CCNA Cram Guide

A Presentation
by
Faruk Mamaniat
(mrlogic0)
Based on
Paul Browning’s
“CCNA Cram Guide”
 CCNA Cram Guide

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 2

 1. OSI Model

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 3

 7. Application Layer

• Provides Services to lower layers

• Enables program to program communication
• Determines if sufficient resources exist for
communication
• Examples:
– Email gateways (SMTP)
– FTP
– TFTP
– SNMP

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 4

 6. Presentation Layer
• Presents information to the Application layer.
• Compression
• Data conversion
• Encryption
• Standard formatting occurs here.
• Contains data formats:
– JPEG
– MPEG
– MIDI
– TIFF
•Created
[Encapsulation = data]
by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 5
 5. Session Layer
• Establishes and maintains communication ‘sessions’ between
applications (dialogue control)
• Sessions can be:
– Simplex (one direction only)
– Half-duplex (one direction at a time)
– Full duplex (both ways simultaneously)
• Keeps different applications' data separate from other
applications
• Protocols include:
– NFS
– SQL
– X Window
– RPC
6
Created ASP
– by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide
 4. Transport Layer
• Responsible for end to end integrity of data transmissions
• Establishes a logical connection between sending and receiving
hosts via ‘virtual circuits’
• Windowing works at this level to control how much information is
transferred before acknowledgement is required
• Data is segmented and reassembled at this layer
• Port numbers are used to keep track of different conversations
crossing the network at the same time
• Error correction (not detection)
• Supports:
– TCP
– UDP
Created SPX
– by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 7

– NBP
 3. Network Layer
• Routes data from one node to another and determines the best
path to take
• Routers operate at this level
• Network addresses are used here for routing
• Routing tables, subnetting and control of network congestion
occur here.
• Routing protocols regardless of which protocol they run over
reside here:
– RIP
– IP
– IPX
– ARP
– IGRP
– Appletalk
8
• [Encapsulation
Created by Faruk Mamaniat=–Packets]
Based on Paul Browning’s CCNA Cram Guide
 2. Data Link Layer
• Sometimes referred to as the LAN layer.
• Responsible for the physical transmission of data from one node
to another
• Packets are translated into Frames here and hardware address is
added.
• Error detection
• Bridges and switches operate at this layer.
• [Encapsulation = Frames]

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 9

 Data Link Sublayers
• Logical Link Control (LLC) 802.2:-
– Manages communications between devices over a single link on a
network
– Uses Service Access Points (SAPs) to help lower layers talk to the
Network Layer.
• Media Access Control (MAC) 802.3:-
– Builds frames from the 1’s and 0’s that the Physical Layer (address
= 6-byte/48 bit) picks up from the wire as a digital signal
– Runs a Cyclic Redundancy Check (CRC) to assure no bits were lost
or corrupted.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 10

 1. Physical Layer
• Puts data onto the wire and takes it off
• Physical layer specifications such as:
– Connectors
– Voltage
– physical data rates
– DTE/DCE interfaces
• Some common implementations include:
– Ethernet/IEEE 802.3
– Fast Ethernet
– Token Ring/IEEE 802.5
• [Hubs operate here]
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 11
• [Encapsulation = Bits]
 2. Cisco Hierarchical Model

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 12

 Core Layer

• Switch traffic as quickly as possible

• Fast transport to Enterprise services (internet etc).
• No packet Manipulation, VLANs or access-lists
• High speed access required such as FDDI, ATM

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 13

 Distribution Layer

• Time sensitive manipulation such as routing, filtering

and WAN access
• Broadcast/Multicast, media translations, security

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 14

 Access Layer

• Switches and routers

• Static (not dynamic) routing
• [Network] Segmentation occurs here
• Workgroup access

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 15

 3. Port Numbers

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 16

 Common port numbers are:
20 - File Transfer Protocol – Data (TCP)
21 - File Transfer Protocol – Control (TCP) (Rarely Used)
22 - SSH (TCP)
23 - Telnet (TCP)
25 - Simple Mail Transfer Protocol (TCP)
53 - Domain Name Service (TCP/UDP)
69 - Trivial File Transfer Protocol (UDP)
80 - HTTP/WWW (TCP)
110 - Post Office Protocol 3 (TCP)
119 - Network News Transfer Protocol (TCP)
123 - Network Time Protocol (UDP)
161/162 - Simple Network Management Protocol (UDP)
17
443 - HTTP over Secure Sockets Layer (TCP)
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide
 4. TCP/IP & UDP

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 18

 TCP – (protocol 6)

• Reliable, sequenced Connection-oriented delivery

• 20-byte header.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 19

 UDP – (protocol 17)

• Connectionless, Unsequenced, best effort delivery

• 6-byte Header.
• Sends data but does Not check to see if it is
received.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 20

 Services/Protocols

• Telnet
– Used to connect to a remote device (TCP)
– A password and username is required to connect.
– Telnet tests all seven layers of the OSI model.
• SNMP
– Allows remote management of network devices.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 21

 Services/Protocols

• FTP
– Connection orientated (TCP) protocol
– Used to transfer large files.
• TFTP
– Connectionless (UDP) protocol used for file
transfer

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 22

 ICMP
• ICMP
– Supports packets containing error, control and
informational messages.
– Ping uses ICMP to test network connectivity.
• ARP
– Used to map an IP address to a physical (MAC)
address.
• A host wishing to obtain a physical address broadcasts an
ARP request onto the TCP/IP network.
• The host replies with its physical address.
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 23
 DNS
• Resolves hostnames to IP addresses (not the other
way around).
• To configure the router to use a host on the network
use the command:
– ROUTER(config)#ip nameserver 4.2.2.2
• To configure DNS the command: ‘ip Name-server’ is
usually already turned on for the router config by
default.
• If you want hosts on the network to use the router
as a proxy DNS server put this command onto the
router:
– ROUTER(config)#ip dns server
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 24
 DHCP
• Involves a central server or device which relays TCP
information to hosts on a network.
• You can configure a router to be a DHCP server with
the below config
• Must have hosts on the same LAN as the router
interface:
ROUTER(config)#ip dhcp pool E00_DHCP_Pool
ROUTER(dhcp-config)#network 10.10.10.0 255.255.255.0
ROUTER(dhcp-config)#dns-server 24.196.64.39 24.196.64.40
ROUTER(dhcp-config)#domain-name mydomain.com
ROUTER(dhcp-config)#default-router 10.10.10.254
ROUTER(dhcp-config)#lease 1
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 25
 5. Cisco IOS

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 26

 6 Modes:

• User EXEC:- Router>

• Privileged EXEC:- Router#
• Global Configuration:- Router(config)#
• ROM Monitor:- > or rommon>
• Setup:- series of questions
• RXBoot:- Router<boot>

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 27

 Editing Commands (1):
• Ctrl+W - Erases a word
• Ctrl+U - Erases a line
• Ctrl+A - Moves cursor to beginning of line
• Ctrl+E - Moves cursor to end of line
• Ctrl+F - (or right arrow) – Move forward one character
• Ctrl+B - (or left arrow) – Move back one character
• Ctrl+P - (or up arrow) – Recalls previous commands from buffer
• Ctrl+N - (or down arrow) – Return to more recent commands in buffer
• Esc+B - Move back one word
• Esc+F - Move forward one word

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 28

 Editing Commands (2):
• Tab - completes a command you have started:
Router# copy ru <- press tab key after the ‘u’
Router# copy running-configuration

• ? gives you the command options:

Router#copy ?
Flash: Copy from flash: file system
Ftp: Copy from ftp: file system
Nvram: Copy from nvram: file system
Running-config Copy from current system configuration
Startup-config Copy from startup configuration
System: Copy from system: file system
Tftp: Copy from tftp: file system (truncated to save space)

• Or the commands beginning with the letters you have typed:

Router#a?
Access-enable
access-profile
access-template

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 29

 6. Router Elements

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 30

 DRAM (1)
• Working area for router.
• Contains:
– Routing tables
– ARP cache
– Packet buffers
– IOS
– Running config
• Some routers run the IOS from DRAM.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 31

 DRAM (2)
• Show version
– Shows information about IOS in RAM
– Displays how much physical memory is installed
– Shows the config register setting.
• Show process
– Shows info about programs running in DRAM.
• Show running-configuration
– Shows active configuration in DRAM
• Show memory/stacks/buffers
– To view tables and buffers

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 32

 NVRAM
• Stores router's start up configuration
• Does not lose data when powered off (due to a
battery power source.)
• Show startup-configuration
• Erase startup-configuration
• Copy running-configuration startup-configuration
(copy run start)
• Config register 0x2142 skips start up config file in
NVRAM (for password recovery)
• Config register 0x2102 loads start up config files
from NVRAM

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 33

 Flash

• (EEPROM or PCMCIA card) holds the compressed

operating system image (IOS)
• This is where software upgrades are stored.
• Show flash
• Dir flash:

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 34

 ROM
• Contains power on diagnostics, a bootstrap program
and a mini IOS (rommon).
• You can specify which file the router boots from if
you have more than one in flash memory
– Router(config)#boot system flash {IOS filename}

• Or that it boots from a TFTP server if for example

the image is too large to fit in flash.
– Router(config)#boot system tftp {IOS filename}{tftp
address)

• You can also back up the flash image for emergency

use.
– Router(config)#copy flash tftp
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 35
 7. Cabling

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 36

 Pinouts

Crossover Straight Through Rollover

1 <-> 3 1 <-> 1 (PC to Console/Aux port)
2 <-> 6 2 <-> 2 1 <-> 8
3 <-> 3 2 <-> 7
3 <-> 1 4 <-> 4 3 <-> 6
6 <-> 2 5 <-> 5 4 <-> 5
6 <-> 6 5 <-> 4
7 <-> 7 6 <-> 3
8 <-> 8 7 <-> 2
8 <-> 1

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 37

 Two types of crosstalk can
occur on twisted pair cables:
• Near end crosstalk (NEXT)
• Far end crosstalk (FEXT)

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 38

 8. Router Management

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 39

 Router Management

• Console port:
– A PC is connected to the console port via a rollover cable.
– Used for initial configuration or disaster recovery.

• Auxiliary port:
– Normally a modem connected to this port.

• Virtual Terminals:
– Normally accessed by telnetting to the router.
– Five lines available numbered [vty] 0-4

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 40

 Router Management

• TFTP server:
– The router can get its configs or IOS from a server (PC for
example) running TFTP software and holding the necessary
files.

• NMS:
– Network management station
– Uses SNMP to manage the router normally via a Web style
interface.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 41

 9. CDP

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 42

 Router#show cdp
neighbors

• This command displays the neighbouring

router or switches hostname, hardware
platform, port identifier and
capabilities list.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 43

 Router#show cdp
neighbors detail

• This command displays more detail than the

previous one. You can view IP address,
IOS release and duplex setting.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 44

 10. LAN Switching

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 45

 A LAN switch has three
primary functions:
• 1. Address Learning
– Maintains a table (CAM – Content Addressable Memory) of
addresses and which port they can be reached on.
• 2. Forward/filter decision
– Forwards frames only out of the relevant port.
• 3. Loop avoidance
– STP

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 46

 Transmitting Frames Through a
Switch
• Store-and-Forward
– Switch copies the entire frame into its buffer and computes
the CRC
– Frame is discarded if there is an error.
– High latency.
• Cut-through
– Reads only the destination address (first 6 bytes after
preamble), looks up address and forwards frame.
– Lower latency.
• Fragment free
– Switch reads first 64 bytes before forwarding the frame.
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 47
– (Collisions normally occur within the first 64 bytes.)
 Spanning Tree Protocol (STP)
IEEE 802.1d
• A link management protocol that provides path redundancy whilst
preventing undesirable loops in the network
• For communication to work correctly on an ethernet network
there can only be one path between two destinations.
• STP uses Bridge Protocol Data Units (BPDU) received by all
switches to determine the spanning-tree topology.
• A port on a switch is either in forwarding or blocking state.
– Forwarding ports provide the lowest cost path to the root bridge
– A port will remain in blocking state from start up if spanning tree
determines there is a better path.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 48

Rapid Spanning Tree Protocol (RSTP)
IEEE 802.1w
• Spanning tree takes up to 50 seconds to converge to a stable
network whereas RSTP takes 2 seconds.
• RSTP port roles are:
– Root Port
– Designated Port
– Backup Port
– Alternate Port
– Disabled
• Most implementations of RSTP use PVST+ (Per VLAN Spanning
Tree+):
– Multiple instances of Spanning Tree are running so the load on the
CPU is higher but we can load share over the links.
•Created
To by
enable RSTP for each VLAN in our switched network we use
Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 49
the following command:
 Bridging & Switching

• Switching
– LAN Switches are primarily hardware based.
– Many spanning-tree instances per switch and up to
100 ports.
• Bridging
– Bridges are primarily software based and have one
spanning-tree instance per bridge.
– Normally 16 ports per bridge.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 50

 Virtual LAN (VLAN)

• A VLAN is a switched network that consists of

logically segmented communities without regard to
physical location.
• Each port on a switch can belong to a VLAN.
• VLAN ports share broadcasts.
• A router is needed to route traffic between VLANs
because layer 2 devices do not use IP addresses.
• Reduces admin costs, tighter security and better
control of broadcasts.
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 51
 11. IP Addressing

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 52

 Class A

• Format/Default Mask
– N.H.H.H
– 255.0.0.0
• Leading Bit Pattern = 0
• Network Address Range = 0 - 126
• Max Networks = 126
• Max Hosts/nodes = 16,777,214

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 53

 Class B

• Format/Default Mask
– N.N.H.H
– 255.255.0.0
• Leading Bit Pattern = 10
• Network Address Range = 128 -191
• Max Networks = 16,384
• Max Hosts/nodes = 65,534

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 54

 Class C

• Format/Default Mask
– N.N.N.H
– 255.255.255.0
• Leading Bit Pattern = 110
• Network Address Range = 192 - 223
• Max Networks = 2,097,152
• Max Hosts/nodes = 254

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 55

 Class D

• Leading Bit Pattern = 1110

• Network Address Range = 224 - 239
• Multicast

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 56

 Class E

• Leading Bit Pattern = 11110

• Network Address Range = 240 - 255
• Experimental

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 57

 12. Subnetting

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 58

 13. IPv6

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 59

 The two methods of migrating
from IPv4 to IPv6 are:

• Dual-Stack
• Tunnelling

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 60

 14. IP Routing

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 61

 Static routing:
Router(config)#ip route {destination network}{mask}{next hop address}

• E.g
ip route 172.16.5.2 255.255.255.0 172.16.12.8

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 62

Dynamic addressing is done by
using a routing protocol:
• For RIP v2
Router(config)#router rip
Router(config-router)#version 2
Router(config-router)#network 172.16.0.0
Router(config-router)#no auto-summary <- {optional}

• For EIGRP
Router(config)# router eigrp 20
Router(config-router)#network 172.16.0.0
Router(config-router)#no auto-summary <- {optional}

• For OSPF
Router(config)#router ospf 20
Router(config-router)#network 172.16.0.0 0.0.255.255 area 0

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 63

 Distance Vector (1)
• Distance Vector protocols understand the direction and
distance to any given network connections.
• Algorithms calculate the cost to reach the connection and
pass this information to every neighbour router.
• Examples are RIP and IGRP.
• Problems:
– Routing loops
– Counting to infinity

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 64

 Distance Vector Solutions:
• Defining a maximum number of hops:
– RIP = 15
– IGRP = 255
• Split Horizon
– If the router learns a route on an interface do not advertise it out of the
same interface.
• Route Poisoning
– Information passed out of an interface is marked as unreachable by setting
the hop count to 16 (for RIP).
• Hold Down Timers
– Ignores new routing updates until a determined time has passed.
• Triggered Updates
– Instead of routing updates being sent at the default intervals; a triggered
update is sent every time to indicate a change in the routing table. 65
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide
 Link state (1)
• These have a picture of the entire network from link
state advertisements (LSA) and link State packets
(LSP). Once these have all been passed only changes
to the network are sent out reducing network
traffic.
• Req a lot of CPU time & b/width when LSAs are
flooded eg:
– OSPF
– IS-IS
• Routers use administrative distances to determine
how believable the route learned is depending upon
the protocol it learns the router from:
– Routers prefer lowest distance eg:
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 66
– Direct connection (0) >> OSPF (110) >> RIP (120)
 Link state (2)
• Routing Protocols
– Maintain table of hosts
– Which i/face they can be reached by
– Eg: RIP, OSPF
• Routed Protocols
– Used to transport traffic from source to destination
– Eg: IP, IPX, AppleTalk
• When a packet traverses a n/work from
device to device (hop to hop):
– IP address = constant
– MAC address changes
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 67
 Source - Default Distance:
• Directly Connected Interface = 0
• Static hop to next router = 1
• EIGRP Summary = 5
• External BGP = 20
• EIGRP (Internal) = 90
• OSPF = 110
• IS-IS = 115
• RIP = 120
• Exterior Gateway Protocol (EGP) = 140
• External EIGRP = 170
• Internal BGP = 200
Unknown
•Created by Faruk = 255 – Based on Paul Browning’s CCNA Cram Guide
Mamaniat 68
 15. Routing Protocols

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 69

 RIP v2
• Uses UDP port 520 • Update timer 30
• Classless seconds
• Max hop count 15 • Invalid 90 seconds
• Multicasts route • Hold down 180 seconds
updates to 224.0.0.9 • Flush 270 seconds
• Supports authentication

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 70

 EIGRP

• Uses IP protocol 88
• Classless
• Hybrid of distance vector and link state
• Multicasts updates to 224.0.0.10
• Uses feasible successors to determine alternative
routes to networks.
• The feasible successor is a backup route based upon
the topology table.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 71

 OSPF
• Uses IP protocol 89 • All non backbone areas
• Classless must connect directly
• Uses Dijkstras shortest to area 0
path algorithm (SFP) • Areas can be numbered
• Router ID is the highest from 0 to 65535
IP address but • Multicasts on 224.0.0.5
loopback address used if
present
• Backbone area is area 0

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 72

 OSPF Interface / Cost:
• OSPF uses cost as a metric (see below - *
indicates the most common) [Cost
(10^8/Bandwidth)]
– ATM, Fast Ethernet, Gigabit Ethernet, FDDI (> 100 Mbps) = 1
– HSSI (45Mbps) = 2
– 16 Mbps Token Ring = 6
– 10 Mbps Ethernet = 10
– 4 Mbps Token Ring = 25
– T1 (1.544 Mbps)* = 64
– DS-0 (64k)* = 1562
– 56k = 1785
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 73
 16. NAT

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 74

 NAT Facts

• Converts internal address to external

address commonly:
– Convert non-routable address to routable address

• For all configs you must specify internal &

external i/faces
– Router(config-if)#ip nat inside/outside

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 75

 Static NAT

• Maps one address to another address such as

192.168.1.1 to 200.1.1.1
Router(config)#ip nat inside source static
192.168.1.1 200.1.1.1

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 76

 Dynamic NAT
• Maps a number of internal addresses to a pool of
external addresses.
• Example config:
– 1. Creates a pool of 10 addresses with a mask (prefix length)
of 255.255.255.0 and the name ‘ad_team.’
– 2. The hosts to be NATted are on the 192.168.1.0 network.
– 3. The Access list (source list) tells the router which
addresses to NAT.
Router(config)#ip nat pool ad_team 10.0.0.1
10.0.0.10 prefix-length 24
Router(config)#ip nat inside source list 1 pool
ad_team out
Router(config)#access-list 1 permit 192.168.1.0
77
0.0.0.255
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide
 Overload NAT (PAT)
• Maps private internal addresses to one or more
external addresses using port nos
• Example config:
– Creates a pool of ten addresses (it could be more)
– The command ‘overload’ tells the router to use port address
translation.
Router(config)#ip nat pool ad_team 10.0.0.1
10.0.0.10 prefix-length 24
Router(config)#ip nat inside source list 1 pool
ad_team out overload
Router(config)#access-list 1 permit 192.168.1.0
0.0.0.255

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 78

 17. Wireless Networks

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 79

 Ad-hoc Mode

• Similar to peer-to-peer networking where nodes

connect directly to each other
• They must have the same SSID and channel for this
to work.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 80

 Infrastructure Mode

• W/less clients connect to access point (AP)

• BSS (Basic Service Set)
– 1 access point and multiple clients
• ESS (Extended Service Set)
– 2 or more BSSs

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 81

 W/less Security

• Open System
– Host sends an association request to the wireless access
point and it will be sent a success or failure message
• Shared key
– A key or pass phrase is configured on the AP & client(s)
– 3 Types of Authentication: WEP, WPA, WPA2…

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 82

 3 Types of Authentication:
• WEP
– An encryption algorithm built in the 802.11 standard
– RC4 40bit or 104 bit key
– 24-bit IV (Initialization Vector)
• WPA
– Uses dynamic key management
– Adds a stronger encryption cipher
– Built on the EAP/802.1X mechanism
– Uses TKIP (Temporal Key Integrity Protocol)
– 48-bit IV
– Used w/ RADIUS in the Enterprise
• WPA2
– Next generation
– Uses stronger AES (Advanced Encryption Standard)
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 83
– Creates a new key for every new association
 18. Network Security

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 84

 Access Lists
• A set of conditions that • Standard Access Lists
permit or deny access to or • Extended Access Lists
through a router's i/face • Named Access Lists
• Inbound Access Lists • ‘access-class’
• Outbound Access Lists – Used if applying to console/aux/
• Can be applied to multiple vty lines

interfaces • Show ip access-lists

• Show access-list 1
• There can only be one access
list per protocol per direction • Packets are processed by the
per interface access list and then routed.

• Wildcard masks
• Access lists are applied to
interfaces
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 85
 Inbound & Outbound
Access Lists
• Inbound:
– Save the router having to process the packet
– Denied packets will be dropped at the inbound interface
• Outbound:
– Will be processed by the router
– Then dropped at the outbound interface if they match the
access list

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 86

 Wildcard masks

• Tell the router which parts of the address to look at

and which to disregard
• Access-list 12 permit 172.16.5.0 0.0.0.255
– This would permit any host on network 172.16.5.x

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 87

 Access lists are applied to
interfaces:
• Router(config)#access-list 1 permit
172.16.5.2
• Router(config)#interface e0
• Router(config-if)#ip access-group 1 in

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 88

 Range <<>> Usage

• 1300-1999 >> IP Standard (Expanded Range)

• 100-199 >> IP Extended
• 1-99 >> IP Standard
• 2000-2699 >> IP Extended (Expanded Range)

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 89

 Standard Access Lists
• Check only the source address of the packet &
permits or denies entire TCP/IP suite
• You cannot choose a particular port or application to
block
• Cisco recommends that they are placed as close to
the destination as possible.
• Router(config)#access-list{number 1-99}
{permit/deny}{source address}
• Access-list 10 permit 172.16.5.2 <<- address can be a
host or network

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 90

 Extended Access Lists
• Allow for a lot more granularity when filtering IP
traffic.
• Can filter traffic based upon:
– Source or destination
– A particular IP protocol
– Port number
• Cisco recommends that they are placed as close to
the source as possible.
• Router(config)#access-list {number 100-99}
{permit/deny}{protocol}
• Access-list 112 permit tcp host 172.16.5.2 host
172.16.10.2 eq www
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 91
 Named Access Lists
• Router(config)#ip access-list {standard/extended}
name
• Router(config)#ip access-list extended no_ftp

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 92

 Passwords

• Service password-encryption
• Enable
• Enable Secret
• VTY
• Auxiliary
• Console

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 93

 Password cont…
• Service password-encryption
– Encrypts all passwords
• Enable
– Used to get from user exec to privileged exec.
– Not encrypted
– Router(config)# enable password {password}
• Enable Secret
– Encrypts password
– Router(config)# enable secret {password}
– (only use enable or enable secret not both)

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 94

 Password cont…
• VTY
– Needed if telnet access is required
Router(config)#line vty 0 4
Router(config-line)#password cisco
Router(config-line)#login
• Auxiliary
– Allows modem access to the aux port
– Router(config)#line aux 0
– Router(config-line)#password cisco
– Router(config-line)#login
• Console
– Used to allow console access
– Router(config)#line console 0
– Router(config-line)#password cisco
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 95
– Router(config-line)#login
 Protecting the Network

• Firewalls
– Divide your network into three zones:
• Trusted
• Semi-Trusted
• Un-Trusted

• VPN
– Allows information to be sent securely over an insecure
medium (eg Internet)
– Can be:
• Site-to-Site (eg WAN)
• Access (eg homeworker)
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 96
 Security Device Manager
(SDM)
• A GUI web based tool
• Allows you to configure and manage your Cisco
routers
• Can be installed on your router or your PC
• (Huge amount of parameters and screens to navigate)

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 97

19. Wan Protocols and Services

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 98

 HDLC

• Cisco default on serial WAN connections

• No authentication available

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 99

 PPP
• Data link
• Authentication is optional:
– PAP (clear text)
– CHAP (secure hash)
• Use PPP if connecting a Cisco router to a non-cisco
router.
• Router(config)#hostname paul password cisco <<- case
sensitive
• Router(config)#interface serial 0
• Router(config-if)#encapsulation ppp
• Router(config-if)# ppp authentication chap

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 100
 Frame Relay (1)
• Based upon x.25 protocol
• Less error checking = quicker
• 56K to 2Mb
– Ideal for SMEs

• Works at the physical & data link layers.

• DLCI’s are used to identify the circuit

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 101
 Frame Relay (2)
• Each router uses LMIs for keepalives on the line
between the router & the frame relay switch:
– LMI type is Cisco by default.
– You must use another type such as ansi if connecting to a non-cisco
router.
• Router(config-if)#encapsulation frame-relay
Router(config-if)#frame-relay map ip 2.2.2.2 100
– Router is told to get to ip address 2.2.2.2 use dlci 100

• Use frame relay sub-interfaces if point-to-point or

multipoint connection is needed
– IP address applied to sub-interfaces for these and NOT the main
interface
Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 102
 Frame relay uses:

• Backwards Explicit Congestion Notification (BECN)

– On returning frames to warn of congestion
• Forward Explicit Congestion Notification (FECN)
– Is set by the DCE end to warn of congestion from the sending
end.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 103
 Frame Relay Problems include:

• Incorrect LMI setting

• Incorrect DCLI
• Split horizon preventing routing updates leaving
interface

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 104
 20. Troubleshooting

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 105
 Show ip interface brief

• First command to issue to establish if the interfaces

are up or down
• (There are only a handful of ways to break any
network in the exam.)

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 106
 Layer 1

• Ensure that there is a clock rate on the DCE

interface
• Show controllers serial X
– To check what type of cable is attached
– X = serial i/face no
• Ensure that the ‘no shut’ command has been applied
to the interface.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 107
 Layer 2

• Ensure that the correct encapsulation type is on the

interface i.e. HDLC, PPP etc
• Show interface serial X
• If it is not then go into interface configuration mode
and change it.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 108
 Layer 3

• Ensure that the correct IP address AND subnet mask

is applied to the interface.
• Ensure that the correct networks are being
advertised by the routing protocol
• Show ip protocols

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 109
 Warning!

• Always ensure that you can ping across

directly connected router interfaces
BEFORE applying routing protocols and
access lists.

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 110
 CCNA Cram Guide

Created by Faruk Mamaniat – Based on Paul Browning’s CCNA Cram Guide 111