ccie security v5 study group

ccie security v5 study group

CISCO router , the serial interface defaults cisco HDLC encapsulation in practical applications , Cisco HDLC incompatible standard hdlc. HDLC specifies a method of encapsulating data on a synchronous serial link and is the default for Cisco routers De discard Eligibility is used in the Frame Relay network to tell the switch if the switch is too Copy tftp: startup-config copy flash: tftp: Sended and is not reliable. Compare connection-oriented . See virtual circuit . Configure ACL to reject london to ping through Denver (1) 100Mbps 19 Configure ACL to reject london to access Denver When the destination address is unknown , the switch will flood the data frame ( the target address is known , the frame will not be flooded ) VTP is a messaging system . Ensures that all of the switches in the same management domain below network VLAN Layer , Presentation layer , Session layer , and Transport layer . data terminal equipment ( Data Terminal Equipment ) , see the DTE . End directly returns to privileged mode Layer and Transport layer . FRAME-RELAY also causes routing unreachability problems, ie horizontal separation rules. To solve the horizontal separation, you can use the sub-interface method. . 1 T-chanelined ( channel of the channel T-1) operate in 1.544Mb / s one access link is 23 is th B channels Crossover : switches and switches , switches and HUB connections Exit The EIA/TIA-232 interface circuit is also busy. B(config-if)#ip nat outside configure S1 interface for the outside network to specify which hosts can NAT =========================================================== =============== Dynamic control of the measure, ACR varies between minimum cell rate (MCR) and peak cell rate (PCR) . See There is traffic successfully reaching the destination. This usually occurs in networks that combine inefficient or poorly cached routers with poor packet drop or ABR congestion feedback mechanisms. Dynamic routing ( dynamic routing ) network revision. Also known as " adaptive routing " , this technology is self- 1. CISCO 2. ANSI 3. Q993A Network devices ( such as routers, bridges or hubs ) efficacy. They serve as an FEP for an ATM network that uses a special DSU to complete the packet encapsulation . The other party is not configured with the same Layer 2 protocol serial interface default encapsulation: HDLC FTP file transfer protocol (File Transfer Protocol): used to transfer files between network nodes of TCP / IP Provide sufficient management and configuration to get the router working so that someone can remotely log in to the router and configure it. =========================================================== =============== ! Dynamic control of the measure, ACR varies between minimum cell rate (MCR) and peak cell rate (PCR) . See Line : PPP, HDLC, SLIP CDP Cisco Discovery Protocol (Cisco Discovery Protocol) Cisco proprietary protocol, used to tell the neighbor Show frame-relay lmi show frame-relay pvc show frame-relay map RIP supplement : Passive-interface configures the corresponding interface to not send any notifications =========================================================== =============== Password cisco login Communication between two ATM service users ( such as ATMM processes ) . These communications can be one-way or two-way, using one or two VCCs , respectively . See ATM layer and ATMM . Line conosle 0 to consolo 0 A superset of the BootP protocol. This means it uses the same protocol structure as BootP , but it adds enhancements. This protocol uses the server to dynamically configure the client when requested by the client. The two main enhancements are the address pool and lease time. access. Each encryption scheme uses some precisely defined algorithm that is reversed by an opposite algorithm during the decryption process at the receiving end. CiscoView GUI management software for Cisco network devices that provides dynamic status, statistics, and full Checksum ( checksum ) ----- ensure the integrity of the transmission data for testing. It is through - a number calculated from a string value series of mathematical functions. It is usually placed at the end of the calculated data and then recalculated at the receiving end for confirmation. Compare CRC . Backbone ( backbone ) basic part of the network, which provides sent to other networks and other networks originating from The group members receive data from the source or near RP) . See RP (rendezvous point) . A (config-if) #ip rip authentication key-chain A selected A key chain =========================================================== =============== excess rate ( over rate ) in the ATM network, a connection over the insurance rate traffic. super AARPprobepackets (AARP probe packets ) AARP packets sent, for determining a non-extended 1.cisco hdlc: can support multi-protocol environment , by adding the " attribute " field . 2.standard hdlc: only support single-protocol environment Classical IP over ATM ( classical IP over ATM) is defined in RFC 1577 to make ATM features Reliable transmission mainly involves physical addressing, line procedures, network topology, error notification, orderly delivery of frames, and flow control. The IEEE has further split this layer into a MAC sublayer and an LLC sublayer. Also known as the link layer. Can be compared to the data link control layer of the SNA model. See Application layer , LLC , MAC , Network layer , Physical The MAC address filter table determines which port is the destination hardware address to which the received hardware address is destined. The frame will only be allowed to pass through that segment. If the hardware address is unknown, the frame is forwarded to all ports. switchport access vlan 10 Add this port to 10 VLAN in . Bypass relay ( bypass relay ) enables an interface of the token ring to be closed and effectively detached from the ring 1. The content of the announcement : a copy of the routing table (copy) 2. The time of the announcement : periodicity 3. The object of the announcement : the directly connected neighbor router control direct VCC ( control direct VCC) ----- Phase I LAN one of three emulation control connection defined in the ATM by \ a LEG to a LES established bi-directional virtual control connection (the VCC) . See control distribute VCC . . 1 T-chanelined ( channel of the channel T-1) operate in 1.544Mb / s one access link is 23 is th B channels The process of outputting a single stream. See multiplexing . CD carrier detection (cairierdetect) indicates that an interface has been activated or a modem-generated connection Congestion ( congestion ) exceeds the amount of network traffic handling capacity. Configure a static default route to indicate which interface to send to the unknown network , which interface to send the packet R14 (config) #ip route 0.0.0.0 0.0.0.0 bri 0 The pick-up point is specified in the destination field of the packet. See SSAP and SAP . COmposite metric ( complex metrics ) with IGRP and EIGRP use with such routing protocol, Password cisco login Adapt to traffic or buried Thus, the switch has exited the switch at the leading edge of the output before the packet is fully entered into the input port. The frame will be read, processed, and forwarded immediately after the destination address of the frame is verified and the output port is determined. Ripv2 is a multicast method to advertise the network , multicast address : 224.0.0.9 router rip Encapsulate the packet and prepare the data for transmission on the network medium. BGP Identifier (BGP Identifier ) that identifies the segment comprises Yu BGP a value of the speakers. This is by The interconnected network acts as a virtual link through an external network ( such as TCP/IP) . See AURP . ARP ARP (Address Resolution Protocol) in RFC 826 is defined in the protocol 1. Use hop count as a metric 2. Support up to 6 paths for the average load (default set to 4) 3. Periodic notification time : 30s The packet's ability to process packets faster. Target port : 23 Rip : Router information protocol CER cell error ratio (cell error ratio) ATM cell, a transmission error within a certain time and =========================================================== =============== FECN: Forward Explicit Congestion Notice The header information is removed from the (PDU) . See encapsulatio . =========================================================== =============== 1. CISCO 2. ANSI 3. Q993A Ppp authentication CHAP chooses to use CHAP for authentication [chap | pap] debug ppp authentication to debug PPP authentication . An octet divided into four points, followed by a forward slash and the number of the masked bit ( abbreviation of the subnet symbol ) . See Show ip route eigrp to see the best route for all EIGRP ( stored in the routing table ) Copy flash: tftp://1.1.1.1/c2500-ik8os-l.122-31.bin COmposite metric ( complex metrics ) with IGRP and EIGRP use with such routing protocol, Command Global ( global command ) is used to define the command Cisco terminology, which are used to change the entire router that configuration. In contrast, interface commands only affect that interface. CISCO router , the serial interface defaults cisco HDLC encapsulation in practical applications , Cisco HDLC incompatible standard hdlc. Collision ( conflict ) Ethernet two nodes simultaneously transmit the result of the transmission. When they are on physical media Disable returns from privileged mode to user mode The distance limit of each segment of 1OBaseT is about 100 meters. See Ethernet and IEEE 802.3 . Network layer : Address mapping . Configure IP protocol R14(config)#interface bri 0 R14(config-if)#ip address negotiated Show interfaces fastethernet 0/1 switchport A corrective technique used to block the request. The path is restored to an intermediate node. Then use GCAC to try to find an alternate path to the final destination. To authenticate, the user and password uniquely identify them. Access-list 100 permit IP any any RIP: Is the hop count as the metric for selecting the best route. The wrong route will be selected incorrectly. A technique that automatically starts and ends a circuit switched session. By imitation remains active, the router tricks the end station to treat the session as active. DDR is allowed through a modem or an external ISDN terminal adapter IGRP is a distance vector type routing protocol that does automatic route summarization . There is no way to turn off this feature . Surgery. The IBM network is called pacing, meaning that when the receive buffer is full, a message is transmitted to the sending unit to suspend transmission until all data in the receive buffer is processed and the buffer is ready to receive again. The clock frequency Serial1 is up, the line protocol is up interface is working properly. End the Back ( back-end ) a front-end node to provide services or software programs. See server . Use the range of numbers assigned. The value of the cable range can be a sequence of one or several consecutive network numbers. Node addresses are determined by their cable range values. AAL2 ATM Adaptation Layer ----- ITU-T 2 recommendations four AAL one , to support variable bit rate connection-oriented traffic, such as voice traffic see AAL Ip address 1.1.1.1 255.0.0.0 Configure the IP address of the interface =========================================================== =============== Connectionless ( no connection ) does not require the creation of data transfers from virtual circuits. It has no overhead, try its best AURP AppleTalk is based on the AppleTalk Update-based Routing Protocol,ccie security v5 study group, a technology for encapsulating AppleTalk traffic in the header of an external protocol. Typically specified by the network administrator and used by routing protocols to compare different routes through an internetwork. The routing protocol uses the cost value to select the best path to a destination : the lowest cost identification best path. See routing metnC . 10.1.1.1/0.0.0.0 The protocol layer of the layer communication specifies an option that requires the identified data to be located faster. Transmission method. Use acknowledgments and flow control for reliable data transfer. Contrast connectionless . See virtual circuit . 10Mbps 100 ATP AppleTalk transaction protocol (AppleTalk Transaction Protocol) a transport layer protocol, In ABR service allows a congestion feedback mode. EFCI can be set by any network element in immediate or some kind of congestion state. The destination end system can perform a protocol that adjusts and lowers the cell rate of the connection based on the EFCI value. See ABBR . FTP file transfer protocol (File Transfer Protocol): used to transfer files between network nodes of TCP / IP extended IP accesslist ( extended IP access list ) by logical address, the network layer protocol header word ELAP EtherTalk Link Access Protocol (EtherTralk Link Access Protocol) on EtherTalk Network Flow control ( flow control ) is a technique used to ensure that the receiving unit is not overwhelmed by the data of the sending device. Port Auxiliary ( auxiliary port ) the Cisco console port on the router backplane, which allows the call routing access rate ( access speed ) ----- bandwidth rate defined circuit. For example, the access rate of the T-1 circuit is Show cdp neighbors to view CDP neighbors ( without IP) Protocol): A test of connectivity between two AppleTalk nodes, where one node sends a packet to another node and receives a response or copy in response. The network node becomes the activity monitor and is responsible for managing tasks such as preventing loops and ensuring that tokens are not lost. destination address ( destination address ) receiving a data packet network device address. Bit ( bit, bit ) A number ; a 1 or a 0 . 8 bits make up one byte. Ip route 4.0.0.0 255.0.0.0 2.0.0.2 =========================================================== =============== Core layer : faster transfer rate , will not make any operations on the data packets The clock frequency Serial1 is up, the line protocol is up interface is working properly. =========================================================== =============== Port Console ( control port opening ) the Cisco a typical routers and switches on the RJ-45 ports, with The method of traffic. Low priority traffic is discarded at the edge of the network when the indicator indicates that it cannot be transmitted to use resources efficiently. Switchport trunk encapsulation dot1q need to choose which way [dot1q|isl] switchport mode trunk change interface mode to trunk work mode show interface trunk view current switch TRUNK configuration Set vtp line password (Telnet) line vty 0 ? Set vtp line password (Telnet) line vty 0 ? The process number does not affect the OSPF notification learning Web specification. When no traffic is present. 1OOBaseT sends link bursts on the network ( more information than used in 1OBaseT ) . See 10BaseT , Fast Ethernet, and IEEE 802.3 . The three-tier architecture of the network : lOBaseT , Fast Ethernet, and lEEE . IBM agency link. See FRAD . OSPF uses IP packets for route advertisement and learning , Protocol Number : 89 At least two non-adjacent AppleTalk network through an external network ( such as TCP / IP) is a connection establishment AppleTalk the WAN . This connection is called an AURP tunnel. By exchanging routing information between external routers, AURP maintains a routing table for the full AppleTalk WAN . See AURP tunneL . =========================================================== =============== EFCI Explicit Forward Congestion indication (Explicit Forward Congestion Indication) ATM network Network 192.168.1.4 0.0.0.3 Binding ( binding ) in LAN configuration on a network layer protocol to use some type of frame Cheng. 10Mbps 100 DXI data exchange interface (Data Exchange Interface) in RFC 1482 is described, DXI define a enable secret provided in the ciphertext enable password ( in preference to the use plaintext ) service password-encryption of all encryption system cleartext password ( weak ) R14(config-if)#dialer-group 9 Set of special character data link communication protocols. These protocols have generally been replaced by bit-oriented protocols. Compare the bit-oriented protocol . cable range ( range of cables ) in the extended AppleTalk network, using the number range assigned to the existing nodes on the network. The value of the cable range can be a sequence of one or several consecutive network numbers. Node addresses are determined by their cable range values.