CCIE за год. Цикл 7. Тема 42. Вопросы.

1) Объясните разницу между CoPP и CPPr
DescriptionCoPPCPPr
Levels of control plane filtering availableaggregateThree: subinterfaces (host, transit, CEF-exception)
Support for Distributed or Hardware Switching Platformsyesno
CEF requirednoyes
Provides a mechanism for dropping packets that are directed to closed or nonlistening TCP/UDP portsnoyes
Ability to enforce limits on the number of packets for a specified protocol that are allowed in the control plane IP input queuenoyes
2) Что произойдет с CoPP и CPPr при глобальном отключении cef

CPPr requires Cisco Express Forwarding (CEF). If CEF is not enabled, policies applied to the control plane subinterfaces will not be effective. However, CoPP policies applied directly to the control plane interface will be effective.

3) Что такое aggregate path для control plane

aggregate path = aggregate control-plane interface = CoPP

4) Какими способами можно фильтровать трафик предназначенный интерфейсу host. Описать каждый.

CoPP, port filtering, and per-protocol queue thresholding protection features can be applied on the control plane host subinterface.

5) На основании каких критериев допускается классифицировать трафик

standart and external ACL,
match ip dscp,
match ip precedence,
match protocol arp.

6) Куда можно применить политику в исходящем направлении

output policing — only on the aggregate control-plane interface

7) Какая команда покажет статистику по применненным политикам

show policy-map [type policy-type] control-plane [pfx | slot slot number] [all] [host | transit | cef-exception] [{input | output} [class class-name]]

8) Какой протокол можно использовать в «match protocol» для классификации в CoPP

ARP

CCIE за год. Цикл 7. Тема 41. Вопросы.

1. Дайте объяснение работе Event Detector

Event detectors monitor the operational state of processes on an IOS device. These processes run at medium priority, are always operational, and on detecting an event, the event detector sends an alert that provides information about the specific event.

2. Дайте объяснение работе Event Server

The EEM server is a bridge between the policies and internal Cisco IOS subsystems used within the event detectors. Some of the functionality of the EEM server is to register events seen in the IOS subsystems, store information about an event, publish an event, request additional information about an event, register internal script directories, register Tcl scripts and applets, and process actions taken by user-defined scripts. The version of EEM is based on the IOS release cycle. It is important to understand the functionality of EEM based on the IOS image, so that you fully understand the features and functionality of the event detectors and what is supported.

3. Приведите примеры Event Detector’ов

Application-Specific Event Detector
CLI Event Detector
Counter Event Detector
Custom CLI Event Detector
Enhanced Object Tracking Event Detector
GOLD Event Detector
Interface Counter Event Detector
IP SLA Event Detector
NetFlow Event Detector
None Event Detector
OIR Event Detector
Resource Event Detector
RF Event Detector
RPC Event Detector
Routing Event Detector
SNMP Event Detector
SNMP Notification Event Detector
SNMP Object Event Detector
Syslog Event Detector
System Manager Event Detector
Timer Event Detector
Watchdog System Monitor (IOSWDSysMon) Event Detector for Cisco IOS
Watchdog System Monitor (WDSysMon) Event Detector for Cisco IOS Software Modularity

4. Приведите названия частей из которых состоить EEM Applet

Three pieces of information in EEM applet:
First you will give (Applet Name) then you will decide what (Event Detector) will be used to detect specific event then finally what (Actions) you would like to automatically run once this event occur .

5. Где сохраняется EEM Applet

Configuration file

6. Опишите шаги создания EEM Applet

— event manager applet <name>
— event <event name>
— action <action>

7. Опишите шаги создания EEM TCL

— Event Register Keyword (required)
— Environment must defines
— Namespace Import
— Entry Status
— Body (required)

8. Дайте объяснение понятию Multi Event support

Function to allow much more control by being able to correlate multiple events to trigger actions. Up to 6 event statements can be used in an applet and up to 8 events can be used in a Tcl script, with support for Boolean functions. This capability provides a unique capability to assist in troubleshooting complex issues with multiple dependencies, as well as more robust methods of configuring and monitoring devices by correlating events together.