Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Icnd2 > Stp > Flashcards

Stp Flashcards

1
Q

Stp primary/secondary default values

A

If root > 24576 = 24.576

If root < 24476 = highest possible x of 4096

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Stp def int cost

A

10 Gbps 2 2000
1 Gbps 4
100 Mbps 19
10 Mbps 100

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Stp timers

A

Hello = 2
MAXage = 10 * hello
Forward delay = 15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Default BID priority

A

32768

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

802.1D port roles

A

Root

Designated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

802.1w port roles

A

Root Alternate
Designated backup
Disabled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

RSTP port states

A

Forwarding
LEARNING
DISCARDING

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Stp port states

A

Forwarding
Listening
Learning
Blocking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Stp Root secondary default

A

> root

< Everything else

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Default costs of routes

A 
0 connected
1 static
20 bgp
90 eigrp
110 ospf
120 rip
200 iBGP
255 unusuable
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Ospf def costs

A

Serial 64
Ethernet 10
Fast ethernet 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Ospf def reference bandwidth

A

100.000 - 100 Mbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Default max load balancing ospf/eigrp

A

4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Max etherchannel links

A

8

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Cisco etherchannel protocol / setting

A

Pagp - desirable auto

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Def switchport dtp setting

A

Auto

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How to change ospf cost

A
  1. Change the bandwidth on the interface (in kbps)
  2. Set cost interface directly 1 - 65.535
  3. Change the reference bandwidth (in Mbps)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Vlan ranges

A

1-1005
(1002-1005 réservés)
1006-4094

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

VTP default settings

A

Server mode
Pruning disabled
Version 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

VTP requirements

A

Must be trunk

VTP domain and pass must match

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

802.1x supplicant?

A

Workstation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

802.1x authenticator

A

LAN SWITCH

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Ospf all routers address

A

224.0.0.5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Ospf Dr and bdr address

A

224.0.0.6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

how to advertise networks for ospfv6

A

Activated per interface, no network commands

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Ospfv3 neighbor requirements

A 
Do not have to be in same subnet
Hello dead timers must match
Unique RID
Same area
Auth
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Ospf neighbor requirements

A 
Do not have to be in same subnet
Hello dead timers must match
Unique RID
Same area
Auth
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

DEFAULT OSPF TIMERS

A

Hello 10
Dead 40 (4x hello)
Lsa reflood 30 min

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Ospf becoming neighbors routine

A
  1. A sends hello to B
  2. B learns of A and goes into INIT
  3. B sends hello to A
  4. A goes into 2-way state
  5. A sends hello to B
  6. A goes into 2-way state
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Private IP ranges

A

A 10.0.0.0 /8
B 172.16.0.0 /12
C 192.168.0.0 /16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

IP classes

A

A 1-126 /8
B 128-191 /16
C 192-223 /24
D 224-239

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

ACL ranges

A

Standard
1-99
1300-1999

Extended
100-199
200-2699

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Tacacs+ kenmerken

A 
TCP port 49
Used for network devices
Encrypts pass + whole packet
Can limit IOS shell per usergroup
Cisco prop
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

RADIUS kenmerken

A

UDP port 1645, 1812
Used mainly for users
Encrypts only password
RFC2865

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Where are VLAN commands stored?

A

VLAN.dat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Where are Switchport assignments stored?

A

Run Con

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Where are VTP commands stored

A

VLAN.dat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

EIGRP variance

A

Variance is a number (1 to 128), multiplied by the local best metric then includes the routes with the lesser or equal metric. The default Variance value is 1, which means equal-cost load balancing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

EIGRP/OSPF max load balancing

A

16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

soft ospf area router limit

A

50

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

How does ospf mulit area reduce routing table and lsa db size?

A

Route summary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Vtp summary advertisement time

A

5 min

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

VTP: Vlan advertisement request

A

switch asks for a subset advertisement when the

summary advertisement has a higher revision number than itself

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

vtp subset advertisement

A

sent when VLAN configuration database has changed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

K-value binary trick

A

10 0 / 10100

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Vector

A

(aka direction) Next hop router and outgoing interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Metric

A

measurement of distance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Metric value of infinity (rip/ospf/eigrp)

A

16 for RIP / 2^32 – 1 for EIGRP / 2^24-1 for OSPF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

When do EIGRP partial update messages get sent

A

-When link fails
-When new route becomes available
(only contains new info)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

EIGRP addr

A

224.0.0.10

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Does OSPF use split horizon?

A

NO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

EIGRP Three step model

A
  1. Neighbor discovery –> Neighbor table
  2. Topology exchange –> topology table
  3. Choosing routes , analysis of topology –> Route table
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

EIGRP Neighbor requirements

A

Authentication
Same AS number
Same Subnet
K-values must match

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

How are EIGRP update messages sent?

A
  • To multicast if multiple routers need it

- To unicast for single addressee

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What protocol does EIGRP use?

A

RTP, reliable transport protocol, can resend info in something fails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

EIGRP Metric calc

A

((10^7 / least-bandwidth)+cum delay)*256

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

EIGRP Cumulative Delay

A

Sum of all delay values for all outgoing interfaces. In ‘Tens of microseconds’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

EIGRP Least-bandwidth

A

lowest bandwidth link in the route expressed in Kbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

EIGRP best practices bandwidth settings

A

Serial links: set to actual L1 speed

LAN interfaces: use defaults

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Feasible distance (FD) / Reported distance (RD)

A

FD= Local routers composite metric of the best route to reach a subnet
RD: Next hop router’s best composite metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

EIGRP Successor

A

Best route to subnet - route in routing table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Feasibility condition

A

If a non-successors RD is less than the FD of the current route in the routing table, the route is a feasible successor.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

DUAL

A

Diffusing update algorithm. Used when there is no Feasible successor in EIGRP. - DUAL queries for a loop free route to a subnet and then adds it to the routing table.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

EIGRP Default timers

A

Hello: 5 sec
Hold: 3x hello (15 )

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Variance unequal route calculation

A

IF metric.FS < (Variance * FD )
THEN
FS added to routing table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Differences between ipv4 and 6 EIGRP

A
  • IPv6 advertises prefixes / IPv4 subnets
  • show commands use ipv6 keyword
  • IPv6 neighbors don’t have to be in the same subnet
  • EIGRP for IPv6 does not have an auto-summary concept
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

EIGRPv6 Shutdown feature

A

EIGRPv6 Process can be shut or no shut like an interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Which side provides clockrate?

A

DCE (other side is DTE)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Serial link protocols?

A

HDLC (older)

PPP - additional capabilities like authentication, multilink bundles, and constant link monitoring.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Link speed standards (DS0,DS1,DS3)

A 
DS0 - 64kbps
DS1 - (T1) 1544 kbps
E1 - 2048 Kbps
DS3 - 44.736 kbps
E3 - 34.000 kbps
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Default Serial Link encapsulation?

A

HDLC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Why PPP?

A
  • Definition of header and trailer
  • Supports synchronous and asynchronous links
  • Protocol Type field in header
  • Authentication
  • Support for multilink
  • Control protocols for each higher layer protocol
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

PAP kenmerken

A
  • Clear text pass
  • device ‘being authenticated’ acts first and just sends over pass
  • Authenticating device sends ack
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

CHAP kenmerken

A
  • Hashed pass
  • Authenticating device sends over challenge
  • Other sends hashed pass
  • Authenticating device sends ack
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Why use MLPPP?

A
  • Improve availability
  • Cheaper
  • Reduces L3 complexity
  • Miltiple SE ints look like single int
  • One subnet between routers
  • One routing prot neighborship
  • One route per destination
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

How does MLPPP loadbalancing work?

A
  • Frames get fragemented (one per link)
  • Smaller pieces get PPP header and trailer to manage fragmentation
  • Receiving router reassembles the packet
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

Which commands go on PPP multilink?

A
  • Encapsulation
  • ppp multilink
  • ip addr
  • ppp multilink group x
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

Which commands go on SE interface of multilink?

A
  • no ip addr
  • encapsulation
  • Authentication
  • ppp multilink
  • ppp multilink group x
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

EIGRP ipv6 is ip-address on interface necessary?

A

No, ipv6 enable on an interface sets the link local address automatically which is enough to form a neighbor-ship

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

Hold-down timer

A

used by RIP to specify the amount of time to wait before accepting new information when a route goes down

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

What is ISL

A

Encapsulation used by CISCO ONLY for VLAN information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

What is an EIGRP active state?

A

It means the route is actively fucked

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

What is an EIGRP passive state?

A

A route with a working link is in a passive state

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

DUAL?

A

EIGRP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

DIJKSTRA?

A

OPSF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

Belman-ford?

A

RIP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

Proxy-ARP

A

proxy device on a given network answers the ARP queries for an IP address that is not on that network. The proxy is aware of the location of the traffic’s destination, and offers its own MAC address as the (ostensibly final) destination.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

Why PPPoE

A

ISPs use PPP for authentication (through CHAP) and the ability to assign an IP address on the other end. Internet moved to faster DSL lines that connected to ethernet interfaces. A way of transporting PPP over ethernet was needed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

PPPoE Dialer MTU setting

A

1492

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

Default MTU size

A

1500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

PPPoE header size

A

8

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

When using a GRE Tunnel, which device is used as an outgoing interface in the routing table?

A

The tunnel interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

What does an internet VPN do? (2)

A
  • Encrypts the packet

- Encapsulates with a new IP header, using IPs in the unsecured space, making the original IP unreadable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

2 GRE headers?

A
  • Header to manage the tunnel (GRE)

- Delivery header (20byte IP header) that will be used to route the packet and contains IP in unsecured internet space

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

What is the source address of a tunnel interface?

A

Address of the physical outgoing interface. Public IP - config possible with interface ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

What IP goes on the Tunnel INT?

A

private IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

What is the destination address of a GRE tunnel

A

address of the physical int on the other side of the link (unsecure IP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

Best practice GRE TUN MTU setting?

A

1400

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

Traceroute with GRE tunnel, what’s special?

A

Will not list any routers in the unsecured part of the route due to encapsulation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

Requirement of Destination IP on GRE tunnel

A

Router must have a route to destination address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

does GRE use TCP or UDP?

A

GRE is its own transport protocol.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

ACL blocking GRE?

A

-allow ip
-allow gre
TCP/UDP would not work

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

NLRI

A

Network Layer reachability information, advertised by BGP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

iBGP

A

Connection between routers from the same ISPs (inside the same ASN)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

eBGP

A

Connection between routers from different ISPs(different ASNs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

How does BGP choose the best path?

A

Path attributes - different facts about the network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q

Internet edge

A

connection between ISP and customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
108
Q

Single homed

A

design with one connection between a customer and one ISP router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
109
Q

Dual homed

A

design with two or more connections between a customer and a single ISP router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
110
Q

Mutlihomed

A

design with connection between a customer and multiple ISPs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
111
Q

Default route to ISP, how?

A
  • Static config

- Learned with BGP and redistributed in the network by an iGP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
112
Q

BGP transport protocol?

A

TCP port 179. Starting BGP process opens up port 179 and waits for incoming messages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
113
Q

Remove BGP neighbor connection

A

neighbor A.B.C.D. shutdown – removes the need to delete all config for that neighbor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
114
Q

What is a discard route?

A

Static discard route can be used to advertise a route with BGP when it is not in the routing table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
115
Q

Reason for the network command not to advertise a route in BGP?

A

BGP network command only advertises networks for which there is a route in the routing table.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
116
Q

CADA

A

Confidentiality (prevent mitm data access)
Authentication (verify sender)
Data Integrity
Anti-Relay (prevent MitM relay)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
117
Q

Site 2 site VPN

A

Using a VPN to send traffic from one site to the other and by using the internet as a WAN by doing so. Packets are encrypted and secured.

118
Q

DMVPN

A

Cisco Dynamic Multipoint VPN. Multipoint tunnel, a site can send and receive with any other site on the same tunnel

119
Q

NHRP

A

Next hop resolution protocol. One side of the tunnel acts as a hub and NHRP server (usedin DMVPN)

120
Q

NHRP Server

A

NExt hop resolution protocol server.
Learns information about the different spokes and stores it in a mapping table. Server supplies that info when two spokes need to communicate witht eachother. (used in DMVPN

121
Q

Client VPN

A

One side uses an application to initiate a connection to a device waiting for client connections. (ASA, web server) ex. Cisco VPN Client)

122
Q

Timeline WAN services

A

1990: Leased Line
1980: X.25 packet switching
1990: Frame relay
2000: MPLS VPNs
2010: Metro Ethernet

123
Q

MetroEthernet / Carier

A
  • Layer2 service
  • Ethernet links
  • Provider forwards ethernet frames from one customer device to another
  • Acts like an ethernet switch
124
Q

Points of presenece

A

Location where ethernet switch is places for MetroEthernet. As close to as many customer sites as possible

125
Q

UNI

A
  • User network interface

- Link between customer and ISPs switch in metroE

126
Q

What does ISP switch do in MetroE

A
  • Looks at ethernetheaders

- Looks for802.1q headers

127
Q

Point-to-point / E-Line / Ethernet Line Service

A
  • 2 sites connected with access links
  • Routers use physical ethernet interfaces in the same subnet (in between the two are ISP switches)
  • Would become neighbors and exchange routes
128
Q

Ethernet Virtual connection (EVC)

A

The virtual ethernet connection running through the ISP connecting the customers devices

129
Q

EVC with multiple remote sites

A
  • Central site connects to ISP switch with 10gbs access link
  • Remote sites all connect to ISP switches
  • EVC makes it function as if all remote sites were connected to the central site.
  • Conifg with trunking and subinterfaces
130
Q

Ethernet LAN/Full Mesh

A

One E-lan allows all devices connected to directly send frames to eachother; One EVC is used to connect all devices

131
Q

E-Tree / partial mesh / hub and spoke / point to multipoint

A

Central Device van send frames to each remote site but the remote sites can only send to the central site.

132
Q

E-Line L3 config

A
  • Two routers on end of an E-line need to be in same subnet

- 1 subnet per e-line

133
Q

E-Lan L3 config

A

All routers connected to the same LAN switch are in the same VLAN, same subnet and become neighbors

134
Q

E-Tree L3 config

A
  • All routers have IP in same subnet
  • Leafs will only form relationship with root site
  • Packets between the leafs flow through the root site
  • Additional routing prot config is required
135
Q

CIR

A

Committed information rate. ISP sells a connection that offers an agreed upon bandwidth.

136
Q

Ethernet Virtual Circuit Bandwidth profile

A

ex. 1 Gbps line to ISP is used, but the speed for the consumer is only 200 Mbps as agreed upon in the Commited Information Rate (CIR)

137
Q

How is the CIR enforced?

A

QoS Tools

  • Ingress Policer. ISP watches incoming traffic and discards if needed
  • Shaping: Customer uses shaper to tell router to slow down and queue up frames if necessary. Configured at the rate of the CIR
138
Q

MPLS VPN

A

Does not encrypt data but adds a ‘label’ between layer 2 and 3 to make sure the data is not send to another customer on the same MPLS network.

139
Q

DSCP EF value

A

Value in IP header that marks a packet as a VoIP packet. This way the ISP can give the packet higher priority when it moves over the WAN/MPLS

140
Q

HSRP

A

Hot standby router protocol. Cisco’s version of FHRP.

141
Q

FHRP

A

First hop redundancy protocol . Class of protocols that deals with how the network handles multiple def gateways for redundancy

142
Q

Why use FHRP and multiple def gats

A

-Avoid single point of failure

143
Q

What does FHRP do

A
  • Multiple routers appear as one def gat
  • def gats share virtual ip
  • Hosts use virtual ip as def gat
  • if router fails, FHRP selects other router
144
Q

HSRP kenmerken

A
  • Cisco
  • Active/standby
  • No loadbalancing
145
Q

VRRP kenmerken

A

RFC 5798
Active/standby
Loadbalancing per subnet

146
Q

GLBP

A

Cisco
Active/active
Loadbalancing per host

147
Q

Where can HSRP be configured?

A
  • Physical router links
  • Router trunk subinterfaces
  • L3 switch SVIs
148
Q

HSRP failover

A

When a router fails, changes happen on routers and switches. Router takes over virtual IP and mac and sends ethernet broadcast to switches to change mac table.

149
Q

HSRP load balancing

A
  • Active router can be configured per VLAN

- HSRP groups can be configured per subnet

150
Q

HSRP requirement

A
  • Group needs to match
  • Version needs to match
  • Virtual IP needs to be in same subnet as phys int.
  • Interfaces on L2 network must be in same VLAN
  • ACL can’t filter HSRP traffic
151
Q

HSRP address

A

VI: 224.0.0.2
V2: 224.0.0.102
UDP 1985

152
Q

HSRPv2

A

-IPv6 support
-Shorter Hello timer interval possible
More possible groups per interface

153
Q

HSRP Active election

A

-NO other HSRP routers? active
-Exisiting negotiating router? highest priority wins
-Existing active router?
If ‘no preempt’ -> standby
if preempt and higer prior -> active

154
Q

HSRP tiebreaker

A

highest IP

155
Q

default HSRP priority

A

100 (1-255)

156
Q

KVM (context of cloud)

A

Keyboard, video display or mouse

157
Q

Virtual data center kenmerken

A
  • All hardware in data center is treated as capacity
  • Each OS is decoupled from hardware
  • Each piece of hardware can run multiple VMs at the same time
158
Q

Multithreading

A

Virtually split up each core in multiple threads that then can be used as by a hypervisor as a virtual CPU to run a VM on

159
Q

Bare metal / type 1 hypervisor

A

Runs directly on the hosts’ hardware

160
Q

Hosted / type 2 hypervisor

A

Runs on top of the primary OS (ex. vmware, virtualbox)

161
Q

ToR switch

A

Top Of The Rack switch, switch located on top of the server rack

162
Q

EoR switch

A

Swithes on the end of a row of server stacks. Acts as a distribution switch for the ToR switches

163
Q

Virtual data center workflow (3 steps)

A

-Customer wants a service (group of VMs)
-Virtualization/server engineer uses a GUI or API to set things up
-Hypervisor creates a number of VMs and starts them.
!!THIS IS NOT CLOUD, CLOUD WOULD NOT HAVE STEP 2!!

164
Q

5 Criteria for Cloud

A
  • On demand / self-service
  • Scales dynamically
  • Pool of resources that is dynamically allocated
  • Variety of network access options
  • Can be billed on amount used
165
Q

Private Cloud

A

Service inside a company for internal customers, that meets the 5 criteria

166
Q

Cloud services catalog

A

Lists anything a user can request from the cloud infrastructure

167
Q

Public cloud

A

Third party solution offered over network. Broad access positbilities (wan.. vpn..)

168
Q

IaaS

A

Infrastructure as a Service (IaaS)

  • Consumer receives the use of a VM
  • Specs can be chosen (OS, RAM, CPU, etc)
  • Consumer installs whatever they want on the VM
169
Q

SaaS

A

Software as a Service (SaaS)

  • Consumer receives a service with working software
  • VMs and hardware specs are hidden from consumer
  • Customer picks application and cloud provider monitors performance
170
Q

Paas

A

Development Platform as a Service (Paas)

  • Like IaaS, but besides the OS contains many development tools
  • including IDE
  • Continuous integration tools: allow to update code and have that code auto tested and integrated into a larger project.
171
Q

Public Cloud over internet (pros and cons)

A

Pro

  • Quick startup
  • Easy migration
  • Distributed users: Enterprise users can be scattered across locations and still have easy access

Cons

  • Insecure: vulnerable to MitM attacks
  • Capacity
  • No QoS
  • No WAN SLA possible
172
Q

Public cloud with Private WAN (Pros and Cons)

A

Pros

  • Secure
  • QoS

Cons

  • Expensive
  • More planning
  • Migrating is difficult
  • Capacity
173
Q

Public Cloud with Internet VPN (pros and cons)

A

Pros

  • Secure
  • Easy migration
  • Quick startup

Cons

  • No QoS
  • Capacity
174
Q

Intercloud Exchanges (pros and cons)

A

Pros

  • Secure
  • QoS
  • Easy migration

Cons

  • Planning
  • Capacity
175
Q

Virtual Network Function (VNF)

A

Virtual instance of tradition networking device a consumer can use in the cloud and has control over.

176
Q

Cloud DNS services

A

Cloud provider allocates public IP and creates matching DNS records.
-A: enterprise adds this DNS record to their own
B: Enterprise points its DNS record to the DNS server of the cloud provider

177
Q

DHCP in the cloud

A
  • Consumer can pick adresses or lets provider choose

- Public IP is NAT’ed to the right private one by the provider

178
Q

Private addressing over WAN (Cloud)

A

Consumer can ask for their own private IPs only. Subnets get advertised in the rest of the enterprise. Config is done through the catalog or the API.

179
Q

NTP and the cloud

A

-VNFs and VMs often need to sync time with enterprise and can be configured as NTP clients.

180
Q

4 characteristics of network traffic

A

-Bandwidth
-Delay:
One-way delay (time from source to destination
2-way delay
-Jitter: difference in delay between consecutive packets
-Loss: can happen because of faulty cables but is also part of normal operation. If the queue gets filled, packets are discarded.

181
Q

What traffic characteristics matter for Webapps?

A
  • Jitter and delay

- -> users want a responsive webpage

182
Q

What traffic characteristics matter for file transfer?

A

Bandwidth and loss, for fast transfer times

183
Q

VoIP

A

Defines the means tot take the sound made at a telephone and send it inside IP packets over a network

184
Q

VoIP step by step

A
  1. Sound goes into horn
  2. A chip (codec) processes the sound to create binary code (160 bytes with g.711 codec) for certain time period (20ms)
  3. Phone places data inside UP packet
  4. Data gets send to destination IP
185
Q

What traffic characteristics matter for VOIP? + guidelines

A

Delay: one-way - 150ms
Jitter: 30ms
Loss: 1%

186
Q

QoS Guidelines for Video

A 
Bandwidth: 348Kbps to 20+ Mbps
Delay one way: 200-400ms
jitter: 30-50 ms
loss: 0.1-1%
Depends on how dynamic the video is
187
Q

When to best perform complex matching?

A

Early in a packet’s life

188
Q

Classification

A

The process of matching the header fields in a message to make a QoS decision and later marking the message by changing some bits in the header fields

189
Q

Marking

A

QoS changing one or more header fields and setting a value in the header

190
Q

Trust Boundary

A

Point in the network from which markings can be trusted. (Typically IP phone, because it sets DSCP and COS fields)

191
Q

DiffServ

A

Suggested marking values to create a consistent use of DSCP values.

192
Q

Diffserv values

A

Expedited forwarding (EF)
-for IP phone payloads (46)
Assured forwarding (AF)
-12 DSCP values

193
Q

ACL matching for QoS

A
  • All Fields in TCP/IP header are matchable for classification
  • BUT not all apps can be matched by well-known ports
194
Q

NBAR

A

Cisco network based application recognition. Provides build-in matching for over 1000 different subcategories of applications.

195
Q

ToS Byte - DSCP

A
  • Differentiated Services Code Point
  • Type of Service
  • byte in IPV4 header.
  • 6 bits
  • 64 different values defined by Diffserv
  • End-to-End packet
196
Q

ToS byte - IPP

A
  • IP Presidence field
  • Type of Service
  • Byte in IPV4 header
  • 3 bits
  • 8 different values (0-7 in dec)
  • End-to-End packet
197
Q

CoS / PcP

A
  • Class of Service / Priority Code Point
  • in the 802.1q header
  • 3- bit
  • Over Vlan Trunk
198
Q

TID

A
  • Traffic identifier
  • 802.1l
  • 3 bit
  • over wifi
199
Q

EXP

A
  • Now known as Traffic Class
  • Field in MPLS Label
  • 3 bit
  • Over MPLS Wan
200
Q

Class Selector(CS)

A

-DSCP values created by -Diffserv for backwards compatibility with IPP. (CS0-CS07)

201
Q

Expedited Forwarding (EF)

A

-Diffserv value for packets that need low latency, jitter and loss. (ex. VOIP) - decimal: 46

202
Q

Assured Forwarding

A

12 DSCP valures defined by Diffserv.

203
Q

Congestion Management / Queuing

A

Toolset for managing queues that hold packets while they wait to exit an interface.

204
Q

Round Robin

A

Take some from queue 1, move on to next and repeat.

205
Q

Prioritization queuing

A

one queue gets prior over another.

206
Q

Weighed Round Robin

A

take more from one queue before moving on to the next and repeat

207
Q

Class-based Weighted Fair Queuing

A

Each class receives at least the amount of bandwidth that was configured for it in case of congestion. (configured as percentage of link bandwidth)

208
Q

Low Latency Queuing (LLQ)

A

LLQ tells the scheduler to treat one or more Queues as priority queues so they don’t fill up. Results in Little delay, jitter and no loss. (for voice)

209
Q

Queue starvation

A

Scheduler never gets to service certain queues.
Avoid by limiting the amount of traffic send to priority queues by defining the maximum bandwidth a queue can use (instead of minimum )

210
Q

Classifier (QoS)

A

Sorts marked packets into the right queues

211
Q

Scheduler (QoS)

A

Decides which packet gets picked from which Queue next when the interface becomes available

212
Q

Priority strat for Voice and Video (6 steps)

A
  1. Round robin for data and non-interactive voice and vid
  2. Prioritize business crit apps if needed
  3. LLQ Scheduling for int voice and vid
  4. put voice and vid in seperate queues
  5. Define enough bandwidth for each priority queue to avoid policing
  6. Use Call Admission control to avoid policing
213
Q

What does a Policer do

A

Measures bit rate over time and compares with configed rate. Discards or remarks offending packets

214
Q

Remarking (policing)

A

a policer can remark offending packets and only discard them if the SPs network experiences congestion on the whole network

215
Q

Shaper

A

Slows messages down by queuing them

216
Q

Congestion Avoidance Tools

A

Attempt to reduce overall packet loss by preemptively discarding packets using TCPs own windowing mechanism

217
Q

Full Drop (congestion avoidance)

A

Congestion avoidance Tool drops all packets when certain treshhold is reached

218
Q

HSRPv1 MAC + group range

A

0000.0C07.ACxx 0-255

219
Q

HSRPv2 MAC + group range

A

0000.0C9F.Fxxx 0-4095

220
Q

HSRP protocol + port

A

UDP 1985

221
Q

IPv6 ACL implicit statements

A

permit icmp any any nd-na
permit icmp any any nd-ns
deny ipv6 any any

222
Q

APIC-EM?

A
  • Centralized control of enterprise networking devices through northbound APIs and applications that run as part of APIC-EM itself.
  • Collects info about the entire network
  • Does not remove control plane functions from networking devices
  • Allows for programmability and to send config to your devices
223
Q

APIC-EM applications

A
  • ESA : Enterprise Service Automation
  • IWAN : Intelligent WAN
  • PnP : Plug and Play
  • Path Trace
224
Q

How does APIC-EM control/get info from network devices?

A

Southbound interface – telnet, ssh, snmp, CDP

225
Q

What does path trace (APIC-EM) do?

A

Path trace takes a source and destination IP as input and analyzes the forwarding tables in the devices on the network. Show path on topology map.

226
Q

What options can you set in APIC-EM path trace?

A
  • Protocol and port
  • Periodic refresh
  • ACL trace
227
Q

What results does APIC-EM path trace show?

A

Devices in the path
Notifications about logic used (Switched for L2 routed for L3)
Protocols used in forwarding action (HSRP, OSPF,EIGRP,BGP,SVI,switched)

228
Q

What does ACL trace do?

A

Takes the path determined by path trace and analyzes any ACLs in that path. Analysis compares packet in your input with the ACLs in the path and determines whether it would be filtered.

229
Q

How are ACL trace results shown?

A

Icons overlaid on the networking devices

  • Check box, no color -> no acl
  • Green check box -> acl permits
  • Red X box -> acl denies
  • Triangle with ! > ACL may or may not deny
230
Q

What information does view matching ACEs show you?

A
  • ACL name

- Access control entry that matches the packet

231
Q

SNMP?

A

App layer protocol that provides a message format for communication between managers and agents

232
Q

SNMP Manager

A

network mgmt app running on host or server (nms)

233
Q

NMS (snmp)

A

Network management station - host that runs the SNMP manager

234
Q

SNMP agent

A

Sofware running inside each device that describes the config status and counters

235
Q

MIB (snmp)

A

Management information base. Database of variables that make up parameter status and counters on the agent. Inside of NMS

236
Q

Cisco Prime

A

SNMP application

237
Q

SNMP notifications

A

Communications send to NMS by agents listing the state of certain variables. (traps or informs)

238
Q

SNMP Traps

A

SNMP notification type:

  • Sent by agent to NMS
  • UDP
  • Fire and forget..no error recovery
  • Uses less overhead
239
Q

SNMP trap port

A

UDP 162

240
Q

SNMP port

A

UDP 161

241
Q

SNMP informs

A

SNMP notification type

-app layer reliability added: NMS must ack after receiving or the agent times out and sends again.

242
Q

SNMP OID

A

Object ID of a variable inside of the Management Information Database.

243
Q

SNMP security (3 facts)

A
  • Use ACLs to limit SNMP messages to known servers
  • SNMP supports basic clear-test pass
  • SNMPv3 adds modern security
244
Q

Community strings

A
  • Agent and manager need same string
  • each Get and Set includes the string
  • RO: allows get
  • RW: allows get and set
  • Notification: allows traps and informs
245
Q

SNMP traps/informs config

A
  • Agent needs ‘snmp-server host’ referring to the NMS

- Notification community strings need to be configured

246
Q

SNMPv2c

A

SNMPv2 shipped without community strings but people wanted them, so they were added in v2c

247
Q

SNMPv3 security

A
  • message integrity
  • Authentication with hashed pass
  • Encryption (optional)
248
Q

SNMP how to enable informs

A

Add the keyword ‘informs’ to the snmp-server host command.

249
Q

SNMP show commands and info

A

show snmp (lists status and counters, but no config)
show snmp community (lists strings as well as ACLs)
show snmp host (lists host ip or hostname of configured NMS)
show snmp location/contact

250
Q

SNMPv3 kenmerken

A
  • No community srings

- Server groups and server user

251
Q

SNMPv3 three security settings

A
  1. noauth: only checks integrity
  2. auth: performs authentication and integrity
  3. priv: encrypts, authenticates and checks integrity
252
Q

Default viewstate of SNMP MIB

A

v1default

253
Q

SPAN

A

Swtiched Port analyzer makes copies of ethernet frames and sends them out a specific port towards for ex IDS

254
Q

SPAN source port

A

Port from which SPAN copies frame

255
Q

SPAN destination port

A

port out which the frames need to be send

256
Q

SPAN session

A

collection of span rules. Defines source ports as well as the direction of the traffic being copied

257
Q

SPAN Tx

A

Frames being transmitted

258
Q

SPAN Rx

A

Frames being received

259
Q

RSPAN

A

SPAN to a remote destination over L2

260
Q

ERSPAN

A

Encapsulated RSPAN - span traffic in a tunnel over L3

261
Q

Destination port SPAN

A
  • Can not be a source port
  • Can not be used in another session
  • Does not participate in L2 protocols
262
Q

Source port SPAN req

A
  • Trunks
  • VLAN
  • Etherchannel
  • Interfaces
  • Multiple sources possible
  • Can not mix interfaces and VLAN
263
Q

SPAN Recommandations

A
  • Catch only what you need
  • Capture as little as possible
  • Enabling two directions on two switchports can result in capturing the same frame twice
264
Q

IP SLA

A

Cisco feature that provides statistics to determine of SLA has been met. Can also be used for troubleshooting.

265
Q

IP SLA specifics

A
  • Runs on router, not end user device
  • Generates traffic that mimics end user traffic
  • IP SLA
266
Q

IP SLA life unit of time

A

seconds

267
Q

IP SLAP icmp-echo config

A

ip sla 1
icmp-echo 10.1.3.2 source-ip 10.1.1.1
ip sla schedule 1 life forever start-time now

268
Q

ip sla restart number

A

Resets the counts

269
Q

How is IP SLA history stored?

A

in a history bucket per operation using one

270
Q

SPAN destination port ‘learning’

A

The port does not transmit any traffic except that traffic required for the SPAN session unless learning is enabled. If learning is enabled, the port also transmits traffic directed to hosts that have been learned on the destination port.

271
Q

Poison reverse

A

router marks the failed route and sends it out the interface that the
route was learnt from (defies split horizon)

272
Q

aaa-new-model

A

enables AAA services in the local device and allows new commands

273
Q

Etherchannel requirements

A

Same duplex
Same speed
Same VLAN configuration (i.e., native VLAN and allowed VLAN should be same)
Switch port modes should be same (access or trunk mode)

274
Q

Where does the MPLS header get added?

A

Between data link header and ip header. Sometimes called a layer 2.5 protocol for this reason.

275
Q

BGP states

A

Idle: neighbor not up, or waiting for retry
Connecting: trying to establish TCP
Active: TCP connection est. but no BGP messages send yet
OpenSent: Router has sent first BGP message to establish neighborship
OpenConfirm: Router has received Open message from other router
Established: done

276
Q

Command to enable 802.1x on switchport

A

authentication port-control {auto | force-authorized | force-unauthorized}

277
Q

HSRP for ipv6 mac address

A

MAC address range from 0005.73A0.0000 through 0005.73A0.0FFF.

278
Q

FHRP protocols

A

a) HSRP - Cisco
B) VRRP - Industry standard
D) GLBP - Gateway Load Balancing Protocol, Cisco protocol, adds loadblanacing

279
Q

iOS password encryption types

A

0: clear text
4: SHA-256
5: MD5
7: Vigenere
8: PBKDF2-SHA-256
9: scrypt

280
Q

All hosts multicast

A

224.0.0.1

281
Q

All routers multicast

A

224.0.0.2

282
Q

RIP multicast

A

224.0.0.9

283
Q

HSRPv2 multicast

A

224.0.0.102

284
Q

GLBP multicast

A

224.0.0.102

285
Q

EIGRP neighbor command

A
  • Statically sets neighbor

- Will only send unicast

286
Q

PPPoe Active discovery messages (PADx)

A

Initiation (PADI)
Offer (PADO)
Request (PADR)
Session (PADS)

Termination (PADT)

287
Q

LCP states

A

An LCP state of open means that LCP was successfully completed, while an LCP state of closed indicates an LCP failure.

288
Q

Three parts of SNMPv3

A

View: To which OIDs does the group have access? (cf GPO)
Group: What kind of access does the user have to which view? R/RW. what PRIV lvl? (auth; noauth, priv) - linked to view
User: user pass, name, type of encryption, type of hashing, linked to group

289
Q

OpenFlow

A

OpenFlow is a communications protocol that gives access to the forwarding plane of a network switch or router over the network.

290
Q

Cisco Open SDN controller

A

The Cisco Open SDN Controller uses an Open SDN model with an OpenFlow Southbound Interface as defined by the Open Networking Foundation (ONF). The ONF SDN model centralizes most control plane functions. The APIC model for data centers partially centralizes control plane functions. The APIC-EM controller (as of time of publication) makes no changes to the control plane of routers and switches, leaving those to run with a completely distributed control plane.

291
Q

K values

A

K1 Bandwidth Lowest bandwidth of route
K2 Load Worst load on route based on packet rate
K3 Delay Cumulative interface delay of route
K4 Reliability Worst reliability of route based on keep alive
K5 MTU Smallest MTU in path [Not used in route calculation]

Icnd2 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions