--- tags: - networking - l1 - flashcard-deck - cisco --- [Portal](../../../../library/portal/index.md) | **Level:** [L1: Foundations](../../../../library/portal/levels.md) | **Topics:** [Cisco CLI](../../../../library/portal/topics.md) | **Domain:** Networking id category difficulty tags question answer source_path cisco/a1c2e3f4a5b6 cisco easy cisco, cli, navigation What is the difference between a Cisco IOS prompt ending with > and one ending with #? "> means user EXEC mode (read-only, can only look). # means privileged EXEC mode (can make changes and run all show commands). You enter privileged mode with the ""enable"" command.\n\nRemember: Cisco IOS modes: User > Privileged (enable) > Global Config (configure terminal) > Interface Config (interface gi0/1). Each mode has different command access.\n\nRemember: nc (netcat) = 'network Swiss Army knife.' Test TCP: nc -zv host 80. Listen: nc -l 8080. Transfer files: nc -l 9999 > file on receiver, nc host 9999 < file on sender." training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/b2d3f4a5b6c7 cisco easy cisco, vlans, switching What is the difference between an access port and a trunk port on a Cisco switch? An access port belongs to exactly one VLAN and connects to end devices (servers, workstations). A trunk port carries multiple VLANs tagged with 802.1Q headers and connects switches together or to hypervisors.\n\nRemember: trunk ports carry multiple VLANs using 802.1Q tagging. Native VLAN traffic is untagged. Change native VLAN from 1 for security. training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/c3e4a5b6c7d8 cisco easy cisco, show-commands "What does ""show vlan brief"" display on a Cisco switch?" It shows the VLAN list and which ports are assigned to each VLAN. This is the go-to command for verifying port VLAN membership.\n\nRemember: VLAN = Virtual LAN. Segments a physical switch into logical broadcast domains. VLAN 1 is the default (and a security risk if left unmanaged).\n\nExample: switchport access vlan 10 assigns a port to VLAN 10. Trunk ports carry multiple VLANs between switches. training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/d4f5b6c7d8e9 cisco medium cisco, stp, troubleshooting What is PortFast on a Cisco switch, and what happens if it is missing on server ports? PortFast causes a port to skip the STP Listening and Learning states (which take 30 seconds on classic STP) and go directly to Forwarding. Without PortFast on server ports, servers may time out during DHCP or PXE boot because the port is not forwarding traffic for 30 seconds after link-up. training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/e5a6c7d8e9f0 cisco medium cisco, lacp, port-channel "In the output of ""show etherchannel summary,"" what do the flags (P), (I), and (s) mean for member ports?" (P) means the port is bundled in the port-channel and working. (I) means the port is stand-alone and NOT bundled — this is a problem indicator. (s) means the port is suspended, usually due to a configuration mismatch (e.g., VLAN or speed/duplex difference between member ports). training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/f6b7d8e9f0a1 cisco medium cisco, acl, security How do Cisco ACLs process packets, and what happens when no rule matches? "ACLs process packets top-to-bottom; the first matching rule wins. If no explicit rule matches, an implicit deny at the end drops the packet silently. Always add an explicit deny with the ""log"" keyword at the end to make drops visible.\n\nRemember: ACLs filter traffic. Standard ACLs (1-99) match source IP only. Extended ACLs (100-199) match source, destination, port, protocol." training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/a7c8e9f0a1b2 cisco medium cisco, troubleshooting, interfaces "What does ""is up, line protocol is down"" indicate on a Cisco interface, and what is the most common cause?" It means Layer 1 (physical link) is up but Layer 2 negotiation failed. The most common cause is a speed/duplex mismatch between the two ends of the link. Both sides should be auto-negotiation or both hardcoded to the same values. training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/b8d9f0a1b2c3 cisco hard cisco, stp, failure What is a unidirectional link failure in STP, and how does it cause a loop? A unidirectional link occurs when one strand of a fiber breaks — Switch A sends BPDUs but Switch B never receives them. Switch B concludes it is the root bridge and starts forwarding on ports that should be blocking, creating a Layer 2 loop and broadcast storm. The fix is enabling UDLD (UniDirectional Link Detection).\n\nRemember: STP prevents Layer 2 loops. Root bridge election, port states: Disabled -> Blocking -> Listening -> Learning -> Forwarding. Mnemonic: 'Don't Buy Lousy Laptops, Friend.' training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/c9e0a1b2c3d4 cisco hard cisco, acl, wildcard In a Cisco ACL, what does the wildcard mask 0.0.255.255 mean, and how does it differ from a subnet mask? "A wildcard mask is the inverse of a subnet mask. 0.0.255.255 means ""match the first two octets exactly, ignore the last two,"" equivalent to a /16 subnet mask (255.255.0.0). Wildcard bits set to 0 must match; bits set to 1 are ""don't care.""\n\nRemember: ACLs filter traffic. Standard ACLs (1-99) match source IP only. Extended ACLs (100-199) match source, destination, port, protocol." training/library/topics/cisco-fundamentals-for-devops/primer.md cisco/d0f1b2c3d4e5 cisco hard cisco, lacp, bonding Why is configuring a Cisco switch port-channel with LACP while the Linux server uses bonding mode 1 (active-backup) a misconfiguration? Linux bonding mode 1 (active-backup) only sends traffic on one NIC at a time and does not use LACP. The switch-side port-channel expects LACP negotiation from both links. The correct pairing is: Linux bonding mode 4 (802.3ad) with switch-side LACP, or Linux bonding mode 1 with individual switch ports (no port-channel). training/library/topics/cisco-fundamentals-for-devops/primer.md --- ## Wiki Navigation ### Related Content - [Cisco Fundamentals for DevOps](../../../../library/topics/cisco-fundamentals-for-devops/index.md) (Topic Pack, L1) — Cisco CLI - [Networking Deep Dive](../../../../library/topics/networking/index.md) (Topic Pack, L1) — Cisco CLI - [Scenario: VLAN Trunk Mismatch](../../../../library/scenarios/networking/vlan-trunk-mismatch.md) (Scenario, L2) — Cisco CLI