www.cisconetsolutions.

com

Class C Subnetting Table Application Ports

subnet mask subnet bits subnets host bits *hosts Application Port *ACL

255.255.255.0 none 1 8 254 FTP TCP 21 ftp

SSH TCP 22 ssh
255.255.255.128 1 2 7 126
Telnet TCP 23 telnet
255.255.255.192 2 4 6 62
DNS TCP | UDP 53 dns
255.255.255.224 3 8 5 30
TFTP UDP 69 tftp
255.255.255.240 4 16 4 14
HTTP TCP 80 www
255.255.255.248 5 32 3 6
NTP UDP 123 ntp
255.255.255.252 6 64 2 2 SNMP UDP 161 snmp
255.255.255.254 not recommended HTTPS TCP 443 https

255.255.255.255 - - - 1 *use protocol keyword or port number for ACL

*The number of hosts addresses does not include the network Administrative Distance (AD)
address and broadcast address. They are reserved for each
subnet and not assignable to network interfaces. For example Route Source AD Value
4 host bits = 24 = 16 - 2 = 14 host assignable addresses.
Directly Connected 0

Binary to Decimal Conversion Static Route 1

Default Route 1
0 0 0 0 0 0 0 0 =0
External BGP 20
1 1 1 1 1 1 1 1 = 255
EIGRP 90
128 64 32 16 8 4 2 1 bit value
OSPF 110
8 7 6 5 4 3 2 1 bit position
RIP 120

Network Cabling
Hex to Decimal (16 bits = group x 8 = 128 bits)
Cable Type Examples
Hexadecimal Binary Decimal
straight-through host to switch, switch to router A 1010 10
rollover console port only B 1011 11
crossover switch to switch, router to router C 1100 12

serial router to CSU/DSU D 1101 13

E 1110 14
Mnemonics F 1111 15

NITA = Network, Internet, Transport, Application

Route Selection
DORA = Discover, Offer, Request, Ack (DHCP)
 Install route = lowest administrative distance
PDU = Bit, Frame, Packet, Segment  Install route = lowest metric (same protocol)
 Select route = longest match rule (subnet length)
 Packet discarded when no default route exists

[email protected]
 www.cisconetsolutions.com

Creating and Applying ACLs

Distance Vector vs Link State Protocols
 apply extended ACL near source
OSPF
 apply standard ACL near destination
 link-state
 metric = link cost (bandwidth)  order ACL from most specific to least specific
 global view database topology table  one ACL can be applied inbound or outbound per
 shortest path to destination calculated interface per Layer 3 protocol
 event-triggered routing updates
 auto-summary routes disabled (default)
Standard ACL 1-99, 1300-1999
 scalable to large enterprise domains Extended 100-199, 2000-2699
 faster convergence than RIPv2 IP = all applications | TCP / UDP = single application
 load balancing 4 equal paths Wildcard mask is used to configure subnet range

EIGRP OSI Troubleshooting Approach

 distance vector
1. Cabling
 metric = bandwidth and delay (distance)
 only neighbor links are known 2. Network Interface
 best path = lowest distance to destination 3. IP Addressing
 only route changes sent to neighbors 4. DNS Server
 auto-summary routes disabled (IOS 15+)
5. Access Control Lists
 medium and large network domains
6. Application
 fastest convergence time
 load balancing 4 equal or unequal paths Troubleshooting Commands
 split horizon / route poisoning loop prevention
 show running-config
RIPv2  show ip interface brief
 distance vector  show ip route
 metric = hop count (distance)  show ip interfaces
 only neighbor links are known  show interfaces trunk
 best path = least number of hops to destination  show vlan brief
 regular full routing table updates to neighbors
 ipconfig /all
 auto-summary routes enabled (default)
 show access-lists
 not scalable
 preferred for smaller network domains
 show ipv6 [command]
 slow convergence
MAC learning = flooding for local host MAC address
 load balancing 6 equal paths
ARP = learn destination MAC address on remote subnet
 split horizon / route poisoning loop prevention
Routing = subnet (prefix), AD, metric, next hop address
DNS = resolve destination IP address to hostname
Cisco Default Settings
DHCP relay = DHCP server is on a remote subnet
switch port access mode (VLAN 1)
duplex/speed auto-negotiation Troubleshooting EIGRP

CDP enabled  network interface is shutdown

 AS number mismatch between neighbors
native VLAN 1
 K-value mismatch between neighbors
privilege level 15
 neighbor interface not in the same subnet
Trunk VLANs 1-4094 allowed  network command has a missing subnet
VTY disabled  network command has an incorrect subnet
Syslog disabled  passive interface is enabled

[email protected]
 www.cisconetsolutions.com

Troubleshooting OSPF Troubleshooting Trunk Interfaces

 interfaces are shutdown  native VLAN mismatch
 area ID mismatch between neighbors  switch port access mode configured
 timer mismatch between neighbors  VLANs not allowed (pruning)
 OSPF network type mismatch  duplex and speed mismatch
 neighbor interface are not in the same subnet  DTP mode incompatible for trunking
 interface not in subnet range of network command
 network command wildcard mask incorrect Troubleshooting EtherChannel
 passive interface is enabled  switch port duplex or speed mismatch
 PAgP and LACP protocol mismatch
IP Address Classes  protocol mode mismatch
 STP configuration mismatch
Class IP Address Range Default Mask
 VLANs not allowed (for trunk interfaces)
Class A 1.0.0.0 - 127.255.255.255 255.0.0.0  native VLAN mismatch (for trunk interfaces)

Class B 128.0.0.0 - 191.255.255.255 255.255.0.0 Troubleshooting VTP

Class C 192.0.0.0 - 223.255.255.255 255.255.255.0  switch uplink ports are not in trunk mode
 VTP domain name mismatch on switch
Class D 224.0.0.0 - 239.255.255.255 multicast  VTP domain password mismatch on switch
Class E 240.0.0.0 - 255.255.255.255 reserved  at least one switch not designated VTP server
 VTP server or transparent mode to add VLANs
 new switch added has higher revision number
RFC 1918 Private Addressing
Troubleshooting Inter-VLAN Routing
IP Address Range Subnet Mask
 Router subinterface not assigned to host VLAN
10.0.0.0 - 10.255.255.255 255.0.0.0  IP address of subinterface is not in host subnet
 trunk mode not enabled on switch link to router
172.16.0.0 - 172.31.255.255 255.240.0.0  trunk is pruning host VLANs on trunk interface

192.168.0.0 - 192.168.255.255 255.255.0.0 Troubleshooting ACLs

 missing permit ip any any statement

 incorrect order of statements
OSI Reference Model  incorrect IP address and/or wildcard mask
 incorrect application port number or keyword
OSI Layer Network Services
 incorrect interface or direction applied
application process-to-process communication
Protocol Quick Facts
presentation translation, encoding, encryption
 subnet / VLAN = broadcast domain
session logical communication between hosts.  firewall is OSI application layer
 switch default priority = 32768
transport reliability, error recovery, host-to-host
 MAC address aging timer = 300 seconds
network IP address, best path selection, next hop  VTP server mode is switch default
 OSPF network type broadcast (Ethernet)
data link MAC address, switching, encapsulation
 OSPF DR = router with highest router ID
physical electrical signaling, putting bits on wire  switch duplex mismatch causes collisions
 wireless LAN controllers manage AP / RF

[email protected]
 www.cisconetsolutions.com

permit/deny TCP UDP

ip tcp udp OSI transport layer OSI transport layer

source connection connectionless

ACL
error recovery error check / discard
destination
slower faster
protocol
guaranteed delivery best effort
interface
retransmission no retransmission
direction
HTTP, Telnet, FTP DHCP, SNMP, TFTP

EtherChannel
VLAN Range Description
LACP PAgP
VLAN 1-1005 normal VLAN range
open standard Cisco proprietary
VLAN 1006-4094 extended VLAN range
bundle = 8 ports + 8 standby bundle = 8 ports
VLAN 1, 1002-1005 auto-created / can’t delete
passive mode (default) auto mode (default)
VLAN 1006-4094 no pruning from trunk
active mode desirable mode
any port active mode any port desirable mode
= etherchannel = etherchannel Time Source Description

ntp peer backup time server

Switch Trunking
system calendar initialize software clock
DTP Mode Trunk Result software clock initially set by hardware clock
auto mode - auto mode (default) access port ntp server external time server polling
auto mode - desirable mode trunk negotiated ntp master polling of internal time server
desirable mode - desirable mode trunk negotiated
STP Port States (802.1d)
nonegotiate access port
 blocking
*static trunking (DTP turned off)  listening
 learning = populates MAC address table
IPv6 Addressing  forwarding

IPv6 Address Description RSTP Port States (802.1w)

 discarding = (older blocking/listening)
global unicast internet routable
 learning = populates MAC address table
multicast prefix FF00::/8 (send to group members)  forwarding

private globally unique, not internet STP Root Bridge = lowest MAC address unless
unique local
routable, starts with FD switch priority configured lower on a switch.
auto-configured, local subnet only, used for  know troubleshooting, subnetting, ACLs, trunking,
link-local
routing adjacency, prefix FE80::/64 routing protocols, static routing, DHCP, NAT
IPv6 host interface identifier, EUI-64 + msb
modified eui-64 https://www.cisconetsolutions.com
7th bit inverted

[email protected]