Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

StormWindsStudio ICND1 > Session 4 > Flashcards

Session 4 Flashcards

Vlans - Trunk - NAT

1
Q

why do you create vlans?

A 
isolate network
Group users together
enhance security
increase traffic flow
it is scalable
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what is ACL used for

A

allow/deny access to subnets/host.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

If PC1 on vlan 1 and PC3 on vlan 3 - can they talk? if so what do you need to to allow that

A

it will need a router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

will a switch forward a packet that is destined to a different vlan

A

NO - Router do that

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what is the total # of vlans

A

1 thru 4094

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

vlans #2 - 1001 are consider what?

A

standard type vlans

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

vlans #1006 - 4094 are consider what?

A

extended type vlans

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

If a switch gets a frame for a vlan it does not know about, what does it do?

A

Traffic is dropped.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

where is vlan stored?

A

vlan.dat in flash. It is not stored in running or start so not in nvram.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what is a trunk port

A

allow interface to essentially make virtual tunnels for each vlans is allowed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what command you can use to see vlan and trunking info

A

show interfaces ### switchport

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what type of encapsulations do cisco switches support?

A

ISL (inter switch link) and 802.1q which cisco recommends

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

how does the switch know what vlans belongs to?

A

802.1q - adds a tag (4 byte to frame)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

how can see native vlan?

A

show interfaces trunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

why does native vlan exist and what is it use for?

A

only used in 802.1q.

at one point in time, not everything could be tag. so if traffic could not be tag it still could go through the trunk port untag.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

if you change the native vlan on 1 switch, what else do you need to do?

A

match on both sides.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Native vlan should never be what #

A

vlan 1.

config t
vlan 99
name v99-Native

go to the turnk port
int ###
switchport trunk native vlan 99
end

show int ### switchport - you will see trunk info

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

how do you get the sys log

A

config t

terminal monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

how to prevent from an access port to send DTP messages?

A

you have to change the administrative mode to static access. This will prevent all the access ports from converting to a trunk port.

command:
config t
int range int#####
switchport mode access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

how to do you convert administrative mode on a trunk port from dynamic access to static

A

put in following command:

switchport nonegotiate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

the max # of vlans on any given switch is determine by what?

A

Switch
STP version
VTP version

IOS / Switch and protocols working on that switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Interface will not show up under show vl br for 2 reason. what are they?

A

If the port is trunk and if the vlan has been removed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Each vlan has its own unique what?

A

subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what is required to forward traffic between vlans

A

router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

vlans create their own what?

A

broadcast domain or segments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Router on a stick is called that?

A

you have 1 physical connection between router and switch.

You will take that 1 link and add a sub interfaces which is a virtual interfaces in a physical interface.

27
Q

when configuring a sub interface on a router, how do you config it?

A

config t
int ##.10
encapsulation

28
Q

what do you have to do before adding an IP address to a sub interface ?

A

you need to add the enapsulation and vlan # first

example:

encapsulation dot1q 10

29
Q

The status of the sub interface is determine by what?

A

the physical interface is under. If down then all the sub interface would be down.

30
Q

When you have an IP address on an interface and status is up up. What does that mean?

A

There should be an entry in the routing table

command:
show ip route

31
Q

what would show vlans on a router?

A

it will show you the vlan# and the interface that vlan is set up with.

32
Q

cisco router would use the physical address of the physical interface for all sub interfaces, how is that possible?

A

different vlans - so you can use the same mac address in multiple different vlans.

33
Q

what is one use of ACLs?

A

Filter traffic. It provides traffic identification.

when traffic is identified, a variety of actions can be applied.

34
Q

what are ACEs?

A

access control entries within the ACL

35
Q

what statements are usually used in a ACL?

A

permit - deny

36
Q

what is the processing of an ACL?

A

top down entries. So you have to be very specific entries are higher than generic entries.

37
Q

Stand ACL match only what?

A

only filters based on the source IP address.

38
Q

Extended ACLs match what?

A

Can filter based on Source/Destination IP address

filter based on different type of layer 4 protocols and port #s.

E for Everything

39
Q

what are the 2 ways to ID you ACLs?

A

named and numbered.

40
Q

Numbered stand range for standard acl?

A

1 - 99, 1300-1900

so they will only look at the source IP address

41
Q

Numbered stand range for extended acl?

A

100 - 199, 2000 - 2699

42
Q

Named ACLs are good because they allow you to do what?

A

modify on the fly. no need to delete it.

43
Q

what is a wild card mask?

A

identify the range of addresses that this entry applies to.

44
Q

when you care about the bits in the wild card mask, what does that mean?

A

it could not change. So the bits of the IP that cannot change.

45
Q

In a wild card mask - how do you find the minimum value?

A

X = all 0s

46
Q

In a wild card mask - how do you find the maximum value?

A

X = all 1s then you add it up to get the decimal format.

47
Q

when doing a wild card as a range of addresses how can you figure it out?

A
  1. change the first subnet into binary only the part that changes with the other subnets.
  2. change the last subnet into binary only the part that actually different.
  3. Everything toward the left = all 0s which we know we care about since it does not change
  4. Everything to the right of the line = all 1s.
  5. All up all the ones and you will have your wild card range for the range of addresses.
48
Q

what does host mean in acl = ?

A

0.0.0.0 so that means its specific to that IP address

49
Q

what does ANY mean in acl ?

A

basically means 255.255.255.255 which means it allows any host.

50
Q

how can you verify an ACL is written?

A

show access-list

51
Q

how can you verify an acl is on the in/out bound of an interface?

A

show ip interface ###

52
Q

What does Inside Local address mean in NAT?

A

Specifies a private IP inside the LAN - basically the private IP address that you will be translating

53
Q

what does Inside Global address mean in NAT?

A

Public IP assigned by ISP & allow outside access - basically the public address that you will be translating to. - basically means who you are trying to reach out in the internet (destination)

54
Q

what does outside Global address mean in NAT?

A

specifies a host outside the LAN

55
Q

where can you use NAT?

A

Private to Public

Public to private

Public to Public

Private to private (when 2 companies merge)

56
Q

What are the 3 types of NAT

A

static nat - uses one to one address mapping

Dynamic Nat - uses many to many address mapping - basically allows the router to dynamically set up a route with a public address. still is 1 to 1

PAT - use many to one address mapping

57
Q

commands to set up static nat?

A

find out which interface that connects to the ISP

config t
int gi0/0
ip nat outside

find the interface that faces the inside

config t
int gi0/1
ip nat inside

IN GLOBAL CONFIG MODE

config t
ip nat inside source static #.#.#.# $.$.$.$

# = inside private host
$ = your public IP address
58
Q

what command can you put to see any translation on the router?

A

show ip nat translation

59
Q

how can you verify which interface has NAT enable?

A

show ip nat statistics

60
Q

how do you set up dynamic nat

A

global config
ip nat pool #### where # = name of nat

ip nat pool ### @.@.@.@ $.$.$.$

61
Q

what is prefix-length

A

is the subnet mask of the pool that you are setting up in dynamic nat

typically is the subnet mask of the subnet that your ISP gave you.

62
Q

what word is needed to enable PAT?

A

overload

63
Q

what are needed to set up NAT

A

Inside interfaces
Outside interface
NAT access-list

StormWindsStudio ICND1 (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions