ip services

• IP Services

Features and protocols that support IP network functionality including addressing, name resolution, time synchronization, redundancy, monitoring, and address translation. Used with/for

• DHCP (Dynamic Host Configuration Protocol) p#67/68

Protocol that automatically assigns IP addresses, subnet masks, gateways, and other parameters to clients. Used with/for

• DHCP Server

Device or service that offers IP address leases to clients. Used with/for

• DHCP Relay Agent

Forwards DHCP requests from clients to a remote DHCP server across subnets. Used with/for

• DHCP Snooping

Security feature that validates DHCP messages and builds a binding table. Used with/for

• DNS (Domain Name System) p#53

Hierarchical naming system that translates domain names to IP addresses. Used with/for

• NTP (Network Time Protocol) p#123

Protocol for synchronizing clocks across network devices. Used with/for

• Syslog p#514

Logging protocol for centralized collection of device messages and events. Used with/for

• SNMP (Simple Network Management Protocol) p#161/162

Protocol for collecting and organizing device information and statistics. Used with/for

• IP SLA (IP Service Level Agreement)

Cisco feature for actively monitoring network performance metrics like latency and jitter. Used with/for

• NAT (Network Address Translation)

Process of translating private IP addresses to public ones. Used with/for

• Static NAT

Manual one-to-one mapping of inside local to inside global address. Used with/for

• Dynamic NAT

Uses a pool of public addresses for translation. Used with/for

• PAT (Port Address Translation) / NAT Overload

Many-to-one translation using unique port numbers. Used with/for

• Inside Source NAT

Translates source addresses of traffic leaving the inside network. Used with/for

• HSRP (Hot Standby Router Protocol)

Cisco FHRP that provides gateway redundancy using a virtual IP. Used with/for

• FHRP (First Hop Redundancy Protocol)

Group of protocols (HSRP, VRRP, GLBP) providing redundant default gateways. Used with/for

• TFTP (Trivial File Transfer Protocol) p#69

Lightweight protocol for transferring files such as IOS images. Used with/for

• FTP (File Transfer Protocol) p#20/21

Standard protocol for file transfer with authentication. Used with/for

• SSH (Secure Shell) p#22

Secure protocol for remote device access and configuration. Used with/for

• Network Security

Mechanisms and features to protect network infrastructure, data, and access from threats. Used with/for

• AAA (Authentication, Authorization, Accounting)

Framework for controlling user access and tracking activity. Used with/for

• TACACS+ p#49

Cisco proprietary protocol for AAA, often used for device admin authentication. Used with/for

• RADIUS p#1812/1813

Open standard AAA protocol commonly used for user network access. Used with/for

• Port Security

Switch feature that limits MAC addresses allowed on a port. Used with/for

• Sticky MAC Learning

Port security feature that dynamically learns and saves MAC addresses. Used with/for

• Maximum MAC Addresses

Port security limit on number of allowed MACs per port. Used with/for

• Violation Modes (Protect/Restrict/Shutdown)

Actions taken when port security is violated. Used with/for

• DHCP Snooping

Validates DHCP messages and prevents rogue servers. Used with/for

• Dynamic ARP Inspection (DAI)

Validates ARP packets against DHCP snooping bindings. Used with/for

• IP Source Guard

Filters traffic based on DHCP snooping bindings. Used with/for

• ACL (Access Control List)

Sequential list of permit/deny statements to filter traffic. Used with/for

• Standard ACL

Filters based only on source IP address (numbered 1-99 or 1300-1999). Used with/for

• Extended ACL

Filters based on source/destination IP, protocol, and ports (numbered 100-199 or 2000-2699). Used with/for

• Named ACL

ACL identified by a name instead of number. Used with/for

• Implicit Deny All

Final rule in every ACL that denies unmatched traffic. Used with/for

• ACE (Access Control Entry)

Individual permit or deny statement within an ACL. Used with/for

• Wildcard Mask

Inverse of subnet mask used in ACLs to indicate which bits to ignore. Used with/for

• PACL (Port ACL)

ACL applied to Layer 2 switch ports. Used with/for

• VACL (VLAN ACL)

Filters traffic within a VLAN. Used with/for

• Storm Control

Limits broadcast, multicast, or unicast traffic rates on a port. Used with/for

• 802.1X

Port-based authentication using EAP for LAN/WLAN access. Used with/for

• Threat Mitigation

Techniques to counter common attacks like spoofing, DoS, and reconnaissance. Used with/for

• VPN (Virtual Private Network)

Creates secure encrypted tunnels over public networks. Used with/for

• Site-to-Site VPN

Connects entire networks securely over the internet. Used with/for

• Remote Access VPN

Allows individual users to securely connect to the corporate network. Used with/for

• IPsec (ESP p#50, AH p#51)

Suite of protocols for securing IP communications with authentication and encryption. Used with/for

• TLS (Transport Layer Security) p#443

Cryptographic protocol for secure web and application communication. Used with/for