Hello,

I've experienced a problem with the sim-VRF. On R2 after enabling ip cef and placing the vrf (cu-red / cu-green) on the appreciate interfaces with the ip addresses nothing shows up in the respected routing tables. To my knowledge all that is needed for vrf to work:

1. enable ip cef
   
2. create the vrf with either ip vrf <vrf name> or vrf definition <vrf name>
   
3.  add the vrf to an interface
   

Answer is incorrect, it is not the choice with the route-map config. It is even stated in the explanation section that the route-map and ACL are a trick as they aren't being used as part of redistribution in the output, therefore any changes to the route-map or ACL don't have an effect at all.

Correct answer is the answer which states "default metric 10000 100 255 100 1500" because it adds a default-metric under EIGRP, which is required to redistribute RIP routes. This ensures RIP-learned networks (like 192.168.2.0/24) are properly advertised into EIGRP and reach R2 and R4.

Thanks

HI,

I'm working on the DMVPN SIM using the GNS3 Lab and I am running into trouble here. I followed the configuration solutions, which is as follows:

BR1
interface tunnel 0
ip address 192.168.1.1 255.255.255.0
tunnel source e0/1
tunnel mode gre multipoint
tunnel key 100
ip nhrp network-id 100
ip nhrp authentication ccnp123
ip nhrp map 192.168.1.254 10.10.255.254
ip nhrp map multicast 10.10.255.254
ip nhrp holdtime 300
ip nhrp nhs 192.168.1.254

BR2
interface tunnel 0
ip address 192.168.1.2 255.255.255.0
tunnel source e0/1
tunnel mode gre multipoint
tunnel key 100
ip nhrp network-id 100
ip nhrp authentication ccnp123
ip nhrp map 192.168.1.254 10.10.255.254
ip nhrp map multicast 10.10.255.254
ip nhrp holdtime 300
ip nhrp nhs 192.168.1.254

with the crypto ipsec fragmentation before-encryption on both routers as well as ip mtu 1400 and ip tcp adjust-mss 1360. As well as applying the ipsec_profile. However, when I do the traceroute i get this:

tracing the route to 172.16.1.254
1 192.168.1.254 2 msec 1 msec 1msec
2 * * *
3* * *

%DMVPN-6-NHRP_RESOLUTION_REPLY: TUNNEL0: Host with (Tunnel: 192.168.1.1 NBMA: 10.10.255.1) Received Resolution Reply from (Tunnel: 172.16.2.254 NBMA: 10.10.255.254)

Some help or assistance to why the solution does not work would greatly be appreciated

Thanks 

Hi,

I am new and need help. I am interested in buying the 300-410 question set on this site. However, how does the labs work? Is it done on the same test question set or is it separate?

Thanks to how2pass for the study material. I received a Pass today on the exam. For those interested - you start off with 6 labs. All of the labs on this site are spot on. Be extremely careful with what devices you are configuring. I actually configured the wrong CoPP Router today. By the time I realized it, it was too late. It appears after a certain amount of time the system locks the devices down. 

Then onto 60 questions with drag and drop and multiple choice. Gonna say 95% was from 1.1 and the rest from 1.0. I didn't do as well as I would of liked too, but still received the Pass. 

Good luck to all.

The question under the Network Assurance section asks to pick 2 but highlights 3 answers.

Hi - not sure if its me, but I can't ping 10.12.1.2 from R1, thus obtaining the output.

R1#sh ip sla summary
IPSLAs Latest Operation Summary
Codes: * active, ^ inactive, ~ pending
All Stats are in milliseconds. Stats with u are in microseconds

ID          Type        Destination      Stats      Return      Last
                                                      Code        Run
-----------------------------------------------------------------------
*1          icmp-echo  10.12.1.2        -          Timeout    18 seconds ag
                                                                  o       
and

not 

R1# show ip sla summary
IPSLAs Latest Operation Summary
Codes: * active, ^ inactive, ~ pending
ID        Type        Destination    Stats    Return        Last
                                      (ms)      Code        Run
-----------------------------------------------------------------------
*1        icmp-echo  10.12.1.2      RTT=2        OK        4 seconds ago

as indicated via the notes for this lab.

Something appears to be missing here.

Hi - can you let me know if the Command Line shortcuts are available during the exam - ? and up arrow, etc.
They are available on the CML Sim as well as real world, so I am curious.

Thanks so much.

Hi,

Not really a subject I'm strong on however I believe the answer should be B and E (not B and D)

Why D is wrong:

The WLC does not need to know or list the portal FQDN under its virtual interface because it’s not hosting that FQDN or the certificate. Essentially, what I'm seeing is that D is only applicable when the WLC itself hosts the login portal or when you want the WLC to present a specific FQDN and certificate for HTTPS.  But in ISE deployments, particularly with CWA or guest portals, this does not apply.

Why E is correct: 

A new CSR is needed so that the certificate installed on ISE includes the new static FQDN in its SAN or CN field. Without this, browsers will show certificate errors when redirected to the guest portal.


If I am missing something let me know, thanks!

Hi,

I notice there was already a post about this and it was "incorrectly" corrected.

Answer should be the one that starts with 
"Access-list 100 deny tcp host 10.0.0.5 any eq 22"

Because CoPP will continue to forward traffic it does not match on, and it does not match on deny statements.

The question that is currently correct will match on the ip 10.0.0.5 (via permit) then the action is drop, which goes against the what the question is asking.

Thanks