Infrastructure Services

A network engineer uses Cisco Catalyst Center Assurance to investigate user complaints in a warehouse. The wireless Client Health dashboard shows several clients with a poor health score, and the client 360 view flags them during the 'Onboarding' phase with the RF metric indicating a high noise floor of -78 dBm on the 2.4 GHz band. AP and WLC device health scores are all green, and RADIUS authentication times are normal. Which conclusion is best supported by this Assurance data?

A network engineer is troubleshooting an intermittent connectivity issue on a busy WAN router. Traffic from a single host (10.1.1.50) to a remote server needs to be examined, but running 'debug ip packet detail' floods the console and spikes CPU because of the high traffic volume. The engineer wants to limit the debug output to only packets to/from that one host without impacting other traffic. Which action correctly restricts the debug output?

A branch router's WAN-facing interface is configured with 'ip address dhcp' to obtain an address from the ISP. After a reload, the interface remains up/up but never obtains an IP address. Debugging with 'debug dhcp detail' shows the router sending DHCPDISCOVER messages repeatedly but never receiving a DHCPOFFER. The ISP confirms their DHCP server is operational and that other customers on the same segment obtain leases normally. A packet capture on the router's interface shows the outbound DISCOVER packets but no inbound traffic from the server at all. What is the MOST likely cause?

IP phones in VLAN 20 obtain IP addresses from the IOS DHCP server but fail to download their configuration and firmware from the TFTP server at 10.10.50.5. Data PCs in the same subnet get addresses and reach the network normally. The phone DHCP pool is configured with default-router and dns-server statements only. Which action will allow the phones to locate the TFTP server?

A three-tier campus network uses a Layer 3 distribution switch as a DHCP relay agent. Access switches insert DHCP Option 82 (relay information) as packets pass through them. When clients on VLAN 30 request addresses, the central IOS DHCP server logs show the requests arriving, but no DHCPOFFER reaches the clients. Debugging on the relay shows: 'DHCPD: relay information option exists, but giaddr is zero' followed by the packet being dropped. The relay agent has 'ip helper-address' configured correctly on the VLAN 30 SVI. What is the most likely cause?

A branch router is configured as an IOS DHCP server for VLAN 20 using the network 192.168.20.0/24. Users report that only the first few devices each morning receive addresses, then new clients fail to get an IP. The 'show ip dhcp pool' output shows 'Leased addresses : 250' and 'Total addresses : 253'. The administrator confirms the DHCP scope is correct and the relay is not involved (clients are on the same segment). What is the MOST likely cause of the address shortage?

A network engineer configures Flexible NetFlow on a Catalyst router to export traffic statistics to a collector. The flow exporter and a flow record named APP-RECORD are created, and the command 'ip flow monitor APP-MON input' is applied to GigabitEthernet0/1. However, 'show flow monitor APP-MON statistics' returns 'Flow Monitor APP-MON: is not associated with any interface' error and no flows are captured. What is the most likely cause?

A network engineer configures an IP SLA HTTP GET operation on a branch router to monitor availability of an internal web server referenced by hostname (intranet.corp.local). The operation consistently reports a return code indicating failure, and 'show ip sla statistics' shows the DNS RTT is high or timing out while the TCP connect portion never runs. Pinging the server's IP address directly from the router succeeds. What is the most likely cause?

A network engineer configures IP SLA to track reachability of a primary WAN next-hop (10.1.1.2) and float a backup static route when it fails. The relevant configuration is: ip sla 1 icmp-echo 10.1.1.2 frequency 5 threshold 3000 timeout 2000 track 1 ip sla 1 reachability Users report that even during brief periods of high latency (round-trip around 2500 ms) on the primary link, the tracked object goes down and traffic fails over unnecessarily, then flaps back. The link itself never actually loses connectivity. Which change corrects this unnecessary failover behavior?

A network engineer configures an IP SLA UDP jitter operation between two routers to measure one-way delay for a VoIP path. The UDP responder is configured on the destination and the operation completes successfully, reporting round-trip jitter and packet loss statistics. However, the 'show ip sla statistics' output shows all one-way delay (SD and DS) values as 0 ms, even though round-trip time is clearly non-zero. What is the most likely cause?

A network engineer configures an IP SLA UDP jitter operation on R1 to measure latency and jitter to R2 across a WAN link. The operation is scheduled and active, but 'show ip sla statistics' on R1 shows a 'Return Code' of 'No connection' and no jitter or latency data is collected. ICMP echo operations to the same R2 address succeed normally. What is the most likely cause?

An engineer configures an IP SLA UDP jitter operation between two routers to measure one-way delay across a WAN link. The operation runs successfully and reports round-trip jitter and latency, but the 'show ip sla statistics' output shows the one-way (source-to-destination and destination-to-source) latency values as 0. Two-way statistics are accurate. What is the most likely cause?

A network engineer configures an IP SLA ICMP echo operation with a tracked object to control a floating static route for automatic failover. The primary path occasionally experiences brief microbursts that cause 2-3 dropped probes lasting about 4 seconds, after which connectivity fully recovers. Each brief outage causes the tracked object to go down and the backup route to be installed, resulting in unnecessary route flapping. The engineer wants the tracked object to wait 10 seconds before transitioning to the down state so transient losses do not trigger failover. Which configuration achieves this?

A network engineer configures an IP SLA UDP jitter operation between R1 (sender) and R2 (responder) to monitor a VoIP path. The operation runs successfully and reports jitter and round-trip-time values, but the 'show ip sla statistics' output on R1 consistently shows 'Number of successes: 60, Number of failures: 0' while the one-way latency (Latency one-way (SD)) fields all display 0 ms. The engineer needs accurate one-way delay measurements for SLA reporting. What is the most likely cause?

A branch router is configured as an IOS DHCP server for VLAN 20 (10.20.0.0/24). Users report that obtaining an address takes noticeably long, and 'show ip dhcp conflict' lists several addresses in the pool. The network team confirms no rogue DHCP server exists, but several static hosts were manually assigned addresses inside the DHCP pool range without exclusions. Which action will BOTH stop new conflicts from being recorded and eliminate the lease-assignment delay caused by the server's conflict-detection behavior?

A branch router acts as a DHCPv6 relay for clients on interface GigabitEthernet0/1. The centralized DHCPv6 server sits at 2001:DB8:100::10, reachable via a WAN link. Clients send SOLICIT messages (verified with debug), but they never receive an ADVERTISE. On the relay you see the config: 'ipv6 dhcp relay destination FE80::1'. The WAN interface toward the server is GigabitEthernet0/0. What is the most likely cause of the failure?

An engineer applies a Flexible NetFlow monitor to interface GigabitEthernet0/1 in the input direction to troubleshoot excessive WAN utilization. The collector receives flows for traffic entering the router but reports show almost no data for traffic destined to hosts behind that interface, even though users confirm heavy downloads are occurring. The engineer wants the same monitor to also account for traffic leaving Gi0/1 toward the LAN. What is the correct action to capture this traffic?

A network engineer configures Flexible NetFlow on a router to export flows to a collector at 10.50.0.20. The flow monitor and record are applied to interface GigabitEthernet0/1 in the ingress direction, and 'show flow monitor NET-MON cache' displays active flows. However, the collector receives no data. The exporter is configured with 'destination 10.50.0.20' and 'transport udp 2055'. From the router, 'ping 10.50.0.20' succeeds using the global routing table. The collector reachability is confirmed and its firewall permits UDP 2055. Which command output would BEST confirm whether the router is actually attempting to export the collected flows?

A network engineer configures Flexible NetFlow on R1 to identify top talkers per destination. The flow monitor is applied inbound on GigabitEthernet0/1, but when reviewing the cache with 'show flow monitor TOP-TALKERS cache', all traffic between two hosts is being aggregated into a single flow entry regardless of the transport ports and protocols used. The relevant flow record is configured as follows: 'match ipv4 source address', 'collect ipv4 destination address', 'collect transport source-port', 'collect transport destination-port', 'collect counter bytes'. What is the most likely cause of the aggregation behavior?

A network engineer configures Flexible NetFlow on a WAN edge router to troubleshoot a persistent large file transfer that has been running for over 20 minutes. The collector shows the flow, but the byte and packet counters only update once the transfer completes, making it impossible to see near-real-time bandwidth consumption for the ongoing flow. The flow record and exporter are otherwise correct. Which action allows the collector to receive periodic updates for long-lived active flows?