CHAPTER ONE
Hierarchical Network Design
Access layer
Distribution layer
Core layer
Enterprise Architecture
Enterprise campus
Enterprise edge
Service provider edge
Remote
Failure domain
Redundancy
Switch Hardware
Port density
Forwarding rate
Power over Ethernet (PoE)
Fixed configuration
Modular
Stackable
Router Hardware
Branch router
Network edge router
Service provider router
Out-of-band
In-band
CHAPTER TWO
MAC table
Broadcast storm
Spanning Tree Protocol (STP)
Spanning Tree Algorithm (STA)
IEEE 802.1D
Blocking
Listening
Learning
Forwarding
Disabled
Bridge Protocol Data Unit (BPDU)
Bridge ID (BID)
Virtual Local Area Network (VLAN)
Root bridge
Link speed
10 Gbps
1 Gbps
100 Mbps
10 Mbps
Default STP Port Cost
Original
Revised
1
2
1
4
10
19
100
100
(config-if)# spanning-tree cost value
Bridge Priority
(config)# spanning-tree VLAN number priority
value
0 to 61440 in increments of 4096
Extended System ID = bridge priority + VLAN
Lowest BID becomes root.
In case of tie, lowest MAC address becomes
root.
Alternatives to STP
Rapid Spanning Tree Protocol (RSTP)
IEEE 802.1w
Discarding
Learning
Forwarding
Per-VLAN Spanning Tree + (PVST+)
Multiple Spanning Tree Protocol (MSTP)
Rapid PVST+
Root port
Designated port
Alternative port
Edge port
PortFast
BPDUGuard
First Hop Redundancy Protocols
Default gateway
Virtual router
Virtual IP address
Virtual MAC address
Forwarding router
Standby router
Hot Standby Router Protocol (HSRP)
Virtual Router Redundancy Protocol (VRRP)
Gateway Load Balancing Protocol (GLBP)
CHAPTER THREE
Carrier Sense Multiple Access/Collision
Avoidance (CSAM/CD)
Antennas
Omnidirectional
Directional
Yagi
Frequency Hopping Spread Spectrum (FHSS)
Direct-sequence Spread Spectrum (DSSS)
Orthoginal Frequency Division Multiplexing
(OFDM)
Link Aggregation
EtherChannel
Port Aggregation Protocol (PAgP)
On
Desirable
Auto
Link Aggregation Protocol (LACP)
IEEE 802.3ad
IEEE 802.1AX
On
Active
Passive
(config-if-range)# channel-group number mode
mode
(config-if-range)# interface port-channel
number
(config-if)# switchport mode trunk
(config-if)# switchport trunk allowed vlan
number(s)
CHAPTER FOUR
Wireless LAN (WLAN)
Wireless Personal Area Network (WPAN)
Wireless Wide Area Network (WWAN)
Industrial, Scientific and Medical (ISM) band:
2.4 GHz
Unlicensed National Information Infrastructure
(U-NII) band: 5 GHz
WiFi Standards
Number
Max
Throughput
Frequency
Backwards
Compatible
802.11
802.11a
802.11b
802.11g
802.11n
2 Mbps
54 Mbps
11 Mbps
54 Mbps
600 Mbps
b
a/b/g
802.11ac
802.11ad
1.3 Gbps
7 Gbps
2.4 GHz
5 GHz
2.4 GHz
2.4 GHz
2.4 & 5
GHz
5 GHz
2.4, 5 &
60 GHz
a/n
a/b/g/n/ac
Access point (AP)
Autonomous
Controller-based
Ad hoc mode
Independent basic service set (IBSS)
Infrastructure mode
Basic service set (BSS)
Extended service set (ESS)
Basic service area(BSA)
Extended service area (ESA)
Service set ID (SSID)
Active mode
Passive mode
Security mode
Wired Equivalent Privacy (WEP)
WiFi Protected Access (WPA)
Temporal Key Integrity Protocol (TKIP)
WPA2
IEEE 802.11i
Advanced Encryption Standard (AES)
Open authentication
Shared key authentication
Personal mode
Enterprise mode
802.1X
RADIUS
Extensible Authentication Protocol (EAP)
Spoof disconnect
Clear to Send (CTS) flood
Rogue AP
Man-in-the-middle (MITM)
SSID cloaking
MAC address filtering
CHAPTER FIVE
Open Shortest Path First (OSPF)
OSPFv2
OSPFv3
Static routing
Dynamic routing
Variable Length Subnet Mask (VLSM)
Classless Interdomain Routing (CIDR)
Router ID (RID)
Topologies
Point-to-point
Broadcast multiaccess
Nonbroadcast multi-access (NBMA)
Point-to-multipoint
Virtual links
For broadcast multi-access only:
Designated Router (DR)
Backup designated router (BDR)
DROTHER
Adjancency
Link state advertisement (LSA)
Link state database (LSDB)
Hello
FULL
2-WAY
Show ip ospf neighbor
Show ip protocols
Show ip ospf interface
Show ip ospf interface brief
Ip ospf priority value
Ipv6 ospf priority value (Value = 0 to 255)
Clear ip ospf process
Ip route 0.0.0.0 0.0.0.0 (ip address | exit intf)
Ipv6 route ::/0 (ip address | exit intf)
Default information originate
Show ip route
Ip ospf hello-interval seconds
Ip ospf dead-interval seconds
Ipv6 ospf hello-interval seconds
Ipv6 ospf dead-interval seconds
Passive-interface
Ip mtu size
Ipv6 mtu size
OSPF Authentication
Null
Simple password
Message Digest 5 (MD5)
Ipv6 ospf authentication ipsec spi
Ip ospf message-digest-key key md5 password
Area area-id authentication message-digest
OSPF Problems
Neighbor adjacencies
Missing routes
Path selection
CHAPTER SIX
Reasons for Multiarea OSPF
Large routing table
Large LSDB
Frequent SPF algorithm calculations
Backbone (transit) area
Regular (non-backbone) area
Internal router
Backbone router
Area Border Router (ABR)
Autonomous System Boundary Router (ASBR)
LSA Type
1
2
3
4
5
Description
Router LSA
Network LSA
Summary LSA (ABR)
Summary LSA (route
to ASBR)
AS external LSA
O – intra-area route
O IA – interarea route from ABR
O E1 or O E2 – external route
E1 counts both internal and external route cost
E2 counts only external route cost
Route summarization
summary-address address mask (ASBRs only)
Ipv4: area area-id range address mask (ABRs)
Ipv6: area area-id range prefix/prefix-length
ABRs)
CHAPTER SEVEN & EIGHT
Enhanced Interior Gateway Routing Protocol
(EIGRP)
Link-state
Distance vector
Advanced distance vector
Diffusing Update Algorithm (DUAL)
Reliable Transport Protocol (RTP)
Protocol Dependent Module (PDM)
Neighbor table
Topology table
Routing table
EIGRP Packets
Multicast EIGRP – 224.0.0.10
Multicast EIGRP – FF02::A
Hello
Acknowledgement
Update
Query
Reply
Hold timer
Slow NBMA – hello = 60; hold = 180
T1 or faster – hello = 5; hold = 15
Router eigrp autonomous-system
Eigrp route-id ipv4-address
Network ipv4-network-address (classful)
Network ipv4-network-address wildcard-mask
(classless)
Passive-inteface
Show ip eigrp neighbors
EIGRP metrics
Bandwidth
Delay
Reliability
Load
Default K values
K1 = 1
K2 = 0
K3 = 1
K4 = 0
K5 = 0
Default composite formula –
Metric = (K1 * bandwidth + K3* delay) * 256=
(bandwidth + delay) * 256
Complete composite formula –
Metric = [(K1 * bandwidth + ((K2 *
bandwidth)/(256 -load)) + K3* delay )*
K5/(reliability + K4)]*256
(config-router)# metric weights tos k1 k2 k3 k4
k5
(config-if)#bandwidth bandwidth
Media
Ethernet
Fast Ethernet
Gigabit Ethernet
T1 (or slower)
Delay
1,000
100
10
20,000
Successor
Feasible distance (FD)
Feasible successor (FS)
Reported distance (RD) or advertised distance
(AD)
Feasible or feasibility condition (FC)
Show ip eigrp topology
Show ip eigrp topology all-links
P – passive state
A – active state
Finite State Machine (FSM)
Debug eigrp fsm
Ipv6 router eigrp autonomous-system
Ipv6 unicast-routing
(config-if)# ipv6 eigrp autonomous-system
(config-router)# (no) auto-summary
(config-if)# ip summary-address eigrp
autonomous-system network-address subnet
mask
D- EIGRP route
EX – external redistributed route
Redistribute static
(config-if)# ip bandwidth-percent eigrp
autonomous-system percent (50 is default)
(config-if)# ipv6 bandwidth-percent eigrp
autonomous-system percent (50 is default)
Ip hello-interval eigrp autonomous-system
seconds
Ip hold-time eigrp autonomous-system seconds
(config-router)# maximum paths value (4 is
default, up to 32, 1 = no load balancing)
(config)# keychain name-of-chain
(config-keychain)# key key-id
(config-keychain-key)# key-string key-string-text
CHAPTER NINE
Cisco Internetwork Operating System (IOS)
Old IOS packaging – different images for
different feature sets
Numbered by model, series, version, release
New IOS packaging – one universal image, with
different activation keys for different features
System changed with Integrated Series Routers
Generation 2 (ISR G2)
1900, 2900, 3900 series
Unique device identifier (UDI)
UDI = Product ID (PID) + serial number (SN)
Product Authorization Key (PAK)
PAK + UDI needed for unique license key file
from Cisco.com
Show license udi
License install url
Reload
Cisco License Manager (CLM)
Technology package licenses
Ipbasek9 (IP base)
Datak9 (data)
Uck9 (unified communications)
Securityk9 (security)
Show license
Show license feature
Show version
License boot module (evaluation license)
IOS versions jumped from 12.4 to 15 – no 13 or
14.
Trains
Mainline – bug fixes, maintenance deployment
(MD)
Example: 12.4
T Train
New hardware/software support features
Early deployment (ED)
Example: 12.4(T)
Train number
Maintenance identifier
Rebuild identifier
12.4(21a) – 12.4 is train, 21 is maintenance
identifier, a is rebuild identifier
Starting with 15, M train is mainline
15.0(1)M1
15 is major release
.0 is minor release
(1) Is new feature
M1 is M train rebuild
Cisco System Image Packaging
IP Base
IP Voice
Advanced Security
SP Services
Enterprise Base
Advanced IP Services
Enterprise Services
Advanced Enterprise Services
Show flash
C1900-universalk9-mz.SPA.152-4.bin
C1900 is series number
Universalk9 is feature set
M – runs from RAM
Z -zip compression
SPA – signed by Cisco for authenticity
F – runs from flash
R – runs from ROM
L – relocatable
X – mzip compression
Copy source-url destination url
Boot system
Copy running-config startup-config