350-801 clcor book

350-801 clcor book

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, The ports connecting the switch to the router are usually trunk ports 1 0004.c16f.8741 SecureSticky Gi0/2 - C 170.170.3.0 is directly connected, Ethernet0 Switch port security ------------------------------------------------------------------- Shut Down Unused Ports Ping statistics for 10.10.10.254: illustrated in the following output: Setting device VLAN database password tocisco Switch1(config)# Figure 6.1 below illustrates the DTP mode combinations that will result in a trunk either being established or not being established (in this case they are all established; see note after Figure 6.2) between two Cisco Catalyst switches: Troubleshooting RIP Verifying the correct path selection 1 0004.c16f.8741 SecureSticky Gi0/2 - exec-wait Delay EXEC startup on noisy lines finger Allow responses to finger requests Switch(config-if)#int f0/1 This configuration can be validated via the show interfaces [name] switchport command, as illustrated in the following output: When the router receives a packet for a directly connected network, the router checks the routing table and then the packet is forwarded to that network, as shown in Figure 10.1 below: RIPv1 was created when networks were small so the hop (router) limit was set to 15. This was to prevent rogue RIP packets from endlessly traversing RIPv1 was created when networks were small so the hop (router) limit was set to 15. This was to prevent rogue RIP packets from endlessly traversing Type escape sequence to abort. The second configuration task is to specify the encapsulation protocol that the trunk link should use. This is performed by issuing the switchport trunk encapsulation [option] command. The options available with this command are as follows (performed on a multilayer switch): Shutdown (default) Restrict prompt-timeout Set Message for login authentication timeout slip-ppp Set Message for SLIP/PPP Walkthrough Last Source Address:Vlan : 0000.0000.0000:0 Security Violation Count 0 DHCP actually uses UDP ports 67 and 68 to communicate over the network, and, of course, actual servers are usually used as DHCP servers, although routers can also perform this role, if required. Routers can also be configured to obtain their IP address from a DHCP server, if required, although this is rarely done. The command to configure this is: Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: On Prefix Matching R1(config)#ip default-network 198.10.1.0 R1(config)#end Switch(config-vlan)#name data Switch(config-vlan)#vlan 11 Switch(config-vlan)#name voice Switch(config-vlan)#end Switch# (mins) Gateway of last resort is not set 172.16.0.0/24 is subnetted, 1 subnets Routing Information Sources: 1.If the route entry does not currently exist in the routing table, add it to the routing table. Router#show ip bgp ? When the router receives a packet for a directly connected network, the router checks the routing table and then the packet is forwarded to that network, as shown in Figure 10.1 below: Router(config)#no ip domain-lookup The same command are discussed more than once in this chapter. Firstly by myself but then in a different context by one of our CCIE authors. I decided to do it this way so you can see another perspective. R2#ping 2001:aaaa:bbbb:cccc::2 Type escape sequence to abort. Once port security has been enabled, administrators can define the actions the switch will take in the event of a port security violation. Cisco IOS software allows administrators to specify four different actions to take when a violation occurs, as follows: R1#ping 2001:AAAA:BBBB:EEEE::1 arp-inspection bpduguard dhcp-rate-limit link-flap ------------------------------------------------------------------ via FE80::2222, Serial0/0 Outgoing update filter list for all interfaces is not set The SPF algorithm creates a shortest-path tree to all hosts in an area or in the network backbone with the router that is performing the calculation at the root of that tree. In order for the SPF algorithm to work in the correct manner, all routers in the area should have the same database information. In OSPF, this is performed via the database exchange process. VTP Lab Purpose Rapid convergence You can erase most lines of configuration by issuing it again with the word no before the command. It is also worth noting that, as Farai says, you can issue a service password-encryption command, but this only offers weak (level 7) encryption, whereas below, the secret password has strong (MD5) encryption : Spend 15 minutes on the subnetting.org website Router(config)#ip dhcp pool passhot Router(dhcp-config)#default-router 172.16.1.2 Inter-VLAN Routing 4.Configure a static route on Router B, sending all traffic for the 172.16.1.0/24 network to next-hop address 192.168.1.1. DC0F7378 7EF410F6 6254750F 475DAD71 4E1CD15E 1D9086A8 BD175433 1302F403 2FD22F82 C311769F 9C75B7D2 1E50D315 EFA0E940 DF44AD5A F717BF17 A3CEDBE1 A6A2D601 45F313B6 6B020301 0001 incoming Set incoming terminal line banner login Set login banner Switch(config)#no ip http server Security Violation Count 0 An err-disabled port might look something like this: Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Voice VLAN: none [Truncated Output] Duplex: full VTP Pruning Mode : Disabled VTP V2 Mode : Disabled except all VLANs except the following none no VLANs The following output illustrates how to enable port security on an interface and to configure a static secure MAC address of 001f:3c59:d63b in VLAN 5 on a switch trunk port: Trunking VLANs Enabled: ALL Pruning VLANs Enabled: 2-1001 Capture Mode Disabled Default routing isn’t limited to sending traffic to the Internet. Another popular way to leverage a default route is with enterprise networks. For example,350-801 clcor book, if you have a core data center at your headquarters with two branch office sites, you could have all non-local branch office traffic forwarded to the core.