Friday, September 30, 2016

Firewall Modes on Cisco ASA

Which are the two modes of Cisco ASA firewall
Routed and Transparent

What is the default mode of Cisco ASA
Routed

Routed Mode

How ASA acts in routed mode
As a router hop in the network

What are the features of routed mode
  • Support many interfaces
  • Each interface requires an IP address
  • Each interface belong to different subnet


















Can we share interfaces between contexts
Yes

Which routing protocol supported in single context routed mode
OSPF, EIGRP and RIP

Which routing protocol supported in multiple context routed mode
Static routes only

Transparent firewall

Does transparent firewall acts a router hop in the network
No

What is transparent firewall
Layer 2 firewall

What are the other names for transparent firewall
Bump in the wire or stealth firewall

Does transparent firewall seen as a router hop in tht network
No

What are the features of transparent firewall
  • Connect same network on inside and outside interface
  • No need to configure IP address on interfaces
  • Both interface belong to same subnet





What is the benefit of using transparent firewall
Easy to deploy into an existing network






Flash Cards

EIGRP Operations


Which tables supported in EIGRP router
Support three tables
Neighbor table
Topology table
Routing table
EIGRP operation is based on these three tables

What information contained neighbor table
Set of neighbors with which EIGRP router has established adjacencies

What is the command to display neighbor table
Show ip eigrp neighbor

How neighbor routers are characterized
By their primary IP address and the directly connected interface that leads to them

What does topology table contain
All destination routes advertised by the neighbor routers
Each entry in topology table associated with a list of neighbor that have advertised the destination
For each neighbor, an advertised metric is recorded in the topology table

What is the command to display topology table
Show ip eigrp topology

What is routing table
Table has best routes to destination

What is the command to display routing table
Show ip route eigrp


1) The route with the best metric to the destination is called the ______

Where successor or best path is placed
Routing table
Advertised to neighbor router



Neighbor process



R1 sends hello packets on all EIGRP enabled interfaces
R2 receive the hello packet on its interface
  R2 reply with update packets
  Update packets contain all routes from R2 routing table
  Routes learned via split horizon not included into update
R2 send update packet to R1
  Neighbor relationship is not established until R2 sends a hello packet to R1
Update packet from R2 has initialization bit set
  Indicate the initialization process
Update packet include routes and metric for each destination
Both R1 and R2 have exchanged hello packets
  Neighbor adjacency is established
R1 replies to R2 with ACK packet
  Indicate that update packet is received
R1 assimilates all the update packet in its topology table
 Topology table include all the destination that are advertised by neighbor router
R1 send update packet to R2
R2 send an ACK packet to R1
R1 and R2 successfully exchange update packets
R1 and R2 will update their routing tables with successor routes from topology table



1)  Successor

More blogs on networkcards.weebly.com

EIGRP Features



Which features are similar between IGRP and EIGRP
High speed convergence
Partial updates
Support multiple network layer protocols

What is the first step in configuring EIGRP
Establish EIGRP neighbor relationship

Which is the older version of EIGRP
IGRP


What are the features of EIGRP that distinguish from other routing protocols
Fast convergence
Support variable length subnet masking VLSM
Partial updates
Support multiple network layer protocols

1) EIGRP is a _____ protocol

2) EIGRP combines the features of ____ and ______ routing protocols

3) EIGRP is a ______ routing protocol

What are the benefits of using EIGRP
Easy to configure
Adaptable to wide variety of network topologies
Dynamic neighbor discovery
Provide rapid convergence
Loop free topology


4) EIGRP is an _____ IGRP

Which algorithm used by EIGRP to achieve rapid convergence
DUAL diffusing update algorithm

5) A router running EIGRP stores its neighbors’______

What happen if there is no appropriate route in the local routing table and no appropriate backup in the topology table
EIGRP send queries to its neighbors to discover an alternative route

6) EIGRP sends_____ updates

Does EIGRP router send periodic updates
No

When updates are send by EIGRP router
When the path or the metric for a route change
Update contain information about only the changed link rather the entire routing table

7) EIGRP consumes significantly ______ than IGRP

8) EIGRP supports IP Version 4 (IPv4) and IP Version 6 (IPv6) using _______

9) For communication between routers, EIGRP uses ____ and _____ rather than broadcast

Which is the multicast address used by EIGRP
IPv4 is 224.0.0.10,
IPv6 is FF00::A


10) EIGRP is a ____ routing protocol

Which information is advertised for each destination
Subnet mask
Enables EIGRP to support discontinuous sub networks and VLSM

11) EIGRP represents metric values in a ______

12) EIGRP supports ______ load balancing


Why EIGRP uses RTP or reliable transfer protocol
For reliable exchange of information

What is the protocol number of EIGRP
88

What is reliable transport protocol
Acknowledgment require from the receiving router
Packet should be delivered in order
Include sequence number in the packet for ordered delivery

Which packets are delivered reliably or un-reliably
Updates require reliable delivery
Queries and Replies require reliable delivery
Hello packets does not require reliable delivery
Acknowledgment ACKs are hello packet with no data not require reliable delivery



1) Cisco proprietary
2) Link state , distance vector
3) Distance vector
4) Enhanced
5)  Routing tables
6)  Partial triggered
7) Less bandwidth
8) Protocol-Dependent Modules
9) Multicast, Unicast
10) Classless
11) 32 bit format
12) Unequal Metric






Thursday, September 29, 2016

Multicast Addresses



IP multicast address Description
224.0.0.4 Distance Vector Multicast Routing Protocol (DVMRP) 
224.0.0.5 OSPF
224.0.0.6 OSPF DR 
224.0.0.9 The Routing Information Protocol (RIP) Version 2
224.0.0.10 The Enhanced Interior Gateway Routing Protocol (EIGRP)
224.0.0.13 Protocol Independent Multicast (PIM) Version 2
224.0.0.18 Virtual Router Redundancy Protocol (VRRP)
224.0.0.19–21 IS-IS over IP
224.0.0.22 Internet Group Management Protocol (IGMP) version 3[2]
224.0.0.102 Hot Standby Router Protocol version 2 (HSRPv2) / Gateway Load Balancing Protocol (GLBP)
224.0.0.107 Precision Time Protocol (PTP) version 2
224.0.0.251 Multicast DNS (mDNS) address
224.0.0.252 Link-local Multicast Name Resolution (LLMNR) address
224.0.1.41 H.323 Gatekeeper discovery address
239.255.255.250 Simple Service Discovery Protocol address
239.255.255.253 Service Location Protocol version 2 address





Types of Traffic


1) Routing protocols use different ______to control how routing information is exchanged

Which are the different types of traffic
Unicast
Multicast
Anycast
Broadcast
  
What is unicast traffic
One to one context
Exchanged only between one sender and one receiver











What is multicast traffic
Identify a group of interfaces
Traffic sent to multiple destinations at the same time
Interface may belong to any number of multicast group













What is the reserved address space for multicast
IPV4 224.0.0.0–239.255.255.255
IPV6 has prefix FF00::/8
  
What is anycast
Network addressing and routing methodology
Traffic send from a single sender to topologically nearest node in a group
All receivers are identified by same destination address

  











What is broadcast traffic
Traffic send to all devices in the subnet
Traffic send by one sender to all connected receivers
Local broadcast address 255.255.255.255
Used for communicating with all devices in the local network















2) IPv6 does not use a ____, but uses ___ addresses

3) Any cast addressing uses a ___ association
4) Broadcast addressing uses a ____ association
5) Multicast addressing uses a ____ association
6) Unicast addressing uses a ___ association


Answers Below










1) traffic types
2) broadcast address, multicast
3) one-to-nearest
4) one-to-many
5) one-to-unique many

6) one-to-one



Types of Routing Protocols



Which are the different types of routing protocol
Distance Vector
Link state
Path vector

How routing protocols are classified
Based on kind information about network reachability is exchanged between the routers

Distance Vector protocol
What is distance vector protocol
Determines direction (vector) and distance (link cost or number of hops) to any links in the network

How distance vector uses router
As a signpost

What does signpost indicates
Direction ad distance
Give no direction about the type of path

Which information routers know about remote network in distance vector protocol
Distance or metric to reach the network 
Path or interface to reach there

1) Distance vector routing protocols do not have an ____ of the network topology

How updates are shared in distance vector protocol
RIPV1 and IGRP send update periodically
EIGRP and RIPV2 uses triggered update

Link State protocols
Which algorithm use by link state protocol
Shortest Path First

2) A link-state routing protocol is like having a _____ of the network topology

How map is used by link state protocols
Determine the best path

3) All link-state routers have an _____ of the network

Which information used by link state protocol to create topology map and to select best path to all destination network
Link state information

Which are the types of link state protocol
OSPF and IS-IS


Path Vector Protocol
What information is exchanged by path vector routers
Information about the existence of destination networks
Exchanges the path on how to reach the destination

4) _______ is used to determine the best paths and to prevent routing loops

5) Path vector protocols do not have an ___of the network topology

6) Path vector protocols use ____ indicating direction and distance

Which is the type of path vector protocol

BGP



1) actual map
2) complete map
3) identical “map”
4) Path information
5) abstract 
6) signposts