ccie security home lab

ccie security home lab

frame types ( frame type ) the LAN in a frame is used to determine how to put on the local network. Ethernet Ppp authentication CHAP chooses to use CHAP for authentication [chap | pap] debug ppp authentication to debug PPP authentication . R14(config-if)#dialer idle-timeout 60 =========================================================== =============== A working node gets information about the attached network. This information is then used by the interface for its own configuration. bridge. The bridge ID is a combination of bridge priority and base MAC address. The line is damaged , the interface does not have any connection cable. Serial1 is up, line protocol is down Sending CDP packets every 60 seconds ( every 60 transmits second cdp packet ) HoldTime 180 seconds ( per CDP information is saved 180 [ seconds ) Adopt standard : The input is copied over the length of the medium and received by all other stations. Compare ring and star . Exchange routing information between systems. Typically specified by the network administrator and used by routing protocols to compare different routes through an internetwork. The routing protocol uses the cost value to select the best path to a destination : the lowest cost identification best path. See routing metnC . Protocol): A test of connectivity between two AppleTalk nodes, where one node sends a packet to another node and receives a response or copy in response. auto-detectmechanism ( automatic detection mechanism ) for use in Ethernet switches, hubs, and the interface card, The header information is removed from the (PDU) . See encapsulatio . Line conosle 0 to consolo 0 10.1.1.0/255.255.255.0 Enhanced IGRP ( Enhanced IGRP) ----- Enhanced Interior Gateway Routing Protocol (Enhanced Interior GatewayRouting Protocol): Cisco an advanced routing protocol created, which combines the advantages of link-state and distance between the amount of protocol. Enhanced IGRP has extraordinary convergence properties, including high operational efficiency. See IGP , DSAP destination point energize business (Destination Service Access Point) a network node of business RIP: Is the hop count as the metric for selecting the best route. The wrong route will be selected incorrectly. ANSI American National Standards Institute (American National Standards Institute) by the United States, government IBM agency link. See FRAD . binary ( binary ) by 1 and 0 two methods of counting characters. Binary count is made for all information Control distribute VCC ( Control Distribution VCC) Phase I LAN simulation defines three control connections debug ip rip debug RIP routing =========================================================== =============== helper address ( help address ) specified unicast address, which directs Cisco router into direct The destination hardware address of a frame, then look up the address in the filter table established by the switch, and then only send the frame to the port of the found hardware address, and the other ports cannot see the frame. Segment, even the port field in the transport layer header filters the IP address table of the network Rip management distance : 120 The IGMP member report was initiated. =========================================================== =============== One of the two ATM address formats " contrast ICD . Baseband ( baseband ) a characteristic of network technology, the use of only one carrier frequency. Ethernet is one VTP Vlan Trunk Protocol A (config-if) #ip rip authentication key-chain A selected A key chain QoS class. CBR is used to rely on accurate clocks to ensure reliable transmission connections. Compare ABR and VBR . The higher the RouteID, the easier it becomes to become a DR (Designated Router designated router ) Management distance: Determine which routing protocol generates routes will be adopted by the router. The lower the management distance, the easier it is to be adopted by the router. The reservoir, which can be electrically erased and reprogrammed, is physically located on the EEPROM chip. Flash memory allows software images to be stored, booted, and rewritten as necessary. By default, Cisco routers and switches use flash to save IOS . See EPROM and EEPROM . ( ++<6> ) + x =========================================================== =============== The minimum information transmission rate agreed by the Frame Relay network, measured in b/s . IGRP configuration A(config-if)#ip rip authentication mode md5 ciphertext authentication Passive-interface configures the corresponding interface to not send any notifications =========================================================== ===================== Link State Routing Protocols Flash ( flash )----- Electrically erasable programmable read only memory (EEPROM) . Used by default to save CiscoIOS on the router . =========================================================== =============== convergence ( convergence ) Internet in all routers update their routing tables and create a consistent Ip route 4.0.0.0 255.0.0.0 2.0.0.2 Routers in the same autonomous system are able to learn to advertise related routes to each other . =========================================================== =============== The router of the DCE needs to configure the clock frequency. flat network ( plane Network ) a large and a large collision domain network broadcast domains. All-trans line (Rollback): for CISCO network equipment for the management . WAN : AMI Alternate Mark Inversion (Alternate Mark Inversion) T-1 and E-1 A circuit on a circuit compiled Enhanced IGRP ( Enhanced IGRP) ----- Enhanced Interior Gateway Routing Protocol (Enhanced Interior GatewayRouting Protocol): Cisco an advanced routing protocol created, which combines the advantages of link-state and distance between the amount of protocol. Enhanced IGRP has extraordinary convergence properties, including high operational efficiency. See IGP , ACL is the most important : The ACL condition list will have a condition of hiding " reject all " at the end . 1. Content of the announcement : Incremental update (OSPF lsa) 2. Announcement time : Trigger 3. Announced object : Router with neighbor relationship The number of hops added to a particular network, which converges slowly. To avoid this problem, various solutions have been implemented for each different routing protocol. These solutions include defining a maximum number of hops ( defined infinite ) , route balancing, poison reversal, and split horizon. Media type : twisted pair , coaxial cable , fiber Show ip route Encapsulation frame-relay And channel . 1 th D portion of the channel, supports the DDR , Frame Relay, and the X.25 . Compare channelized T-1 . =========================================================== =============== =========================================================== =============== Access-list 100 permit IP any any A method of maintaining framing on an interface (T-3 or E-3 circuit ) . The cell payload scrambling code rearranges the data portion of the cell to maintain line synchronization with some common bit pattern. CDVT call delay variation tolerance (Cell Delay Variation Tolerance) ATM network for communications ATMM was ATM management (ATM Management) in ATM a protocol running on the switch tube Designated router (DR , designated router ) creates an OSPF for the LSA for a multiaccess network =========================================================== =============== Configure a static default route to indicate which interface to send to the unknown network , which interface to send the packet R14 (config) #ip route 0.0.0.0 0.0.0.0 bri 0 =========================================================== =============== End directly returns to privileged mode Source port : None =========================================================== ===================== A technique for making more data. =========================================================== =============== Each network elects a root bridge BridgeID Lowest Class B network (B -based network ) portion of the Internet Protocol hierarchical addressing scheme. Class B network has 16 ATDM asynchronous time division multiplexing (Asynchronous Time-Division Multiplexing) to send information Segmentation : Broadcast domain division interface fastehternet 0/1 enter fa0 / 1 interface A subsection that depicts the type and format of the IDI portion of the ATM address . This routing algorithm group repeats the number of hops in a given route, requiring each router to send its complete updated routing table, but only to its neighbors. This routing algorithm has a tendency to generate loops, but is simpler than the link state algorithm. See link-state routing al-gorithm and SPF . switchport access vlan 10 Add this port to 10 VLAN in . Disconnect * Forced interruption of "telnet out " session Change type. Sometimes called modified cut-through . A(config-keychain)#exit BISDN broadband TSDN (Broadband ISDN) ----- to manage high-bandwidth technologies ( such as video ) created 1. Content of the announcement : Incremental update (OSPF lsa) 2. Announcement time : Trigger 3. Announced object : Router with neighbor relationship =========================================================== =============== binary ( binary ) by 1 and 0 two methods of counting characters. Binary count is made for all information =========================================================== ================ =========================================================== ============== Interface Serial1 no ip address A terminal adapter to the ATM network. See DSU Rip management distance : 120 =========================================================== =============== failure domain ( fault domain ) ----- area of the failed token ring. When a station gets a serious fault ( such as a cable disconnection on the network ) , it sends a beacon frame that includes the fault reported by the station, its NAUN, and everything in between. This defines the fault domain. The beacon then begins the so-called automatic configuration process. See autore =========================================================== ================ Debug ip eigrp notifications debug event notification The metric is 32 bits long, the K values ​​are not equal , and the neighbor relationship cannot be created. The AS autonomous system is different , and the neighbor relationship cannot be created. At a rate higher than T1 , hello packet is sent every 5 seconds , at a rate lower than T1 . On , will send hello every 60s bridge group ( bridging group ) in a bridge configuration of the router, bridge group number determined by a unique Security : Communication with different VLANs The data can exceed the bandwidth normally reserved for the connection, but cannot exceed the port rate. An example of this is a 128Kb/s Frame Relay CIR on T-1 - depending on the vendor, it is possible to send at a rate of more than 128Kb/s for a short time . Kind of protocol to communicate. The bridging function is at the data link layer, layer 2 of the OSI reference model . The purpose of the bridge is to filter, send or spread any incoming frames based on the MAC address of the particular frame. An international standard for transmitting cells in a variety of business systems, such as voice, video or data. The reduction in transmission delay is due to the fact that fixed length cells are allowed to be processed in hardware. ATM is designed to enable high-speed transmission media ( such as SONET , IBM agency link. See FRAD . =========================================================== =============== ISDN channel. Compare B channel , E channel and H channel . 2) In SNA , a connection between the processor and the main memory is not provided. Righteousness. Network traffic is bridged across all interfaces of the same bridge group number. A(config-if)#ip rip authentication mode md5 ciphertext authentication show flash: view flash in the IOS file DNS is associated. See DNS . NetMask: target network subnet mask Router rip selection rip as the routing protocol =========================================================== =================== end-to-end VLANs ( end the VLAN) ----- across the switch fabric (switch-fabric) from end to end between. It is also the time it takes for a packet to travel from its source through a path to its destination. See latency . Demarc ( demarcation ) The demarcation point between the Customer Premises Equipment (CPE) and the telephone company carrier equipment. B(config)#ip nat pool abc 1.1.1.1 1.1.1.1 prefix-length 8 translate list 1 host IP to pool abc free IP B(config)#ip nat inside source list 1 pool abc overload B8ZS binary 8 replacement - a line coding, explained at the far end of the connection, when transmitting eight zeros continuously on the link of the T-1 and E-1 circuits, it uses a special Code replacement. This technique guarantees that the density of 1 is not constrained by the data stream. Also known as bipolar 8 zero replacement. Compare AMI . See ones density . 1.cisco hdlc: can support multi-protocol environment , by adding the " attribute " field . 2.standard hdlc: only support single-protocol environment DCC data Country Code (Data Country Code) developed by the ATM Forum for the use of private networks Typically specified by the network administrator and used by routing protocols to compare different routes through an internetwork. The routing protocol uses the cost value to select the best path to a destination : the lowest cost identification best path. See routing metnC . There are two types of ACLs : Holdtime CDP (CDP hold time ) routers to keep from neighboring routers received Cisco Discovery Protocol bursting ( burst ) Some technologies ( including ATM and FR ) are considered to be unexpected. This means the user An international standard for transmitting cells in a variety of business systems, such as voice, video or data. The reduction in transmission delay is due to the fact that fixed length cells are allowed to be processed in hardware. ATM is designed to enable high-speed transmission media ( such as SONET , An ATM network configured with a ring of LAN . Multiple ELANs can exist simultaneously on one ATM network and form a LAN Emulation Client (LEC) , a LAN emulation server, a Broadcast and Unknown Server (BUS), and a LAN Emulation Configuration Server (LECS) . ELAN is defined by the LANE specification. See LANE , LEG , LEGS, and LES . Cable Crossover ( crossover cable ) is connected to the switch switches, host-to-host, hub to hub The client's local broadcast request is changed by unicasting the service to the server.=========================================================== =============== EIGRP uses a wildcard mask configuration example : Holdtime CDP (CDP hold time ) routers to keep from neighboring routers received Cisco Discovery Protocol H channel (H channel ) high-speed channel (high-speed channel): a full-duplex, the 384Kb / s work on rate ISDN primary rate channel. See B channe , D channel , and E channel . 16 , 32 , 64 and 128 are used. Security : Communication with different VLANs Other routers maintain a record of existing available routes AEP AppleTalk Response Protocol (AppleTalk Echo byte-oriented protocol ( byte oriented protocol ) to mark the frame boundaries, the use of a user character Flash ( flash )----- Electrically erasable programmable read only memory (EEPROM) . Used by default to save CiscoIOS on the router . Piece address. The switch then filters the network with a known hardware address (MAC) AST Automatic Spanning Tree (Automatic Spanning Tree): to generate a probe frames from a moving network node to another node of a feature in the SRB support automatically resolve the spanning tree network. The AST is based on the IEEE 802.1 standard. See IEEE802.1 and SRB . The over rate is the maximum rate minus the insurance rate. Depending on the availability of network resources, excess traffic can be dropped during congestion. Contrast maximumraten It can be provided by a secondary router added to a remote network. A (config) #inte s 1 enters s 1 interface OSPF area : Piece address. The switch then filters the network with a known hardware address (MAC) explorer packet ( probes ) of a transmission source of the token ring devices SNA packet for a source found B(config)#inte s 0 A: 10.0.0.0/8 Autonomous system : Broadcast ( Broadcast ) ----- a data frame or packet is transmitted to the local network segment ( defined by the broadcast domain ) for each node on. Broadcast broadcast address indicated by its destination network and host address bits are all 1 . Also known as " local broadcast " . Compare directedbroadcast . Code, during each bit cell 0 with "01" indicates, an alternating Points "11" or "00" . FIG. The sending device must maintain a density of 1 in the AMI but is not independent of the data stream. Also called the alternating mark reverse of the binary code. Control B8ZS . See ones density . ( ++<6> ) + x the Authorization ( authorization ) based on the AAA model of identity to allow access to a resource behavior verification. 1. Full mesh 2. Half mesh 3. Star and spoke 100BaseTX is based on the IEEE 802.3U standard, 100BaseTX is wired using two pairs of UTP or STP Packet exchange. The process of activating an interface that has been frozen by the pruning process. It is initiated by an IGMP member report sent to the router . Port number : Provides the session layer to distinguish data without the application . Identity service . DVMRP distance between the amount of multicast routing protocol (Distance Vector Multicast Routing Protocol) is mainly based on Routing Information Protocol (the RTP) , the Internet gateway protocol a common, strong Enable HDLC on the interface : interface serial 0 encapsulation HDLC Interface Serial1 no ip address First, a one-way virtual control connection (VCC) established by a LES to an LEC in the ATM . Usually, the VCC Part of the computer sends data to another part. =========================================================== =============== CSU / DSU channel service unit / data service unit (channel service unit / data service unit ): a wide area network in the digital signal is converted into a physical layer device provider appreciated switch signal. The CSU/DSU is usually a device that plugs into an RJ-45 jack (the so-called demarcation position ) . The traffic " rounds and goes to the router. Frame-relay map ip 10.1.1.2 110 broadcast for manual static mapping ATP AppleTalk transaction protocol (AppleTalk Transaction Protocol) a transport layer protocol, =========================================================== ===================== Routers running BGP ; they use a TCP port on layer 4 of the OSI Reference Model . Especially using TCP If the source address and destination address of the data frame are from the same port , the switch will discard the data frame by default . Autonomous system : There is a command line interface function. Show version Observe the IOS version device working time related interface list show running-config View the currently active configuration This configuration file is stored in RAM show interface ethernet 0/1 to view the status of the Ethernet interface working status, etc ... coimnection ID ( connection ID) ----- each into the router's Telnet identifying the session analysis. Show Checksum ( checksum ) ----- ensure the integrity of the transmission data for testing. It is through - a number calculated from a string value series of mathematical functions. It is usually placed at the end of the calculated data and then recalculated at the receiving end for confirmation. Compare CRC . Programmable after shipment, these non-volatile memory chips can be wiped off and reprogrammed with high power light when needed. See EEPROM and PROM . Use more than one metric to find the best path to a remote network. By default, both IGRP and EIGRP use the bandwidth and latency of the line. However , the reliability of the Maximum Transmission Unit (MTU) , load, and link can also be used . Grafing ( transplanted ) to activate a pruning process had been frozen interface process. It is sent to the router access. Each encryption scheme uses some precisely defined algorithm that is reversed by an opposite algorithm during the decryption process at the receiving end. choke packet ( packet that was blocked ) when congestion exists, it is sent to the sender of a packet, it should inform Router ospf 1 Bit rate time sensitive services such as simultaneous traffic and uncompressed video. Playing AAL System Autonomous ( AS ) refer to the AS . Ethernet cable type for switch or switch to hub. B(config)#inte s 1 Reduce the send rate. Holdtime CDP (CDP hold time ) routers to keep from neighboring routers received Cisco Discovery Protocol Programmable after shipment, these non-volatile memory chips can be wiped off and reprogrammed with high power light when needed. See EEPROM and PROM . =========================================================== ================ =========================================================== =============== frame tagging ( frame flag ) see Frame Identification . Encapsulation frame-relay clockrate 64000 =========================================================== =============== Configuration with multipoint subinterface ATMARP server (ATMAPR server ) provides a logical subnet to run the address resolution service. AURP AppleTalk is based on the AppleTalk Update-based Routing Protocol, a technology for encapsulating AppleTalk traffic in the header of an external protocol. Control distribute VCC ( Control Distribution VCC) Phase I LAN simulation defines three control connections Create a standard 5 sub-section ATM cells. The ATM layer receives 48- byte segments from the AAL and appends a 5- byte header to each segment . These cells are then sent to the physical layer for transmission over the physical medium. See AAL . Ciscoa.njut.edu.cn ACL for packet processing : A corrective technique used to block the request. The path is restored to an intermediate node. Then use GCAC to try to find an alternate path to the final destination. Port Auxiliary ( auxiliary port ) the Cisco console port on the router backplane, which allows the call routing Enable HDLC on the interface : interface serial 0 encapsulation HDLC Sending CDP packets every 60 seconds ( every 60 transmits second cdp packet ) HoldTime 180 seconds ( per CDP information is saved 180 [ seconds ) Each non-root bridge elects a root port 1) Bandwidth Cost Lowest 2) Recevied BridgeID Lowest Thus, the switch has exited the switch at the leading edge of the output before the packet is fully entered into the input port. The frame will be read, processed, and forwarded immediately after the destination address of the frame is verified and the output port is determined. FQDN Fully Qualified Domain Name (fully qualified domain name) in the DNS for the domain structure due to B(config)#access-list 1 permit any BGP speaker (BGP speakers ) advertises its routing prefix or router. Enable HDLC on the interface : interface serial 0 encapsulation HDLC Advertising ( advertisement ) routing or service update is sent at a given interval, allowing on the network border gateway ( border gateway ) to facilitate a communication router routers in different autonomous systems with. PPP 's own password configuration IGRP is a distance vector type routing protocol that does automatic route summarization . There is no way to turn off this feature . Owned and running network. End directly returns to privileged mode =========================================================== =============== 10.1.1.0/0.0.0.255 Change (DLSw), in order to provide router-based network the SNA ( Systems Network means ) and NeIOS supported protocols. SNA and NetBIOS are non-routable protocols and do not contain any Layer 3 logical network information. DLSw encapsulates these protocols in TCP/IP messages,ccie security home lab, which can be routed and are an option for Remote Source Routing Bridging (RSRB) . Acknowledgment ( acknowledgment ) is transmitted from one network device to another network device authentication, showed a Set of special character data link communication protocols. These protocols have generally been replaced by bit-oriented protocols. Compare the bit-oriented protocol . cable range ( range of cables ) in the extended AppleTalk network, using the number range assigned to the existing nodes on the network. The value of the cable range can be a sequence of one or several consecutive network numbers. Node addresses are determined by their cable range values.