WIXLIB

xiEtherChannel Configuration114Configuring a PAgP EtherChannel114Configuring a LACP EtherChannelTroubleshooting an EtherChannelExam Preparation Tasks115116120Review All Key Topics120Complete Tables and Lists from MemoryDefine Key Terms120120Command Reference to Check Your MemoryChapter 7Traditional Spanning Tree Protocol“Do I Know This Already?” QuizFoundation Topics120123123126IEEE 802.1D OverviewBridging Loops126126Preventing Loops with Spanning Tree Protocol129Spanning-Tree Communication: Bridge Protocol Data UnitsElecting a Root BridgeElecting Root Ports131133Electing Designated PortsSTP States137STP Timers139Topology ChangesTypes of STP135141146Common Spanning Tree147Per-VLAN Spanning Tree147Per-VLAN Spanning Tree PlusExam Preparation TasksReview All Key Topics147149149Complete Tables and Lists from MemoryDefine Key TermsChapter 8149Spanning-Tree Configuration151“Do I Know This Already?” Quiz151Foundation TopicsSTP Root Bridge154154Root Bridge Placement154Root Bridge Configuration157149130

xiiCCNP SWITCH 642-813 Official Certification GuideSpanning-Tree Customization161Tuning the Root Path Cost161Tuning the Port ID163Tuning Spanning-Tree ConvergenceModifying STP Timers164164Redundant Link Convergence167PortFast: Access-Layer Nodes167UplinkFast: Access-Layer Uplinks168BackboneFast: Redundant Backbone PathsMonitoring STP170171Exam Preparation TasksReview All Key Topics173173Complete Tables and Lists from MemoryDefine Key Terms173173Use Command Reference to Check Your MemoryChapter 9Protecting the Spanning Tree Protocol Topology“Do I Know This Already?” QuizFoundation Topics177180Protecting Against Unexpected BPDUsRoot Guard180180BPDU Guard181Protecting Against Sudden Loss of BPDUsLoop GuardUDLD182183184Using BPDU Filtering to Disable STP on a PortTroubleshooting STP ProtectionExam Preparation Task188Review All Key Topics188Define Key Terms186187Complete Tables and Lists from Memory188188Use Command Reference to Check Your MemoryChapter 10173Advanced Spanning Tree Protocol“Do I Know This Already?” QuizFoundation Topics193196Rapid Spanning Tree ProtocolRSTP Port Behavior196196193188177

xiiiBPDUs in RSTP197RSTP Convergence198Topology Changes and RSTPRSTP Configuration201202Rapid Per-VLAN Spanning Tree ProtocolMultiple Spanning Tree ProtocolMST OverviewMST Regions203204206206Spanning-Tree Instances Within MSTMST Configuration207209Exam Preparation TasksReview All Key Topics211211Complete Tables and Lists from MemoryDefine Key Terms211212Use Command Reference to Check Your MemoryChapter 11Multilayer Switching215“Do I Know This Already?” QuizFoundation Topics215218InterVLAN Routing218Types of Interfaces218Configuring InterVLAN RoutingMultilayer Switching with CEFTraditional MLS OverviewCEF Overview221222Forwarding Information BaseAdjacency Table222226Packet Rewrite229Configuring CEF229Verifying Multilayer Switching230Verifying InterVLAN RoutingVerifying CEF219221230232Using DHCP with a Multilayer SwitchConfiguring an IOS DHCP ServerConfiguring a DHCP RelayExam Preparation TasksReview All Key Topics233235235237237Complete Tables and Lists from Memory237212

xivCCNP SWITCH 642-813 Official Certification GuideDefine Key Terms237Use Command Reference to Check Your MemoryPart IIIDesigning Campus NetworksChapter 12Enterprise Campus Network Design241“Do I Know This Already?” QuizFoundation Topics249251Distribution Layer251251Modular Network DesignSwitch BlockCore Block243247Predictable Network ModelCore Layer252254259Exam Preparation TasksReview All Key Topics263263Complete Tables and Lists from MemoryDefine Key TermsChapter 13243247Hierarchical Network DesignAccess Layer237263Layer 3 High Availability265“Do I Know This Already?” QuizFoundation Topics263265268Router Redundancy in Multilayer SwitchingPacket-Forwarding Review268Hot Standby Router Protocol269Virtual Router Redundancy ProtocolGateway Load Balancing ProtocolVerifying Gateway Redundancy277280289Supervisor and Route Processor RedundancyRedundant Switch Supervisors290Configuring Supervisor Synchronization293Exam Preparation Tasks295Review All Key TopicsDefine Key Terms289289Configuring the Redundancy ModeNonstop Forwarding268293295295Use Command Reference to Check Your Memory295

xvPart IVCampus Network ServicesChapter 14IP Telephony299301“Do I Know This Already?” QuizFoundation Topics301304Power over Ethernet304How PoE Works304Detecting a Powered Device304Supplying Power to a Device305Configuring PoEVerifying PoEVoice VLANs307307308Voice VLAN Configuration308Verifying Voice VLAN OperationVoice QoS311312QoS Overview313Best-Effort Delivery314Integrated Services Model314Differentiated Services ModelDiffServ QoS314315Implementing QoS for Voice318Configuring a Trust Boundary319Using Auto-QoS to Simplify a ConfigurationVerifying Voice QoS324Exam Preparation Tasks327Review All Key Topics327Complete Tables and Lists from MemoryDefine Key Terms327327Use Command Reference to Check Your MemoryChapter 15Integrating Wireless LANs331“Do I Know This Already?” QuizFoundation Topics321331335Wireless LAN Basics335Comparing Wireless and Wired LANsAvoiding Collisions in a WLANWLAN Building Blocks338Access Point Operation340336335328

xviCCNP SWITCH 642-813 Official Certification GuideWireless LAN CellsWLAN Architecture341344Traditional WLAN Architecture344Cisco Unified Wireless Network ArchitectureWLC Functions346349Lightweight AP Operation350Traffic Patterns in a Cisco Unified Wireless NetworkRoaming in a Cisco Unified Wireless NetworkIntracontroller Roaming355Intercontroller Roaming356Mobility Groups361Configuring Switch Ports for WLAN Use361Configuring Support for Autonomous APsConfiguring Support for LAPsExam Preparation TasksReview All Key Topics365365Securing Switched NetworksChapter 16Securing Switch Access367369“Do I Know This Already?” QuizPort Security363365Part VFoundation Topics361362Configuring Support for WLCsDefine Key Terms354369373373Port-Based Authentication802.1x Configuration376376802.1x Port-Based Authentication ExampleMitigating Spoofing AttacksDHCP Snooping379IP Source Guard381Dynamic ARP Inspection383Best Practices for Securing SwitchesExam Preparation TasksReview All Key Topics385389389Complete Tables and Lists from MemoryDefine Key Terms378378389389Use Command Reference to Check Your Memory390352

xviiChapter 17Securing with VLANs393“Do I Know This Already?” QuizFoundation Topics396VLAN Access Lists396VACL ConfigurationPrivate VLANs393396397Private VLAN Configuration399Configure the Private VLANs399Associate Ports with Private VLANs400Associate Secondary VLANs to a Primary VLAN SVISecuring VLAN Trunks402Switch Spoofing402VLAN Hopping404Exam Preparation TasksReview All Key Topics407407Complete Tables and Lists from MemoryDefine Key Terms407407Use Command Reference to Check Your MemoryPart VIFinal Exam PreparationChapter 18Final Preparation408411413Exam Engine on the CD413Install the Exam Engine Software from the CD413Download and Activate the Practice Exam ContentActivating Other ExamsStudy Plan414414415Recall the Facts415Practice ConfigurationsUse the Exam Engine415416The Cisco Learning Network416Part VIIAppendixesAppendix AAnswers to the “Do I Know This Already?” QuizzesGlossaryIndex401419431440421

xviiiCCNP SWITCH 642-813 Official Certification GuideOn This Book’s Website:Appendix BSWITCH Exam Updates: Version 1.0On This Book’s CD:Appendix CMemory TablesAppendix DMemory Tables Answer Key

xixCommand Syntax ConventionsThe conventions used to present command syntax in this book are the same conventionsused in the IOS Command Reference. The Command Reference describes these conventions as follows: Boldface indicates commands and keywords that are entered literally as shown. Inactual configuration examples and output (not general command syntax), boldfaceindicates commands that are manually input by the user (such as a show command). Italic indicates arguments for which you supply actual values. Vertical bars ( ) separate alternative, mutually exclusive elements. Square brackets ([ ]) indicate an optional element. Braces ({ }) indicate a required choice. Braces within brackets ([{ }]) indicate a required choice within an optional element.

xxCCNP SWITCH 642-813 Official Certification GuideForewordCCNP SWITCH 642-813 Official Certification Guide is an excellent self-studyresource for the CCNP SWITCH exam. Passing this exam is a crucial step to attaining thevalued CCNP Routing and Switching certification.Gaining certification in Cisco technology is key to the continuing educational development of today’s networking professional. Through certification programs, Cisco validatesthe skills and expertise required to effectively manage the modern enterprise network.Cisco Press Certification Guides and preparation materials offer exceptional—andflexible—access to the knowledge and information required to stay current in your fieldof expertise or to gain new skills. Whether used as a supplement to more traditionaltraining or as a primary source of learning, these materials offer users the informationand knowledge validation required to gain new understanding and proficiencies.Developed in conjunction with the Cisco certifications and training team, Cisco Pressbooks are the only self-study books authorized by Cisco and offer students a series ofexam practice tools and resource materials to help ensure that learners fully grasp theconcepts and information presented.Additional authorized Cisco instructor-led courses, e-learning, labs, and simulations areavailable exclusively from Cisco Learning Solutions Partners worldwide. To learn more,visit http://www.cisco.com/go/training.I hope that you find these materials to be an enriching and useful part of your exampreparation.Erik UllandersonManager, Global CertificationsLearning@CiscoJanuary 2010

xxiIntroduction: Overview of Certification and How toSucceedProfessional certifications have been an important part of the computing industry formany years and will continue to become more important. Many reasons exist for thesecertifications, but the most popularly cited reason is that of credibility. All other considerations held equal, the certified employee/consultant/job candidate is considered morevaluable than one who is not.Objectives and MethodsThe most important and somewhat obvious objective of this book is to help you pass theCisco CCNP SWITCH exam (Exam 642-813). In fact, if the primary objective of thisbook were different, the book’s title would be misleading; however, the methods used inthis book to help you pass the SWITCH exam are designed to also make you much moreknowledgeable about how to do your job. Although this book and the accompanying CDhave many exam preparation tasks and example test questions, the method in which theyare used is not to simply make you memorize as many questions and answers as youpossibly can.The methodology of this book helps you discover the exam topics about which you needmore review, fully understand and remember exam topic details, and prove to yourselfthat you have retained your knowledge of those topics. So this book helps you pass notby memorization, but by helping you truly learn and understand the topics. The SWITCHexam is just one of the foundation topics in the CCNP Routing and Switching certification, and the knowledge contained within is vitally important to consider yourself a trulyskilled routing and switching engineer or specialist. This book would do you a disserviceif it did not attempt to help you learn the material. To that end, the book can help youpass the SWITCH exam by using the following methods: Covering all the exam topics and helping you discover which exam topics you havenot mastered Providing explanations and information to fill in your knowledge gaps Supplying exam preparation tasks and example networks with diagrams and sampleconfigurations that all enhance your ability to recall and deduce the answers to testquestions Providing practice exercises on the exam topics and the testing process through testquestions on the CD

xxiiCCNP SWITCH 642-813 Official Certification GuideWho Should Read This Book?This book is not designed to be a general networking topics book, although it can beused for that purpose. This book is intended to tremendously increase your chances ofpassing the Cisco SWITCH exam. Although other objectives can be achieved from usingthis book, the book is written with one goal in mind: to help you pass the exam.The SWITCH exam is primarily based on the content of the Cisco SWITCH course. Youshould have either taken the course, read through the SWITCH coursebook or this book,or have a couple of years of LAN switching experience.Cisco Certifications and ExamsCisco offers four levels of routing and switching certification, each with an increasinglevel of proficiency: Entry, Associate, Professional, and Expert. These are commonlyknown by their acronyms CCENT (Cisco Certified Entry Networking Technician), CCNA(Cisco Certified Network Associate), CCNP (Cisco Certified Network Professional), andCCIE (Cisco Certified Internetworking Expert). There are others, too, but this bookfocuses on the certifications for enterprise networks.For the CCNP Routing and Switching certification, you must pass exams on a series ofCCNP topics, including the SWITCH, ROUTE, and TSHOOT exams. For most exams,Cisco does not publish the scores needed for passing. You need to take the exam to findthat out for yourself.To see the most current requirements for the CCNP Routing and Switching certification,go to Cisco.com and click Training and Events. There you can find out other exam detailssuch as exam topics and how to register for an exam.The strategy you use to prepare for the SWITCH exam might be slightly different fromstrategies used by other readers, mainly based on the skills, knowledge, and experienceyou already have obtained. For instance, if you have attended the SWITCH course, youmight take a different approach than someone who learned switching through on-the-jobtraining. Regardless of the strategy you use or the background you have, this book isdesigned to help you get to the point where you can pass the exam with the least amountof time required.How This Book Is OrganizedAlthough this book can be read cover to cover, it is designed to be fiexible and allow youto easily move between chapters and sections of chapters to cover only the material thatyou need more work with. The chapters can be covered in any order, although somechapters are related and build upon each other. If you do intend to read them all, theorder in the book is an excellent sequence to use.Each core chapter covers a subset of the topics on the CCNP SWITCH exam. The chapters are organized into parts, covering the following topics:

xxiiiPart I: New CCNP Exam Approaches Chapter 1, “The Planning Tasks of the CCNP Exams”—This chapter explains theroles of a networking professional in the context of the Cisco Lifecycle Model,where network tasks form a cycle over time. The CCNP SWITCH exam covers realworld or practical skills that are necessary as a network is designed, planned, implemented, verified, and tuned.Part II: Building a Campus Network Chapter 2, “Switch Operation”—This chapter covers Layer 2 and multilayer switchoperation, how various content-addressable memory (CAM) and ternary contentaddressable memory (TCAM) tables are used to make switching decisions, and howto monitor these tables to aid in troubleshooting. Chapter 3, “Switch Port Configuration”—This chapter covers basic Ethernet concepts, how to use scalable Ethernet, how to connect switch and devices together, andhow to verify switch port operation to aid in troubleshooting. Chapter 4, “VLANs and Trunks”—This chapter covers basic VLAN concepts, howto transport multiple VLANs over single links, how to configure VLAN trunks, andhow to verify VLAN and trunk operation. Chapter 5, “VLAN Trunking Protocol”—This chapter covers VLAN managementusing VTP, VTP configuration, traffic management through VTP pruning, and howto verify VTP operation. Chapter 6, “Aggregating Switch Links”—This chapter covers switch port aggregation with EtherChannel, EtherChannel negotiation protocols, EtherChannel configuration, and how to verify EtherChannel operation. Chapter 7, “Traditional Spanning Tree Protocol”—This chapter covers IEEE 802.1DSpanning Tree Protocol (STP) and gives an overview of the other STP types thatmight be running on a switch. Chapter 8, “Spanning-Tree Configuration”—This chapter covers the STP rootbridge, how to customize the STP topology, how to tune STP convergence, redundant link convergence, and how to verify STP operation. Chapter 9, “Protecting the Spanning Tree Protocol Topology”—This chaptercovers protecting the STP topology using Root Guard, BPDU Guard, and LoopGuard, and also how to use BPDU filtering and how to verify that these STP protection mechanisms are functioning properly. Chapter 10, “Advanced Spanning Tree Protocol”—This chapter covers RapidSpanning Tree Protocol (RSTP) for Rapid PVST and Multiple Spanning Tree (MST)Protocol. Chapter 11, “Multilayer Switching”—This chapter covers interVLAN routing,multilayer switching with Cisco Express Forwarding (CEF), and how to verify thatmultilayer switching is functioning properly.

xxivCCNP SWITCH 642-813 Official Certification GuidePart III: Designing Campus Networks Chapter 12, “Enterprise Campus Network Design”—This chapter covers differentcampus network models, hierarchical network design, and how to design, size, andscale a campus network using a modular approach. Chapter 13, “Layer 3 High Availability”—This chapter covers providing redundantrouter or gateway addresses on Catalyst switches and verifying that redundancy isfunctioning properly.Part IV: Campus Network Services Chapter 14, “IP Telephony”—This chapter covers how a Catalyst switch can provide power to operate a Cisco IP Phone, how voice traffic can be carried over thelinks between an IP Phone and a Catalyst switch, QoS for voice traffic, and how toverify that IP Telephony features are functioning properly. Chapter 15, “Integrating Wireless LANs”—This chapter covers different approaches to integrating autonomous and lightweight wireless access points into a switchedcampus network.Part V: Securing Switched Networks Chapter 16, “Securing Switch Access”—This chapter covers switch authentication,authorization, and accounting (AAA); port security using MAC addresses; portbased security using IEEE 802.1x; DHCP snooping; and dynamic ARP inspection. Chapter 17, “Securing with VLANs”—This chapter covers how to control trafficwithin a VLAN using access lists, implementing private VLANs, and monitoring traffic on switch ports for security reasons.Part VI: Final Exam Preparation Chapter

CCNP SWITCH 642-813 official certification guide / David Hucaby. p. cm. ISBN-13: 978-1-58720-243-8 ISBN-10: 1-58720-243-3 1. Virtual LANs—Examinations—Study guides. 2. Telecommunications engineers—Certification. 3. Cisco Systems, Inc.—Examinations—Study guides. I. Title. TK5