Switching Flashcards
What is the ID used to elect the Root Bridge
Bridge ID, priority value + MAC
What is the ID used to elect the Root Bridge
Bridge ID, priority value + MAC
What are the three types of BPDU
Configuration
TCN (Notification)
TCA (Ack)
What is the role of a VTEP
The VTEP encaps/decaps traffic on VXLAN tunnel
What is required for L3 operations not to be interrupted when using SSO?
NSF is required. With NSF+SSO CEF entries are not purged so the L3 flap occuring when a sup reloads is covered and operations can continue.
What are the 2 tables used by CEF for its decisions
The FIB and the Adjacency Table
What QoS component can have an impact on how a packet is handled on a network?
Marking
What is the FIB populated with?
A copy of the forwarding information in the IP routing table.
When routing or topology changes occur in the network, the route processor updates the RIB and CEF updates the FIB. There is a one-to-one correlation between FIB & RIB.
What is the adjacency table populated with?
The adjacency table is populated each time an adjacency entry is created (ex: ARP), a link-layer header for that adjacent node is stored in the adjacency table. Once a route is determined, the link-layer header points to a next hop and corresponding adjacency entry.
What’s a Bridge ID?
The criteria for root bridge election.
Prio+Mac
Lowest wins.
What are two methods of SGT tags propagation
Inline Tagging
SXP Propagation
What are the three phases of Trustsec
Classification (ingress)
Propagation
Enforcement (egress)
What is included in NGFW
Standard FW functions including stateful inspection
IPS
Application level inspection
External Intelligence to mitigate new threats
Name 2 new capacities of Cisco NGFW
Advanced malware detection
Application-layer attack detection
What happens with this configuration:
Line vty 0 4
Login
Password cisco
Transport input telnet
If no local account is defined the password will always be ignored
What happens with the configuration
line vty 0 4
password cisco
transport input all
On telnet, no promps and straight up enable access.
What happens with:
line vty 0 4
password cisco
login local
transport input all
Password is ignored.
Local user enforced
What will happen here?
line vty 0 4
login
transport input all
No password is defined and the login command asks for a password, so access is never granted
