Posts

SND/ONC Collection ccie sp 4.1 lab topology

1. Question: What is the difference between the SDN Cloud Campus Access Mode and the Kernel Mode? Answer: Access mode: Using a port security scheme, legitimate users form static ip+mac bindings on the port.      Gateway mode: Turns off dynamic arp learning capabilities and legitimate users adopt static arp bindings. 2. Question: Does the SDN need to change the IP address of the cluster IP before it can be authorized before it can be authorized? Answer: Needed 3. Question: Access control and under what circumstances will be on the pending list Answer: (1) First access      (2) IP conflict      (3) IP/VLAN inconsistencies      (4) IP changes      (5) Position change      (6) Gateway ARP spoofing 4. Question: Access control kernel mode and gateway device receives the ARP information of the unadmitted terminal, how to ...

ccie r&s lab topology SNMP Syslog Collection

1. Question: After logging is turned on, is there any syslog file in the directory? Answer: It’s need half an hour cache in or after the restart can be viewed by the way of cisco sdir. 2. Question: How do I resolve an input command interrupted by a pop-up log, so that you don't know where the input command is lost? Answer: Configure logging in line vty or consoleline 0 so that even if a log pops up during the re-entry process, the command just configured is displayed again on the next line. 3. Question: What is the default protocol for logging to the log server on the switch and what is the port number? Answer: The default is the udp protocol, and the port number is 514. 4. Question: How do I configure the switch log upload log server interval? Answer: By default, the time interval to send to a remote server is 3600 seconds (one hour).      Configure the time interval sent on the delay in the global configuration using the logging delay-send interval...

Global Binding syslog collection ccie r&s written exam certcollection

1. Question: Two users who want the same SSID cannot access each other, does port protection on the switch take effect? Answer: When two users are connected to two different APs on the same switch, configuring port protection on the switch can achieve the effect of not visiting each other. But when two users are connected to an easy ip, configuring port protection on the switch is not valid and isolation implementations can be deployed on the AP or AP. 2. Question: When the protection interface is used under trunk, is it valid for all passing vlanes or only for native vlan? Answer: When the protection interface is used under trunk, it is valid for all passing vlanes. 3. Question: What is the difference between ipv4 and ipv6 do the on global binding? Answer: For ipv6 messages, there are several scenarios:      When the global ipv4 plus MAC and ipv6 plus MAC bindings do not exist, the ipv6 (and ipv4) global security bindings do not take effect at which poi...

ccie security v5 written exam Everyday Ten Ask

1. Question: What is the SSH login username? Answer: When configuring SSH, if the local database is not called, then the user name can be arbitrary when ssh logs in, the password is Cisco Router #line vty 0 4 Router (config-line) #transport input ssh Router #password Cisco 2. Question: Is there the difference between a remote login with a user name and no user name? Answer: (1) No username: a. enable password b.line vty under password c.line vty call login 2 With user name a. enable password b.line vty call local login c. global username and password 3. Question: After the software version is lost, the underlying crtl upgrade software version, which port is the network cable? Answer: The network cable needs to be connected to the first port of the switch, but if the device has an MGMT interface, the network cable needs to be connected to the MGMT interface to upload the package properly. 4. Question: How does vrrp achieve vrrp master switching when the main upp...

Everyday Ten Ask ccie security lab questions

1. Question: Configuring login local does not have a username and password configured Answer: it will cause the device to fail to log on especially ten configured line console 0. At this time, it can only do password recovery. 2. Question: Line console 0 set password 7 123456 but cannot log in with password 123456. Answer: password 7 is followed by an encrypted password. For example, 123456 is the secret text after s3 encryption when you log in to the device is actually entered s3 3. Question: Console is configured with consoleline 0 exec-timeout 10 default 10 minutes, why the test results did not break after 10 minutes? Answer: If this connection does not have any input or output information for a specified period of time, this connection will be interrupted: Handling: Log Co-functionality: no loggin on 4. Question: Set ssh login after setting user name and password, the user level mentioned 15 and use the new username and password login does not go in.  Why it can on...

cisco ccie security v5 books Everyday Ten Ask

1. Question: The meaning of the dot 1 q tunnel interface's untag and tag Answer: Untag refers to the use of the untag vlan tag and forwarded when you want to send a data frame. Tag means to keep the original vlan tag and forward it. 2. Question: Match ip loose in the case of DHCP relay in am rule has no effect on DHCP relay. Answer: The AM rule must be written. 3. Question: What is the impact of not setting Up Pevlan? Answer: If a single-layer label enters the switch and PEvlan is set, the vlan label may be abnormal when the data is forwarded, such as a vlan tag on multiple dozens of times. 4. Question: How should the mirror interface be configured in the case of port aggregation? Answer: Configure the mirror port. If the physical interface is configured for the aggregation interface, then the mirror ingress needs to be called in the aggregation interface. 5. Q: How many source ports can i configure for the port mirror? Answer: There is no limit to the number of ...

Everyday Ten Ask ccie security guide cisco ccie security written exam

1. Question: When the port appears CRC, drop, error, oversized. Answer: Physical replacement test that to determine if there is a problem at the physical level, you can also check whether the mtu value is too small and whether there is a vlan tailored. 2. Question: Modify the mtu value on the aggregation interface, will the mtu value change when the physical interface is displayed? Answer: Modify the mtu value on the aggregation interface, the mtu of the show physical interface is still ten default values. The show aggregation interface shows the modified value, the mtu value of the physical interface is modified before the aggregation and the mtu of the show physical interface after the aggregation is still the default value. 3. Question: What is the mpls mtu value of the interface? Answer: The mpls mtu of the interface is consistent with the interface mtu and the default value range is 64-1500 which can be modified. 4. Question: OsPF redistribution did not publish all ro...