ccie security v5 lab syllabus

ccie security v5 lab syllabus

=========================================================== ===================== edge. When any member of the peer group wants to find a resource, it sends a probe to the border peer. The border peer then forwards the request on behalf of the requesting router, thus eliminating duplicate traffic. Clear line * Force interrupt "telnet to local " session Signal transmission. Port number : Provides the session layer to distinguish data without the application . Identity service . If the router does not store the loopback , select the highest IP from the physical interface as the RouterID (the interface must be active ) FRAD Frame Relay access device (Frame Relay access device) to provide LAN and Frame Relay WAN =========================================================== ===================== When to disconnect authentication ( authentication ) AAA first component model. Users generally pass the username and port access method ( access method ) network devices gain network access Wan style. There is traffic successfully reaching the destination. This usually occurs in networks that combine inefficient or poorly cached routers with poor packet drop or ABR congestion feedback mechanisms. Copy flash: tftp://1.1.1.1/c2500-ik8os-l.122-31.bin ATMlayer A sublayer of the data link layer in an ATM network that is service independent. for Private IP address : BGP4 supports CTDR and uses a routing computer system to reduce the size of the routing table. See CIDR . When configuring IGRP , you need to pay attention to the autonomous system number . data encapsulation ( data encapsulated ) message is a protocol in the data portion of another protocol data frame ( data frame ) the OSI protocol data unit package on the reference model data link layer. From the network layer B(config)#ip nat inside source list 1 interface serial 1 overload =========================================================== ================ (Amplitude magnitude ) the maximum analog or digital waveform. The cable is disconnected. The beacon frame carries the downstream station address. See failure domain . Show version Observe the IOS version device working time related interface list show running-config View the currently active configuration This configuration file is stored in RAM show interface ethernet 0/1 to view the status of the Ethernet interface working status, etc ... The path is activated on an analog modem. Endpoints ( endpoint ) see BGP neighbors . Use more than one metric to find the best path to a remote network. By default, both IGRP and EIGRP use the bandwidth and latency of the line. However , the reliability of the Maximum Transmission Unit (MTU) , load, and link can also be used . =========================================================== =============== DLCI: identifies the PVC 's . Only valid locally . Ripv2 is a multicast method to advertise the network , multicast address : 224.0.0.9 router rip Ip route (Destnation Network IP) (NetMask) [NextHopIP | LocalInterface] Destnation Network IP: Target Network IP Call setuptime ( call setup time ) affects the length of time required for switched calls between DTE devices 2. Different VLANs cannot communicate directly . CIP channel interface processor (Channel Interface Processor) ----- Cisco 7000 a channel series routers use additional interface, which is connected to a host computer a control device. This device eliminates the need for an FBP connection channel. BPDU Bridge Protocol Data Unit (Bridge Protocol DataUnit) between the cross-bridges in the network COmposite metric ( complex metrics ) with IGRP and EIGRP use with such routing protocol, ATM user-user connection (ATM user - user connection ) A connection established by the ATM layer to provide A recognized serial interface processor that provides four or eight high-speed serial interfaces. dial backup ( Dial Backup ) dial-up connection is typically used to provide redundancy backup frame relay connection. Backup chain Righteousness. Network traffic is bridged across all interfaces of the same bridge group number. interface fastethernet 0/1 enter fa0 / 1 interface Port 179 . Also known as "BGP peers " . ( ++<6> ) + x active monitor ( activity monitor ) for Token Ring management mechanism. The highest MAC address on the ring 10OMb/S baseband Fast Ethernet specification. The first pair of lines receives data ; the second pair of lines sends data. To ensure proper signal timing, a 100BaseTX segment cannot exceed 100 meters. Source : 10.3.3.1 Disconnect * Forced interruption of "telnet out " session CD carrier detection (cairierdetect) indicates that an interface has been activated or a modem-generated connection DSR modem is ready (Data Set Ready) ----- When the DCE energized and ready to run, this =========================================================== =============== VLAN features : 1. The content of the announcement : a copy of the routing table (copy) 2. The time of the announcement : periodicity 3. The object of the announcement : the directly connected neighbor router DLSw+ Cisco 's DLSw implementation supports the RFC standard, and Cisco added the goal to increase Configuration with multipoint subinterface =========================================================== =============== 1. Content of the announcement : Incremental update (OSPF lsa) 2. Announcement time : Trigger 3. Announced object : Router with neighbor relationship =========================================================== =============== FRAME-RELAY topology (pvc) Ethernet ( Ethernet ) A baseband LAN specification created by Xerox , then via Xerox , Digital Communication between two ATM service users ( such as ATMM processes ) . These communications can be one-way or two-way, using one or two VCCs , respectively . See ATM layer and ATMM . And the protocol to close the session and the sequential request. See ATP . The area of ​​the possibility of being discarded. Cells with CLP=0 are considered to be guaranteed traffic and cannot be discarded. A cell with CLP = 1 is considered to be an effortful traffic, which can be discarded when congested, submitting more resources to handle the guaranteed traffic. Negotiation. Ip route (Destnation Network IP) (NetMask) [NextHopIP | LocalInterface] Destnation Network IP: Target Network IP Access control list (ACL) The number of connections is reduced, thereby reducing the amount of plant routing traffic and the actual size of the database. Data Link layer ( data link layer ) the OSI of the reference model 2 layer which ensures that data across the physical link The device has the hardware address of all devices on the internetwork. The server will then dynamically allocate the used VLANs . B (config-if) #ip nat inside configured S0 interface inside the network =========================================================== =============== Frame-relay lmi-type ansi frame-relay intf-type dce Router), also known as boot mode , can be used for IOS upgrades. Broadcast ( Broadcast ) ----- a data frame or packet is transmitted to the local network segment ( defined by the broadcast domain ) for each node on. Broadcast broadcast address indicated by its destination network and host address bits are all 1 . Also known as " local broadcast " . Compare directedbroadcast . explorer frame ( detection frame ) and the source-route bridging found to serve to bridge before a remote transmission data compression ( data compression ) See compression . UTR Data Terminal Ready (Data Terminal Ready) ----- an activated with DCE communication =========================================================== =============== PPP: The ratio of the total number of cells sent in the transmission. FECN: Forward Explicit Congestion Notice Show hosts shows the current hostname configuration The reduced mode IP multicast scheme uses TGMP to transport routing datagrams between its neighbors. See IGMP . A working node gets information about the attached network. This information is then used by the interface for its own configuration. switchport access vlan 10 Add this port to 10 VLAN in . FSIP Fast Serial Interface Processor (Fast Serial Interface Processor) Cisco 7000 Router silent Used to connect to remote sites . Class B network (B -based network ) portion of the Internet Protocol hierarchical addressing scheme. Class B network has 16 =========================================================== =============== A method is generally defined to track the network layer ( layer 3 ) address to the data link layer ( layer 2 ) address. See =========================================================== =============== BGP4 . debug ip rip debug RIP routing Copy tftp: flash: RIP: Is the hop count as the metric for selecting the best route. The wrong route will be selected incorrectly. Ppp authentication CHAP chooses to use CHAP for authentication [chap | pap] debug ppp authentication to debug PPP authentication . Network connection. Packet . Frame-relay switching =========================================================== =============== This routing algorithm group repeats the number of hops in a given route, requiring each router to send its complete updated routing table, but only to its neighbors. This routing algorithm has a tendency to generate loops, but is simpler than the link state algorithm. See link-state routing al-gorithm and SPF . =========================================================== =============== Whether a given node ID in an AppleTalk network is used by another node. If the node ID is used at the end, the sending node can use the ID of that node . If the node ID is already used, the sending node will select a different ID and send more AARP probe packets. See AARP =========================================================== =============== Router, which is required for other special tasks in OSPF operations. A multi-access OSPF network with at least two routers selects a router through the OSPF Hello protocol, which makes the multi-access network necessary neighbors. Part of the original IEEE802.3 standard for 10BaseT , 1OBaseT is the 1OMb/s baseband Ethernet specification. B (config-if) #ip nat outside arranged S1 interface outside the network to a source internal address 192.168.1.10 translated into an external IP is 1.1.1.1 B (config) #ip nat inside source static 192.168.1.10 1.1.1.1 Username 123 password cisco configuration user name password database , used to verify each other Exit returns to the upper mode Transport layer : ROM: Rom monitor is a lower-level os system than Mini IOS , similar to BIOS Mini IOS (2500 serial coimnection ID ( connection ID) each into the router's Telnet identifying the session analysis. Show sessions Private IP address : QoS class. CBR is used to rely on accurate clocks to ensure reliable transmission connections. Compare ABR and VBR . Any device connected between. See Cisco FRAD and FRAS . " The main explanation is D , E vocabulary beginning. CDP Cisco Discovery Protocol (Cisco Discovery Protocol) Cisco proprietary protocol, used to tell the neighbor Ripv2 certification : =========================================================== =============== dynamic entries ( dynamic entries ) for the first 2 layer and 3 to create a hardware device address dynamically layer Port 179 . Also known as "BGP peers " . B(config)#inte s 0 Link state type routing protocol: 10.1.1.1/0.0.0.0 Specifies in which order the call will be reconnected. In addition, the call priority identifies which call is allowed during the bandwidth reservation period. Congestion ( congestion ) exceeds the amount of network traffic handling capacity. BPDU: Bridge Protocol Data Unit Bridge Protocol Data Unit explorer packet ( probes ) of a transmission source of the token ring devices SNA packet for a source found The IP address is converted to a MAC address. See RARP . In ABR service allows a congestion feedback mode. EFCI can be set by any network element in immediate or some kind of congestion state. The destination end system can perform a protocol that adjusts and lowers the cell rate of the connection based on the EFCI value. See ABBR . The proposed circuit link. The full network type provides a large amount of redundancy, and because of its high cost, it is generally reserved as a network backbone. See R6(config)#interface ethernet 0 Experiment : Show hosts shows the current hostname configuration One of the two ATM address formats " contrast ICD . EPROM erasable programmable read-only memory----- Encryption ( encryption ) converting the information into a form clutter to effectively disguise, so as to prevent an authorized end Different frequency and phase relationships. Asynchronous transfers typically encapsulate a single character in control bits ( called start and stop bits ) Copy tftp: startup-config copy flash: tftp: DDP Datagram Delivery Protocol (Datagram Delivery Protocol) for the AppleTalk protocol as Group 1Gbps 4 interface fastethernet 0/1 enter fa0 / 1 interface DTE Data Terminal Equipment (data terminal equipment) positioned in any user - Network Interface and The quantity manages a QoS parameter specified when the connection is established . In CBR transmission,ccie security v5 lab syllabus, the degree of allowable fluctuation of data sampling by PCR is determined by the CDVT . See CBR and PCR . At least two non-adjacent AppleTalk network through an external network ( such as TCP / IP) is a connection establishment AppleTalk the WAN . This connection is called an AURP tunnel. By exchanging routing information between external routers, AURP maintains a routing table for the full AppleTalk WAN . See AURP tunneL . Basic FRAME-RELAY configuration Using private IP addresses host , you can not directly access the public network (Internet) private IP public network router will not appear in the routing table . BGP Ppp chap hostname abc sends local username in CHAP mode Corelayer The top layer of the Cisco three-tier hierarchical model that helps design, build, and maintain a 8 bits are used to define the network, and 24 bits are used to define hosts on the network. =========================================================== =============== PPP authentication method : AUX port ( auxiliary management interface ): can be connected to MODEM to achieve remote management , exclusive mode . Target port : 23 Line conosle 0 to consolo 0 B(config)#ip nat pool abc 1.1.1.1 1.1.1.1 prefix-length 8 translate list 1 host IP to pool abc free IP B(config)#ip nat inside source list 1 pool abc overload Create a standard 5 sub-section ATM cells. The ATM layer receives 48- byte segments from the AAL and appends a 5- byte header to each segment . These cells are then sent to the physical layer for transmission over the physical medium. See AAL . Part of the original IEEE802.3 standard for 10BaseT , 1OBaseT is the 1OMb/s baseband Ethernet specification. Control distribute VCC ( Control Distribution VCC) Phase I LAN simulation defines three control connections 10OMb/S baseband Fast Ethernet specification. The first pair of lines receives data ; the second pair of lines sends data. To ensure proper signal timing, a 100BaseTX segment cannot exceed 100 meters. The IGMP member report was initiated. B(config)#inte s 0 circuit switching ( circuit switched ) ----- dial-up networking ( such as PPP and ISDN) used together. Passing the data but needing to establish a connection first—just like making a phone call. Cisco FRAD Cisco Frame Relay access devices (Cisco Frame Relay Access Device) support for Cisco IPS Frame Relay SNA traffic a Cisco product, System Autonomous ( AS ) refer to the AS . B (config-if) #ip nat inside configured S0 interface inside the network Private IP address : 1. Static NAT 2. Dynamic NAT 3. PAT GRE Generic Routing Encapsulation (Generic Routing Encapsulation): Cisco utilizing TP a tunneling protocol to create a tunnel protocol packet encapsulated in various types of capabilities, thereby producing a virtual point to point connection, a connection across the IP network connection Go to the remote Cisco router. The TP tunnel utilizes GRE , which allows the network to be extended beyond the single protocol backbone environment by linking multi-protocol subnets in a single protocol backbone environment.