Book Notes Review 1 Flashcards

1
Q

Command that will prompt icmp requests on the screen?

A

debug ip icmp

response
ICMP packet debugging is on.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do you designate an inside and an outside nat interface?

A
# interface g0/1
#ip nat outside
#interface g0/0
#ip nat inside
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Give an example of a static nat configuration using 192.168.1.10 as the inside local and 200.124.22.3 as the inside global.

A

ip nat inside source static 192.168.1.10 200.124.22.3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Command to verify nat translations.

A

show ip nat translations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Explain dynamic nat.

A

internal devices assigned with private ip addresses share from a pool of public ip addresses to reach the internet. Access lists are used to identify the range of ip addresses that you want to be able to translate.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Explain/dynamic nat configuration.

A

Assign ip nat inside/outside to interfaces

#access-list 1 permit 192.168.1.0 0.0.0.255
*identify range of traffic you want to translate*
#ip nat pool NWKING 200.124.22.1 200.124.22.2 netmask 255.255.255.252
*public addys in pool used for translations and name the pool*
#ip nat inside source list 1 pool NWKING
*source ip addy is identified by using a list list 1 then translate it to a dynamic pool "NWKING"
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Command to clear nat translations.

A

R1# clear ip nat translations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How would you display nat statistics?

A

sh ip nat statistics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Explain nat overlaod/pat configuration.

A

ip nat pool NWKING 200.124.22.1 200.124.22.1 netmask 255.255.255.252

Assign ip nat inside/outside to interfaces

#access-list 1 permit 192.168.1.0 0.0.0.255
*identify range of traffic you want to translate*

public addys in pool used for translations and name the pool only one ip addy is listed in the pool

*source ip addy is identified by using a list list 1 then translate it to a dynamic pool “NWKING” then overlaod is added to enable pat.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What command would you use to set up PAT directly on an interface?

A

ip nat inside source list 1 interface g0/0 overload.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Give the configuration for setting up ssh and telnet.

A
#conf t
(config)#line vty 0 4
(config-line)#login local
(config-line)#transport input telnet ssh
(config-line)#username r2-atiba password cs
(config)#ip domain-name example.com
(config)#crypto key generate rsa
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How to configure PAT on an interface using access list 1 and inside global int s0/0/0?

A
#access-list 1 permit 192.168.1.0 0.0.0.255
#ip nat inside source list 1 interface s0/0/0 overload
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

LACP & PAgP modes

A

LACP - Active - Passive

PAgP - Auto - Desirable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Command to show all etherchannels on a switch along with negotiated protocols?

A

show etherchannel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

IEEE standard for STP - RSTP - MST

A

STP - Spanning Tree Protocol - 802.1d
RSTP - Rapid Spanning Tree Protocol - 802.1w
MST - Multiple Spanning Tree Protocol - 802.1s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does spanning tree use to check for switching loops?

A

Bridge Frames
BPDU - Bridge Protocol Data Units

STP-enabled devices exchange BPDUs to establish a spanning tree. BPDUs contain sufficient information for the devices to complete spanning tree calculation

17
Q

T/F

STP runs as a distributed process on each switch and creates a topology database.

A

True

18
Q

What is a draw back of 802.1D?

A

802.1D Spanning Tree Protocol (STP) has a drawback of slow convergence.

19
Q

Cisco Catalyst switches support three types of STPs, which are?

A

Cisco Catalyst switches support three types of STPs, which are PVST+, rapid-PVST+ and MST.

20
Q

What is IEEE standard is PVST+ based on and what Cisco proprietary extensions does it include?

A

PVST+ is based on IEEE 802.1D standard and includes Cisco proprietary extensions such as BackboneFast, UplinkFast, and PortFast.

21
Q

Rapid-PVST+ is based on what IEEE standard?

A

Rapid-PVST+ is based on IEEE 802.1w standard and has a faster convergence than 802.1D.

22
Q

802.1w includes which Cisco proprietary enhancements.

A

RSTP (IEEE 802.1w) natively includes most of the Cisco proprietary enhancements to the 802.1D Spanning Tree, such as BackboneFast and UplinkFast.

23
Q

All Cisco switches default to which cisco proprietary stp standard.

A

All cisco switches default to RPVST+ 802.1w.

24
Q

STP root bridge is elected by what criteria?

A

The lowest MAC addy & Priority.

25
Q

How many bytes are in a switches bridge ID and what do they represent?

A

Switch Bridge ID is 8 bytes long.
2 bytes bridge priority.
6 byte MAC addy

26
Q

Default bridge priority is?

A

32,768

27
Q

What is 802.1D - STP convergence time.

A

50 seconds.

28
Q

What command turns on spanning tree portfast?

A

(config-if)#spanning-tree portfast

If you enter it in global config it turns on portfast on all access ports.

29
Q

What is BPDU guard and what does it do?

A

BPDU - BPDU Guard feature is used to protect the Layer 2 Spanning Tree Protocol (STP) Topology from BPDU related attacks. BPDU Guard feature must be enabled on a port that should never receive a BPDU from its connected device.

End devices are not supposed to generate BPDUs, because in a normal network environment, BPDU messages are exchanged by network switches.

At the reception of BPDU’s GPDU guard disables the port that has porfast configured.

Transitions port into err-disable state.

30
Q

Command to enable or disable BPDU guard on an interface?

A

int gi0/0

(config-if)#spanning-tree bpduguard enable
(config-if)#spanning-tree bpduguard disable

31
Q

Commands to config ports to re-enable themselves?

A

(config) #errdisable recovery cause bpdu guard

(config) #errdisable recovery interval 400

32
Q

command to monitor/verify spanning tree summary when you are running Rapid Per VLAN Spanning Tree Plus (Rapid PVST+) or Multiple Spanning Tree (MST).

A

show spanning-tree summary totals

Shows mode, portfast/bpdu status and more

33
Q

Monitor portfast for an interface.

A

show spanning-tree int fa0/1

34
Q

Command to show if bpdu guard is enabled by default.

A

show spanning-tree summary