350-601 vce

350-601 vce

Router(config)#int FastEthernet0/0 This is one of the hardest parts to understand. I’ve never seen a complete list of rules written down in one Cisco manual. Some refer to them generally or explain some of them, but then miss others completely. The difficulty is that the rules always apply but (until now) you found them only by trial and error. Here are the rules you need to know: Switch(config-if)#switchport access vlan 10 Switch(config-if)#no shut Port Status : Secure-up Violation Mode : Restrict link-flap Enable timer to recover from link-flap error disable state pagp-flap Enable timer to recover from pagp-flap error disable state rootguard Enable timer to recover from root-guard error disable state udld Enable timer to recover from udld error disable state Sending the packet (switching) show ip route show ip route rip show ip protocols Last update from 10.1.1.2 on Ethernet0/0.1, 00:00:15 ago Routing Descriptor Blocks: For example: ------------------------------------------------------------------ R1#debug ip rip ? Connect to the switch using a console connection. Connect a PC to each switch or connect the switch to the fast ethernet port on a router. R1(config)#ip route 172.16.2.0 255.255.255.0 172.16.4.2 The manual configuration of a trunk is performed by issuing the switchport mode trunk interface configuration command on the desired switch port. This command forces the port into a permanent (static) trunking mode. The following configuration output shows how to configure a port statically as a trunk port: peer-group Display information on peer-groups pending-prefixes Display prefixes pending deletion prefix-list Display routes matching the prefix-list security-violation Disabled sfp-config-mismatch Disabled storm-control Disabled udld Disabled Duplex: full Another way to verify the shutdown state is using the show interface x command: R 192.168.1.4/30 [120/1] via 172.16.1.1, 00:00:11, FE0/0 In the output above, a single client was served by the DHCP server and was assigned the first non-excluded IP address from the DHCP scope: 192.168.1.2. You can also see the lease expiration date and the device MAC address. Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP CAM table attacks are easy to perform because common tools, such as MACOF and DSNIFF, are readily available to perform these activities. While increasing the number of VLANs (which reduces the size of Broadcast Domains) can assist in reducing the effects of CAM table attacks, the recommended security solution is to configure the port security feature on the switch. Static routes are a quick and easy way to instruct your router to forward traffic destined for a particular host or network or even to anywhere not listed in your routing table. You can use them as a standalone solution, in conjunction with dynamic routing or as a fail safe in case your main route goes down. Router(config)#banner ? R1(config-router)#version 2 R1(config-router)#no auto-summary R1#show ip route 80.1.1.1 Routing entry for 80.1.1.0/24 Topology Use two directly connected routers and test the basic commands depicted in this module. RIP is covered soon so just copy my commands for now. Switch#show interfaces FastEthernet0/1 switchport Name: Fa0/1 Show the ACLs. Copy and paste into Notepad and make the changes: Now you can see the IOS release, model, IP address, and other information. Remember that you still haven’t configured an IP address on Router 0 yet, I added one on Router1 to demonstrate the output. R1(config)#ip route 192.168.2.0 255.255.255.0 172.16.4.2 ACL Rule 5 – You can’t edit a live ACL. The errdisable recovery cause command can vary based on the device model, but the most common parameters are: Codes: L - local, C - connected, S - static, R - RIP, M - mobile, Switch#show errdisable recovery ErrDisable Reason Timer Status In addition to DHCP server functionality, Cisco IOS routers also permit configuring the interfaces as DHCP clients. This means that interfaces will require an address using the standard DHCP process, and any server present on the specific subnet can allocate the IP addresses. Did you notice that the route that used the next hop IP address has a via keyword in the routing table entry? The route that references the outgoing Serial0/0/1 interface is listed as a connected route. Often, engineers will think that because a route is directly connected, the subnet must be hosted on the router itself, but as you can see, that’s not always the case. MAC Spoofing Attacks 1 001f.3c59.d63b SecureConfigured Gi0/2 - Vlan Mac Address Type Ports Remaining Age Challenge 1 – Configuring VLANs Lab Gateway of last resort is 170.170.3.4 to network 0.0.0.0. Switch(config-if)#switchport trunk encapsulation dot1q Switch(config-if)#switchport mode trunk Switch(config-if)#exit 4.3.dTFTP, DNS,350-601 vce, and gateway options Switch(config-vlan)#name data Switch(config-vlan)#vlan 11 Switch(config-vlan)#name voice Switch(config-vlan)#end Switch# System image file is “flash:/c3560-advipservicesk9-mz.122-35.SE1.bin” Now please take today’s exam at Port Vlans allowed and active in management domain Fa0/6 10, 20 Port Vlans allowed on trunk Summarization reduces the amount of information that routers must process, which allows for faster convergence within the network. Summarisation also restricts the size of the area that is affected by network changes by hiding detailed topology information from certain areas within the network. This concept is illustrated in Figure 10.9 below: In the following example, we programmed switchport F0/6 with a default configuration so that it will support the new data and voice VLANs that we will be adding. You can use the IP phone in Packet Tracer to copy the configuration below. Just make sure that you add the power supply by dragging it to the power socket on the IP phone; otherwise, no interfaces will come up. Instructions the network. You saw earlier with the debug ip rip output that RIP broadcasts updates and is classful so it has no concept of VLSM, meaning that if you had a 192.168.1.16/26 network, it would advertise it as 192.168.1.0/24. Also, it offers no authentication, making it an easy target for attackers wanting to inject false route updates into the network. Show the ACLs. Copy and paste into Notepad and make the changes: This can cause confusion when doing testing before implementing your ACL on a live network. A router won’t filter traffic it generated itself. This is demonstrated in Figure 15.2 below: ------------------------------------------------------------------ [Truncated Output] Last Source Address:Vlan : 0001.C7DD.CB18:1 Day 9 Labs Total Mac Addresses for this criterion: 6 Note that the administratively down status means that the port has been manually shut down. (P) Repeater, (S) Station, (O) Other Network Routing Poison reverse (or route poisoning) expands on split horizon. When used in conjunction with split horizon, poison reverse allows the networks to be advertised back out of the same interface on which they were received. However, poison reverse causes the router to advertise these networks back to the sending router with a metric of “unreachable” so that the router that receives those entries will not add them back into its routing table.