
- •Warning and Disclaimer
- •Feedback Information
- •Trademark Acknowledgments
- •About the Author
- •About the Technical Reviewers
- •Dedication
- •Acknowledgments
- •Contents at a Glance
- •Contents
- •Icons Used in This Book
- •Command Syntax Conventions
- •Cisco’s Motivation: Certifying Partners
- •Format of the CCNA Exams
- •What’s on the CCNA Exams
- •ICND Exam Topics
- •Cross-Reference Between Exam Topics and Book Parts
- •CCNA Exam Topics
- •INTRO and ICND Course Outlines
- •Objectives and Methods
- •Book Features
- •How This Book Is Organized
- •Part I: LAN Switching
- •Part II: TCP/IP
- •Part III: Wide-Area Networks
- •Part IV: Network Security
- •Part V: Final Preparation
- •Part VI: Appendixes
- •How to Use These Books to Prepare for the CCNA Exam
- •For More Information
- •Part I: LAN Switching
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Brief Review of LAN Switching
- •The Forward-Versus-Filter Decision
- •How Switches Learn MAC Addresses
- •Forwarding Unknown Unicasts and Broadcasts
- •LAN Switch Logic Summary
- •Basic Switch Operation
- •Foundation Summary
- •Spanning Tree Protocol
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Spanning Tree Protocol
- •What IEEE 802.1d Spanning Tree Does
- •How Spanning Tree Works
- •Electing the Root and Discovering Root Ports and Designated Ports
- •Reacting to Changes in the Network
- •Spanning Tree Protocol Summary
- •Optional STP Features
- •EtherChannel
- •PortFast
- •Rapid Spanning Tree (IEEE 802.1w)
- •RSTP Link and Edge Types
- •RSTP Port States
- •RSTP Port Roles
- •RSTP Convergence
- •Edge-Type Behavior and PortFast
- •Link-Type Shared
- •Link-Type Point-to-Point
- •An Example of Speedy RSTP Convergence
- •Basic STP show Commands
- •Changing STP Port Costs and Bridge Priority
- •Foundation Summary
- •Foundation Summary
- •Virtual LANs and Trunking
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Review of Virtual LAN Concepts
- •Trunking with ISL and 802.1Q
- •ISL and 802.1Q Compared
- •VLAN Trunking Protocol (VTP)
- •How VTP Works
- •VTP Pruning
- •Foundation Summary
- •Part II: TCP/IP
- •IP Addressing and Subnetting
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •IP Addressing Review
- •IP Subnetting
- •Analyzing and Interpreting IP Addresses and Subnets
- •Math Operations Used to Answer Subnetting Questions
- •Converting IP Addresses from Decimal to Binary and Back Again
- •The Boolean AND Operation
- •How Many Hosts and How Many Subnets?
- •What Is the Subnet Number, and What Are the IP Addresses in the Subnet?
- •Finding the Subnet Number
- •Finding the Subnet Broadcast Address
- •Finding the Range of Valid IP Addresses in a Subnet
- •Finding the Answers Without Using Binary
- •Easier Math with Easy Masks
- •Which Subnet Masks Meet the Stated Design Requirements?
- •What Are the Other Subnet Numbers?
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Extended ping Command
- •Distance Vector Concepts
- •Distance Vector Loop-Avoidance Features
- •Route Poisoning
- •Split Horizon
- •Split Horizon with Poison Reverse
- •Hold-Down Timer
- •Triggered (Flash) Updates
- •RIP and IGRP
- •IGRP Metrics
- •Examination of RIP and IGRP debug and show Commands
- •Issues When Multiple Routes to the Same Subnet Exist
- •Administrative Distance
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Link-State Routing Protocol and OSPF Concepts
- •Steady-State Operation
- •Loop Avoidance
- •Scaling OSPF Through Hierarchical Design
- •OSPF Areas
- •Stub Areas
- •Summary: Comparing Link-State and OSPF to Distance Vector Protocols
- •Balanced Hybrid Routing Protocol and EIGRP Concepts
- •EIGRP Loop Avoidance
- •EIGRP Summary
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Route Summarization and Variable-Length Subnet Masks
- •Route Summarization Concepts
- •VLSM
- •Route Summarization Strategies
- •Sample “Best” Summary on Seville
- •Sample “Best” Summary on Yosemite
- •Classless Routing Protocols and Classless Routing
- •Classless and Classful Routing Protocols
- •Autosummarization
- •Classful and Classless Routing
- •Default Routes
- •Classless Routing
- •Foundation Summary
- •Advanced TCP/IP Topics
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Scaling the IP Address Space for the Internet
- •CIDR
- •Private Addressing
- •Network Address Translation
- •Static NAT
- •Dynamic NAT
- •Overloading NAT with Port Address Translation (PAT)
- •Translating Overlapping Addresses
- •Miscellaneous TCP/IP Topics
- •Internet Control Message Protocol (ICMP)
- •ICMP Echo Request and Echo Reply
- •Destination Unreachable ICMP Message
- •Time Exceeded ICMP Message
- •Redirect ICMP Message
- •Secondary IP Addressing
- •FTP and TFTP
- •TFTP
- •MTU and Fragmentation
- •Foundation Summary
- •Part III: Wide-Area Networks
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Review of WAN Basics
- •Physical Components of Point-to-Point Leased Lines
- •Data-Link Protocols for Point-to-Point Leased Lines
- •HDLC and PPP Compared
- •Looped Link Detection
- •Enhanced Error Detection
- •Authentication Over WAN Links
- •PAP and CHAP Authentication
- •Foundation Summary
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •ISDN Protocols and Design
- •Typical Uses of ISDN
- •ISDN Channels
- •ISDN Protocols
- •ISDN BRI Function Groups and Reference Points
- •ISDN PRI Function Groups and Reference Points
- •BRI and PRI Encoding and Framing
- •PRI Encoding
- •PRI Framing
- •BRI Framing and Encoding
- •DDR Step 1: Routing Packets Out the Interface to Be Dialed
- •DDR Step 2: Determining the Subset of the Packets That Trigger the Dialing Process
- •DDR Step 3: Dialing (Signaling)
- •DDR Step 4: Determining When the Connection Is Terminated
- •ISDN and DDR show and debug Commands
- •Multilink PPP
- •Foundation Summary
- •Frame Relay
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Frame Relay Protocols
- •Frame Relay Standards
- •Virtual Circuits
- •LMI and Encapsulation Types
- •DLCI Addressing Details
- •Network Layer Concerns with Frame Relay
- •Layer 3 Addressing with Frame Relay
- •Frame Relay Layer 3 Addressing: One Subnet Containing All Frame Relay DTEs
- •Frame Relay Layer 3 Addressing: One Subnet Per VC
- •Frame Relay Layer 3 Addressing: Hybrid Approach
- •Broadcast Handling
- •Frame Relay Service Interworking
- •A Fully-Meshed Network with One IP Subnet
- •Frame Relay Address Mapping
- •A Partially-Meshed Network with One IP Subnet Per VC
- •A Partially-Meshed Network with Some Fully-Meshed Parts
- •Foundation Summary
- •Part IV: Network Security
- •IP Access Control List Security
- •“Do I Know This Already?” Quiz
- •Foundation Topics
- •Standard IP Access Control Lists
- •IP Standard ACL Concepts
- •Wildcard Masks
- •Standard IP ACL: Example 2
- •Extended IP Access Control Lists
- •Extended IP ACL Concepts
- •Extended IP Access Lists: Example 1
- •Extended IP Access Lists: Example 2
- •Miscellaneous ACL Topics
- •Named IP Access Lists
- •Controlling Telnet Access with ACLs
- •ACL Implementation Considerations
- •Foundation Summary
- •Part V: Final Preparation
- •Final Preparation
- •Suggestions for Final Preparation
- •Preparing for the Exam Experience
- •Final Lab Scenarios
- •Scenario 1
- •Scenario 1, Part A: Planning
- •Solutions to Scenario 1, Part A: Planning
- •Scenario 2
- •Scenario 2, Part A: Planning
- •Solutions to Scenario 2, Part A: Planning
- •Part VI: Appendixes
- •Glossary
- •Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
- •Chapter 1
- •“Do I Know This Already?” Quiz
- •Chapter 2
- •“Do I Know This Already?” Quiz
- •Chapter 3
- •“Do I Know This Already?” Quiz
- •Chapter 4
- •“Do I Know This Already?” Quiz
- •Chapter 5
- •“Do I Know This Already?” Quiz
- •Chapter 6
- •“Do I Know This Already?” Quiz
- •Chapter 7
- •“Do I Know This Already?” Quiz
- •Chapter 8
- •“Do I Know This Already?” Quiz
- •Chapter 9
- •“Do I Know This Already?” Quiz
- •Chapter 10
- •“Do I Know This Already?” Quiz
- •Chapter 11
- •“Do I Know This Already?” Quiz
- •Chapter 12
- •“Do I Know This Already?” Quiz
- •Using the Simulation Software for the Hands-on Exercises
- •Accessing NetSim from the CD
- •Hands-on Exercises Available with NetSim
- •Scenarios
- •Labs
- •Listing of the Hands-on Exercises
- •How You Should Proceed with NetSim
- •Considerations When Using NetSim
- •Routing Protocol Overview
- •Comparing and Contrasting IP Routing Protocols
- •Routing Through the Internet with the Border Gateway Protocol
- •RIP Version 2
- •The Integrated IS-IS Link State Routing Protocol
- •Summary of Interior Routing Protocols
- •Numbering Ports (Interfaces)

Data-Link Protocols for Point-to-Point Leased Lines 307
To get the serial link in Figures 9-1 and 9-2 working, the router configuration is simple. Example 9-1 lists the configuration on R1 and R2.
Example 9-1 Minimal Configuration for IP on a Point-to-Point Link
R1 |
R2 |
interface serial 1 |
interface serial 1 |
ip address 10.1.1.1 255.255.255.0 |
ip address 10.1.1.2 255.255.255.0 |
no shutdown |
no shutdown |
|
clock rate 56000 |
|
|
Note that the IP addresses must be in the same subnet, because the two routers’ interfaces are not separated by some other IP router. In many cases, the no shutdown command is unneeded. However, when a Cisco router comes up, and the physical WAN link is not working, the router might place a shutdown command on the interface configuration. So the no shutdown interface subcommand would be needed to put the interface in service.
The clock rate command sets the clock rate on interfaces when a DCE cable has been used, as in Figure 9-2. In Example 9-1, the clock rate 56000 command sets the clock rate to 56,000 bps. If external CSU/DSUs were used, as in Figure 9-1, as is typical when you use an actual leased line from a provider, this command is unneeded. In fact, the router wouldn’t let you add the command to the configuration if a DTE cable was connected to the interface!
Data-Link Protocols for Point-to-Point Leased Lines
The more interesting part of point-to-point WANs relates to the choices of different data link layer protocols and how each protocol behaves differently. WAN data-link protocols used on point-to-point serial links provide the basic function of data delivery across that one link.
The two most popular WAN data-link protocols are High-Level Data Link Control (HDLC) and PPP. Each of these WAN protocols has the following functions in common:
■HDLC and PPP provide for the delivery of data across a single point-to-point serial link.
■HDLC and PPP deliver data on synchronous serial links; PPP also supports asynchronous serial links.
Each synchronous serial data-link protocol uses the concept of framing. Each data-link protocol defines the beginning and end of the frame, the information and format of a header and trailer, and the location of the packet between the header and trailer. In other words, synchronous WAN data-link protocols are frame-oriented, just like LAN data-link protocols.

308 Chapter 9: Point-to-Point Leased Line Implementation
Synchronous WAN links require the CSU/DSUs on each end of the link to operate at the exact same speed. Essentially, the CSU/DSUs on each side of the WAN link agree to use a certain clock rate, or speed, to send and receive bits. It is expensive to build CSU/DSUs that can truly operate at exactly the same speed, so after they agree to a particular speed, both CSU/DSUs try to operate at that speed. Then one CSU/DSU watches for small differences in clock rates between itself and the other CSU/DSU and makes small adjustments. (The CSU/ DSU that does not adjust its clock is called the clock source.) This process works almost like the scenes in spy novels in which the spies synchronize their watches; in this case, the watches or clocks are synchronized automatically several times per minute.
Synchronous CSU/DSUs adjust their clocks by noticing when the electrical signal received on the physical line changes. When the routers send data frames across the link, plenty of signal transitions are made, because the transitions are typically used to imply either a 1 or a 0.
However, if no traffic were sent across the link, there would be no transitions in the electrical signal, and clock synchronization would be lost. So synchronous data-link protocols send frames continuously, even sending idle frames when there is no end-user data to be sent over the link. By always at least sending frames with no data in them, the routers ensure that there are plenty of electrical signal transitions on the line, allowing the clock adjustments required for synchronization. So HDLC and PPP define idle frames, called Receiver Ready, implying that the sender has nothing to send other than idle frames to allow for continued synchronization.
Unlike asynchronous links, in which no bits are sent during idle times, synchronous data links define idle frames. These frames do nothing more than provide plenty of signal transitions so that clocks can be adjusted on the receiving end, consequently maintaining synchronization.
HDLC and PPP Compared
The next few pages compare and contrast several key features of HDLC and PPP. These features, including how each protocol supports each feature, are summarized at the end of the section in Table 9-3. These three features are used to compare the two protocols:
■Whether the protocol supports synchronous communications, asynchronous communications, or both.
■Whether the protocol provides error recovery.
■Whether an architected Protocol Type field exists. In other words, the protocol specifications define a field in the header that identifies the type of packet contained in the data portion of the frame.
First, a few words about the criteria used to compare these WAN protocols might prove helpful. Synchronous protocols allow more throughput over a serial link than asynchronous

Data-Link Protocols for Point-to-Point Leased Lines 309
protocols. However, asynchronous protocols require less-expensive hardware, because there is no need to watch transitions and adjust the clock rate. For links between routers, synchronous links are typically desired and used. When you use a PC with a modem to dial up an Internet provider, you use an asynchronous link. All the protocols covered in this section support synchronous links, because that is what routers typically use between each other.
Another comparison criteria is error recovery. Do not confuse error recovery with error detection. Almost all data-link protocols, PPP and HDLC included, perform error detection. All the data-link protocols described here use a field in the trailer, usually called the frame check sequence (FCS), that verifies whether bit errors occurred during transmission of the frame. If so, the frame is discarded. Error recovery is the process that causes retransmission of the lost or errored frame(s). Error recovery can be performed by the data-link protocol or a higher-layer protocol, or it might not be performed at all. Regardless, all WAN data-link protocols perform error detection, which involves noticing the error and discarding the frame.
Finally, the people who created these protocols might or might not have defined a Protocol Type field. As described in more detail in Chapter 3, “Data Link Layer Fundamentals: Ethernet LANs,” from CCNA INTRO Exam Certification Guide, each data-link protocol that supports multiple network layer protocols needs a method of defining the type of packet encapsulated in the data-link frame. If such a field is part of the protocol specification, it is considered architected—in other words, specified in the protocol. If the protocol specification does not include a Protocol Type field, Cisco might add some other header information to create a Protocol Type field.
Figure 9-3 shows the framing details of HDLC and PPP, showing the proprietary HDLC Protocol field and the standardized PPP Protocol field.
Figure 9-3 PPP and HDLC Framing
|
1 |
1 |
2 |
2 |
Variable |
4 |
1 |
|
|
|
|
|
|
|
|
||
HDLC |
Flag |
Address |
Control |
Type |
Data |
FCS |
Flag |
|
(Proprietary) |
||||||||
|
|
|
|
|
|
|
||
|
|
|
|
|
|
|
|
|
|
1 |
1 |
2 |
2 |
Variable |
4 |
1 |
|
|
|
|
|
|
|
|
||
PPP |
Flag |
Address |
Control |
Type |
Data |
FCS |
Flag |
|
|
(Standardized) |
|||||||
|
|
|
|
|
|
|
|

310 Chapter 9: Point-to-Point Leased Line Implementation
Table 9-3 lists the important comparison points between HDLC and PPP.
Table 9-3 |
Point-to-Point Data-Link Protocol Attributes |
|
||
|
|
|
|
|
|
|
|
Architected Type |
|
|
Protocol |
Error Correction |
Field |
Other Attributes |
|
|
|
|
|
|
HDLC |
No |
No |
HDLC serves as Cisco’s default on |
|
|
|
|
serial links. Cisco uses a Proprietary |
|
|
|
|
Type field to support multiprotocol |
|
|
|
|
traffic. Supports synchronous links |
|
|
|
|
only. |
|
|
|
|
|
|
PPP |
Supported but not |
Yes |
PPP was meant for multiprotocol |
|
|
enabled by default |
|
interoperability from its inception, |
|
|
|
|
unlike HDLC. PPP also supports |
|
|
|
|
asynchronous communication. |
|
|
|
|
|
HDLC and PPP Configuration
HDLC and PPP configuration is straightforward. You just need to be sure to configure the same WAN data-link protocol on each end of the serial link. Otherwise, the routers will misinterpret the incoming frames, because each WAN data-link protocol uses a different frame format. Other than configuring some optional features, that’s all you need to do!
Tables 9-4 and 9-5 summarize the configuration commands and EXEC commands used for HDLC and PPP configuration. Most of the commands relate to the optional features.
Table 9-4 PPP and HDLC Configuration Commands
|
Command |
|
Configuration Mode |
|
|
|
|
|
encapsulation {hdlc | ppp} |
|
Interface subcommand |
|
|
|
|
|
compress [predictor | stac | mppc [ignore-pfc]] |
Interface subcommand |
|
|
|
|
|
Table 9-5 |
Point-to-Point-Related show and debug Commands |
||
|
|
|
|
|
Command |
Description |
|
|
|
|
|
|
show interfaces [type number] |
Lists statistics and details of interface configuration, |
|
|
|
including the encapsulation type. |
|
|
|
|
|
|
show compress |
Lists compression ratios. |
|
|
|
|
|
|
show processes [cpu] |
Lists processor and task utilization. Is useful for watching |
|
|
|
for increased utilization because of compression. |
|
|
|
|
|

Data-Link Protocols for Point-to-Point Leased Lines 311
Example 9-2 shows the configuration for PPP, followed by the changed configuration for a migration to HDLC. Assume that Router A and Router B have a serial link attached to their serial 1 ports.
Example 9-2 Configuration for PPP and HDLC
Router A-Mars |
Router B-Seville |
interface serial 1 |
interface serial 1 |
encapsulation ppp |
encapsulation ppp |
. |
. |
. later, changed to... |
. later, changed to... |
. |
. |
interface serial 1 |
interface serial 1 |
encapsulation hdlc |
encapsulation hdlc |
|
|
Changing serial encapsulations in configuration mode is tricky compared to some other configuration commands in a Cisco router. In Example 9-2, converting back to HDLC (the default) is accomplished with the encapsulation hdlc command, but it can also be accomplished with the command no encapsulation ppp, because that causes the router to revert back to the default encapsulation, which is HDLC. Additionally, any other interface subcommands that are pertinent only to PPP, but not HDLC, are also removed when the encapsulation hdlc command is used.
PPP-Specific Features
PPP was defined much later than the original HDLC specifications. As a result, the creators of PPP included many additional features that had not been seen in WAN data-link protocols up to that time. As a result, PPP has become the most popular and feature-rich WAN data link layer protocol.
PPP-unique features fall into two main categories:
■Those needed regardless of the Layer 3 protocol sent across the link
■Those specific to each Layer 3 protocol
PPP uses a protocol that focuses on the features that apply regardless of the Layer 3 protocol used and another protocol to support each Layer 3 protocol supported on the link. The PPP Link Control Protocol (LCP) provides the core features for PPP. For features related to a specific Layer 3 protocol, PPP uses a series of PPP control protocols, such as IP Control Protocol (IPCP). For example, IPCP provides for IP address assignment; this feature is used extensively with Internet dialup connections today.
PPP uses one LCP per link and one Control Protocol for each Layer 3 protocol defined on the link. If a router is configured for IPX, AppleTalk, and IP on a PPP serial link, the router