SRWE Modules 6–10 Reviewer
Module 6: EtherChannel
Module Objective: Troubleshoot EtherChannel on switched links.
•EtherChannel is a link aggregation technology that groups multiple physical
Ethernet links into a single logical link to increase bandwidth and redundancy.
• Advantages: Fault-tolerance, load sharing, increased bandwidth, and configuration
consistency.
• Restrictions: All interfaces must be of the same type, speed, and duplex mode; up to
eight interfaces per channel.
• Negotiation Protocols: PAgP (Cisco proprietary) and LACP (IEEE 802.3ad standard).
• PAgP Modes: on, desirable, auto (ODA). LACP Modes: on, active, passive (OAP).
• Configuration: Use 'interface range', 'channel-group [id] mode [active/desirable]', and
'interface port-channel [id]'.
• Verification Commands: show interfaces port-channel, show etherchannel summary,
show etherchannel port-channel.
• Common Issues: Mismatched VLANs, trunk modes, or incompatible negotiation modes.
Module 7: DHCPv4
Module Objective: Implement DHCPv4 to operate across multiple LANs.
• DHCPv4 dynamically assigns IPv4 addresses and network parameters to clients.
• DHCPv4 Lease Process: Discover, Offer, Request, Acknowledge (DORA).
• Lease Renewal Process: DHCPREQUEST and DHCPACK between client and server.
• Cisco Router as DHCP Server: Use 'ip dhcp excluded-address', 'ip dhcp pool [name]',
'network', 'default-router', and optional 'dns-server'.
• Verification Commands: show running-config | section dhcp, show ip dhcp binding,
show ip dhcp server statistics.
• DHCP Relay: Configured with 'ip helper-address [server IP]' to forward DHCP requests
across subnets.
• Router as DHCP Client: Use 'ip address dhcp' on the interface.
Module 8: SLAAC and DHCPv6
Module Objective: Configure dynamic address allocation in IPv6 networks.
• IPv6 uses Stateless Address Autoconfiguration (SLAAC) and DHCPv6 for automatic
addressing.
• Router Advertisements (RA) control host configuration using flags: A (SLAAC), O
(Other info), M (Managed). (AOM)
• SLAAC: Hosts generate their own IPv6 GUA using router prefix + Interface ID (random
or EUI-64).
• Duplicate Address Detection (DAD) ensures unique addresses.
• Stateless DHCPv6: Provides extra configuration info (DNS, domain) — set with 'ipv6
nd other-config-flag'.
• Stateful DHCPv6: Provides full addressing info — set with 'ipv6 nd managed-
config-flag'.
• Router can act as DHCPv6 Server, Client, or Relay Agent.
• Verification: show ipv6 dhcp pool, show ipv6 dhcp binding.
Module 9: FHRP Concepts
Module Objective: Explain how FHRPs provide default gateway services in a
redundant network.
• FHRP (First Hop Redundancy Protocols) provide gateway redundancy using
multiple routers acting as one virtual router.
• Default Gateway Limitation: Hosts use one gateway; if it fails, connectivity is lost.
• FHRP ensures continuity through router redundancy using a virtual IP and MAC
address.
• HSRP (Hot Standby Router Protocol): Cisco proprietary FHRP ensuring failover of
first-hop routers.
• HSRP Priority: Determines active router (higher = active). Default = 100.
• Preemption: Enables higher-priority router to take over active role when available.
• HSRP Timers: Hello = 3s, Hold = 10s (can be adjusted).
• Failover Steps: Standby router detects loss of Hello, assumes active role, and service
continues seamlessly.
Module 10: LAN Security Concepts
Module Objective: Explain how vulnerabilities compromise LAN security.
• Endpoint Security: Protects end devices using antivirus, firewalls, AMP, NAC, ESA, and
WSA.
• Network Threats: DDoS, Data Breach, Malware (e.g., ransomware).
• AAA Framework: Authentication (who), Authorization (what), Accounting (logging
actions).
• Authentication Methods: Local (device-stored credentials) or Server-based
(RADIUS/TACACS+).
• 802.1X Authentication: Controls LAN access via port-based authentication (Client,
Authenticator, Server).
• Layer 2 Security: Crucial as compromise affects all layers above it.
• MAC Address Table Attacks: Flooding switches with fake MACs; mitigated with Port
Security.
• VLAN Hopping Attacks: Unauthorized VLAN access; prevent by disabling auto-
trunking.
• DHCP Attacks: Starvation and Spoofing; mitigated by DHCP Snooping.
• ARP Spoofing: Attackers send fake ARP replies; mitigated using Dynamic ARP
Inspection (DAI).