Juniper
JN0-333 · Question #60
Click the Exhibit button. You are configuring an OSPF session between two SRX Series devices. The session will not come up. Referring to the exhibit, which configuration change will solve this…
The correct answer is A. Configure a loopback interface and add it to the trust zone. See the full explanation below for the reasoning.
Question
Click the Exhibit button.
You are configuring an OSPF session between two SRX Series devices. The session will not come up.
Referring to the exhibit, which configuration change will solve this problem?
[edit]
user@host# show security policies from-zone trust to-zone trust
policy allow-trusted-traffic {
match {
source-address any;
destination-address any;
application [ junos-http junos-https ];
}
then {
permit;
}
}
[edit]
user@host# show security zone security-zone trust
host-inbound-traffic {
system-services {
all;
}
}
interfaces {
ge-0/0/0.0;
ge-0/0/1.0 {
host-inbound-traffic {
system-services {
all;
}
}
}
}
[edit]
user@host# show interfaces
ge-0/0/0 {
unit 0 {
family inet {
address 10.0.1.11/24;
}
}
}
user@host# run show ospf neighbor
Address Interface State ID Pri Dead
10.0.2.1 ge-0/0/1.0 ExStart 10.0.1.112 128 38
Options
- AConfigure a loopback interface and add it to the trust zone.
- BConfigure the host-inbound-traffic protocols ospf parameter in the trust security zone.
- CConfigure the application junos-ospf parameter in the allow-trusted-traffic security policy.
- DConfigure the host-inbound-traffic system-services any service parameter in the trust security zone.
How the community answered
(37 responses)- A73% (27)
- B8% (3)
- C3% (1)
- D16% (6)
Community Discussion
No community discussion yet for this question.