16 - IP Services I - Device Management and NAT Flashcards

1
Q

Where do log messages display to by default without needing any further configuration?

A

Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do you tell IOS to send log messages to all logged users (Telnet, SSH)? What extra command must you use?

A

logging monitor

EXEC: terminal monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the terminal monitor command do?

A

Tells IOS that this terminal session would like to receive log messages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the logging monitor command do?

A

Tells IOS to enable sending of log messages to all logged messages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What two primary options does IOS provide to keep a copy of log messages?

A
  • In RAM

- Syslog server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do you tell IOS to store copies of log messages in RAM?

A

logging buffered

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you configure a router / switch to send log messages to a syslog server?

A

logging host {address | hostname}

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How would you disable timestamps and enable sequence numbers for logging?

A

no service timestamps

service sequence-numbers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the Cisco logging levels from 0 - 7?

A
Emergency
Alert
Critical
Error
Warning
Notification
Informational
Debug
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How would you set logging to levels 0 - 4 for console?

A

logging console 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How do configure logging message levels for Syslog?

A

logging trap 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How do you show logging configuration settings, basic stats and buffered logs?

A

show logging

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How would you debug something such as OSPF messages?

A

debug ip ospf hello

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Why should you be careful when enabling debug commands on production devices?

A

It uses the router CPU so can have performance impacts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How can you monitor CPU use?

A

show process cpu

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What command enables the NTP client functionality on a device?

A

ntp server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What should you do before enabling NTP?

A

Set the time, and correct date / timezone.

Also tell the device to adjust for daylight savings time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How would you set the date, time and time zones?

A

clock timezone EST -5
clock summer-time EDT recurring
clock set 20:00:00 1 January 2020

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How do you show the date and time?

A

show clock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What two ntp configuration commands does IOS supply?

A

ntp master

ntp server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What command is used to configure a device to only run as an NTP server?

A

ntp master {stratum level}

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What command is used to configure a device to run as an NTP client and server?

A

ntp server {address | host}

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How do you check NTP status?

A

show ntp status

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How do you list all NTP servers a device can attempt to use and status information between them?

A

show ntp associations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is the NTP stratum level?

A

Stratum level represents accuracy of a reference clock, based on number of hops away from an original given clock source. Lower stratum level is better

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What default stratum level do routers and switches using for their internal reference clock?

A

8

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the possible range of stratum values?

A

1 - 15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are NTP primary and secondary servers?

A

Primary servers only act as a server, with a reference clock external to the device. They have a stratum level of 1.

Secondary servers use the client/server mode, relying on synchronization with some other NTP server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

How would you configure an NTP server to use external servers but fallback to internal clocking if they fail?

A

ntp server time-a.com
ntp server time-b.com
ntp master 7 (worse stratum)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

How can you use loopback interfaces in NTP for better availability?

A

You can use a virtual loopback interface and assign it an IP, which routing protocols can advertise about the subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How would you configure an NTP server to use a loopback interface?

A

interface loopback 0
ip address 172.16.10.0 255.255.255.0

ntp master 4
ntp source loopback 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is CDP and LLDP?

A

Cisco Discovery Protocol

Link Layer Discovery Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What does CDP do?

A

Discover basic information about neighboring routers and switches without needing to know the passwords for them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What are some useful details CDP discovers?

A
  • Device ID (usually host name)
  • Address list (network and data-link)
  • Port identifier
  • Capabilities list
  • Platform
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the Port identifier in CDP?

A

The interface on the remote router or switch on the other end of the link that sent the CDP advertisement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are two general roles CDP plays?

A
  • Provide information to devices to support some function

- Provide information to network engineers that manage the devices

37
Q

What do Cisco IP phones use CDP for?

A

To learn the data and voice VLAN IDs configured on the access switch

38
Q

How do you list out one line summary information about each neighbor (all) or just a specific neighbor?

A

show cdp neighbors {interface}

39
Q

How do you list out detailed information about neighbors?

A

show cdp neighbors detail

40
Q

How do you list out detailed information about only one named neighbor?

A

show cdp entry {name}

41
Q

True/False: Cisco routers and switches support the same CDP commands with same parameters and types of output

A

True

42
Q

What Ethernet Multicast destination address does CDP use to make sure all devices receive a CDP message?

A

0100.0CCC.CCCC

43
Q

How do you disable CDP on a given interface?

A

no cdp enable

44
Q

How do you enable / disable CDP globally?

A

cdp run

no cdp run

45
Q

How do you check if cdp is enabled on all interfaces or a given interface?

A

show cdp interface {interface}

46
Q

How do you view statistics for CDP advertisements sent/received?

A

show cdp traffic

47
Q

What layer protocol is CDP?

A

Layer 2

48
Q

What is a difference between LLDP and CDP with respects to how device capabilities are represented in command output?

A

LLDP only displays enabled capabilities, whereas CDP shows all supported capabilities

LLDP uses capability code B (bridge) to represent switching capability

49
Q

True/False: Both LLDP and CDP identify IGMP as a capability

A

False. Only CDP does, using capability code I

50
Q

What type of code does CDP list that LLDP does not?

A

Platform code

51
Q

What multicast address does LLDP use?

A

0180.C200.000E

52
Q

Is LLDP enabled by default on Cisco devices?

A

No

53
Q

What does LLDP do differently with respect to sending / receiving messages?

A

Separates the sending and receiving of LLDP messages as separate functions

54
Q

How do you globally enable / disable LLDP?

A

lldp run

no lldp run

55
Q

How do you control transmission / receiving of LLDP on interfaces?

A

lldp transmit
no lldp transmit

lldp receive
no lldp receive

56
Q

What is the range of Private Class A addresses and how many networks is there?

A

10.0.0.0 - 10.255.255.255

1 Network (10.0.0.0)

57
Q

What is the range of Private Class B addresses and how many networks is there?

A

172.16.0.0 - 172.31.255.255

16 Networks (172.16.0.0 - 172.31.0.0)

58
Q

What is the range of Private Class C addresses and how many networks is there?

A

192.168.0.0 - 192.168.255.255

256 Networks (192.168.0.0 - 192.168.255.0)

59
Q

How many TCP/UDP sessions approximately does NAT allow to be supported by a single public IPv4 address?

A

65,000

60
Q

What are the two main benefits of CIDR?

A
  • Allow route aggregation / summarization

- Allow subsets of classful networks to be distributed to customers

61
Q

What is Source NAT?

A

NAT type that allows enterprises to use private addresses and still communicate with hosts in the internet. Source address are translated to a public IP when leaving the router

62
Q

What is an Inside Local address?

A

Private IP on the inner side of the network

63
Q

What is an Inside Global address?

A

The public IP used to represent the private IP on the outside

64
Q

What is an Outside Global (Destination NAT)?

A

Address that represents a host that resides outside the enterprise which NAT does not change

65
Q

What is Static NAT?

A

NAT where addresses are statically mapped to each other in 1 to 1 mapping

66
Q

What is Dynamic NAT?

A

Similar to Static NAT.

1 to 1 mapping but dynamically assigned from a pool

67
Q

How would you clear Dynamic NAT entries?

A

clear ip nat translation *

68
Q

What is the preferred NAT method / type?

A

NAT Overload / PAT (Port Address Translation)

69
Q

What is NAT Overload / PAT?

A

Allows NAT to support many client with only a few public IP addresses by also translating the port number when necessary to distinguish between multiple private IP addresses mapped to a single public IP

70
Q

What does the NAT router keep in its NAT table entry when using PAT?

A

A unique entry for every unique combination of inside local IP and port with translation to the inside global address and unique port number to be associated with that entry

71
Q

How would you configure static NAT?

A

int G0/1 (random inside port)
ip address 10.1.1.1 255.255.255.0
ip nat inside

int G1/0 (port to WAN)
ip address 200.1.1.1 255.255.255.0
ip nat outside

ip nat inside source static 10.1.1.2 200.1.1.2

72
Q

What command creates a static NAT mapping?

A

ip nat inside source static {inside-local} {inside-global}

73
Q

Are static NAT entries removed from the NAT table after timeouts?

A

No

74
Q

How do you show information about NAT translations?

A

show ip nat translations

75
Q

How do you show NAT statistics?

A

show ip nat statistics

76
Q

True/False: You must specify inside and outside interfaces in both static and dynamic NAT

A

True

77
Q

How does Dynamic NAT identify which inside local addresses need to have their address translated?

A

ACLs

78
Q

What steps need to be taken to configure Dynamic NAT?

A
  1. Identify and mark inside NAT interfaces
  2. Identify and mark outside NAT interfaces
  3. Create ACL to match packets inbound to interface for which NAT should be performed
  4. Create NAT pool for inside global mapping outlining address range
  5. Tell NAT to use the pool and specify the ACL list
79
Q

What command makes a pool of addresses for Dynamic NAT to use?

A

ip nat pool TestPool 200.1.1.1 200.1.1.2 netmask 255.255.255.252

80
Q

How do you enable Dynamic NAT and tell it to use the ACL and pool?

A

ip nat inside source list 1 pool TestPool

81
Q

What does the First “Misses” counter represent in the output of show ip nat statistics?

A

The number of times a new packet arrives and needs a NAT entry and doesn’t find one, at which point Dynamic NAT builds an entry

82
Q

What does the Second “Misses” counter represent in the output of show ip nat statistics?

A

The number of misses in the pool. This occurs when dynamic NAT tries to allocate a new NAT table entry and finds no available addresses and the packet cannot be translated

83
Q

How do you show debug info for NAT?

A

debug ip nat

84
Q

What two variations of PAT are there?

A
  • One that uses a pool of inside global addresses

- One that uses just one inside global IP

85
Q

How do you configure PAT if you need a pool of addresses?

A

The same as Dynamic NAT but adding the overload keyword to the end of the ip nat inside source list command

ip nat pool TestPool 178.90.0.1 178.90.0.2 netmask 255.255.255.252
ip nat inside source list 1 pool TestPool overload

86
Q

How do you configure PAT to just use a single Inside Global address?

A

Mark interfaces as inside or outside then:

ip nat inside source list 1 interface G1/0 overload

87
Q

When configuring Static NAT using the ip nat inside source static command which address comes first?

A

Inside Local then the Inside Global

88
Q

What are some common areas to check when troubleshooting NAT?

A
  • Check ACLs
  • Check Pool has enough addresses
  • Inside and Outside interfaces