Everyday Ten Ask ccie security written exam forums

1. Question: Can you deploy two radius server addresses on one switch? Are authenticate users based on different ports to different radius servers?

Answer: web authentication can be achieved
      1X authentication cannot be achieved
      Cause: The web authentication is called in the porta template and the 1X authentication is called globally.
2. Question: Will the interface with the POE power supply be plugged into the computer and burn out?
Answer: No, it is the same as other normal interfaces because the POE switch will not supply power if it recognizes that the interface is not a PD device.
3. Question: What happens when the VSL line is broken after BFD detection?
Answer: After the VSL line is disconnected, all ports except the exception port will be down (including the BDF detection port), the standby information will not be seen on the host and the standby machine will become the recovery state.
4. Question: When the stacking device is up, the stacking port is in the down state. How do I monitor the stacking interface of the device?
Answer: There is no way to monitor the device stack interface. However, the device can be monitored according to the oid of the stacking state of the device because the device will restart once the stack interface is disconnected and the stack state will be renegotiated.
5. Question: Is DHCP destined for a specific IP address of a specific terminal?
Answer: You cannot create the same address pool as the dynamic address pool. You must create a new address pool.
6. Question: If dhcp snooping is enabled on the switch and a trusted port is configured, the address acquisition is slow, or the address is not obtained.
Answer: It may be the dhcp snooping entry is full. If the snooping entry is full, the switch will discard the dhcp packet. If you check the dhcp snooping entry, check whether the entry is sufficient use.
7. Question: What is the survival time in the show ip dhcp snooping table item?
Answer: The existence of the lease (sec) time value in the show ip dhcp snooping binding table item is the same as the dhcp lease timewhich is the remaining time of the dhcp lease.
8: Problem: Filter the dhcp message of a port so that users under the interface cannot automatically get the IP address.
Answer: Configure the dhcp snooping function on the corresponding switch
 and configure it on the corresponding interface.
     ip dhcp Snooping suppression
     Instructions for use: By configuring this command, you can deny all DHCP requests under this port from requesting messages, i.e. all users under that port are prohibited from requesting addresses through DHCP.
9: Question: DHCP address pool on the core switch, only write dhcp snooping on the core switch does not set the trust port to prevent the server private and core address pool address normal release?
Answer: You can prevent the server from being privately and the core address pool from being released normally because the dhcp snooping principle is that the non-trust port is discarded when receiving the offer message and the offer message from the interface does not do anything.
10: Question: How do I tell if i can configure a fixed assigned address with client-identifier or with hardware address?
Answer: You can first let the terminal get an address through show ip dhcp bingding to see if the mac address is plus 01 prefix, there is 01 prefix is used client-identifier. Otherwise ,the flower is to use address hardware.
PASSHOT will often update some network engineers in the work of the difficult problems. If you feel good, please collect our website! Here can help you CCIE Written exam and CCIE Lab exam.  

Comments

Post a Comment

Popular posts from this blog

How to choose Cisco dumps?

Image
In this era of lack of trust between people, if you want to buy one thing, in addition to buying on a platform such as a regular platform, such as Amazon. Do you still believe in other self-built platforms? I believe many people have the experience of being cheated. lowest The means of defrauding money is: Your good friend comes to borrow money from you, and you have a relationship card with you so that you can lend him money. At this time, according to the normal person’s thinking, this friend has known me for many years that he might not take the money away. Note that it is often the same idea that gives others the opportunity to owe money. If the amount borrowed is not high, then it is okay. Once the amount you borrowed is too large, you should be careful and your money may not be returned! Back to the topic, in this era of lack of trust, how to choose the Cisco dumps have become an important topic. First, when you buy it depends on whether the website's URL link is https
Read more

What is proxy communication?

Image
Is it correct to understand the working level of forward proxy reverse proxy transparent proxy? Forward proxy and reverse proxy (application load balancing, some NG reverse proxy) can be understood as a man-in-the-middle mode. At the same time, both ends establish a TCP connection, and then the man-in-the-middle performs TCP connection between the two ends. Can a transparent proxy be understood as a simple and crude "hijacking" of a passing data packet, without splitting the complete TCP connection into two independent segments. So, in this sense, this kind of transparent proxy is similar to the working hierarchy of NAT devices? Preface I once saw a person write tens of thousands of words to answer a question, and read it after three days. Shocked, what is all this for? These words can produce a book, and it is also a reward for your hard work. However, I think the man has always been happy, but there is no doubt that his reputation (Reputation) is in full swin
Read more

What are CCNP Data Center jobs in Dubai?

Image
  What are CCNP Data Center jobs in Dubai? Over the last few years, Cisco accreditations have gotten popular astonishingly. Undoubtedly, Cisco certifications would be deemed the outright most necessary certificates in the field of computer system networking. About Cisco certifications, there would be an extensive range of choices. To help your career and assist you in opening brand-new doors in your career, you need the ideal accreditations. Cisco introduced its primary certification program in 1998. The essential idea behind the accreditations was to supplement the CCIE or Cisco Certified Internetwork Expert program. Cisco would have extended its qualifications and supplies lots of certifications for experts of all experience levels from that point forward. CCNP Overview: CCNP or Cisco Certified Network Professional is considered the certification available for IT specialists with one year of expert experience in computer system networking. A diploma or equivalent in a significant fie
Read more