Cisco Press
201 W 103rd Street
Indianapolis, IN 46290
Cisco CCNA Exam #640-507
Certification Guide
Wendell Odom, CCIE #1624
fm.fm Page i Monday, March 20, 2000 4:55 PM
ii
Cisco CCNA Exam #640-507 Certification Guide
Wendell Odom
Copyright© 2000 Lacidar Unlimited, Inc.
Cisco Press logo is a trademark of Cisco Systems, Inc.
Published by:
Cisco Press
201 West 103rd Street
Indianapolis, IN 46290 USA
All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying, recording, or by any information storage and retrieval
system, without written permission from the publisher, except for the inclusion of brief quotations in a
review.
Printed in the United States of America 1 2 3 4 5 6 7 8 9 0
Library of Congress Cataloging-in-Publication Number: 99-67898
ISBN: 0-7357-0971-8
Executive Editor John Kane
Cisco Systems Program Manager Jim LeValley
Managing Editor Patrick Kanouse
Development Editor Christopher Cleveland
Senior Editor Jennifer Chisholm
Copy Editor Krista Hansing
Technical Editors David Barnes
Tinjin Chang
Steve Kalman
Frank Knox
Barbara Nolley
Team Coordinator Amy Lewis
Book Designer Gina Rexrode
Cover Designer Louisa Klucznik
Production Team Argosy
Indexer Christopher Cleveland
Copyright © 2000 Cisco Systems, Inc. All rights reserved. Printed in the USA. Access Registrar, AccessPath, Any to Any, AtmDirector, CCDA, CCDE, CCDP, CCIE, CCNA,
CCNP, CCSI, CD-PAC, the Cisco logo, Cisco Certified Internetwork Expert logo,
CiscoLink
, the Cisco Management Connection logo, the Cisco Net
Works
logo, the Cisco
Powered Network logo, Cisco Systems Capital, the Cisco Systems Capital logo, Cisco Systems Networking Academy, the Cisco Systems Networking Academy logo, the
Cisco Technologies logo, ConnectWay, ControlStream, Fast Step, FireRunner, GigaStack, IGX, Internet Quotient, Kernel Proxy, MGX, Natural Network Viewer, NetSonar,
Network Registrar,
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
European Headquarters
Cisco Systems Europe s.a.r.l.
Parc Evolic, Batiment L1/L2
16 Avenue du Quebec
Villebon, BP 706
91961 Courtaboeuf Cedex
France
Tel: 33 1 69 18 61 00
Fax: 33 1 69 28 83 26
American
Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
Tel: 408 526-7660
Fax: 408 527-0883
Asia Headquarters
Nihon Cisco Systems K.K.
David Barnes
is a Network Consulting Engineer for Cisco Systems in Dallas, Texas. He is a Cisco Certified
Design Professional, MCSE+Internet, and Master CNE. David specializes in large-scale network design and
optimization. He has designed, implemented, and managed networks for numerous Fortune 500 companies
over the past 10 years.
Tinjin Chang
, CCIE #5137 and CCSI, is an instructor and consultant for Chesapeake Network Solutions,
Inc. Tinjin has more than seven years of experience in planning, deploying, and troubleshooting complex
and large-scale IP and multiprotocol networks. Prior to joining Chesapeake, he was the lead network engi-
neer at Discover Brokerage, where his design and troubleshooting skills minimized downtime and guaran-
teed network availability. Discover Brokerage was named the Best Online Broker by
Barron’s
magazine for
the two years that he worked there.
Steve Kalman
is a data communications trainer. He is the author or tech editor of 12 CBT titles and has
been the author, tech editor, or trainer for eight instructor-led courses. Steve also is beginning a new dis-
tance-learning project as both author and presenter. In addition to those responsibilities, he runs a consulting
company, Esquire Micro Consultants, that specializes in data network design.
Frank Knox
, CCIE #3698, is a consultant and instructor currently involved in design, implementation, and
vi
Acknowledgments
Chris Cleveland, development editor for Cisco Press, is the best in the business! Chris made my job much
easier so that I could concentrate totally on the content. I’d probably refuse to write another book if Chris
wouldn’t be the development editor!
John Kane, executive editor for Cisco Press, provided a great deal of assistance, as usual. John’s frequent
e-mails and conference calls with Cisco’s Worldwide Training organization allowed him to gather the infor-
mation needed to guide Cisco Press’s Cisco certification books, and it also allowed me to focus on writing,
instead of sending e-mails and participating in conference calls! Thanks for everything, John.
Many people at Cisco Press have helped make this book a success. Amy Lewis helped greatly by taking care
of many details. Many others worked behind the scenes, and although I never met them, they are appreci-
ated! Cisco Press spends much more time producing the book than I do to simply write it—they have the
laborious tasks! Thanks to all on the team!
The technical editors deserve most, if not all, of the credit for making the content robust and complete.
There is no question that the book is immensely better after the edit process! While all the editors gave a
great deal of help, each brought some particular strengths to the task. Tinjin, thanks for pointing out topics
for which just a little deeper technical coverage would help to clear up a topic. Steve, thanks for the input
relating to points that come up in the many classes you teach. David, thanks for jumping into the fray in the
middle of the process and adding some great help. Barb, you get the most credit for removing errors from
the book! (Of course, I take full responsibility for any remaining errors.) And, to my old friend Frank,
thanks for all the help and the occasional good-bad joke in your editing comments! (An example: “What’s a
gateway? About 50 pounds!” If you didn’t get it, “gateway” sounds like “gate weigh.”) All the technical edi-
tors were an immense help.
fm.fm Page vi Monday, March 20, 2000 4:55 PM
vii
Chapter 7
Understanding Access List Security 454
Chapter 8
WAN Protocols and Design 514
Chapter 9
Scenarios for Final Preparation 638
Appendix A
Answers to the “Do I Know This Already?” Quizzes and Q&A Sections 700
Appendix B
Decimal to Hexadecimal and Binary Conversion Table 776
Index
786
fm.fm Page vii Monday, March 20, 2000 4:55 PM
viii
Table of Contents
“Do I Know This Already?” Quiz 22
The IOS and Its User Interface 26
Router Components 26
Command-Line Interface 28
Navigating the IOS CLI 30
Configuration Processes and the Configuration File 34
Example Configuration Process 37
Managing Configuration Files 39
Cisco Discovery Protocol (CDP) 45
Managing IOS Images 48
fm.fm Page viii Monday, March 20, 2000 4:55 PM
ix
Upgrading an IOS Image into Flash Memory 48
Choosing Which IOS Image to Load 50
Scenario 2-1 61
Questions on Scenario 2-1 62
Scenario 2-2 63
Questions on Scenario 2-2 63
Scenario 2-1 Answers 66
Scenario 2-2 Answers 66
Chapter 3
OSI Reference Model & Layered Communication 68
How to Best Use This Chapter 69
“Do I Know This Already?” Quiz 70
Answers to Task 3 for Scenario 3-1 126
Chapter 4
Bridges/Switches and LAN Design 128
How to Best Use This Chapter 129
“Do I Know This Already?” Quiz 130
LAN Overview 135
LAN Addressing 138
LAN Framing 140
Fast Ethernet and Gigabit Ethernet 142
LAN Standards 143
Bridging, Switching, and Spanning Tree 145
Transparent Bridging 145
LAN Switching 148
Comparison of LAN Segmentation Using Bridges, Switches, and Routers 155
Spanning Tree 158
Virtual LANs 171
VLAN Summary 177
LAN Switch Configuration 177
Basic 1900 Switch Configuration 178
Basic VLAN Configuration 187
VLAN Trunking Protocol (VTP) 194
Chapter 5
Network Protocols 210
How to Best Use This Chapter 211
Answers to Scenario 5-1: IP Addressing and Subnet Calculation 340
Answers to Scenario 5-2: IP Subnet Design with a Class B Network 341
Answers to Task 1 for Scenario 5-2 341
Answers to Task 2 for Scenario 5-2 342
Answers to Task 3 for Scenario 5-2 343
Answers to Scenario 5-3: IP Subnet Design with a Class C Network 344
Answers to Task 1 for Scenario 5-3 344
Answers to Task 2 for Scenario 5-3 345
Answers to Task 3 for Scenario 5-3 346
Answers to Scenario 5-4: IPX Examination 347
Answers to Scenario 5-5: IPX Configuration 349
Answers to Task 1 for Scenario 5-5 349
Answers to Task 2 for Scenario 5-5 350
Chapter 6
Routing 352
How to Best Use This Chapter 353
“Do I Know This Already?” Quiz 354
Distance Vector Routing Protocols 359
Comparing Routing Protocols 360
Distance Vector Routing 362
Configuration of RIP and IGRP 374
fm.fm Page xi Monday, March 20, 2000 4:55 PM
xii
The network Command 375
Answers to Task 1 for Scenario 6-3 449
Answers to Task 2 for Scenario 6-3 450
Answers to Task 3 for Scenario 6-3 450
Answers to Scenario 6-4: IPX Examination 450
Answers to Task 1 for Scenario 6-4 450
fm.fm Page xii Monday, March 20, 2000 4:55 PM
xiii
Answers to Task 2 for Scenario 6-4 452
Answers to Task 3 for Scenario 6-4 453
Answers to Task 4 for Scenario 6-4 453
Chapter 7
Understanding Access List Security 454
How to Best Use This Chapter 455
“Do I Know This Already?” Quiz 456
Filtering IP Traffic 460
Standard IP Access Lists 462
Extended IP Access Lists 466
Named IP Access Lists 472
Controlling vty Access with IP Access Lists 475
IP Access List Summary 476
Filtering IPX Traffic and SAPs 476
IPX Packet Filters (Access Lists) 478
Standard IPX Access Lists 479
Extended IPX Access Lists 484
DLCI Addressing and Frame Relay Switching 534
Network Layer Concerns with Frame Relay 538
How Address Mapping Works 543
Review: Basic Frame Relay Initialization 549
Compression 549
Frame Relay Configuration 551
Configuring Networks Without Subinterfaces 553
Configuring Networks with Point-to-Point Subinterfaces 555
Configuring Networks with Coexisting Point-to-Point and Multipoint
Subinterfaces 559
Payload Compression Configuration 563
ISDN Protocols and Design 567
ISDN Channels 567
ISDN Protocols 568
ISDN Function Groups and Reference Points 570
Typical Use of ISDN 574
PAP and CHAP 574
Multilink PPP 577
Dial-on-Demand Routing and ISDN Configuration 578
DDR Legacy Concepts and Configuration 580
A Comparison of WAN Options 590
Scenario 8-1: Point-to-Point Verification 608
Scenario 8-2: Frame Relay Verification 612
Scenario 8-3: Point-to-Point Configuration 619
Scenario 8-4: Frame Relay Configuration 620
Scenario 8-5: Frame Relay Configuration Dissection 623
fm.fm Page xiv Monday, March 20, 2000 4:55 PM
xv
Solutions to Scenario 9-3, Part B—Configuration 681
Scenario 9-3, Part C—Verification and Questions 684
Solutions to Scenario 9-3, Part C—Verification and Questions 696
fm.fm Page xv Monday, March 20, 2000 4:55 PM
xvi
Appendix A
Answers to the “Do I Know This Already?” Quizzes and Q&A Sections 700
Answers to the Chapter 2 “Do I Know This Already?” Quiz 701
Answers to the Chapter 2 Q&A Section 703
Answers to the Chapter 3 “Do I Know This Already?” Quiz 708
Answers to the Chapter 3 Q&A Section 710
Answers to the Chapter 4 “Do I Know This Already?” Quiz 715
Answers to the Chapter 4 Q&A Section 718
Answers to the Chapter 5 “Do I Know This Already?” Quiz 724
Answers to the Chapter 5 Q&A Section 728
Answers to the Chapter 6 “Do I Know This Already?” Quiz 745
Answers to the Chapter 6 Q&A Section 748
Answers to the Chapter 7 “Do I Know This Already?” Quiz 754
Answers to the Chapter 7 Q&A Section 757
Answers to the Chapter 8 “Do I Know This Already?” Quiz 766
Answers to the Chapter 8 Q&A Section 768
Appendix B
Decimal to Hexadecimal and Binary Conversion Table 776
fm.fm Page xvii Monday, March 20, 2000 4:55 PM
xviii
Throughout the book, you will see the following icons used for peripherals and other devices.
PC PC with
Software
Sun
Workstation
Macintosh
Terminal File
Server
Web
Server
Cisco Works
Workstation
Printer Laptop IBM
Mainframe
Front End
Processor
Cluster
Controller
fm.fm Page xviii Monday, March 20, 2000 4:55 PM
xix
Throughout the book, you will see the following icons used for networks and network connections.
Line: Ethernet
Line: Serial
Cisco professional certifications, and it would be a disservice to you if this guide did not help you truly learn
the material. So, this book will help you pass the CCNA exam by using the following methods:
• Helping you discover which test topics you have not mastered
• Providing explanations and information to fill in your knowledge gaps
• Supplying exercises and scenarios that enhance your ability to recall and deduce the answers to test
questions
• Providing practice exercises on the topics and the testing process via test questions on the CD
Who Should Read This Book?
This book is not designed to be a general networking topics book, although it can be used for that purpose.
This book is intended to tremendously increase your chances of passing the CCNA exam. Although other
objectives can be achieved from using this book, the book is written with one goal in mind: to help you pass
the exam.
So why should you want to pass the CCNA exam? To get a raise. To show your manager you are working
hard to increase your skills. To fulfill a requirement from your manager before he will spend money on
another course. To enhance your résumé. To please your reseller-employer, who needs more certified
employees for a higher discount from Cisco. To prove that you know the topic, if you learned via on-the-job
training (OJT) rather than from taking the prerequisite classes. Or, one of many other reasons.
Others who might want to use this book are those considering skipping Cisco’s Interconnecting Cisco Net-
work Devices (ICND) course to take Cisco’s Building Scalable Cisco Networks (BSCN) or Building Cisco
fm.fm Page xx Monday, March 20, 2000 4:55 PM
xxi
Multilayer Switched Networks (BCMSN) courses. If you can answer a high percentage of the questions in
this book, you should be ready for those courses.
Strategies for Exam Preparation
• Chapter 3, “OSI Reference Model & Layered Communication”
• The OSI reference model is mainly used today for comparison to other protocol architectures. The
purposes and meanings behind the use of a layered model are discussed in this chapter. The features
typically implemented at the various layers also are covered, and example protocols for each layer are
given. Much of this information is conceptual and is not necessarily needed in order to implement
networks, but it is covered on the exam.
Also covered in Chapter 3 are the concepts involved in typical operation of the OSI network and data
link layers. This conceptual discussion is vital to complete understanding of OSI Layer 2 and Layer
3 operation.
fm.fm Page xxi Monday, March 20, 2000 4:55 PM
xxii
• Chapter 4, “Bridges/Switches and LAN Design”
• LANs—in particular, the various forms of Ethernet—are covered in this chapter. The logic behind
transparent bridging and LAN switches is also discussed in depth, as is the operation of the Spanning-
Tree Protocol. LAN switch configuration on the 1900 series LAN switch, using its IOS CLI, is
covered as well.
• Chapter 5, “Network Protocols”
• This chapter discusses TCP/IP and NetWare protocols, as well as their configuration on Cisco routers.
IP addressing is covered in great depth, with many tools to prepare you for questions on the exam.
NetWare initialization flows and encapsulations are detailed as well.
• Chapter 6, “Routing”
particular parts of the chapter.
•
Foundation
—This is the core section of each chapter that explains the protocols, concepts, and
configuration for the topics in the chapter.
•
Foundation Summary
—Near the end of each chapter, a summary collects the most important tables
and figures from the chapter. The “Foundation Summary” section is designed to help you review the
key concepts in the chapter if you score well on the “Do I Know This Already?” quiz, and they are
excellent tools for last-minute review.
fm.fm Page xxii Monday, March 20, 2000 4:55 PM
xxiii
•
Scenarios
—Located at the end of most chapters, as well as in Chapter 9, the scenarios allow a much
more in-depth examination of a network implementation. Rather than posing a simple question
asking for a single fact, the scenarios let you design and build networks (at least on paper) without
the clues inherent in a multiple-choice quiz format.
• CD-based practice exam—The companion CD contains a large number of questions not included
in the text of the book. You can answer these questions by using the simulated exam feature, or by
another concept helps retention, and describing the same concept in several ways throughout a
chapter increases the number of connectors to the same piece of information.
fm.fm Page xxiii Monday, March 20, 2000 4:55 PM
xxiv
• By including exercise questions that supply fewer connectors than multiple-choice questions. This
helps you exercise recall and avoids giving you a false sense of confidence, as an exercise with only
multiple-choice questions might do. For example, fill-in-the-blank questions require you to have
better recall than a multiple-choice question.
• By pulling the entire breadth of subject matter together. A separate, larger chapter (Chapter 9)
contains scenarios and several related questions that cover every topic on the exam and gives
you the chance to prove that you have gained mastery over the subject matter. This reduces the
connectors implied by questions residing in a particular chapter and requires you to exercise other
connectors to remember the details.
• Finally, accompanying this book is a CD-ROM that has exam-like, multiple-choice questions. These
are useful for you to practice taking the exam and to get accustomed to the time restrictions imposed
during the exam.
fm.fm Page xxiv Monday, March 20, 2000 4:55 PM
fm.fm Page xxv Monday, March 20, 2000 4:55 PM