yeslab cisco rsisp ccnaccnp学习update1练习题ccna题库v30实验

PassingScore:810TimeLimit:120minFileVersion:v3.0 CCNA题库/战报发布区： 鸿鹄partpartpartpartpart1ACL-AnadministratoristryingtoandnetfromSwitchtoRouterwiththeresultsshownbelow:Switch>TypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis0percent(0/5) netTrying%Destinationunreachable;gatewayorhostdownClicktheconsoleconnectedtoRouterandissuetheappropriatecommandstoanswerthequestions.不够，路由器配置以PDF题库为准。QuestionWhichwillfixtheissueandallowONLYtoworkwhile netA–CorrectlyassignanIPaddresstointerfaceB–Changetheipaccess-groupcommandonfa0/0from“in”toC–Removeaccess-group106infrominterfacefa0/0andaddaccess-group115D–Removeaccess-group102outfrominterfaces0/0/0andaddaccess-group114E–Removeaccess-group106infrominterfacefa0/0andaddaccess-group104我们来看一下accesslist104:四条允许所有请求包，第五条所有回应包。要注意accesslist104应用量，所以答案选E。QuestionWhatwouldbetheeffectofissuingthecommandipaccess-group114intothefa0/0A–Attempts nettotherouterwouldB–ItwouldallowalltrafficfromtheC–IPtrafficwouldbepassedthroughtheinterfacebutTCPandUDPtrafficwouldD–Routingprotocolupdatesforthenetworkwouldnotbeacceptedfromthefa0/0interfaceAnswer:access-list114:access-list114permitip55允许来自/24QuestionWhatwouldbetheeffectofissuingthecommandipaccess-group115inonthes0/0/1interface?A–NohostcouldconnecttoRouterthroughB–netandwouldworkbutroutingupdateswouldC–FTP,FTP-DATA,echo,andwwwwouldwork netwouldD–Onlytrafficfromthenetworkwouldpassthroughthe首先S0/0/1端口已经配置了ipaccess-group102in先的ipaccess-group102in就被覆盖了。access-list115:access-list114permitipx.x.x.0，这样看来AnetworkassociateisaddingsecuritytotheconfigurationoftheCorp1router.TheuseronhostCshouldbeabletouseawebbrowsertoaccessfinancialinformationfromtheFinanceWebServer.NootherhostsfromtheLANnortheCoreshouldbeabletouseawebbrowsertoaccessthisserver.SincetherearemultipleresourcesforthecorporationatthislocationincludingotherresourcesontheFinanceWebServer,allothertrafficshouldbeallowed.Thetaskistocreateandapplyanumberedaccess-listwithnomorethanthreestatementsthatwillallowONLYhostCwebaccesstotheFinanceWebServer.NoAccesstotherouterCLIcanbegainedbyclickingontheappropriatehost.AllpasswordshavebeentemporarilysettoTheCoreconnectionusesanIPaddressof(Corp1S口的IPshowIPThecomputersintheHostsLANhavebeenassignedaddressesof–HostBHostCHostDTheserversintheServerLANhavebeenassignedaddressesof7–TheFinanceWebServerisassignedanIPaddressof3.ThePublicWebServerisassignedanIPaddressof7Corp1路由器的S口的IP，考试时要show下IP对不对，不对就改，修改IPCorp1(config)#ints1/0(具体端自己showrun看一下Corp1(config-if)#ipadd552(ip改为题目给的，掩码用showrun得到的原先错误IP的掩码)Corp1#configureCorp1(config)#access-list100permittcphosthost3eq80(允许从源主机为IP：到目的主机IP为：4的web流都可以使用。)Corp1(config)#access-list100denytcpanyhost3eqCorp1(config)#access-list100permitipany（允许所有流量Corp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100out向，这样才能控制来自Core的流量）Corp1#copyrun（最后记得保存3ACL-中要就其他主机FinanceWebServer.）Acorporationwantstoaddsecuritytoitsnetwork.Therequirements>HostCshouldbeabletouseawebbrowser(HTTP)toaccesstheFinanceWeb>OthertypesofaccessfromhostCtotheFinanceWebServershouldbe>AllaccessfromhostsintheCoreorlocalLANtotheFinanceWebServershouldbe>AllhostsintheCoreandonlocalLANshouldbetoaccessthePublicWebYouhavebeentaskedtocreateandapplyanumberdaccesslisttoasingleoutboundinterface.TheycancontainnomorethanthreestatementsthatmeetstheseAccesstotherouterCLIcanbegainedbyclickingontheappropriatehost.Allpasswordshavebeentemporarilysetto"cisco".TheCoreconnectionusesanIPaddressof5←Corp1路由器的SThecomputersintheHostsLANhavebeenassignedaddressesof-HostAHostBHostCHostDTheserversintheServerLANhavebeenassignedaddressesof7-TheFinanceWebServerisassignedanIPaddressofCorp1路由器的S口的IP，考试时要show下IP对不对，不对就改，修改IPCorp1#configureCorp1(config)#ints1/0(具体端自己showrun看一下Corp1(config-if)#ipadd552(ip改为题目给的，掩码用showrun得到的原先错误IP的掩码)确定连接服务器的接口为Corp1#configureCorp1(config)#access-list100permittcphosthost3eq80Corp1(config)#access-list100denyipanyhost3Corp1(config)#access-list100permitipanyanyCorp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100outCorp1#copyrunning-configstartup-1.Corp1(config)#access-list100permittcphosthost3为：3的80端口。eq的意思是等于端。Corp1(config)#access-list100denyipanyhost3。IPCorp1(config)#access-list100permitipanyCorp1#showrunning-Showrun.30IP.30show找出IP为.30的接口就OK了然后把ACLCorp1(config)#interfacefa0/1Corp1(config-if)#ipaccess-group100out最后就是这2Showrun.30IP是在f0/1口上。直接进入F0/1把创建的扩展列表应用进去，最后千万记得CopyrunStartOSPFRefertothetopology.hasdecidedtoconnecttheofficewiththreeotherremotebranchofficesusingpoint-to-pointseriallinks.YouarerequiredtotroubleshootandresolveOSPFneighboradjacencyissuesbetweenthemainofficeandtherouterslocatedintheremotebranchQuestionAnOSPFneighboradjacencyisnotformedbetweenR3inthemainofficeandR4intheBranch1office.Whatiscausingtheproblem?ThereisanareaIDThereisan oanddeadintervalTheR3routerIDisconfiguredonAnswer:R3R4showrunR3R4<<output!interfacedescription**ConnectedtoR4-Branch1office**ipaddress52encapsulationpppipospf3area0!<<output<<output!interfacedescription**ConnectedtoR3-MainBranchoffice**ipaddress52encapsulationpppipospf4area2!<<outputarea2QuestionAnOSPFneighboradjacencyisnotformedbetweenR3inthemainofficeandR5intheBranch2office.Whatiscausingtheproblem?ThereisanareaIDThereisaPPPauthenticationissue;apasswordThereisanOSPFoanddeadintervalThereisamissingnetworkcommandintheOSPFprocessonAnswer:<<output!interfacedescription**ConnectedtoR3-MainBranchoffice**ipaddress52encapsulationpppipospf5area0!<<output<<output!interfacedescription**ConnectedtoR5-Branch2office**ipaddress52encapsulationipospf o-interval50ipospf3area0!<<output o-50，这个命令修改了默认的o包发送间隔时间。R5使用的是默认的o-interval10seconds。所以是o-interval不匹配导致的问题。可以通过showipospfinterface<interface>”查看R5#shR5#shipospfintR3#shipospfintSerial1/1isup,lineprotocolisInternetAddress/30,AreaProcessID3,RouterID,NetworkTypePOINT_TO_POINT,Cost:64Enabledbyinterfaceconfig,includingsecondaryipaddressesTransmitDelayis1sec,StateTimerintervals o50,Dead200,Wait200,Retransmitoob-resynctimeout200oduein00:00:28SupportsLink-localSignaling(LLS)Index2/2,floodqueuelength0Next0×0(0)/0×0(0)Lastfloodscanlengthis umisLastfloodscantimeis0msec, umis0msecNeighborCountis0,Adjacentneighborcountis0 ofor0neighbor(s)Serial1/0Serial1/0isup,lineprotocolisInternetAddress/30,AreaProcessID5,RouterID,NetworkTypePOINT_TO_POINT,Cost:64Enabledbyinterfaceconfig,includingsecondaryipaddressesTransmitDelayis1sec,StateTimerintervalsconfigured, o10,Dead40,Wait40,Retransmit5oob-resynctimeout40odueinSupportsLink-localSignaling(LLS)Index1/1,floodqueuelength0Next0×0(0)/0×0(0)Lastfloodscanlengthis umisLastfloodscantimeis0msec, umis0msecNeighborCountis0,Adjacentneighborcountis0 ofor0neighbor(s)QuestionR1doesnotformanOSPFneighboradjacencywithR2.Whichoptionwouldfixtheissue?R1ethernet0/1isshutdown.ConfigurenoshutdownR1ethernet0/1configuredwithanon-defaultOSPFointervalof25;configurenoipospfo-interval25R2ethernet0/1andR3ethernet0/0areconfiguredwithanon-defaultOSPFointervalof25;configurenoipospfo-interval25EnableOSPFforR1ethernet0/1;configureipospf1area0commandunderethernet0/1Answer:<<output!interfacedescription**ConnectedtoL2SW**ipaddressipospf ipospf1area0!<<output<<output!interfacedescription**ConnectedtoL2SW**ipaddressipospf2area!<<outputR1设置了ipospfo-interval25导致和R2的o和dead时间不一样。QuestionAnOSPFneighboradjacencyisnotformedbetweenR3inthemainofficeandR6intheBranch3office.Whatiscausingtheproblem?ThereisanareaIDThereisaPPPauthenticationissue;theusernameisnotconfiguredonR3andR6.ThereisanOSPFoanddeadintervalTheR3routerIDisconfiguredonAnswer:<<outputusernameR6password!interfacedescription**ConnectedtoR6-Branch3office**ipaddress52encapsulationpppipospf3area0pppauthentication!<<output!routerospfrouter-id!<<output<<outputusernameR3password!interfacedescription**ConnectedtoR3-MainBranchoffice**ipaddress052encapsulationpppipospf6area0pppauthentication!<<output!routerospfrouter-id!<<outputExaminetheDHCPconfigurationbetweenR2andR3,R2isconfiguredastheDHCPserverandR3asthe.WhatisthereasonR3isnotreceivingtheIPaddressviaDHCP?OnR3,DHCPisnotenabledontheinterfacethatisconnectedtoOnR3,theinterfacethatisconnectedtoR2isinshutdownOnR2,theinterfacethatisconnectedtoR3isinshutdownOnR2,thenetworkstatementintheDHCPpoolconfigurationisincorrectlyconfiguredAnswer:R1routerclockissynchronizedwithISProuter.R2issupposedtoreceiveNTPupdatesfromRl.ButyouobservethatR2clockisnotsynchronizedwithRl.WhatisthereasonR2isnotreceivingNTPupdatesfromRl?RlrouterEthernetinterfacethatisconnectedtoR2iscedinshutdownR2routerEthernetinterfacethatisconnectedtoRliscedinshutdownTheNTPservercommandnotconfiguredonR2TheIPaddressthatisusedintheNTPconfigurationonR2routerisAnswer：WhyapplicationsthatareinstalledonPCsinR2LANnetwork/24areunabletocommunicatewithserver1?A.AstandardACLstatementthatisconfiguredonRlisblockingthetrafficsourcedfromR2LANnetwork.B.AstandardACLstatementthatisconfiguredonRlisblockingthetrafficsourcedfromServerlnetwork.C.AstandardACLstatementthatisconfiguredonR2isblockingthetrafficsourcedfromServerlnetwork.D.AstandardACLstatementthatiscon^guredonR2isblockingthetrafficsourcedfromR2LANnetwork.Answer：Exnation/showUserscominthattheyareunabletoreachinternetsites.Youaretroubleshootinginternetconnectivityproblematmainoffice.WhichstatementcorrectlyidentifiestheproblemonRouterRl?A.NATconfigurationsontheinterfacesareincorrectlyconfigured.B.NATtranslationstatementincorrectlyconfigured.C.InterestingtrafficforNATACLisincorrectlyD.OnlystaticNATtranslationconfiguredfromtheserver,missingDynamicNATorDynamicNAToverloadingforinternalnetworks.Answer：AExnation/showcommands：--RouterR1connectsthemainofficetointernet,androutersR2andR3areinternal--NATisenabledonRouter--TheroutingprotocolthatisenabledbetweenRl,R2andR3is--R1sendsdefaultrouteintoRIPv2forinternalrouterstoforwardinternettrafficto--ServerlandServer2arecedinVLAN100and200respectively,andarestillrunningonstickConfigurationwithrouterYouhaveconsoleaccessonRl,R2,R3andL2SW1devices.Useonlyshowcommandstotroubleshoottheissues.ServerlandServer2areunabletocommunicatewiththerestofthenetwork.YourinitialcheckwithsystemadministratorsshowsthatIPaddresssettingsarecorrectlyconfiguredontheserverside.Whatcouldbeanissue?TheVLANencapsulationismisconfiguredontherouterTheRouterismissingsubinterfaceTheTrunkisnotconfiguredontheL2SW1TheIPaddressismisconfiguredontheprimaryrouterAnswerAnswer： nation/show2.Usersinthemainofficecom in2.Usersinthemainofficecom inthattheyareunabletoreachinternetsites.YouobservethatinternettrafficthatisdestinedtowardsISProuterisnotforwardedcorrectlyonRouterRl.Whatcouldbeanissue?toInternetservershowsthefollowingresultsfromTypeescapesequencetoSending5,100-byteICMPEchosto25,timeoutis2Successrateis0percentThenexthoprouteraddressforthedefaultrouteisincorrectlyDefaultroutepointingtoISProuterisnotconfiguredonRouterDefaultroutepointingtoISProuterisconfiguredwithADofRouterRlconfiguredasDHCPisnotreceivingdefaultrouteviaDHCPfromISProuter.Answer：ExamineR2configuration,thetrafficthatisdestinedtoR3LANnetworksourcedfromRouterR2isforwardedtoR1insteadR3.Whatcouldbeanissue?R2#traceroutesourceTypeescapesequencetoabort.TracingtheroutetoVRFinfo:(vrfinname/id,vrfout10msec1msec02!H!H*A.RIPv2A.RIPv2enabledonR3,butR3LANnetworkthatisnotadvertisedinto.B.RIPv2routingupdatesaresuppressedbetweenR2andR3usingpassiveinterfaceC.RIPv2notenabledonD.Noissuethatisidentified;thisbehaviorisnormalsincedefaultroutepropagatedintoRIPv2 byRouterRl.Answer： WhatisthecorrectstatementbelowafterexaminingtheR1routingTrafficthatisdestinedto/24fromR1LANnetworkusesstaticrouteinsteadRIPv2BecausethestaticrouteADthatisconfiguredislessthantheADofTrafficthatisdestinedto/24fromR1LANnetworkusesRIPv2insteadstaticrouteBecausethestaticrouteADthatisconfiguredishigherthantheADofTrafficthatisdestinedto/24fromR1LANnetworkusesstaticrouteinsteadRIPv2ButthetrafficisforwardedtotheISPinsteadoftheinternalTrafficthatisdestinedto/24fromR1LANnetworkusesRIPv2insteadstaticrouteBecausethestaticrouteADthatisconfiguredisAnswer：EIGRPTSRefertothetopology.Your hasconnectedtheroutersR1,R2andR3withseriallinks.R2andR3areconnectedtotheswitchesSW1andSW2,respectively.SW1andSW2arealsoconnectedtotheroutersR4andR5.TheEIGRProutingprotocolisconfigured.YouarerequiredtotroubleshootandresolvetheEIGRPissuesbetweenthevariousrouters.UsetheappropriateshowcommandstotroubleshoottheQuestionTheloopbackinterfacesonR4withtheIPaddressesof/32,/32and/32arenotappearingintheroutingtableofR5.Whyaretheinterfacesmissing?Theinterfacesareshutdown,sotheyarenotbeingR4hasbeenincorrectlyconfiguredtobeinanotherAS,soitdoesnotpeerwithR5.Automaticsummarizationisenabled,soonlythenetworkisdisyed.Theloopbackaddresseshaven’tbeenadvertised,andthenetworkcommandismissingonR4.Answer:R4EIGRPAS2AS1QuestionWhichpathdoestraffictakefromR1toThetrafficgoesthroughThetrafficgoesthroughThetrafficisequallyload-balancedoverR2andThetrafficisunequallyload-balancedoverR2andAnswer:S1/3,R2QuestionRouterR6doesnotformanEIGRPneighborrelationshipcorrectlywithrouterR1.Whatisthecauseforthismisconfiguration?TheKvaluesTheASdoesnotThenetworkcommandisThepassive-interfacecommandisAnswer:QuestionStudythefollowingoutputtakenon5sourceTypeescapesequencetoSending5,100-byteICMPEchosto5,timeoutis2seconds:Packetsentwithasourceaddressof....Successrateis0percentWhyaresThenetworkstatementismissingonTheloopbackinterfaceisshutdownonThenetworkstatementismissingonTheIPaddressthatisconfiguredontheLo1interfaceonR5isAnswer:R1并没有将 以为源地址 R5不通。EIGRPTSRefertothetopology.YourhasconnectedtheroutersR1,R2andR3withseriallinks.R2andR3areconnectedtotheswitchesSW1andSW2,respectively.SW1andSW2arealsoconnectedtotheroutersR4andR5.TheEIGRProutingprotocolisconfigured.YouarerequiredtotroubleshootandresolvetheEIGRPissuesbetweenthevariousrouters.UsetheappropriateshowcommandstotroubleshoottheQuestionTheloopbackinterfacesonR4withtheIPaddressesof/32,/32and/32arenotappearingintheroutingtableofR5.Whyaretheinterfacesmissing?A.Theinterfacesareshutdown,sotheyarenotbeingB.R4hasbeenincorrectlyconfiguredtobeinanotherAS,soitdoesno