Guidelines
This is a lab item in which tasks will be performed on virtual devices.

1. Refer to the Tasks tab to view the tasks for this lab item.
2. Refer to the Topology tab to access the device console(s) and perform the tasks.
3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
4. All necessary preconfigurations have been applied.
5. Do not change the enable password or hostname for any device.
6. Save your configurations to NVRAM before moving to the next item.
7. Click Next at the bottom of the screen to submit this lab and move to the next question.
8. When Next is clicked, the lab closes and cannot be reopened.

Tasks
The operations team started configuring network devices for a new site. R10 and R20 are preconfigured with the CORP VRF. R10 has network connectivity to R20. Complete the configurations to achieve:

1. Extend the CORP VRF between R10 and R20 using Tunnel0.
2. Protect Tunnel0 using the preconfigured profile.

Answers:

R10

R10>en
R10#config t
R10(config)#no router ospf 100
R10(config)#router ospf 100 vrf CORP
R10(config-router)#router-id 10.10.10.10
R10(config-router)#exit
R10(config)#crypto keyring test vrf CORP
R10(conf-keyring)#pre-shared-key address 10.10.2.1 0.0.0.0 key cisco
R10(conf-keyring)#exit
R10(config)#interface Ethernet0/1
R10(config-if)#vrf forwarding CORP
R10(config-if)#ip address 10.10.1.1 255.255.255.0
R10(config-if)#ip ospf network point-to-point
R10(config-if)#ip ospf 100 area 0
R10(config-if)#interface Tunnel0
R10(config-if)#tunnel vrf CORP
####"tunnel protection ipsec profile MyProfile": This command assumes the profile name is “MyProfile.” During the exam, remember to use “show run | sec profile” to verify whether the existing in the pre-configuration is indeed “MyProfile.” If it is, proceed with the configuration using this command; if not, replace “MyProfile” with the specific profile name found.
R10(config-if)#tunnel protection ipsec profile MyProfile
R10(config-if)#end
R10#wr

R20

R20>en
R20#config t
R20(config)#no router ospf 100
R20(config)#router ospf 100 vrf CORP
R20(config-router)#router-id 20.20.20.20
R20(config-router)#exit
R20(config)#crypto keyring test vrf CORP
R20(conf-keyring)#pre-shared-key address 10.10.1.1 0.0.0.0 key cisco
R20(conf-keyring)#exit
R20(config)#interface Ethernet0/2
R20(config-if)#vrf forwarding CORP
R20(config-if)#ip address 10.10.2.1 255.255.255.0
R20(config-if)#ip ospf network point-to-point
R20(config-if)#ip ospf 100 area 0
R20(config-if)#interface Tunnel0
R20(config-if)#tunnel vrf CORP
####"tunnel protection ipsec profile MyProfile": This command assumes the profile name is “MyProfile.” During the exam, remember to use “show run | sec profile” to verify whether the existing in the pre-configuration is indeed “MyProfile.” If it is, proceed with the configuration using this command; if not, replace “MyProfile” with the specific profile name found.
R20(config-if)#tunnel protection ipsec profile MyProfile
R20(config-if)#end
R20#wr

(Invalid number of answers)

• A.
• B.
• C.
• D.

Correct Answer:

Brave-Dump Clients Votes