the route-mapmatch field is not a s-interface when the route-map field is called with a policy route. 4. Question: How does the switch do the source in and out? Answer: Can be partially implemented in the pBR way, the switch itsel

1. Question: What will the port security interface do if it is configured with the switchport port-security shutdown command? Answer: The interface is automatically closed and the interface state is disable. 2. Question: What forms of port security support? Answer: Port security support: (1) ip-mac (2) Ip (3) Mac 3. Question: Can port security limit the number of mac addresses? Answer: Yes, the number of port security default secure mac addresses is 128 and limitther on the number of mac addresses configured by the command is: Switch (config-if) s switchport port-security maximum 10 This port limit contains up to 10 secure mac addresses 4. Issue: Priority of port security violations Answer: When port protection is turned on, the default violation rule for ports is protect. Which violation is used, depending on the specific needs and on the level of punishment. Also, depending on the protect. 5. Question: What is the difference between a tier two-tier secure add

1. Question: STP View Command: What does the meaning of the p2p and shar of type respectively? Answer: Type field and link capability related, directly connected are p2p, half duplex automatically recognized as shar. 2. Question: What does a NAK message appear in the DHCP? Answer: NAK: No Answer Message      When the terminal sends a request message to the server, the server verifies that the ip address resource is allocatable . If not, sends a NAK message. The terminal must re-launch the discovery message. 3. Question: How do the switch configure address recycling that has been allocated? Answer: clear ip dhcp binding s ip (clear dhcp binding table)      Address switches that have been assigned cannot be recycled directly and can only wait for the address on the other side of the computer to expire to reapply for assignment or manually release the terminal ip address. 4. Question: What is it like to add 01 before show ip dhcp binding is added to each terminal mac addr

1. Question: Is the switch docking virtual machine unreachable? Answer: The data sent by the VM cluster may be a vlan tag. The interface of the switch is configured with a trunk and the corresponding vlan is created. 2. Question: Under the interface, is sw mode trunk  reported incorrectly? Answer: (1) Check if there are any configurations on the port (2) Determine the role of the port 3. Question: The physical interface has been configured as the mirroring destination port. Can you also add this physical interface to the member ports of the aggregation port? Answer: Configuration is not supported. A physical port is configured as a mirroring destination port. It is not supported to add the physical port to an aggregation group. 4. Question: What is the difference between dynamic and static aggregation applications? Answer: Dynamic aggregation can dynamically discover link failure, avoid static aggregation, single line is not accessible (e.g. although switch side up, du

1. Question: Can I mirror the physical ports in the aggregation port separately? Answer: The member ports in the aggregation port cannot be used as mirror destinations independently. 2. Question: How many one-to-many mirrors can I configure? Answer: You need to pay attention to the number of configured interfaces of mac-loopback. If more than one configuration command is used, the network will be disconnected. 3. Question: Image data only receives one-way data from the mail? Answer: (1) Whether the source port is both-way traffic. (2) Whether the port data stream is full (including source port, MAC loopback interface, destination interface) (3) The receiving and sending protocols of the mail are POP3 reception and SMTP transmission. 4. Problem: In the scheme of dynamic spoofing, ip dhcp snooping + DAI, if only DAI is configured, is ip dhcp snooping network normal? Answer: The network will not work, and there is no legal arp entry on the switch. 5. Question: Is the

1. Question: What standard protocol is used for port aggregation? Answer: Standard Protocol for Port Aggregation Ten 802.3ad 2. Question: The switch has done port aggregation to connect to the computer. Can the computer be used normally? Answer: The dynamic aggregation of the switch is connected to the computer. This interface cannot be used normally. The static aggregation does not need to be negotiated. The configuration can take effect immediately. The static aggregation configuration can be used normally after the terminal is connected. 3. Question: The aggregate interface modifies the MTU value. Does the MTU value of the physical interface change? Answer: Modify the MTU value on the aggregation interface. The MTU value of the physical interface is still the default value. 4. Problem: Static link aggregation, one end is unplugged, and the other side is still up, causing the data not to switch to another line. Answer: Because the middle is a photoelectric converter, t

1. Question: When dhcp v6 is configured, the connected terminal will automatically obtain an ipv6 address. How can I cancel it? Answer: ipv6 nd suppress-ra can turn off the routing function. 2. Question: Server NIC active/standby mode, how is the switch configured? Answer: When the server and the two NICs are connected to the switch, the switch interface only needs to be configured with a trunk. It does not need to be aggregated. 3. Question: What is the priority of the ACL call? Answer: The priority of the acl global call is greater than the priority of the interface call. 4. Question: What are the precautions for optical module docking? Answer: The optical module rate cannot be modified. Only the switch interface rate can be modified. The switch interface is backward compatible and the optical modules are not backward compatible. 5. Question: The policy route calls route-map. Can the match int+ interface be used in the match field? Answer: The match-map interface o

1. Question: Can you deploy two radius server addresses on one switch? Are authenticate users based on different ports to different radius servers? Answer: web authentication can be achieved       1X authentication cannot be achieved       Cause: The web authentication is called in the porta template and the 1X authentication is called globally. 2. Question: Will the interface with the POE power supply be plugged into the computer and burn out? Answer: No, it is the same as other normal interfaces because the POE switch will not supply power if it recognizes that the interface is not a PD device. 3. Question: What happens when the VSL line is broken after BFD detection? Answer: After the VSL line is disconnected, all ports except the exception port will be down (including the BDF detection port), the standby information will not be seen on the host and the standby machine will become the recovery state. 4. Question: When the stacking device is up, the stacking port is