Thursday, October 6, 2016

RIP V1 Flashcards

How many version of RIP
Two versions
RIPV1
RIPV2

What is the major difference between RIPV1 and RIPV2
RIPv1 is a classful routing protocol, whereas RIPv2 is classless

Which algorithms used by distance vector protocols
Bellman Ford and Fulkerson

Operation of RIP
What is the metric for RIP
Hop count

Which UDP port used by RIP process
Port 520

How RIP messages are encapsulated
In UDP segment

Which are the message types for RIP
Request message and Response Message

What is request message
Ask neighbor router to send an update

What is response message
Carries the update

What is the metric for RIP
Hop count

What does metric 1 and 16 signify
1 Directly connected network
16 Unreachable network

What happen on Startup of RIP process
RIP broadcast request message packet on RIP enabled interface
Enters into loop
Listen for Response message or request message from other routers

What does neighbor response with when they receive request message
Their routing table

What action taken by router when they receive response message
Router receive response message
  Include route entries
New route entry found in the response message
  Route entry is made into routing table
  Also include address of advertising router
Receive existing route entry with lower hop count
  Route entry will be replaced in the routing table
Receive existing route with higher hop count
  Route will be marked as unreachable for holddown period
Receives existing route entry with same higher hop count
  Route will be accepted

How often RIP send response message out every RIP enabled interface
Every 30 seconds

What does response message or update contains
Routers full routing table
Not include route suppressed by split horizon rule

What is the destination address for the update message
Broadcast address 255.255.255.255

What is invalid or expiration timer
Amount of time a route can stay in a routing table without being updated

How expiration timer is initialized
Initialized to 180 seconds
New route is established
Update is heard for the route

What happen if update for a route is not heard within 180 seconds
Hop count of that route is changed 16
Making it unreachable

What is garbage collection or flush timer
Set to 240 seconds
60 seconds longer than expiration timer
Route is removed from routing table after garbage collection timer expires

What is holddown timer
An update with a hop count higher than the metric recorded in the routing table will cause the route to go into holddown for 180 seconds

What is the command to manipulate different timers on RIP
timers basic update invalid holddown flush
Timers should be change for all routers in the RIP domain

What features employed by RIP
Split horizon with poison reverse and triggered updates

What is triggered update
Generate when a metric for a route is change
Include only the entry that has been changed
Does not cause receiving router to reset its timers

What is silent host in RIP
Do not generate RIP updates
Listen for the updates and update their internal routing table


FlashCards For Quick Learning and Understanding



Wednesday, October 5, 2016

Virtualization on Cisco ASA

What is virtualization
Enables physical firewall to be partitioned into multiple standalone firewalls


How each standalone firewall is define
·         Behaves an independent entity
·         Has its own configuration, interface security polices, routing table and administrators


What these virtual firewall are known in Cisco ASA
Security contexts.

Where can we use security contexts or virtual firewalls
-In service provider network
        No need to buy additional physical firewall

-Large enterprise
        Implementing different security policies for each department
-Integrating many physical firewall and its security polices into one physical           firewall




-Reduce operational cost and increase efficiency

Which hardware support virtualization
·         Supported on Cisco ASA 5510 through Cisco ASA 5580
·         Not supported on Cisco ASA 5505
·         Not supported on Cisco ASA 5510, if it has base license

How Cisco ASA is divided in virtual firewall environment
Divided into three types
·         System execution space
·         Admin Context
·         User contexts also known as customer contexts

System Execution space
What is the use system execution space
Define attributes and settings for other security contexts

Which three important setting can be done in system execution space
·         Context name
·         Location of context startup configuration
·         Interface allocation

Which setting could not be define in system execution space
Layer or Layer 3 interface or any network setting

What is the name given context startup configuration
configlet


Which additional settings can be done in system execution space
-Interface
        Speed, duplex, enable or disable interface
-Banner
        Login banner
-Boot
        Parameter for loading image
-Activation key, Resource management, File management, Firewall mode
-Transparent mode
-Failover
-NTP
-Mac-address
        Auto-generate mac address for each context
-Prompt

        Session prompt



Buy Virtualization Part 1 PDF 


Cisco ASA Virtual Firewall Part 1

Sunday, September 25, 2016

Firewall Mode Basic




Which are the two modes of Cisco ASA firewall
Routed and Transparent

What is the default mode of Cisco ASA
Routed

Routed Mode

How ASA acts in routed mode
As a router hop in the network

What are the features of routed mode
  • Support many interfaces
  • Each interface requires an IP address
  • Each interface belong to different subnet


Can we share interfaces between contexts
Yes

Which routing protocol supported in single context routed mode
OSPF, EIGRP and RIP

Which routing protocol supported in multiple context routed mode
Static routes only

Transparent firewall

Does transparent firewall acts a router hop in the network
No

What is transparent firewall
Layer 2 firewall

What are the other names for transparent firewall
Bump in the wire or stealth firewall

Does transparent firewall seen as a router hop in tht network
No

What are the features of transparent firewall
  • Connect same network on inside and outside interface
  • No need to configure IP address on interfaces
  • Both interface belong to same subnet



















What is the benefit of using transparent firewall
Easy to deploy into an existing network



Cisco ASA Firewall Mode PDF