Device Management Flashcards

(67 cards)

1
Q

How to configure basic netflow?

A

int fa 0/0
ip flow [ingress|egress]
exit
ip flow-export source lo 0
ip flow-export version [5|9]
ip flow-export destination <collector-ip> 5000</collector-ip>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where is the information tracked by NetFlow stored?

A

In a flow cache in the router’s memory

The flow cache allows for efficient data retrieval and analysis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the command ip flow-export destination specify?

A

The NetFlow collector’s IP address is 192.168.1.50 and communication should be done over UDP port 5000

This command is used to configure the destination for NetFlow data export.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What command can be issued at a router’s CLI prompt to produce a summary of flow information?

A

show ip cache flow

This command provides insights into the flow of data through the router.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What command can you use to verify the export source and destination details?

A

show ip flow export

This command provides information about the NetFlow export settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What command is used to verify the NetFlow-enabled interfaces?

A

show ip flow interface

This command helps in checking the direction in which traffic is being captured.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What three components in Flexible Netflow do you need to configure?

A

flow exporter, flow record, flow monitor

flow monitor is applied to an interface (input or output)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does Flexible NetFlow require to be enabled for IPv4 and IPv6?

A

CEF (Cisco Express Forwarding)

CEF is necessary for the operation of NetFlow in both IPv4 and IPv6 environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

For IPv4, which command is required to enable CEF?

A

ip cef

This command is essential for using NetFlow with IPv4.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

For IPv6, which command is required to enable CEF?

A

ipv6 cef

This command is essential for using NetFlow with IPv6.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What do flow records define?

A

What will be captured

Flow records are essential for understanding the data that will be collected in a network flow.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does the command show ip cache flow do?

A

Shows netflow information locally

This command is used to display the flow information collected by the router.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does the security level noAuth do in SNMPv3?

A

Authenticates SNMP messages using a community string. No encryption provided.

snmp-server group NMS-NOAUTH v3 noauth

Uses a plaintext username to authenticate and passes all messages in plaintext

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does the security level of auth provide in SNMP?

A

Authenticates SNMP messages using either HMAC with MD5 or SHA-1. No encryption provided.

snmp-server group NMS-AUTH v3 auth

This mode ensures message integrity but does not encrypt the messages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does the security level priv provide in SNMP?

A
  • Authenticates SNMP messages using either HMAC-MD5 or SHA
  • Encrypts SNMP messages using DES, 3DES, or AES

snmp-server group NMS-PRIV v3 pri

This mode offers both authentication and encryption for enhanced security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What versions of SNMP use community strings?

A

SNMPv1 and SNMPv2c

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What command in SNMPv1/2c do you define the server to send traps to?

A

snmp-server host 10.10.10.5 version 2c NMS-RO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the first step to configure SNMPv3?

A

Create group

snmp-server group NMS-GROUP v3 priv

This step involves defining a group that will have specific permissions and access levels.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the second step in the configuration of SNMPv3?

A

Create user and assign it to the group

snmp-server user snmpuser NMS-GROUP v3 auth sha AuthPass123 priv aes 128 PrivPass123

This step ensures that the user has the appropriate permissions defined by the group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the third step to configure SNMPv3?

A

Configure host (NMS server) that uses that user

snmp-server host 10.10.10.10 version 3 priv snmpuser

This step involves setting up the Network Management System (NMS) to communicate with the SNMP agent using the created user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the primary purpose of BFD?

A

To quickly detect reachability failures between two routers

This helps identify network issues as soon as possible.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

BFD operates in which Layer of the OSI model?

A

Layer 3

It is used within the same Layer 3 network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What advantage does BFD provide in terms of network convergence?

A

Faster convergence rate

By quickly detecting reachability failures, network issues can be resolved more rapidly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How do you enable BFD on the interfaces participating in EIGRP?

A

Use the command: bfd interface interface-type interface-number in router EIGRP configuration mode

This command is necessary to configure Bidirectional Forwarding Detection for EIGRP interfaces.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What command is used to set **BFD timers** on an interface-by-interface basis?
bfd interval [50-999] min_rx [1-999] multiplier [3-50] interface ## Footnote This command allows configuration of BFD parameters for each interface.
26
The **interval value** in the BFD command identifies what?
How often to send a BFD packet, in milliseconds ## Footnote The interval value can range from 50 to 999 milliseconds.
27
The **min_rx value** in the BFD command identifies what?
How long to wait to receive a BFD packet, in milliseconds ## Footnote The min_rx value can range from 1 to 999 milliseconds.
28
What does the **multiplier value** in the BFD command specify?
How many consecutive packets not received will trigger a failure ## Footnote The multiplier value can range from 3 to 50.
29
If the **min_rx value** is set to 200 and the **multiplier value** is set to 3, how long will it take to trigger a failure notification?
600 ms ## Footnote This is calculated as 200 ms × 3.
30
What must be enabled on all participating routers for **BFD**?
CEF and IP routing ## Footnote These are prerequisites for the proper functioning of BFD.
31
Before deploying **BFD**, what must be configured on the routers?
IP routing protocols supported by BFD ## Footnote This ensures compatibility and functionality of BFD with the routing protocols.
32
How do you configure IP SLA for ping reachability to 10.1.100.100?
ip sla 2 icmp-echo 10.1.100.100 source-ip 192.168.1.11 frequency 15
33
How do you configure an SLA Responder?
ip sla responder
34
Which command is used to verify which **SLA operations** are supported on the platform?
show ip sla application ## Footnote This command also provides information on how many operations are configured and how many are currently active.
35
What command is used to verify the **configuration values** for each **IP SLA instance**?
show ip sla configuration ## Footnote This command also displays the default values that were not modified.
36
What command is used to display the results of the **IP SLA operations** and the statistics collected?
show ip sla statistics ## Footnote This command provides detailed information about the performance and results of IP SLA operations.
37
What command is used to verify the operation of the **IP SLA responder**?
show ip sla responder ## Footnote This command allows network administrators to check the status and functionality of the IP SLA responder.
38
What does **Object Tracking** enable you to do?
Dynamically control what occurs if the result of a tracking object is up or down ## Footnote Object Tracking is often used in various applications to monitor and respond to changes in the status of objects.
39
To verify the configuration of a **tracking object**, use the _______ command.
show track ## Footnote This command helps in checking the status of the tracking object.
40
What command is used to check the **status** of a tracking object?
show track ## Footnote This command provides information about the configuration and operational status of the tracking object.
41
How to configure a track for IP reachability?
track 22 ip sla 1 reachability
42
How to configure an SLA to always run?
ip sla schedule 1 life forever start-time now
43
How to configure basic netflow to use loopback 0 as the source interface for communication to the collector?
The ip flow-export source lo 0 command
44
How to configure basic netflow to specify that the NetFlow collector’s IP address is 192.168.1.50, and should be done over UDP port 5000?
ip flow-export destination 192.168.1.50 5000
45
How to configure basic netflow to be applied inbound to an interface?
int g0/0 ip flow ingress
46
How to configure basic netflow to be applied outbound to an interface?
int g0/0 ip flow egress
47
For basic netflow, what needs to match between the router and the collector?
Netflow version
48
How to configure basic netflow version 5?
ip flow-export version 5
49
What show commands are used for flexible netflow?
show flow monitor show flow record show flow exporter show flow interface
50
What show command displays where SNMPv3 traps/informs are being sent?
show snmp host
51
Which SNMP version does not include a bulk retrieval tool?
SNMPv1
52
What does the delay down 20 up 30 command in a track configuration do?
Clients tracking the static route will be notified 20 seconds after the routes goes down and 30 seconds after it comes up.
53
What command displays logging messages for the same timezone as the localtime?
service timestamps log datetime localtime
54
What command enables you to restrict the debug output for some commands?
debug condition
55
What command displays which conditional debugs are enabled
show debug condition
56
What syslog serverity level are emergencies?
0 ## Footnote This level indicates that the system cannot function at all.
57
What syslog serverity level are alerts?
1 ## Footnote Immediate action is needed at this level.
58
What syslog serverity level is critical?
2 ## Footnote This level represents critical conditions that require urgent attention.
59
What syslog serverity level are errors?
3 ## Footnote This level indicates error conditions that may affect system performance.
60
What syslog serverity level are warnings?
4 ## Footnote This level indicates warning conditions that should be monitored.
61
What syslog serverity level are notifications?
5 ## Footnote This level represents normal but significant conditions that may require attention.
62
What syslog serverity level are informational?
6 ## Footnote This is the default level for informational messages.
63
What syslog serverity level are debugging?
7 ## Footnote This level is used for debugging messages during development.
64
When setting a syslog level, which ones will be displayed?
You will get that level and everything numerically below it ## Footnote For example, setting level 6 means you will receive messages for levels 0 through 6.
65
When defining a snmp-server community, what is the default read/write mode? | Is it read-write or read-only if not defined?
read-only
66
What aaa command is disabled by default?
aaa authorization console
67
How long will the following IP SLA run for? ip sla schedule 20 start-time 9:00:00
1 hour | If the life keyword isn't specified, the default is an hour