Exam 350-401 All Questions

View all questions & answers for the 350-401 exam

Exam 350-401 topic 1 question 99 discussion

Actual exam question from Cisco's 350-401

Question #: 99
Topic #: 1

Refer to the exhibit. Which configuration allows Customer2 hosts to access the FTP server of Customer1 that has the IP address of 192.168.1.200?

A. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20
B. ip route vrf Customer1 172.16.1.1 255.255.255.255 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.0 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20
C. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer2 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer1
D. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer1 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer2

Show Suggested Answer

Suggested Answer: A 🗳️

by xziomal9 at Sept. 28, 2021, 9:10 a.m.

Comments

Submit Cancel

xziomal9

Highly Voted 3 years, 1 month ago

A. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20 B. ip route vrf Customer1 172.16.1.1 255.255.255.255 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.0 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20 C. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer2 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer1 D. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer1 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer2

upvoted 46 times

xziomal9

3 years, 1 month ago

The correct answer is: A

upvoted 5 times

iAbdullah

3 years, 1 month ago

do you have vid on youtube explain vlan with vrf like this ^ ?? ..thank you

upvoted 3 times

...

hprc2002

Highly Voted 2 years, 10 months ago

Thank you xziomal9 for formatting the answer as they should. Makes life a lot easier

upvoted 14 times

...

[Removed]

Most Recent 5 months, 3 weeks ago

Selected Answer: A

A is correct

upvoted 1 times

...

kouamedsk

7 months, 3 weeks ago

the correct answer is A. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20

upvoted 1 times

...

Marcinko

8 months ago

Selected Answer: A

Cannot be "C" or "D" cause there is no such things as Customer1 or Customer2 after the "Forwarding router's address" "B" is not correct cause the "Destination prefix mask" is /24 for the host 192.168.1.200

upvoted 3 times

Marcinko

8 months ago

"The global keyword specifies that the next hop address of the static route is resolved within the global routing table, not within the the customer1 VRF." That's why we need the additional static routes in the global routing table for Vlan10 and 20

upvoted 2 times

...

Haidary

10 months, 1 week ago

The subnet mask of the 172.16.1.0 is 255.255.255.0 not 255.255.2555.255 then the Answer A is correct not B

upvoted 1 times

...

Asombrosso

1 year, 2 months ago

Selected Answer: A

ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global

upvoted 2 times

...

Asombrosso

1 year, 2 months ago

Selected Answer: C

ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer1

upvoted 2 times

...

[Removed]

1 year, 4 months ago

Selected Answer: A

A. If you pay attention to the wording of the question. "Allows customer2 hosts to access the FTP server of customer1 that has IP address of 192.168.1.200" This indicates that a host route is required to only that FTP server. B is allowing all customer2 access to the entire customer1 network, not just the FTP server.

upvoted 2 times

danman32

1 year, 3 months ago

Actually B can't work at all. Route for vrf Customer1 only has destination for VLAN IP. Not sure IOS would accept static route proposed for vrf customer2 either. Prefix IP and mask don't match. Correct syntax would have been: ip route vrf Customer2 192.168.1.0 255.255.255.0 192.168.1.1 global

upvoted 1 times

mgiuseppe86

1 year, 2 months ago

no, the goal is for Cus2 to ONLY be able to reach 192.168.1.200. You achieve this by noting a /32 (255.255.255.255) in this case >>> ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global <<<< is correct

upvoted 1 times

mgiuseppe86

1 year, 2 months ago

Delete this, im tired

upvoted 2 times

...

ibogovic

1 year, 4 months ago

Selected Answer: B

The correct answer is B. The configuration in option B allows Customer2 hosts to access the FTP server of Customer1. In this configuration, the following routes are configured: For Customer1 VRF: ip route vrf Customer1 172.16.1.1 255.255.255.255 172.16.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 For Customer2 VRF: ip route vrf Customer2 192.168.1.200 255.255.255.0 192.168.1.1 global ip route 172.16.1.0 255.255.255.0 Vlan20 These routes ensure that the traffic from Customer2 VRF destined for the FTP server with the IP address 192.168.1.200 is correctly routed through the VRF of Customer1 and reaches the FTP server. Therefore, option B is the correct configuration.

upvoted 1 times

[Removed]

1 year, 4 months ago

This answer is allowing the hosts of Customer2 network to access not only the FTP server host, but the entire network where the server lives. Answer is A.

upvoted 2 times

...

HungarianDish_111

1 year, 7 months ago

https://networklessons.com/cisco/ccie-routing-switching-written/vrf-lite-route-leaking https://community.cisco.com/t5/routing/how-to-leak-routes-between-vrf-vlans-and-global-vlans-on-same/td-p/3758614

upvoted 3 times

ihateciscoreally

1 year, 4 months ago

damn man thanks for links, i couldnt understand that for s**t. OCG doesnt cover VRF at all, just two pages -_-

upvoted 3 times

...

nushadu

1 year, 11 months ago

static routes appear in the vrf tables but no ping, probably Cisco On Unix\Linux restrictions: ! ip vrf cust_1 rd 11:11 ! ip vrf cust_2 rd 22:22 ! ! interface Ethernet0/0.20 encapsulation dot1Q 20 ip vrf forwarding cust_1 ip address 192.168.1.200 255.255.255.0 secondary ip address 192.168.1.1 255.255.255.0 ! interface Ethernet0/0.30 encapsulation dot1Q 30 ip vrf forwarding cust_2 ip address 172.16.1.1 255.255.255.0 !

upvoted 2 times

nushadu

1 year, 11 months ago

ip route 172.16.1.0 255.255.255.0 Ethernet0/0.30 ip route 192.168.1.0 255.255.255.0 Ethernet0/0.20 ip route vrf cust_1 172.16.1.0 255.255.255.0 172.16.1.1 global ip route vrf cust_2 192.168.1.0 255.255.255.0 192.168.1.1 global ! cisco#show ip route vrf cust_1 | b Gate Gateway of last resort is not set 172.16.0.0/24 is subnetted, 1 subnets S 172.16.1.0 [1/0] via 172.16.1.1 192.168.1.0/24 is variably subnetted, 3 subnets, 2 masks C 192.168.1.0/24 is directly connected, Ethernet0/0.20 L 192.168.1.1/32 is directly connected, Ethernet0/0.20 L 192.168.1.200/32 is directly connected, Ethernet0/0.20 cisco# cisco#show ip route vrf cust_2 | b Gate Gateway of last resort is not set 172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks C 172.16.1.0/24 is directly connected, Ethernet0/0.30 L 172.16.1.1/32 is directly connected, Ethernet0/0.30 S 192.168.1.0/24 [1/0] via 192.168.1.1 cisco#

upvoted 2 times

nushadu

1 year, 11 months ago

from GRT vrf IPs are pingable cisco#show ip route | b Gate Gateway of last resort is not set 172.16.0.0/24 is subnetted, 1 subnets S 172.16.1.0 is directly connected, Ethernet0/0.30 S 192.168.1.0/24 is directly connected, Ethernet0/0.20 192.168.255.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.255.0/24 is directly connected, Ethernet0/0.10 L 192.168.255.3/32 is directly connected, Ethernet0/0.10 cisco#ping 192.168.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms cisco#ping 172.16.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/6 ms

upvoted 2 times

...

ciscolessons

2 years, 8 months ago

Selected Answer: A

voting. provided answer is correct

upvoted 2 times

...

Exam 350-401 All Questions

View all questions & answers for the 350-401 exam

Exam 350-401 topic 1 question 99 discussion

Comments

xziomal9

xziomal9

iAbdullah

hprc2002

[Removed]

kouamedsk

Marcinko

Marcinko

Haidary

Asombrosso

Asombrosso

[Removed]

danman32

mgiuseppe86

mgiuseppe86

ibogovic

[Removed]

HungarianDish_111

ihateciscoreally

nushadu

nushadu

nushadu

ciscolessons

SY0-701