GB0-391_在线真题试卷与模拟练习_GB0-391_考试宝

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

在L2TP组网中，LNS对用户的验证方式有三种：代理验证、强制CHAP认证和LCP重协商，优先级最高的
是____。

通过____命令可以显示L2TP隧道信息。

通过____命令可以显示L2TP会话信息。

PC作为客户机，采用客户LAC模式通过iNode与LNS建立L2TP隧道，提示获取lP超时，则出现此问题可能
的原因为____。（选择一项或多项）

在L2TP VPN中，LAC（L2TP Access Concentrator，L2TP访问集中器）接收到从远程系统向服务器方发送
的lP数据包，需要对数据包进行相应的封装后发送给LNS（L2TP Network Server，L2TP网络服务器），
LAC和LNS间传送的数据包的封装格式为

在L2TP组网中，配置强制LNS与客户端之间重新进行CHAP验证的命令为____。

在L2TP组网中，配置LNS对用户进行强制LCP重协商验证方式的命令为____。

PPP帧被添加L2TP头进行封装时，会被标以正确的Tunnel ID和Session ID，以标识其隧道和会话属性。该
L2TP头中的Tunnel ID（隧道标识符）由____分配，Session ID（会话标识符）由____分配。

PC采用iNode VPN客户端与网络设备建立L2TP隧道和会话的方式，属于L2TP的____拓扑结构。

ZLB( Zero-Length Bod)消息是一个只有L2TP头的控制消息，其作用是作为一个明确应答，以确保控制消息
的可靠传递。以下四种情况中，LNS不发送ZLB消息给LAC作为应答的有____。

根据如图组网和下列配置可以判断这是一个______技术的应用。
RTA:
[RTA]ike peer 123
[RTA-ike-peer-123] pre-shared-ke simple 123
[RTA-ike-peer-123] remote-address 10.1.1.2
[RTA-ike-peer-123] local-address 10.1.1.1
[RTA-ike-peer-123] quit
[RTA]ipsec proposal l
[RTA-ipsec-proposal-l]quit
[RTA]acl number 3000
[RTA-acl- adv-3000] rule O permit ip source 1.1.1.1 0.0.0.0 destination 2.2.2.2 0.0.0.0
[RTA]ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-l-l] securit acl 3000
[RTA-ipsec-polic-isakmp-l-l] ike-peer 123
[RTA-ipsec-polic-isakmp-l-l] proposal l
[RTA-ipsec-polic-isakmp-l-l]quit
[RTA] interface EthernetO/1/1
[RTA Ethernet0/1/1] ip address 10.1.1.1 255.255.255.0
[RTA Ethernet0/1/1]ipsec polic l
[RTA]interface Ethernet0/1/0
[RTA Ethernet0/1/0] ip address 192.168.1.1 255.255.255.0
[RTA]interface loopback 0
[RTA- LoopbackO]ip address 1.1.1.1 255.255.255.255
[RTA]interface Tunnel 1
[RTA-Tunnel1]source 1.1.1.1
[RTA-Tunnel1]destination 2.2.2.2
[RTA-Tunnell]ip address 100.1.1.1 255.255.255.0
[RTA] ip route-static 2.2.2.2 255.255.255.255 10.1.1.2
[RTA] ip route-static 192.168.2.0 255.255.255.0 100.1.1.2
RTB:
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 10.1.1.1
[RTB-ike-peer-123] local-address 10.1.1.2
[RTB-ike-peer-123]quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-l] quit
[RTB]acl number 3000
[RTB-acl-adv-3000] rule o permit ip source 2.2.2.2 0.0.0.0 destination l.1.1.1 0.0.0.0
[RTB]ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-l-l] securit acl 3000
[RTB-ipsec-polic-isakmp-l-l] ike-peer 123
[RTB-ipsec-polic-isakmp-l-l] proposal 1
[RTB] interface Ethernet0/1/1
[RTB-Ethernet0/1/1] ip address 10.1.1.2 255.255.255.0
[RTB-Ethernet0/1/1] ipsec polic 1
[RTB] interface Ethernet0/1/0
[RTB-Ethernet0/1/0] ip address 192.168.2.1 255.255.255.0
[RTB] interface Loopback0
[RTB-Loopback0] ip address 2.2.2.2 255.255.255.255
[RTB] interface Tunnell
[RTB-Tunnell]source 2.2.2.2
[RTB-Tunnell]destination l.1.1.1
[RTB-Tunnell]ip address 100,1.1.2 255.255.255.0
[RTB-Tunnell]keepalive
[RTB] ip route-static l.1.1.1 255.255.255.255 10.1.1.1
[RTB] ip route-static 1 92.1 68.1.0 255.255.255.0 1 00.1.1 .1

根据如图组网和下列配置可以判断这是一个技术的应用。
RTA:
[RTA] ike peer 123
[RTA-ike-peer-123] pre-shared-ke simple 123
[RTA-ike-peer-123] remote-address 100.1.1.2
. . . . . . . <-i
IRTA-ike-peer-123] local-address 100.1.1.1
[RTA-ike-peer-123]quit
[RTA] ipsec proposal 1
IRTA-ipsec-proposal-l]quit
[RTA]acl number 3000
[RTA-acl-adv-3000] rule 0 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255
[RTA]ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-l-l] securit acl 3000
[RTA-ipsec-polic-isakmp-l-l] ike-peer 123
[RTA-ipscec-polic-isakmp-l-l] proposal 1
[RTA-ipsec-polic-isakmp-l-l] quit
[RTA] interface EthernetO/1/1
[RTA-Ethernet0/1/1] ip address 10.1.1.1 255.255.255.0
[RTA] interface EthernetO/l/0
[RTA-Ethernet0/1/0] ip address 192.168.1.1 255.255.255.0
[RTA] interface Loopback0
[RTA-LoopbackO]ip address 1.1.1.1 255.255.255.255
[RTA] interface Tunnel 1
[RTA-Tunnel1]source 1.1.1.1
[RTA-Tunnel1]destination 2.2.2.2
[RTA-Tunnell]ip address 100.1.1.1 255.255.255.0
[RTA-Tunnel1]keepalive
[RTA-Tunnell]ipsec polic 1
[RTA] ip route-static 2.2.2.2 255.255.255.255 10.1.1.2
[RTA] ip route-static 192.168.2.0 255.255.255.0 100.1.1.2
RTB:
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 100.1.1.1
[RTB-ike-peer-123] local-address 100.1.1.2
[RTB-ike-peer-123]quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-l] quit
[RTB]acl number 3000
[RTB-acl-adv-3000] rule o permit ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
[RTB]ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-l-l] securit acl 3000
[RTB-ipsec-polic-isakmp-l-l] ike-peer 123
[RTB-ipsec-polic-isakmp-l-l] proposal 1
[RTB-ipsec-polic-isakmp-l-l] quit
[RTB] interface Ethernet0/1/1
[RTB-Ethernet0/1/1] ip address 10.1.1.2 255.255.255.0
[RTB] interface Ethernet0/1/0
[RTB-Ethernet0/1/0] ip address 192.168.2.1 255.255.255.0
[RTB] interface Loopback0
[RTB-Loopback0] ip address 2.2.2.2 255.255.255.255
[RTB] interface Tunnell
[RTB-Tunnell]source 2.2.2.2
[RTB-Tunnell]destination l.1.1.1
[RTB-Tunnell]ip address 100.1.1.2 255.255.255.0
[RTB-Tunnell]keepalive
[RTA-Tunnell]ipsec polic 1
[RTB] ip route-static l.1.1.1 255.255.255.255 10.1.1.1
[RTB] ip route-static 1 92.1 68.1.0 255.255.255.0 1 00.1.1 .1

两台路由器间配置IPSec polic，将策略下发到相应接口上后，使用ping命令检查被保护数据流互通性，发现
数据100%通过。使用displa ike sa和displa ipsec sa俞令，显示为IPSec SA未建立。则IPSec配置失败原因
在于____。（选择一项或多项）

两台路由器间配置IPSec polic，将策略下发到相应接口上后，使用ping命令检查被保护数据流互通性，发现
数据100%通过。使用displa ike sa和displa ipsec sa命令，显示为IPSec SA未建立。则IPSec配置失败原因
在于____。（选择一项或多项）

下列关于IPSec与IKE的说法正确的是____。（选择一项或多项）

用IKE 为IPSec 提供自动协商交换密钥，建立SA 的服务时，在IKE协商的第二阶段定义了哪种 IKE交换模
式？

如图所示，两台安全网关的配置分别为：
RTA
[RTA] ike peer 123
[RTA-ike-peer-123] pre-shared-ke simple 123
[RTA-ike-peer-123] remote-address 10.2.1.2
[RTA-ike-peer-123] local-address 10.2.1.1
[RTA-ike-peer-123]quit
[RTA] ipsec proposal 1
[RTA-ipsec-proposal-1] quit
[RTA]acl number 3000
[RTA-acl-adv-3000] rule 0 permit ip source 10.1.1.0 0.255.255.255
[RTA]ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-1-1] securit acl 3000
[RTA-ipsec-polic-isakmp-1-1] ike-peer 123
[RTA-ipsec-polic-isakmp-1-1] proposal 1
[RTA-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA] interface Serial 0/2/1
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA-Serial0/2/1]] ipsec polic 1
RTB:
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 10.2.1.1
[RTB-ike-peer-123] local-address 10.2.1.2
[RTB-ike-peer-123]quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-1] quit
[RTB]acl number 3000
[RTB-acl-adv-3000] rule 0 permit ip source 10.3.1.0 0.255.255.255
[RTB]ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-1-1] securit acl 3000
[RTB-ipsec-polic-isakmp-1-1] ike-peer 123
[RTB-ipsec-polic-isakmp-1-1] proposal 1
[RTB-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.3.1.1 255.255.255.0
[RTB] interface Serial0/2/1
[RTB-Serial0/2/1] ip address 10.2.1.2 255.255.255.0
[RTB-Serial0/2/1] ipsec polic 1
由此可知______。

如图所示，两台安全网关的配置分别为：
RTA
[RTA] ike peer 123
[RTA-ike-peer-123] pre-shared-ke simple 123
[RTA-ike-peer-123] remote-address 10.2.1.2
[RTA-ike-peer-123] local-address 10.2.1.1
[RTA-ike-peer-123]quit
[RTA] ipsec proposal 1
[RTA-ipsec-proposal-1] quit
[RTA]acl number 3000
[RTA-acl-adv-3000] rule 0 permit ip source 10.1.1.0 0.0.0.255 destination 10.3.1.0 0.0.0.255
[RTA]ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-1-1] securit acl 3000
[RTA-ipsec-polic-isakmp-1-1] ike-peer 123
[RTA-ipsec-polic-isakmp-1-1] proposal 1
[RTA-ipsec-polic-isakmp-1-1] quit
[RTA] interface Serial0/2/1
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA-Serial0/2/1] ipsec polic 1
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.1.1.2 255.255.255.0
RTB:
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 10.2.1.1
[RTB-ike-peer-123] local-address 10.2.1.2
[RTB-ike-peer-123]quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-1] quit
[RTB]acl number 3000
[RTB-acl-adv-3000] rule 0 permit ip source 10.1.1.0 0.0.0.255 destination 10.3.1.0.0.0.0.255
[RTB]ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-1-1] securit acl 3000
[RTB-ipsec-polic-isakmp-1-1] ike-peer 123
[RTB-ipsec-polic-isakmp-1-1] proposal 1
[RTB-ipsec-polic-isakmp-1-1] quit
RTB] interface Serial0/2/1
[RTB-Serial0/2/1] ip address 10.2.1.2 255.255.255.0
[RTB-Serial0/2/1]]ipsec polic 1
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.1.3.1 255.255.255.0
由此可知______。

要清除已建立的IPSec安全联盟，应该使用以下哪个命令？

要清除ike建立的安全隧道，应该使用以下哪个命令？