click below
click below
Normal Size Small Size show me how
CCNA commands
The main commands to study
| Question | Answer |
|---|---|
| Configure interfaces to actively initiate the negotiation of a PAgP EtherChannel using gorup 2. | SwitchA(config-if-range)#channel-group 2 mode desirable |
| Configure interfaces as trunk links | SwitchA(config-if-range)#switchport mode trunk |
| Configure interfaces to actively initiate the negotiation of an LACP EtherChannel 6. | SwitchB(config-if-range)#channel-group 6 mode active |
| Configure switch to be the root bridge on vlan 1 | SwitchA(config)#spanning -tree vlan 1 priority 4096 |
| Configure switch to use rapid-vst | SwitchC(config)#spanning-tree mode rapid-pvst |
| Configure this switch as a VTP client. | Switch(config)#vtp mode client |
| Use westsim as the VTP domain name. | Switch(config)#vtp domain westsim |
| Configure cisco as the VTP password. | Switch(config)#vtp password cisco |
| Manually designate the following ports as trunk ports: Fa0/8, Fa0/23, Fa0/24, Gi0/1, and Gi0/2. | Bldg2(config)#int range fa0/8 , fa0/23 - 24 , gi0/1 - 2 Bldg2(config-if-range)#switchport mode trunk |
| For each trunk port, remove the current VLAN assignment, making each port a member of VLAN 1. | Bldg2(config-if-range)#no switchport access vlan 1 |
| Manually configure all remaining ports as access ports. | Bldg2(config-if-range)#int range fa0/1 - 7 , fa0/9 - 22 Bldg2(config-if-range)#switchport mode access |
| change the native VLAN from its default to VLAN 10 for each trunk port. | SwitchA(config-if-range)#switchport trunk native vlan 10 |
| Create a VLAN name Accounting | Bldg2(config)#vlan 7 Bldg2(config-vlan)#name Accounting |
| Switch interfaces fa 4 to 5 to vlan 7 | Bldg2(config-vlan)#interface range fa0/4 - 5 Bldg2(config-if)#switchport access vlan 7 |
| Access lists describe the traffic type that will be | controlled. |
| Access list entries describe the traffic | characteristics. |
| Access list entries identify either | permitted or denied traffic. |
| Access list entries can describe a specific traffic type, or | allow or restrict all traffic. |
| When created, an access list contains an | implicit deny any entry at the end of the access list. |
| Each access list applies only to | a specific protocol. |
| Each router interface can have up to two access lists for each protocol, one for | incoming traffic and one for outgoing traffic. |
| When an access list is applied to an interface, it identifies whether | the list restricts incoming or outgoing traffic. |
| Access lists exist globally on the router, but filter traffic only for | the interfaces to which they have been applied. |
| Each access list can be applied to more than one interface. However, each interface can only have | one incoming and one outgoing list. |
| Access lists can be used to log traffic that matches | the list statements. |
| Access lists applied to inbound traffic filter packets before | the routing decision is made. |
| Access lists applied to outbound traffic filter packets after | the routing decision is made. |
| Filter list based on specific TCP/IP protocol and on destination address and on socket number | Extended IP Access List |
| Standard access list filter on only | Source host name or IP address |
| To match any network use wildcard and subnet mask | 0.0.0.0 255.255.255.255 |
| To identify a host address in the access list statement, use the following formats: | n.n.n.n n.n.n.n 0.0.0.0 OR host n.n.n.n Where n.n.n.n is the IP address of the host. |
| To identify a network address, use the format: | n.n.n.n w.w.w.w Where n.n.n.n is the subnet address and w.w.w.w is the wildcard mask. |
| The following commands create a standard access list that allows VTY lines 0-4 access only from the internal network of 192.168.1.0/24: | Router(config)#access-list 12 permit 192.168.1.0 0.0.0.255 Router(config)#line vty 0 4 Router(config-line)#access-class 12 in |
| Permit access for network n.n.n.n on access list 2 | Router(config)#access-list 2 permit n.n.n.n |
| The following commands create a standard IP access list that rejects all traffic except traffic from host 10.12.12.16, and applies the list to the Serial0 interface. | Router(config)#access-list 2 permit 10.12.12.16 Router(config)#int s0 Router(config-if)#ip access-group 2 in |
| The following commands create an extended IP access list that does not forward TCP packets from any host on network 10.0.0.0 to network 11.12.0.0, and applies the list to the first serial interface. | Router(config)#access-list 111 deny tcp 10.0.0.0 0.255.255.255 11.12.0.0 0.0.255.255 Router(config)#access-list 111 permit ip any any Router(config)#int s0 Router(config-if)#ip access-group 111 in |
| Deny access to host 20.68.1.10 in access list 25 | Router#config t Router(config)#access-list 25 deny host 20.68.1.10 |
| Enable IP routing for the entire router. IP routing is enabled by default. Use this command only if it has been disabled. Use the no ip routing command to disable routing. | Router(config)#ip routing |
| Enter router RIP configuration mode. Use the no router rip command to disable rip, removing all defined networks. | Router(config)#router rip |
| Enable RIP version 2 on the router. | Router(config-router)#version 2 |
| Identify networks that will participate in the router protocol. Notice that you identify networks, and not interfaces. | Router(config-router)#network <address> |
| When you use the network command to identify the networks that will participate in RIP routing, follow these rules. (Use the no network command to remove any network entries.) | Identify only networks to which the router is directly connected.*Use the classful network address, not a subnetted network address. (The router will convert subnetted network to a classful network address by removing subnetted network information.) |
| Prevent routing update messages from behind sent through a router interface. | Router(config-router)#passive-interface <interface> |
| Turn off automatic route summarization. | Router(config-router)#no auto-summary |
| View the routing table. | Router#show ip route |
| View details about the specific route. | Router#show ip route <hostname or address> |
| enable IP routing and identify two networks that will participate in the RIPv2 routing protocol. | Router(config)#ip routing Router(config)#router rip Router(config-router)#version 2 Router(config-router)#network 10.0.0.0 Router(config-router)#network 192.168.10.0 |
| Switchport trunk allowed valn | |
| command to verify the trunking status of Gi0/1 | show int gi 0/1 trunk |