CCNA v7: IPv6, EIGRP, and Static Routing

• The following are detailed study notes for students preparing for the CCNA 2: Switching, Routing, and Wireless Essentials (Version 7.00) exam.

IPv6 Addressing and Routing

• Router R1 forwards IPv6 packets with destination address 2001:db8:cafe:5::1 via Serial0/0/0.
• ::/0 signifies the IPv6 default route used when no specific route is found.

EIGRP and Floating Static Routes

• A floating static route provides a backup path when the primary EIGRP route fails.
• A floating static route must have an administrative distance higher than EIGRP's (90).
• The floating static route to network 10.10.0.0/16 uses 209.165.200.225 as the next hop IP addresses.

Static Route Configuration

• A default static route is configured using 0.0.0.0/0 as the destination.
• An incorrectly configured static route can prevent LAN users from reaching the internet.
• Correct the wrong destination network and mask on R1 by configuring IP Route 0.0.0.0 0.0.0.0.

IPv4 Default Static Route

• The correct configuration for an IPv4 default static route is ip route 0.0.0.0 0.0.0.0 [exit interface].
• IPv6 static route forwards traffic to a LAN connected to R2 with S0/0/1 and fe80::2.

VLAN Hopping Attacks

• VLAN hopping attacks can be launched by introducing rogue switches and enabling trunking or sending spoofed native VLAN information.

MAC Address Table Overflow

• Analysts use the macof tool to check switches that are vulnerable to MAC address table overflow attacks.

DHCPv6 Server Configuration

• A DHCPv6 server must have in IPv6 pools, an IPv6 address range specified, for active Clients

HSRP Configuration

• Hosts send ARP requests to the virtual IP address.
• HSRP routers respond with the virtual MAC address for HSRP group 1, for Hosts to gain connectivity to Internet

Layer 2 Switching and Frame Forwarding

• Frame forwarding decisions on Layer 2 switches rely on MAC addresses and port mappings stored in the CAM table.
• Microsegmentation allows each Cisco LAN port to represent a separate collision domain

Cisco LAN Switches

• Interconnected Cisco LAN switches, do not filter broadcast frames which creates one large broadcast domain
• MAC address table is built by examining source MAC addresses of incoming frames.
• Switches forward frames out all ports except the ingress port if the destination MAC address is unknown

VLAN Configuration

• An erased startup-config will not remove VLANs in flash memory, vlan.dat file must be manually deleted from flash memory

VLAN Types

• Data VLANs carry user- generated traffic
• Management VLANs use an IP addresses and subnet mask and access the switch using HTTP, Telnet, SSH, or SNMP
• Native VLANs pass untagged traffic
• Default VLANs assign all switch ports to a VLAN after initial bootup

EtherChannel Technology

• STP blocks on redundant links by default to avoid creating a loop and broadcast storm

Remote Access Security

• Securing remote access includes access lists on VTY lines and SSH configuration

Wireless Network Configuration

• Most secure wireless encryption method is WPA2 with AES
• A network device with switch ports, SSID configuration and authentication settings (WLAN), firewall capabilities

Packet Source and Destination Addresses

• In packet flow, layer 2 addresses change while Layer 3 addresses stay the same.
• A firewall device places its own MAC Address as the Source MAC and replaces the Source IP with its own IP

Static Routes

• Used for traffic not a directly connected NW, requires the internet for Packet destination
• Packets for non-routing Table destinations are dropped or undeliverable

Layer 2 Loops

• Are disabled using STP, not VTP

VLAN Interface Issues

• Is usually a lack of configuration

Trunking Configurations

• To establish successful trunking choose three from one or more of the protocols
• dynamic desirable protocol
• trunk protocol
• spanning tree root

Cisco Express Forwarding (CEF)

• CEF is disabled for Ethernet to use static routes
• If Cisco Express Forwarding is disabled, multiaccess network interfaces require fully specified static routes

Static Routes

• Static Routes are used for network security
• With CEF disabled, you can use an exit interface or hop address to configure one

Switch Boot Sequence

• The correct Switch boot sequence should be, POST, ROM, CPU, Flash, IOS, and Control

IP Helper not configured on Interface

• Is an example where PCs can't receive proper IP Address

Open Defaults

• Open or default WiFi settings create network intrusion

Management SNMP Messages

• Is referred to as Traps

Wireless Setup

• To begin installing a Cisco 3500 series WLC, open the WIRELESS tab
• The default IP address of an AP, should be changed because it helps secure the network
• You should disable wireless data and packet info to help avoid intrusion

Troubleshooting

• Use multi-Lite Wave APs, it helps to centralize multiple Wave channels, and provides greater privacy

BPDU Ports

• It allows enhanced stability along a network

Attackers MAC flood switch

• Is an example of hackers attempting to see all data

IPv6 address

• Is configured when a stateless DHCPv6 configuration utilizes

AAA Networks

• Has data for proper network access

Wi-Fi operations

• Operates properly in a dual channel frequency, typically setup by a technician

Show Commands information

• Show switch port shows Spanning Tree BIDs and Roles

Trunk Protocol

• Does prevent information from being sent properly

Static Routes Protocol

• Do stop all IP addresses from being properly configured

HSRP Protocols

• Will send a HSRP to the default gateway

PAgP Protocols

• Are necessary for auto configurations

Shutdown Protocols

• Has default guard configuration

MAC Attacks

• Help others from gaining proper access

802.1x Setup

• Can have the highest levels of bandwidth

IPv6 Protocols

• Needs unicast and local configurations

Access protocols

• Work for a great number of applications

DHCP protocol

• has limited attacks without full configuration

Switch Configuration

• The protocols help get the device ready for use with full access.

DCHI server

• Will identify what network access can support