Policy Based Routing Sim

the answer is 1. active/active firewall setup

Hi JZ,

what about the question on how to mitigate asymmetric routing using active/active firewall setup?

Is it thru using a layer 3 device or router? Forgot the other options.

Thanks S0laris!
The best one!

Hi network brains
which ones from lab are inn the exam ?????????
waiting your kind response

BorderRouter(config)#route-map pbr permit 10
BorderRouter(config-route-map)#match ip address 101
BorderRouter(config-route-map)#set ip next-hop 10.1.101.1
BorderRouter(config-route-map)#exit
I think this is wrong “match ip address 101”
It have to be “match policy-list 101”
Isn´t it?

Compilation of exams and including April and May.
h t t p : / / c o r n e e y . c o m / q D 4 e y d
the pass is
!aAyefgyn-7nP18rSvGvzPPv5FJbO_e8AmeieWSZZtTk
delete the spaces

Can somebody please reply as if 2nd statement is needed or not to allow all other traffic==>#route-map PBR permit 20.

Cisco press documentation said “There is always an implicit deny statement at the end of a route map” http://www.ciscopress.com/articles/article.asp?p=2273507&seqNum=12 .

But also they mention that “The policy routing process proceeds through the route map until a match is found. If no match is found in the route map, or the route map entry is made a deny instead of a permit, then normal destination-based routing of the traffic ensues”. on http://www.cisco.com/en/US/products/ps6599 products_white_paper09186a00800a4409.shtml

Please advise if following is correct or not:
#####################
#route-map PBR permit 10
()#match ip address 101
()#set ip address 10.1.101.1

#route-map PBR permit 20
####################
thank you

@ Chaka: “match ip address” is the way to go, since you are trying to match with an ACL, that is the right statement when filtering for either ACLs or prefix list.

Can someone please share/eail the new/updated dumps. im planning to take the exam this june.
Thanks and more power to digitaltut.

dlinuxuser1 @ gmail com

Request you please share latest dumps
hardik.patira28 @ gmail .com
thanks in advance

pass ccnp route exam today..

Hi guy

Please share this dumps VCE 149+41+15+183+56+82+32+8

mahmoud107@gmail com

thanks you

229 is still valid…ccnp route

Dear All ,
Please can any one send to me the latest dump for CCNP routing (razvan_0072@yahoo dot com)

Thank You

229 dumps please at cmfarrukh@yahoo(dot)com

please send me 229q to {email not allowed}

please send me 229q to kheyr.qabe1(@)gmail.com

229 is still valid…email address

does anyone that can help me ?
i have try with the GNS lab… but from the testing host i ping ISP1 and ISP2.

interface FastEthernet0/0
ip address 192.168.1.254 255.255.255.0
ip policy route-map pbr
duplex auto
speed auto
!
interface Serial0/0
ip address 10.1.101.254 255.255.255.0
clock rate 2000000
!
interface FastEthernet0/1
ip address 10.1.102.254 255.255.255.0
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clock rate 2000000
!
router eigrp 65001
redistribute eigrp 65000 route-map to-eigrp65001
network 192.168.0.0 0.0.255.255
auto-summary
!
router eigrp 65000
redistribute eigrp 65001 route-map to-eigrp65000
network 10.1.100.0 0.0.3.255
auto-summary
!
ip route 0.0.0.0 0.0.0.0 10.1.101.1
ip route 0.0.0.0 0.0.0.0 10.1.102.1
!
!
ip http server
no ip http secure-server
!
access-list 111 permit icmp any any echo
!
route-map pbr permit 10
match ip address 111
set ip next-hop 10.1.101.1
!
route-map to-eigrp65000 deny 10
match tag 65000
!
route-map to-eigrp65000 permit 20
set tag 65001
!
route-map to-eigrp65001 deny 10
match tag 65001
!
route-map to-eigrp65001 permit 20
set tag 65000

someone can help me ?

@funghet

your ACL >>> is not right access-list 111 permit icmp any any echo

should be access-list 111 permit tcp any any eq 80

when test use the following in gns3

telnet 10.1.101.1 80

this will show when you do sho route map for confermation

@Anonymous

Hi Bro
the access-list 111 is the number of ACL that was in the test cause in this solution the number is 101 ?

Hi All,

please send me 229q to acidgrempa@gmail(dot)com

many thx in advance

@luwi you can in http://www.dump4exam.com/300-101.html find more

who took exam last days? what labs are in exam now?

passed yesterday.

used the official ccnp route 300-101 guide book, jeremy videos from cbtnuggets and finally digitaltut.com.

the dumps on digitaltut are 85% valid, quite impressive i must say. didnt use any other dumps to prepare (i can be lazy sometimes)

sims were eigrp ospf redistribution, eigrp evaluation, ospf evaluation and policy based routing sim.

all sims were the same with little modifications on IP addresses and interface numbers. but i must mention something about the policy based routing sim. it was kinda different. similar topology as we have on digitatut however the task was to allow all http traffic only to go through one ISP (framerelay link) while any other traffic can go either way. so this is what i did.

access-list 100 permit tcp any any eq 80

route-map ROUTE-MAP deny 10
match ip address 100
set ip next-hop THE-OTHER-ISP

route-map ROUTE-MAP permit 20

So i felt since they wanted only http traffic to go to framerelay while any other traffic can go eitherway, in other words they do not want http traffic to go through the other isp so i figure i should deny http traffic from going through the other isp while it will be business as usual for other traffic.

well that was what i could come up with with al the exam tension and the racing time.

at the end of the day i passed with 812. i am sure of about 80 to 85% of the other none sim questions because off course they were here on digitatut.

please share your thoughts on the pbr sim senario and what the best approach would have been. because i feel i got it wrong, that should explain my score of 812. you can share your thoughts with me mbomat at yahoo dot come. good luck everyone, see you on the switch page…………

Thank you, PeterPan and Helper – nicely done!

@PBR route-maps and others that raised the same question.

I strongly believe that when used for PBR the route-map does not need a void permit statement at the end to negate the implicit deny all.
Whatever traffic is matched by the implicit statement will simply be routed based on the destination as per the normal routing process and NOT DROPPED.
For those still in doubt I suggest to lab this and draw your own conclusions.

From the official CERT guide:
“Note that for each packet entering Fa0/0, PBR either matches a packet with a route map
permit clause or matches a packet with a route map deny clause. All route maps have an
implicit deny clause at the end that matches all packets not already matched by the route
map. PBR processes packets that match a permit clause using the defined set command.
For packets matched by a deny clause, PBR lets the packet go through to the normal IP
routing process.”

/ET

please send me 229q to LCEICH(@)gmail.com

Hi peeps

what labs will be in the exam

thanx

Please share dumps {email not allowed}

please share dumps nainarbe at gmail dot com

NOTE: PBR lab have some problems
Note that key words”use frame-rely link when it is avilable”
1) create an IP SLA to make sure if that avilable or not.
R1(config-ip-sla)#icmp-echo 10.1.100.2 source-interface serial 0/0/0
R1(config-ip-sla-echo)#ex
R1(config)#ip sla schedule 1 start-time now life forever
2) set track for that sla
R1(config)#track 10 ip sla 1
3) filter the HTTP trafic
Rl(config)# access-list 101 permit tcp any any eq www
4) apply on route map with tarcking object
NOTE :- next hope 10.1.100.2 will set .(if it is reachable) otherwise it will take another path(EoMPLS link)
R1(config)#route-map PBR permit 10
R1(config-route-map)#match ip address 100
R1(config-route-map)#set ip next-hop verify-availability 10.1.100.2 10 track 10
R1(config-route-map)#ex
5)apply policy route
R1(config)#interface fastEthernet 0/1
R1(config-if)#ip policy route-map PBR

User E.T. wrote on August 11th, 2017 in share-your-route-v2-0-experience, that there was not default or static route on BD router. Without default\static route, any traffic can not go through ISP2’s link.

BorderRouter(config)#route-map pbr permit 10
BorderRouter(config-route-map)#match ip address 101
BorderRouter(config-route-map)#set ip next-hop 10.1.101.1
BorderRouter(config)#route-map pbr permit 20
BorderRouter(config-route-map)#set ip next-hop 10.1.102.1
BorderRouter(config-route-map)#exit

could You confirm above config, which would be necessary in case of absence of static\default route to ISP2 on BD router?

I want CCNP route labs for practise from where i download it]

@Elmo did u see any changes in the PBR Lab simulation on the exams .. I saw one of the guy configuring IP SLA etc .. I really think only Route Map with Next Hop ip is ok for this solution

HI Friends,

please share ccna dumps v3

7oda

Do you have already the dumps of all you request?if you have can you send me also?thanks here is my email : {email not allowed}

Hi all
Do you have already the dumps of all you request? if you have can you send me also?thanks here is my email : owenshinobi @ gmail com

Hey, is it now a complete EIGRP LAB or a EIGRP and BGP LAB?

Thanks in advance.

hi!!
Said that to validate my solution, have to generate http traffc from test workstation, How can i do this?

Dear All ,
Please can any one send to me the latest dump for CCNP routing (razvan_0072@yahoo dot com)

Thank You

i passed the ccnp route exam scoure 872
anyone need a ccnp route dumps context me

i passed the ccnp route exam scoure 872
anyone need a ccnp route dumps context me

hello elmo, can you please share route dumps with me at rhmian80 @ gmail dot com

I think there is no need to configure IP SLA. When the next hop is unavailable, the packet will use the normal routing table.

https://www.cisco.com/c/en/us/support/docs/ip/ip-routed-protocols/47121-pbr-cmds-ce.html#casetwo

ELMO please i need CCNP ROUTE exam. can u send me to (kheyrqabe1 AT Gmail.com)

ELMO please i need CCNP ROUTE exam. can u send me to (kheyrqabe1 @ gmail.com)

Hi all
anyone can provide me the link for lab to download and also when opened On GNS show me there is error i have to convert how to do that

Hi All,

I have tried to open route Exam sims in GNS v1.5.2 but after opening topology all nodes in the topology turned red , when I click over the node it says ” This node is not initialized”

Can someone please know how to fix this so that I can practice these exam labs ?? or any other way to practice these labs

@Tej you missed just only one lab PBR ? What about the rest of questions , there you also made some mistakes?