|
Home > Archive > 70-210 > December 2002 > Spid's Tue (12/17) Win2k Pro. QoD
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Spid's Tue (12/17) Win2k Pro. QoD
|
|
|
| Here's one that may take a little bit a research, but it's not too bad.
I'm running IPSec on a Windows 2000 system in a Windows 2000 domain environment. I need to run an SNMP service on that system, but when I implement IPSec, SNMP messages get blocked.
How should I configure the IP filter list to prevent the SNMP messages from being blocked? (Choose 3)
A. Set a filter for UDP to and from port 101.
B. Set a filter for UDP to and from port 102.
C. Set a filter for UDP to and from port 161.
D. Set a filter for UDP to and from port 162.
E. The filter action should be set to Permit.
Good luck and see you tomorrow for the answer!! | |
| Deja-vue 2002-12-17, 10:02 am |
| easy...
C-D-E.
 | |
| soccer4net 2002-12-17, 10:19 am |
| I'm gonna try it without the research
CDE, pretty sure those are the snmp ports. | |
| djmaplethorpe 2002-12-17, 10:44 am |
| I'm just going to say C&E and see how I fair. | |
| Deja-vue 2002-12-17, 11:21 am |
| djmaplethorpe, it says choose 3
I can see Spid's stick coming at you.... | |
|
|
| djmaplethorpe 2002-12-17, 12:41 pm |
| Okay, Okay, I see I didn't fair very well, I can't even read the question all the way. How about C,D, and E.
Boy, I can see i won't catch any breaks here!!
thanks for keeping me on my toes, one of my biggest problems is reading the questions completely. | |
|
|
| WPFossil 2002-12-17, 3:30 pm |
| I like C&E and will add D to make 3.
 | |
|
| quote:
Originally posted by Spid
Here's one that may take a little bit a research, but it's not too bad.
I'm running IPSec on a Windows 2000 system in a Windows 2000 domain environment. I need to run an SNMP service on that system, but when I implement IPSec, SNMP messages get blocked.
How should I configure the IP filter list to prevent the SNMP messages from being blocked? (Choose 3)
A. Set a filter for UDP to and from port 101.
B. Set a filter for UDP to and from port 102.
C. Set a filter for UDP to and from port 161.
D. Set a filter for UDP to and from port 162.
E. The filter action should be set to Permit.
Good luck and see you tomorrow for the answer!!
And the answers are....C,D,E
When you are using IPSec, if a computer will be running an SNMP service, you must add a rule to prevent SNMP messages from being blocked:
1. The IP filter list should specify the source and destination addresses of the SNMP management systems and agents. The Protocol type should be set to UDP, to and from ports 161 and 162. This will require two filters: one for UDP, to and from port 161, and the other for UDP, to and from port 162. (That's answers "C" and "D").
2. The filter action should be set to Permit, which blocks negotiation for security and passes through any traffic which matches the IP filter list. (That's answer "E").
Nice job everyone!! |
|
|
|
|
