How to configure basic netflow?
int fa 0/0
ip flow [ingress|egress]
exit
ip flow-export source lo 0
ip flow-export version [5|9]
ip flow-export destination <collector-ip> 5000</collector-ip>
Where is the information tracked by NetFlow stored?
In a flow cache in the router’s memory
The flow cache allows for efficient data retrieval and analysis.
What does the command ip flow-export destination specify?
The NetFlow collector’s IP address is 192.168.1.50 and communication should be done over UDP port 5000
This command is used to configure the destination for NetFlow data export.
What command can be issued at a router’s CLI prompt to produce a summary of flow information?
show ip cache flow
This command provides insights into the flow of data through the router.
What command can you use to verify the export source and destination details?
show ip flow export
This command provides information about the NetFlow export settings.
What command is used to verify the NetFlow-enabled interfaces?
show ip flow interface
This command helps in checking the direction in which traffic is being captured.
What three components in Flexible Netflow do you need to configure?
flow exporter, flow record, flow monitor
flow monitor is applied to an interface (input or output)
What does Flexible NetFlow require to be enabled for IPv4 and IPv6?
CEF (Cisco Express Forwarding)
CEF is necessary for the operation of NetFlow in both IPv4 and IPv6 environments.
For IPv4, which command is required to enable CEF?
ip cef
This command is essential for using NetFlow with IPv4.
For IPv6, which command is required to enable CEF?
ipv6 cef
This command is essential for using NetFlow with IPv6.
What do flow records define?
What will be captured
Flow records are essential for understanding the data that will be collected in a network flow.
What does the command show ip cache flow do?
Shows netflow information locally
This command is used to display the flow information collected by the router.
What does the security level noAuth do in SNMPv3?
Authenticates SNMP messages using a community string. No encryption provided.
snmp-server group NMS-NOAUTH v3 noauth
Uses a plaintext username to authenticate and passes all messages in plaintext
What does the security level of auth provide in SNMP?
Authenticates SNMP messages using either HMAC with MD5 or SHA-1. No encryption provided.
snmp-server group NMS-AUTH v3 auth
This mode ensures message integrity but does not encrypt the messages.
What does the security level priv provide in SNMP?
snmp-server group NMS-PRIV v3 pri
This mode offers both authentication and encryption for enhanced security.
What versions of SNMP use community strings?
SNMPv1 and SNMPv2c
What command in SNMPv1/2c do you define the server to send traps to?
snmp-server host 10.10.10.5 version 2c NMS-RO
What is the first step to configure SNMPv3?
Create group
snmp-server group NMS-GROUP v3 priv
This step involves defining a group that will have specific permissions and access levels.
What is the second step in the configuration of SNMPv3?
Create user and assign it to the group
snmp-server user snmpuser NMS-GROUP v3 auth sha AuthPass123 priv aes 128 PrivPass123
This step ensures that the user has the appropriate permissions defined by the group.
What is the third step to configure SNMPv3?
Configure host (NMS server) that uses that user
snmp-server host 10.10.10.10 version 3 priv snmpuser
This step involves setting up the Network Management System (NMS) to communicate with the SNMP agent using the created user.
What is the primary purpose of BFD?
To quickly detect reachability failures between two routers
This helps identify network issues as soon as possible.
BFD operates in which Layer of the OSI model?
Layer 3
It is used within the same Layer 3 network.
What advantage does BFD provide in terms of network convergence?
Faster convergence rate
By quickly detecting reachability failures, network issues can be resolved more rapidly.
How do you enable BFD on the interfaces participating in EIGRP?
Use the command: bfd interface interface-type interface-number in router EIGRP configuration mode
This command is necessary to configure Bidirectional Forwarding Detection for EIGRP interfaces.