Aruba Switching Associate key terms

A switch port configured to carry traffic for a single VLAN, typically connecting end devices. It sends and receives untagged frames and is not a member of more than one VLAN at a time.

A protocol used to map a known IPv4 address to its corresponding MAC address on a local network. The switch maintains an ARP table to forward traffic to the correct next hop.

A message exchanged between switches running Spanning Tree Protocol to share topology information and elect a root bridge. BPDUs help prevent loops by determining which ports forward or block.

A Spanning Tree feature that disables a port if it receives a BPDU, typically enabled on edge ports to prevent unauthorized switches from affecting the topology. It helps enforce the network edge.

The IP address of the router interface that a host uses to send traffic to destinations outside its local subnet. Without a correct gateway, hosts cannot reach remote networks.

A protocol that automatically assigns IP addresses and other network settings to devices. It reduces manual configuration errors and is often used with a relay agent on switches.

A Spanning Tree port configuration that assumes the port connects to an end device, allowing it to transition directly to forwarding without listening and learning delays. It should not receive BPDUs.

The standard for VLAN tagging on Ethernet frames. It inserts a 4-byte tag containing a VLAN identifier so that multiple VLANs can share a single trunk link between switches.

The standard for link aggregation that allows multiple physical links to be combined into a single logical link. It provides increased bandwidth and redundancy through the Link Aggregation Control Protocol.

A unique numerical label assigned to a device on a network that uses the Internet Protocol for communication. It identifies both the network and the host portion, enabling routing between subnets.

The process of forwarding packets between different IP networks based on the destination IP address. A router or Layer 3 switch uses a routing table to determine the best path.

The combining of multiple physical network links into one logical link to increase bandwidth and provide redundancy. It can be configured statically or dynamically using LACP.

A protocol used to dynamically negotiate and maintain link aggregation between two devices. It ensures that both ends agree on which links are part of the aggregate and can detect failures.

A unique 48-bit hardware address assigned to a network interface card. Switches use MAC addresses to forward frames within a VLAN based on a MAC address table.

A database maintained by a switch that maps MAC addresses to switch ports. It is built by learning source MAC addresses of incoming frames and is used to forward frames efficiently.

A VLAN configured specifically for managing network devices, such as switches and access points. It isolates management traffic from user data for improved security and organization.

The VLAN on an 802.1Q trunk whose frames are sent untagged. Both ends of the trunk must agree on the native VLAN to avoid misconfiguration and potential security issues.

A feature that restricts which MAC addresses can access a switch port, often limiting the number of devices. It helps prevent unauthorized access and MAC flooding attacks.

The central switch in a Spanning Tree topology that all other switches use as a reference point for calculating the best path. It is elected based on the lowest bridge ID.

A Layer 2 protocol that prevents network loops by creating a loop-free logical topology. It elects a root bridge and blocks redundant paths while maintaining backup links.

A manually configured route in a router's routing table that specifies the next hop for a destination network. It is simple and predictable but does not adapt to topology changes.

A 32-bit number that divides an IP address into network and host portions. It determines which addresses are on the same local subnet and which require routing.

A network device that connects devices within a LAN and forwards frames based on MAC addresses. It operates at Layer 2 and can support VLANs and Spanning Tree.

A switch port configured to carry traffic for multiple VLANs, typically between switches or to a router. It uses tagging (802.1Q) to identify VLAN membership of frames.

A logical grouping of devices on a switch that isolates broadcast traffic as if they were on separate physical networks. VLANs improve security, performance, and flexibility.

The process of adding a VLAN identifier to an Ethernet frame, as defined by IEEE 802.1Q. It allows switches to separate traffic from multiple VLANs over a shared trunk link.

A VLAN dedicated to carrying voice traffic from IP phones. It is often configured with QoS priority to ensure clear calls and can be automatically assigned to phones via LLDP-MED.

A physical port on a switch used for out-of-band management and initial configuration. It provides direct access to the device's command-line interface via a serial connection.

The software embedded in a network device that controls its operation. Upgrading firmware can add features, fix bugs, and improve security, and is a key maintenance task.

Techniques used to avoid broadcast storms and frame duplication caused by redundant paths in a Layer 2 network. Spanning Tree Protocol is the primary method for loop prevention.

A network condition where broadcast frames multiply excessively, consuming bandwidth and CPU. It is often caused by loops and is mitigated by Spanning Tree Protocol.

A technology that delivers electrical power along with data over Ethernet cables to devices such as IP phones and access points. It simplifies installation by eliminating separate power supplies.

A set of techniques that prioritize certain types of network traffic, such as voice or video, to ensure performance. It helps manage bandwidth and reduce latency and jitter.

A cryptographic protocol used to securely access and manage network devices remotely. It encrypts the session, unlike Telnet, and is recommended for management access.

An unencrypted protocol for remote command-line access to network devices. It is insecure because credentials and data are sent in plain text, so SSH is preferred.