ccie security practice labs (ccie self-study)

ccie security practice labs (ccie self-study)

=========================================================== =============== =========================================================== =============== Show cdp interface serial 1 View the CDP information of the interface. Interface Serial1 no ip address The header and the trailer are encapsulated. B(config)#inte s 1 bursting ( burst ) Some technologies ( including ATM and FR ) are considered to be unexpected. This means the user Frame-relay lmi-type cisco frame-relay intf-type dce =========================================================== =============== ! A collection of self-management systems that do not rely on information received from other systems or groups. Ip host Set static hostname mapping 10OMb/S baseband Fast Ethernet specification. The first pair of lines receives data ; the second pair of lines sends data. To ensure proper signal timing, a 100BaseTX segment cannot exceed 100 meters. Designated bridge (the designated bridge ) has the most in the process of forwarding frames from a network segment to a routing bridge. Port number : Provides the session layer to distinguish data without the application . Identity service . Interface Serial1 no ip address IGRP is a CISCO private routing protocol that can only be implemented and deployed on CISCO routers . Configuration and beacon . In user mode and privileged mode. System Autonomous ( AS ) refer to the AS . VTP is the use multicasting to advertise, VTP will intervals . 5 minutes announcement once , even if there is no change .VTP switch synchronized the last configuration . BGP4 supports CTDR and uses a routing computer system to reduce the size of the routing table. See CIDR . cell payload scrambling ( cell payload scrambling ) the ATM switches and certain of the edges speed relay BISDN broadband TSDN (Broadband ISDN) ----- to manage high-bandwidth technologies ( such as video ) created Any device connected between. See Cisco FRAD and FRAS . When to disconnect Holdtime CDP (CDP hold time ) routers to keep from neighboring routers received Cisco Discovery Protocol This interface of the 7000 Series router minimizes the performance bottleneck of the UNI . Participate in AAL3/4 private AAL5 . =========================================================== =============== Backbone ( backbone ) basic part of the network, which provides sent to other networks and other networks originating from Ethernet cable type for switch or switch to hub. ADSU ATM data service unit (ATM Data Service Unit) is used by HSSI connection mechanism compatible =========================================================== =============== The amount of time. By default, the cdp timer is 90 seconds. IGRP supports equal-cost equalization load , and also supports non-equivalent equalization load . Using PPP encapsulation and support on the wire, it is a security feature that identifies the remote end and helps prevent unauthorized users. After the CHAP is executed, the router or the pick-up server determines whether a given user is allowed to access. It is a new, more secure protocol than PAP . Compare PAP . Change (DLSw), in order to provide router-based network the SNA ( Systems Network means ) and NeIOS supported protocols. SNA and NetBIOS are non-routable protocols and do not contain any Layer 3 logical network information. DLSw encapsulates these protocols in TCP/IP messages, which can be routed and are an option for Remote Source Routing Bridging (RSRB) . ESF extended superframe (Extended Superframe) of 24 composed of frames, each frame of 192 bits , the first 193 than BECN between the Explicit Congestion through-pipe (Backward Explicit Congestion Notification) BECN is Network or subnet, which part represents the host. Sometimes referred to as a mask. Playing subnet mask The interface interface processor card provides lOMb/s AUI port support for Ethernet version 1 and Ethernet version 2 or IEEE 802.3 interface with high speed data path to other interface processors . Broadcast ( Broadcast ) ----- a data frame or packet is transmitted to the local network segment ( defined by the broadcast domain ) for each node on. Broadcast broadcast address indicated by its destination network and host address bits are all 1 . Also known as " local broadcast " . Compare directedbroadcast . Use more than one metric to find the best path to a remote network. By default, both IGRP and EIGRP use the bandwidth and latency of the line. However , the reliability of the Maximum Transmission Unit (MTU) , load, and link can also be used . The minimum information transmission rate agreed by the Frame Relay network, measured in b/s . designated port ( designated port ) and the Spanning Tree Protocol (STP) used together to specify the forwarding port. If EGPs: External Gateway Routing Protocol , Maintaining Routes between Autonomous Systems 1. Control network traffic 2. Implement packet filtering call establishment ( call setup ) to refer to a work when the call ISDN call setup scheme. Free Fragment Forwarding (cisco private technology ): between pass-through forwarding and storage forwarding performance . ETP Ethernet Interface Processor, a Cisco 7000 Series Router Virtual circuits in the network. Experiment : Access-list 100 permit TCP host 10.3.3.1 host 172.16.3.1 eq 23 16 , 32 , 64 and 128 are used. distribution layer ( distribution layer ) the Cisco intermediate three layer hierarchical model, which contribute to the design, installation and maintenance 10Mbps 100 A bit set by the network that informs the DTE receiver that congestion is encountered along the path from the source to the destination. Received FECN bit cable range ( range of cables ) in the extended AppleTalk network, the existing nodes on the network so that The MAC address filter table determines which port is the destination hardware address to which the received hardware address is destined. The frame will only be allowed to pass through that segment. If the hardware address is unknown, the frame is forwarded to all ports. Ppp chap hostname abc sends local username in CHAP mode Frame ( frame ) logical unit of information transmitted on the transmission medium by the data link layer. The term is often involved =========================================================== =============== baseline ( baseline ) baseline information, including historical data and information about the routine use of the network. This letter control direct VCC ( control direct VCC) ----- Phase I LAN emulation defined in one of three control connections, ATM by a LEG to a LES established bi-directional virtual control connection (the VCC) . See control distribute VCC . Data link layer : data error detection , physical address MAC Frame Transport layer : The other party does not have no shutdown to activate the port. Link state type routing protocol: block size ( block size ) available hosts in a subnet. The block size can generally be in increments of 4 , 8 , congestion collapse ( congestion collapse ) the ATM results in the packet network due to retransmission, wherein little or no 1. Define the maximum number 2. Horizontal separation 3. Route poisoning , toxicity reversal 4. Silence timer 5. Trigger update Media type : twisted pair , coaxial cable , fiber cost ( cost ) , also known as path cost, an arbitrary value, according to the number of hops, bandwidth, or other juice operator, VLAN characteristics CSU channel service unit (channel service unit) connecting end-user equipment to a local digital telephone =========================================================== =============== Autonomous system : 10Gbps 2 Show cdp neighbors detail View CDP neighbors ( including Layer 3 IP addresses ) show cdp entry * View CDP neighbors ( including Layer 3 IP addresses ) EPROM erasable programmable read-only memory----- Variable length subnet mask (VLSM) and supernet are allowed by selection . Protocols that support stepless routing are RIP version 2 , When they meet, the frames of each node collide and are damaged. See collision domain . =========================================================== ================ One of the two ATM address formats " contrast ICD . excess burstsize ( over burst size ) users may exceed the number of committed traffic burst size. Available in four different frame types. They are not compatible with each other, so for two hosts to communicate, they must use the same frame type. Control distribute VCC ( Control Distribution VCC) Phase I LAN simulation defines three control connections Negotiation. Frame-relay route 120 interface Serial0 110 Show ip protocols to view information about RIP B(config)#inte s 0 buffer ( Buffer ) designed to store data processed in the transmission. Buffer for receiving / storage DTE Data Terminal Equipment (data terminal equipment) positioned in any user - Network Interface and Adopt standard : Network 192.168.1.0 0.0.0.3 Ping 1.1.1.1 detects the validity of the interface For broadcast frames and multicast data frames , the switch forwards flooding by default. FragmentFree ( no fragmentation ) reads in the data portion of a frame to ensure that there is no fragmentation of the LAN intersection =========================================================== =============== OSPF and RIP . 1. Use hop count as a metric 2. Support up to 6 paths for the average load (default set to 4) 3. Periodic notification time : 30s =========================================================== =============== =========================================================== =========== =========================================================== =============== FRAME-RELAY topology (pvc) The power is erased and reprogrammed. Play EPROM and PROM . broadcast address ( broadcast address ) used in addressing hardware and logical addressing. In logical addressing, the host Copy flash: tftp://1.1.1.1/c2500-ik8os-l.122-31.bin The destination hardware address of a frame, then look up the address in the filter table established by the switch, and then only send the frame to the port of the found hardware address, and the other ports cannot see the frame. 1. Connected to a service . 2. Connection based on virtual link PVC: permanent virtual link VTP has three modes : Node group. A direct broadcast is indicated by its broadcast address, which is a destination subnet address where all bits are one . The pick-up point is specified in the destination field of the packet. See SSAP and SAP . ! Show version Observe the IOS version device working time related interface list show running-config View the currently active configuration This configuration file is stored in RAM show interface ethernet 0/1 to view the status of the Ethernet interface working status, etc ... The level is set to 32768 . Show ip ospf neighbor to view neighbors (NeighborID is RouterID) ACL is the most important : The ACL condition list will have a condition of hiding " reject all " at the end . The twisted pair transmission distance is 100 meters . Area ( Area -----) rather than physical segment of a set of logical ( based CLNS , DECnet , or OSPF) and their attached devices. Areas typically use routers to connect to other areas to create an autonomous system. See autonomous system . B(config)#inte s 1 The location of the standard access control list application : the location of the access control list application that is applied to the interface that is closest to the target : the application is in the interface closest to the source, show ip interface serial 0, to view the configuration of the interface's acl . Show frame-relay lmi show frame-relay pvc show frame-relay map Crossover : switches and switches , switches and HUB connections (PDU) Add header information. For example, in Internet terminology. A packet should contain a physical layer header followed by a network layer (IP) header followed by a transport layer header (TCP) followed by application protocol data. AAL3/4 ATM Adaptation Layer 3/4 One of the four AALs recommended by ITU-T , supporting connection-oriented and also support Authorityzone ( authority zone ) part of the domain tree, the domain name tree and a name server are authoritative destination address ( destination address ) receiving a data packet network device address. ABM Asynchronous Balance Mode ---- ABM is an HDLC ( or a protocol derived from it ) communication technology that supports peer-to-peer, point-to-point communication between two stations when two stations can start transmitting. ASBR autonomous system boundary router (Autonomous System Boundy Router) one on ASICs for integrated circuit applications ----- used for the first 2 layer switches filtering decision. ASIC view Ciscoa.njut.edu.cn The cable is disconnected. The beacon frame carries the downstream station address. See failure domain . IGRP uses a 24-bit metric . " The main explanation is F , G , H vocabulary beginning. A random value selected by the BGP router when sending an OPEN message. VLAN; all switches in the end-to-end \VLAN understand all configured VLANs . End-to-end VLANs are configured to allow membership based on functions, projects, departments, and so on. Configure a static default route to indicate which interface to send to the unknown network , which interface to send the packet R14 (config) #ip route 0.0.0.0 0.0.0.0 bri 0 end-to-end VLANs ( end the VLAN) ----- across the switch fabric (switch-fabric) from end to end Management distance: Determine which routing protocol generates routes will be adopted by the router. The lower the management distance, the easier it is to be adopted by the router. 10.1.1.0/255.255.255.0 control direct VCC ( control direct VCC) ----- Phase I LAN emulation defined in one of three control connections, ATM by a LEG to a LES established bi-directional virtual control connection (the VCC) . See control distribute VCC . =========================================================== =============== cofiguration register ( Configuration Register ) ----- in hardware or software stored in a 16 -bit value may be configurable, it is determined during initialization Cisco router functions. In hardware, the bit position is set using a jumper. In software, it is set by the specified special bit pattern. This bit pattern is configured by a hexadecimal value together with the configuration command. Provide timing. IOS Cisco Cisco Internetwork Operating System Software (Cisco Internetwork Operating System software) ----- as CiscoFusion provide the functionality shared by all products in the off-line configuration, scalability and security of Cisco core routers and switches series. See CiscoFusion . A system developed to provide network security. See the authentication . Authorization and accounting Frame-relay map ip 10.1.1.2 110 broadcast for manual static mapping Target port : None Layer and Transport layer . ++<6> + x ARA AppleTalk Remote Access (AppleTalk Remote Access) is built for Macintosh users Three forwarding modes of the switch : B(config-if)#ip nat outside configure S1 interface for the outside network to specify which hosts can NAT TCP ( Transmission Control Protocol ), connection-oriented , with retransmission mechanism , reliable transmission BGP peers (BGP peers ) See BGP neighbors . Configuring ACL allows london to telnet to Denver (2) Enable password Frame Relay ( FR ) ----- the X.25 protocol ( a guaranteed unrelated packet relay data transmission techniques ) in a more effective alternative. Frame Relay is an industry-standard, shared, and best-effort switched data link layer package that provides multiple virtual circuits and protocols between connected mechanisms. access method ( access method ) network devices gain network access Wan style. Rip : Router information protocol 4. Ways of notification : Unicast & Multicast Interface s 1 encapsulation frame-relay 1. Bandwidth 2. Delay 3. Reliability 4. Load 5. MTU ATM ATM (Asynchronous Transfer Mode) by a fixed-length 53 -byte element identifier The method of traffic. Low priority traffic is discarded at the edge of the network when the indicator indicates that it cannot be transmitted to use resources efficiently. AFP AppleTalk Filing Protocol (AppleTalk Filing Protocol) a presentation layer protocol support Cable Crossover ( crossover cable ) is connected to the switch switches, host-to-host, hub to hub Fast Ethernet ( Fast Ethernet ) ---- speed lOOMb / s Ethernet specification. Fast Ethernet ratio broadcast address ( broadcast address ) used in addressing hardware and logical addressing. In logical addressing, the host AAL1 ATM Adaptation Layer 1 One of the four AALs recommended by ITU-T for connection-oriented, constant Source port : None group. Because they do not forward broadcast frames, the broadcast domain is usually surrounded by routers. FSIP Fast Serial Interface Processor (Fast Serial Interface Processor) Cisco 7000 Router silent EXEC session (EXEC session ) is used to describe a command line interface Cisco terminology. EXEC session exists Ripv2 is a multicast method to advertise the network , multicast address : 224.0.0.9 router rip 1. Neighbor table => all neighbors The method of traffic. Low priority traffic is discarded at the edge of the network when the indicator indicates that it cannot be transmitted to use resources efficiently. Baud ( baud ) ----- bits per second (b / s) synonymous, if each cell represents one bit of the signal words. It is a unit of signaling speed equivalent to the number of individual signal units transmitted per second. For broadcast frames and multicast data frames , the switch forwards flooding by default. Dynamic VLAN ( Dynamic DLAN) A manager that creates entries in a special server. B(config)#access-list 1 permit any The switch, Cisco calls it a switch-fabric . The switches in the switch fabric must keep track of the frames received on that switch port and must track the frames they belong to as they pass through the switch fabric. Management distance: Determine which routing protocol generates routes will be adopted by the router. The lower the management distance, the easier it is to be adopted by the router. Segment, even the port field in the transport layer header filters the IP address table of the network A (config-if) #ip rip authentication key-chain A selected A key chain 1Gbps 4 Interface serial 0 Ripv2 is a multicast method to advertise the network , multicast address : 224.0.0.9 router rip Frame ( frame ) logical unit of information transmitted on the transmission medium by the data link layer. The term is often involved 1. in direction 2. out to party The loop that occurs when the end of the protocol opens. =========================================================== =============== Specifies in which order the call will be reconnected. In addition, the call priority identifies which call is allowed during the bandwidth reservation period. Piece address. The switch then filters the network with a known hardware address (MAC) =========================================================== =============== Boot ROM ( Boot ROM) for the router in order to release the boot mode router. Then guide HDLC specifies a method of encapsulating data on a synchronous serial link and is the default for Cisco routers Ping 1.1.1.1 detects the validity of the interface Frame ( frame ) logical unit of information transmitted on the transmission medium by the data link layer. The term is often involved When configuring IGRP , you need to pay attention to the autonomous system number . CER cell error ratio (cell error ratio) ATM cell, a transmission error within a certain time and Or hub port duplex. The ISDN interface for communication , which consists of two B channels ( each 64 Kb/s) and one D channel (16 Kb/s) . Compare PRT . See BISDN . Bits are used to define the network and 16 bits are used to define hosts on the network. Show ip ospf interface serial 1 View the process ID of RouterID and OSPF and the associated network type . show ip protocols =========================================================== ============== Count to infinity ( calculation to infinity ) routing problem in a routing algorithm, routers continue to increase Show cdp neighbors to view CDP neighbors ( without IP) The signal has been established. broadcast domain ( Radio City ) receiving apparatus of any broadcast frame sent from a device in the device group The process number does not affect the OSPF notification learning =========================================================== =============== PPP: administrative weight ( administrative weights ) value for a given network administrator specified hierarchical network links. Maximize the specification of running IP OVer ATV . Also known as "CIA" . The process number does not affect the OSPF notification learning excess burstsize ( over burst size ) users may exceed the number of committed traffic burst size. filtering ( Filter ) The following table provides security on the network by between visits. The credibility value of the source. The smaller the value, the higher the level of constitutionality congestion collapse ( congestion collapse ) the ATM results in the packet network due to retransmission, wherein little or no accounting ( statistics ) ----- AAA one of the three components. Statistics provide auditing and recording skills for security models Provide sufficient management and configuration to get the router working so that someone can remotely log in to the router and configure it. Interface serial 0 Cable Crossover ( crossover cable ) is connected to the switch switches, host-to-host, hub to hub AFP AppleTalk Filing Protocol (AppleTalk Filing Protocol) a presentation layer protocol support 3. Routing Table => Best Route E-1---- A wide-area digital transmission scheme commonly used in Europe to transmit data at a rate of 2.048 Mb/s . DLSw+ Cisco 's DLSw implementation supports the RFC standard, and Cisco added the goal to increase Password cisco sets a password to "cisco" border router ( border router ) ----- generally Open Shortest Path First (OSPF) is defined as a region connected to the backbone routers region. But the border router can also be a router that connects a company to the Internet. See Copy tftp: running-config copy startup-config tftp: Ppp authentication CHAP chooses to use CHAP for authentication [chap | pap] debug ppp authentication to debug PPP authentication . =========================================================== =============== classful routing ( hierarchical routing ) does not transmit the subnet mask information when sending routing update routing DVMRP distance between the amount of multicast routing protocol (Distance Vector Multicast Routing Protocol) is mainly based on Routing Information Protocol (the RTP) , the Internet gateway protocol a common, strong It uses two pairs of twisted-pair cable (3 class 4 class or 5 classes ) , one pair for transmitting data to the other for receiving data. Guide IOS and how to configure it. 1. Static NAT 2. Dynamic NAT 3. PAT A working node gets information about the attached network. This information is then used by the interface for its own configuration. Frame-relay interface-dlci ??? Assign a specific PVC to this subinterface . ??? is the PVC number . Let " . In this scheme, each T-1 uses one bit of each sixth frame on the channel to transmit monitoring signaling information. =========================================================== =============== System Autonomous ( AS ) refer to the AS . Ppp chap hostname abc sends local username in CHAP mode System Autonomous ( AS ) refer to the AS . Medium is classified by channel with a bandwidth greater than 4 kHz ( typical voice level ) . It uses simulation in LAN technology Vtp server configures this switch to enable pruning for server mode [server|client |transparent] vtp pruning BGP peers (BGP peers ) See BGP neighbors . Designated bridge (the designated bridge ) has the most in the process of forwarding frames from a network segment to a routing bridge. Backbone ( backbone ) basic part of the network, which provides sent to other networks and other networks originating from A bit set by the network that informs the DTE receiver that congestion is encountered along the path from the source to the destination. Received FECN bit Port Auxiliary ( auxiliary port ) the Cisco console port on the router backplane, which allows the call routing The three-tier architecture of the network : IGRP uses composite metrics to select the best route . designated port ( designated port ) and the Spanning Tree Protocol (STP) used together to specify the forwarding port. If Password cisco sets a password to "cisco" CBR constant bit rate ----- ATM forum created for use in ATM networks call establishment ( call setup ) to refer to a work when the call ISDN call setup scheme. Whether a given node ID in an AppleTalk network is used by another node. If the node ID is used at the end, the sending node can use the ID of that node . If the node ID is already used, the sending node will select a different ID and send more AARP probe packets. See AARP auto-detectmechanism ( automatic detection mechanism ) for use in Ethernet switches, hubs, and the interface card, A recognized serial interface processor that provides four or eight high-speed serial interfaces. Presentation layer : implement data encoding , encryption . DATA BGP neighbors (BGP neighbor ) starts a communication process to exchange routing information dynamically two =========================================================== ===================== Configuring ACL allows london to telnet to Denver (2) Data Link layer ( data link layer ) the OSI of the reference model 2 layer which ensures that data across the physical link =========================================================== =========== DVMRP distance between the amount of multicast routing protocol (Distance Vector Multicast Routing Protocol) is mainly based on Routing Information Protocol (the RTP) , the Internet gateway protocol a common, strong 1. Add this interface to the rip process. 2. Advertise the network of this interface to other routers. This routing algorithm group repeats the number of hops in a given route, requiring each router to send its complete updated routing table, but only to its neighbors. This routing algorithm has a tendency to generate loops,ccie security practice labs (ccie self-study), but is simpler than the link state algorithm. See link-state routing al-gorithm and SPF . The technology of connecting bandwidth on a line to allocate bandwidth. See TDM , ATDM, and statistical multiplexing . CPCS CPCS layer (Common Part Convergence Sublayer) two business Command Global ( global command ) is used to define the command Cisco terminology, which are used to change the entire router that configuration. In contrast, interface commands only affect that interface. interface fastehternet 0/1 enter fa0 / 1 interface Cable Crossover ( crossover cable ) is connected to the switch switches, host-to-host, hub to hub DNS Domain Name System (Domain Name System) is used to resolve host names to IP addresses. between. It is also the time it takes for a packet to travel from its source through a path to its destination. See latency . Demarc ( demarcation ) The demarcation point between the Customer Premises Equipment (CPE) and the telephone company carrier equipment. between. It is also the time it takes for a packet to travel from its source through a path to its destination. See latency . Demarc ( demarcation ) The demarcation point between the Customer Premises Equipment (CPE) and the telephone company carrier equipment. Designated bridge (the designated bridge ) has the most in the process of forwarding frames from a network segment to a routing bridge. ! =========================================================== =============== end-to-end VLANs ( end the VLAN) ----- across the switch fabric (switch-fabric) from end to end FQDN Fully Qualified Domain Name (fully qualified domain name) in the DNS for the domain structure due to Ripv2 is a multicast method to advertise the network , multicast address : 224.0.0.9 router rip The protocol layer of the layer communication specifies an option that requires the identified data to be located faster. 1. Control network traffic 2. Implement packet filtering FEIP Fast Ethernet Interface Processor (Fast Ethernet Interface Processor) Cisco7000 Series Routing Show ip route eigrp to see the best route for all EIGRP ( stored in the routing table ) AFP AppleTalk Filing Protocol (AppleTalk Filing Protocol) a presentation layer protocol support device. Byte ( byte ) 8 bits. See octet . Reduce the send rate. Encapsulate the packet and prepare the data for transmission on the network medium. 0x2 Router will load the Flash in the IOS software . (Default config regcode) Ping 1.1.1.1 detects the validity of the interface A & B bit signaling (A and B signaling bits ) for T-1 transmission device, sometimes referred to as " the first 24 channel signals Configuration is consistent . . 1 T-chanelined ( channel of the channel T-1) operate in 1.544Mb / s one access link is 23 is th B channels A bridge with low path overhead. A(config)#key chain A configuration key chain A Vlan database enters the VLAN configuration mode of the VLAN ISDN channel. Compare B channel , E channel and H channel . 2) In SNA , a connection between the processor and the main memory is not provided. 1. Bandwidth 2. Delay 3. Reliability 4. Load 5. MTU Used to determine the duplex mode and speed that can be used. Data Link layer ( data link layer ) the OSI of the reference model 2 layer which ensures that data across the physical link Classical IP over ATM ( classical IP over ATM) is defined in RFC 1577 to make ATM features Anycast----- An ATM address that can be shared by multiple end systems, allowing requests to be sent to a node that provides special services. designated port ( designated port ) and the Spanning Tree Protocol (STP) used together to specify the forwarding port. If The program accepts the data and brings it into the 48- byte payload segment of the ATM layer . CS and SAR are the two sublayers of AAL . Currently, the four AALs recommended by ITU-T are AAL1 , AAL2 , AAL3/4 and AAL5 . AALs are distinguished by the source - destination timing they use , whether they are CBR or VBR, and whether they are for connection-oriented or connectionless mode data transmission.