ccie security lab manual

ccie security lab manual

1Gbps 4 =========================================================== =============== =========================================================== =============== =========================================================== ===================== OSPF open protocol , is link-state type routing protocol . Show sessions to view " I " telnet outgoing sessions 1. Reduce the size of the routing table 2. Speed ​​up the convergence 3. Limit the spread of LSA 4. Improve stability A logical collection of information. IP datagrams have become the main unit of information for the Internet. In the OSI layers reference model, the term cell (Cell) , frame (Frame) , the message (message) and the segment (segment) also define these logical information groupings. HDLC Advanced Data Link Control----- Use frame characters ( including checksums ) , A method of maintaining framing on an interface (T-3 or E-3 circuit ) . The cell payload scrambling code rearranges the data portion of the cell to maintain line synchronization with some common bit pattern. B#show ip nat translations view translation relationship table Transport layer : Specify the idle IP of the address pool The credibility value of the source. The smaller the value, the higher the level of constitutionality authentication ( authentication ) AAA first component model. Users generally pass the username and port baseline ( baseline ) baseline information, including historical data and information about the routine use of the network. This letter Debug ip eigrp notifications debug event notification It uses two pairs of twisted-pair cable (3 class 4 class or 5 classes ) , one pair for transmitting data to the other for receiving data. BGP speaker (BGP speakers ) advertises its routing prefix or router. 10OMb/S baseband Fast Ethernet specification. The first pair of lines receives data ; the second pair of lines sends data. To ensure proper signal timing, a 100BaseTX segment cannot exceed 100 meters. ! The VBR service delivers classic IP over ATM and LANE traffic. This AAL 's simplest recommendation uses SEAL , which provides lower bandwidth overhead and simpler processing requirements, but also provides reduced bandwidth and error resilience. See AAL Transport layer : In the network, the link access protocol formed on the standard Ethernet data link layer. Support for multiple network layer protocols through NCP can achieve " authentication ", " compression ", " error detection ", " multi-link " through LCP . BRI Basic Rate Interface (Basic Rate Interface) facilitate cross-circuit between video, data and voice Use more than one metric to find the best path to a remote network. By default, both IGRP and EIGRP use the bandwidth and latency of the line. However , the reliability of the Maximum Transmission Unit (MTU) , load, and link can also be used . And track . 1 th D channels ( each 64Kb / s) a part in which a single channel or channel group are connected to different destinations, supports the DDR , Frame Relay, and the X.25 . Compare channelized E-1 . 0x2 Router will load the Flash in the IOS software . (Default config regcode) Bit ( bit, bit ) A number ; a 1 or a 0 . 8 bits make up one byte. DLCI: identifies the PVC 's . Only valid locally . =========================================================== =============== cost ( cost ) , also known as path cost, an arbitrary value, according to the number of hops, bandwidth, or other juice operator, Ip route (Destnation Network IP) (NetMask) [NextHopIP | LocalInterface] Destnation Network IP: Target Network IP Fast Ethernet ( Fast Ethernet ) ---- speed lOOMb / s Ethernet specification. Fast Ethernet ratio Enable enter privileged mode Packet . ELAP EtherTalk Link Access Protocol (EtherTralk Link Access Protocol) on EtherTalk Network IGRP configuration Note : By default , all ports are subordinate to vlan 1 ( management VLAN or system default VLAN), and VLAN 1 cannot be deleted . Encapsulation frame-relay no shut BGP speaker (BGP speakers ) advertises its routing prefix or router. failure domain ( fault domain ) ----- area of the failed token ring. When a station gets a serious fault ( such as a cable disconnection on the network ) , it sends a beacon frame that includes the fault reported by the station, its NAUN, and everything in between. This defines the fault domain. The beacon then begins the so-called automatic configuration process. See autore Encapsulation PPP enables PPP on the interface No * do the reverse operation of the configuration A (config-if) #ip rip authentication key-chain A selected A key chain Connector type : BNC interface , AUI interface , RJ45 interface , SC/ST interface cut-through frame switching ( straight-frame exchange ) A frame of data flowing through the switch switching technology VLAN implementation method: Spanning trees can avoid loop problems caused by redundancy . Solve the problem : put redundant ports into blocking state . Interfaces in blocking state will not receive / send user data . Abandonment or ABR congestion feedback mechanisms are combined in the composition of the network. It consists of a router or access server or several routers or access servers, using inter-access tables and other methods to ensure the security of the private network. dixed configuration router ( fixed router ) can not be used to upgrade any new interfaces of the router. B(config)#inte s 0 =========================================================== =============== 16 , 32 , 64 and 128 are used. Frame-relay interface-dlci ??? Assign a specific PVC to this subinterface . ??? is the PVC number . Rate enhancement and VCT conversion. See ATM . administrative distance ( management distance ) from 0 to 255 a number between, which represents one routing information frequency ( frequency ) number of cycles per unit time of the AC signal, in hertz ( cycles per second ) measurement. explorer frame ( detection frame ) and the source-route bridging found to serve to bridge before a remote transmission ATM user-user connection (ATM user - user connection ) A connection established by the ATM layer to provide Ppp chap password cisco sends local password in CHAP mode Create a standard 5 sub-section ATM cells. The ATM layer receives 48- byte segments from the AAL and appends a 5- byte header to each segment . These cells are then sent to the physical layer for transmission over the physical medium. See AAL . =========================================================== =============== Need to create a neighbor relationship using multicast to perform route advertisement ( reliable ) own link state database ( network map ) using a corresponding algorithm , such as (SPF) to calculate the best route trigger update Piece address. The switch then filters the network with a known hardware address (MAC) The MAC address filter table determines which port is the destination hardware address to which the received hardware address is destined. The frame will only be allowed to pass through that segment. If the hardware address is unknown, the frame is forwarded to all ports. =========================================================== =============== Adopt standard : 1. CISCO 2. ANSI 3. Q993A Frame Relay switching ( Frame Relay switching ) service provider router frame relay packets provided B: 172.16.0.0/16 -- 172.31.0.0/16 Bit, Frame, Packet, and Segment are all called : PDU (Protocol Data Unit) EGPs: External Gateway Routing Protocol , Maintaining Routes between Autonomous Systems Hostname ABC configuration local username address resolution ( ARP ) to resolve the differences between computer addressing scheme of the process. Address resolution Class C network (C -based network ) portion of the Internet Protocol hierarchical addressing scheme. Class C network has 24 Interface Serial1.1 multipoint Baud ( baud ) ----- bits per second (b / s) synonymous, if each cell represents one bit of the signal words. It is a unit of signaling speed equivalent to the number of individual signal units transmitted per second. Each network elects a root bridge BridgeID Lowest Network 192.168.1.4 0.0.0.3 CONSOLE PORT ( management console interface ): distance limit ,ccie security lab manual, exclusive way . Storage forwarding : slow , ensuring the correctness of the frames being forwarded . Datagram ( datagram ) as a network layer unit without the need to pre-establish virtual circuits and transmit them on the medium Modulation method. See modulation . B(config)#inte s 1 Show ip access-lists to view specific list conditions and matching information Duplex Auto ( automatic duplex ) of a layer and 2 a device layer disposed on, it automatically switches provided change. The central switch does not have on-site switching capabilities. Therefore, all customer connections are returned to the CO . See CO . VCC does not guarantee QoS, they are usually reserved for UBR and ABR connections. Compare control distribute VCC and Ppp authentication CHAP chooses to use CHAP for authentication [chap | pap] debug ppp authentication to debug PPP authentication . 0x0 indicates that the router is going to enter the Rom monitor mode. DVMRP distance between the amount of multicast routing protocol (Distance Vector Multicast Routing Protocol) is mainly based on Routing Information Protocol (the RTP) , the Internet gateway protocol a common, strong ATM ATM (Asynchronous Transfer Mode) by a fixed-length 53 -byte element identifier Create a standard 5 sub-section ATM cells. The ATM layer receives 48- byte segments from the AAL and appends a 5- byte header to each segment . These cells are then sent to the physical layer for transmission over the physical medium. See AAL . Show spanning-tree interface fastEthernet 0/23 View the status of the interface in the spanning tree The station's HDLC communication mode, where the transmission can start from the primary station or a secondary station. Each network elects a root bridge BridgeID Lowest OSPF hierarchy advantages : congestion collapse ( congestion collapse ) the ATM results in the packet network due to retransmission, wherein little or no HDLC specifies a method of encapsulating data on a synchronous serial link and is the default for Cisco routers Router igrp as number is the autonomous system number ( autonomous domain ) network main class network number ABC number debug ip igrp events debug igrp related events Each non-root bridge elects a root port 1) Bandwidth Cost Lowest 2) Recevied BridgeID Lowest Enhanced IGRP ( Enhanced IGRP) ----- Enhanced Interior Gateway Routing Protocol (Enhanced Interior GatewayRouting Protocol): Cisco an advanced routing protocol created, which combines the advantages of link-state and distance between the amount of protocol. Enhanced IGRP has extraordinary convergence properties, including high operational efficiency. See IGP , ABR area border router ----- located in one or more OSPF area boundary OSPF routers, ABR is used to OSPF connection region to the OSPF backbone area =========================================================== =============== ! ETP Ethernet Interface Processor, a Cisco 7000 Series Router Boot ROM ( Boot ROM) for the router in order to release the boot mode router. Then guide Enable enter privileged mode =========================================================== =============== Password cisco sets a password to "cisco" When they meet, the frames of each node collide and are damaged. See collision domain . =========================================================== =============== Setup Call ( call setup ) how to define the source and destination devices transmit data to each other handshaking scheme. Baseband ( baseband ) a characteristic of network technology, the use of only one carrier frequency. Ethernet is one Interface Serial0 no ip address E-1---- A wide-area digital transmission scheme commonly used in Europe to transmit data at a rate of 2.048 Mb/s . EPROM erasable programmable read-only memory----- OSPF and RIP . =========================================================== =============== congestion collapse ( congestion collapse ) the ATM results in the packet network due to retransmission, wherein little or no CSU / DSU channel service unit / data service unit (channel service unit / data service unit ): a wide area network in the digital signal is converted into a physical layer device provider appreciated switch signal. The CSU/DSU is usually a device that plugs into an RJ-45 jack (the so-called demarcation position ) . The program accepts the data and brings it into the 48- byte payload segment of the ATM layer . CS and SAR are the two sublayers of AAL . Currently, the four AALs recommended by ITU-T are AAL1 , AAL2 , AAL3/4 and AAL5 . AALs are distinguished by the source - destination timing they use , whether they are CBR or VBR, and whether they are for connection-oriented or connectionless mode data transmission.