Exam preparation guide - Hewlett Packard Enterpriseh17007. · Exam preparation guide Overview...

1

HP0-Y43: IMPLEMENTING

HP NETWORK

INFRASTRUCTURE

SOLUTIONS HP Networking

Exam preparation guide

2

HP0-Y43: IMPLEMENTING HP NETWORK

INFRASTRUCTURE SOLUTIONS HP Networking

Exam preparation guide

Overview Requirements for successful completion

This guide helps you to study for the Implementing HP Network Infrastructure Solutions (HP0-Y43) exam. You

can benefit from this guide whether you are attempting to expand your existing HP certification or you have a

former H3C or a Cisco background and want to get certified with HP.

To pass the exam, you will need to demonstrate knowledge of intermediate routing and switching technologies,

such as Open Shortest Path First (OSPF) routing, multicast forwarding, multicast routing, Quality of Service

(QoS), WAN technologies, and more—as well as the ability to implement these technologies on HP A-Series

and E-Series products. You must also be able to implement a wide variety of security technologies built into HP

products.

3

Table of Contents Overview ............................................................................................................................................ 2

Table of Contents ................................................................................................................................. 3

Why take the exam? ............................................................................................................................ 5

HP ASE – Network Infrastructure [2011] certification ............................................................................... 5 Path 1 ............................................................................................................................................. 5 Path 2 ............................................................................................................................................. 5 Path 3 ............................................................................................................................................. 5

HP ASE – Wireless Networks [2011] certification .................................................................................... 6 Path 1 ............................................................................................................................................. 6 Path 2 ............................................................................................................................................. 7 Path 3 ............................................................................................................................................. 7 Path 4 ............................................................................................................................................. 7

Who should take the exam? .................................................................................................................. 8

Who does not need to take this exam? ................................................................................................... 9

How to study for the exam .................................................................................................................... 9

Study tips based on your certification ................................................................................................... 10 HP AIS [2011] ............................................................................................................................... 10 Any ASE certification ...................................................................................................................... 11 H3CSE certification ........................................................................................................................ 11 CCDP, CCNP – Routing and Switching or Wireless certification .......................................................... 11

Attend recommended ILTs ................................................................................................................... 11 HP Core/Distribution Network Technologies using ProVision Software .................................................. 12

Topics covered ........................................................................................................................... 12 Format offered............................................................................................................................ 12 More information ........................................................................................................................ 12

HP Core/Distribution Network Technologies using Comware Software ................................................. 12 Topics covered ........................................................................................................................... 12 Format offered............................................................................................................................ 13 More information ........................................................................................................................ 13

Implementing HP Network Infrastructure Security ................................................................................ 13 Topics covered ........................................................................................................................... 13 Format offered............................................................................................................................ 14 More information ........................................................................................................................ 14

Accelerated HP Core/Distribution Layer Network Technologies ........................................................... 14 Topics covered ........................................................................................................................... 14 Format offered............................................................................................................................ 14 More information ........................................................................................................................ 14

Purchase self-study materials ................................................................................................................ 15

Complete recommended WBTs ............................................................................................................ 15 HP Switching and Routing Technologies ............................................................................................ 15

Topics covered ........................................................................................................................... 15 Format offered............................................................................................................................ 16 More information ........................................................................................................................ 16

HP Internet and WAN Technologies ................................................................................................. 16 Topics covered ........................................................................................................................... 16 Format offered............................................................................................................................ 17 More information ........................................................................................................................ 17

HP Network Infrastructure Security Technologies ................................................................................ 17 Topics covered ........................................................................................................................... 17 Format offered............................................................................................................................ 18 More information ........................................................................................................................ 18

Refer to additional materials ................................................................................................................ 18

4

Obtain hands-on experience ............................................................................................................... 18

How to take the Implementing HP Network Infrastructure Solutions (HP0-Y43) exam .................................. 18 Exam content ................................................................................................................................. 19 Comments on the exam ................................................................................................................... 20

Tips for taking HP exams .................................................................................................................... 20

Register ............................................................................................................................................ 20

Sample questions ............................................................................................................................... 20

Conclusion ........................................................................................................................................ 23

Appendix: Answers to the sample questions .......................................................................................... 24

5

Why take the exam? Passing this test gives you one component toward two HP Accredited Solutions Expert (ASE) certifications,

described below.

NOTE

Anyone can take the exam, but passing it only helps you to achieve certification if you have one of the prior

achievements listed in Table 1. If you are a new candidate, obtain the HP ASE – Network Infrastructure [2011]

certification first.

HP ASE – Network Infrastructure [2011] certification The HP ASE – Network Infrastructure [2011] certification indicates that you can:

• Design, implement, and troubleshoot secure network solutions for large and complex, multivendor

campus LAN environments using HP E- and A-Series network technologies

• Design and implement an HP open-standards based network solution, including those that interoperate

with non-HP networking solutions

There are three paths to achieve this certification, as outlined below. The exams you must pass are dependent

upon which achievements you currently hold.

Path 1

This path is designed for networking professionals who have one of the following certifications:

• ASE – HP ProCurve (2008 or later) and

HP Enterprise Networking Products Technical Qualification [2010]

• ASE – HP ProCurve Campus LANs [2010] and

HP Enterprise Networking Products Technical Qualification [2010]

• HP ASE – Wireless Networks [2011]

If you meet one of these criteria, you do not need to take the HP0-Y43 exam; passing the HP0-Y32 alone gives

you the certification. By completing this path, you will also be granted the HP AIS – Network Infrastructure

[2011] certification.

Path 2

This path is designed for networking professionals who have one of the following certifications.

• ASE – HP ProCurve (2008 or later)

• ASE – HP ProCurve Campus LANs [2010]

• H3CSE

• CCNP – Routing and Switching

• CCDP

If you meet one of these criteria, you must pass the Implementing HP Network Infrastructure Solutions (HP0-Y43)

exam and Designing & Troubleshooting Open Standard Networks (HP0-Y32) exam to earn the certification. If

you complete this path, you will also be granted the HP AIS – Network Infrastructure [2011] certification.

Path 3

If you do not meet the requirements for path 1 or path 2, then you must complete this path, which is designed

for new candidates. First, you must achieve the prerequisite certification, HP AIS – Network Infrastructure

[2011]. Second, you must pass the following exams:

• Implementing HP Network Infrastructure Solutions (HP0-Y43)

• Designing & Troubleshooting Open Standard Networks (HP0-Y32)

Table 1 summarizes the requirements for all three paths.

6

Table 1: HP ASE – Network Infrastructure [2011] requirements based on current achievement

Current achievements

Path 1 Path 2 Path 3

HP Enterprise

Networking

Products Technical

Certification

[2010] + either:

ASE – HP

ProCurve (2008

or later)

ASE – HP

ProCurve

Campus LANs

[2010]

HP ASE –

Wireless

Networks

H3CSE CCNP –

Routing

and

Switching*

Or

CCDP*

Either

ASE – HP

ProCurve

(2008 or

later)

ASE – HP

ProCurve

Campus

LANs [2010]

New or

any other

candidate

Requirem

ents

for

HP A

SE –

Netw

ork

Infrast

ruct

ure

certific

ation

HP AIS – Network

Infrastructure

[2011]

certification

X

Proctored Exam –

Implementing HP

Network

Infrastructure

Solutions

(HP0-Y43)

X X X X

Proctored Exam –

Designing &

Troubleshooting

Open-Standard

Networks

(HP0-Y32)

X X X X X X

*Proof of current credential status must be provided to HP. CCNP specialties such as Voice or Security do not apply toward HP ASE –

Networks Infrastructure [2011] certification.

HP ASE – Wireless Networks [2011] certification The HP ASE – Wireless Networks [2011] achievement certifies that you:

• Can design and implement complex WLAN network solutions for large campus LAN environments

using HP E-Series wireless technologies

There are four paths to achieve this certification, as outlined below. The exams you must pass are dependent

upon which achievements you currently hold. The HP0-Y43 exam is required only for Path 2 and Path 4 (but

the other paths are described for your reference).

Path 1

This path is designed for networking professionals who have one of the following certifications:

• HP ASE – Network Infrastructure [2011]

• HP Enterprise Networking Products Technical Qualification [2010] and ASE – HP ProCurve (2008 or

later)

• HP Enterprise Networking Products Technical Qualification [2010] and ASE – HP ProCurve Campus

LANs [2010]

7

If you meet one of these criteria, then passing the HP0-Y33 exam alone gives you the certification. By

completing this path, you will also be granted the HP AIS – Network Infrastructure [2011] certification if you

do not already have it.

Path 2

This path is designed for networking professionals who have one of the following certifications.



• H3CSE

• CCNP – Wireless, CCNP – Routing & Switching

• CCDP

If you meet one of these criteria, you must pass the HP0-Y43 exam and the Implementing HP Wireless Networks

(HP0-Y33) exam.

By completing this path, you will also be granted the HP AIS – Network Infrastructure [2011] certification.

Path 3

This path is designed for networking professionals who have the ASE – HP ProCurve Mobility [2009 or 2010]

certification. If you meet this criterion, you must pass the Wireless Networks – ASE 2011 Delta (HP0-Y35)

exam.

By completing this path, you will also be granted the HP AIS – Network Infrastructure [2011] certification.

Path 4

If you do not meet the requirements for path 1, path 2, or path 3, then you must complete this path, which is

designed for new candidates. First, you must achieve the prerequisite certification, HP AIS – Network

Infrastructure [2011]. Second, you must pass the following exams:

• Implementing HP Network Infrastructure Solutions (HP0-Y43) exam

• Implementing HP Wireless Networks (HP0-Y33) exam

Table 1 summarizes these requirements.

8

Table 1: HP ASE – Wireless Networks [2011] requirements based on current achievement


Path 1 Path 2 Path 3 Path 4

HP ASE –

Network

Infrastructure

[2011]

HP

Enterprise

Networking

Products

Technical

Certification

[2010] +

either:

ASE – HP

ProCurve

(2008 or

later)

ASE – HP

ProCurve

Campus

LANs

[2010]

Either:

ASE – HP

ProCurve

(2008 or

later)

ASE – HP

ProCurve

Campus

LANs

[2010]

H3CSE CCNP –

Wireless*

or

CCNP –

Routing and

Switching *

or

CCDP *

ASE –

HP

ProCurve

Mobility

[2009 or

2010]

New or

any other

candidate

Requirem

ents

for

ASE –

Wirele

ss c

ertific

atio

n

HP AIS –

Network

Infrastructure

[2011]

certification

X

Proctored Exam

– Implementing

HP Network

Infrastructure

Solutions

(HP0-Y43)

X X X X

Proctored Exam

– Implementing

HP Wireless

Networks

(HP0-Y33)

X X X X X X

Proctored Exam

– Wireless

Networks – ASE

2011 Delta

(HP0-Y35)

X

* Proof of current credential status must be provided to HP. CCNP specialties such as Voice or Security do not apply toward HP ASE –

Wireless Networks [2011] certification.

Who should take the exam? Anyone can take the Implementing HP Network Infrastructure Solutions (HP0-Y43) exam, but most successful

candidates have two years of real-world experience implementing or maintaining network infrastructure

solutions in a campus LAN or enterprise environment. Successful candidates also prepare for the test in a

variety of ways. This guide describes some of these ways and provides references to materials for further

preparation.

9

NOTE

Anyone can take the exam, but passing it only helps you to achieve certification if you have one of the prior

achievements listed in Table 1 or Table 2. If you are a new candidate, obtain the HP AIS [2011] certification

first.

Who does not need to take this exam? You do not need to take this exam if you have achieved any of the following:

• ASE – HP ProCurve (2008 or later) and HP Enterprise Networking Products Technical Qualification

[2010]

• ASE – HP ProCurve Campus LANs [2010] and HP Enterprise Networking Products Technical

Qualification [2010]

• HP ASE – Wireless Networks [2011]

• ASE – HP ProCurve Mobility (2009 or 2010) certification

If you have any of the first three achievements, you only need to take the Designing and Troubleshooting Open

Standard Networks (HP0-Y32) exam to obtain the HP ASE – Network Infrastructure [2011] certification. If you

need the HP ASE – Wireless Networks [2011] certification, you can then take only the Implementing HP

Wireless Networks (HP0-Y33) exam.

If you have ASE – HP ProCurve Mobility (2009 or 2010) certification, take only the Wireless Networks – ASE

2010 Delta (HP0-Y35) exam to earn the HP ASE – Wireless Networks [2011] certification. Then, after you

pass the Designing and Troubleshooting Open Standard Networks (HP0-Y32) exam, you also receive the HP

ASE – Network Infrastructure [2011] certification.

How to study for the exam The Implementing HP Network Infrastructure Solutions (HP0-Y43) exam tests you on topics that are covered in

several HP instructor-led training (ILT) and Web-based training (WBT) courses.

Table 3 indicates the training specifically recommended for you based on your current achievements. While it

is recommended that you complete this training, the training is neither required nor does it guarantee that you

will pass the exam. It is expected that you will also study on your own and draw on your real-world

experience.

Read the sections below to further assess your options. Even if you do not intend to complete the recommended

ILTs and WBTs, you should examine the topics that they cover because the exam will test you on your mastery

of these topics.

10

Table 3: Recommended training based on current achievement


HP AIS

[2011]

ASE – HP

ProCurve

(2008 or

later)

ASE – HP

ProCurve

Campus LANs

[2010]

H3CSE CCNP –

Routing

and

Switching

CCDP

CCNP –

Wireless

Cours

es

for

the H

P0Y4

3 e

xam

HP Core/Distribution

Network Technologies using

Comware Software (5-day

ILT)

X X X X X

HP Core/Distribution

Network Technologies using

ProVision Software (4-day

ILT)

X X X X

Implementing HP Network

Infrastructure Security

(2-day ILT)

X X X X

HP Switching and Routing

Technologies (WBT) X X

Internet and WAN

Technologies (WBT) X X X

HP Network Infrastructure

Security Technologies (WBT) X X X

Total days for recommended

training 11 days 5 days 5 days 6 days 11 days 11 days

NOTE

There is also a fourth HP ILT, Accelerated HP Core/Distribution Layer Network Technologies, which combines

the content covered in the three ILTs listed in Table 3 and is completed in just 5 days. More information on all

four ILTs—including the recommended qualifications for candidates attending the Accelerated course—is

available in this exam preparation guide. More information is also provided on the WBTs.

Study tips based on your certification First you might want to choose topics on which to focus based on your current skills:

• HP AIS – Network Infrastructure [2011]

• Any ASE

• H3CSE

• CCDP, CCNP – Routing and Switching or Wireless

You can then read about specific study methods.

HP AIS [2011]

With your current certification, you are ready to succeed at training at the ASE level. All of the training at this

level is recommended for you to give you the best chances at succeeding. This guide also provides other

suggestions for preparing.

To learn more about ways to prepare for the Implementing HP Network Infrastructure Solutions (HP0-Y43)

exam, continue reading, beginning at: Attend recommended ILTs.

11

Any ASE certification

Your current knowledge of HP E-Series products, including their security features, should be sufficient. (Of

course, you might need to review if you received your certification several years ago.) However, you will need

to expand your knowledge of the HP A-Series products and technologies to pass the exam. As indicated in the

table, you might consider taking just the HP Core/Distribution Network Technologies using Comware Software

ILT and reviewing the Internet and WAN Technologies WBT, if you have not completed that WBT before.



H3CSE certification

Your current knowledge of HP A-Series products should be sufficient. However, you must understand how to

implement the same protocols with which you are familiar on A-Series products on E-Series products as well. In

addition, you must be able to implement network security on both HP A-Series and E-Series products—as well

as understand general concepts related to HP security technologies. You should take the ILTs and WBTs

recommended to you.



CCDP, CCNP – Routing and Switching or Wireless certification

The Implementing HP Network Infrastructure Solutions (HP0-Y43) exam tests both your general knowledge of

intermediate switching, routing, and security technologies as well as your specific ability to implement these

technologies on HP products.

As a Cisco-certified professional, you should not find the general knowledge questions difficult—although you

might want to review concepts that you have not studied recently using the WBTs described later in this guide.

In particular, if you have the Wireless certification, you might need to expand your knowledge of switching

and security technologies.

While you do not need to produce exact CLI commands from memory, you must demonstrate that you can

navigate HP products’ CLIs and follow the proper procedures to configure settings. If you do not attend the

recommended ILTs, which provide hands-on experience in a lab, you should practice configuring the switching

and routing technologies covered in the courses on actual HP A-Series and E-Series products.

To learn more about ways to prepare for the exam, continue reading, beginning at: Attend recommended ILTs.

Attend recommended ILTs Four ILTs are available to help you to prepare for this exam. The first three are:

• HP Core/Distribution Network Technologies using ProVision Software, Rev 10.41 or later (4 days)

• HP Core/Distribution Network Technologies using Comware Software, Rev. 11.41 or later (5 days)

• Implementing HP Network Infrastructure Security, Rev. 10.41 or later (2 days)

You are highly encouraged to attend these courses, where you will expand your knowledge of networking and

security technologies and gain hands-on experience implementing these technologies on HP equipment.

You may also have the option of taking Accelerated HP Core/Distribution Layer Network Technologies, Rev.

11.31 or later as an alternative to the three ILTs listed above. This ILT combines HP Core/Distribution Network

Technologies using ProVision Software, HP Core/Distribution Network Technologies using Comware Software,

and Implementing HP Network Infrastructure Security and delivers the material in a compressed timeframe: 5

days instead of 11. Qualifications for this course are listed below.

You can register for these ILTs in The Learning Center of your HP Partner Portal, which is the HP Learning

Management System for HP customers and partners. You will require an HP Learner ID to register for a class.

Note that, while it only takes a few minutes to request the ID, the process of activating it may take up to several

days. Please obtain this ID and then register for classes at least one week in advance. Costs and scheduling

vary according to region.

12

HP Core/Distribution Network Technologies using ProVision Software

HP Core/Distribution Network Technologies using ProVision Software describes techniques for designing and

implementing resilient switched and routed converged networks based on the HP E-Series ProVision ASIC

switches. These networks will be capable of fulfilling the “triple play” requirement of supporting voice, video,

and data transmissions on a unified infrastructure.

Topics covered

In this course, you learn about:

• ProVision ASIC networking products and technologies

• Providing redundant links and default gateways with Multiple Spanning Tree Protocol (MSTP)/Virtual

Router Redundancy Protocol (VRRP)

• Designing and implementing IPv4 networks

• Designing and implementing OSPFv2 routing

• Designing and implementing Layer 2 and Layer 3 QoS

• Designing and implementing Internet Group Management Protocol (IGMP), Protocol Independent

Multicast – Sparse Mode (PIM-SM), and PIM-Dense (PIM-DM)

• Designing and implementing QinQ

• Designing and implementing IPv6, OSPFv3, and DHCPv6

Format offered

4-day instructor-led course, 40% lecture and 60% hands-on labs and classroom activities. The course may be

delivered using a remote lab environment.

More information

If you are interested, the course datasheet discusses HP Core/Distribution Network Technologies using

ProVision Software in more detail. It is available at

http://h17007.www1.hp.com/us/en/training/certifications/technical/ase-network-infrastructure.aspx.

HP Core/Distribution Network Technologies using Comware Software

The HP Core/Distribution Network Technologies using Comware Software course focuses on the advanced

features required in enterprise level networks and how they can be implemented in HP Networking A-Series

switches and routers. After successful completion of this course, you will have acquired the concepts and the

skills necessary to install, maintain and troubleshoot an HP A-Series enterprise level network.

Topics covered

This course teaches you about these topics:

• Special VLAN types:

o Port-based VLANs

o Protocol-based VLANs

o IP-subnet-based VLANs

o MAC-address-based VLANs

o SuperVLANs

o Isolate-user VLANs

• IP gateway features

o Local-proxy-ARP

o MSTP + VRRP redundancy solution

• IP routing

o OSPF network types and multi-area networks

o BGP

http://h17007.www1.hp.com/us/en/training/certifications/technical/ase-network-infrastructure.aspx

13

• IP multicast

o IGMP

o IGMP snooping

o Multicast VLAN

o PIM-DM

o PIM-SM

• QoS

o QoS policies

o ACLs

o Prioritization

o QoS applications

• IPv6

o OSPFv3

o Multicasting

o IPv6 transition mechanisms

o QoS

• Network management

o Port mirroring (local and remote)

o SNMP configuration

o IMC fundamentals

• Intelligent Resilient Framework (IRF)

Format offered

5-day instructor-led, 15% lecture, 35% learner research/group analysis, and 50% hands-on labs

More information

If you are interested, the course datasheet discusses HP Core/Distribution Network Technologies using

Comware Software in more detail. It is available at


Implementing HP Network Infrastructure Security

The Implementing HP Network Infrastructure Security course prepares network engineers and network

administrators to configure, troubleshoot and implement security features used to protect a network. Network

protection features on both the A-Series and E-Series devices will be explored.

Topics covered

This course teaches you about these topics:

• Certificate Authority (CA)-signed certificates

• Traffic mirroring

• Access control lists (ACLs) used to filter network traffic

• MAC address protection

• Port security

• Traffic filters

o Source port filters

o Port isolation


14

• Spanning tree protection

o DHCP protection

o Address Resolution Protocol (ARP) protection

o IP spoofing protection

o Threat detection and Virus Throttling

Format offered

2-day instructor-led, 15% lecture, 15% activity and 60% hands-on labs

More information

If you are interested, the course datasheet discusses Implementing HP Network Infrastructure Security in more

detail. It is available at http://h17007.www1.hp.com/us/en/training/certifications/technical/ase-network-

infrastructure.aspx.

Accelerated HP Core/Distribution Layer Network Technologies

The Accelerated HP Core/Distribution Layer Network Technologies ILT combines the material presented in the

HP Core/Distribution Network Technologies using ProVision Software, HP Core/Distribution Network

Technologies using Comware Software, and Implementing HP Network Infrastructure Security ILTs. It is

delivered in less time than it would take to attend the ILTs separately.

NOTE

Given the compressed timeframe, the Accelerated course is designed to train only experienced network

administrators in these topics. To attend Accelerated HP Core/Distribution Layer Network Technologies, you

should have one of the following active certifications:



• H3CSE

• CCNP – Routing and Switching, CCNP Wireless

• CCDP

Topics covered

In this course you learn about:

• Deploying and configuring HP A-Series and E-Series switches

• Designing, implementing, and troubleshooting routed and bridged networks using industry-standard

protocols, focusing on OSPF, eBGP, VRRP, and MSTP

• Designing and implementing “triple play” networks using HP prioritization and QoS features

• Designing and implementing IGMP, PIM Dense, and PIM Sparse

• Designing and implementing IPv6 and OSPFv3

• Designing and implementing IRF

• Designing and implementing secure infrastructure networks focusing on STP, DHCP, and ARP

protection; traffic mirroring; access control lists (ACLs); and Virus Throttling

Format offered

Five-day instructor-led, 20% lecture and 80% lab and classroom activities.

The course may be delivered using a remote lab environment.

More information

If you are interested, the course datasheet discusses Accelerated HP Core/Distribution Layer Network

Technologies in more detail. It is available at





15

Purchase self-study materials Rather than attend the ILT, you can prepare for HP certification exams at your convenience, with HP-approved

Official Exam Certification Guides.

Learn at your own pace, with self-study guides written by industry experts. Each guide takes you through

complex subjects with detailed, step-by-step explanations, diagrams, chapter quizzes and a practice exam.

Remember that simply reading the self-study materials will not give you the hands-on experience provided by

labs in the ILT. Both the study guide and exam assumes that you have real-world experience implementing

enterprise networks.

The same pre-requisite rules, as described in this Exam Preparation Guide, apply if you us the HP-approved

Official Exam Certification Guides to prepare for this exam.

To purchase the self-study materials associated with this exam, visit http://www.hppress.com.

Complete recommended WBTs HP also recommends that you complete several WBTs, which delve into the technologies that underlie HP

networking solutions:

• HP Switching and Routing Technologies, Rev 10.41or later (a prerequisite for the HP

Core/Distribution Network Technologies using ProVision Software and HP Core/Distribution Network

Technologies using Comware Software ILTs described above)

• HP Internet and WAN Technologies, Rev 10.41 or later

• HP Network Infrastructure Security Technologies, Rev 10.41 or later (a prerequisite for the

Implementing HP Network Infrastructure Security ILT described above)

These WBTs are freely available through the Learning Center of your HP Partner Portal. You will need to

register for the WBT, which requires an HP Learner ID. Note that, while it only takes a few minutes to request

the ID, the process of activating it up may take several days. Please do not wait until the last minute.

HP Switching and Routing Technologies

This course describes the operation of standards and protocols that facilitate resilient and predictable network

operation. It begins by aligning the standards with strategies for utilizing redundant links and network devices,

and it concludes with a discussion of commonly used standards that enable an infrastructure to support

converged applications.

Topics covered

The WBT teaches you about these concepts:

• Interactions among network devices that support VRRP v2

• Strategies for sharing default gateway responsibilities between two Layer 3 switches

• IP router forwarding decisions for packets that match with multiple route table entries

• Comparison of automatic and manual IP address space summarization

• OSPF characteristics that make it suitable to resilient, large-scale intranets

• OSPF router roles and the significance each has to sharing route information

• The function and scope of each OSPF message type

• Proper use of OSPF area types

• The roles of IGMP and PIM in multicast communications, and the scope of each protocol

• The operation of PIM Dense and PIM Sparse and their appropriate network deployments

• The characteristics of and requirements for data traffic versus real-time traffic

• Layer 2 and Layer 3 prioritization standards and their appropriate implementations in contemporary

enterprise networks

• The LLDP-MED standard and its relevance to QoS for VoIP and other applications

http://www.hppress.com/

16

Format offered

The WBT is a four-hour, self-paced course, which features animation and interaction. At the end of the WBT,

you take a test to assess what you have learned.

More information

If you are interested, the course datasheet discusses HP Switching and Routing Technologies in more detail. It is

available at http://h17007.www1.hp.com/us/en/training/certifications/technical/ase-network-


HP Internet and WAN Technologies

This WBT is designed and delivered by an industry expert to help you understand the technologies that power

the Internet and Wide Area Networks (WANs).

The Internet has permeated every corner of the globe. Most large corporations are multi-national. High-speed

connectivity to the rest of the world is now a “must-have.” But how is that connectivity provided?

There are several technologies one can choose from to enable connectivity. Service providers offer many

access options to their managed networks or to the Internet. These networks then employ various technologies

to enable logical connectivity for public Internet traffic, or for Virtual Private Networks (VPNs).

This WBT gives you the knowledge to identify the various protocols and technologies used in service delivery.

Topics covered


• Internet basics

o History of the Internet

o Current and future trends

o Next Generation Internet requirements

• IP routing fundamentals

o Control Plane/Data Plane fundamentals

o Static versus dynamic routing

o Categories of dynamic routing protocols

• IS-IS routing

o IS-IS terminology

o IS-IS hierarchy and operation

o IS-IS addressing

o IS-IS messaging

o IS-IS compared to OSPF

• BGP routing

o BGP terminology

o Protocol interaction

o BGP use models

o Route advertising principals

o BGP route attributes

• MPLS

o MPLS protocols

o Control plane/data plane operation

o MPLS traffic engineering

o MPLS Support of IPVPN

o MPLS Support of Layer 2 VPNs



17

• Access and WAN technologies

o Access to the Internet for consumers and businesses

o Layer 2 backbone technologies

o High-speed data links

Format offered

The WBT is a four-hour, self-paced course, which features animation and interaction. At the end of the WBT,


More information

If you are interested, the course datasheet discusses HP Internet and WAN Technologies in more detail. It is

available at http://h17007.www1.hp.com/us/en/training/certifications/technical/ase-network-


HP Network Infrastructure Security Technologies

The HP Network Infrastructure Security Technologies WBT covers a wide variety of security technologies. It

introduces network technicians to the Defense in Depth strategy for confronting contemporary threats to network

security. Specifically, it covers the network infrastructure security component of this strategy, explaining

technologies built into a trusted network infrastructure as well as access control and threat management

technologies.

Topics covered


• Types of threats

o Network reconnaissance

o Unauthorized access

o Impersonation

o Malware

o Denial of Service (DoS)

o Viruses and worms

• Defense in Depth

• Data privacy, integrity, and authenticity for wired and wireless communications

• Key management

o Digital certificates

o Public Key Infrastructure (PKI)

• Built-in protections against common protocol exploits

o STP protection

o DHCP snooping

o ARP protection

o Virus Throttle

• Access control

o Static VLANs

o ACLs

• Firewalls

o Traditional firewall technologies, including stateful-inspection firewalls with Application Level

Gateways (ALGs) or Application Specific Packet Filtering (ASPF)

o Next Generation Firewalls (NGFWs)



18

• Network access control technologies

o Authentication protocols such as Challenge Handshake Authentication Protocol (CHAP) and

Extended Authentication Protocol (EAP)

o Authentication, Authorization, and Accounting (AAA) protocols such as RADIUS and

TACACS+

o 802.1X

o Web authentication (captive portal

o MAC authentication

o Directories

• Endpoint integrity

o Personal anti-virus and firewall solutions

o Web browser security

o Patches

o Implementation of endpoint-integrity-based NAC

• Virtual Private Network (VPN) technologies

o IPsec with Internet Key Exchange version 1 (IKEv1)

o Layer 2 Tunneling Protocol (L2TP)

o Point-to-Point Tunneling Protocol (PPTP)

o MACsec

• Threat management solutions

o Signature-based and anomaly-based systems

o Intrusion Detection Systems (IDSs)

o Intrusion Prevention Systems (IPSs)

o Deployment strategies

Format offered

The WBT is a five-hour, self-paced course, which features animation and interaction. At the end of the WBT,


More information

If you are interested, the course datasheet discusses HP Network Infrastructure Security Technologies in more

detail. It is available at http://h17007.www1.hp.com/us/en/training/certifications/technical/ase-network-


Refer to additional materials You might want to refer to some additional materials, particularly if you have not completed the recommended

training. HP provides product documentation, which explains how to implement the technologies covered in the

training. Visit http://www.hp.com/networking/support to search for the appropriate manuals.

Obtain hands-on experience If possible, practice setting up technologies on actual HP equipment (refer to the earlier lists of technologies

covered in the recommended training). You learn the most by configuring several switches that function

together as they would in the real-world, which is the advantage of the safe lab environment provided in

the ILTs.

How to take the Implementing HP Network Infrastructure Solutions

(HP0-Y43) exam Table 4 provides details about the exam. Note that this is a proctored exam, which you must complete at a

scheduled time and authorized location. You will not be allowed to take any reference materials with you.



http://www.hp.com/networking/support

19

Table 4: HP0-Y43 exam details

Parameter Description

Number of items 62

Item types Multiple choice (single response)

Multiple choice (multiple responses)

Matching

Exam time 2 hours (120 minutes)

Passing score 74 percent (46 correct answers)

Additional guidelines No online or hard copy reference material will be

allowed at the testing site.

Exam content

The following testing objectives represent the specific areas of content covered in the exam. Use this outline to

guide your study and to check your readiness for the exam. The exam measures your understanding of these

areas.

Table 5: HP0-Y43 exam content

HP0-Y43 Sections/Objectives

15 % Networking Architecture and Technology

Identify and describe networking architecture and technology.

Apply Quality of Service concepts.

31% Solution Implementation (Install, configure, startup, and upgrade the

network solution as per planned design.)

Install and configure multicast protocols.

Install and configure IPv4 and IPv6.

Install and configure routing.

Implement advanced VLAN types (MAC-based, protocol-based, IP

subnet-based, voice, isolate user VLAN, or super VLAN).

Install and configure the management and administration solution.

6% Solution Planning and Design

Plan and design to achieve a deployable solution.

32% Solution Optimization

Tune advanced Layer 3 routing protocols.

Secure wired/wireless devices in small to medium sized networks

and mitigate basic security threats.

Manage network assets using HP tools.

Optimize L3 routing protocol convergence and scalability (OSPF,

RIP, OSPFv3, RIPng, static routes, ISIS, ECMP).

Assess how to optimize network availability.

Assess sensitive traffic and determine appropriate tools for

optimizing traffic flow (QoS, DiffServ, Multicast/IGMP/PIM, IRF,

bandwidth limitations, rate limiting, trunks, MSTP, multipath

routing).

11% Solution Troubleshooting

Secure the network and mitigate security threats.

5% Solution Management

Perform network management.

20

Comments on the exam

During the exam, participants can make specific comments about the items (i.e., accuracy, appropriateness to

audience, etc.). HP welcomes these comments as part of our continuous improvement process.

Tips for taking HP exams Rather than emphasize simple memorization, HP exams attempt to assess whether you have the knowledge

and skills that a networking professional requires on the job. Therefore, some questions feature exhibits or

scenarios. As you see, you will have an average of just less than two minutes per question. Some questions will

take much less time, and some will require a bit more. If allowed by the systems, you might want to answer the

questions about which you are sure first and then move back to the others.

Before you do answer a question, take the time to read the question and all of the options carefully. If the

question indicates that it features an exhibit, study the exhibit and reread the question. Make sure to select the

answer that correctly responds to the question that is asked—not simply an answer that includes some correct

information.

If the question asks for more than one answer, remember to select each correct answer. You do not receive

partial credit for a partially correct answer.

Register To register for this exam, visit the PearsonVUE website at:

http://www.PearsonVUE.com/hp

You will need an HP Learner ID and a PearsonVUE ID.

You can also access links to register for this exam when you view information about them on The Learning

Center:

http://www.hp.com/go/expertone

Sample questions Use these questions to help to assess whether you are ready to take the exam. An appendix at the end of this

guide provides answers and explanations.

1. Your network is routing multicast messages using Protocol Independent Multicast-Sparse Mode

(PIM-SM). A multicast source begins to a new stream. What message does the default router for the

multicast source send?

a. a Join message to the Bootstrap Router (BSR)

b. a Join message to the Rendezvous Point (RP)

c. a Register message to the Bootstrap Router (BSR)

d. a Register message to the Rendezvous Point (RP)

2. Examine the exhibit. While configuring the HP E8212 zl switch to be an ABR for OSPF areas 0 and 2,

you entered this command in the switch’s CLI:

E5406(ospf)# area 2 stub 2 no-summary

http://www.pearsonvue.com/hp

http://www.hp.com/go/expertone

21

Figure 1: Exhibit for question 2

If you assume that all the connections are up and the OSPF routers have achieved adjacency, which

routes could you see on the E5412 zl switch in area 2? The routing tables associated with each option

are listed on the next pages.

a. A

b. B

c. C

d. D

Option A

IP Route Entries

Destination Gateway VLAN Type Sub-Type Metric Dist.

------------------ --------------- ---- --------- ---------- ---------- -----

10.0.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.1.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 22 connected 1 0

10.2.0.0/16 10.2.0.2 10 ospf InterArea 1 110

10.3.0.0/16 10.2.0.1 10 ospf InterArea 2 110

127.0.0.0/8 reject static 0 0

127.0.0.1/32 lo0 connected 1 0

Option B

IP Route Entries


------------------ --------------- ---- --------- ---------- ---------- -----

0.0.0.0/0 10.2.0.1 20 ospf InterArea 2 110

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 22 connected 1 0


127.0.0.1/32 lo0 connected 1 0

22

Option C

IP Route Entries


------------------ --------------- ---- --------- ---------- ---------- -----

10.0.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.1.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 22 connected 1 0

10.3.0.0/16 10.2.0.1 20 ospf InterArea 2 110


127.0.0.1/32 lo0 connected 1 0

Option D

IP Route Entries


------------------ --------------- ---- --------- ---------- ---------- -----

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 12 connected 1 0


127.0.0.1/32 lo0 connected 1 0

3. The LAN shown in the exhibit is being designed as a single DiffServ domain. On which ports should

packets be marked (or remarked) to comply with the DiffServ Model? (Select two.)

a. inter-switch ports between the distribution layer switches

b. the ports that connect the edge switches to the distribution switches

c. the ports that connect the distribution ports to the edge switches

d. client access ports

e. server access ports


23

4. An HP A5800 switch enforces an ACL, which is shown in the configuration under the exhibit. You

want to allow the client shown in the exhibit to access FTP services on the server. Which is true?

a. You do not need to enter a command because the current configuration permits this traffic.

b. You could permit the traffic with this command: permit tcp source 10.1.7.0 0.0.0.255

destination 10.1.4.12 0 destination-port range 20-21

c. You could permit the traffic with this command: permit tcp source 10.1.7.201 0 destination

10.1.4.12 0 destination-port range 20-21

d. You could permit the traffic with this command: rule 8 permit source 10.1.7.0 0.0.0.255


e. You could permit the traffic with this command: rule 3 permit source 10.1.7.0 0 destination


Figure 3: Exhibit 1 for question 4

A5800 ACL configuration

[A5800] display acl 3003

Advanced ACL 3003, named lab, 6 rules

ACL’s step is 5

rule 0 permit tcp source 10.1.0.0 0.0.0.255 destination 10.1.4.12 0 destination-

port range 20-21


port eq www

rule 6 permit udp source 10.1.7.0 0.0.0.255 destination 10.1.4.12 0 destination-

port eq dns

rule 7 permit icmp source 10.1.7.0 0.0.0.255 destination 10.1.4.12 0

rule 10 deny ip source 10.1.0.0 0.0.255.255 destination 10.1.0.0 0.0.255.255.0

logging

rule 15 permit ip


5. An endpoint that supports both IPv4 and IPv6 is connected to your HP A3610 switch. You want to

assign to IPv4 traffic to VLAN 4 and the IPv6 traffic to VLAN 6. How do you do so?

a. Specify VLAN 6 as a protocol-based VLAN that selects IPv6. Configure the endpoint’s port as

a hybrid port. Set VLAN 4 as the PVID and VLAN 6 as a protocol VLAN.

b. Configure the endpoint’s port as a trunk port. Set VLAN 4 as the PVID and allow VLAN 6.

c. Specify VLAN 6 as a protocol-based VLAN that selects IPv6. Configure the endpoint’s port as

a trunk port. Allow both VLAN 4 and 6, setting either VLAN as the PVID.

d. Configure the endpoint’s port as an access port set to VLAN 4. Then specify VLAN 6 as the

access port’s protocol-based VLAN setting.

Conclusion HP wishes you success in the HP ExpertONE Program and in passing the exam for which you are preparing.

24

Appendix: Answers to the sample questions This section provides answers and explanations for the sample questions.

1. Your network is routing multicast messages using Protocol Independent Multicast-Sparse Mode

(PIM-SM). A multicast source begins to a new stream. What message does the default router for the

multicast source send?

a. a Join message to the Bootstrap Router (BSR)

b. a Join message to the Rendezvous Point (RP)

c. a Register message to the Bootstrap Router (BSR)

d. a Register message to the Rendezvous Point (RP)

Explanation: In PIM-SIM, a router sends a Join message to indicate that it needs to join the PIM-SM

tree so that it can receive multicasts for hosts connected to it or to a downstream router. It is a Register

message that indicates that the router is the first-hop router for a multicast source. Therefore, the

correct answer must specify a Register message, and answers a and b are incorrect.

The BSR is responsible for distributing RP-to-multicast address mappings. The RP is responsible for

acting as the root of the tree for a particular multicast address, and Register messages are addressed

to it. Answer d is correct.

2. Examine the exhibit. While configuring the HP E8212 zl switch to be an ABR for OSPF areas 0 and 2,

you entered this command in the switch’s CLI:

E5406(ospf)# area 2 stub 2 no-summary


If you assume that all the connections are up and the OSPF routers have achieved adjacency, which

routes could you see on the E5412 zl switch in area 2? The routing tables associated with each option

are listed on the next pages.

a. A

b. B

c. C

d. D

Explanation: A stub area typically receives interarea routes that summarize the networks in other

areas. However, the command shown for the E8212 zl ABR configures the routing switch to suppress

those summary routes in its advertisements to routers in area 2. The ABR will only send an

advertisement for a default route into area 2.

25

The routing tables in answers a and c include OSPF interarea routes summarizing other areas, so

these answers are incorrect. In addition, the table in answer a includes a summary route for this

internal routing switch’s own area, which is also incorrect.

The routing table in answer d does not include interarea summary routes, which is correct, but it also

lacks a default route. The E8212 zl automatically injects a default route into stub areas without

summary routes. Therefore, answer d is incorrect.

The only interarea OSPF route shown in answer b is the default route. This answer is correct.

Option A

IP Route Entries


------------------ --------------- ---- --------- ---------- ---------- -----

10.0.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.1.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 22 connected 1 0

10.2.0.0/16 10.2.0.2 10 ospf InterArea 1 110

10.3.0.0/16 10.2.0.1 10 ospf InterArea 2 110


127.0.0.1/32 lo0 connected 1 0

Option B

IP Route Entries


------------------ --------------- ---- --------- ---------- ---------- -----

0.0.0.0/0 10.2.0.1 20 ospf InterArea 2 110

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 22 connected 1 0


127.0.0.1/32 lo0 connected 1 0

Option C

IP Route Entries


------------------ --------------- ---- --------- ---------- ---------- -----

10.0.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.1.0.0/16 10.2.0.1 20 ospf InterArea 2 110

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 22 connected 1 0

10.3.0.0/16 10.2.0.1 20 ospf InterArea 2 110


127.0.0.1/32 lo0 connected 1 0

Option D

IP Route Entries


------------------ --------------- ---- --------- ---------- ---------- -----

10.2.0.0/29 VLAN20 20 connected 1 0

10.2.1.0/24 VLAN21 21 connected 1 0

10.2.2.0/24 VLAN22 12 connected 1 0


127.0.0.1/32 lo0 connected 1 0

3. The LAN shown in the exhibit is being designed as a single DiffServ domain. On which ports should

packets be marked (or remarked) to comply with the DiffServ Model? Select two.

a. inter-switch ports between the distribution layer switches

b. the ports that connect the edge switches to the distribution switches

c. the ports that connect the distribution ports to the edge switches

26

d. client access ports IRF Member 3 remains Master.

e. server access ports


Explanation: The DiffServ model specifies that you mark traffic (or remark already marked traffic) with

a DSCP as close to the source as possible. For traffic destined to servers, the closest ports are the client

access ports, so answer d is one correct answer. For return traffic from the servers to the clients, the

closest ports as the server access ports, so answer e is another correct answer.

In a LAN that is a single DiffServ domain, the inter-switch ports should trust the DSCP marks placed by

the client or server edge switches. However, they do not need to remark those values; therefore,

answers a, b, and c are incorrect.

4. An HP A5800 switch enforces an ACL, which is shown in the configuration under the exhibit. You

want to allow the client shown in the exhibit to access FTP services on the server. Which is true?

a. You do not need to enter a command because the current configuration permits this traffic.

b. You could permit the traffic with this command: permit tcp source 10.1.7.0 0.0.0.255


c. You could permit the traffic with this command: permit tcp source 10.1.7.201 0 destination


d. You could permit the traffic with this command: rule 8 permit source 10.1.7.0 0.0.0.255


e. You could permit the traffic with this command: rule 3 permit source 10.1.7.0 0 destination


Explanation: First examine the ACL to determine whether it already permits the desired traffic:

• Rule 0 permits FTP traffic to the server (destination-port range 20 21); however, it only permits this

traffic from sources in 10.1.0.0/24, and the client is in 10.1.7.0/24. Therefore, this rule does

not permit the desired traffic.

• Rule 5 deals with HTTP traffic (destination-port eq www). Therefore, it does not affect the traffic in

question. Similarly, rules 6 and 7 relate to DNS and ICMP traffic and do not affect the traffic in

question.

• Rule 10 denies all other IP traffic between endpoints in 10.1.0.0/16. This rule affects the traffic in

question, which is between 10.1.7.201 and 10.1.4.12.

Therefore, the ACL as it is will drop the desired traffic, and answer a is incorrect.

Next, you must determine a valid command for altering the ACL to permit the desired traffic.

27

You know that you must add the rule that permits the traffic before the rule that currently drops it—in

other words before rule 10. The commands in answers b and c add the new rule at the end of the list,

so they are incorrect.

The commands in both answers d and e add the rule in a valid order. However, the command in

answer e does not select the correct traffic. Entering 0 for the wildcard bits (source 10.1.7.0 0) forces

an exact match with the listed IP address, which is not a valid IP address in this instance.

You want to match the exact IP address, 10.1.7.201, or the entire 10.1.7.0/24 subnet. Answer d

includes the correct wildcard bits for the second option (source 10.1.7.0 0.0.0.255). Answer d is

correct.


A5800 ACL configuration

[A5800] display acl 3003

Advanced ACL 3003, named lab, 6 rules

ACL’s step is 5


port range 20-21


port eq www

rule 6 permit udp source 10.1.7.0 0.0.0.255 destination 10.1.4.12 0 destination-

port eq dns

rule 7 permit icmp source 10.1.7.0 0.0.0.255 destination 10.1.4.12 0

rule 10 deny ip source 10.1.0.0 0.0.255.255 destination 10.1.0.0 0.0.255.255.0

logging

rule 15 permit ip


5. An endpoint that supports both IPv4 and IPv6 is connected to your HP A3610 switch. You want to

assign to IPv4 traffic to VLAN 4 and the IPv6 traffic to VLAN 6. How do you do so?

a. Specify VLAN 6 as a protocol-based VLAN that selects IPv6. Configure the endpoint’s port as

a hybrid port. Set VLAN 4 as the PVID and VLAN 6 as a protocol VLAN.

b. Configure the endpoint’s port as a hybrid port. Set VLAN 4 as the PVID and allow VLAN 6.

c. Specify VLAN 6 as a protocol-based VLAN that selects IPv6. Configure the endpoint’s port as

a trunk port. Allow both VLAN 4 and 6, setting either VLAN as the PVID.

d. Configure the endpoint’s port as an access port set to VLAN 4. Then specify VLAN 6 as the

port’s IPv6 protocol-based VLAN setting.

Explanation: To assign IPv4 and IPv6 traffic received on the same port to different VLANs, you must

complete several steps. You must create a protocol-based VLAN that specifies the correct VLAN ID and

desired protocol. In addition, the port receiving the IPv4 and IPv6 traffic must be a hybrid port with the

VLAN for IPv4 traffic as the PVID and the protocol-specific VLAN also specified.

Answer b correctly includes specifying the port as a hybrid port, but it does not correctly describe how

to create the protocol-based VLAN for IPv6 traffic. Answer c includes the correct method for creating

the protocol-based VLAN, but it specifies the port as a trunk port, which is incorrect. Answer d is

entirely incorrect, with the wrong type of port (access rather than hybrid) and an invalid way of

To learn more about HP networking, visit www.hp.com/networking

© Copyright 2011 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The

only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.

Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions

contained herein.

HP0-Y43: Implementing HP Network Infrastructure Solutions

Exam Preparation Guide / May 2011

entirely incorrect, with the wrong type of port (access rather than hybrid) and an invalid way of

specifying the settings for the protocol-based VLAN.

Only answer a includes all of the correct steps.

Exam preparation guide - Hewlett Packard Enterpriseh17007. · Exam preparation guide Overview...

Documents

Transcript of Exam preparation guide - Hewlett Packard Enterpriseh17007. · Exam preparation guide Overview...