ccie security lab pdf

ccie security lab pdf

bridging loop ( bridging loops ) bridged network, to a network if there is more than one link and STP DCE/DTE only exists in the WAN ! A & B bit signaling (A and B signaling bits ) for T-1 transmission device, sometimes referred to as " the first 24 channel signals The pick-up point is specified in the destination field of the packet. See SSAP and SAP . The EIA/TIA-232 interface circuit is also busy. classful routing ( hierarchical routing ) does not transmit the subnet mask information when sending routing update routing The location of the standard access control list application : the location of the access control list application that is applied to the interface that is closest to the target : the application is in the interface closest to the source, show ip interface serial 0, to view the configuration of the interface's acl . IBM agency link. See FRAD . =========================================================== =============== =========================================================== =============== Setup Call ( call setup ) how to define the source and destination devices transmit data to each other handshaking scheme. Spanning tree port UDP ( User Message Protocol ), no connection , no retransmission mechanism , unreliable transmission In ABR service allows a congestion feedback mode. EFCI can be set by any network element in immediate or some kind of congestion state. The destination end system can perform a protocol that adjusts and lowers the cell rate of the connection based on the EFCI value. See ABBR . In the network, the link access protocol formed on the standard Ethernet data link layer. CSU / DSU channel service unit / data service unit (channel service unit / data service unit ): a wide area network in the digital signal is converted into a physical layer device provider appreciated switch signal. The CSU/DSU is usually a device that plugs into an RJ-45 jack (the so-called demarcation position ) . The designated router is in case of failure. DLSw Data Link Switching (Data Link Switching) IBM in 1992 Exploitation AC data link The E-1 transmission line can be leased from a public carrier company for use as a dedicated line. Access control list (ACL) VLAN . The frame flag does this. The switch can then command the frame to the appropriate port. COmposite metric ( complex metrics ) with IGRP and EIGRP use with such routing protocol, ETP Ethernet Interface Processor, a Cisco 7000 Series Router BGP4 supports CTDR and uses a routing computer system to reduce the size of the routing table. See CIDR . Show cdp interface serial 1 View the CDP information of the interface. CDVT call delay variation tolerance (Cell Delay Variation Tolerance) ATM network for communications B(config)#access-list 1 permit any Adapt to traffic or buried congestion avoidance ( congestion avoidance ) to minimize latency, the ATM network for controlling the system into Change information, a spanning tree protocol that sends initialization packets at definable intervals. And make console configuration settings. Ethernet cable type for switch or switch to hub. Core layer : faster transfer rate , will not make any operations on the data packets Show history view history command ( command just used recently ) ELAP EtherTalk Link Access Protocol (EtherTralk Link Access Protocol) on EtherTalk Network Access-list 100 deny ICMP host 10.3.3.1 host 172.16.3.1 The IP address is converted to a MAC address. See RARP . ASN.1 Abstract Syntax Notation 1 (Abstract Syntax Notation One) used to describe a structure without a computer EPROM erasable programmable read-only memory----- The name of the Cisco Fusion Cisco Internetwork architecture on which Cisco IOS completes operations. design Telnet: Multi-person remote management ( depending on performance , number of VTY lines ). Not safe . Encapsulation PPP enables PPP on the interface ATCP AppleTalk control program (the AppleTalk Control Program) : establishing and configuring AppleTalk over The designated router is in case of failure. Encapsulation frame-relay clockrate 64000 CPE customer premises equipment is installed at the user's location and connected to the telephone company's network equipment, such as telephones, AMI Alternate Mark Inversion (Alternate Mark Inversion) T-1 and E-1 A circuit on a circuit compiled Ip add 10.1.1.1 255.255.255.0 debug ip rip debug RIP routing Interface Serial1 no ip address ------------------------------------------------- switchport access vlan 10 Add this port to 10 VLAN in . It is one of the four link metrics exchanged by PTSP to test the reliability of ATM network resources. Configuration with multipoint subinterface Datagram ( datagram ) as a network layer unit without the need to pre-establish virtual circuits and transmit them on the medium Show ip access-lists to view specific list conditions and matching information The switch will first cache the frame source address. The reservoir, which can be electrically erased and reprogrammed, is physically located on the EEPROM chip. Flash memory allows software images to be stored, booted, and rewritten as necessary. By default, Cisco routers and switches use flash to save IOS . See EPROM and EEPROM . Each network segment elects a designated port BridgeID Lowest Interface Serial1 no ip address bridge group ( bridging group ) in a bridge configuration of the router, bridge group number determined by a unique =========================================================== =============== No * do the reverse operation of the configuration Target : 172.16.3.1 =========================================================== =============== BGP speaker (BGP speakers ) advertises its routing prefix or router. device. Byte ( byte ) 8 bits. See octet . group. Because they do not forward broadcast frames, the broadcast domain is usually surrounded by routers. change. The central switch does not have on-site switching capabilities. Therefore, all customer connections are returned to the CO . See CO . The proposed circuit link. The full network type provides a large amount of redundancy, and because of its high cost, it is generally reserved as a network backbone. See The route to the network. Frame-relay map ip 10.1.1.2 110 broadcast for manual static mapping Target : 172.16.3.1 The proposed circuit link. The full network type provides a large amount of redundancy, and because of its high cost, it is generally reserved as a network backbone. See HDLC Advanced Data Link Control----- Use frame characters ( including checksums ) , Data is transmitted over a given physical link and is equivalent to the data link layer of the OSI reference model. Command Global ( global command ) is used to define the command Cisco terminology, which are used to change the entire router that configuration. In contrast, interface commands only affect that interface. =========================================================== =============== Ppp chap password cisco sends local password in CHAP mode =========================================================== =============== fault tolerance ( fault-tolerant ) network device or the communication link may fail without interrupting communications degree. Fault tolerance Advertising ( advertisement ) routing or service update is sent at a given interval, allowing on the network E channel (E channel ) loopback channel (Echo channel) ----- for a circuit switched 64Kb / s ISDN control channel. This channel may specifically described in 1984 in ITU-T ISDN find specification, but from the 1988 version canceled. See Bchannel , D channel H channel . It uses two pairs of twisted-pair cable (3 class 4 class or 5 classes ) , one pair for transmitting data to the other for receiving data. The sessions command gives the connection from the local router to the remote router. The snow users command displays the connection ID of the remote login to the local router user . The name-to- IP address resolution is provided on the special network . An example of an FQDN is bob.acme.com . compression ( compression ) with a string of numerals repeated data, transmitted over a link than normal Hostname ABC configuration local username ACL two actions : Frame-relay lmi-type cisco frame-relay intf-type dce ASCII American Standard Code for Information Exchange (American Standard Code for Information Interchange) representing character . 8 -bit code, by the seven data bits plus a parity bit. designated port ( designated port ) and the Spanning Tree Protocol (STP) used together to specify the forwarding port. If Show spanning-tree brief to view the spanning tree status (3500xl) (2950/3550 : show spanning-tree) Aggregation layer : the convergence layer of the access point , can provide routing decisions . Realize the safety filter , the flow control . Remote access . The main device : router . Add the port to the specified VLAN Interface fa0/24 ACL two actions : FRAME-RELAY LMI Signaling Typically specified by the network administrator and used by routing protocols to compare different routes through an internetwork. The routing protocol uses the cost value to select the best path to a destination : the lowest cost identification best path. See routing metnC . ATMlayer A sublayer of the data link layer in an ATM network that is service independent. for CONSOLE PORT ( management console interface ): distance limit , exclusive way . compression ( compression ) with a string of numerals repeated data, transmitted over a link than normal CDP Cisco Discovery Protocol (Cisco Discovery Protocol) Cisco proprietary protocol, used to tell the neighbor Sended and is not reliable. Compare connection-oriented . See virtual circuit . A connectionless protocol responsible for sending datagrams over an internetwork. A corrective technique used to block the request. The path is restored to an intermediate node. Then use GCAC to try to find an alternate path to the final destination. 16 , 32 , 64 and 128 are used. Ppp chap password cisco sends local password in CHAP mode =========================================================== =============== The description in the dynamic routing table is clear. A technique that differs from ordinary TDM in that time slots are allocated when necessary rather than pre-assigned to certain transmitters. Compare FDM , statistical multiplexing, and TDM . B(config)#ip nat inside source list 1 interface serial 1 overload FRAME-RELAY LMI Signaling RouterID generated ? 1. Full mesh 2. Half mesh 3. Star and spoke (Amplitude magnitude ) the maximum analog or digital waveform. =========================================================== =============== FRAME-RELAY topology (pvc) =========================================================== =============== Show interfaces fastethernet 0/1 switchport De-encapsulation ( disassembly ) layered protocol technology, in which a layer of slave layer protocol data unit " The main explanation is F ,ccie security lab pdf, G , H vocabulary beginning. dial backup ( Dial Backup ) dial-up connection is typically used to provide redundancy backup frame relay connection. Backup chain BPDU Bridge Protocol Data Unit (Bridge Protocol DataUnit) between the cross-bridges in the network =========================================================== =============== FRAME-RELAY 1. Static NAT 2. Dynamic NAT 3. PAT Rip : Router information protocol Address learnmng ( address learning ) is used with the transparent bridge to learn the hard of all devices on the internet. CIP channel interface processor (Channel Interface Processor) ----- Cisco 7000 a channel series routers use additional interface, which is connected to a host computer a control device. This device eliminates the need for an FBP connection channel. Private IP address : B(config)#inte s 0 Debug ip eigrp notifications debug event notification =========================================================== =============== =========================================================== =============== 10.1.1.0/0.0.0.255 control direct VCC ( control direct VCC) ----- Phase I LAN one of three emulation control connection defined in the ATM by \ a LEG to a LES established bi-directional virtual control connection (the VCC) . See control distribute VCC . The PPP protocol is defined in RFC 1378 . See PPP . access method ( access method ) network devices gain network access Wan style. Each network segment elects a designated port BridgeID Lowest Kind of protocol to communicate. The bridging function is at the data link layer, layer 2 of the OSI reference model . The purpose of the bridge is to filter, send or spread any incoming frames based on the MAC address of the particular frame. cable range ( range of cables ) in the extended AppleTalk network, the existing nodes on the network so that Righteousness. Network traffic is bridged across all interfaces of the same bridge group number. Ip route 4.0.0.0 255.0.0.0 s0 The metric is 32 bits long, the K values ​​are not equal , and the neighbor relationship cannot be created. The AS autonomous system is different , and the neighbor relationship cannot be created. At a rate higher than T1 , hello packet is sent every 5 seconds , at a rate lower than T1 . On , will send hello every 60s CONSOLE PORT ( management console interface ): distance limit , exclusive way . Register cofiguration ( Configuration Register ) ----- in hardware or software stored in a 16 -bit value may be configurable, it is determined during initialization Cisco router functions. In hardware, the bit position is set using a jumper. In software, it is set by the specified special bit pattern, which is configured with a hexadecimal value along with the configuration command to set the boot options.