Huawei HCIE-Carrier IP (Written) - H31-161 Exam Practice Test
RTA is a leaf router that directly connects to host A through interface GigabitEthernet 1/0/0. The interface is configured as follows:
interface GigabitEthernet1/0/0
undo shutdown
ip address 192.168.4.2 255.255.255.0
pim sm
igmp enable
igmp version 3igmp ssm-mapping enable
igmp static-group 232.1.1.1
Configurations in the IGMP view are as follows:
igmp
ssm-mapping 232.1.1.0 255.255.255.0 10.10.1.1
ssm-mapping 232.1.2.0 255.255.255.0 10.10.1.1
Host A sends an IGMPv2 Report message to group 232.1.2.2. Which entry can be displayed by the display igmp ssm-mapping group command?
interface GigabitEthernet1/0/0
undo shutdown
ip address 192.168.4.2 255.255.255.0
pim sm
igmp enable
igmp version 3igmp ssm-mapping enable
igmp static-group 232.1.1.1
Configurations in the IGMP view are as follows:
igmp
ssm-mapping 232.1.1.0 255.255.255.0 10.10.1.1
ssm-mapping 232.1.2.0 255.255.255.0 10.10.1.1
Host A sends an IGMPv2 Report message to group 232.1.2.2. Which entry can be displayed by the display igmp ssm-mapping group command?
Correct Answer: D
Exhibit:

RTA is an edge router of the MPLS backbone network. It provides the access services for users under Layer 2 switches and different users by subinterface . User A access VLAN 12 and has subscribed to the His, VoIP, and IPTV services. According to 802 1p priorities, the value indicates the His service, 1 indicates the VoIp service, and 4 indicates the IPTV service. RTA is configured on he access side as follows.

What is the descending order of service priorities?

RTA is an edge router of the MPLS backbone network. It provides the access services for users under Layer 2 switches and different users by subinterface . User A access VLAN 12 and has subscribed to the His, VoIP, and IPTV services. According to 802 1p priorities, the value indicates the His service, 1 indicates the VoIp service, and 4 indicates the IPTV service. RTA is configured on he access side as follows.

What is the descending order of service priorities?
Correct Answer: C
Exhibit:

As shown in the figure, OSPF process 100 runs on both PEs and CEs, and VPN routers are transmitted between PE 1 and PE 2 through PGB CE 1 enables interface address 43.1.1.0/24 in area 0.A route to 43.1.10/24. However, does not exist in the routing table of CE 2. What are the possible causes?

As shown in the figure, OSPF process 100 runs on both PEs and CEs, and VPN routers are transmitted between PE 1 and PE 2 through PGB CE 1 enables interface address 43.1.1.0/24 in area 0.A route to 43.1.10/24. However, does not exist in the routing table of CE 2. What are the possible causes?
Correct Answer: C,D
Refer to the exhibit.

Which statement about Hub & Spoke MPLS VPN is false?
A . If two Spoke sites are connected to the same Spoke PE, they must be assigned to different VPN instances to prevent them from exchanging routing information.
B . The route of traffic from Spoke site 1 to Hub site 2: Traffic enters Hub site 3 through an interface under VPN1-Hub of the Hub PE and is then forwarded to Spoke site 2 through an interface under VPN1-Spoke of the Hub PE.
C . The route of traffic from Spoke site 2 to Hub site 1: Traffic enters Hub site 3 through an interface under VPN1-Spoke of the Hub PE and is then forwarded to Spoke site 2 through an interface under VPN1-Hub of the Hub PE.
D . The Hub PE can advertise aggregate Spoke site routes or default routes to Spoke PEs through VPNv4.
E .Routes advertised by a Spoke PE to Spoke site 1 of the Hub PE may be advertised back by the Hub PE through a VPNv4 neighbor.
Configure VRFs and relevant policies on a PE as follows:
#
ip vpn-instance vrf1
route-distinguisher 100:1
export route-policy vrf1
vpn-target 1:1 export-extcommunity
vpn-target 2:2 import-extcommunity
ip vpn-instance vrf2
route-distinguisher 100:2
import route-policy vrf2
vpn-target 1:1 3:3 export-extcommunity
vpn-target 1:1 3:3 import-extcommunity
ip vpn-instance vrf3
route-distinguisher 100:3
import route-policy vrf3
vpn-target 2:2 3:3 export-extcommunityvpn-target 2:2 3:3 import-extcommunity ip vpn-instance vrf4 route-distinguisher 100:4 import route-policy vrf4 vpn-target 1:1 export-extcommunity vpn-target 2:2 import-extcommunity
#
route-policy vrf2 deny node 1
if-match extcommunity-filter 1
#
route-policy vrf2 permit node 2
#
route-policy vrf1 permit node 1
apply extcommunity rt 3:3 additive
#
route-policy vrf3 permit node 1
if-match extcommunity-filter 2
#
route-policy vrf4 permit node 1
if-match extcommunity-filter 3
#
ip extcommunity-filter 1 permit rt 2:2
ip extcommunity-filter 2 deny rt 1:1
ip extcommunity-filter 3 permit rt 3:3
#
If a route is imported to the routing table of VRF 1, which VRF can the route match?(A)

Which statement about Hub & Spoke MPLS VPN is false?
A . If two Spoke sites are connected to the same Spoke PE, they must be assigned to different VPN instances to prevent them from exchanging routing information.
B . The route of traffic from Spoke site 1 to Hub site 2: Traffic enters Hub site 3 through an interface under VPN1-Hub of the Hub PE and is then forwarded to Spoke site 2 through an interface under VPN1-Spoke of the Hub PE.
C . The route of traffic from Spoke site 2 to Hub site 1: Traffic enters Hub site 3 through an interface under VPN1-Spoke of the Hub PE and is then forwarded to Spoke site 2 through an interface under VPN1-Hub of the Hub PE.
D . The Hub PE can advertise aggregate Spoke site routes or default routes to Spoke PEs through VPNv4.
E .Routes advertised by a Spoke PE to Spoke site 1 of the Hub PE may be advertised back by the Hub PE through a VPNv4 neighbor.
Configure VRFs and relevant policies on a PE as follows:
#
ip vpn-instance vrf1
route-distinguisher 100:1
export route-policy vrf1
vpn-target 1:1 export-extcommunity
vpn-target 2:2 import-extcommunity
ip vpn-instance vrf2
route-distinguisher 100:2
import route-policy vrf2
vpn-target 1:1 3:3 export-extcommunity
vpn-target 1:1 3:3 import-extcommunity
ip vpn-instance vrf3
route-distinguisher 100:3
import route-policy vrf3
vpn-target 2:2 3:3 export-extcommunityvpn-target 2:2 3:3 import-extcommunity ip vpn-instance vrf4 route-distinguisher 100:4 import route-policy vrf4 vpn-target 1:1 export-extcommunity vpn-target 2:2 import-extcommunity
#
route-policy vrf2 deny node 1
if-match extcommunity-filter 1
#
route-policy vrf2 permit node 2
#
route-policy vrf1 permit node 1
apply extcommunity rt 3:3 additive
#
route-policy vrf3 permit node 1
if-match extcommunity-filter 2
#
route-policy vrf4 permit node 1
if-match extcommunity-filter 3
#
ip extcommunity-filter 1 permit rt 2:2
ip extcommunity-filter 2 deny rt 1:1
ip extcommunity-filter 3 permit rt 3:3
#
If a route is imported to the routing table of VRF 1, which VRF can the route match?(A)
Correct Answer: A
On the IP bearer network, which of the following methods can be used to manage devices on the backbone network and switches on the signaling VPN?
Correct Answer: A,B,D
As shown in the figure, the mapping between links and administrative groups is as follows:
0x0F for A -> B; 0xFF for B -> C; 0xF0 for A -> C; 0xC3 for B -> D; and 0x3C for C -> D.
It is expected to configure a tunnel (affinity: 0x0C; mask: 0xFF) on node A to connect to RTD. Which path will be created along with the tunnel?
0x0F for A -> B; 0xFF for B -> C; 0xF0 for A -> C; 0xC3 for B -> D; and 0x3C for C -> D.
It is expected to configure a tunnel (affinity: 0x0C; mask: 0xFF) on node A to connect to RTD. Which path will be created along with the tunnel?
Correct Answer: C
When configure IPSec VPN.
Which kind of encryption algorithms is more excellent in security
Which kind of encryption algorithms is more excellent in security
Correct Answer: D
As shown in the figure, IGP is configured on RT 1 and RT 2, and route 193.3.6.0/24 is configured on RT 2. Which of the following statements is correct? Suppose OSPF is used here. Configure an access control list (ACL) on RT 2 in system mode.
ACL 2000
rule 5 permit source 193.3.6.0 0.0.0.255
Configure a routing policy in system mode:
route-policy t permit node 1
if-match acl 2000
apply backup-nexthop 106.108.4.1
apply backup-interface Ethernet4/0/4
Configure the IP FRR in system mode:
ip frr route-policy tConfigure the ethe4/0/4 interface of RT 2:
ospf cost 100
Configure BFD on RT 2:
Enable BFD on Ethernet4/0/3
bfd b1 bind peer-ip 106.108.3.1 interface Ethernet4/0/3
discriminator local 1
discriminator remote 1
min-tx-interval 10
min-rx-interval 10
process-pst
commit

Configuration on RT 1:
Enable BFD on Ethernet7/0/3
bfd b1 bind peer-ip 106.108.3.2 interface Ethernet7/0/3
discriminator local 1
discriminator remote 1
min-tx-interval 10
min-rx-interval 10
process-pst
commit
ACL 2000
rule 5 permit source 193.3.6.0 0.0.0.255
Configure a routing policy in system mode:
route-policy t permit node 1
if-match acl 2000
apply backup-nexthop 106.108.4.1
apply backup-interface Ethernet4/0/4
Configure the IP FRR in system mode:
ip frr route-policy tConfigure the ethe4/0/4 interface of RT 2:
ospf cost 100
Configure BFD on RT 2:
Enable BFD on Ethernet4/0/3
bfd b1 bind peer-ip 106.108.3.1 interface Ethernet4/0/3
discriminator local 1
discriminator remote 1
min-tx-interval 10
min-rx-interval 10
process-pst
commit

Configuration on RT 1:
Enable BFD on Ethernet7/0/3
bfd b1 bind peer-ip 106.108.3.2 interface Ethernet7/0/3
discriminator local 1
discriminator remote 1
min-tx-interval 10
min-rx-interval 10
process-pst
commit
Correct Answer: A,C