In what order are <b>route-map </b>commands processed? 	Sequential order based on sequence numbers
What happens if a <b>route-map </b>clause omits the <b>match </b>command? 	All packets are matched.
What three things are a part of every route-map command (whether explicit or implicit)? 	Explicitly configured name<div>Action (permit / deny)</div><div>Unique sequence number</div>
When a route-map is used for redistribution, the route map processes routes taken from where? 	The then-current routing table
True or False: During route redistribution, after a particular route is matched by the route map, further route-map commands are processed for more matches. 	False: After a particular route is matched by the route map, it is not processed beyond that matching route-map command (specific to route redistribution).&nbsp;
Which&nbsp;<b>route-map </b>parameter determines whether or not a matched route is redistributed or not? 	The <b>permit </b>or <b>deny </b>parameter in the route-map statement. The route is redistributed when the route-map command has the <b>permit </b>parameter, and not redistributed when it has the <b>deny </b>parameter.
What is the result of this configuration:<div><br /></div><div><b>ip access-list standard d1p2</b></div><div><b>&nbsp; deny 1.0.0.0 0.255.255.255</b></div><div><b>&nbsp; permit 2.0.0.0 0.255.255.255</b></div><div><b><br /></b></div><div><b>route-map RM deny 10</b></div><div><b>&nbsp; match ip address d1p2</b></div> 	Network 1.0.0.0 is not considered<div>Network 2.0.0.0 is specifically denied</div>
During redistribution, what happens if a <b>route-map</b> clause with the <b>permit</b> parameter does not match any routes? 	The routes are processed by the next <b>route-map </b>clause, or not redistributed if there are no further clauses.
During redistribution, what happens when the <b>deny </b>parameter is used in the route-map clause? 	The routes are either filtered (if matched) or left in the list of routes to be examined by the next route-map clause (if not matched), if any.
During redistribution, if a route-map clause references an ACL containing a <b>deny </b>action, what happens to the route? 	The route is not filtered, it just doesn't match that particular route-map clause.
Route maps include an implicit deny all at the end. How do you configure an explicit permit all? 	Configure a clause at the end with a <b>permit </b>action, but no <b>match </b>statements.
What happens if more than one <b>match </b>statement is defined in a single route-map clause? 	The route is matched only if all of the <b>match </b>statements parameters match the route.
True or False: During route redistribution, a route-map can be used only to match (select) routes from the routing table. 	False: Routes <b>match</b>ed for redistribution can also have various attributes (such as the metric) <b>set</b> as the route is redistributed.
What routes does this prefix-list match?<div><br /></div><div><b>ip prefix-list PFX_TEN permit 10.0.0.0/8 ge 24 le 24</b></div> 	All routes whose first octet is 10 that have an exact prefix length of 24.
What routes does this prefix-list match?<div><br /></div><div><b>ip prefix-list PFX_TEN permit 10.0.0.0/8 le 24</b></div> 	All routes whose first octet is 10 that have a prefix length between 8 and 24, inclusive.
How can you match only a default route with a prefix list? 	<div><b>ip prefix-list </b><i>PFX_DEF</i><b> permit 0.0.0.0/0</b></div>
How can you match all routes with a prefix list? 	<div><b>ip prefix-list PFX_ALL permit 0.0.0.0/0 le 32</b></div>
When a router learns a particular route from multiple sources, why is Administrative Distance used to choose a single source? 	Routes from different sources (protocols) have different non-comparable metrics. The lowest AD is used to choose which route gets installed into the routing table when identical routes (prefix and length) are present from multiple sources.&nbsp;
What is the AD of a Connected route? 	0
What is the AD of a Static route? 	1
What is the AD of a EIGRP summary route? 	5
What is the AD of an eBGP route? 	20
What is the AD of an internal EIGRP route? 	90
What is the AD of an IGRP route? 	100
What is the AD of an OSPF route? 	110
What is the AD of an IS-IS route? 	115
What is the AD of a RIP route? 	120
Which route source has the lower AD, IS-IS or OSPF? 	OSPF is 110<div>IS-IS is 115</div>
What is the AD of an external EIGRP route? 	170
What is the AD of an iBGP route? 	200
What is the AD value of an infinite/unreachable route? 	255
How do you change the default administrative distance for a particular routing protocol? 	With the <b>distance </b>command under the particular routing protocol's subconfiguration.
True or False: Administrative Distance can be changed per-route. 	True. The <b>distance </b>command can be used under the subconfiguration of the particular routing protocol, and individual routes and ACLs can be referenced and modified.
True or False: The default Administrative Distance of OSPF can be changed per route type. 	True. With the <b>distance </b>command under the OSPF subconfiguration, individual route types (inter-area, intra-area, external) can have their AD value modified individually.
The ___ command identifies the routing source from which routes are taken, and the ___ command identifies the routing process into which the routes are advertised. 	<b>redistribute</b><div><b>router</b></div><div><b><br /></b></div><div>Example:</div><div><b>router rip</b></div><div><b>&nbsp; redistribute eigrp 1</b></div>
When redistributing BGP, IS-IS, OSPF, or RIP into EIGRP, what happens if the metric is not set? 	Routes from BGP, IS-IS, OSPF, or RIP will not be redistributed into EIGRP until a metric is set. You can specify different metrics per-route, per-protocol, or set a default metric. However, until a metric is configured (whether default or more specific), IOS accepts the redistribution commands, but will not actually redistribute the routes.
What is the AD of an ODR route? 	160
When redistributing static routes into RIP, what metric is applied if a default or more-specific metric is not set? 	Static routes are redistributed into RIP with a metric of 1 (directly connected), unless otherwise set with the default or more-specific metric.
When redistributing into OSPF, if the metric is not set, what happens? 	The routes are redistributed with an automatic default cost of 20 (IGP) or 1 (BGP) and are of route type E2.
With the exception of OSPF, what is the metric assigned to a redistributed route if none is specified (either through the <b>metric </b>keyword, or the <b>default-metric </b>subcommand)? 	The route will be redistributed with a metric of 0. A metric of 0 is incompatible with RIP and EIGRP. OSPF will assign a default metric of 20 (IGP) or 1 (BGP) unless otherwise specified.
When redistributing into OSPF, what happens if the <b>subnets </b>keyword is not used? 	Only major (classful) networks are redistributed. For example, if the source protocol contained the prefix 172.16.10.0/24 to be redistributed, it will be redistributed as 172.16.0.0/16 without the <b>subnets </b>keyword.
True or False: When redistributing into EIGRP, only the metric values (K-values) that are used are required to be set. 	False. All EIGRP metric values must be set when redistributing into EIGRP, regardless of the K-values settings.
During redistribution, what are the two sources of the redistributed routes? 	Routes from the source protocol in the then-current IP routing table<div><br /></div><div>Connected routes matched by the source routing protocol's <b>network </b>statements.</div>
True or False: When redistributing a routing protocol, any Connected routes matched by the source protocol's <b>network </b>statements are automatically redistributed as well. 	True
What are the three methods for setting the metrics of redistributed routes in Cisco IOS? 	-Reference a route-map from the <b>redistribute </b>command that uses the <b>set metric </b>command<div><br /></div><div>-Use the <b>metric </b>option with the <b>redistribute </b>command</div><div><br /></div><div>-Use the <b>default-metric </b>command under the <b>router </b>command</div>
Which redistribution method allows you to set metrics per-route with a single command? 	Using the <b>redistribute </b>command that references a route-map.
Which redistribution method most easily lets you set the same metric for all routes redistributed by that <b>redistribute </b>command? 	Using the <b>metric </b>option on the <b>redistribute </b>command.
Which redistribution method allows you to set the metric for all redistributed routes whose metric was not set by another method? 	The <b>default-metric </b>command under the <b>router </b><i>protocol</i><b>&nbsp;</b>process.
What does the <b>metric-type </b>option in the <b>redistribute </b>command do? 	The <b>metric-type </b>option lets you set the route type of the redistributed routes. For example, OSPF defaults to E2 routes, but you can use the <b>metric-type </b>option to force the redistributed routes to be E1 instead.
How can you verifiy if a tag was set on a route redistributed into EIGRP? 	<b>show ip eigrp topology </b><i>route </i><b><i>| </i>include tag</b>
How can you verify if a tag was set on a route redistributed into OSPF? 	<b>show ip ospf database external </b><i>route </i><b>| include Tag</b>
By default, all OSPF routes have an Administrative Distance value of 110. How do you modify OSPF so that all routes redistributed into OSPF have an AD value of 180? 	<b>router ospf </b><i>process</i><div><i>&nbsp; </i><b>distance ospf external 180</b></div>
When multiple routers are peforming mutual routing protocol redistribution, what can be a cause of suboptimal routing? 	A route redistributed into a lower-AD protocol by one router will be learned by another router, which will then use that redistributed route instead of a potentially more optimal route presented by a higher-AD protocol.&nbsp;<div><br /></div><div>The solution, where possible, is to mark the redistributed routes with a higher AD value than the source protocol. For example, marking routes redistributed from RIP into OSPF with an AD of 180 will permit the more-optimal routes from the RIP domain to be used.</div><div><br /></div><div>EIGRP does this by default.</div>
During route redistribution, how can you modify the AD value of individual routes? 	Under the routing protocol process:<div><br /></div><div><b>distance </b><i>distance-value ip-address/RID wildcard </i>[<i>ACL</i>]</div><div><br /></div><div>Where <i>ip-address wildcard </i>is the source router that is advertising the routes (or RID in the case of OSPF), and an optional ACL to further define individual routes.</div>
A common method of preventing routing loops with mutual redistribution is to set route tags as the routes are redistributed, and then filter routes with those tags at the other points of redistribution. What is a primary disadvantage of doing this instead of adjusting the Administrative Distance of the redistributed routes? 	By filtering routes with the specified tags, the routes are never entered into the routing table, whereas when you set a higher Administrative Distance instead, the routes are still present but are not used unless the lower-AD route is removed from the routing table.
What is the tiebreaker when an OSPF router receives multiple E2 routes of the same prefix? 	The route with the lowest cost to the ASBR wins.
By default, what is the metric advertised by a summary route? 	The metric advertised by the summary is that of the current lowest-metric component subnet.
True or False: Component subnets are advertised along with the summary address by default. 	False, the router does not advertise the component subnets by default.
True or False: Summary routes are still advertised even if there are no component subnets in the current routing table. 	False, the router does not advertise the summary when its routing table does not have any of the component subnets.
How does a summarizing router prevent routing loops? 	The summarizing router creates a Local discard route to the summary, with destination Null0, to prevent routing loops.
Why does the possibility of suboptimal routing occur when summary routes are used? 	Summary routes decrease the amount of specific information in the routing tables, which can sometimes cause suboptimal routing.
How do you configure an EIGRP summary route? 	EIGRP summarization is configured on the interface in classic mode, or the af-interface in named mode:<div><br /></div><div><b>ip summary-address eigrp </b><i>ASN network mask</i></div>
How do you modify the AD of an EIGRP summary route? 	Under the EIGRP process:<div><br /></div><div><b>summary-metric </b><i>network mask AD</i></div><div><i><br /></i></div><div>In EIGRP named mode, this is configured under the topology.</div>
When an EIGRP summary route is created, its metric is copied from the component subnet with the current lowest metric by default. Why should you set this value manually? 	Even if the component route with the lowest metric remains the lowest, the summary metric is recalculated every time any individual component subnet metric changes, which adds to router overhead.<div><br /></div><div>Set the metric manually with the <b>summary-metric </b>command under the EIGRP process.</div>
How do you manually configure the metric used by an EIGRP summary route? 	Under the EIGRP process:<div><br /></div><div><b>summary-metric </b><i>network mask bandwidth delay reliability load mtu </i>[<b>distance </b><i>administrative-distance</i>]</div><div><br /></div><div>In EIGRP named mode, this is configured under the topology.</div>
Why can summarization in OSPF happen only on ABRs and ASBRs? 	OSPF routers in the same area must have identical LSDBs after flooding is complete, therefore all routers in an OSPF area must have the same summary routes, they all must be missing the same component subnets of each summary.<div><br /></div><div>OSPF allows route summarization only as routes are injected into an area by an ABR or ASBR.</div>
How do you configure an OSPF inter-area summary? 	Under the OSPF process:<div><br /></div><div><b>area </b><i>area </i><b>range </b><i>network mask </i>[<b>cost </b><i>cost</i>]</div><div><br /></div><div>Where <i>area </i>is where the component subnets reside. By default, the lowest-cost component becomes the summary cost, but this can be set statically with the <b>cost </b>keyword.</div>
How do you configure an OSPF external summary? 	Under the OSPF process:<div><br /></div><div><b>summary-address </b><i>network mask </i>[<b>tag </b><i>tag</i>]</div><div><br /></div><div>This summarizes external routes as they are injected into OSPF as an ASBR.</div>
What's the difference between the default <b>ip classless </b>and <b>no ip classless </b>with regard to whether or not a default route is used? 	With <b>ip classless</b>, if a packet's destination does not match a specific route in the IP routing table, the router uses the default route.<div><br /></div><div>With <b>no ip classless</b>, the router first checks to see whether any part of the destination address's classful network is in the routing table. If so, that router will not use the default route for forwarding that packet.</div>
In what two ways can both RIP and EIGRP advertise a default route? 	Static route to 0.0.0.0, with the <b>redistribute static </b>command<div><br /></div><div>The <b>ip default-network </b>command</div>
Which of the following can OSPF use to advertise a default route?<div><br /></div><div>-Static route to 0.0.0.0 with the <b>redistribute static </b>command</div><div>-The <b>default-information originate </b>command</div><div>-The <b>ip default-network </b>command</div><div>-Using summary routes</div> 	Of these four, only the <b>default-information originate </b>command will cause OSPF to advertise a default route.
The <b>default-information originate </b>command can be used by which IGPs?<div><br /></div><div>-RIP</div><div>-EIGRP</div><div>-OSPF</div><div>-IS-IS</div> 	RIP, OSPF, and IS-IS
True or False: You can advertise a default route for one routing protocol by redistributing another routing protocol's default route. 	True
If a router learns of multiple default routes (using any method), how does it choose which one to use? 	<div>In order:</div><div><br /></div>Best AD<div>Route type (internal vs. external, etc.)</div><div>Lowest metric</div>
How can you configure EIGRP to redistribute only a static default route? 	<div>Static route &gt; prefix list &gt; route map &gt; redistribute</div><div><b><br /></b></div><div><b>ip route 0.0.0.0 0.0.0.0 </b><i>gateway</i></div><div><i><br /></i></div><div><b>ip prefix-list </b><i>zero-prefix </i><b>permit 0.0.0.0/0</b></div><div><b><br /></b></div><div><b>route-map </b><i>just-default </i><b>permit 10</b></div><div><b>&nbsp;match ip address prefix-list </b><i>zero-prefix</i></div><div><b>route-map&nbsp;</b><i>just-default </i><b>deny 20</b></div><div><b><br /></b></div><div><b></b><b>router eigrp&nbsp;</b><i>ASN</i><div>&nbsp;<b>redistribute static route-map&nbsp;</b><i>just-default&nbsp;</i>[<b>metric&nbsp;</b><i>metric</i>]</div></div>
True or False: OSPF does not support redistribution of statically defined default routes with the <b>redistribute static</b>&nbsp;command. 	True: OSPF requires the <b>default-information originate </b>command, which tells OSPF to redistribute any default routes found in the routing table, whether static or from another routing protocol.<div><br /></div><div>If there are no default routes in the routing table, the <b>default-information originate </b>command will not advertise a default route into OSPF, unless the <b>always </b>keyword is used.</div>
When using the <b>default-information originate </b>command with OSPF, what is the default cost and route type? 	Cost 1<div>Type E2</div><div><br /></div><div>The metric and route type can be set directly when using the <b>default-information originate </b>command.</div>
True or False: You can use the <b>ip default-network </b>command to inject a default route into OSPF. 	False. OSPF uses <b>default-information originate</b>
How do RIP and EIGRP use the <b>ip default-network </b>command differently? 	RIP advertises a route to 0.0.0.0/0<div><br /></div><div>EIGRP advertises the classful network, but flags it as a candidate default. This is why EIGRP must also be advertising the classful network.</div>
What happens if a router learns a default route from eBGP, and advertises an EIGRP default summary out of an interface? 	The EIGRP default summary creates the route 0.0.0.0/0 with the destination null0. The EIGRP summary has a default AD of 5, so that route will be used instead of the eBGP route with its default AD of 20.
When issuing the interface command <b>ip summary-address eigrp </b><i>ASN summary mask,&nbsp;</i>how is the route installed locally, and then advertised? 	The local router creates a local summary route with destination null0 using AD 5. EIGRP then advertises the summary to other routers with AD 90 (EIGRP internal)
"What are the five phases in the PfR ""phase wheel""? "	Profile<div>Measure</div><div>Apply Policy</div><div>Control</div><div>Verify</div>
What is the goal of the PfR Profile phase? 	To learn flows that have high latency and throughput. Traffic being profiled is referred to as a traffic class. The list of all monitored traffic classes (MTC) is referred to as an MTC list.
What is the goal of the PfR Measure phase? 	To collect and compute performance metrics for the traffic identified in the Monitored Traffic Classes (MTC) list.
What is the goal of the PfR Apply Policy phase? 	To create low and high thresholds to define in-policy and out-of-policy performance categories.
What is the goal of the PfR Control phase? 	To influence traffic by manipulating routing or by using policy-based routing (PBR).
What is the goal of the PfR Verify phase? 	After controls have been introduced, PfR will verify out-of-policy event performance and make necessary adjustments to bring back in-policy performance.
What are the three primary interface types required in a topology to correctly deploy PfR? 	Internal<div>External</div><div>Local</div>
What are PfR Internal interfaces? 	Interfaces that are used to connect to the internal network for communication with the control plane manager, the Master Controller.
What are PfR External interfaces? 	Interfaces used to transmit packets out of the local network. At least two external interfaces are required to successfully deploy PfR. These are the interfaces where prefixes and exit link performance will be monitored.
What are PfR Local interfaces? 	Interfaces used in the formation of the control plane mechanism that drives the PfR process. The local interface defines the source interface that is used to communicate to the Master Controller.
True or False: With PfR, communication between the Master Controller and its slave devices supports optional authentication. 	False: Authentication is <b>mandatory</b>, and performed with key chains.
True or False: The PfR Master Controller must be in the same forwarding path taken by the controlled network traffic. 	False. However, the MC must be reachable by the border routers.
A single PfR MC can support up to ___ individual border routers, or up to ___ managed exit interfaces (external interfaces). 	10<div>20</div>
True or False: With PfR, the MC and border router can be the same device. 	True. Authentication is still required.
With PfR, what two things are border routers responsible for? 	Border routers report prefix and transit link measurements back to the MC, and enforce policy changes as instructed from the MC, such as injecting preferred routes to alter the course of packet flows in the network.
When configuring PfR, what is the first required step? 	Configure the authentication key-chain.
What command is used to create a PfR Master Controller? 	<b>pfr master </b>in global configuration mode.
With PfR, how do you designate the border router's internal and external interfaces? 	From the Master Controller:<div><br /></div><div><b>pfr master</b></div><div><b>&nbsp;border </b><i>border-ip </i><b>key-chain </b><i>key-chain</i></div><div>&nbsp; <b>interface </b><i>interface </i>{<b>internal </b>| <b>external</b>}</div>
How can you verify the PfR MC / border router relationship status? 	<b>show pfr master border</b>
What is the first step to creating a PfR Border router? 	Create the authentication key-chain to be used to communicate with the Master Controller.
How do you enable PfR on a Border router? 	"<div>Enable the process:</div><div style=""font-weight: bold; ""><b><br /></b></div><b>pfr border</b><div><b>&nbsp;master </b><i>master-IP </i><b>key-chain </b><i>key-chain</i></div><div><i><br /></i></div><div>Define the Local interface used to communicate with the MC:</div><div><br /></div><div><b>&nbsp;local </b><i>interface</i></div><div><i><br /></i></div><div>Loopback interfaces are recommended.&nbsp;</div>"
What is required for the PfR MC process to become active? 	At least two configured and reachable external interfaces from the Border router(s).
How can you verify the status of PfR? 	<b>show pfr master</b>
By default, the PfR Master Controller uses both active and passive monitoring for each traffic class. What is the difference between the two modes, and when is each mode used? 	<div>Passive mode uses NetFlow data, and is used constantly.</div><div>Active mode uses IP SLA probes and is used when traffic classes are considered Out Of Policy.</div>
When PfR is in passive mode, what metrics are monitored, and what is used to monitor them? 	NetFlow is used to monitor:&nbsp;<div>delay, packet loss, reachability, throughput</div>
When PfR is in active mode, what metrics are monitored, and what is used to monitor them? 	IP SLA probes are used to monitor:<div>delay, reachability, jitter, MOS</div>
What are two PfR features that enable load balancing? 	<div>Link Utilization &amp; Range</div><div><b><br /></b></div><div><b>Link utilization</b> - upper threshold set, traffic beyond is OOP</div><div>Example: 90% link utilization set, traffic that utilizes 95% of the link is out of policy</div><div><br /></div><div><b>Range</b> - multiple WAN link usage is kept within a relative utilization range of each other</div><div>Example: 10% range tries to keep the usage of multiple links within 10% of each other</div>
What is the default frequency of PfR active probes? 	60 seconds
What are the 3 high-level configuration-related steps to optimize voice traffic with PfR? 	Identify traffic to be optimized<div>Configure active probing (including remote ip sla responder)</div><div>Configure PfR policy to set performance metrics for PfR to apply to identified traffic</div>
What is a potential symptom of an incorrect split-horizon configuration? 	The result is usually that most routes are propagated correctly, but some are not propagated.
What is the default TTL limit of traceroute? 	30
In Cisco IOS, what is the traceroute default destination UDP port for the first probe? 	33434
What is the most appropriate <b>debug </b>command for tracking down Layer 3 problems? 	<b>debug ip routing</b><div><b>debug ipv6 routing</b></div>
How can you filter IP packet debugging to only receive the information you're looking for? 	<b>debug ip packet detail </b><i>acl</i><div><i><br /></i></div><div>Where <i>acl </i>matches the specific information you're looking for.</div>
How can you display all user-defined applications monitored by a PfR border router? 	<b>show pfr border defined</b>
How can you display all applications that are defined on a PfR Master Controller? 	<b>show pfr master defined</b>
How can you display the status of an application identified by NBAR for the PfR border routers? 	<b>show pfr master nbar application</b>
A multicast address is always used as the ___, never as the ___. 	destination, source
On a network segment, how do hosts interested in receiving particular multicast traffic listen for the traffic? 	By listening to the Layer 2 multicast address derived from the Layer 3 multicast address.<div><br /></div><div>For example, hosts interested in listening to traffic from 255.5.5.5 will listen to the MAC address 0100.5e05.0505 in addition to the BIA of the NIC.</div>
The assignment of IP multicast addresses is controlled by: 	IANA
Which IP addresses are considered permanent multicast groups? 	224.0.0.0 - 224.0.1.255
What range of IP addresses are used with Source-Specific Multicast? 	232.0.0.0/8
Which range of IP addresses are used for multicast GLOP addressing? 	233.0.0.0/8
What is the range of multicast addresses where the 16-bit ASN is mapped to the middle two octets referred to as? 	GLOP addresses<div>233.0.0.0/8</div>
What is the range of private IP multicast addresses? 	239.0.0.0/8
If an IP multicast address is not in a reserved range, what is it referred to as? 	Transient
What is the range of IP multicast addresses that should not be forwarded by multicast routers? 	224.0.0.0/24
What is the range of permanent IP multicast group addresses that should be routed by IP multicast routers? 	224.0.1.0/24
What is the purpose of Source-Specific Multicast? 	To allow a host to select a source for the multicast group.
How do you convert a multicast IP address to a multicast MAC address? 	The multicast MAC OUI will always be 01-00-5E<div>The last six hex digits of the MAC consist of 0 + the last 23 binary bits of the multicast IP address</div>
What is the overlap of multicast IP addresses to multicast MAC addresses? 	There are 32 non-contiguous IP multicast addresses mapped to each multicast MAC address. This means when a host joins a multicast group, it implicitly joins 31 other groups as well.
Without the use of IGMP snooping or CGMP, why would a switch flood multicast traffic out of all ports in the VLAN? 	Without IGMP snooping or CGMP, multicast traffic is treated identically to broadcast and unknown unicast traffic in that it is flooded out of all ports in the VLAN because the Source Address is unknown. A Multicast MAC address is never used as a Source Address.
IGMP messages are sent in IP datagrams using IP Protocol ___ with the IP TTL field set to ___. 	IP Protocol 2<div>TTL 1</div><div><br /></div><div>IGMP packets are local and not forwarded by routers because of the TTL value of 1.</div>
What are the two most important goals of IGMP? 	To inform a local multicast router that a host wants to receive multicast traffic for a specific group, or leave that group.<br />
IGMP is used for communication between ___ and ___. 	Hosts, routers
What is the default version of IGMP used in IOS 15? 	IGMPv2
True or False: IGMP must be enabled per-interface when multicast routing and PIM are configured on a router. 	False: IGMP is automatically enabled when multicast routing and PIM are configured on a router.<div><br /></div><div>The IGMP version can be changed per-interface.</div>
True or False: The IGMP version used must be set globally. 	False: The IGMP version can be changed per-interface, with IGMPv2 being the default for IOS 15.
What are the four message types defined for the IGMPv2 Type field? 	Membership Query (type code 0x11)<div>Version 1 Membership Report (type code 0x12)</div><div>Version 2 Membership Report (type code 0x16)</div><div>Leave Group (type code 0x17)</div>
What is the IGMPv2 Version 1 Membership Report message type used for? 	The IGMPv2 Version 1 Membership Report message type is used by IGMPv2 hosts for backward compatibility with IGMPv1.
What is the IGMPv2 Version 2 Membership Report message type used for? 	The IGMPv2 Version 2 Membership Report is sent by a group member to inform the router that at least one group member is present on the subnet.
What is the IGMPv2 Leave Group message type used for? 	The IGMPv2 Leave Group message type is sent by a group member if it was the last member to send a Membership Report to inform the router that it is leaving the group.
What two possible values can be placed in the IGMPv2 Group Address field? 	General Query messages set the Group Address field to 0.0.0.0.<div><br /></div><div>All other message types set the Group Address field to the specific multicast group.</div>
True or False: IGMPv2 is completely backward compatible with IGMPv1. 	True. IGMPv2 Type Codes 0x11 and 0x12 match the type codes for IGMPv1 Membership Query and Membership Report messages, which enables IGMPv2 hosts and routers to recognize IGMPv1 messages when IGMPv1 hosts or routers are on the network.
What are the four features added to IGMPv2 over IGMPv1? 	Leave Group messages<div>Group-specific Query messages</div><div>Maximum Response Time field</div><div>Querier election process</div>
How does an IGMPv2 host notify a router that it wishes to leave a particular multicast group? 	With a Leave Group message
What does an IGMPv2 router use to send a query for a particular multicast group? 	A Group-Specific Query message
What is the effect of setting the IGMPv2 Maximum Response Time higher than the default value of 10 seconds? 	The effect is that hosts' collective IGMPv2 Solicited Report messages are spread out over a longer period of time, which results in more uniform consumption of subnet bandwidth and router resources.
How frequently does an IGMPv2 router acting as the IGMPv2 querier send general IGMP Query messages? 	Every 60 seconds
What are the source and destination IP and MAC addresses of an IGMPv2 Host Membership Query? 	SA: Router interface's IP and MAC<div>DA: 224.0.0.1 and 0100.5e00.0001</div>
What two steps occur during the IGMPv2 host Membership Query process? 	1. Hosts join a particular multicast group and listen on two additional multicast MAC addresses: the calculated MAC corresponding to the multicast group, and the MAC 0100.5e00.0001 corresponding to 224.0.0.1 (all nodes).<div><br /></div><div>2. The local multicast router periodically sends IGMPv2 Host Membership Queries. Hosts that have joined any multicast group reply with an IGMPv2 Report message.</div>
Why is it unnecessary for multiple hosts on a LAN segment to send an IGMP Membership Report to the local router? 	The router's interface will forward multicast traffic whether a single host, or multiple hosts belong to a given multicast group, and therefore additional Membership Report messages from multiple hosts are unnecessary.
How does the IGMP Report Suppression mechanism work? 	The IGMPv2 Maximum Response Time (MRT) timer is used. The timer is also known as the Query Response Interval. When any host receives an IGMPv2 Query, it picks a random time between 0 and the MRT to send a Host Membership report. However, if the host hears another host send a report for the group, it does not send a report of its own.
What is the purpose of an IGMPv2 Unsolicited Host Membership Report? 	To immediately signal to a router that the host wishes to receive traffic for a particular multicast group, without having to wait for the router to send its periodic Host Membership Query message.
What is the relationship between the IGMPv2 Leave Group message, and the Group-Specific Query message? 	When an IGMPv2 host leaves a group, it sends a Leave Group message. When the IGMPv2 router receives the message, it immediately sends a Group-Specific Query message for that group to determine if there are any remaining hosts that wish to receive traffic.
To which IP address is the IGMPv2 Leave Group message sent? 	224.0.0.2, All Multicast Routers
True or False: Multicast routers do not keep track of hosts that are members of the group, only the group memberships that are active. 	True
How does the IGMPv2 Querier Election process work? 	When IGMPv2 routers start, they send a General Query to 224.0.0.1. When a router receives a General Query, it compares the source IP with its own, and the router with the lowest IP on the subnet is elected the Querier.
How long is the default time before an IGMPv2 Querier router is considered dead and a new election occurs? 	255 seconds<div><br /></div><div>2x Query Intervals (125s) + 1/2 Query Response Interval (10s)</div>
What is the host IGMP Version 1 Router Present timeout? 	A time period during which, if an IGMPv2 host does not receive an IGMPv1 Query, the IGMPv2 host concludes that there are no IGMPv1 routers present and starts sending IGMPv2 messages.<div><br /></div><div>The default value is 400 seconds.</div>
What allows a host to indicate interest in receiving multicast packets only from individual source addresses, or from all sources except for individual exclusions? 	IGMPv3 Source-Specific Multicast (SSM)
What is the destination address for the IGMPv3 Membership Report message? 	224.0.0.22 (IGMPv3)
How does an IGMPv2 host determine that the querying router is IGMPv1? 	The MRT field of the IGMPv1 Query is 0, whereas the IGMPv2 MRT field is nonzero.
What happens when an IGMPv2 host determines that the router is using IGMPv1? 	It marks its interface as IGMPv1 and stops sending IGMPv2 messages.
What happens when an IGMPv2 host receives an IGMPv1 Query? 	The host starts a 400-second Version 1 Router Present Timeout timer, which is reset whenever an IGMPv1 Query is received. If the timer expires, there are no longer any IGMPv1 routers present on the subnet, and the IGMPv2 host starts sending IGMPv2 messages.
How can an IGMPv2 router determine that an IGMPv1 host is present on the subnet? 	The IGMPv2 router receives an IGMPv1 Report message (type 0x12), and changes its behavior to accommodate the IGMPv1 host(s).
When an IGMPv2 router is aware of IGMPv1 hosts on the subnet, how does the router change its behavior? 	The IGMPv2 router ignores Leave messages and the Group-Specific Queries triggered by receipt of the Leave messages.<div><br /></div><div>IGMPv2 routers continue to ignore Leave messages until the IGMPv1-Host-Present Countdown timer expires (180 seconds).</div>
How long is the router IGMPv1-host-present countdown timer? 	Equal to the Group Membership Interval, which is 180 seconds by default for IGMPv1.
How does IGMP snooping determine which ports multicast routers are connected to? 	The switch listens for the following routing protocol messages:<div><br /></div><div>IGMP General Queries with GDA 0100.5e00.0001</div><div>OSPF messages with GDA 0100.5e00.0005 or 6</div><div>PIMv1 and HSRP Hellos with GDA 0100.5e00.0002</div><div>PIMv2 Hellos with GDA 0100.5e00.000d</div><div>DVMRP Probes with GDA 0100.5e00.0004</div>
What happens when a switch performing IGMP snooping detects a router on a port? 	The port is added to the port list of all Group Destination Addresses in the CAM table for that particular VLAN.
What happens when a switch performing IGMP snooping receives an IGMP Report message? 	The switch creates an entry in the CAM table for the Group Destination Address and adds the host port and router port to it.
What happens when a switch performing IGMP snooping receives an IGMP Leave message? 	The switch removes the host port from the Group Destination Address CAM table entry. The switch then sends the Leave message to the router, unless there are more host ports in the GDA CAM entry, in which case the switch discards the Leave message.
True or False: IGMP snooping is enabled by default on most Cisco Layer 3 switches, including the 3560. 	True
How do you disable IGMP snooping for an individual VLAN? 	Globally: <b>no ip igmp snooping vlan </b><i>vlan</i>
True or False: IGMP filtering requires IGMP snooping to be enabled. 	True, it is not a standalone feature.
True or False: You can configure IGMP filters separately for each VLAN passing through a trunk port. 	True
Where are IGMP filters typically used? 	IGMP filters are typically used on access switches connected to end-user devices.
What are the three different types of IGMP filters? 	IGMP group/channel access control<div>IGMP group/channel join limits</div><div>IGMP minimum version</div>
What is the IGMP Proxy feature used for? 	To enable hosts that are not directly connected to a downstream device to join a multicast group sourced from an upstream network (such as with UniDirectional Link Routing).
What do multicast routers use to prevent loops? 	Reverse Path Forwarding (RPF) check
How does the multicast Reverse Path Forwarding (RPF) check work? 	The router looks at the source IP of the multicast packet, and if the route to the source is on the interface where the multicast packet was received, the packet passes the RPF check and is forwarded, otherwise it is dropped.
What happens when a multicast source sends a packet to the RP, but no hosts have joined the multicast group? 	The multicast packet is dropped at the RP until a multicast host has joined the particular group.
How does the initial RPF check work with downstream routers when using PIM-SM? 	The downstream routers check the reverse path to the RP, not the source.
How does multicast TTL scoping work? 	The router compares the TTL value on the multicast packet with the configured TTL value on each outgoing interface (whose default is 0). If the configured TTL value is less than or equal to the TTL present in the multicast packet, the packet is forwarded.<div><br /></div><div>For example, if the TTL is set to 10 and the router receives a multicast packet with a TTL of 15, it will be forwarded.</div>
What is the default multicast TTL value on router interfaces? 	0
Other than scaling limitations, what is a downside to using TTL scoping on routers to enforce multicast boundaries? 	The configured TTL threshold value on an interface applies to all multicast packets, and therefore does not allow for per-group flexibility.&nbsp;
How does multicast administrative scoping work? 	Administratively-scoped multicast addresses are those in the 239.0.0.0/8 range. Administrative scoping works by configuring and applying a filter on the router's interface so that multicast addresses in the administratively-scoped range are not allowed to enter or exit the interface.
What are the three common multicast dense-mode routing protocols? 	PIM-DM<div>DVMRP</div><div>MOSPF</div>
What is the default PIMv2 Hello interval? 	30 seconds
What is the All-PIM-Routers multicast address? 	224.0.0.13
How does PIMv2 discover neighbors and establish/maintain adjacencies? 	Neighbors are discovered, and adjacencies are established and maintained by receiving PIMv2 Hellos on PIM-enabled interfaces.
When will a PIMv2 router send PIM messages out of a PIM-enabled interface (other than Hellos)? 	Only when it has an active PIMv2 neighbor on the interface, which is established by receiving a PIM Hello message from the neighbor.
What are the terms for a path between a source host that originates multicast packets and all subnets that need to receive a copy of the multicast sent by that host? 	Source-based distribution tree<div>Shortest-path tree</div><div>Source tree</div>
What multicast notation refers to a particular shortest-path tree? 	(S,G)
What does the PIM Prune message do? 	The PIM Prune message is sent from one router to a second router to cause the second router to remove the link on which the Prune is received from a particular (S,G) SPT.
What are the two main reasons for a PIM-DM router to send a Prune message? 	Upon receipt of multicast packets on a non-RPF interface.<div><br /></div><div>When there are no locally connected hosts in a particular group and no downstream routers are listening for the group.</div>
When issuing the&nbsp;<b>show ip mroute </b>command, what does the combination of the C-flag and an RPF neighbor of 0.0.0.0 indicate? 	The connected device is the source of the particular multicast group.
PIM does not have separate Join or Prune messages, but a single Join/Prune message. How is a Join or Prune indicated within the single message type? 	A Prune message is actually a Join/Prune message with a group address listed in the Prune field, and a Join has a group message in the Join field.
What happens when a router interface running PIM-DM receives a Prune message? 	"The router finds the matching (S,G) SPT entry and marks the interface on which the Prune message was received as ""pruned"" and starts a Prune timer (whose default is 3 minutes). When the timer expires, the interface is placed into a forwarding state."
What is the PIM-DM State Refresh message? 	When a PIM-DM link is pruned, it will begin flooding again after 3 minutes by default. The PIM-DM State Refresh message is sent upstream by pruned routers every 60 seconds by default to reset the 3-minute timer and prevent PIM-DM from flooding traffic on the link.
True or False: The PIM-DM State Refresh message timer is dependent on the Prune timer. 	False: PIM-DM State Refresh messages are sent on pruned links every 60 seconds by default, but are not dependent on the 3-minute (default) Prune timer.
What happens when a multicast host wishes to receive traffic for a group that was previously pruned by the router? 	A Graft message is sent by the downstream router to the upstream router to request the multicast traffic again for the particular (S,G).
When multiple PIM downstream routers are present on a network segment and one or more of the routers sends a Prune message while at least one other router still needs to send the multicast traffic further downstream, what happens? 	When the upstream router receives the Prune, because it was received on a multiaccess network (as opposed to point-to-point), it sets a 3-second timer. The other router(s) on the segement must sent a Prune Override message (which is actually just a normal Join message) before the timer expires.&nbsp;<div><br /></div><div>The downstream router that sent the Prune will simply ignore the received multicast traffic by not listening on the multicast MAC address for the particular group.</div>
What is the PIM Assert process used for? 	When multiple multicast routers are present on a network segment, the PIM Assert process is used to determine which router should be the one to forward the multicast traffic based on which router has a better metric to the multicast source.
During the PIM Assert process, how is the multicast forwarder for a particular group determined? 	The routers on the multiaccess network segment receive each other's PIM Assert message, which contains the AD and metric the router used to reach the multicast source. The forwarder is chosen by:<div><br /></div><div>-Lowest AD of routing protocol used to reach the source</div><div>-Lowest metric for the route (if AD is tied)</div><div>-Highest IP address on the LAN (if AD and metric are tied)</div>
How is a PIM Designated Router elected on a multiaccess network? 	The DR is elected by receipt of PIM Hello messages. The PIM router with the highest IP address becomes the DR for the link.
Why is the PIM DR important for IGMPv1? 	IGMPv1 does not have a mechanism to elect a querier, so the PIM DR is used as the IGMPv1 Querier.
What is the difference between the winner of the PIM Assert process, and the IGMP Querier? 	The winner of the Assert is responsible for forwarding multicast traffic for the particular multicast group onto the LAN.<div><br /></div><div>The IGMP Querier is responsible for managing the IGMP process by sending IGMP Query messages on the LAN.</div>
How can you manually specify the PIM RP address? 	Globally: <b>ip pim rp-address </b><i>ip</i>
What happens in a PIM-SM network when a multicast source sends traffic, but there are no receivers? 	The first-hop multicast router attempts to register the group with the RP, but since no receivers for the group have registered with the RP, the RP sends a Register-Stop message back to the first-hop multicast router.
When a PIM-SM router attempts to register with the RP for a particular group, what is encapsulated in the Register message? 	The first multicast packet is encapsulated in the Register message in case the RP has interested receivers registered with the group.
What happens when a PIM-SM router receives a Register-Stop message? 	The router starts a 1-minute Register-Suppression timer, and does not send any further Register messages to the RP until five seconds before the timer expires, when it then sends a Register message with the Null-Register bit set.&nbsp;<div><br /></div><div>If the RP still has no interested receivers for the group, it will send back another Register-Stop message, and the process starts over again. If the RP does have interested receivers, it does not reply back to the Register message, and will begin receiving multicast packets when the first router's Register-Stop timer expires.</div>
What two things cause a PIM-SM router send a Join toward the RP? 	When the router receives a PIM Join message on any interface other than the one used to route packets toward the RP<div><br /></div><div>When the router receives an IGMP Membership Report from a host on a directly-connected subnet</div>
What is the PIM-SM Root Path Tree (RPT)? 	The tree with the RP at the root that defines over which links multicasts should be forwarded to reach all required routers.
What are the two major functions of the PIM-SM Register message? 	To allow a router to inform the RP that it has a local source for a particular multicast group<div><br /></div><div>To allow a router to forward multicasts to the RP encapsulated inside a unicast packet, until the registration process is completed.</div>
What type of multicast tree is indicated by the (S,G) notation? 	Shortest Path Tree / Source-Based Tree / Source Tree
What type of multicast tree is indicated by the (*,G) notation? 	Root Path Tree / Shared Distribution Tree
In a PIM-SM network, after interested receivers register with the RP, and the multicast source begins sending traffic, how does the RP react? 	The RP joins the SPT (S,G) toward the multicast source, and sends a Register-Stop message to the source's first-hop router so that it stops sending multicast-encapsulated packets within unicast Register messages.<div><br /></div><div>The end result is that the SPT (S,G) is used between the RP and the source, and the RPT (*,G) is used between the RP and the subnets that need to receive the traffic.</div>
PIM-SM steady-state operation requires PIM-SM routers to send ___ messages periodically. 	PIM Join. If the router does not send a PIM Join within the default timeout of 3 minutes, the upstream router's interface reverts to being pruned.<div><br /></div><div>The default interval of sending PIM Join messages is 60 seconds.</div>
During PIM-SM steady-state operations, how frequently are PIM Join messages sent, by default? 	Every 60 seconds
A PIM-SM RP uses a ___ tree to pull the traffic from the multicast source to itself, and uses a ___ tree to push the traffic down to the PIM-SM routers that have requested it. 	Shortest Path Tree<div>Shared Tree / Root Path Tree</div>
In PIM-SM operations, after the downstream routers join the RPT from the RP, when do the routers switch over to the multicast SPT between the individual routers and the multicast source? 	Cisco routers switch over from the RPT to the source-specific SPT after they receive the first packet from the shared tree, by default.
How do you configure a Cisco router to change from a PIM-SM RPT to a source-specific SPT after a certain rate of traffic? 	Global: <b>ip pim spt-threshold </b><i>kbps</i><div><i><br /></i></div><div>After the threshold of <i>kbps </i>is crossed, the router switches from the RPT through the RP to the SPT to the source. By default, this occurs after the router receives the first multicast packet from the RPT.</div>
Why do receivers of multicast traffic in a PIM-SM network require at least one packet before they can switch from the RPT to the source-specific SPT? 	Downstream routers do not know the IP address of the multicast source (only the IP address of the RP) until they receive the first multicast packet for the group from the source.
When looking at the IP multicast routing table, how can you tell which group(s) switched over from the RPT to the SPT? 	"The presence of the ""J"" flag."
When a PIM-SM router switches to the SPT toward the multicast source, how does it signal to the RP that it no longer needs traffic from the RPT? 	The router sends a Prune for the (S,G) to the RP with the RP-Tree bit set, which indicates to the RP (and to the upstream routers toward the RP) that the router has switched over to the SPT and no longer needs the traffic from the RPT.
What are the three methods for which a Cisco router can learn of the PIM-SM RP? 	Statically with <b>ip pim rp-address</b><div>Cisco-proprietary Auto-RP protocol</div><div>Standard BootStrap Router (BSR) protocol</div>
What are the two methods Cisco IOS supports for providing redundant PIM-SM RPs? 	Anycast RP using MSDP<div>BootStrap Router (BSR)</div>
With Auto-RP, what is the first step the RP performs? 	The RP sends RP-Announce messages to 224.0.1.39 stating that the router is an RP, and the particular multicast groups the RP handles.
True or False: The Auto-RP Mapping Agent cannot be on the same router as the RP. 	False: The Auto-RP Mapping Agent can be a different router than the RP, but they are usually configured on the same router.
What does the Auto-RP Mapping Agent do? 	The mapping agent learns all the RPs and the multicast groups they support, then multicasts RP-Discovery messages that identify the RP for each range of multicast group addresses.
To which multicast address are RP-Discovery messages sent? 	224.0.1.40
How does the Auto-RP Mapping Agent receive information about RPs and their associated groups? 	By listening to RP-Announce messages from multicast group 224.0.1.39 sent by the RP.
When multiple RPs are present, how does the Auto-RP Mapping Agent determine which RP to use for a particular group? 	When multiple RPs are present and serve as RP for the same groups, the Mapping Agent advertises the RP with the highest IP address as the current RP for the particular multicast group.
When PIM is enabled on an interface on a Cisco router, regardless of the mode, what multicast group is automatically joined? 	RP-Discovery 224.0.1.40
What is PIM sparse-dense-mode? 	Sparse-dense-mode allows an interface to use multicast sparse or dense mode, depending on the particular group.<br />
How can a router interface configured with <b>ip pim sparse-mode </b>discover the RP with Auto-RP? 	The global <b>ip pim autorp listener </b>command joins the Auto-RP multicast groups 224.0.1.39 and 224.0.1.40 in dense-mode in order to discover the RP. After the RP is discovered, sparse-mode communications can take place.
How do you configure a router to be an RP with Auto-RP? 	Globally:<div><b>ip pim send-rp-announce </b>{<i>interface </i>| <i>ip-address</i>} <b>scope </b><i>TTL </i>[<b>group-list </b><i>ACL</i>]</div><div><br /></div><div>Note: the referenced interface (whether by interface or IP) must have multicast enabled.</div>
How do you configure a router to be an Auto-RP Mapping Agent? 	Globally:<div><b>ip pim send-rp-discovery scope </b><i>TTL</i></div>
How can you verify which RP is being used for which multicast groups? 	<b>show ip pim rp</b>
True or False: BSR floods Boostrap messages only on RPF interfaces. 	False: Boostrap messages are flooded only on non-RPF interfaces. Likewise, loops are prevented because Boostrap messages are discarded when received on non-RPF interfaces.
How does BSR prevent loops when Boostrap messages are flooded? 	Boostrap messages are discarded when received on non-RPF interfaces.
What is the BSR analogous to, as compared to Auto-RP? 	The BSR is similar to the Auto-RP Mapping Agent.
True or False: The BSR chooses and advertises the best RP for each multicast group. 	False: Unlike Auto-RP, BSR sends all group-to-RP mapping information to the other PIM routers, and they independently choose the currently best RP for each multicast group by running the same hash algorithm on the information in the bootstrap message.
To where does the BSR flood Boostrap messages to? 	The BSR floods all mapping information in Boostrap messages to the All-PIM-Routers address 224.0.0.13.
How does a BSR learn about the candidate RPs? 	When BSR is used, all PIM routers already know the unicast IP address of the BSR from the earlier receipt of Boostrap messages. Candidate RPs send unicast c-RP Advertisements to the BSR which include the IP address used by the c-RP and the groups it supports.
True or False: Multiple PIM-SM BSRs can be configured on the network simultaneously. 	True: Each Candidate-BSR sends Bootstrap messages that include the priority of the BSR and its IP address. The highest priority wins (default 0), followed by highest IP address.<div><br /></div><div>The winning BSR is called the Preferred BSR and continues to send Bootstrap messages while the other BSRs monitor the messages to attempt to take over if the Preferred BSR's messages stop.</div>
What is the default priority for BSR routers? 	0, higher priority preferred.
How do you configure a router to be a candidate BSR? 	Globally:<div><b>ip pim bsr-candidate </b><i>interface</i></div><div><i><br /></i></div><div>Note: PIM-SM must be configured on the <i>interface</i></div>
How do you configure a PIM-SM router using BSR to be a candidate RP? 	Globally:<div><b>ip pim rp-candidate </b><i>interface</i></div><div><i><br /></i></div><div>Note: PIM-SM must be enabled on the <i>interface</i></div>
What capability does Anycast RP add over static RP configuration, Auto-RP, and BSR? 	With Anycast RP, RP redundancy and load sharing can be achieved with multiple RPs concurrently acting as the RP for the same group.&nbsp;<div><br /></div><div>Without Anycast RP, RP redundancy only allows one router to be the active RP for each multicast group, and load sharing is achieved by using one RP for some groups, and another RP for other groups.</div>
What are the two biggest benefits of using Anycast RP? 	Multiple RPs share the load for a single multicast group<div><br /></div><div>Recovery after a failed RP is a function of IGP convergence, and so it usually fairly quick.</div>
How does Anycast RP work? 	Multiple RPs are configured with the same IP address, cover the same multicast groups, and are advertised into the IGP. All the RPs act as normal, and the same information is distributed either statically, with Auto-RP, or with BSR. All routers use the closest RP based on their unicast routing table.
How do you configure an MSDP peer? 	Globally:<div><b>ip msdp peer </b><i>ip</i></div>
How do you verify an MSDP peer? 	<b>show ip msdp peer</b>
What is the purpose of MSDP? 	To provide a method for RPs in different multicast domains to register multicast sources with peer RPs.
What are MSDP Source Active (SA) messages? 	Source Active (SA) messages list the IP addresses of each source for each multicast group.<br />
How frequently are MSDP SA messages sent between peers? 	Every 60 seconds
MSDP peers require routes to ___. 	Each of their MSDP peers, as well as to the multicast sources
True or False: MSDP peers must wait for the 60 second interval before receiving updated multicast information from each other. 	False: RPs can send Source-Active (SA) request messages. The MSDP peers respond with SA response messages.
What are the four generic steps of PIM-SM operations, starting with the RP? 	-RP builds a shared tree with itself as the root<div>-Source's first-hop router registers to the RP with PIM Register messages</div><div>-RP joins SPT to source with PIM Join</div><div>-Routers with receivers join SPT to source with PIM Join</div>
How does BiDirectional PIM work differently than PIM-SM? 	Normally, PIM-SM uses the shared tree created to the RP to initialize multicast traffic, with both the RP and the receivers eventually joining the SPT to the source.<div><br /></div><div>BiDirectional PIM uses only the shared tree for communications between senders and receivers. The RP and leaf routers do not join the SPT.</div>
What is the primary use case for BiDirectional PIM? 	When most of the receivers are also senders, such as videoconferencing.
With BiDirectional PIM, how does traffic flow from sender to receiver? 	The sender's first-hop router forwards the traffic up the shared tree to the RP. The RP then forwards the traffic back down the shared tree to all of the leaf routers containing the receivers.
How do you configure PIM BiDir on a router? 	Globally:<div><b>ip pim bidir-enable</b></div><div><b><br /></b></div><div>You must then add the <b>bidir </b>keyword to the RP configuration:</div><div>Static: <b>ip pim rp-address </b><i>ip </i><b>bidir</b></div><div>Auto-RP: <b>ip pim send-rp-announce </b><i>interface </i><b>scope </b><i>ttl </i><b>bidir</b></div><div>BSR: <b>ip pim rp-candidate </b><i>interface </i><b>bidir</b></div><div><b><br /></b></div><div>Important: enable PIM BiDir on all routers in the network to avoid routing loops.</div>
How can you verify if PIM BiDir is being used? 	<b>show ip pim rp mapping </b>will reveal which groups, if any, are using PIM BiDir.
What is the default frequency interval of PIM-DM and PIM-SM Hello and Query messages? 	30 seconds
What two configurations are required on a router to use Source-Specific Multicast (SSM)? 	Globally:<div><b>ip pim ssm default</b></div><div><b><br /></b></div><div>Interface:</div><div><b>ip igmp version 3</b></div><div><b><br /></b></div><div>Note: SSM requires IGMPv3 configured on the interface.</div>
Why is an RP not needed with SSM? 	SSM receivers know the unicast IP address of the source, and specify it when they join the multicast group. SSM receivers join a specific (S,G).
What is a major advantage of SSM with regard to multicast group addresses? 	Without SSM, multicast receivers receive all traffic sent to a particular subscribed multicast group. With SSM, multicast traffic is received only from the specified source on the particular multicast group.
True or False: SSM does not use any RPs or shared trees. 	True. SSM only uses SPT and hosts join a specific (S,G) which negates the requirement of RPs and shared trees.
When you issue the global command <b>ip pim ssm range default </b>on a router, which groups are used for SSM? 	The <b>default </b>keyword means that the range 232.0.0.0/8 is used for SSM.<div><br /></div><div>Within this range, no shared trees are allowed, and (*,G) joins are dropped.</div>
Why is IGMPv3 required for SSM? 	IGMPv1 and IGMPv2 do not allow receivers to explicitly specify sources in order to build SPTs.
How do you enable multicast routing for IPv6 in Cisco IOS? 	Globally:<div><b>ipv6 multicast-routing</b></div>
True or False: After issuing the&nbsp;<b>ipv6 multicast-routing </b>command, PIMv6 must be configured on IPv6-enabled interfaces. 	False: PIMv6 is enabled automatically for all IPv6-enabled interfaces when <b>ipv6 multicast-routing </b>is issued.
How can you disable PIM on an IPv6-enabled interface? 	Interface:<div><b>no ipv6 pim</b></div>
How can you verify IPv6 PIM adjacencies? 	<b>show ipv6 pim neighbor</b>
How do you configure the IPv6 PIM DR priority? 	Interface:<div><b>ipv6 pim dr-priority </b><i>priority</i></div><div><i><br /></i></div><div>Higher priority wins.</div>
True or False: IPv6 multicast does not support Auto-RP or dense-mode operation. 	True. IPv6 multicast operates only in sparse-mode, and the RP must either be statically defined, use IPv6 BSR, or Embedded RP.
How do you statically configure the IPv6 PIM RP? 	Globally:<div><b>ipv6 pim rp-address </b><i>ipv6-address</i></div>
How do you verify the IPv6 multicast routing table? 	<b>show ipv6 mroute</b>
How do you configure a router to be the IPv6 PIM BSR candidate? 	Globally:<div><b>ipv6 pim bsr candidate bsr </b><i>ipv6-address</i></div>
How do you configure a router to be the IPv6 PIM BSR candidate RP? 	Globally:<div><b>ipv6 pim bsr candidate rp </b><i>ipv6-address</i></div>
How do you verify the IPv6 group-to-RP mappings? 	<b>show ipv6 pim range-list</b>
IPv6 MLD is comparable to ___. 	MLD is comparable to IGMP.<div><br /></div><div>MLDv1 is comparable to IGMPv2</div><div>MLDv2 is comparable to IGMPv3</div>
What are the three types of messages used by MLD? 	Query<div>Report</div><div>Done</div>
The MLD ___ message is similar to the IGMPv2 Leave message. 	Done
How can you verify MLD for an interface? 	<b>show ipv6 mld interface </b><i>interface</i>
How can you verify IPv6 multicast traffic statistics? 	<b>show ipv6 pim traffic</b>
What is Embedded RP? 	Embedded RP enables the identity of the RP to be embedded as part of the multicast group address.
How do you know that an IPv6 multicast group contains an embedded RP? 	Embedded RP addresses always being with FF70::/12<div><br /></div><div>1111 1111 0111</div>
What five pieces of information are contained in an IPv6 Embedded RP address? 	Scope<div>RP interface ID</div><div>Prefix length</div><div>64-bit RP prefix</div><div>32-bit group ID</div><div><br /></div><div>FF7&lt;scope&gt;:0&lt;RP interface ID&gt;&lt;hex prefix length&gt;:&lt;64-bit RP prefix&gt;:&lt;32-bit group ID&gt;:&lt;1-F&gt;</div>
How do you configure a router to join a multicast group? 	Interface:<div><b>ip igmp join-group </b><i>address</i></div>
What are the high-order 3 bits of the ToS byte in the IP header referred to as? 	The IP Precedence (IPP) field
What are the IP Precedence names for values 0 - 7? 	0 Routine<div>1 Priority</div><div>2 Immediate</div><div>3 Flash</div><div>4 Flash Override</div><div>5 Critical</div><div>6 Internetwork Control</div><div>7 Network Control</div><div><br /></div><div>Reverse mnemonic: NIC F FIPR</div>
How are the bits in the IP header's ToS byte defined for DiffServ? 	Bits 0 - 5 are the DSCP<div>Bits 6 - 7 are for ECN</div>
What are the bits formerly used by IPP referred to as with DSCP? 	Class Selector PHBs<div><br /></div><div>CS0 - CS7 = IPP 0 - 7</div>
How do the Assured Forwarding (AF) PHBs work? 	AF<i>xy </i>where x = 1 - 4 and y = 1 - 3. Higher values of x get better queuing treatment, and higher values of y have a higher probability of being dropped.<div><br /></div><div>Example: with AF11 vs AF23, AF23 will have better queuing treatment, but will have a higher probability of being dropped.</div>
How do you convert AF<i>xy </i>PHB values to decimal? 	8<i>x </i>+ 2<i>y</i>&nbsp;= decimal<div><br /></div><div>Example: AF41 = (8 * 4) + (2 * 1) = 34</div>
What is the decimal value of the Expedited Forwarding (EF) PHB? 	46
True or False: The 3-bit Ethernet CoS field is always present in the Ethernet header. 	False: it is present only when the Ethernet frame includes an 802.1Q tag, or an ISL trunking header.
When is classification based on CoS, DE, CLP, or EXP bits performed? 	On ingress only, and only if the interface supports that particular header field.
When is marking based on CoS, DE, CLP, or EXP bits performed? 	On egress only, and only if the interface supports that particular header field.
In a MQC <b>class-map</b>,&nbsp;what is used to perform matching when the <b>match protocol </b>statement is used? 	NBAR
A MQC policy is designed to mark packets as they leave an interface:<div><br /></div><div><b>policy-map policy1</b></div><div><b>&nbsp; class class1</b></div><div><b>&nbsp; &nbsp; set dscp ef</b></div><div><b>&nbsp; class class2</b></div><div><b>&nbsp; &nbsp; set dscp default</b></div><div><b><br /></b></div><div><b>interface f0/0</b></div><div><b>&nbsp; service-policy output policy1</b></div><div><b><br /></b></div><div>What happens if a packet does not match either of the two classes referenced by the policy-map?</div> 	The packets would not be marked, and will retain their existing DSCP values.
If a <b>class-map </b>is defined without specifying the matching logic, what is the default? 	match-all &nbsp;(logical AND)
What is the result of this configuration?<div><br /></div><div><b>class-map match-all class1</b></div><div><b>&nbsp; match dscp 0</b></div><div><b>&nbsp; match dscp 1</b></div> 	No packets are matched because a packet cannot be marked as DSCP 0 and DSCP 1 simultaneously.<div><br /></div><div>The correct way to issue this configuration is:</div><div><br /></div><div><b>class-map match-any class1</b></div><div><b>&nbsp; match dscp 0 1</b></div>
If a packet inside a policy-map does not match any referenced classes, how is the packet handled? 	It is matched to the special class <i>class-default</i>
When performing class-based marking, what happens if you do not include the <b>ip </b>keyword when setting the IP Precedence or DSCP? 	Without the <b>ip </b>keyword, both IPv4 and IPv6 packets are marked.<div><br /></div><div>Example: <b>set dscp </b><i>value </i>marks both IPv4/IPv6 DSCP, but <b>set ip dscp </b><i>value </i>marks IPv4 only</div>
How do you verify the configuration of a policy-map? 	<b>show policy-map </b><i>name</i>
How do you verify the statistical information about the behavior of a policy-map enabled on an interface? 	<b>show policy-map </b><i>interface</i>
How can you configure a class-map to use NBAR to match web URLs containing a particular string? 	"<b>class-map class1</b><div><b>&nbsp; match protocol http url ""*</b><i>string</i><b>*""</b></div>"
How do you adjust the time interval over which IOS measures packet and bit rates on an interface? 	Interface: <b>load-interval</b>
How can you configure NBAR to gather statistics on an interface? 	<b>ip nbar protocol-discovery</b>
How do you upgrade NBAR's Packet Description Language Modules (PLDMs)? 	Copy the PLDM file to the router, then configure globally:<div><b>ip nbar pldm </b><i>file</i></div>
What is the general rule for the location of ingress QoS marking? 	Mark as close as possible to the source, but not from untrusted devices.<div><br /></div><div>For example, a server may have the capability to mark packets, but you might not trust those markings and wish to remark them manually on the ingress switch port.</div>
What are the Cisco-recommended CoS/IPP/DSCP values for voice payload traffic? 	5 / 5 / EF
What are the Cisco-recommended CoS/IPP/DSCP values for video payload traffic? 	4 / 4 / AF41
What are the Cisco-recommended CoS/IPP/DSCP values for voice/video signaling traffic? 	3 / 3 / CS3
What are the Cisco-recommended CoS/IPP/DSCP values for mission-critical traffic? 	3 / 3 / AF31,AF32,AF33
What are the Cisco-recommended CoS/IPP/DSCP values for transactional data traffic? 	2 / 2 / AF21,AF22,AF23
What are the Cisco-recommended CoS/IPP/DSCP values for bulk traffic? 	1 / 1 / AF11,AF12,AF13
What are the Cisco-recommended CoS/IPP/DSCP values for best-effort traffic? 	0 / 0 / BE
What are the Cisco-recommended CoS/IPP/DSCP values for scavenger traffic? 	0 / 0 / 2,4,6
With regard to traffic policing, what are the two components of the traffic contract? 	Traffic rate measured in bps<div>Burst size measured in number of bytes</div>
True or False: The contents of the ToS byte are automatically copied into the tunnel header (in IPsec transport mode, in tunnel mode, and in GRE tunnels) when the packet is encapsulated. 	True - however, features like NBAR are broken when working with encapsulated traffic.
What is Cisco IOS QoS pre-classification? 	QoS pre-classification permits routers to make egress QoS decisions based on the original traffic before encapsulation.<br />
How and where do you enable QoS pre-classification? 	With the <b>qos pre-classify </b>command under the tunnel interface, virtual template interface, or IPsec crypto map.
What are the two versions of Auto-QoS? 	AutoQoS for VoIP<div>AutoQoS for Enterprise</div>
How do you enable Auto-QoS for VoIP on an access interface? 	<b>auto qos voip </b>{<b>cisco-phone </b>| <b>cisco-soft-phone</b>}
When enabling AutoQoS for VoIP on an access interface, what happens if CDP cannot detect a Cisco phone? 	All traffic is marked as DSCP 0 and treated as best effort, which is the default behavior for a normal trunk port.
When using AutoQoS for VoIP, which types (not classes) of traffic are placed into the PQ on the ingress interface? 	Voice/Video traffic<div>Routing protocol traffic</div><div>STP BPDUs</div><div><br /></div><div>All other traffic is placed into the normal ingress queue.</div>
How do you enable AutoQoS for VoIP on an uplink interface? 	<b>auto qos voip trust</b>
What five global configurations are added when AutoQoS for VoIP is enabled? 	QoS enabled globally<div>CoS-to-DSCP and DSCP-to-CoS mappings created</div><div>PQ enabled for ingress and egress</div><div>Mappings of CoS and DSCP values to ingress and egress queues and thresholds</div><div>Creation of class-maps and policy-maps to identify, prioritize, and police voice traffic</div>
What happens when you issue the command <b>auto qos voip </b>on a router serial interface with a bandwidth of 768k or less? 	The router changes the encapsulation to PPP, creates a PPP Multilink interface, and enables LFI on the interface.
When configuring <b>auto qos voip </b>on a router, what does the <b>trust </b>keyword do with regard to class maps? 	With the <b>trust </b>keyword, the router creates class maps that group traffic based on DSCP values, associates the class maps to a policy map, and assigns the policy map to the interface.<div><br /></div><div>Without the <b>trust</b>&nbsp;keyword, the router creates ACLs that match voice/video data and call control ports. The ACLs are associated with class maps, which are associated with a policy map that marks the traffic appropriately. Traffic not matched by the ACLs is marked with DSCP 0.</div>
How do you display the configured interface AutoQoS commands? 	<b>show auto qos</b>
What are the two steps required to configure AutoQoS for the Enterprise? 	<div>Interface: <b>auto discovery qos </b>[<b>trust</b>]</div><div>Interface: <b>auto qos</b></div><div><br /></div><div>1. Discover traffic on the interface with NBAR: <b>auto discovery qos </b>[<b>trust</b>] where the <b>trust </b>keyword is used when the arriving traffic is already marked.</div><div><br /></div><div>2. Generate the AutoQoS configuration based on the collected traffic at the interface: <b>auto qos</b></div><div><b><br /></b></div><div>Optionally stop NBAR traffic discovery with <b>no auto discovery qos</b></div>
With AutoQoS for the Enterprise, how do you list the types and amounts of traffic collected by NBAR? 	<b>show auto discovery qos</b>
With AutoQoS for the Enterprise, how do you display the class maps, policy maps, and interface configuration generated by the AutoQoS macro? 	<b>show auto qos</b>
What is an alternative name for a software queuing (as opposed to hardware queuing)? 	Fancy queuing
Hardware queues always use ___ logic. 	FIFO
True or False: When an interface finishes sending a packet, the next packet from the hardware queue can be serialized and sent out the interface without requiring a software interrupt to the CPU. 	True
True or False: Hardware queues cannot be affected by IOS queuing tools. 	True
True or False: IOS automatically shrinks the length of the hardware queue to a smaller length than the default when a queuing tool is present. 	True
What is the advantage of having a shorter hardware queue length in conjunction with using software queues? 	Short hardware queue lengths mean packets are more likely to be in the controllable software queues, giving the software queuing more control of the traffic leaving the interface.
What is the only function of a hardware queue that can be manipulated? 	The queue length
How can you verify the length of a hardware transmit queue? 	<b>show controllers </b><i>interface </i><b>| inc tx_limited</b>
___ is the ability to look at packet headers to choose the right queue for each packet. 	Classification
The rules used to choose which packets to drop as queues begin to fill is known as the ___. 	Drop policy
The logic used to determine which packet should be dequeued next is known as ___. 	Scheduling
How is LLQ different from the legacy PQ? 	LLQ prevents the high-priority queue from starving other queues with policing.
How many queues are supported by CBWFQ and LLQ? 	64 queues/classes
CBWFQ and LLQ both have a special queue referred to as ___. 	class-default<div><br /></div><div>This queue exists even if it is not configured. If a packet does not match any of the explicitly configured classes in a policy map, IOS places the packet into the class-default class.</div>
True or False: The CBWFQ scheduler guarantees a minimum percentage of a link's bandwidth to each class/queue. 	True<div><br /></div><div>If some queues are empty and do not need their bandwidth for a short period, the bandwidth is proportionally allocated across the other classes.</div>
True or False: <b>service-policy input </b>is not allowed on routers for policy maps that perform queuing. 	True
What are the three methods available in a policy map for reserving bandwidth? 	Explicit<div>Percent</div><div>Remaining percent</div>
How do you configure CBWFQ (as opposed to LLQ)? 	By using the <b>bandwidth </b>command within a class map.
How do you configure LLQ? 	By using the&nbsp;<b>priority&nbsp;</b>command within a class map.
LLQ uses a policer for the assigned queue. What is the default burst size of the policer? 	20 percent of the configured bandwidth
How do you enable a LLQ with a bandwidth of 100 kbps? 	<b>class-map </b><i>class1</i><div>&nbsp; <b>priority 100</b></div>
When looking at the output of <b>show policy-map </b><i>policy</i>&nbsp;how can you tell if a class is using LLQ? 	"The class will say ""Strict Priority"""
When LLQ is configured within multiple classes in a policy map, which queue is scheduled first? 	LLQ places packets from multiple LLQs into a single internal LLQ. Packets in the different LLQs get scheduled ahead of nonpriority queues, but are serviced based on arrival time for all packets in any of the PQs.
What is the reason for using multiple LLQs in a single policy map? 	Each LLQ can have different policer settings. One use case is for sending both voice and video. Each traffic class can be placed into its own LLQ, but be individually policed so that neither traffic class overruns the other.
True or False: The class <b>class-default </b>internally allocates any unassigned bandwidth among all classes, but can be configured to reserve a minimum amount of bandwidth. 	True
When does IOS use software queuing? 	Only when there is congestion, which occurs when the hardware queue is full.&nbsp;
What is a tail drop, and when does it occur? 	When a queue is full, there is no place to put newly arriving packets, so they are discarded.
With regard to WRED, what is the difference between a full drop and a tail drop? 	The WRED full drop occurs when the average queue depth rises above the configured maximum threshold, and all new packets are discarded. However, the actual queue might not be full.<div><br /></div><div>When the queue is full, a tail drop occurs.</div>
What value does WRED look at when determining whether a queue has filled enough to begin discarding packets? 	The average queue depth<div><br /></div><div>Packets are randomly dropped when the average queue depth is between the configured minimum and maximum thresholds.</div>
What is the WRED Mark Probability Denominator (MPD)? 	The MPD is the calculated discard percentage used at the maximum threshold based on 1/MPD.<div><br /></div><div>For example, a MPD of 10 (1/10 = 10%) means that the discard rate grows from 0% to 10% as the average queue depth grows from the minimum threshold to the maximum. When the maximum is reached, a full drop occurs.</div>
What does a WRED traffic profile consist of? 	Minimum threshold<div>Maximum threshold</div><div>Mark Probability Denominator (MPD)</div>
For which two locations can WRED be configured? 	Physical interfaces (with FIFO queuing)<div>Non-LLQ classes in a CBWFQ policy map</div>
How do you enable WRED? 	With the <b>random-detect </b>keyword either under a physical interface or in a non-LLQ class in a policy map.
What is the difference between <b>random-detect </b>and <b>random-detect dscp-based</b>? 	Without the <b>dscp-based </b>keyword, WRED uses IP Precedence.
How do you modify the default WRED traffic profiles? 	After issuing the <b>random-detect </b>or <b>random-detect dscp-based </b>command, issue either <b>random-detect precedence </b>or <b>random-detect dscp</b>
Modified Deficit Round-Robin (MDRR) serves as a replacement for what? 	MDRR is used in place of CBWFQ and LLQ on the Cisco 12000 series router platform, because it does not support CBWFQ and LLQ.
Modified Deficit Round Robin (MDRR) allows classifying traffic into ___ queues. 	seven round-robin queues (0 - 6) plus one PQ
What is the difference between the Modified Deficit Round-Robin (MDRR) PQ strict priority mode and alternate mode? 	Strict priority mode serves the PQ whenever traffic is present in the queue, which can lead to starvation of the other queues.<div><br /></div><div>Alternate mode serves the PQ in between servicing each of the other queues: 0, P, 1, P, 2, P, etc. This prevents queue starvation at the expense of jitter and latency as compared to strict priority mode.</div>
What is the relationship between the Modified Deficit Round-Robin (MDRR) Quantum Value and Deficit Count? 	The Quantum Value is the number of bytes the queue holds.&nbsp;The Deficit Count is the number of bytes beyond the QV that were transmitted in a single round-robin pass.<div><br /></div><div>Example: If the QV is set to 1500, and two 1000-byte packets were transmitted during a pass, there is a Deficit Count of of -500, so 500 bytes are removed from the next pass, making the QV 1000 for that pass.</div>
The Catalyst 3560 series features ___ ingress queues. 	Two, either of which (but not both) can be configured as a PQ
What method is used by the Catalyst 3560 packet scheduler to control the rates at which packets are sent from the ingress queues to the internal switch fabric? 	Shared Round Robin (SRR)
On the Catalyst 3560 platform, ___ traffic is placed into queue 2 by default, and all other traffic is placed into queue 1. 	CoS 5
On the Catalyst 3560 platform, what is the default bandwidth ratio for the two ingress queues? 	90% for queue 1<div>10% for queue 2</div>
What is the congestion avoidance method (not queuing method) used on the Catalyst 3560? 	Weighted Tail Drop (WTD), which allows configuration per-queue
The Catalyst 3560 has ___ egress queues per interface. 	Four
What are the two steps involved in classifying and assigning a frame to the proper egress queue on the interface of a Catalyst 3560 switch, assuming the forwarding decision has been made? 	<div>DSCP-to-CoS map &gt; CoS-to-queue map</div><div><br /></div>The frame's internal DSCP is compared to a global DSCP-to-CoS map to determine a CoS value<div><br /></div><div>The per-interface CoS-to-queue map determines the queue for a frame based on the assigned CoS value</div>
What is the difference between shared round-robin and shaped round-robin queuing? 	Both help to prevent queue starvation when a PQ exists, but shaped round-robin also rate-limits the queues so that they do not exceed the configured percentage of the link's bandwidth.
How do you enable ingress priority queuing on a Catalyst 3560 switch? 	Globally:<div><b>mls qos srr-queue input priority-queue </b>{<b>1 </b>| <b>2</b>} <b>bandwidth </b><i>percentage</i></div>
How do you verify the input queue settings on a Catalyst 3560 switch? 	<b>show mls qos input-queue</b>
On a Catalyst 3560, how do you configure the egress queues? 	Per-interface:<div><b>srr-queue bandwidth </b>{<b>share </b>| <b>shape</b>} <i>weight1 weight2 weight3 weight4</i></div><div><i><br /></i></div><div>The default weights are all 25, where each queue gets 25% of the available bandwidth.</div>
What is the difference between Shared Round-Robin and Shaped Round-Robin scheduling with regard to bandwidth utilization? 	The shaped scheduler never allows any queue, PQ or non-PQ, to exceed its configured percentage of link bandwidth, even if that means the link sits idle.
True or False: RSVP reservations are unidirectional. 	True. Two reservations must be made, from source to destination, and from the destination back to the source.
RSVP reservations are made per ___ and per ___. 	Direction, flow
What three things does RSVP use to classify an individual flow? 	Destination IP address<div>Protocol ID</div><div>Destination port</div>
How do RSVP messages between two RSVP-capable routers appear in transit to non-RSVP-capable routers? 	The RSVP messages appear as ordinary IP packets to non-RSVP-capable routers.
What is the first general step in setting up an RSVP-based reservation? 	The first RSVP-capable router in the path from source to destination sends an RSVP PATH message toward the destination IP address.
When the last RSVP-capable router in the path receives a PATH message, what does it do? 	It replies with a RESV message requesting the necessary QoS.
If any RSVP router along the path does not have the required resources to reserve, what happens? 	The failing RSVP router discards the received RESV message requesting the particular QoS, and returns an error message.
How does an initiating RSVP router know if a reservation has succeeded? 	The originating router will receive back a RESV message that has traveled the entire path between source and destination RSVP routers.
How does an originating RSVP router respond to receiving a RESV message? 	Receipt of a RESV message means the reservation was successful, and the originating router sends back a RESV message in response to the destination router's PATH message to secure QoS in both directions.<div><br /></div><div>The destination router responds with a ResvConf message, confirming the reservation.</div>
What is the final RSVP message sent from destination back to source when resources have been reserved in both directions? 	The destination RSVP router responds with a ResvConf message, which confirms the reservation.
How do you configure the RSVP total and per-flow bandwidth reservation? 	<div>Interface:</div><div><b>ip rsvp bandwidth </b><i>total-kbps single-flow-kbps</i></div>
How do you set the DSCP value for RSVP control messages? 	Interface:<div><b>ip rsvp signalling dscp </b><i>value</i></div>
True or False: When using RSVP, it is necessary to enable RSVP to establish state on every router in the path. 	False. Transit routers do not require RSVP to be enabled, and RSVP messages are forwarded as any other ordinary IP packet.
When traffic shaping is configured, and the configured rate is exceeded, what happens to the packets? 	The packets are delayed and held in a shaping queue.<div><br /></div><div>The packets are released from the queue so that over time the overall bit rate does not exceed the shaping rate.</div>
What is the shaper static time interval called? 	Tc, which is measured in milliseconds<div><br /></div><div>Tc = Bc/CIR</div>
What is the term for the number of bits that a shaper can send in a time interval (Tc)? 	Committed burst (Bc)
What's the difference between the CIR and the shaping rate? 	The CIR defines the rate for a VC based on a business contract<div><br /></div><div>The shaping rate is the configured rate for a shaper on a router, which may or may not be the same value as the CIR</div>
What is the shaping term used when more bits than the Bc are allowed to be sent during a given Tc? 	Burst excess (Be)
What is the basic formula for traffic shaping? 	Tc = Bc / CIR (shaping rate)<div><br /></div><div>With a burst size of 8000 bits and a CIR of 64 kbps, the Tc = 125ms</div>
With regard to traffic shaping, what is the token bucket model? 	The bucket size is the Bc, and at the beginning of each Tc, the token bucket is refilled.<div><br /></div><div>Without Be, if there are tokens still in the bucket at the beginning of the next Tc, the overage of new tokens are wasted. If the Bc is 8000, and there are 1000 tokens still in the bucket at the next Tc, 7000 new tokens are placed into the bucket, and 1000 new tokens are wasted.</div>
With the shaper token bucket model, what happens if a packet needs to be sent, but there are not enough tokens in the bucket? 	The packet must wait until the next Tc (when new tokens are added to the bucket) to acquire enough tokens for the packet to be sent.
How does Be work with the shaper token bucket model? 	Be (excess burst) makes the single token bucket bigger, but there will still only be the Bc (committed burst) number of tokens added at the beginning of each Tc (time interval).
Newer versions of Cisco IOS use class-based shaping. What did older versions of Cisco IOS use? 	Generic Traffic Shaping
How do you configure class-based traffic shaping? 	Identify the traffic in a class-map<div>Use the <b>shape </b>command in a policy-map</div><div>Apply the policy-map to an interface with <b>service-policy output</b></div>
How does class-based shaping calculate Bc, Be, and Tc when the rate is less than or equal to 320 kbps? 	<div>Tc = 8000 bits / shaping bit rate</div><div><br /></div>Bc = 8000 bits<div>Be = Bc = 8000 bits</div><div>Tc = Bc / shaping rate</div>
How does class-based shaping calculate Bc, Be, and Tc when the rate is more than 320 kbps? 	Bc = Tc (25 ms) * shaping rate<div>Be = Bc</div><div>Tc = 25 ms</div>
What happens if the <b>bandwidth </b>is not set on a serial subinterface? 	It does not inherit the bandwidth setting of the physical serial interface, it defaults to 1544.
How does <b>shape peak </b>work differently than <b>shape average</b>? 	Both calculate Bc, Be, and Tc the same way<div><br /></div><div><b>shape peak </b>refills Bc + Be (instead of just Bc) tokens each Tc</div><div><br /></div><div>Peak shaping gets the right to send both the committed burst and excess burst each time period.</div><div><br /></div><div>Shaping rate = configured rate * (1+ Be/Bc)</div><div><br /></div><div>Example, <b>shape peak 64000 </b>= 64 (1 + 8000/8000) = 128</div>
Class-based policing is used in newer Cisco IOS versions. What was used in older Cisco IOS versions? 	Committed Access Rate
What are the three categories of packets in class-based policing? 	Conforming<div>Exceeding</div><div>Violating</div>
What is the simplest form of policing referred to as? 	Single-rate, two-color
Shaping token buckets are measured in ___. Policing token buckets are measured in ___. 	bits<div>bytes</div>
How does single-rate, two color (one bucket) policing use the token bucket model? 	Tokens are replenished at the policing rate.&nbsp;<div><br /></div><div>For example, with a policed rate of 128kbps, ther policer replenishes 16,000 tokens per second (tokens represent 1 byte with policing). If 0.1 seconds have passed since the previous packet arrived, 1600 tokens would be replenished.<div><br /></div><div>(Current packet time - previous packet time * policed rate) / 8</div><div>(0 - 0.1 * 128000) / 8 = 1600 tokens to be replenished</div></div>
What is the difference between single-rate, two-color (single bucket) and single-rate, three-color (two bucket) policing? 	Single-rate, two-color policing uses a single Bc bucket and supports conform and exceed actions.<div><br /></div><div>Single-rate, three-color policing uses a Bc bucket, a Be bucket, and supports conform, exceed, and violate actions.</div>
With single-rate, two color policing, when is the traffic considered conforming? 	When the size of the packet requiring transmission is equal to or less than the number of tokens available in the Bc bucket.<div><br /></div><div>Xp &lt;= Xb</div><div>Xp tokens are drained from the Bc bucket</div>
With single-rate, two color policing, when is the traffic considered exceeding? 	When the size of the packet requiring transmission is greater than the number of tokens available in the Bc token bucket.<div><br /></div><div>Xp &gt; Xb</div><div>No tokens are drained from the Bc bucket</div>
With single-rate, three color policing, when is the traffic considered conforming? 	When the size of the packet requiring transmission is equal to or less than the number of tokens available in the Bc bucket.<div><br /></div><div>Xp &lt;= Xbc</div><div>Xp tokens are drained from the Bc bucket</div>
With single-rate, three color policing, when is the traffic considered exceeding? 	When the size of the packet requiring transmission is greater than the number of tokens available in the Bc bucket, but less than or equal to the number of tokens available in the Be bucket.<div><br /></div><div>Xp &gt; Xbc AND Xp &lt;= Xbe</div><div>Xp tokens are drained from the Be bucket</div>
With single-rate, three color policing, when is the traffic considered violating? 	When the size of the packet requiring transmission is greater than the number of tokens available in both the Bc and Be buckets.<div><br /></div><div>Xp &gt; Xbc AND Xp &gt; Xbe</div><div>No tokens are drained from any bucket</div>
With two-rate, three-color policing, what are the two rates referred to as? 	Committed Information Rate (CIR)<div>Peak Information Rate (PIR)</div>
How does dual-rate, three-color (two bucket) policing work? 	The Bc bucket is replenished at the CIR, and the Be bucket is replenished at the PIR.<div><br /></div><div>A conforming packet drains tokens equally from both Bc and Be buckets (the same packet uses double the number of tokens).</div><div><br /></div><div>An exceeding packet drains tokens from the Be bucket.</div><div><br /></div><div>Violating packets drain no tokens, because there are none to drain.</div>
Where is class-based policing configured? 	With the <b>police </b>command inside a <b>policy-map</b>
How do you configure a single-rate, three-color policer with the following requirements:<div><br /></div><div>Policed traffic rate of 128 kbps</div><div>Committed burst time of one second</div><div>Excess burst time of half of one second</div><div>Conform action of forward</div><div>Exceed action of marking the packet to DSCP 0</div><div>Violate action of discarding the packet</div> 	<b>police cir 128000 bc 16000 be 8000 conform-action transmit exceed-action set-dscp-transmit 0 violate-action drop</b><div><b><br /></b></div><div>CIR = bits</div><div>Bc &amp; Be = bytes</div>
In configuring the <b>police </b>command, what is the difference between a single-rate, two-color and a single-rate, three-color configuration? 	The single-rate, three-color configuration must either set a violate action, or explicitly set the Be to something larger than 0.
If you do not configure a Bc value with the <b>police </b>command, what is the value used by default? 	The number of bytes that could be sent in 1/4 second at the defined policing rate.<div><br /></div><div>Bc = (CIR * 0.25 seconds) / 8 &nbsp;= &nbsp;CIR / 32</div><div><br /></div><div>If the result is less than 1500, the default Bc will be 1500.</div>
What is the simplest way to configure dual-rate policing? 	<b>police cir </b><i>cir-bps </i><b>pir </b><i>peak-bps</i>
When multiple fields in the same packet are marked when using class-based policing, what is this referred to as? 	Multi-action policing
How do you configure multi-action policing? 	When configuring the <b>police </b>statement, do not enter any actions. When you enter the command without actions, you are placed into the policing subconfiguration mode, where you can configure multiple actions.
How can you configure policing as a percentage of interface bandwidth? 	The <b>police </b>command uses the <b>percent </b>keyword for CIR and PIR, the Bc and Be values use the <b>ms </b>(milliseconds) keyword.<div><br /></div><div>Example:</div><div><b>police cir percent 25 bc 500 ms pir percent 50 be 500 ms conform transmit exceed transmit violate drop</b></div><div><b><br /></b></div><div>Where the CIR is 25% of the link, the PIR is 50%, and the Bc and Be are both 500 ms.</div>
CAR uses what type of policing? 	single-rate, two-color
How do you configure the CAR (Committed Access Rate) feature? 	CAR is configured with the <b>rate-limit </b>command under an interface.
How do you configure CAR to perform subclassification? 	Configure the first <b>rate-limit </b>statement with <b>conform-action continue</b>&nbsp;which causes all conforming packets to be evaluated by subsequent <b>rate-limit </b>statements.
When configuring traffic shaping for latency-sensitive traffic, what is the recommended Tc setting? 	10ms
How do you configure the legacy Generic Traffic Shaping feature? 	Interface:<div><b>traffic-shape rate </b><i>rate</i></div>
What is the default Layer 2 encapsulation type on serial interfaces? 	HDLC
HDLC is an ISO standard, but Cisco's version is proprietary. What makes Cisco's version proprietary? 	Cisco's version of HDLC includes a 2-byte Type field for multiprotocol support.
How do you determine which end of a cable (DTE or DCE) is connected to a serial interface? 	<b>show controllers </b><i>interface</i>
Which end of a serial link provides the clock signal, and how do you set it? 	On the DCE end: <b>clockrate</b><div><b><br /></b></div><div>Newer interfaces and versions of IOS configure this automatically.</div>
How does the PPP header compare to the Cisco HDLC header? 	PPP includes a standardized Protocol field in the same location as the Cisco HDLC Type field. PPP also includes padding in the Data field to ensure the frame has an even number of bytes.
What is the difference between the PPP LCP and NCP? 	Link Control Protocol (LCP) controls the features independent of any specific Layer 3 protocol<div><br /></div><div>For each Layer 3 protocol supported by PPP, a Network Control Protocol (NCP) is defined (such as IPCP for IP).</div>
What four features are offered by the PPP LCP? 	Link Quality Monitoring (link is dropped if a percentage of frames have errors)<div>Looped Link Detection (by sending a random Magic Number)</div><div>Layer 2 Load Balancing (via MLPPP)</div><div>Authentication (PAP/CHAP)</div>
How do you enable the PPP LQM feature? 	Interface: <b>ppp quality</b>
How does MLPPP perform load balancing? 	Each frame is fragmented by the number of links in the bundle, and sent across all links equally.<div><br /></div><div>Example: a multilink bundle containing three links would split each frame into thirds, and send each fragment across the individual links.</div>
How do you enable MLPPP? 	Create a multilink interface, enable multilink, and assign a group:<div><b>interface multilink </b><i>number</i></div><div>&nbsp; <b>ppp multilink</b></div><div><b>&nbsp; ppp multilink group </b><i>x</i></div><div><i><br /></i></div><div>Assign each interface to the multilink group:</div><div><b>interface </b><i>interface</i></div><div>&nbsp; <b>ppp multilink group </b><i>x</i></div>
What is Link Fragmentation and Interleaving (LFI)? 	LFI prevents small, delay-sensitive packets from having to wait on longer, delay-insensitive packets to be completely serialized out an interface.<div><br /></div><div>LFI fragments larger packets and sends delay-sensitive packets between the fragments.</div><div><br /></div><div>LFI is most effective on links of 768k or less.</div>
How do you enable MLPPP LFI? 	Interface: <b>ppp multilink interleave</b>
After enabling MLPPP LFI, how do you adjust the fragment size? 	Interface: <b>ppp multilink fragment-delay </b><i>x</i><div><i><br /></i></div><div>x = delay in milliseconds</div><div><br /></div><div>Size = x * bandwidth-kbps</div><div><br /></div><div>Example: If the link is 256k, and the delay is 5ms, the fragment size = 5 * 256 = 1280 bits = 160 bytes</div>
What are the three types of compression supported by PPP? 	Layer 2 payload<div>TCP header</div><div>RTP header</div>
How do you enable PPP compression on a link? 	Interface: <b>compress</b><div><b><br /></b></div><div>After issuing this command, PPP starts the Compression Control Protocol (CCP) NCP to support compression negotiation and manage the compression process.</div>
When is PPP TCP and RTP header compression most effective? 	When the average payload is small.
How do you configure PPP TCP or RTP header compression? 	<div>Class-based policy-map:</div><div><b>compress header ip </b>{<b>tcp </b>| <b>rtp</b>}</div>
What is the purpose of PPPoE? 	PPPoE provides an emulated (and optionally authenticated) point-to-point link across a shared medium.
What is the first step in configuring PPPoE on the ISP/server side? 	Create a Broadband Aggregation Group to handle the incoming PPPoE connections and bind it to a virtual template interface:<div><br /></div><div><b>bba-group pppoe </b><i>name</i></div><div>&nbsp; <b>virtual-template </b><i>number</i></div>
How do you limit the number of PPPoE sessions allowed per-MAC? 	Under the <b>bba-group</b>:<div>&nbsp; <b>sessions per-mac limit </b><i>number</i></div>
Why is the MTU typically lowered to 1492 when using PPPoE? 	The PPP header adds 8 bytes of overhead to each frame.
How can you verify a PPPoE connection? 	<b>show pppoe session</b>
How do you enable PPPoE authentication on the ISP/server side? 	Under the <b>virtual-template </b>interface:<div><b>&nbsp; ppp authentication chap callin</b></div>
How do you configure a <b>virtual-template </b>interface for PPPoE for the ISP/server side? 	<b>interface virtual-template </b><i>number</i><div>&nbsp; <b>ip address </b><i>ip mask</i></div><div><i>&nbsp; </i><b>peer default ip address pool </b><i>pool</i></div><div><i><br /></i></div><div>The referenced IP address pool is configured globally:</div><div><b>ip local pool </b><i>pool start-ip end-ip</i></div>
After creating the BBA group and the virtual-template interface, how do you enable PPPoE on the customer-facing interface on the ISP/server side? 	<b>interface </b><i>interface</i><div><i>&nbsp; </i><b>no ip address</b></div><div><b>&nbsp; pppoe enable group </b><i>group</i></div><div><i><br /></i></div><div>Addressing is issued by the virtual-template.</div>
How do you configure PPPoE on the CPE? 	<b>interface dialer1</b><div><b>&nbsp; dialer pool 1</b></div><div><b>&nbsp; encapsulation ppp</b></div><div><b>&nbsp; ip address negotiated</b></div><div><b>&nbsp; mtu 1492</b></div><div><b><br /></b></div><div><b>interface </b><i>interface</i></div><div><i>&nbsp; </i><b>no ip address</b></div><div><b>&nbsp; pppoe-client dial-pool-number 1</b></div>
What are the four high-level steps required to configure PPPoE on the ISP/server side? 	Create a BBA group and assign a virtual template<div>Edit the virtual template and assign an IP address and an IP pool to use</div><div>Create the IP pool</div><div>Edit the client-facing interface with no IP address, and enable it for PPPoE</div>
What are the two high-level steps required to configure the client side of a PPPoE connection? 	Configure a dialer interface<div><div>Associate the dialer interface to a physical interface</div></div>
How do you configure Cisco IOS to prompt the user for a password when connecting to a console, AUX, or VTY line? 	With the <b>login </b>statement under the console, aux, or VTY line.
How do you define the simple password to be used when logging into a console, AUX, or VTY line? 	With the <b>password </b>statement under the console, AUX, or VTY line.
How do you obfuscate all clear-text passwords present in the Cisco IOS configuration? 	With the global <b>service password-encryption </b>statement.
If passwords have been encrypted with the <b>service password-encryption </b>command, what happens when <b>no service password-encryption </b>is issued? 	Individual existing passwords remain encrypted until they are changed.
True or False: The <b>enable secret </b>password is listed in plaintext unless <b>service password-encryption </b>is on. 	False: The&nbsp;<b>enable secret </b>password is not affected by <b>service password-encryption </b>and is always encrypted with MD5.
How do you configure VTY lines to use only SSH? 	<b>transport input none</b><div><b>transport input ssh</b></div><div><b><br /></b></div><div>If you do not issue <b>transport input none </b>first, the SSH method is added to the existing default telnet method.</div>
What is the well-known port used for RADIUS? 	UDP 1812<div><br /></div><div>1645 was the original defined port, but later changed to 1812. Cisco IOS still uses 1645 by default.</div>
What is the well-known port used for TACACS+? 	TCP 49
True or False: When multiple AAA authentication methods are configured, if one method rejects the user, the next method is attempted. 	False: the first configured reachable method is used as long as there is a response of either accepting or rejecting the user.<div><br /></div><div>For example, if there are three configured methods, TACACS, RADIUS, and local authentication, and the TACACS server is not reachable, and the user is rejected by the RADIUS server, local authentication is not attempted.</div>
What is the default port used for RADIUS accounting? 	UDP 1646
What happens when you enable AAA with regard to accessing console and VTY lines? 	If the <b>login </b>statement was configured, it is removed. However, the <b>password </b>statement remains, and is used if the login authentication method is set to <b>line</b>.
What does <b>default </b>refer to in the command <b>aaa authentication login default </b><i>method</i>? 	<b>default </b>refers to the default authentication list. Named authentication lists are also supported.&nbsp;
What does&nbsp;<i>method</i><b>&nbsp;</b>refer to in the command&nbsp;<b>aaa authentication login default&nbsp;</b><i>method</i>? 	The method is what is used to validate the AAA function, authentication in this case.<div><br /></div><div>Examples are <b>group</b>, which referes to AAA servers, <b>line </b>for the line password, and <b>local </b>to use the local username/password settings.</div>
What does&nbsp;<b>group&nbsp;</b>refer to in the command&nbsp;<b>aaa authentication login default&nbsp;group</b>? 	<b>group </b>refers to groups of AAA servers, including named lists, all LDAP servers, all RADIUS servers, and all TACACS+ servers.<div><br /></div><div>For example, the full command to use all of the configured RADIUS servers is:</div><div><b>aaa authentication login default group radius</b></div>
What is the default port for RADIUS authentication used by Cisco IOS? 	UDP 1645
How do you configure an override for the AAA default login methods for console, aux, or VTY lines? 	Configure the global AAA authentication statement with a user-defined list name:<div><b>aaa authentication login </b><i>name method1 ..method2 etc</i></div><div><i><br /></i></div><div>Configure the console, aux, or VTY lines to refer to the list:</div><div><b>line </b>{<b>con</b>&nbsp;| <b>aux </b>| <b>vty</b>} <i>number</i></div><div>&nbsp; <b>login authentication </b><i>name</i></div>
How do you configure PPP to use AAA for CHAP authentication? 	<div>Define the AAA methods for PPP:</div><b>aaa authentication ppp </b><i>list method1 ..method2</i><div><i><br /></i></div><div>Enable PPP authentication on the interface:</div><div><b>ppp authentication chap </b><i>list</i></div>
What's the difference between <b>no cdp run </b>and <b>no cdp enable</b>? 	<b>no cdp run </b>disables CDP globally for the device<div><br /></div><div><b>no cdp enable </b>disables CDP at the interface-level</div>
How do you prevent a switch port from sending or processing received DTP messages? 	<b>switchport nonegotiate</b>
What are the three methods for which a Catalyst switch can limit device MAC addresses on a switch port? 	Static configuration of the allowed MAC addresses<div>Dynamic learning up to the defined maximum, entries are lost upon reload</div><div>Dynamic learning with the addresses saved in the config (sticky learning)</div>
When <b>switchport port-security </b>is enabled, how many MAC addresses are accepted on the port by default? 	1
With <b>switchport port-security</b>, what are the three violation modes, and what is the difference between them? 	<b>protect </b>silently implements the port security<div><b>restrict </b>adds SNMP traps and Syslog logging of events</div><div><b>shutdown </b>places the port into the err-disabled state</div>
How do you view the security related details of a switch port interface? 	<b>show port-security interface </b><i>interface</i>
True or False: Sticky-learned MAC addresses are automatically retained across a reload. 	False: While sticky-learned MAC addresses are added to the running configuration, the configuration must be saved before a reload.
How do you enable Dynamic ARP Inspection? 	Globally:<div><b>ip arp inspection vlan </b><i>vlan</i></div>
When Dynamic ARP Inspection is enabled globally, all ports become untrusted. How do you disable DAI on an individual port? 	Interface:<div><b>ip arp inspection trust</b></div>
How does DAI interact with DHCP snooping on an untrusted port? 	If an ARP reply has a source address that was not DHCP-assigned to a device off that port, the ARP reply is filtered by DAI.
How do you configure DAI to filter invalid ARP messages based on statically defined IP or MAC addresses? 	<div>Define an ARP ACL, and reference it via DAI:</div><div><br /></div>Globally:<div><b>arp access-list </b><i>arp-acl-name</i></div><div><b><br /></b></div><div><b>ip arp inspection filter </b><i>arp-acl-name </i><b>vlan </b><i>vlans </i>[<b>static</b>]</div><div><br /></div><div>The <b>static </b>keyword means ARP messages are denied unless explicitly permitted by the ACL. Without the <b>static </b>keyword, if the ARP message does not match the ACL, it is then checked against DHCP bindings.</div>
What does the <b>static </b>keyword refer to in the following configuration?<div><br /></div><div><b>ip arp inspection filter </b><i>arp-acl-name </i><b>vlan </b><i>vlans </i>[<b>static</b>]</div> 	The&nbsp;<b>static&nbsp;</b>keyword means ARP messages are denied unless explicitly permitted by the ACL. Without the&nbsp;<b>static&nbsp;</b>keyword, if the ARP message does not match the ACL, it is then checked against DHCP bindings.
How do you configure DAI to drop ARP replies if the source MAC in the Ethernet header does not match the source MAC in the ARP reply? 	Globally:<div><b>ip arp inspection validate src-mac</b></div>
How do you configure DAI to drop ARP messages containing unexpected IP addresses, such as 255.255.255.255 and multicasts. 	Globally:<div><b>ip arp inspection validate ip</b></div>
True or False: DAI requires DHCP snooping to be enabled. 	False. DAI can use the DHCP snooping binding database, in which case DHCP snooping must first be enabled, however DAI does not require DHCP snooping to be enabled when using static ARP ACLs.
How do you adjust rate limit of ARP messages accepted per port per second with Dynamic ARP Inspection? 	<div>Globally:</div><div><b>ip arp inspection limit&nbsp;</b></div>
The DHCP snooping binding database can also be used by what two other security features? 	Dynamic ARP Inspection<div>IP Source Guard</div>
How does DHCP snooping prevent a rogue DHCP server MITM attack? 	DHCP snooping filters messages sent by only by DHCP servers (not DHCP clients) on untrusted ports, because a DHCP server should never reside on an untrusted port.
How does DHCP snooping prevent an attacking host from releasing a legitimate host's DHCP lease? 	DHCP <i>release</i> and <i>decline</i> messages on untrusted ports are checked against the DHCP snooping binding database. The messages are dropped if the IP address in the messages is not associated with the bound port.
How do you enable DHCP snooping? 	Globally:<div><b>ip dhcp snooping vlan </b><i>vlans</i></div>
How do you designate a port as trusted by DHCP snooping? 	Interface:<div><b>ip dhcp snooping trust</b></div>
How do you add a static entry into the DHCP snooping binding database? 	Privileged EXEC mode:<br /><div><b>ip dhcp snooping binding </b><i>mac </i><b>vlan </b><i>vlan ip </i><b>interface </b>interface</div>
How do you configure the rate at which a port will accept DHCP messages? 	Interface:<div><b>ip dhcp snooping limit rate </b><i>messages-per-second</i></div><div><i><br /></i></div><div>Default: unlimited</div>
What does IP Source Guard do? 	IP Source Guard uses either the DHCP snooping database or static bindings to permit incoming packets only from bound IP addresses (and optionally IP + MAC). The helps mitigate IP spoofing.
How do you enable IP Source Guard? 	Interface:<div><b>ip verify source </b>[<b>port-security</b>]</div><div><br /></div><div>The <b>port-security </b>keyword verifies both IP and MAC.</div><div><br /></div><div>Note: DHCP snooping must be enabled, even if static bindings are to be used.</div>
How do you configure a static IP Source Guard binding? 	Globally:<div><b>ip source binding </b><i>mac </i><b>vlan </b><i>vlan ip </i><b>interface </b><i>interface</i></div><div><i><br /></i></div><div>Note: When using IP Source Guard, DHCP snooping must be enabled, even if static bindings are used.</div>
True or False: IP Source Guard does not work with static bindings unless DHCP snooping is enabled. 	True: IOS will accept all IP Source Guard configuration commands, including those for static bindings, but will not become active until DHCP snooping is enabled.
What kind of frames are sent between the 802.1X supplicant and authenticator? 	EAPoL: Extensible Authentication Protocol over LAN
With regard to communications between the 802.1X supplicant and authentication server, what role does the authenticator serve? 	The authenticator (typically a switch) translates between EAPoL frames between itself and the supplicant, and the RADIUS messages required by the authentication server. The authenticator also enables/disables ports based on the success/failure of authentication.
After enabling AAA and configuring one or more RADIUS servers, how do you enable 802.1X and configure ports for authentication? 	Globally:<div><b>aaa authentication dot1x default group radius</b></div><div><b>dot1x system-auth-control</b></div><div><b><br /></b></div><div>Interface:</div><div><b>authentication port-control </b>{<b>auto </b>| <b>force-authorized </b>| <b>force-unauthorized</b>}</div>
When a port using 802.1X authentication is forced to be unauthorized, what three types of traffic are still allowed? 	CDP, STP, and EAPoL
How do you configure Storm Control on EtherChannel ports? 	You can use the regular Storm Control configuration commands on EtherChannel interfaces, but the commands have no effect. Storm Control can be enabled only on physical ports.
What types of traffic can Storm Control limit? 	Storm Control can limit individually broadcast, multicast, and unicast traffic per-port.
How do you enable the Storm Control feature? 	Interface:<div><b>storm-control </b><i>traffic-type </i><b>level </b><i>rising </i>[<i>falling</i>]</div><div><br /></div><div><i>traffic-type </i>is either broadcast, multicast, or unicast, and is set individually with multiple statements.</div><div><br /></div><div>The <b>level </b>refers to the rate of packets as either a percentage of the link bandwidth, bps, or pps, and can have separate rising and falling thresholds.</div>
By default, Storm Control drops packets when the configured threshold has been reached. How can you configure the switch to send an SNMP trap or shut down the port when this occurs? 	Interface:<div><b>storm-control action </b>{<b>trap </b><i>| </i><b>shutdown</b>}</div>
How can you verify the settings and current status for Storm Control? 	<b>show storm-control</b>
What are the numbered ranges for standard IP ACLs? 	1-99 and 1300-1999
What are the numbered ranges for extended IP ACLs? 	100-199 and 2000-2699
How do wildcard masks work? 	"The 0 bits must match, and the 1 bits are ""don't care""<div><br /></div><div>Example:</div><div>0.0.0.255 = first 24 bits must match</div><div>128.0.0.0 = all bits except the first must match</div><div>254.255.255.254 = the 8th and last bits must match</div>"
What is the quick way to calculate a wildcard mask for a particular prefix length? 	255.255.255.255 - subnet mask<div><br /></div><div>Example:</div><div>255.255.255.255 - 255.255.240.0 = 0.0.15.255</div>
What is another name for a subnet broadcast address? 	A directed broadcast address
What is the default interface command <b>no ip directed-broadcast </b>used for? 	This prevents the router from forwarding broadcasts onto the network segment from a different segment.&nbsp;<div><br /></div><div>This prevents certain attacks like the Smurf attack where a malicious host sends an ICMP Echo to the destination subnet's broadcast address, with the source being a target on the destination subnet.&nbsp;</div>
What is a unicast Reverse-Path-Forwarding (uRPF) check? 	uRPF is a security feature that checks the source IP address of incoming packets and will discard them if the source IP is not reachable on the incoming interface (strict mode) or if it is not reachable via any interface (loose mode).<div><br /></div><div>The default route is not used for this check unless the router is configured to do so.</div>
How do you enable uRPF strict mode? 	<div>Interface:</div><div><b>ip verify unicast source reachable-via rx</b></div>
How do you configure uRPF loose mode? 	<div>Interface:</div><div><b>ip verify unicast source reachable-via any</b></div>
When configuring uRPF, what does the <b>allow-default </b>keyword do? 	Whether uRPF strict or loose mode is configured, the default behavior is to not verify the uRPF check against the default route. The <b>allow-default </b>keyword allows the router's default route to be used in determining the validity of the packet.<div><br /></div><div>Interface:</div><div><b>ip verify unicast source reachable-via </b>{<b>rx </b>| <b>any</b>} <b>allow-default</b></div>
What's the difference between a Smurf attack and a Fraggle attack? 	Both trigger IP directed broadcasts. Smurf uses ICMP Echo, Fraggle uses UDP Echo.
With Cisco IOS TCP Intercept, what is the difference between Watch mode and Intercept mode? 	TCP Intercept monitors TCP connections for SYN attacks.<div><br /></div><div>In Watch mode, it keeps state information for TCP connections that match an ACL, and if TCP does not complete the 3-way handshake within a particular time period, TCP Intercept sends a TCP RST to the destination to clean up the connection. Watch mode also temporarily denies new TCP requests if more than 1100 occur in one second.</div><div><br /></div><div>In Intercept mode, the router replies to TCP SYNs instead of forwarding them. If the 3-Way Handshake completes, the router creates a TCP connection to the destination, then stitches the two connections together.</div>
How do you configure TCP Intercept? 	Globally:<div><b>ip tcp intercept list </b><i>acl</i></div><div><b>ip tcp intercept mode </b>{<b>watch </b>| <b>intercept</b>}</div>
How do you verify TCP Intercept? 	<b>show tcp intercept </b>{<b>connections </b>| <b>statistics</b>}
After defining a policy-map to be used for CoPP, how do you apply it? 	<b>control-plane</b><div><b>&nbsp; service-policy input </b><i>policy-map-name</i></div>
With CoPP, the only Layer 2 protocol that can be explicitly assigned to a class is ___. 	ARP<div><br /></div><div>All other Layer 2 protocols fall under the default class.</div>
What are the only three <b>match </b>options that can be used with CoPP class maps? 	ACLs<div>IP Precedence</div><div>DSCP</div>
Because classes within a policy-map are evaluated top-down, which traffic should you place at the top for CoPP? 	Malicious traffic should be placed at the top so that it is dropped immediately.
How do you configure the proper mode on a tunnel interface for DMVPN? 	Tunnel interface:<div><b>tunnel mode gre multipoint</b></div>
When creating a tunnel interface for DMVPN, how do you associate the tunnel interface with a physical interface? 	Tunnel interface:<div><b>tunnel source </b><i>physical-interface</i></div>
With DMVPN, what configuration statement on the hub is necessary to allow dynamic routing protocols to operate? 	Tunnel interface:<div><b>ip nhrp map multicast dynamic</b></div><div><b><br /></b></div><div>This prevents the Hub router from needing a separate configuration line for a multicast mapping for each spoke router.</div>
How do you specify which DMVPN a device belongs to? 	On the DMVPN Tunnel Interface, <b>ip nrhp network-id </b><i>id </i>enables NHRP, which is critical to the operation of DMVPN. All routers and interfaces configured with the same ID belong to the same DMVPN.
How do you specify a cleartext password for DMVPN connections? 	Tunnel interface:<div><b>ip nhrp authentication </b><i>password</i></div>
On a DMVPN spoke router, how do you specify the hub router? 	Tunnel interface:<div><b>ip nhrp map </b><i>hub-tunnel-ip hub-nbma-ip</i></div><div><b>ip nhrp nhs </b><i>hub-tunnel-ip</i></div>
What two things should you configure in a DMVPN to prevent large packets from being dropped or fragmented? 	Lower the MTU on the tunnel interface to account for overhead:<div><b>ip mtu 1400</b></div><div><b><br /></b></div><div>Lower the TCP MSS on the tunnel interface:</div><div><b>ip tcp adjust-mss 1360</b></div>
How do you configure a DMVPN spoke router to send multicast traffic only to the hub, and not to other spokes? 	Tunnel interface:<div><b>ip nhrp map multicast </b><i>hub-nbma-ip</i></div><div><i><br /></i></div><div>This is necessary to prevent issues with routing protocols like OSPF.</div>
How do you verify the state of DMVPN tunnels? 	<b>show dmvpn</b>
What are the five high-level steps of configuring IPsec with PSK? 	Create the ISAKMP policy<div>Set the ISAKMP key</div><div>Define the IPsec transform set</div><div>Create the IPsec profile</div><div>Apply the IPsec profile to the interface</div><div><br /></div><div>ISAKMP policy, key</div><div>IPsec transform, profile, apply profile</div>
How do you configure a basic ISAKMP policy for PSK? 	<b>crypto isakmp policy </b><i>number</i><div>&nbsp; <b>encryption </b><i>algorithm</i>&nbsp;<b>(aes)</b></div><div><b>&nbsp; hash </b><i>algorithm </i><b>(md5)</b></div><div><b>&nbsp; group </b><i>dh-group </i><b>(5)</b></div><div><b>&nbsp; lifetime </b><i>seconds </i><b>(86400)</b></div><div><b>&nbsp; authentication pre-share</b></div>
How do you configure a PSK for ISAKMP? 	Globally:<div><b>crypto isakmp key </b><i>password </i><b>address 0.0.0.0</b></div><div><b><br /></b></div><div>With DMVPN, use 0.0.0.0 for the address since the configuration relies on dynamic IP addresses on the spoke routers.</div>
How do you configure a basic IPsec transform set? 	Globally:<div><b>crypto ipsec transform-set </b><i>name transform1 transform2</i></div><div><i><br /></i></div><div>Example:</div><div><b>crypto ipsec transform-set SET esp-aes esp-md5-hmac</b></div>
How do you configure a basic IPsec profile for DMVPN? 	<b>crypto ipsec profile </b><i>name</i><div>&nbsp; <b>set security-association lifetime seconds </b><i>seconds </i><b>(86400)</b></div><div><b>&nbsp; set transform-set </b><i>set-name</i></div>
After creating an IPsec profile, how do you apply it to a tunnel interface? 	Tunnel interface:<div><b>tunnel protection ipsec profile </b><i>ipsec-profile</i></div>
What are two different ways to verify DMVPN IPsec tunnel encryption? 	<b>show crypto session</b><div><b>show crypto ipsec sa</b></div>
What six functions does NDP for ICMPv6 provide? 	Router discovery<div>SLAAC</div><div>IPv6 address resolution</div><div>NUD Neighbor Unreachability Detection</div><div>DAD</div><div>Redirection</div>
IPv6 SeND uses ___ to verify node address validity. 	Public/private key pairs
How do you configure RA Guard on a switch? 	Globally create the policy to define the role:<div><b>ipv6 nd raguard policy </b><i>name</i></div><div>&nbsp; <b>device-role </b>{<b>host </b>| <b>router</b>}</div><div><br /></div><div>Apply the policy to the interface:</div><div><b>ipv6 nd raguard attach-policy </b><i>name</i></div>
With DHCPv6 Guard, all ___ messages are always switched regardless of device role, and ___ messages are only processed further if the device role is set to ___. 	client<div>DHCP server</div><div>server</div>
What is the purpose of the IPv6 Device Tracking feature? 	To track IPv6 host liveness so the neighbor table can be immediately updated when an IPv6 host disappears to revoke network access privileges as they become inactive.
How do you enable IPv6 Device Tracking? 	Globally:<div><b>ipv6 neighbor binding vlan </b><i>vlan </i><b>interface </b><i>interface</i></div>
How do you verify IPv6 Device Tracking? 	<b>show ipv6 neighbor tracking</b>
With IPv6 ND Inspection, when is an ND message considered trustworthy? 	If its IPv6-to-MAC mapping is verifiable
How does IPv6 ND Inspection work? 	IPv6 ND Inspection learns and secures bindings for SLAAC addresses in L2 neighbor tables. IPv6 ND Inspection analyzes ND messages to build a trusted binding table database, and ND messages that do not conform are dropped.
How do you configure IPv6 ND Inspection? 	Globally create a policy:<div><b>ipv6 nd inspection policy </b><i>name</i></div><div>&nbsp; <b>device-role </b><i>role</i></div><div>&nbsp; <b>drop-unsecure</b></div><div><b><br /></b></div><div>Apply the policy to an interface:</div><div><b>ipv6 nd inspection attach-policy </b><i>name</i></div>
How do you verify an IPv6 ND Inspection policy? 	<b>show ipv6 nd inspection policy</b>
IPv6 Source Guard requires what to be populated before it will work? 	The IPv6 binding table must be populated with IPv6 prefixes for IPv6 Source Guard to work.
With IPv6 Source Guard, what happens when traffic is denied due to being from an unknown source or unallocated address? 	The IPv6 address glean feature is notified so it can try to recover the traffic by querying the DHCP server or by using IPv6 ND.
How do you configure IPv6 Source Guard? 	Globally define the policy:<div><b>ipv6 source-guard policy </b><i>name</i></div><div>&nbsp; <b>permit link-local</b></div><div><b>&nbsp; deny global-autoconf</b></div><div><b>&nbsp; trusted</b></div><div><b><br /></b></div><div>Apply the policy to an interface:</div><div><b>ipv6 source-guard attach-policy </b><i>name</i></div>
How do you verify IPv6 Source Guard? 	<b>show ipv6 source-guard policy</b>
How do you configure DHCPv6 Guard? 	<b>ipv6 access-list </b><i>dhcpv6-server</i><div>&nbsp; <b>permit host </b><i>dhcpv6-server-ipv6-address </i><b>any</b></div><div><b><br /></b></div><div><b>ipv6 prefix-list </b><i>pfx </i><b>permit </b><i>ipv6-subnet </i><b>le 128</b></div><div><b><br /></b></div><div><b>ipv6 dhcp guard policy </b><i>policy</i></div><div>&nbsp; <b>device-role server</b></div><div><b>&nbsp; match server access-list </b><i>dhcpv6-server</i></div><div>&nbsp; <b>match reply prefix-list </b><i>pfx</i></div><div>&nbsp; <b>trusted-port</b></div><div><b><br /></b></div><div><b>interface </b><i>interface</i></div><div>&nbsp; <b>ipv6 dhcp guard attach-policy </b><i>policy</i></div>
How do you verify DHCPv6 Guard? 	<b>show ipv6 dhcp guard policy</b>
How do you view the IPv6 address binding table? 	<b>show ipv6 neighbors binding</b>
How is traffic processed on an interface when both PACLs and VACLs are configured? 	PACLs take precedence. Any traffic allowed by a PACL will then be evaluated by a VACL.
How do you configure PACLs? 	Create an IP or MAC ACL<div><br /></div><div>Interface:</div><div>{<b>ip </b>| <b>mac</b>} <b>access-group </b><i>ACL </i>{<b>in </b>| <b>out</b>}</div>
"With regard to DMVPN, what does ""zero-touch provisioning"" refer to? "	Spokes can be added without changing configuration on the hub router.
When using Distance Vector-based routing protocols with DMVPN, what must be configured on the hub? 	Tunnel interface:<div><b>no ip split-horizon </b><i>protocol</i></div>
What is the high-level difference in functionality between DMVPN Phase 1 and Phase 2? 	Phase 1 only permits hub-to-spoke and spoke-to-hub traffic.<div>Phase 2 can establish direct spoke-to-spoke tunnels.</div>
What EIGRP behavior must be changed for DMVPN Phase 2? 	Tunnel interface:<div><b>no ip next-hop-self eigrp </b><i>asn</i></div><div><i><br /></i></div><div>EIGRP by default changes the next-hop in routing updates to itself when sending the updates down from the hub to the spokes.</div>
How do you configure a manual IPv6-over-IPv4 tunnel? 	"<div>With <b>tunnel mode ipv6ip</b>:</div><div style=""font-weight: bold; ""><b><br /></b></div><b>interface tunnel </b><i>number</i><div>&nbsp; <b>ipv6 address </b><i>ipv6-address</i></div><div>&nbsp; <b>tunnel source </b><i>source-interface</i></div><div>&nbsp; <b>tunnel destination </b><i>ipv4-address</i></div><div>&nbsp; <b>tunnel mode ipv6ip</b></div>"
How do you configure a tunnel interface for IPv6-over-IPv4 GRE? 	Tunnel interface:<div><b>tunnel mode gre ipv6</b></div>
What type of address is represented with 2002:<i>border-router-IPv4-address</i>::/48 ? 	Automatic 6to4 tunnel border router
Cisco IOS supports configuring ___ automatic 6to4 tunnel(s) on a router. 	One
How does automatic 6to4 IPv6 addressing work? 	IPv6 subnet 2002::/16 is reserved for 6to4 addressing. The full IPv6 prefix is derived from the border router's external-facing IPv4 address encoded as hexadecimal.&nbsp;Using the example 10.1.100.1, the prefix is 2002:0a01:6401::/64.<div><br /></div><div>The tunnel interface will have an address such as 2002:0a01:6401::1/64, while the internal-facing interfaces could have addresses such as 2002:0a01:6401:1::1/64 and 2002:0a01:6401:2::1/64.</div>
What three steps are involved with configuring automatic 6to4 tunneling on a border router? 	"<div>Tunnel &gt; static route &gt; internal interfaces</div><div style=""font-weight: bold; ""><b><br /></b></div><b>interface tunnel </b><i>number</i><div>&nbsp; <b>ipv6 address 2002:</b><i>tunnel-source-ip-as-hex</i><b>::1/64</b></div><div>&nbsp; <b>tunnel source </b><i>external-IPv4-interface</i></div><div>&nbsp; <b>tunnel mode ipv6ip 6to4</b></div><div><b><br /></b></div><div><b>ipv6 route 2002::/16 tunnel </b><i>number</i></div><div><i><br /></i></div><div>Internal interfaces:</div><div>&nbsp; <b>ipv6 address 2002:</b><i>external-ip-as-hex</i><b>:</b><i>subnet</i><b>::1/64</b></div>"
How does ISATAP addressing work? 	<i>64-bit-prefix</i><b>:0000:5EFE:</b><i>ipv4-address-of-isatap-link-in-hex</i><div><i><br /></i></div><div>Example:</div><div>IPv6 prefix 2001:0db8:0abc:0def::/64</div><div>IPv4 tunnel destination address 172.20.20.1 = AC14:1401</div><div>ISATAP address: 2001:0db8:0abc:0def:0000:5efe:ac14:1401</div>
How do you configure the mode on an ISATAP tunnel interface? 	<b>tunnel mode ipv6ip isatap</b>
RAs are disabled by default on tunnel interfaces, but must be enabled on ISATAP tunnels. How do you enable this? 	<b>no ipv6 nd suppress-ra</b>
L2TPv3 uses IP Protocol ___. 	115
What is an advantage of OTV with regard to fault-domain isolation as compared to other L2VPN technologies? 	Each CE is its own root, and therefore the STP root does not change when multiple sites are connected.
What is the primary purpose of GET VPN? 	To allow more than two devices to exchange traffic securely without requiring a high number of SAs.
In a GET VPN deployment, what is the Key Server? 	The KS is used to create, maintain, and send a policy to Group Members, which provides information as to what traffic should be encrypted by the GM and how it should be encrypted.<div><br /></div><div>The KS generates the Transport Encryption Key (TEK) and the Key Encryption Key (KEK).</div>
What is the GET VPN Transport Encryption Key (TEK)? 	The TEK is generated by the Key Server (KS) and is used by the Group Members (GMs) to encrypt the data.
What is the GET VPN Key Encryption Key (KEK)? 	The Key Server (KS) generates the KEK which is used to encrypt information between the KS and the Group Members (GMs).
How does GET VPN compare with DMVPN for IPsec tunnel usage? 	GET VPN does not set up any IPsec tunnels between Group Members (GMs). Every GM has the policy (what to encrypt and how) and encrypts every packet that conforms to the policy and sends it to the network using Encapsulated Security Payload (ESP), using original IP addresses for routing the packets.
What is the GET VPN Rekey phase? 	The Key Server (KS) must send out a new Transport Encryption Key (TEK) and Key Encryption Key (KEK) to the Group Members (GMs) before the TEK expires, which is 3600 seconds by default.
What is the protocol used in GET VPN between the Key Server (KS) and Group Members (GMs)? 	ISAKMP GDOI (Group Domain of Interpretation)
How does the CEF FIB take the RIB a step further? 	The RIB has an entry for each destination prefix containing the next-hop IP address. The CEF FIB goes a step beyond and maintains an adjacency table containing the Layer 2 header of the outgoing interface per destination prefix.&nbsp;
With MPLS, how do the FIB and LFIB work together? 	The ingress PE's FIB knows to push the appropriate label onto the packet for the destination and forward it out the correct interface. The upstream P router receives the labeled packet, and uses its LFIB to forward the packet out the correct interface. The egress PE router receives the labeled packet, and its LFIB knows to pop the label and forward the packet unlabeled to the CE.
What are the four fields that make up the 32-bit MPLS header? 	20-bit label<div>3-bit EXP</div><div>1-bit Bottom of Stack</div><div>8-bit TTL</div>
What is MPLS TTL propagation? 	When an IP packet arrives at the ingress PE, the IP packet's TTL value is copied into the MPLS header's TTL field. As the MPLS packet traverses the MPLS network, the TTL field in the MPLS header is decremented at each hop. When the packet arrives at the egress PE and the label is removed, the MPLS TTL is copied back into the IP packet's TTL field.
How do you configure MPLS TTL propagation in Cisco IOS? 	<div>Globally:</div><div>[<b>no</b>] <b>mpls ip propagate-ttl </b>[<b>forwarded</b>] [<b>local</b>]</div>
Assuming CEF is enabled and an IGP has been configured, how do you enable basic MPLS unicast IP routing? 	Interface:<div><b>mpls ip</b></div><div><b><br /></b></div><div>This automatically enables and uses LDP.</div>
How do you verify the MPLS LIB? 	<b>show mpls ldp bindings</b>
How do you verify the MPLS LFIB? 	<b>show mpls forwarding-table</b>
How does LDP establish neighborships? 	Routers running LDP multicast Hellos to 224.0.0.2 via UDP 646.<div><br /></div><div>The Hellos can list a transport address to be used for the TCP connection. If the transport address is not specified, the LDP ID is used.</div><div><br /></div><div>After neighbors are discovered, a TCP connection is established also over port 646, and all local label bindings are advertised.</div>
With LDP, which neighbor initiates the TCP connection after the neighbors are discovered? 	The LDP neighbor with the highest LDP ID.
How is the LDP ID chosen? 	-Manually configured<div>-Highest IP of up/up loopback</div><div>-Highest IP of up/up non-loopback</div>
A Route Distinguisher (RD) value is ___ bytes, with which bytes identifying which of the three formats followed? 	An RD is 8 bytes<div>The first two bytes indicate the format of the last six bytes:</div><div><br /></div><div>2-byte-integer:4-byte-integer</div><div>4-byte-integer:2-byte-integer</div><div>4-byte-dotted-decimal:2-byte-integer</div>
The format of a RD is two values separated by a colon. What values are represented by each side of the colon? 	Left side: ASN or IPv4 address<div>Right side: Arbitrary value (16- or 32-bits, depending on left-side value)</div>
An individual prefix can have how many RDs, and how many RTs? 	One RD<div>Multiple RTs</div>
How are Route Targets propagated through the network? 	As BGP Extended Communities
True or False: RD and RT values must be the same in order for routes to be associated with the proper customer VPN. 	"False: RDs make all prefixes unique, while RTs act as a ""tag"" for VRFs, and can be different from the RD value.&nbsp;"
What is the Route Target export and import function? 	VRFs can have a RT <b>export </b>value assigned to them, which tags the routes as BGP extended communities as they are redistributed on the PE into the iBGP table. VRFs on other PE routers can <b>import </b>the same RT value so that the routes are redistributed from the iBGP table back into the VRF routing table.
How do VRF Route Targets facilitate overlapping VPNs? 	"VRFs can both export and import multiple RTs.<div><br /></div><div>A common use case is a ""centralized services"" VPN, which has routes that need to be accessible by multiple customers. Each customer has its own VRF, which maintains separation, but each VRF can import routes exported from the centralized services VRF.</div>"
What happens when you enter <b>ip vrf forwarding </b><i>vrf </i>on an interface? 	The IP address is removed and must be reapplied.
How do you instantiate a new VRF? 	Globally:<div><b>vrf definition </b><i>name</i></div>
Where and how do you specify a Route Distinguisher? 	<b>vrf definition </b><i>name</i><div>&nbsp; <b>rd </b><i>asn/ip:nn</i></div><div><i><br /></i></div><div>Where <i>asn/ip </i>is an ASN or IP address, and <i>nn </i>is an arbitrary number.</div>
Where and how do you configure Route Targets? 	<b>vrf definition </b><i>name</i><div>&nbsp; <b>route-target </b>{<b>import </b>| <b>export </b>| <b>both</b>} <i>asn/ip:nn</i></div>
What is the difference between <b>ip vrf </b><i>name </i>and <b>vrf definition </b><i>name</i>? 	<b>ip vrf </b>specifies an IPv4-only VRF, whereas <b>vrf definition </b>specifies a multiprotocol VRF.
How do you associate an interface with a particular VRF? 	Interface:<div><b>vrf forwarding </b><i>vrf</i></div><div><i><br /></i></div><div>Note: When you enter this command, the IP address is removed and must be reapplied.</div>
What happens when you enter the <b>route-target both </b><i>value&nbsp;</i>command? 	IOS automatically creates two lines of configuration:<div><br /></div><div><b>route-target import </b><i>value</i></div><div><b>route-target export </b><i>value</i></div>
When configuring an MPLS PE router for routing protocol support for the CE, where is the configuration performed for each customer? 	Under the routing protocol's VRF configuration submode.<div><br /></div><div>For example:</div><div><b>router rip</b></div><div><b>&nbsp; address-family ipv4 vrf </b><i>name</i></div><div><i>&nbsp; &nbsp; </i><b>no auto-summary</b></div>
What happens to BGP if you do not create a Route Distinguisher for a particular VRF? 	You cannot enter BGP configuration mode for the particular VRF if it does not first have an RD configured.
How do you take routes learned from a CE router and redistribute them into BGP on the PE router? 	PE router:<div><b>router bgp </b><i>asn</i></div><div>&nbsp; <b>address-family ipv4 vrf </b><i>vrf</i></div><div>&nbsp; &nbsp; <b>redistribute </b><i>protocol</i></div>
What is an advantage of using BGP as the PE-CE routing protocol for MPLS L3VPN? 	Redistribution configuration on the PE is not required, unlike with IGPs and static routing.
What two steps are required to configure MP-BGP between two PE routers? 	"<div>Configure the peer under the global BGP process</div><div>Activate and send communities to the peer under the BGP VPNv4 AF</div><div style=""font-weight: bold; ""><b><br /></b></div><b>router bgp </b><i>asn</i><div>&nbsp; <b>neighbor </b><i>pe-ip </i><b>remote-as </b><i>asn</i></div><div>&nbsp; <b>address-family vpnv4</b></div><div><b>&nbsp; &nbsp; neighbor </b><i>pe-ip </i><b>activate</b></div><div><b>&nbsp; &nbsp; neighbor </b><i>pe-ip </i><b>send-community</b></div>"
In the context of MPLS, what is the VPN label? 	The inner label in an MPLS label stack that identifies the outgoing interface the egress PE should use to forward the unlabeled packet.
True or False: The MPLS LFIB is a per-VRF table. 	False: A PE router only has one LFIB table, regardless of the number of configured VRFs.
What is the purpose of penultimate hop popping with regard to MPLS VPNs? 	The second-to-last router in the LSP pops the outer label so that the egress PE does not have to perform two lookups - one for the outer label, and one for the VPN label.
What is the general definition of a Forwarding Equivalence Class? 	A set of packets that are forwarded along the same path and receive the same forwarding treatment.<br />
What is required when configuring VRF Lite between two routers with only a single link? 	An interface can only be associated with a single VRF, therefore subinterfaces must be used.<div><br /></div><div>Ethernet links can use 802.1Q subinterfaces.</div><div><br /></div><div>Serial links can (usually) use Frame Relay encapsulation, which supports point-to-point subinterfaces (whereas HDLC and PPP does not). FR encapsulation does not require a FR network -- just configure the same DLCI on each end per-subinterface.</div>
If no other path attribute has been set, what does BGP use as its default metric mechanism? 	AS_PATH
What happens when a router running BGP receives a TCP request on port 179, but the source IP address is not configured as a BGP neighbor? 	The router rejects the request
After a TCP connection is established between potential BGP neighbors, what is the first BGP message that is exchanged? 	BGP Open
At what point do BGP neighbors reach the Established state? 	After BGP Open messages have been exchanged.
What is the default BGP keepalive interval? 	60 seconds
What is the default BGP hold time? 	180 seconds
How do you adjust the global BGP keepalive and hold timers? 	BGP process:<div><b>timers bgp </b><i>keepalive holdtime</i></div>
How is the BGP Router ID (RID) determined? 	-Manually configured <b>router-id</b><div>-Highest IP of up/up loopback when BGP process starts</div><div>-Highest IP of up/up interface when BGP process starts</div>
How is the source IP address used to reach a BGP neighbor determined? 	By default the IP address of the outgoing interface used to reach the neighbor IP address is used.<div><br /></div><div>The IP address can be defined with the BGP <b>neighbor </b><i>ip-address </i><b>update-source </b><i>interface </i>command.</div>
How is the destination IP address used to reach a BGP neighbor determined? 	The destination address is explicitly configured with the BGP <b>neighbor </b><i>ip-address </i>statement.
BGP auto-summary is ___ by default. 	Disabled by default in newer IOS versions.<div><br /></div><div>Re-enable with <b>auto-summary</b></div>
How do you configure basic neighbor authentication in BGP? 	<b>neighbor </b><i>ip-address </i><b>password </b><i>password</i>
When should a BGP router use a loopback for peering? 	Whenever there is more than one route through which the BGP router can reach a peer.
How does BGP synchronization work? 	With synchronization enabled, BGP will not advertise a route to an external neighbor unless the route is local or exists in an IGP.
How do you configure and apply BGP peer groups? 	BGP process:<div><b>neighbor </b><i>name </i><b>peer-group</b></div><div><b>neighbor </b><i>name bgp-commands</i></div><div><b>neighbor </b><i>neighbor-ip </i><b>peer-group </b><i>name</i></div><div><i><br /></i></div><div>Configured commands with <b>neighbor </b><i>name bgp-commands </i>get applied to all members of the peer group. Likewise, BGP builds one set of Update messages for the peer group, instead of messages for individual routers.</div>
How do you configure eBGP neighbors that are not directly connected? 	BGP:<div><b>neighbor </b><i>ip-address </i><b>ebgp-multihop </b><i>ttl</i></div><div><i><br /></i></div><div>Don't forget to include the associated <b>neighbor update-source </b>command, if necessary.</div>
What <b>show </b>command can you use to verify BGP connectivity without using any <b>show ip bgp </b>or <b>show ip route </b>commands? 	<b>show tcp brief | inc .179</b>
What four checks are used when BGP forms neighbor relationships? 	<div>Source IP, ASN, RID, MD5:</div><div><br /></div>The router must receive a TCP connection request with a source address that the router finds in a BGP <b>neighbor </b>statement<div><br /></div><div>A router's ASN must match the neighboring router's reference to that ASN in it's <b>neighbor </b>statement (confederations excluded)</div><div><br /></div><div>The BGP RIDs of the two routers must not be the same</div><div><br /></div><div>MD5 authentication must pass if configured</div>
What happens if BGP neighbors do not have identical keepalive and holddown timers? 	The neighbors both use the lower values of each of the two timers. Mismatched settings do not prevent neighborship.
What are the six BGP neighbor states? 	Idle &gt; Connect &gt; Active &gt; OpenSent &gt; OpenConfirm &gt; Established
What is the BGP Idle state? 	BGP is enabled on a router, but <b>neighbor </b>statements have not yet been configured and therefore the router is not listening for TCP connections for BGP.
What is the BGP Connect state? 	The BGP routing process detects that a peer is trying to establish a TCP session.
What is the BGP Active state? 	The BGP routing process is trying to establish a TCP session with a neighbor.
What are the four basic BGP message types? 	Open<div>Keepalive</div><div>Update</div><div>Notification</div>
What is the BGP Open message used for? 	Establishing neighbor relationships and exchanging basic parameters
What is the BGP Keepalive message used for? 	To maintain neighbor relationships. The relationship is reset if a keepalive message is not received within the negotiated hold time.
What is the BGP Update message used for? 	To exchange NLRI
What is the BGP Notification message used for? 	Notification is sent (with FSM error code) if an error or configuration change affects the peering session
What happens if BGP receives a Notification message? 	The peering session is reset and must be re-established.
How do you disable the session with a BGP neighbor without removing the configuration? 	BGP process:<div><b>neighbor </b><i>ip </i><b>shutdown</b></div>
When using the BGP <b>network </b>statement, what causes a route to be placed into the BGP RIB? 	The route referenced in the <b>network </b>statement must be in the current IP routing table. If the route does not exist, it is removed from the BGP RIB.
What happens if you enter a BGP <b>network </b>statement without a subnet mask? 	The default classful mask is assumed.
When BGP <b>auto-summary </b>is configured, what is the behavior with the <b>redistribute </b>command? 	If any subnets of a classful network would be redistributed, only the classful network is redistributed.
When BGP&nbsp;<b>auto-summary&nbsp;</b>is configured, what is the behavior with the&nbsp;<b>network&nbsp;</b>command? 	If a <b>network </b>command lists a classful network number, with the classful default mask (or no mask), and any subnets of the classful network exist, inject a route for the classful network.<div><br /></div><div>Unlike with the <b>redistribute </b>command, when the <b>network </b>command is used with <b>auto-summary</b>, subnets are still injected into the BGP table if they exist in the IP routing table.</div>
What are the four components (segments) of the AS_PATH path attribute? 	AS_SEQ<div>AS_SET</div><div>AS_CONFED_SEQ</div><div>AS_CONFED_SET</div>
Why would the BGP <b>aggregate-address </b>create a summary route for which the AS_SEQ path attribute is null? 	If the component subnets of the summary route have different AS_SEQ values, the router uses a null AS_SEQ.
When is the BGP AS_SET path attribute used? 	<div>When BGP injects a summary route, if the component subnets have different AS_SEQ values, the summary route has an AS_SEQ value of null. The AS_SEQ values are used for loop prevention. The AS_SEQ values of all the component subnets are placed into the AS_SET so that loop prevention can still occur.</div><div><br /></div><div>When creating a BGP summary, the <b>as-set </b>keyword causes the generation of the AS_SET values to be included with the summary.</div>
How do you configure a BGP summary address so that the component subnets are not advertised? 	BGP process:<div><b>aggregate-address </b><i>summary mask </i><b>summary-only</b></div>
How do you configure a BGP summary to generate values for the AS_SET path attribute? 	BGP process:<div><b>aggregate-address </b><i>summary mask </i><b>as-set</b></div>
True or False: The BGP <b>aggregate-address </b>command will not create a summary if the BGP table does not currently have any routes for the NLRI inside the summary. 	True
What happens when all component subnets of a BGP summary address are withdrawn from the aggregating router's BGP table? 	The aggregating router removes the summary and notifies its neighbors by withdawing the route.
When a BGP summary is created with the <b>aggregate-address </b>command, what is the NEXT_HOP path attribute set to? 	The local BGP table lists the next hop as 0.0.0.0<div><br /></div><div>When the summary route is advertised to the BGP neighbors, the next hop is set to the IP address of the update-source for each neighbor.</div>
True or False: When using the BGP <b>aggregate-address </b><i>summary mask&nbsp;</i><b>as-set </b>command, the AS_SET path attribute is always generated. 	False. The AS_SET is generated only if the AS_SEQ is null. If the AS_SEQ values of all the component subnets are identical, the AS_SET PA is not generated because the AS_SEQ will be that of the component subnets.
With the BGP <b>aggregate-address </b>command, what three options are available with regard to advertising component subnets? 	All component subnets advertised along with the summary<div>No component subnets advertised with the <b>summary-only </b>keyword</div><div>Some component subnets are not advertised with <b>suppress-map</b></div>
What are the three ways that BGP can inject a default route? 	<b>network </b>command<div><b>redistribute </b>command</div><div><b>neighbor </b><i>ip </i><b>default-originate</b></div>
How do you inject a default route into BGP without using redistribution or the neighbor <b>default-originate </b>command? 	A default route can be injected into BGP with the <b>network 0.0.0.0 </b>BGP command, as long as a route to 0.0.0.0/0 exists in the IP routing table (through any means).
How do you redistribute a default route into BGP? 	When you use the <b>redistribute </b>command under the BGP process, all matched routes in the current IP routing table are redistributed, with the exception of the default route.<div><br /></div><div>To redistribute a default route, you must additionally configure under the BGP process:</div><div><b>default-information originate</b></div>
What is a prerequisite for the BGP <b>neighbor </b><i>ip</i><b><i>&nbsp;</i>default-originate </b>command to advertise a default route to the neighbor? 	None: this command does not add a default route to the local BGP table, and it does not check for the existence of a default route in the IP routing table by default.
How do you conditionally advertise a default route to a specific BGP neighbor? 	BGP process:<div><b>neighbor </b><i>ip </i><b>default-originate route-map </b><i>route-map</i></div><div><i><br /></i></div><div>The referenced route-map can check for entries in the current IP routing table, and if any of the routes are matched with a <b>permit </b>statement, a default route is advertised to the BGP neighbor.</div>
What is the BGP ORIGIN code for routes redistributed into BGP from an IGP? 	Incomplete
What is the BGP ORIGIN code for a summary route created with the <b>aggregate-address </b>command, but without the <b>as-set </b>option? 	IGP
What is the BGP ORIGIN code for a summary route created with the&nbsp;<b>aggregate-address&nbsp;</b>command with the&nbsp;<b>as-set&nbsp;</b>option? 	IGP if all component subnets also carry the IGP ORIGIN code<div><br /></div><div>Incomplete if at least one of the component subnets has the Incomplete ORIGIN code</div>
What are the three main components of the BGP Update message? 	Withdrawn routes<div>Path Attributes for each route</div><div>Prefix/Length for each NLRI</div>
What is the relationship between the Path Attributes and NLRI within a BGP Update message? 	Update messages contain NLRI only for those that share the exact same Path Attributes and PA values.<div><br /></div><div>NLRI that have different PAs or PA values requires separate Update messages.</div>
What is the information source of generated BGP Update messages? 	The current BGP table.
What is the purpose of the BGP decision process? 	BGP will advertise only the single best route from all that are available in the BGP table to a neighbor.
When advertising updates to a BGP neighbor, which routes in the current BGP table are not advertised? 	Routes that are not considered best<div>Routes matched by a <b>deny </b>clause in an outbound BGP filter</div><div>iBGP-learned routes if the neighbor is iBGP (excepting route reflectors and confederations)</div>
Assuming no routing policies have affected the BGP decision process, how is the best route chosen? 	Shortest AS_PATH<div>eBGP over iBGP</div><div>Lowest IGP metric to NEXT_HOP</div><div>Lowest BGP RID of advertising router</div>
For a BGP route to be considered best, the NEXT_HOP PA value must meet either of two conditions. What are the two conditions? 	The NEXT_HOP must be 0.0.0.0 as the result of the route being injected on the local router<div><br /></div><div>The NEXT_HOP value must be reachable according to that router's current IP routing table</div>
When advertising a route to an iBGP neighbor, what is the default action with regard to changing the NEXT_HOP path attribute? 	Do not change the NEXT_HOP PA value by default when advertising to an iBGP neighbor
When advertising a route to an eBGP neighbor, what is the default action with regard to changing the NEXT_HOP path attribute? 	Change the NEXT_HOP value to the update source IP address.
How do you configure BGP to change the NEXT_HOP value when advertising to an iBGP peer? 	BGP process:<div><b>neighbor </b><i>ip </i><b>next-hop-self</b></div>
How do you configure BGP to keep the existing NEXT_HOP value when advertising to an eBGP peer? 	BGP process:<div><b>neighbor </b><i>ip </i><b>next-hop-unchanged</b></div>
What two commands are available for changing the BGP NEXT_HOP path attribute? 	BGP process:<div><div><b>neighbor&nbsp;</b><i>ip&nbsp;</i><b>next-hop-self</b></div><div><b>neighbor&nbsp;</b><i>ip&nbsp;</i><b>next-hop-unchanged</b></div></div>
How can you verify which routes are being advertised to a particular BGP neighbor? 	<b>show ip bgp neighbor </b><i>ip </i><b>advertised-routes</b>
What's the difference between these two BGP commands:<div><br /></div><div><b>show ip bgp neighbor </b><i>ip </i><b>routes</b></div><div><b>show ip bgp neighbor </b><i>ip </i><b>received-routes</b></div> 	<b>routes </b>displays all routes that have been received AND accepted<div><br /></div><div><b>received-routes </b>displays all routes, both accepted, and rejected, and requires the neighbor to be configured with <b>soft-reconfiguration inbound</b></div>
With all default settings, an iBGP-learned route has a NEXT_HOP address of the last eBGP router to advertise the route. If the downstream iBGP peer cannot reach the NEXT_HOP address, what two solutions can resolve this? 	Make the eBGP neighbor's IP address reachabile by advertising it's subnet into the IGP<div><br /></div><div>Use the <b>next-hop-self </b>command on the upstream iBGP neighbor</div>
What are the two requirements for an eBGP route to be installed in the local IP routing table? 	"The eBGP route in the BGP table must be considered ""best""<div><br /></div><div>If the same prefix has been learned through some other method on the router, the AD for the eBGP route must be lower than the AD for the other sources (eBGP default 20)</div>"
What are the three BGP route types for which you can individually adjust the Administrative Distance? 	eBGP (default 20)<div>iBGP (default 200)</div><div>Local (locally-injected) (default 200)</div>
How do you change the default Administrative Distance values for BGP? 	BGP process:<div><b>distance bgp </b><i>external internal local</i></div><div><i><br /></i></div><div>Default 20, 200, 200</div>
How do you change the Administrative Distance for individual BGP routes? 	BGP process:<div><b>distance </b><i>distance neighbor-ip wildcard </i>[<i>acl</i>]</div><div><br /></div><div><i>neighbor-ip </i>represents the IP address used on the BGP <b>neighbor </b>statment. The <i>acl </i>examines routes received from the particular neighbor, and assigns the AD for any routes matching the ACL with a <b>permit </b>action.</div>
<div>How does the BGP command&nbsp;<b>distance&nbsp;</b><i>distance neighbor-ip wildcard&nbsp;</i>[<i>acl</i>] work?</div> 	The&nbsp;<i>neighbor-ip&nbsp;</i>represents the IP address used on the BGP&nbsp;<b>neighbor&nbsp;</b>statment. The&nbsp;<i>acl&nbsp;</i>examines routes <i>received</i> from the particular neighbor, and assigns the AD for any routes matching the ACL with a&nbsp;<b>permit&nbsp;</b>action.
What might cause a recursive route lookup when a route from the BGP table is entered into the IP routing table? 	The route entered into the IP routing table contains the exact same prefix, length, and next-hop IP address as listed in the BGP table, even if the NEXT_HOP PA is an IP address that is not in a connected network.<div><br /></div><div>For example, if the NEXT_HOP is 2.2.2.2 and the router is not directly connected to 2.2.2.2, but knows how to get to 2.2.2.2 via another route in the IP routing table, a recursive route lookup must be performed.</div>
How do you configure a BGP backdoor? 	BGP process:<div><b>network </b><i>prefix </i><b>mask </b><i>mask </i><b>backdoor</b></div>
What is the purpose of the BGP <b>backdoor </b>command? 	When the same prefix is learned from eBGP and an IGP, the eBGP prefix is preferred, even though the IGP prefix may actually be the better path. The BGP <b>network </b><i>network </i><b>backdoor </b>command causes that specific network to use the BGP Local AD (200 by default) and no longer advertises the route with BGP.<div><br /></div><div>As long as the IGP-learned prefix is in the IP routing table, it will be used. If the IGP-learned prefix disappears, the eBGP-learned route is used.</div>
What issue does BGP synchronization resolve? 	BGP synchronization resolves routing black holes for internal transit routers between iBGP peers. BGP synchronization says to not consider an iBGP route in the BGP table as best unless the exact prefix was learned through an IGP and is currently in the routing table. This means BGP routers need to redistribute their learned prefixes into the IGP so that traffic is not blackholed on transit routers, and BGP routers cannot advertise unreachable prefixes.
Why is BGP synchronization disabled by default? 	BGP synchronization requires BGP-learned routes to be redistributed into the IGP before they can be advertised by an iBGP peer. As the Internet BGP table has grown, it is now infeasible to redistribute all of the routes into the IGP, so synchronization is disabled by default now.
What is a requirement related to BGP synchronization when OSPF is used as the IGP? 	BGP does not allow the OSPF-learned route to be considered best if the OSPF RID of the router advertising the prefix is different from the BGP router advertising the same prefix.<div><br /></div><div>When using BGP synchronization, it is a best practice to manually configure the RID to be the same on both BGP and OSPF.</div>
What are the three alternatives to enabling BGP synchronization? 	Create a full mesh of iBGP peerings<div>Confederations</div><div>Route Reflectors</div>
What is the BGP 16-bit private ASN range? 	64512 - 65535
How do you configure BGP to identify other confederation sub-ASes? 	BGP process:<div><b>bgp confederation peers </b><i>sub-as1 ..sub-as2</i></div><div><i><br /></i></div><div>Confederation peers need to be identified because while the connections appear as eBGP, they do not work as true eBGP connections do. Confederations modify the AS_PATH PA with AS_CONFED_SEQ and AS_CONFED_SET attributes, which are used to prevent loops between the confederations sub-ASes.&nbsp;</div><div><br /></div><div>When the routes are advertised to a true eBGP peer, the AS_CONFED information is removed.</div>
True or False: Inside a BGP Confederation Sub-AS, a full mesh of BGP peerings is required. 	True. Within a confederation sub-AS, full iBGP rules are in effect.
True or False: Confederation eBGP connections act like normal eBGP connections with a default TTL of 1. 	True: If peering between loopbacks, you must adjust the <b>neighbor </b><i>ip </i><b>ebgp-multihop </b><i>ttl </i>value.
True or False: Confederation eBGP connections change the next-hop to the neighbor update source when advertising to other sub-ASes. 	False: Confederation eBGP connections work like iBGP connections in that the NEXT_HOP is not changed by default.
True or False: When choosing a BGP best route, confederation ASNs are not considered part of the length of the AS_PATH. 	True<div><br /></div><div>For example, in the AS_PATH value (65001 65002) 123, the confederation ASNs in the parenthesis are not counted.</div>
Why are external BGP routers unaware of a confederation being used within an autonomous system? 	Confederation routers remove the confederation ASNs from the AS_PATH in Updates sent outside the confederation.
When configuring a router for BGP confederations, how do you define the router's sub-autonomous system? 	<b>router bgp </b><i>sub-asn</i><div><i><br /></i></div><div>This means you cannot simply convert a non-confederation router into a confederation router. You must remove and re-apply the BGP configuration.</div>
When configuring a router for BGP confederations, how do you define the router's actual BGP ASN? 	BGP process:<div><b>bgp confederation identifier </b><i>asn</i></div>
True or False: When using BGP route reflectors, RR clients change their BGP behavior, while non-clients use normal BGP behavior. 	False. Only the RR changes its BGP behavior. Both clients and non-clients do not change their behavior and are not even aware of the RR.
BGP route reflectors can learn prefixes from clients, non-clients, and eBGP peers. The prefixes are advertised to both RR clients and non-clients, except for which case? 	Prefixes learned from non-clients are not advertised to other non-clients (normal iBGP peering rules).
A single BGP Route Reflector cluster consists of ___ route reflector(s), and clients. 	One or more
True or False: When using multiple BGP Route Reflector clusters, and one or more of the clusters contain multiple RRs, all RRs must be directly peered across all clusters. 	False: One RR from each cluster must be peered with at least one RR from all clusters. However, it is typical to create a full mesh of peerings between all RRs across all clusters.
True or False: With BGP Route Reflectors, non-client iBGP routers should be included in a full mesh of iBGP peerings between the route reflectors. 	True. Normal iBGP advertisement rules are in place between RRs and non-clients, therefore a full mesh of iBGP peerings between RRs and non-clients should be expected.
What are three methods that BGP Route Reflectors use to prevent loops? 	<div>Best &gt; Cluster &gt; Originator</div><div><br /></div>Only advertise best routes.<div><br /></div><div>CLUSTER_LIST - RRs add their cluster ID the CLUSTER_LIST PA before sending an Update, and discard received prefixes for which their cluster ID already appears.</div><div><br /></div><div>ORIGINATOR_ID - RID of first iBGP peer to advertise the route into the AS. If a router sees its own RID as the ORIGINATOR_ID in a received route, it does not use or propagate the route.</div>
What is the BGP CLUSTER_LIST Path Attribute used for? 	Route Reflectors add their cluster ID into the CLUSTER_LIST PA before sending an Update. When receiving a BGP Update, RRs discard received prefixes for which their cluster ID already appears.
What is the BGP ORIGINATOR_ID Path Attribute used for? 	The ORIGINATOR_ID PA lists the RID of the first iBGP peer to advertise a route into the AS. If a router sees its own RID as the ORIGINATOR_ID in a received route, it does not use or propagate the route.
With BGP route reflectors, how do you configure the cluster ID? 	The default is the RID. The cluster ID can be manually configured under the BGP process:<div><b>bgp cluster-id </b><i>id</i></div>
How do you configure a BGP route reflector client? 	Configuration is performed on the RR under the BGP process:<div><b>neighbor </b><i>ip </i><b>route-reflector-client</b></div>
In a BGP Route Reflector environment, how can you verify which RR clusters an update has passed through? 	Cluster list in&nbsp;<b>show ip bgp </b><i>prefix</i>
What are the two new attributes introduced with MP-BGP? 	MP_REACH_NLRI<div>MP_UNREACH_NLRI</div>
When BGP is enabled, it will advertise IPv4 unicast prefixes by default. How do you disable this behavior? 	BGP process:<div><b>no bgp default ipv4-unicast</b></div>
Which of the four BGP path attribute categories is AS_PATH? 	Well-known Mandatory
Which of the four BGP path attribute categories is&nbsp;NEXT_HOP? 	Well-known Mandatory
Which of the four BGP path attribute categories is&nbsp;AGGREGATOR? 	Optional Transitive
Which of the four BGP path attribute categories is&nbsp;ATOMIC_AGGREGATE? 	Well-known Discretionary
Which of the four BGP path attribute categories is&nbsp;ORIGIN? 	Well-known Mandatory
Which of the four BGP path attribute categories is&nbsp;ORIGINATOR_ID? 	Optional Nontransitive
Which of the four BGP path attribute categories is&nbsp;CLUSTER_LIST? 	Optional nontransitive
How do you prevent a BGP route reflector from advertising routes learned from a client to the other clients? 	<b>no bgp client-to-client reflection</b><div><b><br /></b></div><div>By default, routes learned from clients are reflected to all other clients.</div>
How do you verify which routes have been locally-injected into BGP? 	<b>show ip bgp injected-paths</b>
After applying an updated BGP policy for a specific neighbor, how do you implement the policy without resetting the BGP connection? 	<b>clear ip bgp </b><i>neighbor-ip </i><b>soft</b>
How do you filter specific routes from being advertised to a specific BGP neighbor with a distribute list? 	Create an ACL denying the specific routes, and ending with <b>permit ip any any</b><div><b><br /></b></div><div>Reference the ACL under the BGP process:</div><div><b>neighbor </b><i>ip </i><b>distribute-list </b><i>ACL </i><b>out</b></div>
How can you use a prefix list to filter specific routes from being advertised to a specific BGP neighbor? 	Create a prefix list that denies the specific routes, and ends with <b>permit 0.0.0.0/0 le 32</b><div><b><br /></b></div><div>Reference the prefix list under the BGP process:</div><div><b>neighbor </b><i>ip </i><b>prefix-list </b><i>prefix-list </i><b>out</b></div>
When performing BGP filtering with a route-map, what determines whether NLRI is filtered or allowed to pass? 	<b>route-map deny </b>means the matched NLRI is filtered<div><b>route-map permit </b>means the matched NLRI is allowed to pass</div>
When performing BGP filtering with a route-map, what determines whether NLRI is matched to a route-map clause? 	ACL <b>permit </b>statements match the route-map clause, while ACL <b>deny </b>statements do not match the route-map clause.<div><br /></div><div>Example:</div><div>An ACL configured to <b>permit </b>1.1.1.0/24 referenced in a route-map <b>deny </b>clause means that 1.1.1.0/24 matches the route-map clause and is filtered.</div>
True or False: BGP can perform soft reconfiguration for sent Updates automatically. 	True. BGP must be reconfigured to support soft reconfiguration for inbound Updates, though, with the BGP command <b>neighbor </b><i>ip </i><b>soft-reconfiguration inbound</b>
Why is BGP inbound soft-reconfiguration disabled by default? 	To support soft-reconfiguration inbound, BGP must keep a copy of all of the received Updates from a neighbor, instead of just those that are entered into the BGP table after policies have been applied. This takes up extra memory, which is why it is disabled by default.
How does the matching logic of a BGP aggregate <b>suppress-map </b>work? 	Prefixes that are matched by a route-map <b>permit </b>action will not be advertised with the BGP summary address.
How do you filter BGP Updates by matching the AS_PATH path attribute? 	<div>Global:</div><b>ip as-path access-list </b><i>num </i>{<b>permit </b>| <b>deny</b>} <i>regex</i><div><i><br /></i></div><div>BGP process:</div><div><b>neighbor </b><i>ip </i><b>filter-list </b><i>num </i>{<b>in </b>| <b>out</b>}</div><div><br /></div><div>Apply the policy:</div><div><b>clear ip bgp </b><i>neighbor-ip </i>{<b>in </b>| <b>out </b>| <b>soft</b>}</div>
What are the three steps of the matching logic of AS_PATH filters? 	-The regex in the first line in the AS_PATH ACL is applied to the AS_PATH of each route and is&nbsp;passed or filtered based on <b>permit </b>or <b>deny </b>if there is a match<div>-If NLRI is not matched, the next line in the AS_PATH ACL is tried</div><div>-Any NLRI not matched explicity is filtered</div>
What does the regex metacharacter ^ mean? 	Start of line
What does the regex metacharacter $ mean? 	End of line
What does the regex metacharacter | (pipe) mean? 	Logical OR applied between preceeding and succeeding characters.<div><br /></div><div>If preceded by a value in parenthesis, the logic applies to the preceding string listed in side the parenthesis, and not just to the preceding character.</div>
What does the regex metacharacter _ (underscore) mean? 	Any delimiter: blank, comma, start of line, end of line
What does the regex metacharacter . (period) mean? 	Any single character
What does the regex metacharacter ? mean? 	Zero or ONE instance of the preceding character
What does the regex metacharacter * (asterisk) mean? 	Zero or more instances of the preceding character
What does the regex metacharacter + mean? 	One or more instances of the preceding character
What does the regex metacharacter (string) mean? 	Parenthesis combine enclosed string characters as a single entitly when used with ?, *, or +
What does the regex metacharacter [string] mean? 	Creates a wildcard for which any of the single characters in the string can be used to match that position in the AS_PATH<div><br /></div><div>For example ^[(]3[12]* would match an AS_PATH beginning with (31 or (32 and could match any combination of ASes that have 1s or 2s afterward, such as (31121</div>
What regex matches all AS_PATHs, and is useful as a final match in an as_path access-list to change the default from deny to permit? 	.*
What regex matches null (empty), and is used for NLRIs originated in the same AS? 	^$
What regex matches an AS_PATH containing only the single ASN 123? 	^123$
What regex matches an AS_PATH whose first ASN begins with (or is) 123? 	^123
What regex matches an AS_PATH with two ASNs, beginning with 123 and ending with 45? 	^123_45$
What regex matches an AS_PATH beginning with AS 123, and ends in AS 45, but has at least one other AS in between? 	^123_.*_45$
What regex matches an AS_PATH beginning with AS 123, with zero or more intermediate ASNs and delimiters, and ending with any AS whose last two digits are 45 (including AS 45)? 	^123_.*45
<div>A regex needs to match an AS_PATH beginning with 123 and ending with AS 45, with zero or more other ASNs between the two.</div><div><br /></div>What is the difference between these two regex expressions?<div><br /></div><div>(^123_45$)|(^123_.*_45$)</div><div>^123_45$|^123_.*_45$</div> 	Without the parenthesis, the | is applied only to the single characters before and after the |. This is a common mistake.
What regex matches an AS_PATH beginning with either an AS_SET or an AS_CONFED_SET? 	^{
How do you configure an AS_PATH access list to deny AS_PATHs beginning with AS 1, ending with AS 44, and have three ASNs in between? The access list should deny this specific AS_PATH and allow all others. 	"<b>ip as-path access-list </b><i>num </i><b>deny ^1_.*_.*_.*_44$</b><div><b style=""font-weight: bold; "">ip as-path access-list&nbsp;</b><i>num </i><b>permit .*</b></div>"
True or False: Regular expressions can be used in the output of <b>show </b>commands. 	True: For example, <b>show ip bgp | include 65000_65000 </b>displays BGP routes that have been prepended by 65000 at least twice.<div><br /></div><div>Note: you cannot use ^ or $ in these statements</div>
How can you verify the effects of the regex in an AS_PATH filter before actually implementing it? 	<b>show ip bgp regexp </b><i>expression</i><div><i><br /></i></div><div>This command parses the AS_PATH variables in a router's BGP table, including all special characters.</div>
True or False: The { and } characters are not used as metacharacters for matching BGP AS_PATH regular expressions. 	True. You can enter { and } directly into the AS_PATH access list.<div><br /></div><div>The ( and ) are metacharacters, which is why they must be enclosed in brackets to be literally matched: [(] or [)]</div>
True or False: Because AS_SET and AS_CONFED_SET are both unordered lists, the order of the ASNs does not matter when applying regex logic. 	False: Cisco IOS uses the order listed in the output of the <b>show ip bgp </b>command when applying regex logic.
What's the difference between well-known mandatory and well-known discretionary BGP path attributes? 	Well-known means that the BGP implementation MUST support the PA.<div><br /></div><div>Mandatory means the PA must be in every BGP Update</div><div><br /></div><div>Discretionary means the PA is not required in every BGP Update, but must be understood by the BGP implementation because it is mandatory.</div>
What's the difference between a BGP optional transitive and nontransitive path attribute? 	Optional means that the BGP implementation is not required to support the particular path attribute.<div><br /></div><div>Transitive means that the router should silently forward the PA to other routers whether or not it understands the meaning of the PA.</div><div><br /></div><div>Nontransitive means the router should remove the PA so that it is not propagated to any peers.</div>
In the BGP bestpath decision process, what does the first N in the N WLLA OMNI mnemonic mean? 	Is the NEXT_HOP PA reachable? If not, reject the route from the decision process.
In the BGP bestpath decision process, what does the W in the N WLLA OMNI mnemonic mean? 	Weight: Cisco-proprietary, higher is better. The administrative weight can be assigned to each NLRI locally on the router, and is not passed on in Update messages.
In the BGP bestpath decision process, what does the first L in the N WLLA OMNI mnemonic mean? 	LOCAL_PREF PA: higher is better. This well-known discretionary PA can be set on a router inside the AS, and is not distributed outside the AS.
In the BGP bestpath decision process, what does the second L in the N WLLA OMNI mnemonic mean? 	Locally-injected routes: choose routes injected locally (via <b>network</b>, redistribution, or summarization) first.
In the BGP bestpath decision process, what does the A in the N WLLA OMNI mnemonic mean? 	AS_PATH length: shorter is better. This calculation ignores both AS_CONFED_SET and AS_CONFED_SEQ values, and treats an AS_SET as a single ASN, regardless of the number of ASNs within the set.<br />
How do you configure BGP to not use the length of the AS_PATH PA when calculating the best BGP routes? 	BGP process:<div><b>bgp bestpath as-path ignore</b></div>
In the BGP bestpath decision process, what does the O in the N WLLA OMNI mnemonic mean? 	ORIGIN PA: IGP routes preferred over EGP routes preferred over Incomplete. &nbsp;I &gt; E &gt; ?
In the BGP bestpath decision process, what does the M in the N WLLA OMNI mnemonic mean? 	MED: smaller is better
In the BGP bestpath decision process, what does the second N in the N WLLA OMNI mnemonic mean? 	Neighbor type: eBGP preferred over iBGP. Confederation eBGP is treated as iBGP.
In the BGP bestpath decision process, what does the I in the N WLLA OMNI mnemonic mean? 	IGP metric to reach the NEXT_HOP. Lower is better.
"What is the goal of the BGP ""N WLLA OMNI"" process? "	To determine the single best path for each NLRI.&nbsp;
If a BGP bestpath is not decided upon by the normal process, what are the final three tiebreakers? 	-Keep the oldest eBGP route (which reduces route flaps)<div>-Choose smallest neighbor RID (if configured to do so)</div><div>-Choose smallest neighbor ID (for peers with two or more neighborships with each other, ID is typically based on configured IP address of <b>neighbor </b>statement)</div>
How do you enable a BGP router to use the smallest neighbor RID as part of the bestpath decision process? 	"BGP process:<div><b>bgp bestpath compare-routerid</b></div><div><b><br /></b></div><div>This only comes into play after the 9-step ""N WLLA OMNI"" process, and there is no existing eBGP route.</div>"
What is the default BGP Weight for locally-injected routes? 	<div>32768</div>
How can you configure the BGP administrative Weight? 	Weight is a local value and configured per-neighbor.<div><br /></div><div>Assign weight to all routes from a particular neighbor:</div><div><b>neighbor </b><i>ip </i><b>weight </b><i>weight</i></div><div><i><br /></i></div><div>Assign weight to some routes from a particular neighbor:</div><div><b>neighbor </b><i>ip </i><b>route-map </b><i>map </i><b>in</b></div><div><b><br /></b></div><div>For example, the route-map can <b>match</b> an AS_PATH access list, and <b>set</b>&nbsp;the weight. Be sure to end the route-map with a blank permit, otherwise the routes will be filtered by the implicit deny.</div>
What is the default LOCAL_PREF value? 	100, higher is better
How can you change the default BGP local preference? 	BGP process:<div><b>bgp default local-preference </b><i>value</i></div><div><i><br /></i></div><div>Default, 100</div><div>Range, 0 - 4B</div>
How do you configure BGP to set the LOCAL_PREF for particular routes from a particular neighbor? 	BGP process:<div><b>neighbor </b><i>ip </i><b>route-map </b><i>map </i><b>in</b></div><div><b><br /></b></div><div><b>route-map </b><i>map </i><b>permit 10</b></div><div><b>&nbsp; match </b><i>routes</i></div><div>&nbsp; <b>set local-preference </b><i>value</i></div><div><b>route-map </b><i>map </i><b>permit 20</b></div><div><b><br /></b></div><div>The final route-map statement is necessary, otherwise routes will be filtered. You can set multiple individual values with multiple route-map statements.</div>
Why might a BGP route need to be compared on a router in the bestpath decision process against the ORIGIN code? 	If the router attempts to inject routes locally through multiple methods, such as a route injected through both <b>redistribute connected </b>and the <b>network </b>command. By default, both routes would have the same weight and local preference, so the ORIGIN code would be the tiebreaker.
What are three restrictions associated with automatically removing private BGP ASNs in outbound Updates? 	<div>-Private ASNs can be removed only at the point of sending an eBGP Update</div><div>-If the current AS_SEQ or AS_CONFED_SEQ contains both private and public ASNs, the private ASNs will not be removed</div><div>-If the ASN of the BGP peer is in the current AS_PATH, the private ASNs will not be removed</div>
How do you configure AS_PATH prepending? 	BGP process:<div><b>neighbor </b><i>ip </i><b>route-map </b><i>map </i><b>out</b></div><div><b><br /></b></div><div><b>route-map </b><i>map </i><b>permit 10</b></div><div><b>&nbsp; match </b><i>routes</i></div><div><b>&nbsp; set as-path prepend </b><i>asn1 ..asn2</i></div><div><b>route-map </b><i>map </i><b>permit 20</b></div><div><b><br /></b></div><div>The final route-map statement is necessary, otherwise routes will be filtered.</div>
How can you configure BGP to use a different ASN when setting up a BGP neighbor session than the one configured on the BGP process with <b>router bgp </b><i>asn</i>? 	With the neighbor <b>local-as </b>keyword.<div><br /></div><div>Example:</div><div><b>router bgp 100</b></div><div><b>&nbsp; neighbor </b><i>ip </i><b>remote-as 200</b></div><div><b>&nbsp; neighbor </b><i>ip </i><b>local-as 300</b></div><div><b><br /></b></div><div>The neighbor would peer with ASN 300 instead of 100.</div><div><br /></div><div>This is commonly used during ASN migration.</div>
What is the result of this configuration?<div><br /></div><div><b>router bgp 100</b></div><div><b>&nbsp; neighbor 10.10.10.1 remote-as 10</b></div><div><b>&nbsp; neighbor 10.10.10.1 local-as 50 no-prepend</b></div> 	With this configuration, BGP communicates with 10.10.10.1 using 50 as its ASN. When the router sends Updates to the neighbor, it prepends 50 100 to each AS_PATH. With the <b>no-prepend </b>keyword, any routes received from the neighbor will not have 50 prepended upon reception, so when this router sends the routes to another neighbor, only 100 will appear in the AS_PATH instead of 50 100.
True or False: It is possible to manually set the BGP ORIGIN code for individual routes. 	True, this is accomplished by matching routes and using <b>set origin </b>in a route-map.
True or False: The BGP MED is advertised by one AS into another, and can be propagated inside the AS but not sent to any other ASes. 	True, MED is an optional nontransitive PA.
What is the default BGP MED value? 	0<div><br /></div><div>Range 0 - 4B, smaller is better</div>
How do you configure the BGP MED value? 	Through the BGP <b>neighbor </b><i>ip </i><b>route-map </b><i>map </i><b>out </b>command. The route map matches the desired routes and changes the MED with <b>set metric</b>
What does the following command do?<div><br /></div><div><b>bgp bestpath med missing-as-worst</b></div> 	The default MED value for routes is 0. This command makes the default value 4B.&nbsp;<div><br /></div><div>It is important for all routers to either use the default of 0, or configure this command, otherwise routing choices will be affected.</div>
True or False: BGP ignores the MED value when multiple routes to a single NLRI pass through different neighboring ASNs. 	True. You can override this behavior with <b>bgp always-compare-med </b>under the BGP process.<div><br /></div><div>If you implement this command, you should implement it on all routers in an AS, otherwise routing loops can occur.</div>
What does the BGP command <b>bgp deterministic-med </b>do? 	By default, Cisco IOS processes BGP table entries from newest (most recently learned) to oldest. When there are multiple routes to the same NLRI, IOS compares the newest two and selects the best, then compares it against the next route and chooses the best of the two, and so on.&nbsp;<div><br /></div><div>The <b>bgp deterministic-med</b>&nbsp;IOS processes the routes per adjacent AS by choosing the best from each neighboring AS, and then comparing those routes.</div><div><br /></div><div>Cisco recommends this setting for all new BGP implementations.</div>
"True or False: When BGP is configured to allow multiple routes for a particular NLRI (instead of choosing the single bestpath), all routes are added to the IP routing table (similar to how an IGP would), and the routes are all advertised as ""best"" by BGP. "	"False: With the <b>maximum-paths </b>command, multiple routes can be added to the local IP routing table, but BGP will still only advertise a single ""best"" route from the BGP table."
"If multiple routes to a BGP NLRI have made it through the normal ""N WLLA OMNI"" decision process without a single best route, the first tiebreaker is to use the oldest eBGP route. What is the second tiebreaker? "	Choose the neighbor with the lowest RID among only eBGP sources if there is a mix of iBGP and eBGP sources, otherwise choose the lowest RID if there are only iBGP sources.
What happens if BGP has a current best route to an NLRI through an eBGP neighbor, but receives an otherwise identical route from a neighbor with a smaller BGP RID? 	The existing best route is kept to avoid route flaps. This behavior can be modified with the BGP command <b>bgp bestpath compare-routerid</b><div><b><br /></b></div><div>This applies only to eBGP routes. iBGP routes always use the lowest RID as the tiebreaker.</div>
What happens if BGP has a current best route to an NLRI through an iBGP neighbor, but receives an otherwise identical route from an iBGP neighbor with a smaller BGP RID? 	The route through the neighbor with the smaller rid is used for iBGP.<div><br /></div><div>With eBGP, the route remains so as to not cause route flaps, but can be changed with <b>bgp bestpath compare-routerid</b></div>
What is the final BGP bestpath decision tiebreaker? 	The final tiebreaker is the lowest BGP neighbor ID (IP address). This is used when the route is coming from a router who has multiple separate neighbor relationships, as opposed to a single relationship using loopback addresses.
What is the default setting of the BGP <b>maximum-paths </b>command? 	1
Assuming the BGP <b>maximum-paths </b>command has been configured higher than 1, when are multiple eBGP routes allowed to be entered into the IP routing table? 	"-The multiple routes must have made it through the normal BGP ""N WLLA OMNI"" decision process<div>-Only eBGP routes whose adjacent ASNs are the same as the single best route are considered as candidates</div><div>-If there are more candidates than what is set with <b>maximum-paths</b>&nbsp;the candidates must go through the final tiebreaker steps up to the maximum-paths setting</div>"
Assuming the BGP&nbsp;<b>maximum-paths ibgp&nbsp;</b>command has been configured higher than 1, when are multiple iBGP routes allowed to be entered into the IP routing table? 	"-The iBGP routes must have made it through the normal ""N WLLA OMNI"" bestpath selection process<div>-The iBGP routes must have different NEXT_HOP values</div><div>-If there are more candidates than what the <b>maximum-paths ibgp </b>allows, the final tiebreaker steps are used to only select the maximum-paths value</div>"
What is the BGP <b>maximum-paths eibgp </b>command used for? 	This command is used to allow more than a single BGP route to be entered into the routing table for both eBGP and iBGP routes, but only for MPLS under BGP address family configuration mode.
True or False: BGP advertises community values to neighbors by default. 	False: You must configure under the BGP process <b>neighbor </b><i>ip </i><b>send-community </b>[<b>standard </b>| <b>extended </b>| <b>both</b>]
How do you configure BGP to send a specific community value to a specific neighbor? 	BGP process:<div><b>neighbor </b><i>ip </i><b>send-community</b></div><div><b>neighbor </b><i>ip </i><b>route-map </b><i>map </i><b>out</b></div><div><b><br /></b></div><div><b>route-map </b><i>map&nbsp;</i><b>permit 10</b></div><div><b>&nbsp; match </b><i>routes</i></div><div>&nbsp; <b>set community </b><i>value</i></div><div><b>route-map </b><i>map </i><b>permit 20</b></div>
How do you view BGP table entries tagged with a specific community? 	<b>show ip bgp community </b><i>value</i>
What is the <b>ip community-list </b>command used for? 	To permit or deny specific community values, which can then be referenced in a route-map.
How do you configure the router to take an action based on the receipt of a particular BGP community? 	Create a community-list:<div><b>ip community-list </b><i>num </i>{<b>permit </b>| <b>deny</b>} <i>value</i></div><div><i><br /></i></div><div>Reference the list in a route-map:</div><div><b>route-map </b><i>map </i><b>permit 10</b></div><div><b>&nbsp; match community </b><i>num</i></div><div><b>&nbsp; set </b><i>attribute</i></div><div><b>route-map </b><i>map </i><b>permit 20</b></div>
What is the purpose of the global <b>ip bgp-community new-format </b>command? 	The original community was a 32-bit decimal value, but the <b>new-format </b>is defined by RFC 1997 which is AA:NN where AA is a 16-bit number typically representing an ASN, and NN is an arbitrary 16-bit number.
Within a route-map, what is the difference between these two commands?<div><br /></div><div><b>set community 10 20 30</b></div><div><b>set community 10 20 30 additive</b></div> 	The first command replaces any existing community values with 10, 20, and 30.<div><br /></div><div>The second command adds 10, 20, and 30 to any existing values.</div>
How do you remove all BGP communities from a route? 	Route-map:<div><b>match community </b><i>ip-community-list</i></div><div><b>set community none</b></div>
What is the BGP NO_EXPORT community used for? 	<div>Do not advertise outside this AS (excepting confederations)</div>
What is the BGP NO_ADVERT community used for? 	<div>Do not advertise to any other peer.</div>
What is the BGP LOCAL_AS / NO_EXPORT_SUBCONFED community used for? 	<div>Do not advertise outside the local confederation sub-AS.</div>
What is the default Update interval for eBGP peers? 	30 seconds
How frequently does BGP verify next-hop reachability? 	60 seconds by default
What is BGP fast external fall-over? 	eBGP sessions between directly-connected neighbors are torn down the moment the connected subnet between the peers is lost. BGP routes are immediately flushed, and BGP immediately begins looking at alternate routes.
What is BGP fast peering session deactivation? 	When enabled, BGP monitors the peering session with the specified neighbor, and terminates the BGP session when an adjacency change is detected. A route-map can be referenced to make the fall-over action conditional.<div><br /></div><div>Fast external fall-over is automatic.&nbsp;</div>
How do you configure BGP fast external fall-over detection? 	Global:<div>[<b>no</b>] <b>bgp fast-external-fallover</b></div><div><b><br /></b></div><div>Enabled by default.</div>
How do you configure the router to consider the MED value when choosing routes through different Confederation sub-ASes? 	BGP process:<div><b>bgp bestpath med confed</b></div>
How do you configure BGP to discard routes whose AS_PATH length exceeds a configured value? 	BGP process:<div><b>bgp maxas-limit </b><i>number</i></div>
What is the BGP <b>neighbor </b><i>ip </i><b>unsuppress-map </b>command used for? 	When component subnets have been filtered with the <b>aggregate-address </b>command, <b>unsuppress-map </b>can be used per-neighbor to re-advertise specific routes that were filtered through summarization.
How do you remove individual BGP communities from the COMMUNITY PA? 	Create an IP community-list to reference the values to be removed:<div><b>ip community-list </b><i>num </i><b>permit </b><i>value</i></div><div><i><br /></i></div><div>Reference the list in a route-map:</div><div><b>match </b><i>routes</i></div><div><b>set comm-list </b><i>num </i><b>delete</b></div>
On a standard T568A or T568B-wired straight-through Ethernet cable connected to the host side, which pins transmit, and which pins receive? 	1,2 transmit<div>3,6 receive</div>
What do Cisco (and other vendor) switches use to automatically detect the speed of an Ethernet link? 	Fast Link Pulses are detected as part of the autonegotiation process
Without autonegotiation, what duplex is assumed on an Ethernet link? 	HDX for 10/100 links<div>FDX for 1000 links</div>
What is a condition for configuring an Ethernet switch port for half duplex? 	If the port is capable of gigabit or higher speeds, the <b>speed </b>must be set to either <b>10 </b>or <b>100</b>.&nbsp;<div><br /></div><div>If the port is a 10/100 port, the <b>duplex </b>setting is independent of the <b>speed </b>setting.</div>
Other than CDP messages, what is an indication of duplex mismatch on an Ethernet link? 	Errors and collisions
On an Ethernet link, what is the difference between a collision and a late collision? 	Collions are detected within the first 64 bytes of a transmitted frame, assuming proper cable lengths.<div><br /></div><div>Late collisions are those detected after the first 64 bytes have been transmitted.</div>
What is the position and meaning of the U/L bit in an Ethernet MAC address? 	The Universal/Local bit is the 2nd least-significant bit in the first octet of the MAC address. When toggled, it means that the address has been administratively assigned, overriding the vendor-assigned address.&nbsp;
What is the position and meaning of the I/G bit in an Ethernet MAC address? 	The Individual/Group bit is the least-significant bit in the first octet of the MAC address. When toggled, it means the frame is either multicast or broadcast, otherwise it is a unicast frame when not toggled.
What are the three main Ethernet frame formats? 	Ethernet II / DIX<div>IEEE 802.3 + 802.2 LLC</div><div>IEEE 802.3 SNAP</div>
What is the most common Ethernet frame format used today? 	Ethernet II / DIX
Which types of traffic mostly use the IEEE 802.3 + 802.2 LLC Ethernet frame format? 	These frame types are typically used by protocols invented by the IEEE, such as STP
Which types of traffic are often associated with IEEE 802.3 SNAP Ethernet frames? 	Vendor-proprietary Layer 2 protocols like CDP, DTP, VTP, etc.
How does a system determine if a received Ethernet frame is in Ethernet II or LLC/SNAP format? 	Across the Ethernet formats, there is a 2-byte field after the Preamble, Destination Address, and Source Address.<div><br /></div><div>If the value of the 2-byte field is &lt;= 1500, the frame is in LLC or SNAP format.</div><div><br /></div><div>If the value of the 2-byte field is &gt;= 1536, the frame is in Ethernet II format.</div>
If an Ethernet frame is received where the 2-byte field after the Source Address has a value of 1536 or greater, what does this indicate? 	This is an Ethernet II format frame, and the value is the EtherType.
If an Ethernet frame is received where the 2-byte field after the Source Address has a value of 1500 or less, what does this indicate? 	This is an 802.2 LLC or SNAP format Ethernet frame, and this field is interpreted as the total length of the 802.2 header + data field, which is a value between 46 and 1500.
How can you tell if an Ethernet frame is either in 802.2 LLC or in SNAP format? 	SNAP frames have the value 0xAA for both the DSAP and SSAP fields in the LLC header. Any other values indicate that the frame is not in SNAP format.
What is the default Catalyst CAM aging time? 	300 seconds
What happens when you specify a destination SPAN port that has an existing configuration? 	The original configuration is suspended while the port is acting as a SPAN destination. When the SPAN configuration is removed, the port's original configuration is resumed.
How many SPAN destination ports can be configured on a switch? 	64
How do you limit a SPAN capture on a trunk port to specific VLANs? 	<b>monitor session </b><i>num </i><b>filter vlan </b><i>vlans-to-capture</i>
True or False: Traffic that is routed from another VLAN within a switch to a source VLAN cannot be monitored with SPAN. 	True. Only traffic that enters or exits the switch in a source port or VLAN is forwarded in a SPAN session. If the traffic comes from another source within the source (such as routing from another VLAN), that traffic isn't forwarded through SPAN.
What is the difference between Receive (RX) SPAN and Transmit (TX) SPAN with regard to traffic processing? 	RX traffic is transmitted to the SPAN destination before any modification, such as VACL/ACL filtering, QoS modification, policing, etc.)<div><br /></div><div>TX traffic is transmitted to the SPAN destination after modification</div>
Many types of Layer 2 frames (such as CDP, BPDUs, etc) are ignored by SPAN. How do you capture and forward this traffic to a SPAN destination? 	With the SPAN <b>encapsulation replicate </b>command.
How do you configure an RSPAN VLAN? 	<b>vlan </b><i>number</i><div><i>&nbsp; </i><b>remote span</b></div>
After you designate an RSPAN VLAN, how do you use it? 	<b>monitor session </b><i>num </i>{<b>source </b>| <b>destination</b>} <b>remote vlan </b><i>num</i>
How do you configure a basic ERSPAN source session? 	<b>monitor session </b><i>num </i><b>type </b><b>erspan-source</b><div>&nbsp; <b>source </b><i>source</i></div><div>&nbsp; <b>no shutdown</b></div><div><b>&nbsp; destination</b></div><div><b>&nbsp; &nbsp; erspan-id </b><i>id</i></div><div>&nbsp; &nbsp; <b>ip address </b><i>dst-ip</i></div><div>&nbsp; &nbsp; <b>origin ip address </b><i>src-ip</i></div>
How do you configure a basic ERSPAN destination session? 	<b>monitor session&nbsp;</b><i>num&nbsp;</i><b>type&nbsp;</b><b>erspan-destination</b><div>&nbsp;&nbsp;<b>destination&nbsp;</b><i>destination</i></div><div>&nbsp;&nbsp;<b>no shutdown</b></div><div><b>&nbsp; source</b></div><div><b>&nbsp; &nbsp; erspan-id&nbsp;</b><i>id</i></div><div>&nbsp; &nbsp;&nbsp;<b>ip address&nbsp;</b><i>src-ip</i></div>
How do you verify SPAN/RSPAN/ERSPAN? 	<b>show monitor session</b>
What is the VSS Active switch responsible for? 	Running the Layer 2 and Layer 3 control protocols for the switching modules on both switches, as well as providing management functions for the VSS including module Online Insertion and Removal (OIR) and the console interface.
How many links can the Virtual Switch Link (VSL) contain? 	Up to 8
True or False: The Virtual Switch Link (VSL) automatically gives control and management plane traffic higher priority than data traffic. 	True
How many EtherChannels are supported in a VSS? 	256
What are the three steps to enable VSS between a pair of switches? 	-Configure the <b>switch virtual domain </b><i>id </i>and <b>switch </b>{<b>1 </b>| <b>2</b>} on both switches<div><br /></div><div>-Configure unique port-channel interfaces (different numbers on each switch) and issue <b>switch virtual link </b>{<b>1 </b>| <b>2</b>} and assign physical interfaces to the VSL port channel with <b>channel-group </b><i>num </i><b>mode on </b>and make sure to set <b>switchport mode trunk</b></div><div><br /></div><div>-Enable VSS with <b>switch convert mode virtual </b>on SW1, then on SW2</div>
The first step in configuring VSS is to assign a domain ID. How do you configure this, and what is the valid range? 	Globally:<div><b>switch virtual domain </b><i>1-255</i></div><div><i><br /></i></div><div>This same value must be configured on both switches participating in the VSS.</div>
True or False: The Virtual Switch Link (VSL) must be configured with the same port channel number on both switches.&nbsp; 	False: The VSL requires unique port channel values on each switch (e.g. po10 on one, po20 on the other).
What happens if a VSS standby switch VSL port channel number has been previously configured for another use? 	The VSS will come up in Route Processor Redundancy mode. To avoid this, the port channel numbers on each switch must be unique and must be available.
What will the status of a configured VSS VSL be before the switches are rebooted into VSS mode? 	Up/Down
After setting up the prerequisite configuration, how do you enable VSS mode? 	<b>switch convert mode virtual<br /></b>
When in VSS mode, how do you view the VSS domain number, switch number, and switch role? 	<b>show switch virtual</b>
What happens when you connect to the console port of a VSS Standby switch? 	The prompt will be:<div><br /></div><div><i>hostname</i>-standby&gt;</div><div>Standby console disabled</div>
How can you verify detailed information about the VSS member role? 	<b>show switch virtual role</b>
How can you view more detailed information about the VSS VSL? 	<b>show switch virtual link </b>[<b>port-channel</b>]
What is the IOS-XE Forwarding and Feature Manager (FFM)? 	The FFM provides a set of APIs used to manage the control plane processes, and the FFM programs the data plane through the FED and maintains all forwarding states for the system.<br />
What is the IEEE standard for 100 Mbps Ethernet over copper and optical cabling? 	IEEE 802.3u
What is the IEEE standard for gigabit Ethernet over optical cabling? 	IEEE 802.3z
What is the IEEE standard for gigabit Ethernet over twisted-pair copper cabling? 	IEEE 802.3ab
What is store-and-forward switching? 	Store-and-forward switching fully receives all bits in a frame and checks against the FCS for errors before forwarding a frame.<br />
What is the difference between cut-through and fragment-free switching? 	Fragment-free switching performs like cut-through, but the switch waits for the first 64 bytes of the frame to be received because Ethernet collisions should be detected within the first 64 bytes of the frame.
What is UTP Category 2 cable used for? 	4 Mbps Token Ring
What is UTP Category 4 cabling used for? 	16 Mbps Token Ring
What is the maximum single cable length of 10BASE2? 	185m
What are the VLAN operational states? 	Active (default)<div>Suspended</div>
What is the range of VLANs configurable in the VLAN Database Configuration mode? 	Only normal range: 1 - 1005
How do you enter VLAN Database Configuration mode? 	EXEC mode: <b>vlan database</b>
After creating VLANs in VLAN Database Configuration mode with the <b>vlan </b><i>number </i>command, what must you do next? 	You must issue the <b>apply </b>command
When in VLAN Database Configuration mode, how can you view VLANs that have been configured but not yet added to the switch? 	<b>show proposed</b>
True or False: Global Configuration mode is the only way to configure Extended-range and Private VLANs. 	True. The deprecated VLAN Database Configuration mode can only configure Normal range VLANs, 1 - 1005.
After creating a VLAN in global configuration mode, what must you do for the settings to take effect? 	You must <b>exit </b>the VLAN subconfiguration mode before the configuration changes will apply.
What happens if you issue the interface command <b>switchport access vlan </b><i>num </i>when the <i>num</i>&nbsp;VLAN doesn't exist? 	The VLAN is created automatically.
True or False: A VLAN can be disabled both globally with VTP, or locally on the individual switch. 	True
What does the VLAN <b>state suspend </b>command do? 	This command disables the VLAN globally through VTP, which suspends the VLAN on all switches participating in the VTP domain.
How do you disable a VLAN locally, without deleting it? 	Globally:<div><b>vlan </b><i>num</i></div><div>&nbsp; <b>shutdown</b></div><div><b><br /></b></div><div>Note: You cannot use this command in VLAN Database Configuration mode.</div>
What is the difference between these two commands?<div><br /></div><div><b>vlan </b><i>num</i></div><div><b>&nbsp; shutdown</b></div><div><b><br /></b></div><div><b>interface vlan </b><i>num</i></div><div><b>&nbsp; shutdown</b></div> 	One shuts down the entire VLAN locally on the switch, the other just shuts down the SVI associated with the VLAN, but does not disable the VLAN itself.
What happens if a VLAN is suspended globally through VTP, but not locally? 	The VLAN will be disabled. While a VLAN can be enabled globally and disabled locally, a locally enabled VLAN will still be disabled if it is suspended globally through VTP.<div><br /></div><div>In other words, a VLAN must be enabled both globally and locally.</div>
What is the overall purpose of private VLANs? 	To separate switch ports as if they were on different VLANs while consuming only a single IP subnet.
Private VLANs are a Layer 2 construct that are similar in conception to what BGP construct? 	Confederations. Private VLANs consist of a Primary VLAN, and one or more Secondary VLANs, but the rest of the network only sees the Primary VLAN. This is similar in concept to a BGP Autonomous System with confederation Sub-ASes, where other ASes only see the main AS.
What are the two types of secondary Private VLANs, and what is the difference between them? 	Community VLANs can communicate with the Primary VLAN, and to devices within the single Community VLAN, but not to devices in other Community VLANs.<div><br /></div><div>Isolated VLANs can communicate with the Primary VLAN, but nothing else, including other devices within the same Isolated VLAN.</div>
A Primary Private VLAN can be associated with ___ Isolated VLAN(s). 	1<div><br /></div><div>Because devices in an Isolated VLAN cannot communicate with each other, only to the Primary VLAN, there is no need for multiple Isolated VLANs within a single Primary VLAN.</div>
How many Primary Private VLANs can a Secondary or Isolated VLAN be associated with? 	1
A Private VLAN Promiscuous port is associated with the ___ VLAN and can communicate with ___ VLANs. 	Primary<div>All Secondary</div>
True or False: A frame received on a promiscuous, community, or isolated Private VLAN port can never be forwarded through a trunk port. 	False
If a frame is received on a private VLAN community or isolated port, how is the frame tagged when it is forwarded through a trunk? 	The frame is tagged with the corresponding secondary VLAN ID. The receiving switching then forwards the received frame according to the type of secondary VLAN.
If a frame is received on a private VLAN promiscuous port and forwarded across a trunk, how will the frame be tagged? 	The frame will be tagged with the associated primary VLAN ID.
When configuring Private VLANs, what is a prerequisite if the switch is not running in VTPv3 mode? 	The switch must be placed into <b>vtp mode transparent </b>if not running VTPv3.
How do you create a private VLAN? 	Globally:<div><b>vlan </b><i>num</i></div><div>&nbsp; <b>private-vlan </b>{<b>primary </b>| <b>community </b>| <b>isolated</b>}</div>
How do you associate secondary private VLANs with the primary? 	Globally:<div><b>vlan </b><i>primary-number</i></div><div>&nbsp; <b>private-vlan primary</b></div><div><b>&nbsp; private-vlan association </b><i>secondaries</i></div>
How do you verify private VLAN types and mappings? 	<b>show vlan private-vlan</b>
How do you configure an interface to participate in a secondary private VLAN? 	Interface:<div><b>switchport mode private-vlan host</b></div><div><b>switchport private-vlan host-association </b><i>primary-vlan secondary-vlan</i></div>
How do you configure an interface to be promiscuous in a private VLAN? 	Interface:<div><b>switchport mode private-vlan promiscuous</b></div><div><b>switchport private-vlan mapping </b><i>primary-vlan secondary-vlans</i></div>
In a private VLAN environment, what must be configured if an SVI is used for the default gateway? 	<div>The SVI must be configured as a promiscuous interface:</div><div><br /></div>SVI interface:<div><b>private-vlan mapping </b><i>secondary-vlans</i></div>
What are the two types of private VLAN trunks for connecting to devices that do not support private VLANs? 	Promiscuous PVLAN trunk<div>Isolated PVLAN trunk</div>
What is a Promiscuous private VLAN trunk used for? 	This is for devices that do not support PVLANs, with the most common use case being a router-on-a-stick scenario.<div><br /></div><div>When traffic from a secondary VLAN is sent over the trunk, its VLAN tag is rewritten with the primary VLAN ID. When a frame is received, no tag manipulation is performed.</div>
What is an Isolated private VLAN trunk used for? 	The Isolated PVLAN trunk is used to extend the secondary isolated PVLAN to a switch that doesn't support PVLANs, but is capable of isolating its ports (such as with Catalyst Protected Ports <b>switchport protected</b>).<div><br /></div><div>An Isolated PVLAN trunk port rewrites the primary VLAN ID into the isolated secondary VLAN ID when sending a frame. When a frame is received, no tag manipulation is performed.</div>
How do you enable protected ports? 	<div>Enabled at the interface:</div><div><b>switchport protected</b></div>
What is the size and location of the 802.1Q header? 	4 bytes<div>Location is after the Source Address field</div>
What is the EtherType of a frame containing a 802.1Q tag? 	0x8100
What is the result of an 802.1Q Native VLAN mismatch? 	Two VLANs are merged into one if the Native VLAN does not match between devices.
True or False: Dynamic Trunking Protocol (DTP) negotiates both whether the port becomes a trunk or access port, and what type of trunking protocol to use. 	True. If trunking is negotiated, ISL will be used if both devices support it, otherwise 802.1Q is used.
If DTP negotiates a trunk, and both devices support both ISL and 802.1Q trunking, which protocol is used? 	ISL is used if both devices support ISL, otherwise 802.1Q is used.
Older Catalyst switches default to DTP ___ mode, while newer Catalyst switches default to DTP ___ mode. 	Dynamic desirable<div>Dynamic auto</div>
True or False: DTP will successfully negotiate the link operating mode only if the VTP domain name on both switches is either the same or NULL. 	True. While DTP and VTP are independent protocols, DTP carries the VTP domain name in its messages.&nbsp;<div><br /></div><div>This design decision was chosen because different VTP domains may use the same VLANs, but for different purposes, so bridging them together should not be automatic.</div>
What happens if an interface is configured with both <b>switchport access </b>and <b>switchport trunk </b>commands? 	These commands specify how the port operates depending on which mode it is in. If the port is in access mode, the <b>switchport access </b>commands are applied, and the <b>switchport trunk </b>commands are ignored, and vice versa.
How do you verify the global DTP settings? 	<b>show dtp</b>
What is the default DTP Hello interval? 	30 seconds
Which VLANs are allowed across a trunk link by default, and how do you configure this? 	All VLANs allowed by default<div><br /></div><div>Trunk interface:</div><div><b>switchport trunk allowed</b></div>
"What are the three requirements for a VLAN to be in the ""allowed and active"" state on a trunk? "	-VLAN must in the allowed list for the trunk<div>-VLAN must exist in the VLAN configuration on the switch</div><div>-VLAN must be in the active state (not suspended or shutdown)</div>
If an interface is configured with <b>switchport mode trunk </b>and nothing else, what must the other side be configured as to form a trunk? 	One of the following:<div><b>switchport mode trunk</b></div><div><b>switchport dynamic desirable</b></div><div><b>switchport dynamic auto</b></div>
True or False: If an interface is configured with&nbsp;<b>switchport mode trunk&nbsp;</b>and nothing else, DTP is still used on the interface. 	True. DTP is always used unless the <b>switchport nonegotiate </b>command is issued.
What is the relationship between the command <b>switchport mode access </b>and DTP? 	If <b>switchport mode access </b>is configured on an interface, the interface never forms a trunk, and sends a single DTP message to help the other side reach the same conclusion, but ceases to send or process DTP messages afterward.
How do you configure the 802.1Q Native VLAN on a router's Ethernet subinterface? 	<b>encapsulation dot1q </b><i>native-vlan-id </i><b>native</b>
What is the outer tag referred to as in QinQ tunneling? 	The S-tag (Service Provider)
What is the inner tag referred to as in QinQ tunneling? 	The C-tag (Customer)
In a QinQ environment, what is a common configuration with regard to the Native VLAN? 	Global:<div><b>vlan dot1q tag native</b></div><div><b><br /></b></div><div>This prevents the issue of a customer's untagged frames from being misforwarded or blackholed when the S-tag is added.</div>
When configuring an 802.1QinQ environment, what is a common setting with regard to the MTU? 	The S-tag adds 4 bytes, so it is common to adjust the MTU to 1504.
What is the difference between these two commands?<div><br /></div><div><b>system mtu 1504</b></div><div><b>system mtu jumbo 1504</b></div> 	The <b>jumbo </b>keyword applies to 1/10 Gbps interfaces, while the other command applies to 100 Mbps interfaces.
How do you enable 802.1Q-in-Q tunneling on an interface? 	<b>switchport mode dot1q-tunnel</b>
True or False: When 802.1Q-in-Q tunnelling is enabled, Layer 2 management protocols are forwarded across the tunnel by default, but can be disabled individually. 	False. Layer 2 management protocols are not enabled across the tunnel by default, but can be enabled with the interface command:<div><br /></div><div><b>l2protocol-tunnel</b>&nbsp; &lt;-- enables all</div><div><b>l2protocol-tunnel </b>[<b>cdp</b>] [<b>lldp</b>] [<b>stp</b>] [<b>vtp</b>]</div>
What VLAN information is advertised with VTP? 	VLAN ID<div>VLAN name</div><div>VLAN type</div><div>VLAN state</div>
What is the default VTP version on enterprise IOS-based switches? 	VTPv1
How do VTPv1 and VTPv2 handle unknown TLVs differently? 	VTPv1 drops all unrecognized TLVs from received messages<div>VTPv2 keeps all TLVs in propagated messages even if they are not recognized</div>
What are the two circumstances that a switch in VTP Transparent Mode will forward VTP messages? 	The VTP domain matches between switches<div>The VTP domain is NULL</div>
Which VLAN IDs are supported in VTPv2? 	Both VTPv1 and VTPv2 support only Normal range VLANs 1 - 1005. The switch must be in VTP Transparent Mode, or use VTPv3 to use Extended range VLANs 1006 - 4094.
True or False: VTPv3 supports Extended range VLAN pruning. 	False, VTPv3 supports Extended range VLANs, but can still only prune Normal range VLANs.
True or False: Access ports neither send nor accept VTP messages. 	True. For two switches to communicate in VTP, they must first be interconnected through a working trunk link.
What are the four VTPv1 and VTPv2 message types? 	Summary advertisement<div>Subset advertisement</div><div>Advertisement request</div><div>Join</div>
What is a VTP Summary Advertisement message? 	Message originated by both Servers and Clients that carries information about:<div><br /></div><div>-VTP domain name</div><div>-Revision number</div><div>-ID of last updater</div><div>-Timestamp of last update</div><div>-MD5 of contents of VLAN database</div><div>-VTP password (if configured)</div><div>-Number of Subset Advertisements to follow</div>
Which devices generate VTP Summary Advertisement messages? 	Both VTP Servers and Clients<br />
True or False: VTP Summary Advertisement messages do not carry VLAN database contents. 	True, these are carried in Subset Advertisement messages.
What are VTP Subset Advertisement messages? 	Subset advertisement messages carry full contents of the VLAN database. One message can hold multiple VLAN database entries, but multiple messages might be required if the VLAN database is large.
Who sends VTP Subset Advertisement messages, and when? 	VTP Subset Advertisement messages are originated by both VTP Servers and Clients whenever the VLAN database is modified.
What is the VTP Advertisement Request message? 	A message originated by both VTP Servers and Clients to request their neighbors send all or part of the VTP database.
What three different events cause VTP Advertisement Request messages to be sent? 	-When a VTP Client switch is restarted<div>-When a switch enters VTP Client mode</div><div>-When a Server or Client receives a Summary Advertisement with a higher revision number than its own</div>
What are VTP Join messages? 	Join messages are originated by both VTP Servers and Clients every 6 seconds when VTP Pruning is enabled. Join messages contain a bit field that indicates for each VLAN in the Normal range if it is active or unused (pruned).
True or False: Since Catalyst switches default to VTP Server mode, VTP updates are sent to trunked neighbors by default. 	False. A switch in VTP Server mode does not send VTP updates until a VTP domain name is configured.<div><br /></div><div>While a switch does not need any explicit configuration to become a member of a VTP domain, the minimum requirements for VTP are that at least one switch must have a domain name configured.</div>
What happens when a switch with no VTP configuration forms a trunk to a switch in an existing VTP domain? 	The switch with no VTP configuration assumes the VTP domain name of the first received VTP advertisement message, joins the VTP domain as a Server, and configures the advertised VLANs locally.
When using VTP, where is the VLAN configuration stored? 	In the vlan.dat file in flash memory, not in NVRAM.
True or False: With VTPv3, the Primary Server is the only switch whose VLAN database can be propagated throughout the VTP domain. 	True, VTPv3 Servers (non-Primary) and Clients will share their VLAN databases only if they agree on both the domain name and identity of the Primary server (via base MAC address).
With VTPv3, what is the difference between Servers and Clients? 	In VTPv3, Servers and Clients are identical, except Servers can be promoted to the Primary Server, while clients can not.
True or False: VTPv3 secondary servers and clients can overwrite a neighbor's VLAN database if they have a higher revision number than the neighbor. 	True, however the switches must agree on the VTP domain name, password, and identity of the Primary Server.
What happens if a VTPv3 switch is disconnected from the VTP domain, promoted to the Primary Server and has changes made to the VLAN database, and then rejoins the VTP domain? 	The other switches will be in conflict and will not agree on who the Primary Server is. In this situation, even though this switch may have a higher revision number, the database will not be accepted by the VTP neighbors.
How do you promote a VTPv3 server to the Primary server? 	EXEC: <b>vtp primary</b>
What happens when a VTPv3 server is promoted to Primary? 	The switch floods its VLAN database to all neighbors, who install and flood the database even if the revision number is lower so that the Primary server's database is asserted over the VTP domain.
True or False: When a VTPv3 server is promoted to Primary, its VLAN database overwrites all other switches in the VTP domain, even if it has a lower revision number. 	True
What happens if a switch acting as the VTPv3 Primary server is reloaded? 	The Primary server setting is not retained, and the switch resumes the role of a Secondary server.
With VTPv3, how do you reset the revision number to 0? 	You must either modify the VTP domain name, or configure a VTP password.<div><br /></div><div>VTPv3 does not reset the revision number by switching to VTP Transparent mode and back, unlike VTPv1 and VTPv2.</div>
What happens if a VTPv3 switch detects a switch running VTPv1 or VTPv2 on its port? 	The VTPv3 switch reverts to VTPv2 operation on the port, and forces the neighbor switch to operate in VTPv2 mode if it is running VTPv1.<div><br /></div><div>If the neighboring switch is not VTPv2 capable, VTP communications between the two switches cannot occur.</div>
Two switches that have no VTP configuration are connected together with a trunk link. One switch configures a VTP domain name, changes the VTP version to 3, becomes the Primary server, and creates a new VLAN.<div><br /></div><div>What is the VTP and VLAN status on the second switch after this occurs?</div> 	The other switch will start out as a VTPv1 server with a NULL VTP domain. When it receives the advertisement from the first switch, it changes its domain name, changes its version to VTPv2, and installs the VLAN.
How do you configure the VTP domain name? 	Globally:<div><b>vtp domain </b><i>name</i></div>
How do you verify VTP? 	<b>show vtp status</b>
In a VTPv1 environment, what happens if you issue the <b>vtp version 2 </b>command on a VTP server? 	All switches in the VTP domain change their version to VTPv2.
In a VTP environment, what happens when you issue <b>vtp version 3 </b>on a switch? 	Only that switch is changed to VTPv3. VTPv3 must be configured manually on each switch.
What is the single requirement (other than IOS version/feature support) of activating VTPv3? 	The switch must have a non-NULL VTP domain name.
What does the command <b>vtp interface </b><i>interface </i>do? 	Specifies the interface whose IP address is used to identify the switch as an updater in VTP updates. By default, a configured IP from the lowest-numbered SVI interface is used.
What is the default IP address used to identify the updater in VTP updates? 	The configured IP address of the lowest-numbered SVI, unless explicitly configured with <b>vtp interface </b><i>interface</i>
True or False: With VTPv3, you can disable VTP per-interface. 	True: The <b>no vtp </b>command disables VTP at the interface level. You can disable VTP globally with <b>vtp mode off </b>in VTPv3 mode.
True or False: If a password has been set for the VTP domain, you must enter that password when promoting a VTPv3 server to Primary. 	True
How do you configure a VTPv3 password so that it will never be displayed in plaintext? 	Globally:<div><b>vtp password </b><i>plaintext-password </i><b>hidden</b></div>
How do you configure a VTPv3 password that was previously encrypted on other switches in the VTPv3 domain? 	Globally:<div><b>vtp password </b><i>encrypted-password </i><b>secret</b></div>
When configuring the PPPoE client-side dialer interface, what are two common commands issued to resolve connectivity issues? 	<b>interface dialer </b><i>num</i><div><b>&nbsp; mtu 1492</b></div><div><b>&nbsp; ip tcp adjust-mss 1452</b></div>
How do you verify which VLANs are being used internally on a switch (such as those used for Layer 3 switchports). 	<b>show vlan internal usage</b>
What are the two types of STP BPDUs? 	Configuration<div>Topology Change Notification (TCN)</div>
What are the twelve fields in a STP Configuration BPDU? 	<div>I Verify That Four Raccoons Can Skip Safely Across My Huge Forest</div><div><br /></div><div>Protocol Identifier (2B)</div><div>Protocol Version&nbsp;(1B)</div><div>BPDU Type&nbsp;(1B)</div><div>Flags&nbsp;(1B)</div><div>Root Bridge ID&nbsp;(8B)</div><div>Root Path Cost&nbsp;(4B)</div><div>Sending Bridge ID&nbsp;(8B)</div><div>Sending Port ID&nbsp;(2B)</div><div>Message Age&nbsp;(2B)</div><div>Max Age&nbsp;(2B)</div><div>Hello Time&nbsp;(2B)</div><div>Forward Delay&nbsp;(2B)</div>
What are the three fields in a STP Topology Change Notification BPDU? 	Protocol Identifier (2B)<div>Protocol Version (1B)</div><div>BPDU Type (1B)</div>
What are the Protocol ID and Protocol Version values for STP BPDUs? 	Protocol ID: 0x0000<div>Protocol Version: 0x00</div>
What is the value of the STP BPDU Type field for a Configuration BPDU? 	0x00
What is the value of the STP BPDU Type field for a Topology Change Notification BPDU? 	0x80
What are the two flags used in the STP BPDU Flags field? 	<div>Topology Change Acknowledgement</div><div>Topology Change</div>
What is the Message Age field in a STP BPDU? 	An estimatation of the BPDU's age since it was originated at the Root bridge. The Root sets the Message Age to 0, and downstream switches increment the value (usually by 1) as the BPDU propagates outward.
True or False: The STP MaxAge, HelloTime, and ForwardDelay timers are not used on nonroot switches with classic STP, even if they are configured. 	True. The timers values are generated by the Root switch, conveyed in BPDUs, and used on all downstream switches in the STP domain.
What is the five-step process to determine which of two STP BPDUs are superior and inferior? 	The lowest value of:<div><br /></div><div>Root Bridge ID</div><div>Root Path Cost</div><div>Sender Bridge ID</div><div>Sender Port ID</div><div>Receiver Port ID (not included in the BPDU - evaluated locally as the final tiebreaker)</div>
What is another term for STP Configuration BPDUs? 	Hellos, because their origination is driven by the Hello timer.
Each port in an STP topology stores the Designated Port's BPDU. DPs send their own BPDU, and Root and Blocking ports store the received BPDU from the upstream switch.<div><br /></div><div>When a port stores a received BPDU, when must it be refreshed?</div> 	The BPDU expires within a time interval of MaxAge - MessageAge seconds, and must receive another BPDU within that time frame.&nbsp;<div><br /></div><div>For example, with the default MaxAge time of 20 seconds, a switch that is two hops away from the Root should receive a BPDU with a MessageAge of 4, therefore it must receive another BPDU within 16 seconds, otherwise the stored BPDU expires.</div>
What are the three steps STP uses to determine which ports to forward and block? 	-Elect the root switch<div>-Determine each switch's Root Port</div><div>-Determine the Designated Port for each segment</div>
How does STP elect the root bridge? 	When STP is initialized on a switch, it sends out BPDUs claiming itself to be the Root. If it receives a superior BPDU, it stops claiming to be the Root and stops originating BPDUs, and starts forwarding the received superior BPDUs onward.
What is the difference between the original 802.1D Bridge ID, and the revised 802.1t Bridge ID (now a part of 802.1D-2004)? 	The original Bridge ID is a 2-byte Priority field + 6-byte System ID (MAC address).<div><br /></div><div>The revised BID splits the Priority field into a 4-bit Priority field + 12-bit System ID Extension (which is typically set to the VLAN ID).</div><div><br /></div><div>The revised 4-bit Priority field represents the original Priority values in multiples of 4096.</div>
Before the 802.1D Bridge ID format was revised, how did Cisco implement PVST? 	Having multiple STP instances with the same BID was in violation of 802.1D that required a distinct BID for each switch. Cisco used a different MAC address for each VLAN, which consumed a large number of reserved MAC addresses in each switch.
What is another term for the revised STP BID System ID Extension field? 	MAC address reduction<div><br /></div><div>Prior to the 802.1t amendment, Per-VLAN Spanning-Tree required a separate unique MAC address for the BID for each VLAN, which consumed a large number of reserved MAC addresses on each switch.</div>
What is the next step after the STP Root Bridge is elected? 	Each switch must determine its single Root Port.
What happens with regard to cost when a nonroot switch in a STP domain receives a BPDU? 	The switch adds the cost of the received port to the RPC value in the received BPDU, yielding a resulting BPDU that can be propagated on the switch's Designated ports.&nbsp;
When a nonroot switch in a STP domain receives a BPDU on its Root Port, what BPDU values must be updated before the BPDU is propagated on the switch's Designated Port(s)? 	Root Path Cost<div>Sender Bridge ID</div><div>Sender Port ID</div><div>MessageAge</div>
True or False: Classic STP switches do not forward Configuration BPDUs (Hellos) out Root Ports or ports that stabilize into Blocking state. 	True: BPDUs on these ports would be inferior to BPDUs originated by a neighbor's Designated Port for the segment.
Why can there only be a single STP Root Port? 	There will always be only a single received Configuration BPDU (Hello) that is superior over all other received BPDUs.
True or False: The STP Root Bridge adds its STP Port Cost when sending BPDUs out its Designated Ports. 	False: The Root Bridge sends BPDUs with a Root Path Cost of 0 since it is the root. Additionally, the RPC value is adjusted by adding the port cost when a nonroot switch receives a BPDU.
How do you change the STP cost method? 	Global:<div><b>spanning-tree pathcost method </b>{<b>short </b>| <b>long</b>}</div><div><br /></div><div>The <b>short </b>(802.1D-1998) method is used by default for (R)PVST.</div><div><br /></div><div>The l<b>ong </b>(802.1D-2004) method is used by default for MST.</div>
What are the STP port costs used for 10 Mbps, 100 Mbps, 1 Gbps, and 10 Gbps links for the 802.1D-1998 standard? 	10 Mbps = 100<div>100 Mbps = 19</div><div>1 Gbps = 4</div><div>10 Gbps = 2</div>
What are the STP port costs used for 10 Mbps, 100 Mbps, 1 Gbps, and 10 Gbps links for the 802.1D-2004 standard? 	10 Mbps = 2,000,000<div>100 Mbps = 200,000</div><div>1 Gbps = 20,000</div><div>10 Gbps = 2,000</div>
What is the STP term for the nonroot switch that forwards Configuration BPDUs (Hellos) onto a particular LAN segment? 	Designated Bridge (Switch)
With STP, what happens when ports are determined to be neither Root nor Designated? 	They are moved to Blocking state.
When determining the STP Root Port, when is the Root Path Cost considered? 	After the switch adds the STP Port Cost of the port which received the BPDU, then all received BPDUs (with the local Port Cost added to the RPC value) are compared.
What four events are considered a STP topology change? 	-A TCN BPDU is received on a DP<div>-A port moves to the Forwarding state and the switch has at least one DP</div><div>-A port moves from Learning or Forwarding to Blocking</div><div>-A switch becomes the Root</div>
What happens if a switch running STP loses its Root Port, but is not receiving BPDUs from adjacent switches? 	The switch declares itself as the Root and starts flooding its own BPDUs through its connected ports.
What happens when a STP Root Port starts receiving inferior BPDUs? 	The inferior BPDUs are ignored until the current Root Port's stored BPDU expires (MaxAge - MessageAge).
What happens when a switch running STP stops receiving BPDUs on its current Root Port? 	The port becomes a Designated Port and moves to the Listening state after the stored BPDU expires (MaxAge - MessageAge). The switch then searches for a new Root Port by comparing received superior BPDUs on other ports.
When there is a STP topology change, why do all of the CAM entries need to be aged out? 	When there is a topology change, the link used to reach the Root Bridge might be changed as well, which means the CAM table must be updated to reflect which port is now used to reach the MAC address of the Root Bridge.
What happens when a switch in a STP domain detects a topology change? 	The switch sends a TCN BPDU out its Root Port, repeating every Hello interval (2s default) until it is acknowledged by the upstream switch.
What happens in a STP topology when a switch receives a TCN BPDU? 	It sends back an acknowledgement in the next forwarded Configuration BPDU (Hello) by marking the Topology Change Acknowledgement bit in the Flags field.
What happens when the Root Bridge in a STP domain is informed of a topology change? 	The Root Bridge originates BPDUs with the Topology Change bit set for the next MaxAge + ForwardDelay seconds, which instructs all switches in the STP domain to shorten their aging time for CAM entries to ForwardDelay seconds.
Which classic STP port states are considered stable, and which are transitory? 	Blocking, Forwarding, Disabled = stable<div>Listening, Learning = Transitory&nbsp;</div>
During which classic STP port states are source MAC addresses learned from received frames? 	Learning, Forwarding
What major issue does PVST solve over Common Spanning Tree (CST)? 	By creating a different STP instance for each VLAN, each VLAN can use a different Root Bridge, which enables load distribution since a port that is blocked for one VLAN can be forwarding for another VLAN.
"Why is classic STP sometimes referred to as ""Common Spanning Tree (CST)""? "	"Classic IEEE 802.1D STP is not VLAN-aware, and uses a single STP topology for all VLANs, which is why it is referred to as ""common""."
How does Cisco PVST+ interoperate with non-Cisco switches that only support CST? 	Cisco PVST+ running on 802.1Q trunks uses a VLAN 1 STP instance to communicate with non-Cisco switches and their STP. This allows for separate PVST+ and CST regions, which creates an overall loop-free topology across the CST regions and VLAN 1 inside PVST+ regions, while each PVST+ region utilizes multiple spanning trees with potentially different topologies within each separate PVST+ region.
In a STP topology containing both CST and PVST+ regions, how does the STP toplogy compare between regions? 	There is an overall loop-free topology that is bound to all VLANs in CST regions, and VLAN 1 within PVST+ regions. Within individual PVST+ regions, other VLANs can utilize different per-VLAN STP topologies.
How is PVST+ able to treat CST regions between PVST+ regions as loop-free shared segments? 	PVST+ BPDUs are encapulated on trunks differently than ordinary BPDUs.&nbsp;<div><br /></div><div>-Their destination MAC address is 0100.0CCC.CCCD (as opposed to ordinary BPDU destination 0180.C200.0000)</div><div>-They are tagged with the corresponding VLAN (ordinary BPDUs are untagged)</div><div>-They are SNAP encapsulated (ordinary BPDUs are LLC encapsulated)</div><div>-They have a Port VLAN ID (PVID) TLV placed at the end that carries the originating VLAN number</div>
To which destination MAC address are PVST+ BPDUs sent? 	0100.0CCC.CCCD
To which MAC address are regular BPDUs sent? 	0180.C200.0000
What type of Ethernet encapsulation do PVST+ BPDUs use? 	SNAP
What type of Ethernet encapsulation do regular BPDUs use? 	LLC
How is the VLAN information conveyed in PVST+ BPDUs? 	PVST+ BPDUs are 802.1Q tagged, and each PVST+ BPDU has a Port VLAN ID (PVID) TLV record carrying the originating VLAN ID.
How can PVST+ BPDUs be used to detect native VLAN mismatches? 	PVST+ BPDUs are 802.1Q tagged, and carry a Port VLAN ID (PVID) TLV record. When the destination switch receives the BPDU, it analyzes the PVID and compares it with the VLAN on which it was received. If the BPDU was sent untagged and received on a destination VLAN requiring a tag, or vice-versa, the native VLAN mismatch is detected.
How are PVST+ BPDUs tunneled across CST regions? 	CST regions treat PVST+ BPDUs are ordinary multicasts and floods the BPDUs without processing them. When the PVST+ switches receive the flooded BPDUs from the CST regions, they can examine the PVID TLV and process the BPDUs further within the individual PVST+ regions.
How is VLAN 1 treated differently for BPDU processing in PVST+? 	VLAN 1 on PVST+ trunks sends both standard BPDUs and PVST+ BPDUs. Only the STP BPDU is used by both CST and PVST+ to compute the spanning tree. The PVST+ BPDU for VLAN 1 is used to detect native VLAN mismatches, but is otherwise ignored upon arrival.
With PVST+, which types of BPDUs are sent on access ports? 	Access ports send only IEEE BPDUs relevant to their access VLAN
With PVST+, which types of BPDUs are sent on trunk ports? 	Trunk ports always send untagged IEEE BPDUs for VLAN 1, and tagged PVST+ BPDUs for all existing and allowed VLANs, including VLAN 1, though the native VLAN will be untagged.
What happens if an access port receives a non-IEEE BPDU? 	When processing received BPDUs, an access port must receive only IEEE BPDUs, otherwise a Type Inconsistent state is declared.
What happens when a trunk port in a PVST+ domain receives an IEEE-formatted BPDU? 	That BPDU is processed for the VLAN 1 STP instance.
What are the three processing steps that take place when a trunk port receives a PVST+ BPDU? 	-Assign the BPDU to the proper VLAN via 802.1Q tag (or native VLAN if untagged)<div><br /></div><div>-Check the PVID TLV in the BPDU. If the PVID does not match the VLAN, declare PVID_Inconsistent state for the pair of mismatched VLANs</div><div><br /></div><div>-If the PVID matches the VLAN, process the BPDU with STP, except for VLAN 1. For VLAN 1, drop the BPDU and use the received IEEE BPDU. The PVST+ BPDU for VLAN 1 is only used for the native VLAN mismatch check.</div>
What causes PVID_Inconsistent state? 	When a received PVST+ BPDU's PVID TLV does not match the VLAN for which the BPDU was received. There is a native VLAN mismatch in this case, and both VLANs become PVID_Inconsistent.&nbsp;
When PVST+ regions are interconnected with CST regions, what two high-level steps are performed to ensure an overall loop-free topology? 	A loop-free STP topology is calculated across all CST regions, and across VLAN 1 in PVST+ regions. Then the remaining VLANs inside PVST+ regions calculate the loop-free STP topology per-VLAN.
What command displays the STP Root Bridge? 	<b>show spanning-tree root</b>
How do you configure the STP priority of a VLAN? 	Globally:<div><b>spanning-tree vlan </b><i>vlan </i><b>priority </b><i>priority</i></div><div><i><br /></i></div><div>Where <i>priority </i>is in increments of 4096.</div>
What is the default STP priority for any given VLAN? 	32768 + VLAN number (System ID Extension)<div><br /></div><div>Example, VLAN 11 is 32768 + 11 = 32779</div>
How do you adjust the STP cost of a port? 	Interface:<div><b>spanning-tree </b>[<b>vlan </b><i>vlan</i>] <b>cost </b><i>cost</i></div>
What single command sets the STP Root Bridge and adjusts all of the timers? 	Global:<div><b>spanning-tree vlan </b><i>vlan </i><b>root primary diameter </b><i>diameter</i></div><div><i><br /></i></div><div>This command is a macro that configures the switch with a lower priority than all other switches, and adjusts the Hello, ForwardDelay, and MaxAge timers according to the entered diameter value (the default being 7).</div>
What priority values does the command <b>spanning-tree vlan </b><i>vlan </i><b>root secondary </b>set the switch to? 	28672
What priority value does the command <b>spanning-tree vlan </b><i>vlan </i><b>root primary </b>set the switch to? 	24576 if the current root is higher, or the same with a higher MAC address, or 4096 less than the current root.
What are the RSTP stable and transitory states? 	Discarding, Forwarding = stable<div>Learning = Transitory</div>
"RSTP defines the ""Discarding"" state as the replacement for which STP states? "	Disabled, Blocking, Listening
True or False: Ports in RSTP Discarding or STP Blocking states still process non-data frames including BPDUs and other Layer 2 protocols like DTP, VTP, CDP, etc. 	True. Ports in RSTP Discarding or STP Blocking do not forward data frames, receive data frames, or learn source MAC addresses, but do continue to process Layer 2 control plane traffic.
What are the RSTP Port Roles? 	Root Port<div>Designated Port</div><div>Alternate Port</div><div>Backup Port</div>
What is the difference between an RSTP Alternate Port and Backup Port? 	Alternate = replacement Root Port, event-driven<div>Backup = replacement Designated Port, timer-driven</div>
With RSTP, what happens if the current Root Port is lost, but an Alternate Port exists? 	The Alternate Port becomes the new Root Port and immediately transitions to Forwarding.
What are the two RSTP port types, and which is the default? 	Edge<div>Non-Edge (default)</div>
True or False: RSTP Edge ports still send BPDUs. 	True: RSTP Edge ports immediately become Designated Forwarding after coming up, and send BPDUs, but do not expect to receive any back. If a BPDU is received on an Edge port, it begins operating as a Non-Edge port.
What happens if an RSTP Edge port receives a BPDU, but is later disconnected or shut down? 	When an RSTP Edge port receives a BPDU, it reverts to Non-Edge operations. However, if the port is later disconnected or shutdown, when it comes back up it will revert to RSTP Edge operations until a BPDU is received again.
How do you manually configure the RSTP link type? 	<div>Interface:</div><div><b>spanning-tree link-type </b>{<b>point-to-point </b>| <b>shared</b>}</div>
What is the default RSTP port role, state, and type? 	Designated, Discarding, Non-Edge
With RSTP, what happens if an inter-switch link is either negotiated to or manually-configured to half-duplex? 	The RSTP link type is <b>shared </b>and uses timer-driven operations instead of event-driven.
With RSTP, what happens if an inter-switch link is either negotiated to or manually-configured to full-duplex? 	The RSTP link type is <b>point-to-point </b>until proven otherwise (such as RSTP not running on the other end of the link).
How many types of BPDUs are used by RSTP? 	One<div><br /></div><div>STP uses Configuration and TCN BPDUs, while RSTP contains everything within the single BPDU type.</div>
What is the BPDU Protocol Version field set to for RSTP? 	2
What bits are defined in the Flags field of the RSTP BPDU? 	<div>TPPL FAT</div><div><br /></div>Topology Change<div>Proposal</div><div>Port Role (uses 2 bits)</div><div>Learning</div><div>Forwarding</div><div>Agreement</div><div>TC Ack</div>
What is the MessageAge BPDU field used for in RSTP? 	The MessageAge field is only used as a hop count with RSTP. Any BPDU with a MessageAge equal to or higher than the MaxAge is discarded.
What happens if an RSTP switch misses three Hellos? 	When three Hellos are missed on a port, the stored BPDU is aged out immediately.
What happens with RSTP when a Designated Switch starts sending BPDUs that are inferior to those sent previously? 	The receiving switch accepts the BPDUs immediately, and replaces the previously-stored BPDUs, as if the previous superior BPDU had expired.<div><br /></div><div>The receiving switch then re-evaluates its port roles and states. This allows RSTP to more quickly react to changes in the topology, because receipt of an inferior BPDU means there was a change with regard to reaching the root (or the root itself changed).</div>
What is the purpose of the RSTP Proposal/Agreement process? 	RSTP uses the Proposal/Agreement process on point-to-point links to quickly put them into operation without causing a temporary switching loop or significant interruption in communications.<div><br /></div><div>For example, a newly-added p2p link could cause one of the attached switches to place its Root Port on the new link, which could change other port roles in the network. Without the Proposal/Agreement process, switching loops can occur.</div>
With the RSTP Proposal/Agreement process, what is the meaning of the proposal, and what is the meaning of the agreement? 	The Proposal signifies the willingness of a port to become Designated Forwarding.<div><br /></div><div>The Agreement grants permission for the upstream port to become Designated Forwarding immediately.</div>
True or False: Any RSTP Designated Port in the Discarding or Learning state sends BPDUs with the Proposal bit set. 	True. The Proposal bit indicates the port's willingness to become Designated Forwarding.
What is the first thing that happens when two ends of an RSTP point-to-point link receive each other's Proposals, assuming each end of the link has the right to be Designated? 	The switch receiving the best resulting BPDU changes its port role from Designated to Root (while remaining in the Discarding state).
What are the six steps of the RSTP Proposal/Agreement &amp; Sync process? 	<div>Connect &gt; Determine Root &gt; Others Discard &gt; Root Agreement Forward &gt; Designated Agreement Forward &gt; Repeat</div><div><br /></div>-P2P link connected, both ports are Designated Discarding and send Proposals<div>-Port receiving superior BPDU becomes Root Discarding and adjusts other port roles on the switch</div><div>-All Non-Edge Designated ports on the switch are put into Discarding state (Sync)</div><div>-New Root moved to Forwarding state and Agreement sent upstream</div><div>-Upstream switch receives Agreement and moves Designated port to Forwarding state</div><div>-Entire process repeats between downstream switches</div>
Why is it critical to define Edge ports in an RSTP domain? 	Non-Edge ports participate in the Proposal/Agreement/Sync process during topology changes, which can result in major temporary connectivity losses if the connected devices do not participate in the process (such as with a regular host), whereas Edge ports are always in the Forwarding state.
What consistutes a topology change event in RSTP? 	The transition of a Non-Edge port from Discarding or Learning to Forwarding.<div><br /></div><div>This is due to Forwarding ports providing a path to a set of MAC addresses, and therefore the CAM tables need to be updated.</div>
Why is a port that is moved into the Forwarding state considered a topology change event for RSTP? 	When a port is moved into Forwarding state, it can provide a path to a set of MAC addresses, and therefore CAM tables need to be updated.
True or False: RSTP Edge ports never cause a topology change event, and MAC addresses learned on them are not flushed during topology change event handling. 	True, Edge ports remain in the Forwarding state, and the MAC addresses learned on Edge ports are unaffected.
How does an RSTP switch detect a topology change? 	If one of its own Non-Edge ports moves into the Forwarding state, or if it receives a BPDU on a Root or Designated port with the TC flag set.
What three things happen when an RSTP switch detects a topology change? 	-The switch sets a tcWhile timer (Hello + 1 sec) on all Non-Edge Designated Ports and Root Port, except the port that detected/learned the change<div>-The switch immediately flushes all MAC addresses learned on those ports</div><div>-The switch sends BPDUs with the TC flag set on those ports every Hello seconds until the tcWhile timer expires</div>
How do you enable RPVST+? 	Globally:<div><b>spanning-tree mode rapid-pvst</b></div><div><b><br /></b></div><div>Important: Define Edge ports with <b>spanning-tree portfast </b>or <b>spanning-tree portfast default</b></div>
True or False: RPVST+ and RSTP operate exactly like PVST+ and STP with regard to CST and Per-VLAN regions. 	True. While PVST+/STP will use classic STP rules, and RPVST+/RSTP will use RSTP rules, Per-VLAN regions are still tunneled over the CST regions in the same manner.
What are the three requirements for RSTP to provide quick reaction to changes in the network topology? 	-All switches must run RSTP/RPVST+<div>-All inter-switch links must be properly installed and recognized as point-to-point links</div><div>-All ports toward end stations must be properly identified as Edge ports</div>
What happens if a switch running RSTP/RPVST+ connects to a switch running classic STP or PVST+? 	Classic STP / PVST+ rules will be in effect for that port
What happens when switches running RSTP have shared segments (instead of point-to-point links)? 	RSTP reverts to timer-based (instead of event-driven) operations on shared segments, which greatly increases reconvergence time during topology changes.
For lower-end Catalyst switching platforms, what is the R/PVST+ instance limitation, and how do you get around it? 	Several platforms, such as the 2960, 3560 and 3750, support up to 128 STP instances (and therefore 128 active VLANs). To get around this limitation, use MST.
How many active instances does MST support? 	65: Instance 0 + up to 64 user-defined instances
What is the valid range of MST instance numbers? 	0 - 4095. MST uses the 802.1t System ID Extension field for instance numbers.
How many BPDUs are used to carry information about MST instances? 	MST uses a single BPDU to carry information about about all instances.
In MST, a port sends BPDUs if it is ___ for at least one MST instance. 	Designated
What is MST instance 0 referred to as? 	Internal Spanning Tree
When MST is used without being configured, where do all VLANs reside? 	Without configuration, MST maps all VLANs to instance 0, the Internal Spanning Tree (IST)
What purpose does the MST Internal Spanning Tree serve at MST region boundaries? 	At the MST region boundary, the role and state of the port is a part of the IST and is inherited by all VLANs on that port, not just the VLANs mapped onto the IST. This is what allows MST to make the entire region appear as a single switch to other regions and non-MST switches.
How is a loop-free topology built between MST regions? 	Each region is treated by the rest of the network as a single switch, and a Common Spanning Tree representing all VLANs is built between each region, and non-MST regions.
What are MST external costs? 	Costs in the CST reflecting links both between MST regions and non-MST regions.
What is the MST Common and Internal Spanning Tree (CIST)? 	The CIST is the union of the CST between regions and the ISTs inside individual regions, and is the single spanning tree that spans the entire switched topology.<div><br /></div><div>Each IST has a regional Root switch (called the CIST Regional Root), and the CIST has a single CIST Root switch overall.</div>
How is the MST CIST Root Switch elected? 	The MST CIST Root Swith is the switch with the lowest Bridge ID from all switches that participate in CIST - both IST roots inside MST regions, and from all STP/RSTP switches.
For MST regions that do not contain the CIST Root, which switches are allowed to assert themselves as IST Root switches? 	Only those MST swtiches at the region boundary (those that have links to other regions).
What is the MST Master port? 	The MST Master port is the CIST Regional Root switch (IST Root)'s Root Port to reach the CIST Root switch, and provides connectivity toward the CIST Root for all MST instances inside the region.
How are MST IST Root switches elected? 	-Lowest external root path cost to the CIST Root switch (the CST cost of reaching the region with the CIST Root)<div>-Lowest IST Bridge ID of boundary switches if there is a tie in cost</div>
During MST IST Root election, how is the external root path cost calculated? 	The external root path cost from candidate IST Root bridges is calculated using the Common Spanning Tree costs toward the region containing the CIST Root switch. In other words, the cost of the links between regions, not the costs within the regions themselves, are used.
What is the reason for the PVST Simulation mechanism? 	To allow for a consistent interoperation between MST and PVST+ regions. The PVST Simulation process allows a single MST instance and a single PVST+ instance to directly interact with each other, but have all PVST+ instances arrive at a consistent port role decision.
When MST interacts with PVST+, what does the MST boundary port do to ensure all PVST+ instances make a consistent decision regarding the PVST+ boundary port role? 	The MST switch boundary ports replicate the IST's BPDUs into PVST+ BPDUs for all active VLANs.
When a PVST+ region interacts with a MST region, what causes the MST boundary port to become Designated? 	If the BPDUs sent by the MST boundary port are superior to all received PVST+ BPDUs on the port.
When a PVST+ region interacts with a MST region, what causes the MST boundary port to become Root? 	The MST boundary port must receive PVST+ BPDUs that are identical or superior to the received PVST+ BPDU for VLAN 1.&nbsp;<div><br /></div><div>For the BPDUs for all VLANs other than 1 to be superior when the System ID Extension is used, their priority must be at least 4096 lower than the priority of the PVST+ VLAN 1 root switch.</div>
When a PVST+ region interacts with a MST region, what causes the MST boundary port to become Non-Designated (but not Root)? 	If the incoming VLAN 1 PVST+ BPDU is superior to its own BPDUs, but not superior enough to make it become a Root port (e.g. there is another connection between the regions that is better). Non-Designated ports are blocked.
When a PVST+ region interacts with a MST region, what two rules must be followed to prevent PVST Simulation Inconsistent / Root Inconsistent errors? 	-If the Root Bridge for the CIST is in a non-MST region, the STP priority of VLANs 2 and above within that region must be superior to that of VLAN 1<div><br /></div><div>-If the Root Bridge for the CIST is within a MST region, the STP priority of VLANs 2 and above in the non-MST regions must be inferior than that of the CIST root</div>
What is considered a best practice when working with a mixed MST and PVST+ network? 	The MST region should appear as a root switch to all PVST+ instances by lowering the IST root's priority below all PVST+ switches in all VLANs.
Which STP mode will a Cisco MST switch port operate in when connecting to a switch running:<div><br /></div><div>-STP</div><div>-RSTP</div><div>-PVST+</div><div>-RPVST+</div> 	-STP<div>-RSTP</div><div>-PVST+</div><div>-PVST+</div><div><br /></div><div>When a Cisco MST switch connects to a RPVST+ region, PVST+ operation is used on the region boundary.</div>
What are the three mandatory elements in an MST region whose configuration must match on all switches within the region? 	-Region Name<div>-Revision Number</div><div>-VLAN-to-Instance Mappings</div>
How do two MST switches consider themselves to be in the same MST region? 	Within the MST BPDUs is the region name, revision number, and MD5 hash of the VLAN-to-Instance mapping. If all three of these match, the switches are in the same MST region.
How are MST VLAN-to-Instance mappings distributed, and how can you verify this? 	The MST VLAN-to-Instance mappings are distributed in the MST BPDUs as an MD5 hash, and can be verified with:<div><br /></div><div><b>show spanning-tree mst configuration digest</b></div>
What is considered a best practice for MST with regard to VLAN-to-Instance mappings? 	Create the VLAN-to-Instance mappings for all possible VLANs within a region, even if the VLANs do not currently exist.&nbsp;<div><br /></div><div>Modifying the VLAN-to-Instance mapping must be performed on all switches within the region and requires an outage window. However, VLANs can be both created and deleted after they are mapped to an instance and will not cause a topology change event with respect to MST.</div>
How can you verify if a switch supports only pre-standard MST? 	<b>show spanning-tree mst configuration digest</b><div><b><br /></b></div><div>If a single MD5 value is listed, the switch only supports pre-standard MST. Two MD5 digests indicate support for both standard and pre-standard MST.</div>
If a switch running standard MST is connected to another switch supporting only pre-standard MST, what must be configured? 	The switch running standard MST must have <b>spanning-tree mst pre-standard </b>configured on the port toward the pre-standard MST switch.
What is the first step to configure MST? 	Globally:<div><b>spanning-tree mst configuration</b></div>
How do you exit from MST configuration mode without saving the changes? 	<b>abort</b>
How do you verify unapplied changes to the MST configuration? 	<b>show pending</b>
From within MST configuration mode, how do you verify the existing configuration, whether or not changes have been made? 	<b>show current</b>
After configuration, how do you enable MST on a switch? 	<b>spanning-tree mode mst</b>
From within MST configuration mode, how do you configure the three required parameters? 	<b>name </b><i>name</i><div><b>revision </b><i>number</i></div><div><b>instance </b><i>number </i><b>vlan </b><i>number-or-range</i></div>
How do you modify the MST priority on a switch? 	Globally, per-instance:<div><b>spanning-tree mst </b><i>instance </i><b>priority </b><i>priority</i></div>
What is the relationship between the VTPv3 domain and the MST region? 	VTPv3 can distribute MST configuration information, and there is a 1:1 relationship between the VTPv3 domain and the MST region.
How do you configure VTPv3 to distribute the MST configuration? 	Globally:<div><b>vtp mode server mst</b></div><div><b><br /></b></div><div>Exec:</div><div><b>vtp primary mst</b></div>
What does the global command <b>spanning-tree portfast default </b>do? 	PortFast will be the default operating mode for all interfaces in <b>access </b>mode (whether statically set or dynamically negotiated), unless configured otherwise, or unless the individual port receives a BPDU.
With PortFast enabled globally, how do you disable it on a specific interface? 	Interface:<div><b>spanning-tree portfast disable</b></div>
How do you enable PortFast on a port that connects to a host capable of 802.1Q tagging? 	Interface:<div><b>spanning-tree portfast trunk</b></div><div><b><br /></b></div><div>Important: This command is meant for end-devices like routers and hypervisors. Never issue this command on ports connecting to other switches.</div>
What is the purpose of BPDU Guard? 	BPDU Guard error-disables a port immediately upon receipt of any BPDU.
What is the purpose of Root Guard? 	Root Guard ignores any received superior BPDUs to prevent the port from becoming the Root Port. When a superior BPDU is received, the port is placed into Root-Inconsistent Blocking state and stops sending and receiving data frames until the superior BPDUs stop.
How do you globally enable BPDU Guard? 	Globally:<div><b>spanning-tree portfast bpduguard default</b></div>
How do you unconditionally configure the operation of BPDU Guard? 	Interface:<div><b>spanning-tree bpduguard </b>{<b>enable </b>| <b>disable</b>}</div>
How do you enable Root Guard? 	Interface:<div><b>spanning-tree guard root</b></div>
How do you configure BPDU Filter globally? 	<b>spanning-tree portfast bpdufilter default</b>
When BPDU Filter is enabled globally, how does it operate? 	When enabled globally, BPDU Filter is activated only on PortFast (Edge) ports. When the port comes up, the port sends 11 BPDUs (1 immediately, then again over the next 10 Hello intervals). If no BPDUs are received, the port stops sending BPDUs. If BPDUs are received at any time, BPDU Filter is deactivated on the port and starts sending and receiving BPDUs normally. If the port is disconnected, the process starts over again.
How do you disable BPDU Filter on an interface? 	<b>spanning-tree bpdufilter disable</b>
How do you cause a port to unconditionally stop sending and receiving BPDUs? 	Interface:<div><b>spanning-tree bpdufilter enable</b></div>
What happens if an interface receives a BPDU when it is configured globally for BPDU Filter, and also configured (either globally or per-port) for BPDU Guard? 	The port is automatically err-disabled.
What are the four mechanisms available to detect and avoid issues caused by unidirectional links on Catalyst switches? 	UDLD<div>STP Loop Guard</div><div>Bridge Assurance</div><div>RSTP/MSTP Dispute</div>
What information is transmitted in UDLD messages? 	Switch identity / port identity pair as message originator<div>List of all neighboring switch/port pairs heard on the same segment</div>
What three ways does UDLD detect unidirectional links, and what happens when a unidirectional link is detected? 	-Received UDLD messages do not contain the exact switch/port pair from the list of detected neighbors<div>-Received UDLD messages containing the exact switch/port pair as the originator (self-looped port)</div><div>-Received UDLD messages contain more than one switch/port pair in the list of detected neighbors, but only one neighbor is detected.</div><div><br /></div><div>If any of these conditions occur, UDLD declares the link as unidirectional and err-disables the port.</div>
What is the difference between UDLD Normal and Aggressive mode? 	When UDLD messages are no longer received, both try to reconnect with the switch's neighbor(s) eight times.<div><br /></div><div>If the attempts fail, Normal mode does nothing, while Aggressive mode err-disables the port.</div>
What is a caveat of enabling UDLD globally? 	It only applies to fiber ports when enabled globally, whereas per-port UDLD configuration activates regardless of the underlying media type.
How do you enable UDLD? 	Globally:<div><b>udld </b>{<b>enable </b>| <b>aggressive</b>}</div><div><br /></div><div>Per-port (required for non-fiber interfaces):</div><div><b>udld port </b>[<b>aggressive</b>]</div>
How do you verify the operational state of UDLD? 	<b>show udld</b>
How do you verify connectivity with UDLD neighbors? 	<b>show udld neighbors</b>
How do you re-enable a port that has been err-disabled by UDLD? 	You can shut/no-shut, or issue the command <b>udld reset</b>
What is the purpose of Loop Guard? 	STP Loop Guard prevents Root and Alternate ports from becoming Designated as a result of total loss of incoming BPDUs.
How does Loop Guard work? 	STP Loop Guard places Root and Alternate ports into blocking Loop Inconsistent state if they stop receiving BPDUs, and are brought out of that state automatically if they start receiving BPDUs again.
How do you configure Loop Guard globally, and per-port? 	Globally:<div><b>spanning-tree loopguard default</b></div><div><b><br /></b></div><div>Interface:</div><div><b>spanning-tree guard loop</b></div>
What is STP Bridge Assurance? 	Bridge Assurance is for RPVST+ and MST, and when enabled, always sends BPDUs each Hello interval, whether the port is Root, Designated, Alternate or Backup. If a BA-protected port does not receive BPDUs, the port is placed into BA-Inconsistent blocking state until it starts receiving BPDUs again.<div><br /></div><div>BA protects against both unidirectional links, and malfunctioning switches that completely stop participating in RPVST+/MST while opening all their ports.</div>
What are the three major requirements of using STP Bridge Assurance? 	It requires RPVST+ or MST point-to-point links<div>It requires configuration on the neighboring device(s)<br /><div><div>It requires a supported platform, such as Catalyst 6500</div></div></div>
How do you enable STP Bridge Assurance? 	Requires both global and per-port configuration.<div><br /></div><div>Global:</div><div><b>spanning-tree bridge assurance</b></div><div><b><br /></b></div><div>Interface:</div><div><b>spanning-tree portfast network</b></div><div><b><br /></b></div><div>This can only be configured on RPVST+/MST point-to-point links.</div>
What is the RPVST+/MST Dispute mechanism? 	<div>It is used to detect unidirectional link failures.</div><div><br /></div>If a Designated Port receives an inferior BPDU from another port that claims to be Designated Learning or Designated Forwarding, the Designated Port keeps its role but is moved to Discarding state.
Why does the STP Dispute mechanism require RPVST+ / MST? 	STP Dispute does not work with classic STP / PVST+ because it relies on the Port Role and Port State flags within the RSTP BPDU, which are not present in classic STP BPDUs.
How do you configure the STP Dispute mechanism? 	There is no configuration because it is built into the RSTP protocol and is conveyed by the Port Role and Port State flags inside the RSTP BPDU.
The EtherChannel load-balancing method is based on a proprietary hashing function. What data is fed to this hashing function, and how? 	The data is based on the contents of the Layer 2, 3, or 4 headers.<div><br /></div><div>If load balancing is based on only one header field in the frame, that single field is fed to the hashing function.</div><div><br /></div><div>If multiple headers from the frame are used, an XOR operation between the fields is used, and the result of the XOR is fed to the hashing function.</div>
True or False: Devices on opposite ends of an EtherChannel bundle must use the same load-balancing algorithm. 	False, devices can and often do use different load-balancing algorithms on each end.
How do you configure the EtherChannel load distribution method? 	Globally:<div><b>port-channel load-balance </b><i>type</i></div>
What is the difference between the EtherChannel 3-bit and 8-bit load balancing hash? 	Some platforms support a 3-bit load balancing hash, and others support an 8-bit hash. The difference is how fine-grained the distribution of traffic is across the links in the bundle. A 3-bit hash means the traffic can be divided into 8 chunks (12.5%), whereas an 8-bit hash can divide traffic into 256 chunks (0.39%).&nbsp;<div><br /></div><div>If there are three links in an EtherChannel bundle, traffic is distributed across the links in a ratio of 3:3:2 or 37.5%:37.5%:25% with a 3-bit hash. With an 8-bit hash, the same traffic is distributed in a ratio of 86:85:85 or 33.6%:33.2%:33.2%.</div>
True or False: All links in an EtherChannel bundle must have the same speed and duplex settings. 	True
True or False: All links in an EtherChannel bundle must have the same operating mode (trunk, access, dynamic). 	True
True or False: All links in an EtherChannel bundle must have the same access VLAN if not trunking. 	True
True or False: All links in an EtherChannel bundle, if trunking, must use the same trunk type and native VLAN, but can have different allowed VLANs. 	False: the trunk type, allowed VLANs, and native VLAN must be the same on all links.
True or False: All links in an EtherChannel bundle must have the same STP cost per-VLAN. 	True
True or False: You must create the EtherChannel interface (with the command <b>interface port-channel </b><i>number</i>) before adding physical interfaces to the bundle. 	False. While you can do this, it is recommended to configure the physical interfaces identically first, and then issue the command <b>channel-group </b><i>number </i><b>mode </b><i>mode </i>on each of the physical interfaces. The port-channel interface is automatically created and inherits the configuration of the first physical interface to be added to the bundle.
Why should you have an EtherChannel interface created automatically via the physical interface <b>channel-group </b><i>number </i><b>mode </b><i>mode </i>command, instead of creating the interface manually? 	All physical interfaces that are members of an EtherChannel bundle must have the same configuration. When you issue the command <b>channel-group </b><i>number </i><b>mode </b><i>mode </i>on the first physical interface, the port-channel interface is created automatically, the configuration of the first physical interface is copied to it, and the configuration of all subsequent physical interfaces that are added to the bundle are compared to the port-channel interface configuration. Interface configurations that do not conform are suspended from the port-channel interface.
What causes an EtherChannel member to become Suspended? 	If the configuration on the physical interface differs from the port-channel interface, it becomes Suspended from the bundle.
What is a caveat of modifying the configuration on a port-channel interface? 	The configuration changes are pushed down the the port-channel member interfaces, but only for those that are not currently Suspended. You must manually configure the Suspended members to be identical to the port-channel interface to unsuspend them.
True or False: An EtherChannel can be either Layer 2 or Layer 3, but the mode cannot be changed. 	True: You must delete and re-create an EtherChannel to switch the mode. You must change the mode on the physical interfaces first, then re-create the EtherChannel.
If an EtherChannel has err-disabled ports, how do you resolve this without errdisable recovery? 	Both the port-channel and physical interfaces must be shutdown, then unshut.<div><br /></div><div>If this does not resolve the issue, the port-channel may need to be deleted and re-created.</div>
How do you configure EtherChannel Misconfig Guard? 	Enabled by default, disable with <b>no spanning-tree etherchannel guard misconfig</b>
How does EtherChannel Misconfig Guard work? 	EtherChannel Misconfig Guard disables an entire port-channel bundle if it receives BPDUs sources from different MAC addresses on a port-channel interface, indicating that the neighbor is treating some of the links as individual and not bundled together.&nbsp;
What is the IEEE standard for LACP? 	802.1AX<div>Previously 802.3ad</div>
What is the only configurable parameter of PAgP? 	The frequency of sending PAgP messages can be configured per-port:<div><b>pagp timer </b>{<b>normal </b>| <b>fast</b>}</div><div><br /></div><div>Normal = 30 seconds</div><div>Fast = 1 second</div>
How many links can be placed into an LACP bundle? 	16, though only up to 8 can be active. The remaining are in Standby.
How does an LACP Standby link get promoted to Active? 	The switch with the lower LACP System ID selects the link to be promoted. The link with the lowest Port ID is chosen.
What does the LACP System ID consist of? 	A configurable 16-bit Priority value + base MAC address
What does the LACP Port ID consist of? 	16-bit Priority + port number
How do you configure the LACP System ID? 	Globally:<div><b>lacp system-priority </b><i>0-65535</i></div>
How do you configure the LACP Port Priority? 	Interface:<div><b>lacp port-priority </b><i>0-65535</i></div>
What does the EtherChannel <b>channel-protocol </b>{<b>lacp </b>| <b>pagp</b>} command do? 	It forces IOS to reject EtherChannel commands for the other protocol, and for <b>on </b>mode. For example, <b>channel-protocol lacp </b>forces you to use the <b>channel-group </b><i>number </i><b>mode </b>{<b>active </b>| <b>passive</b>} command, and prevents you from using mode auto, desirable, or on.
True or False: PAgP and LACP perform checks to ensure ports are configured identically with regard to operating mode, allowed VLANs, native VLAN, and enapsulation type. 	False: PAgP and LACP only verify whether the links to be bundled are consistently connected to the same neighboring device and are to be bundled into the same link aggregation group.
How frequently are CDP messages generated? 	60 seconds
How can you verify the current CDP hello and hold time? 	<b>show cdp</b>
How do you adjust the CDP timers? 	Globally:<div><b>cdp timer </b><i>seconds</i></div><div><b>cdp holdtime </b><i>seconds</i></div>
How can you view more information about a single CDP neighbor? 	<b>show cdp entry </b><i>DeviceName</i>
What is the IEEE standard for LLDP? 	802.1AB
What are the five mandatory LLDP TLVs? 	Port description<div>System description</div><div>System capabilities</div><div>System name</div><div>Management address</div>
How do you enable LLDP? 	Globally:<div><b>lldp run</b></div>
When LLDP is enabled globally, how do you enable/disable it per-interface? 	Interface:<div>[<b>no</b>] <b>lldp transmit</b></div><div><b>[</b><b>no</b>]&nbsp;<b>lldp receive</b></div>
How do you adjust the LLDP timers? 	"Globally:<div><b>lldp holdtime </b><i>seconds</i></div><div><b>lldp reinit<i>&nbsp;</i></b><i style=""font-style: italic; "">seconds</i></div><div><b>lldp timer<i>&nbsp;</i></b><i style=""font-style: italic; "">seconds</i></div>"
How do you view which ports are in the err-disabled state? 	<b>show interfaces status err-disabled</b>
How do you verify which ports have a Spanning-Tree-related error? 	<b>show spanning-tree inconsistent ports</b>
"What does the STP inconsistency ""Type (*TYPE_Inc)"" indicate?<br /> "	PVST+ BPDUs are received on a non-802.1Q port, which is usually caused by interconnecting access and trunk ports.
"What does the STP inconsistency ""Port VLAN ID (*PVID_Inc)"" indicate? "	PVST+ BPDUs are received in a different VLAN than they were originated in, which is usually caused by a native VLAN mismatch.
"What does the STP inconsistency ""PVST Simulation (*PVST_Inc)"" indicate? "	PVST+ BPDUs received on an MST boundary port do not meet the PVST Simulation consistency criteria.
"What does the STP inconsistency ""Loop (*LOOP_Inc)"" indicate? "	A Loop Guard-protected Root or Alternate Port was prevented from becoming Designated after BPDUs stopped arriving.
"What does the STP inconsistency ""Root (*ROOT_Inc)"" indicate? "	A Root Guard-protected port tried to become a Root Port after receiving superior BPDUs.
"What does the STP inconsistency ""Bridge Assurance (*BA_Inc)"" indicate? "	A Bridge Assurance-protected port stopped receiving BPDUs.
True or False: A different VTP domain name can cause a failure with DTP trunk negotation. 	True, the error message received is similar to:<div><br /></div><div><div>%DTP-5-DOMAINMISMATCH: Unable to perform trunk negotiation on port <i>interface</i> because&nbsp;of VTP domain mismatch.</div></div>
What is an indication of a mismatched VTP password? 	"<b>show vtp status </b>will reveal ""MD5 digest checksum mismatch"""
True or False: No port in an EtherChannel can be a SPAN destination port. 	True. Individual ports can be a SPAN source, but not a destination.
How is QoS configured with EtherChannels? 	QoS parameters are configured on the physical interfaces, not the logical port-channel interface, and must match across all interfaces.
How can you view information about all EtherChannels? 	<b>show etherchannel summary</b>
How do you view information about a specific EtherChannel member? 	<b>show interface </b><i>interface </i><b>etherchannel</b>
What are four ways to troubleshoot a switch for lack of reachability to devices in the same VLAN? 	-Eliminate Layer 1 issues with <b>show interface </b>commands<div>-Verify that the VLAN exists on the switch</div><div>-Verify that the interface is assigned to the correct VLAN</div><div>-Verify that the VLAN is allowed on the trunk</div>
If a subnet is defined with X host bits, how many valid usable IP addresses are in the subnet? 	(2^X) - 2<div><br /></div><div>Example: /24 is 8 host bits, (2^8) - 2 = 254 usable IP addresses.</div><div>Example: /30 is 2 host bits, (2^2) - 2 = 2 usable IP addresses</div><div>Example: /21 is 11 host bits, (2^11) - 2 = 2046 usable IP addresses</div>
With static NAT, what is the relationship between inside/outside/local/global IP addresses? 	-Inside Local (private) address maps to Inside Global (public)<div>-Outside Local (typically private) address maps to Outside Global (public)</div>
How do you define interfaces for NAT? 	Interface:<div><b>ip nat </b>{<b>inside </b>| <b>outside</b>}</div>
How do you configure static NAT to map an inside local address to an inside global address? 	Globally:<div><b>ip nat inside source static </b><i>inside-local inside-global</i></div>
How do you verify the current NAT table? 	<b>show ip nat translations</b>
How do you configure dynamic NAT to map a range of inside local addresses to a pool of inside global addresses? 	<b>access-list </b><i>number</i><b> permit </b><i>subnet wildcard</i><div><b>ip nat pool </b><i>inside-global start-ip end-ip </i><b>netmask </b><i>mask</i></div><div><b>ip nat inside source list </b><i>number </i><b>pool </b><i>inside-global</i></div>
"When viewing the output of <b>show ip nat translations</b>, what does the ""Misses:"" field indicate? "	Misses occur when NAT looks for a NAT table entry, doesn't find one, and needs to dynamically create the entry.
How do you remove entries from the current NAT table? 	<b>clear ip nat translations </b><i>entry-or-*</i>
How do you configure PAT using a range of IP addresses as inside local addresses, and the IP address of a specific interface as the inside global address? 	<b>access-list </b><i>number </i><b>permit </b><i>subnet wildcard</i><div><b>ip nat inside source list </b><i>number </i><b>interface </b><i>interface </i><b>overload</b></div>
How do you configure PAT using a range of IP addresses as inside local addresses, and a pool of addresses as inside global addresses? 	<b></b><b>access-list&nbsp;</b><i>number</i><b>&nbsp;permit&nbsp;</b><i>subnet wildcard</i><div><b>ip nat pool&nbsp;</b><i>inside-global start-ip end-ip&nbsp;</i><b>netmask&nbsp;</b><i>mask</i></div><div><b>ip nat inside source list&nbsp;</b><i>number&nbsp;</i><b>pool&nbsp;</b><i>inside-global </i><b>overload</b></div>
For IPv6, what is the difference between stateful and stateless DHCP? 	-Stateful is similar to how DHCP operates for IPv4<div>-Stateless uses DHCP to provide various DHCP options (such as TFTP server), but uses SLAAC for addressing.</div>
How do you view NAT counters and basic configuration information? 	<b>show ip nat statistics</b>
What is the IP protocol number for ICMP? 	1
What is the IP protocol number for TCP? 	6
What is the IP protocol number for UDP? 	17
What are the 13 fields in the IPv4 header? 	<div>Very Heavy Dudes Prefer Fat Fried Food To Pretty Healthy Salad Dish Options</div><div><br /></div>Version<div>Header Length</div><div>DS Field</div><div>Packet Length</div><div>Fragment ID</div><div>Fragment Flag</div><div>Fragment Offset</div><div>TTL</div><div>Protocol</div><div>Header Checksum</div><div>Source IP Address</div><div>Destination IP Address</div><div>Options</div>
What are the fields in the IPv6 header? 	Very Tall Fellows Place Nine Hammers Softly Down<br /><div><br /></div><div>Version</div><div>Traffic Class</div><div>Flow Label</div><div>Payload Length</div><div>Next Header</div><div>Hop Limit</div><div>Source IPv6 Address</div><div>Destination IPv6 Address</div>
What is the range of values for the IPv4 header Header Length field? 	The Header Length field is 4 bits representing the number of 32-bit words. The minimum value is 5 (20 bytes) and the maximum is 15 (60 bytes) since it is a 4-bit field.
What are the values of the fragment flags in the IPv4 header? 	Bit 0: Reserved, must be 0<div>Bit 1: Don't Fragment (DF)</div><div>Bit 2: More Fragments (MF)</div><div><br /></div><div>The DF bit is commonly used for Path MTU Discovery</div><div>Fragmented packets have the MF bit set except for the final fragment</div>
What is the EtherType of ARP? 	0x0806
Where are static ARP entries stored? 	Both static and dynamic entries are stored in the local ARP cache.
How does the ARP process work? 	Source knows Destination IP, but needs MAC. Is the IP on the same subnet?<div><br></div><div>-Source checks ARP cache first</div><div>-If no entry, Source broadcasts ARP Request for destination MAC if IP is on the same subnet, or MAC of default gateway</div><div>-Destination (or default gateway) adds Source's MAC to its ARP cache, and sends unicast ARP Reply to Source</div><div>-Source updates its ARP cache</div><div><br></div><div>-Devices that heard the ARP Request broadcast may update their own caches with the Source's MAC/IP so they do not have to send their own ARP Request later.</div><div>-If the Destination IP must pass through the default gateway, the DG begins its own ARP process, if necessary.</div>
How does Proxy ARP work? 	A router can use Proxy ARP when the Source needs to reach a Destination that is not on the local network segment, but can be reached through the router.<div><br /></div><div>For example, if Device A is in the 10.1.0.0/16 network, and Device B is in the 10.1.100.0/24 network, and both segments are connected to different interfaces on the same router, Device A believes it is on the same network as Device B. Device A sends an ARP Request for Device B, and the router replies back to A on behalf of B.</div>
What is the general process of a DHCP client receiving an appropriate IP address from a DHCP server on another subnet? 	-Client broadcasts DHCPDISCOVER request<div>-Router forwards request to DHCP server IP address configured on the receiving interface with <b>ip helper-address </b><i>ip </i>and sets its own interface IP address in the giaddr (gateway IP address) field</div><div>-DHCP server uses giaddr field to determine appropriate IP address to offer, and to which IP address to send the DHCPOFFER to</div><div>-Router receives DHCPOFFER message from server and broadcasts it to the client</div><div>-Client broadcasts DHCPREQUEST, router unicast forwards it to the DHCP server</div><div>-Server unicasts DHCPACK to router, router forwards to client</div>
How do you prevent the IOS DHCP server from handing out specific addresses? 	Globally:<div><b>ip dhcp excluded-address </b><i>ip</i></div>
How do you configure a basic DHCP server on IOS? 	<b>ip dhcp excluded-address </b><i>start-ip end-ip</i><div><i><br /></i></div><div><b>ip dhcp pool </b><i>name</i></div><div>&nbsp; <b>network </b><i>network mask</i></div><div>&nbsp; <b>dns-server </b><i>ip</i></div><div>&nbsp; <b>default-router </b><i>ip</i></div>
What are the default HSRP Hello and Dead intervals? 	3s Hello<div>10s Dead</div>
What is the HSRP priority range, and default value? 	1 - 255<div>100</div>
HSRP preemption is ___ by default. 	Disabled
How many HSRP groups can be configured per-interface? 	255
What is the HSRP vMAC? 	0000.0C07.ACxx where xx is the HSRP group in hexadecimal
True or False: The HSRP VIP does not have to be in the same subnet as the router interface. 	False
True or False: The HSRP VIP must be different from any of the routers' individual interface IP addresses. 	True
What types of authentication does HSRP support? 	Cleartext<div>MD5 via key-chain</div>
How do you configure HSRP to automatically decrease its priority based on the state of a tracked object? 	Interface:<div><b>standby </b><i>group </i><b>track </b><i>number </i><b>decrement </b><i>number</i></div>
How do you view the HSRP state, VIP, vMAC, and timers for a particular interface? 	<b>show standby </b><i>interface</i>
How does MHSRP work? 	MHRSP works by creating two or more HSRP groups within the same IP subnet, and assigning groups of clients to different VIPs with the intention of multiple routers serving as the default gateway for different groups of clients, but still allowing for failover.
What is the vMAC used by VRRP? 	0000.5E00.01xx where XX is the group number in hexadecimal.
VRRP preemption is ___ by default. 	Enabled
HSRP uses the term Active router. What is the VRRP equivalent? 	Master
What is the vMAC used by GLBP? 	0007.B40X.xxyy where Xxx is the 10-bit GLBP group number, and yy is the AVF number.
How does GLBP work, at a high level? 	The Active Virtual Gateway (AVG) assigns a vMAC for up to four Active Virtual Forwarders (AVFs). When a client ARPs for the VIP of the default gateway, the AVG hands out a different AVF vMAC for each request.
How many GLBP groups can be configured on an interface? 	1024
How do you configure a router to advertise itself as an NTP server? 	Interface:<div><b>ntp broadcast</b></div>
How do you configure MD5-based authentication for NTP? 	Globally:<div><b>ntp authentication-key </b><i>number </i><b>md5 </b><i>password</i></div><div><b>ntp authenticate</b></div><div><b>ntp trusted-key </b><i>number</i></div>
How do you configure the NTP server stratum level? 	Globally:<div><b>ntp master </b><i>level</i></div>
How do you display the NTP servers in use by the device? 	<b>show ntp associations</b>
How do you configure a device to be an NTP client? 	Globally:<div><b>ntp server </b><i>ip</i></div>
How do you configure NTP symmetric active mode? 	Globally:<div><b>ntp peer </b><i>ip</i></div>
With SNMP, what is the device being managed referred to as? 	The SNMP Agent
What is the SNMP Manager? 	The management software polling the SNMP agent on the device.
What are the four major functional areas to support the core function of allowing SNMP mangers to manage SNMP agents? 	-Data definition<div>-MIBs</div><div>-Protocols</div><div>-Security/Administration</div>
The SNMP data definition refers to syntax conventions for how to define the data to an agent or manager. What are these specifications referred to as? 	Structure of Management Information (SMI)
SNMP MIB definitions conform to the appropriate ___ version. 	SMI
Which ports are used by SNMP? 	UDP 161<div>UDP 162 for traps</div>
"What does the ""c"" refer to for SNMP v2c? "	SNMP v2c is a pseudo-release (RFC 1905) that allowed SNMP v1-style communities with SNMP v2, but is otherwise equivalent to SNMP v2.
What does SNMP refer to the cleartext passwords as? 	community strings
What is the purpose of the SNMP Response message? 	Both to supply SNMP information and acknowledge receipt of other SNMP messages.
What are the three SNMP messages used to request information from an SNMP Agent? 	Get<div>GetNext</div><div>GetBulk</div>
Which SNMP messages are typically sent by an SNMP Agent? 	Response<div>Trap</div>
True or False: The SNMP manager produces a Response message when receiving a Trap message from an SNMP agent. 	False, Traps are unsolicited and unacknowledged.
What is the difference between the SNMP Get, GetNext, and GetBulk messages? 	Get is a request for a single variable's value.<div><br /></div><div>GetNext is a request for the next single MIB leaf variable in the MIB tree.</div><div><br /></div><div>GetBulk is a request for multiple consecutive MIB variables with one request, which is useful for getting complex structures such as an IP routing table.</div>
True or False: An SNMP Agent replies to an SNMP Set message from an SNMP Manager with an SNMP Response message. 	True
What is the purpose of the SNMP Trap message? 	To allow SNMP Agents to send unsolicited information to SNMP Managers.&nbsp;
What is the SNMP Inform message used for? 	The SNMP Inform message is used between SNMP managers to allow MIB data to be exchanged.
What are the two new message types introduced in SNMP v2? 	GetBulk<div>Inform</div>
What is the name of the process of viewing large portions of an SNMP MIB from an SNMP Agent? 	MIB walk
How can you configure IOS to allow SNMP access from only specific IP addresses? 	Define an ACL and reference it with the SNMP configuration.<div><br /></div><div>Example:</div><div><b>access-list 1 permit 10.1.1.0 0.0.0.255</b></div><div><b>snmp-server community </b><i>community </i><b>RO 1</b></div>
How do you configure an IOS device to send specific SNMP traps? 	Globally:<div><b>snmp-server enable traps </b><i>trap-type</i></div>
How do you specify which SNMP Manager for IOS to send SNMP traps to? 	Globally:<div><b>snmp-server host </b><i>ip community</i></div>
True or False: Cisco devices do not log events to NVRAM by default. 	True, but can be configured to do so with <b>logging buffered</b>
What is the default Syslog port? 	UDP 514
What is the general purpose of Syslog? 	To provide real-time event notification by sending messages that enter the event log to a specified Syslog server.
By default, what events are sent to a configured Syslog server from IOS? 	All events that enter the event log are sent by default.
How do you enable an IOS device to send events to a Syslog server? 	Globally:<div><b>logging host </b><i>syslog-server</i></div>
How do you configure the severity level of Syslog messages to be sent to the Syslog server? 	Globally:<div><b>logging trap </b><i>level</i></div>
What are the eight Syslog severity levels? 	0 emergency<div>1 alert</div><div>2 critical</div><div>3 error</div><div>4 warning</div><div>5 notification</div><div>6 informational</div><div>7 debugging</div>
What is the default Syslog logging level? 	0 - 6<div><br /></div><div>7 debugging is excluded by default.</div>
How do you edit a configured IP SLA monitor type? 	IP SLA monitor types cannot be edited after creation, and must be deleted and re-created, along with any associated schedules.
How do you configure an IP SLA responder? 	Globally:<div><b>ip sla responder</b></div>
How do you configure MD5 authentication for IP SLA? 	Globally:<div><b>ip sla key-chain </b><i>keychain</i></div>
How do you view the results of IP SLA? 	<b>show ip sla statistics</b>
What are the four components of NetFlow? 	Records<div>Flow monitors</div><div>Flow exporters</div><div>Flow samplers</div>
What are NetFlow records? 	A set of predefined and user-defined key fields (such as source/destination IP and port) for network monitoring.
What are NetFlow flow monitors? 	Flow monitors collect information about flows and are applied to an interface and include records, a cache, and optionally a flow exporter.
What are NetFlow exporters? 	NetFlow exporters export the cached flow information to outside systems, which is typically a server running a NetFlow collector.
What is a NetFlow flow sampler? 	Flow samplers allow specifying the sample size of traffic in order to reduce the load on the NetFlow-enabled device.
What is the configurable range of NetFlow flow sampling? 	1/2 - 1/32768
How do you define a destination NetFlow collector? 	Globally:<div><b>flow exporter </b><i>name</i></div><div>&nbsp; <b>destination </b><i>ip</i></div><div>&nbsp; <b>transport udp </b><i>port</i></div>
How do you define a NetFlow flow monitor? 	Globally:<div><b>flow monitor </b><i>name</i></div><div>&nbsp; <i>options</i></div>
How do you attach a NetFlow flow monitor to an interface? 	Interface:<div><b>ip flow monitor </b><i>name direction</i></div>
What are the two major components of Embedded Event Manager? 	Event detectors<div>Actions</div>
How do you configure IOS to be an FTP server? 	IOS does not support being configured as an FTP server. You can configure IOS to be a TFTP server, and you can use IOS as an FTP client.
How do you configure IOS to send an exception dump to an FTP server in the event of a crash/exception? 	Globally:<div><b>ip ftp username </b><i>username</i></div><div><b>ip ftp password </b><i>password</i></div><div><i><br /></i></div><div><b>exception protocol ftp</b></div><div><b>exception region-size 65536</b></div><div><b>exception dump </b><i>ftp-server-ip</i></div>
How do you configure IOS to make a file available via TFTP with an alternate filename, and only to specific clients? 	Globally:<div><b>tftp-server </b><i>filename </i><b>alias </b><i>alias-name acl</i></div><div><i><br /></i></div><div>Example:</div><div><b>tftp-server flash:file1.bin alias file2.bin 10</b></div><div>where 10 is the referenced ACL</div>
What is a requirement before using SCP on IOS? 	AAA must be enabled first via <b>aaa new-model </b>and <b>aaa authorization exec</b>
How do you enable the SCP server on IOS? 	AAA must be enabled first.<div><br /></div><div>Globally:</div><div><b>ip scp server enable</b></div>
How do you enable HTTPS access to an IOS device? 	Globally:<div><b>ip http secure-server</b></div>
How can you restrict HTTP/S access to an IOS device by ACL? 	Globally:<div><b>ip http access-class </b><i>acl</i></div>
How do you change the port on which HTTP/S access is available for IOS? 	Globally:<div><b>ip http port </b><i>port</i></div>
How do you configure a simple username/password for HTTP/S access on IOS? 	Globally:<div><b>ip http client username </b><i>name</i></div><div><b>ip http client password </b><i>password</i></div>
How do you configure the mode of authentication for HTTP/S access on IOS? 	Globally:<div><b>ip http authentication </b><i>mode</i></div><div><i><br /></i></div><div>Modes include aaa, local, enable, tacacs</div>
What must be configured on a VTY line to allow for Telnet access? 	The <b>login </b>command must be configured, otherwise access is refused.
How do you apply an ACL to a VTY line? 	<b>line </b>interface:<div><b>access-class </b><i>acl </i><b>in</b></div>
What are the four steps required to enable SSH access on IOS? 	<b>hostname </b><i>hostname</i><div><b>ip domain-name </b><i>domain</i></div><div><b>crypto key gen rsa</b></div><div>VTY lines: <b>transport input ssh</b></div>
How do you verify IOS DHCP server leases? 	<b>show ip dhcp binding</b>
How do you enter EEM applet configuration mode? 	<b>event manager applet </b><i>name</i>
How do you configure an EEM applet to match a CLI command string? 	<b>event cli pattern </b><i>regex</i>
What is the general IP forwarding process for a router? 	-Router receives frame and checks FCS, discarding if errors<div>-Router decapsulates IP packet from Layer 2 frame, and verifies header checksum if IPv4</div><div>-Router checks if it is the destination. If not, the IP Protocol field is used to determine how to handle the upper-layer protocol</div><div>-If TTL &gt; 1, check IP routing table for most specific route</div><div>-Update TTL, recalculate IPv4 header checksum, and encapsulate packet in appropriate Layer 2 frame for the interface toward the next-hop</div>
"What is referenced by the phrase ""route once, forward many""? "	fast-switching path
What is the router Layer 2 frame rewrite process? 	A packet arrives at a router, and the router rewrites the Layer 2 frame by encapsulating the packet appropriately, and sends the packet toward the next hop.
During the IP forwarding process, what is common about all frames sent out the same egress interface toward the next-hop? 	All destinations reachable through a particular next-hop use the same Layer 2 rewrite information.
What is the relationship between the FIB and the CEF adjacency table? 	The FIB stores destination prefixes, the adjacency table stores Layer 2 rewrite information, and entries in the FIB point to appropriate entries in the adjacency table.
How do you enable CEF for IPv6? 	Globally:<div><b>ipv6 cef</b></div>
How do you view the FIB? 	<b>show ip cef</b>
How do you view the CEF neighbors? 	<b>show adjacency</b>
How do you view the CEF Layer 2 rewrite information? 	<b>show adjacency </b><i>interface </i><b>detail</b><div><b><br /></b></div><div>An Ethernet interface, for example, will have a long string made up of the destination MAC, source MAC, EtherType, and VLAN tag (if present).</div>
True or False: IPv6 CEF requires IPv4 CEF to be enabled. 	True, you can enable IPv4 CEF but not IPv6 CEF, but not vice-versa.
How do you disable CEF on a particular interface? 	Interface:<div><b>no ip route-cache cef</b></div>
What are the two high-level components of CEF? 	FIB<div>Adjacency table</div>
What load-sharing methods are available with CEF? 	Per-packet<div>Per-destination</div>
How do you change the CEF load-sharing method? 	Interface:<div><b>ip load-share </b>{<b>per-destination </b>| <b>per-packet</b>}</div><div><br /></div><div>This command is only available for interfaces that support it. Per-destination is the default.</div>
How does CEF implement per-destination load sharing? 	A loadshare table containing 16 pointers is placed between the FIB and the adjacency table. The loadshare table entries are populated so that the counts of loadshare pointers to particular adjacency entries are proportional to the costs of parallel routes toward the same destination.<div><br /></div><div>For example, two equal-cost paths each have 8 entries, three equal-cost paths each use five entries.</div>
What is CEF polarization? 	When multiple routers in the path toward a destination all use the same CEF load-sharing method, they will all calculate the same hash and therefore not use all available links.<div><br /></div><div>Newer versions of IOS use a random 32-bit number called the Universal ID as a seed to the hashing function to avoid CEF polarization.</div>
How is CEF polarization avoided on newer versions of IOS? 	The CEF load sharing hashing function is seeded with a random 32-bit Universal ID. Each router in the path will have a different Universal ID, so each router will calculate a different hash result for each particular packet flow.
What are the four CEF load-sharing algorithms? 	Original<div>Universal</div><div>Tunnel</div><div>L4 Port</div>
How do you change the CEF load-sharing algorithm? 	Globally:<div><b>ip cef load-sharing algorithm </b><i>algorithm</i></div>
How do you view the current CEF load-sharing algorithm? 	<b>show cef state</b>
How do you adjust the CEF load-sharing algorithm on the Catalyst 6500 and related platforms? 	Globally:<div><b>mls ip cef load-sharing </b><i>algorithm</i></div>
"What would cause an SVI to be in the ""Down / line protocol down"" state? "	The corresponding VLAN does not exist, or is not active (e.g. <b>state suspend </b>or <b>shutdown </b>on the VLAN itself)
"What would cause an SVI to be in the ""Up / line protocol down"" state? "	The corresponding VLAN exists, but is not allowed and in an STP forwarding state on any Layer 2 switch port (access or trunk).
True or False: Most Catalyst platforms cannot configure a routed port with subinterfaces. 	True
What is a caveat of using VTPv3 with regard to internal usage VLANs? 	If any switches in the VTPv3 domain are using a particular VLAN internally (VLAN 1006 for example), when that VLAN is created on the VTPv3 Primary Server, the VLAN will be created on all switches in the VTPv3 domain that are not currently using that particular VLAN. However, for any switches that are using it internally, the conflict is logged locally only, and there may be connectivity issues across the VTPv3 domain.
How is a routed port handled internally on a Layer 3 switch? 	A routed port is a single port associated with a dedicated internal usage VLAN with its Layer 2 control plane protocols deactivated (such as STP and MAC learning).
How do you convert a switch port to routed? 	Interface:<div><b>no switchport</b></div>
What is the purpose of Policy-Based Routing? 	To make routing decisions based on information besides the destination IP address.
How do you verify a switch's current SDM template? 	<b>show sdm prefer</b>
How do you change the SDM template? 	Globally:<div><b>sdm prefer </b><i>template</i></div><div><i><br /></i></div><div>A reload is required for the setting to take effect.</div>
On a Catalyst switch, what can cause certain commands (such as those related to routing and PBR) to not appear in the CLI, even though the switch supports the features? 	The SDM template might need to be changed with the <b>sdm prefer </b>command.
How do you enable PBR? 	Interface:<div><b>ip policy route-map </b><i>route-map</i></div>
For PBR, what are the two types of supported <b>match </b>statements? 	<b>match ip address </b>to reference an ACL<div><b>match length </b><i>min-bytes max-bytes&nbsp;</i>to specify matched packet length in bytes</div>
For PBR, what is the difference between <b>set ip next-hop </b>and <b>set ip default next-hop</b>? 	The <b>default </b>keyword changes the logic so that PBR first attempts to forward based on the normal routing table, and if no entry exists, the packet is handled by PBR.
With PBR, when is it appropriate to use the <b>set interface </b>command? 	Only when the outgoing interface is a point-to-point link.
True or False: PBR route-maps can contain multiple <b>set </b>commands within a single clause. 	True. For example, you can <b>set </b>both the next-hop and QoS treatment simultaneously.
If a PBR route-map clause has multiple <b>set </b>statements specifying where the packet is to be forwarded, in what order are the statements evaluated? 	<b>set ip next-hop</b><div><b>set interface</b></div><div><b>set ip default next-hop</b></div><div><b>set default interface</b></div>
When migrating routing protocols, if the current IGP is a link-state protocol, what is a recommended practice for migration? 	Migrate per-area, with the backbone area the final area to migrate.
When migrating to another routing protocol, what should the AD value be set to? 	The AD should be set higher than the current routing protocol until after migration is complete.
During routing protocol migration, what must be configured on each router if the new IGP is RIP or EIGRP? 	Each router must be configured with redistribution from the current IGP into the new IGP.
During routing protocol migration, the new protocol's database should be verified before transitioning. Why is this potentially an issue with RIP and EIGRP? 	Distance-Vector protocols advertise a learned route only if it is also installed in the routing table by the same protocol, based on the logic that the router should not advertise a route that it is not using itself. As a result, RIP and EIGRP databases may be incomplete until after the transition.
During routing protocol migration, what is the general process of deactivating the old protocol? 	The old routing protocol should be disabled or removed one router at a time among contiguous sets of routers. During deactivation, there should never be more than two contiguous regions (migrated and unmigrated).
During a routing protocol migration, what is the consequence of changing the EIGRP AD? 	EIGRP adjancies will be dropped and re-established, causing a transient disruption, and therefore should be performed during a maintenance window.
When migrating from OSPF or IS-IS to either RIP or EIGRP, what must be performed on every router during the migration? 	Each router in the topology must redistribute from OSPF/IS-IS into RIP/EIGRP. When OSPF/IS-IS is deactivated on the router, the RIP/EIGRP routes take over. This assumes that the RIP/EIGRP AD was modified to be higher than OSPF/IS-IS during the migration.
Why do technologies like MPLS-TE and MPLS-FRR depend on a link-state routing protocol, as opposed to distance-vector? 	Since link-state protocols contain information about all routers and links within an area, this detailed information is critical for applications like MPLS-TE and MPLS-FRR, which is not possible with traditional distance-vector protocols who only know what their direct neighbors told them.
What is the primary reason for multi-area topologies with link-state routing protocols in modern networks? 	Route summarization, filtering, offset lists, and failure domain containment can only be performed on area boundaries with link-state routing protocols. Areas were originally used to separate complexity due to low router resources, but this is no longer true. Areas are now primarily used to enforce policies.
What does RIPv2 use for transport? 	UDP 520
What is RIPv2's infinite metric? 	16
To where are RIPv2 updates sent by default? 	224.0.0.9
How frequently are RIPv2 updates sent? 	30 seconds
What forms of authentication does RIPv2 support? 	Cleartext<div>MD5</div>
How do you configure RIPv2 to send broadcast updates instead of multicast? 	Per-interface:<div><b>ip rip v2-broadcast</b></div>
What are the two types of RIPv2 messages? 	Request<div>Reponse</div>
How many routing entries can be placed into a single RIPv2 message? 	25
What is a RIPv2 Request message used for? 	To ask a neighbor to send a partial or full RIP update immediately instead of waiting for the Update timer to expire.
How is a full RIPv2 update requested? 	A full RIPv2 update is requested by a Request message containing exactly one routing entry with the AF_ID set to 0 and metric set to 16.
How is a partial RIPv2 update requested? 	A partial RIPv2 update is requested by a Request message listing one or more particular networks.
When do Cisco routers send RIPv2 Request messages? 	Full Request is sent when the RIP process is started, a RIP-interface comes up, or when <b>clear ip route * </b>is issued.
RIPv2 increments the metric when ___ updates. RIPng increments the metric when ___ updates. 	Sending<div>Receiving</div>
How many RIPv2 ECMP routes can be installed by default? 	4
How do you configure the number of ECMP routes that RIPv2 can install in the routing table? 	<b>router rip</b><div><b>&nbsp; maxium-paths </b><i>number</i></div><div><i><br /></i></div><div>Default 4</div>
What is RIPv2 route poisoning? 	When a route fails, a RIPv2 router can advertise the route with an infinite metric to more rapidly remove it from routing tables.
What is a RIPv2 triggered update? 	The immediate sending of a new update when routing information changes, instead of waiting for the normal Update timer to expire. Only the changed network is sent in the triggered update.
What are the four RIPv2 timers, and what are their default values? 	Update: 30 seconds<div>Invalid After: 180 seconds</div><div>Holddown: 180 seconds</div><div>Flushed After: 240 seconds</div>
What is the RIPv2 Invalid After timer? 	The Invalid After timer defaults to 180-seconds and is reset after an update about a route is received from its next-hop. If the updates stop being received within 180 seconds, the route is declared invalid, and the 180-second Holddown timer for the particular route begins.
What is the RIPv2 Holddown timer? 	After a route has been declared Invalid (the 180-second Invalid After timer has expired), the router starts advertising the route as unreachable, does not accept any updated information, and does not modify the routing table entry for that route until the Holddown timer expires (180 seconds) for that particular route.
What is the RIPv2 Flushed After timer? 	A 240-second per-route timer that is reset and begins after an update about a route has been received from its next hop. If updates stop being received and the Flushed After timer expires, the router removes the route from the routing table completely.
How do you verify the state of RIPv2 split horizon? 	<b>show ip interface </b><i>interface</i>
True or False: Cisco's implementation of RIPv2 does not use poisoned reverse. 	True
How do you verify the RIPv2 RIB? 	<b>show ip rip database</b>
When a RIPv2 route is removed from the routing table, how long does it remain in the RIB, and why? 	When a RIPv2 route is removed from the routing table, it remains in the RIB for Flushed After - Invalid After seconds. During this time, the route is repeatedly advertised as unreachable. This is done because RIPv2 is UDP-based with no acknowledgements.
What is another term for RIPv2 Triggered Updates? 	Flash updates
What is the effective RIPv2 holddown period? 	60 seconds<div><br /></div><div>While the holddown timer is 180 seconds, it is preceded by the Invalid After timer. The Flushed After timer is 240 seconds and begins after the last route update. The Flushed After and Invalid After times are reset together, and increment together. Flushed After - Invalid After = 60 seconds of effective holddown.</div>
When is the RIPv2 Flushed After timer taken into account? 	The Flushed After timer is reset with each route update. It counts down simultaneously with the Invalid After timer. However, the Flushed After timer is not taken into account until after the Invalid After timer expires. This means if the Flushed After timer is less than the Invalid After timer, the route will not be removed from the routing table until the Invalid After timer expires first.
True or False: If the next-hop RIPv2 router for a destination network suddenly advertises a higher distance than previously, the advertisement is accepted immediately. 	True, only a subsequent arrival of an update from a different neighbor with a lower total metric would cause the router to change the next hop. The logic is that if the next-hop router is suddenly more distant to the destination network than before, so must all other routers that traverse the next-hop.
What is the main purpose of the RIPv2 Holddown timer? 	To delay processing updates about a network whose reachability has become questionable because any received updates might not have accurate information. By delaying processing of updates for a period of time, there is a better chance of accurate information being propagated when the Holddown timer expires.
What happens when the RIPv2 Invalid After timer expires? 	"The router declares the network to be invalid (e.g. the route is ""possibly down""), and starts the Holddown timer while advertising the network with an infinite metric (route poisoning) to force its neighbors to find an alternate route if possible. After 60 seconds, the Flushed After timer expires, and the route is removed from the routing table."
When the RIPv2 Invalid After timer expires, the Holddown timer begins, where the route (including the next-hop) is kept in the routing table, but advertised with an infinite metric, and no updates to the route are accepted from any neighbors. Why are these actions performed? 	RIPv2 takes the approach that it is better the temporarily blackhole traffic than to cause a routing loop by prematurely using a different neighbor that claims to have a route toward the failed network, because that neighbor might not yet have accurate information.
What is the default version of RIP used on Cisco IOS? 	Send: v1<div>Receive: v1 and v2</div>
What is the RIPv2 triggered extensions? 	When triggered extensions are enabled, RIPv2 sends full updates only once, and then is silent, to support on-demand circuits. This feature is enabled on the interface with <b>ip rip triggered</b>.
How do you configure RIP timers? 	Under the RIP process:<div><b>timers basic </b><i>update invalid holddown flush</i></div>
What is a potential consequence of lowering RIP timers? 	Smaller values increase the chance of transient routing loops being formed during convergence.
What does the RIP <b>version 2 </b>command do? 	The <b>version 2 </b>RIP command causes the router to send and receive only RIPv2 updates, and to ignore RIPv1 updates.
What is the default behavior of RIPv2 on Cisco IOS, classful or classless? 	classful
With the default configuration of RIP, what happens if you enter a subnetwork with the <b>network </b>command? 	The subnet is converted automatically to its classful network, and all interfaces within that classful network are enabled for RIP.<div><br /></div><div>For example, if you enter <b>network 10.10.10.0</b>&nbsp;the CLI automatically converts it to <b>10.0.0.0 </b>and all interfaces with 10 in the first octet of the IP address are enabled for RIP.</div>
How do you enable RIPv2, but disable sending updates on an interface? 	RIP process:<div><b>passive-interface </b><i>interface</i></div>
How do you enable RIPv2 to send updates out of an interface, but disable receiving updates? 	Filter all incoming routes with a <b>distribute-list </b>or filter incoming RIPv2 packets using a per-interface ACL.
How do you prevent a RIPv2 router from advertising a connected subnet? 	Filter the outbound advertisements of the subnet on the other interfaces using distribute lists.&nbsp;
How do you configure RIPv2 to use unicast updates? 	<b>router rip</b><div><b>&nbsp; neighbor </b><i>ip</i></div>
How does the defaut autosummarization work with RIPv2? 	Automatic summarization applies whenever a router intends to advertise a subnetwork of a particular classful network out an interface that is itself in a different classful network.<div><br /></div><div>For example, if one interface has the IP address 10.1.1.1/24, and another interface has the IP address 192.168.1.1/24, the classful network 10.0.0.0/8 is advertised out of the 192.168.1.1 interface, not 10.1.1.0/24.</div>
What is a requirement for RIPv2 when using discontiguous networks? 	Autosummarization must be disabled with <b>no auto-summary </b>under the RIP process.<div><br /></div><div>10.1.0.0/16 and 10.2.0.0/16 are considered contiguous because they are in the same classful network 10.0.0.0/8. 10.1.0.0/16 and 192.168.10.0/24 are considered discontiguous because they are in different classful networks.</div>
True or False: RIPv2 supports multiple authentication keys. 	True, multiple keys are supported through key-chains.
How are key chains with multiple valid keys used for authentication? 	The valid key with the lowest sequence number is used, except for OSPF which always uses the key last added.
How do you configure RIPv2 authentication? 	Authentication is based on key-chains, whether encrypted or not. Authentication is configured per-interface:<div><br /></div><div><b>ip rip authentication key-chain </b><i>keychain</i></div><div><b>ip rip authentication mode </b>{<b>text </b>| <b>md5</b>}</div><div><br /></div><div><b>text </b>is the default.</div>
How does RIPv2 authentication affect RIP update messages? 	RIPv2 updates can carry a maximum of 25 prefixes, unless authentication is enabled, in which case only 24 can be carried. The first route entry in each RIPv2 message carries 20 bytes of authentication data. When cryptographic authentication is used, the remaining authentication data is placed after the 25th entry.
What is the RIPv2 update next-hop field set to by default, and when would this value be changed? 	The default next-hop field value is set to 0.0.0.0, which indicates that the next-hop is the source of the update. Cisco IOS does not allow you to directly change this value. The only time the value is changed to a non-zero address is when RIPv2 is run over NBMA interfaces to facilitate direct spoke-to-spoke routing.
How do you configure a RIPv2 distribute list? 	Under the RIP process:<div><b>distribute-list </b>{<i>acl</i>&nbsp;| <b>prefix </b><i>prefix-list</i>}<i>&nbsp;</i>{<b>in </b>| <b>out</b>} [<i>interface</i>]</div><div><br /></div><div>ACL <b>permit </b>statements allow the routes through, and <b>deny </b>statements filter those particular routes.</div>
What transport is used for RIPng? 	UDP 521
To which address are RIPng updates sent to? 	FF02::9
How many prefixes can the RIPng update message contain? 	Whereas RIP is limited to 25 entries, RIPng updates can support as many updates as will fit within the link MTU.
How is authentication handled with RIPng on Cisco IOS? 	RFC-based RIPng supports authentication via IPsec, similar to OSPFv3, however Cisco does not implement this.
How does Cisco IOS handle split-horizon with RIPng? 	Split horizon can be enabled/disabled per-process only, not per-interface.
How does RIPng handle passive interfaces in Cisco IOS? 	Cisco RIPng does not support passive interfaces.
True or False: Static neighbors cannot be configured with RIPng on Cisco IOS. 	True
True or False: RIPng supports per-process offset lists in Cisco IOS. 	False, only per-interface
How many RIPng processes are supported in Cisco IOS? 	Four
What is the purpose of the interface metric-offset in RIPng? 	Interfaces can be configured with a metric-offset value that is added to the metric in all received advertisements over that interface, which effectively allows RIPng to operate with link costs instead of hop counts.
How does RIPng handle the origination of default routes in Cisco IOS? 	The default route can be originated per-interface, including an option of suppressing all other updates over that interface.<div><br /></div><div>Interface:</div><div><b>ipv6 rip </b><i>process </i><b>default-information only</b></div>
How do you enable RIPng on an interface? 	<b>ipv6 rip </b><i>process </i><b>enable</b>
How do you configure the RIPng metric-offset? 	Interface:<div><b>ipv6 rip </b><i>process </i><b>metric-offset </b><i>metric</i></div>
How do you verify RIPng? 	<b>show ipv6 rip</b>
How do you enable RIPng poison reverse? 	<b>ipv6 router rip </b><i>process</i><div>&nbsp; <b>poison-reverse</b></div>
How do you create a manual summary in RIPv2? 	Interface:<div><b>ip summary-address rip </b><i>address netmask</i></div>
How do you display the details of the RIP process? 	<b>debug ip rip</b>
While multiple RIPng processes can run simultaneously, they cannot operate on the same UDP port simultaneously. How do you configure this? 	<b>ipv6 router rip </b><i>process</i><div>&nbsp; <b>port </b><i>udp-port </i><b>multicast-group </b><i>group-address</i></div>
How do you configure a manual summary for RIPng? 	Interface:<div><b>ipv6 rip </b><i>process </i><b>summary-address </b><i>ipv6-prefix/length</i></div>
What does EIGRP use for transport? 	IP Protocol 88, Reliable Transport Protocol
Where are EIGRP Updates sent to? 	224.0.0.10 or FF02::A<div><br /></div><div>Retransmissions are unicast.</div>
What makes EIGRP's use of a Hello protocol superior to RIP? 	With RIP, building and maintaining adjacencies is based on sending the entire routing table with each Update. With EIGRP's use of a Hello protocol, neighborship is independent of routing information.
With EIGRP, the lack of Updates from a neighbor indicates what? 	Since EIGRP uses a Hello protocol to maintain neighbor adjacencies, a lack of updates indicates a stable network that is not changing, and is considered normal.
What is the EIGRP hop count range, and default setting? 	1 - 255<div>100</div>
How do you modify the EIGRP hop count setting? 	EIGRP process:<div><b>metric maximum-hops </b><i>hopcount</i></div>
What components can be used to calculate the EIGRP classic composite metric? 	Bandwidth, Delay, Reliability, Load<div><br /></div><div>MTU and hop count are metric components, but are not used in the calculation of the composite metric.</div>
When calculating the composite metric, EIGRP takes the ___ bandwidth along the route into account. 	Lowest
When calculating the composite metric, how does EIGRP account for a neighbor's advertising bandwidth versus the bandwidth of the interface toward the advertising neighbor? 	EIGRP uses the lower of the two values for the bandwidth component of the composite metric calculation. For example, the neighbor advertises a bandwidth of 10 Mbps, but the link toward that neighbor is 1.5 Mbps, the value of 1.5 Mbps is used in the local computation.
What is the range of the available bandwidth metric for EIGRP classic metric calculation? 	1 kbps - 10 Gbps
For the EIGRP bandwidth metric component calculation, what value is used if the <b>bandwidth </b>is not explicitly set on the interface? 	The bandwidth is assumed based on the interface, which may or may not reflect the actual bandwidth. For example, serial and tunnel interfaces typically have different default values that do not reflect the actual value.
What is the<b>&nbsp;</b>interface <b>delay </b>intended to represent? 	The estimated average serialization delay for the interface. The value is static, but represents an estimated average due to varying frame sizes.
What is the interface <b>delay </b>value measured in? 	Tens of microseconds. <b>delay 10 </b>means 100 microseconds.
How does EIGRP process delay as part of the composite metric? 	The total delay of the path to the destination is used for the metric component. The delay advertised by a neighbor is added to the delay of the interface toward the advertising neighbor.
What delay value is used by EIGRP using classic metrics to indicate infinite distance, and what is this value used for? 	16,777,215 tens of microseconds (24-bit value) indicates an infinite distance and is used to advertise an unreachable network, which is used with split horizon with poisoned reverse, route poisoning, and route withdrawal.
What does EIGRP use to indicate an unreachable route? 	Maximum delay value, 16,777,215 (24-bit value).
True or False: While EIGRP does not use the Reliability metric component by default to calculate the composite metric, EIGRP still sends a triggered update when an interface's reliability changes. 	False: A change in an interface's reliability does not trigger the sending of an EIGRP Update message. The reliability metric of a route is only a snapshot of its then-current reliability when the route was last advertised.
IGRP was a ___-driven protocol, whereas EIGRP is a ___-driven protocol. 	timer<div>event</div>
What is the range of values for the EIGRP classic Reliability metric? 	1 - 255, where 255 = 100% reliable.
How does EIGRP derive the classic Reliability metric? 	The minimum reliability of the path is used by comparing the reliability advertised by the neighbor and the reliability of the interface toward the neighbor and using the lower of the two values.
How does EIGRP derive the classic Load metric? 	While interfaces maintain separate Rx and Tx load counters, only the Tx counter is used for EIGRP calculations.&nbsp;<div><br /></div><div>Similar to Reliability, EIGRP uses the value of the maximum load value across the entire path, which is derived by comparing the advertised Tx load of the EIGRP Update with the Tx load of the interface toward the neighbor, and using the higher of the two values.</div>
What is the range of values for the EIGRP classic Load metric? 	1 - 255, 1 = 0% load
True or False: Link MTU is advertised in EIGRP Updates, but is not factored into the composite metric or used for tiebreakers. 	True, MTU is not factored in any way for the EIGRP best-path selection algorithm.
What is the purpose of the EIGRP hop count value? 	The hop count is not factored into the composite metric calculation and therefore does not impact the best-path selection. However, EIGRP can be configured to advertise routes over a configured threshold to be unreachable (default 100, range 1 - 255).
Why must the EIGRP K-values match across the entire EIGRP AS? 	Each router calculates the EIGRP composite metric independently using individual metric components. If routers used different K-values within the same AS, the calculated metrics will not be proportional to each other, and therefore lose meaning between each router.&nbsp;
What scaling factor does the EIGRP classic composite metric use for bandwidth and delay, and why? 	The scaling factor is 256, and is so because the metrics are 32-bit values, whereas the IGRP values were 24-bit.
How is the EIGRP composite metric calculated when the default K-values are used? 	(Minimum bandwidth + summed delay) * 256<div><br /></div><div>BW = 10,000,000 Kbps / minimum bandwidth along path in Kbps</div><div>Delay = Sum of all delays in 10s of µs</div>
What is the EIGRP classic metric limitation with regard to bandwidth? 	EIGRP classic metrics cannot distinguish between links that are faster than 10 Gbps.
What is the EIGRP classic metric limitation with regard to delay? 	EIGRP classic metrics cannot distinguish between interfaces over 1 Gbps with regard to delay, because the delay of a 1 Gbps is the lowest value of 1 &nbsp;(one 10's of microseconds = 10 µsec)
What is a negative consequence of the scaling factor in EIGRP classic metrics? 	<div>Loss of precision over time.</div><div><br /></div>Bandwidth and delay metric values are carried in EIGRP Updates in their scaled form, so each router must descale them, then re-scale them when computing the composite metric and advertising the values to neighbors. Because the calculations are performed via integer arithmetic, round-off errors introduce a gradual loss of resolution.<div><br /></div><div>EIGRP Wide Metrics distribute the values in their raw form to avoid the loss of precision.</div>
How can you determine if a router supports EIGRP wide metrics? 	<b>show eigrp plugins</b><div><b><br /></b></div><div>eigrp-release &gt;= 8.0 supports wide metrics</div><div><br /></div><div><b>show ip protocols </b>also reveals the K6 constant, which classic metrics do not support.</div>
How is the EIGRP wide metric Throughput represented? 	65536 * 10,000,000 / interface bandwidth in kbps<div><br /></div><div>The Throughput component tells how many times slower the interface is than a 655.36 Tbps link</div>
How is the EIGRP wide metric latency calculated? 	(65536 * interface delay in picoseconds) / 1,000,000
For EIGRP wide metrics, how is the interface delay (not the overall latency component metric) calculated for 1 Gbps and slower interfaces without <b>bandwidth </b>and <b>delay </b>commands issued? 	Default interface delay converted to picoseconds<div><br /></div><div>Example, 1 Gpbs link default delay is 10 µsec, so the converted value is 10,000,000</div>
For EIGRP wide metrics, how is the interface delay (not the overall latency component metric) calculated for interfaces faster than 1 Gbps without&nbsp;<b>bandwidth&nbsp;</b>and&nbsp;<b>delay&nbsp;</b>commands issued? 	10,000,000,000,000 / interface default bandwidth<div><br /></div><div>Example: 10 Gbps link</div><div><br /></div><div>10,000,000,000,000 / 10,000,000 kbps = 1,000,000 picosecond delay</div>
For EIGRP wide metrics, how is the interface delay (not the overall latency component metric) calculated for interfaces configured with&nbsp;<b>bandwidth&nbsp;</b>but not&nbsp;<b>delay</b>? 	Default interface delay converted to picoseconds
For EIGRP wide metrics, how is the interface delay (not the overall latency component metric) calculated for interfaces with <b>delay&nbsp;</b>configured? 	The specified <b>delay </b>value converted to picoseconds
How are the EIGRP Reliability, Load, MTU, and Hop Count values used for wide metrics? 	These values are identical, and used identically, to EIGRP classic metrics.
What are EIGRP wide metrics extended metrics? 	The extended metrics are considered a placeholder for potential future extensions to the composite metric calculation. Three metrics were originally defined: jitter, energy, quiescent energy, but are not supported for use.
How do you enable EIGRP wide metrics? 	Wide metrics are enabled automatically with EIGRP named mode, and their activation cannot be controlled.<div><br /></div><div>EIGRP routers running wide metrics automatically detect if the neighbor supports it, and adjusts accordingly if not.</div>
How do EIGRP routers using wide metrics deal with mixed neighbors (those supporting wide metrics, and those supporting only classic metrics) on a common link? 	The EIGRP routers supporting wide metrics will use both metric formats in their messages and each neighbor will process the metric format it supports.
How is the EIGRP wide metrics composite value scaled for the RIB? 	<div>The scale value is adjusted with the EIGRP command <b>metric rib-scale </b>with a range of 1 - 255, with a default of 128.</div>
EIGRP uses up to __ of a link's bandwidth by default. 	Up to 50% of the configured <b>bandwidth </b>value
What is the value of the EIGRP header Version field? 	Version = 2 and has not changed since EIGRP was introduced.
What six EIGRP Opcode values are used in the header? 	1 Update<div>3 Query</div><div>4 Reply</div><div>5 Hello/Ack</div><div>10 SIA Query</div><div>11 SIA Reply</div>
What four flags are used in the EIGRP/RTP header? 	0x1 Init (using during initial adjacency buildup)<div>0x2 Conditional Receive (used by RTP to control who can receive the packet)</div><div>0x4 Restart</div><div>0x8 End-of-Table (transmission of entire database is complete)</div>
How does EIGRP differentiate between a Hello and an ACK packet? 	An ACK packet has the ACK field set to the sequence number of the last packet received from the neighbor to which the ACK is being sent. ACKs are also always unicast, never multicast.<div><br /></div><div>A Hello packet has the ACK field set to 0.</div>
What is the Virtual Router ID field in the EIGRP/RTP header? 	0x1 = Unicast Address Family<div>0x2 = Multicast Address Family</div><div>0x8000 = Unicast Service Address Family (for Service Advertisement Framework)</div>
How is NLRI carried in EIGRP? 	Within TLVs in the EIGRP packets.
How many route entries are contained in EIGRP TLVs? 	Each internal and external route TLV contains a single route entry.
What are the seven EIGRP packets used when communicating with neighbors? 	Hello<div>Acknowledgement</div><div>Update</div><div>Query</div><div>Reply</div><div>SIA-Query</div><div>SIA-Reply</div>
How can you view statistics about EIGRP packets? 	<b>show ip eigrp traffic</b>
What three functions do EIGRP Hello packets serve? 	Identify neighbors<div>Verify neighbor compatibility</div><div>Neighbor keepalive</div>
What four items determine EIGRP neighbor compatibility? 	Same IP subnet<div>Same ASN</div><div>Same K-values</div><div>Same authentication</div><div><br /></div><div>The EIGRP router must also be using their primary IP addresses on the interface for the EIGRP neighbor relationship.</div>
What is the default EIGRP Hello interval? 	5 seconds<div>60 seconds on NBMA interfaces with 1544 kbps or less bandwidth</div>
True or False: EIGRP Hello packets are acknowledged. 	False
To which EIGRP packets are Acknowledgement packets sent in response to (e.g. delivered reliably)? 	Update<div>Query</div><div>Reply</div><div>SIA-Query</div><div>SIA-Reply</div>
How are EIGRP Acknowledgement packets delivered? 	EIGRP ACKs are always unicast to the sender of the acknowledged packet
What are the contents of an EIGRP acknowledgement? 	EIGRP ACKs are Hello packets with no TLVs that have the Acknowledgement number field set to the value of the Sequence number of the reliable packet being acknowledged.
When can EIGRP send an acknowledgement along with other information in a single packet? 	A standalone acknowledgment is not required if a router also has a unicast reliable packet to send to a neighbor in addition to needing to acknowledge a previously-received reliable packet from that neighbor. Since all EIGRP packets carry an Acknowledgement number field, this allows both types of information to be sent with a single packet. The received packet is processed both as an ACK and as its original intended type.
What four reasons would cause EIGRP Updates be sent as unicast? 	Point-to-point interfaces<div>Statically configured neighbors</div><div>Neighbors that did not acknowledge a previously-sent Update</div><div>During a new adjacency buildup, unless there are many simultaneously-discovered neighbors</div>
When are EIGRP Updates sent as multicast? 	After routers have fully synchronized (unless P2P/static)<div>During a new adjacency buildup if many routers are detected simultaneously</div>
What is the general purpose of an EIGRP Query packet? 	To involve the neighbor in the task of searching for the best route toward a destination.
When is an EIGRP Query packet multicast, and when is it unicast? 	Multicast on multiaccess interfaces with only dynamic neighbors<div>Unicast in all other cases</div>
True or False: EIGRP Query messages must receive an ACK, which constitutes a response to the Query message. 	False: EIGRP Query messages do require an ACK, but the EIGRP Reply packet is the response to the Query.
How are EIGRP Reply packets sent? 	Always unicast to the initiator of the Query, and always delivered reliably (requiring an ACK)
What are EIGRP Reply messages used for? 	Reply messages are a response to Query messages
What are EIGRP SIA-Query and SIA-Reply messages used for? 	SIA-Query messages are sent to a neighbor that has not sent a Reply to a previous Query message in attempt to see if the neighbor is still reachable and working on the original Query. If it is, the neighbor responds immediately with a SIA-Reply messaage the timeout for working on the diffusing computation is reset to allow more time.
How are EIGRP SIA-Query and SIA-Reply packets sent? 	Unicast
What is an EIGRP packet sequence number? 	A global value maintained on each router per-EIGRP process and incremented whenever a packet is sent reliably. The EIGRP process expects to have a packet returned by the neighbor with the Acknowledgment field set to the same value as the received sequence number to indicate successful receipt.
How is the EIGRP packet sequence number used with Hello and ACK packets? 	Hello and ACK packets are not delivered reliably, meaning their sequence number is set to zero and does not cause the EIGRP process global sequence number to increase.
What is EIGRP Conditional Receive? 	Conditional Receive is a method for which EIGRP can send reliable multicast packets on a multiaccess interface where at least one neighbor is performing poorly. It allows EIGRP to partition all its neighbors on the multiaccess interface into two groups: well-behaved routers who have ACK'd all multicast messages so far, and those routers who failed to ACK at least one reliable EIGRP packet.
How does EIGRP Conditional Receive work? 	"The router sends a ""Sequenced Hello"" containing a Sequence TLV and a Next Multicast Sequence TLV on a multiaccess interface with both well-behaved and poorly-performing routers.<div><br /></div><div>The Sequence TLV contains the IPs of lagging neighbors, The NMS TLV contains the Seq of the upcoming next reliable multicast message.</div><div><br /></div><div>Routers not listed in the Sequence TLV place themselves into CR mode, and wait to receive the next packet with the CR flag set. Those routers process the packet as normal, and exit CR mode.</div><div><br /></div><div>Routers not in CR mode (those contained in the Sequence TLV) ignore the packet (if they receive it at all).</div>"
What is the EIGRP SRTT? 	The Smooth Round-Trip Time is the average elapsed time in milliseconds between when a reliable EIGRP packet is sent to when an ACK is received.
What is the EIGRP multicast flow timer? 	The multicast flow timer is the time to wait for an ACK before declaring a neighbor as lagging and switching from multicast to unicast transmissions.
How does EIGRP dynamically discover neighbors? 	EIGRP sends multicast Hellos to 224.0.0.10 / FF02::A as soon as EIGRP is activated on an interface.
What is a caveat of configuring a static EIGRP neighbor on an interface? 	All EIGRP multicasts on the interface through which the neighbor is reachable are disabled. This means if one neighbor is statically configured on an interface, all neighbors reachable by that interface on the common network segment must also be statically configured.
True or False: EIGRP can form neighborships using secondary IP addresses. 	False, neighbors must use primary IP addresses to form neighborships.
True or False: Timers must match between EIGRP neighbors for neighborships to be formed and maintained. 	False, timers are not required to match.
How do you modify the EIGRP Hello timer? 	Interface:<div><b>ip hello-interval eigrp </b><i>asn seconds</i></div>
How do you modify the EIGRP hold time? 	Interface:<div><b>ip hold-time eigrp&nbsp;</b><i>asn seconds</i></div>
The default EIGRP hold time is 3x the Hello time. What happens if you modify the EIGRP Hello time with regard to the hold time? 	Nothing, the timer settings are independent.
What causes the EIGRP hold timer to be reset? 	The EIGRP Hold timer is reset every time an acceptable EIGRP packet is received from a neighbor.&nbsp;
How is the EIGRP neighbor adjacency process similar to the TCP 3-way handshake? 	After discovering each other, the EIGRP neighbors are placed into a pending state, and a Null Update is sent with the Init flag set, and a particular Seq number. This is similar to the initial TCP SYN.<div><br /></div><div>The other EIGRP neighbor sends its own Null Update with the Init flag set, a particular Seq number, and the Ack field set to the received Seq number from the other neighbor. This is similar to the TCP SYN/ACK.</div><div><br /></div><div>The other neighbor sends a Null Update with the Init flag set, and the Ack field set to the received Seq from the other neighbor. This is similar to the final TCP ACK.</div><div><br /></div><div>When this process is completed, the neighbors are adjacent and database synchronization begins.</div>
What is the first thing that happens when an EIGRP router receives a Hello packet from a potential new neighbor? 	It expedites sending its own Hello packet in response to allow for the other router to quickly discover it.
While EIGRP neighbors are in the Pending state, what are the only packets that can be exchanged? 	Hello<div>Ack<div>Null Update with the Init flag set</div></div>
Under what conditions is the full EIGRP database exchanged between adjacent neighbors? 	When EIGRP is restarted, or resynchronization is manually invoked.
How do you view the contents of the EIGRP neighbor table? 	<b>show ip eigrp neighbors</b>
What is the EIGRP neighbor Handle? 	The internal number that EIGRP assigns to each neighbor to identify neighbors in an address-family independent way.
"With EIGRP, what does a non-zero ""Q Cnt"" value indicate when viewing the output of <b>show ip eigrp neighbors</b>? "	"In a stable network, the ""Q Cnt"" field should be zero, indicating no reliable packets are waiting in queue to be sent. &nbsp;Nonzero values are normal during intial synchronization and reconvergence events, but if it remains nonzero for a long period of time, it indicates a communication problem with the neighbor."
What does the sequence number in the output of the command <b>show ip eigrp neighbors </b>represent? 	The sequence number of the last reliable packet received from the particular neighbor.
What is the EIGRP RIB referred to as? 	The topology table
What is the difference between the EIGRP Passive and Active states? 	Passive means the shortest path to the destination network has been found and is considered current.<div><br /></div><div>Active means EIGRP is currently searching for a new shortest path to the destination.</div>
What must occur for an EIGRP route to move from Active state back to Passive? 	The router must receive a Reply (in response to a Query) from all its neighbors.
What does the <b>all-links </b>keyword do for the <b>show ip eigrp topology </b>command? 	The <b>all-links </b>command also displays entries that fail to meet the Feasibility Condition.
How can you view detailed information about a particular EIGRP destination network? 	<b>show ip eigrp topology </b><i>network</i>
What is the EIGRP Reported Distance? 	The metric to a particular destination as received from a particular neighbor. This is the metric that the neighbor reports in a sent EIGRP message.
What is the EIGRP Computed Distance? 	The Reported Distance + cost of the link to the advertising neighbor
"In the output of <b>show ip eigrp topology </b>each destination prefix lists the neighbor (as ""via""). What are the two numbers in the parenthesis? "	(Computed Distance / Reported Distance)
What is the EIGRP Feasible Distance? 	The FD is a historical record of the smallest known Computed Distance toward a particular destination since its last transition from Active to Passive.
True or False: The EIGRP Feasible Distance is not advertised to adjacent neighbors. 	True, the FD is an internal variable maintained for each network known to EIGRP whose value is never advertised to another router.
Why is the EIGRP Feasible Distance value maintained? 	The FD is the lowest known metric to a destination since the last time the route went Passive, so any neighbor whose Reported Distance is less than the FD cannot cause a routing loop because they are closer to the destination (this is the Feasibility Condition).
What is the EIGRP Feasibility Condition? 	If a neighbor's Reported Distance to a destination is less than the current router's Feasible Distance to the same destination, the neighbor can be used as a loop-free path to reach the destination.
True or False: Every neighbor satisfying the EIGRP Feasibility Condition provides a loop-free path, however not every loop-free path satisfies the Feasibility Condition. 	True. The FC guarantees a loop-free path, but not all loop-free paths can be guaranteed due to the nature of distance-vector routing protocols.
What is the term for an EIGRP neighbor that meets the Feasibility Condition for a particular destination? 	Feasible Successor<div><br /></div><div>This applies to all neighbors that can guarantee a loop-free path toward the destination.</div>
What is the difference between EIGRP Successors and Feasible Successors? 	Successors are also Feasible Successors, as they both meet the Feasibility Condition. Successors are neighbors with the lowest Computed Distance toward the destination.
For EIGRP, what constitutes a topology change? 	A topology change occurs whenever the distance to a network changes or a new neighbor comes online that advertises the network.
With regard to the topology, how does EIGRP process the event of a neighbor going down? 	The router sets the Computed Distance / Reported Distance of all networks reachable through that neighbor to infinity.
What is the EIGRP local computation process when a Feasible Successor is present? 	-The FS providing the least Computed Distance is made the new Successor<div>-The FD is updated if the CD of the new Successor is less than the current FD</div><div>-The routing table is updated to point toward the new Successor</div><div>-An Update is sent to all neighbors if the current distance to the destination has changed as a result of switching to the new Successor</div>
Why might an EIGRP diffusing computation be necessary after detecting a topology change? 	If there are no Feasible Successors, the diffusing computation must be performed so that a new loop-free path can be guaranteed.
What four events consist of the EIGRP diffusing computation process when a route becomes Active? 	<div>Route locked &gt; FD set to CD &gt; Active / Query &gt; Neighbors process</div><div><br /></div>-The entry in the routing table (pointing to the current unchanged Successor) is locked and cannot be changed until the route returns to Passive<div>-The FD is set to the current (possibly increased) Computed Distance through the current unchanged Successor</div><div>-The route is put into Active state and a Query is sent to all neighbors with the current CD</div><div>-Each neighbor receiving the Query updates its own topology table and reevaluates its own Successor/FSs. If the neighbor still has a Successor, it sends back a Reply, otherwise it starts its own Query process.</div>
When an EIGRP route goes Active, what happens to the entry in the routing table? 	When an EIGRP route goes Active, Query messages are sent to all neighbors, and the entry is locked and cannot be changed or removed until the router has received back a Reply from all neighbors, and the route has been moved back into the Passive state again.
When an EIGRP route goes Active, what happens to&nbsp;the Feasible Distance of the route? 	It is set to the current (and possibly increased) calculated distance through the current unchanged Successor.
What happens when an EIGRP router that previously had to send out a Query message receives back a Reply from all of its neighbors? 	The router can put the Active route back into the Passive state and choose the neighbor with the lowest computed distance as the new Successor. The FD is reinitialized to the current computed distance, and the routing table entry is updated and the router can send EIGRP Update messages.<div><br /></div><div>If the router itself became Active by receiving a Query, it can send back its own Reply and possibly Update packets.</div>
When an EIGRP router receives a Query packet from a neighbor, what determines if that router must become Active for the route and send its own Query? 	When the EIGRP router receives a Query, it uses the distance value for the route to determine if its own current Successor and Feasible Successors are still valid. If they are not, then the router becomes Active for the route, and starts its own Query process.
What happens with EIGRP when the Successor of a route fails, but a Feasible Successor is available? 	The FS is NOT automatically promoted to the Successor.<div><br /></div><div>EIGRP always tries to choose the shortest path to the destination, but must verify the FC.</div><div><br /></div><div>When EIGRP detects a topology change, it updates the CD/RD of the neighbor that advertised the change (or was influenced by it, such as with a link metric change). EIGRP then identifies the route from all neighbors providing the least CD (taking updated CDs into account). EIGRP then verifies if the neighbor with the least CD meets the FC. If it does, the FS is promoted to Successor, otherwise the route is put into Active state.</div>
How do you display EIGRP's DUAL finite state machine events? 	<b>debug eigrp fsm</b>
What are the names of the four EIGRP FSM Active states, and what do the names refer to? 	A0: Local Origin with Distance Increase<div>A1: Local Origin</div><div>A2: Multiple Origins</div><div>A3: Successor Origin</div><div><br /></div><div>The names refer to the origin of the diffusing computation, e.g. which router appears to have started it.&nbsp;</div>
What is the default EIGRP Active time? 	3 minutes
How do you modify the EIGRP Active timer? 	EIGRP process:<div><b>timers active-time </b>{<i>minutes </i>| <b>disabled</b>}</div>
When is an EIGRP SIA-Query message sent? 	If a neighbor does not respond with a Reply within half of the Active timer time (90 seconds by default)
What happens when an EIGRP SIA-Reply is received? 	The Active timer is reset, which gives the diffusing computation additional time to complete.
How many EIGRP SIA-Query messages can be sent to a neighbor? 	A maximum of three SIA-Query messages can be sent to a neighbor. If the neighbor still has not responded with a Reply message (not a SIA-Reply message) after receiving three SIA-Query messages plus the remainder of the Active time (a total default of 360 seconds), the neighbor adjacency is torn down.
After a router sends an EIGRP SIA-Query message, what is the maximum wait time for a SIA-Reply message? 	SIA-Query messages are sent at half the Active time if a regular Reply message is not received. The router to which the SIA-Query was sent has until the Active timer expires to send a SIA-Reply message back, otherwise the neighbor adjacency is dropped.
Assuming an EIGRP router receives all SIA-Reply messages in response to SIA-Query messages, at what point is the neighbor adjacency torn down? 	360 seconds by default<div><br /></div><div>SIA-Query messages are sent at half the Active time (90 seconds by default). When an SIA-Reply is received, the Active time is reset. A maximum of three SIA-Query messages can be sent, and if a regular Reply (not an SIA-Reply) is not received after the third SIA-Query, the neighbor adjacency is torn down after the Active timer expires.</div>
How do you quickly view routes for which EIGRP is currently in the Active state? 	<b>show ip eigrp topology active</b>
What happens if an EIGRP router receives a Query for a route that is currently in the Active state for which the same router has already sent another Query to? 	The router responds immediately with a Reply containing its current distance to the route in question.
True or False: You cannot run EIGRP in classic mode and in named mode on the same router simultaneously. 	False, on a single router you can run multiple EIGRP processes, some configured with classic mode, and some configured with named mode.
How does EIGRP named mode handle interface-level commands? 	Interface-level EIGRP commands are handled under the EIGRP named process. If interface-level commands are configured on the interface itself, they are ignored when EIGRP named mode is used.
What are the three main components of EIGRP named mode? 	-Address Family (AF) section<div>-Per-AF-interface section</div><div>-Per-AF-topology section</div>
How do you enter the EIGRP named mode Address Family configuration section? 	<b>router eigrp </b><i>name</i><div><b>&nbsp; address-family </b><i>afi safi </i><b>autonomous-system </b><i>asn</i></div><div><i><br /></i></div><div>Example:</div><div><b>address-family ipv4 unicast autonomous-system 1</b></div>
How do you configure interface-level commands in EIGRP named mode? 	With the <b>af-interface </b>{<b>default </b>| <i>interface</i>} command under the EIGRP <b>address-family</b><div><b><br /></b></div><div>Example:</div><div><b>router eigrp </b><i>name</i></div><div>&nbsp; <b>address-family </b><i>afi safi </i><b>autonomous-system </b><i>asn</i></div><div>&nbsp; &nbsp; <b>af-interface </b>{<b>default </b>| <i>interface</i>}</div>
What is the <b>af-interface default </b>section in EIGRP named mode? 	Settings that apply to all interfaces within the AFI ASN.
With EIGRP named mode, what happens when settings are configured both in the&nbsp;<b>af-interface default </b>and <b>af-interface </b><i>interface </i>sections? 	The <b>af-interface </b><i>interface </i>settings take precedence for that particular interface.
What is the per-AF-topology section in EIGRP named mode used for? 	Multi Topology Routing (MTR)<div><br /></div><div>However, <b>topology base </b>is always present, even if MTR is not supported or used.</div>
With EIGRP named mode, what happens when you enter the configuration mode for the IPv6 address family, and how do you modify this behavior? 	EIGRPv6 is enabled automatically on all IPv6-enabled interfaces.<div><br /></div><div>This can be <b>disabled </b>under the <b>af-interface default </b>section.</div>
What is the relationship with EIGRP named mode processes and address family instances? 	There is a 1:1 correspondence between an EIGRP named process and an address family instance with a particular AS.<div><br /></div><div>For example, you cannot have multiple IPv4 unicast ASNs under a single process, and you cannot have the same IPv4 unicast ASN under multiple processes.</div>
After configuring EIGRPv6 in classic mode, what final step must be performed? 	Unlike with named mode, EIGRPv6 in classic mode is shutdown by default when configured, so <b>no shutdown </b>must be issued under the <b>ipv6 router eigrp </b>process.
How does MTR (Multi Topology Routing) compare to VRF (Virtual Routing and Forwarding)? 	MTR is defined as a subset of routers and links in a network for which a separate set of routes is calculated. MTR includes the base topology which is the entire network, and additional topologies are class-specific, which are a subset of the base topology. Each class-specific topology carries a class of traffic and has independent NLRI used to maintain separate RIBs and FIBs, which allows the router to perform independent calculations and forwarding for each topology.<div><br /></div><div>However, MTR topologies are subsets of a base topology and uses the same address space, whereas VRFs do not share a common address space and are completely independent of each other.</div>
True or False: Each EIGRP address family instance has its own independent Router ID and multiple EIGRP processes and AFIs on the same router can use the same RID. 	True
What are three ways to modify the existing EIGRP RID? 	-Remove and reinitialize the EIGRP process<div>-Manually configure the RID</div><div>-Remove the RID manual configuration</div><div><br /></div><div>RID configuration order is:</div><div>-Manually configured</div><div>-Highest IP of nonshutdown loopback</div><div>-Highest IP of up/up nonloopback interface</div>
When manually configuring the EIGRP RID, which values are specifically disallowed? 	0.0.0.0<div>255.255.255.255</div>
What happens if the EIGRP RID is changed? 	All neighbor adjacencies are dropped and re-established
What happens to the EIGRP RID if you change the IP address of the interface on which the RID was based? 	The RID stays the same until EIGRP is restarted. This can lead to inadvertent duplicate RIDs on the network.
What is the relationship between the EIGRP <b>variance </b>setting, and <b>maximum-paths</b>? 	You can adjust the <b>variance </b>setting to enable unequal-cost load-sharing, but the number of available links is still bound by the <b>maximum-paths </b>setting, whose default is 4.
How does the EIGRP Add-Path feature work with unequal cost load balancing? 	Add-Path and unequal cost load balancing are mutually-exclusive features and cannot be configured together. Add-Path only supports ECMP links.
What is the primary use case for the EIGRP Add-Path feature? 	DMVPN deployments where multiple branch offices are dual-homed. The hub router normally can only advertise a single path toward a destination, but when the Add-Path feature is configured on the DMVPN hub, it can advertise multiple ECMP paths to the spokes.
What are the five requirements for using the EIGRP Add-Path feature? 	"<div><img src=""EIGRP Add-Path 5 Requirements.png"" /></div>"
What is the mandatory argument for the EIGRP Add-Path feature? 	The number of paths to add, with the range of 1 - 4
How do you configure the EIGRP Add-Path feature? 	In named mode, under the DMVPN tunnel <b>af-interface </b>section:<div><b>no split-horizon</b></div><div><b>no next-hop-self</b></div><div><b>add-paths </b><i>1-4</i></div>
With a DMVPN deployment, when should you use the <b>no next-hop-self no-ecmp-mode </b>command? 	This command should be used in conjunction with the Add-Path feature when the hub router is dual-homed. This causes EIGRP to retain all Successor's addresses as the next-hop in EIGRP advertisements, not just the first entry in the topology table.
What does the EIGRP <b>no next-hop-self no-ecmp-mode </b>command do? 	When <b>no next-hop-self </b>is used, the command only applies to the first entry in the EIGRP topology table, and if there are multiple ECMP entries, the command is not applied to the subsequent entries. The <b>no-ecmp-mode </b>keyword forces EIGRP to honor the <b>no next-hop-self </b>command for all entries and keep the Successor's address in the advertisements.
How does EIGRP advertise itself as a stub router? 	The EIGRP Hello contains an additional TLV indicating stub status.
True or False: An EIGRP stub router does not propagate routes learned through EIGRP to its neighbors. 	True, with the exception of EIGRP-learned routes that are explicitly selected using the <b>leak-map </b>keyword.
How is an EIGRP stub router prevented from becoming a transit router? 	Since the stub router does not propagate routes learned through EIGRP to its neighbors, the stub router cannot become a Feasible Successor and cannot become a transit router for remote networks.
True or False: EIGRP neighbors of a stub router who are aware of its stub status will never send a Query to the stub router. 	True, this prevents the neighbors from converging through a stub router to reach networks that are remote to the stub router.
How does an EIGRP stub router handle generating Query messages when a route goes Active? 	EIGRP stub routers generate Query messages exactly the same way as normal EIGRP routers.
How does an EIGRP stub router process a received Query? 	If the stub is allowed to advertise the network (summary, connected, static, redistributed, leak-map), the router processes the Query like a normal EIGRP router.<div><br /></div><div>If the Query is about a network the EIGRP stub knows about, but is not allowed to advertise, the Reply always contains an infinte metric, regardless of what the stub router truly knows about the network.</div><div><br /></div><div>Both EIGRP stubs and regular EIGRP routers immediately respond to a Query for an unknown network with a Reply with an infinite distance.</div>
What two conditions cause an EIGRP stub router to receive Query messages? 	-Older EIGRP routers can form adjacencies, but do not recognize the stub TLV<div>-If multiple routers are on a common network segment and they are ALL configured as stubs, when any of the stubs needs to send a Query, it sends it to all the neighbors</div>
How are Query messages handled when both regular EIGRP and stub EIGRP routers exist on a common network segment? 	Query messages are sent as unicasts to nonstub routers, or the RTP Conditional Receive feature is used to multicast Query messages so that nonstub routers will not process them.<div><br /></div><div>This is common for hub and spoke routers connected by DMVPN or VPLS.</div>
What are two caveats of using the <b>eigrp stub receive-only </b>command? 	-The keyword cannot be used with any other keyword<div>-To reach networks behind the router, neighbors must use static routing, or the stub router must use NAT</div>
What are the EIGRP stub advertisement options? 	<b>connected</b><div><b>summary</b></div><div><b>static</b></div><div><b>redistributed</b></div><div><b>leak-map</b></div><div><b>receive-only</b></div><div><b><br /></b></div><div>connected and summary are the defaults when <b>eigrp stub </b>is issued.</div>
How do you verify the EIGRP stub settings? 	<b>show ip protocols</b>
How do you verify if an EIGRP neighbor is configured as a stub? 	<b>show ip eigrp neighbors detail</b>
How does summarization bound the EIGRP Query domain? 	EIGRP neighbors of a router performing summarization do not have information about the specific component subnets of the summary, so they immediately send a Reply indicating an unreachable destination (infinte metric) without having to go Active and propagate the Query further.
True or False: You can configure multiple overlapping summary addresses on a single interface with EIGRP. 	True, each summary is advertised as long as at least one component subnet exists. This allows for hierarchical summaries where, for example, two routers can advertise the same less-specific summary, and they can each advertise a separate, more-specific summary for traffic engineering.
What is the purpose of a discard route with summarization? 	A discard route (a local route to Null0) prevents suboptimal routing or routing loops when a summarizing router does not have knowledge of a more specific prefix for which it is advertising a summary. For example, if a router is advertising 10.1.0.0/22 and has more specific routes to 10.1.0.0/24, 10.1.1.0/24, and 10.1.2.0/24, but not 10.1.3.0/24, any traffic destined for 10.1.3.0/24 would be discarded.
What is the default administrative distance of an EIGRP discard route? 	5
With an EIGRP router performing summarization, what is a potential issue with regard to an automatically installed discard route? 	If the router is configured to advertise a manual summary route that exactly matches a route that is already learned by the router from another source, the discard route can possibly replace the route learned in the routing table due to the default AD of 5. For example, if EIGRP is configured to advertise a summarized default 0.0.0.0/0, but the router has the same route learned from another source, it may no longer be able to reach that default route because of the automatic discard route.<div><br /></div><div>The solution is to adjust the AD of the summary with the EIGRP <b>summary-metric </b><i>summary mask </i><b>distance </b><i>distance </i>command.</div>
What happens if you set the AD of a discard route to 255? 	It prevents the router from installing the discard route into the routing table, as well as stops the router from advertising the summary route. Neither the summary nor the component routes will be advertised to neighbors.
How do you view all configured EIGRP summary addresses, and the interfaces they are placed on? 	<b>show ip protocols</b>
How do you configure EIGRP passive interface in classic mode? 	<b>router eigrp </b><i>asn</i><div>&nbsp; [<b>no</b>]&nbsp;<b>passive-interface </b>{<b>default </b>| <i>interface</i>}</div><div><br /></div><div>This allows you to set all interfaces as passive by default, and then allow specific interfaces with <b>no passive-interface </b><i>interface</i></div><div><i><br /></i></div><div>You can also configure configure individual interfaces as passive.</div>
How do you configure EIGRP passive interface in named mode? 	With the [<b>no</b>]&nbsp;<b>passive-interface </b>command under either <b>af-interface default </b>or <b>af-interface </b><i>interface</i>
How does EIGRP Graceful Shutdown work? 	Graceful shutdown (which occurs when the EIGRP <b>shutdown </b>command is used) sends a Goodbye message, which is a Hello message with all K-values set to 255.
What is a requirement of configuring SHA-256 authentication for EIGRP? 	It can only be performed in named mode.
What is an advantage of configuring EIGRP authentication in named mode instead of classic mode with regard to interfaces? 	EIGRP named mode allows configuring authentication simultaneously on all interfaces with the <b>af-interface default </b>section, of which there is no equivalent in classic mode.
How do you configure EIGRP authentication in classic mode? 	Interface:<div><b>ip authentication mode eigrp </b><i>asn </i><b>md5</b></div><div><b>ip authentication key-chain eigrp </b><i>asn key-chain</i></div>
How do you configure EIGRP SHA-256 authentication? 	<b>af-interface </b><i>interface</i><div>&nbsp; <b>authentication mode hmac-sha-256 </b><i>password</i></div><div><i><br /></i></div><div>Note: you can optionally use a key-chain, but the password must still be configured. Both will be sent when using key-chains.</div>
With EIGRP named mode, if authentication is configured under the <b>af-interface default</b>, how do you disable it for a particular interface? 	<b>af-interface </b><i>interface</i><div>&nbsp; <b>no authentication mode</b></div>
If a key-chain is configured with multiple valid keys, which key is used? 	The valid key with the lowest key ID is used to sign egress packets
How do you seamlessly change the keys in a key-chain? 	-Add the new key with a higher key ID into the key-chain on all routers<div>-Configure the <b>send-lifetime </b>of the old key to some time in the past, which causes the key to stop being sent</div><div>-Remove the old key from the key-chain on all routers</div>
True or False: EIGRP has no dedicated command to inject a default route into the EIGRP domain. 	True, a default route must be either redistributed into EIGRP, or manual summarization must be used.
If you have a static default route pointing toward an interface, you can cause EIGRP to advertise it with the <b>network 0.0.0.0 </b>command. Why should you never do this? 	<b>network 0.0.0.0 </b>causes all IPv4-enabled interfaces to be enabled for EIGRP. Additionally, if the static default route is not configured specifically with an interface (as opposed to an IP address), the <b>network 0.0.0.0 </b>command has no effect and it will not be advertised.
How does EIGRP use Split Horizon? 	EIGRP uses Split Horizon with Poisoned Reverse to advertise learned networks out the interface toward the Successor with an infinite metric.
How do you configure split horizon for EIGRP classic mode? 	Interface:<div>[<b>no</b>] <b>ip split-horizon eigrp</b></div>
What are the EIGRP logging defaults? 	<b>router eigrp</b><div><b>&nbsp; event-log-size 500</b></div><div><b>&nbsp; event-logging</b></div><div><b>&nbsp; log-neighbor-changes</b></div><div><b>&nbsp; log-neighbor-warnings</b></div>
How do you view the EIGRP event log? 	<b>show eigrp address-family ipv4 events</b>
What three options are available for filtering via distribute-list with EIGRP? 	ACLs<div>Prefix lists</div><div>Route maps</div>
How do you configure a distribute-list for EIGRP? 	EIGRP process, <b>topology-base</b>:<div><b>&nbsp; distribute-list </b><i>method direction optional-interface</i></div>
How do EIGRP distribute-lists work in the <b>out </b>direction? 	All outgoing Updates, Queries, Replies, SIA-Queries, and SIA-Replies indicate the correct metric for permitted prefixes, and infinite metric for denied prefixes.
How do EIGRP distribute-lists work in the&nbsp;<b>in&nbsp;</b>direction? 	In all incoming Updates, Replies, and SIA-Replies, permitted prefixes are processed normally, while denied prefixes are ignored.<div><br /></div><div>Received Queries and SIA-Queries are unaffected and processed normally.</div>
How do offset lists work with EIGRP? 	Offset lists refer to an ACL to match routes which will have the specified offset added to their Delay metric component.<div><br /></div><div>Offset lists also specify the direction, and optionally the interface.</div>
How do you perform an EIGRP graceful restart? 	<b>clear eigrp address-family ipv4 neighbors soft</b><div><b><br /></b></div><div>Topology databases between the router and its neighbors are resynchronized without the neighbor relationship being torn down. Without the <b>soft </b>keyword, adjacencies must be re-established.</div>
How do you convert from EIGRP classic mode to named mode? 	<b>router eigrp </b><i>asn</i><div><i>&nbsp; </i><b>eigrp upgrade-cli </b><i>process-name</i></div>
How do you view EIGRP traffic statistics? 	<b>show ip eigrp traffic </b><i>asn</i>
How are EIGRP OTP and LISP related? 	With EIGRP OTP, the LISP control plane (native LISP mapping and resolving mechanisms) are replaced by EIGRP, while the LISP data plane is not modified.
How does EIGRP OTP compare with DMVPN? 	DMVPN uses mGRE to encapsulate both data and control plane traffic, whereas OTP uses LISP UDP-based encapsulation for the data plane while running EIGRP natively without additional encapsulation. This means no tunnel interfaces are required for OTP.<div><br /></div><div>All OTP traffic can be encrypted with GETVPN, whereas DMVPN relies on IPsec tunnel configuration.</div><div><br /></div><div>DMVPN relies on NHRP for mappings, whereas OTP uses EIGRP for the mapping and no other control plane protocol is required.</div>
What is the LISP EID and RLOC? 	EID = Endpoint Identifier, an IPv4 or IPv6 address<div>RLOC = Routing Locator, outside address of a router</div><div><br /></div><div>EIDs reside behind RLOCs, and the LISP control plane registers and maps EIDs to RLOCs.</div>
How does EIGRP OTP replace the LISP control plane? 	Instead of doing dynamic EID-to-RLOC mappings with native LISP-mapping services, EIGRP routers running OTP create targeted sessions over the WAN and use the WAN IP addresses as RLOCs, and exchange routes as EIDs.
When EIGRP OTP is used, a LISP0 interface is created automatically. What is the default bandwidth setting of this interface? 	56 kbps<div><br /></div><div>Adjust with the following:</div><div><b>interface LISP0</b></div><div><b>&nbsp; bandwidth </b><i>kbps</i></div>
How do you enable EIGRP OTP? 	<b>router eigrp </b><i>process</i><div>&nbsp; <b>address-family ipv4 unicast autonomous-system </b><i>asn</i></div><div>&nbsp; &nbsp; <b>neighbor </b><i>ip interface </i><b>remote </b><i>hops </i><b>lisp-encap</b></div>
What is a caveat of using EIGRP OTP with an Ethernet WAN interface? 	Since the EIGRP remote neighbor is configured with a static IP address, the router must send ARP requests for the neighbor. This relies on Proxy ARP from the service provider, and if it is disabled on the SP edge, the OTP peering will not come up unless static ARP mappings are configured on the OTP router.
How do you configure an EIGRP OTP router to be a route reflector? 	<b>router eigrp&nbsp;</b><i>process</i><div>&nbsp;&nbsp;<b>address-family ipv4 unicast autonomous-system&nbsp;</b><i>asn</i></div><div>&nbsp; &nbsp;&nbsp;<b>remote-neighbors&nbsp;</b><b>source</b><i> interface&nbsp;</i><b>unicast-listen</b><i>&nbsp;</i><b>lisp-encap</b></div><div><b>&nbsp; &nbsp; af-interface </b><i>source-interface</i></div><div>&nbsp; &nbsp; &nbsp; <b>no next-hop-self</b></div><div><b>&nbsp; &nbsp; &nbsp; no split-horizon</b></div><div><b><br /></b></div><div><b>no next-hop-self </b>enables spoke-to-spoke traffic</div><div><b>no split-horizon </b>allows learned routes to be reflected back out to the spokes</div>
With EIGRP OTP, how can you control which routers are allowed to connect to the route reflector? 	On the router configured as the route reflector, the <b>remote-neighbors </b>EIGRP command can reference an ACL with the <b>allow-list </b><i>acl</i><b>&nbsp;</b>keyword.
How does OSPF choose a RID? 	-Manually-configured with <b>router-id </b>under the OSPF process<div>-Highest IP of any non-shutdown loopbacks that have not been allocated as a RID by any other OSPF processes</div><div>-Highest IP of any non-shutdown non-loopback interfaces that have not yet been allocated as a RID by any other OSPF processes</div>
Two OSPF processes are started on a router, neither of which manually configures a router ID. How are the router IDs chosen for each process? 	The first process to start chooses the highest IP address of any non-shutdown loopback interface, or regular non-shutdown interface is there are no loopbacks.<div><br /></div><div>The second process chooses the next-highest IP address of any non-shutdown loopback interfaces, the next-highest IP address of a regular non-shutdown interface if there were no loopbacks, or the highest IP address of a regular non-shutdown interface if there was only a single non-shutdown loopback interface and the first OSPF process claimed it for its router ID.</div>
True or False: The interface from which the OSPF RID is taken does not have to be matched by an OSPF <b>network </b>command. 	True
True or False: An IP address configured on an interface in the down/down state can still be considered for use as the OSPF RID. 	True. The interface cannot be administratively&nbsp;<b>shutdown </b>but if it happens to be down for other reasons, it can still be considered.
True or False: OSPF must advertise a route to reach the RID's subnet when an interface IP address is used as the RID. 	False, the RID is just an identifier, and does not even require reachability per the IP routing table.
What happens to the router ID when the OSPF process is restarted? 	If the RID is not manually configured, the choice of RID based on available IP addresses is re-evaluated. If a different RID is chosen, all routers in the same are must perform a new SPF calculation, even if the actual topology has not changed.
What does OSPF use for transport? 	IP Protocol 89
What are the five different types of OSPF messages? 	Hello<div>Database Description (DD/DBD)</div><div>Link-State Request (LSR)</div><div>Link-State Update (LSU)</div><div>Link-State Acknowledgement (LSAck)</div>
What three things are OSPF Hello messages used for? 	-Discover neighbors<div>-Bring a neighbor relationship to 2-Way state</div><div>-Monitor neighbor's continuous liveliness</div>
What are OSPF Database Description (DD/DBD) messages used for? 	They are used to exchange LSA headers during the initial topology exchange so that a router knows a list of that neighbor's LSAs, including their versions.
What are OSPF Link-State Request (LSR) messages used for? 	A LSR is a packet that identifies one or more LSAs that the sending router would like the neighbor to supply full details about.
What are OSPF Link-State Update (LSU) messages used for? 	An LSU is a packet that contains fully detailed LSAs and is sent in response to an LSR, or in the event of a topological change.
What are OSPF Link-State Acknowledgement (LSAck) messages used for? 	LSAcks are sent to confirm receipt of LSUs.
True or False: Link State Advertisements (LSAs) are not considered OSPF messages. 	True: LSAs are data structures held inside a router's LSDB and exchanged inside LSU messages.
What is an indication of how an OSPF router treats a particular neighbor? 	The OSPF neighbor state
True or False: Two OSPF neighbors building an adjacency can temporarily consider each other to be in a different neighbor state. 	True, though this is a temporary condition. Ultimately, both routers must arrive at the same state.
What are the eight OSPF neighbor states? 	Down<div>Attempt</div><div>Init</div><div>2-Way</div><div>ExStart</div><div>Exchange</div><div>Loading</div><div>Full</div>
What are two common reasons to see an OSPF neighbor in the Down state? 	When a working adjacency to the neighbor is torn down, such as when no valid OSPF packets are received before the Dead interval expires.<div><br /></div><div>The other common case is when a manually-configured neighbor does not respond to initial Hello packets.</div>
What is a requirement for an OSPF router to consider a neighbor in the Down state? 	The router must already know about the neighbor's IP address, either manually or through previous discovery.
What is the initial state of an OSPF neighbor? 	Down
For which network types is the OSPF Attempt neighbor state valid for? 	This state is valid only on NBMA and P2MP NBMA networks. On these networks, a neighbor is placed immediately into the Attempt state and contact by Hello packets sent at usual intervals. If the neighbor does not respond within the Dead interval, it is placed back into the Down state.
When is an OSPF neighbor placed into the Init state? 	"A valid Hello has been received from the neighbor, but the list of ""Seen Routers"" in the received Hello packet does not contain the receiving router's RID. If a neighbor stays in the Init state for a long period of time, it indicates that the neighbor router is not properly receiving this router's Hellos."
What causes an OSPF router to reach the 2-Way state with a neighbor? 	A valid Hello packet containing this router's RID in the list of seen neighbors from the neighbor, indicating bidirectional visibility between the two routers.
When is the OSPF 2-Way neighbor state considered stable? 	The 2-Way state is a stable state between routers on multiaccess networks that do not intend to become fully adjacent.
What four circumstances cause an OSPF router to move from the Init or 2-Way neighbor state to ExStart? 	After bidirectional visibility is confirmed, routers move into the ExStart state in these circumstances:<div><br /></div><div>-The network type is P2P</div><div>-The network type is P2MP</div><div>-The network type is virtual link</div><div>-The router itself or its neighbor is a DR or BDR</div>
What two things happen during the OSPF ExStart neighbor state? 	-Compare RIDs to determine Master/Slave roles<div>-Establish common starting sequence number for DBD packets</div>
When does an OSPF neighbor state move from ExStart to Exchange? 	After the Master/Slave relationship is established.
What occurs during the OSPF Exchange neighbor state? 	DBDs are exchanged between the neighbors to build the list of LSAs known by each router. Actual LSAs are not exchanged at this time.
What is the OSPF Loading neighbor state? 	After a router receives the complete list of LSAs via DBD exchange during the Exchange state, the Loading state is when the actual LSAs are exchanged between the neighbors.
What is the OSPF Full neighbor state? 	All required LSAs have been exchanged between neighbors, and the neighbors are now considered fully adjacent.
What are the stable OSPF neighbor states? 	2-Way<div>Full</div>
What are the four major functions of OSPF Hello messages? 	-Discover OSPF routers on common subnets<div>-Check for agreement on configuration parameters</div><div>-Verify bidirectional visibility between neighbors</div><div>-Monitor neighbor liveliness and react accordingly</div>
What must be true for OSPF to advertise secondary IP addresses? 	The primary IP address for an interface must also be advertised into OSPF, either directly at the interface or through the OSPF <b>network </b>command. Even if the secondary IP address is explicitly configured for advertisement, it will not be advertised if the primary IP address is not also advertised.
Which address is used for OSPF neighbor discovery? 	224.0.0.5 All OSPF Routers
What five parameter checks must be passed for OSPF routers to become neighbors? 	<div><div>-Same primary IP subnet</div></div><div><div>-Nonduplicate RIDs</div></div><div>-Authentication</div><div>-Same OSPF area and type</div><div>-Same Hello/Dead timers</div><div><br /></div><div>MTU must match for DBD packets to be successfully processed, but this parameter check is not part of the Hello process and would not prevent routers from reaching the 2-Way state.</div>
True or False: The MTU must match between OSPF neighbors to form a neighborship. 	False: MTU checking is not part of the Hello process and does not prevent neighbors from forming. However, mismatched MTUs prevent routers from moving past the 2-Way state.
What is the default OSPF Hello time? 	10s on broadcast and P2P network type<div>30s on nonbroadcast and P2MP network type</div>
What is the default OSPF Dead time? 	4x the Hello time:<div><br /></div><div>40s on broadcast and P2P network type<div>120s on nonbroadcast and P2MP network type</div></div>
How can you verify that OSPF Hello parameters are mismatched between neighbors? 	"<b>debug ip ospf hello </b>will reveal ""Mistached hello parameters from <i>RID</i>"""
How can you view the OSPF settings applied to an interface? 	<b>show ip ospf interface </b><i>interface</i>
How can you verify information about a particular OSPF neighbor? 	<b>show ip ospf neighbor </b><i>RID</i>
How does OSPF perform error recovery when exchanging DBD packets? 	Each DBD packet has a sequence number, and the receiver acknowledges the DBD packet by sending back a DBD packet with the same sequence number. When a DBD packet is sent, another DBD packet is not sent until the previous packet was acknowledged.
During OSPF database exchange, what is the role of the Master, and what is the role of the Slave? 	The Master sends DBD packets on its own accord, and sets the contained sequence numbers.<div><br /></div><div>The Slave sends DBD packets only as a response to DBD packets received from the Master, and must use the same sequence number set by the Master.</div>
What are the three flags present in the OSPF DBD packet? 	-Master (MS) - set in all DBD packets sent by the Master, cleared in all sent by the Slave<div>-More (M) - router intends to send an additional DBD packet after this one</div><div>-Init (I) - Initial DBD packet that starts the exchange with subsequent DBD packets having the I flag cleared</div>
What are the two rules governing the sending of OSPF DBD packets? 	-Each DBD packet sent from the Master must be replied to by the slave<div>-A slave can send a DBD packet only as a response to receiving a Master's DBD packet</div>
During the OSPF database exchange, since the Slave router can only send DBD packets as a response to DBD packets sent by the Master, what happens when the Slave has additional LSAs to send to the Master? 	When the Slave sends its response DBD packet, it sets the M (More) flag if it has additional LSAs to send to the Master.<div><br /></div><div>If the Master has no additional LSAs to send, but it receives the DBD response with the M flag set, it polls the Slave with an empty DBD packet.</div>
During the OSPF database exchange, when does the Master stop sending DBD packets to the Slave? 	The Master stops sending DBD packets to the Slave when both it has no more LSA headers to advertise, and the Slave's last DBD packet has the M (More) flag cleared, indicating the Slave has advertised its entire list of LSA headers.
During the OSPF database exchange, how does the Master/Slave election work? 	Both start out considering themselves to be the Master and send an empty DBD packet with a random sequence number and MS, M, and I flags set to 1.<div><br /></div><div>The router with the lower RID becomes the Slave, and responds with a DBD packet with the MS and I flags cleared, and the sequence number received from the other router.</div>
How does an OSPF router determine if a received LSA is newer than the existing LSA in the LSDB? 	A newer LSA will have a later sequence number compared to the existing LSA in the local LSDB.&nbsp;<div><br /></div><div>LSA sequence numbers are incremented whenever the LSA changes or is reoriginated.</div>
True or False: Re-originating an OSPF LSA causes its sequence number to increment. 	True, the sequence number is incremented whenever there is a change to the LSA, or the LSA is reoriginated.
How do OSPF sequence numbers work, and what is the starting number? 	The sequence number space is a signed 32-bit integer from -2^31+1 (-2B) to 2^31-1 (+2B).<div><br /></div><div>The starting value is 0x80000001 because most computer systems store negative numbers in two's complement.</div><div><br /></div><div>0x80000001 increments to 0xFFFFFFFF, then to 0x00000000, 0x00000001 on up to 0x7FFFFFFF.</div><div><br /></div><div>0x80000000 is a reserved value. When an LSA reaches 0x7FFFFFFF and needs to be incremented, the LSA is instead flushed from the LSDB and re-originated with sequence 0x80000001.</div>
What is the difference between the OSPF Exchange and Loading neighbor states? 	During the Exchange state, DBD packets are exchanged with contain LSA headers.<div><br /></div><div>During the Loading state, full LSAs are exchanged via LSR and LSU packets.</div>
What two methods are available for OSPF routers to acknowledge successful LSR/LSU exchange? 	-An LSU can be acknowledged by the receiver sending back the exact same LSU to the sender (as in the case of the DR)<div>-A router can send back an LSAck packet containing a list of acknowledged LSA headers</div>
What are the two primary functions of the OSPF DR? 	-DR floods LSAs to adjacent neighbors, instead of all routers in a multiaccess segment flooding directly to each other<div>-DR generates Type 2 LSAs to represent the multiaccess network segment</div>
How does an OSPF DR send an update for a multiaccess network segment? 	The LSU is sent to 224.0.0.5, and each neighbor sends a unicast LSAck back to the DR.
On an OSPF multiaccess network segment with a DR, where do non-DR/BDR routers send updates to? 	LSU packets are sent to 224.0.0.6, All OSPF DR Routers
When an OSPF DR receives an LSU from a neighbor, how does it acknowledge its receipt? 	When a DR receives an LSU from a non-DR/BDR neighbor, the LSU is then flooded by the DR to all neighbors, which serves as an implicit acknowledgement.<div><br /></div><div>All other routers send a normal unicast LSAck to the DR after the LSU has been flooded.</div>
In OSPF network segments that do not have a DR/BDR, where are LSU packets typically sent? 	224.0.0.5, All OSPF Routers
At what point during the OSPF neighbor adjacency process is the DR/BDR elected? 	The election occurs after the 2-Way state, but before the ExStart state.
What is the OSPF Wait Time? 	The OSPF Wait Time is set to the same value as the Dead Time, and is a period of time that must expire before the DR is elected. The goal is to allow all routers on the network segment to finish initializing after a failure so that all routers can participate in the DR election, otherwise the first router to become active would always become the DR. During the Wait Time, the priorities and RIDs of neighbors are collected, and each router independently calculates the DR/BDR, though they all arrive at the same conclusion.<div><br /></div><div>This occurs when the OSPF router receives a Hello with the DR set to 0.0.0.0, indicating the DR has not yet been elected.</div>
What happens when an OSPF router on a multiaccess network segment receives a Hello packet with the DR field set to 0.0.0.0? 	This indicates the DR has not yet been elected, and the router starts the OSPF Wait Time (set to same value as Dead Time). When the timer expires, the DR can be elected.
How does an OSPF router know that a DR has already been elected? 	The received Hello packet will have the RID of the DR.
Which is elected first, the OSPF DR or BDR? 	The BDR is elected first, and then promoted to DR. This process allows a BDR to always be promoted to the DR if the DR fails.
What determines the OSPF DR when none has yet been elected? 	Highest priority, with highest RID as the tiebreaker
What is the exception to the OSPF DR/BDR non-preemption rule? 	When a stable network that has already elected the DR/BDR becomes partitioned, new elections occur if necessary for each partition (normal OSPF rules), and re-elections occur when the partitions are collapsed.&nbsp;
What three behaviors are determined by the OSPF network type? 	-Whether the router tries to elect a DR on the interface<div>-Whether the router must statically configure a neighbor, or use multicast</div><div>-Whether more than two neighbors should be allowed on the same subnet</div>
How do you configure the OSPF network type? 	Interface:<div><b>ip ospf network </b><i>type</i></div>
What are the six OSPF network types? 	Broadcast<div>Point-to-Point</div><div>Non-Broadcast</div><div>Point-to-Multipoint</div><div>Point-to-Multipoint Non-Broadcast</div><div>Loopback</div>
Which OSPF network types elect a DR? 	Broadcast<div>Non-Broadcast (NBMA)</div>
Which OSPF network types require static configuration of neighbors? 	"Non-Broadcast (NBMA)<div>Point-to-Multipoint Non-Broadcast</div><div><br /></div><div>""Nonbroadcast Needs Neighbors""</div>"
Which OSPF network types do not permit more than two routers on the subnet? 	Point-to-Point<div>Loopback</div>
For which OSPF network types is the default Hello interval set to 10 seconds? 	Broadcast<div>Point-to-Point</div>
For which OSPF network types is the default Hello interval set to 30 seconds? 	Non-Broadcast (NBMA)<div>Point-to-Multipoint</div><div>Point-to-Mulitpoint Non-Broadcast</div>
While certain OSPF network types can be mixed together, what are the caveats to watch out for? 	-Matching Hello/Dead timers<div>-Whether or not a DR is expected to be elected, and if so,&nbsp;it must have reachability to all routers in the common subnet</div>
What is the default OSPF priority? 	1
When manually configuring OSPF neighbors, what is the purpose of specifying the priority on the <b>neighbor </b>statement? 	<div>This is an optimization.</div><div><br /></div>The default neighbor priority is 0. When there are multiple <b>neighbor </b>statements configured and at least one of them has a nonzero priority specified, the router first sends Hellos only to those neighbors, and only after the DR/BDR elections have occurred between those neighbors will the router start sending Hellos to the remaining neighbors.<div><br /></div><div>If the interface is set to priority 0 with <b>ip ospf priority 0 </b>the neighbor priority setting has no effect.</div>
What is the default OSPF LSRefresh interval? 	30 minutes
What is the default value of the OSPF LSA MaxAge timer? 	60 minutes
After convergence, what four items entail the OSPF steady-state operation? 	-Each router sends Hellos based on per-interface Hello intervals<div>-Each router expects to receive Hellos from neighbors within the per-interface Dead interval</div><div>-Each router refloods each LSA it originates (after incrementing the seq by 1) per LSA LSRefresh interval (30 min)</div><div>-Each router expects to have its LSA refreshed before the LSA MaxAge timer expires (60 min)</div>
What makes a Cisco OSPF router an ABR? 	It has one more more connections to Area 0 and one or more connections to any other Area.<div><br /></div><div>Other vendors may have different interpretations of the RFC.</div>
True or False: OSPF ABRs maintain a single LSDB. 	False: ABRs keep independent separate LSDBs for each connected Area. Likewise, SPF is run independently in each Area, and the results are combined into a single routing table subject to OSPF path preference rules.
How does an OSPF ABR maintain its local IP routing table? 	SPF is run independently in each area, and the results are placed into the IP routing table based on OSPF path preference rules.
True or False: OSPF chooses intra-area routes over inter-area routes for a given prefix, unless the inter-area route has a better metric. 	False: OSPF always chooses intra-area routes over inter-area routes for the same prefix, regardless of the metric.
How do ABRs handle Type 3 LSAs learned from nonbackbone areas during SPF calculation? 	ABRs ignore Type 3 LSAs learned in nonbackbone areas during SPF calculation, which prevents an ABR from choosing a route that goes into a nonbackbone area, and then back into the backbone.
Under what circumstances can an OSPF router modify or withdraw an LSA if that router did not originate the LSA itself? 	None. Only routers originating a particular LSA can modify or withdraw it.
What is true of an OSPF router with regard to processing LSAs that it did not itself originate? 	The router must process and flood the LSA within the LSA's defined flooding scope if the router recognizes the LSA's type and contents. The router must not ever change the LSA's contents, block it, or drop it before its maximum lifetime has expired.<div><br /></div><div>This ensures all OSPF routers in the area have the same LSDB contents and a consistent view of the network.</div>
Which two OSPF LSA types are not supported on Cisco routers? 	Type 6: MOSPF Group Membership<div>Type 8: BGP External Attributes (designed to carry BGP information during BGP-to-OSPF redistribution)</div>
What is OSPF LSA Type 1? 	Router: one per router per area, listing the router's RID and all interface IPs within the area.<div><br /></div><div>Flooded only within the area of origin.</div>
What is OSPF LSA Type 2? 	Network: one Type 2 LSA per transit network, created by the DR on the subnet and represents the subnet and the router interfaces connected to the subnet.<div><br /></div><div>Flooded only within its area of origin.</div>
What is OSPF LSA Type 3? 	Net Summary: created by ABRs to represent networks present in one area when being advertised into another area. Type 3 LSAs define the subnets and cost in the origin area, but no topology data.<div><br></div><div>Flooded only within its area of origin, reoriginated on ABRs.</div>
What is OSPF LSA Type 4? 	ASBR Summary: similar to Type 3 LSA, but advertises a host route used to reach the ASBR.<div><br /></div><div>Flooded only within its area of origin, reoriginated on ABRs.</div>
What is OSPF LSA Type 5? 	AS External: created by ASBRs for external routes injected into OSPF.<div><br /></div><div>Flooded to all regular areas.</div>
What is OSPF LSA Type 7? 	NSSA External: created by ASBRs inside an NSSA instead of Type 5.&nbsp;<div><br /></div><div>Flooded only within its area of origin and converted to Type 5 LSA on an ABR toward other areas.</div>
What is OSPF LSA Type 9? 	Opaque: Generic LSA with link-local flooding scope
What is OSPF LSA Type 10? 	Opaque: Generic LSA with area-local flooding scope. Used for MPLS-TE
What is OSPF LSA Type 11? 	Opaque: Generic LSA with autonomous-system flooding scope similar to Type 5 - flooded into normal areas but not into stubby areas and NSSAs.
What is an OSPF stub network? 	A subnet on which a router has not formed any neighbor relationships.<div><br /></div><div>This is different from a stub area.</div>
What is an OSPF transit network? 	A network over which two or more OSPF routers have become neighbors and elected a DR so that traffic can transit from one to the other.
How do you view an individual OSPF LSA? 	<b>show ip ospf database </b><i>lsa-type lsa-id</i>
What are two ways that OSPF can distribute information that a particular network that is no longer reachable? 	The appropriate Type 1 or Type 2 LSA can be reoriginated with the disconnected network removed from the LSA, or the LSA can be prematurely aged out by setting its age to 3600 seconds and flooding it, causing it to immediately expire from all LSDBs.
What basic information is described in an OSPF Type 1 LSA? 	-The originating router, and it's interfaces in that area<div>-List of neighboring routers in that area on each interface</div>
What three things are described in an OSPF Type 3 LSA? 	The subnet, mask, and the ABR's cost to reach that subnet
How do you view which OSPF routers are ABRs or ASBRs? 	<b>show ip ospf border-routers</b>
How can you view how many times the OSPF SPF algorithm has executed for each area? 	<b>show ip ospf statistics</b>
What is the term used to describe an OSPF router updating its computed shortest path tree based on updated costs from routers in other areas? 	partial run, partial SPF, or partial route calculation<div><br /></div><div>This is different from incremental SPF (iSPF)</div>
How do OSPF routers handle a Type 3 LSA being removed from the area? 	The routers check if another Type 3 LSA for the same network is available, and if not, the affected networks are removed from their routing tables without requiring an SPF run.
How does the information in a Type 3 LSA originated in one nonbackbone area get transmitted to another nonbackbone area? 	Type 3 LSAs are flooded only within the area originated by ABRs. A Type 3 LSA from one nonbackbone area is re-originated at the ABR into the backbone area. Other attached nonbackbone areas receive the re-originated Type 3 LSA at their respective ABRs, which then re-originate the Type 3 LSA into their respective nonbackbone areas.<div><br /></div><div>nonbackbone originated &gt; backbone re-originated &gt; nonbackbone re-originated</div>
When an OSPF ABR performs a SPF calculation, which Type 3 LSAs are used in the calculation? 	Only Type 3 LSAs received over the backbone area. Type 3 LSAs received over nonbackbone areas are skipped during the ABR's SPF computation, though they are stored in the ABR's LSDB and flooded within the nonbackbone area.
What is the difference between OSPF route types E1 and E2, and which is used by default in Cisco IOS? 	<div>E1 = both external and internal metrics added together</div><div>E2 = only external metric is considered by SPF when choosing best routes</div><div><br /></div><div>E2 = default</div>
With OSPF, if there are both E1 and E2 routes to the same external network, which is preferred? 	E1 is always preferred over E2
What general information is contained in an OSPF Type 5 LSA? 	<div>Subnet</div><div>Metric</div><div>Metric Type (E1/E2)</div>
How does OSPF decide which path to use when there are multiple E1 routes to the same destination? 	The cost of E1 routes are calculated as the cost to reach the ASBR, plus the cost of the external route. When multiple E1 routes are present for the same destination, the lowest total cost path is used. If multiple equal-cost paths are present, all are used.
How does OSPF decide which path to use when there are multiple E2 routes to the same destination? 	E2 routes only take the external metric into consideration. If there are multiple E2 routes available to the same destination network, the lowest cost E2 metric is used. If there are multiple E2 routes with the same metric, the path through the closest ASBR is used. If multiple equal-cost paths route through the same closest ASBR, all of them are used.
What is the OSPF E1/E2 route path selection process? 	-Prefer E1 over E2<div>-E1:</div><div>&nbsp; -If multiple, use lowest cost</div><div>&nbsp; -If multiple lowest cost, use all</div><div>-E2:</div><div>&nbsp; -If multiple, use lowest cost</div><div>&nbsp; -If multiple lowest cost, use closest ASBR</div><div>&nbsp; -If multiple lowest cost through closest ASBR, use all</div>
What are OSPF Type 4 LSAs used for? 	When an ABR floods a Type 5 LSA into another area, it also creates a Type 4 LSA. Routers in other areas use the Type 4 LSAs to know what ASBRs in other areas exist, what ABRs can be used to reach them, and what is the distance of each ABR to a particular ASBR.<div><br /></div><div>For a router in a different area from the ASBR, the cost of reaching the ASBR is the cost between the router and the ABR, plus the cost indicated in the Type 4 LSA toward a particular ASBR.</div>
What is the cost of an internal OSPF router in a nonbackbone area to reach an E1 route? 	Cost from internal router to ABR + cost from ABR to ASBR as advertised in the Type 4 LSA + external cost of route as advertised by the ASBR in the Type 5 LSA
What are the OSPF stub area types? 	Stubby<div>Totally stubby</div><div>NSSA</div><div>Totally NSSA</div>
What is common across all OSPF stub area types with regard to LSAs? 	Type 4 and Type 5 LSAs are not injected into any variation of a stub area, and are replaced with default routes instead.
What is the difference between an OSPF stubby and totally stubby area? 	Both stop the injection of Type 4 and Type 5 LSAs and replace them with a default route. Totally stubby areas take this a step further and replace all Type 3 LSAs with a default route as well.
What makes an OSPF area not-so-stubby? 	NSSA's have an ASBR present and inject Type 7 LSAs into the area, which are converted to Type 5 by the ABRs as the information leaves the area.
How do you configure an OSPF stub area? 	OSPF process on all routers in the area:<div><b>area </b><i>area </i><b>stub</b></div>
How do you configure an OSPF totally stubby area? 	OSPF process on the ABR:<div><b>area </b><i>area </i><b>stub no-summary</b></div><div><b><br /></b></div><div>OSPF process on internal routers:</div><div><b>area </b><i>area </i><b>stub</b></div><div><b><br /></b></div><div>The <b>no-summary </b>keyword is configured only on the ABR, because only the ABR is permitted to filter Type 3 LSAs.</div>
How do you configure an OSPF NSSA? 	OSPF process on all routers in the area:<div><b>area </b><i>area </i><b>nssa</b></div>
How do you configure an OSPF Totally NSSA? 	OSPF process on ABR:<div><b>area </b><i>area </i><b>nssa no-summary</b></div><div><b><br /></b></div><div><div>OSPF process on internal routers:</div><div><b>area&nbsp;</b><i>area&nbsp;<b>nssa</b></i></div><div><b><br /></b></div><div>The&nbsp;<b>no-summary&nbsp;</b>keyword is configured only on the ABR, because only the ABR is permitted to filter Type 3 LSAs.</div></div>
What is the purpose of an OSPF NSSA? 	The NSSA is used for areas where an ASBR is located, but the routers within the area do not need specific information about external networks located in other areas.
Why does the OSPF LSA Type 7 exist? 	Since Type 5 LSAs are not allowed inside any kind of OSPF stub area, Type 7 LSAs are used to distinguish the external information from normal Type 5 LSAs. By default, the ABR with the highest RID translates the Type 7 LSAs to Type 5 as the information leaves the area.
By default, which OSPF ABR performs Type 7 to Type 5 LSA translation for an NSSA? 	The ABR with the highest RID.
ABRs in OSPF stub areas automatically inject default routes, except for which variation? 	NSSA ABRs must be configured with <b>area </b><i>area </i><b>nssa default-information-originate </b>to advertise a default route.<div><br /></div><div>This applies to NSSAs only. Stubby, Totally stubby, and NSSA-TS areas all inject default routes automatically.</div>
True or False: OSPF considers E1 routes equivalent to N1 routes, and E2 equivalent to N2, with regard to path selection. 	True
Why does an OSPF ABR originating Type 3 LSAs translate only intra-area routes from a nonbackbone area and flood them into the backbone, or conversely, translate both intra- and inter-area routes from the backbone and flood them into a nonbackbone area? 	This process ensures the only valid way of an area learning about routes from another area is through the the backbone, and that the backbone is never fed a route that has already traversed the backbone.
Why does an OSPF ABR ignore all Type 3 LSAs received over nonbackbone areas when running the SPF algorithm? 	To ensure that an ABR does not traverse a nonbackbone area to reach a network that is located in the backbone or another nonbackbone area. An ABR never uses a nonbackbone area to reach an inter-area network.
"What path will OSPF router R2 use to reach subnet S1 and why?<div><img src=""OSPF Path Selection 1.png"" /></div> "	R2 &gt; R4 &gt; R5, even though the cost through R3 is less. This is because ABRs ignore Type 3 LSAs from nonbackbone areas for loop prevention. Since the link between R3 and R4 is within Area 1, R4 ignores the route to S1 through R3 and prefers its own more-costly route directly to R5.
"What path will OSPF router R2 use to reach subnet S1, and why?<div><img src=""OSPF Path Selection 2.png"" /></div> "	R2 &gt; R4 &gt; R3 &gt; R5, even though R4 has a direct link to R5. Because all of the links between R3, R4 and R5 reside within the same area, normal SPF rules apply whereby the lowest cost path is used to exit the area.
"What path will traffic coming from subnet S1 use to reach OSPF router R2 and why?<div><img src=""OSPF Path Selection 1.png"" /></div> "	R5 &gt; R3 &gt; R4 &gt; R2. Both R3 and R4 inject Type 3 LSAs into the backbone area to describe nonbackbone area 1. R5 then chooses the path with the least cost to reach area 1. However, traffic will be asymmetrically routed, because the return traffic will take the path R2 &gt; R4 &gt; R5 since Type 3 LSAs originated in nonbackbone areas are ignored by ABRs. Therefore, R4 ignores R3's Type 3 LSA describing subnet S1, even though it has a lower-cost path.
How do you configure the OSPF Fast Hello feature? 	Interface:<div><b>ip ospf dead-interval minimal hello-multiplier </b><i>hellos</i></div><div><b><br /></b></div><div>Where the dead-interval becomes fixed at one second, and <i>hellos </i>refers to the number of hellos to be sent every second.</div>
What are two ways that you can activate an interface for OSPF? 	OSPF process:<div><b>network </b><i>ip wildcard </i><b>area </b><i>area</i></div><div><i><br /></i></div><div>Interface:</div><div><b>ip ospf </b><i>process </i><b>area </b><i>area</i></div>
How do you configure OSPF to create a log message for each state change? 	OSPF process:<div><b>log-adjacency-changes detail</b></div>
How do you restart the OSPF process on a router? 	<b>clear ip ospf process</b>
How do you view the costs currently assigned to OSPF interfaces? 	<b>show ip ospf interface brief</b>
What information is provided in the output of <b>show ip ospf interface brief</b>? 	Per-interface details:<div>-PID</div><div>-Area</div><div>-IP/mask</div><div>-Cost</div><div>-State (P2P, DR, etc)</div><div>-Neighbors</div>
How do you configure the default OSPF cost calculation? 	<div>OSPF process:</div><div><b>auto-cost reference-bandwidth </b><i>Mbps</i></div>
True or False: When adjusting the OSPF reference-bandwidth cost, this value must match on all routers. 	False, though it is recommended to use the same values.
When calculating OSPF costs, the resulting value is rounded ___ to the nearest integer. 	Down<div><br /></div><div>Example: The default reference bandwidth is 100 Mbps. The cost of a serial link with its default bandwidth of 1.544 Mbps is 100 / 1.544 = 64.77, which is rounded down to an OSPF cost of 64.</div>
How do you set the OSPF cost for a particular neighbor? 	OSPF process:<div><b>neighbor </b><i>ip </i><b>cost </b><i>cost</i></div><div><i><br /></i></div><div>This is valid only on OSPF point-to-multipoint nonbroadcast network types.</div>
How do you set the OSPF cost value on an interface? 	Interface:<div><b>ip ospf cost </b><i>cost</i></div>
With regard to advertising secondary IP addresses, what is the difference between the OSPF process <b>network </b>command, and the interface <b>ip ospf area </b>command? 	OSPF process <b>network </b>command advertises stub networks for any secondary IP subnets matched by the <b>network </b>command<div><br /></div><div>Interface <b>ip ospf area</b> command includes all secondary subnets by default, unless the <b>secondaries none </b>parameter is used at the end of the command.</div>
What does the following command do?<div><br /></div><div><b>ip ospf </b><i>pid </i><b>area </b><i>area </i><b>secondaries none</b></div> 	By default, when using the <b>ip ospf area </b>command on an interface, all secondary IP subnets are advertised as stub networks. Including the <b>secondaries none </b>parameter at the end causes only the primary IP subnet to be advertised.
What is the difference between the way the <b>distribute-list </b>command works for RIP and EIGRP, versus OSPF and IS-IS? 	With RIP and EIGRP, the routes are filtered from the respective protocol's update messages.<div><br /></div><div>With OSPF and IS-IS, the LSDB within an area must be identical, so the <b>distribute-list </b>prevents the routes from being installed in the local IP routing table, but remain within the LSDB.</div>
With OSPF, how does the <b>distribute-list </b>command work differently in the inbound and outbound directions? 	The inbound direction applies to the results of SPF - LSAs are not filtered, but routes that SPF would choose to install into the local routing table are.<div><br /></div><div>The outbound direction applies only to redistributed routes, and only on an ASBR. It selects which redistributed routes will be advertised.</div>
How do you use a route-map to match on a router's RID? 	<b>access-list </b><i>num </i><b>permit </b><i>RID</i><div><i><br /></i></div><div>Route-map:</div><div><b>match ip route-source </b><i>acl-num</i></div>
What are the two ways to filter OSPF Type 3 LSA generation at the ABR? 	<b>area filter-list</b><div><b>area range</b></div>
How do you configure OSPF to filter Type 3 LSAs at the ABR based on a prefix-list? 	OSPF process on ABR:<div><b>area </b><i>area </i><b>filter-list prefix </b><i>prefix-list direction</i></div><div><i><br /></i></div><div>Where <i>direction </i>references whether the prefix list is applied to routes entering or leaving the specified area.</div>
How do you configure an OSPF inter-area summary to filter all included routes? 	OSPF process:<div><b>area </b><i>area </i><b>range </b><i>ip mask </i><b>not-advertise</b></div><div><b><br /></b></div><div>The <b>not-advertise </b>keyword causes both the subnets and the summary itself to be filtered, and is equivalent ot the <b>area filter-list </b>command with the <b>out </b>keyword.</div>
What does the <b>not-advertise </b>keyword of the OSPF <b>area range </b>command do? 	The <b>not-advertise </b>keyword causes both the included subnets and the summary itself to not be advertised, effectively filtering the routes.
Why must an OSPF virtual link pass through a regular OSPF area and not any variation of stub areas? 	Virtual links are not tunnels, but targeted OSPF sessions that allow two remote routers within a single area to become fully adjacent and synchronize their LSDBs. The transit area must be a regular area because packets routed through the transit area are forwarded based on their true destination addresses (as opposed to tunneling), which requires the transit area to know all networks in the OSPF domain (intra-area, inter-area, and external).
True or False: OSPF virtual links are always members of Area 0. 	True. When configuring virtual links, you specify the transit area, but the virtual link itself always belongs to Area 0.
How do you configure an OSPF virtual link? 	OSPF process:<div><b>area </b><i>transit-area </i><b>virtual-link </b><i>remote-RID</i></div>
How do you view the status of OSPF virtual links? 	<b>show ip ospf virtual-links</b>
How are OSPF virtual links represented internally to IOS? 	Unnumbered point-to-point interfaces
What happens if a nonbackbone area becomes partitioned due to link failure, but each partition has a reachable ABR? 	OSPF treats each partition as a separate area and overall connectivity is not disrupted.
How do you enable OSPF Type 0 authentication? 	Interface:<div><b>ip ospf authentication null</b></div>
How do you enable OSPF Type 1 authentication for an interface? 	Interface:<div><b>ip ospf authentication</b></div><div><b>ip ospf authentication-key </b><i>value</i></div>
How do you enable OSPF Type 2 authentication? 	Interface:<div><b>ip ospf authentication message-digest</b></div><div><b>ip ospf message-digest-key </b><i>number </i><b>md5 </b><i>value</i></div>
What is the default OSPF authentication type? 	Type 0: Null
How does OSPF graceful authentication key rollover work? 	Multiple MD5 keys with different key IDs are allowed per interface. When signing sent packets, OSPF uses the key that was last added to the interface (regardless of key number). When authenticating received packets, it uses the key ID indicated in the packet.&nbsp;<div><br /></div><div>When a neighbor detects a different key number from the receiving router, OSPF enters a key migration phase where all packets are sent as many times as the number of configured keys. After all neighbors are using the same key number, the migration phase ends.</div>
How can you verify the OSPF authentication processes? 	<b>debug ip ospf adj</b>
What is the purpose of the OSPF <b>area authentication </b>command? 	This changes the area's default authentication type. The default unconfigured authentication type is 0: Null. You can configure the area to default to Type 1 or Type 2 authentication with the <b>area </b><i>area </i><b>authentication </b>[<b>message-digest</b>] command. When this command is used, routers within the area will not form neighborships unless authentication is specifically configured.
Why must you configure OSPF virtual link authentication with the <b>area virtual-link </b>command? 	Virtual links have no underlying interfaces on which to configure authentication, as normal OSPF interfaces do. Virtual links are internal unnumbered point-to-point interfaces.
How do you configure authentication on OSPF virtual links? 	"Type 0: <b>area </b><i>area </i><b>virtual-link </b><i>router-id </i><b>authentication null</b><div>Type 1:<span style=""font-weight: bold""><span style=""font-weight: normal;"">&nbsp;</span>area&nbsp;</span><i>area</i><i style=""font-weight: bold; "">&nbsp;</i><b style=""font-weight: bold; "">virtual-link&nbsp;</b><i>router-</i><i>id</i><i style=""font-weight: bold; "">&nbsp;</i><b style=""font-weight: bold; "">authentication authentication-key </b><i>value</i></div><div>Type 2:&nbsp;<b style=""font-weight: bold; "">area&nbsp;</b><i>area</i><i style=""font-weight: bold; "">&nbsp;</i><b style=""font-weight: bold; "">virtual-link&nbsp;</b><i>router-id</i><i style=""font-weight: bold; "">&nbsp;</i><b style=""font-weight: bold; "">authentication message-digest message-digest-key </b><i>key-num </i><b>md5 </b><i>key-value</i></div>"
How does OSPF using cryptographic authentication with key chains use multiple keys? 	When multiple keys have a valid <b>send-lifetime</b>&nbsp;the key with the highest ID is used, which is the opposite of RIPv2 and EIGRP, which use the lowest ID key.
True or False: OSPF routers using MD5 authentication cannot interoperate with routers using the newer key-chain based cryptographic authentication. 	False: While you must use the newer key-chain based syntax to configure SHA authentication, you can specify MD5 as the authentication method associated with a particular key.
How do you configure extended cryptographic authentication on an OSPF virtual link? 	OSPF process:<div><b>area </b><i>area </i><b>virtual-link </b><i>RID </i><b>key-chain </b><i>key-chain&nbsp;</i></div>
What happens if you have both classic OSPF MD5 authentication and newer extended cryptographic authentication with key-chains configured on a router? 	The <b>ip ospf message-digest-key </b>commands are ignored.
How do you configure extended cryptographic authentication with OSPF? 	<b>key chain </b><i>name</i><div>&nbsp; <b>key </b><i>num</i></div><div>&nbsp; &nbsp; <b>cryptographic-algorithm </b><i>algorithm</i></div><div>&nbsp; &nbsp; <b>key-string </b><i>string</i></div><div><i><br /></i></div><div><b>interface </b><i>interface</i></div><div>&nbsp; <b>ip ospf authentication key-chain </b><i>name</i></div>
What is the general premise of the OSPF TTL security check feature? 	OSPF routers send their packets with the TTL set to 255. With the exception of virtual and sham links, OSPF routers should always receive OSPF packets with the TTL still set to 255 based on direct router-to-router communications. Packets received with a TTL of less than 255, outside of a virtual or sham link, should therefore be dropped because they could be malicious.
How do you enable the OSPF TTL security check mechanism? 	Interface:<div><b>ip ospf ttl-security</b></div><div><b><br /></b></div><div>OSPF process:</div><div><b>ttl-security all-interfaces</b></div>
If the OSPF TTL security mechanism is enabled for all interfaces under the OSPF process, how do you disable it for specific interfaces? 	Interface:<div><b>ip ospf ttl-security disable</b></div>
How do you enable the OSPF TTL security mechanism, but relax the strict hop count of 255? 	Either at the interface or at the process level with the <b>hops </b><i>count </i>parameter. The check will be against 255 - <i>count </i>and any received OSPF packets outside the range are dropped.<div><br /></div><div>Interface:</div><div><b>ip ospf ttl-security hops </b><i>count</i></div><div><i><br /></i></div><div>OSPF process:</div><div><b>ttl-security all-interfaces hops </b><i>count</i></div>
When configuring the OSPF TTL security mechanism, you can relax the setting by adjusting the hop count. Why is the minimum value for this setting 1? 	When IOS processes received OSPF packets, the TTL is decremented by one before handing the packet to the OSPF process, unless the TTL is already one, in which case the number is not decremented.&nbsp;<div><br /></div><div>This is considered a peculiarity of IOS and is not considered standard behavior.</div>
When OSPF is configured for the TTL security mechanism either under the OSPF process or directly on an interface, how are OSPF virtual and sham links affected? 	OSPF virtual and sham links are unaffected by these settings. Virtual and sham links can be protected with the TTL security mechanism directly with the <b>area virtual-link ttl-security hops&nbsp;</b>or <b>area sham-link ttl-security hops&nbsp;</b>commands. The <b>hops </b>parameter is mandatory.
What is the recommended process of migrating OSPF routers to use the TTL security mechanism? 	First activate the feature with the hop count set to 254, which effectively configures but does not enforce the feature. After routers have been migrated, set the hop count to the default of 1.<div><br /></div><div>For interfaces toward routers that do not support the TTL security check, configure <b>ip ospf ttl-security disable</b></div>
What is SPF throttling? 	A variable-length wait interval between two consecutive SPF runs.
What three parameters control SPF throttling? 	SPF-start<div>SPF-hold</div><div>SPF-max-wait</div>
What is the SPF throttling SPF-start parameter? 	The initial wait interval before an SPF computation, if the network has been stable for a prolonged period of time.
What is the SPF throttling SPF-hold parameter? 	The wait time between subsequent SPF runs, whose value doubles for each consecutive SPF run.
What is the SPF throttling SPF-max-wait parameter? 	The maximum time between two SPF runs. During consecutive SPF runs, the SPF-hold parameter value doubles, up to the limit of the SPF-max-wait parameter value.<div><br /></div><div>The SPF-max-wait value also defines the amount of time during which the network must be stable for the wait interval to be set back to SPF-start and the SPF-hold back to is preconfigured value.</div>
With SPF throttling, if the network has been stable for the last SPF-hold period, but not for the entire SPF-max-wait time since the last SPF run, what happens? 	The wait interval returns to the SPF-start value, but the subsequent wait is still set to twice the previous SPF-hold value.
With SPF throttling, assuming the network has been stable for a prolonged period of time, what happens when an updated LSA arrives? 	The router schedules an SPF run for the value of SPF-start seconds in the future. For example, if the value is set to 10, an SPF run will occur 10 seconds after the LSA is received. Any other updates LSAs received within the 10 seconds are included in the SPF run.
With SPF throttling, what happens when the first SPF run occurs? 	The router sets the next wait interval to the initial SPF-hold value. If any updated LSAs arrive during the next seconds until the SPF-hold value, SPF will run at the expiration of the SPF-hold value.
With SPF throttling, when is the network considered stable? 	The network is considered stable if no updated LSAs are received with SPF-max-wait seconds after the last SPF run.
With SPF throttling, what happens if updated LSAs are received after a second consecutive SPF run, but before the SPF-max-wait timer expires? 	After each SPF run (except for the initial run), the SPF-hold value is doubled, and the next scheduled SPF run occurs when that value expires.<div><br /></div><div>For example, if the SPF-hold value is 20 seconds after the second consecutive SPF run, it is doubled to 40 seconds. Any received updated LSAs within the next 40 seconds are included in the next scheduled SPF run.</div>
With SPF throttling, after an SPF run, what happens if an updated LSA arrives after the SPF-hold time expires, but before the SPF-max-wait time expires? 	After the SPF-hold time expires, if an updated LSA arrives before the SPF-max-wait time expires, the next SPF run will be in the number of seconds defined by the SPF-start value, but the SPF-hold time remains at its current value until SPF-max-wait seconds have passed without an LSA update.
With SPF throttling, what happens to the SPF-hold timer if SPF-max-wait seconds have elapsed with no updated LSAs? 	The SPF-hold timer is reset to its configured value if SPF-max-wait seconds have passed with no updates.
How do you configure the OSPF SPF throttling timers? 	OSPF process:<div><b>timers throttle spf </b><i>spf-start spf-hold spf-max-wait</i></div>
How do you verify the current OSPF SPF throttling timer values? 	<b>show ip ospf</b><div><b>debug ip ospf spf statistic</b></div>
What is OSPF LSA Throttling? 	LSA throttling works exactly like SPF throttling. Whereas SPF throttling controls how often SPF runs are performed, LSA throttling controls how frequently updated LSAs are allowed to be re-originated.
How do you configure OSPF LSA throttling? 	OSPF process:<div><b>timers throttle lsa all </b><i>start-interval hold-interval max-interval</i></div>
How can you verify the current OSPF LSA throttling wait intervals? 	<b>debug ip ospf database-timer rate-limit</b>
How do you throttle received OSPF LSAs? 	OSPF process:<div><b>timers lsa arrival </b><i>milliseconds</i></div><div><i><br /></i></div><div>The default is 1 second (1000ms). If two more more identical LSAs arrive within 1 second, only the first one is accepted, and the remaining are dropped.</div><div><br /></div><div>The minimum LSA arrival interval should be less than the neighbors' intial hold interval in LSA throttling, otherwise a neighbor would be allowed to send updated LSAs faster than the router would be willing to accept them.</div>
With OSPF LSA throttling, why should the minimum LSA arrival interval be less than the neighbors' initial LSA throttling hold value? 	The neighbor would be allowed to send an updated LSA sooner than the router would be willing to accept it.
What is OSPF Incremental SPF? 	Incremental SPF causes the router to maintain more information in the SPT about transit nodes' parent and neighbor nodes, which allows SPF to recalculate only those portions of the SPT that are affected by a topology change.<div><br /></div><div>For example, if a topology change occurs several hops away within the same area, but the router must still use the same path(s) to reach the changed topology, iSPF only needs to recalculate the affected changes instead of the entire SPT.</div>
How do you configure OSPF Incremental SPF? 	OSPF process:<div><b>ispf</b></div>
True or False: OSPF Incremental SPF must be configured on all OSPF routers within an area. 	False. It can be enabled/disabled individually. ISPF is essentially a local optimization.
What are the four possible link types that can be described by an OSPF Type 1 LSA? 	-Point-to-point link to another router (other router's RID)<div>-Link to a transit network (IP of DR)</div><div>-Stub network</div><div>-Virtual link</div>
How does OSPFv2 prefix suppression work with Type 1 LSAs? 	Transit link prefixes are suppressed by omitting stub network entries that contain prefixes on point-to-point interfaces to other routers.
How does OSPFv2 signal prefix suppression with Type 2 LSAs? 	The netmask in the LSA is set to 255.255.255.255 to signal to compatible routers that the LSA contains no prefix information. Incompatible routers simply install a /32 host route.
How do you configure OSPFv3 prefix suppression? 	OSPF process:<div><b>prefix-suppression</b></div><div><b><br /></b></div><div>Optionally per-interface:</div><div><b>ip ospf prefix-suppression</b></div><div><b><br /></b></div><div>Disable per-interface when enabled globally:</div><div><b>ip ospf prefix-suppression disable</b></div>
When an OSPFv2 router has prefix suppression enabled, what exactly is suppressed? 	All prefixes on all OSPF-enabled interfaces are suppressed except for loopbacks, secondary IPs, and prefixes on passive interfaces, since all of those are considered nontransit prefixes.
What is the purpose of the OSPF stub router feature? 	To prevent the router from becoming a transit router.
How does the OSPF stub router feature work? 	When configured, the OSPF stub router advertises its own Type 1 LSAs with an infinite metric (16M) for all transit-type adjacencies, while stub network adjacencies continue to be advertised with their normal metrics.
What is a common use case for the OSPF stub router feature? 	An ASBR redistributing BGP routes into the OSPF domain is a good candidate for the OSPF stub router feature because BGP usually converges slower than OSPF. For example, if OSPF is advertising a default route, but depends on BGP for actual reachability, OSPF will still advertise the default route before BGP has converged, causing traffic blackholing. The OSPF stub router feature uses timers to prevent this situation.
How do you configure the OSPF stub router feature? 	Two variations under the OSPF process:<div><b>max-metric router-lsa on-startup</b><i><b>&nbsp;</b>seconds</i></div><div><b>max-metric router-lsa on-startup wait-for-bgp</b></div><div><b><br /></b></div><div>The first variation activates the stub router feature for the specified number of seconds after the OSPF process starts. The second variation waits for BGP to converge, up to a maximum of 10 minutes.</div>
What is OSPF graceful restart? 	The router can restart the OSPF process while packets continue to be forwarded.<div><br /></div><div>Graceful Restart is the standardized version of Cisco's Non Stop Forwarding (NSF).</div>
How do you enable OSPF Graceful Restart or Cisco Non Stop Forwarding (NSF)? 	OSPF process:<div><b>nsf</b></div>
What is the difference between Cisco NSF-capable and NSF-aware devices? 	NSF-capable devices have forwarding hardware independent from the main CPU.<div><br /></div><div>NSF-aware devices can act as helpers to NSF-capable devices to allow them to perform a graceful restart of a supported routing protocol process while maintaining the adjacency.</div>
What is the role of an NSF-aware device during a neighbor's routing protocol graceful restart? 	The NSF-aware device maintains the neighbor adjacency and continues to use the neighbor for forwarding traffic, despite the lack of Hellos, during the neighbor's restart of the routing protocol process.
How does an OSPF router signal that it is about to perform a graceful restart? 	"The router whose OSPF process is restarting notifies its neighbors with a Type 9 ""grace"" LSA (opaque, link-local scope) containing the estimated duration of the restart (the grace period), the reason of the restart, and the IP of the restarting router if on a multiaccess network."
True or False: Graceful Restart / NSF helper mode must be explicitly enabled. 	False: It is enabled by default for platforms that support the feature. It can be disabled under the routing protocol process with:<div><b>nsf helper disable</b></div>
What is a neighbor requirement for successful routing protocol graceful restart? 	All neighboring fully-adjacent routers must operate in helper mode.
How do you enable OSPF graceful shutdown? 	OSPF process:<div><b>shutdown</b></div><div><b><br /></b></div><div>Alternatively, you can issue the command per-interface:</div><div><b>ip ospf shutdown</b></div>
How do you enable regular OSPFv3? 	Directly on the interface:<div><b>ipv6 ospf </b><i>pid </i><b>area </b><i>area</i></div><div><i><br /></i></div><div>This automatically instantiates the <b>ipv6 router ospf </b><i>pid </i>process globally.</div>
With OSPFv3, what is the default with regard to advertising IPv6 addresses on an interface? 	All IPv6 networks on an interface are advertised by default.
True or False: The OSPFv3 RID must always be set manually. 	False: OSPFv3 can set its 32-bit RID automatically based on the same rules as OSPFv2, however the RID must be set manually if no IPv4 addresses are available.
What are the three OSPFv3 LSA flooding scopes? 	-Link-local, used for Link LSAs<div>-Area, used for Router, Network, Inter-Area Prefix, Inter-Area Router, Intra-Area Prefix LSAs</div><div>-AS, used for AS External LSAs</div>
How do you configure multiple OSPFv3 instances? 	Interface:<div><b>ipv6 ospf </b><i>pid </i><b>area </b><i>area </i><b>instance </b><i>instance</i></div>
An OSPFv3 link is equivalent to an OSPFv2 ___? 	network
With the exception of virtual links, which address does OSPFv3 use to source OSPFv3 packets from? 	The link-local address of the interface.<div><br /></div><div>Virtual links use globally-scoped IPv6 addresses.</div>
OSPFv2 expresses networks in LSAs as the network address and mask. How does OSPFv3 express networks in LSAs? 	Prefix, Length
How does OSPFv3 handle Type 1 and Type 2 LSAs differently than OSPFv2? 	OSPFv3 separates the topology from the NLRI. With OSPFv2, Type 1 &amp; 2 LSAs contain addressing information as well as RIDs. OSPFv3 moves the addressing information to Type 8 &amp; 9 LSAs. By doing this, if the NLRI changes, but the topology remains the same, SPF does not need to be recalculated.
With OSPFv3, what are Type 9 LSAs used for? 	IPv6 prefixes on individual interfaces of a router are carried in Type 9 LSAs with area flooding scope.&nbsp;<div><br /></div><div>IPv6 prefixes associated with a transit network are pointed to a Type 2 Network LSA.</div><div><br /></div><div>IPv6 prefixes associated with a router are pointed to a Type 1 Router LSA.</div><div><br /></div><div>Type 9 LSAs allow for separation of NLRI from topology.</div>
What are OSPFv3 Type 8 LSAs used for? 	IPv6 unicast routing uses link-local addresses for the next-hop. Each router advertises its link-local address in a Type 8 LSA, which has link-local flooding scope and is never flooded beyond the receiving neighbor on the link.
What is the requirement when manually configuring OSPFv3 neighbors? 	You must use link-local addresses. All other addresses are rejected.
What is true of configuring both OSPFv2 and OSPFv3 on NBMA networks? 	"Nonbroadcast networks need manual neighbor configuration.<div><br /></div><div>""Nonbroadcast Needs Neighbors""</div>"
What does the command <b>ipv6 ospf network point-to-point </b>do when configured on a loopback interface? 	It makes the network appear as a /64 instead of a /128 in the routing table.
How do you configure OSPFv3 authentication on a link? 	Interface:<div><b>ipv6 ospf authentication </b><i>parameters</i></div><div><i><br /></i></div><div>The <i>parameters </i>must match on both ends of the link.</div>
How do you configure OSPFv3 encryption on a link? 	Interface:<div><b>ipv6 ospf encryption&nbsp;</b><i>parameters</i></div><div><i><br /></i></div><div>The&nbsp;<i>parameters&nbsp;</i>must match on both ends of the link.</div>
How do you configure OSPFv3 authentication or encryption for an area? 	OSPFv3 process:<div><b>area </b><i>area </i>{<b>authentication </b>| <b>encryption</b>} <i>parameters</i></div><div><i><br /></i></div><div>The <i>parameters </i>must match on all routers in the area. Interface-level commands override area-level commands.</div>
How do you configure OSPFv3 Authentication Trailer? 	<div>Interface:</div><div><b>ospfv3 authentication key-chain </b><i>keychain</i></div>
How is multi-AF OSPFv3 configured in IOS? 	<div>Global:</div><b>router ospfv3 </b><i>pid</i><div><i><br /></i></div><div>Interface:</div><div><b>ospfv3 </b><i>pid afi </i><b>area </b><i>area</i></div>
What are the OSPFv3 base instance ID values? 	0: IPv6 Unicast<div>32: IPv6 Multicast</div><div>64: IPv4 Unicast</div><div>96: IPv4 Multicast</div><div><br /></div><div>128-191 = Unassigned</div><div>192-255 = Private</div>
What is the purpose of the OSPFv3 instance ID? 	The instance ID allows multiple OSPFv3 processes to communicate over the same link while remaining separate.
What do OSPFv3 instance ID values indicate? 	The types of addresses advertised in Type 8 &amp; 9 LSAs.
When configuring OSPFv3 multiple address family support, what instance ID is automatically chosen, if not specified manually? 	The base instance ID for the address family type:<div><br /></div><div>0 IPv6 Unicast</div><div>32 IPv6 Multicast</div><div>64 IPv4 Unicast</div><div>96 IPv4 Multicast</div>
When running multiple OSPFv3 instances under a single OSPFv3 process, what is shared among the instances? 	The instances are each run completely independent of each other, even under the same OSPFv3 process. In addition to addresses being separated, the topology is calculated seperately per-instance as well.
When is the OSPFv3 AF-bit set? 	The AF-bit in the Options bitfield inside OSPFv3 Hello, DBD, and LSA packets is set when the sending router supports the AF extension and the particular instance is not an IPv6 unicast instance.<div><br /></div><div>An OSPFv3 router supporting address families keeps the bit cleared for IDs 0 - 31, and sets it for all other instance IDs.</div>
What happens if an OSPFv3 router receives a packet with the AF-bit cleared in instances other than 0 - 31? 	It indicates the router does not support multiple address families, and both routers must use instance IDs within 0 - 31 to form an IPv6 unicast adjacency.
True or False: OSPFv3 using non-IPv6 address families still requires full IPv6 addressing and support between neighbors. 	True. All OSPFv3 packets are encapsulated into IPv6 using link-local addresses between routers, even if carrying only IPv4 reachability information (for example).
True or False: OSPFv3 supports virtual links only for the IPv6 unicast address family. 	True. This is because all OSPFv3 packets are encapsulated in IPv6 packets using link-local addressing, regardless of the address family contained in the NLRI.
How does OSPFv3 prefix suppression compare to OSPFv2? 	Prefix suppression in OSPFv3 works by omitting suppressed transit link prefixes from the Type 8 &amp; 9 LSAs, whereas with OSPFv2 this information is carried in Type 1 &amp; 2 LSAs.<div><br /></div><div>OSPFv2 and OSPFv3 prefix suppression both apply to all interfaces except loopbacks, passive interfaces, and secondary IPv4 addresses.</div>
How does graceful shutdown work with OSPFv3? 	The shutdown occurs over the Dead interval.<div><br /></div><div>-Hello packets are sent with priority 0</div><div>-Hello packets are no longer accepted</div><div>-All originated LSAs except Type 1 are flushed</div><div>-Type 1 LSAs are flooded with max cost 65K</div><div>-After Dead interval, flush all Type 1 LSAs</div><div>-Stop sending and processing OSPFv3 packets</div>
What is the OSPF flood pacing timer? 	The interval between successive LSUs when flooding LSAs. Configured per-interface, default 33ms
What is the OSPF retransmission pacing timer? 	The interval between retransmitted packets as part of a single retransmission event. Configured per-interface, default 66ms
What is the range of values for OSPF single interface cost? 	1 - 65535
What is the range of values for OSPF complete route cost? 	1 - 16M
What cost value is considered infinite for an OSPF route? 	16M
What is the range of values for the OSPF reference bandwidth? 	1 - 4B in units of Mbps (default 100)
What is the ISO OSI term for an interface? 	Circuit
What type of addressing is used in OSI networks? 	NSAP, Network Service Access Point, which represents an address of a particular network service on a particular network node.
TCP/IP uses per-___ addressing, whereas NSAP addressing is per-___. 	interface<div>node</div>
What are the two main parts of an NSAP address? 	IDP Initial Domain Part<div>DSP Domain Specific Part</div>
What two fields are in the Initial Domain Part (IDP) of an NSAP address? 	AFI (Authority and Format Identifier)<div>IDI (Initial Domain Identifier)</div><div><br /></div><div>Together, they indicate the routing domain (autonomous system) in which the node is located.</div>
What three fields are in the Domain Specific Part (DSP) of an NSAP address? 	-HO-DSP (High-Order DSP), indicates area of domain where the node is located<div>-System ID, unique identifier of the node itself</div><div>-SEL/NSEL/NSAP Selector, identifies service in or above the network layer</div>
What is the size range of NSAP addressing? 	8 - 20 octets
What is the name of an NSAP address where the SEL octet is 0? 	NET Network Entity Title<div><br /></div><div>When the SEL is 0, no particular service is being addressed, and the entire NSAP address identifies the destination node itself without referring to any particular service.</div>
How are NSAP addresses usually formatted? 	A dot after the first octet (2 hex digits), and dots between two-octet groups:<div><br /></div><div>49.0001.0000.1111.2222.00</div><div><br /></div><div>Dots are arbitrary, carry no significance, and are not required.</div>
What is the typical format for NSAP addresses used with IS-IS? 	49.xxxx.yyyy.yyyy.yyyy.00<div><br /></div><div>x = area ID</div><div>y = system ID</div>
With IS-IS, there is no concept of a subnet. How is routing between two networks accomplished? 	Each IS assembles a list of all attached ES nodes and advertises the list to its neighbors. When a packet is routed, it is encapsulated into a frame addressed to the next directly attached hop identified by its Layer 2 address.
What are Layer 2 addresses referred to in OSI networks? 	SNPA Sub Network Point of Attachment
How does IS-IS distinguish between interfaces on the same node in Cisco IOS? 	Each IS enumerates its interfaces with a locally-significant 1-octet number called the Local Circuit ID, which increments by 1 with every interface added to the IS-IS instance, beginning with 0 on Cisco routers.
What are the four levels of routing in OSI networks? 	-Level 0: between two ES nodes on the same link, or between an ES node and its nearest IS<div>-Level 1: between ES nodes in a single area of a domain</div><div>-Level 2: between ES nodes in different areas of a domain</div><div>-Level 3: between ES nodes in different domains</div>
How is OSI Level 0 routing established and maintained? 	ES nodes send ESH ES Hello messages<div>IS nodes send ISH IS Hello messages</div><div><br /></div><div>Level 0 routing is also known as ES-IS routing. This is similar in concept to IPv6 RA and NA messages.</div>
How does OSI Level 2 routing work? 	At Level 2, IS nodes do not advertise the list of connected ES nodes. Instead, they exchange area prefixes.&nbsp;<div><br /></div><div>When a Level 1 IS determines that the destination ES is in a different area, the packet is forwarded toward the nearest IS capable of Level 2 routing, regardless of the destination area.&nbsp;</div><div><br /></div><div>The packet is then forwarded by Level 2-capable IS nodes until it reaches the destination area, where it is again forwarded by Level 1 IS nodes.</div>
OSI Level 1 routes by ___, whereas Level 2 routes by ___. 	System ID<div>Area prefix</div>
OSI Level 3 routing was originally accomplished with ___, but is being replaced by MP-BGP. 	IDRP Inter Domain Routing Protocol
What are the four metric types defined in the original IS-IS specification? 	Default<div>Delay</div><div>Expense</div><div>Error</div><div><br /></div><div>Each metric is intended to be evaluated individually, creating four independent SPTs</div><div><br /></div><div>Most IS-IS implementations only support the Default metric.</div>
What is the default metric assigned to all IS-IS interfaces in Cisco IOS? 	10, regardless of bandwidth
How do you change the IS-IS metric on an interface? 	Interface:<div><b>isis metric </b><i>metric </i>[<i>level</i>]</div>
What is the range of metric values for IS-IS narrow metrics? 	Attached network: 1 - 63 (6-bit)<div>Complete path: 1 - 1023 (10-bit)</div>
What is the range of values of IS-IS wide metrics? 	Interface: 1 - 16M (24-bit)<div>Path: 1 - 4B (32-bit)</div>
True or False: All IS-IS routers in an area must use the same type of metrics (narrow or wide). 	True
What types of adjacencies are established between Level 1 and Level 2 routers in IS-IS? 	-Two Level 1 routers form a Level 1 adjacency if the area matches<div>-Two Level 2 routers form a Level 2 adjacency</div><div>-Two Level 1 + Level 2 routers for a separate adjacency for Level 1 and Level 2</div><div>-A Level 1 and a Level 2 router do not form adjacencies</div><div>-A Level 1 + Level 2 router forms a single adjacency with a Level 2 router, or a Level 1 router in the same area</div>
How many areas can an IS-IS Level 1 router belong to? 	One
How many LSDBs are maintained for IS-IS routers? 	One for each participating Level (so a Level 1 + Level 2 router maintains two LSDBs).
IS-IS Link State PDUs (LSPs) are equivalent to what in OSPF? 	Link State Updates containing LSAs
What are the four basic IS-IS packet types? 	Hello<div>LSP Link State PDU</div><div>CSNP Complete Sequence Numbers PDU</div><div>PSNP Partial Sequence Numbers PDU</div>
With IS-IS, what is the difference between Hello packets on broadcast interfaces versus point-to-point? 	Broadcast interfaces use separate Hello packet types for L1 and L2 adjacencies<div><br /></div><div>P2P interfaces use a single L1L2 Hello, aka a P2P Hello</div>
What is the default IS-IS Hello interval? 	10 seconds
How is the IS-IS hold time specified? 	The Hold time is specified as the Hello Multiplier, whose default is 3 (30 seconds)
True or False: IS-IS timers must match between nodes for adjacency. 	False
How are timers calculated on an IS-IS DIS? 	Timers are always 1/3 of their configured values (Hello 3.3s and Hold 10s by default), so that detecting a DIS or a DIS outage occurs more quickly.
OSPF uses LSAs inside the LSDB to convey link-state information. How is this done with IS-IS? 	IS-IS uses LSPs (Link State PDUs) containing TLVs
How are IS-IS LSPs uniquely identified? 	LSPID = System ID + Pseudonode ID + LSP Number<div><br /></div><div>System ID is taken from the router's NET</div><div>Pseudonode ID is 0 when the LSP describes the router itself</div><div>LSP Number is the fragment number</div>
How do IS-IS LSP sequence numbers work? 	32-bit unsigned integer starting at 0x00000001 - 0xFFFFFFFF and incremented each time the LSP is modified
What happens when an IS-IS LSP reaches its maximum sequence value? 	Unlike OSPF, the number does not wrap around and the LSP must be expired and re-originated, though this is uncommon due to the size of the LSP sequence number space.
What is the default IS-IS LSP remaining lifetime value? 	20 minutes, with IS-IS routers refreshing self-originated LSPs every 15 minutes
What is the process of the IS-IS LSP Purge? 	When an LSP's remaining lifetime reaches 0 (whether by actually timing out or set purposely), the router deletes the LSP's body from the LSDB, but keeps its header and advertises the empty LSP with the remaining lifetime set to 0.<div><br /></div><div>The expired LSP is finally purged from the LSDB after the ZeroAgeLifetime which is 60 seconds by default, though Cisco routers hold the empty LSP for an additional 20 minutes.</div>
Why must the MTU match between all routers in an IS-IS flooding scope (Level 1 area, or all Level 2 routers)? 	LSPs are fragmented based on the originating router's MTU, and only the originating router is allowed to fragment or otherwise modify LSPs.&nbsp;<div><br /></div><div>The MTU must be set to be equal to or smaller than the lowest MTU link within the flooding scope.&nbsp;The originating router can adjust the MTU under the IS-IS process with <b>lsp-mtu </b><i>mtu </i>whose default value is 1497.</div>
True or False: IS-IS node hostnames are carred within LSPs. 	True. You can view adjacent neighbors hostnames with <b>show isis hostname </b>which also displays the neighbors' System ID.
How do you view the contents of the IS-IS LSDB? 	<b>show isis database</b>
How do you view the contents of an IS-IS LSP? 	<b>show isis database detail</b>
With IS-IS, how many LSPs are generated by each router? 	Each IS-IS router generates a single (possibly fragmented) LSP describing itself and all relevant topological information.<div><br /></div><div>The DIS on multiaccess networks also generates a Pseudonode LSP for each network for which it is the DIS, which contains topological information about the network itself, and the list of connected routers.</div>
With IS-IS, what happens if a single TLV needs to be modified within an LSP? 	The originating router must regenerate and reflood the entire LSP.
IS-IS CSNPs and PSNPs are equivalent to what in OSPF? 	IS-IS CSNPs are equivalent to OSPF DBDs<div>IS-IS PSNPs are equivalent to OSPF LSRs and LSAcks</div>
What is contained in an IS-IS CSNP? 	A complete list of LSPs in the sender's LSDB.
True or False: A single IS-IS PSNP can request or acknowlege multiple LSPs. 	True
What network types are recognized by IS-IS? 	Broadcast / multiaccess<div>Point-to-Point</div><div><br /></div><div>Partial-mesh (such as hub-and-spoke) is not directly supported and should be run as a collection of point-to-point links.</div>
What are the IS-IS adjacency states? 	-Down - no IIHs have been received from the neighbor<div>-Initializing - IIHs have been received, but it is not yet certain of the neighbor is receiving IIHs from this router</div><div>-Up - both routers have received each other's IIHs and bidirectional communications are established</div><div><br /></div><div>Verifiying adjacencies, as well as synchronization and flooding is different depending on if the network is P2P or broadcast.</div>
How did IS-IS originally establish neighbors on P2P links, what was the issue with this, and how was it resolved? 	The original IS-IS specification said that an adjacency on P2P links could be formed as soon as a P2P IIH was received from the neighbor. The issue with this is that bidirectional communications are not confirmed. This was resolved with a newer three-way handshake process which included router and interface IDs.
How can an IS-IS router support more than 256 point-to-point interfaces? 	The Local Circuit ID is a 1-octet field. Newer implementations of IS-IS are capable of the point-to-point three-way handshake, which introduces the 4-octet Extended Local Circuit ID field.
The IS-IS P2P three-way handshake is based on each router on a P2P link advertising an adjacency state TLV in its packets. What fields are in the adjacency state? 	-Adjacency Three-Way State - the state as seen by the sending router<div>-Extended Local Circuit ID - ID of sending router's interface</div><div>-Neighbor System ID - value of neighbor whose IIHs have been received</div><div>-Neighbor Extended Local Circuit ID - value from received IIHs</div>
How do you enable the IS-IS point-to-point three-way handshake? 	Interface:<div><b>isis three-way-handshake ietf</b></div>
How do you configure IS-IS CSNPs to be sent periodically on P2P interfaces? 	Interface:<div><b>isis csnp-interval </b><i>interval </i>[<i>level</i>]</div><div><br /></div><div>Cisco routers do not send CSNPs on P2P links after the initial adjacency buildup by default, but some IS-IS implementations do.</div>
What is the Ethernet frame format for IS-IS packets? 	LLC format frames with DSAP and SSAP both set to 0xFE
Which MAC address are IS-IS frames sent to on Ethernet networks? 	0180.c200.0014 Level 1<div>0180.c200.0015 Level 2</div>
How is a DIS elected in IS-IS? 	Highest interface priority<div>Highest SNPA (MAC address)</div><div>Highest System ID (in case SNPAs are not comparable, such as with FR and ATM)</div>
For IS-IS DIS elections, how do you configure the interface priority value? 	<div>Interface:</div><div><b>isis priority </b><i>priority </i>[<i>level</i>]</div>
True or False: IS-IS DIS elections are always preemptive. 	True. DIS elections are performed with each received IIH.
True or False: An IS-IS router with an interface priority of 0 is ineligible for DIS election on a broadcast link. 	False. Unlike OSPF, IS-IS priority 0 is simply the lowest priority, but does not exempt a router from participating in the DIS election.
How are adjacencies handled in IS-IS on a broadcast link? 	The routers all become fully adjacent with each other, regardless of the DIS.
What two operations are the responsibility of the IS-IS DIS? 	-Helping routers on the broadcast segment to synchronize by sending CSNPs periodically<div>-Representing the broadcast segment in the LSDB as a standalone object (Pseudonode)</div>
How does synchronization of IS-IS routers on a broadcast segment work? 	The DIS sends a CSNP reflecting the contents of its LSDB every 10 seconds by default. When the other routers receive the CSNP, they compare it against their own LSDB, and either create a PSNP request, or flood missing LSPs onto the segment.
How does IS-IS DIS implicit acknowledgement work? 	The DIS acts as a reference point of comparison. If the DIS is missing an LSP, the originating router floods it to the DIS. The DIS should then advertise it with its next regular CSNP advertisement (10s default). If the CSNP does not contain the LSP, the originating router floods it again.
With IS-IS pseudonode LSPs, what is the System ID and Pseudonode ID set to? 	System ID = the System ID of the DIS<div>Pseudonode ID = Local Circuit ID of the DIS's interface in the network</div>
How can you verify IS-IS adjacencies? 	<b>show isis neighbors</b>
How can you view interface-level details for IS-IS? 	<b>show clns interface </b><i>interface</i>
Why does IS-IS not require a backup DIS? 	The router acting as the DIS uses Hello/Hold times of 1/3 of the configured values. Since all routers are adjacent with each other, if the DIS fails, another router can become the DIS by simply replacing the old Pseudonode LSP with one that it generates, and flooding the LSP to the neighbors.
True or False: IS-IS routers belong to a single area only, but can have multiple NSAP addresses assigned. 	True. Up to three NSAP addresses can be assigned to a single IS-IS instance, with the requirement of the System ID being identical, but with a different area ID. IS-IS routers are intended to have a single NSAP address, so adding multiple causes the areas to merge.<div><br /></div><div>Assigning multiple NSAP addresses to a router is a temporary situation used to facilitate splitting or merging areas.</div>
How does IS-IS advertise IP networks between areas? 	Each Level 2 router advertises its directly connected IP networks as well as all other Level 1 routes from its own area (with appropriate metrics).<div><br /></div><div>IP routing information flows from L1 into L2, but not from L2 into L1 unless specfically configured, and L2 routers establish adjacencies regardless of their areas.</div>
IS-IS Level 1 routers operate similar to routers in what type of OSPF area? 	NSSA-TS. Level 1 routers can perform redistribution from external sources, but can see routes within their own area and nothing more.
What is the default IS-IS level on Cisco routers? 	Both Level 1 and Level 2 are enabled by default.
What is the IS-IS ATT flag? 	When an L1L2 router determines (though L2 SPF) that it can reach areas other than its own, it sets the ATT (attachment) flag on its L1 LSP.<div><br /></div><div>L1 routers in the area can use any router with the ATT flag set to reach other areas, and automatically install a default route pointing toward the nearest L2 router advertising the ATT flag.</div>
What is the IS-IS P-bit? 	Partition repair. The functionality is similar to OSPF virtual links. The value is always set to 0 because Cisco and most other IS-IS implementations, do not use this feature.
What is the IS-IS Overload bit? 	When the O-bit is set in the LSP, it signals to other routers in the area to not use it for transit when calculating SPF. Directly-attached networks can still be reached through the router, though.<div><br /></div><div>Setting the O-bit allows a router to join the IS-IS area without altering existing paths in the network. This is useful for waiting for BGP to converge, and then clearing afterward.&nbsp;</div>
By default, which Level is an external route redistributed into on an IS-IS L1L2 router? 	Level 2, but can be configured for either or both.
Where is address summarization configured in IS-IS? 	L1L2 routers
With IS-IS, why are IIH packets authenticated seperately from LSPs? 	IIH packets are used for individual adjacencies.<div><br /></div><div>LSPs cannot be modified except by their originating router, therefore all L1 LSPs must use the same area password, and all L2 LSPs must use the same domain password.</div>
How do you configure IIH authentication in IS-IS? 	Interface:<div><b>isis authentication mode </b>{<b>text </b>| <b>md5</b>} [<i>level</i>]</div><div><b>isis authentication key-chain </b><i>keychain </i>[<i>level</i>]</div>
How do you configure LSP/CSNP/PSNP authentication in IS-IS? 	IS-IS process:<div><div><b>isis authentication mode&nbsp;</b>{<b>text&nbsp;</b>|&nbsp;<b>md5</b>} <i>level</i></div><div><b>isis authentication key-chain&nbsp;</b><i>keychain&nbsp;</i><i>level</i></div></div>
What two commands are recommended for new IS-IS deployments? 	<b>metric-style wide</b><div><b>log-adjacency-changes all</b></div>
How do you enable an interface for IS-IS? 	Interface:<div><b>ip router isis</b></div>
How do you configure the NET on an IS-IS router? 	<b>router isis</b><div><b>&nbsp; net 49.xxxx.yyyy.yyyy.yyyy.00</b></div><div><b><br /></b></div><div>Where xxxx is the area, and yyyy.yyyy.yyyy is the System ID.</div>
How do you change the IS-IS router level? 	IS-IS process:<div><b>is-type </b><i>level</i></div>
How do you control which types of adjacencies are allowed over an interface in IS-IS? 	Interface:<div><b>isis circuit-type</b></div>
How do you configure passive interfaces in IS-IS? 	IS-IS process:<div><b>passive-interface </b><i>interface</i></div>
How do you configure summarization in IS-IS? 	IS-IS process:<div><b>summary-address </b><i>network mask</i></div>
What is the effect of the IS-IS command <b>passive-interface default </b>on a router? 	All local interfaces' networks are advertised into IS-IS
How do you configure IS-IS for IPv6? 	Interface:<div><b>ipv6 router isis</b></div>
How do you make IPv6-specific configurations in IS-IS? 	<b>router isis</b><div><b>&nbsp; address-family ipv6</b></div><div><b>&nbsp; &nbsp; </b><i>commands</i></div><div><i><br /></i></div><div>Example, IPv6 summarization is configured with <b>summary-prefix </b>under the address-family.</div>
How can you display basic information about IS-IS on a router? 	<b>show clns</b>
How do you disable IS-IS without removing its configuration? 	IS-IS process:<div><b>protocol shutdown</b></div>
How do you configure IS-IS to treat a broadcast link as point-to-point? 	Interface:<div><b>isis network point-to-point</b></div>
What condition would cause the STP root bridge to have ports in the blocking state? 	If the bridge is looped back to itself.
How can you verify Spanning-Tree related events in real time? 	<b>debug spanning-tree events</b>
With classic STP, if issuing the command <b>show spanning-tree vlan </b><i>vlan </i><b>interface </b><i>interface </i><b>detail </b>reveals few BPDUs sent, and many BPDUs received, what does this indicate? 	The other end of the link is a designated port, because STP Designated ports source BPDUs, while Root and blocking ports receive BPDUs.
What is the Spanning-Tree diameter? 	The maximum number of switches that could possibly be in the path between two end hosts.
True or False: Changing the STP timers constitutes a topology change event. 	False. The timers set on the root bridge are used throughout the classic STP domain, and changing the timers does not create a topology change event.
Using the spanning-tree <b>port-priority </b>parameter, how can you change the root port on a switch? 	The port priority is sent with BPDUs downstream, which means to change the root port of a switch, the <b>port-priority </b>needs to be modified on the upstream switch.
How are the STP port IDs and port costs evaluated differently? 	Port IDs (port priority + port number) are evaluated on received BPDUs, not the locally-configured value, though the local value is considered when sending BPDUs further downstream.<div><br /></div><div>Port costs are evaluated based on adding the cost in the BPDU to the locally-configured value.</div>
With STP, what value do you configure to influence the downstream neighbor's choice of root port? 	The local port ID (with the <b>port-priority </b>parameter)
With STP, what do you configure to change the local root port? 	The local STP interface <b>cost</b>
How do you use TCL to perform a command on multiple IP addresses (such as ping)? 	EXEC: <b>tclsh</b><div><b>foreach </b><i>var</i><b>&nbsp;{</b></div><div><b>ip1</b></div><div><b>ip2} { </b><i>command </i><b>$</b><i>var parameters </i><b>}</b></div><div><b><br /></b></div><div>Example:</div><div>foreach var {</div><div>10.1.1.10</div><div>10.1.1.20} { ping $var repeat 2 }</div>
What is the range of configurable values for the MST configuration revision number? 	0 - 65535
How are the Root Path Cost and Message Age values of a BPDU treated when traversing an MST region? 	At the boundary of the MST region, the RPC and MA values are incremented as though the BPDU had traversed only a single switch.
How can you change the priority of an interface with MST? 	Interface:<div><b>spanning-tree mst </b><i>instance </i><b>port-priority </b><i>priority</i></div>
When BPDU Guard is enabled, how many BPDUs must be received before the port is placed into err-disable state? 	One
How do you configure a router to act as a bridge and send BPDUs? 	"<div><b>bridge </b><i>num </i><b>protocol ieee</b></div><div style=""font-weight: bold; ""><b><br /></b></div><b>interface </b><i>interface</i><div>&nbsp; <b>bridge-group </b><i>num</i></div><div><i><br /></i></div><div>This may be useful in lab environments to test features like BPDU Guard.</div>"
What happens if you enable BPDU Guard and BPDU Filter on the same interface? 	BPDU Guard has no effect because BPDU Filter takes precedence.
How do you verify which ports have been blocked by Spanning-Tree? 	<b>show spanning-tree blockedports</b>
What is a recommended best practice with enabling Root Guard? 	It is recommended to enable Root Guard on all access ports so that a root bridge cannot be elected out of those ports.
What is the significance of the PPP Type field as compared to older serial data link standards? 	Having a Type field allows multiple higher-layer protocols to be used simultaneously over the link. Previous standards required either proprietary extensions (like Cisco's version of HDLC or Frame Relay), or required static configurations between sender and receiver to know what was expected to be sent over the link.
What are the three phases of initiating a PPP session between two devices? 	Link Establishment<div>Authentication</div><div>Network Layer Protocol</div>
At a high level, what occurs during the PPP Link Establishment Phase? 	Two devices verify whether they speak PPP and negotiate basic link operation parameters using LCP.
What five main functions are provided by PPP LCP? 	-Verify devices speak PPP<div>-Verify link is not looped</div><div>-Negotiate basic parameters</div><div>-Verify session liveliness</div><div>-Tear down session if either device requests it</div>
What are the four Configure messages used by PPP LCP? 	Configure-Request<div>Configure-Ack</div><div>Configure-Nak</div><div>Configure-Reject</div>
"What is the PPP ""magic number"" used for? "	"During link-establishment, LCP sends a CONFREQ message containing a random ""magic"" number. If the sender receives a CONFREQ with the same number once, it is possible that both sender and receiver chose the same number, and a different number is chosen. If the received CONFREQ message has the same magic number again, the link is most likely looped."
What are four of the capabilities exchanged during PPP link establishment? 	MTU<div>Authentication type</div><div>Link Quality Monitoring</div><div>Selected frame header compression (IP, RTP, etc)</div>
During PPP link establishment, when a device receives a CONFREQ message and agrees with all of the parameters, how does it respond? 	With a CONFACK Configure-Ack message
What is contained in a PPP CONFACK message? 	A CONFACK is an exact duplicate of an accepted CONFREQ message. A CONFACK means both PPP devices agree on the link establishment parameters.
What is the purpose of the PPP CONFNAK message? 	A CONFNAK message is the response to a CONFREQ message where some of the parameters are not acceptable, but can be negotiated.&nbsp;
What is contained in the PPP CONFNAK message? 	CONFNAK message contain a list of all unacceptable options from the received CONFREQ message, with values set to the device's own acceptable values for the options.
What's the difference between a PPP CONFNAK and CONFREJ message? 	CONFNAK is used when certain parameters are unacceptable, but negotiable.<div><br /></div><div>CONFREJ is used when certain paramaters are unacceptable and nonnegotiable.</div>
True or False: A PPP device receiving a CONFREJ message is unable to establish a PPP session with its neighbor. 	False: CONFREJ lists the parameters and values that are unacceptable and nonnegotiable by the neighbor. The sending PPP device has the option of operating without the nonnegotiable features to allow the PPP session to come up.
At a high level, how does authentication work with PPP? 	PPP authentication is a one-way procedure where one device proves its identity to the other device. Mutual authentication is two independent one-way authentications.
After a PPP link has been established and authentication passed, what must occur before any data can be transmitted? 	Both devices must negotiate and agree on Network Control Protocols for each upper-layer data type to be transferred. For example, if both devices support IPv4 (via IPCP), but only one device supports IPv6 (via IPv6CP), IPv6 data will not be transmitted over the link.
What are the two stages of PPPoE? 	Discovery<div>PPP Session</div>
What is the PPPoE Discovery Stage used for? 	To allow the client to discover an access concentrator and associate with it.
What are the four steps of the PPPoE Discovery Stage? 	-PADI PPPoE Active Discovery Initiation<div>-PADO PPPoE Active Discover Offer</div><div>-PADR PPPoE Active Discovery Request</div><div>-PADS PPPoE Active Discovery Session-confirmation</div><div><br /></div><div>Similar in concept to DHCP DORA</div>
What is the PPPoE Active Discovery Initiation (PADI) used for? 	PPPoE client broadcasts a PADI frame to solicit access concentrators in the same broadcast domain.
What is the PPPoE Active Discovery Offer (PADO) used for? 	PPPoE access concentrator receiving a PADI responds with a unicast PADO frame containing the name of the access concentrator to the client.
What is the PPPoE Active Discovery Request (PADR) used for? 	PPPoE client chooses a particular access concentrator and unicasts a PADR frame to associate with it.
What is the PPPoE Active Discovery Session-confirmation (PADS) used for? 	A PPPoE access concentrator willing to handle a particular client (by receipt of PADR) responds with a unicst PADS frame and assigns a unique Session ID to the particular client's session.
What occurs during the PPPoE Session Stage? 	Clients send and receive PPP frames using the same PPPoE Session ID assigned by the access concentrator. During this stage, all PPP operations are the same as if PPP was running over a serial link in HDLC framing.
What are the EtherTypes of PPPoE control (discovery) frames, and PPPoE data (session) frames? 	0x8863 (discovery)<div>0x8864 (session)</div>
What happens to the IP routing table when a PPP link is established? 	IPCP adds a /32 neighbor route to the IP routing table.
How do you prevent a PPP-encapsulated link from automatically adding a neighbor route upon successful connection? 	Interface:<div><b>no peer neighbor-route</b></div>
How do you configure PPP to install a default route to the neighbor? 	Interface:<div><b>ppp ipcp route default</b></div>
How do you configure a PPP session so that one device assigns a static IP address to the other side? 	Assigning device interface:<div><b>peer default ip address </b><i>ip</i></div><div><i><br /></i></div><div>Assigned device interface:</div><div><b>ip address negotiated</b></div>
When configuring a PPP interface to provide a static IP address to the peer device, how is the IP address installed in the peer device's IP routing table? 	As a /32 host route
How do you configure a router using PPP to request the peer device to authenticate itself with PAP? 	Interface:<div><b>ppp authentication pap</b></div>
How do you configure a router running PPP to provide authentication information to a requesting device via PAP? 	Interface:<div><b>ppp pap sent-username </b><i>username </i><b>password </b><i>password</i></div>
When configuring a router to ask the peer device to provide authentication via PAP, what additional information must be configured? 	The global <b>username </b><i>user </i><b>password </b><i>password </i>for the authenticated peer device.
How can you view what PPP options have been established for a particular interface? 	<b>show ppp interface </b><i>interface</i>
What are the three packets exchanged during CHAP authentication? 	Challenge<div>Response</div><div>Success/Failure</div>
Why does PPP CHAP one-way authentication require a username and password configured on both devices? 	With one-way authentication, even though only one device is asking the other device to authenticate itself, each device sends its hostname (corresponding to the username) in the CHAP message, which the opposite device uses for reference when calculating the MD5 hash.
With regard to configuration, what is the difference between PPP CHAP one-way and two-way authentication? 	For both one-way and two-way authentication, a username and password must be configured on both devices. With one-way authentication, <b>ppp authentication chap </b>is configured on one device, and with two-way authentication, it is configured on both devices.
How do you configure PPP to send a CHAP username that is different from the default hostname? 	Interface:<div><b>ppp chap hostname </b><i>username</i></div>
For devices acting as PPPoE concentrators, each PPPoE concentrator instance is represented by what construct? 	bba-group
For PPPoE, what is contained in the bba-group? 	The bba-group contains the configuration details of a particular PPPoE concentrator instance, such as the concentrator name presented to clients, maximum number of attached clients, and a reference to the Virtual-Template.
What is a Virtual Template interface? 	A Virtual Template interface is a placeholder for the configuration of per-client Virtual-Access interfaces that are created when the client connects. The configuration of the Virtual Template interface is cloned to the Virtual-Access interfaces as they are instantiated.
With PPPoE, what are Virtual Template interfaces applied to? 	bba-group
With PPPoE, what are bba-groups applied to? 	Ethernet interfaces (or subinterfaces)
What is the default encapsulation of <b>virtual-template </b>interfaces? 	PPP
What is a recommended configuration for <b>virtual-template </b>interfaces with regard to sourcing an IP address? 	It is recommended to create a loopback interface, and then reference it from the <b>virtual-template </b>interface with <b>ip unnumbered </b><i>loopback</i><div><i><br /></i></div><div>This was due to a limitation in older versions of IOS with using the same IP address on more than a certain number of interfaces.</div>
When configuring PPPoE on the server side, where do you specify the MTU and MSS settings? 	Under the <b>virtual-template </b>interface
When configuring PPPoE on the client side, where do you specify the MTU and MSS settings? 	Under the <b>dialer </b>interface
What is the default encapsulation of Dialer interfaces? 	HDLC
How do you view the status of locally-configured IP address pools? 	<b>show ip local pool</b>
What is the difference between DMVPN Phase 1 and Phase 2? 	Phase 1 only allows hub-to-spoke traffic, not spoke-to-spoke, and the spoke tunnel interfaces are configured as regular point-to-point GRE.<div><br /></div><div>Phase 2 allows dynamic spoke-to-spoke traffic with the spoke tunnel interfaces configured as multipoint GRE, just as the hub is.</div>
What is the process of a DMVPN Phase 2 spoke learning the NHRP mapping of another spoke? 	-Spoke1 sends NHRP resolution request for Spoke2 to the tunnel IP of the Hub<div>-Hub relays request to Spoke2</div><div>-Spoke2 adds its own mapping to the received request and sends NHRP reply directly to Spoke1</div><div>-Spoke2 sends NHRP resolution request for Spoke1 to Hub</div><div>-Hub relays request to Spoke1</div><div>-Spoke1 adds its own mapping to the received request and sends NHRP reply directly to Spoke2</div>
During the buildup of DMVPN Phase 2 spoke-to-spoke communications, how is bidirectional communication between the spokes established? 	The first spoke sends a NHRP resolution request to the hub for the second spoke. The hub forwards the request to the second spoke, which then replies directly to the original spoke. The second spoke then sends its own NHRP resolution request to the hub for the first spoke. The hub forwards the request to the first spoke, which then replies directly to the second spoke, completing verified bidirectional communications.
When establishing spoke-to-spoke DMVPN Phase 2 tunnels, why does the second spoke perform its own NHRP resolution request, even though it already received information about the originating spoke from the hub? 	By repeating the NHRP resolution process on the second spoke, both spokes acknowledge each other's requests were received, and spoke-to-spoke NBMA reachability is confirmed.
What are the three primary restrictions of DMVPN Phase 2? 	-Summarization is not allowed on the hub<div>-Default routing is not allowed on the hub</div><div>-Spokes must always maintain next-hop reachability</div>
What is the significance of the DMVPN NHRP network ID? 	The network ID is locally-significant and distinguishes between different DMVPNs on the same device. It makes operational sense to configure the same ID across all devices in the same DMVPN, but it is not required.
From a DMVPN spoke router, how do you configure reachability to the hub? 	Tunnel interface:<div><b>ip nhrp nhs </b><i>hub-tunnel-ip</i></div><div><b>ip nhrp map </b><i>hub-tunnel-ip hub-nbma-ip</i></div>
What two features enable DMVPN Phase 3? 	NHRP Redirect<div>NHRP Shortcut</div>
What three major restrictions are removed in DMVPN Phase 3, as opposed to Phase 2? 	-Summarization is allowed on the hub<div>-Default routing is allowed on the hub</div><div>-Next-hop values on the spokes are always modified</div>
What two configurations are added to enable DMVPN Phase 3? 	Hub tunnel interface:<div><b>ip nhrp redirect</b></div><div><b><br /></b></div><div>Spoke tunnel interface:</div><div><b>ip nhrp shortcut</b></div>
With regard to DMVPN Phase 3, what does the <b>ip nhrp redirect </b>command do? 	This command enables the hub router to send out NHRP Traffic Indication messages, which let the originating spoke know that there is a better way to reach it's destination.
With regard to DMVPN Phase 3, what does the <b>ip nhrp shortcut </b>command do? 	This command enables a spoke router to accept incoming NHRP Traffic Indication messages, which causes the spoke to send an NHRP Resolution Request message for the original packet's destination address, then install the destination network (with the destination spoke as the next hop) in the local IP routing table after receiving the NHRP Resolution Reply from the destination spoke.
For which DMVPN Phase(s) is summarization on the hub allowed? 	<div>Phase 1 &amp; 3</div><div><br /></div>DMVPN Phase 1 does not establish spoke-to-spoke tunnels, and summarization is not an issue.&nbsp;Summarization on the hub is not allowed in DMVPN Phase 2 because the next-hop address cannot be modified. Phase 3 allows summarization on the hub due to the behavior of the NHRP redirect / shortcut.
Why is summarization allowed on the hub in DMVPN Phase 1? 	DMVPN Phase 1 does not establish spoke-to-spoke tunnels, and summarization is not an issue.
Why is summarization on the hub not allowed in DMVPN Phase 2? 	Summarization on the hub is not allowed in DMVPN Phase 2 because the next-hop address cannot be modified.
Why is summarization allowed on the hub with DMVPN Phase 3? 	Phase 3 allows summarization on the hub due to the behavior of the NHRP redirect / shortcut.
What is the process of building spoke-to-spoke communication with DMVPN Phase 3? 	<div>-1st spoke sends packet destined for 2nd spoke with hub as next-hop</div><div>-Hub forwards packet to 2nd spoke, and sends NHRP Redirect to 1st spoke</div><div>-1st spoke receives NHRP Redirect and sends NHRP Resolution Request toward the hub for the 2nd spoke, which the hub then forwards to the 2nd spoke</div><div>-2nd spoke responds to inital packet with reply packet destined for 1st spoke with hub as next-hop, which the hub then&nbsp;forwards to 1st spoke, and sends NHRP Redirect to 2nd spoke</div><div>-2nd spoke receives NHRP Redirect and sends NHRP Resolution Request to the hub for the 1st spoke, which the hub then forwards to the 1st spoke</div><div>-2nd spoke sends NHRP Resolution Reply directly to 1st spoke</div><div>-1st spoke receives NHRP Resolution Request and sends NHRP Resolution Reply directly to 2nd spoke</div>
What is another term for the NHRP Redirect message? 	Traffic Indication message
With DMVPN Phase 3, what is returned with NHRP Resolution Reply messages? 	The entire destination prefix, not just the destination (next-hop) IP address.
How do you configure a prefix-list to match all Class A addresses that are not subnetted? 	<b>ip prefix-list </b><i>name </i><b>permit 0.0.0.0/1 ge 8 le 8</b><div><b><br /></b></div><div>Class A addresses have the first bit set to 0, and are in the range of 1 - 126 inclusive. Class A addresses have a prefix length of 8, therefore any prefix length of 9 or greater means the Class A network has been subnetted.</div>
How do you configure a prefix-list to match all Class B addresses that are not subnetted? 	<b>ip prefix-list </b><i>name </i><b>permit 128.0.0.0/2 ge 16 le 16</b><div><b><br /></b></div><div>Class B addresses are in the range of 128 - 191, inclusive, whose first two bits are 1 0. All non-subnetted Class B addresses have a prefix length of 16.</div>
How do you configure a prefix-list to match all Class C addresses that are not subnetted? 	<b>ip prefix-list </b><i>name </i><b>permit 192.0.0.0/3 ge 24 le 24</b><div><b><br /></b></div><div>The range of Class C addresses is 192 - 223, inclusive. The first three bits of all Class C addresses is 1 1 0. Non-subnetted Class C networks have a prefix length of exactly 24.</div>
What is the process to create a single prefix-list entry matching two or more ranges of IP addresses? 	Determine the common network bits, and the minimum and maximum prefix lengths.<div><br /></div><div>For example, to create a single prefix-list entry matching 10.1.204.0/28 and 10.1.203.0/26, you can see immediately that the first 16 bits are common. 203 in binary is 11001011 and 204 is 11001100, so there are a total of 16 + 5 = 21 bits in common. This translates to a base prefix of 10.1.200.0 with a minimum length of 21 and a maximum length of 28:</div><div><br /></div><div><b>ip prefix-list </b><i>name </i><b>permit 10.1.200.0/21 ge 21 le 28</b></div>
How do you configure a prefix list to deny only host routes? 	<b>ip prefix-list </b><i>name </i><b>deny 0.0.0.0/0 ge 32</b><div><b>ip prefix-list </b><i>name </i><b>permit 0.0.0.0/0 le 32</b></div>
What are the configuration requirements for using EIGRP over DMVPN? 	Tunnel interface:<div><b>ip nhrp map multicast</b></div><div><b>no ip split-horizon eigrp </b><i>asn</i></div><div><i><br /></i></div><div>Phase 2 also requires:</div><div><b>no ip next-hop-self eigrp </b><i>asn</i></div>
What is a caveat of manually configuring a neighbor in EIGRP? 	The other neighbor must also be manually configured. Additionally, for broadcast interfaces, if one neighbor is manually configured, all neighbors must be manually configured.
Where is redistribution configured for EIGRP named mode? 	Under <b>topology base</b>
How do you configure classic EIGRP third-party next-hop? 	Interface:<div><b>no ip next-hop-self eigrp </b><i>asn</i></div>
How do you configure named EIGRP third-party next-hop? 	AF-interface:<div><b>no next-hop-self</b></div>
How do you configure summarization for multiple interfaces in EIGRP named mode? 	You cannot configure summarization under <b>af-interface default</b>, you must configure it under the individual af-interfaces.
How do you configure EIGRP named mode to limit the number of prefixes allowed to be learned from a particular neighbor, and issue a syslog message when a certain percentage threshold has been crossed? 	AF global:<div><b>neighbor </b><i>neighbor </i><b>maximum-prefix </b><i>maxpfx percent</i></div>
When configuring a maximum number of prefixes allowed to be received from a particular EIGRP neighbor, what happens if the <b>warning-only </b>keyword is not used? 	With the <b>warning-only </b>keyword, a syslog message is generated whenever the limit has been reached, and no new prefixes can be received from the neighbor. Without the keyword, the neighbor adjacency is torn down when the limit is crossed.
What is a good practice before configuring an ACL? 	View existing ACLs first:&nbsp;<div><b>show access-lists</b></div>
How do you manually calculate the default EIGRP classic metric? 	10,000,000 Kbps / lowest bandwidth along the path in Kbps<div>+&nbsp;Sum of all delays along the path in 10s of microseconds</div><div>* 256</div><div><br /></div><div>Example: Path contains a 1 Gbps link and a 100 Mbps link, with 10µs and 100µs delay, respectively. 100 Mbps is the lowest value along the path, so the formula is [ (10,000,000 / 100,000) + (1 + 10) ] * 256 = 111 * 256 = 28,416</div>
How do you manually calculate the EIGRP wide default composite metric? 	Throughput + Latency<div><br /></div><div>Throughput = 10,000,000 * 65,536 / minimum bandwidth in Kbps</div><div>Latency = Total delay in picoseconds * 65,536 / 1,000,000</div><div><br /></div><div>Example: 100 Mbps link as slowest, with total delay of 101,250,000 picoseconds</div><div><br /></div><div>Throughput: 10,000,000 * 65,536 / 100,000 Kbps = 6,553,600</div><div>Latency = 101,250,000 * 65,536 / 1,000,000 = 6,635,520</div><div><br /></div><div>Metric = 13,189,120 = 6,553,600 + 6,635,520</div><div><br /></div><div>Value placed in the RIB is 103,040 = 13,189,120 / 128</div>
How can you view received EIGRP routes for which there are no Successors? 	<b>show ip eigrp topology zero-successors</b>
Why would the EIGRP wide metric <b>rib-scale </b>need to be adjusted? 	EIGRP wide metrics are 64-bit, and the current IOS RIB is 32-bit. With slower links, such as 10 Mbps Ethernet, the default rib-scale value of 128 is too small, and would cause the metric for those slower links to be larger than what can fit in the RIB (and therefore, the route would be seen as having an infinite metric and unusable). By increasing the <b>metric&nbsp;rib-scale </b>value, slower links can be used.<div><br /></div><div>In the future, the rib-scale value may need to be adjusted downward to accomodate faster-speed links.</div>
If you adjust the EIGRP wide metric <b>rib-scale </b>value on one router, do you have to change it on all routers? 	No, the <b>rib-scale </b>value has local significance only in the sense that the calculation is performed locally, and the resulting value is stored only in the local RIB and not advertised.<div><br /></div><div>However, you should make sure all routers use the same value, unless you are adjusting the value purposely to filter routes. If the value is adjusted so that, for example, a slower link can be used (and not seen as having an infinite metric), then every router in a path that must use that link must also have its <b>rib-scale </b>value adjusted as well.</div>
With EIGRP, what happens if you configure a <b>leak-map </b>to reference a route-map that does not exist? 	Only the summary route is advertised
With EIGRP, what happens if you configure a&nbsp;<b>leak-map&nbsp;</b>to reference a route-map that references an ACL that does not exist? 	The summary route and all specific routes are advertised
On Cisco IOS, how do you enter a ? as part of a character string (such as a password)? 	Esc, q, ?
"How does Cisco define ""cloud""? "	IT resources and services that are abstracted from the underlying infrastructure and provided <b>on-demand </b>and <b>at-scale </b>in a <b>multitenant environment</b>.
"What are the three components of Cisco's definition of ""cloud""? "	<b>On-demand</b> resources<div><b>At-scale </b>meaning illusion of infinite resource availability</div><div><b>Multitenant Environment</b></div>
What are the four general cloud architectures? 	Public<div>Private</div><div>Virtual Private</div><div>Inter-Cloud</div>
What are the three components of Cisco's definition of private cloud? 	Automation / Orchestration<div>Workload Mobility</div><div>Compartmentalization</div>
What is Cisco's definition of a virtual private cloud? 	A combination of public and private clouds, sometimes referred to as a hybrid cloud.
What are the four critical service layers of cloud computing as defined by Cisco? 	<div>IT Foundation</div>SaaS Software as a Service<div>PaaS Platform as a Service</div><div>Iaas Infrastructure as a Service</div>
A hosted web-based word processor is an example of what? 	Software as a Service
The interface (typically APIs) between a hosted application and a development/scripting environment that supports it is known as what? 	Platform as a Service
What is the model of having compute, network, and storage delivered over the network on a pay-as-you-go basis? 	Infrastructure as as Service
When referring to XaaS, what is the IT Foundation? 	The basis of the other types of delivered services. A collection of core technologies that evolve over time, such as virtualization, and the evolution of physical networks from 3-tier to leaf/spine.
What are some performance and reliability tradeoffs to consider with cloud environments? 	-The speed of access to a private cloud may be slower than a private cloud<div>-The reliability of a public cloud may be higher than a private cloud</div>
What is a potentially major security consideration with data storage in a public cloud? 	"The physical location of the data. For example, sensitive data stored in ""unfriendly"" locations, or areas prone to natural disasters."
How is privacy typically achieved with cloud computing? 	Multitenancy. Customers are logically (and sometimes physically) separated from each other.
What is the difference in scalability among the four cloud models? 	Private cloud involves the highest cost to expand scalability. The other models provide extreme scalability, with the inter-cloud model providing the highest level of scalability.
What is a potential issue of cloud interoperability with applications? 	With public cloud, it is up to the developer to use the cloud-provided APIs. However, custom in-house applications may be better suited to private cloud.
What are the three main cloud network access methods? 	Private WAN<div>Internet Exchange Point (IXP)</div><div>Internet VPN</div>
What is the difference between automation and orchestration? 	Automation refers to completing a single task.<div>Orchestration is an ordered set of tasks with conditions.</div>
What is workload mobility? 	The capability of distributing various resources (computer, storage, network, etc) in an abstracted manner. For example, geographically-based anycast solutions.
What is NETCONF? 	A protocol by which configurations are installed and changed. YANG represents the meaning of the data, and NETCONF delivers the data itself in XML format.
What is YANG? 	A modeling language used to represent device configurations and state, which defines the structure of the data, but not the data itself.
How are NETCONF and YANG related? 	NETCONF is the transport vessel for YANG information to be transferred from a NMS to a network device, similar in concept to HTTP (NETCONF) being used to transport HTML (YANG). Another analogy is YANG is to NETCONF as MIBs are to SNMP.
What are four common data representation formats for network programmability? 	YANG<div>YAML</div><div>JSON</div><div>XML</div>
What is the codename for the OpenStack compute component? 	Nova
What is the OpenStack codename Nova component? 	Nova manages pools of compute resources, such as VMs, containers, and bare-metal servers.
What is the codename for the OpenStack networking component? 	Neutron
What is the OpenStack codename Neutron component? 	Neutron manages networks and IP addresses, and provides network abstraction.
What is the codename for the OpenStack block storage component? 	Cinder
What is the OpenStack codename Cinder component? 	Cinder is an API that manages creating, attaching and detaching block storage devices to servers. Many storage vendors include a Cinder plug-in that translates the API to vendor-specific interfaces.
What is the codename for the OpenStack identity component? 	Keystone
What is the OpenStack codename Keystone component? 	Keystone is the identity component that provides a directory service with users mapped to the services they can access.
What is the codename for the OpenStack imaging component? 	Glance
What is the OpenStack codename Glance component? 	Glance provides discovery, registration, and retrieval of VM images
What is the codename for the OpenStack object storage component? 	Swift
What is the OpenStack codename Swift component? 	Swift provides object storage with built-in data replication and integrity.
What is the codename for the OpenStack dashboard component? 	Horizon
What is the OpenStack codename Horizon component? 	Horizon provides a dashboard/GUI for administering various aspects of OpenStack.
What is the codename for the OpenStack orchestration component? 	Heat
What is the OpenStack codename Heat component? 	Heat provides orchestration for cloud applications via templates using APIs
What is the codename for the OpenStack workflow component? 	Mistral
What is the OpenStack codename Mistral component? 	Mistral manages user-created workflows, which can be event-driven or triggered manually.
What is the codename for the OpenStack telemetry component? 	Ceilometer
What is the OpenStack codename Ceilometer component? 	Ceilometer is used for telemetry and provides a single point of contact for billing systems used within the cloud environment.
What is the codename for the OpenStack database component? 	Trove
What is the OpenStack codename Trove component? 	Trove is a database-as-a-service provisioning engine.
What is the codename for the OpenStack Elastic MapReduce component? 	Sahara
What is the OpenStack codename Sahara component? 	Sahara provides Elastic MapReduce functionality, which is an automated way to provision Hadoop clusters.
What is the codename for the OpenStack bare metal provisioning component? 	Ironic
What is the OpenStack codename Ironic component? 	Ironic provisions bare metal machines rather than VMs
What is the codename for the OpenStack messaging component? 	Zaqar
What is the OpenStack codename Zaqar component? 	Zaqar provides a cloud messaging service for web developments used to communicate between SaaS and mobile applications.
What is the codename for the OpenStack shared file system component? 	Manila
What is the OpenStack codename Manila component? 	Manila provides an API to manage file shares in a vendor agnostic fashion
What is the codename for the OpenStack DNS component? 	Designate
What is the OpenStack codename Designate component? 	Designate provides a multi-tenant REST API for managing DNS-as-a-service
What is the codename for the OpenStack search component? 	Searchlight
What is the OpenStack codename Searchlight component? 	Searchlight provides search capabilities across various cloud services, such as searching for compute instance status or storage system names.
What is the codename for the OpenStack key manager component? 	Barbican
What is the OpenStack codename Barbican component? 	Barbican is a key manager that provides secure storage, provisioning and management of passwords.
What are the four primary SDN models? 	Distributed<div>Augmented</div><div>Hybrid</div><div>Centralized</div>
What is the distributed SDN model? 	The distributed SDN model is most similar to traditional networking with the control plane distributed among devices (as in traditional routing protocols).
What is the augmented SDN model? 	The augmented SDN model builds on the distributed model by including a centralized controller that adjusts various policies as they are needed, but otherwise relies on the traditional distributed control plane. An example of this is Cisco's PfR.
What is the hybrid SDN model? 	The hybrid SDN model is similar to the augmented SDN model in that there is a traditional distributed control plane operating underneath, however the hybrid model can implement policy at any point in the network. Cisco's ACI is an example of this model.
What is the centralized SDN model? 	The centralized model relies on a single central controller to program the forwarding plane of all network devices.
What is an SDN controller? 	The SDN controller is the component responsible for programming the forwarding tables of data-plane devices.
What is an API? 	Application Programmability Interface defines a standard way of interfacing with a software application or operating system. Examples are REST and RESTCONF available in IOS-XE.
What are northbound protocols? 	Northbound protocols are typically APIs that applications can use to make requests of the network. For example, a specific QoS treatment could be specified by the application.
What is an example of a northbound interface? 	a REST API
What is a southbound interface? 	The control plane protocol(s) between the centralized controller and the network forwarding hardware. An example is OpenFlow.
What is an example of a southbound protocol? 	OpenFlow
What are the three common software development models? 	Waterfall<div>Iterative</div><div>Agile / DevOps</div>
What is service function chaining? 	Sequencing virtualized network services (VNFs) in a particular order to solve a particular business problem. Examples include placing virtual routers, firewalls, and IPS in a particular order.
With regard to IoT, what are LLNs? 	Low-Power and Lossy Networks
With regard to IoT, what is RPL? 	IPv6 Routing Protocol for LLNs, which is a distance-vector routing protocol specifically designed to support IoT. RPL borrows ideas from traditional IP routing, multi-topology routing (MTR), and MPLS-TE.
What is 6LoWPAN? 	IPv6 over Low Power WPANs.&nbsp;<div><br /></div><div>6LoWPAN is an adaptation layer for IPv6 using IEEE 802.15.4 wireless networks.</div>
How does 6LoWPAN adapt IPv6 for IEEE 802.15.4 wireless networks? 	MTU correction - fragments IPv6 minimum 1280 byte MTU to 802.15.4 127 byte MTU<div>Header compression - assumes common fields to compress IPv6 (40B) + UDP (8B) to 7B</div><div>Mesh routing</div><div>MAC-level retransmissions - instead of higher-layer responsibility</div>
What is CoAP? 	Constrained Application Protocol<div><br /></div><div>Similar to (but simpler than) HTTP, designed to support machine-to-machine communications over UDP for Low-power and Lossy Networks (LLNs)</div>
What is MQTT? 	Message Queuing Telemetry Transport<div><br /></div><div>Lightweight machine-to-machine communications over TCP</div>
What standards body has defined the NFV architectural framework? 	ETSI European Telecommunications Standards Institute
What was the intended use for GLOP addressing? 	To provide an interoperable /24 multicast address space for every 16-bit ASN in the 233/8 range.
What type of route has the default AD of 0? 	Connected
What type of route has the default AD of 1? 	Static
What type of route has the default AD of 5? 	EIGRP summary route
What type of route has the default AD of 20? 	eBGP
What type of route has the default AD of 90? 	EIGRP internal
What type of route has the default AD of 100? 	IGRP
What type of route has the default AD of 110? 	OSPF
What type of route has the default AD of 115? 	IS-IS
What type of route has the default AD of 120? 	RIP
What type of route has the default AD of 170? 	EIGRP external
What type of route has the default AD of 200? 	iBGP<div>BGP Local (locally-injected)</div>
What type of route has the default AD of 160? 	ODR
What type of route has the default AD of 255? 	Discard / infinite / unreachable routes
When redistributing connected interfaces into OSPF that have IP addresses within an OSPF <b>network </b>statement, what happens? 	The routes for those interfaces are injected as OSPF Intra-Area routes, while the other interfaces are redistributed as OSPF External Type 2 routes (by default).
What is the default OSPF network type for tunnel interfaces? 	point-to-point
What two special considerations must you give to OSPF when using DMVPN tunnel interfaces? 	OSPF treats tunnel interfaces as network type point-to-point by default, and the OSPF network type setting may need to be changed, depending on the network design. Likewise, timers may also need to be adjusted.
What is the result of an interface configured as OSPF network type broadcast on an NBMA network where multicast capabilities have been provided through mapping, but not L2 address resolution? 	OSPF neighbors will be formed by way of multicast, but next-hops will not be reachable until the NBMA addresses are mapped.
When authentication is configured for an OSPF area, how can you exempt particular neighbors? 	On the interfaces between the neighbors, enable null authentication with <b>ip ospf authentication null</b>
When OSPF authentication is enabled for an area, what happens if you disable the authentication on a particular link? 	Downstream neighbors will not require authentication.
Why does OSPF suppress hello and refresh messages on virtual links? 	Virtual links are treated like demand circuits in OSPF
What does the <b>ip ospf demand-circuit </b>command do? 	With links that are not intended to be up 100% of the time, OSPF hello and refresh messages would cause the link to remain up indefinitely. The <b>ip ospf demand-circuit </b>command causes OSPF to suppress hello and refresh while still maintaining the neighbor adjacency. The link comes back up when there is an OSPF topology change.
With OSPF, what is the difference between <b>area range </b>and <b>summary-address</b>? 	<b>area-range </b>is used to summarize internal routes<div><b>summary-address </b>is used to summarize external routes</div>
What is automatically generated when you issue the OSPF <b>area range </b>command, and what are two ways to prevent it? 	An internal discard route to Null0 is automatically injected along with the summary address.<div><br /></div><div>You can prevent this under the OSPF process with either of the following:</div><div><b>no discard-route internal</b></div><div><b>discard-route internal 255</b></div>
What are two ways to prevent an external OSPF discard route from being installed on an ASBR? 	<div>OSPF process:</div><div><b>no discard-route external</b></div><div><b>discard-route external 255</b></div>
How do you prevent an OSPF Type 3 LSA from being generated? 	ABR OSPF process:<div><b>area </b><i>area </i><b>range </b><i>prefix mask </i><b>not-advertise</b></div>
How can you prevent an OSPF Type 5 or Type 7 LSA from being generated? 	ASBR OSPF process:<div><b>summary-address </b><i>prefix mask </i><b>not-advertise</b></div>
How can you prevent OSPF from advertising LSAs on a particular interface? 	Interface:<div><b>ip ospf database-filter all out</b></div>
What happens if you prevent OSPF from advertising LSAs on an interface? 	OSPF neighborships will remain, but the routers connected over the interface will not receive LSAs.
What determines the OSPF cost value of a virtual link? 	The OSPF cost of a virtual link is based on the total OSPF cost between the two endpoints.
OSPF virtual links are not allowed to traverse stub areas. What is a workaround for this issue? 	GRE tunnels
"What is the OSPF ""P"" bit? "	"The ""P"" bit is set by the ASBR in an NSSA to indicate whether or not to propagate the redistributed route beyond the local area. If the bit is not set, the redistributed route remains within the NSSA and is not translated to a Type 5 LSA by the ABR."
How do you manually configure the OSPF cost of injected default routes (such as for stub areas)? 	OSPF process:<div><b>area </b><i>area </i><b>default-cost </b><i>cost</i></div>
What is the OSPF&nbsp;<b>area&nbsp;</b><i>area&nbsp;</i><b>default-cost&nbsp;</b><i>cost </i>command used for? 	To set the OSPF cost of an injected default route (such as for stub areas).
What does the interface command&nbsp;<b>ip ospf database-filter all out </b>do? 	Prevents OSPF from advertising LSAs on the interface for which the command is configured.
What does the OSPF command&nbsp;<b>summary-address&nbsp;</b><i>prefix mask&nbsp;</i><b>not-advertise </b>do? 	Prevents OSPF Type 5 or Type 7 LSAs from being generated.
What does the OSPF command&nbsp;<b>area&nbsp;</b><i>area&nbsp;</i><b>range&nbsp;</b><i>prefix mask&nbsp;</i><b>not-advertise </b>do? 	Prevents OSPF Type 3 LSAs from being generated.
How can you prevent OSPF from sending periodic hello or refresh messages on a link, but maintain the neighbor adjacency? 	Interface:<div><b>ip ospf demand-circuit</b></div><div><b><br /></b></div><div>This must be configured on both ends of the link.</div>
What does a forwarding address of 0.0.0.0 in an OSPF LSA mean? 	To reach the next hop, go the the advertising router, as described in the LSA.
What does the OSPF command <b>area </b><i>area </i><b>nssa translate type7 suppress-fa </b>do? 	When an ASBR in an NSSA generates a Type 7 LSA, the forwarding address it itself, and remains so when the ABR translates the Type 7 LSA to a Type 5 LSA when reoriginating into the backbone. This command causes the Type 5 LSA to have the forwarding address set to 0.0.0.0 (the ABR) instead of that of the NSSA ASBR.
What is OSPF forwarding address suppression? 	When an ASBR in an NSSA generates a Type 7 LSA, the forwarding address is itself, and remains so when the ABR translates the Type 7 LSA to a Type 5 LSA when reoriginating into the backbone. FA suppression causes the Type 5 LSA to have the forwarding address set to 0.0.0.0 (the ABR) instead of that of the NSSA ASBR.
What is the primary use case for OSPF forwarding address suppression? 	The ASBR in an NSSA originates a Type 7 LSA for each redistributed route, which the ABR then re-originates as Type 5 in area 0, with the forwarding address set to the originating ASBR. It may be undesirable to inject all of the external routes directly into the backbone, so the ABR can filter them out, but in doing so, the reachability to the ASBR outside the NSSA may be filtered as well. OSPF forwarding address suppression causes the ABR to set the forwarding address to 0.0.0.0 as it originates the translated Type 5 LSAs into the backbone.
What is the result of configuring OSPF forwarding address suppression when there are multiple ABRs in the NSSA? 	When there are multiple ABRs in an NSSA, the ABR with the highest RID is elected to perform the Type 7 to Type 5 translation. FA suppression may lead to suboptimal routing when there are multiple exit points because enabling it causes traffic to always flow through the translating ABR.
How does RFC 3101 NSSA behavior prefer two LSAs with the same destination, cost, and non-zero forwarding address? 	Type 7 LSA with P-bit set<div>Type 5 LSA</div><div>LSA with higher RID</div>
How does RFC 1587 NSSA behavior prefer two LSAs with the same destination, cost, and non-zero forwarding address? 	Type 5 LSA<div>Type 7 LSA with P-bit set and non-zero forwarding address</div><div>Type 7 LSA</div>
Newer versions of Cisco IOS use the RFC 3101 OSPF NSSA LSA selection rules. How do you modify OSPF to use the older RFC 1587 rules? 	OSPF process:<div><b>compatible rfc1587</b></div>
What does the OSPF command <b>compatible rfc1587 </b>do? 	Newer versions of Cisco IOS use the RFC 3101 NSSA LSA selection rules. Issuing this command causes IOS to use the older RFC 1587 rules.
When configuring a route-map, how can you select a particular routing protocol? 	<b>match source-protocol </b><i>protocol pid</i>
When configuring a route-map, how do you select a range of metric values? 	With the <b>match metric </b>option, you can either match multiple individual metric values, or you can match a range by entering the value range midpoint, the +- modifier, and the positive and negative range.<div><br /></div><div>For example, to match a range of metric values from 500 - 1500, the command would be:</div><div><b>match metric 1000 +- 500</b></div>
What is the process of determining the midpoint and derivation values for configuring a range of metric values? 	Mid value = (min + max) / 2<div>Derivation value = (max - min) / 2</div>
How do you disable Ethernet autonegotiation? 	Change BOTH <b>speed </b>and <b>duplex </b>to something other than <b>auto</b>
When VTP Pruning is enabled, which VLANs become prune eligible? 	2 - 1001
What is the IP Protocol for IGMP? 	2
What is the IP Protocol for IP-in-IP encapsulation? 	4
What is the IP Protocol for IPv6? 	41
What is the IP Protocol for RSVP? 	46
What is the IP Protocol for GRE? 	47
What is the IP Protocol for Encapsulating Security Payload (ESP)? 	50
What is the IP Protocol for Authentication Header (AH)? 	51
What is the IP Protocol for Protocol Independent Multicast (PIM)? 	103
What is IP Protocol 1? 	ICMP
What is IP Protocol 2? 	IGMP
What is IP Protocol 4? 	IP-in-IP encapsulation
What is IP Protocol 6? 	TCP
What is IP Protocol 17? 	UDP
What is IP Protocol 41? 	IPv6
What is IP Protocol 46? 	RSVP
What is IP Protocol 47? 	GRE
What is IP Protocol 50? 	ESP
What is IP Protocol 51? 	AH
What is IP Protocol 88? 	EIGRP
What is IP Protocol 89? 	OSPF
What is IP Protocol 103? 	PIM
What is IP Protocol 115? 	L2TPv3
What are the two Ethernet pseudowire modes? 	Raw mode<div>Tagged mode</div>
What is the difference between tagged and raw mode Ethernet pseudowires? 	Tagged mode requires a service-delimiting VLAN tag, while raw mode removes any service-delimiting VLAN tags, when sending data across the pseudowire.<div><br /></div><div>Both modes transparently pass customer VLAN tags across the pseudowire.</div>
What is another name for an Ethernet pseudowire in Tagged mode? 	VLAN-based
What is another name for an Ethernet pseudowire in Raw mode? 	Port-based
What is the pseudowire type of tagged-mode Ethernet? 	0x0004
What is the pseudowire type of raw-mode Ethernet? 	0x0005
What is the pseudowire type 0x0004? 	Tagged-mode Ethernet
What is the pseudowire type 0x0005? 	Raw-mode Ethernet
What is the EtherType for IPv4? 	0x0800
What is the EtherType for IPv6? 	0x86DD
What is the EtherType for LLDP? 	0x88CC
What is EtherType 0x0800? 	IPv4
What is EtherType 0x0806? 	ARP
What is EtherType 0x8100? 	802.1Q-tagged frame
What is EtherType 0x86DD? 	IPv6
What is EtherType 0x8863? 	PPPoE Discovery
What is EtherType 0x8864? 	PPPoE Session
What is EtherType 0x88CC? 	LLDP
When using PAgP or LACP on an EtherChannel, what happens to the the local port if it cannot negotiate an EtherChannel with the remote port? 	The local port is put into an independent state and continues to carry traffic like a regular single link. The port configuration does not change, but the port does not participate in the EtherChannel.
What is a limitation of using PAgP with StackWise? 	PAgP does not support cross-stack EtherChannels.
Where does a Layer 2 EtherChannel obtain its MAC address from? 	The first port in the channel that comes up.
True or False: EtherChannel member ports with different STP path costs will be suspended from the EtherChannel. 	False. Ports with different STP path costs can form an EtherChannel if they are otherwise compatibly configured.
How does Administrative Distance affect routing optimality when performing mutual routing protocol redistribution on multiple routers? 	Redistributed routes should be marked with a higher AD so that the redistributing routers will use the source protocol when routing.
With the default classless routing configuration, when is the default route used? 	When the packet's destination does not match any specific route in the IP routing table.
With a classful routing configuration, when is the default route used? 	The default route is used only if the packet's destination does not exist in any classful network in the IP routing table.
What must be true for RIP to advertise a default route via the <b>ip default-network </b>command? 	The classful network must be in the local router's IP routing table.
What must be true for EIGRP to advertise a default route via the&nbsp;<b>ip default-network&nbsp;</b>command? 	The classful network must be advertised by the local router into EIGRP through any means.
How does RIP utilize the <b>ip default-network </b>setting? 	RIP advertises a route to 0.0.0.0/0
How does EIGRP utilize the&nbsp;<b>ip default-network&nbsp;</b>setting? 	EIGRP advertises the classful network flagged as the candidate default.&nbsp;
What is the AD of an EIGRP Summary route? 	5
How do you modify the default AD of an EIGRP summary route? 	EIGRP process:<div><b>summary-metric </b><i>summary </i><b>distance </b><i>distance</i></div>
During which PfR phase are flows that have high latency and throughput learned, and Monitored Traffic Classes assembled? 	Profile phase
During which PfR phase are performance metrics collected and computed for the traffic previously identified in the Monitored Traffic Classes (MTC) list? 	Measure phase
During which PfR phase are low and high thresholds defined for in-policy and out-of-policy performance categories? 	Apply Policy phase
During which PfR phase is traffic influenced by manipulating routing or using PBR? 	Control phase
During which PfR phase is out-of-policy traffic performance re-evaluated and adjusted if necessary? 	Verify phase
What is the term for PfR interfaces that connect to the network for communication with the Master Controller? 	Internal
What is the term for PfR interfaces that are used to transmit packets out of the local network? 	External
On which PfR interfaces are prefixes and link performance monitored? 	External
How many External interfaces are required for PfR? 	At least two
Which PfR interface is used as the source to communicate with the Master Controller? 	Local
What are IP addresses in the range of 224.0.0.0 - 224.0.1.255 referred to as? 	Permanent multicast groups
What are IP addresses in the range of 232/8 referred to as? 	Source-Specific Multicast
What are IP addresses in the range of 233/8 referred to as? 	GLOP addressing
What are IP addresses in the range of 239/8 referred to as? 	Private / Administratively-scoped multicast
What is a transient multicast address? 	An IP multicast address that does not reside within a reserved range.
How are IP addresses in the 224.0.0.0/24 subnet intended to be handled by routers? 	Multicast addresses in this range usually have a TTL of 1 and are not intended to be forwarded by routers.
What protocol is used to inform a local multicast router that a host wants to receive multicast traffic for a specific group, or to leave that group? 	IGMP
Membership Query, v1 Membership Report, v2 Membership Report, and Leave Group refer to what? 	Message types defined in the IGMPv2 Type field
What is the IGMPv2 Membership Query message type used for? 	It is used by multicast routers to discover the presence of group members on a subnet.
When is an IGMPv2 Membership Query sent? 	It is sent by a multicast router after it receives an IGMPv2 Leave Group message from a host to determine if any other hosts exist on the segment.
What is the Group Address field set to in an IGMPv2 General Membership Query? 	0.0.0.0
To which address is an IGMPv2 Group-Specific Query message sent to? 	The multicast IP address of the group being queried.
What is the range of the IGMPv2 Maximum Response Time? 	1 - 255, each value represents 1/10th of a second
What is the default value of the IGMPv2 Maximum Response Time? 	100 (10 seconds)
When is the IGMPv2 Maximum Response Time used? 	The field is used only in Query messages.
What causes a host to send a solicited IGMPv2 Host Membership Report? 	When the host receives an IGMPv2 Query from the local router, the host sends a MR for all the multicast groups for which it wants to receive traffic from, which is a solicited host MR.
What causes a host to send an unsolicited IGMPv2 Host Membership Report? 	When a host joins a new group, it immediately sends a host MR to the local router that it wants to recieve multicast traffic for the group it just joined, which an unsolicited host MR.
What does a host do when it receives an IGMPv2 Query from the local multicast router? 	The host sends a solicited Membership Report for all multicast groups it wishes to receive traffic from.
How does an IGMPv2 host signal to a router that it wishes to receive traffic for a particular multicast group? 	With an unsolicited Host Membership Report message
What determines how long it takes a multicast router to determine that all hosts on a LAN have left a particular multicast group? 	The IGMPv2 Last Member Query Interval, and the Last Member Query Count
What is the default IGMPv2 Last Member Query Interval? 	1 second
What is the default IGMPv2 Last Member Query Count? 	2
What happens when a multicast router receives an IGMPv2 Leave Group message? 	The router sends a Group-Specific Query to determine if there are any remaining hosts on the segment interested in receiving the multicast traffic.
What happens after a multicast router sends an IGMPv2 Group-Specific Query message? 	If no Membership Report message is received within 1 second, a second Query is sent. If a Membership Report is still not received, the router stops forwarding multicast traffic for that group.
What is the default value of the host IGMPv1 Router Present timeout? 	400 seconds
What is the multicast address for IGMPv3? 	224.0.0.22
What is the multicast address 224.0.0.22 used for? 	IGMPv3
What would cause a router to ignore IGMP Leave messages? 	When the router running IGMPv2 detects a host running IGMPv1 on the segment.
How long will a triggered IGMPv2 router ignore Leave messages? 	180 seconds, the IGMPv1 Host Present countdown timer
What feature enables hosts not directly connected to a downstream device to join a multicast group sourced from an upstream network (such as with UDLR)? 	IGMP Proxy
What is the term for defining boundaries that determine how far multicast traffic can travel in the network? 	Multicast scoping
What is multicast scoping? 	A definition of boundaries that determine how far multicast traffic will travel in the network.
What are the two methods of multicast scoping? 	TTL<div>Administrative (239/8)</div>
What is multicast TTL scoping? 	Limiting the TTL of multicast packets. For example, 224.0.0.0/24 packets typically have a TTL of 1 to keep the traffic in the local scope.
What is multicast adminstrative scoping? 	Filtering of multicast routes in the 239/8 range.
PIMv2 Hello messages use IP Protocol ___. 	103
PIMv2 Hello messages use which multicast address? 	224.0.0.13 (All-PIM-Routers)
What does the multicast notation (S,G) refer to? 	A particular shortest-path tree
How frequently are PIM-DM State Refresh messages sent? 	60 seconds
How do downstream PIM-DM routers remain pruned? 	Downstream PIM-DM routers send PIM-DM State Refresh messsages upstream every 60 seconds to indicate they wish to remain pruned.
What is the PIM-SM Register-Stop message used for? 	Register-Stop is used by an RP to indicate there are no interested receivers for a particular multicast group.
What is the PIM-SM Register-Suppression timer? 	A timer that is reset to 60 seconds upon receipt of a Register-Stop message from an RP do indicate that no further Regster messages should be sent.
How does a multicast router inform an RP that is has a local source for a particular multicast group? 	Register message
What is the default frequency of PIM-SM Join messages? 	60 seconds
What is required for the steady-state operation of a PIM-SM router? 	The router must sent a PIM Join message to the upstream router within the default timeout of 3 minutes, otherwise the upstream router will prune the group.
"What does the ""J"" flag indicate in the IP multicast routing table? "	The group has switched over from the RPT to the SPT.
To which address are RP-Announce messages sent? 	224.0.1.39
What is sent to the multicast address 224.0.1.39? 	RP-Announce messages
How frequently are RP-Announce messages sent? 	60 seconds
What is sent to multicast address 224.0.1.40? 	RP-Discovery messages
How is PIM sparse-dense-mode used with Auto-RP? 	The purpose of Auto-RP is to automatically distribute RP information, but a router cannot reach the RP without sending a PIM Join, and it cannot send a PIM Join without knowing the RP. Sparse-dense-mode allows the RP to be discovered with dense-mode. After the RP is discovered, sparse-mode is used.
How can multiple PIM-SM BSRs coexist on the network? 	The single Preferred BSR is elected by highest priority, then highest IP, and continues to send Boostrap messages while the other candidate BSRs monitor and re-elect if the Preferred BSR's messages stop.
What protocol provides a method of RPs in different multicast domains to register multicast sources with each other? 	MSDP
How frequently are MSDP SA messages sent? 	60 seconds
How are MSDP SA messages exchanged? 	Unicast TCP between peer RPs
What is a restriction of the default SSM IP range? 	Shared trees are not allowed, and (*,G) joins are dropped.
Query, Report, and Done are three types of messages used by which protocol? 	MLD
What type of IPv6 address is FF70::/12? 	IPv6 Embedded RP
What is represented in the following address format?<div><br /></div><div>FF7&lt;scope&gt;:0&lt;RP interface ID&gt;&lt;hex prefix length&gt;:&lt;64-bit RP prefix&gt;:&lt;32-bit group ID&gt;:&lt;1-F&gt;</div> 	IPv6 Embedded RP
Routine,&nbsp;Priority,&nbsp;Immediate,&nbsp;Flash,&nbsp;Flash Override,&nbsp;Critical,&nbsp;Internetwork Control, and&nbsp;Network Control are the names for what? 	IP Precedence values
With the AFxy PHBs, what does x signify? 	Higher values of x receive better queuing treatment.
With the AFxy PHBs, what does y signify? 	Higher values of y have a higher probability of being dropped.
With the AFxy PHBs, how does AF11 compare to AF33? 	AF33 will have better queuing treament, but have a higher probability of being dropped.
What does the PHB value 46 indicate? 	Expedited Forwarding
What are two PHB actions associated with EF? 	<div>-Queue EF packets so they get scheduled quickly, for low latency</div><div>-Police EF packets so they do not consume all bandwith on the link or starve other queues</div>
What is the default time interval over which IOS measures packet and bit rates on an interface? 	5 minutes
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 5 / 5 / EF? 	Voice payload
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 4 / 4 / AF41? 	Video payload
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 3 / 3 / CS3? 	Voice and video signaling
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 3 / 3 / AF31,AF32,AF33? 	Mission-critical
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 2 / 2 / AF21,AF22,AF23? 	Transactional
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 1 / 1 / AF11,AF12,AF13? 	Bulk
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 0 / 0 / BE? 	Best-Effort
What type of traffic does Cisco recommend be marked with CoS / IPP / DSCP values of 0 / 0 / 2,4,6? 	Scavenger
How does Cisco IOS QoS pre-classification work? 	QoS pre-classification works by keeping the original unencrypted traffic in memory until the egress QoS actions are taken.
What Cisco IOS feature&nbsp;permits routers to make egress QoS decisions based on the original traffic before encapsulation. 	QoS pre-classification
What is the QoS drop policy? 	The rules used to choose which packets to drop as queues begin to fill.
What is QoS scheduling? 	The logic used to determine which packet should be dequeued next.
With CBWFQ and LLQ, what queue requires no configuration? 	class-default<div><br /></div><div>This queue always exists even if no configuration for it is defined.</div>
What happens if a packet does not match any explicitly configured classes in a policy-map? 	It is placed into the class-default class.
What happens with the CBWFQ scheduler if some queue classes are empty and do not need their bandwidth for a short period? 	The bandwidth is proportionally allocated across the other classes.
What is the term for when a queue is full and there is no place to put newly-arriving packets? 	Tail drop
What is a WRED Full Drop? 	A WRED Full Drop occurs when the average queue depth is higher than the configured maximum threshold, and all new packets are discarded.
Minimum and Maximum thresholds, and the Mark Probability Denominator (MPD) are components of what? 	WRED traffic profile
What is the&nbsp;Modified Deficit Round-Robin (MDRR) PQ strict priority mode? 	Strict priority mode serves the PQ whenever traffic is present in the queue.
What is an issue with the&nbsp;Modified Deficit Round-Robin (MDRR) PQ strict priority mode? 	The PQ is always serviced first, which can lead to starvation of the other queues.
How does Modified Deficit Round-Robin (MDRR) PQ alternate mode work? 	Alternate mode serves the PQ in between servicing each of the other queues: 0, P, 1, P, 2, P, etc.
What is a caveat of using Modified Deficit Round-Robin (MDRR) PQ alternate mode? 	Alternate mode prevents queue starvation at the expense of jitter and latency as compared to strict priority mode.
What is the Modified Deficit Round-Robin (MDRR) Quantum Value? 	The Quantum Value is the number of bytes the queue holds.
What is the Modified Deficit Round-Robin (MDRR) Deficit Count? 	The Deficit Count is the number of bytes beyond the Quantum Value that were transmitted in a single round-robin pass.
What is a feature of Weighted Tail Drop? 	WTD allows configuration per-queue.
With&nbsp;RSVP, what is the default total and per-flow bandwidth reservation? 	The default total bandwidth reservation is 75% of the interface bandwidth, and any single flow can reserve the entire bandwidth.
What is the shaper static time interval (Tc) measured in? 	Milliseconds
What is the formula for calculating Tc? 	Tc = Bc / CIR
What does committed burst (Bc) refer to? 	The number of bits that a shaper can send within a time interval (Tc)
What defines the rate for a virtual circuit based on a business contract? 	CIR Committed Information Rate
What is the CIR? 	Committed Information Rate defines the rate for a virtual circuit based on a business contract.
What is burst excess (Be)? 	Be is the number of bits beyond the Bc that are allowed to be sent during a given Tc
With single-rate, two-color policing, what state is the traffic considered if the size of the packet to be transmitted is equal to or less than the number of tokens available in the Bc bucket? 	Conforming
With single-rate, two-color policing, what does this notation indicate?<div><br /></div><div>Xp &lt;= Xb</div> 	Traffic is conforming
With single-rate, two-color policing, what state is the traffic considered if the size of the packet to be transmitted is greater than the number of tokens available in the Bc bucket? 	Exceeding
With single-rate, two-color policing, how many tokens are drained from the Bc bucket when traffic is exceeding? 	None, traffic cannot be transmitted until tokens have been replenished
With single-rate, two-color policing, what does this notation indicate?<div><br /></div><div>Xp &gt; Xb</div> 	Traffic is exceeding
With single-rate, three-color policing, what state is the traffic considered if the size of the packet to be transmitted is greater than the number of tokens available in both Bc and Be buckets? 	Violating
With single-rate, three-color policing, what does this notation indicate?<div><br /></div><div>Xp &gt; Xbc + Xp &gt; Xbe</div> 	Traffic is violating
With single-rate, three-color policing, how many tokens are drained from the Bc and Be buckets when traffic is violating? 	None, traffic cannot be transmitted until tokens have been replenished
With dual-rate, three-color policing, how are the token buckets replenished? 	The Bc bucket is replenished at the CIR<div>The Be bucket is replenished at the PIR</div>
When the Bc bucket is replenished at the CIR, and the Be bucket is replenished at the PIR, what type of policing is this? 	dual-rate, three-color policing
With dual-rate, three-color policing, how does a conforming packet affect the token buckets? 	A conforming packet drains tokens equally from both Bc and Be buckets. That is, the same packet uses double the number of tokens with the dual-rate model.
With dual-rate, three-color policing,&nbsp;what state is traffic considered to be if a packet drains tokens equally from both Bc and Be buckets? 	Conforming
With dual-rate, three-color policing,&nbsp;when is traffic considered to be conforming? 	When there are enough tokens in both the Bc and Be buckets, as a conforming packet drains tokens equally from both buckets.
With dual-rate, three-color policing,&nbsp;what happens when traffic is considered to be exceeding? 	An exceeding packet drains tokens from the Be bucket
With dual-rate, three-color policing,&nbsp;what is the state of traffic that drains tokens from the Be bucket only? 	Exceeding
What is multi-action policing? 	When multiple fields in the same packet are marked during class-based policing.
Single-rate, two-color policing is used by what legacy technology? 	CAR Committed Access Rate
What is the term for breaking up larger packets and sending delay-sensitive packets between the larger packets? 	LFI Link Fragmentation and Interleaving
Where is the use of LFI most effective? 	Links with 768k or less bandwidth
What happens after PPP compression is enabled on a link? 	PPP starts the CCP Compression Control Protocol NCP
What does the PPP NCP CCP Compression Control Protocol do? 	Negotiates and manages the compression process
How do you configure PPP TCP or RTP header compression on an interface? 	Interface:<div><b>ip&nbsp;</b>{<b>tcp&nbsp;</b>|&nbsp;<b>rtp</b>}&nbsp;<b>header-compression</b></div><div><b><br /></b></div><div>This is considered legacy, and class-based policy-maps should be used instead.</div>
When DAI is enabled, what is the default rate limit of ARP messages accepted per port per second? 	15
What is the default rate at which a port enabled for DHCP Snooping will accept DHCP messages? 	Unlimited by default
True or False: IP Source Guard using static bindings does not depend on DHCP Snooping. 	False, DHCP Snooping must be enabled, even if static bindings are used.
When enabling IP Source Guard, what does the <b>port-security </b>keyword do? 	The&nbsp;<b>port-security&nbsp;</b>keyword enables verification of both IP and MAC.
What devices exchange EAPoL frames? 	802.1X supplicant and authenticator
With 802.1X enabled, how do you configure a port for authentication? 	Interface:<div><b>authentication port-control&nbsp;</b>{<b>auto&nbsp;</b>|&nbsp;<b>force-authorized&nbsp;</b>|&nbsp;<b>force-unauthorized</b>}</div>
How do you enable a device for 802.1X authentication? 	Globally:<div><b>aaa authentication dot1x default group radius</b></div><div><b>dot1x system-auth-control</b></div>
How do you adjust the parameters for individual traffic types with Storm Control? 	Interface:<div><b>storm-control&nbsp;</b><i>traffic-type&nbsp;</i><b>level&nbsp;</b><i>rising&nbsp;</i>[<i>falling</i>]</div><div><br /></div><div><i>traffic-type&nbsp;</i>is either broadcast, multicast, or unicast, and is set individually with multiple statements.</div><div><br /></div><div>The&nbsp;<b>level&nbsp;</b>refers to the rate of packets as either a percentage of the link bandwidth, bps, or pps, and can have separate rising and falling thresholds.</div>
What types of ACLs use the numbered range of 1-99 and 1300-1999? 	IP Standard
What types of ACLs use the numbered range of 100-199 and 2000-2699? 	IP Extended
What is uRPF strict mode? 	Strict mode uses the&nbsp;<b>rx&nbsp;</b>keyword, and causes the router to check incoming packets to see if the router has a route back to the source IP address out of the interface the packet was received on.
What is uRPF loose mode? 	When a router receives a packet, it examines the source IP address and verifies that it has any route in its routing table to reach the source (ignoring the default route by default).
What are the two modes of operation for Cisco IOS TCP Intercept? 	Watch mode<div>Intercept mode</div>
How does Cisco IOS TCP Intercept operate in Watch mode? 	In Watch mode, it keeps state information for TCP connections that match an ACL, and if TCP does not complete the 3-way handshake within a particular time period, TCP Intercept sends a TCP RST to the destination to clean up the connection. Watch mode also temporarily denies new TCP requests if more than 1100 occur in one second.
How does Cisco IOS TCP Intercept operate in Intercept mode? 	In Intercept mode, the router replies to TCP SYNs instead of forwarding them. If the 3-Way Handshake completes, the router creates a TCP connection to the destination, then stitches the two connections together.
What is the purpose of the&nbsp;<b>ip nhrp network-id&nbsp;</b>command? 	On the DMVPN Tunnel Interface,&nbsp;<b>ip nrhp network-id&nbsp;</b><i>id&nbsp;</i>enables NHRP, which is critical to the operation of DMVPN. All routers and interfaces configured with the same ID belong to the same DMVPN.
When configuring an ISAKMP PSK for use with DMVPN, what value should the <b>address </b>be set to? 	0.0.0.0
When configuring an ISAKMP PSK for use with DMVPN, why should the <b>address </b>be set to 0.0.0.0? 	With DMVPN, use 0.0.0.0 for the address since the configuration relies on dynamic IP addresses on the spoke routers.
What is adding DMVPN spokes without changing configuration on the hub referred to as? 	Zero-touch provisioning
What is the IPv6 address format of an automatic 6to4 tunnel border router? 	2002:<i>border-router-IPv4-address</i>::/48
Which type of IPv6 address is represented?<div><br /></div><div>2001:0db8:0abc:0def:0000:5efe:ac14:1401</div> 	ISATAP
Which type of IPv6 addressing is represented here?<div><br /></div><div><i>64-bit-prefix</i>:0000:5efe:<i>ipv4-in-hex</i></div> 	ISATAP
True or False: RAs are enabled by default on tunnel interfaces. 	False, RAs are disabled by default on tunnel interfaces.
What is the relationship between ISATAP tunnel interfaces and IPv6 RAs? 	RAs are disabled by default on tunnel interfaces, but must be enabled on ISATAP tunnels.
How do you verify which VLANs have been pruned? 	<b>show interfaces pruning</b>
What happens if VTP pruning is enabled, and a device attached to a trunk port either does not support VTP, is in a different VTP domain, or is in VTP Transparent mode? 	VTP pruning is effectively disabled across the VTP domain because it is unclear as to which VLANs might be needed across the port.
If VTP pruning is enabled, and a device attached to a trunk port either does not support VTP, is in a different VTP domain, or is in VTP Transparent mode, how can you allow VTP pruning to operate correctly without modifying any VTP settings? 	Manually configure the allowed VLANs on the trunk
What three things can cause VTP pruning to be effectively disabled? 	<div>A trunk port connecting to either:</div><div>-Device that doesn't support VTP</div><div>-Device in a different VTP domain</div><div>-Device in VTP Transparent mode</div>
With class-based shaping, what is the Tc value when the rate is more than 320 kbps? 	25 ms
With class-based shaping, what is the Bc value when the rate is more than 320 kbps? 	Tc (25 ms) * shaping rate
What allows more than two devices to exchange traffic securely without requiring a high number of SAs? 	GET VPN
With GET VPN, what is generated by the Key Server and used by the Group Members to encrypt data? 	TEK Transport Encryption Key
With GET VPN, what is used to encrypt information between the Key Server and the Group Members? 	Key Encryption Key
What is the difference between forwarded and local TTL propagation in MPLS networks? 	Forwarded TTL propagation carries the original packet's TTL value through the MPLS network, decrementing the value at each hop.<div><br /></div><div>Local TTL propagation carries the TTL generated by packets sourced from the MPLS router itself, staying inside the MPLS network.</div>
What are the two types of MPLS TTL propagation in Cisco IOS? 	TTL propagation can be enabled/disabled individually for forwarded traffic, and for locally-originated traffic. For example, you can disable TTL propagation for forwarded traffic, which effectively hides the internals of the MPLS network between the CEs, but still have locally-originated traffic propagate the TTL in order to use tools like traceroute internally to the MPLS network.
When establishing TCP connections in LDP, what IP address is used if the transport address is not specified? 	The LDP ID
What happens after LDP neighbors are discovered? 	TCP connections are established over port 646, and local label bindings are advertised.
How is LDP neighbor discovery performed? 	Hellos are multicast to 224.0.0.2 UDP port 646
After LDP neighbor discovery, what is the responsibility of the neighbor with the highest LDP ID? 	Initiate the TCP connection between neighbors to exchange label bindings
What neighbor state is BGP in after Open messages have been exchanged? 	Established
How do you adjust BGP keepalive and hold timers for a neighbor? 	<b>neighbor&nbsp;</b><i>ip-address&nbsp;</i><b>timers&nbsp;</b><i>keepalive holdtime</i>
How do you modify the source IP address used to reach a BGP neighbor? 	<b>neighbor&nbsp;</b><i>ip-address&nbsp;</i><b>update-source&nbsp;</b><i>interface</i>
When performing basic neighbor authentication in BGP, what algorithm is used? 	MD5
What is a best configuration practice for BGP when there is more than one route through which the BGP router can reach a peer? 	Use loopback interfaces
What is the default state of BGP synchronization? 	Disabled
What state is BGP in when BGP has been enabled, but neighbors have not yet been configured? 	Idle
What state is BGP in when BGP has been enabled, but is not listening for any TCP connections? 	Idle
What is the BGP state when the BGP process detects that a peer is trying to establish a TCP connection? 	Connect
During which state is BGP trying to establish a TCP session with a neighbor? 	Active
Open, Keepalive, Update, and Notification refer to what? 	The four basic BGP message types
What BGP message is used to establish neighbor relationships and exchange basic parameters? 	Open
What BGP message is used to maintain neighbor relationships? 	Keepalive
What BGP message is used to exchange NLRI? 	Update
What type of BGP message is sent if an error or configuration change affects the peering session? 	Notification
What information is included with a BGP Notification message? 	FSM error code
True or False: When BGP <b>auto-summary </b>is enabled, and the <b>network </b>command is used, subnets are still injected into the BGP table if they exist in the IP routing table. 	True<div><br /></div><div>This does not occur with the <b>redistribute </b>command and <b>auto-summary</b></div>
AS_SEQ, AS_SET, AS_CONFED_SEQ, and AS_CONFED_SET are components of what? 	BGP AS_PATH path attribute
What is the BGP AS_SET path attribute? 	An unordered list of ASNs
What BGP construct represents an unordered list of ASNs? 	AS_SET path attribute
When using the BGP&nbsp;<b>aggregate-address&nbsp;</b><i>summary mask&nbsp;</i><b>as-set&nbsp;</b>command, what causes the AS_SET value to be filled? 	The AS_SET is generated only if the AS_SEQ is null.
When using the BGP <b>aggregate-address </b>command, what keyword causes only the summary route to be advertised? 	The <b>summary-only </b>keyword
When using the BGP <b>aggregate-address </b>command, what can be used to filter some of the component subnets? 	The <b>suppress-map </b>keyword
Withdrawn routes, PAs for each route, and prefix/length for each NLRI, are the three main components of what? 	BGP Update message
With BGP, what are confederations, route reflectors, and a full mesh of iBGP peerings an alternative to? 	Enabling synchronization
Why do BGP confederation peers need to be identified? 	<div>Confederation peers need to be identified because while the connections appear as eBGP, they do not work as true eBGP connections do. Confederations modify the AS_PATH PA with AS_CONFED_SEQ and AS_CONFED_SET attributes, which are used to prevent loops between the confederations sub-ASes.&nbsp;</div><div><br /></div><div>When the routes are advertised to a true eBGP peer, the AS_CONFED information is removed.</div>
What happens when BGP routes from a confederation are advertised to a true eBGP peer? 	The AS_CONFED information is removed.
How do you revert a router participating in a BGP confederation back to a regular BGP router? 	A BGP confederation router is defined with the regular <b>router bgp </b><i>asn </i>command, which means you must remove and re-apply the BGP configuration to leave the confederation.
With BGP route reflectors, what is the default cluster ID? 	The BGP RID of the RR
In a BGP route reflector environment, how can you verify which router originated a particular prefix? 	Originator in <b>show ip bgp </b><i>prefix</i>
What type of attributes are MP_REACH_NLRI and MP_UNREACH_NLRI? 	Optional nontransitive
What is contained inside BGP MP_REACH_NLRI and MP_UNREACH_NLRI? 	AFI<div>Next_Nop</div><div>NLRI</div>
How do you enable soft reconfiguration for inbound BGP Updates? 	BGP process:<div><b>neighbor </b><i>ip </i><b>soft-reconfiguration inbound</b></div>
What is the regex metacharacter for the start of a line? 	^
What is the regex metacharacter for the end of a line? 	$
What is the regex metacharacter for a logical OR applied between the preceeding and succeeding characters? 	| &nbsp;(pipe)
How do you apply a regex logical OR comparison between two strings? 	(string1)|(string2)<div><br /></div><div>Strings enclosed in parenthesis separated by a pipe</div>
What is the regex metacharacter for any delimter, such as a blank, comma, start of line, end of line? 	_ &nbsp; &nbsp;(underscore)
What is the regex metacharacter for any single character? 	. &nbsp; (period)
What is the regex metacharacter for zero or one instance of a preceeding character? 	?
What is the regex metacharacter for zero or more instances of the preceeding character? 	* &nbsp;(asterisk)
What is the regex metacharacter for one or more instances of the preceding character? 	+
What is the regex metacharacter to reference a string? 	(string) &nbsp; string enclosed in parenthesis
What is the regex metacharacter for referencing a set of characters in any order? 	[string] &nbsp; &nbsp;characters enclosed in square brackets
What is the BGP regex .* useful for? 	Matching all AS_PATHs, which is useful as a final match in an as_path access-list to change the default from deny to permit.
What does this regex match?<div><br /></div><div>^$</div> 	null
What BGP regex matches NLRIs originated in the same AS? 	^$
What does this BGP regex match?<div><br /></div><div>^123$</div> 	An AS_PATH containing only the single ASN 123
What BGP regex matches an AS_PATH containing only a single ASN? 	^<i>asn</i>$ &nbsp;where <i>asn </i>is the AS to be matched
What does this BGP regex match?<div><br /></div><div>^123</div> 	An AS_PATH whose first ASN begins with (or is) 123
What does this BGP regex match?<div><br /></div><div>^123_45$</div> 	An AS_PATH with two ASNs, beginning with 123 and ending with 45
What does this BGP regex match?<div><br /></div><div>^123_.*_45$</div> 	An AS_PATH beginning with AS 123, ending in AS 45, with at least one other AS in between
What does this BGP regex match?<div><br /></div><div>^123_.*45</div> 	An AS_PATH beginning with AS 123 with zero or more ASNs and delimiters, and ending with any AS whose last two digits are 45 (including AS 45 itself)
What does this BGP regex match?<div><br /></div><div>^{</div> 	An AS_PATH beginning with either an AS_SET or an AS_CONFED_SET
Within a single BGP AS, where can the Weight PA be assigned? 	The administrative weight can be assigned to each NLRI locally on the router, and is not passed on in Update messages. It is set either directly with <b>neighbor </b><i>ip </i><b>weight </b>or within a route-map.
Within a BGP AS, where can the LOCAL_PREF value be set? 	This well-known discretionary PA can be set on any router inside the AS, and is not distributed outside the AS.
Within the BGP AS_PATH, how is an AS_SET treated with regard to bestpath calculation? 	As a single ASN, regardless of the number of ASNs in the set
How do you configure a router to disregard the AS_PATH lengh when calculating the BGP best path? 	BGP process:<div><b>bgp bestpath as-path ignore</b></div>
What does the following command do?<div><br /></div><div><b>bgp besthpath as-path ignore</b></div> 	This command causes BGP to disregard the AS_PATH length when calculating the BGP best path
What is the default BGP Weight for learned routes? 	0
How do you automatically remove private BGP ASNs in outbound Updates? 	BGP process:<div><b>neighbor&nbsp;</b><i>ip&nbsp;</i><b>remove-private-as</b></div>
How do you configure BGP to take the MED value into consideration when multiple routes to a single NLRI pass through different neighboring ASNs? 	BGP process:<div><b>bgp always-compare-med</b></div>
What is a caveat of enabling the <b>bgp always-compare-med </b>command? 	If you implement this command, you should implement it on all routers in an AS, otherwise routing loops can occur.
What is the default BGP behavior with regard to the MED value when multiple routes to a single NLRI pass through different neighboring ASNs? 	Ignore the MED value unless configured with <b>bgp always-compare-med</b>
If a BGP router has a current best route installed from an eBGP neighbor, but receives an otherwise identical route from an eBGP neighbor with a smaller RID, how do you configure the router to accept and use the new route? 	BGP process:<div><b>bgp bestpath compare-routerid</b></div>
If a BGP router has a current route for a prefix through an eBGP neighbor, but receives an otherwise identical route from another eBGP neighbor with a lower BGP RID, why is the existing route kept? 	To avoid route flaps. This behavior can be changed with <b>bgp besthpath compare-routerid</b><div><b><br /></b></div><div>This applies only to eBGP routes. iBGP routes always use the lowest RID as the tiebreaker.</div>
What causes the lowest BGP neighbor ID (IP address) to be used as the final best path tiebreaker? 	This is used when the route is coming from a router who has multiple separate neighbor relationships, as opposed to a single relationship using loopback addresses.
What is the value of the BGP NO_EXPORT community? 	FFFF:FF01
What BGP community has the value FFFF:FF01? 	NO_EXPORT
What is the value of the BGP NO_ADVERT community? 	FFFF:FF02
What BGP community has the value FFFF:FF02? 	NO_ADVERT
What is the value of the BGP LOCAL_AS / NO_EXPORT_SUBCONFED community? 	FFFF:FF03
What BGP community has the value FFFF:FF03? 	LOCAL_AS / NO_EXPORT_SUBCONFED
What is the default Update interval for iBGP peers? 	5 seconds
What BGP term is used for the process of directly-connected neighbors being torn down when the connected subnet is lost, BGP routes immediately being flushed, and BGP immediately looking for alternate routes? 	BGP fast external fall-over
How do you enable BGP fast peering session deactivation? 	<div>BGP process:</div><div><b>neighbor&nbsp;</b><i>ip&nbsp;</i><b>fall-over&nbsp;</b>[<b>route-map&nbsp;</b><i>map</i>]</div><div><br /></div><div>Fast external fall-over is automatic. This command must be enabled for iBGP sessions or when the fall-over needs to be conditional.</div>
Why would you disable the default BGP external fast fall-over detection? 	A common use case for disabling fast external fall-over detection is when you want to control the behavior per-neighbor with the BGP command&nbsp;<b>neighbor&nbsp;</b><i>ip&nbsp;</i><b>fall-over&nbsp;</b>[<b>route-map&nbsp;</b><i>map</i>]
When more-specific BGP routes have been filtered via the&nbsp;<b>aggregate-address</b>&nbsp;command, how do you selectively re-advertise more specific routes per-neighbor? 	BGP process:<div><b>neighbor </b><i>ip </i><b>unsuppress-map</b></div>
Errors and collisions on an Ethernet link are typically an indication of what? 	Duplex mismatch
Protocols invented by the IEEE typically use which Ethernet frame format? 	IEEE 802.3 + 802.2 LLC
Vendor-proprietary Layer 2 protocols such as CDP typically use which type of Ethernet frame format? 	IEEE 802.3 SNAP
How do you prevent a VSS standby switch from coming up in RPR mode? 	The port channel numbers for the VSL must be different on each switch and must be available for use.
What happens to the switch interfaces after VSS mode is enabled? 	<div>When in VSS mode, interfaces follow the naming convention:</div><div>switch-number/slot/port</div>
What is the IOS-XE Forwarding Engine Driver (FED)? 	The FED allows the drivers to affect the data plane, and is provided by the platform (similar to a network card driver in a traditional operating system)
What is the IEEE 802.3u standard? 	100 Mbps Ethernet over copper and optical cabling
What is the IEEE 802.3z standard? 	Gigabit Ethernet over optical cabling
What is the IEEE 802.3ab standard? 	Gigabit Ethernet over twisted-pair copper cabling
What is cut-through switching? 	Cut-through switching performs the address-table lookup as soon as the Destination Address field in the header is received which results in lower latency, but does not allow the switch to discard frames that fail the FCS.
What is fragment-free switching? 	Fragment-free switching is similar to cut-through, but waits until the first 64 bytes of the frame are received before switching, since Ethernet collisions should be detected within the first 64 bytes of the frame.
What two Layer 2 technologies separate switch ports as if they were on different VLANs while consuming only a single IP subnet? 	Private VLANs<div>Protected ports (aka PVLAN Edge)</div>
How is the VLAN tag manipulated with a promiscuous Private VLAN trunk? 	Traffic from secondary VLANs have their tags rewritten as the primary VLAN tag when being sent over the trunk. No tag manipulation is performed for received frames.
How is the VLAN tag manipulated with an isolated Private VLAN trunk? 	When traffic is sent across the isolated PVLAN trunk, the primary VLAN ID is changed to the isolated secondary VLAN ID. When frames are received, no tag manipulation is performed.
What is a protected port? 	A protected port is similar to a private VLAN Isolated port. Protected ports are essentially a subset of private VLAN functionality. Protected ports cannot communicate with other protected ports on the same switch.
Why will DTP not negotiate a trunk link if the VTP domain names are different? 	This design decision was chosen because different VTP domains may use the same VLANs, but for different purposes, so bridging them together should not be automatic.
Why is it common to tag the native VLAN in a QinQ environment? 	This prevents the issue of a customer's untagged frames from being misforwarded or blackholed when the S-tag is added.
How to you enable Layer 2 management protocols to be forwarded across a QinQ tunnel? 	<div>Interface:</div><div><b>l2protocol-tunnel</b>&nbsp; &lt;-- enables all</div><div><b>l2protocol-tunnel&nbsp;</b>[<b>cdp</b>] [<b>lldp</b>] [<b>stp</b>] [<b>vtp</b>]</div>
What does the command <b>l2protocol-tunnel </b>do? 	Permits Layer 2 management protocols, such as CDP, STP, etc, across a QinQ tunnel.
How does VTPv1 handle unknown TLVs? 	VTPv1 drops all unrecognized TLVs from received messages
How does VTPv2 handle unknown TLVs? 	VTPv2 propagates all TLVs even if they are unrecognized
How frequently are VTP Summary Advertisement messages generated? 	Every 5 minutes, and after each modification to the VLAN database
With VTP, what type of message is generated with each modification to the VLAN database? 	VTP Summary Advertisement
Which VTP messages contain the full contents of the VLAN database? 	VTP Subset Advertisement
How many VLAN entries can be contained in a VTP Subset Advertisement message? 	One message can hold multiple VLAN database entries, but multiple messages might be required if the VLAN database is large.
What VTP message is used to request VTP neighbors to send all or part of their VTP database? 	VTP Advertisement Request
What type of VTP message is sent under the following circumstances:<div><br /></div><div>-When a VTP Client switch is restarted<div>-When a switch enters VTP Client mode</div><div>-When a Server or Client receives a Summary Advertisement with a higher revision number than its own</div></div> 	VTP Advertisement Request
How frequently are VTP Join messages sent? 	6 seconds
When are VTP Join message used? 	When VTP Pruning is enabled
Which IP address is used as the VTP Updater address by default? 	The IP of the lowest-numbered SVI
How do you disable VTP completely for switches that support VTPv3? 	Globally:<div><b>vtp mode off</b></div>
How did PVST operate prior to the 802.1t amendment? 	Prior to the 802.1t amendment, Per-VLAN Spanning-Tree required a separate unique MAC address for the BID for each VLAN, which consumed a large number of reserved MAC addresses on each switch.
What is IEEE 802.1t referred to as? 	MAC address reduction
What is the default STP cost method? 	<div>The&nbsp;<b>short&nbsp;</b>(802.1D-1998) method is used by default for (R)PVST.</div><div><br /></div><div>The l<b>ong&nbsp;</b>(802.1D-2004) method is used by default for MST.</div>
What is an RSTP Alternate port? 	Replacement Root port using event-driven operations
What RSTP port serves as an event-driven replacement for the Root port? 	Alternate port
What is an RSTP Backup port? 	Replacement Designated port with timer-driven operation
What RSTP port serves as a timer-driven replacement for a Designated port? 	Backup port
What happens if an RSTP Edge port receives a BPDU? 	It begins operating as a Non-Edge port
What are the RSTP link types? 	Point-to-point<div>Shared</div>
Which MST port provides connectivity toward the CIST Root? 	Master port
If the BPDUs sent by the MST boundary port are superior to all received PVST+ BPDUs on the port, what is the port type? 	Designated
If the MST boundary port receives PVST+ BPDUs that are identical or superior to the received PVST+ BPDU for VLAN 1, what is the port type? 	Root
If the incoming VLAN 1 PVST+ BPDU is superior to its own BPDUs, but not superior enough to make it become a Root port, what is the MST boundary port type? 	Non-Designated (blocked)
With MST, if the Root Bridge for the CIST is in a non-MST region, the STP priority of VLANs 2 and above within that region must be ___ to that of VLAN 1&nbsp;to prevent PVST Simulation Inconsistent / Root Inconsistent errors. 	superior
With MST, if the Root Bridge for the CIST is within a MST region, the STP priority of VLANs 2 and above in the non-MST regions must be ___ than that of the CIST root to prevent PVST Simulation Inconsistent / Root Inconsistent errors. 	inferior
When issuing the <b>show spanning-tree mst configuration digest </b>command, one MD5 digest is listed. What does this indicate? 	If a single MD5 value is listed, the switch only supports pre-standard MST. Two MD5 digests indicate support for both standard and pre-standard MST.
What feature err-disables a port immediately upon receipt of any BPDU? 	BPDU Guard
What is a limitation of enabling BPDU Guard globally? 	Only ports operating as PortFast are affected.
What do UDLD, Loop Guard, Bridge Assurance, and the RSTP Dispute mechanism have in common? 	They are all designed to detect and avoid issues caused by unidirectional links.
The switch / port pair identity and a list of all neighboring switch / port pairs heard on the same segment are transmitted in what? 	UDLD messages
What prevents Root and Alternate ports from becoming Designated due to total loss of incoming BPDUs? 	Loop Guard
What is the difference between configuring Loop Guard globally or per-port? 	Global configuration protects point-to-point links. Port configuration additionally protects shared links.
<div>What causes a Designated port to keep its role but move to a Discarding state if it receives an inferior BPDU from another port that claims to be Designated Learning or Designated Forwarding?</div> 	RSTP Dispute mechanism
What information does the RSTP Dispute mechanism use to determine what action to take? 	Port Role and Port State flags in the RSTP BPDU
What is the default state of EtherChannel Misconfig Guard? 	Enabled by default
What technology disables an entire port-channel bundle if BPDUs with different MAC addresses are received on the port-channel interface? 	EtherChannel Misconfig Guard disables an entire port-channel bundle if it receives BPDUs sources from different MAC addresses on a port-channel interface, indicating that the neighbor is treating some of the links as individual and not bundled together.&nbsp;
IEEE 802.1AX is the standard for what? 	LACP<div><br /></div><div>Previously 802.3ad</div>
What is the frequency of PAgP messages in normal mode? 	30 seconds
What is the frequency of PAgP messages in fast mode? 	1 second
IEEE 802.1AB is the standard for what? 	LLDP
What type of STP inconsistency is caused when PVST+ BPDUs are received on a non-802.1Q port? 	Type (*TYPE_Inc)
What type of STP inconsistency occurs when PVST+ BPDUs are received in a different VLAN than they were originated in? 	Port VLAN ID (*PVID_Inc)
What typically causes the STP PVID inconsistency error? 	Native VLAN mismatch
What type of STP inconsistency is caused when PVST+ BPDUs received on an MST boundary port do not meet the PVST Simulation consistency criteria? 	PVST Simulation (*PVST_Inc)
What type of STP inconsistency is caused when a Loop Guard protected Root or Alternate port was prevented from becoming Designated after BPDUs stopped arriving? 	Loop (*LOOP_Inc)
What type of STP inconsistency is caused when a Root Guard protected port receives superior BPDUs? 	Root (*ROOT_Inc)
What type of STP inconsistency is caused when a Bridge Assurance protected port stops receiving BPDUs? 	Bridge Assurance (*BA_Inc)
"What does ""MD5 digest checksum mismatch"" mean when issuing the <b>show vtp status </b>command? "	Mismatched VTP password
What is the DF bit in the IPv4 header commonly used for? 	Path MTU Discovery
What mechanism facilitates Path MTU Discovery? 	The DF (don't fragment) bit in the IPv4 header
What is the MF bit in the IPv4 header? 	The MF bit is set in all packet fragments except for the final fragment.
What does this MAC address correspond to?<div><br /></div><div>0000.0C07.AC01</div> 	HSRP group 1
What does this MAC address correspond to?<div><br /></div><div>0000.5E00.0101</div> 	VRRP group 1
What does this MAC address correspond to?<div><br /></div><div>0007.B400.0101</div> 	GLBP group 1 AVF 1<div><br /></div><div>0007.B40X.xxyy where Xxx is the 10-bit GLBP group number, and yy is the AVF number.</div>
How does GLBP addressing work? 	0007.B40X.xxyy where Xxx is the 10-bit GLBP group number, and yy is the AVF number.
What is the SNMP Agent? 	The device being managed
What is the term for the management software polling the SNMP agent on a device? 	SNMP Manager
What is SNMP SMI? 	Structure of Management Information (SMI), the SNMP data definition refers to syntax conventions for how to define the data to an agent or manager.
What is associated with UDP port 161? 	SNMP
What is associated with UDP port 162? 	SNMP traps
What is used to supply SNMP information and acknowledge the receipt of other SNMP messages? 	SNMP Response message
Response and Trap are two SNMP messages typically sent by what? 	SNMP Agent
What is used to send unsolicited information to SNMP Managers? 	SNMP Trap
Which message is used between SNMP managers to allow MIB data to be exchanged? 	SNMP Inform
What is associated with UDP port 514? 	Syslog
A set of predefined and user-defined key fields (such as source/destination IP and port) for network monitoring are defined in what? 	Netflow records
What&nbsp;collects information about flows and is applied to an interface and includes records, a cache, and optionally a flow exporter. 	Netflow monitor
What transfers&nbsp;the cached flow information to outside systems, which is typically a server running a NetFlow collector? 	Netflow exporter
What&nbsp;allows specifying the sample size of traffic in order to reduce the load on the NetFlow-enabled device? 	Netflow sampler
If&nbsp;a corresponding VLAN does not exist, or is not active (e.g.&nbsp;<b>state suspend&nbsp;</b>or&nbsp;<b>shutdown&nbsp;</b>on the VLAN itself), what is the status of the SVI? 	Down / Line Protocol Down
If the corresponding VLAN exists, but is not allowed and in an STP forwarding state on any Layer 2 switch port (access or trunk), what is the state of the SVI? 	Up / Line Protocol Down
During routing protocol migration, when must you configure redistribution from the current IGP into the new IGP on each router? 	If the new IGP is RIP or EIGRP
What is associated with UDP port 520? 	RIPv2
What uses multicast address 224.0.0.9? 	RIPv2
What does RIPv2 use to ask a neighbor to send a partial or full RIP update immediately, instead of waiting for the Update timer to expire? 	Request message
What is the term for advertising a route with an infinite metric in effort to more rapidly remove it from routing tables? 	Route poisoning
What is the term for immediately sending a new update when routing information changes? 	Triggered / flash update
What information is sent in a RIPv2 triggered update? 	Only the changed networks
What is the default RIPv2 Update timer? 	30 seconds
What happens if the RIPv2 Flushed After timer is set to less than the Invalid After timer? 	The Flushed After timer is not taken into consideration until after the Invalid After timer has expired. The route is not removed from the routing table until the Invalid After timer has expired.
What is the term for when RIPv2 sends a full update only once, and then is silent until changes are made? 	Triggered extensions
How do you enable RIPv2 triggered extensions? 	Interface:<div><b>ip rip triggered</b></div>
With RIPv2, there is an increased chance of transient routing loops being formed during convergence as a result of what? 	Lowering the RIP timers
What is associated with UDP port 521? 	RIPng
What is associated with multicast address FF02::9? 	RIPng
What is associated with multicast address 224.0.0.10? 	EIGRP
What is associated with multicast address FF02::A? 	EIGRP
Why is the EIGRP wide metrics composite value scaled for the RIB? 	The IOS RIB supports only 32-bit metrics, so the EIGRP 64-bit wide metrics composite value must be scaled down. EIGRP makes all path selection decisions based on the full metric, and the metric is only scaled down when it is placed in the local RIB.
What is contained in an EIGRP Reply message? 	The sender's current distance to the destination after taking into account the topology change that prompted the Query.
The EIGRP sender's current distance to the destination after taking into account the topology change that prompted the Query is contained in what message? 	EIGRP Reply
What is the EIGRP SRTT used for? 	It is used as part of the calculation of the neighbor multicast flow timer, and the RTO retransmission timeout.
What is the EIGRP RTO? 	The RTO retransmission timeout is the time between subsequent unicasts to be sent after normal multicasts have failed.
What controls the amount of time before EIGRP messages are unicast after normal multicasts have failed? 	The EIGRP RTO retransmission timeout
What timer controls how long to wait for an ACK before declaring an EIGRP neighbor as lagging, and switching from multicast to unicast transmissions? 	The EIGRP multicast flow timer
What is the basis for the EIGRP multicast flow timer and RTO values? 	Both timers are calculated based on the SRTT of the neighbor. This allows for each neighbor to have different automatically-calculated timers.
What two EIGRP timers are based on the SRTT of a neighbor? 	Multicast flow timer<div>RTO retransmission timeout</div>
What is the result of the EIGRP neighbor hold timer expiring? 	The neighbor is declared unreachable and DUAL is informed of the loss of a neighbor.
EIGRP Hello, Ack, and Null Update with the Init flag set are the only packets that can be exchanged during which EIGRP neighbor state? 	Pending
What is the internal number EIGRP assigns to each neighbor for reference? 	Handle
What is the EIGRP metric to a particular destination as received from a particular neighbor. 	Reported Distance
What is the result of the EIGRP Reported Distance + cost of the link to the advertising neighbor? 	Computed Distance
What is the historical record of the smallest known&nbsp;EIGRP&nbsp;Computed Distance toward a particular destination since its last transition from Active to Passive? 	Feasible Distance
What is the EIGRP term for a neighbor's Reported Distance being less than the current Feasible Distance to a destination? 	Feasibility Condition
What is an EIGRP Feasible Successor? 	Any neighbor that can guarantee a loop-free path toward a particular destination is said to have met the Feasibility Condition and is therefore a Feasible Successor.
What happens if an EIGRP router receives a Query and determines its current Feasible Successors are still valid? 	The router sends a Reply back to the neighbor with its information about the destination
What happens if an EIGRP router receives a Query and determines its current Feasible Successors are no longer valid? 	The route becomes Active and the router starts its own Query process
What does the following refer to?<div><br /></div><div>A0: Local Origin with Distance Increase<div>A1: Local Origin</div><div>A2: Multiple Origins</div><div>A3: Successor Origin</div></div> 	The four EIGRP FSM Active states.&nbsp;The names refer to the origin of the diffusing computation, e.g. which router appears to have started it.&nbsp;
What happens if the EIGRP Active time expires? 	If all expected Replies are not received before the Active timer expires, the route is designated SIA and the neighbor(s) that did not send back a Reply are removed from the neighbor table and their adjacencies are torn down.
What happens if an EIGRP neighbor does not respond with a Reply within half of the Active timer time (90 seconds by default)? 	An SIA-Query message is sent
What happens if you issue EIGRP commands on an interface when using EIGRP named mode? 	The commands are ignored, and must be configured under the EIGRP af-interface, not directly on the interface itself.
What configuration&nbsp;causes EIGRP to retain all Successor's addresses as the next-hop in EIGRP advertisements, and not just the first entry in the topology table? 	Interface:<div><b>no next-hop-self no-ecmp-mode</b></div>
What does the EIGRP interface&nbsp;<b>no next-hop-self no-ecmp-mode </b>command do? 	This causes EIGRP to retain all Successor's addresses as the next-hop in EIGRP advertisements, not just the first entry in the topology table.
When the <b>eigrp stub </b>command is used, what are the default advertisement options? 	<b>connected </b>and <b>summary </b>are used if the options are not explicitly set.
How is encryption performed differently between DMVPN and EIGRP OTP? 	DMVPN relies on IPsec tunnel encryption, whereas EIGRP OTP uses GETVPN.
How do DMVPN and EIGRP OTP perform encapsulation differently? 	DMVPN encapsulates both data plane and control plane traffic inside mGRE.<div><br /></div><div>OTP uses LISP UDP encapsulation for the data plane, and the control plane uses native EIGRP without encapsulation.</div>
What is an EIGRP Goodbye message? 	A Hello message with all K-values set to 255
What type of EIGRP message has all K-values set to 255? 	Goodbye message
What happens during an EIGRP graceful restart? 	Topology databases between the router and its neighbors are resynchronized without the neighbor relationship being torn down.
The&nbsp;identity of one or more OSPF LSAs that the sending router would like the neighbor to supply full details about are contained in what? 	LSR Link-State Request message
What OSPF packet type contains fully detailed LSAs? 	LSU Link-State Update
What OSPF packet type is sent as a response to an LSR, or in the event of a topological change? 	LSU
What is the first step in OSPF neighborship on NBMA and P2MP NBMA networks? 	On these network types, a neighbor is placed immediately into the Attempt state and contact by Hello packets sent at usual intervals. If the neighbor does not respond within the Dead interval, it is placed back into the Down state.
"What is the OSPF neighbor state when a valid Hello has been received from the neighbor, but the list of ""Seen Routers"" in the received Hello packet does not contain the receiving router's RID? "	Init
What is the cause of an OSPF neighbor remaining in the Init state? 	The neighbor router is not properly receiving this router's Hellos.
What is an indication of bidirectional visibility between two OSPF routers? 	2-Way neighbor state
What is the OSPF neighbor state when a valid Hello packet containing this router's RID is in the list of seen neighbors from the neighbor? 	2-Way
The comparison of RIDs to determine Master/Slave roles, and the establishment of a common starting sequence number for DBD packets occurs during which OSPF neighbor state? 	ExStart
What OSPF neighbor state is entered after the Master/Slave relationship is established? 	Exchange
During which OSPF neighbor state are&nbsp;DBDs transmitted between the neighbors to build the list of LSAs known by each router? 	Exchange
True or False: OSPF LSAs are transmitted during the Exchange neighbor state. 	False: DBDs are transmitted during the Exchange state. LSAs are transmitted during the Loading state.
What is associated with mulitcast address 224.0.0.5? 	All OSPF Routers
What happens if two OSPF routers have mismatched MTU settings? 	They will not proceed past the 2-Way neighbor state, however they will still be considered neighbors.
The Master (MS), More (M), and Init (I) flags are present in what OSPF packet? 	DBD
How does the MS flag work in OSPF DBD packets? 	All packets sent by the Master have the MS flag set, and all packets sent by the Slave have the MS flag cleared.
How does the M flag work in OSPF DBD packets? 	The sending router sets the M flag if it has an additional DBD packet to send. The M flag is how the Slave indicates it has more DBD packets to send, since it can only send packets as a response to the Master.
How does the I flag work in OSPF DBD packets? 	The first DBD packet that starts the exchange is set with the I flag, and all other DBD packets have the flag cleared.
What happens if an OSPF LSA has a sequence number of 0x7FFFFFFF and a change is made? 	0x80000000 is a reserved value, so the LSA is flushed from the LSDB and re-originated with sequence 0x80000001
What is associated with multicast address 224.0.0.6? 	All OSPF DR Routers
What triggers the OSPF Wait Time? 	Receipt of a Hello with the DR set to 0.0.0.0, indicating the DR has not yet been elected.
What happens during the OSPF Wait Time? 	The priorities and RIDs of neighbors are collected, and each router independently calculates the DR/BDR, though they all arrive at the same conclusion.
What is the purpose of the OSPF Wait Time? 	The goal is to allow all routers on the network segment to finish initializing after a failure so that all routers can participate in the DR election, otherwise the first router to become active would always become the DR.
Why must a non-originating OSPF router never modify an LSA? 	Only the router originating an LSA can modify it, which ensures all OSPF routers in an area have the same LSDB contents and a consistent view of the network.
What is the flooding scope of OSPF LSA Type 1? 	Area
What is the flooding scope of OSPF LSA Type 2? 	Area
What is the flooding scope of OSPF LSA Type 3? 	Area; re-originated between areas by ABRs
What is the flooding scope of OSPF LSA Type 4? 	Area; re-originated between areas by ABRs
What is the flooding scope of OSPF LSA Type 5? 	All regular areas
What is the flooding scope of OSPF LSA Type 7? 	Area; re-originated as Type 5 by the ABR
What is the flooding scope of OSPF LSA Type 9? 	Link-local
What is the flooding scope of OSPF LSA Type 10? 	Area
What is the flooding scope of OSPF LSA Type 11? 	All regular areas
Which OSPF LSA type lists the router's RID and all interface IPs with the area? 	LSA Type 1
Which OSPF LSA type represents a subnet and the router interfaces connected to it? 	LSA Type 2
Which OSPF LSA type represents networks present in one area when being advertised into another area? 	LSA Type 3
Which OSPF LSA type advertises a host route to reach an ASBR? 	LSA Type 4
Which OSPF LSA type describes routes external to the AS in regular areas? 	LSA Type 5
Which OSPF LSA type describes routes external to the AS inside an NSSA? 	LSA Type 7
Which OSPF LSA type is considered generic with a link-local flooding scope? 	LSA Type 9
Which OSPF LSA type is considered generic with an area-local flooding scope? 	LSA Type 10
Which OSPF LSA type is considered generic with a flooding scope including all regular areas? 	LSA Type 11
Within OSPF, what is an advertised subnet for which a router has not formed any neighbor relationships? 	A stub network
What is a network over which two or more OSPF routers have become neighbors and traffic is neither sourced or destined locally? 	Transit network
How is the OSPF link cost calculated by default? 	100,000 Kbps (100 Mbps) / interface bandwidth in Kbps
What is the requirement for configuring per-neighbor costs in OSPF? 	This is valid only on OSPF point-to-multipoint nonbroadcast network types.
What are the restrictions for using an OSPF <b>distribute-list </b>in the outbound direction? 	It can only be applied on an ASBR, and only to redistributed routes.
When signing sent packets, which key does OSPF use? 	OSPF uses the last key to be added to the interface, regardless of the key number.
What is the result of configuring authentication under the OSPF process? 	Routers within the area will not form neighborships unless authentication is specifically configured, even if the authentication type is just null.
What is the variable-length wait interval between two consecutive SPF runs? 	SPF throttling
With SPF throttling, what is the initial wait interval before an SPF computation called? 	SPF-start
With SPF throttling, what is the wait time between subsequent SPF runs? 	SPF-hold
With SPF throttling, what is&nbsp;the amount of time during which the network must be stable for the wait interval to be set back to SPF-start and the SPF-hold back to is preconfigured value? 	SPF-max-wait
Controlling how frequently updated LSAs are allowed to be re-originated is referred to as what? 	LSA throttling
What are the default IOS settings for OSPF LSA throttling? 	Originate updated LSAs immediately, and delay subsequent origination by 5 seconds, but do not progressively increase the interval.
How does OSPF LSA arrival throttling work? 	If two more more identical LSAs arrive within 1 second, only the first one is accepted, and the remaining are dropped.
What should the minimum OSPF LSA arrival throttling timer be set to? 	The minimum LSA arrival interval should be less than the neighbors' intial hold interval in LSA throttling, otherwise a neighbor would be allowed to send updated LSAs faster than the router would be willing to accept them.
What is the interval between successive OSPF LSUs when flooding LSAs referred to as? 	flood pacing
What is the default OSPF flood pacing timer? 	33 ms
What is the interval between restransmitted OSPF packets as part of a single retransmission event? 	OSPF retransmission pacing
What is the default OSPF retransmission pacing timer? 	66 ms
If an OSPF Type 2 LSA has the mask of a prefix set to 255.255.255.255, what does this indicate? 	Prefix suppression - the LSA contains no prefix information to be used.
What feature is used to prevent an OSPF router from becoming a transit router? 	OSPF stub router
What are the two variations of the OSPF stub router feature? 	One variation activates the stub router feature for the specified number of seconds, while the other variation waits for BGP to converge first (up to a maximum of 10 minutes)
OSPF graceful restart is a standardized version of what? 	Cisco NSF Non Stop Forwarding
How do you disable OSPF graceful restart / NSF helper mode? 	OSPF process:<div><b>nsf helper disable</b></div>
What happens when OSPF graceful shutdown is enabled? 	<div>-All adjacencies are dropped</div><div>-All originated LSAs are flushed (age set to 3600 seconds)</div><div>-Hello sent to all neighbors with DR/BDR set to 0.0.0.0 with no neighbors</div><div>-Stop sending/receiving OSPF packets</div>
What is the purpose of OSPFv3 supporting multiple instances on a link? 	To selectively enable adjacencies.&nbsp;For example, there can be multiple reachable routers over a link, but you can form specific adjacencies.
Which address is used to source OSPFv3 packets on virtual links? 	Virtual links use globally-scoped IPv6 addresses.
What is OSPFv3 Authentication Trailer? 	OSPFv3 Authentication Trailer is an alternative to regular OSPFv3 IPsec authentication, and operates similar to OSPFv2 extended cryptographic authentication by referencing a key-chain.
What is an indication that an OSPFv3 router does not support multiple address families? 	The AF-bit in OSPFv3 packets is cleared in all instances (not just 0 - 31)
What does an NSAP address represent? 	An address of a particular network service on a particular network node
What do the fields in the IDP of an NSAP address indicate? 	Together, they indicate the routing domain (autonomous system) in which the node is located.
With NSAP addressing, what indicates the routing domain (AS) in which the node is located? 	The IDP Initial Domain Part, which consists of the AFI Authority and Format Identifier, and the IDI Initial Domain Identifier.
What does the OSI NET Network Entity Title identify? 	When the SEL is 0, no particular service is being addressed, and the entire NSAP address identifies the destination node itself without referring to any particular service.
OSI Level 0 routing is similar to what in IPv6? 	Level 0 routing is also known as ES-IS routing. This is similar in concept to IPv6 RA and NA messages.
With IS-IS, the MTU must be set to what on a Level 1 or Level 2 router? 	The MTU must be set to be equal to or smaller than the lowest MTU link within the flooding scope.
What is the IS-IS LSP default MTU? 	1497
A list of all IS-IS LSPs in the sender's LSDB are contained in what? 	CSNP Complete Sequence Number PDU
How are hub-and-spoke topologies handled in IS-IS? 	As a collection of point-to-point links
True or False: IS-IS CSNPs are sent periodically on P2P interfaces. 	Cisco routers do not send CSNPs on P2P links after the initial adjacency buildup by default, but some IS-IS implementations do.
0180.c200.0014 is the MAC address for what? 	IS-IS Level 1 frames
0180.c200.0015 is the MAC address for what? 	IS-IS Level 2 frames
For IS-IS DIS elections, what is the interface priority value range? 	0 - 127 inclusive, default 64
What is the reason for assigning multiple IS-IS NSAP addresses to a router? 	Assigning multiple NSAP addresses to a router is a temporary situation used to facilitate splitting or merging areas.
What is the requirement of assigning multiple NSAP addresses to an IS-IS router? 	The System ID must be identical, with a different Area ID.
What is the result of having multiple NSAP addresses assigned to an IS-IS router? 	Since the requirement of multiple NSAP addresses is the System ID must be the same, but the Area IDs must be different, the end result is that the areas are merged together while the IS-IS router has multiple NSAP addresses assigned to it.
In what way do IS-IS Level 1 routers operate similar to an OSPF NSSA-TS area? 	Level 1 routers can perform redistribution from external sources, but can see routes within their own area and nothing more.
How does an IS-IS L1L2 router indicate that it can reach areas other than its own? 	It sets the ATT (attachment) flag on its L1 LSP
How do IS-IS L1 routers respond to receiving an LSP with the ATT flag? 	L1 routers install a default route toward the nearest L2 router advertising the ATT flag.
The maximum number of switches that could possibly be in the path between two end hosts is known as what? 	Spanning-Tree diameter
What does changing the STP local port ID influence? 	The downstream neighbor's choice of root port
What does changing the local STP interface cost influence? 	The local choice of the root port
The following are characteristics of which DMVPN phase?<div><br /></div><div>-Summarization is not allowed on the hub<div>-Default routing is not allowed on the hub</div><div>-Spokes must always maintain next-hop reachability</div></div> 	DMVPN Phase 2
The following are characteristics of which DMVPN phase?<div><br /></div><div>-Summarization is allowed on the hub<div>-Default routing is allowed on the hub</div><div>-Next-hop values on the spokes are always modified</div></div> 	DMVPN Phase 3
What is automatically generated when you issue the OSPF&nbsp;<b>summary-address</b>&nbsp;command? 	An external discard route to Null0 is automatically injected along with the summary address.
How does OSPF indicate that an external route installed in an NSSA should not leave the area? 	"With the ""P"" (propagate) bit.&nbsp;If the bit is not set, the redistributed route remains within the NSSA and is not translated to a Type 5 LSA by the ABR."
During which phase do two devices verify whether they speak PPP and negotiate basic link operation parameters? 	Link Establishment Phase
The following functions are provided by what aspect of PPP?<div><br /></div><div>-Verify devices speak PPP<div>-Verify link is not looped</div><div>-Negotiate basic parameters</div><div>-Verify session liveliness</div><div>-Tear down session if either device requests it</div></div> 	LCP Link Control Protocol
What PPP message is sent when certain parameters of unacceptable, but negotiable? 	CONFNAK
What PPP message is sent when certain parameters of unacceptable, and nonnegotiable? 	CONFREJ
The configuration details of a particular PPPoE concentrator instance, such as the concentrator name presented to clients, maximum number of attached clients, and a reference to the Virtual-Template, are contained in what? 	bba-group
What is the limit to the number of BGP ASes an advertised prefix can pass through? 	255
How do you view information about BGP peer groups? 	<b>show ip bgp peer-group</b>
A BGP route reflector is not allowed to change which four attributes of reflected routes? 	<div>NEXT_HOP</div><div>AS_PATH</div><div>LOCAL_PREF</div><div>MED</div>
How does a BGP route reflector handle the NEXT_HOP, AS_PATH, LOCAL_PREF, and MED attributes in reflected routes? 	BGP route reflectors are not allowed to change those attributes.
How can you determine the reason for a BGP RIB failure? 	<b>show ip bgp rib-failure</b>
What four tools are available with BGP for conditional route advertisement? 	<b>advertise-map</b><div><b>non-exist-map</b></div><div><b>exist-map</b></div><div><b>inject-map</b></div>
The BGP tools <b>advertise-map</b>, <b>non-exist-map</b>, <b>exist-map</b>, and <b>inject-map</b>, are associated with what? 	Conditional route advertisement
How does the BGP <b>advertise-map </b>conditional route tool&nbsp;work together with <b>exist-map </b>and <b>non-exist-map</b>? 	The <b>advertise-map </b>specifies the routes to be advertised to the neighbor when the condition of the <b>exist-map </b>or <b>non-exist-map </b>is met.<div><br /></div><div>With the <b>exist-map </b>the condition is met when the prefix exists both in the advertise-map and the exist-map.</div><div><br /></div><div>With the <b>non-exist-map </b>the condition is met when the prefix exists in the advertise-map but not in the non-exist-map.</div>
What causes the BGP <b>exist-map </b>condition to be met? 	When the prefix exists in both the advertise-map and the exist-map.
What causes the BGP&nbsp;<b>non-exist-map&nbsp;</b>condition to be met? 	When the prefix exists in the advertise-map, but not in the non-exist-map.
What is the difference between the BGP <b>no-advertise </b>and <b>no-export </b>communities? 	Routes with the <b>no-advertise </b>community attached should not be advertised to any BGP neighbor, whereas <b>no-export </b>routes should not be advertised to any eBGP neighbor.
What are the three well-known BGP communities? 	local-as<div>no-advertise</div><div>no-export</div>
How do you advertise BGP communities to a neighbor? 	BGP process:<div><b>neighbor </b><i>ip </i><b>send-community</b></div>
With Cisco IOS, how are BGP communities propagated by default? 	By default IOS routers strip the community attribute of a route when advertising to neighbors unless specifically configured with <b>neighbor </b><i>ip </i><b>send-community</b><div><b><br /></b></div><div>If a route is tagged with the <b>no-export </b>(or any other) community, that information is lost unless the router is specifically configured to send communities.</div>
How do you change BGP attributes for an advertised prefix? 	Reference a route-map with the <b>network </b>statement under the BGP process.
How do the BGP <b>no-export </b>and <b>local-as </b>communities work with BGP confederations? 	<b>no-export </b>ignores the BGP confederation identifier, and keeps the prefixes local to the overall BGP ASN.<div><br /></div><div><b>local-as </b>takes the BGP confederation identifier into account and keeps the routes local to the sub-AS if the confederation identifier is configured. Otherwise it behaves identically to the <b>no-export </b>community.</div>
What is the <b>internet </b>BGP community? 	"The <b>internet </b>community is essentially an ""advertise to all"" setting, commonly used to override previously-set advertising restrictions."
How do you view BGP prefixes that have passed through a particular AS? 	<b>show ip bgp regexp _</b><i>ASN</i><b>_</b>
How do you view which BGP prefixes originated from a particular ASN? 	<b>show ip bgp regexp _</b><i>ASN</i><b>$</b>
How do you view which BGP prefixes originated in the local AS? 	<b>show ip bgp regexp ^$</b>
How can you configure an AS_PATH access list to deny prefixes originated from the local AS? 	"<b>ip as-path access-list </b><i>num </i><b>deny ^$</b><div><b style=""font-weight: bold; "">ip as-path access-list&nbsp;</b><i>num<b>&nbsp;</b></i><b style=""font-weight: bold; "">permit .*</b></div>"
"What is the result of this configuration?<div><br /></div><div><b>ip as-path access-list&nbsp;</b><i>num&nbsp;</i><b>deny ^$</b><div><b style=""font-weight: bold; "">ip as-path access-list&nbsp;</b><i>num<b>&nbsp;</b></i><b style=""font-weight: bold; "">permit .*</b></div></div> "	All prefixes from the local BGP AS are denied
How can you view BGP prefixes which have been prepended? 	<b>show ip bgp regexp ^([0-9]+)(_\1)+$</b>
How can you match with an AS_PATH access list BGP routes that have been prepended? 	<b>ip as-path access-list </b><i>num </i><b>permit ^([0-9]+)(_\1)+$</b>
Why are classic STP TCN BPDUs necessary? 	Normal Configuration BPDUs flow from the root bridge downstream in classic STP. TCN BPDUs are necessary for downstream bridges to notify upstream bridges of a topology change.&nbsp;
How do classic STP TCN BPDUs get processed in the network? 	The switch detecting the topology change sends a TCN BPDU on its root port toward the designated switch. The designated switch responds back with a normal configuration BPDU with the TCAck bit set. The process repeats with the designated switch sending a TCN BPDU on its own root port and expecting to receive a TCAck from it's designated bridge. When the TCN reaches the root, the root sends out configuration BPDUs with the TC bit set, which then flows downstream to all switches in the topology.
What is the effect of a switch running classic STP receiving a configuration BPDU with the TC bit set? 	The switch becomes aware of a topology change and reduces its CAM aging time to the forward delay, which is 15 seconds by default.
With classic STP, when the root bridge is notified of a topology change, how does it react? 	The root bridge sends out configuration BPDUs with the TC bit set for max age + forward delay (20+15=35) seconds. Downstream bridges receiving the BPDU with the TC bit set reduce their CAM aging time to the forward delay.
With classic STP, when the root bridge is notified of a topology change, how long does it send out configuration BPDUs with the TC bit set? 	<div>Max Age + Forward Delay seconds</div><div><br /></div><div>20 + 15 = 35 seconds by default</div>
What function replaces ARP in IPv6? 	Neighbor Solicitation
What three main functions are performed by IPv6 Neighbor Solicitation? 	-Discover link-layer IPv6 address of neighbor (replaces ARP)<div>-Duplicate Address Detection</div><div>-Determine reachability of neighbor</div>
With IPv6, the following three functions are performed by what?<div><br /></div><div>-Discover link-layer IPv6 address of neighbor (replaces ARP)<div>-Duplicate Address Detection</div><div>-Determine reachability of neighbor</div></div> 	Neighbor Solicitation
What is the IPv6 All Nodes multicast address? 	FF02::1
What is the IPv6 address FF02::1 associated with? 	All Nodes
What is the IPv6 All Routers multicast address? 	FF02::2
What is the IPv6 address FF02::2? 	All Routers
What are the two high-level steps of the SLAAC process? 	-Host receives RA message and updates its default router list, neighbor cache, and prefix list<div>-Host uses info from RA to create modified EUI-64 IPv6 address for all received prefixes</div>
How do you enable a Cisco IOS device to configure an IPv6 address via SLAAC? 	Interface:<div><b>ipv6 enable</b></div><div><b>ipv6 address autoconfig</b></div>
How do you view the addresses and interfaces on which IPv6 RA messages have been received? 	<b>show ipv6 routers</b>
How are multicast MAC addresses generated from multicast IPv6 addresses? 	33:33 + Last four bytes of multicast IPv6 address<div><br /></div><div>Example: FF02::1 = 3333.0000.0001</div><div>Example: FF02::1:FF11:1111 = 3333.FF11.1111</div>
What does the following command do?<div><br /></div><div><b>ipv6 address autoconfig default</b></div> 	This interface command uses SLAAC to configure the IPv6 address on the interface based on received RA messages, and to install a default route automatically to the routers advertising the RA messages.
True or False: IPv6 RA messages are sent by default on Serial and Ethernet interfaces after IPv6 unicast-routing is enabled. 	False: They are sent on Ethernet interfaces automatically, but must be explicitly enabled on Serial interfaces with:<div><br /></div><div><b>no ipv6 nd ra suppress</b></div>
How do you enable the sending of IPv6 RA messages on a serial interface? 	Interface:<div><b>no ipv6 nd ra suppress</b></div>
"How do you set the ""M"" flag in outgoing IPv6 RA messages? "	Interface:<div><b>ipv6 nd managed-config-flag</b></div>
"How do you set the ""O"" flag in outgoing IPv6 RA messages? "	Interface:<div><b>ipv6 nd other-config-flag</b></div>
"What is the IPv6 RA ""M"" flag? "	"The ""M"" flag indicates to the receiver that it should receive its entire IPv6 configuration using DHCP, with the exception of the default gateway address, since that is already conveyed in the RA message."
How do IPv6 routers indicate to hosts that they should receive their entire IPv6 addressing information from a DHCPv6 server? 	"By setting the ""M"" flag in outgoing RA messages."
"What is the IPv6 RA ""O"" flag? "	"The ""O"" flag indicates that a host should obtain its IPv6 address and gateway from SLAAC, and use DHCPv6 to acquire all other information (such as DNS servers)."
What is an indication in an IPv6 RA message that the receiving device should set its IPv6 address and default gateway via SLAAC, but use DHCPv6 for all other settings, such as DNS servers? 	"Setting the ""O"" flag"
"What happens if an IPv6 host receives RA messages with either the ""M"" or ""O"" flags set? "	It is up to the host as to whether or not the flags will be honored. For example, a router can send an RA with either of the flags set, but it will be ignored if the host already has a static configuration.
In Cisco IOS, what does the interface command <b>ipv6 enable </b>do? 	This command allows the interface to have a link-local address.
How do you view the parameters received from a DHCPv6 server? 	<b>show ipv6 dhcp interface</b>
What is the DHCPv6 four-stage process? 	Solicit<div>Advertise</div><div>Request</div><div>Reply</div>
How do you configure DHCPv6 relay? 	Interface:<div><b>ipv6 dhcp relay destination </b><i>ipv6-address interface</i></div>
What is the DHCPv6 Rapid Commit feature? 	Rapid Commit allows a DHCPv6 client to obtain its information from the DHCPv6 server with the exchange of two messages, instead of four. This feature must be configured on both the server and client.
What messages are exchanged during DHCPv6 Rapid Commit? 	Solicit<div>Reply</div>
How do you enable the DHCPv6 Rapid Commit feature on the client side? 	Interface:<div><b>ipv6 address dhcp rapid-commit</b></div>
How do you enable the DHCPv6 Rapid Commit feature on the server side? 	Interface:<div><b>ipv6 dhcp server </b><i>pool </i><b>rapid-commit</b></div>
What is IPv6 prefix delegation? 	Prefix delegation is a mechanism to assign entire prefixes to a downstream router, which can then be further subnetted at will.
What is the IPv6 mechanism to assign an entire prefix to a downstream router, which can then be further subnetted at will? 	IPv6 prefix delegation
For IPv6 prefix delegation, how do you configure the pool of prefixes available for assignment? 	Global:<div><b>ipv6 local pool </b><i>pool ipv6-prefix/length sublength</i></div><div><i><br /></i></div><div>Example:</div><div><b>ipv6 local pool Pool1 2001:1:1::/48 56</b></div><div><b><br /></b></div><div>This example provides assignment for up to 256 /56's within the parent /48</div>
For IPv6 prefix delegation, how can you view how many prefixes have been assigned for each pool? 	<b>show ipv6 local pool</b>
How do you configure a DHCPv6 pool to permanently assign delegated prefixes? 	<b>ipv6 dhcp pool </b><i>name</i><div>&nbsp; <b>prefix-delegation pool&nbsp;</b><i>pfx-pool </i><b>lifetime infinite infinite</b></div>
How do you configure an interface to request a DHCPv6 delegated prefix? 	Interface:<div><b>ipv6 dhcp client pd </b><i>tag</i></div><div><i><br /></i></div><div>Where <i>tag </i>is assigned locally and used for reference in other configuration commands (such as for further subnetting the prefix on another interface).</div>
How do you configure an IPv6 address to be assigned based on a previously-received delegated prefix? 	Interface:<div><b>ipv6 address </b><i>tag prefix/length</i></div><div><i><br /></i></div><div>Where <i>tag </i>refers to the DHCP-requested delegated prefix from a different interface, and <i>prefix/length </i>is the value appended to the delegated prefix.</div><div><br /></div><div>Example: <b>ipv6 address Pfx1 ::2:0:0:0:20/64</b></div><div><b><br /></b></div><div>If Pfx1 = 2001:0:1, the final prefix would be 2001:0:1:2::20/64</div>
How do you configure IPv6 prefix delegation on the upstream router? 	<b>ipv6 local pool </b><i>Pfx1 pfx/len delegated-length</i><div><b>ipv6 dhcp pool </b><i>Pool1</i></div><div>&nbsp; <b>prefix-delegation pool </b><i>Pfx1 </i><b>lifetime </b><i>valid-lifetime preferred-lifetime</i></div><div><b>interface </b><i>interface</i></div><div>&nbsp; <b>ipv6 dhcp server </b><i>Pool1</i></div>
How do you configure an OSPFv3 external summary? 	<b>router ospfv3 </b><i>pid</i><div>&nbsp; <b>address-family ipv6 unicast</b></div><div><b>&nbsp; &nbsp; summary-prefix </b><i>prefix/length</i></div><div><i><br /></i></div><div>summary-prefix is used instead of summary-address</div>
Within the context of OSPFv3 LSAs, what is the V6-Bit? 	The V6-Bit indicates that the router has the capability of forwarding transit IPv6 packets.
Within the context of OSPFv3 LSAs, what is the E-Bit? 	The E-Bit indicates the capability of the local router to accept external LSAs.
Within the context of OSPFv3 LSAs, what is the R-Bit? 	The R-Bit indicates that the router can be used to route transit traffic.
Within the context of OSPFv3 LSAs, what is the DC-Bit? 	The DC-Bit indicates that the router is capable of running demand circuits.
Within the context of OSPFv3 LSAs, what identifies the router's capability to forward transit IPv6 packets? 	V6-Bit
Within the context of OSPFv3 LSAs, what identifies the router's capability to accept external LSAs? 	E-bit
Within the context of OSPFv3 LSAs, what identifies the router's capability to route transit traffic? 	R-bit
Within the context of OSPFv3 LSAs, what identifies the router's capability to run demand circuits? 	DC-bit
How does OSPFv3 use interface IDs in LSAs? 	Interface IDs are used instead of IPv6 addresses to indicate interfaces that are connected together. Each interface on a router is assigned an interface ID, and the local router can learn about its neighbor's interface ID from the received OSPFv3 Hello packets.
How many Type-9 LSAs are generated by an OSPFv3 router? 	One Type-9 LSA containing all stub networks<div>One Type-9 LSA for each transit network for which the router is a DR and has originated a corresponding Network LSA.</div>
What is the minimum configuration for enabling EIGRP for IPv6 in named mode? 	<b><div></div></b><b>ipv6 unicast-routing</b><div><b>router eigrp</b> <i>name</i><div>&nbsp; <b>address-family ipv6 unicast as </b><i>asn</i></div><div>&nbsp; &nbsp; <b>eigrp router-id </b><i>rid</i></div><div><i><br /></i></div><div>EIGRP is automatically enabled on all interfaces at this point.</div></div>
How can you filter out all EIGRP External routes without using a route-map or prefix-list? 	EIGRP process:<div><b>distance eigrp 90 255</b></div>
How does configuring a static IPv6 address on an interface affect IPv6 autoconfiguration features? 	All autoconfiguration features are disabled when a static IPv6 address is configured.
How does an RSTP designated discarding port react to not receiving an agreement after sending a proposal? 	If the other end of the link does not understand RSTP BPDUs, or if the remote bridge is blocking, the RSTP designated discarding port falls back to classic STP timers and proceeds through listening and learning into forwarding.
What is the default <b>match </b>type in a class-map if not specified? 	<b>match-all</b>
Where do you apply Generic Traffic Shaping? 	Directly on the interface
True or False: Generic Traffic Shaping supports selectively shaping via ACLs. 	True
How does HSRP preemption work? 	HSRP members configured with <b>standby preempt </b>will attempt to become the active device if its priority is higher than the current active device. Without preemption, the current HSRP active device remains active (regardless of interface tracking) unless there is loss of reachability between HSRP members.
What are the three main entities of SNMPv3? 	-Users<div>-Groups</div><div>-Views</div>
What are SNMPv3 Views? 	SNMPv3 Views define subsets of MIBs visible to groups.
What are the three SNMPv3 security levels? 	-NoAuthNoPriv<div>-AuthNoPriv</div><div>-AuthPriv</div>
With SNMPv3, what is a requirement for sending traps? 	With SNMPv3, traps must have a user associated with them.
What are the three types of SNMPv3 Views? 	-Read<div>-Write</div><div>-Notify</div>
What two things are common between RARP, BOOTP, and DHCP? 	All three protocols require the client host to send a broadcast to begin discovery, and all three protocols rely on a server to hear the request and supply an IP address to the client.
How does RARP work? 	A client sends an ARP request containing its MAC as the target, with the target IP 0.0.0.0. The RARP server, if configured with the host's MAC address in its lookup table, sends an ARP reply with the host's IP address in the Source IP address field.
Where in the network must a RARP server be placed? 	RARP works based on normal ARP messages, and therefore must be on the same L2 network segment as the RARP clients.
What is the major limitation of BOOTP? 	BOOTP includes many features over RARP, most of which were later included or improved in DHCP. However, BOOTP still requires the server to be preconfigured with the MAC and IP addresses of each participating client.
True or False: Like RARP, the BOOTP server must reside on the same L2 network segment as the client. 	False. BOOTP uses UDP packets, and is able to support a centrally-located BOOTP server.
Switchport port-security cannot work with which five types of ports? 	-Dynamic: must be set to static access or trunk<div>-Routed</div><div>-SPAN destination</div><div>-EtherChannel</div><div>-PVLAN</div>
To which addresses are ISL encapsulated frames sent to? 	0100.0C00.0000 or 0300.0C00.0000 for Ethernet
What range of VLANs are supported by ISL? 	Both normal and extended range
How are the bits and bytes of MAC addresses in Ethernet frames transmitted? 	"The bytes are sent left-to-right, with the least significant bit in each byte transmitted first.<div><br /></div><div>A MAC address beginning with ""12"" is 0001 0010 in binary, but would be transmitted as 0100 1000.&nbsp;</div>"
How does the OSPF Fast Hello feature work? 	The dead interval becomes fixed at one second, and a hello multiplier is used to specify the number of hellos to be sent every second.
With OSPF Fast Hellos, how is the hello interval advertised in hello packets? 	With the OSPF Fast Hello feature, the hello interval advertised in hello packets is set to 0, and the hello interval is ignored in received hello packets on the interface.
True or False: When using OSPF Fast Hellos, the hello multiplier value must match between devices. 	False. With fast hellos, the hello interval value is ignored in received hello packets. The value does not need to match between neighbors as long as at leats one hello packet is sent and received within the deal interval (1 second).
What are the four main NSAP address formats? 	39 Data Country Code<div>45 E.164</div><div>47 International Code Designator</div><div>49 Locally Defined</div>
What causes the BGP Origin code to be IGP? 	Prefixes learned via:<div>-<b>network</b></div><div>-<b>neighbor </b><i>ip </i><b>default-originate</b></div><div>-<b>aggregate-address </b>without <b>as-set</b></div><div>-<b>aggregate-address </b>with <b>as-set </b>if all components use IGP code</div>
What causes the BGP Origin code to be Incomplete? 	Prefixes learned via:<div>-<b>redistribute</b></div><div>-<b>default-information originate </b>(not neighbor default originate)</div><div>-<b>aggregate-address </b>with <b>as-set </b>where at least one component has Incomplete code</div>
All packets belonging to the same MPLS FEC have the same ___. 	Label<div><br /></div><div>However, not all packets with the same label belong to the same FEC</div>
What is the default behavior with regard to marked traffic on Catalyst switches when <b>mls qos </b>is enabled? 	The markings on all incoming traffic is dropped unless the interface is configured to trust the existing markings.
With class-based policing, if the Bc value is not specified, what is the default? 	CIR / 32 or 1500 bytes, whichever is higher.
What happens if you configure a Bc size to be less than the CIR / 32? 	IOS does not allow the burst size to be less than CIR / 32 or 1500 bytes.&nbsp;<div><br /></div><div>For example, if you attempt to configure a CIR of 10 Mbps with a Bc of 1000 bytes, IOS notifies you that it is automatically increasing the burst size to 5000 bytes.</div>
How can you match on an IP or MAC address in a class-map without using <b>match source-address </b>[<b>mac</b>]? 	Create an IP or MAC ACL and reference it in the class-map with <b>match access-group </b><i>ACL</i>
With class-based shaping, what is the Be value if not specified? 	The Be value is equal to the Bc value, unless explicitly configured.
What is the result of Bc / CIR? 	Tc
What is the key exchange protocol used by Cisco inside IKE? 	OAKLEY
OAKLEY is the key exchange protocol that Cisco uses inside what? 	IKE
What are the two modes defined by ISAKMP? 	Main mode<div>Aggressive mode</div>
To enable IKE Phase 1, what must be configured? 	ISAKMP policy
To enable IKE Phase 2, what must be configured? 	IPsec transform set
What port is associated with IKE? 	UDP 500
Port UDP 500 is associated with what technology? 	IKE
What are the four main parameters exchanged during IKE Phase 1? 	-Authentication method<div>-Diffie-Hellman group</div><div>-Encryption type</div><div>-Hash algorithm</div>
Authentication method,&nbsp;Diffie-Hellman group,&nbsp;Encryption type, and&nbsp;Hash algorithm are exchanged during which IKE phase? 	IKE Phase 1
During ISAKMP policy exchange between peers, which policy is chosen? 	Multiple ISAKMP policies can be exchanged, and the first match is used based on the lowest local priority value.
What are the four main parameters exchanged during IKE Phase 2? 	-Security protocol (ESP or AH)<div>-Encapuslation mode (Transport or Tunnel)</div><div>-Encryption</div><div>-Authentication</div><div><br /></div><div>The combination is referred to as the IPsec Transform Set</div>
What is the IPsec transform set? 	The set of parameters used to define IKE Phase 2:<div><br /></div><div>-Security protocol (ESP or AH)<div>-Encapsulation mode (Transport or Tunnel)</div><div>-Encryption</div><div>-Authentication</div></div>
The security protocol, encapsulation mode, encryption, and authentication, are the four main parameters of which IKE phase? 	IKE Phase 2
What are the combination of security protocol, encapsulation mode, encryption, and authentication parameters referred to as? 	IPsec transform set
How are Diffie-Hellman group numbers related to each other? 	Higher numbers indicate a stronger level of cryptography.
What mode is IKE Phase 2 referred to as? 	Quick Mode
How do you configure a basic crypto map for IPsec-ISAKMP? 	<b>crypto map </b><i>name seq </i><b>ipsec-isakmp</b><div><b>&nbsp; set peer </b><i>ip</i></div><div>&nbsp; <b>match address </b><i>ACL</i></div><div>&nbsp; <b>set transform-set </b><i>transform-set</i></div><div><i><br /></i></div><div><b>interface </b><i>interface</i></div><div><i>&nbsp; </i><b>crypto map </b><i>name</i></div>
How do you verify the custom or default IKE Phase 1 policies? 	<b>show crypto isakmp </b>[<b>default</b>] <b>policy</b>
How do you verify ISAKMP PSKs? 	<b>show crypto isakmp key</b>
How do you verify custom or default IKE Phase 2 policies? 	<b>show crypto ipsec transform-set </b><i>name</i>
How do you verify the crypo map configuration for an interface? 	<b>show crypto map interface </b><i>interface</i>
How do you view the result of the IKE Phase 1 negotiation? 	<b>show crypto isakmp sa</b>
How do you view realtime details about IKE Phase 1? 	<b>debug crypto isakmp</b>
How do you view realtime details about IKE Phase 2? 	<b>debug crypto ipsec</b>
How do you view the results of IKE Phase 2 negotiations? 	<b>show crypto ipsec sa</b>
Before a device sends IKE packets to a peer, what is checked first? 	The device first checks to see if there is an existing local IPsec SA (Phase 2 SA) matching the particular traffic.
How many packets are exchanged for the IKE Phase 1 SA in Main mode? 	Six
How many packets are exchanged for the IKE Phase 1 SA in Aggressive mode? 	Three
How many packets are exchanged for the IKE Phase 2 SA Quick Mode? 	Three
What is contained in the first packet of the IKE Phase 1 Main Mode SA? 	The first packet is sent by the IPsec tunnel initiator, and contains the ISAKMP policy.
What is contained in the second packet of the IKE Phase 1 Main Mode SA? 	The second packet is sent from the responder back to the initiator containing the exact same information matching the ISAKMP policy sent in the first packet (assuming a matching policy is configured on the responder).
What do the vendor-IDs exchanged during the IKE Phase 1 setup refer to? 	Various features such as NAT-Traversal and Dead Peer Detection
What is the default ISAKMP SA lifetime? 	86400 seconds (1 day)
What is contained in the third packet of the IKE Phase 1 Main Mode SA? 	Sent from the initiator to the responder containing the Key Exchange information with the purpose of generating the information for the Diffie-Hellman secret key.
What is contained in the fourth packet of the IKE Phase 1 Main Mode SA? 	Sent from the responder back to the initiator containing Key-Exchange information so that both peers can generate a common session key based on the locally-configured PSK.
What is contained in the fifth packet of the IKE Phase 1 Main Mode SA? 	Sent to responder and protected by the common shared secret, the fifth message is used for sending authentication information to the peer.
What is contained in the sixth packet of the IKE Phase 1 Main Mode SA? 	The sixth and final packet is sent from the responder back to the initiator containing matching authentication information.
What is contained in the first packet of the IKE Phase 1 Aggressive Mode SA? 	The first packet is sent from initiator to responder and contains enough information for the responder to generate its Diffie-Hellman secret. This single packet is equivalent to the first four Main Mode packets.
What is contained in the second packet of the IKE Phase 1 Aggressive Mode SA? 	The second packet is sent from the responder back to the initiator, and contains the Diffie-Hellman key.
What is contained in the third packet of the IKE Phase 1 Aggressive Mode SA? 	Sent from the initiator to the responder, conatins the identity and hash payloads. If the information matches on the responder, the IKE Phase 1 SA is established.
"With IPsec, what is the ""interesting"" traffic referred to as? "	Proxy ID
When configuring ACLs to be used as Proxy IDs for IPsec, what is the configuration requirement of both peers? 	The ACLs must mirror each other between peers.
What differentiates different IPsec SAs? 	Security Parameter Index (SPI) values
How many SPI values are generated for each IPsec tunnel? 	Two - one SPI for the inbound SA, and one SPI for the outbound SA
What are the two major benefits of using GRE tunnels with IPsec as opposed to legacy crypto maps? 	Crypto maps require mirrored ACLs for each SA, whereas GRE tunnels with IPsec protect all traffic. This allows for the second major benefit, the ability to run dynamic routing protocols instead of using static routes.
How can you view information about PIM on the configured interfaces? 	<b>show ip pim interface</b>
How can you view information (versions, timers, etc.) about IGMP on the configured interfaces? 	<b>show ip igmp interface </b><i>interface</i>
How do you configure the maximum number of mroute states created as a result of IGMP host membership reports? 	Global or per-interface:<div><b>ip igmp limit </b><i>number</i></div>
How do you manually configure the LDP RID? 	Globally:<div><b>mpls ldp router-id</b></div>
True or False: The value used for the LDP RID must be reachable on the network. 	True. Unlike OSPF, the LDP RID represents an actual IP address, and is used for transport. If not set manually, it follows the same auto-assignment rules as other protocols (highest loopback IP, etc), but whether set manually or not, it must be reachable on the network.
How can you verify IGMP timers? 	<b>show ip igmp interface </b><i>interface</i>
How can you verify which multicast router is the DR on a segment? 	<b>show ip igmp interface </b><i>interface</i>
How can you verify which multicast groups have been joined on a network segment, and how many users are participating in the groups? 	<b>show ip igmp interface </b><i>interface</i>
How do you modify the IGMP query interval? 	Interface:<div><b>ip igmp query-interval </b><i>seconds</i></div>
How do you modify the IGMP querier timeout? 	Interface:<div><b>ip igmp querier-timeout</b></div><div><b><br /></b></div><div>Default is 2x query-interval, and is automatically adjusted when the query-interval is adjusted unless set manually.</div>
What is the effect of changing the IGMP query interval on an interface? 	The querier-timeout value is automatically set to 2x the value of the query interval, unless configured manually.
How do you change the IGMP query max response time? 	Interface:<div><b>ip igmp query-max-response-time</b></div>
Why is a DR used with IGMPv1? 	IGMPv1 does not support querier election, so the multicast routing protocol elects a DR for that purpose.
What is the difference between <b>ip igmp static-group </b>and <b>ip igmp join-group</b>? 	The <b>static-group </b>command causes the router to maintain multicast state for the particular group so that multicast traffic can flow through the router to the particular group.&nbsp;<div><br /></div><div>The <b>join-group </b>command causes the router to act as a multicast client and participate in group membership, such as the ability to send pings.</div>
How do you limit which multicast groups can be joined from a network segment? 	Interface:<div><b>ip igmp access-group </b><i>ACL</i></div>
How do you modify the IGMP last member query count? 	Interface:<div><b>ip igmp last-member-query-count </b><i>number</i></div>
How do you modify the IGMP last member query interval on a network segment? 	Interface:<div><b>ip igmp last-member-query-interval </b><i>ms</i></div>
What is used in newer IOS versions to register with the RP instead of unicast-encapsulated multicast register messages? 	Automatic PIM-SM tunnel interfaces.
How can you view information about automatic PIM-SM tunnels? 	<b>show ip pim tunnel</b><div><b><br /></b></div><div>Displays type (PIM Encap or PIM Decap), RP address, source address</div>
What is the purpose of the <b>ip multicast boundary </b>command? 	This interface command can reference an ACL to prevent state from specified multicast groups from being installed.
What does the command <b>ip pim dm-fallback </b>do? 	When an interface is configured for sparse-dense mode, if an RP is not found for a particular multicast group, the interface attempts to locate the multicast source via PIM-DM.
What is the default behavior of an interface configured for PIM sparse-dense-mode if it cannot find the RP for a particular multicast group? 	The default <b>ip pim dm-fallback </b>command instructs the router to attempt to find the multicast source via PIM-DM.
What are the default LDP Hello and Hold timers? 	5 / 15 seconds
How do you perform conditional debugging? 	Specify the desired traffic with an ACL, then reference it with:<div><b>debug ip packet detail </b><i>acl</i></div>
What does the Peer LDP Ident 1.2.3.4:0 indicate? 	The peer IP address is 1.2.3.4 and its label space is platform-wide (indicated by :0, any other value indicates per-interface label space).
What is the difference between the two types of LDP neighbor discovery? 	Basic is used to discover directly-connected neighbors.<div><br /></div><div>Extended uses targeted IP addresses to discover neighbors that are not directly connected.</div>
How do you adjust the LDP discovery timers? 	Globally:<div><b>mpls ldp discovery hello </b>{<b>interval </b>| <b>holdtime</b>} <i>seconds</i></div>
How do you adjust the LDP session timers? 	Globally:<div><b>mpls ldp holdtime </b><i>seconds</i></div><div><i><br /></i></div><div>The keepalive time is automatically set to 1/3 the value.</div>
When manually configuring the LDP router ID, what does the <b>force </b>keyword do? 	The <b>force </b>keyword causes all LDP TCP sessions to be reset.
How do you verify which range of MPLS labels are available for assignment? 	<b>show mpls label range</b><div><b><br /></b></div><div>Default 16 - 100,000</div>
What is the default range of MPLS label values on IOS? 	16 - 100,000
How do you adjust the range of MPLS labels available for assignment? 	Global:<div><b>mpls label range </b><i>start end</i></div><div><i><br /></i></div><div>Note: adjusting this value requires a reload before taking effect.</div>
What is the reserved MPLS label value for implicit null? 	3
Why does the default MPLS label value range begin at 16? 	Values 0 - 15 are reserved by IANA and are never to be made available for allocation.
How do you prevent LDP from advertising labels, without completely disabling LDP? 	Global:<div><b>no mpls ldp advertise-labels</b></div>
How do you conditionally advertise MPLS labels? 	Global:<div><b>mpls ldp advertise-labels for </b><i>ACL1 </i><b>to </b><i>ACL2</i></div><div><i><br /></i></div><div>Where <i>ACL1 </i>indicates prefixes for which labels will be generated, and <i>ACL2 </i>indicates prefixes for which the labels will be advertised to.</div>
How can you disable LDP for a particular interface? 	Interface:<div><b>no mpls ldp igp autoconfig</b></div>
What does the <b>mpls ldp autoconfig </b>command do? 	Enables LDP for a particular OSPF or IS-IS process. You can optionally specify the OSPF area or IS-IS level as part of the command.
What is LDP session protection? 	LDP session protection is a targeted session between two LDP neighbors (typically via loopback interfaces) so that if a link between the two neighbors goes down, the TCP session and neighborship remains active.
How do you enable LDP session protection? 	Globally:<div><b>mpls ldp session protection</b></div>
How do you configure a router to participate in LDP session protection without enabling LDP session protection on the router itself? 	Global:<div><b>mpls ldp discovery targeted-hello accept</b></div>
What is a consequence of entering the <b>no bgp default ipv4-unicast </b>command? 	Prefixes are not exchanged between neighbors unless activated until the respective address family.
What type of OSPF routers are MPLS PE's considered? 	ABR
What is the MPLS OSPF SuperBackbone? 	When using OSPF, the MPLS PE's are considered ABRs, and the internal MPLS network is considered the OSPF SuperBackbone.
What is the OSPF Domain ID? 	The Domain ID is used when redistributing OSPF routes into BGP VPNv4. The Domain ID is attached to BGP updates as an extended community, and is used to determine the LSA type to be generated. Type 5 LSAs are generated if the Domain IDs do not match between MPLS PEs, and Type 3 LSAs are generated if the Domain IDs do match.
How is the OSPF Domain ID determined? 	The OSPF Domain ID is either based on the local OSPF process ID, or configured manually.
How do you configure the OSPF Domain ID? 	MPLS PE:<div><b>router ospf </b><i>pid </i><b>vrf </b><i>vrf</i></div><div>&nbsp; <b>domain-id </b><i>id</i></div>
What are the two main methods of supporting intra-area OSPF routes across the MPLS SuperBackbone? 	OSPF Sham Link<div>GRE tunnels between PE routers</div>
What is the purpose of an OSPF Sham Link? 	To connect discontiguous OSPF backbones together over an MPLS network so that routes between sites appear as intra-area.
How do you configure an OSPF Sham Link? 	<b>router ospf </b><i>pid </i><b>vrf </b><i>vrf</i><div>&nbsp; <b>area 0 sham-link </b><i>src dst </i><b>cost </b><i>cost</i></div>
How do you verify OSPF Sham Links? 	<b>show ip ospf sham-links</b>
What is the MPLS OSPF Sham Link equivalent to? 	The sham link operates similar to a regular OSPF virtual link in that it has specific endpoints, traverses a single area, has an adjustable cost, and operates as a demand circuit.&nbsp;
When configuring the same BGP ASN between multiple sites across an MPLS L3VPN, what else must be configured? 	Normal BGP loop prevention mechanisms are in place by default, so either the CE must be configured with BGP <b>allowas-in </b>or the PE must be configured with BGP <b>as-override</b>
What is the purpose of the BGP <b>allowas-in </b>feature? 	This allows a BGP router to accept an advertisement containing its own ASN, which is normally dropped due to BGP loop prevention rules.<div><br /></div><div>This is commonly used across MPLS L3VPN when the customer has the same BGP ASN at multiple sites.</div>
How does the BGP <b>as-override </b>feature work? 	Commonly used with MPLS L3VPN, <b>as-override </b>causes the peer's ASN to be replaced with the local ASN and prepended. This is used on the PE router side if the CE router is using the same BGP ASN at multiple sites within the VPN.<div><br /></div><div>Peers must accept prepended routes for this to work.</div>
How can you verify which VLANs have a VACL applied? 	<b>show vlan filter</b>
True or False:&nbsp;VLANs 1 and 1002-1005 can be manually pruned from trunks. 	True, however those VLANs cannot be deleted, and they cannot be pruned by VTP.
What two things are automatically instantiated when a new VLAN is created? 	MAC address table<div>Spanning-Tree instance</div>
How does the upstream STP switch port ID affect a downstream switch's choice of root port? 	The root port is elected based on the lowest root path cost. If there is a tie in cost, the link through the switch with the lower BID is used. If there is a tie for the BID, the lowest upstream port ID is used.
When forwarding to a destination, what is a requirement for multipoint interfaces that does not apply to point-to-point interfaces? 	Layer 3 to Layer 2 resolution
How can you verify the NHRP cache? 	<b>show ip nhrp</b>
With PBR, what does a route-map <b>deny </b>clause indicate? 	The matched criteria should use normal forwarding, not policy routing.
How do you verify if PBR is working? 	<b>debug ip policy</b>
What are the two primary causes of tunnel recursive routing errors? 	Metric or AD errors
What is the limitation of creating summary routes with RIPv2? 	The summary cannot be larger than the major network. For example, you cannot create a summary address including both 4.0.0.0/8 and 5.0.0.0/8.<div><br /></div><div>EIGRP does not have this limitation.</div>
What's the difference between an OSPF Type 8 and Type 9 LSA? 	"Both have a link-local scope.<div><br /></div><div>Type 8 ""Link LSA"" provides all the IPv6 addresses on the link</div><div><br /></div><div>Type 9 ""Intra-Area-Prefix LSA"" is defined as opaque and contains prefixes for stub and transit networks</div>"
True or False: EIGRP maintains completely separate topologies and performs separate DUAL calculations when both IPv4 and IPv6 are used simultaneously. 	True
Which OSPF network types use a Type 2 LSA? 	Broadcast<div>Non-broadcast</div>
Which OSPF network types do not use a Type 2 LSA? 	Point-to-point<div>Point-to-multipoint</div><div>Point-to-multipoint non-broadcast</div>
If the OSPF reference bandwidth is set to a high value, what could prevent a virtual link from initializing? 	The virtual link must have a total path cost of less than 65535. If the reference bandwidth is set to a high value, and the virtual link must traverse a comparatively low speed interface, the total cost could exceed the limit.<div><br /></div><div>Example: Reference bandwidth set to 100 Gbps, but virtual link crossing a T1.</div>
What is a caveat of enabling authentication on an OSPF virtual link? 	Because the VL runs as a demand circuit, you must clear the VL after authentication is applied for it to take effect.
For DMVPN Phase2, what is the next-hop IP address advertised by the hub for a particular spoke? 	The spoke's overlay IP address
For DMVPN Phase3, what is the next-hop IP address advertised by the hub for a particular spoke? 	The hub's overlay address. For spoke-to-spoke traffic, the hub sends an NHRP redirect to inform the source spoke of the destination spoke's NBMA address.
If multiple EIGRP processes are running and there are multiple equal matches to the same prefix, which one is installed in the RIB? 	The prefix from the lowest EIGRP ASN
If multiple OSPF processes are running and there are multiple equal matches to the same prefix, which one is installed in the RIB? 	The prefix from the lowest OSPF PID
What is the AD of NHRP? 	250
What protocol has the AD 250? 	NHRP
During redistribution into BGP, how are OSPF routes handled by default? 	When redistributing from OSPF into BGP, external routes are denied by default. This is changed with <b>redistribute ospf </b><i>pid </i><b>match internal external</b>
How do you configure BGP redistribution to allow OSPF external routes? 	BGP process:<div><b>redistribute ospf </b><i>pid </i><b>match internal external</b></div>
What is the default behavior of redistributing BGP routes into an IGP? 	Only eBGP routes are redistributed by default. Configure <b>bgp redistribute internal </b>under the BGP process to allow iBGP routes to be redistributed as well.<div><br /></div><div>Use this with caution as routing loops can occur.</div>
What does the BGP command <b>bgp redistribute internal </b>do? 	By default, when redistributing BGP routes into an IGP, only eBGP routes are redistributed. This command also permits iBGP routes to be redistributed.
How do you enable redistribution of iBGP routes into an IGP? 	BGP process:<div><b>bgp redistribute internal</b></div><div><b><br /></b></div><div>This behavior is disabled by default to prevent routing loops.</div>
What is IP event dampening? 	A configurable exponential delay that causes a flapping interface to be removed from use by routing protocols until the link has been stable for a period of time. This prevents distributed routing protocols from constantly having to recalculate due to the rapid presence and removal of the flapping link.
How can you troubleshoot LDP adjacencies in realtime? 	<b>debug mpls ldp transport events</b>
How can you verify the VRF RT import/export policy? 	<b>show vrf detail</b>
How can you view realtime MPLS label binding information? 	<b>debug mpls ldp binding</b>
How can you force re-import/export of route targets in a VRF? 	<b>clear ip route vrf *</b>
How many crypto maps can be applied on an interface? 	One per physical (sub)interface<div><br /></div><div>One crypto map can be applied to multiple interfaces.</div>
What is the relationship between crypto maps and interfaces? 	One crypto map per (sub) interface. However, one crypto map can be applied to multiple interfaces.
How do crypto maps interact with routing and NAT? 	Crypto maps are applied to outbound traffic on an interface, after NAT and routing have occurred. This means static routing and/or NAT exemption may be required.<div><br /></div><div>Routing, NAT, and crypto are independent of each other.</div>
When multiple ISAKMP policies are configured between two devices, what is the result of this configuration:<div><br /></div><div>Router A:</div><div>&nbsp;-Priority 10: Higher requirements</div><div>&nbsp;-Priority 20: Lower requirements</div><div><br /></div><div>Router B:</div><div>&nbsp;-Priority 10: Lower requirements</div><div>&nbsp;-Priority 20: Higher requirements</div> 	"ISAKMP priorities are processed top-down until a match occurs with the lower priority value having a higher precedence. In this case, the ""lower requirements"" would be used due to it having a higher priority on Router B."
When using crypto maps with GRE tunnels, where should the crypto map be applied? 	The crypto map should be applied to the physical interface, not the tunnel interface, for GRE over IPsec. Traffic is GRE encapsulated first, and encrypted second. This allows for a single Proxy ACL entry to permit GRE traffic between the endpoints.
How does GRE over IPsec work? 	By applying the crypto map to the physical interface instead of the tunnel interface, traffic is GRE encapsulated first, and encrypted second. This allows for a single Proxy ACL entry to permit GRE traffic between the endpoints.
How does GRE over IPsec break PMTUD? 	The MTU value is not copied between headers, so the MTU of the GRE tunnel must be adjusted downward accordingly (1400 bytes is standard, with 1360 TCP MSS).
What are IPv6 Unique Local addresses? 	FC00::/7 &nbsp;(1111 110)<div><br /></div><div>Equivalent to RFC 1918 private addressing, not routable via global BGP</div>
What type of IPv6 address is this?<div><br /></div><div>FC00::/7</div> 	Unique Local
What is an IPv6 general prefix? 	The general prefix allows multiple longer IPv6 addresses to be defined from a single shorter base prefix, which acts as a shortcut for renumbering scenarios.
How do you configure an IPv6 general prefix? 	Globally:<div><b>ipv6 general-prefix </b><i>name prefix/length</i></div><div><i><br /></i></div><div>Example:</div><div><b>ipv6 general-prefix GenPfx 2001:db8:1234::/48</b></div>
How do you configure a more specific IPv6 address based on a general prefix? 	Interface:<div><b>ipv6 address </b><i>gen-pfx-name address/length</i></div><div><i><br /></i></div><div>Example:</div><div>Configured general prefix: 2001:db8:1234::/48</div><div><b>ipv6 address GenPfx 0:0:0:5678::1/64</b></div><div>Results in final address 2001:db8:1234:5678::1/64</div>
How do you convert from an IPv4-only VRF to one that supports multiple address families? 	<b>vrf upgrade-cli</b>
What is the general premise of both 6PE and 6VPE? 	Tunnel IPv6 traffic over MPLS IPv4 core
What is the difference between 6PE and 6VPE? 	6PE tunnels IPv6 traffic from the global routing table over the MPLS IPv4 core<div><br /></div><div>6VPE tunnels IPv6 traffic from VRFs over the MPLS IPv4 core using the VPNv6 AF</div>
What is the purpose of creating a static mroute? 	To attempt to force multicast traffic to use a different RPF than would otherwise be generated via PIM.
What does HSRP use for transport? 	UDP 1985 to 224.0.0.2
UDP 1985 to 224.0.0.2 is associated with what? 	HSRP
What is IP Protocol 112? 	VRRP
What IP Protocol is used by VRRP? 	112
The sending of messages to 224.0.0.18 using IP Protocol 112 is associated with what? 	VRRP
Where do VRRP messages get sent to? 	224.0.0.18 using IP Protocol 112 for transport
What is associated with IP address 224.0.0.102 port UDP 3222? 	GLBP
Where does GLBP send its messages to? 	224.0.0.102 UDP 3222
What is the NAT/routing order of operations for inside addressing? 	Packets are first routed, and then have sources translated since the destination addresses are global.
What is the NAT/routing order of operations for outside addressing? 	Packets have destinations that are untranslated first, so routing occurs after translation, which allows proper routing for returning packets with translated sources.
What is a lightweight keepalive protocol designed to reduce dead peer detection time across Layer 2 networks? 	BFD Bidirectional Forwarding Detection
How do you enable BFD on an interface? 	Interface:<div><b>bfd interval </b><i>ms </i><b>min_rx </b><i>ms </i><b>multiplier </b><i>multiplier</i></div><div><i><br /></i></div><div>Example:</div><div><b>bfd interval 50 min_rx 50 multiplier 5</b></div><div>This causes BFD echoes to be sent at 50ms, and BFD expects to receive the echo back within 50ms. If five consecutive echoes are missed, the upper-layer protocol is notified of the failure.</div>
How do you verify BFD? 	<b>show bfd neighbors</b>
How do you register a routing protocol with BFD? 	Routing process:<div><b>bfd interface </b><i>interface</i></div><div><i><br /></i></div><div>or</div><div><br /></div><div><b>bfd all-interfaces</b></div>
What happens if BFD is enabled, but not registered to any upper-layer protocol? 	BFD does not detect neighbors, and relies on the neighborship formed by upper-layer protocols. Without the neighborship, BFD is idle.
What features must be disabled for BFD echoes to work? 	uRPF and IP redirects must be disabled
True or False: BFD supports both authentication and event dampening. 	True, via the BFD <b>authentication </b>and <b>dampening </b>commands
What is a BFD template? 	A BFD template is similar to a BGP peer group where you can define common attributes, such as timers, authentication, dampening, and then apply them to an interface via <b>bfd template </b><i>name</i>
How is the BFD echo setting different for template versus interface configuration? 	BFD echo is enabled by default when BFD's parameters are configured directly on the interface, and disabled by default when configured via BFD template.<div><br /></div><div>Enable under the template with the <b>echo </b>command.</div>
What are the two different packet types used by BFD? 	Control<div>Echo</div>
What is the source and destination of BFD echo packets? 	The sending device. This allows the receiving device to immediately redirect the packet back out the interface without processing it.
How does the exchange of BFD hello timers between neighbors work? 	BFD timers are unidirectional and can differ between neighbors. The local min_tx value is compared against the received min_rx value from the peer, and the higher (slower) value is used as the local router's BFD hello interval.
What are the two types of BGP peer templates? 	Peer policy<div>Peer session</div>
What is the difference between BGP peer policy and peer session templates? 	Peer policy templates contain common attributes and filters to be applied to all peer members.<div><br /></div><div>Peer session templates contain common neighbor settings such as timers and remote ASNs to be applied to all peer members.</div>
True or False: A BGP neighbor can both be a member of a peer group and inherit policies from peer templates. 	False. BGP can be configured with both peer groups and peer templates, but individual neighbors can be configured only by one method or the other, not both simultaneously.
What is a major advantage of BGP peer templates over peer groups with regard to flexibility? 	Unlike peer groups, peer templates can inherit other peer templates.
A BGP peer session template can be applied to which AFI and NLRI configuration modes? 	Peer session templates are used to group and apply the configuration of general session commands that are common to <u>all</u> address family and Network Layer Reachability Information (NLRI) configuration modes.
A BGP peer policy template can be applied to which AFI and NLRI configuration modes? 	Peer policy templates are used to group and apply the configuration of commands that are applied within <u>specific</u> address-families and NLRI configuration modes.
How do you configure a BGP peer policy or session template? 	BGP process:<div><b>template </b>{<b>peer-policy </b>| <b>session-policy</b>} <i>name</i></div><div><i><br /></i></div><div><b>neighbor </b><i>ip </i><b>inherit </b>{<b>peer-policy </b>| <b>session-policy</b>} <i>name</i></div>
What is the BGP dynamic neighbors feature? 	BGP dynamic neighbors allows BGP peering to a group of remote neighbors that are defined by a range of IP addresses and peer groups.
What is the <b>bgp listen </b>command used for? 	<b>bgp listen </b>is used to configure the BGP dynamic neighbors feature.
How do you configure BGP dynamic neighbors for a particular subnet? 	BGP process:<div><b>bgp listen range </b><i>prefix/length </i><b>peer-group </b><i>group</i></div><div><i><br /></i></div><div>Where <i>prefix/length </i>represents the source IP range of the dynamic neighbors.</div><div><br /></div><div>Note: this command requires the configuration of a peer-group, with a minimum configuration indicating the remote-as.&nbsp;</div>
What is the BGP neighbor remote-as <b>alternate-as </b>keyword used for? 	With BGP dynamic neighbors, you must configure potential neighbors using a peer-group. With the <b>neighbor </b><i>peer-group </i><b>remote-as </b><i>asn </i><b>alternate-as </b><i>as1 as2 as3 as4 as5 </i>command, you can configure a total of six (one regular and five alternate) ASNs from which the dynamic neighbor connection is allowed.
What option controls whether or not a Type 7 LSA is propagated to the rest of the OSPF domain? 	"The ""P"" bit (propagate)<div><br /></div><div>This is controlled by various OSPF commands with the <b>nssa-only </b>keyword. With the <b>nssa-only </b>keyword, the Type 7 LSA is not converted to Type 5 at the ABR and remains within the NSSA.</div>"
What is the relationship between ARP entries, the switch CAM table, and unicast flooding? 	You can reduce unicast flooding by ensuring ARP entries time out before CAM entries, so that the ARP table can be repopulated before the CAM entires expire.
How do you prevent a switch from flooding unknown unicast frames? 	Interface:<div><b>switchport block unicast</b></div>
"What are two common causes of traffic ""microbursts""? "	When traffic enters a higher-speed interface and exits a lower-speed interface<div><br /></div><div>When traffic from multiple ports are trying to reach a single port</div>
What is the IP Record Route option? 	When the source sets the Record Route IP option, an empty list is created in the header, and each router along the path adds its IPv4 address to the list.
What is the IP Strict Source Route option? 	With the strict source route IP option, the sender can specify the complete path the packet must take to reach its destination.
What is the IP Loose Source Route option? 	The loose source route IP option allows the sender to specify a list of routers that the packet must pass through toward the destination, though additional unspecified routers may also be in the path.
What is the IP Router Alert option? 	The Router Alert option causes each router along the path to examine the packet, even if the router is not the ultimate destination.
How do intermediate IPv6 routers handle packets with extension headers? 	Intermediate routers ignore all extension headers, unless the Next Header is set to 0 Hop By Hop Options, in which case all routers along the path examine the extension headers.
How do intermediary devices handle IP packet fragmentation differently for IPv4 and IPv6? 	With IPv6, only the sending device may fragment the packet, whereas any device in the path can fragment IPv4 packets unless the DF bit is set.
How does the IP Fragment Offset field work? 	The FO field indicates the position of the fragment within the overall packet, with each value representing 8 bytes. If the FO field has a value of 100, it means the fragment begins 800 bytes into the payload.
What ICMP response may be sent if the TTL of a packet reaches 0? 	Time Exceeded
What usually triggers the ICMP Time Exceeded message? 	When a packet's TTL reaches 0.
What is the TCP window size? 	The number of bytes that may be sent before an ACK is required.
What is the bandwidth delay product? 	The amount of data that can be in transit at any time between hosts.<div><br /></div><div>BDP is measured as the capacity of the link multiplied by the round-trip delay time.</div>
What is a Long Fat Network? 	Networks with large bandwidth delay products, such as high-speed satellite links. These networks have a high bandwidth capacity, but also have large delay values, which can cause issues with TCP windowing.
What causes TCP global synchronization? 	Global synchronization occurs due to the combination of TCP slow-start, windowing, and tail-drop queuing on the router. TCP keeps expanding the window size until traffic drops due to link congestion, which begins the slow-start process again.&nbsp;
How can you alleviate the symptoms of TCP global synchronization? 	Congestion avoidance algorithms like WRED randomly drop TCP packets for different TCP sessions, which causes TCP to use slow-start for each session. Since sessions are affected individually instead of simultaneously (as in the case of a tail drop), global synchronization is avoided.
How do you prevent TCP starvation / UDP dominance? 	Create separate queues for TCP and UDP traffic.
What does RTP (Real-time Transport Protocol) add over UDP? 	Sequence numbers and timestamps which can be used for re-ordering packets if necessary. RTP also conveys the format of the payload carried in the stream.
What is the purpose of RTCP (Real-time Transport Control Protocol)? 	RTCP works in conjunction with RTP, and carries additional information about the RTP stream, such as quality and synchronization. The information is provided through Report messages.
How does RTP and RTCP use individual UDP ports? 	RTP uses even-numbered ports, and RTCP uses the next-higher odd-numbered port.
What is the StackWise switch responsible for operations referred to as? 	Stack Master
What's the primary difference between 6in4 and 6to4? 	6in4 relies on static tunnel configuration, and works by encapsulating the IPv6 payload directly after the IPv4 header.<div><br /></div><div>6to4 automatically generates the tunnel endpoints based on the IPv6 address, and uses 6in4 for transport.</div>
What is 6RD? 	6RD is IPv6 Rapid Deployment tunneling, which is similar to 6to4, but more flexible.
What are the two main differences between 6RD and 6to4? 	6RD does not require addresses to have a 2002::/16 prefix<div><br /></div><div>6RD does not require all 32 bits of the IPv4 destination to be carried in the IPv6 payload header</div>
What is MAC Authentication Bypass? 	Switch ports can be protected with 802.1X, but allow devices matching a particular MAC address to bypass the authentication. This is useful for devices like printers.
How does MAC Authentication Bypass work? 	When the switch detects a connection from the client device, it uses the MAC address as the client identity and sends the authentication server a RADIUS access/request frame with a username and password based on the MAC address.<div><br /></div><div>This is useful for devices like printers that do not support 802.1X authentication.</div>
What is the BGP Add Path feature? 	The BGP Additional Paths feature is a BGP extension that allows the advertisement of multiple paths for the same prefix without the new paths implicitly replacing any previous paths. This behavior promotes path diversity and reduces MED oscillations.
What are the three high-level steps needed to enable BGP add-path? 	-Enable the sending and/or receiving of additional paths<div>-Select the candidate paths to advertise</div><div>-Advertise the selected additional paths</div>
What is the neighbor requirement for the BGP add-path feature? 	The add-path feature is a negotiated capability. Both BGP neighbors must be explicitly configured to send and/or receive additional paths with the BGP process <b>bgp additional-paths </b>{<b>send </b>[<b>receive</b>] | <b>receive</b>}
What is the basic BGP add-path configuration to accept additional paths, and advertise all available paths? 	BGP process:<div><b>bgp additional-paths select all</b></div><div><b>neighbor </b><i>ip </i><b>additional-paths send receive</b></div><div><b>neighbor </b><i>ip </i><b>advertise additional-paths all</b></div>
What is the BGP add-path path identifier? 	The BGP Additional Paths feature is implemented by adding a path identifier to each path in the NLRI. The path identifier (ID) can be considered as something similar to a route distinguisher (RD) in VPNs, except that a path ID can apply to any address family. Path IDs are unique to a peering session and are generated for each network. The path identifier is used to prevent a route announcement from implicitly withdrawing the previous one.&nbsp;
What is the requirement of the multiple available paths for BGP PIC to work? 	Each multiple path must have a different next-hop address in order to be considered
How do you enable BGP PIC? 	BGP process:<div><b>bgp additional-paths install</b></div>
How does BGP PIC work? 	Backup/alternate paths are calculated and stored in the RIB and FIB so that when a failure is detected, the backup path can immediately take over.
With EIGRP, how is FRR different from backups via Feasible Successors? 	While EIGRP has fast convergence when feasible successors are present, FRR takes the extra step of calculating a Loop-Free Alternate backup route, which is then entered into the FIB. Feasible Successors must be promoted to the Successor, whereas FRR places the FS into the FIB preemptively.&nbsp;
How do you enable EIGRP FRR? 	Topology base:<div><b>fast-reroute per-prefix </b>{<b>all </b>| <b>route-map </b><i>route-map</i>}</div>
How can you view the list of configured EIGRP LFAs? 	<b>show ip eigrp topology frr</b>
How do you enable basic OSPF FRR? 	OSPF process:<div><b>fast-reroute per-prefix enable area </b><i>area </i><b>prefix-priority </b><i>low</i></div>
What is OSPF Remote LFA? 	Remote LFA uses targeted MPLS LDP sessions to calculate alternate paths if direct LFA does not result in any backups.
How do you enable OSPF Remote LFA? 	OSPF process:<div><b>fast-reroute per-prefix remote-lfa tunnel mpls-ldp</b></div><div><b><br /></b></div><div>Requires MPLS with targeted LDP session capability:</div><div>Interface: <b>mpls ldp discovery targeted-hello accept</b></div>
What is BGP ORF? 	Outbound Route Filtering is a negotiable capability whereby one neighbor can request only a portion of routes to be received from the other neighbor.
When defining a NAT pool, what does the <b>match-host </b>keyword do? 	When the <b>match-host </b>keyword is used, the mapping between the local and global addresses must use the same host number. For example, 10.10.10.5 could match to 20.20.20.5.<div><br /></div><div>The default is <b>rotary</b></div>
What allows static NAT mappings of one inside local address to multiple inside global addresses? 	The <b>extendable </b>keyword:<div><br /></div><div><b>ip nat inside source static </b><i>IL IG </i><b>extendable</b></div>
How do you configure multiple address ranges in a single NAT pool? 	<b>ip nat pool </b><i>name </i><b>prefix-length </b><i>length</i><div>&nbsp; <b>address </b><i>start end</i></div><div>&nbsp; <b>address </b><i>start end</i></div>
What is the base algorithm for IPv4/IPv6 translation called? 	Stateless IP/ICMP Translation (SIIT), formerly NAT-PT
What is the purpose of Stateless IP/ICMP Translation (SIIT)? 	To translate IPv4 packets into IPv6, and vice-versa
What happens to the TTL when an IPv4 or IPv6 packet passes through a device performing SIIT? 	The IPv4 TTL or IPv6 Hop Limit field is decremented by one since the translator counts as a router
When using SIIT to translate from IPv4 to IPv6, which IPv4 header fields are discarded? 	Header Length<div>Fragment fields (Identification, Flags, Fragment Offset)</div><div>Header Checksum</div><div>Options / Padding</div>
When SIIT is used to translate from IPv6 to IPv4, which fields are dropped from the IPv6 header? 	Only the Flow Label field is discarded, all other IPv6 header fields are translated to the IPv4 header.
With SIIT, how is the Version field in the IPv4 header translated? 	The IPv4 Version field value of 4 is changed to the IPv6 Version field value of 6.
With SIIT, how is the ToS field in the IPv4 header translated? 	The IPv4 ToS bits are copied to the IPv6 Traffic Class field, or set to 0
With SIIT, how is the Flow Label field in the IPv6 header handled? 	IPv4 &gt; IPv6 = 0<div>IPv6 &gt; IPv4 = Discard</div>
With SIIT, how is the Protocol field in the IPv4 header translated? 	The IPv4 value is copied to the IPv6 Next Header field, unless it is for ICMP (IP Protocol 1), in which case the IPv6 Next Header value is 58 (ICMPv6)
With SIIT, how are the Source and Destination fields translated? 	The addresses is dependent on the type of translation being performed, such as NAT-PT, MAP-T, or Stateless or Stateful NAT64.
With SIIT, how is the IPv4 Header Length field treated when translating from IPv6 to IPv4? 	The Header Length field is set to 5
With SIIT, how is the Traffic Class field in the IPv6 header translated? 	The value is copied to the IPv4 ToS bits
With SIIT, how is the IPv4 Payload Length field handled when translating from IPv6? 	Add 5 (IPv4 Header Length) to the IPv6 Total Length field
With SIIT, how are the IPv4 Fragment fields handled when translating from IPv6? 	Identification = 0<div>More Fragments = 0</div><div>Don't Fragment = 1</div><div>Fragment Offset = 0</div>
With SIIT, how is the Next Header field in the IPv6 header translated? 	The value is copied to the IPv4 Protocol field, with the following exceptions:<div><br /></div><div>58 (ICMPv6) is changed to 1 (ICMP)</div><div>0, 43, 60 = skip to next Next Header value because these extensions are meaningless to IPv4</div>
NAT-PT has been replaced by what? 	NAT64
How does NAT64 compare to NAT-PT with regard to DNS? 	NAT64 does not support DNS-ALG, and the DNS translation is a separate DNS64 function.
What is a limitation of NAT64 with regard to session initiation? 	With NAT64, IPv4 devices cannot initiate sessions to IPv6 devices without a static address mapping in the translator. IPv6 devices can initiate sessions to IPv4 devices, however.
True or False: Both NAT-PT and NAT64 support multicast translation. 	False, IP multicast is not yet supported by any translation method.
How does Stateless NAT64 work? 	IPv4 addresses are embedded in the IPv6 address. The translator recognizes the address format and converts as appropriate.<div><br /></div><div>The addresses are typically maintained in a DNS64 server, and can be assigned either manually or via DHCPv6.</div>
What is the IPv6 Well-Known Prefix used for IPv4 translation? 	64:ff9b::/96<div><br /></div><div>The IPv4 address is encoded into the final 32 bits.</div>
How are locally-designated prefixes used with NAT64? 	The IPv6 prefix can be either 32, 40, 48, 56, 64, or 96 bits in length.<div><br /></div><div>The embedded IPv4 address begins directly after the prefix, with the exception of bits 64-71 which are always set to 0 (except for the 96-bit prefix length which does not have any null bits).</div><div><br /></div><div>With a prefix length of 32, all of the IPv4 address bits come before the null bits 64-71. With a prefix length of 64, all IPv4 address bits are after the null bits. Prefix lengths 40, 48, and 56 divide the IPv4 address bits around the null bits.</div>
What is an advantage of Stateful NAT64 with regard to addressing? 	Stateless NAT64 requires a 1:1 mapping between IPv4 and IPv6 addresses. However, Stateful NAT64 can map multiple IPv6 addresses to a single IPv4 address.
Why is it important for BGP to send keepalive messages to ensure the neighbor connection is maintained? 	BGP exchanges the entire route table once per session, and only changed information afterward. The keepalive function keeps the session open so that the changed information can be exchanged, instead of the entire routing tabling with each update.
What is the destination address for an IGMP General Query for all three IGMP versions? 	224.0.0.1
Which IGMP versions support Report Suppression? 	IGMPv1<div>IGMPv2</div>
Which IGMP versions support group-specific queries? 	IGMPv2<div>IGMPv3</div>
Which IGMP versions support querier elections? 	IGMPv2<div>IGMPv3</div>
Which router is elected the IGMP querier by default? 	The router on the segment with the lowest IP address
What is the default IGMP query interval? 	60s for all IGMP versions, though the RFC standard is 125s.
What is the default IGMP querier timeout? 	120s &nbsp;(2x query interval)
What is the group address for an IGMP Report for all three IGMP versions? 	IGMPv1 = Joining multicast group address<div>IGMPv2 = Joining multicast group address</div><div>IGMPv3 = 224.0.0.22</div>
What is the destination address for the IGMP Leave Group message for all three IGMP versions? 	IGMPv1 = not supported<div>IGMPv2 = 224.0.0.2</div><div>IGMPv3 = 224.0.0.22</div>
What is another name for Catalyst protected switch ports? 	PVLAN Edge
The VSS Link Management Protocol (LMP) and Role Resolution Protocol (RRP) are two components of which protocol? 	Virtual Switch Link Protocol (VSLP)
What are the two subcomponents of the Virtual Switch Link Protocol (VSLP)? 	Link Management Protocol (LMP)<div>Role Resolution Protocol (RRP)</div>
What actions are performed by the VSS Link Management Protocol (LMP)? 	Verify VSL link integrity<div>Reject unidirectional links</div><div>Establish bidirectional communication between chassis</div><div>Exchange switch IDs for duplicate detection</div>
What actions are performed by the VSS Role Resolution Protocol (RRP)? 	Check hardware and software versions<div>Check VSL configuration compatibility</div><div>Assign active and standby virtual switch roles</div>
When configuring a static route, what does the <b>global </b>keyword do? 	The <b>global </b>keyword is used in combination with <b>vrf </b><i>name </i>to indicate that the next hop is in the global IP routing table, not within the specified VRF.
When configuring a static route, what does the&nbsp;<b>permanent&nbsp;</b>keyword do? 	The <b>permanent </b>keyword causes the static route to remain in the routing table even if the interface shuts down.
What are the major BGP attributes and their associated categories? 	"<img src=""BGP Attributes.png"" />"
Which Catalyst 3560 queues use Shaped Round Robin? 	Egress only
Which Catalyst 3560 queues use Shared Round Robin? 	Both egress and ingress
What is the difference between Shared and Shaped Round Robin queuing? 	Shared RR guarantees bandwidth but does not limit other queues<div><br /></div><div>Shaped RR guarantees bandwidth and rate-limits other queues even if they are empty</div>
How does the BGP command <b>neighbor </b><i>ip </i><b>ttl-security hops </b><i>hops </i>work? 	The <i>hops </i>parameter inverts the TTL. For example, a neighbor that is 4 hops away should have a setting of 251, and a neighbor that is 251 hops away should have a setting of 4.<div><br /></div><div>255 - hops = hops value</div>
Without additional configuration, what is the default version of SNMP used on Cisco IOS? 	SNMPv1
Which is performed first, NAT or routing, from the inside to the outside? 	Inside = Routing then NAT
Which is performed first, NAT or routing, from the outside to the inside? 	Outside = NAT then Routing
What are the names of the nodes in the 3-node OpenStack architecture? 	Controller node<div>Network node</div><div>Compute node</div>
What are the three primary causes of unicast flooding? 	Asymmetric routing<div>STP topology changes</div><div>Forwarding table overflow</div>
What is contained inside the Cisco ACI Tenant construct? 	Contexts
What is a Cisco ACI Context? 	A collection of VRFs and IP address spaces. Each ACI Tenant can have one or more contexts, and the EPs and EPGs define the application within each context
What is a Cisco ACI EPG? 	End Point Group, a collection of EPs that provide a similar function. EPGs are defined by NIC, vNIC, port group, IP address, and DNS names
What is a Cisco ACI ANP? 	Application Network Profile, a collection of EPGs, their connections, and related policies
What is the cluster of controllers that provide a single point of control, a central API, a central repository of global data, and a repository of policy data for Cisco ACI? 	Cisco APIC Application Policy Infrastructure Controller
What is the primary function of the Cisco APIC? 	To provide policy authority and policy resolution mechanisms for Cisco ACI and devices attached to Cisco ACI.
What is the EPC capture point? 	The traffic transit point where a packet is captured and associated with a buffer, such as the IPv4/IPv6 CEF switching path with interface input and output.
What are the two requirements for configuring EPC? 	A capture buffer and a capture point need to be defined. The capture point should be associated with the capture buffer.
What are the four major steps of capturing data with EPC? 	-Create the buffer (traffic to be captured)<div>-Define the capture point</div><div>-Associate the capture point with the buffer</div><div>-Start the capture point (and optionally stop)</div>
How do you configure an EPC capture buffer? 	<b>monitor capture buffer </b><i>name options</i><div><i><br /></i></div><div>options include clearing or exporting the buffer, filtering, and limiting by duration, packet count, packets per second, and size</div>
How do you configure an EPC capture point? 	<div>CEF:</div><b>monitor capture point </b>{<b>ip </b>| <b>ipv6</b>} <b>cef </b><i>name interface </i>{<b>in </b>| <b>out </b>| <b>both</b>}<div><br /></div><div><div>Process Switched:</div><b>monitor capture point&nbsp;</b>{<b>ip&nbsp;</b>|&nbsp;<b>ipv6</b>}&nbsp;<b>process-switched&nbsp;</b><i>name </i>{<b>in&nbsp;</b>|&nbsp;<b>out&nbsp;</b>|&nbsp;<b>both </b>|&nbsp;<b>from-us</b>}</div>
How do you configure an EPC association? 	<b>monitor capture point associate </b><i>capture-point-name capture-buffer-name</i>
How do you activate an EPC session? 	<b>monitor capture point start </b>{<i>capture-point-name </i>| <b>all</b>}<div><br /></div><div>Stop the capture with the same command, replacing <b>start </b>for <b>stop</b></div>
How do you export an EPC session? 	<b>monitor capture buffer </b><i>name </i><b>export </b><i>location</i>
What is the difference between an EEM applet and an EEM script? 	An applet is a form of policy defined within the CLI configuration<div><br /></div><div>A script is a form of policy written in TCL</div>
What is the EEM component that monitors the system for particular conditions? 	Event Detector, of which there are multiple types (CLI event, IP SLA event, Syslog event, etc).
What is the EEM response to a detected event? 	EEM Actions, such as executing particular CLI commands, sending an email, generating SNMP trap, etc.
What is the BGP Site-of-Origin (SoO) attribute? 	The SoO is an extended community used to identify routes originating from a particular site for the purpose of preventing readvertisement back into the source site to prevent routing loops.
How does BGP per-neighbor SoO work? 	The configuration is performed on the PE router, the VPN entry point, which tags the incoming routes with the SoO extended community. The PE forwards prefixes to the CPE only when the SoO tag of the prefix does not match the SoO tag configured for the CPE.
How do you configure a BGP Site-of-Origin (SoO) value? 	<b>neighbor </b><i>ip </i><b>soo </b><i>value</i><div><i><br /></i></div><div>The SoO can also be configured via peer groups and policy templates.</div>
What are the general use cases for the EIGRP Site-of-Origin (SoO) feature? 	EIGRP SoO is used for per-site VPN filtering:<div>-MPLS VPNs with backdoor links</div><div>-CE routers dual-homed to different PE routers</div><div>-PE routers that support CE routers from different sites in the same VRF</div>
What is the difference between PIMv1 and PIMv2 with regard to transport? 	PIMv1 uses IGMP for transport<div>PIMv2 uses IP Protocol 103</div>
What is the PIM requirement of using BSR? 	PIMv2 is required
When calculating the EIGRP classic composite metric, what are the delay values measured in? 	10s of µs<div><br /></div><div>1 Gbps = 1 &nbsp;(one 10s of µs)</div><div>100 Mbps = 10 (ten 10s of µs)</div><div>10 Mbps = 100 (one hundred 10s of µs)</div>
When calculating the EIGRP classic composite metric, how is the delay component calculated? 	Sum of delays along the path in 10s of µs, multiplied by 256<div><br /></div><div>Example: one 10 Mbps link + one 1 Gbps link + one 100 Mbps link =</div><div>( 100 + 1 + 10 ) * 256 = 28,416 &nbsp; &nbsp;(111 * 256)</div>
When calculating the EIGRP classic composite metric, how is the bandwidth component calculated? 	Divide 10,000,000 kbps by the lowest bandwidth link along the path in kbps, then multiply by 256.<div><br /></div><div>Example, if the slowest link in the path is 100 Mbps:</div><div><br /></div><div>10,000,000 kbps / 100,000 kbps * 256 = 25,600</div>
How does a router handle a packet destined to an IP address belonging to one of its locally-configured interfaces if the TTL is 1? 	If the interface is in the Up/Up state, the router identifies the upper-layer protocol and passes the packet to the appropriate upper-layer protocol driver.
What is the default CEF load-sharing method used on the Catalyst 6500? 	Source IP, Destination IP, Universal ID
What is included with the <b>mls ip cef load-sharing full </b>command? 	Source and Destination Layer 3 and 4 information with multiple adjacencies
What is included with the&nbsp;<b>mls ip cef load-sharing full simple&nbsp;</b>command? 	Source and Destination Layer 3 and 4 information without multiple adjacencies
What is included with the&nbsp;<b>mls ip cef load-sharing simple&nbsp;</b>command? 	Source and Destination Layer 3 information without multiple adjacencies
What is included with the&nbsp;<b>mls ip cef load-sharing full exclude-port destination&nbsp;</b>command? 	This command excludes destination Layer 4 ports and both source and destination IP addresses from the load-balancing algorithm.<div><br /></div><div>This command includes source Layer 4 ports only</div>
What is included with the&nbsp;<b>mls ip cef load-sharing full exclude-port source&nbsp;</b>command? 	<div>This command excludes source Layer 4 ports and both source and destination IP addresses from the load-balancing algorithm.</div><div><br /></div><div>This command includes destination Layer 4 ports only</div>
Why is the DHCPREQUEST packet broadcast from the DHCP client? 	DHCPREQUEST is used when a DHCP client has chosen a specific DHCP server. The packet is broadcast instead of unicast so that other DHCP servers can reallocate the IP address they offered to the client.
What is a DHCPDECLINE message? 	The DHCPDECLINE message is broadcast from the DHCP client to formally reject a DHCPOFFER from a DHCP server. This packet is usually sent when the IP configuration is not valid for the client.
What is a DHCPNAK message? 	The DHCPNAK is broadcast from the DHCP server to inform the DHCP client that the IP address in the previous DHCPREQUEST message is no longer valid for use, which can happen if the client is slow to respond to the server.
What is IPsec Perfect Forward Secrecy (PFS)? 	With PFS, each negotiation of a new Phase 2 SA requires regeneration of new Phase 1 Diffie-Hellman keys. This ensures that when the Phase 2 SAs have expired (or need to be re-keyed), new keying material is used in case the old keys have been compromised.<div><br /></div><div>Without PFS, the DH keys calculated during Phase 1 are used over and over again.</div><div><br /></div><div>PFS is also known as a session key.</div>
What is the primary cause of bandwidth starvation? 	Bandwidth starvation occurs when higher-priority queues monopolize an interface's bandwidth so that traffic from lower-priority queues is never sent.
What class of QoS tools mitigate bandwidth starvation? 	Queuing
Assuming multiple registered upper-layer protocols, how many sessions does BFD create? 	One session per address family per interface, regardless of the number of registered upper-layer protools
When creating a policy map, what unit of value is used when specifying the <b>priority </b>or <b>bandwidth </b>if the <b>percent </b>keyword is not used? 	Kbps
When creating a PQ with the <b>priority </b>command, what is the default burst size if not specified? 	200ms of traffic at the configured bandwidth rate<div><br /></div><div>Example: <b>priority 1000 </b>sets up a priority queue for 1,000 Kbps, with a burst size of 200,000 bytes</div>
What is indicated by this policy-map command: <b>priority 256 512</b> 	A PQ with 256 Kbps guaranteed bandwidth, with a 512 byte burst
What rate values are used with the <b>police </b>command? 	The policed rate is defined in bps, and the burst rates are defined in bytes.<div><br /></div><div>Example: <b>police 100000 10000 5000&nbsp;</b>indicates a rate of 100,000 bps, with a normal burst of 10,000 bytes, and a max burst of 5,000 bytes.</div>
What values are indicated by this command: <b>police 256000 15000 10000</b> 	This command indicates a policed rate of 256,000 bps, with a normal burst of 15,000 bytes, and a max burst of 10,000 bytes.
What does the RIP <b>default-information originate on-passive </b>command do? 	This command causes a default route to be sent on RIP interfaces marked as passive.
What metrics are monitored by both PfR active and passive mode? 	Reachability<div>Delay</div>
Which PfR mode monitors delay, packet loss, reachability, and throughput? 	Passive mode via NetFlow
Which PfR mode monitors delay, jitter, MOS, and reachability? 	Active mode via IP SLA
What is the difference between PfR Active mode and Fast mode? 	Active mode monitors the active exit path, whereas Fast mode continuously generates IP SLA probes for all possible exit paths.
Within MPLS labels, what is the name of the field that used to be referred to as the EXP bits? 	Traffic Class (TC)
What is the MPLS TC field? 	Traffic Class, which is a field in the MPLS header/label that used to be referred to as the EXP bits
What are the PfR link policies? 	Traffic Load (Utilization)<div>Range</div><div>Cost</div>
What is the PfR traffic load (utilization) policy? 	The traffic load (utilization) policy specifies an upper threshold on the amount of traffic that a particular link can carry, and can be defined for both ingress and egress links.
What is the PfR range policy? 	The range policy maintains all links within a certain utilization range relative to each other to ensure that the traffic load is distributed.
What is the PfR cost policy? 	The cost policy allows you to specify link usage based on the monetary cost of each exit link. The most cost-effective link will be used while remaining within the desired performance level.
What is the IPv6 address range for SSM? 	FF3x::/32, where x indicates the scope
What type of IPv6 address is FF30::1/32? 	IPv6 Source-Specific Multicast
What are the five IPv6 multicast scopes? 	FF01::/16 Node-local<div>FF02::/16 Link-local</div><div>FF05::/16 Site-local</div><div>FF08::/16 Organization-local</div><div>FF0E::/16 Global</div>
What is the prefix for an IPv6 node-local multicast address? 	FF01::/16
What is the prefix for an IPv6 link-local multicast address? 	FF02::/16
What is the prefix for an IPv6 site-local multicast address? 	FF05::/16
What is the prefix for an IPv6 organization-local multicast address? 	FF08::/16
What is the prefix for an IPv6 global multicast address? 	FF0E::/16
What type of IPv6 multicast address has the prefix FF01::/16? 	node-local
What type of IPv6 multicast address has the prefix FF02::/16? 	link-local
What type of IPv6 multicast address has the prefix FF05::/16? 	site-local
What type of IPv6 multicast address has the prefix FF08::/16? 	organization-local
What type of IPv6 multicast address has the prefix FF0E::/16? 	global
What is the prefix range for IPv6 multicast addressing? 	FF00 - FFFF<div><br /></div><div>FF00::/8</div>
What is the IPv6 prefix ::FFFF:0:0/96 used for? 	IPv4-mapped IPv6 addresses.<div><br />Example: 10.10.10.1 = ::FFFF:10.10.10.1</div>
What is the range of IPv6 link-local addresses? 	FE80::/10<div><br /></div><div>FE80 - FEBF</div>
What does the IPv6 prefix range of FE80 - FEBF correspond to? 	Link-local addressing
What is the prefix range of globally-routable IPv6 addresses? 	2000::/3<div><br /></div><div>2000 - 3FFF</div>
What type of IPv6 addresses correspond to a prefix of FC00 - FDFF? 	Unique local
What is the range of IPv6 unique local addressing? 	FC00::/7<div><br /></div><div>FC00 - FDFF</div>
IPv6 ND packets should be generated with what TTL value? 	255 - routers expect to see a value of 255, and drop ND packets that are less.
What is an Ethernet frame with fewer than 64 bytes? 	A runt frame. Runt frames are discarded.
What is adaptive cut-through switching? 	Adaptive cut-through switching uses an error threshold. Cut-through switching is used until the error threshold is crossed, upon which time the switch reverts to store-and-forward switching. The switch reverts to cut-through switching when the error rate falls below the threshold.
"What is the difference between ""private"" and ""virtual private"" Metro Ethernet services? "	Private is port-based<div>Virtual-private is a VLAN-based multiplexed service where the virtual circuit is identified by a VLAN ID</div>
What is IEEE 802.1ad? 	Q-in-Q
What is the IEEE standard for Q-in-Q? 	802.1ad
What is the MEF term for a port-based point-to-point Ethernet virtual circuit? 	EPL Ethernet Private Line
What is the MEF term for a VLAN-based point-to-point Ethernet virtual circuit? 	EVPL Ethernet Virtual Private Line
What is the MEF term for a port-based multipoint-to-multipoint Ethernet virtual circuit? 	EP-LAN Ethernet Private LAN
What is the MEF term for a VLAN-based multipoint-to-multipoint Ethernet virtual circuit? 	EVP-LAN Ethernet Virtual Private LAN
What is a MEF EPL? 	Ethernet Private Line, a port-based P2P Ethernet virtual circuit which preserves CE-VLAN IDs and associated CoS markings across the EVC
What is a MEF EVPL? 	Ethernet Virtual Private Line, a VLAN-based P2P Ethernet virtual circuit which allows service multiplexing and CoS parameters assigned per-EVC. CE-VLAN IDs and associated CoS markings do not have to be preserved across the EVC, meaning C-VLAN rewrite operations are permitted.
What is a MEF EP-LAN? 	"Ethernet Private LAN, a port-based MP2MP EVC where every node has ""root"" status and can talk to every other node directly. CE-VLAN IDs and CoS values are preserved across the service."
What is a MEF EVP-LAN? 	"Ethernet Virtual Private LAN, a VLAN-based MP2MP service where every node is set to ""root"" status and can talk to every other node directly. Bundling and service multiplexing are possible, and C-VLAN IDs and CoS values do not require preservation across the service."
When using EIGRP as the MPLS PE-CE routing protocol, what causes EIGRP routes to be internal or external between sites? 	EIGRP routes are considered internal between sites if the EIGRP ASN matches, otherwise the routes are considered external.
What is the MPLS L3VPN EIGRP pre-bestpath Point of Insertion (POI)? 	The POI is automatically configured when using EIGRP for the PE-CE routing protocol, and is set when EIGRP is redistributed into BGP. The POI compares EIGRP metrics before BGP makes a best path decision.
What is the difference between NBAR active and passive mode? 	Active mode is configured within a class-map with <b>match protocol</b><div><b><br /></b></div><div>Passive mode is configured directly on an interface with <b>ip nbar protocol-discovery</b></div>
When does an IP SLA operation begin if the scheduling <b>start-time </b>is not specified? 	"The IP SLA operation is automatically scheduled in a ""pending"" state and is essentially configured but suspended. The operation will never start unless <b>start-time </b>is explicitly configured."
What is the default lifetime of a scheduled IP SLA operation if not specified? 	One hour (3600 seconds)
What is the default IP SLA operation frequency, if not specified? 	Every 60 seconds
How do you capture multicast packets with EPC? 	The capture point must be process-switched on the ingress direction:<div><br /></div><div><b>monitor capture point ip process-switched </b><i>buffer </i><b>in</b></div>
What are the five high-level steps of configuring Cisco Performance Monitor? 	Create a flow record<div>Configure a flow monitor</div><div>Create one or more classes</div><div>Create a policy</div><div>Associate the policy with an interface</div>
With Cisco Performance Monitor, how do you configure a flow record? 	<b>flow record type performance-monitor</b><div><b><br /></b></div><div>You then define interesting traffic with <b>match </b>and what particular statistics to collect with <b>collect</b></div>
With Cisco Performance Monitor, how do you configure a flow monitor? 	<b>flow monitor type performance-monitor</b><div><b><br /></b></div><div>The flow monitor is used to associate a flow <b>record </b>with a flow <b>exporter</b></div>
With Cisco Performance Monitor, how do you configure a performance monitor policy? 	<b>policy-map type performance-monitor</b><div><b><br /></b></div><div>The policy-map associates the <b>class </b>with a flow monitor</div>
What is the final step in implementing Cisco Performance Monitoring? 	Associate the performance monitor policy with an interface:<div><b>service-policy type performance-monitor</b></div>
What are the decimal values for the corresponding eight Class Selector / IP Precedence values? 	0 CS0 / Routine<div>8 CS1 / Priority</div><div>16 CS2 / Immediate</div><div>24 CS3 / Flash</div><div>32 CS4 / Flash Override</div><div>40 CS5 / Critical</div><div>48 CS6 / Internetwork Control</div><div>56 CS7 / Network Control</div><div><br /></div><div>NIC-F-FIPR</div>
What is Cisco Managment Plane Protection (MPP)? 	MPP restricts the interfaces and protocols for which remote administration can be performed. Management protocols not permitted by the MPP policy, or received on a non-mangement interface, are dropped.
How do you configure Management Plane Protection (MPP)? 	<b>control-plane host</b><div><b>&nbsp; management-interface </b><i>interface </i><b>allow </b><i>protocol1 protocol2...</i></div><div><i><br /></i></div><div>Example:</div><div><b>management-interface g0/1 allow ssh snmp</b></div>
What is the requirement of IS-IS System IDs for router adjacencies? 	System IDs must be unique within an area for L1 adjacency, and must be unique within the domain for L2 adjacency.<div><br /></div><div>IS-IS will not establish an adjacency between two routers with the same System ID.</div>
What is the order of operations for NAT inside-to-outside translation? 	<div>-If IPSec then check input access list</div><div>-decryption</div><div>-check input access list</div><div>-check input rate limits</div><div>-input accounting</div><div>-redirect to web cache</div><div><br /></div><div>-policy routing</div><div>-routing</div><div><b>-NAT inside to outside (local to global translation)</b></div><div><br /></div><div>-crypto (check map and mark for encryption)</div><div>-check output access list</div><div>-inspect (Context-based Access Control (CBAC))</div><div>-TCP intercept</div><div>-encryption</div><div>-Queueing</div>
What is the order of operations for NAT outside-to-inside translation? 	<div>-If IPSec then check input access list</div><div>-decryption</div><div>-check input access list</div><div>-check input rate limits</div><div>-input accounting</div><div>-redirect to web cache</div><div><br /></div><div><b>-NAT outside to inside (global to local translation)</b></div><div>-policy routing</div><div>-routing</div><div><br /></div><div>-crypto (check map and mark for encryption)</div><div>-check output access list</div><div>-inspect (Context-based Access Control (CBAC))</div><div>-TCP intercept</div><div>-encryption</div><div>-Queueing</div>
With inside-to-outside (local to global) NAT, which is performed first, routing or NAT? 	Route first, then NAT
With outside-to-inside (global to local) NAT, which is performed first, routing or NAT? 	NAT first, then routing
Which CEF load-sharing algorithm is appropriate for environments with a small number of source and destination pairs? 	<b>ip cef load-sharing algorithm tunnel</b>
EEM publishes events to which subsystem number? 	798
What is the IOS Watchdog System Monitor used for? 	Monitoring memory and processor usage
How can you determine which EIGRP neighbors have not yet responded to a Query? 	<b>show ip eigrp topology active</b>
What is the difference between the <b>ip options drop </b>and <b>ip options ignore </b>commands with regard to downstream devices? 	With <b>ip options ignore </b>the router does not process any options that may be present in the IPv4 header, but keeps the options in the header when sending the packet onward.<div><br /></div><div>The <b>ip options drop </b>command causes the router to discard any packets with options set in the IPv4 header, and therefore downstream devices will not receive these packets.</div>
What is the use case and caveat for configuring <b>ip options </b>{<b>ignore </b>| <b>drop</b>}? 	Both versions of the command protect the router from exploits based on IPv4 header options, but breaks certain control plane protocols like RSVP and IGMPv2.<div><br /></div><div>The <b>drop </b>option also protects downstream devices by discarding packets with options present in the IPv4 header.</div>
What happens if both <b>ip options drop </b>and <b>ip options ignore </b>are configured on a router? 	The <b>ip options ignore </b>command takes precedence.
When issuing the <b>show ip nhrp detail </b>command, what does the authoritative flag indicate? 	The mapping was obtained directly from the next-hop router or server.
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the implicit flag indicate? 	The mapping was obtained from an NHRP resolution request or packet.
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the local flag indicate? 	The mapping is for networks that are local to the router.
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the nat flag indicate? 	The remove device supports NHRP NAT extensions
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the negative flag indicate? 	A mapping could not be obtained for negative caching.
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the registered flag indicate? 	The mapping was created in response to an NHRP registration
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the router flag indicate? 	The mappings for a remote router are marked with the router flag.
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the unique flag indicate? 	The mapping cannot be overwritten by a different NBMA entry with the same IP address.
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, what does the used flag indicate? 	Data packets are being process-switched for the given mapping.
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates that the mapping was obtained directly from the next-hop router or server? 	authoritative
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates the mapping was obtained from an NHRP resolution request or packet? 	implicit
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates the mapping is for networks that are local to the router? 	local
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates the remote device supports NHRP NAT extensions? 	nat
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates that a mapping could not be obtained for negative caching? 	negative
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates the mapping was created in response to an NHRP registration? 	registered
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates the mappings for a remote router are marked with the router flag? 	router
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates the mapping cannot be overwritten by a different NBMA entry with the same IP address? 	unique
When issuing the&nbsp;<b>show ip nhrp detail&nbsp;</b>command, which flag indicates data packets are being process-switched for the given mapping? 	used
When an IS-IS L1 router receives an IIH packet on a network segment, what five things are verified before forming an adjacency? 	Network type<div>Routing level</div><div>Area</div><div>MTU</div><div>Authentication</div>
When an IS-IS L2 router receives an IIH packet on a network segment, what four things are verified before forming an adjacency? 	Network type<div>Routing level</div><div>MTU</div><div>Authentication</div><div><br /></div><div>L2 does not require the Area to match, unlike L1</div>
What happens if an IS-IS router configured for the broadcast network type on a link receives a point-to-point IIH packet? 	P2P IIH packets are ignored on broadcast network types, and vice-versa.<div><br /></div><div>The network type (broadcast or P2P) must match between routers for an adjacency to form.</div>
What happens if the IS-IS process&nbsp;<b>no hello padding </b>or interface <b>no isis hello padding </b>command is configured? 	IIH packets are padded to the full MTU size by default. If either of these commands are configured, only the first five IIH packets are padded (for the purposes of forming a neighbor adjacency).
If two IS-IS neighbors fail to form either an L1 or L2 adjacency, what might be the results of the <b>show clns neighbors </b>command? 	The two routers may still form an ES-IS adjacency.
How long do incomplete ARP entries remain in the ARP and CEF adjacency tables? 	60 seconds
Why is CEF required for MPLS on Cisco platforms? 	The LFIB is derived from information in the FIB (CEF table) and the LIB.
How are local host routes handled during redistribution? 	"Local host routes (/32 and /128) cannot be redistributed into a dynamic routing protocol.<div><br /></div><div>A Local host route is marked as ""L"" in the output of <b>show ip route</b></div><div><b><br /></b></div><div>Connected /32 and /128 routes can be redistributed.</div>"
When configuring logging for an ACL, what does the <b>log-input </b>keyword provide that the <b>log </b>keyword does not? 	<b>log-input </b>provides all of the details provided by the <b>log </b>keyword, but adds source MAC and ingress interface information.
What is IGMPv3 source filtering? 	IGMPv3 source filtering enables a multicast receiver to signal to a router which groups it wants to receive multicast traffic from, and from which sources the traffic is expected.
What are the two IGMPv3 source filtering modes? 	INCLUDE, where the receiver joins a group and lists the IPs from which it wants to receive traffic<div><br /></div><div>EXCLUDE, where the receiver joins a group and lists the IPs from which id does not want to receive traffic (an empty EXCLUDE list indicates all sources are acceptable)</div>
Which end of a serial link must provide clocking? 	DCE data communications equipment
Which end of a serial link receives the clocking information? 	DTE data terminal equipment
How do you determine if a serial interface is the DCE or DTE end? 	<b>show controllers serial</b>
What's the difference between the switchport port security violation modes? 	<b>Protect</b>: silently discard offending traffic<div><br /></div><div><b>Restrict</b>: discard offending traffic, log, SNMP trap, increment SecurityViolation counter</div><div><br /></div><div><b>Shutdown</b>: discard offending traffic, log, SNMP trap, increment SecurityViolation counter, err-disable port</div>
When <b>switchport port-security </b>is configured, what is the default violation action if not configured? 	<b>shutdown</b><div><b><br /></b></div><div>The port is err-disabled.</div>
With EEM, what's the difference between the <b>sync yes </b>and <b>sync no </b>keywords? 	When <b>sync yes </b>is configured with the <b>event cli </b>command, the event is processed synchronously, which means the EEM applet must finish before the CLI command can be executed. With <b>sync no </b>the CLI command is executed immediately.
With EEM, when configuring asynchronous processing with the <b>sync no </b>keyword, what other keyword must also be included? 	<b>skip no </b>or <b>skip yes</b>&nbsp;which indicates whether or not the detected CLI event should be executed.
With EEM, when using synchronous processing, what determines if the CLI event is executed or not? 	<b>set </b><i>num </i><b>_exit_status </b>{<b>0 </b>| <b>1</b>}<div><br /></div><div>When set to 0, the detected CLI command is skipped. When set to 1, the CLI command is executed.</div>
What MAC address does IS-IS use to send to All Intermediate Systems? 	0900.2B00.0005
What MAC address does IS-IS to send to All End Systems? 	0900.2B00.0004
What is associated with the MAC address 0900.2B00.0005? 	IS-IS All Intermediate Systems
What is associated with the MAC address 0900.2B00.0004? 	IS-IS All End Systems
Which routing protocols are used with PfR PIRO (Protocol Independent Routing Optimization)? 	OSPF and IS-IS
What is PfR PIRO (Protocol Independent Routing Optimization)? 	When PfR modifies a path for a traffic class, it searches for a parent route (exact or less-specific) in the order of BGP RIB, EIGRP RIB, static route RIB.<div><br /></div><div>With PIRO, PfR can also examine the RIBs of OSPF and IS-IS after BGP, EIGRP, and static RIBs have been searched.</div>
What two additional TLVs are advertised by LLDP to support LLDP-MED? 	Port VLAN ID<div>MAC/PHY Configuration Status</div>
Why would LLDP advertise the additional TLVs, Port VLAN ID and MAC/PHY configuration status? 	To advertise support for LLDP-MED
What are the five TLVs advertised by LLDP-MED? 	LLDP-MED Capabilities<div>Network policy</div><div>Power management</div><div>Inventory Management</div><div>Location</div>
How does EIGRP auto-summary work with external routes? 	EIGRP External routes are not automatically summarized unless there is an internal route within the same classful network.
What are the three main methods of transport for NETCONF? 	SSH support is required<div>TLS</div><div>SOAP</div>
What is NPTv6? 	Network Prefix Translation v6<div><br /></div><div>NPTv6 translates unique IPv6 prefixes to other unique IPv6 prefixes and creates a one-to-one relationship between addresses on each side of the translating device. NTPv6 does not modify the interface identifier portion of an IPv6 address.</div>
How do you configure the IOS Master Key feature? 	Globally:<div><b>key config-key password-encryption </b><i>key-string</i></div><div><b>password encrpytion aes</b></div><div><b><br /></b></div><div>All plaintext keys are now stored in secure Type 6 format.</div>
Which LISP component stores the registered EID prefixes? 	The MS (Map Server) contains the mapping database of EID-to-RLOC mappings.
What is the function of the LISP Map Resolver (MR)? 	The MR receives map-request queries from LISP site Ingress Tunnel Routers (ITRs) when they attempt to populate the local map-cache of resolved EID-to-RLOC mappings.
What is a LISP ITR, ETR, and xTR? 	ITR Ingress Tunnel Router receives packets from internal hosts and forwards them to external sites.<div><br /></div><div>ETR Egress Tunnel Router receives packets from external sites and forwards them to internal hosts.</div><div><br /></div><div>Edge devices performing both duties are xTRs.</div>
Which LISP device receives packets from internal hosts and forwards them to external sites? 	ITR Ingress Tunnel Router
Which LISP device receives packets from external sites and forwards them to internal hosts? 	ETR Egress Tunnel Router
True or False: LISP must be running on both ends of a tunnel. 	False: LISP is designed to communicate with networks that are not using LISP.
How do you add timestamps to log entries? 	Globally:<div><b>service timestamps log </b>{<b>uptime </b>| <b>datetime</b>}</div>
With Cisco IOS, at which logging level are error messages about software or hardware malfunctions indicating functionality of the device is affected logged at? 	4 Warning<div>3 Errors</div><div>2 Critical</div><div>1 Alerts</div><div>0 Emergencies</div>
With Cisco IOS, at which logging level are interface up/down and system restart messages logged at? 	5 Notifications
With Cisco IOS, at which logging level are reload requests and low-process stack messages logged at? 	6 Informational
With Cisco IOS, what is logged by default at the 4 Warning - 0 Emergencies level? 	Error messages about software or hardware malfunctions that affect functionality of the device
With Cisco IOS, what is logged by default at the 5 Notifications level? 	Interface up/down transitions and system restart messages
With Cisco IOS, what is logged by default at the 6 Informational level? 	Reload requests and low-process stack messages
How can you enable ECMP with multicast routing? 	Globally:<div><b>ip multicast multipath </b>[<b>s-g-hash </b>{<b>basic </b>| <b>next-hop-based</b>}]</div>
When configuring multicast routing ECMP, what three load splitting options are available? 	"<div>Configuring <b>ip multicast multipath </b>without keywords performs load splitting based on the source address only.</div><div style=""font-weight: bold; ""><b><br /></b></div><b>s-g-hash basic </b>where a simple hash is performed on both the source and group address<div><br /></div><div><b>s-g-hash next-hop-based </b>where a hash is performed on the source, group, and next-hop addresses</div>"
What are the two different operating modes of BFD? 	Asynchronous<div>Demand</div>
What is BFD Asynchronous mode? 	With asynchronous mode, BFD control packets are sent frequently, and if control packets are not received from a neighbor in a timely fashion, the neighbor is assumed to be down.
What is BFD Demand mode? 	With demand mode, the system can ask neighbors to stop sending BFD control packets except when necessary, which allows BFD to support a large number of sessions at the expense of slower failure detection.
With BFD, what is an advantage of using Asynchronous mode for failure detection? 	Asynchronous mode requires half as many packets to detect a failure as compared to the Echo function (which can be used with either Asynchronous or Demand mode)
What is the default order of the OSPF LFA FRR path selection policy when a primary path fails? 	SRLG<div>Primary path</div><div>Interface disjoint</div><div>Lowest metric</div><div>Linecard disjoint</div><div>Node protecting</div><div>Broadcast interface disjoint</div>
What are the two mandatory and four optional components of an EEM policy? 	Mandatory:<div>-Event register keyword</div><div>-Body</div><div><br /></div><div>Optional:</div><div>-Environmental must defines</div><div>-Namespace import</div><div>-Entry status</div><div>-Exit status</div>
With an IPsec VPN, where can you configure the <b>tunnel mode auto </b>command? 	<b>tunnel mode auto </b>can be used on the responder's tunnel interface to automatically use GRE or IPsec encapsulation depending on the parameters sent by the tunnel initiator.&nbsp;
What is the default TCP MSS value when a Cisco router originates data destined for a remote network? 	536 bytes
What is the 7-byte format for the client-identifier command for DHCP pools? 	DHCP pool:<div><b>client-identifier 01aa.aabb.bbcc.cc</b></div><div><b><br /></b></div><div>Where 01 identifies Ethernet media, and aa.aabb.bbcc.cc is the client's MAC address.</div>
How do you change the key to be pressed to initiate terminal access? 	Line configuration mode:<div><b>activation-character </b><i>ascii-code</i></div><div><i><br /></i></div><div>The default is 13, which is the Enter key.</div>
With RIP triggered extensions, what causes the full RIP database to be sent? 	When the router is first powered on<div>When the router receives a specific request for the full routing table</div>
With RIP triggered extensions, when is a partial RIP database sent? 	When the configured interface comes up or goes down<div>When information from another interface modifies the routing table</div>
What is the default hello time for the OSPF broadcast network type? 	10s
What is the default hello time for the OSPF point-to-point network type? 	10s
What is the default hello time for the OSPF nonbroadcast network type? 	30s
What is the default hello time for the OSPF point-to-multipoint network type? 	30s
What is the default hello time for the OSPF point-to-multipoint nonbroadcast network type? 	30s
"How do you prevent OSPF from performing ""PE checks""? "	The&nbsp;<b>capability vrf-lite&nbsp;</b>command issued inside OSPF VRF configuration mode causes OSPF to ignore the DN bit and domain tag.
What is the OSPF DN bit? 	When OSPF is used as the MP-BGP PE-CE routing protocol, this bit is set when the VPNv4 routes are redistributed back into OSPF for Type 3, 5 and 7 LSAs. When the LSAs are to be redistributed back into VPNv4 (such as when a site is multihomed to the same SP), LSAs with the DN bit are not considered for the OSPF route calculation to prevent loops.
What is the OSPF Domain Tag? 	When OSPF is used as the MP-BGP PE-CE routing protocol, the Domain Tag is set for external routes (Type 5 and Type 7) when redistributing VPNv4 routes into OSPF. This tag is then examined upon redistribution from OSPF back into VPNv4 and routes are not redistributed if the domain tag matches.
When do you need to use the OSPF <b>capability vrf-lite </b>command? 	When using OSPF inside VRFs that are not redistributing into BGP. The <b>capability vrf-lite </b>command disables the PE checks, causing the router to ignore the DN bit and domain tag present in any LSAs.
What are the three fields of a Route Distinguisher? 	2-byte Type field<div>Administrator field</div><div>Assigned number field</div>
What are the three types of Route Distinguisher? 	Type 0: ASN:nn<div>Type 1: IP:nn</div><div>Type 2: 4-byte ASN:nn</div>
What is the format of the Type 0 RD? 	ASN:nn where ASN is a 16-bit value, and nn is a 32-bit value
What is the format of a Type 1 RD? 	IP:nn where IP is a 32-bit value, and nn is a 16-bit value
What is the format of a Type 2 RD? 	4-byte ASN:nn where ASN is a 32-bit value, and nn is a 16-bit value
What is another name for BGP ASN 23456? 	AS_TRANS, which is used by BGP router supporting 4-byte ASNs to peer with BGP routers that only support 2-byte ASNs.
What are the new optional transitive BGP PAs used to support 32-bit ASN? 	AS4_PATH, which is used if any of the ASNs in the path are newer 4-byte ASNs<div><br /></div><div>AS4_AGGREGATOR may also be present</div>
How does a BGP router supporting only 2-byte ASNs peer with one that has a 4-byte ASN? 	The router supporting only 2-byte ASNs peers with ASN 23456
What is the default BGP 4-byte ASN display format in Cisco IOS, and how do you change it? 	asplain is the default format, where the ASN is a 32-bit decimal value<div><br /></div><div>BGP process:</div><div><b>bgp asnotation dot&nbsp;</b></div><div><b><br /></b></div><div>This changes the display to two 16-bit decimal values separated by a dot.</div>
How is the RP for PIM BiDir different than for PIM-SM? 	With PIM-SM, the RP is responsible for the registration process and creation of source trees between multicast sources and the RP. PIM BiDir does not use either of those functions, so the RP is merely a meeting point and can be any arbitrary routable (reachable) IP address. It does not need to be a multicast router.
Why would you use BFD instead of OSPF Fast Hellos to detect a failed link in less than one second? 	With OSPF Fast Hellos, the Dead interval is fixed at one second. This means the failure detection time will always be a minimum of one second, and never sub-second as in the case of BFD.
What are the three methods of plaintext authentication in IS-IS? 	Interface: <b>isis password</b><div>Area: <b>area-password</b></div><div>Domain: <b>domain-password</b></div>
How do you configure plaintext authentication for IS-IS hellos? 	Interface:<div><b>isis password </b><i>password </i>[<b>level-1 </b>| <b>level-2</b>]</div><div><br /></div><div>If not specified, the password is used for both levels.</div>
How do you configure plaintext authentication for IS-IS L1 LSPs, CSNPs, and PSNPs? 	IS-IS process:<div><b>area-password </b><i>password</i></div>
How do you configure plaintext authentication for IS-IS L2 LSPs, CSNPs, and PSNPs? 	IS-IS process:<div><b>domain-password </b><i>password</i></div>
What is the default seed metric of routes redistributed into EIGRP if the source protocol does not have a compatible metric, such as RIP and OSPF? 	Infinite<div><br /></div><div>The metric must be set during redistribution or with the <b>default-metric </b>command.</div>
What type of IS-IS neighbor adjacency is formed between two routers connected to the same IP subnet where the NET of one router is 45.1234.000a.0003.00 and the other is 49.4567.0000.0000.000b.00 when all other settings are at their defaults on Cisco IOS? 	The two routers are considered to be in different areas, and with the default setting of L1/L2, a L2 IS-IS adjacency is formed.
How does 802.1X multi-host mode work? 	With multi-host mode, you can attach multiple hosts to a single 802.1X-enabled port. Only one of the attached supplications must be authorized for all supplicants to be granted access. If the port becomes unauthorized for any reason, access is denied to all attached supplicants.
What is the IPv6 fragment header? 	A 64-bit header used by an IPv6 source to indicate that a packet exceeds the path MTU size.
Which VSS VSLP subprotocol is responsible for exchanging switch IDs, verifying link integrity, rejecting unidirectional links, and establishing communication between chassis? 	LMP Link Management Protocol
Which VSS VSLP subprotocol is responsible for&nbsp;checking VSL configurations for compatibility, checking hardware and software version compatibility, and assigning the active/standby virtual switch roles? 	RRP Role Resolution Protocol
What specific value in an MPLS label indicates it is the last label in a stack? 	The S bit (Bottom of Stack field) is set to 1 to indicate it is the last label in the stack.
What is the VRF VPN ID? 	The VPN ID is a standards-based (RFC 2685) method of identifying a VRF on a router, which is independent of the assigned VRF name.<div><br /></div><div>The VPN ID format is a 3-byte OUI, and a 4-byte VPN index, separated by a colon. The VPN ID can be used with other services such as DHCP and RADIUS.</div><div><br /></div><div>Configured under the VRF:</div><div><b>vpn id </b><i>oui</i>:<i>vpn-index</i></div>
When a switch running STP receives a BPDU with the TC bit set, what is the CAM aging time adjusted to? 	Forward delay, 15 seconds by default
How do you apply a QoS policy-map to a DMVPN spoke? 	Create an NHRP group on the interface:<div><b>ip nhrp group </b><i>name</i></div><div><i><br /></i></div><div>Assign the group to the policy-map on the interface:</div><div><b>ip nhrp map group </b><i>name </i><b>service-policy output </b><i>policy-map</i></div><div><i><br /></i></div><div>Only the <b>output </b>direction is supported.</div>
What MAC address is used by LLDP? 	0180.C200.000E
What technology uses the MAC address 0180.C200.000E? 	LLDP
What is the MAC address used by 802.1X? 	0180.C200.0003
What technology uses the MAC address 0180.C200.0003? 	802.1X
"What is the Cisco term ""Fog"" computing? "	Associated with IoT, some devices generate a very large amount of telemetry data. With Fog Computing, the data is collected and analyzed locally, and the most important information is then passed onto the cloud.
What is the difference between BPDU Guard and Loop Guard with how ports react to error conditions? 	"BPDU Guard errdisables the interface when BPDUs are received.&nbsp;<div><br /></div><div>Loop Guard suspends the port in a ""loop-inconsistent"" state when BPDUs stop being received, but automatically transitions the port back into the normal STP states when BPDUs arrive again.</div>"
What is included with the TCP small servers feature? 	Discard (TCP 9)<div>Echo (TCP 7)</div><div>Chargen (TCP 19)</div>
Within the context of MPLS, what is RTC? 	"Route Target Constraint<div><br /></div><div>RTC allows a PE to signal to an internal route reflector only the prefixes it needs. Normally, the RR sends all VPNv4 prefixes to the PE, even if it will never import some of the available route targets.&nbsp;</div><div><br /></div><div>RTC allows a PE to send its RT membership data to the RR with an address family ""rtfilter""</div>"
True or False: NBAR can classify multicast traffic. 	False
What happens when BGP attempts to install a route that already exists in the routing table with a lower AD? 	BGP RIB failure
Which packet types can EPC capture on egress? 	Unicast and broadcast
Which packet types can EPC capture on ingress? 	Unicast, broadcast, and multicast
True or False: Multiple EPC capture points can be active on a single interface. 	True
What is common across all Class Selector PHBs when their values are represented in binary form? 	The final three out of six bits are always 0:<div><br /></div><div>CS0: 000 000</div><div>CS1: 001 000</div><div>CS2: 010 000</div><div>CS3: 011 000</div><div>CS4: 100 000</div><div>CS5: 101 000</div><div>CS6: 110 000</div><div>CS7: 111 000</div>
What is common across all Assured Forwarding PHBs when their values are represented as binary? 	The sixth bit is always 0<div><br /></div><div>The first three bits correspond to the queue class (1 - 4)</div><div><br /></div><div>The fourth and fifth bits correspond to the drop priority (1 - 3)</div>
What is the BGP cost community? 	A non-transitive extended community that can be passed between iBGP and Confederation peers to influence the path selection when multiple ECMPs exist, with the lowest cost community being preferred.<div><br /></div><div>The cost value is a 32-bit number, whose default is the midpoint, 2147483647</div>
How does a router performing IP SLA operations consider the IP SLA responder's processing time? 	IP SLA responders add timestamps when a packet enters or leaves an interface, which the router performing the IP SLA operation can use to account for the IP SLA responder's processing time.
What happens if <b>tunnel mode auto </b>is configured on both ends of a VPN tunnel? 	The tunnel does not establish, because one router must be configured statically.<div><br /></div><div><b>tunnel mode auto </b>allows a responding router to automatically use either GRE or IPsec mode depending on the packets received, but the initiator must be statically configured.</div>
What should the TCP rwin value be set to for maximum throughput? 	The rwin value should be equal to or greater than the bandwidth delay product.
Per Cisco recommendations, when should 6to4 tunneling be used, and when should ISATAP tunneling be used? 	6to4 should be used to connect isolated IPv6 domains with P2MP links over IPv4<div><br /></div><div>ISATAP should be used to connect within a single IPv6 domain with P2MP links over IPv4</div>
True or False: IP-in-IP tunnels support native keepalives. 	False, only GRE supports the keepalive feature
What tunnel type supports a native keepalive feature? 	GRE
What is the default size of an IOS ping packet? 	100 bytes
What causes a recursive tunnel failure? 	When the tunnel destination is learned via the tunnel itself. Avoid by determining which addresses can never be learned over a tunnel interface.
What is the proper way to use ping to test tunnel connectivity? 	Ping the tunnel destination address from the tunnel source address.
By default, what happens to the status of a tunnel interface if it is shutdown on the opposite end? 	The interface remains Up/Up by default, because there is no default keepalive mechanism.&nbsp;
What command generates this output?<div><br /></div><div>*Mar &nbsp;2 16:29:14.325: Tunnel0: GRE/IP encapsulated 10.1.1.1-&gt;10.2.2.2 (linktype=7, len=124)</div> 	<b>debug tunnel</b>
How can you view the status of all interfaces while filtering those assigned to VLAN 1? 	<b>show interfaces status | exclude _1_</b>
How do you enable UDLD on an interface? 	<b>udld port </b>[<b>aggressive</b>]
What options are available to forward IP packets out of a physical interface without configuring an IP address on the physical interface itself? 	Configure bridging on the interface<div>Configure a logical interface such as a tunnel, logical subinterface, virtual-template/virtual-access, etc.</div>
What three simple questions should be asked of every router and switch interface within the overall network with regard to operation? 	-Is the interface physical or logical<div>-Will the interface perform Layer 2 (bridging) or Layer 3 IP forwarding</div><div>-Is the interface type P2P, multi-access, or P2MP</div>
What is the interface requirement of issuing the <b>ip unnumbered </b>command? 	The interface must be point-to-point (whether physical or logical)
What is a troubleshooting issue you should verify when using Virtual Templates on both ends of a link? 	Some versions of IOS automatically enable keepalives on the Virtual Template, and others do not. Verify keepalives are enabled on both sides with the <b>keepalive </b>command under the Virtual Template configuration.
With PPP, what is the <b>no peer neighbor-route </b>command designed for? 	Communication between two unnumbered interfaces
If you do not receive back a ping, how can you verify the packets are attempting to be forwarded out the correct interface? 	<b>debug ip packet </b>and <b>debug interface</b>
"If the output of <b>debug ip packet </b>reveals ""encapsulation failed"", what does this mean, and how can you further troubleshoot it? "	Layer 3 to Layer 2 resolution has failed, and can be further examined with <b>debug arp</b>
What are the seven NHRP packet types? 	Type 1: Resolution Request<div>Type 2: Resolution Reply</div><div>Type 3: Registration Request</div><div>Type 4: Registration Reply</div><div>Type 5: Purge Request</div><div>Type 6: Purge Reply</div><div>Type 7: Error Indication</div>
What is the purpose of the NHRP Type 1 Resolution Request packet? 	This packet allows the sending router to dynamically discover the physical IP address associated with the destination's logical tunnel IP address (such as in spoke-to-spoke traffic)
What is the purpose of the NHRP Type 3 Registration Request packet? 	This packet is used by the spoke (NHC) to inform the hub (NHS) of its physical IP address.
What is the default holdtime for an NHRP resolution request? 	7200 seconds (2 hours)
How do you modify the timeout of an NHRP resolution request? 	<b>ip nhrp holdtime&nbsp;</b>
How frequently are NHRP registrations sent from spokes to the hub? 	1/3 the holdtime: 40 minutes by default, 2400 seconds
How can you control the frequency of NHRP client re-registration? 	<b>ip nhrp registration timeout</b>
How can you verify NHRP timeout values? 	<b>show ip nhrp nhs detail</b>
How do you control which traffic will generate an NHRP resolution request? 	"Define an ACL matching ""interesting"" traffic and reference it with <b>ip nhrp interest</b>"
When enabling multicast support on a DMVPN hub with the <b>ip nhrp map multicast dynamic </b>command, what additional step must be performed if spokes are already connected to the hub? 	Shut/no shut each spoke tunnel interface, or perform <b>clear ip nhrp </b>on the hub.
How can you configure a Catalyst switch to dynamically assign a switch port to a particular VLAN if no response is received from a RADIUS server? 	<div>Enable 802.1X globally:</div><div><b>dot1x system-auth-control</b></div><div><b><br /></b></div><div>Interface:</div><div><b>switchport mode access</b></div><div><b>authentication event no-response action authorize vlan </b><i>vlan</i></div><div><b>authentication port-control auto</b></div><div><b>dot1x pae authenticator</b></div>
How can you verify 802.1X information on a device? 	<b>show dot1x</b><div><b>show dot1x interface </b><i>interface</i></div>
"How can you force RIP to accept updates from ""bad sources"", such as when using <b>ip unnumbered </b>on a P2P link? "	RIP process:<div><b>no validate update-source</b></div>
What is the TTL of both RIP and EIGRP packets when neighbors are manually configured? 	TTL = 2
What order should the OSPF process <b>network </b>commands be entered? 	Like ACLs, OSPF network statements are processed top-down and therefore more specific entries should be added first.
What debug command should you run if OSPF is not forming a neighbor relationship? 	<b>debug ip ospf hello</b>
Why are OSPF spokes unable to form spoke-to-spoke adjacencies over a hub-and-spoke topology? 	OSPF packets have a TTL of 1, therefore all communications must be direct. This is also the reason why the hub MUST be elected DR, and not one of the spokes
What is a requirement for OSPF to advertise secondary addresses? 	The secondary addresses must be placed in the same OSPF area as the primary address
What is a stub physical link? 	A link that has only a single connection to the rest of the physical topology.
What are the two general tiers of a routing hierarchy? 	Transit routing domain (core)<div>Non-transit routing domain (edge)</div>
During redistribution, which routes should be advertised by a non-transit multi-homed routing domain? 	Non-transit multi-homed routing domains should advertise only those routes which originate within the same routing domain.
How can you modify the AD of particular routes from all routing sources? 	<b>distance </b><i>ad </i><b>0.0.0.0 255.255.255.255 </b><i>acl</i>
What command is equivalent to <b>distribute-list </b><i>acl </i><b>in </b>? 	<b>distance 255 0.0.0.0 255.255.255.255 </b><i>acl</i>
What is a requirement of configuring spoke-to-spoke eBGP on an NBMA network? 	You must configure <b>ebgp-multihop </b>since traffic passes through the hub.
What is the order of operations for configuring a BGP RR cluster ID? 	The cluster ID must be configured with <b>bgp cluster-id </b><i>id </i>before any neighbors are configured to be RR clients. The command is otherwise rejected.
When is the <b>bgp confederation identifier </b>command necessary? 	This command is necessary for BGP speakers that are members of a confederation and also eBGP neighbors with an AS outside of the confederation.
When is the&nbsp;<b>bgp confederation peers&nbsp;</b>command necessary? 	When the router is a member of a confederation and it maintains an eBGP neighbor relationship with another AS inside the confederation.
What is the difference between <b>bgp confederation identifier </b>and <b>bgp confederation peers </b>? 	The confederation identifier command is used when the BGP speaker is a member of a confederation and maintains an eBGP connection with a public AS outside the confederation.<div><br /></div><div>The confederation peers command is used when the BGP speaker is a member of a confederation and maintains an eBGP connection with a private AS inside the confederation.</div>
How is the BGP NEXT_HOP PA affected as it is propaged over eBGP connections inside a confederation? 	The NEXT_HOP PA is not changed.
What is the order of precedence for filtering inbound BGP advertisements? 	-filter-list (AS_PATH filtering)<div>-route-map</div><div>-distribute-list / prefix-list</div>
What is the order of precedence for filtering outbound BGP advertisements? 	-distribute-list / prefix-list<div>-filter-list (AS_PATH filtering)</div><div>-route-map</div>
What is a feature of <b>ip community-list expanded </b>over the <b>standard </b>option? 	The <b>expanded </b>option can accept regular expressions
Within Cisco IOS, what is the difference between BGP Weight and Local-Preference for intended use? 	Weight is used to inflence outbound traffic on a single BGP router, whereas Local-Preference is used to influence outbound traffic among all iBGP routers in a single AS.
What is a caveat of creating a BGP aggregate with regard to communities? 	The aggregate contains the sum of all the communities, so if one of the component prefixes carries, for example, the no-advertise community, the scope of the aggregate will be limited.
What are the three components of the BGP RIB? 	-Adj-RIBs-In - routing information learned from inbound UPDATEs<div>-Loc-RIB - local routing information selected after local policies applied</div><div>-Adj-RIBs-Out - routing information carred in outbound UPDATEs</div>
When attempting to configure OSPF neighbors over a DMVPN, what should you check first with regard to potential neighbors? 	Check the configuration of the DMVPN tunnel interfaces to determine the DMVPN phase. With DMVPN Phase 1, OSPF neighborships are between hubs and spokes only, not between spokes.
With EIGRP, what is the AD of a summary route created exclusively from EIGRP External routes? 	EIGRP summary routes are seen as EIGRP Internal with an AD of 90.
Why is Split Horizon with Poisoned Reverse an improvement over regular Split Horizon? 	With regular Split Horizon, route information is not advertised back out the interface on which is was received. Poisoned Reverse advertises back the routes with an infinite metric. This is an improvement because if the originating router receives corrupted information, it could proceed as if the particular route is reachable via the router it had previously advertised to. Split Horizon with Poisoned Reverse prevents this type of routing loop.
An EIGRP router reasses its list of feasible successors for a route any time an input event occurs. What are the five input events? 	-Change in cost of directly connected link<div>-Change in state (up/down) of directly connected link</div><div>-Reception of Update packet</div><div>-Reception of Query packet</div><div>-Reception of Reply packet</div>
How can you set the OSPF DoNotAge bit on LSAs? 	Interface:<div><b>ip ospf flood-reduction</b></div><div><b><br /></b></div><div>With this command, the DoNotAge bit is set on LSAs advertised out the interface and the LSAs are not refreshed unless they change.</div>
How can you configure OSPF to use DNS? 	Globally:<div><b>ip name-server </b><i>ip</i></div><div><i><br /></i></div><div>OSPF process:</div><div><b>ip ospf name-lookup</b></div>
What is the difference between the BGP commands <b>neighbor </b><i>ip </i><b>disable-connected-check </b>and <b>neighbor </b><i>ip </i><b>ebgp-multihop </b><i>hops </i>? 	<b>disable-connected-check </b>is used when two eBGP neighbors are directly connected, but not peered over a common subnet (such as when loopback interfaces are used for peering).<div><br /></div><div><b>ebgp-multihop </b>is used when one or more routers are between the two eBGP peers.</div>
What BGP command prevents the router from advertising a prefix to other BGP peers if an entry in the BGP table could not be entered into the local RIB (RIB failure)? 	<b>bgp suppress-inactive</b>
What causes IOS to look for a cleared ACK or RST bit in the TCP header? 	The <b>established </b>keyword in an ACL