Chapter 38 - Device Management Protocols Flashcards

1
Q

What command(s) are used to enable logging for users logged in via a terminal emulator (Telnet, SSH)?

A

‘logging monitor’
‘terminal monitor’ (by the user when logged in each session)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What methods are there of viewing log messages?

A
  • They can appear on the Console Lines:
    - Log messages will be displayed in the CLI when connected via the console port.
    - This is enabled using the ‘logging console’ command.
  • They can appear on the VTY Lines:
    - Log messages will be displayed in the CLI when connected via Telnet/SSH.
    - Disabled by default.
    - This is enabled using the ‘logging monitor’ command.
    - The users will then need to use ‘terminal monitor’ once they have logged in.
  • They can be stored in RAM:
    - This is enabled using the ‘logging buffered’ command.
    - A user can then use the ‘show logging’ command to view the stored messages.
  • They can be stored on a syslog server:
    - This is configured using the ‘logging host <ip>' command.
    - Syslog uses UDP 514.
    - This can then be inspected in the remote syslog server.</ip>
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What command(s) can you use to enable timestamps for IOS logging messages?

A

‘service timestamps’ from global config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What command(s) can you use to enable sequence numbers for IOS logging messages?

A

‘service sequence-numbers’ from global config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the different keywords and numbers that Cisco IOS uses to identify log message severity levels?

A
  • 0 - Emergency - System Unusable (Severe)
  • 1 - Alert - Immediate Action Required (Severe)
  • 2 - Critical - Critical Event (Highest of 3) (Impactful)
  • 3 - Error - Error Event (Middle of 3) (Impactful)
  • 4 - Warning - Warning Event (Lowest of 3) (Impactful)
  • 5 - Notification/Notice - Normal, More Important (Normal)
  • 6 - Informational - Normal, Less Important (Normal)
  • 7 - Debug - Requested by User (Debug)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What command(s) are used to enable different levels of logging on different services?

A
  • Console - ‘logging console <level-name>'</level-name>
  • Monitor (SSH/Telnet) - ‘logging monitor <level-name>'</level-name>
  • Buffered (Store locally) - ‘logging buffered <level-name>'</level-name>
  • Syslog (Store remotely) - ‘logging trap <level-name>' to config level
    ‘logging host <ip>’ to config syslog server</ip></level-name>
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What command can you use to clear Buffered log messages?

A

‘clear logging’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does the ‘debug’ command do?

A

Enables Debug (severity level 7) messages to be sent for specific events (e.g. ‘debug ip ospf hello’ will display all hello messages sent and received on OSPF enabled interfaces)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What command can you use to display current CPU load on an IOS device?

A

‘show process cpu’

  • Useful when enabling debug level logging as it can have an impact on CPU depending on what it is being enabled for
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is NTP?

A
  • Network Time Protocol
  • Gives network devices a sense of time and date and allows networks to sync their clocks so they all have the correct times and dates when compared to each other
  • Important for things such as logging to ensure the time on log entries is correct.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Best practice before enabling a device to contact an NTP server

A
  • Set the time, date, timezone, and daylight savings status to as close to the current time as possible. This will make it easier for the device to synchronise to the NTP server.
  • Set the timezone and daylight savings status before setting the time and date.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What command(s) do you use to set the timezone and daylight savings status for an IOS device?

A
  • Timezone - ‘clock timezone <timezone (e.g. BST)> <how many hours compared to UTC (e.g. -5)>’
    - The timezone parameter can be any value. It is best to set this to the name of the timezone the device is
    in.
    - The parameter after this defines how many hours behind Universal Coordinated Time the device is.
  • Daylight savings - ‘clock summer-time <timezone> <recurring>'
    - The timezone parameter can be any value. It is best to set this to the name of the daylight savings
    timezone the device is in.
    - The 'recurring' parameter tells the device to go forward/backward by an hour over the coming years
    when the timezones change from/to daylight savings.
    - At the end of the command, you can also add when daylight savings time begins and ends in your
    timezone. '<week> <day> <month> <time>'. The end parameters are entered in the same order after the start parameters.</time></month></day></week></recurring></timezone>
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What command(s) do you use to manually set the time/date of an IOS device?

A

‘clock set <time (hh:mm:ss)> <date (Day Month Year)>’ - Software clock
‘calendar set <time (hh:mm:ss)> <date (Day Month Year)>’ - hardware clock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What command(s) do you use to make a device an ntp server only (NTP Server mode)?

A
  • ‘ntp master <stratum>'</stratum>
  • Causes the device to only act as a server
  • Hands out the time based on the device’s own internal clock
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What command(s) do you use to make a device an ntp client?

A
  • ‘ntp server <address or hostname>’
  • Causes the device to act as a client and a server
  • Will first act as a client to synchronise with a reference clock.
  • Once synchronised, will then act as a server to hand out the time to other clients.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When using the ‘ntp associations’ command, what part of the output determines what NTP server the device is currently synchronised with?

A

An ‘*’ before the association

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the Stratum level of a NTP server?

A
  • How accurate the NTP source is believed to be.
  • The lower the number, the more accurate the NTP source.
  • It starts at 0 and increases by 1 on the local device for each NTP server hop away from the reference clock the local device is.
    - For example, R1 (server with stratum 0), connects to R2 (client), which connects to R3 (client). The
    stratum on R3 for reference clock R1 will be 2 if R3 uses R2 as its server. If R3 just decides to use R1 then
    it will be stratum 1.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What stratum level do Cisco routers and switches use for their internal clock by default?

A
  • 8
  • This is the reference clock for a router when the ‘ntp master’ command is used.
  • In ‘ntp associations’ it will show as 7
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the range of stratum levels for Cisco routers and switches?

A

1-15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What would happen if a client device calculated an NTP source’s stratum to be 16?

A

The client would consider this time data to be unusable and would not trust it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What information does the ‘show ntp associations’ command display?

A
  • Address - Address of an NTP server
  • Ref Clock - Reference clock of an NTP server
  • St - Stratum of an NTP server to its reference clock
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is an NTP Primary Server and Secondary Server?

A
  • NTP Primary Server is a device that gets its time directly from a reference clock.
  • NTP Secondary Server is a device that acts as an NTP Client and Server and gets its time from other NTP servers. This is configured using the ‘ntp server’ command.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is a useful way of configuring NTP redundancy?

A
  • Use the ‘ntp server’ command to associate with an external reference clock (e.g. an atomic clock)
  • Use the ‘ntp master’ command to allow the devices’ internal clock to be used as a reference clock with a higher stratum level than that of the external reference clock.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What command can you use to force a device to send NTP client messages from a specific IP?

A

‘ntp source <interface>'</interface>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is CDP?

A
  • Cisco Discovery Protocol
  • Cisco Proprietary
  • Type of Layer 2 neighbor discovery protocol
  • Learns information about and shares information with neighboring devices such as:
    - Host name
    - IP and MAC addresses on the device
    - The interface at the other end of the link that sent the CDP advertisement
    - Information on what type of device is at the other end of the link (e.g. router)
    - The model of device and what OS it is running
26
Q

What commands can you use to view CDP neighbor information learned by an IOS device?

A
  • ‘show cdp neighbors’ - Lists a one line summary of information learned about neighbors (e.g. hostname, local interface discovered via, hold time, capability, platform (model), remote interface) . Can also add the interface on the end to only list this information learned from a specific interface
  • ‘show cdp neighbors detail’ - Lists a large set of information about neighbors.
  • ‘show cdp entry <name>' - Lists the same information as the 'detail' command but only about a specific neighbor.</name>
27
Q

True or False. The same CDP commands can be used on routers and switches.

A

True.

28
Q

What MAC address are CDP messages sent to?

A

01:00:0C:CC:CC:CC (Multicast)

29
Q

True or False. A device will forward CDP messages that it receives from other devices.

A

False. It will process the message and then discard it. This is why a device will only learn about neighbors that are directly connected.

30
Q

What command can you use to enable CDP globally on an IOS device?

A

‘cdp run’

31
Q

How often are CDP messages sent by default?

A
  • 60 seconds
  • Can be changed with the ‘cdp timer <seconds>' command in global config</seconds>
32
Q

What is the default Hold Time for CDP and what does it do?

A
  • 180 seconds
  • The hold time tells the router how long it should wait after no longer hearing CDP messages from a device before removing it from its CDP database.
  • Can be changed with the ‘cdp holdtime <seconds>' command in global config</seconds>
33
Q

What is LLDP?

A
  • Link Layer Discovery Protocol
  • IEEE 802.1AB
  • Type of Layer 2 neighbor discovery protocol
  • Learns information about and shares information with neighboring devices such as:
    - Host name
    - IP and MAC addresses on the device
    - The interface at the other end of the link that sent the LLDP advertisement
    - Information on what type of device is at the other end of the link (e.g. router)
    - The model of device and what OS it is running
34
Q

Differences between information provided by CDP and LLDP.

A
  • LLDP uses ‘B’ (for bridge) as the capability code for a switch. CDP uses ‘S’ (for switch).
  • LLDP doesn’t list IGMP as one of the discoverable capability codes. CDP does.
  • CDP lists the device’s platform (device model) whereas LLDP doesn’t
  • LLDP lists only enabled capabilities of a device. CDP lists all potential capabilities of a device. You can view all potential capabilities of a device learned by LLDP using the ‘show lldp neighbors detail’ or ‘show lldp entry’ commands.
  • CDP can convey VTP information, LLDP cant
35
Q

True or False. Show commands are identical for CDP and LLDP.

A

True.

36
Q

What MAC address are LLDP messages sent to?

A

01:80:C2:00:00:0E

37
Q

True or False. LLDP is enabled by default on Cisco devices.

A

False. It is disabled by default

38
Q

True or False. CDP is enabled by default on Cisco devices.

A

True.

39
Q

What commands need to be used to enable LLDP?

A
  • ‘lldp run’ - Enables lldp globally
  • ‘lldp transmit’ - Enables an interface to transmit LLDP messages
  • ‘lldp receive’ - Enables an interface to receive LLDP messages
40
Q

True or False. LLDP can be configured to only transmit or receive messages on a particular interface.

A

True. Using the ‘lldp transmit’ and ‘lldp receive’ commands on an interface(s).

41
Q

How often are LLDP messages sent by default?

A
  • 30 seconds
  • Can be changed with the ‘lldp timer <seconds>' command in global config</seconds>
42
Q

What is the default Hold Time for LLDP and what does it do?

A
  • 120 seconds
  • The hold time tells the router how long it should wait after no longer hearing LLDP messages from a device before removing it from its LLDP database.
  • Can be changed with the ‘lldp holdtime <seconds>' command in global config</seconds>
43
Q

What commands can you use to view LLDP neighbor information learned by an IOS device?

A
  • ‘show lldp neighbors’ - Lists a one line summary of information learned about neighbors (e.g. hostname, local interface discovered via, holdtime, capability, remote interface). Can also add the interface on the end to only list this information learned from a specific interface.
  • ‘show lldp neighbors detail’ - Lists a large set of information about neighbors.
  • ‘show lldp entry <name>' - Lists the same information as the 'detail' command but only about a specific neighbor.</name>
44
Q

What is the default logging level for the console?

A

Debug (7)

45
Q

What information could you only find about a device if you used the ‘show cdp/lldp neighbors entry <name>' or 'show cdp/lldp neighbors detail' command?</name>

A
  • For CDP; The model number and OS version of the device
  • For LLDP; The potential capabilities of the device
46
Q

What command can you use to see the time and date on an IOS device?

A

‘show clock’

‘show clock detail’ will also show the time source

47
Q

What is the default timezone of an IOS device?

A

UTC

48
Q

What command(s) can you use to sync the hardware clock to the software clock and vice versa?

A

‘clock update-calendar’ to sync hardware (calendar) to software (clock)
‘clock read-calendar to sync software (clock) to hardware (calendar)

49
Q

What is a Reference Clock?

A
  • Extremely accurate time keeping device (e.g. atomic clock)
  • Stratum 0
50
Q

What is Symmetric Active NTP mode?

A
  • When NTP servers peer with other NTP servers at the same stratum level to provide a more accurate time and redundancy.
  • Configured using the ‘ntp peer <IP> command</IP>
51
Q

True or False. NTP updates the hardware (calendar) and software (clock) clocks.

A

False. It only updates the software clock so it’s a good idea to do ‘clock update-calendar’ after first connecting to an NTP server.

You can make NTP update the hardware clock by using the ‘ntp update-calendar’ command in global config.

52
Q

What is the hardware clock of a device?

A
  • Normally a battery powered time keeping device that maintains the time even if the device is restarted.
  • The software clock is synchronised to the hardware clock upon boot.
53
Q

What is NTP authentication?

A
  • Optional on Cisco devices
  • Used to ensure that clients can only sync with the intended servers. Their passwords must match.
  • To enable use the below commands
    ‘ntp authenticate’ - Enable it on the client and server
    ‘ntp authentication-key <key-number (e.g. 1, 2)> md5 <key>' - Create the key(s) on the client and server
    'ntp trusted-key <key-number>' - Specify trusted keys on the client and server
    'ntp server <IP> key <key-number>' - Specify which key to use for which server on the client</key-number></IP></key-number></key>
  • Can also add authentication to NTP peering by using the ‘ntp peer <IP> key <key-number> command</key-number></IP>
54
Q

What is Static Client NTP mode?

A
  • When a device acts as an NTP client and server
  • Configured using the ‘ntp server <ip> command</ip>
55
Q

What information does the ‘show cdp’ command show?

A
  • CDP timer
  • CDP hold timer
  • CDP version
56
Q

What is the LLDP reinitialisation timer?

A
  • Delays the initialisation of LLDP when it is enabled.
  • 2 seconds by default
  • Configured using ‘lldp reinit <seconds>'</seconds>
57
Q

Mnemonic for remembering syslog levels

A

Every - Emergency - 0
Awesome - Alert - 1
Cisco - Critical - 2
Engineer - Error - 3
Will - Warning - 4
Need - Notification/Notice - 5
Ice cream - Informational - 6
Daily - Debugging - 7

58
Q

What is the format of a log message?

A

<Sequence>:<Time>: %<Facility>-<Severity>-<Mnemonic>:<Description>

- Sequence - Identifier
- Time stamp - Time the event occurred
- Facility - Where the event occurred (e.g. OSPF for OSPF, LINK for interface)
- Severity - How urgent the issue is
- Mnemonic - Brief description
- Description - Full description
</Description></Mnemonic></Severity></Facility></Time></Sequence>

59
Q

What does the ‘logging synchronous’ command do?

A

Stops log messages in the console or vty login lines from splitting your configuration lines

60
Q

True or False. A device can have multiple NTP servers configured.

A

True. It will sync to the server with the best response times at that moment.

’ ntp server <ip> prefer' will cause this server to be the preferred NTP source.</ip>

61
Q

What is an SNMP Engine ID?

A
  • 10 character hex string that identifies an SNMP server. Local ID is configured automatically.
  • Configuring the remote engine ID on a local device tells it what server it will connect to
  • Configuring the local engine ID on a local device is what other devices will connect to by configuring their remote engine id