- •Warning and Disclaimer
- •Feedback Information
- •Trademark Acknowledgments
- •About the Author
- •About the Technical Reviewers
- •Dedication
- •Acknowledgments
- •Contents at a Glance
- •Contents
- •Icons Used in This Book
- •Command Syntax Conventions
- •Cisco’s Motivation: Certifying Partners
- •Format of the CCNA Exams
- •What’s on the CCNA Exams
- •ICND Exam Topics
- •Cross-Reference Between Exam Topics and Book Parts
- •CCNA Exam Topics
- •INTRO and ICND Course Outlines
- •Objectives and Methods
- •Book Features
- •How This Book Is Organized
- •Part I: LAN Switching
- •Part II: TCP/IP
- •Part III: Wide-Area Networks
- •Part IV: Network Security
- •Part V: Final Preparation
- •Part VI: Appendixes
- •How to Use These Books to Prepare for the CCNA Exam
- •For More Information
- •Part I: LAN Switching
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Brief Review of LAN Switching
- •The Forward-Versus-Filter Decision
- •How Switches Learn MAC Addresses
- •Forwarding Unknown Unicasts and Broadcasts
- •LAN Switch Logic Summary
- •Basic Switch Operation
- •Foundation Summary
- •Spanning Tree Protocol
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Spanning Tree Protocol
- •What IEEE 802.1d Spanning Tree Does
- •How Spanning Tree Works
- •Electing the Root and Discovering Root Ports and Designated Ports
- •Reacting to Changes in the Network
- •Spanning Tree Protocol Summary
- •Optional STP Features
- •EtherChannel
- •PortFast
- •Rapid Spanning Tree (IEEE 802.1w)
- •RSTP Link and Edge Types
- •RSTP Port States
- •RSTP Port Roles
- •RSTP Convergence
- •Edge-Type Behavior and PortFast
- •Link-Type Shared
- •Link-Type Point-to-Point
- •An Example of Speedy RSTP Convergence
- •Basic STP show Commands
- •Changing STP Port Costs and Bridge Priority
- •Foundation Summary
- •Foundation Summary
- •Virtual LANs and Trunking
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Review of Virtual LAN Concepts
- •Trunking with ISL and 802.1Q
- •ISL and 802.1Q Compared
- •VLAN Trunking Protocol (VTP)
- •How VTP Works
- •VTP Pruning
- •Foundation Summary
- •Part II: TCP/IP
- •IP Addressing and Subnetting
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •IP Addressing Review
- •IP Subnetting
- •Analyzing and Interpreting IP Addresses and Subnets
- •Math Operations Used to Answer Subnetting Questions
- •Converting IP Addresses from Decimal to Binary and Back Again
- •The Boolean AND Operation
- •How Many Hosts and How Many Subnets?
- •What Is the Subnet Number, and What Are the IP Addresses in the Subnet?
- •Finding the Subnet Number
- •Finding the Subnet Broadcast Address
- •Finding the Range of Valid IP Addresses in a Subnet
- •Finding the Answers Without Using Binary
- •Easier Math with Easy Masks
- •Which Subnet Masks Meet the Stated Design Requirements?
- •What Are the Other Subnet Numbers?
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Extended ping Command
- •Distance Vector Concepts
- •Distance Vector Loop-Avoidance Features
- •Route Poisoning
- •Split Horizon
- •Split Horizon with Poison Reverse
- •Hold-Down Timer
- •Triggered (Flash) Updates
- •RIP and IGRP
- •IGRP Metrics
- •Examination of RIP and IGRP debug and show Commands
- •Issues When Multiple Routes to the Same Subnet Exist
- •Administrative Distance
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Link-State Routing Protocol and OSPF Concepts
- •Steady-State Operation
- •Loop Avoidance
- •Scaling OSPF Through Hierarchical Design
- •OSPF Areas
- •Stub Areas
- •Summary: Comparing Link-State and OSPF to Distance Vector Protocols
- •Balanced Hybrid Routing Protocol and EIGRP Concepts
- •EIGRP Loop Avoidance
- •EIGRP Summary
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Route Summarization and Variable-Length Subnet Masks
- •Route Summarization Concepts
- •VLSM
- •Route Summarization Strategies
- •Sample “Best” Summary on Seville
- •Sample “Best” Summary on Yosemite
- •Classless Routing Protocols and Classless Routing
- •Classless and Classful Routing Protocols
- •Autosummarization
- •Classful and Classless Routing
- •Default Routes
- •Classless Routing
- •Foundation Summary
- •Advanced TCP/IP Topics
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Scaling the IP Address Space for the Internet
- •CIDR
- •Private Addressing
- •Network Address Translation
- •Static NAT
- •Dynamic NAT
- •Overloading NAT with Port Address Translation (PAT)
- •Translating Overlapping Addresses
- •Miscellaneous TCP/IP Topics
- •Internet Control Message Protocol (ICMP)
- •ICMP Echo Request and Echo Reply
- •Destination Unreachable ICMP Message
- •Time Exceeded ICMP Message
- •Redirect ICMP Message
- •Secondary IP Addressing
- •FTP and TFTP
- •TFTP
- •MTU and Fragmentation
- •Foundation Summary
- •Part III: Wide-Area Networks
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Review of WAN Basics
- •Physical Components of Point-to-Point Leased Lines
- •Data-Link Protocols for Point-to-Point Leased Lines
- •HDLC and PPP Compared
- •Looped Link Detection
- •Enhanced Error Detection
- •Authentication Over WAN Links
- •PAP and CHAP Authentication
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •ISDN Protocols and Design
- •Typical Uses of ISDN
- •ISDN Channels
- •ISDN Protocols
- •ISDN BRI Function Groups and Reference Points
- •ISDN PRI Function Groups and Reference Points
- •BRI and PRI Encoding and Framing
- •PRI Encoding
- •PRI Framing
- •BRI Framing and Encoding
- •DDR Step 1: Routing Packets Out the Interface to Be Dialed
- •DDR Step 2: Determining the Subset of the Packets That Trigger the Dialing Process
- •DDR Step 3: Dialing (Signaling)
- •DDR Step 4: Determining When the Connection Is Terminated
- •ISDN and DDR show and debug Commands
- •Multilink PPP
- •Foundation Summary
- •Frame Relay
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Frame Relay Protocols
- •Frame Relay Standards
- •Virtual Circuits
- •LMI and Encapsulation Types
- •DLCI Addressing Details
- •Network Layer Concerns with Frame Relay
- •Layer 3 Addressing with Frame Relay
- •Frame Relay Layer 3 Addressing: One Subnet Containing All Frame Relay DTEs
- •Frame Relay Layer 3 Addressing: One Subnet Per VC
- •Frame Relay Layer 3 Addressing: Hybrid Approach
- •Broadcast Handling
- •Frame Relay Service Interworking
- •A Fully-Meshed Network with One IP Subnet
- •Frame Relay Address Mapping
- •A Partially-Meshed Network with One IP Subnet Per VC
- •A Partially-Meshed Network with Some Fully-Meshed Parts
- •Foundation Summary
- •Part IV: Network Security
- •IP Access Control List Security
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Standard IP Access Control Lists
- •IP Standard ACL Concepts
- •Wildcard Masks
- •Standard IP ACL: Example 2
- •Extended IP Access Control Lists
- •Extended IP ACL Concepts
- •Extended IP Access Lists: Example 1
- •Extended IP Access Lists: Example 2
- •Miscellaneous ACL Topics
- •Named IP Access Lists
- •Controlling Telnet Access with ACLs
- •ACL Implementation Considerations
- •Foundation Summary
- •Part V: Final Preparation
- •Final Preparation
- •Suggestions for Final Preparation
- •Preparing for the Exam Experience
- •Final Lab Scenarios
- •Scenario 1
- •Scenario 1, Part A: Planning
- •Solutions to Scenario 1, Part A: Planning
- •Scenario 2
- •Scenario 2, Part A: Planning
- •Solutions to Scenario 2, Part A: Planning
- •Part VI: Appendixes
- •Glossary
- •Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
- •Chapter 1
- •“Do I Know This Already?” Quiz
- •Chapter 2
- •“Do I Know This Already?” Quiz
- •Chapter 3
- •“Do I Know This Already?” Quiz
- •Chapter 4
- •“Do I Know This Already?” Quiz
- •Chapter 5
- •“Do I Know This Already?” Quiz
- •Chapter 6
- •“Do I Know This Already?” Quiz
- •Chapter 7
- •“Do I Know This Already?” Quiz
- •Chapter 8
- •“Do I Know This Already?” Quiz
- •Chapter 9
- •“Do I Know This Already?” Quiz
- •Chapter 10
- •“Do I Know This Already?” Quiz
- •Chapter 11
- •“Do I Know This Already?” Quiz
- •Chapter 12
- •“Do I Know This Already?” Quiz
- •Using the Simulation Software for the Hands-on Exercises
- •Accessing NetSim from the CD
- •Hands-on Exercises Available with NetSim
- •Scenarios
- •Labs
- •Listing of the Hands-on Exercises
- •How You Should Proceed with NetSim
- •Considerations When Using NetSim
- •Routing Protocol Overview
- •Comparing and Contrasting IP Routing Protocols
- •Routing Through the Internet with the Border Gateway Protocol
- •RIP Version 2
- •The Integrated IS-IS Link State Routing Protocol
- •Summary of Interior Routing Protocols
- •Numbering Ports (Interfaces)
A P P E N D I X A
Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
Chapter 1
“Do I Know This Already?” Quiz
1.Which of the following statements describes part of the process of how a switch decides to forward a frame destined for a unicast MAC address?
Answer: A
2.Which of the following statements describes part of the process of how a LAN switch decides to forward a frame destined for a broadcast MAC address?
Answer: C
3.Which of the following statements best describes what a switch does with a frame destined for an unknown unicast address?
Answer: A
4.Which of the following comparisons does a switch make when deciding whether to add a new MAC address to its bridging table?
Answer: B
5.In which of the following CLI modes could you configure the duplex setting for interface fastethernet 0/5?
Answer: E. The duplex command is an interface subcommand.
6.In which of the following CLI modes could you issue a command to erase the switch’s initial configuration?
Answer: B. The erase command is an EXEC command, so it cannot be issued from any configuration mode. User mode does not allow the use of the erase command.
496Appendix A: Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
7.What type of switch memory is used to store the configuration used by the switch when the switch first comes up?
Answer: D. IOS loads the configuration from NVRAM into RAM during the boot sequence.
8.What command copies the configuration from RAM into NVRAM?
Answer: F. The first parameter identifies the source of the configuration, and the last parameter identifies the destination.
9.You configure the enable secret command, followed by the enable password command, from the console. You log out of the switch and log back in at the console. Which command defines the password you had to enter to access privileged mode again from the console?
Answer: B. When both are configured, the enable secret password takes precedence over the enable password.
10.What command is used on a switch to set the switch’s IP address for in-band management to 10.1.1.1, subnet mask 255.255.255.0?
Answer: A. Interestingly, the syntax matches the syntax of the same command in router IOS.
11.Imagine a 2950 switch with a PC plugged into interface fastethernet 0/1 and a router plugged into interface fastethernet 0/2. The PC needs to use TCP/IP to communicate through the router with other TCP/IP hosts. In what configuration mode could you enter the switch’s IP address?
Answer: G. First of all, the switch does not need an IP address for the PC to use TCP/IP to send packets through the switch to the router. Those details in the question were put there to help make sure you really know the answer. The ip address command is added to interface vlan 1, so the command is used in interface configuration mode for interface vlan 1.
12.What interface subcommand tells the switch to take an interface out of service?
Answer: C. The shutdown command takes the interface out of service, and the no shutdown command puts it in service again.
Chapter 1 497
Q&A
1.Describe how a switch decides whether it should forward a frame, and tell how it chooses the output interface.
Answer: The switch examines the frame’s destination MAC address and looks for the address in its bridge (or address) table. If it’s found, the matching entry tells the switch which output interface to use to forward the frame. If it isn’t found, the switch forwards the frame out all the other interfaces (except for interfaces blocked by spanning tree and the interface in which the frame was received). The switch table is built by examining incoming frames’ source MAC addresses.
2.How does a switch build its address table?
Answer: The switch listens for incoming frames and examines the source MAC address. If it isn’t in the table, the source address is added, along with the port (interface) on which the frame entered the switch. The switch also marks an entry for freshness so that entries can be removed after a period of disuse. This reduces table size and allows for easier table changes in case a spanning tree change forces more-significant changes in the switch (address) table.
3.What configuration command causes the switch to require a password from a user at the console? What configuration mode context must you be in? (That is, what command(s) must you enter before this command after entering configuration mode?) List the commands in the order you must enter them while in config mode.
Answer:
line console 0 login
The line console 0 command is a context-setting command; it adds no information to the configuration. It can be entered from any part of configuration mode. The login command, which follows the line console 0 command, tells IOS that a password prompt is desired at the console.
498Appendix A: Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
4.What configuration command is used to tell the switch the password that is required at the console? What configuration mode context must you be in? (That is, what command(s) must you enter before this command after entering configuration mode?) List the commands in the order in which you must enter them while in config mode.
Answer:
line console 0 password xxxxxxx
The password command tells IOS the value that should be entered when a user wants access from the console. This value is requested by IOS because of the login command. The password xxxxxxx must be entered while in console configuration mode, which you reach by entering line console 0.
5.What command sets the password that is required after you enter the enable command? Is that password encrypted by default?
Answer: enable password or enable secret. The password in the enable command is not encrypted by default. The enable secret password is encrypted using MD5.
6.Is the password required at the console the same one that is required when Telnet is used to access a switch?
Answer: No. The Telnet (“virtual terminal”) password is not the same password, although many installations use the same value.
7.Name two commands used to view the configuration to be used at the 2950 switch’s next reload. Which one is the more-recent addition to IOS?
Answer: show config and show startup-config. show startup-config is the newer one and hopefully is easier to remember.
8.Name two commands used to view the configuration that is currently used in a 2950 switch. Which one is the more-recent addition to IOS?
Answer: write terminal and show running-config. show running-config is the newer command and hopefully is easier to remember.