Routing and Static Routes Quiz

Router R1 Packet Forwarding

• Router R1 will forward a packet with a destination IPv6 address of 2001:db8:cafe:5::1 out GigabitEthernet0/0.
• A route of ::/0 is the default route, used when a more specific route is not found.

Backup Route Configuration

• A floating static route with an administrative distance greater than the active route creates a backup in case of link failure.
• The administrative distance of the EIGRP route to 10.10.0.0/16 is 90.
• A floating static route with an administrative distance greater than 90 (e.g., 100) and a next-hop address matching the serial interface IP address of Branch 1 is needed.

Static Route Misconfiguration

• A static route with an incorrect destination network and mask (e.g., 209.165.200.224, 255.255.255.224) may prevent users from accessing the Internet.
• The correct destination network and mask for reaching the internet should be 0.0.0.0 0.0.0.0

Valid IPv4 Default Static Route

• The command ip route 0.0.0.0 0.0.0.0 <interface> is a valid default static route.
• This route matches all destination networks.

IPv6 Static Route for LAN Traffic

• An IPv6 static route is used to forward traffic to a LAN connected to another router (R2).
• The command format for forwarding traffic to the LAN connected to R2 is: ipv6 route <destination>/<prefix-length> <interface>.

VLAN Hopping Attack

• A VLAN hopping attack uses trunking and spoofing native VLAN information.

DHCPv6 Server Configuration

• In a stateless DHCP config, the server does not maintain client state information.
• Client IPs are configured by combining the prefix/prefix-length and a generated interface ID, so specifying a valid IPv6 address range is not necessary.

HSRP Group Configuration

• HSRP group 1 configuration on routers R1 and R2 ensures backup connectivity.

Static Route Configuration

• The static route 0.0.0.0 0.0.0.0 S0/0/0 configures a default route on a router.

Forwarding Traffic to LAN

• A static route command is used to forward traffic to the LAN connected to router R2.

VLAN Configuration Removal

• Removing VLANs, specifically VLANs 10 and 100, can not be removed from a switch by erasing the startup configuration and reloading the switch. The vlan.dat file in flash memory must be manually deleted.

Secure Network Access

• Utilize SSH or 802.1X for secure remote access to network devices.

Secure Routing Protocol

• Use Cisco Express Forwarding.

Static Route vs Dynamic Routes

• Static routes are manually configured, do not automatically update, and use fewer resources.
• Dynamic routing protocols recalculate and update automatically but consume more resources.
• Static routes are faster on smaller networks, secure, and require less maintenance.

Static Route Configuration for Specific Network

• The static route is configured to use the next-hop address and is for a specific network.

IPv6 Prefix for Link-Local Addresses

• The IPv6 prefix FE80::/10 is used for link-local addresses.

Multilayer Switch Routed Ports

• Routed ports on a multilayer switch connect to the routing portion of the network and forward IP packets.

IPv4 Default Static Route Configuration

• The command ip route 0.0.0.0 0.0.0.0 <interface> configures a default static route. It's considered the "gateway of last resort".

STP Frame Forwarding

• Switches make forwarding decisions based on the MAC address table (CAM). If the destination MAC address isn't in the CAM, the frame is flooded out all ports (except the one it entered on).

VLAN Configuration and Removal

• Remove VLANs by using the command no vlan <vlan-number>. You must manually delete the vlan.dat file in flash memory.
• Default VLANs (1-1005) are stored in a file called vlan.dat and are not removed if the startup configuration is erased.

VTP Configuration for VLANs

• VTP client and VTP server configurations allow for the modification and deletion of VLANs on the local switch.

MAC Address Table Overflow

• Malicious MAC addresses (in excess) are sent (flooded) into the switch's MAC address table.
• This causes the switch to flood network traffic to all ports, resulting in a network interruption and a Denial-of-Service (DoS) attack.
• The solution to avoid this is to disable the STP protocol or disable the related ports and/or use advanced port security settings.

DHCP Snooping

• DHCP snooping is used to prevent rogue DHCP servers from misconfiguring devices in a network.

Wi-Fi Encryption

• WPA2 with AES is considered the most secure encryption method for Wi-Fi data transmissions.