- •Warning and Disclaimer
- •Feedback Information
- •Trademark Acknowledgments
- •About the Author
- •About the Technical Reviewers
- •Dedication
- •Acknowledgments
- •Contents at a Glance
- •Contents
- •Icons Used in This Book
- •Command Syntax Conventions
- •Cisco’s Motivation: Certifying Partners
- •Format of the CCNA Exams
- •What’s on the CCNA Exams
- •ICND Exam Topics
- •Cross-Reference Between Exam Topics and Book Parts
- •CCNA Exam Topics
- •INTRO and ICND Course Outlines
- •Objectives and Methods
- •Book Features
- •How This Book Is Organized
- •Part I: LAN Switching
- •Part II: TCP/IP
- •Part III: Wide-Area Networks
- •Part IV: Network Security
- •Part V: Final Preparation
- •Part VI: Appendixes
- •How to Use These Books to Prepare for the CCNA Exam
- •For More Information
- •Part I: LAN Switching
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Brief Review of LAN Switching
- •The Forward-Versus-Filter Decision
- •How Switches Learn MAC Addresses
- •Forwarding Unknown Unicasts and Broadcasts
- •LAN Switch Logic Summary
- •Basic Switch Operation
- •Foundation Summary
- •Spanning Tree Protocol
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Spanning Tree Protocol
- •What IEEE 802.1d Spanning Tree Does
- •How Spanning Tree Works
- •Electing the Root and Discovering Root Ports and Designated Ports
- •Reacting to Changes in the Network
- •Spanning Tree Protocol Summary
- •Optional STP Features
- •EtherChannel
- •PortFast
- •Rapid Spanning Tree (IEEE 802.1w)
- •RSTP Link and Edge Types
- •RSTP Port States
- •RSTP Port Roles
- •RSTP Convergence
- •Edge-Type Behavior and PortFast
- •Link-Type Shared
- •Link-Type Point-to-Point
- •An Example of Speedy RSTP Convergence
- •Basic STP show Commands
- •Changing STP Port Costs and Bridge Priority
- •Foundation Summary
- •Foundation Summary
- •Virtual LANs and Trunking
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Review of Virtual LAN Concepts
- •Trunking with ISL and 802.1Q
- •ISL and 802.1Q Compared
- •VLAN Trunking Protocol (VTP)
- •How VTP Works
- •VTP Pruning
- •Foundation Summary
- •Part II: TCP/IP
- •IP Addressing and Subnetting
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •IP Addressing Review
- •IP Subnetting
- •Analyzing and Interpreting IP Addresses and Subnets
- •Math Operations Used to Answer Subnetting Questions
- •Converting IP Addresses from Decimal to Binary and Back Again
- •The Boolean AND Operation
- •How Many Hosts and How Many Subnets?
- •What Is the Subnet Number, and What Are the IP Addresses in the Subnet?
- •Finding the Subnet Number
- •Finding the Subnet Broadcast Address
- •Finding the Range of Valid IP Addresses in a Subnet
- •Finding the Answers Without Using Binary
- •Easier Math with Easy Masks
- •Which Subnet Masks Meet the Stated Design Requirements?
- •What Are the Other Subnet Numbers?
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Extended ping Command
- •Distance Vector Concepts
- •Distance Vector Loop-Avoidance Features
- •Route Poisoning
- •Split Horizon
- •Split Horizon with Poison Reverse
- •Hold-Down Timer
- •Triggered (Flash) Updates
- •RIP and IGRP
- •IGRP Metrics
- •Examination of RIP and IGRP debug and show Commands
- •Issues When Multiple Routes to the Same Subnet Exist
- •Administrative Distance
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Link-State Routing Protocol and OSPF Concepts
- •Steady-State Operation
- •Loop Avoidance
- •Scaling OSPF Through Hierarchical Design
- •OSPF Areas
- •Stub Areas
- •Summary: Comparing Link-State and OSPF to Distance Vector Protocols
- •Balanced Hybrid Routing Protocol and EIGRP Concepts
- •EIGRP Loop Avoidance
- •EIGRP Summary
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Route Summarization and Variable-Length Subnet Masks
- •Route Summarization Concepts
- •VLSM
- •Route Summarization Strategies
- •Sample “Best” Summary on Seville
- •Sample “Best” Summary on Yosemite
- •Classless Routing Protocols and Classless Routing
- •Classless and Classful Routing Protocols
- •Autosummarization
- •Classful and Classless Routing
- •Default Routes
- •Classless Routing
- •Foundation Summary
- •Advanced TCP/IP Topics
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Scaling the IP Address Space for the Internet
- •CIDR
- •Private Addressing
- •Network Address Translation
- •Static NAT
- •Dynamic NAT
- •Overloading NAT with Port Address Translation (PAT)
- •Translating Overlapping Addresses
- •Miscellaneous TCP/IP Topics
- •Internet Control Message Protocol (ICMP)
- •ICMP Echo Request and Echo Reply
- •Destination Unreachable ICMP Message
- •Time Exceeded ICMP Message
- •Redirect ICMP Message
- •Secondary IP Addressing
- •FTP and TFTP
- •TFTP
- •MTU and Fragmentation
- •Foundation Summary
- •Part III: Wide-Area Networks
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Review of WAN Basics
- •Physical Components of Point-to-Point Leased Lines
- •Data-Link Protocols for Point-to-Point Leased Lines
- •HDLC and PPP Compared
- •Looped Link Detection
- •Enhanced Error Detection
- •Authentication Over WAN Links
- •PAP and CHAP Authentication
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •ISDN Protocols and Design
- •Typical Uses of ISDN
- •ISDN Channels
- •ISDN Protocols
- •ISDN BRI Function Groups and Reference Points
- •ISDN PRI Function Groups and Reference Points
- •BRI and PRI Encoding and Framing
- •PRI Encoding
- •PRI Framing
- •BRI Framing and Encoding
- •DDR Step 1: Routing Packets Out the Interface to Be Dialed
- •DDR Step 2: Determining the Subset of the Packets That Trigger the Dialing Process
- •DDR Step 3: Dialing (Signaling)
- •DDR Step 4: Determining When the Connection Is Terminated
- •ISDN and DDR show and debug Commands
- •Multilink PPP
- •Foundation Summary
- •Frame Relay
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Frame Relay Protocols
- •Frame Relay Standards
- •Virtual Circuits
- •LMI and Encapsulation Types
- •DLCI Addressing Details
- •Network Layer Concerns with Frame Relay
- •Layer 3 Addressing with Frame Relay
- •Frame Relay Layer 3 Addressing: One Subnet Containing All Frame Relay DTEs
- •Frame Relay Layer 3 Addressing: One Subnet Per VC
- •Frame Relay Layer 3 Addressing: Hybrid Approach
- •Broadcast Handling
- •Frame Relay Service Interworking
- •A Fully-Meshed Network with One IP Subnet
- •Frame Relay Address Mapping
- •A Partially-Meshed Network with One IP Subnet Per VC
- •A Partially-Meshed Network with Some Fully-Meshed Parts
- •Foundation Summary
- •Part IV: Network Security
- •IP Access Control List Security
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Standard IP Access Control Lists
- •IP Standard ACL Concepts
- •Wildcard Masks
- •Standard IP ACL: Example 2
- •Extended IP Access Control Lists
- •Extended IP ACL Concepts
- •Extended IP Access Lists: Example 1
- •Extended IP Access Lists: Example 2
- •Miscellaneous ACL Topics
- •Named IP Access Lists
- •Controlling Telnet Access with ACLs
- •ACL Implementation Considerations
- •Foundation Summary
- •Part V: Final Preparation
- •Final Preparation
- •Suggestions for Final Preparation
- •Preparing for the Exam Experience
- •Final Lab Scenarios
- •Scenario 1
- •Scenario 1, Part A: Planning
- •Solutions to Scenario 1, Part A: Planning
- •Scenario 2
- •Scenario 2, Part A: Planning
- •Solutions to Scenario 2, Part A: Planning
- •Part VI: Appendixes
- •Glossary
- •Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
- •Chapter 1
- •“Do I Know This Already?” Quiz
- •Chapter 2
- •“Do I Know This Already?” Quiz
- •Chapter 3
- •“Do I Know This Already?” Quiz
- •Chapter 4
- •“Do I Know This Already?” Quiz
- •Chapter 5
- •“Do I Know This Already?” Quiz
- •Chapter 6
- •“Do I Know This Already?” Quiz
- •Chapter 7
- •“Do I Know This Already?” Quiz
- •Chapter 8
- •“Do I Know This Already?” Quiz
- •Chapter 9
- •“Do I Know This Already?” Quiz
- •Chapter 10
- •“Do I Know This Already?” Quiz
- •Chapter 11
- •“Do I Know This Already?” Quiz
- •Chapter 12
- •“Do I Know This Already?” Quiz
- •Using the Simulation Software for the Hands-on Exercises
- •Accessing NetSim from the CD
- •Hands-on Exercises Available with NetSim
- •Scenarios
- •Labs
- •Listing of the Hands-on Exercises
- •How You Should Proceed with NetSim
- •Considerations When Using NetSim
- •Routing Protocol Overview
- •Comparing and Contrasting IP Routing Protocols
- •Routing Through the Internet with the Border Gateway Protocol
- •RIP Version 2
- •The Integrated IS-IS Link State Routing Protocol
- •Summary of Interior Routing Protocols
- •Numbering Ports (Interfaces)
536 Appendix A: Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
Chapter 10
“Do I Know This Already?” Quiz
1.How fast do the D channels run on a BRI and PRI, respectively?
Answer: E
2.Which of the following protocols defines call setup signaling for ISDN?
Answer: E
3.Which of the following reference points are used by ISDN BRI interfaces in a Cisco router?
Answer: C, D. The router can use a serial interface with the R reference point, but the question asks about ISDN interfaces in the router.
4.Which of the following PRI function groups is appropriate for use with a PC with a simple serial interface?
Answer: E. BRIs support different reference points and function groups, but PRIs do not.
5.Which of the following encoding formats could be used on a PRI in North America?
Answer: A, B. In North America, PRIs are based on T1 circuits, which support either AMI or B8ZS encoding.
6.Assume that a router has an IP ACL numbered 109 that permits traffic going to IP address 10.1.1.1. Which of the following commands correctly refers to the ACL, causing traffic sent to IP address 10.1.1.1 to be considered “interesting”?
Answer: E. The dialer-list global command first refers to all IP traffic and then can optionally refer to an IP ACL to further refine the set of IP traffic that DDR considers “interesting.”
7.Which of the following could be necessary in a configuration that uses DDR and ISDN BRI interfaces?
Answer: A, D. ISDN configuration requires the switch type in most cases. SPIDs are needed only when the service provider’s switches expect to use the SPIDs as a basic authentication mechanism. Because there is only one option each for BRI encoding and framing, you never need to configure them.
Chapter 10 537
8.Which of the following could be necessary in a configuration that uses DDR and ISDN PRI interfaces in North America?
Answer: A, B, C, E. ISDN configuration requires the switch type in most cases. For PRI, you have two choices for encoding and framing. You also need to tell the router which DS0 channels will be used in the PRI.
9.When you configure DDR using the style of DDR configuration called dialer profiles, which of the following commands are useful on the dialer interface?
Answer: D. The encapsulation must be on the physical interfaces as well, but it is also needed on the dialer interface.
10.Which of the following interface subcommands enables multilink PPP?
Answer: A
Q&A
1.What does LAPD stand for? Is it used as the Layer 2 protocol on dialed ISDN bearer channels? If not, what is?
Answer: LAPD stands for Link Access Procedure on the D channel. LAPD is used not on bearer channels but on the signaling channel. PPP is typically used on bearer channels.
2.What do ISDN, BRI, and PRI stand for?
Answer: ISDN stands for Integrated Services Digital Network. BRI stands for Basic Rate Interface. PRI stands for Primary Rate Interface.
3.Define function group. List two examples of function groups.
Answer: A function group is a set of ISDN functions that a device implements. NT1, NT2, TE1, TE2, and TA are all function groups.
4.Define the term reference point. Give two examples of reference points.
Answer: A reference point is an interface between function groups. R, S, T, and U are reference points. S and T are combined in many cases and are then called the S/T reference point. Reference points refer to cabling, which implies the number of wires used. In particular, the S and T points use a four-wire interface, and the U interface uses a two-wire cable.
538Appendix A: Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
5.How many bearer channels are in a BRI? What about a PRI in North America? What about a PRI in Europe?
Answer: BRI uses two bearer channels and one signaling channel (2B+D). PRI uses 23B+D in North America and 30B+D in Europe. The signaling channel on BRI is a 16kbps channel; on PRI, it is a 64-kbps channel.
6.True or false: ISDN defines protocols that can be functionally equivalent to OSI Layers 1, 2, and 3. Explain your answer.
Answer: True. Reference points in part define the physical interfaces. Used on the signaling channel, LAPD is a data-link protocol. SPIDs define a logical addressing structure and are roughly equivalent to OSI Layer 3.
7.What reference points do ISDN BRI interfaces on Cisco routers use?
Answer: A BRI interface with an S/T reference point, or a BRI with a U reference point, can be bought from Cisco. With an S/T interface, an external NT1, NT2, or NT1/NT2 device is required. With the U interface, no external device is required.
8.Is LAPD used on ISDN channels? If so, which ones?
Answer: LAPD is used only on ISDN D channels to deliver signaling messages to the local ISDN switch. Many people don’t understand the function of LAPD, thinking it is used on the B channels after the dial is complete. The encapsulation chosen in the router configuration determines the data-link protocol on the bearer channels. Cisco routers do not have an option to turn off LAPD on the signaling channel.
9.What standards body defines ISDN protocols?
Answer: The International Telecommunications Union (ITU) defines ISDN protocols. This group was formerly called CCITT.
10.What ISDN functions do standards ITU-T Q.920 and Q.930 define? Does either standard correlate to an OSI layer?
Answer: Q.920 defines ISDN data-link specifications, such as LAPD; Q.930 defines Layer 3 functions, such as call setup messages. I.440 and I.450 are equivalent to Q.920 and Q.930, respectively.
11.What ISDN functions does standard ITU-T I.430 define? Does it correlate to an OSI layer?
Answer: I.430 defines ISDN BRI physical layer specifications. It is similar to OSI Layer
1.I.430 has no Q-series equivalent specification.
Chapter 10 539
12.What does SPID stand for? What does it mean?
Answer: SPID stands for service profile identifier. An optional feature, it is used for basic authentication between the telco switch and the device on the other end of the line, such as a router.
13.Define TE1, TE2, and TA. Which implies that one of the other two must be in use?
Answer: TE1 stands for Terminal Equipment 1. TE2 stands for Terminal Equipment 2. TA stands for terminal adapter. A TE2 device requires a TA. A TE2 uses the R reference point. An S reference point is needed to perform ISDN signaling. It is provided in that case by the TA.
14.How many B channels are there on a PRI in countries where the PRI is based on a T1? On an E1?
Answer: There are 23 B channels on a PRI in countries where the PRI is based on a T1. There are 30 B channels on a PRI in countries where the PRI is based on an E1.
15.What reference point is used between the customer premises and the phone company in North America? What about in Europe?
Answer: The U interface is used in North America. Elsewhere, the T interface is used. The NT1 function, the dividing point between the T and U reference points, is implemented in telco equipment outside North America.
16.What problem does multilink PPP solve when multiple B channels have circuits set up between a pair of routers?
Answer: MLP balances the traffic across multiple links efficiently, distributing the traffic evenly across the multiple links. Without MLP, the routers would let the routing process balance the traffic, which typically does not result in even balancing across the links.
17.What is the syntax of an interface command used to configure the encapsulation, IP address, and DDR parameters on a PRI in North America? What is the significance of entering a colon and a number after entering the interface number?
Answer: The interface serial 0/0:23 command places you in interface configuration mode for a PRI’s D channel. The D channel is where you place the interface configuration commands for DDR. The :23 identifies the last DS0 channel in the PRI. The numbering of the channels in the interface command starts at 0, so the 24th channel is number 23.
540Appendix A: Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
18.What data-link (OSI Layer 2) protocols are valid on an ISDN B channel?
Answer: HDLC, PPP, and LAPB are all valid options. PPP is the preferred choice, however. If you’re using DDR to more than one site, PAP or CHAP authentication is required. If it is used, PPP must also be used. PPP also provides automatic IP address assignment, which is convenient for PC dial-in.
19.Define MLPPP. Describe the typical home or small office use of MLPPP.
Answer: MLPPP stands for Multilink Point-to-Point Protocol. It is used to treat multiple B channels as a single link, because MLPPP fragments packets and sends different fragments across the multiple links to balance the traffic. MLPPP is very useful for sharing two B channels in a home or small office. so that you can increase and use the available bandwidth.
20.Configure ISDN interface BRI1, assuming that it is attached to a DMS-100 ISDN switch and that it uses only one SPID of 404555121201.
Answer:
isdn switch-type basic-dms100 interface bri1
isdn spid1 404555121201
The switch-type command is required. SPIDs are required with only some switches.
21.Describe the decision process performed by the Cisco IOS software to attempt to dial a connection using Legacy DDR.
Answer: First, some traffic must be routed out the interface to be dialed; this is typically accomplished by adding static routes pointing out the interface. Then, “interesting” traffic must be defined; any packets routed out the interface that are considered interesting cause the interface to be dialed.
22.If packets from 10.1.1.0/24 are “interesting” in relation to DDR configuration, such that packets from 10.1.1.0/24 cause a DDR connection out interface BRI0, list the configuration commands that make the Cisco IOS software think that those packets are interesting on BRI0. (If you have not yet studied access lists, you may simply note what kind of packets you would match with an access list, rather than writing down the full syntax.)
Answer: The following access list defines the packets from 10.1.1.0/24. The dialer-list command defines the use of access-list 1 to decide what is interesting. The dialer-group command enables that logic on interface BRI0.
access-list 1 permit 10.1.1.0 0.0.0.255
!
dialer-list 2 protocol ip list 1
!
interface bri 0 dialer-group 2