Arista ACE-S Campus flashcards
Arista ACE-S Campus · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Root bridge election
- The switch with the lowest bridge ID (priority plus MAC address) becomes root for a VLAN. All other switches calculate loop-free paths toward it.
- 802.1Q VLAN tag
- A 4-byte tag inserted into the Ethernet frame carrying a 12-bit VLAN ID (1-4094 usable), identifying which broadcast domain a frame belongs to on a trunk.
- LACP port-channel
- An 802.3ad bundle of physical links negotiated via LACP into one logical interface, adding bandwidth and redundancy while requiring matching member configurations.
- VRRP virtual gateway
- A first-hop redundancy protocol where routers share a virtual IP; the elected master forwards traffic for hosts, and a backup takes over on failure.
- PoE 802.3bt
- The high-power Power over Ethernet standard delivering up to 60 W (Type 3) or 90 W (Type 4) at the power-sourcing equipment, supporting devices like access points and cameras.
- Usable hosts per subnet
- For a subnet with h host bits, usable host addresses equal 2^h minus 2, subtracting the network and broadcast addresses. A /24 therefore provides 254 usable addresses.
- EOS Sysdb
- The central state database in Arista EOS that mediates configuration and operational state between agents and protocol daemons, enabling consistent programmatic access.
- EOS process isolation
- Each EOS agent and protocol daemon runs in its own protected memory space on a Linux base, so a single daemon crash does not bring down the whole switch.
- Arista eAPI
- A JSON or XML interface over HTTPS on EOS that lets external tools run show and configuration commands programmatically for automation and telemetry.
- Zero Touch Provisioning
- A boot process where a new switch obtains an address via DHCP and downloads a startup script or configuration from a specified URL without manual intervention.
- Multi-agent routing
- An EOS capability allowing multiple routing protocol agents, such as OSPF and BGP, to run independently and program the forwarding table per agent.
- EOS configuration persistence
- Running configuration is held in memory and lost on reload unless saved with write memory or copy running-config startup-config to the startup configuration.
- MLAG
- Multi-chassis Link Aggregation lets two switches appear as one logical LAG endpoint to a peer, providing active-active forwarding without a stacking backplane.
- CloudVision Portal
- Arista's management platform providing a single interface for configuration via configlets and containers, change control workflows, and streaming telemetry across devices.
- Configlets and containers
- CloudVision builds configuration hierarchically: configlets hold device configuration snippets, and containers group devices so they inherit attached configlets by tag.
- CloudVision Change Control
- A workflow that stages proposed configlet changes, reviews them, then executes as an atomic task with validation and rollback if the change fails.
- CloudVision Studios
- Intent-based, form-driven configuration templates in CloudVision that generate the underlying device configuration for tasks such as VLANs, ACLs, and routing.
- Streaming telemetry
- A push model using OpenConfig and gNMI that sends high-frequency device state and counters to a collector such as CloudVision, unlike interval-based SNMP polling.
- cvprac library
- A Python library for interacting with CloudVision's REST API, enabling scripted device provisioning, configlet management, and task execution in automation pipelines.
- Arista 720XP series
- A fixed-configuration campus access switch family offering multi-gigabit copper ports, PoE, and stacking options, running the same EOS software as data-center platforms.
- Cognitive Campus architecture
- Arista's campus design unifying wired and wireless under EOS with CloudVision management, providing consistent policy, automation, and telemetry across access and aggregation.
- Spline stacking
- An Arista stacking technology that combines multiple physical campus switches into one logical device with a shared control plane and simplified management.
- Cognitive Wi-Fi
- Arista's wireless solution where access points are managed through CloudVision alongside wired switches, giving unified policy and telemetry across the campus.
- Campus platform selection
- Access switches are chosen by port count, PoE budget, and uplink speed; aggregation switches by uplink bandwidth and routing scale.
- 802.1X authentication
- Port-based access control where a supplicant authenticates through the switch (authenticator) to a RADIUS server using EAP before the port grants network access.
- MAC Authentication Bypass
- A fallback method authenticating devices lacking an 802.1X supplicant by checking their MAC address against the RADIUS server, often used for printers and IoT.
- DHCP snooping
- A switch feature that classifies ports as trusted or untrusted and drops DHCP server replies arriving on untrusted ports, preventing rogue DHCP servers.
- Dynamic ARP Inspection
- A security feature that validates ARP packets against the DHCP snooping binding table, dropping spoofed ARP replies that attempt man-in-the-middle attacks.
- Control Plane Policing
- A mechanism that rate-limits traffic destined to the switch CPU, protecting routing and management protocols from denial-of-service floods.
- VRF segmentation
- Virtual Routing and Forwarding creates separate routing tables on one device, isolating traffic between segments; crossing VRFs requires route leaking or a firewall.
- VXLAN encapsulation
- A tunneling method wrapping Layer 2 frames in UDP port 4789 with a 24-bit VNI, extending segments across a Layer 3 underlay for scalable segmentation.
- Arista DANZ
- Arista's Data Analyzer feature that mirrors selected traffic to analyzer ports or tunnels, feeding monitoring and security tools for packet-level observability.