2014年10月31日 星期五

MPLS Traffic Engineering Fast Reroute — Link Protection

Fast Reroute Operation
The example in Figure 1 illustrates how Fast Reroute link protection is used to protect traffic carried in a TE tunnel between devices R1 and R9, as it traverses the link between devices R2 and R3. The TE tunnel from R1 to R9 is considered to be the primary tunnel and is defined by labels 37, 14, and Pop. To protect this link, you create a backup tunnel that runs from R2 to R3 by way of R6 and R7. This backup tunnel is defined by labels 17, 22, and Pop.
When R2 is notified that the link between it and R3 is no longer available, it simply forwards traffic destined for R3 through the backup tunnel. That is accomplished by pushing label 17 onto packets destined to R3 after the normal swap operation (which replaces label 37 with label 14) has been performed. Pushing label 17 onto packets forwards them along the backup tunnel, thereby routing traffic around the failed link. The decision to reroute packets from the primary tunnel to the backup tunnel is made solely by R2 upon detection of link failure.
Figure 1 Backup Tunnel—Fast Reroute

For more details about general MPLS traffic engineering, see the Cisco IOS 12.1(3)T MPLS Traffic Engineering and Enhancements document athttp://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t3/traffeng.htm.

Benefits

The Fast Reroute feature has two noticeable benefits: the increased reliability it gives to IP traffic service and the high scalability inherent in its design:
Increased Reliability for IP Services—MPLS traffic engineering with Fast Reroute uses fail over times that match the capabilities of SONET link restoration. This leverages a very high degree of resiliency for IP traffic that flows over a service provider's backbone, leading to more robust IP services and higher end-customer satisfaction.
High Scalability Solution—The Fast Reroute feature uses the highest degree of scalability by supporting the mapping of all primary tunnels that traverse a link onto a single backup tunnel. This capability bounds the growth of backup tunnels to the number of links in the backbone rather than the number of TE tunnels that run across the backbone.


Configuration Tasks

You configure Fast Reroute link protection in three overall tasks:
Before or after entering these commands, you must enable the MPLS traffic-engineering tunnel capability globally on the router. The command to do that is mpls traffic-eng tunnels.

Configure Fast Reroute protection for a particular link

To configure a primary tunnel and assign it for Fast Reroute protection, perform the following steps:
 
Command
Purpose
Step 1 
Router(config)# interface Tunnel1
Creates a tunnel interface and enters interface configuration mode.
Step 2 
Router(config-if)# ip unnumbered loopback0 
Gives the tunnel interface an IP address.
An MPLS traffic engineering tunnel interface should be unnumbered since it represents a unidirectional link.
Step 3 
Router(config-if)# tunnel destination A.B.C.D 
Specifies the IP address of the device at the far end of the tunnel.
Step 4 
Router(config-if)# tunnel mode mpls traffic-eng
Sets the tunnel's encapsulation mode to MPLS traffic engineering.
Step 5 
Router(config-if)# tunnel mpls traffic-eng 
autoroute announce
Causes the IGP to use the tunnel in its enhanced SPF calculation.
Step 6 
Router(config-if)# tunnel mpls traffic-eng priority 
0 0
Configures setup and reservation priorities of the tunnel.
Step 7 
Router(config-if)# tunnel mpls traffic-eng 
bandwidth 100
Configures the tunnel's bandwidth (in kilobits).
Step 8 
Router(config-if)# tunnel mpls traffic-eng 
path-option 1 explicit identifier 1
Directs the tunnel to use an explicit path.
Step 9 
Router(config-if)# tunnel mpls traffic-eng 
fast-reroute
Enables the tunnel to use a backup tunnel in the event of a link failure. (Establishing the backup tunnel is accomplished by the following two tables' commands.)

Configure a backup tunnel around the protected link

 
Command
Purpose
Step 1 
Router(config)# interface Tunnel1000
Creates a tunnel interface and enters interface configuration mode.
Step 2 
Router(config-if)# ip unnumbered loopback0 
Gives the tunnel interface an IP address.
An MPLS traffic engineering tunnel interface should be unnumbered since it represents a unidirectional link.
Step 3 
Router(config-if)# tunnel destination A.B.C.D
Specifies the IP address of the device at the far end of the tunnel.
Step 4 
Router(config-if)# tunnel mode mpls traffic-eng
Sets encapsulation mode of the tunnel to MPLS traffic engineering.
Step 5 
Router(config-if)# tunnel mpls traffic-eng priority 0 0
Configures setup and reservation priorities of the tunnel.
Step 6 
Router(config-if)# tunnel mpls traffic-eng path-option 1 
explicit identifier 2
Directs the tunnel to use an explicit path.

To configure a backup tunnel around the protected link, perform the following steps:

Configure the protected link to use the backup tunnel

To configure the protected link to use the backup tunnel, perform the following steps:
 
Command
Purpose
Step 1 
Router(config)# interface interface-id
Moves configuration to the physical interface level, directing subsequent configuration commands to the specific physical interface identified by theinterface-id. (In this release it is a POS interface.)
Step 2 
Router(config-if)# ip address A.B.C.D E.F.G.H
Sets a primary IP address for this interface and a mask for the associated IP subnet.
Step 3 
Router(config-if)# mpls traffic-eng tunnels
Enables the MPLS traffic engineering tunnel feature on this physical interface.
Step 4 
Router(config-if)# mpls traffic-eng backup-path 
Tunnel1000
Configures the interface to use the backup tunnel in the event of a detected failure on the interface.
Step 5 
Router(config-if)# pos ais-shut
Enables the alarm signal-line (AIS-L) to be sent when the POS interface is placed in administrative shutdown state.
Step 6 
Router(config-if)# pos report lrdi
Permits selected SONET alarms to be logged to the console for a POS interface.
Step 7 
Router(config-if)# ip rsvp bandwidth 2480000 2480000
Enables RSVP on this interface, and limits the amount of bandwidth RSVP can reserve on this interface.
For a description of IP RSVP command syntax, see the Cisco IOS Quality of Service Command Reference. [http://www.cisco.com/univercd/
cc/td/doc/product/software/ios121/121cgcr/
qos_r/qrdcmd2.htm]

Verifying Fast Reroute for MPLS Traffic Engineering

Verify whether MPLS traffic engineering Fast Reroute link protection has been enabled.
Enter the show mpls traffic-eng fast-reroute database command.
router# show mpls traffic-eng fast-reroute database 12.0.0.0
The sample display output is as follows:
Tunnel head fast reroute information:
Prefix  Tunnel In-label Out intf/label FRR intf/label Status
12.0.0.0/16 Tu111 Tun hd PO0/0:Untagged Tu4000:16 ready  
12.0.0.0/16 Tu449 Tun hd PO0/0:Untagged Tu4000:736 ready  
12.0.0.0/16 Tu314 Tun hd PO0/0:Untagged Tu4000:757 ready  
12.0.0.0/16 Tu313 Tun hd PO0/0:Untagged Tu4000:756 ready 

Configuration Examples

This section provides the following configuration examples:

Configuring a Primary Tunnel and Assigning It for Fast Reroute

Enter the following commands to configure a primary tunnel (at the headend) and to assign it for Fast Reroute link protection:
interface Tunnel1
ip unnumbered loopback0
tunnel destination 25.1.1.1
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mode mpls traffic-eng priority 0 0
tunnel mpls traffic-eng bandwidth 100
tunnel mpls traffic-eng path-option 1 explicit identifier 1
tunnel mpls traffic-eng fast-reroute

Configuring a Backup Tunnel Around the Protected Link


2014年10月25日 星期六

CCIE SP 350-029 New 69 Questions added

CCIE SP Written Exam (Version 3.0) New 69 Questions added  after 1 Oct 2014



Number: 350-029
Passing Score: 790
Time Limit: 120 min
File Version: 421Q+69







QUESTION NO: 396 
A customer requests that sites are connected over an MPLS backbone using the MPLS AToM
service. However, the network engineer advises that the MPLS L3VPN service may be better for
this situation. Which characteristic of MPLS L3VPN may make it a better option from the Service 
Provider perspective?


A. Reduction of operational complexity.
B. Support for multiple network layer protocols, such as IP, IPX, and SNA
C. Customer Layer 2 information will be maintained over the service provider core.
D. Transparent to the customer








Answer: A



QUESTION NO: 397 



R1 and R2 have a static default route that is configured to point toward the ISP. Both R1 and R2 
routers redistribute the default route into OSPF. R2 is the primary gateway toward the ISP and R1 
is the backup gateway. All link metrics are the same. Which two steps ensure that traffic to the ISP 
flows through R2 when the network works properly? (Choose two.)


A. Modify the preference value of the default route on R1 so that it is less preferred than OSPF
external routes.
B. Modify the preference value of the default route on R2 so that it is less preferred than OSPF
external routes.
C. Redistribute the default route as a type 1 external route on R1 and a type 2 external route on
R2.
D. Redistribute the default route as a type 2 external route on R1 and a type 1 external route on
R2.
E. Redistribute the default route on R1 with a higher metric than the existing metric of the
distributed default route on R2.





Answer: A,D





QUESTION NO: 398 



Refer to the exhibit.
A company is deploying IPv6 using a dual-stack approach. OSPFv2 is used for IPv4 routing and is 
redistributed into the BGP IPv4 address family. The network engineer also needs to enable 
OSPFv3 for IPv6 routing using the same design that is used for OSPFv2. All prefixes in the 
OSPFv3 database must be redistributed into the BGP IPv6 address family at router R2, but R3 
does not receive the loopback 0 IPv6 address of R2 via BGP. Which action will fix this problem?
A. redistribution of BGP routes into OSPFv3
B. redistribution of OSPFv3 routes into BGP with include-connected
C. mutual redistribution of OSPFv3 and BGP routes
D. redistribution of connected OSPFv3 routes






Answer: B





QUESTION NO: 399 
A network engineer is tasked with supporting traffic discrimination over MPLS traffic engineering 
tunnels. To allocate restricted bandwidth to a certain type of traffic with no QoS degradation, which 
technique must be used?


A. integrated services
B. MPLS TE Diff-Serv full allocation model
C. MPLS TE Diff-Serv Russian doll model
D. IP precedence

E. class of service










Answer: C




QUESTION NO: 400 
In an OSPF domain, four routers are running the OSPF protocol over a LAN switch in a broadcast 
domain. What is the expected output of executing the show ip OSPF neighbor command on the 
router that is neither a DR nor a BDR?


A. one FULL state, two 2WAY states
B. two FULL states, one 2WAY state
C. three FULL states
D. three 2WAY states




Answer: B




QUESTION NO: 401 
A security risk has been discovered on the Service Provider MPLS core network during a network 
audit. Traceroute between the customer sites displays IP addresses of the Service Provider MPLS 
core. What should be done to hide the IP addresses of the Service Provider MPLS core from the 
customer traceroute utility?






A. Configure an access list to block traceroute traffic.
B. Apply the no mpls ip propagate-ttl forward command.
C. Enable MPLS LDP session protection.
D. Configure an LDP label allocation filter.
E. Apply the no mpls ip propagate-ttl local command.





Answer: B



QUESTION NO: 402 
An engineer is configuring a Cisco CRS-1 Multishelf System. Which option describes the minimum 
LCC and FCC requirements for proper functionality?

A. two LCCs and one FCC
B. one LCC and one FCC
C. two LCCs and two FCCs
D. one LCC and two FCCs



Answer: B



QUESTION NO: 403 

Refer to the exhibit.
Which command group does a network administrator use to filter out R3 (3.3.3.3 subnet) from the 
R4 routing table?


A. R4(config)# router ospf 1
distribute-list prefix-list filter in
B. R2(config)# router ospf 1
distribute-list prefix-list filter out Fa0/1
C. R4(config)# router ospf1
distribute-list prefix-list filter in Fa 0/0
D. R3(config)# router ospf 1
distribute-list prefix-list filter out Fa 0/0


Answer: A


QUESTION NO: 404 
In an OSPF domain, four routers have OSPF neighborship over a broadcast domain. What is the 
expected state after running the show ip OSPF neighbor command on the OSPF designated 
router?


A. one FULL state, two 2WAY states
B. two FULL states, one 2WAY state
C. three FULL states
D. three 2WAY states






Answer: C




QUESTION NO: 405 

Refer to the exhibit.

Router 2 connects OSPF area 1 and area 0. Router 2 receives LSA type 1 from Router 1 in area
1. How many type 3 LSAs will be generated by Router 2 into area 0 to advertise all prefixes that
are announced by the Router 1 LSA type 1 packet?


A. 1
B. 2
C. 3
D. 4


Answer: C



QUESTION NO: 406 
Two OSPF neighbor routers are stuck in the EXSTART state. After a while, the neighborship goes 
down. A network engineer is debugging the issue when both routers show the OSPF log message 
"too many retransmissions." What is the possible root cause?


A. OSPF area mismatch
B. OSPF hello-interval mismatch
C. interface MTU mismatch
D. interface network type mismatch



Answer: C
Explanation: 
QUESTION NO: 407 

Refer to the exhibit.



Routers R1 and R2 have exchanged label binding information. What is preventing the labels from 
populating the MPLS forwarding table?



A. MTU on the serial interface cannot accommodate labels.
B. Cisco Express Forwarding is not running.
C. The MPLS label distribution protocol is mismatched.
D. Inbound access list 100 is applied on the serial interface.




Answer: B




QUESTION NO: 408 


A router is able to assign labels to the prefixes and MPLS is enabled on all of the router interfaces. 
However, this router is unable to establish an LDP session with its LDP neighbors. What could be 
the cause of this problem?




A. ip cef is not enabled.
B. mpls ip is missing in the global configuration mode.
C. The LDP router ID is unreachable.
D. LIB has no label.



Answer: C



QUESTION NO: 409 
A network engineer is responsible for provisioning LDP and IGP over the IP core network to
maintain the MPLS functionality as a day-to-day task. The IP engineer is looking for automation 
opportunities. Which feature allows the LDP protocol to be automatically enabled on interfaces 
that run IGP on the routers?



A. MPLS LDP autoconfiguration
B. MPLS LDP discovery
C. MPLS LDP-IGP synchronization
D. MPLS LDP session protection


Answer: A





QUESTION NO: 410 
A network engineer wants to avoid route looping in an internal BGP. Which two BGP attributes are 
used by a route reflector to avoid this issue? (Choose two.)




A. originator ID
B. secure ID
C. cluster ID
D. network ID
E. reflector ID


Answer: A,C

QUESTION NO: 411 

Refer to the exhibit.

R3 is not able to install the R1 loopback address into its BGP routing table. What should be
configured to install that route?

A. Configure R2 as a route reflector.
B. Enable EBGP multihop on R2.
C. Change the origin attribute to IGP on R3.
D. Configure the next-hop-self command on R2.
E. Configure the next-hop-unchanged command on R2.
F. Add a static route to reach 10.10.23.2 on R3.



Answer: D




Explanation: 
QUESTION NO: 412 

Refer to the exhibit.

ISP-X customers must be able to reach both ISP-Y and ISP-Z, but ISP-X must not allow transit
traffic between ISP-Y and ISP-Z at any time. Which two options satisfy this requirement? (Choose
two.)

A. Use the MED to prefer the proper routes.
B. Use communities to identify and filter routes.
C. Use the atomic aggregate attribute.
D. Use a route map to filter routes on the AS number.
E. Use local preference to prefer the routes.


Answer: B,D





QUESTION NO: 413 
A network engineer is having trouble overcoming a BGP rule: "an EBGP neighbor address
information is carried in the IBGP advertisement. This information does not change to the local
ASBR address". Which BGP attribute can be modified to solve this network reachability issue in 
this type of scenario?


A. AS path
B. origin
C. weight
D. next-hop




Answer: D




QUESTION NO: 414 
The SP core supports PIM-SM for multicast traffic, but one of these routers is not able to see one 
of its PIM neighbors. What is the most likely cause of this issue?




A. The router is an RP with high priority.
B. IGMP snooping is not enabled.
C. PIM sparse mode is not enabled on a participating multicast interface.
D. PIM protocols are not enabled in global configuration mode.
E. Auto-RP is not enabled on this network.





Answer: C



QUESTION NO: 415 

Refer to the exhibit.
There are receivers that are registered at the RP. If the source begins sending multicast traffic
toward R1, how will R1 handle that traffic?
A. R1 forwards the multicast packets on the (S, G) tree toward the RP.
B. R1 encapsulates the multicast packets into a PIM register multicast packet.
C. R1 encapsulates the multicast packets into a PIM join unicast packet.
D. R1 tunnels the multicast packets in PIM register messages toward the RP.





Answer: D


QUESTION NO: 416 
A network architect is tasked to design and deploy multicast in a service provider core. There is a 
requirement to have two PIM RP routers for PIM-SM distribute mode. What can the network
architect do to satisfy this requirement?


A. Set two RPs with same priority.
B. Set two RPs, one with high priority and the other with low priority.
C. Set one RP as the main RP and another as a backup RP.
D. Set the RP-BSR method with one high-priority RP and one low-priority RP.



Answer: D


QUESTION NO: 417 

Which three of these options can be a forwarding equivalence class? (Choose three.)
A. groups of IP addresses
B. bridge or switch instance
C. traffic engineering tunnel
D. IPsec tunnel
E. routing equivalence paths
F. a bgp prefix


Answer: A,B,C

QUESTION NO: 418 
Which two statements best describe the functionality of the BGP graceful restart capability?
(Choose two.)

A. The peer router sends an end-of RIB message to the restarting router.
B. The peer router immediately removes the BGP routes that it learned from the restarting router
from its BGP routing table.
C. The restarting router does not remove any stale prefixes after the timer for stale entries expires.
D. The router establishes BGP sessions with other routers and relearns the BGP routes from other 
routers that are also capable of graceful restart. The restarting router waits to receive updates 
from the neighboring routers. When the neighboring routers send end-of-RIB messages to indicate 
that they are done sending updates, the restarting router starts sending its own updates.
E. The restarting router removes any stale prefixes after the timer for stale entries expires.








Answer: D,E



QUESTION NO: 419 

Refer to the exhibit.
Based on the topology, the BGP configuration in R1, and the outputs from R1 and R2; identify why 
was subnet 33.33.33.33/32 not received on the R2 BGP table?


A. R2 is not a route reflector client for R1.
B. R1 is configured to suppress all inactive (RIB failure) routes.
C. The 33.33.33.33/32 subnet must be learned through BGP.
D. The 11.11.11.11/32 subnet exists in the routing table.





Answer: D


QUESTION NO: 420 



Refer to the exhibit.
The R1 and R2 routers are running OSPF, LDP, and BGP. Why is the label for 1.1.1.1 prefix
absent in the R2's MPLS forwarding table?
A. IP MTU cannot accommodate labels.
B. The MPLS tunnel is not enabled for the Fast Ethernet 0/0 interface.
C. The subnet is not learned via OSPF.
D. The bgp send-label command is not enabled between R1 and R2.





Answer: C

A network engineer is redistributing BGP prefixes into RIP. These prefixes are unreachable in the 
RIP network. Which the two actions could resolve the issue based on this scenario? (Choose two.)

A. Enable BGP synchronization.
B. Enable BGP AS-override.
C. Rewrite RIP hop count for the redistributed prefixes.
D. Enable internal BGP redistribution.
E. Rewrite BGP next hop.
F. Apply BGP next-hop-self.





Answer: C,D




QUESTION NO: 422 


Which are the three mandatory BGP attributes? (Choose three.)

A. AS path
B. origin
C. local preference
D. next hop
E. MED value
F. communities





Answer: A,B,D




QUESTION NO: 423 
An engineer is designing a security method for a service provider company that needs to secure 
BGP peering with external peers. Based on the options provided, which three security precautions 
should be taken? (Choose three.)



A. Enable BGP neighbor authentication with MD5.
B. Enable the BGP Time to Live Security Check feature.
C. Limit the AS path length.
D. Disable ebgp-multihop.
E. Enable bgp bestpath as-path ignore.
F. Enable bgp-policy.








Answer: A,B,C

QUESTION NO: 424 


Refer to the exhibit.
Each AS domain contains more than one BGP router. Site-B sends traffic to ISP-1 over a directly 
connected link, but Site-B is not used as an AS transit for the ISP-1 backbone. How should the 
routes be advertised by ISP-1 towards Site-B to accomplish this task?


A. Prefixes from site-A should be advertised with the no-export community
B. Prefixes from site-B should be advertised with the no-export community
C. Prefixes from site-B should be advertised with the no-advertise community
D. Prefixes from site-A should be advertised with the as-path prepend attribute
E. Prefixes from site-A should be advertised with the no-advertise community





Answer: B

A customer is connected to a service provider by a low-speed link and wants to increase the
bandwidth of this connectivity without creating additional IP addresses. Multiple physical links with 
the same bandwidth value are already available between the customer and the service provider. 
Which technology can be used to achieve these requirements?


A. HDLC
B. PPTP
C. Multilink PPP
D. Frame Relay





Answer: C

QUESTION NO: 426 
A company has a backup T1 link to its corporate head office. To minimize costs, the company will 
use the T1 link only for email downloads from the corporate email server. The PPP dialer initiates 
only when the internal server initiates an email connection to the corporate email server. However, 
the PPP connection does not disconnect after emails are downloaded. What is the cause of this 
issue?


A. The dialer-map command is not configured.
B. The interface is not added in the dialer-group command.
C. The dialer-list command is incorrectly configured.
D. The dialer time-out command is not configured.





Answer: C


QUESTION NO: 427 



A router is unable to route packets over a PPPoE link. What could be the cause of this issue?
A. incorrect IPCP connection for the agreed-upon IP address
B. incorrect dialer map profile
C. incorrect username of the PPP connection
D. incorrect access list





Answer: B


QUESTION NO: 428 
Two routers that use a POS interface are connected back-to-back. The interfaces are operational 
with no alarms appearing. When the routers are connected using an SDH network, alarms appear 
on the router and the interface status goes down. Which action will fix this issue?


A. Reset the POS interface.
B. Check the ADM switch for correct framing.
C. Change the framing type on the router POS interface.
D. Swap the POS interface.






Answer: C


QUESTION NO: 429 

Refer to the exhibit.
The link payload rate is subdivided into multiple fixed-rate channels. In addition, the data rate of a 
single cell or packet flow is limited by the bandwidth of an individual channel. If the link is an OC-48, into how many channels can the link be subdivided?




A. four OC-12 channels
B. two OC-24 channels
C. one OC-48 channel
D. three OC-16 channels





Answer: A


QUESTION NO: 430 
A company is using a Layer 2 Frame Relay network. Which circuit emulation will a network
engineer use to extend the customer Frame Relay network over the Service Provider backbone?


A. GRE
B. L3VPN
C. AToM
D. VPLS





Answer: C


QUESTION NO: 431 
Refer to the exhibit.

An MPLS VPN service has been provisioned for an ABC customer. Based on the output from the 
VRF BGP configuration of PE1 and PE2, which statement describes the route exchange between 
ABC site 1 and site 2?


A. Only CE1 will be able to install CE2 BGP updates in its BGP table.
B. Only CE2 will be able to install CE1 BGP updates in its BGP table.

C. CE1 can install the CE2 subnets in its BGP table and CE2 can install the CE1 subnets its BGP 
table.
D. CE1 cannot install the CE2 subnets in its BGP table and CE2 cannot install the CE1 subnets its 
BGP table.
E. "as-override" feature cannot be used in this scenario.




Answer: A

QUESTION NO: 432 
A network engineer observes increasing output drops on the serial interface. Which two solutions 
can be implemented to minimize these drops? (Choose two.)
A. Increase the MTU size on the link.
B. Replace the serial cable between the connecting devices.
C. Turn on fast switching.
D. Increase the output hold queue size.
E. Implement priority queuing on slower serial links by configuring priority lists.



Answer: D,E

QUESTION NO: 433 
A network engineer is connecting a router that is not manufactured by Cisco to a Cisco 7613
Router with a 10 Gigabit Ethernet Route Switch Processor uplink interface. The uplink interface is 
not in shutdown mode, but the interface does not come up. What is the most likely cause of the 
issue in this scenario?


A. The remote device does not support 10 Gigabit Ethernet.
B. Autonegotiation is enabled.
C. There is a faulty interface.
D. There is a faulty cable.




Answer: B

QUESTION NO: 434 
An ISP provides DSL services to home customers. Each customer is given a username and a
password. The ISP RADIUS server is configured to send a challenge to its clients along with the 
server hostname. Which two protocols should be used to deliver this service? (Choose two.)




A. PPP
B. PPPoE
C. PAP
D. CHAP
E. HDLC





Answer: B,D



QUESTION NO: 435 


Refer to the exhibit.
A home office user sends IP datagrams from the local router, which sends Ethernet datagrams to 
the DSL modem. The DSL modem encapsulates the Ethernet frames in which frame format before 
sending them over the physical DSL link to DSLAM?



A. RFC 1483
B. PPPoE
C. PPPoA
D. IP over ATM








Answer: A


QUESTION NO: 436 

Refer to the exhibit.
An engineer is looking the CE1 routing table for CE2 Loopback 0. Each CE runs OSPF with its PE. 
Which statement describes why the CE2 Loopback address is installed as an external OSPF route 
at the CE1 routing table?


A. PE1 and PE2 have mutual redistribution between OSPF and BGP.
B. CE1 is configured under OSPF with the command redistribute connected.
C. CE1 and CE2 are in different areas.
D. CE1 and CE2 have different OSPF processes.
E. PE1 and PE2 have different OSPF VRF processes.





Answer: E

QUESTION NO: 437 



Two customers have routers that run OSPF and belong to the same OSPF area. These two
routers are connected by an MPLS backbone and by a low-bandwidth point-to-point link (used as 
a backup link). Which two minimum configurations are required to connect these two routers? 

(Choose two.)



A. site-of-origin
B. sham-link
C. domain tag
D. down bit
E. link cost
F. virtual-link





Answer: B,E

QUESTION NO: 438 

An engineer is looking into a solution for two customers that are using the network prefix
10.10.1.0/24. The network engineer wants the network prefix to remain the same for both
customers, while maintaining unique network information for each. Which approach can be used 
to achieve this requirement?

A. Assign a unique RD per customer.
B. Assign a unique RT per customer.
C. Assign a unique SOO per customer.
D. Assign a unique TE per customer.





Answer: A

QUESTION NO: 439 
An MPLS VPN service is deployed over an MPLS provider. A customer wants all sites to run BGP 
with his provider, given that all CEs have the same AS value. Which feature on the service
provider PEs can allow communication among different sites?

A. BGP allow-AS
B. BGP weight
C. BGP multihop
D. BGP AS-override





Answer: D




QUESTION NO: 440 


Refer to the exhibit.

Customer ABC uses RFC 1918 addresses within its network. Customer ABC wants the Internet
access for all the branch offices to transit through the head office for security and NAT purposes. 
The PE routers in the service provider network contain Internet routes in the global routing table. 
Which option describes the router or routers that should be configured to accomplish the 
administrative goal of the customer?

A. all the PE routers and the P router
B. both PE2 and PE3 routers
C. only the PE1 router
D. only the P router





Answer: C


QUESTION NO: 441 
A customer requests a MPLS VPN service with dual-home connection to the service provider.
Which BGP attribute can prevent routes originated from the customer from being readvertised
back to them?

A. site-of-origin
B. local-AS
C. AS-path
D. next-hop




Answer: A



QUESTION NO: 442 
A network engineer is looking for a specific VRF routing table in the PE router of an Service
Provider. Which two information points will be listed in the routing table? (Choose two.)

A. routes received from the directly connected CE
B. routes received from the other MP-BGP PE peer
C. routes received from the other IGP PE peer
D. routes received from the same AS
E. routes of the global routing table





Answer: A,B

QUESTION NO: 443 

A network engineer wants to use Telnet to access a CE device in a VRF from a PE device that
runs Cisco IOS Software. How can a CE device with IP address 1.1.1.2 be accessed by the PE
device?

A. telnet 1.1.1.2 /vrf vrf-name
B. telnet 1.1.1.2 vrf vrf name
C. telnet 1.1.1.2 vrf
D. telnet vrf vrf name 1.1.1.2






Answer: A


QUESTION NO: 444 
An ISP provides MPLS L3VPN services and is required to set up a multicast VPN. Which routers
will be enabled with MDT to support a multicast VPN?

A. All service provider routers participating in the multicast VPN.
B. All service provider route reflectors.
C. All service provider PE routers.
D. All service provider P routers.
E. All service providers P, PE and route reflector routers.



Answer: A

QUESTION NO: 445 
In the Carrier Supporting Carrier (CsC) feature, which two options represent protocols that run
between CSC-PE and CSC-CE? (Choose two.)

A. IGP and EBGPv4
B. IGP and RSVP
C. IGP and LDP
D. EBGPv4 with a sending community
E. EBGPv4 with a sending label




Answer: C,E

QUESTION NO: 446 

In relation to MPLS Multicast VPN, which three statements about multicast distribution tree (MDT) 
groups are true? (Choose three.)


A. MDTs are built in customer networks.
B. MDTs are built in provider networks.
C. The number of MDTs depends on PIM modes of MDT groups.
D. Default MDT groups are used for PIM control traffic, low-bandwidth sources, and flooding of
sparse mode traffic.
E. Data MDT groups are used for high-bandwidth sources to reduce replication to uninterested
PEs.
F. Data MDT groups forward multicast packets using MPLS labels and Default MDT groups
forward multicast packets using GRE tunnels.





Answer: B,C,E


QUESTION NO: 447 


A network engineer is requested to have load sharing over two links to the same destination prefix.
The traffic share for the first link must be two times the traffic share of the second link. Which two 

protocols can fulfill this requirement? (Choose two.)



A. EIGRP
B. BGP
C. ISIS
D. OSPF
E. RIP
F. IGRP






Answer: A,B


QUESTION NO: 448 
A network engineer is asked to monitor the VPLS services using IP LSP traceroute and ping.
Which feature should be used to achieve this goal?

A. MPLS OAM
B. IP SLA
C. PW
D. AToM





Answer: A

QUESTION NO: 449 


Refer to the exhibit.

An MPLS L2VPN service is provisioned for VPN-A and VPN-B. Which two statements describe
the label exchange and the LDP session requirement for MPLS L2VPN signaling? (Choose two.)




A. PE1 uses the label value that is received from PE2 for VPN-B as the inner label for VPN-B.
B. PE2 uses the label value that is received from PE1 for VPN-B as the transport label for VPN-B.
C. LDP must be enabled on the address that is used as the LDP ID between PE1 and PE2.
D. T-LDP sessions are established between PE1, P1, P2, and PE2.
E. BGP is required for LDP, based on the Layer 2 VPN.
F. PE1 uses the label value that is received from PE2 for VPN-B as the transport label for VPN-B.
Answer: A,C



QUESTION NO: 450 

Which MPLS technology will achieve LAN extensions over the service provider backbone?
A. AToM
B. VPLS
C. L2VPN
D. L2TPv3





Answer: B

QUESTION NO: 451 
A network engineer is asked to connect two customer sites using Layer 2 connectivity over an
MPLS backbone. One customer site uses PPP connectivity with the service provider and the other 
customer site uses Frame Relay connectivity with the service provider. Which option can the 
network engineer use to enable network connectivity between these two customer sites?


A. GRE tunnels
B. IP interworking
C. Ethernet interworking
D. L2TPv3 tunnels





Answer: B


QUESTION NO: 452 

A network engineer receives a request to tunnel Frame Relay traffic for DCLI 100 over the MPLS
cloud while maintaining circuit information. Which solution meets this requirement?

A. L2VPN
B. L3VPN
C. VPLS
D. GRE





Answer: A

QUESTION NO: 453 

Which transparent LAN service allows a service provider to offer Layer 2 Ethernet service to
connect an enterprise in a metro region?

A. AToM
B. VPLS
C. PPP over MPLS
D. HDLC over MPLS







Answer: B

QUESTION NO: 454 

A network engineer wants customers to retain routing information and Layer 2 connectivity for
non-Ethernet VPNs within their networks. Which two technologies can be used to accomplish this 
goal? (Choose two.)



A. VPLS
B. L2TPv3
C. L3VPN
D. AToM
E. IPsec





Answer: B,D

QUESTION NO: 455 
Two customer sites are connected to a service provider backbone through L2VPN. GRE is
carrying L2VPN circuits across the backbone. Which part of the packet carries the information to 
route the L2VPN circuits?


A. GRE header
B. LDP header
C. IP header
D. Layer 2 packet header






Answer: A

QUESTION NO: 456 



Refer to the exhibit.
RTP header compression is used on the link for the voice packet. If the header overhead starts
reducing at 70%, and is reduced to the maximum amount, what will the overhead percentage be?

A. 0.22
B. 0.33
C. 0.44
D. 0.55

Answer: A


QUESTION NO: 457
Which protocol is used to establish LSP tunnels, enabling resource allocation such as bandwidth 
along the path?


A. LDP
B. RSVP
C. TDP
D. IPsec




Answer: B


QUESTION NO: 458 
A customer wants the minimum delay for the transit traffic that traverses the service provider core. 
An engineer realizes that the customer sites are remotely dispersed and wants to give them a 
specific path through the MPLS core with guaranteed bandwidth and without relying on the 
shortest path of OSPF as the customer IGP. Which technology will achieve the required result?


A. L2VPN
B. IPsec tunnel
C. MPLS TE tunnel
D. L3VPN
E. mGRE with extensions




Answer: C



QUESTION NO: 459 
A network engineer is implementing an MPLS network among devices from different vendors. The 
devices must be configured with MPLS VPN service and MPLS TE. Based on options provided, 
which three protocols fulfill all of these requirements? (Choose three.)


A. RSVP
B. LDP
C. TDP
D. EIGRP
E. IGRP
F. BGP

G. RIP




Answer: A,B,F



QUESTION NO: 460 

Refer to the exhibit.

An MPLS-based service provider wants to deploy QoS over its backbone. Original customer QoS 
information must be preserved when the packet leaves the MPLS network. In addition, the egress 
LSR must forward packets according to the LSP Diff-Service information, as depicted in the 
topology. Which QoS model satisfies these requirements?


A. uniform model
B. pipe model
C. short-pipe model
D. IntServ model



Answer: B

QUESTION NO: 461 
A network engineer wants to leak only IPv6 loopback addresses from level 2 to level 1. All of the 
other level 2 prefixes should not be advertised into level 1. Which technique will achieve this goal, 
based on IOS SRE release?


A. route-policy

B. access-list
C. distribute-list
D. policy-map




Answer: C

QUESTION NO: 462 DRAG DROP