CCENT/CCNA ICND1 640-822 Official Cert Guide Third Edition Wendell Odom, CCIE No 1624 Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA ii CCENT/CCNA ICND1 640-822 Official Cert Guide CCENT/CCNA ICND1 640-822 Official Cert Guide, Third Edition Wendell Odom CCIE No 1624 Copyright © 2012 Pearson Education, Inc Published by: Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA All rights reserved No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review Printed in the United States of America First Printing October 2011 Library of Congress Cataloging-in-Publication Data is on file ISBN-13: 978-1-58720-425-8 ISBN-10: 1-58720-425-8 Warning and Disclaimer This book is designed to provide information about the Cisco ICND1 (640-822) and CCNA (640-802) exams Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied The information is provided on an "as is" basis The authors, Cisco Press, and Cisco Systems, Inc shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it The opinions expressed in this book belong to the author and are not necessarily those of Cisco Systems, Inc Trademark Acknowledgments All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark Corporate and Government Sales The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales, which may include electronic versions and/or custom covers and content particular to your business, training goals, marketing focus, and branding interests For more information, please contact: U.S Corporate and Government Sales 1-800-382-3419 corpsales@pearsontechgroup.com For sales outside the United States please contact: International Sales international@pearsoned.com iii Feedback Information At Cisco Press, our goal is to create in-depth technical books of the highest quality and value Each book is crafted with care and precision, undergoing rigorous development that involves the unique expertise of members from the professional technical community Readers' feedback is a natural continuation of this process If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through e-mail at feedback@ciscopress.com Please make sure to include the book title and ISBN in your message We greatly appreciate your assistance Publisher: Paul Boger Manager Global Certification: Erik Ullanderson Associate Publisher: Dave Dusthimer Business Operation Manager, Cisco Press: Anand Sundaram Executive Editor: Brett Bartow Technical Editors: Elan Beer, Teri Cook, Brian D’Andrea, Steve Kalman Managing Editor: Sandra Schroeder Development Editor: Andrew Cupp Project Editor: Mandie Frank Copy Editor: Sheri Cain Editorial Assistant: Vanessa Evans Book and Cover Designer: Gary Adair Composition: Mark Shirar Indexer: Larry Sweazy Proofreader: Sarah Kearns iv CCENT/CCNA ICND1 640-822 Official Cert Guide About the Author Wendell Odom, CCIE No 1624, has been in the networking industry since 1981 He has worked as a network engineer, consultant, systems engineer, instructor, and course developer; he currently works writing and creating certification tools He is author of all the previous editions of the Cisco Press CCNA Official Certification Guide series, as well as the CCNP ROUTE 642-902 Official Certification Guide, the CCIE Routing and Switching Official Certification Guide, Computer Networking First Step, the CCNA Video Mentor, IP Networking (a college textbook), and he is the primary networking consultant for the CCNA 640-802 Network Simulator from Pearson He maintains study tools, links to his blogs, and other resources at www.certskills.com v About the Technical Reviewers Elan Beer is a senior consultant and Cisco instructor specializing in multi-protocol network design, network configuration, troubleshooting, and network maintenance For the past 20 years, Elan has trained thousands of industry experts in routing, switching, and data center architectures Elan has been instrumental in large-scale professional service efforts designing and troubleshooting internetworks, performing network audits, and assisting clients with their short- and long-term design objectives Elan has a global perspective of network architectures via his international clientele Elan has used his expertise to design and troubleshoot networks in Malaysia, North America, Europe, Australia, Africa, China, and the Middle East Most recently, Elan has been focused on data center design, configuration, and troubleshooting, as well as service provider technologies In 1993, Elan was among the first to obtain Cisco’s Certified System Instructor (CCSI) certification, and in 1996, Elan was among the first to attain Cisco System’s highest technical certification: the Cisco Certified Internetworking Expert (CCIE) Since then, Elan has been involved in numerous large-scale telecommunications networking projects worldwide Elan is known internationally as a leader in network architecture and training and has worked on many high-profile projects assisting companies with their goal of implementing leading-edge technologies in their corporate infrastructure Teri Cook (CCSI, CCDP, CCNP, CCDA, CCNA, MCT, and MCSE 2000/2003: Security) has more than ten years of experience in the IT industry She has worked with different types of organizations in the private business and DoD sectors, providing senior-level network and security technical skills in the design and implementation of complex computing environments Since obtaining her certifications, Teri has been committed to bringing quality IT training to IT professionals as an instructor She is an outstanding instructor who uses real-world experience to present complex networking technologies As an IT instructor, Teri has been teaching Cisco classes for more than five years Brian D’Andrea (CCNA, CCDA, MCSE, A+, and Net+) has 11 years of IT experience in both medical and financial environments, where planning and supporting critical networking technologies were his primary responsibilities For the last five years, he has dedicated himself to technical training Brian spends most of his time with The Training Camp, an IT boot camp provider Using his real-world experience and his ability to break difficult concepts into a language that students can understand, Brian has successfully trained hundreds of students for both work and certification endeavors Stephen Kalman is a data security trainer He is the author or tech editor of more than 20 books, courses, and CBT titles His most recent book is Web Security Field Guide, published by Cisco Press In addition to those responsibilities, he runs a consulting company, Esquire Micro Consultants, which specializes in network security assessments and forensics Mr Kalman holds SSCP, CISSP, ISSMP, CEH, CHFI, CCNA, CCSA (Checkpoint), A+, Network+, and Security+ certifications and is a member of the New York State Bar vi CCENT/CCNA ICND1 640-822 Official Cert Guide Dedication For Hannah Odom, the best daughter I could ask for I love you, my girl! vii Acknowledgments You know, after writing books for 13 years now, I would think that there would be something normal, something repetitive, and that each book would pretty much follow the same process as others It now seems that normal is actually abnormal, and that requires everyone to think outside the box More so than probably any other editions of these books, these books really are the result of a team effort The biggest news relates to all the extras Cisco Press added to the package Thanks to Dave, Brett, Kourtnaye, Sandra, and all the folks at Cisco Press for going several extra miles to make this “extra” edition happen, and with so many extra valuable pieces I think the readers will appreciate the added value Now, on to the specifics First, my hat’s off to Drew Cupp Wow Between this book, the matching ICND2 Official Cert Guide, and another title, Drew and I went from having no books to working on three together all at once And they all fell into the same 5-month stretch from start to finish It makes my head hurt thinking about it Besides taking on extra work to get it done, Drew’s clarity of thought about how to get from here to there through the process, with so many different print, DVD, and online elements, wow—no way this book gets done without Drew Thanks, Drew: You da man! Brian, Teri, and Steve all did a great job technical editing the book Besides helping find mistakes and keeping the book accurate, each tech editor brought a different perspective to the process I hope we can work together on future editions And a special thanks to Elan Beer, the best tech editor in the business, for working on the new materials for this edition You know, it’s great when the person you rely on most at work is consistently helpful and always comes through, whether working on an opportunity or an issue But, when that person actually works for a partner company, it’s all the more impressive I am fortunate enough to have such an ally in Brett Bartow—thank you so much for walking this journey with me Mandie Frank gets the “hot potato” award for working as the project editor with this book and with ICND2 The nature of this project plus the ICND2 book at practically the same time can create some challenges Mandie handled them all with grace and aplomb, and she seamlessly managed the entire process with the rest of the production team Thanks, Mandie, and the whole group! And thanks especially for the extra attention to the pages review Thanks to Richard Bennett, who slaved on a short schedule on some figure improvements that I really wanted to include in this book and for his work on the question database Dude, Robin Williams would be proud! viii CCENT/CCNA ICND1 640-822 Official Cert Guide A special thank you goes to you readers, who write in with suggestions, possible errors, and especially those of you who post online at the Cisco Learning Network (CLN) Without question, the comments I receive directly and overhear by participating at CLN made this edition a better book Finally, thanks to my wife Kris for all her support with my writing efforts, her prayers, and understanding when the deadline didn’t quite match with our vacation plans this summer (Yes, that’s twice in a row that when this book revved, we cancelled vacation—you’re a doll!) And thanks to Jesus Christ—all this effort is just striving after the wind without Him ix Contents at a Glance Introduction Part I: xxvii Networking Fundamentals Chapter Introduction to Computer Networking Chapter The TCP/IP and OSI Networking Models Chapter Fundamentals of LANs Chapter Fundamentals of WANs Chapter Fundamentals of IPv4 Addressing and Routing Chapter Fundamentals of TCP/IP Transport, Applications, and Security Part II: LAN Switching 77 Chapter Operating Cisco LAN Switches Chapter Ethernet Switch Configuration Chapter 11 Wireless LANs 173 203 237 Chapter 10 Ethernet Switch Troubleshooting 273 305 IPv4 Addressing and Subnetting 335 Chapter 12 Perspectives on IPv4 Subnetting Chapter 13 Analyzing Classful IPv4 Networks Chapter 14 Converting Subnet Masks Chapter 16 Designing Subnet Masks 367 397 411 Chapter 17 Analyzing Existing Subnets Chapter 18 Finding All Subnet IDs 337 383 Chapter 15 Analyzing Existing Subnet Masks IPv4 Routing 427 459 479 Chapter 19 Operating Cisco Routers 481 Chapter 20 Routing Protocol Concepts and Configuration Chapter 21 Troubleshooting IP Routing Part V: 99 171 Ethernet LAN Switching Concepts Part IV: 17 47 Chapter Part III: Wide-Area Networks Chapter 22 WAN Concepts 591 593 Chapter 23 WAN Configuration 621 553 517 135 34 Appendix N: ICND1 Open-Ended Questions Part V: Wide-Area Networks—Answers Answer: interface serial ip addr 1.1.1.1 255.255.255.0 encapsulation ppp encapsulation ppp is all that is needed for PPP Answer: clock rate sets the physical (Layer 1) actual transmission rate, in bits per second, and only when a DCE cable has been plugged into that interface The bandwidth command, with units of kbps, does not affect Layer transmission rates Instead, it is used by Cisco IOS Software as its understanding of the Layer rate, for purposes such as calculation of routing protocol metrics Answer: A Protocol Type field has been added to allow support for multiprotocol traffic HDLC was not originally designed to allow for multiprotocol support Answer: The term modem is formed as a combination of the words modulation and demodulation Modulation means to vary or change a wave form to encode information A modem varies an analog electrical signal to encode information, representing binary digits, onto an analog signal Modulation refers to the creation of the analog signal based on a string of bits, and demodulation simply refers to a modem performing the reverse process upon receiving the analog signal Answer: Symmetric means that the speed in each direction of flow is the same, whereas asymmetric means that the speed in one direction is faster than in the other direction Asymmetric speeds might be a good choice because typical traffic flows require a much greater amount of data to flow in one direction, typically from a server to a client Asymmetric speeds allow the speed in one direction to be faster than it could be with symmetric speeds, accommodating the need for more bandwidth in one direction Answer: DSL provides high-speed Internet access to the home, exceeding downstream speeds of Mbps It supports concurrent voice and data, with the data service always being turned on—no dialing is required And the service speed does not degrade when more users are added to the network However, DSL simply will not be available to some people, based on the distance to the local CO or the availability of DSL services from the local telco Also, even when the home is close enough to the CO, sites farther from the CO might run slower than sites closer to the CO Part V: Wide-Area Networks—Answers Answer: DSLAM stands for DSL access multiplexer, with DSL meaning digital subscriber line The DSLAM is connected to the local loop, splitting off the voice frequencies (0 to 4000 Hz) for the voice switch in the CO It also interprets the higher frequencies as encoded digital signals, receiving the ATM cells sent over that digital signal, and forwards those ATM cells to the appropriate router Answer: ADSL, meaning asymmetric DSL, is the most popular The downstream speeds range from 1.5 Mbps to Mbps, with upstream speeds from 384 kbps to 1.024 Mbps The maximum distance is 18,000 feet (approximately 5500 meters) Answer: Both use a cable with two wires, using an RJ-11 connector 10 Answer: ANSI, IEEE, ETSI, ITU 35 This page intentionally left blank Network Simulator Lab Study Plan The CCNA 640-802 Network Simulator has 250 lab exercises, organized both by type (Skill Builder, Configuration Scenario, and Troubleshooting Scenario) and by major topic within each type When using this product along with the CCNA Official Exam Certification Library, the listing of labs in the Simulator easily correlates to the chapters in the book As such, it is difficult to know when to each lab when also reading the books This informal document lists tables that cross-references book chapters of the ICND1 and ICND2 Official Certification Guides, compared to the labs in the Simulator When using the books and simulator, you might want to read a chapter and then the labs related to that chapter as listed here ICND1 Skill Builder Labs Completion Dates After ICND1 Chapter Title Switch CLI Exec Mode Switch CLI Configuration Process I Switch CLI Configuration Process II Setting Switch Passwords Configuring Switch IP Settings Interface Settings I Interface Settings II Interface Settings III Switch Forwarding I Switch IP Connectivity I VLANs I VLANs II VLANs III Network Simulator Lab Study Plan Completion Dates After ICND1 Chapter Title Interface Status I 10 Interface Status II 10 Interface Status III 10 Interface Status IV 10 Switch Security I 10 Switch Security II 10 Switch Security III 10 Switch Security IV 19 Router CLI Exec Mode I 19 Router CLI Exec Mode II 19 Router CLI Configuration Process 19 Setting Router Passwords 19 Configuring Router IP Settings 19 Configuring Local Usernames 19 Configuring SSH 19 Migrating to a New IOS Image 19 Setting the Configuration Register 19 Comparing Configuration Files 19 Ignoring the Startup-Config File 19 Booting a New Router IOS 19 Terminal History I 19 Terminal History II 19 Topology Analysis 19 Configuring IP Addresses I 19 Configuring IP Addresses II 19 Configuring IP Addresses III 19 Configuring IP Addresses IV 20 Examining the IP Routing Table 20 Connected Routes 20 Static Routes I 20 Static Routes II 20 Static Routes III 20 Static Routes IV ICND1 Configuration Scenario Labs Completion Dates After ICND1 Chapter Title 20 Default Routes 20 IP Classless 20 Subnet Zero I 20 Subnet Zero II 20 Loopback Interfaces 20 RIP Configuration I 20 RIP Configuration II 20 RIP Configuration III 20 RIP Configuration IV 20 RIP Configuration V 20 RIP Configuration VI 20 PC IP Commands I 20 PC IP Commands II 20 PC IP Commands III 21 Using and Suspending Telnet Connections 21 Using debug 21 Testing Using pings with Hostnames 21 RIP Verification I 21 RIP Verification II 21 Configuring Hostnames 23 Serial Link Config I 23 Serial Link Config II 23 Serial Link Config III 23 Serial Link Config IV 23 Interface Status V 23 Interface Status VI ICND1 Configuration Scenario Labs Completion Dates After ICND1 Chapter Lab Title 10 Switch Interfaces and Forwarding 10 Switch IP Connectivity 10 Switch Security I Network Simulator Lab Study Plan Completion Dates After ICND1 Chapter Lab Title 10 Configuring VLANs I 19 The Initial Configuration Dialogue (Setup) 19 New Job I 19 Rebuild a Config 19 SSH and Telnet 20 Subnetting and Addressing I 20 Subnetting and Addressing II 20 Subnetting and Addressing III 20 Static Routing I 20 Static Routing II 20 Default Routes 20 RIP-2 Configuration I 20 RIP Configuration II 20 RIP Autosummary 20 IP and MAC Address Comparisons 20 IP Classless 23 Serial Link Config I ICND1 Troubleshooting Scenario Labs Completion Dates After ICND1 Chapter Lab Title 10 Switch Forwarding I 10 Port Security 21 Path Analysis I 21 Network Discovery I 21 Network Discovery II 21 IP Addressing and Routing 21 IP Routing I ICND2 Skill Builder Labs ICND2 Skill Builder Labs Completion Dates After ICND2 Chapter Title VLAN Config I VLAN Config II VLAN Config III VLAN Config IV VLAN Config V VTP Config I VTP Config II VTP Config III VTP Config IV VTP Config V Trunking Config I Trunking Config II Trunking Config III Trunking Config IV STP Analysis I STP Analysis II STP Config I STP Config II STP Config III Etherchannel IP Addressing I IP Addressing II IP Addressing III traceroute I Default Route I Zero Subnet Switch IP address ACL I ACL II ACL III Network Simulator Lab Study Plan Completion Dates After ICND2 Chapter Title ACL IV ACL V ACL VI Named ACL I Named ACL II Named ACL III ACL Analysis I Autosummary Routing Analysis I Traceroute II 12 EIGRP Serial Configuration I 12 EIGRP Serial Configuration II 12 EIGRP Serial Configuration III 12 EIGRP Serial Configuration IV 12 EIGRP Serial Configuration V 12 EIGRP Serial Configuration VI 12 EIGRP Frame Relay Configuration I 12 EIGRP Frame Relay Configuration II 12 EIGRP Frame Relay Configuration III 12 EIGRP Authentication I 12 EIGRP Authentication II 12 EIGRP Route Tuning I 12 EIGRP Route Tuning II 12 EIGRP Route Tuning III 12 EIGRP Route Tuning IV 12 EIGRP Neighbors I 13 EIGRP Neighbors II 13 EIGRP Neighbors III 11 OSPF Serial Configuration I 11 OSPF Serial Configuration II 11 OSPF Serial configuration III 11 OSPF Serial Configuration IV ICND2 Skill Builder Labs Completion Dates After ICND2 Chapter Title 11 OSPF Serial Configuration V 11 OSPF Serial Configuration VI 11 OSPF Router ID I 11 OSPF Router ID II 11 OSPF Frame Relay Configuration I 11 OSPF Frame Relay Configuration II 11 OSPF Frame Relay Configuration III 11 OSPF Authentication I 11 OSPF Authentication II 11 OSPF Metric Tuning I 11 OSPF Metric Tuning II 11 OSPF Metric Tuning III 13 OSPF Neighbors I 13 OSPF Neighbors II 13 OSPF Neighbors III 13 OSPF Neighbors IV 13 OSPF Neighbors V 14 Serial Configuration I 14 Serial Configuration II 14 Serial Authentication I 14 Serial Authentication II 16 Frame Relay Configuration I 16 Frame Relay Configuration II 16 Frame Relay Configuration III 16 Frame Relay Configuration IV 16 Frame Relay Configuration V 16 Frame Relay Verification I 16 Frame Relay Verification II 16 Frame Relay Verification III 18 NAT Configuration I 18 NAT Configuration II 18 NAT configuration III Network Simulator Lab Study Plan Completion Dates After ICND2 Chapter Title 18 NAT configuration IV 18 NAT configuration V 18 NAT configuration VI 18 NAT Configuration VII 19 IPv6 Address Configuration I 19 IPv6 Address Configuration II 19 IPv6 Address Configuration III 19 IPv6 Address Configuration IV 19 IPv6 Address Configuration V 19 IPv6 Address Configuration VI 19 IPv6 Address Configuration VII 19 IPv6 Address Configuration VII 19 IPv6 Address Configuration IX 19 IPv6 Routing Configuration I 19 IPv6 Routing Configuration II 19 IPv6 Routing Configuration III 19 IPv6 Hostnames ICND2 Configuration Scenarios Completion Dates After ICND2 Chapter Title VTP I VTP Transparent Mode VLAN Trunking I VLAN Trunking II STP Analysis I STP Configuration II IP Addressing and Configuration I IP Addressing and Configuration II IP Default Routing and Classless/Classful Default Routes Standard ACL I Extended ACL I ICND2 Troubleshooting Scenarios Completion Dates After ICND2 Chapter Title Extended ACL II 11 OSPF Config I 11 OSPF Config II 11 OSPF Config III 11 OSPF Metric Manipulation 12 EIGRP Config I 12 EIGRP Config II 12 EIGRP Metric Manipulation I 12 EIGRP Variance and Maximum Paths I 16 Frame Relay Config I 16 Frame Relay Inverse ARP 16 Frame Relay Correlation 18 NAT Config I 18 NAT Config II 19 IPv6 Config I 19 IPv6 Config II ICND2 Troubleshooting Scenarios Completion Dates After ICND2 Chapter Title Path Analysis I Path Analysis II 14 Path Analysis III 14 Path Troubleshooting I 16 Path Troubleshooting II 16 Path Troubleshooting III 14 Path Troubleshooting IV VLAN Troubleshooting I 14 OSPF Troubleshooting I 14 Routing Analysis III 16 Network Expansion 18 NAT 14 IP Routing II 10 FREE Online Edition Your purchase of CCENT/CCNA ICND1 640-822 Official Cert Guide includes access to a free online edition for 45 days through the Safari Books Online subscription service Nearly every Cisco Press book is available online through Safari Books Online, along with more than 5,000 other technical books and videos from publishers such as Addison-Wesley Professional, Exam Cram, IBM Press, O’Reilly, Prentice Hall, Que, and Sams SAFARI BOOKS ONLINE allows you to search for a specific answer, cut and paste code, download chapters, and stay current with emerging technologies Activate your FREE Online Edition at www.informit.com/safarifree STEP 1: Enter the coupon code: NOWUHFH STEP 2: New Safari users, complete the brief registration form Safari subscribers, just log in If you have difficulty registering on Safari or accessing the online edition, please e-mail customer-service@safaribooksonline.com .. .CCENT /CCNA ICND1 640- 822 Official Cert Guide Third Edition Wendell Odom, CCIE No 1624 Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA ii CCENT /CCNA ICND1 640- 822 Official... Exams Take ICND1 (640- 822) Exam pass CCENT Certified Take ICND2 (640- 816) Exam pass Take CCNA (640- 802) Exam pass CCNA Certified As you can see, although you can obtain the CCENT certification... certification: CCENT xxviii CCENT /CCNA ICND1 640- 822 Official Cert Guide Figure I-1 shows the basic organization of the certifications and the exams used for getting your CCENT and CCNA certifications