That because windows use ICMP based traceroute not like routers and unix systems which use udp based one
Date: Thu, 2 Jun 2011 11:19:00 +0530 From: [email protected] To: [email protected] CC: [email protected] Subject: Re: [OSL | CCIE_Security] Vol 1 - 8b queries Hi Tyson With "permit ip any any options traceroute", the traceroute keyword is meant for ICMP based traceroute (IP option 18 - RFC 1393). only right? In Vol 1 > Lab 8b > Page 347, under section 8.2 > Verification/Troubleshooting, it has been mentioned that the ACS server can be used to test ICMP based traceoute and below that, the access-list shows the hit count. I was wondering, how was ICMP based traceroute (IP option 18 - RFC 1393) was simulated? With regards Kings On Thu, Jun 2, 2011 at 8:58 AM, Tyson Scott <[email protected]> wrote: I don't see in the workbook where it states that win2k supports traceroute using ip options. The Hitcount is for the UDP based traceroute from a router in the solution guide. I don't know anything that can do the first option #2 not important nor necessary. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com From: Kingsley Charles [mailto:[email protected]] Sent: Saturday, May 28, 2011 1:20 AM To: [email protected]; Tyson Scott Subject: Vol 1 - 8b queries Hi Tyson/all I have the following queries in Vol 1 - lab 8B. Query 1 (Page 347) It is being mentioned that Windows 2000 server can be used to generate traceroute messages to hit the following access list. permit ip any any options traceroute Does Windows 2000 server support traceroute with traceroute option (IP option 18 - RFC 1393). I see the hit counts in the wokbook. How was the traceoute generated? I tried with windows XP traceroute but didn't see hot count with the above acl. Query 2 (363) It has been mentioned that we need remove "switchport access vlan 448" from the port that is configured for private vlan promiscuous port. Once a port is configured for private vlan, whatever may be the vlan configured using the command "switchport access vlan" will not be in effect right? Only the primary and secondary vlans carry the traffic not the access vlans. With regards Kings _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
