Network Assurance Flashcards

Netflow, SPAN, SNMP, IP SLA, DNA Center, etc.

1
Q

What is SNMP?

A

Simple Network Management Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the key differences of SNMPv3 over v1 and v2?

A
  • User authentication
  • Username hashing (MD5 and SHA)
  • Encryption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the key elements that need to be configured on a Cisco device to send SNMP data to a client?

A
  • SNMP host/client
  • Access Lists to restrict SNMP
  • Read Only Community String
  • Read Write Community String
  • SNMP location
  • SNMP contact
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the command to send SNMP to a client or host?

A

R1(config)# snmp-server community {string} {ro | rw} {access-list-id}

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an SNMP trap?

A

An alert that can be sent via SNMP in response to a network event

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the command to enable SNMP traps on a Cisco device?

A

R1(config)# snmp-server enable traps [type]

There are a lot of SNMP trap types that can be enables. Not specifying a trap type will enable all SNMP traps which may not be desirable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the 8 levels of Syslog Severity Messages?

A

7 - Debug
6 - Informational
5 -Notifications
4 - Warning
3 - Errors
2 - Critical
1 - Alerts
0 -Emergency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What command is used to send log messages to the local device’s buffer?

A

R1(config)# logging buffer {buffer-size-in-bytes} {severity-level}

NOTE: The severity level can be numbered or the word. Log events up to the configured level will be logged.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What command is used to verify logging on a Cisco device?

A

R1# show logging

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What port is used by Syslog to send logging information to a remote Syslog collector?

A

UDP 514

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What command is used on a Cisco device to send Syslog to a remote host?

A

R1(config)# logging host {ip-address}

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the port used by the Netflow protocol?

A

Netflow is UDP but it does NOT have an assigned port number. Each flow sensor will use a unique port number as designated by an admin.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the three pieces you need to configure to create flexible netflow on a router?

A

Flow Record
Flow Export
Flow Monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What two things do you need to do to configure a flow record?

A

1.) Use the “match” command to define the flow criteria

2.) Use the “collect” command to define what data you want to gather from the flow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What two things do you need to do to configure a flow exporter?

A

1.) The destination collector server, using the destination command

2.) The port number for the flow sensor using the transport udp {port} command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What two things do you need to configure a flow monitor?

A

1.) the flow record to be used with the record NAME command

2.) the flow exporter to be used with the exporter NAME command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the commands to enable basic netflow for interface Gi0/0 on a router for the destination of 10.1.0.111 using the port 9998?

A

R1(config)# int gi0/0
R1(config-if)# ip flow ingress
R1(config-if)# ip flow egress
R1(config)# ip flow-top-talkers
R1(config-flow-top-talkers)# top 5
R1(config-flow-top-talkers)# sort-by bytes
R1(config)# ip flow-export version 9
R1(config)# ip flow-export destination 10.1.0.111 9998

18
Q

Using IOS commands, configure a flexible netflow that uses source ipv4 address to collect ipv4 source, destination, and protocol information and apply it to interface gi0/0

A

R1(config)# flow record FLOW_REC_1
R1(config-flow-record)# description basic netflow information
R1(config-flow-record)# match ipv4 source address
R1(config-flow-record)# collect ipv4 source address
R1(config-flow-record)# collect ipv4 protocol
R1(config-flow-record)# collect ipv4 destination address
R1(config)# flow exporter FLOW_EXP_1
R1(config-flow-exporter)# description flows exported to my PRTG server A
R1(config-flow-exporter)# destination <flow>
R1(config-flow-exporter)# transport udp <flow>
R1(config)# flow monitor FLOW_MON_1
R1(config-flow-monitor)# exporter FLOW_EXP_1
R1(config-flow-monitor)# record FLOW_REC_1
R1(config)# int gi0/0
R1(config-if) ip flow monitor FLOW_MON_1 input</flow></flow>

19
Q

What show commands would you use to verify flexible netflow on a Cisco device?

A

show flow recorder

show flow exporter

show flow monitor

20
Q

When using the show commands to verify netflow, how are the source and destination port numbers displayed?

A

In hexadecimal format (instead of decimal)

21
Q

What command(s) could you use to verify the netflow is working?

A

show ip cache flow

show ip flow top-talkers

NOTE: Netflow data on a router expires quickly so these commands are really only good to troubleshoot if netflow is working.

22
Q

What are the basic commands to configure IP SLA with an icmp probe that runs every 10 seconds (4 commands)?

A

Router(config)# ip sla {probe-id}
Router(config-ip-sla)# icmp-echo {dest-ip-address} source-interface {interface-id}
Router(config-ip-sla-echo)# frequency 10
Router(config)# ip sla {probe-id} life forever start-time now

23
Q

What are the basic commands to configure IP SLA with an http probe that runs every 1 minute (4 commands)?

A

Router(config)# ip sla {probe-id}
Router(config-ip-sla)# http get {URL}
Router(config-ip-sla-echo)# frequency 60
Router(config)# ip sla {probe-id} life forever start-time now

24
Q

What commands would you use to create an IP SLA track object and use it to influence a static route?

A

Router(config)# track {id} ip sla {probe-id}
Router(config)# ip route {ip-address} {subnet-mask} {next-hop} track {track-id}

25
Q

What does SPAN mean?

A

Switchport Analyzer - this is basically just mirroring a switchport

26
Q

What are the three types of SPANs and what is the difference between each one?

A

SPAN - capture on a local switch

RSPAN - capture on a remote switch

ERSPAN - capture on a remote network

27
Q

What commands would you use to configure a Cisco switch to mirror port fa0/1 and send the traffic to fa0/24?

A

SW1(config)# monitor session {session-id} source interface fa0/1
SW1(config)# monitor session 1 destination interface fastEthernet 0/24

28
Q

What is the key configuration element you need to configure to perform RSPAN?

A

A dedicated VLAN must be established on the source and destination switches and permitted across the trunk.

29
Q

What commands would you need to configure RSPAN from the source ports of Switch2 on fa0/1 to the destination port of fa0/24 on Switch1?

A

SW2(config)# vlan 99
SW2(config-vlan)# remote-span
SW2(config)# monitor session 1 source interface fa0/1
SW2(config)# monitor session 1 destination remote vlan 99
SW1(config)# vlan 99
SW1(config-vlan)# remote-span
SW1(config)# monitor session 1 source remote vlan 99
SW1(config)# monitor session 1 destination fa 0/24

30
Q

What commands are needed to configure ERSPAN on a remote switch?

A

RemoteSW1(config)# monitor session 1 type erspan-source
RemoteSW1(config-mon-erspan-src)# source interface gi0/10 both
RemoteSW1(config-mon-erspan-src)# no shut
RemoteSW1(config-mon-erspan-src)# destination
RemoteSW1(config-mon-erspan-src-dst)# ip address <ip>
RemoteSW1(config-mon-erspan-src-dst)# erspan-id 2
RemoteSW1(config-mon-erspan-src-dst)# origin ip <ip></ip></ip>

31
Q

What commands are needed to configure ERSPAN on the local switch?

A

LocalSW1(config)# monitor session 1 type erspan-destination
LocalSW1(config-mon-erspan-dst)# no shut
LocalSW1(config-mon-erspan-dst)# destination interface gigabitEthernet 0/2
LocalSW1(config-mon-erspan-dst)# source
LocalSW1(config-mon-erspan-dst-src)# erspan-id 2
LocalSW1(config-mon-erspan-dst-src)# ip address <ip>
LocalSW1(config-mon-erspan-dst-src)# origin ip address <ip></ip></ip>

32
Q

What show command(s) can you use to verify a SPAN session is running?

A

show monitor session all

show monitor session <session></session>

33
Q

What is IP SLA?

A

A Cisco IOS tool that can perform continuous monitoring about certain aspects of network performance.

34
Q

What are some of the most common types of IP SLA probes that can be configured on a Cisco device?

A
  • icmp
  • http
  • dhcp
  • dns
  • voip
  • icmp or udp jitter
35
Q

What network quality metrics does IP SLA set out to measure?

A
  • Delay
  • Jitter
  • Packet Loss
  • Connectivity
  • VoIP quality
  • Server Download time
  • Network Path
36
Q

When configuring IP SLA on a Cisco device, what are the two essential elements that must be configured?

A

1.) Probe
2.) Schedule

37
Q

What is the command to create an IP SLA probe?

A

R1(config)# ip sla {id-number}

38
Q

What are the commands to set up an IP SLA ICMP probe that repeats every 60 seconds? (3 commands)

A

R1(config)# ip sla {id-number}
R1(config-ip-sla)# icmp-echo {target-address} source-interface {int-id}
R1(config-ip-sla-echo)# frequency 60

39
Q

What are the commands to set up an HTTP GET probe that repeats every 5 minutes? (3 commands)

A

R1(config)# ip sla {id-number}
R1(config-ip-sla)# http get {url}
R1(config-ip-sla-echo)# frequency 300

40
Q

What is the command to create a schedule to start an IP SLA probe(s)?

A

R1(config)# ip sla schedule {id-number} life {forever | value-in-secs} start-time {now | hh:mm:ss}

41
Q

If you wanted to use an IP SLA as a routing metric, what command would you use?

A

R1(config)# track {id-number} ip sla {sla-id}