Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

ag-Cisco CCNA 2 > 15 - Private WANs with Internet VPN > Flashcards

15 - Private WANs with Internet VPN Flashcards

1
Q

What device do Telcos use to split out Internet traffic from analog voice?

A

DSLAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What features or Goals can an Internet VPN provide?

A
  • Confidentiality
  • Authentication
  • Data Integrity
  • Anti-replay
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is IPSEC?

A

An architecture or framework for Security Services for IP Networks. It defines how two Internet-connected devices can achieve the goals of a VPN.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does GRE stand for?

A

Generic Routing Encapsulation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

In GRE what is the delivery header?

A

Uses IP addresses from the Unsecured Network to allow routers to route the packet over the Internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the commands to build a GRE tunnel on router1?

A
  • int s0/1
    • ip address 1.1.1.1 255.255.255.0
    • exit
  • int tun0
    • ip address 10.1.3.1 255.255.255.0
    • tunnel mode gre ip
    • tunnel source s0/1
    • tunnel destination 2.2.2.2
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the commands to build a GRE tunnel on router2?

A
  • int s1/1
    • ip address 2.2.2.2 255.255.255.0
    • exit
  • int tun0
    • ip address 10.1.3.2 255.255.255.0
    • tunnel mode gre ip
    • tunnel source s1/1
    • tunnel destination 1.1.1.1
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Will a router filter an outbound VPN tunnel?

A

No, routers don’t filter packets that are created locally on the router. They will however filter an inbound packet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the commands necessary to build a GRE tunnel?

A
  • public IP on the outside interface
  • create tunnel interface
  • private IP addresss
  • tunnel mode gre ip
  • tunnel source (public IP address on the outside interface)
  • tunnel destination (remote public IP address)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Will a VPN tunnel get built if the local router doesn’t have a route to the remote router public IP?

A

No.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What would an ACL need to say to permit GRE?

A

permit gre any any

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What protocol and port does GRE use?

A

IP 47

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is an NHRP server

A

server process on a DMVPN Hub router that provides tunnel IP and public IP address info of any other DMVPN router thus allowing router R2 to build a VPN tunnel to R3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is PPPoE?

A

PPP over Ethernet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

For PPPoE, what 6 commands are needed on the dialer interface?

A
  • ip address negotiated
  • mtu 1492
  • encap ppp
  • ppp chap hostname fred
  • ppp chap password barney
  • dialer pool 1
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

For PPPoE, what 2 commands are needed on the physical interface?

A

* no ip address * ppp-client dial-pool-number 1

17
Q

For PPPoE, what command on the physical interface is auto-generated?

A

pppoe enable

18
Q

For PPPoE Verification what is the PPPoE Session:

A

IOS generated session that acts to implement PPP and PPPoE specifics such as session logic, status from IPCPs, sends and receives PPPoE messages to/from the ISP

19
Q

For PPPoE Verification what is the Virtual Access Interface?

A

If PPPoE reaches the desired ‘UP’ state, a Virtual Access Interface is created that Binds itself with the Dialer interface and Physical interface.

20
Q

What are 2 ‘show’ commands to verify the PPPoE configuration

A

* show interfaces dialer 2 * show interfaces virtual-access 2 config

21
Q

What is the ‘show’ command to check the PPPoE session status?

A

* show pppoe session interface gig0/1

22
Q

What ‘show’ command verifies L3 status?

A

* show ip route

23
Q

When troubleshooting PPPoE what is a good approach?

A

Layer 1 first, layer 2, then layer 3

24
Q

What should ‘show interfaces dialer2’ show?

A

up/up(spoofing)

25
Q

For PPPoE what commands enable layer 1?

A

* int dialer1 created * under dialer1 interface * dial pool 1 * under physical interface gig0/1 * pppoe-client dial-pool-number 1

26
Q

For PPPoE what commands enable layer 2?

A

* under dialer interface * encap ppp * ppp chap hostname fred *ppp chap password barney

27
Q

For PPPoE what commands enable layer 3?

A

* under dialer interface * ip address negotiated * mtu 1492 * under gig0/1 * no ip address

28
Q

For PPPoE what indicates layer 1 is not working?

A

show pppoe session’ gives no lines of output

29
Q

For PPPoE what indicates layer 1 is working but layer 2 is not?

A

* ‘show pppoe session’ shows no mac addresses, virtual access interface shows N/A, and state/type says PADISNT * show int dialer2 shows both line and protocol states as UP (Spoofing)

30
Q

For PPPoE what indicates layer 2 is working but layer 3 is not?

A

* show int dialer2 shows info for only dialer2 interface, nothing about the vi interface, no IP address for dialer2 * show pppoe session int gig0/1 shows MAC addresses, show Vi interface state as UP

31
Q

For PPPoE what indicates layer 3 is working

A

* show int dialer2 shows UP/UP (spoofing), show IP address and MTU 1492, shows encap PPP with LCP Closed, show info for Vi2 encap PPP, LCP Open, PPPoE vaccess, cloned from dialer2, interface is bound to Di2 (encap ppp) * show ip route shows the expected routes

32
Q

What are possible indications of bad username or password?

A

* layer 2 not working * show pppoe session lists physical interface and dialer interface but no Vi

ag-Cisco CCNA 2 (40 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions