网络赛道复赛资料2

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

PC作为客户机,采用客户LAC模式通过iNode与LNS建立L2TP隧道,提示获取IP超时,则出现此问题可能的原因为____。

在L2TP VPN中，LAC（L2TP Access Concentrator，L2TP访问集中器)接收到从远程系统向服务器方发送的IP数据包,需要对数据包进行相应的封装后发送给LNS（L2TP Network Server，L2TP网络服务器），LAC和LNS间传送的数据包的封装格式为

在L2TP组网中,配置强制LNS与客户端之间重新进行CHAP验证的命令为____。

在L2TP组网中,配置LNS对用户进行强制LCP重协商验证方式的命令为____。

PPP帧被添加L2TP头进行封装时，会被标以正确的Tunnel ID和Session ID ,以标识其隧道和会话属性。该L2TP头中的Tunnel ID (隧道标识符)由____分配， SessionID (会话标识符)由____分配

PC采用iNode VPN客户端与网络设备建立L2TP隧道和会话的方式,属于L2TP的____拓扑结构。

ZLB (Zero-Length Bod)消息是一个只有L2TP头的控制消息,其作用是作为一个明确应答,以确保控制消息的可靠传递。以下四种情况中，LNS不发送ZLB消息给LAC作为应答的有

根据如图组网和下列配置可以判断这是一个____技术的应用。 RTA: [RTA]ike peer 123 [RTA-ike-peer-123] pre-shared-ke simple 123 [RTA-ike-peer-123] remote-address 10.1.1.2 [RTA-ike-peer-123] local-address 10.1.1.1 [RTA-ike-peer-123] quit [RTA]ipsec proposall [RTA-ipsec-proposal-1]quit [RTA]acl number 3000 [RTA-acl-adv-3000] rule 0 permit ip source1.1.1.10.0.0.0 destination2.2.2.20.0.0.0 [RTA]ipsec polic llisakmp [RTA-ipsec-polic-isakmp-1]securit acl 3000 [RTA-ipsec-polic-isakmp-1-1]ike-peer 123 [RTA-ipsec-polic-isakmp-1-1] proposall [RTA-ipsec-polic-isakmp-1-1]quit [RTA] interface Ethernet0/1/1 [RTA Ethernet0/1/1] ip address 10.1.1.1.255.255.255.0 [RTA Ethernet0/1/1]ipsec polic [RTA]interface Ethernet0/1/0 [RTA Ethernet0/1/0] ip address 192.168.1.1.255.255.255.0 [RTA]interface loopback 0 [RTA-Loopback0]ip address 1.1.1.1.255.255.255.255 [RTA]interface Tunnel 1 [RTA-Tunne1]source 1.1.1.1 [RTA-Tunne1]destination2.2.2.2 [RTA-Tunne1]ip address 100.1.1.1.255.255.255.0 [RTA] ip route-static 2.2.2.2 255 255.255.255.10.1.1.2 [RTA] ip route-static 192.168.2 0 255 255.255.0.100.1.1.2 RTB: [RTB] ike peer 123 [RTB-ike-peer-123] pre-shared-ke simple 123 [RTB-ike-peer-123]remote-address 10.1.1.1 [RTB-ike-peer-123] local-address 10.1.1.2 [RTB-ike-peer-123]quit [RTB] ipsec proposal 1 [RTB-ipsec-proposal-1] quit [RTB]acl number 3000 [RTB-acl-adv-3000] rule o permit ip source2.2.2.2 0.0.0.0 destination 1.1.1.10.0.0.0 [RTB]ipsec polic 1 lisakmp [RTB-ipsec-polic-isakmp-1]securit acl 3000 [RTB-ipsec-polic-isakmp-1] ike-peer 123 [RTB-ipsec-polic-isakmp-1-1] proposal 1 [RTB] interface Ethernet0/1/1 [RTB-Ethernet0/1/1] ip address 10.1.1.2.255.255.255.0 [RTB-Ethernet0/1/1]ipsec polic 1 [RTB] interface Ethernet0/1/0 [RTB-Ethernet0/1/0] ip address 192.168.2.1.255.255.255.0 [RTB]interface Loopback0 [RTB-Loopback0] ip address 2.2.2.2.255.255.255.255 [RTB] interface Tunne1 [RTB-Tunne1]source 2.2.2.2 [RTB-Tunne1]destination 1.1.1.1 [RTB-Tunne1]ip address 100,1.1.2.255.255.255.0 [RTB-Tunne1]keepalive [RTB] ip route-static 1.1.1.1 255.255.255.255.10.1.1.1 [RTB] ip route-static 1 92.1 68.1.0 .255.255.255.0 1 00.1.1 .1

根据如图组网和下列配置可以判断这是一个__技术的应用。 RTA: [RTA]ike peer 123 [RTA-ike-peer-123] pre-shared-ke simple 123 [RTA-ike-peer-123] remote-address 100.1.1.2......<-i [RTA-ike-peer-123]local-address 100.1.1.1 [RTA-ike-peer-123]quit [RTA] ipsec proposal 1 [RTA-ipsec-proposal-1]quit [RTA]acl number 3000 [RTA-acl-adv-3000] rule 0 permit ip source 192.168.1.0 0.0.0.255 destination.192.168.2.0.0.0.0.255 [RTA]ipsec polic 1 l isakmp [RTA-ipsec-polic-isakmp-1]securit acl 3000 [RTA-ipsec-polic-isakmp-1-1]ike-peer 123 [RTA-ipscec-polic-isakmp-1-1] proposal 1 [RTA-ipsec-polic-isakmp-1-1] quit [RTA]interface Ethernet0/1/1 [RTA-Ethernet0/1/1] ip address 10.1.1.1.255.255.255.0 [RTA]interface Ethernet0//0 [RTA-Ethernet/1/0] ip address 192.168.1.1.255.255.255.0 [RTA]interface Loopbacko [RTA-Loopback0]ip address 1.1.1.1.255.255.255.255 [RTA]interface Tunnel 1 [RTA-Tunne1]source 1.1.1.1

根据如图组网和下列配置可以判断这是一个__技术的应用。 RTA: [RTA]ike peer 123 [RTA-ike-peer-123] pre-shared-ke simple 123 [RTA-ike-peer-123] remote-address 100.1.1.2……<-i [RTA-ike-peer-123]local-address 100.1.1.1 [RTA-ike-peer-123]quit [RTA] ipsec proposal 1 [RTA-ipsec-proposal-1]quit [RTA]acl number 3000 [RTA-acl-adv-3000] rule 0 permit ip source 192.168.1.0 0.0.0.255 destination.192.168.2.0.0.0.0.255 [RTA]ipsec polic 1 1 isakmp [RTA-ipsec-polic-isakmp-l-1]securit acl 3000 [RTA-ipsec-polic-isakmp-l-1]ike-peer 123 [RTA-ipscec-polic-isakmp-l-1] proposal 1 [RTA-ipsec-polic-isakmp-l-1] quit [RTA]interface Ethernet0/1/1 [RTA-Ethernet0/1/1] ip address 10.1.1.1.255.255.255.0 [RTA]interface Ethernet0//0 [RTA-Ethernet/1/0] ip address 192.168.1.1.255.255.255.0 [RTA]interface Loopback0 [RTA-Loopback0]ip address 1.1.1.1.255.255.255.255 [RTA]interface Tunnel 1 [RTA-Tunnell]source 1.1.1.1 [RTA-Tunnell]destination 2.2.2.2 [RTA-Tunnell]ip address 100.1.1.1.255.255.255.0 [RTA-Tunnell]keepalive [RTA-Tunnell]ipsec polic 1 [RTA] ip route-static 2.2.2.2 255 255 255.255.10.1.1.2 [RTA] ip route-static 192.168.2.0 255255.255.0.100.1.1.2 RTB: [RTB] ike peer 123 [RTB-ike-peer-123]pre-shared-ke simple 123 [RTB-ike-peer-123] remote-address 100.1.1.1 [RTB-ike-peer-123] local-address 100.1.1.2 [RTB-ike-peer-123]quit [RTB] ipsec proposal 1 [RTB-ipsec-proposal-1]quit [RTB]ac number 3000 [RTB-acl-adv-3000] rule o permit ip source192.168.2.00.0.0.255 destination 192.168.1.0.0.0.0.255 [RTB]ipsec polic 11 isakmp [RTB-ipsec-polic-isakp-l-1]securit acl 3000 [RTB-ipsec-polic-isakmp-l-1] ike-peer 123 [RTB-ipsec-polic-isakmp-l-1] proposal 1 [RTB-ipsec-polic-isakmp-l-1] quit [RTB] interface Ethernet/1/1 [RTB-Ethernet0/1/1] ip address 10.1.1.2.255.255.255.0 [RTB] interface Ethernet0/1/0 [RTB-Ethernet0/1/0] ip address 192.168.2.1.255.255.255.0 [RTB]interface Loopback0 [RTB-Loopback0] ip address 2.2.2.2.255.255.255.255 [RTB] interface Tunnell [RTB-Tunnell]source 2.2.2.2 [RTB-Tunnell]destination 1.1.1.1 [RTB-Tunnell]ip address 100.1.1.2.255.255.255.0 [RTB-Tunnell]keepalive [RTA-Tunnell]ipsec polic 1 [RTB] ip route-static 1.1.1.1 255 255 255.255.10.1.1.1 [RTB] ip route-static 1 92.1 68.1.0.255.255.255.0 1 00.1.1.1 .1

两台路由器间配置IPSec polic ,将策略下发到相应接口上后,使用ping命令检查被保护数据流互通性,发现数据100%通过。使用displa ike sa和displa ipsec sa命令,显示为IPSec SA未建立。则IPSec配置失败原因在于__。

两台路由器间配置IPSec polic ,将策略下发到相应接口上后.使用ping命令检查被保护数据流互通性,发现数据100%通过。使用displa ike sa和displa ipsec sa命令, 显示为IPSec SA未建立。则IPSec配置失败原因在于__

下列关于IPSec与IKE的说法正确的是__。

用KE为IPSec提供自动协商交换密钥,建立SA的服务时,在IKE协商的第二阶段定义了哪种IKE交换模式?

如图所示，两台安全网关的配置分别为: RTA [RTA]ike peer 123 [RTA-ike-peer-123] pre-shared-ke simple 123 [RTA-ike-peer-123] remote-address 10.2.1.2 [RTA-ike-peer-123] local-address 10.2.1.1 [RTA-ike-peer-123]quit [RTA]ipsec proposal 1 [RTA-ipsec-proposal-1]quit [RTA]acl number 3000 [RTA-acl-adv-3000] rule 0 permit ip source10.1.100.255.255.255 [RTA]ipsec polic 11isakmp [RTA-ipsec-polic-isakmp-l-1] securit acl 3000 [RTA-ipsec-polic-isakmp-l-1]ike-peer 123 [RTA-ipsec-polic-isakmp-l-1] proposal 1 [RTA-ipsec-polic-isakmp-l-1] quit [RTA] interface Ethernet 0/1/0 [RTA-Serial0/2/1]ip address 10.2.1.1.255.255.255.0 [RTA]interface Serial 0/2/1 [RTA-Serial0/2/1]ip address 10.2.1.1.255.255.255.0 [RTA-Serial0/2/1]]ipsec polic 1 RTB: [RTB] ike peer 123 [RTB-ike-peer-123] pre-shared-ke simple 123 [RTB-ike-peer-123] remote-address 10.2.1.1 [RTB-ike-peer-123] local-address 10.2.1.2 [RTB-ike-peer-123]quit [RTB] ipsec proposal 1 [RTB-ipsec-proposal-1]quit [RTB]acl number 3000 [RTB-acl-adv-3000] rule 0 permit ip source10.3.1.00.255.255.255 [RTB]ipsec polic 1 lisakmp [RTB-ipsec-polic-isakmp-l-1]securit ac 3000 [RTB-ipsec-polic-isakmp-l-1]ike-peer 123 [RTB-ipsec-polic-isakmp-l-1]proposal 1 [RTB-ipsec-polic-isakmp-l-1] quit [RTA]interface Ethernet 0/1/0 [RTA-Serial0/2/1] ip address 10.3.1.1.255.255.255.0 [RTB]interface Serial0/2/1 [RTB-Serial0/2/1]ip address 10.2.1.2.255.255.255.0 [RTB-Serial0/2/1]ipsec polic 1 由此可知____。

如图所示，两台安全网关的配置分别为: RTA [RTA] ike peer 123 [RTA-ike-peer-123] pre-shared-ke simple 123 [RTA-ike-peer-123] remote-address 10.2.1.2 [RTA-ike-peer-123] local-address 10.2.1.1 [RTA-ike-peer-123]quit [RTA] ipsec proposal 1 [RTA-ipsec-proposal-1] quit [RTA]acl number 3000 [RTA-acl-adv-3000] rule 0 permit ip source10.1.1.00.0.0.255 destination10.3.1.0.0.0.0.255 [RTA]ipsec polic 11isakmp [RTA-ipsec-polic-isakmp-l-1]securit acl 3000 [RTA-ipsec-polic-isakmp-l-1]ike-peer 123 [RTA-ipsec-polic-isakmp-l-1] proposal 1 [RTA-ipsec-polic-isakmp-l-1] quit [RTA] interface Serial0/2/1 [RTA-Serial0/2/1]ip address 10.2.1.1.255.255.255.0 [RTA-Serial0/2/1] ipsec polic 1 [RTA]interface Ethernet 0/1/0 [RTA-Serial0/2/1]ip address 10.1.1.2.255.255.255.0 RTB: [RTB] ike peer 123 [RTB-ike-peer-123] pre-shared-ke simple 123 [RTB-ike-peer-123] remote-address 10.2.1.1 [RTB-ike-peer-123] local-address 10.2.1.2 [RTB-ike-peer-123]quit [RTB] ipsec proposal 1 [RTB-ipsec-proposal-1]quit [RTB]acl number 3000 [RTB-acl-adv-3000] rule 0 permit ip source10.1.1.0.0.0.255 destination10.3.1.0.0.0.0.255 [RTB]ipsec polic 1 lisakmp [RTB-ipsec-polic-isakmp-l-1]securit acl 3000 [RTB-ipsec-polic-isakmp-l-1]ike-peer 123 [RTB-ipsec-polic-isakmp-l-1]proposal 1 [RTB-ipsec-polic-isakmp-l-1] quit [RTB] interface Serial0/2/1 [RTB-Serial0/2/1] ip address 10.2.1.2.255.255.255.0 [RTB-Serial0/2/1]]ipsec polic 1 [RTA] interface Ethernet 0/1/0 [RTA-Serial0/2/1]ip address 10.1.3.1.255.255.255.0 由此可知____。

要清除已建立的IPSec安全联盟,应该使用以下哪个命令?

要清除ike建立的安全隧道,应该使用以下哪个命令?

LDP会话建立的过程是____。

下游LSR设备通过Label mapping消息将其为FEC分配的____发布给上游LSR。

更多题库