From: Swaroop Potdar (swarooppotdar@hotmail.com)
Date: Wed Sep 15 2004 - 20:16:12 GMT-3
Hi Kasturi,
Thanks for your reply.
here are my answers to your list:
it would be great if you can throw some challenges on the ISDN ATM and QOS
and some IOS features front too.
expecting your response to the answers soon with rectifications if required.
-----------------------------------------------------------------
1. What are the ways to configure OSPF on NBMA (physical and without
physical interfaces)
Ans:
OSPF on physical as well as multipoint subinterface ( this also has physical
qualities)
- NBMA is the default mode on OSPF for this
these are the ways OSPF can be configured:
ip ospf network NBMA
ip ospf network point-to-multipoint N
ip ospf network point-to-mu
2. Same as 1 but with restrictions of "neighbour cmd and ip ospf network
cmd"
Ans:
with the restriction of ip ospf network command;
the only option is to accept the default mode which is NBMA for physical and
multipoint subint, or point to point in a p2p subint.
with these restrictions if one side is multipoint and other side is
point-to-point subint then only way i see out is to create a p2p tunnel and
form adjacency over it.
3. What are the various ways to authenticate OSPF,EIGRP,ISIS,Rip v2.
Ans:
Two ways to authenticate these protocols are plain text and MD5 hash.
except OSPF all others use the interface commands for authentication.
while OSPF uses area level authentication activation and passes it over
interfaces.
4. What are the ways to filter routes in OSPF, Eigrp, RIP,BGP
OSPF : Distribute List( with Prefix list or ACL)
Route Map with ( prefix or ACL)
Distance command to poison routes with ACL
EIGRP : Same as above
BGP : Same as above plus ( filter list with as-path ACL)
RIP : Same as above with (offset-list)
5. how would u filter routes to prevent route-redistribution feedback.
ANS:
we can use route maps and distribute list for the below with prefix list of
ACL's
-------------
I personally would love to tag the redistributed routes from,
A to B and then stop the TAG from B to A
one question here;
while doing two point mutual redistribution
B<--->A<--->B<-->A<-->
can i tag the routes at BOTH the POINTS from A to B with the same TAG
and then just filter that TAG out while redistributing from B to A????
and vice versa????
without tagging this method could be done with just distribute list with
plain prefix filtering or with route maps too.
---------------
second method is distance manipulation:
increase the distributed protocols distance so that all routes from that are
secondary in other protocols domain. and vice versa
----------------
6. configure dLSW+
four methods;
1) TCP encap : dlsw remote-peer 0 tcp ip_adress
2) FST encap : dlsw remote-peer 0 fst ip_address
3) Direct : dlsw remote-peer 0 interface _"_
4) DLite : dlsw remote-peer 0 frame-relay interface_"_ DLCI_numb
(with llc2 map on the DLCI)
for ISDN have to map DLSW on with teh map command.
7. How wud u aggregate routes in BGP,EIGRP.
BGP : 1) Aggregate command.
2) A static route to null0 with a aggregate entry and then use
redistribute or network command to advertise it.
Eigrp:
1) Static route to null0 and advertise it with a network command.
2) ip summary-address eigrp interface command.
8. how wud u configure route dampening in bgp
Ans:
Process level:
On process level dampening would be enabled for all the learned prefixes.
Prefix Level:
dampening with a route map would set specific dampening for the specified
prefixes.
9. how wud u configure login security on a router
Ans:
1) hide telnet address.
2) configure lock n key ACL
3) login local with different privilege levels and commands allowed
nested in them.
4) Is simply to enable AAA new-model and forward the requests to a T+
server.
10. Port security on switch
Ans:
1) Switchport port security interface level command and specifiy the
known MAC addresses which will be allowed on that port.
2) Switchport port protected which will act like a port belonging to a
PVLAN not allowing other host on the same vlan to talk directly to it.
3) If only one single host is going to connect to the port bind teh IP
addr and mac address using a static arpa entry.
11. layer 3 feature on a 3350
enable ip routing
second method ....?????
-----------------------------------------------------------------
>From: "kasturi cisco" <kasturi_cisco@hotmail.com>
>Reply-To: "kasturi cisco" <kasturi_cisco@hotmail.com>
>To: swarooppotdar@hotmail.com, ccielab@groupstudy.com
>Subject: RE: Multiple ways of configuring things
>Date: Wed, 15 Sep 2004 14:50:01 +0000
>
>Swaroop,
>
>Good that u have started this thread. But instead of giving the answer
>here is what i will give as hint some of what i remember... and you
>expand on it (not that i am an expert and know every single
>combination...). Each of the following have at least 2 methods if i
>remember correctly..some have more
>
>1. What are the ways to configure OSPF on NBMA (physical and without
>physical interfaces)
>2. Same as 1 but with restrictions of "neighbour cmd and ip ospf network
>cmd"
>3. What are the various ways to authenticate OSPF,EIGRP,ISIS,Rip v2.
>4. What are the ways to filter routes in OSPF, Eigrp, RIP,BGP
>5. how would u filter routes to prevent route-redistribution feedback.
>6. configure dLSW+
>7. How wud u aggregate routes in BGP,EIGRP.
>8. how wud u configure route dampening in bgp
>9. how wud u configure login security on a router
>10. Port security on switch
>11. layer 3 feature on a 3350
>
>Expand on this list and u will be on the right path...let me know ur
>answers and i can help u verify or double check.
>
>Good Luck,
>Kasturi.
>
>------------------------------------------------------------------------
>
>All the news that matters. All the gossip from home. Specially for NRIs!
>
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>http://shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Oct 01 2004 - 15:00:44 GMT-3