Exam 350-401 All QuestionsBrowse all questions from this exam
Go to Exam
Question 744

SIMULATION

-

Guidelines

-

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

-

Tasks

-

BGP connectivity exists between Headquarters and both remote sites, however Remote Site 1 cannot communicate with Remote Site 2. Configure BGP according to the topology to achieve these goals:

1. Configure R2 under the BGP process to provide reachability between Remote Site 1 and Remote Site 2. No configuration changes are permitted on R1 or R3.

2. Ensure that the /32 networks at Remote Site 1 and Remote Site 2 can ping each other.

    Correct Answer:

Discussion
[Removed]

the given answer is correct with the exception that they forgot to add the 'mask' keyword when defining the networks

sergiosolotrabajo

Guys just saying, I did the exam yesterday and Cisco changed all simulations with the new ENCOR v1.1. Neither 744, 745, 746, 747, 751, 752, 754, 773, 798 or 801. I recommend you to wait till ExamTopics people has uploaded the new ones. Just not fair, from v1.0 to v1.1 changing the whole exam, thanks Cisco.

Evreni

did you pass it

Wazerface

I passed the updated exam less than 2 weeks ago. And as Din04 said it most of the Simulations here are not in the current exam. (Well i did not get any of them but one) Out of the 4 simulations that I had to complete i only got the GRE + Ipsec simulation. This material is great if you want to find and work on your weakness but dont expect to have the exact same questions.

Wazerface

I meant sergiosolotrabajo

AzraelOmbrixa

Following indicated not to be in exam simulation 1 - #744 - BGP Configuration - Configure R2 only simulation 1A - #744 - BGP Configuration (alternative) - configure R1 and R3 simulation 2 - #745 - OSPF Configuration simulation 3 - #746 - VRRP Configuration simulation 4 - $747 - OSPF MD5 Configuration simulation 5 - #751 - EEM Applet Configuration simulation 6 - #752 - SPAN/Netflow/IP SLA Configuration simulation 7 - #754 - GLBP Configuration simulation 8 - #773 - OSPF Interface Passive Configuration simulation 9 - #798 - Logging/Netflow Configuration simulation 10 - #801 - Active/Passive portchannel and PVST+ Configuration Known to be in current exam Simulation 11 - #878 - VRF Configuration Simulation 12 - #896 - eBGP Configuration Simulation 13 - #900 - OSPF Configuration

AzraelOmbrixa

Simulation not listed here Configure HSRP - Alternative to Simulation 7 - GLBP Configuration Scenario Configure Distro-SW1 and Distro-SW2 on vlan 100 for hosts connected to Access-SW1 to achieve these goals: 1. Configure group number 1 using virtual IP address of 192.168.1.1/24 2. Configure Distro-SW1 as the active router using a priority value of 110 and Distro-SW2 as the standby router 3. Ensure that Distro-SW2 will take over the active role when Distro-SW1 goes down, and when Distro-SW1 recovers, it autmatically resumes the active role Distro-SW1 Sw1 int vlan 100 standby 1 ip 102.168.1.1 standby 1 priority 110 standby 1 preempt copy run start Distro-SW2 Sw2 int vlan 100 standby 1 ip 102.168.1.1 standby 1 preempt copy run start

janbaz

Hi, Azrael, can you please tell, why you use virtual IP address 102.168.1.1 instead of 192.168.1.1? And thanks for sharing this.

AzraelOmbrixa

sorry that was a typo on my part the 0 is supposed to be a 9 for 192.168.1.1

babanaber

Hello, where did you get this info? I couldnt find it in web

kleno

the same today, please consider thet as-override (for R2 config) also available only under router bgp ### > address-family ipv4 configuration mode

b7c04a1

I did this lab and the provider's answer is correct. It can use "redistribute connected" instead "network command" in bgp also. R2#show run | sec router.bgp router bgp 456 bgp log-neighbor-changes redistribute connected neighbor 10.0.0.1 remote-as 123 neighbor 10.0.0.1 as-override neighbor 192.168.1.3 remote-as 123 neighbor 192.168.1.3 as-override R1#ping 3.3.3.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms R3#ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

sergiosolotrabajo

redistribute connected is a dangerous command if not secured other way, careful

[Removed]

I got the lab to configure R1 and R3 The solution was to configure "allowas-in" under the router bgp ### > address-family ipv4 configuration mode

[Removed]

It took me a while to find the command, but luckily, this one was one of the few commands that cisco has a proper description for.

Wissammawas

can you please write the whole Answer for R1 and R3? (the all Command, which you wrote in the exam)

123robinsong

I did it on GNS3 with the allowas-in and it worked. not sure if this is what the simulation iteem is asking for tho. R1# router bgp 123 neighbor 10.0.0.2 remote-as 456 address-family ipv4 network 1.1.1.1 mask 255.255.255.255 network 10.0.0.0 mask 255.255.255.0 neighbor 10.0.0.2 activate neighbor 10.0.0.2 allowas-in R3# router bgp 123 neighbor 192.168.1.2 remote-as 456 address-family ipv4 network 3.3.3.3 mask 255.255.255.255 network 192.168.1.0 neighbor 192.168.1.2 activate neighbor 192.168.1.2 allowas-in

teikitiz

Please note that this is for the case of R1 and R3 to be configured. It's not the required answer to this lab. Here's for R1, R3 is similar. R1#sh run | sect bgp router bgp 123 bgp log-neighbor-changes neighbor 10.0.0.2 remote-as 456 ! address-family ipv4 neighbor 10.0.0.2 activate neighbor 10.0.0.2 allowas-in no auto-summary no synchronization network 1.1.1.1 mask 255.255.255.255 exit-address-family R1#

teikitiz

Only noticed tempaccount00001's reply now, below.

SHONA1

Same I had that LAB, like you mentioned I had to use the # address-family ipv4. Thanks for the heads up mate.

helmerpach

I just took the exam, the interfaces are already configured. Therefore, the answer given by the administrator is the correct one

sledgey121

If the question said configure R1 and R3 then allowas-in would be correct. Because the question says configure 'only' R2, as-override in the correct answer.

Networkchamp87

R2 config question, Lab in EVE NG - below works R2#show run | sec router router bgp 456 bgp log-neighbor-changes neighbor 10.0.0.1 remote-as 123 neighbor 192.168.1.1 remote-as 123 ! address-family ipv4 network 1.1.1.1 mask 255.255.255.255 network 2.2.2.2 mask 255.255.255.255 network 3.3.3.3 mask 255.255.255.255 neighbor 10.0.0.1 activate neighbor 10.0.0.1 as-override neighbor 192.168.1.1 activate neighbor 192.168.1.1 as-override exit-address-family can ping /32 from both R1 / R3

edajede

Very similar lab in today's exam. Topology was the same, but I couldn't modify R2, but R1 and R3. I didn't have a clue how to resolve it. Anyone knows?

Cryptoking112211

Hi - the Sim you are referring to is where you need to configure R1 and R3 and need to allow-as-in under the bgp IPv4 address family

tempaccount00001

The "allowas-in" feature is configured on the neighbour not on the bgp ipv4 address family. https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/112236-allowas-in-bgp-config-example.html If in the exam you need to configure R1 and R3 you would do this: R1: router bgp 123 neighbour 10.0.0.2 remote-as 456 neighbour 10.0.0.2 allowas-in network 10.0.0.0 255.255.255.0 network 1.1.1.1 255.255.255.255 R3: router bgp 123 neighbour 192.168.1.2 remote-as 456 neighbour 192.168.1.2 allowas-in network 192.168.1.0 255.255.255.0 network 3.3.3.3 255.255.255.255 then you would test: R1: ping 1.1.1.1 source 3.3.3.3 or from R3: ping 3.3.3.3 source 1.1.1.1

Cryptoking112211

it depends on the IOS, IOS XE will not allow you to do the command you mentioned and it will need to be configured under the address family configuration mode. i have lab'ed it up. id say you will need to check in the exam if IPv4 address family has been configured or not and take it from there

123robinsong

So we need to apply exactly the same config provided by tempaccount001 , but under '' IPV4 address family'' ? Please confirm. and thanks in advance!

danman32

What gets me is that as-override didn't seem to be in the scope of ENCOR (certainly not in the official Cisco cert guide), particularly if vpnv4 and MPLS needs (or originally needed) to be part of the equation.

danman32

I'm wondering if the intent of the test simulation is to test you on using policy-map to modify the AS as R2 sends it out to R1 and R3. That would get around the controversy if as-override would work in real-world without VRF4. After all, route manipulation using policy-map IS in the cert study guide.

danman32

Then again, if you go by the cert guide, there's only "set as-path prepend" That won't work because you'll still have the unwanted AS in the path. So I guess you can only use as-override. There is a "set as-prepend replace" but again beyond the scope of the cert guide. Seems to be a relatively new command addition to IOS.

hollowdew1211

On R2: !define vrf and export + import ip vrf AS rd 1:1 route-target export 1:1 route-target import 1:1 interface Loopback0 ip vrf forwarding AS ip address 2.2.2.2 255.255.255.255 ! interface Ethernet0/0 ip vrf forwarding AS ip address 10.0.0.2 255.255.255.0 half-duplex ! interface Ethernet1/0 ip vrf forwarding AS ip address 192.168.1.2 255.255.255.0 half-duplex ! router bgp 456 bgp log-neighbor-changes network 2.2.2.2 mask 255.255.255.255 ! address-family ipv4 vrf AS neighbor 10.0.0.1 remote-as 123 neighbor 10.0.0.1 activate neighbor 10.0.0.1 as-override neighbor 192.168.1.3 remote-as 123 neighbor 192.168.1.3 activate neighbor 192.168.1.3 as-override no auto-summary no synchronization network 2.2.2.2 mask 255.255.255.255 exit-address-family !

Jeff555566

I had an opportunity to model this with the Cisco tool. It appears that the given answer is correct. I was able to issue the as-override command under the bgp statement without using a vrf. It must have to do with the newer versions of ios.

HungarianDish

Yes, you are right. It also works without a VRF. I also confirmed it with a new test for the peace of my mind.

JackDRipper

Apologies.... what Cisco tool?

XomXom

took the exam may 1 2024, 89 questions and 5 simulations, three of them were 878, 896, 900 with slit differences and two others VRF and other silly one really can't recall all what I remember was about spamming tree and 32-bit.... something.

Din04

I haven't used allowas-in and as-override in production. I read documents about this command, but are these necessary on this lab?

gorillaenhanced

Yes, since AS 123 is used on remote site 1 and 2. Using as-override will replace the redundant AS in the AS path so the BGP update will not be discarded due to AS loop

mellohello

R:1 Router(config)#int lo0 Router(config-if)#ip add 1.1.1.1 255.255.255.255 Router(config-if)#end Router# conf t Router (config)# int e0/0 Router (config)# ip add 10.0.0.1 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router(config) router bgp 123 Router(config-router) network 1.1.1.1 mask 255.255.255.255 Router(config-router) neighbor 10.0.0.2 remote-as 456 Router(config-router) end Router#wr

mellohello

R3: Router(config)#int lo0 Router(config-if)#ip add 3.3.3.3 255.255.255.255 Router(config-if)#end Router# conf t Router (config)# int e0/1 Router (config)# ip add 192.168.1.3 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router(config) router bgp 123 Router(config-router) network 3.3.3.3 mask 255.255.255.255 Router(config-router) neighbor 192.162.1.2 remote-as 456 Router(config-router) end Router#wr

mellohello

R2: Router(config)#int lo0 Router(config-if)#ip add 2.2.2.2 255.255.255.255 Router(config-if)#end Router# conf t Router (config)# int e0/0 Router (config)# ip add 10.0.0.2 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router (config)# int e0/1 Router (config)# ip add 192.168.1.2 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router(config) router bgp 456 Router(config-router) network 2.2.2.2 mask 255.255.255.255 Router(config-router) network 10.0.0.0 mask 255.255.255.0 Router(config-router) network 192.168.1.0 mask 255.255.255.0 Router(config-router) neighbor 10.0.0.1 remote-as 123 Router(config-router) neighbor 192.168.1.3 remote-as 123 Router(config-router) neighbor 10.0.0.1 as-override Router(config-router) neighbor 192.168.1.3 as-override Router(config-router) end Router#wr

[Removed]

just wondering, guys There is no conf change permitted on R1 and R3 as question specify So if you configure VRF, RD, things like that, means R1 and R3 need to be done so not sure because question has not publish conf for R1 and R3, So, maybe check R1 R3 in the exam if you have this question then go from there I will have exam 31May, if this question will popup, I be back let you guys know

helmerpach

como te fue en el examen

Steve122

After 30 min debug: neighbor 192.16*2*.1.2 remote-as 456 neighbor 192.168.1.2 remote-as 456

Jeff555566

I tried to set this up in GNS3 and was not successful in configuring the example. It seems as if the word "mask" is missing in the network statements between the IP and the mask. As HungarianDish mentioned, it looks like the as-override command only works inside of a VRF. I am certainly far from an expert though, I wonder how much vrf configuration is actually on the exam.

Nickplayany

Probably if you can check the configuration of the R1 and R3 you will get the answer.

HungarianDish

R2 (provide edge) R2#show bgp vpnv4 unicast vrf MYVRF summary | b Neighbor Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.0.0.1 4 123 15 21 10 0 0 00:09:49 2 192.168.1.3 4 123 28 30 10 0 0 00:21:52 2 R2#