exam questions

Exam 350-501 All Questions

View all questions & answers for the 350-501 exam

Exam 350-501 topic 1 question 391 discussion

Actual exam question from Cisco's 350-501
Question #: 391
Topic #: 1
[All 350-501 Questions]

SIMULATION -




Guidelines -

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.
• Refer to the Topology tab to access the device console(s) and perform the tasks.
• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
• All necessary preconfigurations have been applied.
• Do not change the enable password or hostname for any device.
• Save your configurations to NVRAM before moving to the next item.
• Click Next at the bottom of the screen to submit this lab and move to the next question.
• When Next is clicked, the lab closes and cannot be reopened.


Topology -




Tasks -

Configure the IS-IS routing protocol for R1, R2, and R3 according to the topology to achieve these goals:

1. Configure HMAC-MD5 authentication for R1, R2, and R3 links that form the IS-IS adjacency using the ISIS commands on the interfaces using these parameters:

• key-chain name: AUTH_ISIS
• key ID: 2
• password: C1sc0!

2. Configure ISIS metric on R1, R2, and R3 to:

• 15 for each level on all interfaces that form adjacency on router R1
• 20 for each level on all interfaces that form adjacency on router R2
• 25 for each level on all interface that form adjacency on R3

3. Configure IS-IS route redistribution for all static routes and connected interfaces on R1, R2, and R3.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
kagurakaguya
10 months ago
https://www.cisco.com/c/en/us/support/docs/ip/integrated-intermediate-system-to-intermediate-system-is-is/200293-IS-IS-Adjacency-and-Area-Types.html https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_isis/command/irs-cr-book/irs-a1.html https://notes.networklessons.com/isis-circuit-type-command https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_isis/configuration/15-mt/irs-15-mt-book/irs-scty.html#GUID-C7D24C37-83C2-41BB-ADA2-5DCA8C241EDC R1 enable config terminal ipv6 unicast-routing key chain AUTH_ISIS key 2 key-string C1sc0! interface Ethernet 0/0 isis circuit-type level-2-only isis authentication mode md5 isis authentication key-chain AUTH_ISIS isis metric 15 level-2 interface Ethernet 1/0 isis circuit-type level-2-only isis authentication mode md5 isis authentication key-chain AUTH_ISIS isis metric 15 level-2
upvoted 1 times
Lobinesque
9 months, 3 weeks ago
missing ip router isis on interfaces as well as ipv6
upvoted 1 times
...
kagurakaguya
10 months ago
this is missing redistribution router isis metric-style wide redistribute static redistribute connected
upvoted 1 times
...
kagurakaguya
10 months ago
R2 enable config terminal ipv6 unicast-routing key chain AUTH_ISIS key 2 key-string C1sc0! interface Ethernet 0/0 isis circuit-type level-2-only isis authentication mode md5 isis authentication key-chain AUTH_ISIS isis metric 20 level-2 interface Ethernet 1/0 isis circuit-type level-1 isis authentication mode md5 isis authentication key-chain AUTH_ISIS isis metric 20 level-1 router isis metric-style wide redistribute static redistribute connected
upvoted 1 times
...
kagurakaguya
10 months ago
R3 enable config terminal ipv6 unicast-routing key chain AUTH_ISIS key 2 key-string C1sc0! interface Ethernet 0/0 isis circuit-type level-1 isis authentication mode md5 isis authentication key-chain AUTH_ISIS isis metric 25 level-1 interface Ethernet 1/0 isis circuit-type level-2-only isis authentication mode md5 isis authentication key-chain AUTH_ISIS isis metric 25 level-2 router isis metric-style wide redistribute static redistribute connected
upvoted 1 times
...
...
picho707
1 year ago
key chain AUTH_ISIS key 2 key-string C1sc0! ! interface Loopback0 ip address 10.1.1.1 255.255.255.255 ipv6 address 2000:CC13:CC13:2011::1/128 ! interface Ethernet0/0 ip address 172.20.1.1 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2020::1/64 ipv6 router isis isis metric 15 level-2 ! interface Ethernet0/1 ip address 172.20.2.1 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2030::1/64 ipv6 router isis isis metric 15 level-2 ! router isis net 49.0000.0000.0001.00 authentication mode md5 level-1 authentication mode md5 level-2 authentication key-chain AUTH_ISIS level-1 authentication key-chain AUTH_ISIS level-2 metric-style wide redistribute connected redistribute static ip !
upvoted 2 times
e98fa04
11 months, 3 weeks ago
Question asks to configure authentication on interfaces not at the protocol level. Configuring a mismatch at the protocol level will just cause LSPs not to be accepted but the ISIS adjacency will still form so they are not the same thing. "Configure HMAC-MD5 authentication for R1, R2, and R3 links that form the IS-IS adjacency"
upvoted 1 times
...
picho707
1 year ago
key chain AUTH_ISIS key 2 key-string C1sc0! ! interface Loopback0 ip address 10.2.2.2 255.255.255.255 ipv6 address 2000:CC13:CC13:2021::1/128 ! interface Ethernet0/0 ip address 172.20.1.2 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2020::2/64 ipv6 router isis isis metric 20 level-2 ! interface Ethernet0/2 ip address 172.20.3.2 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2040::2/64 ipv6 router isis isis metric 20 level-1 ! router isis net 49.0000.0000.0002.00 authentication mode md5 level-1 authentication mode md5 level-2 authentication key-chain AUTH_ISIS level-1 authentication key-chain AUTH_ISIS level-2 metric-style wide redistribute connected redistribute static ip
upvoted 1 times
picho707
1 year ago
key chain AUTH_ISIS key 2 key-string C1sc0! ! interface Loopback0 ip address 10.3.3.3 255.255.255.255 ipv6 address 2000:CC13:CC13:2031::1/128 ! interface Ethernet0/1 ip address 172.20.2.3 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2030::3/64 ipv6 router isis isis metric 25 level-2 ! interface Ethernet0/2 ip address 172.20.3.3 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2040::3/64 ipv6 router isis isis metric 25 level-1 ! router isis net 49.0000.0000.0003.00 authentication mode md5 level-1 authentication mode md5 level-2 authentication key-chain AUTH_ISIS level-1 authentication key-chain AUTH_ISIS level-2 metric-style wide redistribute connected redistribute static ip
upvoted 1 times
...
...
...
akm88
1 year, 5 months ago
ipv6 unicast-routing key chain AUTH_ISIS key 2 key-string C1sco! interface Ethernet0/0 ip address 172.20.3.3 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2040::3/64 ipv6 router isis isis circuit-type level-1 isis metric 25 level-1 isis ipv6 metric 25 level-1 ! interface Ethernet0/1 ip address 172.20.2.3 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2030::3/64 ipv6 router isis isis circuit-type level-2-only isis metric 25 level-2 isis ipv6 metric 25 level-2 ! interface Ethernet0/2 ip address 30.30.30.30 255.255.255.0 ! interface Ethernet0/3 no ip address shutdown ! router isis net 49.0000.0000.0003.00 authentication mode md5 authentication key-chain AUTH_ISIS metric-style wide log-adjacency-changes all redistribute connected
upvoted 1 times
...
akm88
1 year, 5 months ago
key chain AUTH_ISIS key 2 key-string C1sco! ! ! ! ! ! cts logging verbose ! ! ! redundancy ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Ethernet0/0 ip address 172.20.3.3 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2040::3/64 ipv6 router isis isis circuit-type level-1 isis metric 25 level-1 isis ipv6 metric 25 level-1 ! interface Ethernet0/1 ip address 172.20.2.3 255.255.255.0 ip router isis ipv6 address 2000:CC13:CC13:2030::3/64 ipv6 router isis isis circuit-type level-2-only isis metric 25 level-2 isis ipv6 metric 25 level-2 ! interface Ethernet0/2 ip address 30.30.30.30 255.255.255.0 ! interface Ethernet0/3 no ip address shutdown ! router isis net 49.0000.0000.0003.00 authentication mode md5 authentication key-chain AUTH_ISIS metric-style wide log-adjacency-changes all redistribute connected
upvoted 1 times
...
EAS22
1 year, 6 months ago
The routers have IPv6 on their interfaces. We may want to add metric wide for IPv6 af. It will be something like this: router isis 1 net 49.0000.0000.0000.0001.00 metric-style wide log-adjacency-changes all ! address-family ipv6 multi-topology exit-address-family interface range E0/0 ip router isis 1 ipv6 router isis 1 Regarding the Authentication, it really depend on what type of authentication they are asking in the exam, it could be Hello Authentication or Domain authentication or Area/LSP authentication. https://www.cisco.com/c/en/us/support/docs/ip/integrated-intermediate-system-to-intermediate-system-is-is/13792-isis-authent.html
upvoted 2 times
...
cerifyme85
1 year, 7 months ago
Config below is wrong and misleading Only enable for interface or isis instance not both. if u did it for both, u would have issues.. isis gets confused.. Interface one below key chain AUTH_ISIS key 2 key-string cisco interface GigabitEthernet0/0 ip address 172.20.2.2 255.255.255.0 ip router isis 1 duplex auto speed auto media-type rj45 isis circuit-type level-1 isis authentication mode md5 isis authentication key-chain AUTH_ISIS router isis 1 net 49.0000.0000.0000.0002.00 log-adjacency-changes
upvoted 1 times
cerifyme85
1 year, 7 months ago
ALso metric is applied per router for all levels.. Eg R1: isis metric cost 15 level-2 isis metric cost 15 level-1
upvoted 1 times
sharon90
6 months, 1 week ago
you confused "all" with "each". But let's say you are right ( you aren't ofc), what's the point the add a cost for level-2, for example, if two routers have a level-1 only relationship ? just the fact your name is cerifyme and not certifyme means you are an eternal typos...
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...