GET 70% Discount on All Products Coupon code: "Board70"
See the solution below in Explanation:
Solution:
R1
config
flow exporter Export-NetFlowENCOR
transport udp 2055
ip sla schedule 100 life forever start-time now
wr
Sw1
monitor session 11 source interface e0/2
monitor session 11 destination interface et1/1
OR
R22
int tun0
vrf forwarding FINANCE
ip add 10.10.10.2 255.255.255.0
tunn source e0/0
tunnel dest 209.165.200.230
no shut
ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0
int et0/1
ip address 10.22.22.1 255.255.255.252
Verification:-
R30
show ip access-list
config t
ip access-list extended 120
5 permit eigrp any any
R20
ip access-list extended 100
permit tcp 192.168.25.0 0.0.0.255 any eq 23
class-map match-any TELNET
match access-group 100
policy-map CoPP
class TELNET
police 10000 conform-action transmit exceed-action drop
control-plane
service-policy input CoPP
router bgp 10
bgp router-id 10.1.1.111
no bgp defa ipv4-unicast
nei 209.165.200.226 remote-as 20
nei 209.165.202.130 remote-as 30
address-family ipv4
neigh 209.165.200.226 activate
neigh 209.165.202.130 activate
network 10.1.1.10 mask 255.255.255.255
network 209.165.201.10 mask 255.255.255.255
network 209.165.201.20 mask 255.255.255.255
R3
Int e0/1
Ip ospf priority 255
End
Copy run start
R2
Ip ospf network point-to-point
R10
Int e0/0
flow record NetFlow-Record
match ipv4 source address
match ipv4 destination address
collect country bytes
flow exporter NetFlow-Exporter
destination 10.10.1.10
transport udp 9996
flow monitor NetFlow-Monitor
record NetFlow-Record
exporter NetFlow-Exporter
exit
int et0/0
ip flow monitor NetFlow-Monitor input
ip sla 1
http get http://10.10.1.100
frequency 600
ip sla schedule 1 start-time now
monitor session 2 source int e0/0
monitor session 2 source int et0/2
monitor session 2 destination interface e1/0
Solution:-
Default int range et0/0-1
Int range e0/0 – 1
Sw trunk encap dot1
Switch mode trunk
Channel-group 2 mode passive
No shut
Spanning-tree vlan 10 priority 0
Spanning-tree vlan 30 priority 0
Sw10
no int po2
channel-group 2 mode active
spanning-tree vlan 10a pri 0
An engineer is configuring RADIUS-Based Authentication with EAP. MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support this authentication type?
EAP-TLS
EAP-FAST
LDAP
PEAP
What is a benefit of Cisco TrustSec in a multilayered LAN network design?
Policy can be applied on a hop-by-hop basis.
There is no requirement to run IEEE 802.1X when TrustSec is enabled on a switch port
Application flows between hosts on the LAN to remote destinations can be encrypted.
Policy or ACLs are not required.
TESTED 31 Oct 2025