Exam 350-401 All Questions

View all questions & answers for the 350-401 exam

Exam 350-401 topic 1 question 744 discussion

Actual exam question from Cisco's 350-401

Question #: 744
Topic #: 1

SIMULATION
-

Guidelines
-

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.
• Refer to the Topology tab to access the device console(s) and perform the tasks.
• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
• All necessary preconfigurations have been applied.
• Do not change the enable password or hostname for any device.
• Save your configurations to NVRAM before moving to the next item.
• Click Next at the bottom of the screen to submit this lab and move to the next question.
• When Next is clicked, the lab closes and cannot be reopened.

Topology
-

Tasks
-

BGP connectivity exists between Headquarters and both remote sites, however Remote Site 1 cannot communicate with Remote Site 2. Configure BGP according to the topology to achieve these goals:

1. Configure R2 under the BGP process to provide reachability between Remote Site 1 and Remote Site 2. No configuration changes are permitted on R1 or R3.
2. Ensure that the /32 networks at Remote Site 1 and Remote Site 2 can ping each other.

Show Suggested Answer

Suggested Answer:

by Nickplayany at March 19, 2023, 2:49 p.m.

Comments

Submit Cancel

[Removed]

Highly Voted 1 year, 11 months ago

the given answer is correct with the exception that they forgot to add the 'mask' keyword when defining the networks

upvoted 9 times

...

kleno

Highly Voted 1 year, 10 months ago

the same today, please consider thet as-override (for R2 config) also available only under router bgp ### > address-family ipv4 configuration mode

upvoted 7 times

...

XomXom

Most Recent 1 year, 1 month ago

took the exam may 1 2024, 89 questions and 5 simulations, three of them were 878, 896, 900 with slit differences and two others VRF and other silly one really can't recall all what I remember was about spamming tree and 32-bit.... something.

upvoted 5 times

mikrep

6 months, 4 weeks ago

probably it was: spanning-tree pathcost method long - Use 32 bit based values for default port path costs

upvoted 1 times

...

NetworkJanitor

7 months, 1 week ago

Probably: SW2(config)#spanning-tree extend system-id

upvoted 1 times

...

sledgey121

1 year, 5 months ago

If the question said configure R1 and R3 then allowas-in would be correct. Because the question says configure 'only' R2, as-override in the correct answer.

upvoted 2 times

...

b7c04a1

1 year, 6 months ago

I did this lab and the provider's answer is correct. It can use "redistribute connected" instead "network command" in bgp also. R2#show run | sec router.bgp router bgp 456 bgp log-neighbor-changes redistribute connected neighbor 10.0.0.1 remote-as 123 neighbor 10.0.0.1 as-override neighbor 192.168.1.3 remote-as 123 neighbor 192.168.1.3 as-override R1#ping 3.3.3.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms R3#ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

upvoted 4 times

sergiosolotrabajo

1 year, 5 months ago

redistribute connected is a dangerous command if not secured other way, careful

upvoted 1 times

...

Din04

1 year, 6 months ago

I haven't used allowas-in and as-override in production. I read documents about this command, but are these necessary on this lab?

upvoted 1 times

gorillaenhanced

1 year, 4 months ago

Yes, since AS 123 is used on remote site 1 and 2. Using as-override will replace the redundant AS in the AS path so the BGP update will not be discarded due to AS loop

upvoted 3 times

...

sergiosolotrabajo

1 year, 8 months ago

Guys just saying, I did the exam yesterday and Cisco changed all simulations with the new ENCOR v1.1. Neither 744, 745, 746, 747, 751, 752, 754, 773, 798 or 801. I recommend you to wait till ExamTopics people has uploaded the new ones. Just not fair, from v1.0 to v1.1 changing the whole exam, thanks Cisco.

upvoted 6 times

AzraelOmbrixa

1 year, 3 months ago

Following indicated not to be in exam simulation 1 - #744 - BGP Configuration - Configure R2 only simulation 1A - #744 - BGP Configuration (alternative) - configure R1 and R3 simulation 2 - #745 - OSPF Configuration simulation 3 - #746 - VRRP Configuration simulation 4 - $747 - OSPF MD5 Configuration simulation 5 - #751 - EEM Applet Configuration simulation 6 - #752 - SPAN/Netflow/IP SLA Configuration simulation 7 - #754 - GLBP Configuration simulation 8 - #773 - OSPF Interface Passive Configuration simulation 9 - #798 - Logging/Netflow Configuration simulation 10 - #801 - Active/Passive portchannel and PVST+ Configuration Known to be in current exam Simulation 11 - #878 - VRF Configuration Simulation 12 - #896 - eBGP Configuration Simulation 13 - #900 - OSPF Configuration

upvoted 5 times

babanaber

1 year, 2 months ago

Hello, where did you get this info? I couldnt find it in web

upvoted 1 times

...

AzraelOmbrixa

1 year, 3 months ago

Simulation not listed here Configure HSRP - Alternative to Simulation 7 - GLBP Configuration Scenario Configure Distro-SW1 and Distro-SW2 on vlan 100 for hosts connected to Access-SW1 to achieve these goals: 1. Configure group number 1 using virtual IP address of 192.168.1.1/24 2. Configure Distro-SW1 as the active router using a priority value of 110 and Distro-SW2 as the standby router 3. Ensure that Distro-SW2 will take over the active role when Distro-SW1 goes down, and when Distro-SW1 recovers, it autmatically resumes the active role Distro-SW1 Sw1 int vlan 100 standby 1 ip 102.168.1.1 standby 1 priority 110 standby 1 preempt copy run start Distro-SW2 Sw2 int vlan 100 standby 1 ip 102.168.1.1 standby 1 preempt copy run start

upvoted 6 times

janbaz

1 year, 3 months ago

Hi, Azrael, can you please tell, why you use virtual IP address 102.168.1.1 instead of 192.168.1.1? And thanks for sharing this.

upvoted 1 times

AzraelOmbrixa

1 year, 3 months ago

sorry that was a typo on my part the 0 is supposed to be a 9 for 192.168.1.1

upvoted 1 times

...

Evreni

1 year, 8 months ago

did you pass it

upvoted 2 times

...

Wazerface

1 year, 5 months ago

I passed the updated exam less than 2 weeks ago. And as Din04 said it most of the Simulations here are not in the current exam. (Well i did not get any of them but one) Out of the 4 simulations that I had to complete i only got the GRE + Ipsec simulation. This material is great if you want to find and work on your weakness but dont expect to have the exact same questions.

upvoted 3 times

Wazerface

1 year, 5 months ago

I meant sergiosolotrabajo

upvoted 1 times

...

Networkchamp87

1 year, 9 months ago

R2 config question, Lab in EVE NG - below works R2#show run | sec router router bgp 456 bgp log-neighbor-changes neighbor 10.0.0.1 remote-as 123 neighbor 192.168.1.1 remote-as 123 ! address-family ipv4 network 1.1.1.1 mask 255.255.255.255 network 2.2.2.2 mask 255.255.255.255 network 3.3.3.3 mask 255.255.255.255 neighbor 10.0.0.1 activate neighbor 10.0.0.1 as-override neighbor 192.168.1.1 activate neighbor 192.168.1.1 as-override exit-address-family can ping /32 from both R1 / R3

upvoted 2 times

...

[Removed]

1 year, 11 months ago

I got the lab to configure R1 and R3 The solution was to configure "allowas-in" under the router bgp ### > address-family ipv4 configuration mode

upvoted 3 times

[Removed]

1 year, 11 months ago

It took me a while to find the command, but luckily, this one was one of the few commands that cisco has a proper description for.

upvoted 2 times

Wissammawas

1 year, 11 months ago

can you please write the whole Answer for R1 and R3? (the all Command, which you wrote in the exam)

upvoted 1 times

teikitiz

1 year, 11 months ago

Please note that this is for the case of R1 and R3 to be configured. It's not the required answer to this lab. Here's for R1, R3 is similar. R1#sh run | sect bgp router bgp 123 bgp log-neighbor-changes neighbor 10.0.0.2 remote-as 456 ! address-family ipv4 neighbor 10.0.0.2 activate neighbor 10.0.0.2 allowas-in no auto-summary no synchronization network 1.1.1.1 mask 255.255.255.255 exit-address-family R1#

upvoted 4 times

teikitiz

1 year, 11 months ago

Only noticed tempaccount00001's reply now, below.

upvoted 1 times

...

123robinsong

1 year, 11 months ago

I did it on GNS3 with the allowas-in and it worked. not sure if this is what the simulation iteem is asking for tho. R1# router bgp 123 neighbor 10.0.0.2 remote-as 456 address-family ipv4 network 1.1.1.1 mask 255.255.255.255 network 10.0.0.0 mask 255.255.255.0 neighbor 10.0.0.2 activate neighbor 10.0.0.2 allowas-in R3# router bgp 123 neighbor 192.168.1.2 remote-as 456 address-family ipv4 network 3.3.3.3 mask 255.255.255.255 network 192.168.1.0 neighbor 192.168.1.2 activate neighbor 192.168.1.2 allowas-in

upvoted 6 times

...

SHONA1

1 year, 9 months ago

Same I had that LAB, like you mentioned I had to use the # address-family ipv4. Thanks for the heads up mate.

upvoted 1 times

Agba

9 months, 3 weeks ago

You don't necessarily need to configure an address-family ipv4 as this is the default address family when you configure a neighbor in global BGP configuration mode. The address-family statement is only required when you need to run multiple address families. https://community.cisco.com/t5/routing/address-family-ipv4-under-bgp/td-p/431212#:~:text=You%20don%27t%20necesseraly%20need%20to%20configure%20an%20address-family,can%20configure%20everything%20in%20BGP%20global%20configuration%20mode.

upvoted 1 times

...

edajede

1 year, 11 months ago

Very similar lab in today's exam. Topology was the same, but I couldn't modify R2, but R1 and R3. I didn't have a clue how to resolve it. Anyone knows?

upvoted 2 times

Cryptoking112211

1 year, 11 months ago

Hi - the Sim you are referring to is where you need to configure R1 and R3 and need to allow-as-in under the bgp IPv4 address family

upvoted 1 times

tempaccount00001

1 year, 11 months ago

The "allowas-in" feature is configured on the neighbour not on the bgp ipv4 address family. https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/112236-allowas-in-bgp-config-example.html If in the exam you need to configure R1 and R3 you would do this: R1: router bgp 123 neighbour 10.0.0.2 remote-as 456 neighbour 10.0.0.2 allowas-in network 10.0.0.0 255.255.255.0 network 1.1.1.1 255.255.255.255 R3: router bgp 123 neighbour 192.168.1.2 remote-as 456 neighbour 192.168.1.2 allowas-in network 192.168.1.0 255.255.255.0 network 3.3.3.3 255.255.255.255 then you would test: R1: ping 1.1.1.1 source 3.3.3.3 or from R3: ping 3.3.3.3 source 1.1.1.1

upvoted 8 times

Cryptoking112211

1 year, 11 months ago

it depends on the IOS, IOS XE will not allow you to do the command you mentioned and it will need to be configured under the address family configuration mode. i have lab'ed it up. id say you will need to check in the exam if IPv4 address family has been configured or not and take it from there

upvoted 1 times

123robinsong

1 year, 11 months ago

So we need to apply exactly the same config provided by tempaccount001 , but under '' IPV4 address family'' ? Please confirm. and thanks in advance!

upvoted 1 times

...

Load full discussion...

...

helmerpach

1 year, 12 months ago

I just took the exam, the interfaces are already configured. Therefore, the answer given by the administrator is the correct one

upvoted 3 times

...

danman32

1 year, 12 months ago

What gets me is that as-override didn't seem to be in the scope of ENCOR (certainly not in the official Cisco cert guide), particularly if vpnv4 and MPLS needs (or originally needed) to be part of the equation.

upvoted 2 times

danman32

1 year, 11 months ago

I'm wondering if the intent of the test simulation is to test you on using policy-map to modify the AS as R2 sends it out to R1 and R3. That would get around the controversy if as-override would work in real-world without VRF4. After all, route manipulation using policy-map IS in the cert study guide.

upvoted 1 times

danman32

1 year, 11 months ago

Then again, if you go by the cert guide, there's only "set as-path prepend" That won't work because you'll still have the unwanted AS in the path. So I guess you can only use as-override. There is a "set as-prepend replace" but again beyond the scope of the cert guide. Seems to be a relatively new command addition to IOS.

upvoted 1 times

...

mellohello

2 years, 1 month ago

R:1 Router(config)#int lo0 Router(config-if)#ip add 1.1.1.1 255.255.255.255 Router(config-if)#end Router# conf t Router (config)# int e0/0 Router (config)# ip add 10.0.0.1 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router(config) router bgp 123 Router(config-router) network 1.1.1.1 mask 255.255.255.255 Router(config-router) neighbor 10.0.0.2 remote-as 456 Router(config-router) end Router#wr

upvoted 2 times

mellohello

2 years, 1 month ago

R3: Router(config)#int lo0 Router(config-if)#ip add 3.3.3.3 255.255.255.255 Router(config-if)#end Router# conf t Router (config)# int e0/1 Router (config)# ip add 192.168.1.3 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router(config) router bgp 123 Router(config-router) network 3.3.3.3 mask 255.255.255.255 Router(config-router) neighbor 192.162.1.2 remote-as 456 Router(config-router) end Router#wr

upvoted 1 times

Steve122

11 months, 2 weeks ago

After 30 min debug: neighbor 192.16*2*.1.2 remote-as 456 neighbor 192.168.1.2 remote-as 456

upvoted 1 times

...

mellohello

2 years, 1 month ago

R2: Router(config)#int lo0 Router(config-if)#ip add 2.2.2.2 255.255.255.255 Router(config-if)#end Router# conf t Router (config)# int e0/0 Router (config)# ip add 10.0.0.2 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router (config)# int e0/1 Router (config)# ip add 192.168.1.2 255.255.255.0 Router (config)# no shut Router (config)# end Router#wr Router# conf t Router(config) router bgp 456 Router(config-router) network 2.2.2.2 mask 255.255.255.255 Router(config-router) network 10.0.0.0 mask 255.255.255.0 Router(config-router) network 192.168.1.0 mask 255.255.255.0 Router(config-router) neighbor 10.0.0.1 remote-as 123 Router(config-router) neighbor 192.168.1.3 remote-as 123 Router(config-router) neighbor 10.0.0.1 as-override Router(config-router) neighbor 192.168.1.3 as-override Router(config-router) end Router#wr

upvoted 2 times

[Removed]

2 years, 1 month ago

just wondering, guys There is no conf change permitted on R1 and R3 as question specify So if you configure VRF, RD, things like that, means R1 and R3 need to be done so not sure because question has not publish conf for R1 and R3, So, maybe check R1 R3 in the exam if you have this question then go from there I will have exam 31May, if this question will popup, I be back let you guys know

upvoted 3 times

helmerpach

1 year, 12 months ago

como te fue en el examen

upvoted 1 times

...

hollowdew1211

2 years, 1 month ago

On R2: !define vrf and export + import ip vrf AS rd 1:1 route-target export 1:1 route-target import 1:1 interface Loopback0 ip vrf forwarding AS ip address 2.2.2.2 255.255.255.255 ! interface Ethernet0/0 ip vrf forwarding AS ip address 10.0.0.2 255.255.255.0 half-duplex ! interface Ethernet1/0 ip vrf forwarding AS ip address 192.168.1.2 255.255.255.0 half-duplex ! router bgp 456 bgp log-neighbor-changes network 2.2.2.2 mask 255.255.255.255 ! address-family ipv4 vrf AS neighbor 10.0.0.1 remote-as 123 neighbor 10.0.0.1 activate neighbor 10.0.0.1 as-override neighbor 192.168.1.3 remote-as 123 neighbor 192.168.1.3 activate neighbor 192.168.1.3 as-override no auto-summary no synchronization network 2.2.2.2 mask 255.255.255.255 exit-address-family !

upvoted 2 times

...

Jeff555566

2 years, 2 months ago

I had an opportunity to model this with the Cisco tool. It appears that the given answer is correct. I was able to issue the as-override command under the bgp statement without using a vrf. It must have to do with the newer versions of ios.

upvoted 2 times

JackDRipper

2 years, 2 months ago

Apologies.... what Cisco tool?

upvoted 1 times

...

HungarianDish_111

2 years, 2 months ago

Yes, you are right. It also works without a VRF. I also confirmed it with a new test for the peace of my mind.

upvoted 1 times

...

Jeff555566

2 years, 3 months ago

I tried to set this up in GNS3 and was not successful in configuring the example. It seems as if the word "mask" is missing in the network statements between the IP and the mask. As HungarianDish mentioned, it looks like the as-override command only works inside of a VRF. I am certainly far from an expert though, I wonder how much vrf configuration is actually on the exam.

upvoted 1 times

Nickplayany

2 years, 3 months ago

Probably if you can check the configuration of the R1 and R3 you will get the answer.

upvoted 2 times

...

HungarianDish_111

2 years, 3 months ago

R2 (provide edge) R2#show bgp vpnv4 unicast vrf MYVRF summary | b Neighbor Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.0.0.1 4 123 15 21 10 0 0 00:09:49 2 192.168.1.3 4 123 28 30 10 0 0 00:21:52 2 R2#

upvoted 1 times

...

Load full discussion...