• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

CCENT/CCNA [H] study group

l3thal6 said:
1) You will see varying form factors, check out this page for a few (http://www.cisco.com/en/US/products/hw/routers/ps341/products_tech_note09186a00801a886f.shtml)

2) Each cable has a DTE and DCE end, the DCE end is connected to the device that provides clocking (typically a CSU/DSU) and the DTE connects to the terminal (typically YOUR router)

3)Since PPP isn't a shared medium it doesn't use l2 addresses similar to ethernet, it is point-to-point so the addressing isn't required. Frame Relay is NBMA and you can equate DLCI's to MAC addresses especially when you deploy global addressing.
Click to expand...
thank you, i have one more question. In packet tracer simulation software the serial cables are labeled either DTE or DCE (not the ends! the cable itself!) is this an oversimplification or perhaps just plain incorrect?
 
I have two routers, R2 and R_locked.

R_locked i have absolutely no access to (can't console, can't telnet, can't ssh, no web access) however it does have cisco's discovery protocol turned on (CDP).

R2 is connected to R_locked and the interface is up and the line protocol is up.
I can find R_locked's ip address by using "show cdp entry R_locked". However, i have a lab that is asking me to assign the very last ip address in R_locked's subnet to R2. I can just assume 255.255.255.252 and ping R_locked just fine, but is there any way for me to actually find what R_locked's actual subnet is?
 
serpretetsky said:
I have two routers, R2 and R_locked.

R_locked i have absolutely no access to (can't console, can't telnet, can't ssh, no web access) however it does have cisco's discovery protocol turned on (CDP).

R2 is connected to R_locked and the interface is up and the line protocol is up.
I can find R_locked's ip address by using "show cdp entry R_locked". However, i have a lab that is asking me to assign the very last ip address in R_locked's subnet to R2. I can just assume 255.255.255.252 and ping R_locked just fine, but is there any way for me to actually find what R_locked's actual subnet is?
Click to expand...

CDP details give you a lot of good info but sometimes you gotta dig for the info other ways.

How is the routing done between those two routers? static/ospf/eigrp/rip? You can check other details like that on R2 to gleen some info about R_locked. That is the purpose of a question like that, what do you remember about configuring and troubleshooting things for gathering information regarding a problem.

Let us know what you find out :) (psss sh ip route may be a good start)
 
Langly said:
CDP details give you a lot of good info but sometimes you gotta dig for the info other ways.

How is the routing done between those two routers? static/ospf/eigrp/rip? You can check other details like that on R2 to gleen some info about R_locked. That is the purpose of a question like that, what do you remember about configuring and troubleshooting things for gathering information regarding a problem.

Let us know what you find out :) (psss sh ip route may be a good start)
Click to expand...
unfortunetly, its ulimatly going to be my job to implement the routes in this lab (just static). So no surprise, "show ip route" only shows my directly connected network, nothing else. I'm fairly certain R_locked isn't broadcasting any RIP information, as RIP is ip based and "debug ip packet" shows absolutely no activity on the ethernet and i know RIP spits out IP packets every 30 seconds or so. I'm not as familiar with the other routing protocols so i'm not sure how i would detect if any of those are being used by R_locked.
 
serpretetsky said:
unfortunetly, its ulimatly going to be my job to implement the routes in this lab (just static). So no surprise, "show ip route" only shows my directly connected network, nothing else. I'm fairly certain R_locked isn't broadcasting any RIP information, as RIP is ip based and "debug ip packet" shows absolutely no activity on the ethernet and i know RIP spits out IP packets every 30 seconds or so. I'm not as familiar with the other routing protocols so i'm not sure how i would detect if any of those are being used by R_locked.
Click to expand...

Keep diggin! For CCENT they expect you to know static routing somewhat and RIP. CCNA you need to add on OSPF and EIGRP.

Can you post the full lab as the question shows and any of the info it shows on the routers besides what you get from logging into r2?
 
Langly said:
Keep diggin! For CCENT they expect you to know static routing somewhat and RIP. CCNA you need to add on OSPF and EIGRP.

Can you post the full lab as the question shows and any of the info it shows on the routers besides what you get from logging into r2?
Click to expand...

here's the Lab procedure:
Lab 4

R1 is configured correctly and is locked.
Addressing

R2
-Assign the last usable IP address in the subnet R1’s Fastethernet 0/0 is using.

R3
-Assign the second to last usable IP address in the subnet R1’s Fastethernet 1/0 is using.

R4
- Assign the first usable IP address in the subnet R1’s Fastethernet 2/0 is using.

R5
- Assign the first usable IP address in the subnet R1’s Serial 3/0 interface is using.

R6
- Assign the last usable IP address in the subnet R1’s Serial 3/1 interface is using.

Static Routes
- Implement host routes on R2 to reach router R3, R4, R5, and R6
- Implement default routes on R3, R4, R5 and R6.
- Can R2 ping 10.120.120.121 successfully. Why?
Click to expand...
and here is what it looks like:

cisco_lab.jpg


You'll noticed R_locked is actually R1, i just renamed it here to differentiate them better.

I managed to brute force the ip i could use by just trying the different subnet/ip configs starting from 255.0.0.0 and going up (i pinged it once in a while from R3 to check if i could still reach it). I ended at 255.240.0.0, so i guess thats it. Now i just need to do this 4 more times :(. Definitly wouldn't mind an easier way.

edit: argghh!!! the subnet is 255.224.0.0 not 255.240.0.0. DAMN THEE CISCO ROUTER! DAMN THEE TO HELL! Doesn't change the ip address though.
 
Last edited:
serpretetsky said:
edit: argghh!!! the subnet is 255.224.0.0 not 255.240.0.0. DAMN THEE CISCO ROUTER! DAMN THEE TO HELL! Doesn't change the ip address though.
Click to expand...

Fun-ish type lab. Where did you get it from cause If I had made this lab, I would of put an IP on R2 for you so you can actually figure out the subnet mask for everything in a more organized fashion. The routing aspect of it would be great practice as well as the subnetting aspect and knowing how to find the last usuable IP of things that aren't a /8, /16 or /24.
 
Langly said:
Fun-ish type lab. Where did you get it from cause If I had made this lab, I would of put an IP on R2 for you so you can actually figure out the subnet mask for everything in a more organized fashion. The routing aspect of it would be great practice as well as the subnetting aspect and knowing how to find the last usuable IP of things that aren't a /8, /16 or /24.
Click to expand...
i foudn it online while searching for free lab practice assignments. It was more tailored for GNS3 so I wouldn't be surprised if stuff is borked on it.

The second part of the lab (R3) I really don't get. I stopped at: 10.36.31.254 255. 255.255.224.0 as the last usable address. So i figure the second to last useable address is 10.36.31.253. For some reason the answer listed is 10.36.31.252. :confused: I'll just assume that's a typo unless you guys think otherwise.
 
If it was a lab for gns3 you may have been able to hover over the connection points to R1 and see what the IP's were. The key is, did you learn from it? :) some configuration labs for practicing can be had at http://www.freeccnaworkbook.com/ if you haven't gone there yet
 
Langly said:
If it was a lab for gns3 you may have been able to hover over the connection points to R1 and see what the IP's were. The key is, did you learn from it? :) some configuration labs for practicing can be had at http://www.freeccnaworkbook.com/ if you haven't gone there yet
Click to expand...
yeah, i learned that trying to figure out the subnet mask without any informatino is PITA :D. Thanks for the link!
 
7 days out from CCNP SWITCH, tonight I am write erasing my entire home network/lab (with every CCNP protocol configured) and recreating it from scratch.
 
l3thal6 said:
7 days out from CCNP SWITCH, tonight I am write erasing my entire home network/lab (with every CCNP protocol configured) and recreating it from scratch.
Click to expand...

Then once you are done with that... erase it again and start from scratch. Then once more for good measure :)
 
Mostly finished with my first reconfiguration, just need to bring my vSphere whitebox back up so I can make sure I setup DHCP snooping properly.

I basically took a sheet of paper and wrote down all of the protocols and features from memory and then configured them 1 by 1.
 
Headed off to sit the 640-802 again today, feeling pretty confident but at the same time I'm worried I might get thrown a curveball.
 
CCNA = Passed!

Just about shat myself when I read "Cisco policy requires that you wait a minimum of 180 days before retaking an exam (with an identical exam number)" on the score printout.. seeing as my last attempt was only 30 days ago. Looking further into it, this is only for exams you have passed. My previous failed attempt clearly states the 6 day wait period :)
 
shnelson said:
CCNA = Passed!

Just about shat myself when I read "Cisco policy requires that you wait a minimum of 180 days before retaking an exam (with an identical exam number)" on the score printout.. seeing as my last attempt was only 30 days ago. Looking further into it, this is only for exams you have passed. My previous failed attempt clearly states the 6 day wait period :)
Click to expand...

congratz
 
Passed SWITCH!

Taking a weeklong break from studying Cisco and then diving into ROUTE. I should be able to get it in 3 1/2 months.
 
lol@ 'Implementing IOS Network Security'

This book is hilarious in the first few chapters, going into detail about the Roman war machines and referencing Wikipedia lol.
 
Do you guys think that a Cisco 881 would work for CCNA Security? I have the switches and an ASA and I have an 881. From reading the topics it looks like it could work. Any input?
 
I would say your ASA combined with any router that can do IOS firewall would be ok. When I was reading through the ccna security book it didnt go really in depth at all
 
Another dumb question. Ok, so with frame relay, I have two configurations that are working. On one I have:

interface Serial0/0/0.1 multipoint
ip address 192.168.1.1 255.255.255.0
frame-relay interface-dlci 100
frame-relay interface-dlci 101

interface Serial0/0/0.1 multipoint
ip address 192.168.1.1 255.255.255.0
frame-relay map 192.168.1.2 255.255.255.0 100 broadcast
frame-relay map 192.168.1.3 255.255.255.0 101 broadcast

Both work. Is this because with the commands frame-relay map it's basically a "static" router whereas with the frame-interface dlci command it uses IARP and autocreates that route?
 
/usr/home said:
Another dumb question. Ok, so with frame relay, I have two configurations that are working. On one I have:

interface Serial0/0/0.1 multipoint
ip address 192.168.1.1 255.255.255.0
frame-relay interface-dlci 100
frame-relay interface-dlci 101

interface Serial0/0/0.1 multipoint
ip address 192.168.1.1 255.255.255.0
frame-relay map 192.168.1.2 255.255.255.0 100 broadcast
frame-relay map 192.168.1.3 255.255.255.0 101 broadcast

Both work. Is this because with the commands frame-relay map it's basically a "static" router whereas with the frame-interface dlci command it uses IARP and autocreates that route?
Click to expand...


I need to practice some frame relay so I'll lab this up at home and let you know. Vito or someone with more experience in that hopefully will chime in.

Also If you want to practice some CCNA security level items in the future let me know, I will have my ASA accessible via a public IP address again and we can setup some test vpn tunnels over the internet. Thats always a fun way to do things. I know Vito did a cool BGP lab a long time ago and its always more fun to setup a range of addresses with people from here and connect up to see what works and doesnt :)
 
Even though we call our current system classless its not truly classless it it?

I mean... when you subnet a network, you are still limited by the original network class right?

For example, is it appropriate to subnet a class C network (like 192.168.100.0) to be 255.0.0.0? I mean, thats not really even subnetting, its like supernetting i guess. Am I on the right track?
 
You can't subnet it that high because anything other than 192.168 is a public IP. The highest you can go is 192.168.255.255.
 
serpretetsky said:
Even though we call our current system classless its not truly classless it it?

I mean... when you subnet a network, you are still limited by the original network class right?

For example, is it appropriate to subnet a class C network (like 192.168.100.0) to be 255.0.0.0? I mean, thats not really even subnetting, its like supernetting i guess. Am I on the right track?
Click to expand...

Well for the Class C, no. That subnet is defined as the class C subnet range to be from
192.168.0.0 – 192.168.255.255 so the 168 has to be the same from what Odom teaches
 
/usr/home said:
Another dumb question. Ok, so with frame relay, I have two configurations that are working. On one I have:

interface Serial0/0/0.1 multipoint
ip address 192.168.1.1 255.255.255.0
frame-relay interface-dlci 100
frame-relay interface-dlci 101

interface Serial0/0/0.1 multipoint
ip address 192.168.1.1 255.255.255.0
frame-relay map 192.168.1.2 255.255.255.0 100 broadcast
frame-relay map 192.168.1.3 255.255.255.0 101 broadcast

Both work. Is this because with the commands frame-relay map it's basically a "static" router whereas with the frame-interface dlci command it uses IARP and autocreates that route?
Click to expand...

It seems to be that you need to use the map command when doing multi-point, but you can use interface-dlci when doing point-to-point. Correct?

How often do you guys actually run into these circuits? Are they still fairly common or are they more the "IRQ" section of the A+ exam? (You learn them in case you run across it, but nothing new really uses them. (Yes I know IRQs are still used but you rarely need to dick with them anymore))
 
wait... so are you guys saying i can subnet 192.168.0.0 with 255.255.0.0?
Or forget private ip's alltogether, can i subnet 196.0.0.0 with 255.0.0.0 effectively making this class C address have the network properties of a class A address?

If i can technically do it, is it frowned up in general? Are there instances in the real world where a class B or class C network has a subnet mask that is larger that the default mask of the class B or class C?

I have been under the assumption that subnetting a network always refers back to the original class network because of questions like:

How many subnets does 255.255.0.0 give you from a 10.230.1.9 ip address?

and that trying to "supernet" the other direction just is never done.
 
serpretetsky said:
wait... so are you guys saying i can subnet 192.168.0.0 with 255.255.0.0?
Or forget private ip's alltogether, can i subnet 196.0.0.0 with 255.0.0.0 effectively making this class C address have the network properties of a class A address?

If i can technically do it, is it frowned up in general? Are there instances in the real world where a class B or class C network has a subnet mask that is larger that the default mask of the class B or class C?

I have been under the assumption that subnetting a network always refers back to the original class network because of questions like:

How many subnets does 255.255.0.0 give you from a 10.230.1.9 ip address?

and that trying to "supernet" the other direction just is never done.
Click to expand...

the reason its class C is because its reserved as such, same with 172.16 and 10. being reserved

they are just addresses

the issue with 192.168.x.x with 255.0.0.0 is that there are public 192.x's that are in use, and you wont be able to find them without alot of work

thats my humble, uncertified belief on how it works atleast

I mostly live in small networks
 
ospf.png


I'm trying to learn about OSPF.

The two large circles represet OSPF areas, the top red one is area 0, the bottom area is area1.

The three routers in the middle are area border routers (R2, R4, and R3), they are setup with both area 0 and area 1.

R5 and R7 are only in area 0, R1 is only in area 1.

area 0 has no authentication
area 1 has md5 authentication turned on

All of my routers appear to show the correct neighbors with "show ip ospf neighbors"
all of my routers appear to show the correct routes with "show ip routes" EXCEPT ONE!!!

R1 (near the bottom) for some reason is ONLY showing directly connected routes. OSPF is running, and in fact R1 is giving correct route information to everyone else because everyone has the 87.0.0.0/8 network in there routes that ONLY R1 is connected to.

Why is R1 not showing any routes except directly connected?

Code: 
Router1#show running-config 
Building configuration...

Current configuration : 1241 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router1
!
!
!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
interface FastEthernet0/0
 ip address 192.168.0.10 255.255.255.252
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 area1password
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 192.168.0.14 255.255.255.252
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 area1password
 duplex auto
 speed auto
!
interface FastEthernet1/0
 ip address 87.65.43.1 255.0.0.0
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 area1password
 duplex auto
 speed auto
!
interface FastEthernet1/1
 ip address 192.168.0.18 255.255.255.252
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 area1password
 duplex auto
 speed auto
!
interface Vlan1
 no ip address
 shutdown
!
router ospf 1
 log-adjacency-changes
 network 192.168.0.14 0.0.0.0 area 1
 network 87.65.43.1 0.0.0.0 area 1
 network 192.168.0.10 0.0.0.0 area 1
 network 192.168.0.18 0.0.0.0 area 1
!
ip classless
!
!
!
!
!
!
!
line con 0
 logging synchronous
line vty 0 4
 login
!
!
!
end
 
haunter said:
the reason its class C is because its reserved as such, same with 172.16 and 10. being reserved

they are just addresses

the issue with 192.168.x.x with 255.0.0.0 is that there are public 192.x's that are in use, and you wont be able to find them without alot of work

thats my humble, uncertified belief on how it works atleast

I mostly live in small networks
Click to expand...
thx for the reply, so it seems class A,B,C really are a thing of the past.
 
serpretetsky said:
wait... so are you guys saying i can subnet 192.168.0.0 with 255.255.0.0?
Or forget private ip's alltogether, can i subnet 196.0.0.0 with 255.0.0.0 effectively making this class C address have the network properties of a class A address?

If i can technically do it, is it frowned up in general? Are there instances in the real world where a class B or class C network has a subnet mask that is larger that the default mask of the class B or class C?

I have been under the assumption that subnetting a network always refers back to the original class network because of questions like:

How many subnets does 255.255.0.0 give you from a 10.230.1.9 ip address?

and that trying to "supernet" the other direction just is never done.
Click to expand...

Lol, it took me a while to get that through my head as well. The only thing keeping it a "C" class address "are the people that be" of the internet. 192.169.1.1 is technically a class C IP, but it's subnet mask is not limited to /24 or higher. That said, a 11.1.3.2 address is technically a class A IP but it's not limited to /8.

The classes don't mean anything when you are talking about the public IP space. Any IP can have any subnet mask if it's a public IP. It's only when you get to your private IPs that you are limited to your subnet mask. 10.x.x.x is /8, 17.16.1.1-17.31.255.255 /20, and 192.168.x.x /16. Those are as "low" as you can for a subnet in the private ranges.

It's kind of confusing and I suck at explaining things. It'll eventually just make sense and you'll think you're retarded for not being able to figure it out before. :p
 
You must log in or register to reply here.
Back
Top