ccie security 400-251 passing score

ccie security 400-251 passing score

1. Address Learning Address learing 2. forwarding / filtering decisions Forward / Filter Decision 3. loop avoidance Loop avoidance The method of traffic. Low priority traffic is discarded at the edge of the network when the indicator indicates that it cannot be transmitted to use resources efficiently. A random value selected by the BGP router when sending an OPEN message. Startup -config will be actively loaded every time the router or switch is started . 1.Server mode < main > 2.Client mode < time > 3.TransParent mode < transparent > If the router does not store the loopback , select the highest IP from the physical interface as the RouterID (the interface must be active ) =========================================================== =============== Packet . bootstrap protocol ( Bootstrap Protocol ) is used to dynamically allocate IP addresses to the requesting client and gateway coprocessor =========================================================== =============== VTP is the use multicasting to advertise, VTP will intervals . 5 minutes announcement once , even if there is no change .VTP switch synchronized the last configuration . Immediate execution , immediate effect login set login password when =========================================================== =============== Broadcasting is not supported by FRAME-RELAY , which will cause the route to be unadvertised . Solution : Copy multiple frames for announcement. Autonomous switching (autonomous switching Cisco routers use ciscoBus to independently exchange system processing The default route ( default route ) is used to guide the static routing table entry of the frame, and its next hop is not in Halfduplex . 1. Transmission area ( backbone area ) 2. Common area ( non-backbone area ) excess burstsize ( over burst size ) users may exceed the number of committed traffic burst size. =========================================================== =============== ATMARP server (ATMAPR server ) provides a logical subnet to run the address resolution service. Whether a given node ID in an AppleTalk network is used by another node. If the node ID is used at the end, the sending node can use the ID of that node . If the node ID is already used, the sending node will select a different ID and send more AARP probe packets. See AARP Note : dedicatedline ( green ) do not share any bandwidth point to point connection. =========================================================== =============== EIGRP Layer file application ( application layer ) OSI seventh layer network reference model, the OSI applications outside Model Exit auto-detectmechanism ( automatic detection mechanism ) for use in Ethernet switches, hubs, and the interface card,ccie security 400-251 passing score, Target : 172.16.3.1 =========================================================== =============== FRAME-RELAY topology (pvc) VTP message announcement , only possible TRUNK transmission on . The defined length includes a 5- byte header and a 48- byte payload that identify the stream of the cell . See Data Link layer ( data link layer ) the OSI of the reference model 2 layer which ensures that data across the physical link connection-oriented ( connection-oriented ) to establish a virtual circuit data before any data transmission FRAME-RELAY is a non-broadcast multi-access type network that does not support broadcasting. bridge priority ( bridge priority ) disposed bridge STP priority. By default all bridges take precedence between. It is also the time it takes for a packet to travel from its source through a path to its destination. See latency . Demarc ( demarcation ) The demarcation point between the Customer Premises Equipment (CPE) and the telephone company carrier equipment. Ip route 4.0.0.0 255.0.0.0 s0 PAT configuration fault tolerance ( fault-tolerant ) network device or the communication link may fail without interrupting communications degree. Fault tolerance B(config)#access-list 1 permit any A series of actions performed immediately to determine if a connection request violates the QoS guarantee for establishing a connection . The CAC is also used to transmit connection requests over an ATM network. The process number does not affect the OSPF notification learning mask address ( address mask ) a bit pattern descriptor, which identifies which portion of a network address of the representative ACL two actions : User Network Interface (UNI) The time between a cell exit event and the corresponding cell entry event at the destination. Between these points CTD are ATM the transmission delay and ATM sum of the processing delay. fault tolerance ( fault-tolerant ) network device or the communication link may fail without interrupting communications degree. Fault tolerance show version to view router 's configuration register =========================================================== =============== Adapt to traffic or buried Control distribute VCC ( Control Distribution VCC) Phase I LAN simulation defines three control connections No * do the reverse operation of the configuration Holdtime CDP (CDP hold time ) routers to keep from neighboring routers received Cisco Discovery Protocol Corelayer The top layer of the Cisco three-tier hierarchical model that helps design, build, and maintain a CBR constant bit rate ----- ATM forum created for use in ATM networks Vlan database enters the VLAN configuration mode of the VLAN The protocol field, even the direct font size in the transport layer header, filters the IPX address table of the network . =========================================================== =============== Enable password Set the plaintext enable password Used to connect to remote sites . FRAME-RELAY is a non-broadcast multi-access type network that does not support broadcasting. Redundant topology , causing " broadcast storm ", " multiple frame reception ", "MAC address table instability ". bandwidth ( the bandwidth ) the spacing between the highest and lowest frequency of signals used in the network. Usually, it involves one Adopt standard : The name-to- IP address resolution is provided on the special network . An example of an FQDN is bob.acme.com . MCR and PCR =========================================================== =============== 1. Use hop count as a metric 2. Support up to 6 paths for the average load (default set to 4) 3. Periodic notification time : 30s GMII dry megabits MII (Gigabit MII): providing a data transmission . 8 -bit Media Independent Interface. Link State Routing Protocols Router, which is required for other special tasks in OSPF operations. A multi-access OSPF network with at least two routers selects a router through the OSPF Hello protocol, which makes the multi-access network necessary neighbors. 16 , 32 , 64 and 128 are used. Each network elects a root bridge BridgeID Lowest Show cdp neighbors detail View CDP neighbors ( including Layer 3 IP addresses ) show cdp entry * View CDP neighbors ( including Layer 3 IP addresses ) dedicatedline ( green ) do not share any bandwidth point to point connection. Cable Crossover ( crossover cable ) is connected to the switch switches, host-to-host, hub to hub switchport access vlan 10 Add this port to 10 VLAN in . A data link product from EtherTalk Apple Computer Inc. that allows AppleTalk networks to be powered by Ethernet IGRP configuration Access-list 1 deny host 10.3.3.1 access-list 1 permit any Modulation method. See modulation . Config-register 0x2142 modify the startup configuration key Connector type : BNC interface , AUI interface , RJ45 interface , SC/ST interface The loop that occurs when the end of the protocol opens. Cell ( Cell ) the ATM network, the basic unit of data switching and multiplexing. The cell has a 53 byte group. Because they do not forward broadcast frames, the broadcast domain is usually surrounded by routers. DSU data service unit ---- This device is used to adapt the physical interface on the data terminal equipment (DTE) mechanism to the transmission equipment such as T-1 or E-1 and is responsible for signal timing. It is usually combined with a channel service unit and is called a CSU/DSU . See CSU . =========================================================== =============== Address learnmng ( address learning ) is used with the transparent bridge to learn the hard of all devices on the internet. Used to " fused " the capabilities of various routers and switch sets . ATMARP server (ATMAPR server ) provides a logical subnet to run the address resolution service. There is traffic successfully reaching the destination. Usually in a router with poor productivity or insufficient caching ability and poor packet loss Count to infinity ( calculation to infinity ) routing problem in a routing algorithm, routers continue to increase Configuration information. Displays a physical view of the CiSCO device chassis and provides device monitoring capabilities and basic troubleshooting capabilities. Can be integrated with a large number of SNMP- based network management platforms. FRAME-RELAY is a non-broadcast multi-access type network that does not support broadcasting. Provide sufficient management and configuration to get the router working so that someone can remotely log in to the router and configure it. 1900 only supports ISL trunk protocol 2950 only supports 802.1Q trunk protocol 3550 supports 802.1Q and compression ( compression ) with a string of numerals repeated data, transmitted over a link than the normal grant =========================================================== ================ Username 123 password cisco configuration user name password database , used to verify each other If the router has a loopback interface , select the highest IP from the loopback interface as the RouterID. =========================================================== =============== lOBaseT , Fast Ethernet, and lEEE . The packet's ability to process packets faster. border router ( border router ) ----- generally Open Shortest Path First (OSPF) is defined as a region connected to the backbone routers region. But the border router can also be a router that connects a company to the Internet. See Banner motd [char c] also ends with [char c] another line Frame-relay lmi-type ansi frame-relay intf-type dce A system developed to provide network security. See the authentication . Authorization and accounting R14(config-if)#ppp chap password 16300 R14(config-if)#ppp chap hostname 16300 Select the metric for the route : border router ( border router ) ----- generally Open Shortest Path First (OSPF) is defined as a region connected to the backbone routers region. But the border router can also be a router that connects a company to the Internet. See bootstrap protocol ( Bootstrap Protocol ) is used to dynamically allocate IP addresses to the requesting client and gateway coprocessor =========================================================== ================ Frame-relay route 120 interface Serial0 110 10Mbps 100 Startup -config will be actively loaded every time the router or switch is started . Access-list 1 deny host 10.3.3.1 access-list 1 permit any Directed broadcast (a direct broadcast ) a data frame or packet is transmitted to a remote network segment specific There are two types of ACLs : Disconnect * Forced interruption of "telnet out " session Need to create a neighbor relationship using multicast to perform route advertisement ( reliable ) own link state database ( network map ) using a corresponding algorithm , such as (SPF) to calculate the best route trigger update Spanning tree port Righteousness. Network traffic is bridged across all interfaces of the same bridge group number. Encapsulation PPP enables PPP on the interface demultiplexing ( demultiplexer ) one input stream composed of a plurality of the multiplexed signal is converted back to a single The designated router is in case of failure. Configure ACL to reject london to access Denver DLCI: identifies the PVC 's . Only valid locally . Need to create a neighbor relationship using multicast to perform route advertisement ( reliable ) own link state database ( network map ) using a corresponding algorithm , such as (SPF) to calculate the best route trigger update BGP4 . =========================================================== =============== 1. Address Learning Address learing 2. forwarding / filtering decisions Forward / Filter Decision 3. loop avoidance Loop avoidance Bus ( bus ) through a physical path ( usually wire or copper wire ) a digital signal can be used to calculate Access layer : Provides network access points , and the corresponding device ports are relatively dense . Main devices : switches , hubs . 10.1.1.1/0.0.0.0 Show hosts shows the current hostname configuration Choose an agreement. Private IP address : Duplex Auto ( automatic duplex ) of a layer and 2 a device layer disposed on, it automatically switches provided DXI data exchange interface (Data Exchange Interface) in RFC 1482 is described, DXI define a bridge priority ( bridge priority ) disposed bridge STP priority. By default all bridges take precedence Reliable transmission mainly involves physical addressing, line procedures, network topology, error notification, orderly delivery of frames, and flow control. The IEEE has further split this layer into a MAC sublayer and an LLC sublayer. Also known as the link layer. Can be compared to the data link control layer of the SNA model. See Application layer , LLC , MAC , Network layer , Physical switchport access vlan 10 Add this port to 10 VLAN in . COmposite metric ( complex metrics ) with IGRP and EIGRP use with such routing protocol, Line : PPP, HDLC, SLIP switchport access vlan 10 Add this port to 10 VLAN in . Interface s 1.??? point-to-point enables a peer -to- peer subinterface . ??? is the interface number . ip add 10.1.1.1 255.255.255.0 configures the ip for the subinterface ASBR autonomous system boundary router (Autonomous System Boundy Router) one on BGP4 BGP Version 4 (BGPversion4) ----- versions of the most common on the Internet inter-domain routing protocol 4 . Clear line XXX clear line Vlan database enters the VLAN configuration mode of the VLAN R14(config-if)#dialer-group 9 GNS the nearest server (Get Nearest Server): in the IPX network, to determine a customer a request of a given type of packet location nearest transmitted activation server. An IPX network client issues a GNS request to obtain a response from a connected server or a response from a router that discloses the location of the server on the internet. GNS is part of IPX and SAP . See IPX and SAP . Control distribute VCC ( Control Distribution VCC) Phase I LAN simulation defines three control connections BGP Identifier (BGP Identifier ) that identifies the segment comprises Yu BGP a value of the speakers. This is by ARA AppleTalk Remote Access (AppleTalk Remote Access) is built for Macintosh users Transmission method. Use acknowledgments and flow control for reliable data transfer. Contrast connectionless . See virtual circuit . FSIP Fast Serial Interface Processor (Fast Serial Interface Processor) Cisco 7000 Router silent Note : Endpoints ( endpoint ) see BGP neighbors . =========================================================== =============== PPP: A device that acts as a destination, source, or both. DTEs include devices such as multiplexers, protocol converters, and computers. A connection to a data network is a data communication device that uses a clock signal generated by the device Apply application related configuration In user mode and privileged mode. Bandwith on demand (BoD , bandwidth on demand ) This feature allows an additional B channel to be used for Congestion ( congestion ) exceeds the amount of network traffic handling capacity. E channel (E channel ) loopback channel (Echo channel) ----- for a circuit switched 64Kb / s ISDN control channel. This channel may specifically described in 1984 in ITU-T ISDN find specification, but from the 1988 version canceled. See Bchannel , D channel H channel . De-encapsulation ( disassembly ) layered protocol technology, in which a layer of slave layer protocol data unit Storage forwarding : slow , ensuring the correctness of the frames being forwarded . Dynamic control of the measure, ACR varies between minimum cell rate (MCR) and peak cell rate (PCR) . See Connectionless ( no connection ) does not require the creation of data transfers from virtual circuits. It has no overhead, try its best 1. Control network traffic 2. Implement packet filtering =========================================================== =============== Specify the idle IP of the address pool Configuration using point-to-point subinterfaces =========================================================== ===================== Cellrelay . ABR area border router ----- located in one or more OSPF area boundary OSPF routers, ABR is used to OSPF connection region to the OSPF backbone area EEPROM electrically erasable programmable read-only memory is programmed after shipment. These non-volatile memory chips can be used when needed. B(config)#inte s 0 Segmentation : Broadcast domain division =========================================================== =============== Set startup options. Ripv2 certification : Specify the idle IP of the address pool Classical IP over ATM ( classical IP over ATM) is defined in RFC 1577 to make ATM features An interface processor used by the device to provide two lOOMb/s lOOBaseT ports. Target port : None When to disconnect =========================================================== =========== coimnection ID ( connection ID) ----- each into the router's Telnet identifying the session analysis. Show PPP authentication method : R14(config)#interface bri 0 R14(config-if)#encapsulation ppp Target port : None GNS the nearest server (Get Nearest Server): in the IPX network, to determine a customer a request of a given type of packet location nearest transmitted activation server. An IPX network client issues a GNS request to obtain a response from a connected server or a response from a router that discloses the location of the server on the internet. GNS is part of IPX and SAP . See IPX and SAP . Configuration register starts the configuration key , and modifying it will affect the startup sequence of the Router . Routers in the same autonomous system are able to learn to advertise related routes to each other . The basis of word expression. DLSw Data Link Switching (Data Link Switching) IBM in 1992 Exploitation AC data link B(config)#inte s 0 Router, which is required for other special tasks in OSPF operations. A multi-access OSPF network with at least two routers selects a router through the OSPF Hello protocol, which makes the multi-access network necessary neighbors. VTP message announcement , only possible TRUNK transmission on . The PPP protocol is defined in RFC 1378 . See PPP . OSPF hierarchy advantages : =========================================================== =============== Disable returns from privileged mode to user mode Broadband ( broadband ) multiplexing several independent technique for transmitting signals on a single cable. telecommunications Startup -config will be actively loaded every time the router or switch is started . AAL1 ATM Adaptation Layer 1 One of the four AALs recommended by ITU-T for connection-oriented, constant Encapsulation PPP enables PPP on the interface Please refer to the second part of the CCNA Professional English Vocabulary Collection : Classic Recommendations ; CCNA Professional English Vocabulary Collection 1. Neighbor table => all neighbors Port Console ( control port opening ) the Cisco a typical routers and switches on the RJ-45 ports, with The name of the Cisco Fusion Cisco Internetwork architecture on which Cisco IOS completes operations. design Ethernet link overhead: Data Link Control layer ( data link control layer ) the SNA first architecture model 2 layer, which is responsible for congestion avoidance ( congestion avoidance ) to minimize latency, the ATM network for controlling the system into The client's local broadcast request is changed by unicasting the service to the server.connection-oriented ( connection-oriented ) to establish a virtual circuit data before any data transmission The interconnected network acts as a virtual link through an external network ( such as TCP/IP) . See AURP . The address is all ones . For hardware addressing, the hardware address will be all 1s in hexadecimal ( ie all F) . B(config)#inte s 0 Topology Bus ( bus topology ) a straight LAN off-line structure, wherein transmission from each station on the network choke packet ( packet that was blocked ) when congestion exists, it is sent to the sender of a packet, it should inform The data can exceed the bandwidth normally reserved for the connection, but cannot exceed the port rate. An example of this is a 128Kb/s Frame Relay CIR on T-1 - depending on the vendor, it is possible to send at a rate of more than 128Kb/s for a short time . LMI: Local Management Interface . A particular connection increases the amount of available bandwidth. The default route ( default route ) is used to guide the static routing table entry of the frame, and its next hop is not in Network devices ( such as routers, bridges or hubs ) efficacy. They serve as an FEP for an ATM network that uses a special DSU to complete the packet encapsulation . The credibility value of the source. The smaller the value, the higher the level of constitutionality Ethernet cable type for switch or switch to hub. =========================================================== =============== Code, during each bit cell 0 with "01" indicates, an alternating Points "11" or "00" . FIG. The sending device must maintain a density of 1 in the AMI but is not independent of the data stream. Also called the alternating mark reverse of the binary code. Control B8ZS . See ones density . Access-list 1 deny host 10.3.3.1 access-list 1 permit any BUS BUS ----- in LAN emulation, responsible for parsing the broadcasting and with all the unknown ( unregistered ) packet into the address of the ATM hardware or software required for point to point virtual circuit. See LANE , LEG , LEGS, and LES . BX.25 AT&T 's use of X.25 . See X.25 . Network and terminal emulation software to connect asynchronous devices - a LAN or the WAN , to provide supported protocol routing synchronous or asynchronous. A: 10.0.0.0/8 HDLC Advanced Data Link Control----- Use frame characters ( including checksums ) , 1.0.0.0 2.0.0.0 3.0.0.0 4.0.0.0 Advertising ( advertisement ) routing or service update is sent at a given interval, allowing on the network OSPF . OSPF hierarchy advantages : Disconnect * Forced interruption of "telnet out " session IGRP: based on bandwidth, latency, reliability, load, MTU (maximum transmission unit) A bridge with low path overhead. EGPs: External Gateway Routing Protocol , Maintaining Routes between Autonomous Systems cell payload scrambling ( cell payload scrambling ) the ATM switches and certain of the edges speed relay There are two types of ACLs : Enable password Set the plaintext enable password explorer frame ( detection frame ) and the source-route bridging found to serve to bridge before a remote transmission destination address ( destination address ) receiving a data packet network device address. Configure a static default route to indicate which interface to send to the unknown network , which interface to send the packet R14 (config) #ip route 0.0.0.0 0.0.0.0 bri 0 Show ip route BGP4 BGP Version 4 (BGPversion4) ----- versions of the most common on the Internet inter-domain routing protocol 4 . Ip route (Destnation Network IP) (NetMask) [NextHopIP | LocalInterface] Destnation Network IP: Target Network IP Vlan database enters vlan configuration mode vtp domain configures VTP domain name vtp password configures VTP password 0x0 indicates that the router is going to enter the Rom monitor mode. DLSw+ Cisco 's DLSw implementation supports the RFC standard, and Cisco added the goal to increase =========================================================== =============== " The main explanation is B , C words that begin with. (ChinaITLab) Governing system path. Copy tftp: running-config copy startup-config tftp: Listen for digital signals on the cable before. In addition, the CSM elbow CD allows all devices on the network to share the same cable, but one at a time. If both devices are sending at the same time. A frame collision will occur and an interference pattern will be sent, the device will stop transmitting, wait for a predetermined amount of time, and then try to send again. =========================================================== =============== Physical layer : EIGRP and OSPF . ----- s1 RA s0 >-------- s1 RB s0 --------- s1 RC s0 ------ AM amplitude modulation (Amplitude modulation) is a kind of information represented by the amplitude change of the carrier signal. firewall ( firewall ) intentionally a barrier between any public network and a private network settings from a floodming ( diffusion ) an interface when receiving traffic it will be transmitted to the originating communication interfaces in addition to the amount of To understanding This interface of the 7000 Series router minimizes the performance bottleneck of the UNI . Participate in AAL3/4 private AAL5 . Kind of protocol to communicate. The bridging function is at the data link layer, layer 2 of the OSI reference model . The purpose of the bridge is to filter, send or spread any incoming frames based on the MAC address of the particular frame. An organization of government and other volunteer members that coordinates standards-related activities, approves US national standards, and represents the United States in international standards organizations. ANSI helps create international and US standards in communications, networking, and various technology areas. It has released more than 13,000 standards for engineering products and technologies , ranging from screw ribs to network protocols.