Cisco Ccna Flash Cards
Cisco Ccna Flash Cards
Cisco Ccna Flash Cards
WAN Bandwidths
North American
1
24
672
DSO - DSO
DSOs - DS1 or T1
DSOs - DS2 or T3
= 64
= 1.544
= 43.736
Kbps
Mbps
Mbps
= 2.048
= 34.368
Mbps
Mbps
European
E1
E3
- E1
- E3
Frame Relay
Packet Switched
Provides permanent and virtual switched circuits using shared medium b/w
No error / flow control
Most upto 4Mbps
Layer 2 Data Link
Network edge connection is often Leased Line but may be ISDN2
Multiple VCs . PVCs possible
Data Link Connection Identifier (DLCI) used to identify the VC
LMI Local management interface standards (Cisco, ANSI, ITU-T) from router to local
switch. Indicates standards and DLCIs and whether they are up or down.
BECN / FECN counters indicating congestion
Common Commands
Encapsulation frame-relay (ietf / cisco)
Bandwidth 64
Frame-relay map ip destip DLCI num broadcast
Interface serial2.2 multipoint / point-to-point
Show frame-relay traffic / lmi / map / pvc
Show interfaces
Clear frame-relay-inarp
Cell Switched
Voice, video and data through networks
Less efficient than frame
Implemented on PVC or SVC
Multiplexes several data streams to one
HDLC - Encapsulation
May not be interchangeable with other vendors
Cisco version used with proprietary elements
P2P and Multipoint configurations
Supports only synchronous links
Cisco default encapsulation on serial links
Common Commands
Encapsulation HDLC (already enabled by default)
Show ip route / eigrp
Debug ip rip / eigrp
Show ip eigrp interfaces / traffic / neighbours /topology
PPP Encapsulation
Will be better to use to integrate with other vendors
Authentication (PAP and CHAP)
Protocol multiplexing, link quality testing, error detection
Synchronous and Asynchronous
Includes :
o Method for encapsulating multiprotocol datagrams
o Link Control Protocol for managing the data link (authentication, compression, error, multilink)
o Network Control Protocol for managing the network layer protocols
Common Commands
Encapsulation ppp
Ppp authentication
Debug ppp authentication
Routing Protocols
Interior Gateway Protocols (IGP)
Exchange route information within an autonomous system.
Examples include : RIPv2/EIGRP/OSPF
Distance Vector
Routing by rumour
Link State
Get common view of entire network topology
Calculate the shortest path to other routers
Event triggered updates: faster convergence
Passes LS route updates to other routers
Disadvantages
Significant demands on memory and processing
resources
Requires very strict network design
Requires a knowledgeable network admin
Initial flood can impede network performance
IS-IS
V1&2
0
1
90
100
110
115
120
170
255
Routing Metrics
Bandwidth
Delay
Hop count
Cost
Load
Reliability
RIP IGP
RIP is a dynamic routing protocol used in local and wide area networks. It is classified as an
interior gateway protocol (IGP) using the distance-vector routing algorithm. The protocol has
since been extended several times, resulting in RIP-2. Both versions are still in use today,
however, they are considered technically obsoleted by more advanced techniques, such as Open
Shortest Path First (OSPF) and the OSI protocol IS-IS. Since the advent of IPv6, the next
generation of the Internet Protocol, RIP has been adapted, known as RIPng for IPv6.
Distance Vector
Max hopcount = 15
Only Metric used is hopcount
Transmits every 30 seconds
Uses
Split Horizon
Route Poisoning
Hold down timers
Long Convergence poor scalability
UDP Based.
Specify only major networks net 10.0.0.0
Common Commands
ROUTER OSPF process-id
SHOW IP ROUTE / PROTOCOLS
SHOW IP OSPF / INTERFACE
SHOW IP OSPF NEIGHBOUR (include ipaddress for more info)
DEBUG IP OSPF EVENTS / PACKET
IP OSPF COST [value]
Network 192.168.1.0 0.0.0.255 area 0
EIGRP - Classless
Distance Vector Protocol Developed by Cisco hence proprietary
Rapid Convergence Diffusing Update Algorithm (DUAL)
Reduced Bandwidth Usage through use of partial updates on topology change
Multi-protocol support
Classless routing
Less overhead due to use of multicast and unicast (not broadcast)
Supports load balancing
Easy Summarisation
Best route is called successor route
Backup route is called feasible successor
Advertised Distance = Distance for an EIGRP neighbour to reach a network
Feasible Distance = Advertised distance + Additional metric to reach that
neighbour.
Supports MD5 authentication
Classful / Classless?
Classful does not pass subnet information no VLSM
RIPv1
IGRP
Cannot use subnet 0 or 255
Classless does pass subnet information can use VLSM
RIPv2
EIGRP
OSPF
IS-IS
Can use subnet 0 or 255
Manual summarisation
WLAN - Summary
Standard
802.11a
Frequency
5Ghz (U-NII)
Channels (non overlapped)23 (12)
Max Speed DSSS
Max Speed OFDM
54 Mbps
Standard
OFDM
802.11b
2.4Ghz (ISM)
11 (3)
11 Mbps
DSSS
802.11g
2.4Ghz (ISM)
11 (3)
11Mbps
54 Mbps
OFDM DSSS
WLAN Security
Name
Wired Equivalent Privacy
Cisco
Wi-Fi Protected Access (WPA)
802.11i (WPA2)
Year
1997
2001
2003
2005+
Who Defined
IEEE
Cisco EAP
Wi-Fi Alliance
IEEE
WEP issues static preshared keys (PSK), Easily cracked keys should not be used today.
Added cloaking and MAC filtering to improve security, both poor attempts.
WPA included dynamic key exchange using TKIP additional message integrity check
algorithm.
WPA2 not backwards compatible. Dynamic key exchange, stronger encryption, and user
authentication also includes AES
Standard
WEP
CISCO
WPA
WPA2 (802.11i)
Key Dist
Static
Dynamic
Both
Both
Device Auth
Yes (weak)
Yes
Yes
Yes
User Auth
None
Yes (802.1x)
Yes (802.1x)
Yes (802.1x)
Encryption
Yes (weak)
Yes (TKIP)
Yes (TKIP)
Yes (AES)
ISDN
ISDN BRI
ISDN PRI
B Channels
D Channels
Q.921
Common Commands
ISDN switch-type switch-type
ISDN spid1 spid number sets B first channel SPID
ISDN spid2 spid numbers sets second B channel SPID
Show isdn active / status
Show interfaces bri0
Setup IP Address
Encapsulation
Dialler map (see below)
Dialer group
Common Commands
Dialer-list 1 protocol ip permit
Access-list 101 deny tcp any eq ftp
Dialer map ip 10.1.0.2 name ppp remote host name telephone number
Dialer idle-timeout seconds
dialer load-threshold load (1-255)
show dialer
show isdn
NAT
Static NAT 1 to 1 mapping
Dynamic NAT mappings based on a pool of allocatable NAT addresses
NAT Overloading / PAT mapping of multiple IP addresses to single registered IP addresses
using port numbers to separate the streams.
Common Commands
ip nat inside source static local ip global ip
ip nat inside / outside
ip nat pool name start-ip end-ip netmask
access-list access-list-number permit source
show ip nat translations / statistics
clear ip nat translation
debug ip nat / detailed
clear ip nat translation
NAT Troubleshooting
Use SHOW IP NAT TRANSLATION to verify that translations exist.
Use SHOW IP NAT STATISTICS to verify that translations are happening.
Check that routes exist on next hop routers for translated addresses.
Check interfaces are allocated INSIDE and OUTSIDE correctly.
Check access lists permit translated addresses using SHOW ACCESS-LIST
Check enough IP Addresses available within NAT pool
Routing protocol must advertise the subnet number but also the subnet mask.
RIP-2, EIGRP and OSPF all support VLSM with manual summarisation.
RIP-1 and IGRP do not support VLSM
Common Commands
Access-list 1 permit 172.16.0.0 0.0.255.255
ip access-group 1 out
line vty 0 4
access-class 1 in to restrict on VTY (Telnet ports)
show ip interfaces e0 (to show whether a list is applied)
show access-lists
access-list 120 deny icmp any any
APPLICATION
APPLICATION
PRESENTATION
PRESENTATION
SESSION
TRANSPORT
NETWORK
DATA LINK
PHYSICAL
SESSION
SEGMENTS
PACKETS
FRAMES
BITS
TRANSPORT
TCP/UDP
NETWORK
IP
DATA LINK
MAC / CDP
PHYSICAL
Ethernet / Frame /
Presentation Layer Defines the format and organisation of data includes encryption
Session Layer Establishes and maintains end to end bidirectional flows between endpoints
includes managing transaction flows
Network Layer Logical addressing, routing and path determination, END TO END
DELIVERY OF PACKETS
Data Link Formats data into frames appropriate for transmission onto some physical
medium. Defines rules for when the medium can be used. Defines means by which to recognise
transmission errors
Physical Layer - defines the electrical, mechanical, procedural, and functional specifications
for activating, maintaining, and deactivating the physical link between end systems
to
to
to
10.255.255.255
172.31.255.255
192.168.255.255
IP Address Classes
Class A First Octet : 0xxxxxxx
Class B First Octet : 10xxxxxx
Class C First Octet : 110xxxxx
Class D First Octet : 1111xxxx
1-126.xxx.xxx.xxx
128-191.xxx.xxx.xxx
192-223.xxx.xxx.xxx
248-255.xxx.xxx.xxx
Loopback Address
127.0.0.1 (127.x.x.x addresses are reserved)
FTP (Data)
FTP (Control)
SSH
Telnet
SMTP
DNS
DHCP
TFTP
HTTP
POP3
IMAP
SNMP
HTTPS/SSL
TCP
TCP
TCP
TCP
TCP
UDP, TCP
DHCP
UDP
HTTP
TCP
UDP
TCP
IPv6
128 bit binary value address
Simplified header less routing overhead
Compliance with mobility and IPSec as standard
Transition richness dual stack, NAT and tunnelling between and over IPv4
Leading zeros are optional so 09C0 becomes 9C0 and 0:0:0:0 becomes ::
Replaces broadcasts with multicasts and anycasts
Private address space now begins with FE
o Site local addresses are FEC, FED, FEE, FEF
o Link local addresses (for routing also setup)
Loopback address ::1
Unspecified address is ::
Common Commands
IPV6 UNICAST-ROUTING
IPV6 ROUTER RIP RT0
IPV6 ADDRESS 2001:B8:1:1::/64 EUI-64
IPV6 RIP RT0 ENABLE
TCP
Connection Orientated
UDP
Connectionless
Reliable
Unacknowledged
No error checking
Full Duplex
Sequencing & Flow Control
Switch vs Bridge
Switch is hardware based switching Bridge is software switches are faster
Switches separate collision domains
Switches create full duplex communication
Switches support rate adaptation
VTP Layer 2
A VTP domain is one switch (or several interconnected) which share same
VTP environment. No domain name set by default
Modes
Server (default)
Client
Transparent
Manages policy
Synchs with Server
Does not synch with Server
Default costs:
10
100
1
10
Mbps
Mbps
Gbps
Gbps
100
19
4
1
Portfast
Allows a switch to become immediately active (forwarding) when port becomes active
must be no other switches, bridges or STP speaking devices connected
BDPU Guard
Protects ports and integrity by disabling a port if any BPDUs are received. used only
on access ports used commonly with portfast.
ADSL/SDSL
Uses local loop
Multiplexed using DSLAM/TDM
Must be within 18000 feet
Always on
Up to 8.192Mbs
Grades ADSL
ADSL
CDSL/G-Lite
(Consumer DSL)
VDSL
(Very High Data Rate)
Grades SDSL
SDSL
HDSL
IDSL
GSHDSL
Terminology
Broadcast (FFFF:FFFF:FFFF:FFFF)a single packet sent to all devices
within the same broadcast domain
:
:
:
:
:
:
Common Commands
LINE CONSOLE 0
PASSWORD FAITH
LINE VTY 0 15
PASSWEORD LOVE
ENABLE SECRET CISCO
SERVICE PASSWORD-ENCRYPTION
SSH
o Login local
o Transport input telnet ssh
o Username Wendell password hope
o Ip domain-name example.com
o Crypto key generate rsa
Configuring SSH
SSH is preferred method of access today. To add support for SSH authentication support is
required (either locally or on AAA server)
1
2
3
3
4
5
Specify Lines
Specify local authentication
Specify transport
Specify credentials
Specify DNS domain name
Generate public and private key
LINE VTY 0 15
LOGIN LOCAL
TRANSPORT INPUT TELNET SSH
USERNAME WENDELL PASSWORD HOPE
IP DOMAIN-NAME name
CRYPTO KEY GENERATE RSA
Each client will require a copy of the devices public key before the client can connect.
Port Security
Implementation of passwords
Default violation mode is shutdown
Common Commands
Switchport mode access port into access(not trunk mode)
Switchport port-security interface maximum number
Switchport port-security violation (protect/restrict/shutdown)
Switchport port-security mac-address mac-address
Switchport port-security mac-address sticky
Common Commands
Show CDP [entry | interface | neighbors | statistics | traffic)
no cdp run global disable
no cdp enable interface disable
Protocol
Status
Admin Down Down
Down
Down
Up
Down
Up
Interface
Typical Root Cause
Status
Disabled
The interface is configured with the shutdown command
Not connect No cable, bad cable, wrong cable pinouts, mismatched speeds,
connecting device is powered off or other interface is shutdown
Not connect An interface up/down state is not expected on an LAN interface
Err-disabled Port security has disabled the interface
Down
Down
(err Disabled)
Up
Connect
Shutdown
No shutdown configured but there is a physical issue E.g. no cable, wrong cable
Refers to data link problems. Configu problems e.g. encapsulation issues, clock
mis matches.
All is Well, interface is functioning
First status code refers to layer 1 status is the cable installed, right or wrong cable etc
Second code refers to layer 2 protocol configuration etc.
Miscellaneous
Exam Help
Broadcast domains are broken only by routers, not switches
Collision domains are broken by switches and routers
Use debug IP NAT DETAILED to provide information about exception faults
IP4 over IP6 advantage is a shorter header
IP6 Global Unicast Address is Anycast
EUI-64 expands 48bit MAC t0 64 by inserting FFFE into the middle 16 bits
IPv6 routing protocols : OSPFv3, EIGRP for IPv6, RIPng, ODR
Common transition techniques are Dual stack and 6to4 tunnels
Ping Responses
Timed out ping
Packed recd unknown
Unreachable Subnet
Successful
period (".").
"?"
"N"
"!"
PC NIC
Routers
Wireless Access Points
Networks printers
Hubs
Switches
Rollover cable
Pin
1
2
3
4
5
6
7
8
Pin
8
7
6
5
4
3
2
1
Ethernet Frame
Starting
Delimiter
(1 byte)
Destination
Address
(6 bytes)
Source
Type
Address (2 bytes)
(6 bytes)
Information field
(46 - 1500 bytes)
CDP
Layer 2
Enabled by Default
Cisco Boot Modes
0 X 0 = the router will enter the ROM monitor mode
0 X 1 = the router will boot from image in ROM
0 X 2 = normal boot sequence from config file in NV RAM
Frame Check
Sequence
(4 bytes)
Abbreviations
ARP
CHAP
CIDR
CIR
CPE
CSU
DLCI
DSLAM
DSSS
DSU
DTE
HDLC
LMI
NLSP
OFDM
PAP
POST
RADIUS
RARP
SNAP
UDP
WIC
WPA