Free Cisco 300-410 Practice Exam with Questions & Answers | Set: 7

IPv6 ND inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes neighbor discovery messages in order to build a trusted binding table database, and IPv6 neighbor discovery messages that do not have valid bindings are dropped. A neighbor discovery message is considered trustworthy if its IPv6-to-MAC mapping is verifiable.

This feature mitigates some of the inherent vulnerabilities for the neighbor discovery mechanism, such as attacks on duplicate address detection (DAD), address resolution, device discovery, and the neighbor cache.

The reason for the loop is that R2 is forwarding the packets destined to 10.1.1.1 to R4, instead of R1. This is because in the redistribute OSPF statement, BW metric has a higher value and delay has a value of 1. So, R2 chooses R4 over R1 for 10.1.1.0/24 subnet causing a loop. Now, R5 learns 10.1.1.0/24 from R3 and advertises the same route to R4, that R4 redistributes back in EIGRP. If R3 sets a tag of 1 while redistributing EIGRP in OSPF, and R4 denies all the OSPF routes with tag 1 while redistributing, it will not advertise 10.1.1.0/24 back into EIGRP. Hence, the loop will be broken.

The ―logging console‖ is a default and hidden command.

A label edge router (LER, also known as edge LSR) is a router that operates at the edge of an MPLS network and acts as the entry and exit points for the network. LERs push an MPLS label onto an incoming packet and pop it off an outgoing packet.

DHCPACK

The server-to-client communication with configuration parameters, including committed network address.

DHCPINFORM

The client-to-server communication, asking for only local configuration parameters that the client already has externally configured as an address.

DHCPNAK

The server-to-client communication, refusing the request for configuration parameter.

DHCPDECLINE

The client-to-server communication, indicating that the network address is already in use

The policy-map COPP-7600 only rate-limit HTTP & HTTPS traffic (based on the ACL

conditions) so any BGP packets will be processed in the class “class-default”, which drops

exceeded BGP packets. Therefore we have two ways to solve this problem:

+ Add BGP to the ACL with the statement “permit tcp any any eq bgp”

+ Configure higher value for CIR in default class as 2Mbps is too low for web traffic (http &

https)

If you use tags to filter the templates, you must apply the same tags to the device to which you want to apply the templates. Otherwise, you get the following error during provisioning: ―Cannot select the device. Not compatible with template.‖

debug ip routing This command enables debugging messages related to the routing table.