CCNA课程新内容北京邮电大学李涤非.pptVIP

Cisco Networking AcademyNew CCNA Curricula 李涤非 2008年10月10日 Contents 课程的发展变化 CCNA新课程增加的内容 Networking Academy ProgramOld Product Portfolio Networking Academy ProgramNew Product Portfolio 课程那哪些方面做了改进? 从只关心课程内容本身转到更注重学生的学习效果 根据不同背景的学生编写不同的教材(Discovery/Exploration) 力图使学生掌握在实际工作中所需的知识与技能 CCNA DiscoveryChanges Compared to Current CCNA CCNA Exploration Changes Compared to Current CCNA 1. 路由表的结构 Cisco IP routing table is a hierarchical structure -The reason for this is to speed up lookup process Level 1 and Level 2 Routes 1. 路由表的结构 Level 1 Routes -Have a subnet mask equal to or less than the classful mask of the network address. Level 1 route can function as -Default route -Supernet route -Network route 1. 路由表的结构 Level 1 Routes -Ultimate Route Includes either: -A next-hop address OR -An exit interface 1. 路由表的结构 Parent and Child Routes -A parent route is a level 1 route -A parent route does not contain any next-hop IP address or exit interface information 1. 路由表的结构 Parent and Child Routes - Level 2 routes, also known as Child Routes. - A level 2 route is a route that is a subnet of a classful network address. 1. 路由表的结构 1. 路由表的结构 2. 多路访问网中设置静态路由的特殊方法 2. 多路访问网中设置静态路由的特殊方法 3. 有类路由查找方式忽略超网路由 With no ip classless Drop 4. 二层攻击及抵御方法 MAC Address Flooding The attack tool is running on the host with MAC address C. This tool floods a switch with packets containing randomly generated source and destination MAC and IP addresses. Over a short period of time, the MAC address table in the switch fills up until it cannot accept new entries. 4. MAC Address Flooding攻击的解决方法－配置端口安全的命令 2950/3550命令手册上的说法： If you disable sticky learning by using the no switchport port-security mac-address sticky interface configuration command, the sticky secure MAC addresses are converted to dynamic secure addresses and are removed from the running configuration. 4. 二层攻击及抵御方法 4. 二层攻击及抵御方法 Spoofing Attacks - To prevent DHCP attacks, use the DHCP snooping features o