CISCO Exam 8 Q3 Test 2 Flashcards
enable dhcp snooping
ip dhcp snooping
config trusted ports
ip dhcp snooping trust
set max discovery message on untrusted
ip dhcp snooping limit rate _
enable dhcp snooping on vlan
ip dhcp snooping ,,_
config DAI on int
ip arp inspection trust
config DAI on vlan
ip arp inspection trust vlan ,,_
enable port security
sw port-security
max mac allowed on port
sw port-security maximum _
manual mac config
sw port-security mac-address _
dynamic mac config
sw port-security mac-address _
config aging or removing mac on port
sw port-security aging time _ / type _ (abs, inac)
disable dtp on non trunking
sw mo ac
disable dtp on trunking
sw nonegotiate
config port-fast on int
spanning-tree portfast
enable bpdu guard
spanning-tree bpduguard enable
Create ACL standard
ip access-list standard _
remark _
deny host _
permit _ (wm)
permit any
int _
ip access-group _ (in, out)
Create ACL extended
ip access-list extended _
permit (tcp) (dip1, s1) (dip2, s2) eq _
permit any any
static nat
ip nat inside source static (priv) (public)
dynamic nat
ip nat pool _ (low) (high) netmask _
access-list _ permit _ _
ip nat inside source list _ pool _
singular PAT
ip nat inside source list _ int _ overload
access-list _ permit _ _
Pool PAT
ip nat pool _ (low) (high) netmask _
access-list _ permit _ _
ip nat inside source list _ pool _ overload
Appying NAT and PAT and DNAT and SNAT
int _
ip nat _ (inside, outside)
