yeslab cisco rsisp ccnaccnp學習update1練習題ccna題庫v30實驗

PassingScore:810TimeLimit:120minFileVersion:v3.0 CCNA題庫/戰(zhàn)報發(fā)布區(qū)： 鴻鵠partpartpartpartpart1ACL-AnadministratoristryingtoandnetfromSwitchtoRouterwiththeresultsshownbelow:Switch>TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis0percent(0/5) netTrying%Destinationunreachable;gatewayorhostdownClicktheconsoleconnectedtoRouterandissuetheappropriatecommandstoanswerthequestions.不夠，路由器配置以PDF題庫為準。QuestionWhichwillfixtheissueandallowONLYtoworkwhile netA–CorrectlyassignanIPaddresstointerfaceB–Changetheipaccess-groupcommandonfa0/0from“in”toC–Removeaccess-group106infrominterfacefa0/0andaddaccess-group115D–Removeaccess-group102outfrominterfaces0/0/0andaddaccess-group114E–Removeaccess-group106infrominterfacefa0/0andaddaccess-group104我們來看一下accesslist104:四條允許所有請求包，第五條所有回應包。要注意accesslist104應用量，所以答案選E。QuestionWhatwouldbetheeffectofissuingthecommandipaccess-group114intothefa0/0A–Attempts nettotherouterwouldB–ItwouldallowalltrafficfromtheC–IPtrafficwouldbepassedthroughtheinterfacebutTCPandUDPtrafficwouldD–Routingprotocolupdatesforthenetworkwouldnotbeacceptedfromthefa0/0interfaceAnswer:access-list114:access-list114permitip55允許來自/24QuestionWhatwouldbetheeffectofissuingthecommandipaccess-group115inonthes0/0/1interface?A–NohostcouldconnecttoRouterthroughB–netandwouldworkbutroutingupdateswouldC–FTP,FTP-DATA,echo,andwwwwouldwork netwouldD–Onlytrafficfromthenetworkwouldpassthroughthe首先S0/0/1端口已經(jīng)配置了ipaccess-group102in先的ipaccess-group102in就被覆蓋了。access-list115:access-list114permitipx.x.x.0，這樣看來AnetworkassociateisaddingsecuritytotheconfigurationoftheCorp1router.TheuseronhostCshouldbeabletouseawebbrowsertoaccessfinancialinformationfromtheFinanceWebServer.NootherhostsfromtheLANnortheCoreshouldbeabletouseawebbrowsertoaccessthisserver.SincetherearemultipleresourcesforthecorporationatthislocationincludingotherresourcesontheFinanceWebServer,allothertrafficshouldbeallowed.Thetaskistocreateandapplyanumberedaccess-listwithnomorethanthreestatementsthatwillallowONLYhostCwebaccesstotheFinanceWebServer.NoAccesstotherouterCLIcanbegainedbyclickingontheappropriatehost.AllpasswordshavebeentemporarilysettoTheCoreconnectionusesanIPaddressof(Corp1S口的IPshowIPThecomputersintheHostsLANhavebeenassignedaddressesof–HostBHostCHostDTheserversintheServerLANhavebeenassignedaddressesof7–TheFinanceWebServerisassignedanIPaddressof3.ThePublicWebServerisassignedanIPaddressof7Corp1路由器的S口的IP，考試時要show下IP對不對，不對就改，修改IPCorp1(config)#ints1/0(具體端自己showrun看一下Corp1(config-if)#ipadd552(ip改為題目給的，掩碼用showrun得到的原先錯誤IP的掩碼)Corp1#configureCorp1(config)#access-list100permittcphosthost3eq80(允許從源主機為IP：到目的主機IP為：4的web流都可以使用。)Corp1(config)#access-list100denytcpanyhost3eqCorp1(config)#access-list100permitipany（允許所有流量Corp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100out向，這樣才能控制來自Core的流量）Corp1#copyrun（最后記得保存3ACL-中要就其他主機FinanceWebServer.）Acorporationwantstoaddsecuritytoitsnetwork.Therequirements>HostCshouldbeabletouseawebbrowser(HTTP)toaccesstheFinanceWeb>OthertypesofaccessfromhostCtotheFinanceWebServershouldbe>AllaccessfromhostsintheCoreorlocalLANtotheFinanceWebServershouldbe>AllhostsintheCoreandonlocalLANshouldbetoaccessthePublicWebYouhavebeentaskedtocreateandapplyanumberdaccesslisttoasingleoutboundinterface.TheycancontainnomorethanthreestatementsthatmeetstheseAccesstotherouterCLIcanbegainedbyclickingontheappropriatehost.Allpasswordshavebeentemporarilysetto"cisco".TheCoreconnectionusesanIPaddressof5←Corp1路由器的SThecomputersintheHostsLANhavebeenassignedaddressesof-HostAHostBHostCHostDTheserversintheServerLANhavebeenassignedaddressesof7-TheFinanceWebServerisassignedanIPaddressofCorp1路由器的S口的IP，考試時要show下IP對不對，不對就改，修改IPCorp1#configureCorp1(config)#ints1/0(具體端自己showrun看一下Corp1(config-if)#ipadd552(ip改為題目給的，掩碼用showrun得到的原先錯誤IP的掩碼)確定連接服務器的接口為Corp1#configureCorp1(config)#access-list100permittcphosthost3eq80Corp1(config)#access-list100denyipanyhost3Corp1(config)#access-list100permitipanyanyCorp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100outCorp1#copyrunning-configstartup-1.Corp1(config)#access-list100permittcphosthost3為：3的80端口。eq的意思是等于端。Corp1(config)#access-list100denyipanyhost3。IPCorp1(config)#access-list100permitipanyCorp1#showrunning-Showrun.30IP.30show找出IP為.30的接口就OK了然后把ACLCorp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100out最后就是這2Showrun.30IP是在f0/1口上。直接進入F0/1把創(chuàng)建的擴展列表應用進去，最后千萬記得CopyrunStartOSPFRefertothetopology.hasdecidedtoconnecttheofficewiththreeotherremotebranchofficesusingpoint-to-pointseriallinks.YouarerequiredtotroubleshootandresolveOSPFneighboradjacencyissuesbetweenthemainofficeandtherouterslocatedintheremotebranchQuestionAnOSPFneighboradjacencyisnotformedbetweenR3inthemainofficeandR4intheBranch1office.Whatiscausingtheproblem?ThereisanareaIDThereisan oanddeadintervalTheR3routerIDisconfiguredonAnswer:R3R4showrunR3R4<<output!interfacedescription**ConnectedtoR4-Branch1office**ipaddress52encapsulationpppipospf3area0!<<output<<output!interfacedescription**ConnectedtoR3-MainBranchoffice**ipaddress52encapsulationpppipospf4area2!<<outputarea2QuestionAnOSPFneighboradjacencyisnotformedbetweenR3inthemainofficeandR5intheBranch2office.Whatiscausingtheproblem?ThereisanareaIDThereisaPPPauthenticationissue;apasswordThereisanOSPFoanddeadintervalThereisamissingnetworkcommandintheOSPFprocessonAnswer:<<output!interfacedescription**ConnectedtoR3-MainBranchoffice**ipaddress52encapsulationpppipospf5area0!<<output<<output!interfacedescription**ConnectedtoR5-Branch2office**ipaddress52encapsulationipospf o-interval50ipospf3area0!<<output o-50，這個命令修改了默認的o包發(fā)送間隔時間。R5使用的是默認的o-interval10seconds。所以是o-interval不匹配導致的問題?？梢酝ㄟ^showipospfinterface<interface>”查看R5#shR5#shipospfintR3#shipospfintSerial1/1isup,lineprotocolisInternetAddress/30,AreaProcessID3,RouterID,NetworkTypePOINT_TO_POINT,Cost:64Enabledbyinterfaceconfig,includingsecondaryipaddressesTransmitDelayis1sec,StateTimerintervals o50,Dead200,Wait200,Retransmitoob-resynctimeout200oduein00:00:28SupportsLink-localSignaling(LLS)Index2/2,floodqueuelength0Next0×0(0)/0×0(0)Lastfloodscanlengthis umisLastfloodscantimeis0msec, umis0msecNeighborCountis0,Adjacentneighborcountis0 ofor0neighbor(s)Serial1/0Serial1/0isup,lineprotocolisInternetAddress/30,AreaProcessID5,RouterID,NetworkTypePOINT_TO_POINT,Cost:64Enabledbyinterfaceconfig,includingsecondaryipaddressesTransmitDelayis1sec,StateTimerintervalsconfigured, o10,Dead40,Wait40,Retransmit5oob-resynctimeout40odueinSupportsLink-localSignaling(LLS)Index1/1,floodqueuelength0Next0×0(0)/0×0(0)Lastfloodscanlengthis umisLastfloodscantimeis0msec, umis0msecNeighborCountis0,Adjacentneighborcountis0 ofor0neighbor(s)QuestionR1doesnotformanOSPFneighboradjacencywithR2.Whichoptionwouldfixtheissue?R1ethernet0/1isshutdown.ConfigurenoshutdownR1ethernet0/1configuredwithanon-defaultOSPFointervalof25;configurenoipospfo-interval25R2ethernet0/1andR3ethernet0/0areconfiguredwithanon-defaultOSPFointervalof25;configurenoipospfo-interval25EnableOSPFforR1ethernet0/1;configureipospf1area0commandunderethernet0/1Answer:<<output!interfacedescription**ConnectedtoL2SW**ipaddressipospf ipospf1area0!<<output<<output!interfacedescription**ConnectedtoL2SW**ipaddressipospf2area!<<outputR1設置了ipospfo-interval25導致和R2的o和dead時間不一樣。QuestionAnOSPFneighboradjacencyisnotformedbetweenR3inthemainofficeandR6intheBranch3office.Whatiscausingtheproblem?ThereisanareaIDThereisaPPPauthenticationissue;theusernameisnotconfiguredonR3andR6.ThereisanOSPFoanddeadintervalTheR3routerIDisconfiguredonAnswer:<<outputusernameR6password!interfacedescription**ConnectedtoR6-Branch3office**ipaddress52encapsulationpppipospf3area0pppauthentication!<<output!routerospfrouter-id!<<output<<outputusernameR3password!interfacedescription**ConnectedtoR3-MainBranchoffice**ipaddress052encapsulationpppipospf6area0pppauthentication!<<output!routerospfrouter-id!<<outputExaminetheDHCPconfigurationbetweenR2andR3,R2isconfiguredastheDHCPserverandR3asthe.WhatisthereasonR3isnotreceivingtheIPaddressviaDHCP?OnR3,DHCPisnotenabledontheinterfacethatisconnectedtoOnR3,theinterfacethatisconnectedtoR2isinshutdownOnR2,theinterfacethatisconnectedtoR3isinshutdownOnR2,thenetworkstatementintheDHCPpoolconfigurationisincorrectlyconfiguredAnswer:R1routerclockissynchronizedwithISProuter.R2issupposedtoreceiveNTPupdatesfromRl.ButyouobservethatR2clockisnotsynchronizedwithRl.WhatisthereasonR2isnotreceivingNTPupdatesfromRl?RlrouterEthernetinterfacethatisconnectedtoR2iscedinshutdownR2routerEthernetinterfacethatisconnectedtoRliscedinshutdownTheNTPservercommandnotconfiguredonR2TheIPaddressthatisusedintheNTPconfigurationonR2routerisAnswer：WhyapplicationsthatareinstalledonPCsinR2LANnetwork/24areunabletocommunicatewithserver1?A.AstandardACLstatementthatisconfiguredonRlisblockingthetrafficsourcedfromR2LANnetwork.B.AstandardACLstatementthatisconfiguredonRlisblockingthetrafficsourcedfromServerlnetwork.C.AstandardACLstatementthatisconfiguredonR2isblockingthetrafficsourcedfromServerlnetwork.D.AstandardACLstatementthatiscon^guredonR2isblockingthetrafficsourcedfromR2LANnetwork.Answer：Exnation/showUserscominthattheyareunabletoreachinternetsites.Youaretroubleshootinginternetconnectivityproblematmainoffice.WhichstatementcorrectlyidentifiestheproblemonRouterRl?A.NATconfigurationsontheinterfacesareincorrectlyconfigured.B.NATtranslationstatementincorrectlyconfigured.C.InterestingtrafficforNATACLisincorrectlyD.OnlystaticNATtranslationconfiguredfromtheserver,missingDynamicNATorDynamicNAToverloadingforinternalnetworks.Answer：AExnation/showcommands：--RouterR1connectsthemainofficetointernet,androutersR2andR3areinternal--NATisenabledonRouter--TheroutingprotocolthatisenabledbetweenRl,R2andR3is--R1sendsdefaultrouteintoRIPv2forinternalrouterstoforwardinternettrafficto--ServerlandServer2arecedinVLAN100and200respectively,andarestillrunningonstickConfigurationwithrouterYouhaveconsoleaccessonRl,R2,R3andL2SW1devices.Useonlyshowcommandstotroubleshoottheissues.ServerlandServer2areunabletocommunicatewiththerestofthenetwork.YourinitialcheckwithsystemadministratorsshowsthatIPaddresssettingsarecorrectlyconfiguredontheserverside.Whatcouldbeanissue?TheVLANencapsulationismisconfiguredontherouterTheRouterismissingsubinterfaceTheTrunkisnotconfiguredontheL2SW1TheIPaddressismisconfiguredontheprimaryrouterAnswerAnswer： nation/show2.Usersinthemainofficecom in2.Usersinthemainofficecom inthattheyareunabletoreachinternetsites.YouobservethatinternettrafficthatisdestinedtowardsISProuterisnotforwardedcorrectlyonRouterRl.Whatcouldbeanissue?toInternetservershowsthefollowingresultsfromTypeescapesequencetoSending5,100-byteICMPEchosto25,timeoutis2Successrateis0percentThenexthoprouteraddressforthedefaultrouteisincorrectlyDefaultroutepointingtoISProuterisnotconfiguredonRouterDefaultroutepointingtoISProuterisconfiguredwithADofRouterRlconfiguredasDHCPisnotreceivingdefaultrouteviaDHCPfromISProuter.Answer：ExamineR2configuration,thetrafficthatisdestinedtoR3LANnetworksourcedfromRouterR2isforwardedtoR1insteadR3.Whatcouldbeanissue?R2#traceroutesourceTypeescapesequencetoabort.TracingtheroutetoVRFinfo:(vrfinname/id,vrfout10msec1msec02!H!H*A.RIPv2A.RIPv2enabledonR3,butR3LANnetworkthatisnotadvertisedinto.B.RIPv2routingupdatesaresuppressedbetweenR2andR3usingpassiveinterfaceC.RIPv2notenabledonD.Noissuethatisidentified;thisbehaviorisnormalsincedefaultroutepropagatedintoRIPv2 byRouterRl.Answer： WhatisthecorrectstatementbelowafterexaminingtheR1routingTrafficthatisdestinedto/24fromR1LANnetworkusesstaticrouteinsteadRIPv2BecausethestaticrouteADthatisconfiguredislessthantheADofTrafficthatisdestinedto/24fromR1LANnetworkusesRIPv2insteadstaticrouteBecausethestaticrouteADthatisconfiguredishigherthantheADofTrafficthatisdestinedto/24fromR1LANnetworkusesstaticrouteinsteadRIPv2ButthetrafficisforwardedtotheISPinsteadoftheinternalTrafficthatisdestinedto/24fromR1LANnetworkusesRIPv2insteadstaticrouteBecausethestaticrouteADthatisconfiguredisAnswer：EIGRPTSRefertothetopology.Your hasconnectedtheroutersR1,R2andR3withseriallinks.R2andR3areconnectedtotheswitchesSW1andSW2,respectively.SW1andSW2arealsoconnectedtotheroutersR4andR5.TheEIGRProutingprotocolisconfigured.YouarerequiredtotroubleshootandresolvetheEIGRPissuesbetweenthevariousrouters.UsetheappropriateshowcommandstotroubleshoottheQuestionTheloopbackinterfacesonR4withtheIPaddressesof/32,/32and/32arenotappearingintheroutingtableofR5.Whyaretheinterfacesmissing?Theinterfacesareshutdown,sotheyarenotbeingR4hasbeenincorrectlyconfiguredtobeinanotherAS,soitdoesnotpeerwithR5.Automaticsummarizationisenabled,soonlythenetworkisdisyed.Theloopbackaddresseshaven’tbeenadvertised,andthenetworkcommandismissingonR4.Answer:R4EIGRPAS2AS1QuestionWhichpathdoestraffictakefromR1toThetrafficgoesthroughThetrafficgoesthroughThetrafficisequallyload-balancedoverR2andThetrafficisunequallyload-balancedoverR2andAnswer:S1/3,R2QuestionRouterR6doesnotformanEIGRPneighborrelationshipcorrectlywithrouterR1.Whatisthecauseforthismisconfiguration?TheKvaluesTheASdoesnotThenetworkcommandisThepassive-interfacecommandisAnswer:QuestionStudythefollowingoutputtakenon5sourceTypeescapesequencetoSending5,100-byteICMPEchosto5,timeoutis2seconds:Packetsentwithasourceaddressof....Successrateis0percentWhyaresThenetworkstatementismissingonTheloopbackinterfaceisshutdownonThenetworkstatementismissingonTheIPaddressthatisconfiguredontheLo1interfaceonR5isAnswer:R1并沒有將 以為源地址 R5不通。EIGRPTSRefertothetopology.YourhasconnectedtheroutersR1,R2andR3withseriallinks.R2andR3areconnectedtotheswitchesSW1andSW2,respectively.SW1andSW2arealsoconnectedtotheroutersR4andR5.TheEIGRProutingprotocolisconfigured.YouarerequiredtotroubleshootandresolvetheEIGRPissuesbetweenthevariousrouters.UsetheappropriateshowcommandstotroubleshoottheQuestionTheloopbackinterfacesonR4withtheIPaddressesof/32,/32and/32arenotappearingintheroutingtableofR5.Whyaretheinterfacesmissing?A.Theinterfacesareshutdown,sotheyarenotbeingB.R4hasbeenincorrectlyconfiguredtobeinanotherAS,soitdoesno