Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CCNP > Architecture II (FHRP's, SD-Access, SD-WAN) > Flashcards

Architecture II (FHRP's, SD-Access, SD-WAN) Flashcards

1
Q

FHRP

A

First Hop Redundancy Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where does the Layer 3 boundary take place while using an FHRP protocol?

A

Access Layer - Access Layer Switches can use a directly connected layer 3 switch as the default gateway. The connected layer 3 switch can use dynamic routing protocols to provide redundancy and load sharing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

FHRP and Access layer Switching (as opposed to routing)

A

Access Layer Switches must therefore use a default gateway that is NOT directly connected. If access to the default gateway is disrupted, the layer 2 (access-layer-switches) will not have connectivity outside of their own VLAN.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What do FHRP’s provide?

A

FHRPs provide a mechanism for Layer 3 gateway redundancy and load sharing for access layer devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the three FHRPs?

A

HSRP (Hot Standby Router Protocol), VRRP (Virtual Router Redundancy Protocol) and GLBP (Gateway Load Balancing Protocol)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which protocols are Cisco-proprietary?

A

GLBP and HSRP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

HSRP - facts and figures

A

HSRP gateways share a virtual MAC and virtual IP address - each group contains one active router and one standby router. Only the active router responds to ARP requests and forwards traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the group numbers and priority numbers for HSRP? Hello and Hold Timer

A

Priority (0-255 highest priority wins), 0-4095 for group numbers. Hello Timer - 3 seconds, Hold Timer - 10 seconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the preempt command?

A

If the active router goes down and you have configured the preempt command, when the router comes back online, it will assume the active role due to the fact of having being configured with the preempt command.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Multicast IP for HSRP v1 and v2

A

224.0.0.2 for v1, 224.0.0.102 for v2.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the virtual MAC addresses for HSRP v1 and v2

A

0000.0c07.acxx v1, 0000.0c9f.fxxx

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

VRRP - Cisco or Industry Standard?

A

Industry Standard.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Facts and figures for VRRP

A

Master and Backup instead of active and standby. Priority 1-254, groups (only 256). It allows us to share the physical IP address of the master router, you can save an IP address (internet edge may be a beneficial space, fewer IP addresses /29)
- Master router has a physical IP, physical and virtual MAC. When the master goes down, the backup will inherit the .1 from the master and the virtual MAC as well.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the virtual MAC of VRRP?

A

0000.5e00.01xx

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Differences between HSRP and VRRP

A

In VRRP, preempt is enabled by default. Authentication is the same (open and md5), Multicast address is 224.0.0.18 for VRRP. v2 =IPv4 and v3=IPv6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

GLBP

A

Global Load Balancing Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the makeup of GLBP?

A

1 Active Virtual Gateway (AVG), Active Virtual Forwarder (AVF). Imagine you have four routers, the AVG assigns or pushes vMAC to each router. If a client (PC) sends an ARP request to the network, the AVG will send the ARP response which will contain a vMAC (1-4). It will use a different load balancing option for each client (PC).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are some Load Balancing Options for GLBP?

A

Weighted - if we take the same example, four routers, the middle two routers have different upstream circuits and can support 100 MB. The outside routers upstream circuits only support 10 MB. We can push twice as much traffic to routers in the middle.

  • Host Dependent: Client macaddress, in this option, the client will always get the same virtual mac address.

-RR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the multicast and vMAC for GLBP?

A

MCAST: 224.0.0.102, vMAC: 0007.B40x.xxyy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is in each GLBP group?

A

AVG, 4 AVFs; the remaining routers becomes secondary virtual forwarders (SVF). If the AVG fails, the AVF with the next highest priority which is referred to as the standby virtual gateway (SVG) will take over for the AVG.

21
Q

High Availability - name the four

A

RPR (Route-processor redundancy), RPR+ (RPR plus), Stateful switchover (SSO) and SSO with nonstop forwarding (NSF)

22
Q

What does SD-Access provide? (5)

A

Network automation, segmentation, analytics, identity services and policy enforcement

23
Q

What are the layers within SD-Access

A

Management, Physical, Controller and Network Layer

24
Q

What is SD-Access

A

SD-Access helps to simplify, standardize and secure networks by providing automation, policy enforcement, etc. SD-Access consists of a Cisco campus fabric solution that is managed by a Cisco Digital Network Architecture (DNA) controller.

25
Q

What is the Management Layer

A

The management layer consists of the Cisco DNA Center tools that can be used by administrators to manage the network.

26
Q

What are the four primary workflows for DNA Center Applications?

A

Cisco DNA Design, Policy, Provision and Assurance

27
Q

What is the controller layer

A

The controller layer provides the two systems that are used by the management layer: Cisco DNA Center and Cisco ISE. Cisco DNA Center contains two subsystems that operate the controller layer

28
Q

What are the two sub-systems that operate the controller layer

A

NCP and NDP (Cisco Network Control Platform) and (Cisco Data Platform)

29
Q

What is NCP, and why is it important in automation?

A

Provides the underlay and fabric automation for the network layer and physical layer. API’s facilitate the automation of management tasks by enabling the controller to communicate with applications rather than relying on an administrator to intervene. NCP configures network devices by using a southbound API such as NETCONF. NCP communicates status information to the management plane by using a northbound API such as REST.

30
Q

What is NDP, and why is it important in automation?

A

NDP collects data from multiple sources, such as NetFlow and Switched Port Analyzer (SPAN).

31
Q

What does Cisco ISE provide (controller Layer)

A

provides NAC and 802.1x authentication, MAB (MAC authentication bypass), and Web Authentication (WebAuth)

32
Q

Describe the network layer in automation

A

Network layer consists of underlay and overlay network. The underlay and overlay are considered the SDN fabric.

33
Q

Underlay Network - details

A

Includes devices and protocols that comprise the physical network and establish IP connectivity. Includes protocols such as IS-IS, OSPF and EIGRP. Includes devices that physically create the network, routers and switches.

34
Q

Overlay Network - details

A

Logical network.
- Data and Control plane communication takes place in the overlay network
- Common overlay network protocols include VXLAN, VRF, NVGRE, OTV and mVPN

35
Q

What is SDN Fabric and why is it important to underlay and overlay network?

A

The combination of the two (underlay and overlay) and all the components that are used to communicate back and forth.
- Consists of the following planes: Control, Data, Policy and Management plane.

36
Q

Provide examples of the following planes: Control, Data, policy and management

A

Control : LISP
Data: VXLAN
Policy: Cisco TrustSec
Management Plane: Cisco DNA center

37
Q

Control Plane: LISP

A

ETR: Egress Tunnel Router de-encapsulates LISP packets from EIDs that reside outside the LISP site but have destinations that lie inside the LISP site.
ITR: Ingress Tunnel Router - encapsulates IP packets from EIDs that have destinations that lie outside the LISP site.
MS: Mapping Servers
MR: Map resolvers
EID(endpoint identifiers): assigned to hosts
RLOC(Routing Locators): are assigned to routers
HTDB(Host Tracking Database): LISP manages these mappings in the host tracking database. The HTDB is populated by the LISP Map-Server (MS), and queries to the HTDB are resolved by the LISP Map-Resolver (MR) Service.

38
Q

Data Plane: VXLAN

A

Layer 2 Tunneling mechanism - overlaying a Layer 2 mechanism on top of a layer 3 network.
- Data plane frames are encapsulated within the User Datagram Protocol (UDP), thereby enabling those packets to be transported over any IP-based underlay infrastructure.
- Cisco VLANs are limited to 4,094, whereas VXLANs allow the creation of 16 million segments.
- includes Security Group Tag (SGT), which is used by Cisco TrustSec

39
Q

Policy: Cisco TrustSEC

A

When a device connects to the network, it is assigned to an associated security group, which is represented by an SGT.

40
Q

Management Plane: Cisco DNA Center

A

Centralized controller with GUI-based administration.

41
Q

Describe the physical Layer

A

Consists of Cisco Routers, switches, wireless devices and controllers.

42
Q

Roles of devices in the Physical Layer (SD-Access)

A

Control Plane Node, Fabric Border Node, Fabric Edge Node, Intermediate Node, WLC Node

43
Q

Explain the control plane node

A

A control plane node manages the HTDB, which is used to map EIDs to RLOCs.

44
Q

Explain the fabric edge node

A

Most of the SDA Fabric will consist of fabric border nodes. Connected to endpoint devices clients (PC’s), AP’s

45
Q

Explain the fabric border node

A

VXLAN is an example, send layer 2 information over a tunnel. Not connecting to clients, connecting to the rest of the network.

46
Q

Explain the fabric control plane node

A

Usually a router, LISP control plane element. LISP tells the switches in the environment, where to send the traffic from different clients. Think control plane and data plane separation.

47
Q

Explain the relationship between CP and DP in traditional architecture

A

A switch has both CP and a DP. Two different level of operations - CP handles routing protocol (OSPF), MAC addresses, exchange of LSA’s. DP sends traffic to DP on another switch - sends packets. looks up incoming information in the CP before sending it off.

48
Q

Explain SD-WLC (Wireless Lan Controller)

A

CCNP (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions