Chapter 3: Network Infrastructure Flashcards
Who developed the TCP/IP stack?
The United States Department of Defence (DOD).
What term best describes the following?
“rules of the Internet and are managed by the Internet Engineering Task Force IETF.”
RFCs (Requests for Comments).
Define an Opaque Network.
A network that is created and managed by a separate entity outside vSphere.
Describe the difference between a vSphere Standard Switch (vSS) and a vSphere Distributed Switch (vDS)
A vSS is created and managed by a single ESXi host, whereas a vDS is created and managed through vCenter Server.
What component of vSphere networking is responsible for tagging/untagging packets with VLAN IDs?
The VMkernel adapter.
What is the valid VLAN ID range for a standard port group?
1 to 4095.
What is the valid VLAN ID range for a distributed port group?
1 to 4094.
What needs to be configured in a virtual machine’s settings to allow for the use of Jumbo frames?
The VMXNET3 virtual network adapter.
What network polices can be applied to a vSS?
The following policies can be applied to a vSphere Standard Switch (vSS):
- Teaming & Failover
- Security
- Traffic Shaping
- VLAN
What NIC teaming options are available on both a vSS & vDS?
The following NIC teaming options are available for both vSS & vDS:
- Route Based on Originating Virtual Port
- Route Based on IP Hash
- Route Based on Source MAC Hash
- Use Explicit Failover Order
In regards to vNICs, describe the difference between an initial and effective MAC address.
Initial MAC addresses are the MAC addresses assigned to an adapter when a vNIC is created and cannot be changed from within the OS. The effective vNIC can have it’s MAC address changed from within the guest OS.
Describe the function of Promiscuous Mode in regards to vSS port group security policies.
A security feature that enables/disables the vNIC only to receive frames that match the effective MAC address.
What are the available and default values for Promiscuous mode in a vSS?
Default is reject, options are reject and accept.
Describe the function of MAC Address Changes in regards to vSS port group security policies.
A security policy that allows the ESXi host to accept or reject effective MAC address changes.
What are the default and available values for MAC Address Changes in a vSS?
Default is accept, options are reject and accept.
Describe the function of Forged Transmits in regards to vSS port group security policies.
A security policy that enables the ESXi to drop packets if the source and effective MAC addresses do not match.
What are the default and available values for Forged Transmits in regards to vSS port group security policies?
Default is accept, options are reject and accept.
What are the 3 traffic shaping policies available to port groups?
Average bandwidth, peak bandwidth, and burst size.
What additional policies can be applied with a vDS over a vSS?
vDS’ have the following additional features:
- Monitoring
- Traffic Filtering & Marking
- Resources Allocation
- Port Blocking
What additional NIC teaming option is available with a vDS that is not with a vSS?
Load-based NIC teaming.
What type of policy allows you to assign a network resource pool to a port group?
A Resource Allocation Policy.
How does NIOC reserve network bandwidth for virtual ports?
Using shares that guarantee a level of allocated bandwidth regardless of the current network utilization or contention.
Describe the purpose of Network Resource Pools.
A mechanism that enables you to apply a part of the bandwidth that is reserved for VM system traffic to a set of distributed port groups.
What role does DRS play in regards to NIOC version 3?
DRS automatically places/migrates the virtual machine on a host that can satisfy the reserved bandwidth for the VM.
What switch feature best describes the following?
“A feature that collects IP network traffic as it enters or exits an interface.”
NetFlow.
What current version of NetFlow is supported a vDS?
NetFlow version 10, also identified as IPFIX.
What is the purpose of a collector in regards to NetFlow?
To collect the traffic information and network flows for the purpose of network analysis and troubleshooting.
What is the purpose of the sampling rate in regards to NetFlow?
To define how many packets are sampled from the network flow.
For example, if the sampling rate is set to 4, then NetFlow will sample 1 packet then skip (drop) the next 4.
What is the default setting for NetFlow on a vDS?
NetFlow is disabled by default.