Ccnp Switch

Front 1

What are the three layers in the Cisco Enterprise Hierarchical Design Model?

Back 1

access, distribution, and core

Front 2

Explain the role of the access layer in the three-layer model.

Back 2

Provides access to users and end devices. High availability, converged network support, QoS, PoE, FHRP, multicast support, and security such as Dynamic ARP inspection, DHCP snooping, IP source guard, BPDU guard, portfast, and port-securtiy

Front 3

Explain the role of the distribution layer in the three-layer model.

Back 3

Provides availability, QoS, fast path recovery, and load balancing.
Segmentation and isolation of workgroups and departments using a combination of layer 2 or layer 3.

Front 4

Explain the role of the core layer in the three-layer model.

Back 4

Reduced complexity in the core
high speed and high port density.

Front 5

What are the three layers to the Cisco Service Orientated Network Architecture (SONA)

Back 5

Network Infrastructure, Interactive Services, Applications

Front 6

What are the phases to the Cisco PPDIOO Lifecycle?

Back 6

Prepare, Plan, Design, Implement, Operate, Optimize.

Front 7

What are the steps involved in configuring a vlan on a access switchport.

Back 7

(config-if)# switchport mode access
(config-if)# switchport access vlan 12

Front 8

What are the five DTP modes on a trunked interface?

Back 8

Access, Trunk, Non-negotiate, Dynamic Desirable, Dynamic Auto

Front 9

How is the native VLAN configured on a trunked interface.

Back 9

(config-if)# switchport trunk native vlan <vlan-no>

Front 10

How do you specify which VLANs are allowed over a trunked interface?

Back 10

(config-if)# switchport trunk allowed vlan <vlans>

Front 11

What happens when a VTP advertisement has a higher configuration revision number than the local VTP database?

Back 11

The switch overwrites its database with the new VLAN information and forwards

Front 12

What are the three modes VTP can be configured for?

Back 12

Server, Client, and Transparent

Front 13

Which modes of VTP would you expect to find a vlan.dat file saved on the flash of the device?

Back 13

Server and Transparent

Front 14

T/F - transparent does not participate in any way

Back 14

False - Transparent will still forward VTP advertisements but will not learn the VLANs being propagated using VTP. the switch maintains its own database.

Front 15

What is performed on a switchport by issuing the macro "switchport host"

Back 15

the port is set to access mode, PortFast is enabled, and etherchannel membership is disabled.

Front 16

When a switch receives a VTP advertisement with a lower configuration revision number, does it:

- Update its own database with the information found in the update
- Ignore it
- Replies with the more up-to-date information from its own database

Back 16

Replies with the more up-to-date information in its own database.

Front 17

what does a standard VTP configuration that sets the switch to a VTP server, the domain as cisco, the password as cisco, and the VTP version to version 2 look like?

Back 17

(config)# vtp server
(config)# vtp domain cisco
(config)# vtp password cisco
(config)# vtp version 2

Front 18

What verification command will show you the current VTP version, configuration revision number, the VTP operating mode, the VTP domain name, the VTP pruning mode, and additional information about the current vtp status?

Back 18

# show vtp status

Front 19

What steps should be taken before introducing a new switch into an existing VTP domain?

Back 19

1) Erase its flash memory and config file
2) Set it to a fake VTP domain name in client mode
3) Reboot the switch
4) Configure the correct VTP settings
5) connect the switch to the network and verify that it learned the correct VLANs

Front 20

What command can change the load-balancing method for etherchannels?

Back 20

(config)# port-channel load-balance <type>

Front 21

What methods of load balancing are available?

Back 21

src mac, dst mac, src-dst mac, src IP, dst IP, src-dst IP, src port, dst-port, src-dst port

Front 22

what two protocols are available for configuring etherchannels?

Back 22

PAgP and LACP

Front 23

what are the modes of PAgP?

Back 23

On - uses PAgP without negotiation
Auto - responds to PAgP messages but does not initiate. This is the default mode
Desirable - will actively negotiate with the other side to bring up the port channel

Front 24

What are the modes of LACP?

Back 24

On - uses LACP without negotiation
Active - will actively attempt to negotiate LACP with the other side
Passive - will respond to LACP messages but not actively advertise them

Front 25

What enable mode command can show you the total number of configured channel-groups, the port-channels, and their member interfaces?

Back 25

show etherchannel summary

Front 26

What enable mode command will show you the current load-balancing method in use?

Back 26

# show etherchannel load-balance

Front 27

What must be selected on each switch during a spanning tree convergence?

Back 27

- One root bridge
- One root port per nonroot bridge
- One designated port per network segment

Front 28

What is the spanning tree election criteria?

Back 28

1) Lowest root bridge ID (BID)
2) Lowest path cost to the root
3) Lowest sender bridge ID
4) Lowest sender Port ID (combination of a port priority and the interface number - default port priority being 128)

Front 29

What is the default bridge priority?

Back 29

32768 ( + VLAN ID in PVST+)

Front 30

Where does the Bridge ID value come from?

Back 30

The combination of bridge MAC address and bridge priority. The lowest value is the most preferred and determines the root bridge. If all bridge priorities are identical than the lowest MAC address of all bridges is used as the tie breaker.

Front 31

How is path cost determined on Cisco switches?

Back 31

According to bandwidth. The lower the bandwidth the lower the path cost.

Front 32

What are some common path cost values?

Back 32

10 Mbps - 100
100 Mbps - 19
1000 Mbps - 4
10 Gbps - 2

Front 33

T/F - all switches generate Configuration BPDUs

Back 33

False - only the root bridge

Front 34

T/F - all switches generate topology change notifications

Back 34

True

Front 35

TCN BPDUs are sent by a downstream switch towards the root when:

Back 35

- There is a link failure
- The port starts forwarding, and there is already a designated port
- The receives a TCN from a neighbor

Front 36

What is the default BPDU hello time?

Back 36

Two seconds

Front 37

What is the default BPDU forward delay?

Back 37

15 seconds

Front 38

What is the default BPDU max age?

Back 38

20 seconds

Front 39

What are the four 802.1D port states?

Back 39

Blocking, Listening, Learning, and Forwarding

Front 40

Does the port learn MAC addresses when the port is in a listening state?

Back 40

No

Front 41

How do you configure the spanning tree root bridge?

Back 41

(config)# spanning-tree vlan <vlan-id> root primary

Front 42

How do you configure a manual port cost on an interface?

Back 42

(config-if)# spanning-tree vlan <vlan-id> cost <value>

Front 43

What is PortFast and how is it configured?

Back 43

(config-if)# spanning-tree portfast

Per port

(config)# spanning-tree portfast default

Globally

PortFast does not disable spanning-tree on an interface but the interface immediately transitions to the forwarding state. If the port receives a BPDU it will go through the listening and learning modes.

Front 44

what are the modified port states in Rapid Spanning Tree?

Back 44

Discarding, Learning, and Forwarding

Front 45

What are the port roles in RSTP?

Back 45

Root - same
Designated - same
alternate - backup to the root port
Backup - backup to desigated
Disabled - does not participant in spanning tree
Edge - same as Portfast

Front 46

What are the differences between RSTP and 802.1D STP?

Back 46

- In RSTPs each bridge switch originates BPDUs whether or not it receives a BPDU on its root port from the root bridge
- All eight bits of the BPDU type field are used in RSTP. The TC and TC Ack bits are a carryover from 802.1D, and the other six bits specify the port's role an its RSTP state and are used in the port handshake.
- The RSTP BPDU is set to Type 2, Version 2.

Front 47

How does RSTP provide fast convergence?

Back 47

- When an inferior BPDU is received, the bridge accepts it. If the switch has another path to the root, it uses that and informs the downstream switch of the alternative path (similar to BackBoneFast).
- Edge ports function the same as PortFast immediately transitioning to forwarding.
- If you connect two switches through a point-to-point link and the local port becomes a designated, it exchanges a handshake with the other port to quickly transition to forwarding. Full-duplex links are assumed to be point-to-point, and half-duplex links are assumed to be shared.
- Ports that can transition to forwarding when no BPDUs are received from a neighbor switch (similar to uplink fast)

Front 48

What command enables rapid spanning-tree?

Back 48

(config)# spanning-tree mode rapid-pvst

Front 49

How is MST configured?

Back 49

(config)# spanning-tree mode mst
(config)# spanning-tree mst configuration
(config-mst)# name <region_name>
(config-mst)# revision <number>
(config-mst)# instance number <vlan> <vlan_range>

Front 50

How is UplinkFast enabled?

Back 50

(config)# spanning-tree uplinkfast

Front 51

How does UplinkFast work and what problem does it solve for 802.1D spanning tree?

Back 51

Identifies backup to the root port. If the root port fails, one of the ports in the uplink group is unblocked and transitions immediately to forwarding; it bypasses the listening and learning stages. This reduces the delay in re-convergence after a link failure.

Front 52

How is BackboneFast enable?

Back 52

(config)# spanning-tree backbonefast

Front 53

What problem does BackboneFast solve and how does the feature function?

Back 53

Used to detect indirect link failures. If the BackboneFast bridge receives an inferior BPDU from its designated bridge, it knows a link on the path to the root has failed. The switch then sends a root link Query (RLQ) frame out all alternate ports. The root then responds with an RLQ response and the port receiving the response can transition to forwarding.

Front 54

How are alternate ports determined when BackboneFast is enabled?

Back 54

- If the inferior BPDU is received on a blocked port, the root port and any other blocked ports are considered alternatives.
- If the inferior BPDU was received on the root port, all blocked ports are considered alternatives
- If the inferior BPDU was received on the root port and there are no blocked ports, the switch assumes it has lost connectivity to the root and advertises itself as root.

Front 55

What is BPDU Guard?

Back 55

If a BPDU frame is received on a port, the port is put into err-disabled state (by default this is shutdown)

Front 56

What are the two ways that BPDU Guard can be configured?

Back 56

Globally -

(config)# spanning-tree portfast bpduguard default

Per interface -

(config-if)# spanning-tree bpduguard enable

Front 57

What is BPDU Filtering?

Back 57

It depends on where the feature is enabled. If enabled globally, the interface will be removed from PortFast status if a BPDU is received:

(config)# spanning-tree portfast bpdufilter default

If configured at the interface level it prevents the port from sending or receiving any BPDUs:

(config-if)# spanning-tree bpdufilter enable

Front 58

How does root guard function?

Back 58

If any non-root port receives a BPDU that would cause that port to become a root port, the port is put into a "root-inconsistent" state and does not pass traffic through it. If the port stops receiving these BPDUs it will automatically re-enable itself.

Front 59

How do you configure Root Guard?

Back 59

(config-if)# spanning-tree guard root

Front 60

What problem does Unidirectional Link Detection solve?

Back 60

Unidirectional link failures typically caused by when one laser/LED fails in a fiber SFP or GBIC.

Front 61

How do you enable UDLD on all fiber-optic interfaces?

Back 61

(config)# udld [enable | aggressive]

Front 62

T/F - You can use UDLD on copper interfaces?

Back 62

False - only fiber interfaces

Front 63

How do you enable UDLD on a specific fiber port?

Back 63

(config-if)# udld port {aggressive | disable}

Front 64

How is Loop Guard enabled?

Back 64

Globally:

(config)# spanning-tree loopguard default

Interface:

(config-if)# spanning-tree guard loop

Front 65

What problem does LoopGuard solve?

Back 65

If a blocking port stops receiving BPDUs, the port is placed into a loop-inconsistent mode instead of moving to forwarding.

Front 66

What are the processing steps for layer 2 forwarding?

Back 66

Input:

1) Recieve frame
2) Verify frame integrity
3) Apply inbound VLAN ACL
4) Lookup destination MAC

Output:

1) Apply outbound VLAN ACL
2) Apply outbound QoS ACL
3) Select Output port
4) Place in port queue
5) Rewrite
6) Forward

Front 67

What are the processing steps for Layer 3 forwarding?

Back 67

Input

1) Receive frame
2) Verify frame integrity
3) Apply inbound VACL
4) Look up destination MAC

Routing
1) Apply input ACL
2) Switch if entry is in CEF cache
3) Identify exit interface and next-hop address using routing table
4) Apply output ACL

Output
1) Apply outbound VACL
2) Apply outbound QoS ACL
3) Select output port
4) Place in interface queue
5) Rewrite source and destination MAC, IP checksum, and frame check sequence, and decrement TTL (time-to-live field in the IP header)
6) Forward

Front 68

How do you exclude the status of a particular interface from determining the status of SVI, what command can you execute on the interface?

Back 68

(config-if)# switchport autostate exclude

Front 69

What configuration steps are necessary to enable an SVI?

Back 69

(config)# ip routing
(config)# vlan 3
(config)# interface vlan 3
(config-if)# ip add 10.3.3.3 255.255.255.0

Front 70

How do you configure a switchport as a layer 3 interface?

Back 70

(config-if)# no switchport

Front 71

What are the three types of Switch Forwarding architectures?

Back 71

- Process switching: each packet must be examined by the CPU and handled in software. Slowest method
- Fast Switching: the CPU switches the first packet in each flow, then caches that information and switches subsequent packets in the hardware. Also called route caching
- Cisco Express Forwarding (CEF): A table is prebuilt with adjacency information for all destinations and routing table. Fastest method, and the default on Cisco switches and routers. Also called topology-based switching.

Front 72

What two tables make up CEF?

Back 72

The FIB and the adjacency table

Front 73

What commands can you use to view the contents of CEF?

Back 73

# show ip cef {interface} {detail}
# show ip cef fastethernet 2/2 10.0.0.1 detail

Front 74

What command will help you troubleshoot CEF drops?

Back 74

# show cef drop

Front 75

What command will show the adjacency table?

Back 75

# show adjacency

Front 76

What are some technologies that will help improve redundancy?

Back 76

- Cisco Nonstop Forwarding (NSF)
- Stateful Switchover (SSO)
- Stackwize technology on 3750
- Virtual Switch System (VSS)
- Monitoring tools such as SNMP and Syslog
- IP Service Level Agreement (SLA)

Front 77

When using Layer 2 for the links between the access layer and distribution layer, what requirements need to be met?

Back 77

The same switch must be configured as FHRP active and STP root.

Front 78

What are the eight severity levels in syslog?

Back 78

Emergency, Alert, Critical, Error, Warning, Notice, Informational, Debugging

Front 79

What are the three SNMPv3 security levels?

Back 79

noAuthnoPriv
authNoPriv
authPriv

Front 80

What is a sample SNMP configuration on a Cisco device?

Back 80

(config)# access-list 1 permit 10.1.1.1
(config)# snmp-server community ccnp ro
(config)# snmp-server community c1sc0 rw 1
(config)# snmp-server host 10.1.1.2 traps admin

Front 81

What is a sample configuration for IP SLA?

Back 81

(config)# ip sla 1
(config-ip-sla)# udp-jitter 10.1.1.3 65422 coded g729a
(config-ip-sla-jitter)# frequency 120
(config-ip-sla-jitter)# exit
(config)# ip sla schedule 1 life forever start-time now

Front 82

What is the virtual router's MAC for HSRP?

Back 82

0000.0c07.ACxx where xx is the HSRP group.

Front 83

What IP and port does HSRP traffic use?

Back 83

224.0.0.2 and UDP port 1985

Front 84

What is the default HSRP priority?

Back 84

100

Front 85

What happens if the HSRP members both have the default priority (100) configured?

Back 85

The highest configured IP address wins the election.

Front 86

What HSRP states are there?

Back 86

- Initial
- Learn
- Listen
- Speak
- Standby
- Active

Front 87

What an example HSRP configuration?

Back 87

(config-if)# standby 39 ip 10.0.0.1
(config-if)# standby 39 authentication md5 key-string cisco
(config-if)# standby 39 priority 150
(config-if)# standby 39 priority delay minimum 90
(config-if)# standby timers 1 3

Front 88

T/F - you can use an IP SLA as a HSRP track object

Back 88

True - you can create an IP SLA and then specify that object when configuring the standby track command:

(config)# ip sla 5
(config-ip-sla)# udp-jitter 172.17.1.2 16000
(config)# track 10 rtr 5
(config-if)# int fa 1/0/15
(config-if)# standby 39 track 10 decrement 50

Front 89

What are the differences in VRRP vs HSRP.

Back 89

VRRP uses a different IP multicast address and port:

224.0.0.18 and UDP port 112

VRRP uses lower timers by default : 1 second Hello and 3 Second Dead

Front 90

T/F - VRRP cannot track interfaces but can track IP SLA group objects.

Back 90

True

Front 91

How GLBP achieving load-balancing?

Back 91

All hosts (up to four) share the same virtual IP, but each router has its own virtual MAC address. The Active Virtual Gateway (AVG) responds to ARP requests for the VIP with different cluster members virtual MAC address in the order configured.

Front 92

What load-balancing methods are supported by GLBP?

Back 92

Weighted load-balancing, host-dependent load-balancing, round-robin load balancing

Front 93

What's a basic GLBP configuration look like?

Back 93

(config-if)# glbp 39 ip 10.0.0.1
(config-if)# glbp 39 priority 150

Front 94

What command can verify a HSRP deployment and status?

Back 94

# show standby interface <interface>

Front 95

What are the four typical switched attacks?

Back 95

- MAC Address-based attacks (flooding)
- VLAN-based attacks (vlan-hopping)
- Spoofing attacks: DHCP spoofing, MAC spoofing, ARP spoofing, and Spanning-tree attacks
- Attacks against the switch - CDP, telnet, SSH attacks

Front 96

How do you enable port-security on an interface?

Back 96

(config-if)# switchport port-security

Front 97

How do you specify the max number of MAC addresses an interface can learn?

Back 97

(config-if)# switchport port-security maximum <integer>

Front 98

How do you specify what the violation will result in for port-security is enabled?

Back 98

(config-if)# switchport port-security violation {shutdown | restrict | protect}

Front 99

What does "stickiness" provide?

Back 99

Allows the interface to dynamic learn MAC addresses, but the MAC address is "attached" to the interface for a period.

Front 100

How do you verify port-security?

Back 100

# show port-security interface fa 1/0/15

Front 101

How do you configure port-based authentication?

Back 101

(config)# aaa new-model
(config)# aaa authentication dot1x default group radius
(config)# dot1x system-auth-control
(config-if)# dot1x port-control [auto | force-authorized | force-unauthorized]

Front 102

What possible actions exist for a VACL?

Back 102

forward, drop and redirect

Front 103

What is a small example of a VACL config?

Back 103

(config)# vlan access-map Drop101 10
(config-access-map)# match ip address 101
(config-access-map)# action drop
(config)# vlan access-map Drop101 20
(config-access-map)# action forward

(config)# vlan filter Drop101 vlan-list 10

Front 104

What commands can be used to verify a VACL configuration?

Back 104

# show vlan access-map <vacl_name>
# show vlan filter access-map <vacl_name>

Front 105

What is a private VLAN?

Back 105

A private VLAN is a secondary VLAN that can provide layer 2 isolation for host on the same VLAN.

Front 106

What are the type types of secondary VLANs used in a private VLAN?

Back 106

community and isolated

Front 107

What are the three port types in a private VLAN environment?

Back 107

community, isolated, and promiscuous

Front 108

How do you specify the VLAN type for a PVLAN config?

Back 108

(config)# vlan 10
(config-vlan)# private-vlan {community | isolated | primary}
(config)# vlan <primary-vlan-id>
(config-vlan)# private-vlan association <secondary_vlan_list>

Front 109

What's a simple command to run on lower end Cisco platforms for port security?

Back 109

(config-if)# port protected

Front 110

What is an example of DHCP snooping configuration

Back 110

(config)# ip dhcp snooping

- Enables feature globally

(config)# ip dhcp snooping information option

- Enable DHCP option 82

(config)# ip dhcp snooping vlan number <vlan>

- Enables DHCP snooping on a VLAN

(config-if)# ip dhcp snooping trust

- Enables a switchport as trusted such as a DHCP server or a trunked interface

(config-if)# ip dhcp snooping limit <pkts-per-second>

- Specifies a threshold in pps for DHCP traffic

Front 111

What is the benefit of DHCP snooping?

Back 111

Monitors the DHCP requests and responses between a DHCP client and a DHCP server. This prevents rogue DHCP servers from handing out fraudulent addresses to unsuspecting victim machines.

Front 112

What is IP source guard?

Back 112

IP source guard creates a dynamic port ACL based on the DHCP snooping table. The source IP in the ACL is defined by the IP that was assigned using DHCP (again found in the DHCP snooping table).

Front 113

How do you enable port-security?

Back 113

It is enabled on the interface level with the command:

(config-if)# ip verify source port-security

Front 114

ARP Inspection is enabled globally once the feature is turned on - T/F

Back 114

False - is is enabled per VLAN with the command:

(config)# ip arp inspection vlan <vlan-id>

Front 115

How is a port configured as a trusted port?

Back 115

(config-if)# ip arp inspection trust

Front 116

What are the some best practices for securing your switch?

Back 116

- Use strong passwords
- Do no use Telnet
- Use SSH
- Disable unneeded services (finger, tcp/udp small-servers, service config, HTTP server)
- physically secure access to the device
- User banners
- Disable CDP on unneeded ports
- Disable trunking on all nontrunked ports
- Setup syslog monitoring

Front 117

What are network and bandwidth considerations for VoIP deployments?

Back 117

- Max delay of 150-200 ms one way
- No more than 1 percent packet loss
- max average jitter of 30 ms
- Bandwidth of 21-106 Kbps per call, plus approximately 150 bps per phone for control traffic

Front 118

Define the following QoS term:

Classification

Back 118

Distinguish one type of traffic from another.

Front 119

Define the following QoS term:

Marking

Back 119

At Layer 2, an 802.1p CoS value within the 802.1Q frame tag. At layer 3, setting IP precedence or Differentiated Service Code Point (DSCP) values in the packet's IP header.

Front 120

Define the following QoS term:

Policing

Back 120

Determining whether a specific type of traffic is within preset bandwidth limits.

Front 121

Define the following QoS term:

Traffic shaping and conditioning

Back 121

Attempts to send traffic out in a steady stream at a specified rate. Buffers traffic that goes above that rate and sends it when there is less traffic on the line.

Front 122

Define the following QoS term:

Queueing

Back 122

After the traffic is classified and marked, one way it can be given is to be put into different queues on the interface to be sent out at different rates and times. The default queuing method for a switchport is FIFO.

Front 123

Define the following QoS term:

Dropping

Back 123

Normally interface queues accept packets until they are full and then drop everything after that.

Front 124

What 802.1p bits are usually used for Voice when configuring VoIP?

Back 124

Five (Four for video)

Front 125

What is the difference between IP precedence and DSCP?

Back 125

The IP precedence bits are the top 3 bits and DSCP uses the top 6 bits. The bottom two DSCP bits are set aside for congestion notification. The default DSCP value is 0, which corresponds to best-effort delivery.

Front 126

What DSCP value typically uses what value for voice?

Back 126

DSCP 46 (Expediated Forwarding)

Front 127

Define QoS Trust Boundaries

Back 127

Defines how the switch will handle traffic that has already been marked.

Front 128

What options are available for trust in QoS?

Back 128

- Trust the DSCP value in the incoming packet
- Trust the IP precedence value in the incoming packet
- Trust the CoS value in the incoming frame
- Classify the traffic based on the IP access list or a MAC access list

Front 129

What a simple configuration for voice on a Cisco switchport?

Back 129

(config-if)# switchport voice vlan <vlan-id>
(config-if)# mls qos trust {dscp | cos}
(config-if)# mls qos trust device cisco-phone
(config-if)# switchport priority extend cos <cos-value>

Front 130

What does AutoQoS provide?

Back 130

- Automatic discovery and classification of network applications
- Creates QoS policies for those applications
- Configures the switch to support Cisco IP phones and network applications. Manual configuration can also be done afterward.
- Sets up SNMP traps for network reporting
- Configures consistently across your network when used on all routers and switches.

Front 131

What commands enable Auto QoS for a Cisco IP phone.

Back 131

(config-if)# auto qos voip trust

configured the port to trust the CoS on all traffic entering the port.

(config-if)# auto qos voip cisco-phone

configured the port to trust traffic marking only if a Cisco phone is connected to the port. Requires that CDP be enabled

Front 132

What are some characteristics of Wireless LANs?

Back 132

WLANs use Carrier Send Multi-Access/Collision Avoidance (CSMA/CA).
Wireless data is half-duplex.
Radio waves have unique potential issues such as interference, distortion, and noise.
WLAN hosts have no physical network connection.
WLAN must adhere to each country's RF standards.

Front 133

How much overlap is recommended between two access points?

Back 133

20%

Front 134

What are two types of Access Points (APs)

Back 134

Autonomous and Lightweight

Front 135

What is "split mac"

Back 135

Splitting layer 2 802.11 processing between the AP and a Cisco Wireless LAN controller (WLC).

Front 136

What is the management components of a Cisco Wireless solutions?

Back 136

Wireless Control System (WCS)

Front 137

What are functions that the WLC handle?

Back 137

- Authentication
- Client association/mobility management
- Security management
- QoS policies
- VLAN tagging
- Forwarding of user traffic

Front 138

What are two protocols that support the split mac protocols between the lightweight AP and its controller?

Back 138

Lightweight Access Point Protocol (LWAPP) and Control and Provisioning of Wireless Access Points (CAPWAP) protocol

Front 139

What is the WLC discover process that the lightweight AP uses to associate to a given WLC?

Back 139

- The AP requests a DHCP address. The DHCP response includes the management IP address of one or more WLCs.
- The AP sends an LWAPP or CAPWAP Discovery Request to each WLC.
- The WLC responds with an LWAPP or CAPWAP Discovery Response that includes the number of APs currently associated with it.
- The AP sends a Join Request to the WLC with the fewest APs associated to it.
- The WLC responds with a Join Response message; the AP and the controller mutually authenticate each other and derive encryption keys to be used with future control messages. The WLC then configures the AP with settings, such as SSIDs, channels, security settings, 802.11 parameters.

Front 140

What is H-REAP and what problem does it solve?

Back 140

H-REAP stands for Hybrid Remote Edge Access Point. It's a protocol designed to allow a lightweight access point to continue to function if a WLC is unreachable. Of course, some features are unavailable or severely limited when the WLC is unreachable.

Front 141

What are some features to SNMP version 1?

Back 141

Five types of basic messages:

- Get Request
- Get Next Request
- Set Request
- Get Response
- Trap

Front 142

What are the eight syslog levels in order from most critical to least critical?

Back 142

Emergency (level 0)
Alert
Critical
Error
Warning
Notice
Informational
Debugging (Level 7)

Front 143

What are some features of SNMP version 2?

Back 143

- Get Bulk Request
- Inform Request (acknowledged trap)
- Data types with 64-bit values

Front 144

What are some features of SNMP version 3?

Back 144

Authentication and privacy
Authorization and access control
Usernames and key management
Remotely configurable via SNMP operations

Front 145

Which of the following cannot be configured when loop guard is enabled?

(config-if)# switchport mode access
(config-if)# switchport mode trunk
(config-if)# spanning-tree guard root

Back 145

(config-if)# spanning-tree guard root

Front 146

T/F - setting the trunk mode using the command:

(config-if)# switchport mode trunk

Disables DTP on the interface

Back 146

false - you must use the command:

(config-if)# switchport nonegotiate

To totally disable DTP on an interface

Front 147

What does the configuration statement

switchport mode trunk

configure the DTP mode to be?

Back 147

Always trunk my end, and I will send DTP to attempt to negotiate a trunk on the other end.

Front 148

What does the configuration statement:

switchport nonegotiate

configure the DTP mode to be?

Back 148

Says "Do not send or respond to DTP from this end. Disable all DTP on this port." (Best used on user access ports, when trunking to a non-cisco switch, when trunking to a router, or if you are paranoid about fast convergence)

Front 149

What does the configuration statement:

switchport mode dynamic desirable

configure the DTP mode to be?

Back 149

Says "Ask the other end to trunk using DTP and trunk if the negotiation succeeds. If DTP negotiation fails then become an access port."

Front 150

What does the configuration statement:

switchport mode dynamic auto

configure the DTP mode to be?

Back 150

If the other end asks me to be a trunk with DTP, then become a trunk, but I won't initiate any negotiation from this end. If no one asks me to become a trunk, I will become an access port.

Front 151

What does the configuration statement:

switchport mode access

mean?

Back 151

Never trunk on this end, and I will send out DTP to help my link partner reach the same conclusion.

Front 152

What does the configuration statement:

switchport trunk encapsulation

say?

Back 152

Do not negotiate the trunk protocol with DTP. Only use the trunk protocol specified in the command (ISL or dot1q)

Front 153

What is the one difference between enabled BPDUguard globally and per-port?

(config)# spanning-tree portfast bpduguard default

(config-if)# spanning-tree bpduguard enable

Back 153

Enabling BPDUguard globally enables BPDU on all portfast configured interfaces.

Enabling BPDUguard per-port enables BPDUguard regardless if PortFast is configured on that interface or not.

Front 154

What are the differences in enabling BPDUfilter globally and at the interface level?

(config)# spanning-tree portfast bpdufilter default

(config-if)# spanning-tree bpdufilter enable

Back 154

Configured globally bpdufilter only applies to portfast configured interfaces. The interface will still send a few BPDU frames at link up. If a BPDU is received on a Port-Fast enabled interface, the interface loses its Port Fast operational-status and BPDU filtering is disabled.

At the interface level, the command prevents the interface from sending or receiving BPDUs. Enabling BPDU filtering at the interface is the same as disabling spanning-tree on the interface and can result in a loop.

Front 155

Globally configuring portfast instead of per-port will result in what behavior change?

Back 155

PortFast will only be enabled on access ports, and if a BPDU is receive on a portfast globally enabled interface the interface will revert to standard STP status and proceed through all the port learning states.

Front 156

T/F - enabling portfast on an interface is unconditional and the port will remain in forwarding regardless of whether any BPDUs are received

Back 156

True

Front 157

What items can be specified for HSRP tracking?

Back 157

- An interface
- Ip route
- A list of objects
- IP SLA

Front 158

How many AVGs can can exist at one time?

Back 158

one

Front 159

How many members can be backup AVG in a GLBP group?

Back 159

Up to three, since there can be a max of four routers in a GLBP group. One will be the active AVG and the others will be backup AVGs.

Front 160

What states will the standby AVGs be in?

Back 160

One AVG will be in Standby and the others will be in the Listen state.

Front 161

What would cause a standby time expiry event?

Back 161

The hold time value is reached since seeing the expected hello packet

Front 162

What would cause a active timer expiry event?

Back 162

The timer expires in accordance with the hold time value that is set in the related field of the HSRP hello message.