Welcome, Guest |
You have to register before you can post on our site.
|
Latest Threads |
EC902
Forum: CCNP ENCOR 350-401 Forum
Last Post: sgtwardo
Yesterday, 05:07 PM
» Replies: 2
» Views: 59
|
Netflow & IP SLA Sim
Forum: CCNP ENCOR 350-401 Forum
Last Post: networman
Yesterday, 01:19 PM
» Replies: 4
» Views: 107
|
VRF Configuration Sim #2
Forum: CCNP ENCOR 350-401 Forum
Last Post: help_desk
06-28-2025, 10:35 AM
» Replies: 1
» Views: 353
|
Cisco Command Line - Shor...
Forum: CCNP ENCOR 350-401 Forum
Last Post: forumsupport
06-26-2025, 03:49 AM
» Replies: 1
» Views: 309
|
QID:EC902
Forum: CCNP ENCOR 350-401 Forum
Last Post: help_desk
06-25-2025, 10:23 AM
» Replies: 3
» Views: 563
|
QID:EC172
Forum: CCNP ENCOR 350-401 Forum
Last Post: help_desk
06-21-2025, 08:08 AM
» Replies: 3
» Views: 858
|
QID:EC972
Forum: CCNP ENCOR 350-401 Forum
Last Post: chewosaurus
06-18-2025, 05:42 PM
» Replies: 0
» Views: 248
|
QID:EC1223
Forum: CCNP ENCOR 350-401 Forum
Last Post: help_desk
06-14-2025, 11:07 AM
» Replies: 1
» Views: 460
|
QID:EC708
Forum: CCNP ENCOR 350-401 Forum
Last Post: chewosaurus
06-13-2025, 01:41 PM
» Replies: 3
» Views: 1,151
|
QID:EC082
Forum: CCNP ENCOR 350-401 Forum
Last Post: help_desk
06-11-2025, 10:14 AM
» Replies: 1
» Views: 571
|
|
|
AR306 |
Posted by: pc_evans - 02-25-2024, 08:18 PM - Forum: CCNP ENARSI 300-410 Forum
- Replies (1)
|
 |
Why is address-family ipv6 multicast the correct answer?
Shouldn't the correct answer be
router bgp 65000
no bgp default ipv4-unicast
address-family ipv6 unicast
network 2001:db8::/64
|
|
|
AR223 |
Posted by: pc_evans - 02-25-2024, 07:50 PM - Forum: CCNP ENARSI 300-410 Forum
- Replies (1)
|
 |
Configuring R1 as a route reflector server and configuring R4 as a client is not possible.
R1 does not have a neighbor relationship with R4, if it did we wouldn't have a problem.
Since there is no neighbor relationship between R1 and R4, it is impossible to enter the command.
R1(config-router)# neighbor <R4> router-reflector-client
|
|
|
AR336 |
Posted by: pc_evans - 02-24-2024, 09:38 PM - Forum: CCNP ENARSI 300-410 Forum
- Replies (1)
|
 |
Correct answer is to configure to permit TCP ports higher than 1023.
Passive FTP is an FTP mode that can be requested by a client to alleviate the issues caused by client-side firewalls. Both the server and the client must support passive FTP for this process to work. When passive FTP is used, the client will initiate the connection to the server. This process is effective because most firewalls allow inbound traffic from sessions initiated by the client. A passive FTP connection follows the following process:
- The client sends the PASV command to an FTP server on port 21. The source port is a random, high-numbered port. The destination port is 21.
- The server responds with the PORT command. The port command specifies a random, high-numbered (ephemeral) port that the client can connect to.
- The client initiates a connection to the server on this ephemeral port.
- The server responds with an ACK. The FTP session has now been established
Because the client initiates all connections, the client firewall will not block any traffic, as shown below:
https://documentation.meraki.com/MX/NAT_...%20is%2021.
|
|
|
AR 330 |
Posted by: pc_evans - 02-24-2024, 07:19 AM - Forum: CCNP ENARSI 300-410 Forum
- Replies (3)
|
 |
You cannot configure multiple vrfs on an ospf instance you need a separate instance for each VRF.
If it was possible to configure multiple VRF's on an ospf instance, using separate instances would not be wrong.
P2#sh run | section router
P2#
P2#
P2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
P2(config)#router ospf 10 vrf Site-A
P2(config-router)#
*Feb 24 07:16:28.883: %OSPF-4-NORTRID: OSPF process 10 failed to allocate unique router-id and cannot start
P2(config-router)#router-id 10.10.10.10
P2(config-router)#exit
P2(config)#
P2(config)#router ospf 10 vrf SharedSites
%VRF specified does not match existing router
P2(config)#
P2(config)#
P2(config)#
P2(config)#router ospf 20 vrf SharedSites
P2(config-router)#
*Feb 24 07:17:31.696: %OSPF-4-NORTRID: OSPF process 20 failed to allocate unique router-id and cannot start
P2(config-router)#router-id 20.20.20.20
P2(config-router)#exit
P2(config)#
P2(config)#
|
|
|
AR 370 |
Posted by: pc_evans - 02-24-2024, 05:41 AM - Forum: CCNP ENARSI 300-410 Forum
- Replies (1)
|
 |
I built this in GNS3. The ACL only prohibits TCP 179 and I was still getting this debug
ICMP: dst (10.255.255.1) administratively prohibited unreachable rcv from 10.0.12.2
I used wireshark and realized that i was getting a notification via ICMP that the TCP attempt was prohibited by R2. In short, the ACL blocks TCP 179, P2 uses ICMP to Notify PE1 of the prohibited TCP 179 traffic. Thus the ICMP Unreachable.
https://drive.google.com/file/d/1JdEY_gy...sp=sharing
PE1#
PE1#debug ip tcp trans
TCP special event debugging is on
PE1#debug ip icmp
ICMP packet debugging is on
PE1#clear ip bgp *
PE1#
PE1#
PE1#
*Feb 24 05:28:02.013: %BGP-3-NOTIFICATION_MANY: sent to 1 sessions 6/4 (Administrative Reset) for all peers
PE1#
*Feb 24 05:28:07.362: TCBF7660230 created
*Feb 24 05:28:07.362: TCBF7660230 setting property TCP_VRFTABLEID (20) F7656CC4
*Feb 24 05:28:07.362: TCBF7660230 setting property TCP_MD5KEY (4) 0
*Feb 24 05:28:07.362: TCBF7660230 setting property TCP_ACK_RATE (37) F784127C
*Feb 24 05:28:07.362: TCBF7660230 setting property TCP_TOS (11) F7841290
*Feb 24 05:28:07.362: TCBF7660230 setting property TCP_PMTU (45) F7841248
*Feb 24 05:28:07.362: TCBF7660230 setting property TCP_RTRANSTMO (36) F7841278
*Feb 24 05:28:07.362: tcp_uniqueport: using ephemeral max 65535
*Feb 24 05:28:07.362: TCP: Random local port generated 49575, network 1
*Feb 24 05:28:07.362: TCBF7660230 bound to 10.255.255.1.49575
*Feb 24 05:28:07.362: Reserved port 49575 in Transport Port Agent for TCP IP type 1
*Feb 24 05:28:07.362: TCBF7660230 getting property TCP_STRICT_ADDR_BIND (19)
*Feb 24 05:28:07.362: TCP: pmtu enabled,mss is now set to 1460
*Feb 24 05:28:07.362: TCP: sending SYN, seq 1784972807, ack 0
*Feb 24 05:28:07.362: TCP0: Connection to 10.255.255.3:179, advertising MSS 1460
*Feb 24 05:28:07.362: TCP0: state was CLOSED -> SYNSENT [49575 -> 10.255.255.3(179)]
*Feb 24 05:28:07.364: ICMP: dst (10.255.255.1) administratively prohibited unreachable rcv from 10.0.12.2
PE1#
*Feb 24 05:28:07.364: TCP0: ICMP destination unreachable received
*Feb 24 05:28:07.364: Released port 49575 in Transport Port Agent for TCP IP type 1 delay 240000
*Feb 24 05:28:07.364: TCP0: state was SYNSENT -> CLOSED [49575 -> 10.255.255.3(179)]
*Feb 24 05:28:07.364: TCB 0xF7660230 destroyed
PE1#und all
|
|
|
|