Share your ICND2 v3.0 Experience
The new ICND2 200-105 exam has come to replace the old ICND2 200-101 exam. We create the “Share your ICND2 v3.0 Experience” for everyone to share their experience after taking this exam.
Note for ICND2: There are no VRRP, GLBP, NetFlow and NAT questions (and they are not technologies learned in this exam).
Please share with us your experience after taking the ICND2 200-105 exam, your materials, the way you learned, your recommendations… But please DO NOT share any information about the detail of the exam or your personal information, your score, exam date and location, your email…
Question: 2
Answer is: A and E
Wendell Odom Official Cert Guide Page 73 and 74.
I agree with @Fierce
My friend that passed with no 9tut help said that he passed solely on the Official Cert Guide(the CD included), CBT nuggets and old school studying.
So the Official Cert Guide is the truth in my book.
The quiz links which Dave provided aren’t working. Can SOMEBODY PLEASE HELP…THANKYOU
Just took this exam for the 2nd time and failed, why there is still stuff on OSPF is beyond me Cisco is no longer testing on those topics, and that is on there website. This site is helpful but no means a panacea good luck I guess I’m not sure how to pass this test.
https://learningcontent.cisco.com/cln_storage/text/cln/marketing/exam-topics/200-105-icnd2-v3.pdf
@Bob Sorry to hear that. If you remember questions from your exam please share them.
Don’t give up!!!
Dear All,
Please share how long did it take for you guys to receive your CCENT certificate ??
It’s been 4 weeks and i have not receive my certificate.
Appreciate responses.
Thanks
@shadows yo man. mine took about 5 weeks so hopefully yours shows up in the next couple of days. Don’t worry they’ll send it to you 😀 P.S can you please provide me some dumps or valid links for this new exam. Cheers
Hi guys,
Does anyone have 342q dump? Got exam this week. Want to check and see its validity. If you have this dump, could you please share the link or drop the sump in my inbox. Email is navin.grg at gmail dot com.
Thanks in advance.
@Mt8848 lol forget it, no one replies here…when you need help 🙁
@Please: I hope someone have the 341q dump. And also if you need Dave’s quiz I can provide you this evening. It is working in my case.
@Mt8848 if you could help me with those, it would be much appreciated man. Email is mrhelp28 at gmail. com & try these dumps if you already haven’t….https://drive.google.com/drive/folders/0B-ob6L_QjGLpUTVNc3otMV8xMkU
@Mt8848 you can find dumps in previous pages here. Also this link is valid.
@Please, I have sent the stuff to your inbox. Please check if it works. It is working in my case. Good luck.
@Vince: Thank you Vince. If you have 342q dump, which people are saying latest one and most valid, please drop me in my inbox. Thanks.
Oh, sorry, that last post was me (Frustrated)
Does anyone know how to get the Appendix B of the ODOM book? I followed the directions at the end, where it says to go to:
http://www.ciscopress.com/title/9781587205798
but then when I click on the Updates tab, like it says to do, I just get re-directed to the Ciscopress.com store.
Oh, now I found it. Don’t click on the Updates tab. You have to scroll all the way down to the bottom, and there is a URL for Chapter B there.
It looks like Appendix B mainly just talks about the APIC-EM Path Trace ACL Analysis tool. There will probably be a question involving that.
@ Frustrated–> Here is the question
Which Cisco platform can verify ACLs?
A. Cisco Prime Infrastructure
B. Cisco Wireless LAN Controller
C. Cisco APIC-EM
D. Cisco IOS-XE
I remember that this was on a test, so pay attention:
When troubleshooting a switch, you executed the show interface port-channel 1 etherchannel command and it returned this output. Which information is provided by the load value?
A. The percentage of use of the link
B. The preference of the link
C. The session count of the link
D. The number source destination pairs of the link
You might think that A sounds like the best answer, but it is actually D. See the following URL. Don’t waste too much time trying to understand everything. Just understand that the “Load” is some hex representation that specifies which source destination pairs go to which port-channel.
http://www.cisco.com/c/en/us/support/docs/lan-switching/etherchannel/116385-technote-etherchannel-00.html
6500-sp#test etherchannel load-balance interface port-channel
In this example, the flow is between 192.168.1.1 to 172.16.1.1, and the port channel in question is port-channel 1. Choose the attributes of the command based on the output of step 1. If the configured load-balancing algorithm is src_ip, give the src-ip of the packet 192.168.1.1. Since this example has the src-dst ip configured load-balancing algorithm, the command needs to include both 192.168.1.1 to 172.16.1.1.
6500-sp#test etherchannel load-balance int port-channel 1 ip 192.168.1.1 172.16.1.1
Computed RBH: 0x5
Would select Gi3/2 of Po1
Find the physical port mapped to the RBH value. (optional)
In certain versions of Cisco IOS®, the output of the command does not give the physical interface that is chosen. Perform this step only when the egress interface information is not generated in Step 2.
6500-sp#test etherchannel load-balance int port-channel 1 ip 192.168.1.1 172.16.1.1
Computed RBH: 0x5
Switch to the route processor console and enter the command show interface port-channel etherchannel. Look at the Load column output that corresponds to a physical interface. Convert the Load value into binary (refer to this example).
6500-sp#exit
[Connection to Switch closed by foreign host]
6500#show interface port-channel 1 etherchannel
Port-channel1 (Primary aggregator)
Age of the Port-channel = 0d:01h:05m:54s
Logical slot/port = 14/1 Number of ports = 2
HotStandBy port = null
Port state = Port-channel Ag-Inuse
Protocol = LACP
Fast-switchover = disabled
Ports in the Port-channel:
Index Load Port EC state No of bits
——+——+——+——————+———–
0 55 Gi3/1 Active 4
1 AA Gi3/2 Active 4
Here the load value for gi3/2 is AA and for gi3/1 is 55.
7654 3210
gig3/2 – AA – 1010 1010
—- —-
| |
A A
gi3/1 – 55 – 0101 0101
—- —-
| |
5 5
For gi3/2 bits 1,3,5 and 7 are set. So RBH value of 1,3,5,and 7 chooses gi3/2.
For gi3/1 bits 0,2,4 and 6 are set. So RBH value of 0,2,4,and 6 chooses gi3/1.
Hi guys, i found some dumps on ebay are they worth it to buy ?
@Frustrated: I think the right answer is D. I was thinking about A as well. But in the cisco documentation link it says that the Load column output corresponds to a physical interface. The Load value in the column once converted to binary, represents which RBH values of which bits will use which port.
This conversion shows the probability of use of links in an ether channel. For illustration above, there are four bits set for each of the two interfaces (gi3/2 and gi3/1) in the ether channel. Because equal number of bits being set for each interface hence each link has an equal probability of getting used.
@Frustrated: The only doubt that makes me lean to option A is the second paragraph i have written above.
“This conversion shows the probability of use of links in an ether channel. For illustration above, there are four bits set for each of the two interfaces (gi3/2 and gi3/1) in the ether channel. Because equal number of bits being set for each interface hence each link has an equal probability of getting used ” This means 50-50 chances of being used or say 50% chance of use of the link.
What do you think about this?
@Mt8848, thank you
@ccna, I was also wondering about those dumps from ebay. Are they good? Does anyone know?
In case you get a question about the TTL count returned from a PING, the first router will return 255, then the next 254, and so on. I was wondering whether the first router decremented it to 254, making that the first possibility, but apparently it only decrements the TTL as the packet goes through a router. So, for example, if the question shows you that it gets an ICMP response from the third router; that TTL would be at 253.
If there is a question with the result of a ‘show ip route’, pay attention to the gateway of last resort. That is often relevant. Also, check whether that default route creates a loop. Finally, if there is no gateway of last resort, and no route to the subnet in question, remember that the router will send an ICMP back to the source IP if it doesn’t have a route for a packet.
“When OSPF adjacency is formed, a router goes through several state changes before it becomes fully adjacent with its neighbor.”
Down
Attempt
Init
2-Way
Exstart
Exchange
Loading
Full
@Mt8848
While you can calculate the probability of utilization from the Load settings, I think Cisco is trying to drive home the point that this value really shows you a pair of hex values which represent (in hex) which of the 8 ports in a port channel go out which interface. So, if the Load said: 01 (hex), that would be 0000 0001 in binary, so you would have only that one channel going through that interface. I think that, one way or another, those 8 channels have to be sent out various interfaces.
So, maybe
0101 0101 (55 in hex) goes out one interface
1010 1010 (AA in hex) goes out the other interface
notice that when you combine that, you get:
1111 1111 (FF in hex)
Maybe it could have been:
0100 0001 (41 in hex)
1010 1000 (A8 in hex)
0001 0110 (16 in hex)
========
1111 1111 (FF in hex)
I’m not sure that it would pick such numbers. My point is just that I think the 8 ports just need to be split up, and Cisco wants to make sure that you know that Load represents (in hex) how that is being done.
In that second example (above) I was assuming that the Etherchannel had three interfaces to spread the load over.
By the way, be aware that Cisco expects you to realize that, while Etherchannel, Portchannel, and Channel-group all refer to the same thing:
It is referred to as Etherchannel (in general).
But, when configuring it, you use ‘channel-group’.
In the output of show commands, etc. it is shown as Port-channel, or Po.
Why, oh why, couldn’t they just make up their minds what to call it? Sigh. But they do enjoy torturing us with the petty details of their messes, so you may have to know when to expect which version on their stupid trick questions.
@Xenit,
Thanks for the information buddy.
Here you go:
https://drive.google.com/file/d/0By-QVFDvgIKcWHdTMEpGS21JYkU/view
OSPF will normally end in the Full state, for adjacent neighbors. But when there are more than 2 neighbors in an Ethernet environment, only the DR and BDR have full relationships with all routers. The other (DROther) routers can only have a Full relationship with the DR/BDR, but stop at the 2-Way state (with other DROther routers).
http://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13683-11.html
@Frustrated:
Example 1
With 2 links bundled in an etherchannel group 1:
In this example there are two interfaces (g3/2 and g3/1) in the ether channel that we configure and the “show interface port-channel 1 etherchannel” has output as shown below (mainly the load table portion)
Ports in the Port-channel:
Index Load Port EC state No of bits
——+——+——+——————+———–
0 55 Gi3/1 Active 4
1 AA Gi3/2 Active 4
Here the load value for gi3/2 is AA and for gi3/1 is 55.
gig3/2 – AA – 1010 1010
—- —-
| |
A A
gi3/1 – 55 – 0101 0101
—- —-
| |
5 5
For gi3/2 bits 1,3,5 and 7 are set. So RBH value of 1,3,5,and 7 chooses gi3/2.
For gi3/1 bits 0,2,4 and 6 are set. So RBH value of 0,2,4,and 6 chooses gi3/1.
The outputs illustrate that four bits are set for each of the two interfaces. Hence, when there are two links in the EtherChannel, each link has an equal probability of getting used.
Note here: It implies 50% chances of each link being used. Hence the option A seems right to me.
Example 2
In this example there are 3 links bundled in an etherchannel group 1:
For example, there are three interfaces (g3/3, g3/2 and g3/1) in the ether channel that we configured and the “show interface port-channel 1 etherchannel|” has an output as shown below (mainly the load table portion)
Ports in the Port-channel:
Index Load Port EC state No of bits
——+——+——+——————+———–
0 49 Gi3/1 Active 3
1 92 Gi3/2 Active 3
2 24 Gi3/3 Active 2
Here the load value for gi3/1 is 49, for gi3/2 is 92 and g3/3 is 24
gig3/1 – 49 – 0100 1001
—- —-
| |
4 9
gi3/2 – 92 – 1001 0010
—- —-
| |
9 2
gi3/3 – 24 – 0010 0100
—- —-
| |
2 4
For gi3/1 bits 2,5 and 8 are set. So RBH value of 2,5 and 8 chooses gi3/1.
For gi3/2 bits 1,4 and 7 are set. So RBH value of 1,4 and 7 chooses gi3/2.
For gi3/3 bits 3 and 6 are set. So RBH value of 3 and 6 chooses gi3/3.
The outputs illustrate that three bits are set for each of the two interfaces and 2 bits are set for one interface. the radio is 3:3:2.
Hence, the two links have a higher probability of getting used as compared to the third link.
In terms of percentage there is 37.5% of the two links with higher probability being used and 25% of the least probable link being used.
Hence the calculations in both the examples above merely gives us an idea of what percentage of each links bundled in an ether channel is used. So I think option A is right.
@Xenit: Thanks mate.
@Neil Strecker: Congratulation mate. As you have said you have studied PassLeader 200-105 dumps (346q), but file you shared have only 271q in it. Could you please share 346q dump file? Thanks in advance.
@Shadows Thank You mate but the link you provided ICND1 Dumps LOL 😀
@Shadows: Yes, the link you have provided is for ICND1 Dumps. Please share if you have any new for ICND2. Thanks.
Can anyone please share the link for 346 dumps ?
Please
How long does it take for your passing score to be official? I passed ICND2 yesterday. I almost scored 890. It’s not yet posted on PearonVue or Cisco site. Score is pending. Thanks.
@All
I have posted all the dumps I have on older posts. Hope you all study hard and pass it. Now I have to move on, I believe I have done as much as I could to help…Its time to move to ICND2. Good luck to you friends…bye
Wrong forum…sorry 🙂 supposed to be in icnd1.
Hi guys, here are few dumps and i have doubts on the answer listed. Please share your concepts on these questions.
1. Which Cisco platform can verify ACLs?
A. Cieco Prime Infrastructure
B. Cieco Wireless LAN Controller
C. Cieco APIC-EM
D. Cieco IOS-XE
Answer: B (but i think answer is C)
2. What is the first step you perform to configure an SNMPv3 user?
A. Configure server traps. B. Configure the server group. C. Configure the server host. D. Configure the remote engine ID.
Answer: B (is it correct ??)
3. Which option is the benefit of implementing an intelligent DNS for a cloud computing solution?
A. It reduces the need for a backup data centre. B. It can redirect user requests to location that are using fewer network resources
C. It enables the ISP to maintain DNS record automatically. D. It eliminates the need for a GSS.
Answer: ??
4. Which two pieces of information are provided by the show controller serial 0 command? (Choose two.)
A. the type of cable that is connected to the interface.
B. The uptime of the interface C. the status of the physical layer of the interface
D. the full configuration of the interface E. the interface’e duplex setting.
Answer: One is A (sure) and other ??
5. You enter the show ipv6 route command on an OSPF device and the device displays a route. Which conclusion can you draw about the environment?
A. OSPF is distributing IPv6 route to BGP. B. The router is designated as an ABR. C. The router is designated as totally stubby.
D. OSPFv3 is in use.
Answer: A or D ??
6. Which statement about slow inter VLAN forwarding is true?
A. The VLAN is experiencing slowness in the point-to-point collision less connection. B. The VLANs are experiencing slowness because multiple devices are connected to the same hub. C. The local VLAN is working normally, but traffic to the alternate VLAN is forwarded slower than expected.
D. The entire VLAN is experiencing slowness. E. The VLANs are experiencing slowness due to a duplex mismatch.
Answer: I think it is C.
7. what are two drawbacks of implementing a link-state routing protocol (choose two.)
A. the sequencing and acknowledgment of link-state packets B. the high volume of link-state advertisements in a converged network C. the requirement for a hierarchical IP addressing scheme for optimal functionality D. the high demand on router resource to run the link-state routing algorithm E. the large size of the topology table listing all advertised routes in the converged network
Answer: D is sure but not sure about other? May be C or E?
8. Which statement about DTP ie true?
A. It uses the native VLAN. B. It negotiate a trunk link after VTP has been configured.
C. It uses desirable mode by default. D. It sends data on VLAN 1.
Answer: A or D ??
On an ISL trunk, DTP packets are sent on VLAN1. This is the case even if VLAN 1 has been cleared from the trunk and is no longer the native VLAN. On an 802.1Q trunk, DTP packets are sent on the native VLAN. This is the case even if the native VLAN has been cleared from the trunk.
Source: http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/24330-185.html
9. Which two circumstances can cause collision domain issues on VLAN domain? (Choose two.)
a. duplex mismatches on Ethernet segments in the same VLAN
b. multiple errors on switchport interfaces c. congestion on the switch inband path d. a failing NIC in an end device e. an overloaded shared segment
10. How can you disable DTP on a switch port?
* A. Configure the switch port as a trunk.
* B. Add an interface on the switch to a channel group.
* C. Change the operational mode to static access.
* D. Change the administrative mode to access. (This is the correct answer but i have seen in all the dumps, they saying A is correct)
11. Which statement about QoS default behavior is true?
a. Ports are untrusted by default. b. VoIP traffic is passed without being tagged. c. Video traffic is passed with a well-known DSCP value of 46. d. Packets are classified internally with an environment. e. Packets that arrive with a tag are untagged at the edge of an administrative domain.
Answer: In DHCP snooping feature, all the ports are untrusted by default and we configure it to trusted port. But in base of QoS, i do not know the same case applies. A or E ??
hi guys I’m going to take icnd2 for the second time, any advice?, does the questions/sims change or mostly are the same?
@Mt8848 Here are the answers that I have:
1-C
2-B
3-B
4-C
5-D
6-E
7-C,D
8-D
9-A,C
10-A
11-A
@Vince
I agree with everything except for 9 and 10.
I went with
9) A, E
10) D
@Vince
@Oz
9. In context to the probable question like this, I have summarized this link http://www.cisco.com/c/en/us/support/docs/lan-switching/virtual-lans-vlan-trunking-protocol-vlans-vtp/23637-slow-int-vlan-connect.html
Causes of Collision domain slowness:
1. A malfunctioning NIC on an end user workstation
2. Duplex mismatches
3. Interface errors
4. Segment being overloaded or oversubscribed
Causes of Broadcast domain/Intra-VLAN slowness
1. CPU that is being over utilized in a local switch
2.Traffic loops
3. Overloaded/Oversubscribed VLAN
4.Congestion on switch inband path
5. Ingress error on cut through switch
Causes of Slow inter-VLAN connectivity
1. User misconfiguration in end devices
2. Sluggish application on remote VLAN
Hence, for question 9, the probable answer are option A and E i think.
Regarding question 6, option E is the cause of slow collision domain. But the cause for slow inter vlan seems to be option C. isn’t it?
Regarding question 10, When administrative mode is Trunk (option A), the negotiation of trunking remains in ON state but when administrative mode is configured access (option D), the negotiation of trunking get to automatically OFF state. So Option D is the right answer i think.
@Оz you are right about 9-A,E my mistake.
But for 10 I have read a lot of information and i think configure as trunk is correct.
If you have correct explanation please share it.
Thanks!
@Vince: See the results in two cases, notice the “negotiation of trunking” state in both cases. Hence the answer is option D. Hope this helps.
–>When the administrative mode is “Trunk” (that means when we configure the interface as an trunk mode for e.g. in SW1) the result of sh int Fa0/24 switchport is shown below. Notice that the output shows the negotiation of trunking in ON state in this case.
SW1(config-if)#do sh int Fa0/24 switchport
Name: Fa0/24
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 99 (Unassigned_Port_VLAN)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Operational Native VLAN tagging: disabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
–>When the administrative mode is an “access” (that means when we configure the interface as an access mode for e.g. in SW1) the result of sh int Fa0/24 switchport is shown below. Notice that the output shows the negotiation of trunking goes to OFF state. Which means DTP gets disabled in this case.
SW1(config-if)#do sh int Fa0/24 switchport
Name: Fa0/24
Switchport: Enabled
Administrative Mode: access
Operational Mode: access
Administrative Trunking Encapsulation: negotiate
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 99 (Unassigned_Port_VLAN)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Operational Native VLAN tagging: disabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Took my test today, lots of new questions are starting to appear.
The center didn’t let me take a pic of my notes (how rude 😛 )
but what i did remembered was
What do you need to increase how much MTU and MSS increase to
compensate for GRE overhead.
for example MTU 1570 MSS 1500.
Remember how to disable DTP.
also DTP uses VLAN 1; not the default VLAN
Also all the types of Quality of service management tools.
The most secured wan technology by default.
Also before i forget there is a question about Computer X and Computer Y can not communicate with each other, why?
it’s very generic and the answers could all be a possible reason why they can’t talk
IP address wrong.
Subnet is wrong.
computer X has broadcast as it’s IP address
To pass ICND2:
1. Just relax
2. Watch the lynda or CBT Nuggets Videos for ICND2 get good overview of the content.
3. Download the ICND2 offical cert guide. Skim through it there are details that the test asks and CBT nuggets nor lynda don’t bother bringing up.
4. Download the test banks as provided by the fine people here (or buy it)
**5. The sims don’t change. There are 3: OSPF, EIGRP, and “GRE and multi-channel,” if you commit anything to memory memorize the 15 questions and their answers for the sims. Commit them to memory because they take the most time and they are the most annoying. Every dump I’ve found has the correct answers.
In regard to the test dumps: they are 90% correct.
If you find a problem with an answer confirm it with the Official Certification guide first. Then the CISCO.Support website for example,
“Which Cisco platform can verify ACLs?”
A. Cisco Prime Infrastructure
B. Cisco Wireless LAN Controller
C. Cisco APIC-EM
D. Cisco IOS-XE
The dumps say CISCO Wireless LAN Controller, that is super wrong and the answer is APIC-EM because the official cert guide says it is. The official cert guide is the truth. If the guide doesn’t have the answer go to the Cisco support page. If you’re still confused and no one else has convinced you of the answer make an educated guess.
See you guys in CCNP
@Xenit
@Mt8848
I recently passed ICND1 and that’s all i got for now. I will share more as soon as i get them.
@GTRUTH1, Congratulations and thanks for sharing.
Please do share more if you remember.
Best of luck for CCNP
@GTRUTH1: Congratulation mate. The dumps we using from here, are they still valid? Were there been any questions from these dumps or you had few and most of them were new questions?
Good luck for CCNP mate.
The dumps are ~ 80% valid, I had taken the test 2 times each time had a total of 60 questions 10-15 of them were new content that I have not seen on any dump the other 45 or so were 100% on the dumps.
BUT If you know the content for ICND2 you’ll know how to answer the new stuff.
I had written a lot of notes but they were on me like a fly.
Also, if you though the comments on this page and update your own copy of the test dumps and study you will pass.
In total, the dumps I’ve been seeing on here are: 80% valid (questions i’ve seen on the real test), and 90% correct(questions and answers that are correct).
IDK what that would add up to? Like, ~70% totally valid and correct ~
Again, If you know the content for ICND2 you’ll know right answer.
Study and Study more.
A good strategy is what we have been doing on here already
*Take the dump and every question find out why the answer is what it is. *
Confirm the answer to the Official ICND2 guide and to the Cisco support site.
Keep it up Mt8848, Frustrated, Dan242, Vince you guys are doing good. Keep bouncing questions off each other.
@GRUTH1: Ohh, Thank you mate. I have dumps which I got from the people who shared in this page here. These dumps have frame relay, netflow and NAT stuffs which are not in the ICND2 course content. Do you have the latest 346q dump? If you have, could you please share the link here?
Most secured WAN tech by default is VPN, right?
@GRTUTH1 Congrats !!! Good luck in CCNP. Interesting is that the labs answers are the same here. Someone wrote that they change it….
If you remember someother questions please share it with us.
Thanks and good luck again!!!!
Guys , I have seen many links in the previous pages but I dint get any link which shows all the 346q dumps , can you please share if anybody has it or 346q is just a name but infact the number of question are around 200 ? Please clarify this to me and also please share the dumps if you have them
sambodduluri at gmail domain
@Mt8848 Thanks for explanations about :
“How can you disable DTP on a switch port?”
It was helpfull, Thank you!
Get Latest Valid ICND Qs 346 file at below page:
http://rebrand.ly/newic563c
@Vince
@Mt8848
“How can you disable DTP on a switch port?”
10. How can you disable DTP on a switch port?
* A. Configure the switch port as a trunk. ***A is correct***
* B. Add an interface on the switch to a channel group.
* C. Change the operational mode to static access.
* D. Change the administrative mode to access.
And this is why:
switchport nonegotiate command is valid only when the interface switchport mode is access or trunk (configured by using the switchport mode access or the switchport mode trunk interface configuration command)
key word is “switchport”
Try it, I did. I turned the port into a trunk and then executed the command “switchport nonegotiate”
BEFORE:
SW1#sh int f0/1 switchport
Name: Fa0/1
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
***Negotiation of Trunking: On***
AFTER:
SW1#conf t
SW1(config)#int f0/1
SW1(config-if)#switchport mode trunk
SW1(config-if)#switchport nonegotiate
SW1(config-if)#end
SW1#sh int f0/1 switchport
SW1#sh int f0/1 switchport
Name: Fa0/1
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
***Negotiation of Trunking: Off***
Access Mode VLAN: 10 (VLAN_SERVER_SW1)
Trunking Native Mode VLAN: 1 (default)
I hope this is helpful……
To clarify:
B. Add an interfa…….. FORGET ABOUT IT……
C. Change the operational mode to static access. (Operational mode is up or down)
D. Change the administrative mode to access. (What is missing in the question is “static” access)
SW1#sh int f0/2 switchport
Name: Fa0/2
Switchport: Enabled
Administrative Mode: static access
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: Off
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Appliance trust: none
Hope that helps too
Does anyone have a consolidated document of all of the questions you are discussing? Very hard to go through this and get them all
@Pascal: I think when it asks how we can disable DTP on a switchport, it means how we can make the switchport unable to exchange DTP frames with the switch connected to this switchport.
In my view and with the help of lab, i understood there is two ways to do it with the configuration unless we turn that switchport administratively down.
1. First is configuring the administrative mode of that switchport to static access. (Here it says access which it is referring static access I guess). When we configure the switchport to static access, the negotiation of trunking goes automatically to OFF state. No more configuration needed. DTP is completely disabled and no more DTP frames can be exchanged from this switchport which implies it goes to a permanent access mode. That is what the question is asking I believe.
2. Second method is by using “switchport nonegotiate” IOS command. This Command can only be used when we configured the switchport as an access or trunk mode. If the question asked how can you disable DTP in a switchport by using switchport nonegotiate IOS command then at this point the answer would be change the switchport as a trunk or access (option A & D both) and then use the IOS command switchport nonegotiate in interface mode. Because this IOS command can also be used when switchport is configured as an access mode. You have seen in your above lab.
–>The only reason I believe option A is correct is that you had made good point on your last clarification. The option D says, change the administrative mode to access. (When the switchport is configured as an access mode and when we execute the “sh int f0/1 switchport” IOS command, it will never show you the result as option D describes. It shows “Administrative Mode: static access” So the word static is missing there. What these all implies is if we go that granularity, option A is correct otherwise the way question is asked, D is correct.
Another misleading question 🙁 pheww….!!!
@pascal is correct
DTP is disabled by going into “switchport mode trunk”
http://imgur.com/NCWPCxh
Page 116 on the Official Guide, Wendell Odom
I’m telling you guys to win at ICND 2 the keys are this Official Cert Guide.
Hey guys!!
From the DTP question, I think like @Pascal and @GTRUTH1, because:
Administrative Mode: This mode denotes what we configure onto that particular port.. like Trunk or Access or LaGP or PaGP or ON and Administrative encapsulation etc…
Operational Mode: This mode is what a switch-port behaves in response to the configuration done onto a particular port.
I did some test in packet tracer and you can have operational mode= static access and DTP ON
Switch#sh interf fa 0/1 sw
Name: Fa0/1
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation:
Operational Trunking Encapsulation: native
Negotiation of Trunking: On
There were a couple weird questions that I didn’t recall even seeing in the book…
One of them was on which would verify if a GRE was working?
Some of the answers were:
a) show crypto isakmp sa
b) show crypto ipsec sa
c)show crypto engine connection active
d)debug cyrpto isakmp
something along those lines…
Also, know what uses up the most bandwidth
One of the options was peer to peer I believe
Good luck everyone, time to move onto the CCNP….
@Oz
Congratulation mate. How about the dumps sources we have in this page? Still valid? And were the sims still valid?
As everyone else has said, the dumps and sims are definitely still valid.
Double check the answers on the dumps, and understand the show commands because the answers are not the same on the exam. Same topology though.
Hi. When it is mentioned hat the dumps are 80% accurate, are we referring to the 9tut dumps under ICND2 200-101 or the questions mentioned in this forum? Thanks!
@Oz
When you said “Some of the answers were… ” do you mean that those were the options they gave you or that, those are posible answers to the question?
I looked into CISCO documentation, and all seams to be ok for IPSec troubleshooting
IPSec:
debug crypto ipsec—Displays IPsec events.
debug crypto isakmp—Displays messages about Internet Key Exchange (IKE) events.
debug crypto engine—Displays information from the crypto engine.
http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/9221-quicktip.html#tshoot
From Cisco web site: “Use the show crypto ipsec sa command to verify that the IPsec tunnel is up.”
@Оz congrats and good luck in CCNP!
can anyone please share the full last valid Dump?? thanks is advanced
Passed ICND2 today (just) sims are OSPF, GRE and EIGRP (only need show commands but knew your stuff as the answers change per test). A few new questions on the exam, I’ll post them as I remember them..
For now:
1. What is the default mode for DTP?
2. Default Hello timers for ethernet lan?
A few new questions on SMNP and Cloud.
Good Luck All
@LM89
Those were the options they gave. I’m missing like 1 or 2 other options (I don’t remember them), but those are the ones I remember on the test.
@Vince
Thanks!
@Oz
Thanks for the information… after looked a little more this subject I think I would go with b)… but I’m not sure of it…I’m taking my test today, so I hope that question isn’t in my test…
Thanks again!
@LM89
Sorry, forgot to mention that there were 3 possible answers to that question.
Best of luck!
I this info maybe could help:
http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/3968-vpn5k-dyn.html
(At least I hope so)
Sorry I forget to say, that the info is about GRE IPSec verification..
@ New Tricks:
Congratulation mate. So the dumps are valid in your case as well? rite? If any new questions you remember, please do share with us here. Thanks.
@Oz Can you remember all possible answers for “bandwidth” using?
You write point-to-point..
can anyone please share the valid Dump?? can’t find it anywhere any my exam is next week ;(
@help you can fing link in prevous pages.
Guys what about this question:
What is the default mode for DTP?
Is the correct answer dynamic auto?
@vince
yeah its dynamic auto.
@ Vince – all the links I checked here either has the 271Q passleader questions, or the links are just empty 🙁
@H E L P
Please send my your email, “Encrypted” format, and I’ll send you the dumps via mail. The dumps on this site doesn’t last forever on google drive or drop box. They expire after a while. If your not sure what I mean, just look back and see how the users do it.
@JaVH adimaslati at gmail dot com thank you soo much!
@ H E L P
check your inbox shortly
@JaVH can you please help me aswell. I am looking for valid dumps aswell but none of them are working so if you could it would be much appreciated. Email is mrhelp28 at gmail. com
Thankyou 🙂
@Xenit
check your inbox shortly
@JaVH Thankyou mate.
@MT8848
Dumps are still vaild about 70%.
another question
Which device classes are used over serial links
DCE
DTE
LCP
HDLC
PPP
LMI
another few i cant remember.
ICND2 passed yesterday!!! Dumps still valid… the simslet had thesame topology and some of the question were the same, if you know how to read running-config file you’re gonna be ok.
I dont remember all the questions but, DTP shutdown question was there, also a question about drawbacks of proxy ARP…
The question that @New Tricks showed up also was there
If I remember more later I will poste it.
I just have to say thanks to all… Your advices and discussion in this forum helped me a lot…
I will post later a link will all the things I used for study… I hope that help someone as your things helped me…
See you in CCNP!!!!
@New Tricks: Thanks.
@To All,
Guys, The question below, in the dumps the answer is E but after reading the documentation from cisco, the link provided below and the portion of the document pasted below for clarification would make the answer A. So i think the option E is incorrect.
Question: Which statement about QoS default behavior is true?
A. Ports are untrusted by default.
B. VoIP traffic is passed without being tagged.
C. Video traffic is passed with a well-known DSCP value of 46.
D. Packets are classified internally with an environment.
E. Packets that arrive with a tag are untagged at the edge of an administrative domain
Answer: not E (in dumps) but A.
Explanation(link): http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6000-series-switches/23420-138.html
part from the above link which you will find in the above link:
By default all ports are in the untrusted state when QoS is enabled.
At the input port level you can also apply a default CoS per port, as in the following example:
set port qos mod/port cos cos-value
If the port is set to the untrusted state, simply mark the frame with the port default CoS and pass the header to the switching engine (PFC). If the port is set to one of the trust states, apply the default port CoS (if the frame does not have a received CoS (dot1q or ISL)), or keep the CoS as it is (for dot1q and ISL frames) and pass the frame to the switching engine.
Let me know if you guys have any other explanation for the right answer. Thanks.
Also this link explains a bit regarding above question:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2940/software/release/12-1_19_ea1/configuration/guide/2940scg_1/swqos.html
Each port on the switch has a single receive queue buffer (the ingress port) for incoming traffic. When an untagged frame arrives, it is assigned the value of the port as its port default priority. You assign this value by using the CLI or CMS.
A tagged frame continues to use its assigned CoS value when it passes through the ingress port.
Can anyone please send me the dumps ?
garysangha7 at gmail dot com
@JavH
Does someone have this question about proxy ARP and possible answers?
@JaVH can you please send a copy of valid dumps secret2020santa at gmail dot com. It would be of great help.
Thanks