Networking Exam Academy

It can be pretty daunting to go back and flip through hundreds of pages in a book to help you review for the ICND2 Exam, so I decided to make a quick little review sheet of important commands and terms.

Having a sheet that is quick and easy to read can really help you review and solidify the more detailed information that you have read about previously.

Click on the following links to read about these important topics on the ICND2 Exam:

PPP
Frame Relay
IPv4 to IPv6
Wild Card Masks
ACLs
EIGRP
STP Introduction
STP Explained
OSPF Part 1
OSPF Part 2
OSPF Part 3

Below you will find a little ICND2 Cram Sheet that I made to help you know bare minimum the commands necessary to configure Cisco switches and routers for the ICND2 Exam.

Switches

vlan, extended, vlan.dat, vmps, voice vlan, trunk, 802.1q, isl, vid, vtp, server, transparent, client, pruning, dtp, said, stp, root bridge, root port, designated port, bpdu, bid, blocking, listening, learning, forwarding, disabled, portfast, pvrst+ rstp, mstp, port security, dynamic, static, combo, dynamic sticky, 802.x port-based authentication.

Configure VTP
vtp mode server
vtp domain cisco
vtp password cisco

Configure 802.1Q Trunk
interface fa0/1
switchport mode trunk

Configure VLAN
vlan 2
name ACCOUNTING
interface range fastethernet 0/2 – 9
switchport access vlan 2

Configure PVRST+
spanning-tree mode rapid-pvst
spanning-tree vlan 2 root primary
spanning-tree vlan 2 root secondary

Configure Inter-VLAN Routing
interface fastethernet 0/0
ip address 192.168.1.1 255.255.255.0
interface fastethernet 0/0.2
ip address 192.168.2.1 255.255.255.0
encapsulation dot1q 2

OSPF

Configure Loopback First
interface loopback 0
ip address 192.168.1.254 255.255.255.0
no shutdown

Configure Interface
interface ethernet 0/0
ip address 192.168.1.2 255.255.255.0
no shutdown

Configure OSPF
router ospf 100
network 192.168.1.2 0.0.0.255 area 0
no shutdown

EIGRP

dual, successor route, feasible successor, advertised distance, feasible distance

Configure Interface for EIGRP
interface serial 0/0
bandwidth 64
ip address 192.168.1.2 255.255.255.0
no shutdown

Configure EIGRP
router eigrp 100
network 192.168.0.0

ACLs

inbound, outbound, topdown, standard – source; 1-99 & 1300-1999; near destination, extended – source & destination; protocol; port number, numbered, named, dynamic acl, reflexive acl, established, remark

Configure Standard Numbered ACL
access-list 1 deny 192.168.1.3 0.0.0.0
access-list 1 permit 192.168.2.0 0.0.0.255
interface ethernet 0/1
ip access-group 1 out

Configure Extended Numbered ACL
access-list 100 permit tcp any host 192.168.1.5 established
access-list 100 permit tcp any host 192.168.1.5 eq ftp
interface ethernet 0/1
ip access-group 100 in

Configure Standard Named ACL
access-list standard bob
permit 192.168.1.3 0.0.0.0
interface ethernet 0/0
ip access-group bob in

Configure Extended Named ACL
access-list extended billy
deny tcp 192.168.1.4 0.0.0.0 any eq 21
permit ip any any
interface ethernet 0/0
ip access-group billy out

Configure ACL for Telnet Sessions
access-list 2 permit 192.168.1.6 0.0.0.0
line vty 0 5
access-class 2 in

NAT

short term solution, inside local address, inside global address, outside local address, outside global address, static nat, dynamic nat, overloading nat(pat).

Configure Static NAT
ip nat inside source static 192.168.1.2 10.10.1.2
interface ethernet 0/0
ip nat inside
interface serial 0/0
ip nat outside

Configure Dynamic NAT
ip nat pool bob 132.23.43.100 132.23.43.200 netmask 255.255.255.0
ip nat inside source list pool bob
interface serial 0/0
ip address 132.23.43.100 255.255.255.0
ip nat outside
interface ethernet 0/0
ip address 192.168.1.7 255.255.255.0
ip nat inside
access-list 1 permit 192.168.1.0 0.0.0.255

Configure Overloading NAT (PAT)
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat inside source list 1 interface ethernet 0/0 overload
interface ethernet 0/0
ip nat inside
interface serial 0/0
ip nat outside

IPv6

long term solution, 128-bit, 3.4 * 10^38 ip addresses, private address – “FE” 8-F, site-local = “FE” C-F, link-local, loopback ::1, unspecified ::, interface identifiers are always 64 bits, stateless autoconfiguration, the 7th bit in the left most byte determines unique mac, RIPng, dual stack, tunneling, nat-pt, encapsulation protocol type 41 in ipv4 header.

Enable IPv6
ipv6 unicast-routing

Configure IPv6 Manually
interface ethernet 0/0
ipv6 address 2001:DB8:2222:7272::72/64

Configure IPv6 EUI-64
interface ethernet 0/0
ipv6 address 2001:DB8:2222:7272::/64 eui-64

Configure IPv6 Dual Stack
interface ethernet 0/0
ip address 192.168.1.2 255.255.255.0
ipv6 address 2001:DB8:2222:7272::/64

Configure RIPng
interface ethernet 0/0
ipv6 router rip RT0
ipv6 address 2001:DB8:2222:7272::/64 eui-64
ipv rip RT0 enable

VPNs

site-to-site, remote access, des, 3des, aes, rsa, md5, sha-1, psk, rsa signatures, ah, esp, dh, hdlc, ncp, lcp, pap, chap, dte, dce, local access rate, vc, dlci, pvc, lmi, fecn, becn, nbma, split horizon, atm, broadband, metro ethernet

Configure PPP
hostname RouterA
username RouterB password cisco
interface serial 0/0
ip address 192.168.1.1 255.255.255.0
encapsulation ppp
ppp authentication chap
!
hostname RouterB
username RouterA password cisco
interface serial 0/0
ip address 192.168.1.2 255.255.255.0
encapsulation ppp
ppp authentication chap

Configure Frame Relay
interface serial 0/0
ip address 192.168.1.1 255.255.255.0
encapsulation frame-relay cisco
bandwidth 64
frame-relay inverse-arp ip 16
frame-relay map

Configure Frame Relay
interface serial 0/0
ip address 192.168.1.1 255.255.255.0
encapsulation frame-relay cisco
bandwidth 64
frame-relay inverse-arp ip 16
frame-relay map

Configure Frame Relay Subinterfaces
interface serial 0/0
no ip address
encapsulation frame-relay
interface serial 0/0.110 point-to-point
ip address 192.168.1.1 255.255.255.0
bandwidth 64
frame-relay interface-dlci 110
interface serial 0/0.120 point-to-point
ip address 192.168.2.1 255.255.255.0
bandwidth 64
frame-relay interface-dlci 120

Configure Frame Relay Multipoint Subinterfaces
interface serial 0/0
no ip address
encapsulation frame-relay
interface serial 0/0.2 multipoint
ip address 192.168.1.1 255.255.255.0
bandwidth 64
frame-relay map ip 192.168.1.2 120 broadcast
frame-relay map ip 192.168.1.3 130 broadcast
frame-relay map ip 192.168.1.4 140 broadcast
no ip split-horizon