Semester 4 final exam Semester 4 final exam REVIEWREVIEW

20112011

STPSTP

What does STP and RSTP stand forWhat does STP and RSTP stand for SPANNING TREE PROTOCOLSPANNING TREE PROTOCOL RAPID SPANNING TREE PROTOCOLRAPID SPANNING TREE PROTOCOL

On what device does STP operate?On what device does STP operate? SWITCHESSWITCHES

What is the difference between the What is the difference between the two?two? SPANNING TREE CAN TAKE UP TO SPANNING TREE CAN TAKE UP TO

50 SECONDS50 SECONDS RSTP CAN BE ACTIVE IN ONE RSTP CAN BE ACTIVE IN ONE

SECONDSECOND

ACL’sACL’s

WHERE SHOULD BE STANDARD ACL’S WHERE SHOULD BE STANDARD ACL’S BE PLACED?BE PLACED? CLOSE TO THE DESTINATIONCLOSE TO THE DESTINATION BECAUSE YOU CAN’T SPECIFY THE BECAUSE YOU CAN’T SPECIFY THE

DESTINATIONDESTINATION WHERE SHOULD EXTENDED ACL’S BE WHERE SHOULD EXTENDED ACL’S BE

PLACED?PLACED? AS CLOSE TO THE SOURCE AS POSSIBLE AS CLOSE TO THE SOURCE AS POSSIBLE

SO YOU WON’T HAVE MORE TRAFFIC ON SO YOU WON’T HAVE MORE TRAFFIC ON THE NETWORK THAN NECESSARYTHE NETWORK THAN NECESSARY

WHY MUST YOU ENTER ALL THE WHY MUST YOU ENTER ALL THE STATEMENTS INTO AN ACL AT ONE STATEMENTS INTO AN ACL AT ONE TIME?TIME? OTHERWISE THE NEW STATEMENTS GET OTHERWISE THE NEW STATEMENTS GET

ADDED TO THE END, WHICH MIGHT NOT BE ADDED TO THE END, WHICH MIGHT NOT BE THE RIGHT PLACE FOR THEMTHE RIGHT PLACE FOR THEM

HIERARCHICAL LAYERSHIERARCHICAL LAYERS

WHAT ARE THE THREE LAYERS?WHAT ARE THE THREE LAYERS? CORECORE DISTRIBUTIONDISTRIBUTION ACCESSACCESS

WHAT KIND OF DEVICES ARE WHAT KIND OF DEVICES ARE PLACED IN THE DISTRIBUTION PLACED IN THE DISTRIBUTION LAYER?LAYER? ROUTERS/FIREWALLSROUTERS/FIREWALLS

WHAT KIND OF DEVICES ARE WHAT KIND OF DEVICES ARE PLACE IN THE ACCESS LAYER?PLACE IN THE ACCESS LAYER? USER COMPUTERS, IP PHONES, USER COMPUTERS, IP PHONES,

WORK GROUP SWITCHESWORK GROUP SWITCHES

IDS AND IPSIDS AND IPS

WHAT IS THE DIFFERENCE WHAT IS THE DIFFERENCE BETWEEN IDS AND IPS?BETWEEN IDS AND IPS? IDS IS IDS IS NOTNOT PROACTIVE, PROACTIVE,

NOTIFIES MANAGEMENT NOTIFIES MANAGEMENT THERE MAY BE A PROBLEMTHERE MAY BE A PROBLEM

IPS IS PROACTIVE…SENDS IPS IS PROACTIVE…SENDS REPORT TO MANAGEMENT REPORT TO MANAGEMENT AND BLOCKS IMMEDIATELYAND BLOCKS IMMEDIATELY

WIRELESSWIRELESS WHAT IS AN SSID?WHAT IS AN SSID?

THE WIRELESS NETWORK THAT YOU ARE THE WIRELESS NETWORK THAT YOU ARE USINGUSING

WHY SHOULD YOU BROADCAST THE WHY SHOULD YOU BROADCAST THE SSID?SSID? SO YOUR USERS CAN FIND ITSO YOUR USERS CAN FIND IT

WHY WOULD YOU NOT BROADCAST WHY WOULD YOU NOT BROADCAST THE SSID?THE SSID? WHEN YOU DON’T WANT USERS ON ITWHEN YOU DON’T WANT USERS ON IT

WHY SHOULD YOU DO A WIRELESS WHY SHOULD YOU DO A WIRELESS SURVEY BEFORE YOU DEPLOY A NEW SURVEY BEFORE YOU DEPLOY A NEW NETWORK?NETWORK? IT WILL FIND THE OPTIMAL NUMBER AND IT WILL FIND THE OPTIMAL NUMBER AND

PLACEMENT OF ACCESS POINTSPLACEMENT OF ACCESS POINTS

NETWORK BASELINENETWORK BASELINE

WHAT IS A NETWORK WHAT IS A NETWORK BASELINE?BASELINE? POINT OF REFERENCE FOR POINT OF REFERENCE FOR

FUTURE NETWORK FUTURE NETWORK EVALUATIONS. IT IS A EVALUATIONS. IT IS A HEALTHY NETWORKHEALTHY NETWORK

NETWORK JOBSNETWORK JOBS

THIS PERSON ANALYZES CUSTOMER THIS PERSON ANALYZES CUSTOMER GOALS TO SELECT THE GOALS TO SELECT THE TECHNOLOGIES AND EQUIPMENT TECHNOLOGIES AND EQUIPMENT NEEDED AND DRAW NETWORK MAPSNEEDED AND DRAW NETWORK MAPS NETWORK DESIGNERNETWORK DESIGNER

THIS PERSON IS THE TECHNICAL THIS PERSON IS THE TECHNICAL EXPERTISE WHILE DECIDING WHAT EXPERTISE WHILE DECIDING WHAT UPGRADES TO DOUPGRADES TO DO PRESALES ENGINEERPRESALES ENGINEER

THIS PERSON IS THE MAIN CONTACT THIS PERSON IS THE MAIN CONTACT AND COMMUNICATES IN MEETINGS, AND COMMUNICATES IN MEETINGS, EMAILS, AND ON THE PHONEEMAILS, AND ON THE PHONE ACCOUNT MANAGERACCOUNT MANAGER

NETWORK JOBSNETWORK JOBS

THIS PERSON PROVIDES THIS PERSON PROVIDES TECHNICAL SUPPORT AND TECHNICAL SUPPORT AND TRAINING AFTER DEPLOYING TRAINING AFTER DEPLOYING THE SOLUTIONTHE SOLUTION POST SALES FIELD ENGINEERPOST SALES FIELD ENGINEER

WHAT IS SNMPWHAT IS SNMP SIMPLE NETWORK MANAGEMENT SIMPLE NETWORK MANAGEMENT

PROTOCOLPROTOCOL WHAT IS IT USED FOR?WHAT IS IT USED FOR?

TO MONITOR THE NETWORK TO MONITOR THE NETWORK PERFORMANCE OF A ROUTER AND PERFORMANCE OF A ROUTER AND OTHER NETWORKING EQUIPMENT.OTHER NETWORKING EQUIPMENT.

MONITORS WHAT PROTOCOLS ARE MONITORS WHAT PROTOCOLS ARE BEING USED BEING USED

IP ROUTEIP ROUTE

WHAT DOES A C SIGNIFY IN WHAT DOES A C SIGNIFY IN A SHOW IP ROUTE?A SHOW IP ROUTE? DIRECTLY CONNECTED ROUTEDIRECTLY CONNECTED ROUTE

WHAT DOES THE 120 MEAN WHAT DOES THE 120 MEAN IN THE FOLLOWING MEAN? IN THE FOLLOWING MEAN?

192.168.4.0/24 [120/1]192.168.4.0/24 [120/1] ADMINISTRATIVE DISTANCE OF ADMINISTRATIVE DISTANCE OF

RIPRIP WHAT DOES THE /1 MEANWHAT DOES THE /1 MEAN

METRICSMETRICS

IP ROUTEIP ROUTE

WHAT DOES AN WHAT DOES AN RR SIGNIFY IN A SIGNIFY IN A SHOW IP ROUTE?SHOW IP ROUTE? RIP ROUTING IS USEDRIP ROUTING IS USED

WHAT DOES THE SERIAL 0/0/0 WHAT DOES THE SERIAL 0/0/0 MEAN IN THE FOLLOWING? MEAN IN THE FOLLOWING?

192.168.4.0/24 [120/1] via 192.168.4.0/24 [120/1] via 192.168.3.2, 00:00:19, serial 0/0/0192.168.3.2, 00:00:19, serial 0/0/0 THE ROUTER INTERFACE THAT THE ROUTER INTERFACE THAT

192.168.4.0 WILL SEND TO192.168.4.0 WILL SEND TO

SHOW VERSIONSHOW VERSION WHY DO WE USE SHOW VERSION WHY DO WE USE SHOW VERSION

COMMANDS?COMMANDS? SHOWS THE IOS SHOWS THE IOS

DOES IT SHOW INTERFACES THAT ARE DOES IT SHOW INTERFACES THAT ARE ATTACHED? ATTACHED? YESYES

SO IF YOU DIDN’T PUT THE WIC IN SO IF YOU DIDN’T PUT THE WIC IN PROPERLY THAT YOU INSTALLED, PROPERLY THAT YOU INSTALLED, WOULD IT SHOW UP IN A SHOW WOULD IT SHOW UP IN A SHOW VERSION?VERSION? NONO

IF YOU WANT TO ADD A FOUR-PORT IF YOU WANT TO ADD A FOUR-PORT SWITCH MODULE TO A CURRENTLY SWITCH MODULE TO A CURRENTLY BEING USED 1841 ROUTER, WHAT BEING USED 1841 ROUTER, WHAT SHOULD YOU DO FIRST?SHOULD YOU DO FIRST? TURN IT OFFTURN IT OFF

SHOW CDP NEIGHBORS SHOW CDP NEIGHBORS DETAILDETAIL WHAT IS SHOW CDP NEIGHBORS WHAT IS SHOW CDP NEIGHBORS

DETAIL USED FOR?DETAIL USED FOR? SHOWS THE DIRECTLY CONNECTED SHOWS THE DIRECTLY CONNECTED

NEIGHBORS NEIGHBORS DOES IT SHOW SWITCHES THAT DOES IT SHOW SWITCHES THAT

ARE ATTACHED? ARE ATTACHED? YESYES

CAN YOU TELL THE SWITCH CAN YOU TELL THE SWITCH PORT YOUR ROUTER IS PORT YOUR ROUTER IS ATTACHED TO ?ATTACHED TO ? YESYES

COPYING IPS FROM A TFTP COPYING IPS FROM A TFTP SERVERSERVER WHAT SHOULD YOU DO BEFORE WHAT SHOULD YOU DO BEFORE

DOWNLOAD A NEW IOS?DOWNLOAD A NEW IOS? BE SURE YOU ARE CONNECTED BE SURE YOU ARE CONNECTED

WHAT INFORMATION DO YOU WHAT INFORMATION DO YOU NEED TO KNOW? NEED TO KNOW? FILE NAME AND IP ADDRESSFILE NAME AND IP ADDRESS

WHAT DOES mz SIGNIFY IN A IOS WHAT DOES mz SIGNIFY IN A IOS NAME ?NAME ? FILE FORMATFILE FORMAT

QUALITY OF SERVICEQUALITY OF SERVICE

WHAT IS QoS?WHAT IS QoS? QUALITY OF SERVICE QUALITY OF SERVICE

WHAT DOES IT DO? WHAT DOES IT DO? PRIORITIZES NETWORK PRIORITIZES NETWORK

TRAFFICTRAFFIC How does QoS help implement How does QoS help implement

a VoIP solution?a VoIP solution? REDUCES INTERRUPTIONS IN REDUCES INTERRUPTIONS IN

COMMUNICATIONCOMMUNICATION

IP PHONESIP PHONES

IS IP TRAFFIC UDP OR TCP?IS IP TRAFFIC UDP OR TCP? UDP—SO IT DOESN’T LAG UDP—SO IT DOESN’T LAG

WHY SHOULD YOU USE VLANs WHY SHOULD YOU USE VLANs WITH IP TRAFFIC? WITH IP TRAFFIC? TO SEPARATE VOICE FROM DATA TO SEPARATE VOICE FROM DATA

TRAFFIC (HELPS WITH TRAFFIC (HELPS WITH PRIORITIZATION)PRIORITIZATION)

WHAT IS A VOICE GATEWAY?WHAT IS A VOICE GATEWAY? ROUTER THAT CONNECTS ROUTER THAT CONNECTS

TRADITONAL ANALOG PHONE TO AN TRADITONAL ANALOG PHONE TO AN IP NETWORK IP NETWORK

IT CONVERTS THE IP PACKETS IT CONVERTS THE IP PACKETS BETWEEN ANALOG AND DIGITALBETWEEN ANALOG AND DIGITAL

ROUTER SECURITYROUTER SECURITY

WHAT CAN YOU DO TO WHAT CAN YOU DO TO IMPROVE SECURITY ON A IMPROVE SECURITY ON A ROUTER TO KEEP PEOPLE ROUTER TO KEEP PEOPLE FROM LOGGING IN WHO FROM LOGGING IN WHO SHOULDN’T HAVE ACCESS?SHOULDN’T HAVE ACCESS? PASSWORDSPASSWORDS SET TIMEOUTS ON VTY, AUX SET TIMEOUTS ON VTY, AUX

AND CONSOLE PORTSAND CONSOLE PORTS TURN OFF UNNECESSARY TURN OFF UNNECESSARY

SERVICES SERVICES

FRAME RELAYFRAME RELAY WHAT ARE SOME GOOD THINGS ABOUT FRAME WHAT ARE SOME GOOD THINGS ABOUT FRAME

RELAYRELAY FLEXIBLE BANDWIDTHFLEXIBLE BANDWIDTH SIMULTANEOUS CONNECTIVITY TO REMOTE SITESSIMULTANEOUS CONNECTIVITY TO REMOTE SITES NOT TERRIBLE EXPENSIVENOT TERRIBLE EXPENSIVE

IF YOUR ROUTER DOESN’T SUPPORT INVERSE ARP, IF YOUR ROUTER DOESN’T SUPPORT INVERSE ARP, WHAT COMMAND MUST YOU ENTER?WHAT COMMAND MUST YOU ENTER?

FRAME-RELAY MAP IP COMMANDFRAME-RELAY MAP IP COMMAND FRAME RELAY USES DLCIs, WHAT LAYER ADDRESS IS FRAME RELAY USES DLCIs, WHAT LAYER ADDRESS IS

THIS?THIS? LAYELAYE

THIS NUMBER IS SAID TO BE LOCALLY SIGNIFICANT THIS NUMBER IS SAID TO BE LOCALLY SIGNIFICANT ONLY…MEANING IT CAN HAVE A DIFFERENT NUMBER ONLY…MEANING IT CAN HAVE A DIFFERENT NUMBER ON THE OTHER CONNECTION. WHAT IS IT?ON THE OTHER CONNECTION. WHAT IS IT?

DLCIDLCI HOW DO YOU SET UP 3 SEPARATE POINT-TO-POINT HOW DO YOU SET UP 3 SEPARATE POINT-TO-POINT

SUBINTERFACES ON A FRAME-RELAY LINK?SUBINTERFACES ON A FRAME-RELAY LINK? DON’T ENTER AN IP FOR THE INTERFACEDON’T ENTER AN IP FOR THE INTERFACE ENTER A DIFFERENT IP ADDRESS FOR EACH OF THE ENTER A DIFFERENT IP ADDRESS FOR EACH OF THE

SUBINTERFACESSUBINTERFACES

PPPPPP CHAP IS SAID TO BE WHAT KIND OF CHAP IS SAID TO BE WHAT KIND OF

AUTHENTICATION?AUTHENTICATION? A THREE WAY HANDSHAKEA THREE WAY HANDSHAKE

WHAT USERNAME AND PASSWORD DO YOU USE WHAT USERNAME AND PASSWORD DO YOU USE WITH CHAP?WITH CHAP? THE USERNAME AND PASSWORD OF THE ROUTER THE USERNAME AND PASSWORD OF THE ROUTER

YOU ARE CONNECTING TOYOU ARE CONNECTING TO WHY IS CHAP BETTER THAN PAP?WHY IS CHAP BETTER THAN PAP?

IT IS A CHALLENGE HANDSHAKE AND THE IT IS A CHALLENGE HANDSHAKE AND THE PASSWORDS ARE NOT PASSED IN CLEAR TEXTPASSWORDS ARE NOT PASSED IN CLEAR TEXT

DO BOTH SIDES OF THE SERIAL LINK NEED TO DO BOTH SIDES OF THE SERIAL LINK NEED TO BE USING THE SAME ENCAPSULATION TO BE USING THE SAME ENCAPSULATION TO WORK?WORK? YESYES

WHAT IS THE DEFAULT ENCAPSULATION?WHAT IS THE DEFAULT ENCAPSULATION? HDLCHDLC

ROUTE SUMMARIZATIONROUTE SUMMARIZATION IS IT ON BY DEFAULT?IS IT ON BY DEFAULT?

YESYES WHY COULD THAT BE A PROBLEM?WHY COULD THAT BE A PROBLEM?

COULD SUMMARIZE WHEN YOU DON’T WANT IT COULD SUMMARIZE WHEN YOU DON’T WANT IT TOTO

SUMMARIZE THESE NETWORKS INTO ONE SUMMARIZE THESE NETWORKS INTO ONE NETWORKNETWORK

192.168.12.0/24192.168.12.0/24 192.168.13.0/24192.168.13.0/24 192.168.14.0/24192.168.14.0/24 192.168.15.0/24192.168.15.0/24

192.168.12.0/22192.168.12.0/22

EIGRPEIGRP WHAT IS AN ADVANTANGE OF EIGRP?WHAT IS AN ADVANTANGE OF EIGRP?

SUPPORTS VLSM AND CIDRSUPPORTS VLSM AND CIDR CAN DO UNEQUAL COST LOAD BALANCING CAN DO UNEQUAL COST LOAD BALANCING

BETWEEN ROUTERSBETWEEN ROUTERS WHAT DOES IT USE TO MAKE IT’S ROUTE WHAT DOES IT USE TO MAKE IT’S ROUTE

DECISIONS?DECISIONS? FASTEST CONNECTION (not hops)FASTEST CONNECTION (not hops)

SOUNDS LIKE A GREAT ROUTING PROTOCOL. SOUNDS LIKE A GREAT ROUTING PROTOCOL. ARE THERE DISADVANTAGES OF USING EIGRP?ARE THERE DISADVANTAGES OF USING EIGRP? ONLY WORKS ON CISCO ROUTERSONLY WORKS ON CISCO ROUTERS

WHAT IS THE VARIANCE 5 COMMAND USED WHAT IS THE VARIANCE 5 COMMAND USED FOR?FOR? IT ENABLES UNEQUAL COST LOAD BALANCING ON IT ENABLES UNEQUAL COST LOAD BALANCING ON

5 ROUTES5 ROUTES

VLSMVLSM WHAT IS VLSM?WHAT IS VLSM?

VARIABLE LENGTH SUBNETTING MASKVARIABLE LENGTH SUBNETTING MASK WHAT DOES IT MEAN?WHAT DOES IT MEAN?

EACH DEPARTMENT CAN HAVE IT’S OWN SUBNET EACH DEPARTMENT CAN HAVE IT’S OWN SUBNET FOR HOWEVER MANY COMPUTERS IT NEEDSFOR HOWEVER MANY COMPUTERS IT NEEDS

IN A NETWORK, WHAT MASK WILL GIVE YOU 500 IN A NETWORK, WHAT MASK WILL GIVE YOU 500 USERS?USERS? /23 255.255.254.0/23 255.255.254.0

IN A NETWORK, WHAT MASK WILL GIVE YOU 200 IN A NETWORK, WHAT MASK WILL GIVE YOU 200 USERS?USERS? /24 255.255.255.0/24 255.255.255.0

WHAT ROUTING PROTOCOLS HANDLE VLSM?WHAT ROUTING PROTOCOLS HANDLE VLSM? RIPV2, OSPF, EIGRP (BUT ONLY ON CISCO ROUTERS)RIPV2, OSPF, EIGRP (BUT ONLY ON CISCO ROUTERS)

IPv6IPv6 WHAT IS IPv6?WHAT IS IPv6?

IPVERSION 6 ALLOWS FOR LONGER ADDRESSES IPVERSION 6 ALLOWS FOR LONGER ADDRESSES BECAUSE IT USES 128 BIT INSTEAD OF 32BECAUSE IT USES 128 BIT INSTEAD OF 32

WHAT ARE SOME VALID ADDRESS?WHAT ARE SOME VALID ADDRESS? FF00::1FF00::1 0:0:0:0:0:0:0:10:0:0:0:0:0:0:1 2031:0:130F::9C0:876A:130B2031:0:130F::9C0:876A:130B (YOU CAN ONLY USE :: ONCE AND IT IS TO (YOU CAN ONLY USE :: ONCE AND IT IS TO

REPLACE ZEROESREPLACE ZEROES WHAT TWO PROCESSES WILL ALLOW NETWORK WHAT TWO PROCESSES WILL ALLOW NETWORK

ADMINISTRATORS TO TRANSITION EASILY FROM ADMINISTRATORS TO TRANSITION EASILY FROM IPv4 TO IPv6?IPv4 TO IPv6? TUNNELING AND DUAL STACKTUNNELING AND DUAL STACK

WHAT DID THE CURRICULUM RECOMMEND YOU WHAT DID THE CURRICULUM RECOMMEND YOU USE TO TEST ADDRESSING SCHEMES FOR USE TO TEST ADDRESSING SCHEMES FOR BOTH IPv4 AND IPv6?BOTH IPv4 AND IPv6?

NETWORK SIMULATION TOOLSNETWORK SIMULATION TOOLS

VPNVPN

WHAT IS IPv6?WHAT IS IPv6? IPVERSION 6 ALLOWS FOR LONGER IPVERSION 6 ALLOWS FOR LONGER

ADDRESSES BECAUSE IT USES 128 BIT ADDRESSES BECAUSE IT USES 128 BIT INSTEAD OF 32INSTEAD OF 32

WHAT ARE SOME VALID ADDRESS?WHAT ARE SOME VALID ADDRESS? FF00::1FF00::1 0:0:0:0:0:0:0:10:0:0:0:0:0:0:1 2031:0:130F::9C0:876A:130B2031:0:130F::9C0:876A:130B (YOU CAN ONLY USE :: ONCE AND IT IS TO (YOU CAN ONLY USE :: ONCE AND IT IS TO

REPLACE ZEROESREPLACE ZEROES WHAT TWO PROCESSES WILL ALLOW WHAT TWO PROCESSES WILL ALLOW

NETWORK ADMINISTRATORS TO NETWORK ADMINISTRATORS TO TRANSITION EASILY FROM IPv4 TO IPv6?TRANSITION EASILY FROM IPv4 TO IPv6? TUNNELING AND DUAL STACKTUNNELING AND DUAL STACK

MISCELLANEOUSMISCELLANEOUS WHAT IS A “FLOATING STATIC ROUTE”WHAT IS A “FLOATING STATIC ROUTE”

STATIC ROUTE THAT HAS AN ad GREATER THAN STATIC ROUTE THAT HAS AN ad GREATER THAN THE DYNAMIC ROUTER ADTHE DYNAMIC ROUTER AD

WHY WOULD WE HAVE THEM?WHY WOULD WE HAVE THEM? TO BE USED IF ANOTHER ROUTE GOES DOWNTO BE USED IF ANOTHER ROUTE GOES DOWN

WHAT IS SPLIT TUNNELING USED IN?WHAT IS SPLIT TUNNELING USED IN? VPNSVPNS

WHAT DOES IT DO?WHAT DOES IT DO? ALLOWS USER TRAFFIC ON CORPORATE ALLOWS USER TRAFFIC ON CORPORATE

NETWORK TO USE THE VPN BUT INTERNET NETWORK TO USE THE VPN BUT INTERNET TRAFFIC TO USE THE LOCAL LANTRAFFIC TO USE THE LOCAL LAN