Chapter 5 Network Visibility and Segmentation Definitions

Question 1

NetFlow

Answer 1

NetFlow is a technology originally created by Cisco that provides comprehensive visibility into all network traffic that traverses a Cisco-supported device. NetFlow was initially created for billing and accounting of network traffic and to measure other IP traffic characteristics such as bandwidth utilization and application performance.

Question 2

traditional five-tuple

Answer 2

The traditional five-tuple (source IP address, destination IP address, source port, destination port, and IP protocol)

Question 3

SCTP

Answer 3

IPFIX prefers the Stream Control Transmission Protocol (SCTP) as its transport layer protocol; however, it also supports the use of the Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) messages.

Question 4

FlowCollector

Answer 4

A physical or virtual appliance that collects NetFlow data from infrastructure devices.

Question 5

SMC

Answer 5

Stealthwatch Management Console (SMC): The main management application that provides detailed dashboards and the ability to correlate network flow and events.

Question 6

FlowSensor

Answer 6

A physical or virtual appliance that can generate NetFlow data when legacy Cisco network infrastructure components are not capable of producing line-rate, unsampled NetFlow data.

Question 7

EPGs

Answer 7

Cisco ACI allows organizations to automatically assign endpoints to logical security zones called endpoint groups (EPGs). EPGs are used to group VMs within a tenant and apply filtering and forwarding policies to them. These EPGs are based on various network-based or VM-based attributes.

Question 8

SXP

Answer 8

The Scalable Group Tag Exchange Protocol (SXP) is a control plane protocol used to convey IP-to-SGT mappings to network devices when you cannot perform inline tagging. SXP provides capabilities to identify and classify IP packets to corresponding SGTs tracked in the mapping table within network devices. SPX uses peer-to-peer TCP connections over TCP port 64999.

Question 9

uSeg EPG

Answer 9

A micro-segment in ACI is also often referred to as a uSeg EPG. You can group endpoints in existing application EPGs into new micro-segment (uSeg) EPGs and configure network or VM-based attributes for those uSeg EPGs. With these uSeg EPGs, you can apply dynamic policies.