McGraw hill cisco certified network associate study guide exam 640802 apr 2008 ISBN 0071497285 pdf

Praise for Richard Deal’s CCNA Study Guide
As a CCIE and instructor, I can personally assure you that the importance of learning
the fundamentals cannot be stressed enough. I have instructed certification candidates
who were preparing for every level of Cisco certification, from CCNA up to CCIE.
Those individuals who took the time to learn the essential technologies have always
had a much greater chance of success, both in pursuing certifications and working
“real life” in the field. This book is a wonderful tool to help you learn about Cisco
networking.
In the years I have known Richard Deal, he has repeatedly impressed me with his
technical knowledge and teaching ability. Every time we work together on a project,
Richard takes complex subjects and presents them in a way that is understandable.
He has a unique ability to enable people to understand complex technical content.
Richard has found a way to impress me again by efficiently covering Cisco’s large list of
exam topics for the new CCNA exams.
This book is much more than the bound paper you are holding in your hands. It
contains the Boson NetSim Limited Edition and corresponding labs that are included
for critical hands-on experience. The practice exam included on the CD by Richard
uses the Boson Exam Engine with the latest in simulation technology. I would
recommend taking advantage of the Boson NetSim upgrade and ExSim-Max practice
exams prior to your exam date. This will give you maximum exposure to the new
topics.
In summary, this book and its enclosed CD-ROM will be a great resource to
those preparing for Cisco certification and to those who want to master essential
technologies. It will remain accurate reference material about Cisco networking for
years to come.
Bryan Baize
CCIE 16139


This page intentionally left blank

CCNA Cisco Certified
Network Associate
Study Guide
®

®

(Exam 640-802)
Richard Deal

This study/training guide and/or material is not sponsored by, endorsed by, or affiliated
with Cisco Systems, Inc. in any manner. Cisco®, Cisco Systems®, CCDA®, CCNA®,
CCDP®, CCNP®, CCIE®, CCIP®, CCSP®, CCVP®, CCDE™, CCENT™, the Cisco
Systems logo, and the Cisco Certified Internetwork Expert logo are trademarks or
registered trademarks of Cisco Systems, Inc., in the United States and certain other
countries. All other trademarks are trademarks of their respective owners. This
publication and CD may be used in assisting students to prepare for an exam. Neither
McGraw-Hill nor Boson Software warrant that use of this publication and CD will
ensure passing any exam.
New York Chicago San Francisco Lisbon London Madrid
Mexico City Milan New Delhi San Juan Seoul Singapore Sydney Toronto


Copyright © 2008 by The McGraw-Hill Companies. All rights reserved. Manufactured in the United States of America. Except as permitted under the United States Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any
means, or stored in a database or retrieval system, without the prior written permission of the publisher.
0-07-164373-7
The material in this eBook also appears in the print version of this title: 0-07-149728-5.
All trademarks are trademarks of their respective owners. Rather than put a trademark symbol after every occurrence of a trademarked

name, we use names in an editorial fashion only, and to the benefit of the trademark owner, with no intention of infringement of the
trademark. Where such designations appear in this book, they have been printed with initial caps.
McGraw-Hill eBooks are available at special quantity discounts to use as premiums and sales promotions, or for use in corporate
training programs. For more information, please contact George Hoare, Special Sales, at or (212)
904-4069.
TERMS OF USE
This is a copyrighted work and The McGraw-Hill Companies, Inc. (“McGraw-Hill”) and its licensors reserve all rights in and to the work.
Use of this work is subject to these terms. Except as permitted under the Copyright Act of 1976 and the right to store and retrieve one
copy of the work, you may not decompile, disassemble, reverse engineer, reproduce, modify, create derivative works based upon, transmit, distribute, disseminate, sell, publish or sublicense the work or any part of it without McGraw-Hill’s prior consent. You may use the
work for your own noncommercial and personal use; any other use of the work is strictly prohibited. Your right to use the work may be
terminated if you fail to comply with these terms.
THE WORK IS PROVIDED “AS IS.” McGRAW-HILL AND ITS LICENSORS MAKE NO GUARANTEES OR WARRANTIES AS TO
THE ACCURACY, ADEQUACY OR COMPLETENESS OF OR RESULTS TO BE OBTAINED FROM USING THE WORK,
INCLUDING ANY INFORMATION THAT CAN BE ACCESSED THROUGH THE WORK VIA HYPERLINK OR OTHERWISE,
AND EXPRESSLY DISCLAIM ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED
WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. McGraw-Hill and its licensors do not
warrant or guarantee that the functions contained in the work will meet your requirements or that its operation will be uninterrupted or
error free. Neither McGraw-Hill nor its licensors shall be liable to you or anyone else for any inaccuracy, error or omission, regardless of
cause, in the work or for any damages resulting therefrom. McGraw-Hill has no responsibility for the content of any information accessed
through the work. Under no circumstances shall McGraw-Hill and/or its licensors be liable for any indirect, incidental, special, punitive,
consequential or similar damages that result from the use of or inability to use the work, even if any of them has been advised of the
possibility of such damages. This limitation of liability shall apply to any claim or cause whatsoever whether such claim or cause arises
in contract, tort or otherwise.
DOI: 10.1036/0071497285


ABOUT THE CONTRIBUTORS

About the Author
For more than 10 years, Richard Deal has operated his own company, The Deal

Group, Inc., in Oviedo, Florida, east of Orlando. Richard has more than 20 years
of experience in the computing and networking industry, including networking,
training, systems administration, and programming. In addition to earning a
B.S. in mathematics from Grove City College, he holds many certifications from
Cisco and has taught many beginning and advanced Cisco classes. Richard is the
author of Cisco PIX Firewalls, an in-depth book on Cisco’s PIX firewalls and their
implementation, published by McGraw-Hill. Richard is also the author of two books
with Cisco Press: The Complete Cisco VPN Configuration Guide and Cisco Router
Firewall Security; the latter book made it to Cisco’s CCIE Security recommended
reading list.
Richard periodically holds bootcamp classes on the CCNA and CCSP, which
provide hands-on configuration of Cisco routers, switches, and security devices.
More information on his bootcamp classes can be found at />dealgroup/.

About the Technical Editors
Matthew Walker is the IA training instructor supervisor and a senior IA analyst at
Dynetics, Inc., in Huntsville, Alabama. An IT education professional for more than
15 years, Matt served as the director of the Network Training Center and the curriculum
lead and senior instructor for the local Cisco Networking Academy on Ramstein Air
Base, Germany. After leaving the US Air Force, Matt served as a network engineer for
NASA’s Secure Network Systems, designing and maintaining secured data, voice, and
video networking for the agency. He has written and contributed to numerous technical
training books for Air Education and Training Command, Keesler Air Force Base,
Mississippi, and continues to train certification and college-level IT and IA security
courses. Matt holds numerous commercial certifications, including Cisco Certified
Network Professional (CCNP), Microsoft Certified System Engineer (MCSE), Certified
Ethical Hacker (CEH), Certified Network Defense Architect (CNDA), and Certified
Pen Test Specialist (CPTS).

Copyright © 2008 by The McGraw-Hill Companies. Click here for terms of use.

Angie Walker is currently the manager of the Information Systems Security (ISS)
Office for the Missile Defense Agency (MDA) South, as well as the lead for the
MDA Alternate Computer Emergency Response Team (ACERT). Among her many
positions throughout the course of her 20-plus years in information technology and
information assurance are superintendent of the United States Air Forces in Europe
(USAFE) Communications and Information Training Center; Superintendent of
the 386 Communications Squadron on Ali Al Saleem Air Base, Kuwait; and Senior
Information Security Analyst for Army Aviation Unmanned Aircraft Systems. She
holds several industry certifications, including CISSP, Network +, and Security +, and
a master’s degree in Information Systems Management. With more than nine years of
IT and IA educational experience, she has developed and taught courseware worldwide
for the US Air Force and several computer science courses as an instructor for the
University of Alabama at Huntsville and Kaplan University in Fort Lauderdale, Florida.


For more information about this title, click here

CONTENTS

Foreword . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

xxiii
xxiv
xxix
xxx

Part I
Introduction to Networking
1

2

Networks

...................................

3

Introduction to Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Network Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . .
Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Network Locations
..............................
Local Area Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Wide Area Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Network Topologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Physical and Logical Topologies
.....................
Fully and Partially Meshed Topologies
................
Introduction to Network Security . . . . . . . . . . . . . . . . . . . . . . . . . .
Classes of Attacks
...............................
Common Threats and Mitigation . . . . . . . . . . . . . . . . . . . .
✓ Two-Minute Drill

...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

4
4
5
7
7
7
9
11
12
13
14
15
21
23
25

OSI Reference Model

.........................

27

Introduction to the OSI Reference Model . . . . . . . . . . . . . . . . . . . .
Layers of the OSI Reference Model . . . . . . . . . . . . . . . . . . . . . . . . .
Layer 7: The Application Layer

.....................
Layer 6: The Presentation Layer . . . . . . . . . . . . . . . . . . . . .
Layer 5: The Session Layer . . . . . . . . . . . . . . . . . . . . . . . . .
Layer 4: The Transport Layer
.......................
Layer 3: The Network Layer . . . . . . . . . . . . . . . . . . . . . . . .

28
29
31
31
32
33
41

vii


viii

CCNA Cisco Certified Network Associate Study Guide

3

4

Layer 2: The Data Link Layer . . . . . . . . . . . . . . . . . . . . . . .
Layer 1: The Physical Layer
........................
Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Encapsulation and De-encapsulation . . . . . . . . . . . . . . . . . . . . . . . .
Going Down the Protocol Stack . . . . . . . . . . . . . . . . . . . . .
Going Up the Protocol Stack . . . . . . . . . . . . . . . . . . . . . . .
Layers and Communication
........................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

46
51
52
53
55
56
57
62
64
67

Layer 2 LAN Technologies

......................

69

Ethernet Evolution and Standards
.........................

Ethernet Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Ethernet Implementations . . . . . . . . . . . . . . . . . . . . . . . . .
Framing
......................................
Addressing
..........................................
Bit Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Power of 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Hexadecimal Conversion . . . . . . . . . . . . . . . . . . . . . . . . . .
MAC Addresses
................................
Ethernet Connections
..................................
Cabling Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Ethernet Media Types
............................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

70
71
72
73
78
78
79
80

81
82
82
89
94
95
97

Bridges and Switches

.........................

99

Problems and Limitations of Ethernet . . . . . . . . . . . . . . . . . . . . . . .
Distance and Extension of LANs
....................
Collisions, Collision Domains, and Congestion . . . . . . . . . .
Solutions to Collision Problems
...........................
Bridges
.......................................
Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Bridges versus Switches
.................................
Methods of Switching
............................
Duplexing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Switching Functions
...................................

Learning Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Forwarding Function
.............................

100
100
101
102
102
105
105
107
109
111
112
114


Contents

Loops
........................................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

5

Wireless

ix
121
124
125
127

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

Wireless LAN Technologies
..............................
Narrowband, Broadband, and Packet Data Solutions . . . . . .
CSMA/CA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Radio Frequency Transmission Factors
................
WLAN Standards
.....................................
RF Bands
.....................................
802.11 Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
WLAN Security
......................................
WLAN Client Access to the Network
................
Security Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
WLAN Implementation
................................
Access Modes
..................................

Coverage Areas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Rates
....................................
WLAN Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Access Points
..................................
Clients
.......................................
Troubleshooting
................................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

130
130
131
132
133
133
134
136
136
137
141
142
143
144

145
145
146
146
150
152
155

Part II
TCP/IP Protocol Suite
6

TCP/IP and the Internet Layer

. . . . . . . . . . . . . . . . . . 159

TCP/IP Protocol Stack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Internet Layer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Introduction to TCP/IP Addressing
..................
TCP/IP Internet Protocols
...............................
DHCP
.......................................
ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ICMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

160
160
163

168
168
170
176


x

CCNA Cisco Certified Network Associate Study Guide

TCP/IP Tools for Windows PCs
...........................
ipconfig Command
..............................
The ping Command
.............................
The tracert Command . . . . . . . . . . . . . . . . . . . . . . . . . . . .
The arp Command
..............................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

7

IP Addressing and Subnetting

. . . . . . . . . . . . . . . . . . . 193

IP Addressing Review
..................................
Distinguishing Between Classes of Addresses
...........
IP Address Components
..........................
Subnetting
..........................................
Subnet Masks
..................................
Subnet Mask Values
.............................
IP Address Planning
...................................
Step 1: Determine Network and Host Requirements
......
Step 2: Satisfy Host and Network Requirements
.........
Step 3: Determine the Subnet Mask . . . . . . . . . . . . . . . . . .
Step 4: Determine the Network Addresses
.............
Step 5: Determine the Directed Broadcast Addresses . . . . . .
Step 6: Determine the Host Addresses
................
Exercise 7-1: Planning IP Addressing Exercise
........
Determining IP Address Components . . . . . . . . . . . . . . . . . . . . . . .
Six-Step Approach for Determining IP
Address Components

..........................
Example #1 for Determining IP Address Components
.....
Example #2 for Determining IP Address Components
.....
Example #3 for Determining IP Address Components
.....
Exercise 7-2: Determining Network, Directed Broadcast,
and Host Components . . . . . . . . . . . . . . . . . . . . . . . . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

8

VLSM
VLSM

177
177
179
181
182
186
188
190

194

195
196
197
198
199
203
204
204
206
206
208
209
210
211
212
213
215
216
217
220
222
224

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
..............................................
Features of VLSM
...............................
Addressing with VLSM
...........................

228
228
230


Contents

VLSM Example 1
...............................
VLSM Example 2
...............................
Route Summarization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Advantages of Summarization
......................
Classless Interdomain Routing . . . . . . . . . . . . . . . . . . . . . .
Hierarchical Addressing
..........................
Routing and Subnet Masks
........................
The Routing Table
..............................
Performing Summarization . . . . . . . . . . . . . . . . . . . . . . . . .
Exercise 8-1: Performing Route Summarization
.......
Exercise 8-2: Verifying Route Summarization . . . . . . . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

9

TCP/IP and the Transport Layer

xi
232
234
235
236
237
238
239
242
243
247
248
252
253
256

. . . . . . . . . . . . . . . . . 259

Transport Layer Functions
...............................
Flow Control
..................................
Reliability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Multiplexing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Segmentation

..................................
Transport Layer Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Transmission Control Protocol . . . . . . . . . . . . . . . . . . . . . .
User Datagram Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . .
TCP and UDP Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Application Mapping
............................
Session Establishment
..................................
TCP’s Three-Way Handshake
......................
TCP’s Sequencing and Acknowledgments
.............
TCP’s Flow Control and Windowing
.................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

10 Sending and Receiving TCP/IP Packets

260
260
261
262
262
262

262
264
266
267
268
270
270
272
273
276
278
280

. . . . . . . . . . . . 281

Network Components and Addressing Review
................
Layer 1 Components
.............................
Layer 2 Components
.............................
Layer 3 Components
.............................

282
282
282
283

xii

CCNA Cisco Certified Network Associate Study Guide

End-to-End Delivery Example
............................
PC-A Acquires Addressing Information
...............
PC-A Opens Up a Session to PC-B
..................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

285
286
287
294
295
297

Part III
Cisco Catalyst Switches
11 Cisco IOS Software

. . . . . . . . . . . . . . . . . . . . . . . . . . . 301

Introduction to Cisco Device Configuration

..................
Router and Switch Connections
....................
Device Startup
.................................
Command-Line Interface (CLI)
...........................
CLI Access Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
IOS Basics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Command Abbreviation and Completion . . . . . . . . . . . . . .
Context-Sensitive Help . . . . . . . . . . . . . . . . . . . . . . . . . . .
Error Messages
.................................
Entering Commands
.............................
IOS Feature Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Exercise 11-1: Using IOS Features
................
Basic IOS Configuration
................................
Accessing Configuration Mode
.....................
Device Identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Subconfiguration Modes
..........................
Line Configuration
..............................
Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .
Basic IOS Security Configuration . . . . . . . . . . . . . . . . . . . . . . . . . .
Physical and Environmental Threats

.................
Passwords
.....................................
Login Banners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
IOS Operation and Verification
...........................
Show and Debug Command Overview
................
Running and Startup Configuration
..................
Device Version Information . . . . . . . . . . . . . . . . . . . . . . . .
Interface Information
............................
Exercise 11-2: Using the CLI to Set Up a Basic
Router Configuration
..........................
✓ Two-Minute Drill
...............................

302
303
307
308
310
312
312
313
314
315
319

320
321
322
322
323
324
327
331
331
332
335
337
337
338
341
342
346
351


Contents

xiii

Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

353
355

12 Initial Switch Configuration

. . . . . . . . . . . . . . . . . . . . 357

2960 Overview
.......................................
2960 Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2960 LEDs and MODE Button . . . . . . . . . . . . . . . . . . . . . .
MODE Button
.................................
Switch Startup
.......................................
Switch Bootup Process . . . . . . . . . . . . . . . . . . . . . . . . . . . .
System Configuration Dialog
.......................
Basic Switch Configuration
..............................
IP Address and Default Gateway
....................
Example Configuration
...........................
Exercise 12-1: Configuring the Switches
............
Basic Switch Operation and Verification . . . . . . . . . . . . . . . . . . . . .
MAC Address Table
.............................
Static MAC Addresses
...........................
Exercise 12-2: CAM Tables

.....................
Port Security Feature
...................................
Port Security Configuration . . . . . . . . . . . . . . . . . . . . . . . .
Port Security Verification
.........................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

13 VLANs and Trunks

358
359
360
360
361
362
364
367
367
368
370
372
372
373
374
375

375
377
381
383
385

. . . . . . . . . . . . . . . . . . . . . . . . . . . . 387

VLAN Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Subnets and VLANs
.............................
Scalability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
VLANs and Traffic Types . . . . . . . . . . . . . . . . . . . . . . . . . .
VLAN Membership
.............................
VLAN Connections
...................................
Access-Link Connections
.........................
Trunk Connections
..............................
VLAN Trunk Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
VTP Modes
...................................
VTP Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
VTP Pruning
..................................

388
391

392
393
394
395
396
396
403
405
406
408


xiv

CCNA Cisco Certified Network Associate Study Guide

VLAN Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Configuring VTP
...............................
Configuring Trunks
..............................
Exercise 13-1: Configuring Trunks on Your Switches
...
Creating VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Basic Troubleshooting of VLANs and Trunks . . . . . . . . . . .
Exercise 13-2: Configuring VLANs on Your Switches . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers

...............................

14 Switches and Redundancy

412
412
415
418
419
422
424
428
430
432

. . . . . . . . . . . . . . . . . . . . . . 433

Layer 2 Redundancy
...................................
Hierarchical Campus Design
.......................
Layer 2 Issues
..................................
Spanning Tree Protocol
.................................
Bridge Protocol Data Units
........................
Root Switch
...................................
Root Port

.....................................
Designated Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Port States
....................................
Layer 2 Convergence . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Per-VLAN STP Plus
.............................
Simple STP Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Rapid Spanning Tree Protocol
............................
Additional Port Roles
............................
RSTP BPDUs
..................................
RSTP Convergence Features
.......................
RSTP Configuration
.............................
PVST+ and RSTP Optimization
....................
Exercise 14-1: Examining STP Information on
Your Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
EtherChannels
.......................................
EtherChannel Overview
..........................
EtherChannel Configuration
.......................
STP Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Loop Identification

..............................
Configuration Remedies
..........................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

434
434
436
438
439
440
442
444
445
447
449
450
454
455
455
456
457
459
461
462
462

464
465
465
465
468
470
472


Contents

xv

Part IV
Cisco Routers and LANs
15 Routers and Routing

. . . . . . . . . . . . . . . . . . . . . . . . . . 477

Routing Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Types of Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Autonomous Systems
............................
Administrative Distance
..........................
Dynamic Routing Protocols
..............................
Routing Metrics
................................
Distance Vector Protocols

.........................
Link State Protocols
.............................
Hybrid Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Distance Vector Protocol Problems and Solutions
..............
Problem: Convergence
...........................
Problem: Routing Loops
..........................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

16 Initial Router Configuration

479
479
480
481
482
483
484
486
489
490
490
496

504
506
508

. . . . . . . . . . . . . . . . . . . . 511

Router Hardware Components
............................
Read-Only Memory (ROM)
.......................
Other Components
..............................
Router Bootup Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Bootstrap Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
System Configuration Dialog
.......................
Configuration Register
...........................
AutoSecure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Router Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .
Subnet Zero Configuration
........................
Static Host Configuration
.........................
Exercise 16-1: Using IOS Features
................
Router-on-a-Stick
.....................................
Subinterface Configuration

........................
Interface Encapsulation . . . . . . . . . . . . . . . . . . . . . . . . . . .
Router-on-a-Stick Example Configuration
.............
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

512
512
513
514
516
519
522
526
531
532
536
536
538
540
540
541
542
546
548
550

xvi

CCNA Cisco Certified Network Associate Study Guide

17 IOS Device Management

. . . . . . . . . . . . . . . . . . . . . . 553

Router Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Saving Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . .
Restoring Configuration Files . . . . . . . . . . . . . . . . . . . . . . .
Creating and Deleting Configuration Files
.............
Configuration File Nomenclature . . . . . . . . . . . . . . . . . . . .
Review of Configuration Files
......................
Exercise 17-1: Manipulating Your Router’s
Configuration Files
............................
Changes in Your Network
...............................
Adding Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Changing Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
IOS Image Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Naming Conventions for IOS Images . . . . . . . . . . . . . . . . .
Before Upgrading the IOS Image
....................
Backing Up an IOS Image

.........................
Loading an IOS Image . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Remote Access to Your IOS Device
........................
SSH vs. Telnet Access . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SSH Configuration
..............................
Basic Troubleshooting
..................................
Local ARP Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Cisco Discovery Protocol (CDP)
....................
Layer 3 Connectivity Testing . . . . . . . . . . . . . . . . . . . . . . .
Layer 7 Connectivity Testing . . . . . . . . . . . . . . . . . . . . . . .
Debug Overview
................................
Exercise 17-2: Using the Router’s
Troubleshooting Tools . . . . . . . . . . . . . . . . . . . . . . . . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

18 Security Device Manager

554
554
556
557

558
559
560
561
562
562
563
564
565
566
566
568
569
570
571
572
573
577
584
587
589
592
594
596

. . . . . . . . . . . . . . . . . . . . . . 599

Introduction to SDM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PC Requirements
...............................

Router Requirements and SDM Files
.................
Necessary Router Configuration . . . . . . . . . . . . . . . . . . . . .
Accessing SDM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

600
601
602
603
605


Contents

Basic Router Configuration Using SDM
.....................
Configure Screens . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Interfaces
.....................................
DHCP Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Basic Router Monitoring Using SDM
.......................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

xvii
609

609
613
615
620
624
625
627

Part V
Routing
19 Basic Routing

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 631

Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Static Route Configuration
........................
Default Route Configuration
.......................
Default Routes and Distance Vector Protocols . . . . . . . . . . .
Static Route Verification and Troubleshooting
..........
Exercise 19-1: Static Route Configuration . . . . . . . . . . .
Exercise 19-2: Basic IP and Routing Troubleshooting . . .
Dynamic Routing Protocol Basics . . . . . . . . . . . . . . . . . . . . . . . . . .
The router Command
............................
The network Command . . . . . . . . . . . . . . . . . . . . . . . . . . .
RIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
RIP Operation

.................................
RIP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
RIP Verification and Troubleshooting . . . . . . . . . . . . . . . . .
Exercise 19-3: Configuring RIP . . . . . . . . . . . . . . . . . . .
Exercise 19-4: Basic RIP Troubleshooting
...........
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

20 OSPF Routing

632
633
634
635
636
637
639
642
643
644
646
646
649
652
656
659

664
665
667

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669

OSPF Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Hierarchical Design: Areas
........................
Metric Structure
................................
OSPF Operation
......................................
Router Identities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Finding Neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

670
671
673
674
674
675


xviii

CCNA Cisco Certified Network Associate Study Guide

Designated and Backup Designated Routers
............

Sharing Routing Information . . . . . . . . . . . . . . . . . . . . . . .
OSPF Configuration
...................................
Loopback Interfaces
.............................
Default Route Propagation . . . . . . . . . . . . . . . . . . . . . . . . .
OSPF Metric Values
.............................
OSPF Authentication
............................
OSPF Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
The show ip protocols Command
...................
The show ip route Command . . . . . . . . . . . . . . . . . . . . . . .
The show ip ospf Command . . . . . . . . . . . . . . . . . . . . . . . .
The show ip ospf interface Command . . . . . . . . . . . . . . . . .
The show ip ospf neighbor Command . . . . . . . . . . . . . . . . .
The debug ip ospf adj Command
....................
The debug ip ospf events Command . . . . . . . . . . . . . . . . . .
The debug ip ospf packet Command . . . . . . . . . . . . . . . . . .
Exercise 20-1: Configuring OSPF
.................
Exercise 20-2: Troubleshooting OSPF
..............
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

21 EIGRP Routing

676
678
681
683
684
685
686
688
688
689
690
691
692
693
693
694
695
697
702
704
706

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 709

EIGRP Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Metrics and Interoperability . . . . . . . . . . . . . . . . . . . . . . . .
Routing Tables and Updates . . . . . . . . . . . . . . . . . . . . . . . .

EIGRP Operation
.....................................
Building Neighbor Relationships
....................
Choosing Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
EIGRP Configuration
..................................
EIGRP Configuration Example
.....................
Other EIGRP Commands
.........................
EIGRP Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
The show ip protocols Command . . . . . . . . . . . . . . . . . . . .
The show ip route Command . . . . . . . . . . . . . . . . . . . . . . .
The show ip eigrp neighbors Command
...............
The show ip eigrp topology Command
................
The show ip eigrp interfaces Command
...............
The show ip eigrp traffic Command
..................
The debug ip eigrp Command
......................

710
711
711
712
713

714
716
716
718
723
723
724
725
727
728
729
729


Contents

The debug eigrp packets Command
..................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

xix
730
733
734
736

Part VI
Advanced Cisco Router Features
22 Access Control Lists

. . . . . . . . . . . . . . . . . . . . . . . . . . 739

ACL Overview
.......................................
Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Types
........................................
Processing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Basic ACL Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Creating an ACL
...............................
Matching on Addresses: Wildcard Masks
..............
Activating an ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ACL Types
..........................................
Standard Numbered ACLs . . . . . . . . . . . . . . . . . . . . . . . . .
Exercise 22-1: Configuring Standard
Numbered ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Extended Numbered ACLs
........................
Named ACLs
..................................
ACL Remarks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Access List Verification . . . . . . . . . . . . . . . . . . . . . . . . . . .
ACL Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

ACL Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Standard ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Extended ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

23 Address Translation

740
740
741
742
745
745
746
749
751
751
756
759
765
767
768
770
772
772
774

777
779
781

. . . . . . . . . . . . . . . . . . . . . . . . . . . 783

Address Translation Overview
............................
Running Out of Addresses . . . . . . . . . . . . . . . . . . . . . . . . .
Private Addresses
...............................
Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Address Translation Types
...............................
Terms and Definitions
............................

784
784
785
786
787
787


xx

CCNA Cisco Certified Network Associate Study Guide

Network Address Translation . . . . . . . . . . . . . . . . . . . . . . .

Port Address Translation
..........................
Advantages of Address Translation . . . . . . . . . . . . . . . . . . .
Disadvantages of Address Translation . . . . . . . . . . . . . . . . .
Address Translation Configuration
.........................
NAT Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAT Configuration
..............................
Address Translation Verification
....................
Translation Process and Troubleshooting . . . . . . . . . . . . . . . . . . . . .
Local-to-Global Translation . . . . . . . . . . . . . . . . . . . . . . . .
Global-to-Local Translation . . . . . . . . . . . . . . . . . . . . . . . .
Address Translation Troubleshooting
.................
Exercise 23-1: Configuring Static Address Translation
...
Exercise 23-2: Configuring Dynamic
Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

24 IPv6

787
790

793
794
795
795
799
800
803
803
804
805
806
808
812
814
817

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 819

Necessity of IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Growth Issues
..................................
IPv6 Features
..................................
IPv6 Addressing
......................................
IPv6 Address Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Types of IPv6 Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . .
Address Assignment
...................................
Static Address Assignment

........................
DHCPv6
.....................................
Stateless Autoconfiguration . . . . . . . . . . . . . . . . . . . . . . . .
Routing and IPv6
.....................................
Supported Routing Protocols
.......................
IPv6 Configuration
....................................
Enabling IPv6 and Assigning Addresses
...............
RIPng . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

820
820
821
823
823
824
829
829
829
830
830

831
834
834
835
839
841
843


Contents

xxi

Part VII
Cisco Routers and WANs
25 WAN Introduction

. . . . . . . . . . . . . . . . . . . . . . . . . . . 847

Wide Area Networking Overview . . . . . . . . . . . . . . . . . . . . . . . . . .
Equipment and Components
.......................
Connection Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
WAN Interfaces on Cisco Routers
...................
WAN Cabling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Encapsulation Methods
...........................
HDLC
.............................................

Frame Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Configuring HDLC
..............................
PPP
...............................................
PPP Components
...............................
Configuring PPP
................................
Troubleshooting PPP . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PPP Authentication
.............................
Exercise 25-1: Configuring PPP
..................
Exercise 25-2: Basic PPP Troubleshooting
...........
Virtual Private Networks
................................
Benefits
......................................
VPN Types
....................................
IPSec
........................................
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

26 Frame Relay

848
848
850
856
856
856
858
858
859
860
861
863
864
866
872
874
876
877
877
880
888
890
892

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 895

Virtual Circuits
.......................................

Fully Meshed Design
.............................
Advantages of VCs
..............................
Types of VCs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Supported Serial Connections
......................
Frame Relay Terms
....................................
LMI
.........................................
DLCIs
.......................................
VC Data Rates
.................................
Congestion Control
.............................

896
896
898
900
902
903
905
907
911
914

xxii

CCNA Cisco Certified Network Associate Study Guide

Frame Relay Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Encapsulation Configuration
.......................
LMI Configuration
..............................
Troubleshooting LMI . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PVC Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Exercise 26-1: Configuring Frame Relay
............
Non-Broadcast Multi-Access Environments
..................
Topology Types
.................................
Split Horizon Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Solutions to Split Horizon Problems . . . . . . . . . . . . . . . . . .
Subinterfaces
..................................
Exercise 26-2: Configuring Frame Relay
with Subinterfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
✓ Two-Minute Drill
...............................
Q&A Self Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Self Test Answers
...............................

915

915
917
917
920
927
930
931
931
933
934
941
946
948
950

Part VIII
Appendixes
A

About the CD

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 955

System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Installing and Running the Boson NetSim LE and BEE
..........
Boson NetSim LE
...............................
BEE and Practice Exams
..........................

Electronic Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CertCams
...........................................
Help
...............................................
Removing Installation(s)
................................
Technical Support
.....................................

B

Exam Readiness Checklist
ICNDv1 (642–822) Exam
ICNDv2 (642-816) Exam

Index

956
956
956
957
958
958
958
958
958

. . . . . . . . . . . . . . . . . . . . . 959

...............................
................................

960
965

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 967


FOREWORD

From Boson Software, Inc.
The Cisco CCNA certification requires that you learn and master a number of skills.
As you read this book, incorporating Boson NetSim into your learning process will
help you successfully complete the CCNA certification track. The Boson NetSim
Limited Edition (LE) included with this book will get you started on your way, and
additional capability from the full edition is available after purchasing an upgrade.
Boson NetSim will help you with the practical hands-on portion of your
education, and it ensures that you not only understand the concepts of routing and
switching but that you can actually configure and implement routing and switching
on Cisco devices. Once you feel you have mastered both the theory and the practical
labs, you can test your knowledge using the exams included with this book and
the CD. You may also purchase ExSim-Max practice exams from Boson, available
at . ExSim-Max is the most realistic practice exam on the
market with questions that are well-written, technically accurate, and completely
representative of those on the actual exam. With ExSim-Max, you can be sure you
are ready to pass the real exam.
Boson NetSim is the most advanced network simulator on the market for learning
how to configure a Cisco router and Catalyst switch. Boson NetSim will not only
help you become CCNA certified, it will actually help you learn and understand

how to configure routers, switches, and networks.
The Boson NetSim LE can be upgraded to the full edition for CCNA at any
time at (with a valid activation code from your
qualifying McGraw-Hill book). Upgrading enables all other Boson NetSim labs,
commands, telnet, and advanced features. Don’t forget to complete your study with
ExSim-Max practice exams. Thank you very much, and best wishes in your future
studies!
Boson Software, LLC


xxiii
Copyright © 2008 by The McGraw-Hill Companies. Click here for terms of use.


PREFACE

T

he primary objective of this book is to help you achieve the Cisco Certified Network
Associate (CCNA) certification so that you can enhance your career. I believe that the
only way you can increase your knowledge is through theoretical and practical learning.
In other words, this book provides the book learning as well as basic hands-on experience that
you’ll need to pass the exam. However, once you pass the CCNA exam, your journey is just
beginning: you’ll need to enhance your newly acquired skills with additional reading and a lot of
hands-on experience.
You can achieve CCNA certification in two ways:
■ Pass the CCNA (640-802) exam.
■ Pass both the ICNDv1 (640-822) and ICNDv2 (640-816) exams.

The CCNA 640-802 exam includes the same topics covered by the ICNDv1

640-822 and ICNDv2 640-816 exams. Cisco developed the second approach
particularly for individuals who are just beginning their journey into networking,
especially for people taking the CCNA curriculum at a Cisco Network Academy.
The two-test approach is better suited for this environment since it takes a year to
two to go through Cisco’s CCNA curriculum at the Network Academies. With this
approach, you take the ICNDv1 640-822 exam halfway through the curriculum and
the ICNDv2 640-816 exam at the end of the curriculum.
Another advantage of taking and passing the ICNDv1 exam is that you have
achieved Cisco’s newest entry-level certification: CCENT (Cisco Certified Entry
Networking Technician). In August 2007, Cisco introduced this certification based
on customer and employer demand for a lower level certification demonstrating
basic networking and hand-on skills with IOS devices such as routers and switches.
If you already have networking experience, especially if that experience includes
configuring Cisco devices, you are better off taking the single CCNA 640-802 exam.
The main advantage of this approach is that you have to pay for only one exam.
Currently, the exam cost of the ICNDv1 and ICNDv2 exams are $125 US each,
while the CCNA 640-802 exam is $150 US (at the time of the printing of this book),
but Cisco has changed its pricing scheme in the past and can do so in the future.

xxiv
Copyright © 2008 by The McGraw-Hill Companies. Click here for terms of use.