Nuevas3

Bank users must be restricted to access DC-2 and the Hotel users must be restricted to access DC-1 for respective applications. Interfaces VRF config on RG is: interface GigabitEthernet 0/1 ip vrf forwarding Bank ! interface GigabitEthernet 0/2 ip vrf forwarding Bank ! interface GigabitEthernet 0/0 ip vrf forwarding Hotel ! interface GigabitEthernet 0/3 ip vrf forwarding Hotel Which configuration meets the requirements?. Router bgp 65010 bgp router-id 1.1.1.1 address-family ipv4 vrf Hotel neighbor 10.0.0.9 remote-as 65030 neighbor 10.0.0.9 activate address-family ipv4 vrf Bank neighbor 10.0.0.6 remote-as 65020 neighbor 10.0.0.6 activate. Router bgp 65010 bgp router-id 1.1.1.1 address-family ipv4 vrf Hotel neighbor 10.0.0.6 remote-as 65030 neighbor 10.0.0.6 activate address-family ipv4 vrf Bank neighbor 10.0.0.9 remote-as 65020 neighbor 10.0.0.9 activate. Router bgp 65010 bgp router-id 1.1.1.1 address-family ipv4 vrf Hotel neighbor 10.0.0.6 remote-as 65020 neighbor 10.0.0.6 activate address-family ipv4 vrf Bank neighbor 10.0.0.9 remote-as 65030 neighbor 10.0.0.9 activate. Router bgp 65010 bgp router-id 1.1.1.1 address-family ipv4 vrf Hotel neighbor 10.0.0.9 remote-as 65020 neighbor 10.0.0.9 activate address-family ipv4 vrf Bank neighbor 10.0.0.6 remote-as 65030 neighbor 10.0.0.6 activate wrong.

An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1 255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address. Which two configurations will fix it? (Choose two) router eigrp 1 ! route_map Leak-Route deny 10 ! interface Serial 0/0 ip summary-address eigrp 1 10.0.0.0 255.0.0.0 leak-map Leak-Route. Configure access-list 1 and match under route-map Leak-Route. Configure access-list 1 permit 10.1.1.1 0.0.0.252. Configure route-map Leak-Route permit 20. Configure route-map Leak-Route permit 10 and match access-list 1. Configure access-list 1 permit 10.1.1.0 0.0.0.3.

should receive 10.16.2.0/24 from R2. Which action resolves the issue?. Modify prefix-list seq 5 on R2 to permit 10.16.0.0/22. Add prefix-list seq 1 on R1 to permit 10.16.0.0/22. Modify prefix-list seq 5 on R2 to permit 10.16.0.0/23. Add prefix-list seq 1 on R1 to permit 10.16.2.0/24.

What are two characteristics of IPv6 Source Guard? (Choose two). requires the user to configure a static binding. recovers missing binding table entries. requires IPv6 snooping on Layer 2 access or trunk ports. requires that validate prefix be enabled. used in service provider deployments to protect DDoS attacks.

Which option is the best for protecting CPU utilization on a device?. ICMP redirects. fragmentation. ICMP unreachable messages. COPP.

Refer to the exhibit. Which interface configuration must be configured on the HUB router to enable DMVPN with mGRE mode?. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.1.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 172.17.0.1 ip nhrp map 10.0.0.11 172.17.0.2 ip nhrp map 10.0.0.12 172.17.0.3 tunnel mode gre. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel mode gre multipoint. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 1 tunnel source 172.17.0.1 tunnel mode gre multipoint. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel destination 172.17.0.2 tunnel mode gre multipoint.

Drag and Drop the IPv6 First-Hop Security features from the left onto the definitions on the right. Note: You just need to click on one of the boxes on the right to match it with the corresponding box on the left. Block reply and advertisement messages from unauthorized DHCP servers and relay agents. Create a binding table that is based on NS and NA messages. Filter inbound traffic on Layer 2 switch port that are not in the IPv6 binding table. Block a malicious host and permit the router from a legitimate route. Create IPv6 neighbors connected to the device from information sources such as NDP snooping.

The hub and spokes are configured via two DMVPN tunnel interfaces. The NHRP is configured, and the tunnels are detected on the hub and the spoke. Which configuration command adds an ipsec profile on both tunnel interfaces to encrypt traffic?. Tunnel protection ipsec profile DMVPN tunel1. Tunnel protection ipsec profile DMVPN unique. Tunnel protection ipsec profile DMVPN multipoint. Tunnel protection ipsec profile DMVPN shared.

The company implemented uRPF to address an antispoofing attack. A network engineer received a call from the IT security department that the regional data center is under an IP attack. Which configuration must be implemented on R1 to resolve this issue?. interface ethernet0/1 ip unicast RPF check reachable-via any allow-default allow-self-ping. interface ethernet0/0 ip unicast RPF check reachable-via any allow-default allow-self-ping. interface ethernet0/0 ip verify unicast reverse-path. interface ethernet0/1 ip verify unicast reverse-path.

Refer to the exhibit. During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem? access-list 100 deny tcp any any eq 465 access-list 100 deny tcp any eq 465 any access-list 100 permit tcp any any eq 80 access-list 100 permit tcp any eq 80 any access-list 100 permit udp any any eq 443 access-list 100 permit udp any eq 443 any. permit tcp port 22. permit udp port 465. permit tcp port 443. permit tcp port 465.

CapeTown router eigrp 100 variance 2. Dubai router eigrp 100 variance 2. interface E 0/0 bandwidth 5000 interface E 0/1 bandwidth 10000 Dubai interface E 0/0 bandwidth 50000 interface E 0/1 bandwidth 5000 Tokyo interface E 0/0 bandwidth 50000 interface E 0/1 bandwidth 10000. CapeTown interface E0/0 bandwidth 5000 ??? (missing command).

AS65510 iBGP is configured for directly connected neighbors. R4 cannot ping or traceroute network 192.168.100.0/24. Which action resolves this issue?. Configure R1 as a route reflector server and configure R4 as a route reflector client. Configure R4 as a route reflector server and configure R2 and R3 as route reflector. Configure R4 as a route reflector server and configure R1 as a route reflector client. Configure R1 as a route reflector server and configure R2 and R3 as route reflector clients.

What is the output of the following command: show ip vrf. Shows default RD values. Displays IP routing table information associated with a VRF. Shows routing protocol information associated with a VRF. Displays the ARP table (static and dynamic entries) in the specified VRF.

A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account. Which action resolves this issue?. Configure ip tacacs-server source-interface GigabitEthernet 1/1. Configure ip tacacs-server source-ip 192.168.100.55. Configure ip tacacs source-interface GigabitEthernet 1/1. Configure ip tacacs source-ip 192.168.100.55.

A network engineer receives a fault ticket about traffic drops from BANK SITE Y to BANK SITE X. The NOC team observe: - Users can reach BANK SITE Y from router RA as a source. - Routers RB and RD are acting as route reflectors. Which configuration resolves the issue?. RF(config)#router bgp 65201 RF(config-router)#neighbor 10.10.10.6 route-reflector-client. RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.2 route-reflector-client. RB(config)#router bgp 65201 RB(config-router)#neighbor 10.10.10.3 route-reflector-client. RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.4 route-reflector-client.

A newly installed router starts establishing an LDP session from another MPLS router to which it is not directly connected. Which LDP message type responds by target router to the initiating router using UDP protocol?. advertisement message. extended discovery message. session message. notification message.

Refer to the exhibit. RD#show ip bgp 192.168.1.1 Advertised to update-groups: 3 65101 10.10.10.2 (metric 2) from 10.10.10.2 (10.10.10.2) Origin IGP, metric 100, localpref 100, weight 65535, valid, external, best 65101 10.0.0.17 (metric 2) from 10.10.10.6 (172.16.20.1) Origin IGP, metric 0, localpref 100, valid, internal RB#show ip bgp 192.168.1.1 BGP routing table for 192.168.1.1/32, version 10 Paths: (1 available, best #1, table Default-IP-Routing-Table) Advertised to update-groups: 2 Local 10.10.10.1 (metric 2) from 10.10.10.1 (192.168.1.1) Origin IGP, metric 0, localpref 100, valid, internal, best A customer finds that traffic from the application server (192.168.1.1) to the HUB site passes through a congested path that causes random packet drops. The NOC team influences the BGP path with MED on RB. But RD still sees that traffic coming from RA is not taking an alternate route. Which configuration resolves the issue?. RB(config)#router bgp 65101 RB(config-router)#neighbor 10.10.10.3 weight 50. RB(config)#router bgp 65101 RB(config-router)#no neighbor 10.10.10.3 route-map HIGH-LP out. RC(config)#router bgp 65101 RC(config-router)#neighbor 10.10.10.6 route-map HIGH-LP out. RD(config)#router bgp 65201 RD(config-router)#no neighbor 10.10.10.2 weight 65535.

Refer to the exhibit. crypto isakmp policy 1 authentication pre-share crypto isakmp key cisco47 address 0.0.0.0 ! crypo ipsec transform-set trans2 esp-des esp-md5-hmac mode transport ! crypto tipsec profile vpnprof set transform-set trans2 ! interface Tunnel0 bandwidth 1000 ip address 10.0.0.1 255.255.255.0 ip mtu 1400 ip nhrp authentication donttell ip nhrp map multicast dynamic ip nhrp network-id 99 ip nhrp holdtime 300 no ip split-horizon eigrp 1 ip tcp adjust-mss 1360 delay 1000 tunnel source Gigabitethernet 0/0/0 tunnel mode gre multipoint tunnel key 100000 tunnel protection ipsec profile vpnprof ! interface FastEthernet0/0/0 ip address 172.17.0.1 255.255.255.0 ! interface FastEthernet0/0/1 ip address 192.168.0.1 255.255.255.0 ! router eigrp 1 network 10.0.0.0 0.0.0.255 network 192.168.0.0 0.0.0.255 ! A network administrator must configure DMVPN tunnels between the hub and spoke with dynamic spoke-to-spoke tunnel capabilities using EIGRP. Which tunnel interface command must the network administrator configure to establish an EIGRP peer?. ip next-hop-self eigrp 1. ip nhrp next-hop-self. no ip next-hop-self eigrp 1. no ip nhrp next-hop-self.

What is a MPLS PHP label operation?. It uses implicit-NULL for traffic congestion from source to destination forwarding. PE removes the outer label before sending to the P router. It improves P router performance by not performing multiple label lookup. Downstream node signals to remove the label.

Which router translates the customer routing information into VPNv4 routes to exchange VPNv4 routes with other devices through MP-BGP?. VPNv4 RR. PE. P. CE.

Which control plane process allows the MPLS forwarding state to recover when a secondary RP takes over from a failed primary RP?. LSP uses NSF to recover from disruption in control plane service. MP-BGP uses control plane services for label prefix bindings in the MPLS forwarding table. FEC uses a control plane service to distribute information between primary and secondary processors. LDP uses SSO to recover from disruption in control plane service.

Refer to the exhibit. R1# *Jan 15 19:45:17.027: TPLUS: Queuing AAA Authentication request 20 for processing *Jan 15 19:45:17.031: TPLUS: processing authentication start request id 20 *Jan 15 19:45:17.031: TPLUS: Authentication start packet created for 20() *Jan 15 19:45:17.031: Using server 172.20.32.1 *Jan 15 19:45:17.035: TPLUS(00000014)/0/NB_WAIT/68937BB0: Started 5 sec timeout *Jan 15 19:45:17.035: TPLUS(00000014)/0/NB_WAIT/68937BB0: timed out *Jan 15 19:45:17.035: TPLUS(00000014)/0/NB_WAIT/68937BB0: timed out, clean up *Jan 15 19:45:17.035: TPLUS(00000014)/0/68937BB0: Processing the reply packet R2# R2#telnet 192.168.1.1 Trying 192.168.1.1 ... Open % Authorization failed. [Connection to 192.168.1.1 closed by foreign host] A network engineer is troubleshooting an AAA authentication issue for R1 from R2. When an engineer tries to open a telnet connection to R1 it opens the connection but shows a %Authorization failed error message on the terminal and closes the connection silently. Which action resolves the issue?. Resolve tacacs+ server host IP authentication miss configuration on the R1 router. Configure authorization commands in the tacacs+ server for the R1 router. Configure the tacacs+ server host IP on the R1 router. Resolve tacacs+ server reachability from the R1 router.

Which control plane process allows the MPLS forwarding state to recover when a secondary RP takes over from a failed primary RP?. LSP uses NSF to recover from disruption in control plane service. LDP uses SSO to recover from disruption in control plane service. MP-BGP uses control plane services for label prefix bindings in the MPLS forwarding table. FEC uses a control plane service to distribute information between primary and secondary processors.

Refer to the exhibit. SW100#sh ip bgp ipv6 uni summ BGP router identifier 100.0.0.1, local AS number 100 BGP table version is 1, main routing table version 1 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2001:ABC:AABB:1100:1122:1111:2222:AAA1 4 100 6 5 1 0 0 00:00:58 0 SW100#sh ip bgp ipv6 unicast SW100# R1#sh ip bgp ipv6 uni BGP table version is 4, local router ID is 1.1.1.1 Network Next Hop Metric LocPrf Weight Path * i 2001::4/128 2001::4 0 100 0 300 i *>i 2002::2/128 2001::2 0 100 0 i R1# R1#sh ipv6 route O 2001::2/128 [110/1] via FE80::5200:C3FF:FE01:E600, GigabitEthernet0/0 B 2002::2/128 [200/0] via 2001::2 SW100 cannot receive routes from R1. Which configuration resolves the issue?. R1 router bgp 100 address-family ipv6 neighbor 2001::2 route-reflector-client neighbor 2001:ABC:AABB:1100:1122:1111:2222:AAA2 route-reflector-client R2 router bgp 100 address-family ipv6 neighbor 2001::2 neighbor 2001::1 next-hop-self. R1 router bgp 100 address-family ipv6 no synchronization R2 router bgp 100 address-family ipv6 no synchronization SW100 router bgp 100 address-family ipv6 no synchronization. R1 router bgp 100 address-family ipv6 neighbor 2001::2 route-reflector-client neighbor 2001:ABC:AABB:1100:1122:1111:2222:AAA2 route-reflector-client R2 router bgp 100 address-family ipv6 neighbor 2001::2 neighbor 2001::1 as-override. R1 router bgp 100 address-family ipv6 redistribute connected R2 router bgp 100 address-family ipv6 redistribute connected.

Refer to the exhibit. admin@linux:telnet 198.51.100.64 Trying 198.51.100.64... Connected to 198.51.100.64. Escape character is '^]'. User Access Verification Password: admin CPE> exit Connection closed by foreign host. admin@linux:~$ ssh 198.51.100.64 admin@198.51.100.64's password: admin Permission denied, please try again. admin@198.51.100.64's password: admin Permission denied, please try again. admin@198.51.100.64's password: admin Connection closed by 198.51.100.64 port 22 admin@linux:~$ An administrator can log in to the device using Telnet but the attempts to log in to the same device using SSH with the same credentials fail. Which action resolves this issue?. Configure transport input all on the VTY lines to allow SSH. Configure to use the Telnet user database for SSH as well. Configure the VTY lines with login local. Configure SSH service on the router.

A network engineer is provisioning end-to-end traffic service for two different enterprise networks with these requirements. The OSPF process must differ between customers on HQ and Branch office routers, and adjacencies should come up instantly. The enterprise networks are connected with overlapping networks between HQ and a branch office. Which configuration meets the requirements for a customer site?. ISP(config)#int f3/0 ISP(config-if)#ip vrf forwarding EA ISP(config-if)#description TO->EA2_Branch ISP(config-if)#ip address 172.16.200.2 255.255.255.0 ISP(config-if)#no shut. ISP(config)#int f2/0 ISP(config-if)#ip vrf forwarding EA ISP(config-if)#description TO->EA1_HQ ISP(config-if)#ip address 172.16.100.2 255.255.255.0 ISP(config-if)#no shut. ISP(config)#int f0/0 ISP(config-if)#ip vrf forwarding EB ISP(config-if)#description TO->EB1_HQ ISP(config-if)#ip address 172.16.100.2 255.255.255.0 ISP(config-if)#no shut. ISP(config)#int f1/0 ISP(config-if)#ip vrf forwarding EA ISP(config-if)#description TO->EA2_HQ ISP(config-if)#ip address 172.16.200.2 255.255.255.0 ISP(config-if)#no shut.

R1 uses SP1 as the primary path. A network engineer must force all SSH traffic generated from R1 toward SP2. Which configuration accomplishes the task?. ip access-list extended match_SSH permit tcp any any eq 22 ! route-map PBR_SSH permit 10 match ip address match_SSH set ip next-hop 10.20.20.1 ! interface Gig0/0 ip policy route-map PBR_SSH. ip access-list extended match_SSH permit tcp any any eq 22 ! route-map PBR_SSH permit 10 match ip address match_SSH set ip next-hop 10.10.10.1 ! ip local policy route-map PBR_SSH. ip access-list extended match_SSH permit tcp any any eq 22 ! route-map PBR_SSH permit 10 match ip address match_SSH set ip next-hop 10.20.20.1 ! ip local policy route-map PBR_SSH. ip access-list extended match_SSH permit tcp any any eq 22 ! route-map PBR_SSH permit 10 match ip address match_SSH set ip next-hop 10.20.20.1 ! interface Gig0/1 ip policy route-map PBR_SSH.

The R1 routing table has the prefixes for the FTP1 and FTP2 file servers. A network engineer must configure the R1 with these requirements: Host1 must use the FTP1 fileserver. Host2 must use the FTP2 fileserver. Which configuration meets the requirement on R1?. ip access-list extended FTP1_R1 permit ip host 10.10.10.11 host 10.10.100.11 ip access-list extended FTP2_R1 permit ip host 10.10.10.22 host 10.10.200.22 ! route-map PBR_FTP permit 10 match ip address FTP1_R1 set ip next-hop 10.10.40.1 route-map PBR_FTP permit 20 match ip address FTP2_R1 set ip next-hop 10.10.30.1 ! ip local policy route-map PBR_FTP. ip access-list extended FTP1_R1 permit ip host 10.10.10.11 host 10.10.100.11 ip access-list extended FTP2_R1 permit ip host 10.10.10.22 host 10.10.200.22 ! route-map PBR_FTP permit 10 match ip address FTP1_R1 set ip next-hop 10.10.30.1 ! route-map PBR_FTP permit 20 match ip address FTP2_R1 set ip next-hop 10.10.40.1 ! ip local policy route-map PBR_FTP. ip access-list extended FTP1_R1 permit ip host 10.10.10.11 host 10.10.100.11 ip access-list extended FTP2_R1 permit ip host 10.10.10.22 host 10.10.200.22 ! route-map PBR_FTP permit 10 match ip address FTP1_R1 set ip next-hop 10.10.30.1 ! route-map PBR_FTP permit 20 match ip address FTP2_R1 set ip next-hop 10.10.40.1 ! interface GigabitEthernet0/0 ip policy route-map PBR_FTP. ip access-list extended FTP1_R1 permit ip host 10.10.10.11 any ip access-list extended FTP2_R1 permit ip host 10.10.10.22 any route-map PBR_FTP permit 10 match ip address FTP1_R1 set ip next-hop 10.10.30.1 ! route-map PBR_FTP permit 20 match ip address FTP2_R1 set ip next-hop 10.10.40.1 ! interface GigabitEthernet0/0 ip policy route-map PBR_FTP.

Refer to the exhibit. Configuration flow exporter Flow-to-collector destination 192.168.100.17 vrf Mgmt-intf transport udp 2601 export-protocol netflow-v5 ! flow monitor My-netflow exporter Flow-to-collector record netflow ipv4 original-input ! ! and tho management-interface is configured as follows: interface GigabitEthernet0 description Management-Interface vrf forwarding Mgmt-intf ip address 192.168.100.50 255.255.255.0 negotiation auto router#sh flow exporter statis Flow Exporter Flow-to-collector: Packet send statistics (last cleared 1w4d ago) : Successfully sent: 0 (0 bytes) Reason not given: 8696868 (11473670976 bytes) Client send statistics: Client: Flow Monitor OeKB-netflow Records added: 256783312 - failed to send: 256713312 Bytes added: 2783766384 - failed to send: 2783766384 router# A network administrator configured NetFlow data, but the data is not visible at the NetFlow collector. Which configuration allows the router to send the records?. Configure the management interface in the global routing table to send the records. Configure a different interface to send the records. Configure the NetFlow collector to listen at export-protocol netflow-v5. Rectify NetFlow collector reachability from the management interface.

Refer to the exhibit. R6# *Sep 6 05:31:58.891: BGP: 10.0.0.17 went from Idle to Active *Sep 6 05:31:58.895: BGP: 10.0.0.17 open active, local address 10.0.0.10 *Sep 6 05:31:58.907: BGP: 10.0.0.17 read request no-op *Sep 6 05:31:58.911: BGP: 10.0.0.17 went from Active to OpenSent *Sep 6 05:31:58.911: BGP: 10.0.0.17 sending OPEN, version 4, my as: 65201, holdtime 180 seconds *Sep 6 05:31:58.911: BGP: 10.0.0.17 send message type 1, length (incl. header) 53 *Sep 6 05:31:58.927: BGP: 10.0.0.17 remote close *Sep 6 05:31:58.931: BGP: 10.0.0.17 ~reset the session *Sep 6 05:31:58.931: BGPNSF state: 10.0.0.17 went from nsf_not_active to nsf_not_active R5# *Sep 6 05:31:58.063: BGP: 10.0.0.18 passive open to 10.0.0.17 *Sep 6 05:31:58.063: BGP: 10.0.0.18 passive open failed - 10.0.0.17 is not update- source Loopback0's address (10.10.10.5) *Sep 6 05:31:58.063: BGP: 10.0.0.18 remote connection attempt failed, local address 10.0.0.17 The traffic from spoke to hub is dropping. The operations team observes: R2-R3 link is down due to the fiber cut. R2 and R5 receive traffic from R1 in AS 65101. R3 and R6 receive traffic from R4 in AS 65201. Which configuration resolves the issue?. R6(config)#router bgp 65201 R6(config-router)#neighbor 10.10.10.5 remote-as 65101 R6(config-router)#neighbor 10.10.10.5 update-source Loopback0 R6(config-router)#neighbor 10.10.10.5 ebgp-multihop 3. R6(config)#router bgp 65101 R6(config-router)#no neighbor 10.0.0.17 update-source Loopback0. R5(config)#router bgp 65101 R5(config-router)#neighbor 10.10.10.6 remote-as 65201 R5(config-router)#neighbor 10.10.10.6 update-source Loopback0 R5(config-router)#neighbor 10.10.10.6 ebgp-multihop 3. R5(config)#router bgp 65101 R5(config-router)#no neighbor 10.0.0.18 update-source Loopback0.

How does LDP operate in an MPLS network?. LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP. Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages. When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP session to propagate an LSP change. When an adjacent LSR receives LDP discovery messages, TCP two-way handshake ensures that the LDP session has unidirectional connectivity.

An administrator is troubleshooting a time synchronization problem for the router’s time to another Cisco IOS XE-based device that has recently undergone security hardening. Which action resolves the issue?. Allow NTP in the ingress ACL on 10.1.255.40 by permitting TCP destined to port 123. Allow NTP in the ingress ACL on 10.1.255.40 by permitting UDP destined to port 123. Ensure that the CPE router has a valid route to 10.1.255.40 for NTP and rectify if not reachable. NTP service is disabled and must be enabled on 10.1.255.40.

Which protocol does MPLS use to support traffic engineering?. Label Distribution Protocol. Tag Distribution Protocol. Border Gateway Protocol. Resource Reservation Protocol.

Refer to the following output: Router#show ip nhrp detail 10.1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47 Type: dynamic, Flags: authoritative unique nat registered used NBMA address: 10.12.1.2 What does the authoritative flag mean in regards to the NHRP information?. NHRP mapping is for networks that are local to this router. The mapping entry was created in response to an NHRP registration request. The NHRP mapping entry cannot be overwritten. It was obtained directly from the next-hop server. Data packets are process switches for this mapping entry.

Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?. Maximum-paths 2. Multi-paths 2. Maximum-paths ibgp 2. Multi-paths eibgp 2.

The Internet traffic should always prefer Site-A ISP-1 if the link and BGP connection are up; otherwise, all Internet traffic should go to ISP-2. Redistribution is configured between BGP and OSPF routing protocols, and it is not working as expected. What action resolves the issue?. Set OSPF Cost 200 at Site-A RTR1, and set OSPF Cost 100 at Site-B RTR2. Set OSPF Cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2. Set metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2. Set metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2.

How are MPLS layer 3 VPN services deployed?. The RD and RT values must match under the VRF. The import and export RT values under a VRF must always be the same. The RD and RT values under a VRF must match on the remote PE router. The label switch path must be available between the local and remote PE routers.