CCIE SP Written Flashcards

Question

What is the frame format for an OC? How many are in an OC-3?

Answer 1

STS-1. 3 STS-1s.

Answer 2

Long Term Evolution architecture consists of many various components that make up Mobility

Answer 3

User Equipment. End-user device like a cellphone.

Answer 4

Universal Integrated Circuit Card (UICC). Under LTE context, known as Subscriber Identity Module (SIM). Identifies a phone's number, billing plan, and all other network-related information.

Answer 5

eNB, are base stations that control the mobile nodes in one or more calls.

Answer 6

A base station that is supporting a specific mobile node.

Answer 7

Universal Mobile Telecommunications System. 3G network that 4G LTE was built on. Was a combination of packet and circuit switched architectures.

Answer 8

Evolved UMTS Terrestrial RAN. Encompasses entire LTE architecture.

Answer 9

- Mobility control - Radio admission control - eNB configuration and provisioning - dynamic resource allocation (Scheduling)

Answer 10

Designed to be Packet switched, all IP network.

Answer 11

Download - 299.6 Mbps, Upload - 75.4 Mbps.

Answer 12

1.4 MHz, 3, 5, 10, 15, and 20 MHz

Answer 13

Evolved Packet Core - responsible for forwarding traffic, handover events, filtering, billing and accounting.

Answer 14

Home subscriber service - A central database that contains info about all the subscribers within a given network

Answer 15

Packet Data Network - Any external network outside of LTE, like the internet.

Answer 16

PDN gateway -

Answer 17

Maximum Allocation Model - support enforcement of Bandwidth Constraints

Answer 18

- regular traffic - constraint-based routing of "guaranteed" traffic which satisfies a more restrictive bandwidth constraint than that satisfied by CBR

Answer 19

Regular traffic or Bc0

Answer 20

The more restrictive bandwidth is termed a sub-pool or Bc1

Answer 21

- more restrictive bandwidth constraint - higher Quality of Service performance in terms of delay, jitter, or loss for the guaranteed traffic.

Answer 22

MAM and RDM. Bandwidth efficiency, isolation across Class Types, and Protects against QoS degradation.

Answer 23

When there is a need to ensure isolation across all Class Types without having to use pre-emption can afford to risk some QoS degradation of Class Types other than the Premium Class.

Answer 24

Prevent QoS degradation of all Class Types and can impose pre-emption.

Answer 25

- Separate admission control and separate route computation for discrete subsets of traffic (for example, voice and data traffic). * Develop QoS services for end customers based on signaled rather than provisioned QoS * Build the higher-revenue generating "strict-commitment" QoS services, without over-provisioning * Offer virtual IP leased-line, Layer 2 service emulation, and point-to-point guaranteed bandwidth services including voice-trunking * Enjoy the scalability properties offered by MPLS.

Answer 26

The Dual Stack Lite (DS-Lite) feature enables legacy IPv4 hosts and server communication over both IPv4 and IPv6 networks. Also, IPv4 hosts may need to access IPv4 internet over an IPv6 access network. The IPv4 hosts will have private addresses which need to have network address translation (NAT) completed before reaching the IPv4 internet.

Answer 27

- Basic Bridging BroadBand Element (B4): - Address Family Transition Router(AFTR):

Answer 28

- Tunnelling IPv4 packets from CE devices over IPv6 tunnels to the ISM blade. - Decapsulating the IPv4 packet and sending the decapsulated content to the IPv4 internet after completing network address translation.

Answer 29

Ethernet or passive optical network (PON) technologies GPON is a point-to-multi point access mechanism.

Answer 30

● Single fiber transceiver with single-mode SC receptacle ● Complies with ITU-T G.984.2 class B+ and C+ ● Digital Optical Monitoring (DOM) support ● Complies with RoHS6 directive ● Point-to-multipoint ● Broadcast protocol uses TDMA ● High port density OLT at headend ● Low-cost ONT/ONU at home ● Primary market: FTTH for voice/data/video ● Low-cost passive optical splitter enables sharing of fiber, headend equipment

Answer 31

IP Protocol 46

Answer 32

Downstream on demand

Answer 33

Downstream device doesn’t provide Label mapping until requested by an Upstream device

Answer 34

In this mode an LSR does not wait for a request from an upstream device before signaling FEC-to-label bindings. As soon as the LSR learns a route, it sends a binding for that route to all peer LSRs, both upstream and downstream. One disadvantage of this is that it doesn’t help in conserving labels as LSR receives label mappings from neighbors that may not be the next hop for the destination. This mode is used by BGP-LU and LDP.

Answer 35

ordered control

Answer 36

n this approach, an LSR doesn’t advertise a FEC unless it’s the egress LSR for that FEC or until it has received a label for the FEC from its downstream peer. For each FEC for which the LSR is not the egress and no mapping exists, the LSR MUST wait until a label from a downstream LSR is received before mapping the FEC and passing corresponding labels to upstream LSRs. This is used by RSVP, LDP (JunOS) and BGP-LU.

Answer 37

This means that the LSR sending the label acts independently of its downstream peer. It does not wait for a label from the downstream LSR before it sends a label to its peers. This mode has the potential of blackholing the traffic. For instance, when operating in independent Downstream on Demand mode, an LSR may answer requests for label mappings immediately, without waiting for a label mapping from the next hop. This mode is used by LDP (IOS/IOS-XR)

Answer 38

Conservative Retention Mode

Answer 39

In this mode LSR store only labels from a neighbor who is currently next hop for a FEC. The advantage is that it requires less memory

Answer 40

In this mode LSR store all the labels received by the neighbors. One dis-advantage of this mode is that it requires more memory to store all the labels but provides faster convergence.

Answer 41

Bidirectional Forwarding Detection (BFD) is a lightweight keepalive protocol design to reduce dead peer detection time across layer 2 networks. It is used primarily on networks that do not rely on line-protocol for interface status (like Ethernet).

Answer 42

UDP, BFD uses echo messages to test reachability between neighbors and control messages for signaling.

Answer 43

Yes, EIGRP, OSPFv2/3, IS-IS, BGP, RSVP-TE, PIM, and xconnect

Answer 44

NO. BFD does not perform neighbor detection; it relies on the registered protocol to do that, then runs probes based on those discovered IPv4/v6 neighbor addresses.

Answer 45

Segment networks without MPLS. Multiple routing tables that are completely separate from each other.

Answer 46

To achieve a full mesh of iBGP peering.

Answer 47

Routing information exchange server for all other iBGP routers.

Answer 48

OPEN UPDATE NOTIFICATION KEEPALIVE

Answer 49

Negotiate session capabilities Contains: BGP ver number ASN of originating router Hold time BGP identifier optional parameters

Answer 50

Advertises any feasible routes, withdraws previously advertised routes. Includes the NLRI that includes the prefix and associated BGP PAs when advertising prefixes. Withdrawn NLRIs include only the prefix. An UPDATE message can act as a Keepalive to reduce unnecessary traffic.

Answer 51

Sent when an error is detected with the BGP session, such as a hold timer expiring, neighbor capabilities change, or a BGP session reset is requested. This causes the BGP connection to close.

Answer 52

Keepalive messages are exchanged every one-third of the Hold Timer agreed upon between the two BGP routers.

Answer 53

Kubernetes, or k8s (k, 8 characters, s...get it?), or “kube” if you’re into brevity, is an open source platform that automates Linux container operations.

Answer 54

It eliminates many of the manual processes involved in deploying and scaling containerized applications. Cluster together groups of hosts running Linux containers, and manage with Kubernetes.

Answer 55

public, private and hybrid clouds

Answer 56

Real production apps span multiple containers. Those containers must be deployed across multiple server hosts. Kube is needed to manage containers.

Answer 57

Kubernetes orchestration allows you to build application services that span multiple containers, schedule those containers across a cluster, scale those containers, and manage the health of those containers over time.

Answer 58

networking, storage, security, telemetry and other services to provide a comprehensive container infrastructure.

Answer 59

By sorting containers together into a ”pod.”

Answer 60

Platform to schedule and run containers on clusters of physical or virtual machines.

Answer 61

- Orchestrate containers across multiple hosts. -Make better use of hardware to maximize resources needed to run your enterprise apps. -Control and automate application deployments and updates. -Mount and add storage to run stateful apps. -Scale containerized applications and their resources on the fly. -Declaratively manage services, which guarantees the deployed applications are always running how you deployed them. -Health-check and self-heal your apps with autoplacement, autorestart, autoreplication, and autoscaling.

Answer 62

Registry, through projects like Atomic Registry or Docker Registry. Networking, through projects like OpenvSwitch and intelligent edge routing. Telemetry, through projects such as heapster, kibana, hawkular, and elastic. Security, through projects like LDAP, SELinux, RBAC, and OAUTH with multi-tenancy layers. Automation, with the addition of Ansible playbooks for installation and cluster life-cycle management. Services, through a rich catalog of precreated content of popular app patterns.

Answer 63

The machine that controls Kubernetes nodes. This is where all task assignments originate.

Answer 64

These machines perform the requested, assigned tasks. The Kubernetes master controls them.

Answer 65

A group of one or more containers deployed to a single node.

Answer 66

IT automation engine that automates cloud provisioning, configuration management, application deployment, intra-service orchestration, and many other IT needs.

Answer 67

Ansible works by connecting to your nodes and pushing out small programs, called "Ansible modules" to them.

Answer 68

YAML, in the form of Ansible Playbooks that allow you to describe your automation jobs in a way that approaches plain English.

Answer 69

library of modules can reside on any machine, and there are no servers, daemons, or databases required. Works with any terminal editor

Answer 70

A Docker container image is a lightweight, standalone, executable package of software that includes everything needed to run an application: code, runtime, system tools, system libraries and settings.

Answer 71

Container images become containers at runtime and in the case of Docker containers - images become containers when they run on Docker Engine.

Answer 72

-Standard: Docker created the industry standard for containers, so they could be portable anywhere

Answer 73

OpenStack software controls large pools of compute, storage, and networking resources throughout a datacenter, managed through a dashboard or via the OpenStack API.

Answer 74

OpenStack is a cloud operating system that controls large pools of compute, storage, and networking resources throughout a datacenter, all managed through a dashboard that gives administrators control while empowering their users to provision resources through a web interface.

Answer 75

PBTS provides a mechanism that lets you direct traffic into specific TE tunnels based on different criteria.

Answer 76

preferred (setup) and (hold) priority. Higher bandwidth links should have higher priority and will preempt.

Answer 77

Time Division Multiplexing. a collection of 64 kbps channels, called DS0s, which are aggregated into a larger bundle to form T1/T3, E1/E3 specifications.

Answer 78

8 bits every 125 us, which is 64 kbps.

Answer 79

1.544 Mbps

Answer 80

193 bits, 1 frame bit for OAM

Answer 81

44.736 Mbps with 28 DS1s + 69 frame bits

Answer 82

Dense WDM is an enhancement to the original WDM (coarse WDM) to stuff more wavelengths onto a single medium, which increases the bandwidth.

Answer 83

Multiplexer and de-multiplexer to combine and restore the signal

Answer 84

Optical Supervisor Channel can also be transmitted over the same optical medium to serve OAM purposes; it is analogous to SONET’s DCC.

Answer 85

AM, FM, PSK, QAM, and others.

Answer 86

It can expand optical capacity without having to lay more fiber as channel spacing between wavelengths becomes smaller.

Answer 87

commercial long-haul systems and often uses C-band frequencies.

Answer 88

Digital Subscriber Line - widely deployed “last-mile” access technology passes digital data over telephone lines by using a different set of frequencies than are used to carry phone conversations.

Answer 89

A DSL connection is generally comprised of a DSL modem at the customer end and a DSL access multiplexer (DSLAM) at the provider end.

Answer 90

The DSLAM aggregates many DSL connections and, using some kind of transport media like ATM or Ethernet, connects to the BRAS

Answer 91

- Weight - Local Preference - Accumulated IGP (AIGP) - Locally originated - better than BGP learned - AS-path length - Origin - MED Multi exit discriminator - Neighbor type - IGP metric to the next hop - Tie breakers IGP cost-community Multipath For eBGP only, select the oldest route For iBGP or eBGP - Always compare RID For iBGP - select route with lowest cluster-list length Lowest Peer address

Answer 92

Optional, local only. Higher is better, and locally originated prefixes are assigned a value of 32,768 by default.

Answer 93

Mandatory, non-transitive. Higher is better with a default value of 100. Typically assigned inbound to an eBGP peer to affect traffic flows outbound. This attribute is maintained across confed-external boundaries.

Answer 94

Allows BGP to add the IGP metric to the BGP next-hop with the remote ASes metric value. Effectively, it is an end-to-end cost carried inside of BGP.

Answer 95

routes locally originated by a router (“sourced”) are preferred over any learned BGP routes.

Answer 96

Mandatory, transitive, and well-known. The local AS is appended to an UPDATE message when routes are advertised out of an AS. AS path pre-pending is commonly set outbound to influence traffic flows inbound (opposite utility as local preference).

Answer 97

Mandatory, transitive, and well-known. IGP implies the route was derived from IGP (network statement),

Answer 98

Optional, non-transitive. Used to carry the IGP metric to remote ASes to “hint” at the best path within the source AS network. Can be set outbound to influence flows inbound.

Answer 99

eBGP preferred over iBGP. Confed-external is treated the same as confed- internal, so this would be a tie in that case.

Answer 100

Computed locally based on the recursive route lookups. Lower numbers are preferred

Answer 101

Optional, non-transitive. If the IGP point of POI (which is the default) is passed in a prefix via extended communities, it is considered as the first “tie breaker”.

Answer 102

Multipath rules can be relaxed for iBGP unequal cost (where the IGP metric can be unequal), as well as the AS-path numbers.

Answer 103

This appears at the bottom of the route details when using the “show bgp afi safi x.x.x.x” command. The idea is to reduce churn in the eBGP topology by selecting the most stable route.

Answer 104

Select the route coming from the lowest BGP RID.

Answer 105

The idea is to pick the route that was reflected the fewest number of times.

Answer 106

This is the final tie-breaker it is the lowest peer address where the TCP session is established.

Answer 107

1. Next-hop reachability: Mandatory, well-known, and transitive. There must be a route to the BGP next-hop. 2. iBGP synchronization: Often off by default, this rule states that for an iBGP route to be considered for best-path, there must be a matching IGP route in the routing table. 3. Pre-bestpath cost-community: Optional, non-transitive.

Answer 108

Segment Routing - The idea is that individual nodes and adjacencies have segment IDs (SIDs), and each segment has label bindings.

Answer 109

(segment routing global block) s the range of label values reserved for Segment Routing and must not overlap with the global MPLS label range allocation.

Answer 110

GMPLS is an extension of the MPLS. Given an all-optical network, traffic is often carried over these fibers in multiple different wavelengths. These different light waves are multiplexed (mux’ed) at the head-end and demultiplexed (demux’ed) at the tail end of the path.

Answer 111

Guarantee connectivity. GMPLS seeks to provide a mechanism to set up “light paths” from end to end based on a set of constraints.

Answer 112

Yes. If using this feature, the requirements for the LSP are the same in both directions, which reduces latency during setup time.

Answer 113

MPLS TP is a mechanism to adjust typical MPLS behavior (technically IP/MPLS) to better emulate TDM networks.

Answer 114

1. PHP: MPLS-TP paths are statically configured and highly explicit, 2. ECMP: MPLS-TP requires all paths to be congruent (symmetric) 3. Label merge: When two LSPs reach a common LSR and have a common next-hop, their LSPs can be merged by using a single outgoing-label. This is not allowed in MPLS-TP since every LSP is entirely different, again, like a traditional circuit.

Answer 115

1. No need to configure IP: 2. Advanced OAM: Rich set of tools to monitor and manage the MPLS-TP and the PWs that run through it. This includes the Generic Alert Label (GAL) and the Generic Associated Channel (G- ACH). In summary, this provides SONET/SDH-like features such as automatic protection switching (APS) and data communications channel (DCC). 3. Fault reporting:

Answer 116

QinQ (dot1q tunneling or provider bridging) is a method of adding additional 802.1q headers to an Ethernet frame to tunnel it across different networks.

Answer 117

802.1ad is an amendment to 802.1q which allows them to be stacked in an Ethernet frame’s header.

Answer 118

1. Adding an additional tag squares # of VLANs (2^24 = 16777216) 2. Tags can be added (pushed), removed (popped), or changed (translated) by network devices as necessary. 3. Provides the basis for provider bridging and provider backbone bridging (PBB)

Answer 119

0x88A8 for the outer tag (service tag, carrier tag, metro tag, tag 1, or S- tag) 0x8100 for the inner tag (customer tag, tag 2, or C-tag).

Answer 120

B-MACs are service provider switch MACs that serve as the outer encapsulation for customer traffic. In this way, provider switches don’t need to learn all C-MACs, only B-MACs, of which there is one per PE.

Answer 121

REP is a Cisco-proprietary protocol that is used to rapidly converge a layer 2 Ethernet network arrayed in a ring topology.

Answer 122

Also known as Ethernet Ring Protection Switching (ERPS). A segment is called a "ring" and an independent link between two ring nodes is called a "ring link". The ports that run this protocol on ring links are called "ring ports". The alternate (blocked) port is known as the ring protection link, or RPL. The node that is actually blocking a port is known as the “RPL owner node”.

Answer 123

ERPS registers to CFM as a client.

Answer 124

QoS link fragmentation and interleaving (LFI) is a common technique for slow WAN links to reduce latency for priority traffic. Large data packets take longer to serialize over slow WAN links than small voice packets do.

Answer 125

Delay (sec) = size (bits) / rate (bits/sec) - As an example, a 1500 byte packet (12000 bits) going over a T1 link (1544000 bps) will take about ~8ms (0.008 seconds) to serialize.

Answer 126

768 kbps (half T1) is the cutoff for a slow link.

Answer 127

Stateful switchover. RSP/RP to be written to the backup one so that it can immediately take over if the primary one fails.

Answer 128

Non-stop forwarding. During an SSO event, NSF ensures that despite a brief loss of the control plane due to an RSP/RP failure, traffic can still be forwarded.

Answer 129

Maintains the routing protocol information during an SSO event. BGP sessions can remain intact. NSR is available with OSPFv2/v3, IS-IS, BGP, LDP routing technologies currently. RVSP-TE, EIGRP, and RIP are not included.

Answer 130

Yes. IS-IS supports both NSF and NSR. The NSF capability of IS-IS is signaled using the Restart TLV, which is carried in the hello PDUs

Answer 131

Yes. NSF requires some extensions to OSPF so that the peer routers remain aware of the restarting router. OSPF uses new “grace LSAs”, which are link-local opaque LSAs containing the grace period time in their payloads.

Answer 132

OSPFv3 calls NSF “graceful-restart”.

Answer 133

BGP GR’s primary purpose is the same as the other protocols: don’t introduce churn into the protocol while a router switches over, specify a grace period, and continue forwarding as normal. BGP accomplishes this by introducing the End-of-RIB (EoR) marker, as well as a new “Graceful Restart” capability.

Answer 134

Marks the end of RIB, it is effectively an explicit signal to the peer that the BGP UPDATE messages have ceased.

Answer 135

Yes. Although not a routing protocol, LDP is critical for most MPLS applications. It also has the concept of GR/NSF and NSR for this reason.

Answer 136

Just GR is used to maintain state information when a node in the LSP performs an RP switchover.

Answer 137

EIGRP supports GR/NSF but not NSR.

Answer 138

A timer that runs in software to identify when a link goes down at layer 1. This is normally set to 2 seconds to prevent against very short flaps, which may introduce churn.

Answer 139

A BGP prefix is cryptographically signed with the key of its valid originator, and each BGP router receiving the path checks to ensure the prefix originated from the valid owner.

Answer 140

Performance management: practice of managing network service response time, consistency, and quality for individual and overall services. Capacity management: process of determining the network resources required to prevent a performance or availability impact on business-critical applications.

Answer 141

Forwarding of ICMP unreachables back into the core network and ultimately into a sinkhole for analysis.

Answer 142

This allows a mediation device to communicate to a router over SNMPv3 to setup/teardown wiretap sessions on a network device.

Answer 143

Defines additional BGP NLRI to inject traffic manipulation policy information to be dynamically implemented by a receiving router. It can signal specific QoS actions, redirect traffic into a VRF for analysis, or drop the traffic.

Answer 144

ACLs, remotely triggered black holes, unicast RPF, backscatter traceback, and BGP Flowspec.

Answer 145

Functions that detect, isolate, and correct malfunctions in the network.

Answer 146

Performance management: practice of managing network service response time, consistency, and quality for individual and overall services. process of determining the network resources required to prevent a performance or availability impact on business-critical applications.

Answer 147

The larger the queue, the longer data has to wait. Tail drop occurs when the queue is full and admittance is prohibited.

Answer 148

a. CPU. Used by both control and data planes on any network device. b. Backplane of I/O. c. Memory and buffers. d. Interface and pipe sizes. e. Queuing, latency, and jitter. f. Speed and distance. g. Application characteristics. Small window sizes, application keepalives, and amount of data sent over the network versus what is required is often the reason for poor application performance.

Answer 149

a. Service level management - SLA b. Network and application what-if analysis. c. Baselining and trending. d. Exception management. e. QoS management.

Answer 150

Network Configuration Protocol. It is a standard for configuring, deleting, and modifying configurations on network devices. YANG is used to model the network configurations and state into tree structures; it is the data model for NETCONF.

Answer 151

Test configurations before committing them, being able to configure multiple network devices concurrently, and bulk-get operations that are much faster than SNMP. NETCONF uses SSH NETCONF messages are encoded in XML, and individual YANG data models are included as “capabilities” in NETCONF hello packets. .

Answer 152

The structure contains several “types”, which include integers, Booleans, enumerations, pointers, and other information types to be processed.

Answer 153

If a PE is only importing a subset of RTs, the RR will reflect all VPN routes to a PE where the majority of them are rejected due to the RT-import not being locally configured for any VRF.

Answer 154

Control flow of traffic.

Answer 155

Carry cost information around BGP networks.

Answer 156

Encompass all of the solutions meant to transport multicast traffic from place to place in a VPN environment.

Answer 157

Draft-Rosen, used GRE tunnels to connect all of the PE devices in a given MVPN instance

Answer 158

Customer and Core, P router just act as transit.

Answer 159

PIM-ASM, PIM-SSM, or PIM-Bidir in the core.

Answer 160

It does not take advantage of MPLS transport.

Answer 161

Yes. P2MP RSVP-TE, a multipoint tunnel can be built from headend to multiple tail ends, which is perfect for transporting one-way multicast.

Answer 162

Yes. multicast LDP (mLDP).

Answer 163

Provider Multicast Service Interface is a conceptual “overlay” on the P-network that refers to a “service”. Packets are encapsulated in IP/GRE or MPLS and delivered to the PMSI where they are de-capsulated.

Answer 164

Intra-AS Inclusive PMSI (I-PMSI) AD: Originated by each PE inside an AS; used to learn MVPN membership.

Answer 165

Inter-AS I-PMSI AD: Originated by each ASBR; used to learn MVPN membership. This is examined in detail when testing inter-AS MVPN.

Answer 166

Selective (S-PMSI) AD: Originated by the source (ingress) PE and used for signaling a specific P2MP tree or data MDT. This is meant to selectively target receivers that want multicast for a given C(S,G).

Answer 167

Leaf AD: If the Type-3 requests it, the receiver (Egress) PEs will explicitly show interest in a specific C(S,G).

Answer 168

Source Active AD: Originated by the source (ingress) PE when it learns about an active source and assist with SPT switchover.

Answer 169

The method by which customers exchange multicast routing has always been PIM.

Answer 170

Shared Tree Join: Specifies the RP and group, and is meant to signal C-PIM-ASM interest in a particular group. This replaces the PIM (\*,G) signaling.

Answer 171

Source Tree Join: Looks identical to a Type-6 except the RP’s IP address is substituted for the source’s address. It can also be sent upon receipt of a Type-5 Source Active AD message. This replaces the PIM (S,G) signaling.

Answer 172

mLDP is also capable of carrying the c-mcast signaling in-band.

Answer 173

It needs to look at the I-PMSI or S-PMSI to determine the tunnel type. Each transport method has a different tunnel type.

Answer 174

Inside the PMSI attributes within BGP AD routes

Answer 175

Type 0: No tunnel specified Type 1: RSVP-TE P2MP Type 2: mLDP P2MP Type 3: PIM-SSM Type 4: PIM-ASM Type 5: PIM-Bidir Type 6: Ingress Replication (IR) Type 7: mLDP MP2MP No.

Answer 176

BGP-LS is designed to capture link state IGP and TE information and transport it across the network.

Answer 177

Default MDT − MLDP MP2MP − PIM C−mcast Signaling (Basic mLDP) The MP2MP tree is a bidirectional tree that represents and emulated LAN. When used with C- PIM signaling, it forms a full-mesh of all VPN participants, which is determined by the VRF’s VPN-ID.

Answer 178

Default MDT − GRE − BGP−AD − PIM C−mcast Signaling

Answer 179

VRF MLDP − In−band Signaling

Answer 180

Global MLDP In−band Signaling

Answer 181

Global Static − P2MP−TE P2MP

Answer 182

Default MDT − MLDP − MP2MP − BGP−AD − PIM C−mcast Signaling

Answer 183

VRF Static – P2MP TE - BGP−AD

Answer 184

Default MDT − GRE − BGP−AD − BGP C−mcast Signaling

Answer 185

Default MDT − MLDP − P2MP − BGP−AD − BGP C−mcast Signaling

Answer 186

Default MDT − MLDP − MP2MP − BGP−AD − BGP C−mcast Signaling

Answer 187

Partitioned MDT – MLDP P2MP – BGP-AD – BGP C-mcast signaling

Answer 188

Default MDT – MLDP P2MP – BGP-AD – PIM C-mcast signaling

Answer 189

MoFRR is a feature used to ensure high availability for multicast traffic.

Answer 190

Networks that have been extended outside of an intranet to provide reachability to external organizations. an MVPN extranet exists when sources are in one VPN and receivers are in another VPN.

Answer 191

If a link or node within the path of a TE tunnel fails, a pre-signaled backup path is available and traffic can be routed into the backup tunnel as soon as the failure is detected.

Answer 192

The point of local repair is the head-end of the backup path. When a failure is detected, it routes packets into the backup tunnel.

Answer 193

The merge point is the tail-end of the backup path. When traffic arrives at the MP, it is routed along the normal TE path again, merging the traffic back on the original path.

Answer 194

Pre-signals a backup path from head to tail on a per path-option basis to be used in case of a failure anywhere along the path.

Answer 195

Next-hop protection (link protection) protects the path to the next-hop by routing around failed links.

Answer 196

Next-next-hop protection (node protection) protects the path to the hop after the next-hop by routing around failed nodes.

Answer 197

1. N:1 or many-to-one or facility backup. The PLR pushes a new FRR label (wraps the existing MPLS packet) as part of a new TE tunnel. 2. 1:1 or one-to-one or detour backup. The PLR swaps the top label rather than pushes a new one.

Answer 198

Class and Policy Based Tunnel Selection (CBTS/PBTS) are mechanisms of mapping EXP values to different tunnels in XE and XR, respectively.

Answer 199

1. Pad small packets: 2. Carry control bits for certain layer 2 protocols 3. Preserve the sequence of frames 4. Facilitate load sharing 5. Facilitate fragmentation/reassembly: Using Beginning and Ending (B and E) bits, AToM frames can be fragmented and reassembled for transit over MPLS. P routers cannot fragment AToM packets.

Answer 200

a way to terminate PWs on a common node and have that router bridge the two PWs together. In this way, the PW is “stitched” to provide layer-2 transport end to end.

Answer 201

Sets the Hold Timer in seconds for each BGP neighbor. Upon receipt of an UPDATE or KEEPALIVE, the Hold Timer resets to the initial value.

Answer 202

Smaller, 3 seconds or 0

Answer 203

32-bit unique number that identifies the BGP router in the advertised prefixes as the BGP Identifier. The RID can be used as a loop prevention mechanism for routers

Answer 204

Pods add a layer of abstraction to grouped containers, which helps you schedule workloads and provide necessary services like networking and storage to those containers.

Answer 205

Other parts of Kubernetes help you load balance across these pods and ensure you have the right number of containers running to support your workloads.

Answer 206

Containers isolate software from its environment and ensure that it works uniformly despite differences for instance between development and staging.

Answer 207

Yes, regardless of infrastructure, available for windows and linux

Answer 208

PBTS works by selecting tunnels based on the classification criteria of the incoming packets, which are based on the IP precedence, experimental (EXP) , or type of service (ToS) field in the packet.

Answer 209

PBTS will benefit Internet service providers (ISPs) who carry voice and data traffic through their MPLS and MPLS/VPN networks, who want to route this traffic to provide optimized voice service.

Answer 210

Wavelength division multiplexing (WDM) is a method of transmitting many different wavelengths of light onto a single fiber media.

Answer 211

single-mode fiber, which is built for long-haul transmissions at higher data rates and has a diameter of 9 um.

Answer 212

Within a confederation, the values are placed into a parenthesized list and treated as a single AS.

Answer 213

1. Backbone component: Contains a destination address (B-DA), source address (B-SA), the ethertype 0x88A8 as defined in 802.1ad for QinQ tunneling, and a B-tag to represents the backbone VLAN. 2. Service component: Contains ethertype 0x88E7 (defined for PBB) and an I-SID (24-bit service ID). 3. Original frame: This could be an IP packet inside of an Ethernet frame (0x0800), an Ethernet frame inside of dot1q with a single C-tag (0x8100), or part of a hierarchical bridging architecture with two tags already on it (0x88A8).

Answer 214

ring automatic protection switching (R-APS) series of messages.

Answer 215

A failure along the ring triggers an R-APG signal failure (R-APS SF) failure, and when the RPL owner receives this message, the port is immediately unblocked.

Answer 216

Switches participating in ERPS must be part of the same CFM domain as a prerequisite to ERPS working.

Answer 217

No, but it is recommended to configure CFM MEPs; although this is not required, it allows for additional CFM monitoring

Answer 218

combines ACLs, remotely triggered blackholes (sometimes), sinkholes, and ICMP unreachables to determine the ASBR ingress routers from which an attack has entered the network.

Answer 219

it also assists with stuck-in-active (SIA) events where a route has unanswered queries from at least one peer regarding its reachability status.

Answer 220

the restart bit (RS-bit) is set in the hello packets towards all peers. Those who receive and understand this message immediately send their EIGRP topology tables to the restarting router. When complete, an end-of-table (EoT) message is sent to signal the end of the topology transfer.

Answer 221

Data plane, even though the rules are written into the NLRI

Answer 222

Remotely triggered black holes - blackholes traffic to/from certain prefixes during a DDoS attack.

Answer 223

latency refers to any of several kinds of delays typically incurred in processing of network data.

Answer 224

variation in the latency on a packet flow between two systems, when some packets take longer to travel from one system to the other.

Answer 225

Like a normal TE tunnel, each sub-tunnel (also called sub- LSP) can request FRR treatment, make bandwidth reservations, and do any other kind of TE CSPF parameter tuning.

Answer 226

This works like LDP where labels are exchanged on a hop-by-hop basis.

Answer 227

mLDP can support P2MP trees, It can also support MP2MP trees, which are similar to PIM-Bidir where traffic can flow in either direction towards the root, which is the main junction point.

Answer 228

upstream and downstream labels are exchanged.

Answer 229

P2MP - like PIM SSM

Answer 230

MP2MP - like PIM BSR

Answer 231

PEs would form PIM neighbors inside the VRF and the tunnel-mesh would look like an emulated LAN.

Answer 232

Same as draft-rosen.

Answer 233

To achieve better scalability

Answer 234

IPv4/v6 MVPN SAFI, PIM equivalent of (\*,G) join and an (S,G) join.

Answer 235

Receiving a PIM (\*,G) or (S,G) join from the CE will trigger the creation of a BGP Type-6 or Type-7 route, respectively.

Answer 236

Inclusive-PMSI - The I-PMSI tunnel connects to all PEs on the MVPN and sends multicast data to these PEs regardless of whether these PEs have receivers.

Answer 237

Selective-PMSI - S-PMSI tunnels solve the I-PMSI problem by sending multicast data only to PEs interested in the data.

Answer 238

adjusts how RPF works with traditional PIM. When the PIM last hop router (LHR) receives an IGMP join, whether ASM or SSM, it will originate some kind of PIM join. MoFRR allows a router to send multiple PIM joins towards the root of the tree for diversity.

Answer 239

- Reduce CAPEX (Fewer Chassis)- Reduce OPEX (deploy fewer chassis, simplify topologies)- Reduce environmental impact

Answer 240

- A Hardware-Isolated Virtual Router (HVR) has hardware-based resource isolation between routing entities.- A Software-Isolated Virtual Router (SVR) comprises software-based resource isolation between routing entities.

Answer 241

1. Multiple guest operating systems to overlay on a host operating system.2. Integrate the virtualization into the kernel itself.3. Virtualization is in the individual applications.

Answer 242

Doesn't scale well because it introduces significant contention of resources and users tend to over provision resources on all SVRs wasting resources.

Answer 243

This model may improve processing performance but suffers from resource contention and increased complexity and instability in the kernel.

Answer 244

Scales better because of lower overhead but complicates a number of issues because the application must some level of virtualization.

Answer 245

Yes. All SVR models share resources in the data plane, requiring vigilant resource monitoring.

Answer 246

No. It dedicates both control and data plane resources on a per-module boundary to individual virtual entities so there is no sharing of resources, other than a lightweight shim layer that provides low-level communication between HVRs.

Answer 247

Secure Domain Routers (SDRs)

Answer 248

An HVR technology that provides full isolation between virtual routing instances through the use of Distributed Route Processors (DRPs) for extra control plane resources.

Answer 249

With entire Route Processors (RPs) and Modular Services Cards (MSCs) dedicated to an SDR.

Answer 250

Satellite switches act as extensions to the ASR9k, they are under the complete control and configuration management of the host router.

Answer 251

Port Density - A single 24-port Ten Gigabit Ethernet line card on the Cisco ASR 9000 Series Router could integrate up to 24 satellite switches each with 44 GigE ports; this results in an effective port density of 1056 Gigabit Ethernet ports for each Cisco ASR 9000 Series Router line card slot.

Answer 252

Hub and Spoke network topologyDual Home network topologySimple Ring topologyLayer 2 Fabric network topology

Answer 253

No, they can be in geographically distinct locations

Answer 254

Network Function Virtualization - decouples network functions from hardware and puts them in software. Example: vFirewalls, vRouters, load balancer, etc.

Answer 255

User equipment like a cellphone. Each UE carries a Universal integrated circuit card (UICC) In LTE the cellphone carries a Subscriber Identity module (SIM) which identifies a phones number, billing plan, etc.

Answer 256

These are base stations that control the mobile nodes in one or more calls. A base station that is supporting a specific mobile node is reference as the mobile node's "serving eNB". LTE mobile nodes can only communicate with one base station at a time.

Answer 257

Send/receive radio transmissions and to control low-level signaling such as handover commands.

Answer 258

To support mobility events for packet forwarding and handover using the X2 interface.

Answer 259

S1 interface.

Answer 260

Via the LTE-Uu interface.

Answer 261

(Radio Access Network) This is a way of providing backhaul from access networks to the provider's core network.

Answer 262

Universal Mobile Telecommunications System - This was the third generation 3G network upon which 4G LTE was built. This was a combination of circuit and packet switched architectures which was more hierarchical.

Answer 263

Evolved UMTS Terrestrial RAN. This encompasses the entire LTE access network, which consists of eNB radios.

Answer 264

Base transceiver station - eNB, is the element in E-UTRA of LTE that is the evolution of the element Node B in UTRA of UMTS. It is the hardware that is connected to the mobile phone network that communicates directly wirelessly with mobile handsets (UEs), like a base transceiver station (BTS) in GSM networks.

Answer 265

Uniform is a QoS model whereby changes in the SP network are propagated to the customers.

Answer 266

QoS Policy Progagation through BGP - BGP NLRI carries the QoS markings for specific routes

Answer 267

Under the AC interface add the command 'preferred-path interface Tunnel85'

Answer 268

PW and VFI are bridged. Bridge domain acts like l2 switch, PW intefaces and VFI act like connections to a switch.

Answer 269

Through the flood and learn approach

Answer 270

The route-target.

Answer 271

General communications channel - defined by G.709 is an in-band side channel used to carry transmission management and signaling information within optical transport network elements. Four bytes (each of two bytes) within ODUk overhead. These bytes are used for client end-to-end information and shouldn't be touched by the OTN equipment.

Answer 272

MPLS Traffic Engineering AutoTunnel Mesh Groups (referred to as mesh groups) allow a network administrator to configure traffic engineering (TE) label-switched paths (LSPs) by using a few command line interface (CLI) commands.

Answer 273

you must configure each existing TE LSR to be a member of the mesh by using a minimal set of configuration commands.

Answer 274

* Minimize the initial configuration of the network. You configure one template interface per mesh that propagates to all mesh tunnel interfaces, as needed. * Minimize future configurations resulting from network growth. Eliminates the need to reconfigure each existing TE LSR in order to establish a full mesh of TE LSPs whenever a new PE router is added to the network. * Existing routers set up TE LSPs to new PE routers. * Automatically construct a mesh of TE LSPs among the PE routers.

Answer 275

* Enable autotunnel mesh groups globally. See the "Enable AutoTunnel Mesh Groups Globally" section. * Create an access-list. * Create one or more template interfaces.

Answer 276

The access-list determines the destination addresses for the mesh tunnel interfaces.

Answer 277

The template interface allows you to enter commands once per mesh group. These commands specify how mesh tunnel interfaces will be created. Each time a new router is added to the network, a new mesh tunnel interface is created and that configuration is duplicated from the template. Each mesh tunnel interface has the same path constraints and other parameters configured on the template interface. Only the tunnel destination address is different.

Answer 278

mpls traffic-eng auto-tunnel mesh tunnel-num min 1000 max 2000

Answer 279

Embedded Packet Capture is used in Cisco IOS on the router and captures the packets sent and received. The packets are stored within a buffer in DRAM and are thus not persistent through a reload. Once the data is captured, it can be examined in a summary or detailed view on the router.

Answer 280

exported into PCAP (Wireshark), or on the router.

Answer 281

Basic EPC Configuration Define the location where the capture will occur: Associate a filter. The filter may be specified inline, or an ACL or class-map can be referenced: Start the capture: The capture is now active. Allow it to collect the necessary data. Stop the capture: Examine the capture in a summary view: Examine the capture in a detailed view: In addition, export the capture in PCAP format for further analysis: Once the necessary data has been collected, remove the capture:

Answer 282

The capture can be performed on physical interfaces, sub-interfaces, and tunnel interfaces.

Answer 283

1 - IPv4 2- IPv6

Answer 284

sub-address family idenitifiers SAFI/Meaning 1 Unicast 2 Multicast 3 Unicast and multicast 4 MPLS Label 128 MPLS-labeled VPN

Answer 285

There are two operating modes to BFD, asynchronous mode and demand mode.

Answer 286

The asynchronous mode is similar to the hello and holddown timers, BFD will keep sending hello packets (called BFD control packets) and when you don’t receive some of them, the session is teared down.

Answer 287

once BFD has found a neighbor it won’t continuously send control packets but only uses a polling mechanism. Another method has to be used to check reachability, for example it could check the receive and transmit statistics of the interface.

Answer 288

Both modes also support something called echo mode. When a device sends BFD echo packets then the receiver will return them without processing them. When the sender doesn’t get the echo packets back, it knows something is wrong and will tear down the session.

Answer 289

MPLS over DMVPN - DMVPN provides two key advantages for extending MPLS VPNs to the branches, bulk encryption and, more importantly, a scalable overlay model.

Answer 290

WAN edge router (Hub) is a P router that can label switch packets between branches. Branches act as PE routers use LDP and IGP for signalling L3VPN

Answer 291

Loop Prevention

Answer 292

In the type 3, 5, 7 LSA and the domain-tag for type 5 and 7

Answer 293

When an OSPF LSA type 1 route is advertised to the PE2, then redistributed into VPNv4 and advertised to another PE2, then redistributed back into an OSPF area as a type 3 LSA with redundant uplinks. Route doesn't get re-advertised back to BGP as locally originated route.

Answer 294

The IPv4 packets entering B4 are encapsulated using a IPv6 tunnel and sent to the Address Family Transition Router (AFTR).

Answer 295

This is the router that terminates the tunnel from the B4. It decapsulates the tunneled IPv4 packet, translates the network address and routes to the IPv4 network.

Answer 296

Reverse network address translated and the resultant IPv4 packets are sent the B4 using a IPv6 tunnel.

Answer 297

Its main characteristic is the use of passive splitters in the fibre distribution network.

Answer 298

They enable one single feeding fibre from the provider's central office to serve multiple homes and small businesses.

Answer 299

Headend router sends a PATH request first to the tail-end and then the Tail end router replies back with RESV which includes the FEC-to-Label mapping towards the head end.

Answer 300

IP address, IPC, hostname, and other resources

Answer 301

Network and storage which simplifies moving containers around cluster

Answer 302

Written to be resource models of the desired state of the system - how all systems inter-relate. Ansible then executes these modules (over SSH by default), and removes them when finished

Answer 303

functions like ARP, BFD, ACL, and QoS, because the LC has a FIB and can forward.

Answer 304

Extended IS neighbor TLV #22 Extended IS reachability TLV#135 Router ID TLV #134

Answer 305

Bi-directional

Answer 306

Explicit Joins

Answer 307

Installs additional routes in RIB and CEF to same prefix destination.

Answer 308

Can limit hot potato routing, limit MED oscillations, help with mx, next-hop failures.

CCIE SP Written Flashcards

(343 cards)