350-001 Routing & Switching .

Day 1, May 23, .

Q1, In order to maintain security, with which hop count are IPv6 neighbor discovery packets sent?
[A]A suggestion (RFC 3682) of using a "hop count of 255" has only rather limited value.

 Q2, Which command will define a VRF with name 'CCIE' in IPv6?
 [A] vrf definition CCIE

 Q3, LDP advertise which route?
 [A] IGP

 Q4, Which command can be used on a PE router to connect to a CE router (11.1.1.4) in VRF red?
[A] telnet 11.1.1.4 /vrf red

 Q5, The routing inside the VPN RED will work without any special OSPF configuration

 Q6, Which two statements are correct about Nonstop Forwarding? (Choose two.)
[A] B. It is a Layer 3 function that works with SSO to minimize the amount of time a network is unavailable to users following a switchover
E. The main objective of NSF is to continue forwarding IP packets following a switchover SSO=> stateful switchover

 Q7, Which three fields are optional in an OSPFv3 external LSA? (Choose three.)
 [A] A. Forwarding Address B. External Route C. Reference Link-State ID

 Q8, On a router, interface S0 is running EIGRPv6, and interface S1 is running OSPFv3. A redistribution command is issued under OSPFv3, redistribute EIGRP 1 metric 20 under ipv6 router nospf 1. What will happen after applying this redistribution command?
[A] All routes showing up as D and D EX in the routing table will be redistributed into OSPFv3.

 Q9, Which type of domains is interconnected using Multicast Source Discovery Protocol?
[A] PIM-SM 

Q10, Which two multicast address ranges are assigned as source-specific multicast destination addresses and are reserved for use by source-specific applications and protocols? (Choose two.)
[A] 232.0.0.0/8 and FF3x::/32

 Q11, How is RPF used in multicast routing?
[A] to prevent multicast packets from looping and to instruct PIM where to send a (*,G) or (S,G) join message

 Q12, What does the incoming interface of the above (*,G) entry indicate?
 [A] the interface closest to the RP, according to the unicast routing table

 Q13, Which interface(s) will show ip rpf 1.1.1.2 indicate as RPF interface(s)
[A] ethernet 1/0

 Q14, Apart from interdomain multicast routing, what else is MSDP used for?
[A] anycast RP

 Q15, Which IGMPv2 message contains a non-zero "Max Response Time"?
A. Membership Query

 Q16, Which IGMPv2 message is displayed in the output of the packet capture?
B. Membership Report 

Q17, What is Phantom RP used for?
B. it is used for redundancy in bidirectional PIM

 Q18, Which three statements are true about TACACS+? (Choose three.)
A. It is a Cisco proprietary protocol. C. Authentication and authorization are done at different stages. D. TACACS+ encrypts the entire body of the packet, but leaves a standard TACACS+ header.

 Q19, Which two statements are correct? (Choose two.)
B. The access list has logging enabled. D. The command ip access-list logging hash-generation is enabled

 Q20, C. NTP is not configured on the router.



Q21, What does Cisco recommend when you are enabling Cisco IOS IPS?
A. Do not enable all the signatures at the same time

Q22, B. OSPF peers are using Type 2 authentication. (MD auth)

Q23, Which two statements are true about Unicast Reverse Path Forwarding Loose Mode? (Choose two.)
A. It is used in multihome network scenarios.
B. It can be used with BGP to mitigate DoS and DDoS.


Q24, ##aaa authentication login default group tacacs+ none.
D. If the TACACS+ server failed, no authentication would be required

Q25, Which three protocols should be explicitly managed by using a CoPP policy on an Internet border router? (Choose three.)
B. ICMP
C. BGP
D. SSH

Q26, What is true about IP Source Guard with port security?
C. The DHCP server must support option 82, or the client is not assigned an IP address

TC Command Sequencer from T1728

a, start



b, edit sequence


c, ARP learning


d, IGMP join.

Multicast Latency TTC

a, temporary license

b, port1 simulated the client side and need to enable the access protocol




c, server side just regular setup for device, but need to config "Traffic Generator"





d, latency parameter

TCC Latency Test, Step by Step






























============================


Report:

Tax

StudioTax:

1, import the last year data (SIN, name, company)
2, T slips
---2.1 T4
---2.2 RC62 (child care)
---2.3 T4E EI
---2.4 T5 Interest
3, RRSP/HBP
4, Dependant (fitness, art..)

Check:
T1 General => T1 page 2, 3 , line by line ,. T1 page 4: result

UFILE: ufile.ca username: emailaddress/passwd: same as gmail
1, interview
---1.1 T4
---1.2 RRSP
---1.3 HBP (home buyer plan)
---1.4 UCCB (RC62)
---1.5 Child care, fitness,art....

SSL Protocol

在该部分，将上图所示的示意图进行说明。为了说明的方便，在本文中称客户端为B，服务
器端为S。
STEP 1: B——〉S（发起对话，协商传送加密算法）
你好,S！我想和你进行安全对话，我的对称加密算法有 DES,RC5，我的密钥交换算法有
RSA 和DH，摘要算法有MD5 和SHA。
STEP2: S——〉B（发送服务器数字证书）
你好,B！那我们就使用DES－RSA－SHA 这对组合进行通讯，为了证明我确实是S，现在
发送我的数字证书给你，你可以验证我的身份。
STEP 3: B——〉S（传送本次对话的密钥）
（检查S 的数字证书是否正确，通过CA 机构颁发的证书验证了S 证书的真实有效性后。
生成了利用S 的公钥加密的本次对话的密钥发送给S）
S, 我已经确认了你的身份，现在将我们本次通讯中使用的对称加密算法的密钥发送给
你。
STEP4: S——〉B（获取密钥）
（S 用自己的私钥解密获取本次通讯的密钥）。
B, 我已经获取了密钥。我们可以开始通信了。
STEP5: S<——>B（进行通讯）
说明：一般情况下，当B 是保密信息的传递者时，B 不需要数字证书验证自己身份的真
实性，如电子银行的应用，客户需要将自己的账号和密码发送给银行，因此银行的服务器需
要安装数字证书来表明自己身份的有效性。在某些B2B 应用，服务器端也需要对客户端的
身份进行验证，这时客户端也需要安装数字证书以保证通讯时服务器可以辨别出客户端的身
份，验证过程类似于服务器身份的验证过程。



此外需要说明的是，在一些电子商务的应用中，可能还会使用到电子签名，或者为了信
息交换的更加安全，会增加电子签名和消息校验码（MAC）。
为了便于了解SSL，下面在简要介绍一下信息加密相关知识。使用密钥类型加密信息的加密
算法可以分为以下几类：HASH 编码、对称加密和非对称加密三类。
HASH 编码是使用HASH 算法从任意长度的消息中计算HASH 值的一个过程，HASH 值可
以说是消息的指纹，因为对于任何不同的消息，几乎总有不同的HASH 值。因此在SSL 通讯
过程中，可以对消息的HASH 值进行加密，确保传递的消息在传输过程中没有被修改。
非对称加密或称之为公钥加密使用数学上相关的两个数值来对信息进行编码（加密），
其中一个数字称为公钥，另一个称为私钥。公钥加密的信息可以用私钥解密，私钥加密的信
息可以用公钥解密。由于公钥可以大面积发放，因此公钥加密在SSL 加密通信中应用于对密
钥的加密或者进行数字签名。
对称加密和非对称加密相比的区别在于对称加密中，加密信息和解密信息使用同样的密
钥，因此该密钥无法公开。但是其具有加密、解密快速的特点。
在SSL 通讯中，首先采用非对称加密交换信息，使得服务器获得浏览器端提供的对称加
密的密钥，然后利用该密钥进行通讯过程中信息的加密和解密。为了保证消息在传递过程中
没有被篡改，可以加密HASH 编码来确保信息的完整性。

T1672-T1682 LACP in details.

a, topology:

FG-A =====----- Nexus-A
|.......\.../....|
|........\./.....|
(ha)........X......|
|......../.\.....|
|......./...\....|
FG-B =====----- Nexus-B


b, LACP.
--1, output from FGT side.
5060-s1 # d switch fabric-channel trunk list 156Trunk
Switch Trunk Information, fabric-Channel
Trunk Name: 156Trunk
Port Selection Algorithm: src-dst-ip

Active Port Update Time
___________ ____________________

f2 04:17:25 Aug-16-1985
f3 03:39:07 Aug-16-1985

Non-Active Port Status
_______________ ____________________

LACP flags: (A|P)(S|F)(A|I)(I|O)(E|D)(E|D)
(A|P) - LACP mode is Active or Passive
(S|F) - LACP speed is Slow or Fast
(A|I) - Aggregatable or Individual
(I|O) - Port In sync or Out of sync
(E|D) - Frame collection is Enabled or Disabled
(E|D) - Frame distribution is Enabled or Disabled

status: up
ports: 2
LACP mode: active
LACP speed: fast
aggregator ID: 1
actor key: 1
actor MAC address: 00:09:0f:62:0d:d2
partner key: 1
partner MAC address: 00:22:56:b9:6e:40

slave: f2
status: up
link failure count: 2180
permanent MAC addr: 00:09:0f:62:0d:d2
actor state: ASAIEE =>FSW works as Active, slow,Aggregate, in sync, collection enabled and distribution enabled.
partner state: PSAIEE =>Nexus works as passive, slow,Aggregate, in sync, collection enabled and distribution enabled.
aggregator ID: 1

slave: f3
status: up
link failure count: 2172
permanent MAC addr: 00:09:0f:62:0d:d3
actor state: AFAIEE
partner state: PSAIEE
aggregator ID: 1


5060-s1 #


========================
output from ticket:
Active Port Update Time
___________ ____________________

f1 15:42:50 Feb-09-2012
f2 15:53:00 Feb-09-2012

...

actor state: ASAIEE
partner state: PFAIDD ==> Nexus is passive, fast mode, in sync, but collection disabled and distribution disabled.

FGT will send the traffic to the peer since the trunk is under the condition that distribution enabled. packet lost.


fast|slow is the setting to tell the peer how fast it should send LACP bpdu out.
FSW:
set lacp-speed fast
Cisco:
lacp rate fast ( not support in 4900)