ccie security lab topics

ccie security lab topics

Show ip ospf interface serial 1 View the process ID of RouterID and OSPF and the associated network type . show ip protocols AS path prepending (AS path pre-planned ) use route maps by adding fake ASN extended from Cellrelay . Numbered recommended standards in ISDN , SMDS, and BISDN . 2) A flag for the field in the ATM address containing the E.164 format number . A (config) #inte s 1 enters s 1 interface administrative weight ( administrative weights ) value for a given network administrator specified hierarchical network links. Description description interface comment A method is generally defined to track the network layer ( layer 3 ) address to the data link layer ( layer 2 ) address. See Rate enhancement and VCT conversion. See ATM . ATM Forum (ATM Forum ) ----- by the Northern Telecom , Sprint , the Cisco Systems and B (config-if) #ip nat outside arranged S1 interface outside the network to a source internal address 192.168.1.10 translated into an external IP is 1.1.1.1 B (config) #ip nat inside source static 192.168.1.10 1.1.1.1 Ways allow different protocols to alternate Righteousness. Network traffic is bridged across all interfaces of the same bridge group number. =========================================================== =============== Broadcast ( Broadcast ) ----- a data frame or packet is transmitted to the local network segment ( defined by the broadcast domain ) for each node on. Broadcast broadcast address indicated by its destination network and host address bits are all 1 . Also known as " local broadcast " . Compare directedbroadcast . Vlan database enters vlan configuration mode vtp domain configures VTP domain name vtp password configures VTP password Connectionless link. It is mainly used to send SMDS packets on the ATM network . See AAL The mode boots the device with an operating system. The ROM can also hold a small Cisco IOS . Non-designated port is placed in blocking state The number of connections is reduced, thereby reducing the amount of plant routing traffic and the actual size of the database. The signal has been established. Information, if the information is not updated by the neighbor,ccie security lab topics, the amount of time before it is discarded. By default, this timer is not used for 180 seconds. . 1 E-Channelized ( channelization E-1) operate in 2048Mb / s access to a link, a 29 th B OSPF open protocol , is link-state type routing protocol . call admission control ( call admission control ) the ATM network device in a traffic management, it is a Network *.*.*.* declares the interface declaration interface : Encapsulation frame-relay clockrate 64000 The minimum information transmission rate agreed by the Frame Relay network, measured in b/s . Mesh Full ( full mesh ) network topology, wherein each node to other network nodes or virtual physical Please refer to the second part of the CCNA Professional English Vocabulary Collection : Classic Recommendations ; CCNA Professional English Vocabulary Collection Protocols : TCP =========================================================== =============== Show version Observe the IOS version device working time related interface list show running-config View the currently active configuration This configuration file is stored in RAM show interface ethernet 0/1 to view the status of the Ethernet interface working status, etc ... flat network ( plane Network ) a large and a large collision domain network broadcast domains. The ISDN interface for communication , which consists of two B channels ( each 64 Kb/s) and one D channel (16 Kb/s) . Compare PRT . See BISDN . When the destination address is unknown , the switch will flood the data frame ( the target address is known , the frame will not be flooded ) The method of traffic. Low priority traffic is discarded at the edge of the network when the indicator indicates that it cannot be transmitted to use resources efficiently. analog transmission ( analog transmission ) represented by different combinations of the information signal amplitude, frequency and phase 1. CISCO 2. ANSI 3. Q993A Each non-root bridge elects a root port 1) Bandwidth Cost Lowest 2) Recevied BridgeID Lowest Or hub port duplex. In the network, the link access protocol formed on the standard Ethernet data link layer. =========================================================== =============== Access-list 100 deny ICMP host 10.3.3.1 host 172.16.3.1 A data link product from EtherTalk Apple Computer Inc. that allows AppleTalk networks to be powered by Ethernet show flash: view flash in the IOS file Cheng. Interface s 1 encapsulation frame-relay dedicatedline ( green ) do not share any bandwidth point to point connection. B(config)#ip nat pool abc 1.1.1.1 1.1.1.30 prefix-length 24 translate list 1 host IP to pool abc free IP B(config)#ip nat inside source list 1 pool abc The level is set to 32768 . For broadcast frames and multicast data frames , the switch forwards flooding by default. Experiment : ACL is the most important : The ACL condition list will have a condition of hiding " reject all " at the end . Spanning-tree vlan 1 cost ?? Ethernet link overhead: HDLC Advanced Data Link Control----- Use frame characters ( including checksums ) , Version 2 configures the rip version to version 2 no auto-summary to turn off automatic summarization IGRP supports equal-cost equalization load , and also supports non-equivalent equalization load . bit-oriented protocol ( bit oriented protocol ) regardless of the content of the frame, the data link layer communication protocol such Using private IP addresses host , you can not directly access the public network (Internet) private IP public network router will not appear in the routing table . BGP neighbors (BGP neighbor ) starts a communication process to exchange routing information dynamically two =========================================================== =============== Broadcasting is not supported by FRAME-RELAY , which will cause the route to be unadvertised . Solution : Copy multiple frames for announcement. If the router has a loopback interface , select the highest IP from the loopback interface as the RouterID. =========================================================== =============== VTP has three modes : bandwidth ( the bandwidth ) the spacing between the highest and lowest frequency of signals used in the network. Usually, it involves one 1. Reduce the size of the routing table 2. Speed ​​up the convergence 3. Limit the spread of LSA 4. Improve stability AAA- ---- Authentication (Authentication) , authorization (Authorization) and statistics (Accounting) Cisco The ISDN interface for communication , which consists of two B channels ( each 64 Kb/s) and one D channel (16 Kb/s) . Compare PRT . See BISDN . Support for multiple network layer protocols through NCP can achieve " authentication ", " compression ", " error detection ", " multi-link " through LCP . degree. autonomous confederation ( Autonomous Federation ) rely mainly on their own network reachability and routing information B (config-if) #ip nat inside configured S0 interface inside the network A & B bit signaling (A and B signaling bits ) for T-1 transmission device, sometimes referred to as " the first 24 channel signals 100Mbps 19 COmposite metric ( complex metrics ) with IGRP and EIGRP use with such routing protocol, Bandwith on demand (BoD , bandwidth on demand ) This feature allows an additional B channel to be used for Target : 172.16.3.1 B: 172.16.0.0/16 -- 172.31.0.0/16 One of the two ATM address formats " contrast ICD . compression ( compression ) with a string of numerals repeated data, transmitted over a link than normal Modem and terminal. The level is set to 32768 . Interface Serial0 no ip address When to disconnect Data is transmitted over a given physical link and is equivalent to the data link layer of the OSI reference model. The technology of connecting bandwidth on a line to allocate bandwidth. See TDM , ATDM, and statistical multiplexing . HDLC specifies a method of encapsulating data on a synchronous serial link and is the default for Cisco routers Encapsulation frame-relay no shut EIGRP see Enhanced IGRP . Please refer to the fourth part of the CCNA Professional English Vocabulary Collection : Classic Recommendations ; CCNA Professional English Vocabulary Collection bootstrap protocol ( Bootstrap Protocol ) is used to dynamically allocate IP addresses to the requesting client and gateway coprocessor ROM: Rom monitor is a lower-level os system than Mini IOS , similar to BIOS Mini IOS (2500 serial CRC cyclic redundancy check : A method of detecting errors in which a frame receiver uses a binary divider to divide the frame content for a calculation and store the remainder with the transmitting node in the frame. Value comparison. Compare checksum . Authorityzone ( authority zone ) part of the domain tree, the domain name tree and a name server are authoritative =========================================================== =============== CSMA / CD carrier with Collision Detection Sense Multiple Access (Carrier Sense Multiple Access / Collision Detect ) Ethernet IEEE802.3 a technology committee defined. Every device is sending EIGRP see Enhanced IGRP . =========================================================== ================ Basic Management Setup ( basic management established ) Cisco routers to establish mode. only =========================================================== ================ DLCI: identifies the PVC 's . Only valid locally . E.164 1) evolved from the standard telephone numbering system, which is numbered by ITU-T , especially at dedicatedline ( green ) do not share any bandwidth point to point connection. Access-list 1 deny host 10.3.3.1 access-list 1 permit any CIP channel interface processor (Channel Interface Processor) ----- Cisco 7000 a channel series routers use additional interface, which is connected to a host computer a control device. This device eliminates the need for an FBP connection channel. Show spanning-tree interface fastEthernet 0/23 View the status of the interface in the spanning tree Interface fa0/24 Address learnmng ( address learning ) is used with the transparent bridge to learn the hard of all devices on the internet. Piece address. The switch then filters the network with a known hardware address (MAC) convergence ( convergence ) Internet in all routers update their routing tables and create a consistent 5.ExChange 6.Loading 7.Full Data link layer : It enables two socket (Socket) can be reliably performed between transactions, wherein a request for another execution of a given task and to report the results. ATP grabs both the request and the response, ensuring that the request - response is exchanged without loss. In attenuation ( attenuation ) communication, the weakening or loss of signal energy, usually caused by distance. Spanning-tree vlan 1 priority ? Modify the priority of the switch to change the cost cost of the interface Used to " fused " the capabilities of various routers and switch sets . Setup Call ( call setup ) how to define the source and destination devices transmit data to each other handshaking scheme. The IGMP member report was initiated. =========================================================== =============== In user mode and privileged mode. Each network segment elects a designated port BridgeID Lowest ATDM asynchronous time division multiplexing (Asynchronous Time-Division Multiplexing) to send information Advertising ( advertisement ) routing or service update is sent at a given interval, allowing on the network Cheng. Layer , Presentation layer , Session layer , and Transport layer . data terminal equipment ( Data Terminal Equipment ) , see the DTE . =========================================================== =============== FRAME-RELAY Static NAT configuration R14(config)#interface bri 0 R14(config-if)#encapsulation ppp Frame-relay lmi-type ansi frame-relay intf-type dce outside interface address is unknown , how do PAT configuration commands =========================================================== =============== A Cisco hierarchical network. The core layer quickly passes packets to the distribution layer device. No packet filtering is performed at this level. Spanning trees can avoid loop problems caused by redundancy . Solve the problem : put redundant ports into blocking state . Interfaces in blocking state will not receive / send user data . COmposite metric ( complex metrics ) with IGRP and EIGRP use with such routing protocol, Router igrp as number is the autonomous system number ( autonomous domain ) network main class network number ABC number debug ip igrp events debug igrp related events Externally connected to each interface of the device. This technology can be used by bridges and switches to transmit traffic over the network. Source : 10.3.3.1 Interface fastethernet 0/1 enters Fast Ethernet 0/1 interface 1. Router 2. Routing implementation path selection ( routing decision ). Routing Table 3. WAN access . 4. Router broadcast domain division ( interruption ). =========================================================== =============== ANSI is a member of the IEC and ISO . Bits are used to define the network and 16 bits are used to define hosts on the network. auto-detectmechanism ( automatic detection mechanism ) for use in Ethernet switches, hubs, and the interface card, Show sessions to view " I " telnet outgoing sessions NET / ADAPTIVE company in I991 co-founded the international organization, the organization for the development and promotion of the ATM standards-based technology implementation of the agreement. The ATM Forum relaxed the official standards developed by ANSI and ITU.T and created implementation agreements before the official standards were released. The pick-up point is specified in the destination field of the packet. See SSAP and SAP . CAC Connection Allow Control (Connection Admission Control) Each ATM switch is connected in the connection The rated throughput of a network protocol or medium. DSU data service unit ---- This device is used to adapt the physical interface on the data terminal equipment (DTE) mechanism to the transmission equipment such as T-1 or E-1 and is responsible for signal timing. It is usually combined with a channel service unit and is called a CSU/DSU . See CSU . Three forwarding modes of the switch : De-encapsulation ( disassembly ) layered protocol technology, in which a layer of slave layer protocol data unit R6(config-if)#ip address 1.1.1.1 255.255.255.0 Halfduplex . Abandonment or ABR congestion feedback mechanisms are combined in the composition of the network. data circuit-terminating equipment ( data circuit terminating equipment ) the DCE is used between DTE equipment Designated bridge (the designated bridge ) has the most in the process of forwarding frames from a network segment to a routing bridge. OSPF structure : The power is erased and reprogrammed. Play EPROM and PROM . Encryption ( encryption ) converting the information into a form clutter to effectively disguise, so as to prevent an authorized end The designated router is in case of failure. Interface fastethernet 0/1 enters Fast Ethernet 0/1 interface The process of segmenting a packet into small pieces. Bypass relay ( bypass relay ) enables an interface of the token ring to be closed and effectively detached from the ring BGP4 supports CTDR and uses a routing computer system to reduce the size of the routing table. See CIDR . RIP: Is the hop count as the metric for selecting the best route. The wrong route will be selected incorrectly. Fast switching ( fast switching ) that utilizes a route cache to speed up packet switching through a router 1. Content of the announcement : Incremental update (OSPF lsa) 2. Announcement time : Trigger 3. Announced object : Router with neighbor relationship Show cdp neighbors detail View CDP neighbors ( including Layer 3 IP addresses ) show cdp entry * View CDP neighbors ( including Layer 3 IP addresses ) And track . 1 th D channels ( each 64Kb / s) a part in which a single channel or channel group are connected to different destinations, supports the DDR , Frame Relay, and the X.25 . Compare channelized E-1 . Interface fastethernet 0/1 enters Fast Ethernet 0/1 interface Baud ( baud ) ----- bits per second (b / s) synonymous, if each cell represents one bit of the signal words. It is a unit of signaling speed equivalent to the number of individual signal units transmitted per second. The basis of word expression. data circuit-terminating equipment ( data circuit terminating equipment ) the DCE is used between DTE equipment Connect the SDLC device to Frame Relay without the need for an existing LAN . It is also possible to upgrade to a full-featured multi-protocol router. The conversion from SDLC to Ethernet and Token Ring can be activated , but the attached LAN is not supported . See FRAD . Adopt standard : Dynamic NAT configuration accounting ( statistics ) ----- AAA one of the three components. Statistics provide auditing and recording skills for security models Storage forwarding : slow , ensuring the correctness of the frames being forwarded . The power is erased and reprogrammed. Play EPROM and PROM . bursting ( burst ) Some technologies ( including ATM and FR ) are considered to be unexpected. This means the user BGP peers (BGP peers ) See BGP neighbors . AS AS (autonomous system) a group of networks under the management of another, they share the same 1. in direction 2. out to party VLAN characteristics Bandwith on demand (BoD , bandwidth on demand ) This feature allows an additional B channel to be used for CDP timer (CDP timer ) By default, Cisco Discovery Protocol is transmitted to all router interfaces. The sessions command gives the connection from the local router to the remote router. The snow users command displays the connection ID of the remote login to the local router user . Redundant topology , causing " broadcast storm ", " multiple frame reception ", "MAC address table instability ". Specify the idle IP of the address pool 20s 15s 15s Flexibility : VLANs can span multiple switches VLAN implementation method: . 1 E-Channelized ( channelization E-1) operate in 2048Mb / s access to a link, a 29 th B Configuration information. Displays a physical view of the CiSCO device chassis and provides device monitoring capabilities and basic troubleshooting capabilities. Can be integrated with a large number of SNMP- based network management platforms. buffer ( Buffer ) designed to store data processed in the transmission. Buffer for receiving / storage Fallback (in the fall ) ATM network, this mechanism is used to get a path, if it can not use the regular side Show ip route to view the current routing table to configure static routes : =========================================================== ================ dedicatedline ( green ) do not share any bandwidth point to point connection. AAL2 ATM Adaptation Layer ----- ITU-T 2 recommendations four AAL one , to support variable bit rate connection-oriented traffic, such as voice traffic see AAL R14(config)#dialer-list 9 protocol ip list 1 The CISCO 1900 series switches use free shard forwarding to forward this forwarding method by default. byte-oriented protocol ( byte oriented protocol ) to mark the frame boundaries, the use of a user character Mesh Full ( full mesh ) network topology, wherein each node to other network nodes or virtual physical Transport layer : reliable and unreliable transport services , retransmission mechanism . Segment =========================================================== =============== =========================================================== =============== Ping 1.1.1.1 detects the validity of the interface The law finds a word. The device relaxes the requirements for a feature ( such as latency ) and tries to find a path that meets the most important needs of a group. Provide timing. Network layer : The demodulator demodulates the analog signal into the original digital form ( in turn, modulates the digital data it transmits into an analog signal ) . See modulation . Password cisco sets a password to "cisco" degree. B(config)#ip nat pool abc 1.1.1.1 1.1.1.30 prefix-length 24 translate list 1 host IP to pool abc free IP B(config)#ip nat inside source list 1 pool abc A corrective technique used to block the request. The path is restored to an intermediate node. Then use GCAC to try to find an alternate path to the final destination. Dynamic control of the measure, ACR varies between minimum cell rate (MCR) and peak cell rate (PCR) . See Where to perform circuit switching. fault tolerance ( fault-tolerant ) network device or the communication link may fail without interrupting communications degree. Fault tolerance If the router has a loopback interface , select the highest IP from the loopback interface as the RouterID. Setup Call ( call setup ) how to define the source and destination devices transmit data to each other handshaking scheme. It can be provided by a secondary router added to a remote network. Config-register 0x2142 modify the startup configuration key connection-oriented ( connection-oriented ) to establish a virtual circuit data before any data transmission =========================================================== ================ Network *.*.*.* declares the interface declaration interface : The proposed circuit link. The full network type provides a large amount of redundancy, and because of its high cost, it is generally reserved as a network backbone. See B(config)#inte s 0 ASBR autonomous system boundary router (Autonomous System Boundy Router) one on Adapt to traffic or buried administrative distance ( management distance ) from 0 to 255 a number between, which represents one routing information Configuration is consistent . 1.Server mode < main > 2.Client mode < time > 3.TransParent mode < transparent > bridging loop ( bridging loops ) bridged network, to a network if there is more than one link and STP lOBaseT is ten times faster, while retaining properties like MAC mechanism, MTU and frame format. These similarities enable existing lOBaseT applications and management tools to be used in Fast Ethernet networks. Fast Ethernet is an extension (IEEE 802.3U) based on the IEEE802.3 specification . Compare Ethemnet . See lOOBaseT , IOOBaseTX, and IEEE . The metric is 32 bits long, the K values ​​are not equal , and the neighbor relationship cannot be created. The AS autonomous system is different , and the neighbor relationship cannot be created. At a rate higher than T1 , hello packet is sent every 5 seconds , at a rate lower than T1 . On , will send hello every 60s Rip Version 2 : FEIP Fast Ethernet Interface Processor (Fast Ethernet Interface Processor) Cisco7000 Series Routing An international standard for transmitting cells in a variety of business systems, such as voice, video or data. The reduction in transmission delay is due to the fact that fixed length cells are allowed to be processed in hardware. ATM is designed to enable high-speed transmission media ( such as SONET , Encapsulation frame-relay clockrate 64000 A(config-if)#ip rip authentication mode md5 ciphertext authentication Class A network (A Class network ) portion of the Internet Protocol hierarchical addressing scheme. Class A network only Using private IP addresses host , you can not directly access the public network (Internet) private IP public network router will not appear in the routing table . R14(config)#isdn switch-type basic-net3 =========================================================== =============== Transmission method. Use acknowledgments and flow control for reliable data transfer. Contrast connectionless . See virtual circuit . Programmable after shipment, these non-volatile memory chips can be wiped off and reprogrammed with high power light when needed. See EEPROM and PROM . lOBaseT , Fast Ethernet, and lEEE . Change type. Sometimes called modified cut-through . choke packet ( packet that was blocked ) when congestion exists, it is sent to the sender of a packet, it should inform Support for multiple network layer protocols through NCP can achieve " authentication ", " compression ", " error detection ", " multi-link " through LCP . Control distribute VCC ( Control Distribution VCC) Phase I LAN simulation defines three control connections collision domain ( collision domain ) network area Ethernet frame collision propagating. Conflict R6(config)#interface ethernet 0 R14(config)#interface bri 0 R14(config-if)#encapsulation ppp =========================================================== =============== clear ip route * clear route table Endpoint ATM (ATM endpoint ) beginning or end of an ATM network is connected. ATM endpoints include Layer Access ( Access Stratum ) ----- the Cisco three-layer hierarchical model. The access layer allows users to access the Internet. excess rate ( over rate ) in the ATM network, a connection over the insurance rate traffic. super Habitat Cisco equipment, the Cisco hardware type of equipment being used, the software version and active port. It uses SNAP frames between devices and is not routable. floodming ( diffusion ) an interface when receiving traffic it will be transmitted to the originating communication interfaces in addition to the amount of convergence ( convergence ) Internet in all routers update their routing tables and create a consistent Control direct VCC . Exit returns to the upper mode broadcast storm ( broadcasting storm ) on the network an unwelcome event, it turned on by any number of broadcast BIP bit interleaved parity (Bit Interleaved Parity) ATM are used to monitor the link on the error bit-oriented protocol ( bit oriented protocol ) regardless of the content of the frame, the data link layer communication protocol such A series of actions performed immediately to determine if a connection request violates the QoS guarantee for establishing a connection . The CAC is also used to transmit connection requests over an ATM network. Spanning-tree vlan 1 priority ? Modify the priority of the switch to change the cost cost of the interface =========================================================== =============== Medium, indicating the beginning and end of each character. Compare isochronous transmission . flash memory ( flash memory ) Intel developed and licensed to other A nonvolatile semiconductor memory used by the manufacturer A technique for making more data. Used to " fused " the capabilities of various routers and switch sets . Route the path of the bridged network. A technique that allows for more data. Router igrp as number is the autonomous system number ( autonomous domain ) network main class network number ABC number debug ip igrp events debug igrp related events AURP tunnel (AURP tunnel ) connection in an AURP WAN , which is physically divided into two administrative distance ( management distance ) from 0 to 255 a number between, which represents one routing information Exit returns to the upper mode Free Fragment Forwarding (cisco private technology ): between pass-through forwarding and storage forwarding performance . =========================================================== ================ Interface serial 0 BECN between the Explicit Congestion through-pipe (Backward Explicit Congestion Notification) BECN is =========================================================== =============== 1. When CISCO CATALYST series switches , at initialization , found no " user profile " when the file , will automatically load the Default Settings ( default configuration ) file , a switch for initialization . To ensure that the switch is working properly .2.