CCIE Flashcards

Memorize CCIE RS Commands

1
Q

conform-action [set-prec-transmit $int] [transmit]

exceed-action [set-dscp-transmit $int]

violate-action [drop]

A

Three actions can be done when configuring a QoS policer and also actions such as marking can be linked to eaech of these actions. Mention them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Configures the switch to automatically recover from a err-disable condition due to a specific reason in the specified time.

A

err-disable recovery cause $cause

err-disable recovery interval $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Sets logs or debugs timestamps with the desired specified time format.

A

service timestamps log/debug uptime/datetime [msec/year]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

A route-map matches the originator of a received

prefix.

A

match ip route-source $ACL/%PrefList

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Permit an IGMP enabled interface to permit mcast hosts to join ONLY permitted mcast groups or specific S,G (extended ACLs)

A

ip igmp access-group $ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Selectively manipulate imported or exported NLRIs in order to get installed (or not) into a certain RIB.

A

export map $RMAP / import map $RMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Configures OSPF security as SHA-256 (Highest security encryption)

A

area $int authentication key-chain $string

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

A BGP prefix received will be installed from the specified neighbor even if its own AS number is included in the AS_PATH of that prefix.

A

neighbor x.x.x.x allowas-in

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Configures a RIP enabled interface to send or receive specific RIP version packets.

A

ip rip send/receive version 1/2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Defines AS numbers that are to be considered confederation peerings.

A

bgp confederation peers $AS1 $AS2 $ASn…

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Configures a police rate percent based and burst value

A

police rate percent % burst $ms

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Enables CDP globally or in the interface, and configured CDP timers.

A

cdp enable/run

cdp timer $int

cdp holdtime $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Sets the router as an Auto-RP RP candidate for specified groups.

A

ip pim send-rp announce $if scope $int group-list $ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Causes OSPF to form an adjacency with the specified peer but NOT advertise any prefix to it.

A

neighbor x.x.x.x database-filter all out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Sets the file system that will be used by the router to get the files requested by its HTTP clients.

A

ip http path $fs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Configures NAT to be applied to traffic ingressing a specific VRF interface.

A

ip nat inside source list $ACL interface $if [vrf $IngressVRF] [overload]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

BGP TCP keepalive interval and timeout configuration.

A

bgp timers $Keepalives $Hold-time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Configures a vrf ospf instance to set a specific domain id when its prefixes are redistributed into MP-BGP.

A

domain-id x.x.x.x

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Sets the maximum number of active HTTP connections in this router.

A

ip http max-connections $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Sets the AD for inter, intra or external OSPF prefixes.

A

distance ospf inter/intra/external $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Prune the specified VLANs from the trunk port.

A

switchport trunk pruning vlan $int….

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

{BGP} Advertises a set of prefixes to a specific neighbor if a route or a set of routes exist or not exist.

A

neighbor x.x.x.x advertise-map $RMAP exist-map/non-exist-map $RMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Configures a NAT rule to translate a whole network as another network space as in 1-1 translation

A

ip nat inside source static network $inLocal $inGlobal /xy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Configures the router to authenticate HTTP connections with the local user database.

A

ip http authentication local

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Causes the potential OSPF adjacencies to ignore the MTU value as compatibility check.

A

ip ospf mtu-ignore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Configures an EIGRP stub router to not send any route to its EIGRP peers and only receive EIGRP prefixes from them

A

eigrp stub receive-only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Enables HTTP or HTTPS service on the router

A

ip http server / ip http secure-server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Configures the router to display the AS:NN format for prefix communities.

A

ip bgp-community new-format

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Sets a NAT IP Addresses pool

A

ip nat pool $string $FirstIP $LastIP prefix-length $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Enables the router to send communities to the BGP neighbor.

A

neighbor x.x.x.x send-community both

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

A switchport will passively wait to negotiate the trunk encapsulation with its neighbor.

A

switchport trunk encapsulation negotiate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Configures dynamic BGP. It will listen for peers with parameters as defined by the specified peer group.

A

bgp listen range $PrefixRange peer-group $name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Sets a syslog server where traps are to be sent. Also, the protocol and destination port number can be defined for this communication.

A

logging host $IPadd [transport tcp/udp] [port $int]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Signals the NSSA ABR to always translate type7 prefixes to type5 to the backbone network.

A

area $int nssa translate type7 always

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Causes BGP best path selection process to always compare MED even if AS Path attribute is different among the competing prefixes.

A

bgp always-compare-med

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Sets the Unique Local Address (ULA) to an interface.

A

ipv6 address FC00:x.x.x.x::/64

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

{BGP} Causes BGP session with an external peer to NOT be resetted in case the direct link to this peer goes down.

A

no bgp fast-external-fallover

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Sets EIGRP’s weight values

A

metric weight $arb $BW 0 $Delay 0 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Configures all DNS parameters to function as DNS server, function as DNS client or respond to DNS queries when DNS server is not reachable.

A

ip dns server

ip domain-lookup

ip name-server /$IPadd

ip dns spoofing $IPadd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Configures the interface to be used as source for all NTP communication.

A

ntp source $if

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Modifies an aggregate prefix attribute parameters.

A

aggregate-address x.x.x.x/y attribute-map $RMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

NHRP CONFIGURATION

A

ip nhrp network-id $int

ip nhrp authentication $string

ip nhrp nhs $Priv

ip nhrp map $Priv $NBMA

ip nhrp map multicast $NBMA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Causes IPv6 redistribution to include connected prefixes.

A

redistribute $RoutingProtocol include-connected [$options]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

BGP lowest RID is best.

A

In iBGP, which is better lower or higher RID for best path tiebreaker. What is used by eBGP instead of this condition?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Statically defines the RP address for all or a specific set of groups.

A

ip pim rp-address x.x.x.x [$ACL] [override]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

{BGP} Originates a default route using the regular advertisement method.

A

network 0.0.0.0 mask 0.0.0.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Configures the router as a ntp time source and its stratum number.

A

ntp master $stratum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Configures a route-map to match a prefix in the RIB or the originator of a prefix.

A

match ip address prefix $Prefix/$ACL

match ip route-source prefix $Prefix/$ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Configures the best possible bridge prioirity for the switch.

A

spanning-tree vlan $vlan priority 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Permits packets with destination address as the subnet network address to be processed.

A

ip directed-broadcast

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Configures the time the router will delay the removal of a prefix from whch its next-hop got lost as reported by the underlying IGP.

A

bgp next-hop trigger delay $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Causes EIGRP to authenticate using SHA-256 encryption over the interface.

A

authentication mode hmac-sha-256 $password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Both commands are needed to enable RIPng in an interface.

A

ipv6 router rip $name

ipv6 rip $name enable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Disables split horizon in an EIGRPv3 enabled interface

A

no ipv6 split-horizon eigrp $AS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

ipv6 mld join-group FF3x::/96 source-list $ACL

A

Causes an IPv6 enabled interface to join a specific S,G SSM group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Configures the port to detect unidirectional links and send a warning message or shutdown the port.

A

udld port [aggresive]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

{BGP} Suppresses only specific prefixes belonging to the aggregate route.

A

aggregate-address x.x.x.x/y supress-map $RMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Limits the logging of messages to the syslog servers to the specified level.

A

logging trap $level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Causes the destination SPAN port to accept ingress frames and forward them based on the specified VLAN.

A

monitor-session $int destination interface $if ingress encapsulation dot1q vlan $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Sets the port which will be used by the router to listen for incoming HTTP connections.

A

ip http port $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

WRED will mark packets exceeding min threshold with ECN bit instead of dropping it.

A

random-detect ecn

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Advertises a summary address in a RIPng enabled interface.

A

ipv6 rip $name summary-address x.x.x.x/y

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Sets AD for prefixes received by RIP from the specified peers.

A

distance $int $GWAddress $ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Configures the fast convergence features for STP in the switch.

A

spanning-tree uplinkfast/backbonefast

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Setsthe cost used for the default route sent by an OSPF ABR when running totally stub config

A

area $int default-cost $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Causes a P2P link to avoid the generation of constant hello packets and paranoid flooding.

A

ip ospf demand-circuit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Configures an AS_PATH access list.

A

ip as-path access-list $int permit/deny $regex

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Statically configures the RP which will be used for Bidirectional PIM for specified groups.

A

ip pim rp-address x.x.x.x $ACL bidir

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Sets a community to a BGP prefix used to avoid AS border routers to advertise this prefix out of the AS.

A

set community no-export

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Sets SOO feature for EIGRP prefixes advertiesed and received by the MPLS network. Used as a loop prevention mechanism.

A

ip vrf sitemap $PMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Advertises (or not) a specific OSPF external aggregated prefix instead of the individual most specific prefixes.

A

summary-address x.x.x.x/y [tag/not-advertise]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

ISATAP address formatting.

A

ipv6 address WWWW:XXXX:YYYY:ZZZZ:0:5EFE:32bits_ipv4_hex_address/64

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

Configures the router as a TFTP server and which hosts are permitted to access it.

A

tftp-server $fs $ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

Configures the maximum rate an access-list can log hits in pps or per number of hits

A

ip access-list log-update threshold $int/pkts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Configures the router to get prefixes from spoke routers known via CDP.

A

router odr

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

Instructs EIGRP to not accept EIGRP updates with a hop count higher than the one scpecified.

A

metric maximum-hops $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

Configures the software clock to synchronize a peer or to be synchronized by a peer.

A

ntp peer $IPadd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

Configures OSPF timers for values less than 1 for fast convergence time

A

ip ospf dead-interval minimal hello-multiplier $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

Avoids sending link state changes as a trap to snmp server(s).

A

no snmp trap link-states

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

Configures DSCP based WRED in a class based queue

A

random-detect dscp-based

random-detect dscp $DSCP $minT $MaxT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

Configures an NTP client to synchronize time with the specified server and using the specified key.

A

ntp server $IPadd key $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

Causes to stop the default delay used by BGP to import NLRIs to the proper VRFs.

A

import path selection all

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

Sets a snmp-server to connect via SNMP and specifies SNMP parameters.

A

snmp-server host $IPadd [vrf $name] [traps] $community [version $1/2c/3]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

Causes the router to send RA messages in the specified time in seconds or msecs.

A

ipv6 nd ra interval $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

Matches specific packet flows in a class-map based on an ACL.

A

match access-group [name] $ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

Adds a PBR policy for local originated traffic.

A

ip local policy route-map $RMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

Sets a distribute list in the router based on a route-map match.

A

distribute-list route-map in/out interface $if

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

Sets a community list for community attribute manipulation.

A

ip community-list [standard/extended] $int [permit/deny] $regex

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

Will cause the mrouter to withdraw the IGMP group as soon as an IGMP leave is received from a member of the specified group(s).

A

ip igmp immediate-leave group-list $ACL (Global/Interface)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

{BGP} Performs prefix filtering based on an AS_PATH ACL match for ingress or egress direction.

A

neighbor x.x.x.x filter-list $AS_PATH ACL in/out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

Causes an IPv6 enabled interface to join a specific MLD group.

A

ipv6 mld join-group FF02::x

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

Will move the port to err-disable condition if the amount of specified type of traffic exceeds the specified threshold.

A

storm-control unicast/broadcast/multicast $val

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

Configures the route-map to set bgp dampening values.

A

set dampening $halflife $reuse $supressval $maxsupresstime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

Sets the router as an Auto-RP multicast announcer.

A

ip pim send-rp-discovery $if scope $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

A router will unicast forward the IGMP reports/leaves received in the interface to the specified IP address.

A

ip igmp helper-address $IPadd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

Sets the unique global address to an interface.

A

ipv6 address 2001::/3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

Sets the maximum number limit of AS numbers in the AS_PATH attribute that a prefix received must have in order to be processed.

A

bgp maxas-limit $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

Sets RIB scale value for EIGRP named mode

A

metric rib-scale $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

Configures a NAT rule, where packets hitting the specified interface are sent to the specified inside local address.

A

ip nat inside source static $insideLocal interface $if

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

Sets the cluster ID for Cluster Path when the router advertises a prefix to its RR client.

A

bg cluster-id x.x.x.x

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

Sets the port which will be used by the router to listen for incoming HTTPS connections.

A

ip http secure-port $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

Stops the automatic BGPv4 session to be automatically established if a peering through another AFI is desired.

A

np bgp default ipv4-unicast

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

Configures the router to CEF load balance BGP ECMPs based on interfaces bandwidth.

A

bgp dmzlink-bw

neighbor x.x.x.x dmzlink-bw

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

Causes the switch to configure portfast in all the access-ports.

A

spanning-tree portfast default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

*** VRRP Configuration ***

A

vrrp $int ip $IPadd

vrrp $int priority $int

vrrp $int timers advertise $int

vrrp $int authentication text/md5 $string

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
108
Q

Sets the maximum number of LSAs an OSPF process will accept.

A

max-lsa $int [threshold $int] [warning-only]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
109
Q

Configures an HSRP group to be able to use its own burned in address as group address

A

standby use-bia

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
110
Q

Enables the router to use bidirectional PIM.

A

ip pim bidir-enable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
111
Q

Enables the generation of keepalive packets on idle outgoing network connections.

A

service tcp-keepalives in/out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
112
Q

An alternative to delete all matched prefixes communities, other than comm-list delete.

A

set community none

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
113
Q

*** DHCP specific host address assignment ***

A
  • Server -

ip dhcp pool $string

host $network $mask

client-identifier %hexStr

lease $days

  • Client -

ip dhcp client client-id ascii $str

ip address dhcp

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
114
Q

Limit the amount of messages per second that can be logged for specified level.

A

logging rate-limit [console] [$levels/all] $int

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
115
Q

Sets the tunnel encapsulation as a VTI (Mcast capable IPsec). Note: VTIs automatically adjust their MTUs, only TCP MSS should be adjusted.

A

tunnel mode ipsec ipv4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
116
Q

Configures an ISAKMP pre-shared key authentication peering to a peer known over a VRF.

A

crypto keyring $name vrf $VRF

pre-shared address $peer key $string

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
117
Q

Configures an offset-list for prefixes received via RIP.

A

offset-list $ACL in/out $offset $if

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
118
Q

Configures rotary TCP flows NAT load balancing. Why is IP aliasing important here?

A

ip nat pool $string prefix-length $int type rotary

address $FirstIPadd LastIPadd

ip nat inside destination $ACL pool $string

ip alias x.x.x.x

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
119
Q

Causes a router interface to join a specified MLD group.

A

ipv6 mld join-group FF08::/16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
120
Q

Disable paranoid flooding to occur in the interface.

A

ip ospf flood-reduction

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
121
Q

Permits an EIGRP stub router to advertise specified non-stub prefixes to its peers.

A

eigrp stub $options leak-map $RMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
122
Q

*** PE ***

ipv6 dhcp pool $name1

> prefix-delegation pool $name2

ipv6 local pool $name2 $PrefixLength $Lifetime

interface $ifToCE

ipv6 dhcp server $name1

*** CE ***

interface $ifToPE

ipv6 client pd $anyName3

interface $ifToClient

ipv6 address $Name3 ::$host/xy

A

Configures IPv6 prefix delegation feature in CE and PE routers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
123
Q

ABR filters OSPF received or sent prefixes from area to area.

A

area $int filter-list prefix $PrefixList in/out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
124
Q

crypto keyring $name vrf $VRF

pre-shared address $peer key $string

A

Configures an ISAKMP pre-shared key authentication peering to a peer known over a VRF.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
125
Q

Configures the 3 must have MST parameters in order for the switches to have the same BPDU hashing.

A

instance $int vlan $vlan-range

name $name

revision $revision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
126
Q

Sets OSPF MD5 authentication for peers discovered over this interface.

A

ip ospf authentication message-digest

ip ospf authentication message-digest-key $int md5 $string

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
127
Q

Configures the tunnel to classify and apply QoS actions to traffic before being GRE encapsulated.

A

qos pre-classify

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
128
Q

Replaces AS ID in OpenSent messages. With option to also replace AS_PATH attribute in the update messages or use both AS_PATHs, the original and the new one.

A

neighbor x.x.x.x local-as $newAS [no-prepend] [replace-as] [dual-as]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
129
Q

Causes the router to install a default route with next hop to the router used for autoconfig in the interface.

A

ipv6 address autoconfig default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
130
Q

Causes the NSSA ABR to supress the forwarding address from Type7 to Type5 translated prefixes.

A

area $int nssa translate type7 supress-fa

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
131
Q

Configures NBAR to match specific string in an web based traffic flow.

A

match protocol http url $regex

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
132
Q

Causes the interface prefix to not be advertised as RA to hosts.

A

ipv6 nd prefix $Prefix no-advertise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
133
Q

A route map matches the next hop address of prefixes to be redistributed

A

match ip next-hop prefix $Pref

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
134
Q

Sets statically the RPF interface for a given source address.

A

ip mroute $srcAddress $mask $NH/$if [AD]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
135
Q

Causes the NSSA ABR to redistribute the prefixes to the backbone area ONLY, these prefixes will not be injected over the NSSA interfaces.

A

area $int nssa no-redistribution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
136
Q

Will forward broadcast traffic (from permitted forward protocols configured) as mcast traffic using the specified mcast group address.

A

ip multicast-helper-map broadcast $McastGroup $ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
137
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
138
Q

{BGP} Selects which specific prefixes should be affected by the dampening parameters.

A

bgp dampening route-map $RMAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
139
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
140
Q

Causes BGP to advertise summarized prefixes in regular advertisements (locally originated) and when redistributing.

A

{BGP} auto-summary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
141
Q

Causes the switch to configure BPDU guard or BPDU filter in all interfaces that have portfast configured.

A

spanning-tree portfast bpduguard/bpdufilter default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
142
Q

Causes the router to accept only Join messages for the specified RP and only for the specified mcast groups.

A

ip pim accept-rp $RP $ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
143
Q

*** CHAP Configuration ***

A

username $PEER_HOSTNAME password $ARB1

interface serial x/x

ppp authentication chap

*** Password MUST match in both peer’s login DB ***

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
144
Q

Sets a router as an MSDP peer.

A

ip msdp peer x.x.x.x [remote-as $AS] [connection-source $if] [originator-id x.x.x.x]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
145
Q

Configures Dynamic NAT based on an IP Address pool.

A

ip nat inside source list $ACL pool $string

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
146
Q

The interface will directly filter all auto-rp packets being received or to be forwarded.

A

ip multicast boundary filter-autorp

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
147
Q

{BGP} Performs prefix filtering based on a Route-Map match for ingress or egress direction.

A

neighbor x.x.x.x route-map $RMAP in/out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
148
Q

Causes the switchport to negotiate the voice VLAN marking with the phone based on the COS value.

A

switchport voice vlan dot1p

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
149
Q

Causes a GRE tunnel to use IPv6 signaling to set the tunneling encapsulation. IPv6 address encapsulation.

A

tunnel mode ipv6/ipv6ip

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
150
Q

{Set in a route-map} Adds specified communities to a prefix.

A

set community $AS:NN additive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
151
Q

Sets the source interface for telnet communication.

A

ip telnet source-interface $if

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
152
Q

Next Hop trigger events as notified by the IGP are delayed by the specified time before withdrawing a BGP prefix from RIB.

A

bgp nexthop trigger delay $int

153
Q

Configures a static PAT rule in the router. An option will cause the router to not install an alias for non directly assigned IP addres.

A

ip nat inside source static tcp/udp $InsideLocal $port $InsideGlobal $port [no-alias]

154
Q

Determines a switchport willingness to become a trunk or not become a trunk.

A

switchport mode dynamic auto/desirable

155
Q

Filters hosts that are permitted to access this router as a HTTP server.

A

ip http access-class $ACL

156
Q

Enables an interface to register all packets/bytes received in the interface classified by protocol

A

ip nbar protocol-discovery

157
Q

{BGP} Advertises a default route to a specific peer.

A

neighbor x.x.x.x default-information-originate [route-map $RMAP]

158
Q
A
159
Q

Enables the switch to send SNMP traps when there is a MAC address removed or added in the CAM.

A

snmp trap mac-notification change added/removed

160
Q

Originates a Type7 default route for the NSSA area.

A

area $int nssa default-information-originate [metric $int]

161
Q

Creates a reversible NAT rule where reversed entries are programmed so outside flows can reach inside hosts.

A

ip nat inside source route-map $RMAP pool $string reversible

162
Q

Sets the global AS for a router inside a BGP confederation. This is the AS that the eBGP peers will use as remote-AS configuration.

A

bgp confederation identifier $GlobalAS

163
Q

Disables split horizon in a RIPng enabled interface.

A

no split-horizon

164
Q

Sets BGP peer SOO value.

A

neighbor x.x.x.x soo $value

165
Q

Will forward a mcast packet as a broadcast directed packet or a subnet network address.

A

ip multicast helper-map $mcastGroup $DirectedBroadcastIP $ACL

166
Q

*** CONFIGURES IGMP PROFILES. THIS IS THE SAME AS IGMP ACCESS-GROUP BUT FOR SWITCHES ***

A

ip igmp profile $int

permit

range $RangeMin $RangeMax

167
Q

Configures a non CAR policer and all its parameters

A

police cir $int bc $int be $int

168
Q

Configures an IPv6 sumamry address in an EIGRPv3 enabled interface.

A

ipv6 summary-address eigrp $AS

169
Q

Sets the next-hop address and reliably verifies if it is reachable based on an IP SLA status or if the neighbor exists via CDP.

A

set ip next-hop verify-availability [x.x.x.x $int track $int]

170
Q

Establishes a peer’s maximum prefixes limit to be received and the actions to take if a threshold under this limit is reached.

A

neighbor x.x.x.x maximum-prefix $int $threshold [warning/restart $rate]

171
Q

Sets the maximum time an IGMP hosts should respond to a general query.

A

ip igmp query-max-response-time $int

172
Q

Counts every syslog message and time-stamps, the occurrence of each message.

A

logging count

173
Q

Sets a password for the VTP domain. This password cannot be seen in vlan.dat or in the running configuration.

A

vtp password $string hidden

174
Q

Configures an interface to run microsoft chap authentication and encrypt packets based in this protocol too

A

ppp authentication ms-chapp[-v2]

ppp encrypt mppe $int [required]

175
Q

PIM BSR messages are NOT processed or advertised by the interface.

A

pi pim bsr-border

176
Q

Applies specified peer-group configuration to a BGP neighbor.

A

neighbor x.x.x.x peer-group $name

177
Q

Permits an inside local address to be represented by multiple inside global addresses.

A

ip nat inside source static $InsideLocal $InsideGlobal extendable

178
Q

Initializes a BGP peer group.

A

neighbor $name peer-group

179
Q

Causes the router to advertise the BGP aggregate prefix as soon as it is generated, without delay.

A

bgp aggregate timer 0

180
Q
A
181
Q

private-vlan primary

private-vlan association [add/remove] $vlan

A

Configures the primary vlan.

182
Q

Sets a protocol to be forwarded by interface helper-address parameters.

A

ip forward-protocol $protocol/$protocoNumber

183
Q

BGP advertises an aggregate prefix without advertising the individual more specific prefixes.

A

aggregate-address x.x.x.x/y summary-only

184
Q

Sets the source interface address used in packets sent to a syslog server.

A

logging source-interface $if

185
Q

Reference BW / Interface BW

A

INTERFACE OSPF COST

186
Q

Configures the router to accept time sync from sources sending a trsuted specified key.

A

ntp authenticate

ntp authentication-key $Key# md5 $string

ntp trusted-key $Key#

187
Q

Sets the HSRP mode to be able to use a group value higher than 255

A

standby version 2

188
Q

Sets the router as an IPv6 BSR candidate.

A

ipv6 pim bsr candidate bsr $IPadd [scope $int] [$int] [priority $int]

189
Q

{BGP} Enables BGP event based events to withdraw BGP prefixes as soon as the next hop for these gets unreachable as informed by the IGP.

A

bgp nexthop trigger enable

190
Q

Configures a static mac address entry in the CAM.

A

mac address-trable static $mac drop/$if

191
Q

Prevents unauthorized sources from registering with the RP. An RP will ONLY accept register messages from the specified sources.

A

ip pim accept-register list $ExtACL

192
Q

Configures a tracking object based on an existent IPSLA.

A

track $int ip sla $int reachability/state

193
Q

Sets router’s SNMP community and specifies access privileges. You can also spcifies which snmp servers are allowed to connect with this router.

A

snmp-server community $string ro/rw $ACL

194
Q

Causes LDP to stop advertising labels for known prefixes.

A

no mpls ldp advertise-labels

195
Q

Defines a static cost to a specific OSPF neighbor.

A

neighbor x.x.x.x cost y

196
Q

> ISAKMP policy

> ISAKMP pre-shared key

> IPSEC transform set

crypto-map $name [local-address $if]

crypto-map $name ipsec-isakmp

set transform-set $SET

set peer $peer

match address $ACL

A

IPSEC CRYPTO MAP CONFIGURATION

197
Q

Sets MLD general query interval time.

A

ipv6 mld query-interval $int

198
Q

Causes all prefixes received from a RIPng enabled interface to be added a metric value.

A

ipv6 rip $name metric-offset $int

199
Q

Configures an ACL to provide detailed information of an entry being hit

A

access-list $int …………. log-input

200
Q

Bypass OSPF default behavior when a virtual link is a non best path to a prefix and thus non bakcbone path is used to reach it.

A

no capability transit

201
Q

Causes the OSPF router to NOT install a discard route when an aggregate prefix is advertised.

A

no discard-route [internal/external] [AD]

202
Q
A
203
Q

Sets an active CPU process monitoring at specified interval and for the specified threshold.

A

process cpu threshold type process/interrupt/total rising $int interval $int

204
Q

Configures an interface to verify that unicast traffic is received by the expected interface

A

ip verify unicast source reachable-via rx/any [$ACL] [allow-default]

205
Q

Both commands are used to set MD5 authentication in an EIGRPv3 enabled interface.

A

ipv6 authentication mode eigrp $AS md5

ipv6 authentication key-chain eigrp $AS $Key-Chain

206
Q

{BGP} Monitors the IGP route to the peer, if this dissapears the session with this peer goes down. The specific route to monitor can also be selected to avoid issues when there is a default route.

A

neighbor x.x.x.x fall-over [route-map $RMAP] [bfd single/multi]

207
Q

Sets the router as a BSR. The hash signals the BSR how to load balance the mcast groups among the available RP candidates.

A

ip pim bsr-candidate $if [$hash] [priority $int]

208
Q

Sets the maximum number of prefixes that can be redistributed into OSPF.

A

redistribute maximum-prefix $int [threshold %int] [warning-only]

209
Q

Specifies the mcast group range to use for PIM SSM traffic.

A

ip pim ssm [default/range $ACL]

210
Q
A
211
Q

**** HSRP Configurations ****

A

standby $int ip $IPadd

standby $int timers $hello $hold

standby $int preempt

standby $ mac-address $MACadd

standby $int priority $int

standby $int authentication text/md5 key-chain/key-string $string

standby $int track $int shutdown/decrement $int

212
Q

Avoid L3 link to use ICMP messages to report better next hop or destination not reachable.

A

no ip redirects

no ip unreachables

213
Q

Causes redistributed BGP prefixes into RIP to get advertised with original metric (as received by the ingress PE).

A

redistribute bgp $AS metric transparent

214
Q

Configures the size and level of logs saved in buffer.

A

logging buffered [$size] [$level]

215
Q

Might be used by RIP to advertise a default-route only through a specific interface.

A

set interface $if

216
Q

Sets a community to prefixes, these will not be advertised out of its confederation AS.

A

set community local-as

217
Q

Configures the mcast router to treat auto RP related signal groups with dense mode.

A

ip pim autorp listener

218
Q

Causes OSPF to form adjacencies through the interface but NOT advertise any prefix over it.

A

ip ospf database-filter all out

219
Q

Sets the link-local address of an interface.

A

ipv6 address FE80::/10 link-local

220
Q

Configures the port to be a NTP multicast source or to listen to NTP multicast messages.

A

ntp multicast $Group [client $Group]

221
Q

Configures private vlan port as a promiscuous port and maps primary to secondary VLANs.

A

switchport mode private-vlan promiscuous

private-vlan mapping $secondaryVLAN

222
Q

Enbles the switch to display a log in case there is a change of a MAC address in the CAM and defines an interval limit for these messages to be logged.

A

mac address-table notification change [interval $int]

223
Q

Sets metric and AD parameters to an EIGRP advertised summary-address.

A

summary-metric x.x.x.x/y $int distance $AD

224
Q

Causes OSPF to advertise LSA type 1 with the maximum metric until certain specific conditions are met, this in order to avoid blackholing scenarios or help in migration scenarios.

A

max-metric router-lsa [on-startup] [summary-lsa] [external-lsa] $int [wait-for-bgp]

225
Q

Causes AS_PATH attribute to be ignored in BGP’s best path selection process.

A

bgp bestpath as-path ignore

226
Q

Removes private AS number from the AS_PATH before advertising the prefix to the CE router.

A

neighbor x.x.x.x remove-private-as

227
Q

Sets the queue depth for CBWFQ queues.

A

queue-limit $int

228
Q

Sets the timeout time to wait for the active querier response before taking querier role.

A

ip igmp querier-timeout $int

229
Q

Causes the switch to detect unidirectional condition in all the fiber ports and send a warning message or shutdown the unidirectional link.

A

udld enable [aggressive]

230
Q

Configures a track which will aggregate some other tracks and will condition based on a boolean operation og these more specific track objects.

A

track $int list boolean and/or

231
Q

Specifies the vrf over which the tunnel destination endpoints are reachable. Tunnel control-traffic is carried over this VRF.

A

tunnel vrf $vrf

232
Q

Sets a vrf static route which will lookup the Next Hop over the global/default RIB.

A

ip route vrf $VRF x.x.x.x/y $NH global

233
Q

{BGP} Performs prefix filtering based on ACL match for ingress or egress direction.

A

neighbor x.x.x.x distribute-list $ACL in/out

234
Q

Defines the interface used as source for tftp communication.

A

ip tftp source-interface $int

235
Q

Will cause the OSPF router to ignore LSA type 6 advertisements.

A

ignore lsa mospf

236
Q

Set matched prefixes route-target community value.

A

set extcommunity rt $AS:NN [additive]

237
Q

{BGP} Originates a more specific prefix derived from an existent aggregate address.

A

bgp inject-map $RMAP exist-map $RMAP

238
Q

HSRP MAC ADDRESS

A

0000.0c07.acxx

239
Q

Sets OSPF text authentication to be used for peers discovered over this interface.

A

ip ospf authentication

ip ospf authentication-key $string

240
Q

Specifies the MIBs that are allowed to be accessed and applies it to a specific SNMP community.

A

snmp-server view $string $MIB included

snmp-server community $string view $string ro/rw

241
Q

Supresses sending RA messages in the interface.

A

ipv6 nd supress-ra

242
Q

Configures router RIP convergence timers.

A

timers basic $interval $timeout $holddown $flush

243
Q

Enables the interface to accept and process mcast packets but no PIM adjacency will occur over this interface.

A

ip pim passive

244
Q

Limits the number of mroute states globally or per interface (Maximum number of groups).

A

ip igmp limit $int (global/interface)

245
Q

In iBGP, which is better lower or higher RID for best path tiebreaker. What is used by eBGP instead of this condition?

A

BGP lowest RID is best.

246
Q

Causes the interface to stop forwarding or processing BSR packets.

A

ip pim bsr-border

247
Q

Configures rip to run over a specified VRF instance.

A

router rip

address-family ipv4 unicast vrf $name

248
Q

Configures a static ARP entry.

A

arp x.x.x.x $mac arpa $if

249
Q

Sets the tunnel to use 6to4 dynamic tunneling.

A

tunnel mode ipv6ip 6to4

250
Q

Sets the time EIGRP will wait for a prefix Reply before declaring it SIA.

A

timers active-time $time

251
Q
A
252
Q

Sets all the BPDU related timers for the switch.

A

spanning-tree vlan $vlan hello-time/forward-time/max-age $int

253
Q

{Set in route-map} Deletes matching communities of a prefix.

A

set comm-list $int delete

254
Q

Causes the swichport to move to err-disable state in case BPDU stop being received in the blocked port for the max-age time.

A

spanning-tree guard loop

255
Q

Limits the TFTP servers used via Simple Network Management Protocol (SNMP) controlled TFTP operations.

A

snmp-server tftp-server-list $ACL

256
Q

Configures a static NAT rule

A

ip nat inside source static $InsideLocal $InsideGlobal

257
Q

Configures MST port cost and priority in the interface.

A

spanning-tree mst $int cost $int

spanning-tree $int port-priority $int

258
Q

Configures a specific NTP peer or server to be reachable through a specified interface

A

ntp peer/server $IPadd source $if

259
Q

Configures an accessport as host port and maps it to a primary and secondayy vlan.

A

switchport mode private-vlan host

switchport private-vlan host-association $primary $secondary

260
Q

Enables the router to send syslog messages as SNMP traps.

A

snmp-server enable traps syslog

261
Q

Sets the router as a BSR candidate RP for the specified groups.

A

ip pim rp-candidate $if [group-list $ACL] [priority $int]

262
Q

Configured a QoS policer and defines all possible attributes

A

police rate $int bps [burst $bytes] [peak-rate $bps] [peak-burst $bytes]

263
Q

Enables mst and enters mst configuration mode.

A

spanning-tree mode mst

spanning-tree mst configuration

264
Q

Mroute states are created only for the permitted groups when an MLD report is received in the interface.

A

ipv6 mld access-group $ACL

265
Q
A
266
Q

Causes RIPv2 to bypass the peer in the same subnet check to accept routing updates.

A

no validate-update-source

267
Q

*** IRB configuration ***

A

bridge irb

!

interface $if

bridge-group $int

!

interface bvi $int

!

bridge $int protocol ieee

bridge $int route ip

268
Q

*** SNMPv3 configuration ***

A

snmp-server user $username $groupName v3 auth md5/sha $string priv 3des/aes $string

snmp-server group $groupName v3 auth read/write $view access $ACL

snmp-server host $IPadd traps version 3 priv $user

269
Q

Forces the LDP session to identify via password otherwise these do not get formed bidirectionally.

A

mpls ldp password required

270
Q

Booth commands are used to enable EIGRPv3 in an interface.

A

ipv6 router eigrp $AS

ipv6 eigrp $AS

271
Q

Inspects AutoRP packet and modifies reported mcast groups by mcast announcer

A

ip multicast boundary $ACL filter-autorp

272
Q

Three actions can be done when configuring a QoS policer and also actions such as marking can be linked to eaech of these actions. Mention them.

A

conform-action [set-prec-transmit $int] [transmit]

exceed-action [set-dscp-transmit $int]

violate-action [drop]

273
Q

Enables ECN capability in TCP local sessions.

A

ip tcp ecn

274
Q

Configures BGP to be able to use a Next hop IPv6 address even if BGP peers are defined as IPv4

A

bgp default ipv6-nexthop

275
Q

Configures the mapping agent to accept Auto RP messages only from the specified candidates and only for the specified groups.

A

ip pim rp-announce-filter rp $ACL group $ACL

276
Q

Causes the router’s RA messages to be considered valid for the specified amount of time.

A

ipv6 nd ra lifetime $Time

277
Q

BSR RP Candidate will advertise itself for bidirectional PIM for specified groups.

A

ip pim rp-candidate $if [group-list $ACL] bidir

278
Q

Enables IPv6 processing in the interface.

A

ipv6 enable

279
Q

Attributes for a BGP aggregate address are taken from the route-map matched prefixes.

A

aggregate-address x.x.x.x y.y.y.y as-set advertise-map $RMAP

280
Q

Permits loopback to loopback BGP adjacency between directly connected peers.

A

neighbor x.x.x.x disable-connected-check

281
Q

Creates a queue for class specified traffic and defines reserved bandwidth for it.

A

bandwidth $kbps [remaining/percent %]

282
Q

Sets the TOS field value for locally originated telnet traffic.

A

ip telnet tos $hex

283
Q

Configures a conditional static NATing rule

A

ip nat inside source static $insideLocal $InsideGlobal route-map $RMAP

284
Q

{BGP} Causes a flapping prefix to stop being advertised. Name the values name and its usage.

A

bgp dampening $Half-life $ReUseVal $SupressVal $MaxSuppressTime

285
Q

Advertises an aggregate prefix including the AS_SET attribute.

A

aggregate-address x.x.x.x/y as-set

286
Q

MD5 password added in OpenSent, a match with the peer data sent will permit the adjacency formation.

A

neighbor x.x.x.x password $PASSWORD

287
Q

Advertises a summary address in a RIP enabled interface.

A

ip summary-address rip x.x.x.x/y

288
Q

Sets the router as an IPv6 BSR RP candidate.

A

ipv6 pim bsr candidate rp $IPadd [group-list $ACL] [priority $int]

289
Q

*** Configures GLBP parameters ***

A

glbp $int ip $IPadd

glbp $int preempt

glbp $int priority $int

glbp $int authentication md5 key-string/key-chain $string

290
Q

Forces RIPv2 to send routing updates via broadcast through the interface.

A

ip rip v2-broadcast

291
Q

Sets BGP SOO extended community value for matched prefixes.

A

set extcommunity soo $AS:NN

292
Q

Specifies the limit for the number of log messages that may be queued for a remote system logging (syslog).

A

logging queue-limit trap $int

293
Q

Specifies the interface from which a SNMP trap should originate.

A

snmp-server source-interface traps $if

294
Q

Controls which hosts are permitted to synchronize the time with the router as a NTP server or permitted to peer with it.

A

ntp access-group peer/serve-only $ACL

295
Q

Will query for OSPF neighbor host names to display on OSPF show commands.

A

ip ospf name-lookup

296
Q

This type of port will cause frames received to NOT be forwarded through ports of this same type.

A

switchport protected

297
Q

Causes the switch to remove mgroup entry as soon as a leave is received in an interface.

A

ip igmp snooping vlan $int [immediate-leave]

298
Q

Enables OSPF authentication for the specified area.

A

area $int authentication [message-digest]

299
Q

Sets Router Advertisements interval

A

ipv6 nd ra-interval $int

300
Q

Sets the IGMP general query interval in seconds.

A

ip igmp query-interval $int

301
Q

Causes the VTPv3 server to become the primary server for STP or MST domains.

A

vtp primary vlan/mst

302
Q

Configures a private vlan as either community or isolated.

A

private-vlan [community/isolated]

303
Q

To hide IP address or host name information when a Telnet session is established.

A

ip telnet hidden addresses/hostnames

304
Q

Configures a static NAT rule to add a static route for the return packets

A

ip nat inside source static …. add-route

305
Q

Sets a PBR policy in the interface.

A

ip policy route-map $RMAP

306
Q

Causes the router to permanently assign a OID to the local interfaces.

A

snmp-server ifindex persist

307
Q

Sets the gre tunnel encapsulation as ISATAP.

A

tunnel mode ipv6ip isatap

308
Q

Supresses the display of sensitive information of Telnet connection messages.

A

ip telnet quiet

309
Q

Configures BFD parameters to be used over an specific interface.

A

bfd interval $hello-interval min $int multiplier $int

310
Q

> Sham link loopbacks MUST be known by iBGP *ONLY* (Filtered from OSPF)

> Sham links must be configured to point to peer sham link loopback, even if these learned via iBGP according to RIB

> The area defined in the sham link configuration is the area which will have its prefixes changed to intra area type.

A

SHAM LINKS FORMATION RULES

311
Q

Advertises a default route over a RIPng enabled interface. If a keyword is used, only a default route is originated and all other prefixes suppressed.

A

ipv6 rip $name default-information originate [only] [metric $int]

312
Q

Allow redistribution of iBGP into IGPs (dangerous). By default this is not possible, only eBGP prefixes get redistributed.

A

bgp redistribute-internal

313
Q

Causes the interface prefix to not be advertised through RA to hosts for use as autoconfig parameter.

A

ipv6 nd prefix $Prefix $ValidLifeTime $PreferredLifeTime [no-autoconfig]

314
Q

Establishes a password for LDP sessions with the specified neighbor.

A

mpls ldp neighbor x.x.x.x password $int $password

315
Q

Causes a directed broadcast to be forwarded using the specified address instead of normal broadcast destination address

A

ip broadcast-address x.x.x.x

316
Q

Configures a GRE tunnel with a backup interface. Reliably configures the tunnel to go down if rechability to the tunnel endpoint is lost.

A

backup interface $if

backup delay $KickInTime $KickOutTime

keepalives $Interval $RetriesBeforeTunnelDown

317
Q

Configured WFQ queueing method for default-queue

A

fair-queue

318
Q

Configures a precedence based WRED and also Max probability Discriminator 1/x

A

random-detect

random-detect precedence $int $min $max $MPD

319
Q

Forces the redistribution of OSPF Type-5 prefixes into BGP/IGP.

A

redistribute ospf $PID match external internal

320
Q

Disables any authentication over this OSPF interface.

A

ip ospf authentication null

321
Q

Makes unsolicited logging messages to appear after (not interrupt) solicited outputs.

A

logging synchronous

322
Q

Enables the router to send a trap to snmp server if a link goes down or up

A

snmp-server enable traps snmp linkdown/linkup

snmp trap link-status

323
Q

Applies an Ipv6 ACL in an interface.

A

ipv6 traffic-filter $name in/out

324
Q

*** PPPoE server configuration ***

A

bba-group pppoe global

virtual-template $intx

interface virtual-template $intx

mtus 1492

ip address x.x.x.x/y

peer default ip address dhcp-pool $string

ppp authentication chap/pap

interface ethernet x/x

pppoe enable group global

325
Q

Allows the software clock to be synchronized by a time server.

A

ntp server $IPadd

326
Q

Enables/disables RR client reflection of prefixes based on their cluster ID or affect all clients.

A

[no] bgp client-to-client reflection [all/cluster-id]

327
Q

Enable the router to send traps based in syslog messages

A

snmp-server enable traps syslog

328
Q

Configures the router BGP scanner interval.

A

bgp scan-time $int

329
Q

{BGP} Performs prefix filtering based on a Prefix List match for ingress or egress direction.

A

neighbor x.x.x.x prefix-list $PrefL in/out

330
Q

The OSPF router redistributes a default route for the OSPF entire domain.

A

default-information originate [metric $int] [metric-type $int] [route-map $RMAP] [always]

331
Q

Stores all prefixes before Loc-Adj-RIB in order to manipulate them without forcing the peer to send all BGP prefixes again by tearing down the BGP session.

A

neighbor x.x.x.x soft-reconfiguration inbound

332
Q

Causes an IPv6 enabled interface to join a specific S,G SSM group.

A

ipv6 mld join-group FF3x::/96 source-list $ACL

333
Q

Advertises a summary-address over an EIGRPv3 enabled interface.

A

ipv6 summary-address eigrp $AS x.x.x.x/y

334
Q

Causes the switchport to move to err-disable state in case a superior BPDU is received.

A

spanning-tree guard root

335
Q

Sets a shaping action for a class based queue in specific rate or percent rate

A

shape average $bps [percent %]

336
Q

Configures the router to use the maximum specified number of ECMPs for the specified BGP entries.

A

maximum-paths [ibgp/eibgp] $int

337
Q

Uses NBAR to match specific packet length

A

match packet length min x max y

338
Q

SHAM LINKS FORMATION RULES

A

> Sham link loopbacks MUST be known by BGP *ONLY*

> Sham links must be configured to point to peer sham link loopback

area 0 sham-link $SourceLoopback $DestinationLoopback

339
Q

Permits OSPF to override the D bit loop prevention behavior when receiving a prefix advertised by the MPLS network.

A

capability vrf-lite

340
Q

Configures a filter for prefixes received via RIP based on a list of prefixes and/or neighbors.

A

distribute-list prefix $PrefixList [gateway $ACL] in/out interface

341
Q

Causes prefixes without explicit MED attribute set to be set with the maximum possible metric instead of zero.

A

bgp bestpath med missing-as-worst

342
Q

Configures MD5 or plain text authentication for RIP enabled interface.

A

ip rip authentication mode md5/text

ip rip authentication key-chain $name

343
Q

Specifies the transport address for TCP sessions formed due to LDP peerings.

A

mpls ldp discovery transport-address {interface/$IPaddress}

344
Q

Configures the primary vlan.

A

private-vlan primary

private-vlan association [add/remove] $vlan

345
Q

Enables LDP in all OSPF enabled interfaces.

A

mpls ldp autoconfig

346
Q

Configures ORF to signal the peer to avoid the advertisement of specific prefixes.

A

neighbor x.x.x.x capability orf prefix -list send/receive/both

347
Q

Configures the router to be a multicast or broadcast NTP source and use the specified key in the NTP messages.

A

ntp broadcast/multicast key $int

348
Q

A BGP prefix received will not be installed in the RIB if it has traversed more hops than the specified in the configuration.

A

bgp neighbor x.x.x.x ttl-security hops $int

349
Q
A

match protocol icmp

350
Q

Causes a BGP router to advertise the specified eBGP prefix AD as 200. This also affectes own router’s AD for this prefix.

A

network x.x.x.x mask y.y.y.y backdoor

351
Q

Causes the eBGP prefix to be advertised with a metric of 200 to the IGP domain in order for the IGP routers to prefer the IGP metric for the same prefix.

A

network x.x.x.x backdoor

352
Q

Controls which prefixes are labeled and advertised to specified LDP peers.

A

mpls ldp advertise-labels for $ACL to $ACL

353
Q

*** PAP Authentication configuration ***

A

username $ARB1 password $ARB2

interface serial x/x

ppp authentication pap

ppp pap sent-username $ARB1 password $ARB2

*** Sent credentials MUST match with the a peer’s login DB entry ***

354
Q

Sets a class based queue as a LLQ in specific rate or percent rate

A

priority $kbps [percent $int]

355
Q

Causes the switch to immediately remove the interface from the forwarding interfaces from a group as soon as an IGMP leave message is received in the interface.

A

ip igmp snooping immediate-leave

356
Q

Enables visible sequence numbering of system logging messages.

A

service sequence-numbers

357
Q

Avoid PIM adjacencies with specified neighbors.

A

ip pim neighbor-filter $ACL

358
Q

Configures an interface as a NTP broadcast source or to listen to NTP broadcast messages.

A

ntp broadcast [client]

359
Q

Causes mcast groups without a valid RP to NOT fall back to dense mode and thus, be flooded.

A

no ip pim dm-fallback

360
Q

Configures EIGRP to log any neighbor status changes and also, rate limit the time the neighbor change status are reported.

A

eigrp log-neighbor-changes

eigrp log-neighbor-warnings $TimeInterval

361
Q
A
362
Q

Sets maximum hops value for accepted EIGRP prefixes in named mode

A

topology base> metric maximum-hops $int

363
Q
A
364
Q
A
365
Q

Configures EIGRP to install a static default route based on an EIGRP’s candidate prefix

A

ip default-network x.x.x.x

366
Q

Configures the router to drop all packets with IP Options set

A

ip options drop

367
Q

Sets router timezone

A

config t

clock timezone EST $offset

368
Q

Sets subinterface encapsulation for native VLAN

A

encap dot1q $int native

369
Q

Configures a NAT rule to statically translate addresses based on their egress interface

A

ip nat inside source static route-map $RMAP interface/$InsideGlobal

370
Q

ip nat inside source static $InLocal $InGlobal route-map $RMAP

A

Configures a NAT rule to statically translate based on specific flows destination

371
Q
A
372
Q

Counts traffic that has traversed an interface in ingress or egress direction and its precedence marking.

A

ip accounting precedence input

ip accounting precendence ouptut

373
Q

Causes NAT configured between two HSRP peers to auntomatically create a redundant entry for TCP flows from NATd sources

A

ip nat inside source static $inLocal $inGlobal redundancy group $int/$name

374
Q

In root bridge, you can set the diameter number, this will auto generate appropriate STP values. However, there is an option to modify this values.

A

spanning-tree vlan $int root primary diameter $int [hello-timer $int]

375
Q
A
376
Q

Configures an EPC in the router

A

monitor capture buffer $name1 circular

monitor capture point ip cef $name2 $if in/out/both

monitor capture point associate $name2 $name1

monitor capture point start $name2

monitor capture point start $name1

clear monitor session buffer $name1

377
Q
A

ipv6 ospf authentication ipsec spi $int sha1/MD5 $HexShaCode/string

378
Q

Configures a Spoke’s SVTI

A

crypto isakmp po 10
auth pre
encr 3des
hash md5
!
crypto keyring ISAKMP_PROF
pre-share address 172.16.214.2 key CIERS2
!
crypto isakmp profile CIERS2_vti_isakmp_profile
keyring ISAKMP_PROF
match identity address 172.16.214.2
local-address tunnel 214
!
crypto ipsec transform CIERS2_vti_transform esp-3des esp-md5-hmac
!
crypto ipsec profile CIERS2_vti_profile
set transform CIERS2_vti_transform
set isakmp-pro CIERS2_vti_isakmp_profile
!
int tun214
tunnel mode ipsec ipv4
tunnel source lo214
ip unnumber lo214
tunnel destination 172.16.214.2
tunnel protection ipsec prof CIERS2_vti_profile
!

379
Q

Configures Hub’s DVTI

A

crypto isakmp po 10
auth pre
encr 3des
hash md5
!
crypto keyring ISAKMP_PROF
pre-share address 0.0.0.0 0.0.0.0 key CIERS2
!
crypto isakmp profile CIERS2_vti_isakmp_profile
keyring ISAKMP_PROF
match identity address 0.0.0.0 0.0.0.0
virtual-template 124
!
crypto ipsec transform CIERS2_vti_transform esp-3des esp-md5-hmac
!
crypto ipsec profile CIERS2_vti_profile
set transform CIERS2_vti_transform
set isakmp-pro CIERS2_vti_isakmp_profile
!
int virtual-template 124 type tunnel
tunnel mode ipsec ipv4
tunnel source lo214
ip unnumber lo214
tunnel protection ipsec prof CIERS2_vti_profile
!