Home > IPv6 Questions

IPv6 Questions

July 1st, 2011 in ROUTE 642-902 Go to comments

Here you will find answers to IPv6 questions

If you are not sure about IPv6, please read my IPv6 tutorial

Question 1

Which two reductions are the correct reductions of the IPv6 address 2001:0d02:0000:0000:0014:0000:0000:0095? (Choose two)

A – 2001:0d02:::0014:::0095
B – 2001:d02::14::95
C – 2001:d02:0:0:14::95
D – 2001:d02::14:0:0:95


Answer: C D

Explanation

A is not correct because we can’t use triple colons (:::) in IPv6 presentation. B is not correct because we can’t use double colons (::) twice. You can use it only once in any address because if two double colons are
placed in the same address, there will be no way to identify the size of each block of 0s. Remember the following techniques to shorten an IPv6 address:

- Omit leading 0s in the address field, so :0000 can be compressed to just :0 and :0d02 can be com-
pressed to :d02 (but :1d00 can not be compressed to :1d)

- Use double colons (::), but just once, to represent a contiguous block of 0s, so 2001:0d02:0000:0000:0014:0000:0000:0095 can be compressed to 2001:0d02::14:0:0:95 or 2001:0d02:0:0:14::95

Question 2

What is the IPv6 address FF02::2 used for?

A – all hosts in a local segment
B – all routers in a local segment
C – all hosts in a particular rnulticast group
D – all routers in an autonomous system


Answer: B

Explanation

Below lists some reserved and well-known IPv6 multicast address in the reserved multicast address range (FF00:: to FF0F::)

Multicast Address Multicast Group
FF01::1 All IPv6 nodes within the node-local scope
FF01::2 All IPv6 routers within the node-local scope
FF02::1 All IPv6 nodes within the link-local scope
FF02::2 All IPv6 routers within the link-local scope
FF02::5 All OSPFv3 routers within the link-local scope
FF02::6 All OSPFv3 designated routers within the link-local scope
FF02::9 All RIPng routers within the link-local scope
FF02::A All EIGRP routers within the link-local scope
FF02::D All PIM routers within the link-local scope
FF02::1:2 All DHCPv6 agents (servers and relays) within the link-local scope
FF05::2 All IPv6 routers within the site-local scope
FF02::1:FF00:0/104 IPv6 solicited-node multicast address within the link-local scope

Question 3

Refer to the exhibit. Routers R1 and R2 are IPv6 BGP peers that have been configured to support a neighbor relationship over an IPv4 internetwork. Which three neighbor IP addresses are valid choices to use in the highlighted section of the exhibit? (Choose three)

IPv6toIPv4_tunnel

A – ::0A43:0002
B – 0A43:0002::
C – ::10.67.0.2
D – 10.67.0.2::
E – 0:0:0:0:0:0:10.67.0.2
F – 10.67.0.2:0:0:0:0:0:0


Answer: A C E

Explanation

The automatic tunneling mechanism uses a special type of IPv6 address, termed an “IPv4-compatible” address. An IPv4-compatible address is identified by an all-zeros 96-bit prefix, and holds an IPv4 address in the low-order 32-bits. IPv4-compatible addresses are structured as follows:

ipv6toIPv4structure

Therefore, an IPv4 address of 10.67.0.2 will be written as ::10.67.0.2 or 0:0:0:0:0:0:10.67.0.2 or ::0A43:0002 (with 10[decimal] = 0A[hexa] ; 67[decimal] = 43[hexa] ; 0[hexa] = 0[decimal] ; 2[hexa] = 2[decimal])

Question 4

Refer to the exhibit. The 6to4 overlay tunnel configuration has been applied on each router to join isolated IPv6 networks over a IPv4 network. Which statements regarding the 6to4 overlay tunnel is true?

Automatic_6to4_Tunnels

A -The least significant 32 bits in the address referenced by the ipv6 route 2002::/16 Tunnel0 command will correspond to the interface E0/0 IPv4 address
B – The least significant 32 bits in the address referenced by the ipv6 route 2002::/16 Tunnel0 command will correspond to the IPv4 address assigned to the tunnel source
C – The configuration is invalid since the tunnel source command must be configured with an IPv6 address
D – This is actually a configuration example of an IPv4-compatible tunnel and not a 6to4 tunnel
E – This is actually a configuration example of an ISATAP overlay tunnel and not a 6to4 tunnel

Answer: B

Explanation

6to4 tunnels use IPv6 addresses that concatenate 2002::/16 with the 32-bit IPv4 address of the edge router, creating a 48-bit prefix. The tunnel interface on R1 has an IPv6 prefix of 2002:4065:4001:1::/64, where 4065:4001 is the hexadecimal equivalent of 64.101.64.1, the IPv4 address of its interface in the IPv4 network. The tunnel interface on R2 has an IPv6 prefix of 2002:4065:4101:1::/64, where 4065:4101 is the hexadecimal equivalent of 64.101.65.1, the IPv4 address of its interface in the IPv4 network.

When R1 receives a packet with IPv6 destination address of 2002:4065:4101:1:: (from the left IPv6 network, for example) R1 will:

* Take the IPv6 destination address of that packet (2002:4065:4101:1::) and convert it into an IPv4 address. In this case, the IPv4 address is 40.65.41.01 in hexa, which is 64.101.65.1 in decimal format.
* R1 encapsulates the IPv6 packet in an IPv4 packet with a destination address of 64.101.65.1; the packet is routed normally through the IPv4 network to R2
* R2 receives the IPv4 packet, decapsulates and routes it normally to its final IPv6 destination.

Question 5

What will occur when an IPv6 enabled router running 6to4 must transmit a packet to a remote destination and the next hop is the address of 2002::/16 ?

A – The IPv6 packet has its header removed and replaced with an IPv4 header
B – The IPv6 packet is encapsulated in an IPv4 packet using an IPv4 protocol type of 41
C – The IPv6 packet is dropped because that destination is unable to route IPv6 packets
D – The packet is tagged with an IPv6 header and the IPv6 prefix is included


Answer: B

Question 6

What are three IPv6 transition mechanisms? (Choose three)

A – 6to4 tunneling
B – VPN tunneling
C – GRE tunneling
D – ISATAP tunneling
E – PPP tunneling
F – Teredo tunneling


Answer: A D F

Explanation

Below is a summary of IPv6 transition technologies:

6 to 4 tunneling: This mechanism allows IPv6 sites to communicate with each other over the IPv4 network without explicit tunnel setup. The main advantage of this technology is that it requires no end-node reconfiguration and minimal router configuration but it is not intended as a permanent solution.

ISATAP tunneling (Intra-Site Automatic Tunnel Addressing Protocol): is a mechanism for transmitting IPv6 packets over IPv4 network. The word “automatic” means that once an ISATAP server/router has been set up, only the clients must be configured to connect to it.

Teredo tunneling: This mechanism tunnels IPv6 datagrams within IPv4 UDP datagrams, allowing private IPv4 address and IPv4 NAT traversal to be used.

In fact, GRE tunneling is also a IPv6 transition mechanism but is not mentioned in ROUTE so we shouldn’t choose it (there are 4 types of IPv6 transition mechanisms mentioned in ROUTE; they are: manual, 6-to-4, Teredo and ISATAP).

Comments
  1. NTT
    August 15th, 2010

    If Q6 appeared in ROUTE exam, should i choose Teredo tunneling instead of GRE tunneling?

    In fact, Cisco IOS supports manual, generic routing encapsulation (GRE), IPv4-compatible, 6to4, and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) overlay tunneling mechanisms.

    Any ideas?

  2. RATEBOoOo
    September 27th, 2010

    @ NTT
    YES I think you are right i will choose the gre tunnle insted

  3. toti
    October 5th, 2010

    what is next header field?

  4. confusius
    October 8th, 2010

    referring to Q#6..

    what the heck…teredo wasnt even mentioned in Wendell odom’s route book. its a bit unfair if its really the correct answer. i guess buying book is not that helpful at all

  5. BWL
    October 15th, 2010

    See my comments in Share your Route experience but in addition to those, I had an IPv6 header vs IPv4 header multiple choice question that I don’t see here and I didn’t have it on my Pass4Sure. It was a pick 3 answers regarding header size, which header was more complicated, and a third which escapes me, (maybe which version of IP was more efficient). anyone familiar with that one or have the correct answers? I’m heading to my training books to research.

  6. Miljan
    October 17th, 2010

    @BWL
    you can find that question in ps 3.37.

    Withc three are characteristics of IPv6 (Choose three)

    A. An IPv6 address is 128 bits long.
    B. An IPv6 header is 20 bits long.
    C. An IPv6 header contains the next header field.
    D. An IPv6 header contains the protocol field.
    E. Ipv6 routers send RA messages.
    F. An IPv6 header contains the header checksum field.

    Answer: A, C, E

  7. Aric
    October 17th, 2010

    IPv6 Transition Technologies:

    6 to 4
    Tunnelling and Tunnel Brokers
    Teredo
    ISATAP
    Dual stack configuration

    here is the summary:
    http://ipv6.com/articles/gateways/IPv6-Tunnelling.htm

  8. CCIERSBound
    November 16th, 2010

    I have made all of the 642-902 Test sims in a GNS3 format, just email if you want a copy at cciersbound@yahoo.com

    Later,

    CCIERSBound

  9. bak
    November 19th, 2010

    is there anyone who took the 642-902 route exam in november ?

  10. Adam
    November 26th, 2010

    Just posted up my ipv6 notes for ccnp-route, good luck guys!

    http://cisco-revision.com/?p=158

    - Adam

  11. ADNAN
    December 14th, 2010

    hi i will do tha exam but i have the TestInside v6.26

    is it good to me and pass the test !!!

  12. Tintin
    December 17th, 2010

    Can somene explain me this answer:

    Questionis from P.G v337 Q255.
    Refer to the exhibit. A new TAC engineer came to you for advice. A GRE over IPsec tunnel was configured,
    but the tunnel is not coming up. What did the TAC engineer configure incorrectly?

    Answer is A. The crypto isakmp configuration is not correct.

    I thought tunnel was not config correctly with 255.255.255.0 mask. (i thnk correct mask is 255.255.255.255)
    Please comment.

  13. Salem Batmani
    December 22nd, 2010

    to Tintin

    the crypto isakmp is in correct because the IP of the peer on the command is not set correctly ,,, check that

  14. scolpi
    January 2nd, 2011

    Question #3, #4 end #6 are in ROOT programm? Ther’is nothing in “CCNP ROUTE 642-902 Official Certification Guide”.

    Why at the end of the Explanation under Question 6 is ther?

    “In fact, GRE tunneling is also a IPv6 transition mechanism but is not mentioned in BSCI so we shouldn’t choose it (there are 4 types of IPv6 transition mechanisms mentioned in BSCI; they are: manual, 6-to-4, Teredo and ISATAP).”

    BSCI???????

  15. Aninda
    January 10th, 2011

    Now, the ipv6 transition question is a bit unfair. Wendell Odom’s book clearly mentions only four: Manually configured (MCT), GRE, 6to4, ISATAP. How are we supposed to know about Teredo?!

  16. Hera
    January 15th, 2011

    @Aninda and confusius

    The book from wendell Odom for the CCNA talks about Teredo
    As i understand Cisco they reqiuer you to know all about the CCNA topics so in the CCNP the expect you to just know.

    this method is used by dual stack host to create and encapsulate the packet inside IPv4 header
    (sorry for misspelling…)

    Hera

  17. Sajid
    February 1st, 2011

    @Adam
    how are you friend, i was download all your created GNS3 sims from cisco-revision.com but when i tried to open it in GNS3, it is not open and a error generate, how can i open them. kindly help me

    Best regards

  18. geneaux
    February 13th, 2011

    Hi! I took the exam last feb 11 and I passed. I encountered a new question in ipv6 about tunnelling(manually configured,6to4, GRE, ISATAP). I just forgot the exact question and the choices. You need to select three answers out of 6 choices. (FYIP, just in case it appears on your exam) I got all of the correct answers under the IPV6 category :) goodluck!

  19. Vishnu Dutt
    February 15th, 2011

    Hi, In question no 4, the tunnel address will be from 2002:4065:4001:1::/64 subnet. The bits 4065:4001 are not least significant 32 bits but the bits are from no 17 to 48. As per my understanding in ISATAP tunnel the last 32 bits are tunnel source IP address. Can anybody explain this?????

  20. AD
    March 17th, 2011

    @Vishnu

    This is not 6to4 or ISATAP. According to CCNP quick reference this has been deprecated but does append the ipv4 address in the least significant 32 bits.

  21. hurais
    April 22nd, 2011

    hi guys…..
    am really messed up with ipv6 configuration on GNS…..
    when eva i try to configure any ipv6 address on the routers,,,,,,
    the opp link protocol goes down,,,which is making me impossible to practice the lab…..
    any help please ???????????????

  22. LukeSkywalkerBalls
    April 22nd, 2011

    @BWL
    regarding your IPv6 question: 1. The v6 header is bigger 2. it is more simplified 3. It is more efficient in terms of how it is proccessed by a routing engine.

    See Below:
    The packet header in IPv6 is simpler than that used in IPv4, with many rarely used fields moved to separate optional header extensions.
    IPv6 routers do not perform fragmentation. IPv6 hosts are required to either perform PMTU discovery, perform end-to-end fragmentation, or to send packets no larger than the IPv6 default minimum MTU size of 1280 octets.
    The IPv6 header is not protected by a checksum; integrity protection is assumed to be assured by both link layer and higher layer (TCP, UDP, etc.) error detection.[note 1] Therefore, IPv6 routers do not need to recompute a checksum when header fields (such as the time to live (TTL) or hop count) change.[note 2]
    The TTL field of IPv4 has been renamed to Hop Limit, reflecting the fact that routers are no longer expected to compute the time a packet has spent in a queue.

    Good luck

  23. Phoenix
    April 24th, 2011

    For a DND Question Regarding the IPv6 in IPv4
    as the link http://www.cisco.com/en/US/technologies/tk648/tk872/technologies_white_paper0900aecd8054d37d.pdf

    The Correct order is

    IPv4 Header — IPv6 Header — Extension Header — Upper PDU

    Could any one Please confirm the This answer

  24. Sidney DSouza
    May 3rd, 2011

    Hi Pheonix

    I agree with your answer as well. Makes more sense to have the EH before the UL PDU

  25. Big Dad
    May 10th, 2011

    Found this as the most popular methods for Q6

    Transition Method Description
    Dual stacking Devices such as PCs and routers run both IPv4 and IPv6, and thus have two sets of addresses.

    Manual IPv6-over-IPv4 (6to4) tunneling IPv6 packets are tunneled across an IPv4 network by encapsulating them in IPv4 packets. This requires routers configured with dual stacks.

    Dynamic 6to4 tunneling Allows IPv6 localities to connect to other IPv6 localities across an IPv4 backbone, such as the Internet, automatically. This method applies a unique IPv6 prefix to each locality without having to retrieve IPv6 addressing information from address registries or ISPs.

    Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) tunneling Uses virtual links to connect IPv6 localities together within a site that is primarily using IPv4. Boundary routers between the two addressing types must be configured with dual stacks.

    Teredo tunneling Instead of using routers to tunnel packets, Teredo tunneling has the hosts perform the tunneling. This requires the hosts to be configured with dual stacks. It is commonly used to move packets through an IPv4 address translation device.

    NAT Proxying and Translation (NAT-PT) Has an address translation device translate addresses between an IPv6 and IPv4 network and vice versa.

  26. Josefo
    May 16th, 2011

    I passed Today the exam with 988/1000 …. !!!!

    new question:
    Which two statements about 6to4 tunneling are accurate? (Choose two.)
    A. Prepending a reserved IPv6 code to the hexadecimal representation of 192.168.0.1 facilitates 6to4
    tunneling.
    B. Each 6to4 site receives a /48 prefix in a 6to4 tunnel.
    C. 2002::/48 is the address range specifically assigned to 6to4.
    D. Prepending 0×2002 with the IPv4 address creates an IPv6 address that is used in 6to4 tunneling.
    E. 6to4 is a manual tunnel metod.
    Answer:- B e D. —- In have 100% IPV6

    Good luck

  27. fschris
    May 24th, 2011

    josefo… is the answer B and D ?

  28. OS
    June 12th, 2011

    Hello i want to start to study for CCNP Exam, can you give me some tips for my study. obviously this site.

  29. Anonymous
    June 12th, 2011

    Hi OS, use the CBT Nuggets videos + Cisco Official certification guide —-> good way to practice exam, also practice the lab using the GNS3 software.

  30. SOFIANE
    June 24th, 2011

    IS THE TEACHER IN THE CBT VIDEOS THE ONLY ONE AND NAMED JEREMY

  31. Thant Zin SOe
    June 26th, 2011

    I would like to discuss about question in TKI814.There’s some answer i think it’s wrong.Please give me suggestion for me.Thanks and regards.Although most question aren’t concerned with IPV6, I don’ know where I have to put this question.whatever,please answer.I will take exam next month.I think it’ll be useful for other people who will sit exam.Let’s discuss.

    Question No 1
    Which statement about access lists that are applied to an interface is true?
    A.you can apply multiple access lists with the same protocol or in different
    B.you can config one access list,per direction,per layer 3 protocol
    C.you can place as many access lists as you want on any interface
    D.you can apply ony one access list on any interface
    Answer in TIK 214 is D.
    I think answer is “B you can config one access list,per direction,per layer 3 protocol”
    (Cisco exploration explain so)

  32. Thant Zin SOe
    June 26th, 2011

    Question No 2
    What IEEE standard protocol is initiated as a result of successful DTP (what’s DTP?is it STP??if stp ,answer should be 802.1d) completion in switch over Fastethernet?
    A.802.1ad
    B.802.1w
    B.802.1Q
    B.802.1d
    Answer in TK214 is B.802.1Q.If so,why is it?
    What’s answer?
    I think and question are mistaken STP with DTP and answer may be 802.1d (STP).

  33. Thant Zin SOe
    June 26th, 2011

    Question 3
    Which component of VPN technology ensures that data can be read only by its intended recipient?
    A. data integrity
    B. encryption
    C. key exchange
    D. authentication
    Answer in TIK 214 is D.Authentication
    What’s correct answer?
    I think answer should be “B.encryption”. …not,Dauthentication.
    Authentication can only check whether data come from authenticated person..
    Besides,if not using encryption,other people who hack this data can see this data without decrypting it.

  34. Thant Zin SOe
    June 26th, 2011

    Question 4
    The serial0/0 interface of the Tampa router connects the Oriando router.Which two statements are true about the connection between these two routers?(choose two)
    A.The only device with which the Tampa router will negotiate a data link is the Orlando router.
    B.The link is addressed on the *zero*subnet 10.0.0.0 network.
    C.The link uses a three-way handshake for authentication.
    D.The link uses a two-way handshake for authentication.
    E.Data exchanges between the Oriando and Tampa routers are encrypted
    Answer in TIK 214 are B and C.
    I think answer is A and C.
    I think “A.The only device with which the Tampa router will negotiate a data link is the Orlando router.” Is correct because on show running-config output,there’s only one user name and password pair for Orlando router.Not for other router. Answer C should be wrong because serial interface IP address is 10.0.1.0 255.255.255.0.This IP address is not on zero subnet.

  35. Thant Zin SOe
    June 26th, 2011

    Question No 5
    Which two priviledge mode cisco ios command can be used to determine cisco router chassis serial no.
    A.show inventory
    B.show flash:filesys
    C.dir flash:|include chassis
    D.show diag
    E.show controllers
    Ans:show inventory,show diag…( I can’t find this command on packet tracer?Is that answer correct?)
    If not,what’s correct answer?

  36. Thant Zin SOe
    June 26th, 2011

    Question No.6
    Which command helps a network admin to manage memory by displaying flash memory and nvram utilization?
    A show secure
    show file systems
    show flash
    show version
    (Answer in TIK 218 dump said “show file systems”,I have never seen this command in packet tracer)Is it correct answer? if not,what’s correct answer for this?

  37. Thant Zin SOe
    June 26th, 2011

    Question No 7
    Which two statements apply to dynamic access lists?(choose two)
    A.they offer simpler management in large internetworks.
    B.you can control logging messages.
    C.they allow packets to be filtered based on upper-layer session information.
    you can set a time-based security policy.
    D.you can set a time-based security policy.
    E.they provide a level of security against spoofing.
    F.they are used to authenticate individual users.
    Answer in TIK214 are C & D.
    I think answer may be A and F.
    ( “A:They are used to authenticate individual user”I think it is because it can authenticate user by telenet with AAA server…..)
    ( “F:They offer simpler management in large network. Cisco Exploration training explain the following statement
    “Benefits of Dynamic ACLs
    Dynamic ACLs have the following security benefits over standard and static extended ACLs:
    Use of a challenge mechanism to authenticate individual users
    Simplified management in large internetworks
    In many cases, reduction of the amount of router processing that is required for ACLs
    Reduction of the opportunity for network break-ins by network hackers
    Creation of dynamic user access through a firewall, without compromising other configured security restrictions”)

  38. Thant Zin SOe
    June 26th, 2011

    Question 8
    What are two benefits of using NAT?(choose two)
    A.NAT protects network security because private networks are not advertised.
    B.NAT accelerates the routing process because no modifications are made on the packets.
    C.Dynamic NAT facilitates connections from the outside of the network.
    D,NAT facilitates end-to-end communication when IPsec is enable.
    E.NAT eliminates the need to re-address all host that require extemal access.
    F.NAT conserves addresses through host MAC-level multiplexing.
    Answer in TIK 214 is A and E.
    I think answer maybe A and C.
    E:NAT eliminate need to re-address all host that require external access.(external access mean internet?? Or extranet)If internet,it do need to re-address all host for source IP.
    C.Dynamic NAT facilitate connection from outside of network maybe correct answer becoz outside network should first to be authenticated with telnet session to access internal network .only If valid password can be given,they can access internal network.,I think

  39. Thant Zin SOe
    June 26th, 2011

    Question No 9
    Which three statements accurately describe layer 2 Ethernet switches?(choose three)
    A.Microsegmentation decreases the number of collisions on the network.
    B.if a switch receives a frame for an unkown destination,it uses ARP to resolve the address.
    C.Spanning Tree Protocol allows switches to automatically share vlan information.
    D.In a properly functioning network with redundant switched paths,each swiched aegment will contain one root bridge with all its ports in the forwarding state.All other switches in that broadcast domain will have only one root port.
    E.Establishing vlans increases the number of broadcast domains.
    F.Switches that are configured with vlans make forwarding decisions based on both layer 2 and layer 3 address information.
    Answer in TIK214 is A,D,F
    I think answer maybe A,D,E
    I think E answer is correct because creating vlan increase no of broadcast domain.
    I think F is wrong because VLAN is layer 2 feacture and it can’t make forwarding decision based on layer 3 address.vlan make forwarding decision based on layer2 destination mac address and separte briding table for each vlan,in my opinion.

  40. Thant Zin SOe
    June 26th, 2011

    Question No 10
    Which three approaches can be used while migrating from an IPV4 addressing scheme to an IPV6 scheme.(choose three)
    A.statically map IPV4 address to IPV6 addresses
    B.configuration IPv4 tunnels between IPV6 islands
    C.use DHCPv6 to map IPV4 addresses to IPV6 addresses
    D.use proxying and translation to translate IPV6 packets into IPV4 packets
    E.configure IPV6 directly
    F.enable dual-stack routing
    Answer in TK214 is A,B and F.
    another question in this TIK answer is B,C,F.What’s correct answer?
    I think answer maybe BCF.

  41. Thant Zin SOe
    June 26th, 2011

    Question No 11
    which command allows you to verify the encapsulation type (CISCO OR IETF) for a frame relay link?
    A. show frame-relay map
    B. show frame-relay lmi
    C. show inter serial
    D. show frame-relay pvc

    (Answer in this dump is show frame-relay map,is it correct answer?)

  42. Raspberries
    June 28th, 2011

    hey , Thant Zin Soe..

    i also from MM.. how did u get those quez? i think it was not valid for the current 902 exam..
    Hit me back quick!!!

  43. shah
    July 2nd, 2011

    Hello guys..

    does anyone have ccnp route 642-902 cbt, pass4sure or any dumps. kindly send me links on shariq2009@live.com or u can send here as well.

    Thanksss

  44. shah
    July 3rd, 2011

    Hello guys..

    does anyone has ccnp route 642-902 cbt, pass4sure any dumps or GNS3 LAB?.
    kindly send me links on
    shariq2009@live.com or u can send here as well.

    GNS3 LAB is very important.. kindly send me links.

    Thanksss

  45. Farhan
    July 13th, 2011

    Hey guys plz send me ccnp route dumps…
    farhan_shaikh123@yahoo.com

  46. rajdas
    July 22nd, 2011

    hello guys …

    can any one know about the GRE over IPSEC tunnel answers explanations , three similar questions are there in dumps?????????

  47. biji
    August 4th, 2011

    @rajdas,
    just compare 3 questions and answer you’ll find the explanation your self, here’s my opinion:
    in that 3 questions you simply look at crypto isakmp, acl and tunnel you’ll find the answer,
    1. check crypto isakmp key *** adresss x.x.x.x must match remote interface, if interface is not remote (ethernet) address, it wrong crypto isakmp config
    2. check acl, if not include gre, it wrong acl.
    3. check tunnel, if tunnel destionation not remote address (192.168.2.1) it wrong.

  48. Keziemi
    August 19th, 2011

    Hi Friends,

    Please i need CCNP ROUTE AND SWITCH videos and any other recent study materials. I want to prepare and write the exam as soon as possible. Please i will appreciate help from anyone.
    my email ID is keziemi@gmail.com

    Thanks all

  49. suddhoshil
    August 31st, 2011

    i’ll give route exam on 15th of sept plz send me the latest dumps on bozo.tiger@gmail.com

  50. Madjheed
    September 3rd, 2011

    Q1. U said double colon cannot be used in presentation of ipv6 but you used it your answer pls, explain.

  51. Farbod
    September 22nd, 2011

    Q6. GRE is mentioned as “tunneling operation” in the CCNP ROUTE 642-902 Official Certification Guide on page 617 ( 652 / 919 ), can we call it as a transition mechanism ?

  52. saini525
    January 16th, 2012

    Q6 I have yet to see Teredo tunneling mentioned in any of my CCNA or CCNP ROUTE 642-902 Official Certification Guide books. Why Teredo? All my books mention GRE, 6to4, and ISATAP. Why would it be Teredo if Cisco books do not even mention it?

  53. Sir CCNP
    January 18th, 2012

    Hello Friends,

    I just started to study the ROUTE test after taking almost two years off from passing the CCNA. I am planning to take the ROUTE test in two months. Are the Sims, Drag and Drop, Questions, and everything else on this site still valid for the ROUTE test?

    Thank you all!

  54. ME
    January 29th, 2012

    @biji
    Thanks for the simple explanation on 3 Qs from GRE. If somebody not correct, can you answer those three Qs? If you look at dumps, they have differences.

  55. ME
    January 29th, 2012

    @biji
    Thanks for the simple explanation on 3 Qs from GRE. If somebody thinks his explanation not correct, can you answer those three Qs? If you look at dumps, they have differences answers.

  56. Sir CCNP
    February 10th, 2012

    I finished reading the official Cisco Route study guide book, it made no mention of Teredo as one of the tunneling protocols.

  57. nik
    February 17th, 2012

    @Thant Zin SOe

    COrrect answer is sh int Serial

    Router#sh int Serial2/0
    Serial2/0 is up, line protocol is up
    Hardware is M4T
    MTU 1500 bytes, BW 2048 Kbit, DLY 20000 usec, rely 255/255, load 1/255
    Encapsulation FRAME-RELAY IETF, crc 16, loopback not set

  58. IPV6
    February 21st, 2012

    Any new IPV6 question pl

  59. Tiger
    March 29th, 2012

    Got Q3n4 in today exam

  60. zsolt
    April 11th, 2012

    Which command allows you to verify the encapsulation type (Cisco or IETF)?

    correct answer: show interfaces serialX/X
    see pic why: http://img534.imageshack.us/img534/3417/ietf.png

    @Thant Zin SOe
    Question 3
    Which component of VPN technology ensures that data can be read only by its intended recipient?
    A. data integrity
    B. encryption
    C. key exchange
    D. authentication

    Answer D!
    Answer A: data integrity is, that the data what is received is the same as sent (uses HMAC-MD5 and HMAC-SHA-1 algos)
    Answer B: encryption is eq confidentiality, so the data is encrypted.
    Answer C: i don’t know :D
    Answer D: auth: if you protect your data with username/pass, then noone can read your data, so D is correct!

  61. Manoj
    May 25th, 2012

    @Thant Zin SOe
    The questions posted were about ccnp switch not route
    Question 2 related to dtp not stp .dtp is dynamic trunking protocol used for forming trunk link hence the answer is 802.1q.

  62. Derp2
    June 2nd, 2012

    so should i go for 6to4, gre and isatap tomorro?

  63. Swede
    June 29th, 2012

    Q6 is wrong and should be deleted. Terodo tunneling is not a part of CCNP ROUTE. GRE is.

  64. Nan
    July 6th, 2012

    What are the simulations like taking the a
    Exam soon

  65. DriveSlow
    September 20th, 2012

    Question 4 is stupid… As explained afterwards it is “the least significant 32 bits of 2002::/16″ that get the IPv4 address but the immediately following the 2002 (16 bits). What the hell ??!!

  66. DriveSlow
    September 20th, 2012

    sorry.. repost!! i forgot a negation :
    Question 4 is stupid… As explained afterwards it is NOT “the least significant 32 bits of 2002::/16″ that get the IPv4 address but the immediately following the 2002 (16 bits). What the hell ??!!

  67. NMAMPEN1
    October 13th, 2012

    @DriveSlow
    I think there’s an angle in this question.They refer as “least significant” the trailing 32 bits (corresponding to the IPv4) following the 16 heading ones (corresponding to 2002) as explained,but if we focus in the first 64 bits block of the address.
    Anyway, by discrimination on the questions, the valid can only be in the two first ones (remember that as important to know the right question, is to know why the others are wrong).

  68. Mau
    October 19th, 2012

    Appx. how many questions we get on IPv6 in exam?

  69. Psychxz
    November 16th, 2012

    Hey guys, I just passed the CCNP Route exam a few weeks ago. There are a lot of questions in here (digitaltut.com) that appeared in my exam. digitaltut.com really helped me a lot. I did not memorized the whole page, it just helped me, kinda experience how the exam will be. Of course, you really have to study the theories, lab and stuff not just these questions.

    I put my comments here in IPv6 part because there are a lot of it that appeared in my exam. I was not able to remember (of course) but there are IPv6 questions like GREtunneling and configuring it. If I will quantify it, maybe about 10-12 questions appeared re: IPv6, so just a heads up.

    Good luck, guys!

  70. Addict
    November 18th, 2012

    Q6:
    642-902 mentions this about tunneling IPv6 over IPv4:
    Tunneling IPv6 over IPv4
    A tunnel serves as a virtual point-to-point link between IPv6 domains. It doesn’t matter what the underlying IPv4 struc- ture is if there is IP reachability between the tunnel endpoints. This exam covers five ways to tunnel IPv6 over IPv4:
    - Manual Tunnels
    - GRE Tunnels
    - 6to4 Tunnels
    - IPv4-Compatible IPv6 Tunnels
    - Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)

    So, if i get this question tomorrow, i go for 6To4,GRE ans ISATAP :-)

  71. Addict
    November 18th, 2012

    The Quick Reference 642-902 mentions this….

  72. abosi
    November 29th, 2012

    hello guys ,,can u help me with this Q ,, i think the correct answer is D ,,is it right ??

    For a GRE tunnel to be up between two routers, which of the following must be configured?

    A.Loopback Interface

    B.IP reachability between the loopback interfaces

    C.Dynamic Routing between routers.

    D.Tunnel interfaces must be in the same subnet

  73. Mumin
    December 12th, 2012

    I came across this post elsewhere…

    GRE tunnels don’t require loopbacks. They work quite well using physical interfaces as the source and destination. They also don’t require dynamic routing; static routes work just fine. Place the IP addresses assigned to the tunnels in different subnets and there won’t be any connectivity over the tunnels… that is unless you place static routes at both endpoints pointing to the remote tunnel IP address via the tunnel. Host routes work just fine.

    While D is most likely the correct answer, it is possible to pass traffic over GRE tunnels even when their IP addresses are in different subnets. In fact, you can run RIP over such tunnels by issuing “no validate-update-source” in the RIP config. In other words, it’s either a bad question, or it is really outdated.

    Check this out… Note that the rip update source and local tunnel address are in different subnets.

    Before no validate-update-source:

    RIP: ignored v2 update from bad source 9.9.9.2 on Tunnel0
    RIP: sending v2 update to 224.0.0.9 via Tunnel0 (9.9.8.1)
    RIP: build update entries – suppressing null update

    After no validate-update-source

    RIP: received v2 update from 9.9.9.2 on Tunnel0
    22.0.0.0/8 via 0.0.0.0 in 1 hops
    RIP: sending v2 flash update to 224.0.0.9 via Tunnel0 (9.9.8.1)

    Here’s the routing table and a ping test

    9.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
    C 9.9.8.0/24 is directly connected, Tunnel0
    L 9.9.8.1/32 is directly connected, Tunnel0
    S 9.9.9.2/32 is directly connected, Tunnel0
    R 22.0.0.0/8 [120/1] via 9.9.9.2, 00:00:22
    r1.1.1.1#ping 22.22.22.22
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds:
    !!!!!

    Tunnel interface configs from both routers:

    interface Tunnel0
    ip address 9.9.8.1 255.255.255.0
    tunnel source Serial1/0
    tunnel destination 5.0.0.2

    interface Tunnel0
    ip address 9.9.9.2 255.255.255.0
    tunnel source Serial1/0
    tunnel destination 5.0.0.1

    Note that no loopbacks are involved in order to get the tunnels “up”, nor is any dynamic routing necessary to pass traffic. The static route you see in the routing table is all that is needed.

  74. sedigh
    December 17th, 2012

    pls. update this page, as I had several question about IPV6/GRE/Tunneling/Dual stack today in the exam, which are not mentioned here.

  75. meman
    March 11th, 2013

    Q.5

    I have the official exam guide from Cisco and Teredo is not mentioned in the book at all. Correct answer is ISATAP, GRE, 6 to 4

  76. Did_it_work?
    April 19th, 2013

    Teredo is not mentioned in official ROUTE guide probably because Teredo is purely HOST based, nothing to do with routers.

    I agree, corect answer is ISATAP, GRE, 6 to 4

  77. Paul
    April 30th, 2013

    Can anyone confirm if Q6 is still a valid question in current exams?

  78. Jose
    May 1st, 2013

    Teredo tunneling is a valid answer.

    GRE Tunneling is just another way to tunneling and not a ipv6 transition mechanism.

    ;)

  79. @Daddy
    May 20th, 2013

    Question 6 it´s totally right,

    Remember read the question 2 or 3 times, IPv6 transition mechanisms is the question. Any doubts??? everyone can confirm this in the following below link:

    http://ipv6.com/articles/gateways/IPv6-Tunnelling.htm

  1. No trackbacks yet.
Add a Comment