Podcast
Questions and Answers
What is the primary function of the DHCP protocol?
What is the primary function of the DHCP protocol?
Which UDP port is used by DHCP clients?
Which UDP port is used by DHCP clients?
What is the purpose of the 'show ip dhcp binding' command?
What is the purpose of the 'show ip dhcp binding' command?
What is the destination MAC address used by a DHCP client when sending a DHCP Discover message?
What is the destination MAC address used by a DHCP client when sending a DHCP Discover message?
Signup and view all the answers
What is the purpose of the 'ip dhcp excluded-address' command?
What is the purpose of the 'ip dhcp excluded-address' command?
Signup and view all the answers
What is the default behavior of the 'ip helper-address' command?
What is the default behavior of the 'ip helper-address' command?
Signup and view all the answers
What type of message does a DHCP client send to identify available DHCP servers on the network?
What type of message does a DHCP client send to identify available DHCP servers on the network?
Signup and view all the answers
What happens after a DHCP client receives a lease from a DHCP server?
What happens after a DHCP client receives a lease from a DHCP server?
Signup and view all the answers
What happens when a host uses DHCP to automatically configure an IP address?
What happens when a host uses DHCP to automatically configure an IP address?
Signup and view all the answers
What is the purpose of a DHCP client sending a broadcast DHCPREQUEST message?
What is the purpose of a DHCP client sending a broadcast DHCPREQUEST message?
Signup and view all the answers
What is the typical range of IP addresses assigned by a workstation when DHCP servers are not available?
What is the typical range of IP addresses assigned by a workstation when DHCP servers are not available?
Signup and view all the answers
What is the role of a DSL modem in a SOHO environment?
What is the role of a DSL modem in a SOHO environment?
Signup and view all the answers
What happens when a Windows PC cannot communicate with an IPv4 DHCP server?
What happens when a Windows PC cannot communicate with an IPv4 DHCP server?
Signup and view all the answers
What is the purpose of a DHCP server sending a DHCPOFFER message?
What is the purpose of a DHCP server sending a DHCPOFFER message?
Signup and view all the answers
What is the typical range of IP addresses assigned by the ISP to the wireless router in a SOHO environment?
What is the typical range of IP addresses assigned by the ISP to the wireless router in a SOHO environment?
Signup and view all the answers
What happens when a DHCP client's IP address lease time expires?
What happens when a DHCP client's IP address lease time expires?
Signup and view all the answers
What should the host default gateway address be set to in a GLBP configuration?
What should the host default gateway address be set to in a GLBP configuration?
Signup and view all the answers
Which FHRP protocol provides load sharing in addition to redundancy?
Which FHRP protocol provides load sharing in addition to redundancy?
Signup and view all the answers
What is the purpose of HSRP?
What is the purpose of HSRP?
Signup and view all the answers
What is the main advantage of using TACACS+ or RADIUS for AAA authentication?
What is the main advantage of using TACACS+ or RADIUS for AAA authentication?
Signup and view all the answers
What is the goal of a DHCP starvation attack?
What is the goal of a DHCP starvation attack?
Signup and view all the answers
What is used to form an IPv6 address when a PC is configured to use the SLAAC method?
What is used to form an IPv6 address when a PC is configured to use the SLAAC method?
Signup and view all the answers
What is the purpose of the O flag in DHCPv6?
What is the purpose of the O flag in DHCPv6?
Signup and view all the answers
What is the main purpose of discovery protocols?
What is the main purpose of discovery protocols?
Signup and view all the answers
What is the main difference between HSRP and GLBP?
What is the main difference between HSRP and GLBP?
Signup and view all the answers
What is true about the interface IDs of clients in stateless DHCPv6 operation?
What is true about the interface IDs of clients in stateless DHCPv6 operation?
Signup and view all the answers
What is the main advantage of using a local database for AAA authentication?
What is the main advantage of using a local database for AAA authentication?
Signup and view all the answers
What is the purpose of the ACAD_CLASS in DHCPv6?
What is the purpose of the ACAD_CLASS in DHCPv6?
Signup and view all the answers
What is true about stateful DHCPv6 pools?
What is true about stateful DHCPv6 pools?
Signup and view all the answers
What is the command used to set the M flag to 1 in a RA message?
What is the command used to set the M flag to 1 in a RA message?
Signup and view all the answers
What is the purpose of the GLBP protocol?
What is the purpose of the GLBP protocol?
Signup and view all the answers
What is VRRPv2?
What is VRRPv2?
Signup and view all the answers
What is the role of the authenticator in the 802.1X authentication process?
What is the role of the authenticator in the 802.1X authentication process?
Signup and view all the answers
What is the default mode for a port security violation on a Cisco switch?
What is the default mode for a port security violation on a Cisco switch?
Signup and view all the answers
What happens to packets with unknown source addresses in the Protect violation mode?
What happens to packets with unknown source addresses in the Protect violation mode?
Signup and view all the answers
What is the role of the supplicant in the 802.1X authentication process?
What is the role of the supplicant in the 802.1X authentication process?
Signup and view all the answers
What type of cable is used for connections between end devices and a switch?
What type of cable is used for connections between end devices and a switch?
Signup and view all the answers
What is the purpose of the switchport port-security command?
What is the purpose of the switchport port-security command?
Signup and view all the answers
What happens when the security violation counter for a port is incremented?
What happens when the security violation counter for a port is incremented?
Signup and view all the answers
How many violation modes are available on a Cisco switch?
How many violation modes are available on a Cisco switch?
Signup and view all the answers
Study Notes
DHCP Configuration
- The
commands dhcp pool
,ip default-gateway
, andip network
are not valid DHCP configuration commands. - When a DHCP client's IP address lease time expires, it sends a DHCPREQUEST unicast message directly to the DHCPv4 server that originally offered the IPv4 address.
- A DHCP client typically sends two messages: DHCPDISCOVER and DHCPREQUEST, which are usually sent as broadcasts to ensure all DHCP servers receive them.
DHCP Message Process
- The DHCP server responds to these messages using DHCPOFFER, DHCPACK, and DHCPNACK messages, depending on the circumstance.
- When a DHCP client receives DHCPOFFER messages, it will send a broadcast DHCPREQUEST message to:
- Indicate to the offering DHCP server that it would like to accept the offer and bind the IP address.
- Notify any other responding DHCP servers that their offers are declined.
IP Address Assignment
- When a workstation is configured to obtain an IP address automatically, but DHCP servers are not available, it assigns itself an IP address from the 169.254.0.0/16 network.
- If a Windows PC cannot communicate with an IPv4 DHCP server, it automatically assigns an IP address in the 169.254.0.0/16 range.
SOHO Environment
- In a SOHO environment, a wireless router connects to an ISP via a DSL or cable modem.
- The IP address between the wireless router and ISP site is typically assigned by the ISP through DHCP.
- This method facilitates IP addressing management, allowing IP addresses for clients to be dynamically assigned, making it easy to reassign IP addresses when a client is dropped.
DHCP Protocol
- The DHCP protocol operates with 2 UDP ports: UDP port 67 (destination port for DHCP servers) and UDP port 68 (used by DHCP clients).
- The
show ip dhcp binding
command shows a list of IPv4 addresses and the MAC addresses of the hosts to which they are assigned.
MAC Addresses
- There is a special MAC address for broadcast purposes: FF-FF-FF-FF-FF-FF.
- When a DHCP client needs to send a DHCP Discover message, it uses this MAC address as the destination MAC address in the Ethernet frame.
IP Helper Address
- The
ip helper-address
command forwards the following eight UDP services:- Port 37: Time
- Port 49: TACACS
- Port 53: DNS
- Port 67: DHCP/BOOTP client
- Port 68: DHCP/BOOTP server
- Port 69: TFTP
- Port 137: NetBIOS name service
- Port 138: NetBIOS datagram service
DHCP Client/Server Communication
- The client broadcasts a DHCPDISCOVER message to identify available DHCP servers on the network.
- A DHCP server replies with a DHCPOFFER message, which contains information such as the IP address and subnet mask to be assigned, the IP address of the DNS server, and the IP address of the default gateway.
IPv6 Configuration
- When a PC is configured to use the SLAAC method for configuring IPv6 addresses, it uses the prefix and prefix-length information from the RA message, combined with a 64-bit interface ID, to form an IPv6 address.
- The IPv6 default gateway address is the link-local address of the router interface attached to the LAN segment.
Stateless DHCPv6
- In stateless DHCPv6 operation, the O flag is set to 1 and the M flag is left at 0 (default).
- Clients in stateless DHCPv6 operation configure their interface IDs using either EUI-64 or a random number.
FHRP
- HSRP (Hot Standby Router Protocol) is a Cisco-proprietary protocol that provides redundancy through active and standby devices.
- VRRP (Virtual Router Redundancy Protocol) is an open standard FHRP that provides redundancy through a virtual router master and one or more backups.
- GLBP (Gateway Load Balancing Protocol) is a Cisco-proprietary FHRP that provides load balancing in addition to redundancy.
AAA Authentication
- AAA authentication can be implemented with a local database or with usernames and passwords stored on network devices.
- TACACS+ or RADIUS protocol requires dedicated ACS servers, which scale well in large networks.
- After a user is authenticated through AAA, AAA servers keep a detailed log of exactly what actions the authenticated user takes on the device.
DHCP Starvation Attack
- A DHCP starvation attack is launched by an attacker with the intent to create a DoS for DHCP clients.
- The attacker uses a tool that sends many DHCPDISCOVER messages to lease the entire pool of available IP addresses, denying them to legitimate hosts.
802.1X Authentication
- The devices involved in the 802.1X authentication process are:
- The supplicant (client requesting network access)
- The authenticator (switch controlling physical network access)
- The authentication server (performs the actual authentication)
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Description
Quiz on DHCP configuration commands, IP address lease time, and DHCP messages such as DHCPDISCOVER and DHCPREQUEST.