I guess same thing when configuring time-based ACLs. I've often wondered if say for instance the question asks to limit access from 9am to 5pm, then should the time range be configured to end 16:59 or 17:00 ? I'd definitely cross-check these sort of questions with the Proctor.
On Thu, May 12, 2011 at 9:12 AM, Andrew Wurster <[email protected]>wrote: > Hey Louis - > > Yes that's an "ask the proctor" topic. IMHO 300 sounds good. They are not > trying to trick you there. Pasting the text below from the question: > > Adjust the firewall settings to delete any half-open sessions when the >> maximum number of half-open sessions >> reaches 300. The firewall should stop deleting when the number falls below >> 200. Additionally, adjust the maximum >> number of half-open TCP sessions per host to 100. > > > So when I read that, I understand it to say "the maximum embryonic > connections is 300, anything over that should be deleted". So generally, > when you see a number in the question, then just put that number in your > solution, unless the question specifically asks or strongly suggests you > adjust that number first (like convert it from seconds to hours or burstable > bit rates etc). > > Best of luck, > > Andrew > > On Thu, May 12, 2011 at 8:18 AM, Louis van Zyl - Business Connexion < > [email protected]> wrote: > >> Hi All >> >> >> >> My first(of many) question for you guys. >> >> >> >> In lab 2 task 2.4 the question states: >> >> 1. Delete half-open sessions when the max number of half-open >> sessions reaches 300 >> >> 2. Stops deleting when the number falls below 200 >> >> 3. Adjust the max number of half-open sessions to 100 >> >> >> >> Solution guides answers: >> >> 1. High=300 - I’ve set mine to 299 not 300 >> >> 2. Low=200 - I agree with this one >> >> 3. Max=100 - I agree with this one >> >> >> >> The reason why I set #1 to 299 is because the Command Reference says the >> value must be exceeded (either low or high) before it will start deleting >> the connections. So if you set it to 300, then it will only start deleting >> on connection number 301 (according to me) >> >> In #2 above it says it must fall below 200 (so it will stop deleting on >> 199). >> >> >> >> Am I correct or are you just going to tell me to “Ask the proctor”? >> >> >> >> Louis >> This e-mail and its contents are subject to the Business Connexion (Pty) >> Ltd. E-mail legal notice >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
