Protocol Questions
Aging Times
MACtable aging time- 300s (5 minutes)
ARPtable aging time- 120s
- Purpose: periodically clears useless IP-to-MAC address mappings to keep the table from growing too large and to reflect network topology changes
RIPtable aging time- 180s
TCPaging time- 3600s (1 hour)
UDPaging time- 300s
STP Protocol
-
Explain
STPLayer 2 Spanning Tree Protocol- Purpose: blocks redundant links to eliminate Ethernet loops while providing
hot standby
-
Describe the STP working process
- Step 1: Elect a single
root bridge- All switches send
BPDUsto compareBIDs; the one with thesmallest valuebecomes the root bridgeBIDcomposition: the first2bytes are thepriority, and the last6bytes are the switch’sMACaddress
- Default initial priority:
32768(thesmaller the value, the higher the priority) - In automatic election, since the priorities are the same,
MAC sizesare compared and the smallest is automatically elected
- All switches send
- Step 2: Elect the
root port- Calculate the cost from each port to the root bridge and select the
lowest cost- The
lower the bandwidth, the lower the cost - 100 Mbps cost 19; 1 Gbps cost 4; 10 Gbps cost 2
- The
- If ports have
equalcosts, compare the switch BPDUs; the smallest wins - If
all of the aboveare identical, select the port on the local switch with thesmallest port number, e.g., port 1- A
fallback strategyfor extremelyrarecases
- A
- Calculate the cost from each port to the root bridge and select the
- Step 3: Elect the
designated portAll ports on the root bridge are designated portsNon-root bridges have only one designated port- All ports except the root port go through the root port election mechanism again; the one with the lowest cost becomes the designated port
- Step 4: Port state transitions
Non-designated ports enter the blocking state- Root ports and designated ports enter
listening and learning, then enter theforwarding stateListening: sends and receives BPDUs to confirm there is no loop conflict- If there is a loop conflict, enter blocking and begin
re-electinga new port - If there is no loop conflict, enter learning
- If there is a loop conflict, enter blocking and begin
Learning: builds the MAC table and records paths
- Step 1: Elect a single
ARP
- What does the
ARPprotocol do?- Purpose: converts IP addresses into MAC addresses
- Process: broadcasts an
ARPrequest on the LAN to look up the MAC address corresponding to thetarget IP. Alldevices on the LANreceive the broadcast frame, but only the device holding the target IP replies directly inunicastform to theoriginal requesting device
Vlan
-
Is
VLandivision based on devices or ports?Based on switch ports
-
How do VLANs communicate with each other?
- Through
Layer 3 forwardingusing theVLANIFinterface of a Layer 3 switch
- Through
-
How many configuration modes do VLAN interfaces have?
Access- Used to connect
end-user devices - Only accepts and sends
untagged data framesof that VLAN
- Used to connect
Trunk- Used to connect network devices to each other
- Can carry data frames of
multipleVLANs, distinguishingdifferentVLAN traffic by the VLAN tag added in theframe header - Strips the VLAN tag from the data frame when sending
- The frame’s
defaulttag isvlan1
- The frame’s
- When it receives an
untagged frame, it tags it with its own tag- But this tag is only used for
internal transmissionwithin the switch; it is stripped again when the frame is sent out
- But this tag is only used for
Hybrid- A
combinationof Access and Trunk that can be flexibly configured - Can decide whether a VLAN tags data frames
- A
Switch Stacking Technology
- What problems can switch
stackingsolve?Expand the number of ports- Ports of added members immediately become usable ports
Simplify management- There is
onlyone management IP; all configuration changes take effect and are automatically synchronized to member switches
- There is
Improve reliability- Has a master/standby redundancy mechanism
- By default, one switch is elected as the master switch to handle control
- First compare
priority; if equal, compareMACsize; if still equal, compare thestack IDThe stack ID defaults to 1; a later-added switch conflicts with it and changes to 2, and so on- Identical MACs basically never happen
- First compare
- Designate
one or morestandby switches - If the master switch
fails, it switches over to the standby switch within milliseconds, basicallyimperceptibly
- By default, one switch is elected as the master switch to handle control
- Has a master/standby redundancy mechanism
Eliminate internal bandwidth bottlenecks- Member switches connect through
dedicatedstacking links, allowing the internal link bandwidth to be aggregated - The stacking bandwidth is used only for data exchange
betweenmembers and does not consume external bandwidth Stacking bandwidth = single link bandwidth x number of linksThe stacking bandwidth between different members must be calculated separately
- Member switches connect through
Routing
- What is a
floating route?- It is a
backuproute for the primary route - When the primary route fails, the backup route is enabled
- It
cannot be generated automatically; the route priority isconfiguredmanually- Huawei default priority 60, Cisco default 1
The smaller the value, the higher the priority
- It is a
Wireless
-
What wireless configuration modes are available by default?
Fat AP mode- The switch
connects to the fat AP; the APindependentlyhandles SSID broadcasting, user authentication, and data forwarding — all operations are done on the AP - The switch is only responsible for
power supplyanddata transmission - Suitable for small home networks
- The switch
Thin AP + AC mode- A thin AP finds the AC via
DHCP,downloads the configurationfrom the AC, and broadcasts the SSID issued uniformly by the AC - When a user connects to an AP,
authentication requestsare handed to the AC for processing - Can be configured to go
directly through the APorthrough the AC tunnel - Suitable for schools and large companies, making it easy to centrally manage many Wi-Fi points
- A thin AP finds the AC via
Agile AP networking- A central AP connects to the switch, communicates with the AC, and manages one or more
RUs - RUs connect to the central AP via
Ethernet cable, receive the configuration, and broadcast it - User data is
passedfrom the RU to the central AP, which thenforwardsit centrally to the switch - Suitable for hotels and dormitories where an RU is placed in each room; convenient cabling and easy management
- A central AP connects to the switch, communicates with the AC, and manages one or more
-
What are bypass mode and inline (direct) mode?
- Bypass mode
- The AC is
directly connectedto the core switch - AP data goes directly to the AC, and the AP
registerswith the AC - Data forwarding: after receiving user data, the AP sends it directly to the AC through the
CAPWAP tunnel - After the AC finishes processing, it forwards the data from the
core switchdirectly to the upper-layer network
- The AC is
- Inline (direct) mode
- The AC is
not directlyon the data forwarding path of the core switch - It hangs off
a portof the core switch or an aggregation switch - AP data first goes to the core switch, which then hands it to the bypass AC; after the AC finishes processing, it hands it back to the core switch to be forwarded out
- The AC is only responsible for
control and management; it doesnot handle the forwarding path
- The AC is
- Bypass mode
-
In bypass mode, will an AC failure affect wireless internet access?
- Without redundant backup,
yes, it directly affects internet access - With redundant backup
Dual-link hot standby- Thanks to
pre-connectionanddata synchronization, after startup the AP initiates connections to both the master AC and the standby AC, establishing twoindependentCAPWAP tunnels - When the master AC goes offline, the standby AC takes over within
milliseconds, with an imperceptible experience
- Thanks to
Dual-link cold standby- Since the data on the master AC and the standby AC is
not synchronizedin cold standby, after the master AC fails you mustwaitfor the following processAP discovers the ACEstablish the tunnelComplete registrationObtain configuration and user information
- During the
switchover, there will be a briefnetwork outageof a few minutes, and existingconnections will also drop
- Since the data on the master AC and the standby AC is
- Without redundant backup,
-
What are the differences in requirements on the AC device between bypass mode and inline (direct) mode? And what is the difference between the two modes?
In inline (direct) mode- Because the AC must directly process and forward all user data,
performance requirements are high Hard to scale and hard to replace; ifredundant backupislacking, replacement or upgrade causes a network outage
- Because the AC must directly process and forward all user data,
In bypass mode- The AC is mainly responsible for
control;data forwardingis done by the core switch, soperformance requirements are low Easy to scale and replace; after replacement, ordinary PSK authentication and local forwarding areunaffected- However, if
re-authenticationorkey renegotiationis enabled anddepends on the AC; or ifdynamic bandwidth schedulingrequiringcontinuous AC interactionis enabled, existing users will also lose connectivity - If 802.1 authentication is enabled without the
escape functionconfigured, user authentication into the network is affected during device replacement
- The AC is mainly responsible for
Dynamic Routing
- What dynamic routing protocols are there?
OSPFIS-ISBGPRIPEIGRP(Ciscoproprietary protocol)- IGRP (Cisco proprietary protocol, obsolete)
- What are the OSPF network types?
Broadcast- Supports multicast
- Supports automatic neighbor discovery
- Elects DR/BDR
Non-Broadcast Multi-Access (NBMA)- Does not support multicast
- Neighbors must be configured manually
- Elects DR/BDR
- Supports Frame Relay
Point-to-Point (P2P)- Only two nodes; automatic neighbor discovery
- Does not elect DR/BDR
- Like a PPP link with a dedicated line
Point-to-Multipoint (P2MP)- One node connected to multiple nodes
- Neighbors must be configured manually
- Does not elect DR/BDR
Virtual Link (VL)- A logical point-to-point link
- Neighbors configured manually
- Does not elect DR/BDR
- Used to connect to a non-adjacent area 0
- What is the basis for OSPF path selection?
- Computes the shortest path tree based on the
link-state database - Compares
cost values, which aredetermined by bandwidth; thelarger the bandwidth, the lower the cost - The router triggers the
SPFalgorithm, using itself as the root to compute thetotal costof all paths from the root to each destination network- Establishing a neighbor and synchronizing the link-state database triggers the router to run the SPF algorithm, which runs once
- When the network topology changes, the router synchronizes the link-state database and triggers SPF again
- Finally, the path with the
lowest total costis selected as theoptimal route - If several paths have
equal cost, OSPF enablesload balancingand uses all these pathsto forward datasimultaneously
- Computes the shortest path tree based on the
- When the OSPF cost value affects OSPF path selection, is it based on the incoming interface’s cost or the outgoing interface’s cost?
Incoming interface
- Why the incoming interface?
- Because the calculation is performed from the
local router's perspective - The router only knows
the cost of its own interfaces; when it receives an LSA from a neighbor, it adds the cost of the interface through which the LSAentersthe local router to the total cost
- Because the calculation is performed from the
- How does OSPF prevent loops?
Area partitioning: non-backbone areas can only communicate directly with backbone area 0, avoiding routing loops between areasSPF algorithm: each router computes the shortest path with itself as the root, generating a loop-free routing table- Rules for
propagating routing informationLSAs within an area are flooded only within that areaand never cross areas, preventing inter-area information confusion that could form loopsWhen an ABR passes routes to a non-backbone area, itfilters outrouting informationfromother backbone areas, ensuring that non-backbone areas canonlyobtainroutes of other backbone areas through backbone area 0
- What is the difference between a Stub area and an NSSA area in OSPF?
- A
Stub areamainlyfilters external LSAsand onlyallows onedefault route inAllrouters in the area must beconfigured as Stub;ASBRs are not allowed
- NSSA is an
extensionof Stub: besidesfilteringexternal LSAs, it alsoallowsexternal routesto be introduced into the area, propagated viaType7 LSA, then converted intoType5 LSAat theABRand propagated to the other areas- Routers in the area need to be
configured as NSSAandallowASBRsto exist, forintroducing external routesinto the OSPF domain
- Routers in the area need to be
- A
- How many types of LSAs does OSPF have, and what are they used for?
Type 1- Generated by
all routers, propagated only within thelocal area - Describes
the router's directly connected links
- Generated by
Type 2- Generated by the
DR, propagated only within thelocal area - Describes the
multicast capabilityof anMA network
- Generated by the
Type 3- Generated by the
ABR, propagated throughout theentire OSPF domain - Used for
inter-area route propagation
- Generated by the
Type 4- Generated by the
ABR, propagated throughout theentire OSPF domain except the area where the ASBR resides - Used to discover and
locate the ASBR
- Generated by the
Type 5- Generated by the
ASBR, propagated throughout theentire OSPF domain - Used to
describe external routes
- Generated by the
Type 6- Generated in multicast OSPF; rarely used in practice
- Used to describe multicast group membership
Type 7- Generated by the
NSSA area, propagated within theNSSA area - Used to
propagate external routes within the NSSA area, which are then propagated toother areasby theABR's Type5 LSA
- Generated by the
If you enjoyed this, leave a comment~