Chapter 5 Flashcards
What port uses SSH/ TelNet/ NTP
22/ 23 , 992 / 123
What port uses DNS, HTTPS, NETCONF, RESCONF
53/ 443/ 830/ 8008, 8080, 8888
Benefits of usign DHCP
-Reduced client configuration tasks and costs
-Centralized management
**What port uses DHCP **
Client 67/ Server 68
A protocol defines an automated service that matches domain names to IP addresses
DNS (Domain Name Service)
Was developed to allow administrators to manage devices such as servers, workstations, routers, switches, and security appliances.
Simple Network Manager Protocol (SNMP)
The SNMP system consists of three elements:
SNMP manager: network management system (NMS)
SNMP agents (managed device)
Management Information Base (MIB)
Collects and stores information about the device and its operation. This information is stored locally by the agent in the MIB.
SNMP Agents
Are unsolicited messages alerting the SNMP manager to a condition or event on the network.
SNMP Traps
Are data structures that describe SNMP network elements as a list of data objects.
Manage Information Base (MIB)
Accurate time and making sure all devices in the network have a uniform and correct view of time has always been a critical component to ensuring a smooth operation of the infrastructure
Network Time Protocol (NTP)
NTP servers can associate in several modes, including:
Client/Server
Symmetric Active/Passive
Broadcast
Types of Network Autentication Translation (NAT) include:
Static address translation (static NAT) – This is one-to-one mapping between global and local IPv4 addresses.
Dynamic address translation (dynamic NAT) – This maps registered IPv4 addresses from a pool to registered IP addresses.
Overloading (also called Port Address Translation or PAT) – This maps many unregistered IPv4 addresses to a single registered address (many to one) on different ports. Through overloading, thousands of users can be connected to the internet by using only one real global IP address.
These are two common IPv6 assigned multicast groups:
ff02::1 All-nodes multicast group
ff02::2 All-routers multicast group
Prefix to identify unicast IP6 address
FC00::/7
There are three packet-forwarding mechanisms supported by routers
Process switching
Fast switching
Cisco Express Forwarding CEF
This stateless packet filtering (Firewall) can be based on several packet header fields, including the following:
Source and/or destination IP address
IP protocol ID Source and/or destination TCP or UDP Port number ICMP message type Fragmentation flags IP option settings
Firewall. You create static rules that permit or deny packets, based on packet header information.
Stateless Packet Filtering
firewall performs the same header inspection as the stateless packet filtering firewall but also keeps track of the connection state. This is a critical difference. To keep track of the state, these firewalls maintain a state table.
Stateful Packet Filtering
Can perform deep inspection of the packet all the way up to the OSI model’s Layer 7.
Application Layer Packet Filtering
**Improves the distribution of workloads across multiple computing resources, such as servers, cluster of servers, network links, and more. **
Load Balancers
At the device level, the load balancer provides the following features to support high network availability:
- Device Redundacy
- Scalability
- Security
At the network service level, a load balancer provides the following advanced services:
-High services availability
-Scalability
-Services-level security
You can distribute incoming client requests among the servers in a server farm by defining load-balancing rules called?
Predictors
Load balancers can be configured to track the health and performance of servers and server farms by creating?
Health proves
Data Encapsulation at Each Layer of the TCP/IP model, Protocol Data Unit (PDU)
Application Layer
Transpor Layer
Network Layer
Data Link Layer
Phisical Layer
Data
Segment
Packet
Frame
Bits