• chiz_
  • New member
  • Offline

Topic: HPE6-A72 topic 1 question 16

What are the commands to disable SSH and HTTPS services from the default VRF?

A.
Core-1(config)# no ssh server Core-1(config)# no https-server
B.
Core-1# no ssh server vrf default Core-1# no https-server vrf default
C.
Core-1(config)# no ssh server enable Core-1(config)# no https-server enable
D.
Core-1(config)# no ssh server vrf default Core-1(config)# no https-server vrf default

  • apote
  • New member
  • Offline

Re: HPE6-A72 topic 1 question 16

Site 221 ACSA Book
"Disable SSH and HTTPS services from default VRF. This will prevent tis traffic from being processed in the regular data VRF."
(config)# no ssh server vrf default
(config)# no https-server vrf default

Re: HPE6-A72 topic 1 question 16

dont get why A doesnt work as well. If its the default VRF it should automatically remove ssh and https from it

Re: HPE6-A72 topic 1 question 16

A doesn't because the vrf are separate control planes so doing the commands in A wouldn't affect vrf default. In order to interact with vrf default control plane you must use the command followed "vrf (name) in this example default). So if you wanted to ping vrf default you would have to do ping x.x.x.x vrf default.

Re: HPE6-A72 topic 1 question 16

Enable SSH on 8320 Switch:

The following commands will enable SSH access on 'default' and 'mgmt' VRF instance.

8320-lower#

8320-lower# configure terminal

8320-lower(config)# ssh server vrf mgmt

8320-lower(config)# ssh server vrf default

8320-lower(config)# end

8320-lower#

8320-lower#

8320-lower# configure terminal

8320-lower(config)# https-server vrf mgmt

8320-lower(config)# https-server vrf default

8320-lower(config)# end

8320-lower# write memory

Success

8320-lower#

Re: HPE6-A72 topic 1 question 16

Yeah I agree. I think D is the more explicit answer. The questions is more of which answer more correct, just meant to confuse you.