Services and Telemetry
This page covers protocol families that support day-two labs: addressing, management access, authentication, event visibility, first-hop redundancy, tracking, and controller-oriented wireless workflows.
Several families also have individual pages: DHCP, DNS, NTP, AAA, ICMP, Neighbour Discovery, FHRP, Telemetry, Management, and Wireless.
Support level
Section titled “Support level”| Area | Level | What this means |
|---|---|---|
| ARP | Supported | Request/reply, cache state, retry behaviour, and clear operations. |
| IPv6 neighbour discovery | Supported | NS/NA exchange, ND cache, and reachability for IPv6 forwarding. |
| SLAAC | Behaviour model | Router-advertisement-style address assignment solver. |
| DHCPv4 server | Supported | Pools, leases, excluded addresses, default-router, DNS-server, and show output. |
| DHCPv4 client | Supported | Interface DHCP and learned address/default-route behaviour. |
| DHCP relay | Supported | ip helper-address forwarding to a server. |
| DHCPv6 | Behaviour model | IPv6 lease state and command surface for supported scenarios. |
| DNS | Behaviour model | UDP/53 request/response model for supported records and resolver flows. |
| ICMP / ping | Supported | Echo/reply, unreachable outcomes, and deterministic diagnostics. |
| Traceroute | Behaviour model | TTL/hop walk based on the FIB. |
| SSH | Behaviour model | Device-to-device CLI sessions with login/enable auth. |
| HTTP / HTTPS toggles | Config model | Service state for labs and compliance checks. |
| TFTP / SCP | Behaviour model | File-transfer command and packet surfaces for supported workflows. |
| NTP | Supported | Peers, servers, associations, stratum solver, prefer, source interface, auth, access-groups, and show output. |
| Syslog | Behaviour model | Event log and UDP/514 dispatch path. |
| SNMP / traps | Behaviour model | Community configuration and trap dispatch buffer. |
| NetFlow | Config / behaviour model | Flow tracking surface; not a full exporter. |
| Local users / enable | Supported | Username/secret, privilege, enable gate, console/VTY login behaviour. |
| AAA / TACACS+ / RADIUS | Behaviour model | Authentication method lists and external auth service simulation. |
| HSRP | Supported | Active/standby election, virtual IP/MAC, priority, preempt, timers, and tracking. |
| VRRP | Supported | IPv4/IPv6 virtual router election, priority, preempt, and tracking. |
| GLBP | Behaviour model | AVG/AVF-style model for supported scenarios. |
| IP SLA / object tracking | Behaviour model | Probe state feeds route/FHRP failover decisions. |
| Wireless / CAPWAP | Behaviour model | Controller/AP/WLAN state, selected EAP, guest, anchor, and mobility scenarios. |
Standards coverage
Section titled “Standards coverage”| Standard / feature family | Coverage | Notes |
|---|---|---|
| RFC 826 | Supported | ARP request/reply and cache behaviour. |
| RFC 4861 | Supported | IPv6 neighbour solicitation/advertisement and cache. |
| RFC 4862 | Behaviour model | SLAAC-style address assignment. |
| RFC 2131 | Supported | DHCPv4 lease flow, options, and relay behaviour. |
| RFC 8415 style | Behaviour model | DHCPv6 command and lease surface for supported cases. |
| DNS over UDP/53 | Behaviour model | Resolver/server response flow for supported records. |
| RFC 792 / ICMPv6 | Supported | Echo, unreachable, and diagnostic outcomes. |
| TTL / hop-limit diagnostics | Behaviour model | Traceroute-style FIB walk. |
| SSH / CLI transport | Behaviour model | Authentication/session semantics, not a crypto implementation. |
| RFC 5905 | Supported | NTP association and stratum behaviour. |
| RFC 5424 style | Behaviour model | Syslog event structure and dispatch path. |
| SNMPv2c-style community model | Behaviour model | Community and trap surface; no full MIB engine. |
| Cisco AAA / TACACS+ / RADIUS style | Behaviour model | Method-list and external auth decision model. |
| RFC 2281 style | Supported | HSRP election and virtual gateway behaviour. |
| RFC 5798 style | Supported | VRRP election and virtual router behaviour. |
| CAPWAP RFC 5415 concepts | Partial | Controller/AP control-plane concepts for wireless labs. |
Feature matrix
Section titled “Feature matrix”| Feature | Status | Notes |
|---|---|---|
| ARP cache | Supported | Populated from deterministic L2/L3 resolution. |
| Static ARP | Supported | Accepted where command tree maps to canonical neighbour state. |
| ND cache | Supported | IPv6 next-hop resolution. |
| SLAAC address assignment | Behaviour model | Derived from RA-style intent where supported. |
| DHCP pool | Supported | Network, default-router, DNS-server, lease, excluded address. |
| DHCP binding table | Supported | Lease state visible via show output. |
| DHCP client default route | Supported | Learned default route can affect forwarding. |
| DHCP relay | Supported | Helper address forwards client requests. |
| DNS A/AAAA lookup | Behaviour model | Supported resolver flows return deterministic records. |
| Ping | Supported | Uses the same forwarding and policy model as packet simulation. |
| Traceroute | Behaviour model | Stable hop-by-hop route walk. |
| SSH login | Behaviour model | Local/AAA auth gates a CLI session. |
| VTY transport | Supported | transport input and login mode are stored/evaluated. |
| Enable secret | Supported | Privilege escalation gate. |
| TFTP / SCP copy | Behaviour model | Operational surface for supported workflows. |
| NTP server/peer | Supported | Association state and stratum calculation. |
| NTP authentication | Supported | Trusted key and keyed server/peer intent. |
| NTP access-group | Supported | ACL-based NTP access gate. |
| Syslog host | Behaviour model | Events dispatch to configured collector surfaces. |
| SNMP community | Behaviour model | Community/trap config and event dispatch. |
| NetFlow exporter | Config model | Captured for config and compliance surfaces. |
| AAA method lists | Behaviour model | Local, group, and fallback decisions. |
| TACACS+ / RADIUS server | Behaviour model | Fixture-backed external auth result. |
| HSRP active election | Supported | Priority, preempt, and tie-breaks. |
| HSRP tracking decrement | Supported | Object state can lower priority. |
| VRRP election | Supported | Priority, owner/preempt, IPv4/IPv6 virtual router state. |
| GLBP AVG/AVF | Behaviour model | Supported first-hop load-balancing scenarios. |
| IP SLA probe state | Behaviour model | Feeds object tracking and failover decisions. |
| WLAN profile | Behaviour model | SSID/security/profile state. |
| AP join | Behaviour model | AP/controller association and profile application. |
| Client association | Behaviour model | Client attaches when WLAN/security policy permits. |
| CAPWAP packet fidelity | Partial | Selected wire events exist; not a full AP radio/control stack. |
Vendor command matrix
Section titled “Vendor command matrix”| Command | IOS-style | WLC-style | Junos-style | VyOS-style | Notes |
|---|---|---|---|---|---|
arp 10.0.0.10 aaaa.bbbb.cccc arpa | Supported | n/a | Partial | Partial | Static ARP. |
ipv6 nd reachable-time 30000 | Supported | n/a | Partial | Partial | ND tuning surface. |
ip dhcp pool USERS | Supported | n/a | n/a | Supported | DHCPv4 pool. |
ip helper-address 10.0.0.5 | Supported | n/a | Partial | Supported | DHCP relay. |
ip name-server 1.1.1.1 | Supported | n/a | Supported | Supported | DNS resolver. |
ping 10.0.0.1 | Supported | Partial | Supported | Supported | ICMP diagnostic. |
traceroute 10.0.0.1 | Supported | n/a | Supported | Supported | Hop diagnostic. |
username admin privilege 15 secret ... | Supported | n/a | Partial | Partial | Local user. |
enable secret ... | Supported | n/a | n/a | n/a | Enable gate. |
aaa new-model | Supported | n/a | n/a | Partial | AAA method-list enablement. |
tacacs server TAC1 | Supported | n/a | Partial | Partial | TACACS+ auth service. |
radius server RAD1 | Supported | n/a | Partial | Partial | RADIUS auth service. |
line vty 0 4 / login local | Supported | n/a | n/a | Partial | VTY login surface. |
transport input ssh | Supported | n/a | Partial | Partial | SSH-only access intent. |
ip ssh version 2 | Supported | n/a | Partial | Partial | SSH service setting. |
ntp server 10.0.0.1 prefer | Supported | n/a | Supported | Supported | NTP association. |
ntp authentication-key 7 md5 SECRET | Supported | n/a | Partial | Partial | NTP auth. |
logging host 10.0.0.50 | Supported | n/a | Supported | Supported | Syslog collector. |
snmp-server community public RO | Supported | n/a | Partial | Partial | SNMP community. |
ip flow-export destination 10.0.0.50 2055 | Config model | n/a | Partial | Partial | NetFlow exporter. |
standby 1 ip 10.0.10.254 | Supported | n/a | n/a | Partial | HSRP virtual IP. |
standby 1 track 1 decrement 30 | Supported | n/a | n/a | Partial | HSRP tracking. |
vrrp 1 ip 10.0.10.254 | Supported | n/a | Partial | Partial | VRRP virtual router. |
track 1 interface GigabitEthernet0/0 line-protocol | Supported | n/a | n/a | Partial | Object tracking. |
ip sla 10 | Behaviour model | n/a | n/a | Partial | Probe surface. |
wlan NAME 1 SSID | Partial | Supported | n/a | n/a | WLAN profile. |
ap name AP1 | Partial | Supported | n/a | n/a | AP identity. |
show ip dhcp binding | Supported | n/a | Partial | Partial | DHCP leases. |
show ntp status | Supported | n/a | Partial | Partial | NTP state. |
show standby brief | Supported | n/a | n/a | Partial | HSRP state. |
show vrrp brief | Supported | n/a | Partial | Partial | VRRP state. |
show wireless client summary | Partial | Supported | n/a | n/a | Wireless clients. |
show ap summary | Partial | Supported | n/a | n/a | AP/controller state. |
Behaviour notes
Section titled “Behaviour notes”Service protocols are tied to the same deterministic topology state as routing and switching. DHCP leases can create addresses and default routes. ARP and ND feed next-hop resolution. ICMP and traceroute observe the same policy and FIB state that packet simulation uses.
Management and telemetry features are intentionally operational models. They support login gates, auth decisions, event visibility, and file-transfer labs, but they are not full SSH, SNMP, HTTP, or TFTP server implementations.
NTP is deeper than most service protocols: association state, stratum, preference, source-interface, authentication, and access-group gates are represented so timing and management-plane labs can be explicit.
FHRP and object tracking are modelled as deterministic election and priority state. HSRP/VRRP outcomes are stable across runs, and tracking/IP SLA can change active gateway choice without requiring wall-clock wait.
Wireless is controller-oriented. The model focuses on WLAN/AP/controller/client state and selected authentication/mobility outcomes. It does not emulate RF, roaming physics, or a complete CAPWAP implementation.
Examples
Section titled “Examples”DHCP server with relay
configure terminalip dhcp excluded-address 10.0.10.1 10.0.10.20ip dhcp pool USERS network 10.0.10.0 255.255.255.0 default-router 10.0.10.1 dns-server 1.1.1.1interface GigabitEthernet0/1 ip helper-address 10.0.0.5endshow ip dhcp bindingVendor styles
IOS-style
ip dhcp pool USERS network 10.0.10.0 255.255.255.0 default-router 10.0.10.1 dns-server 1.1.1.1interface GigabitEthernet0/1 ip helper-address 10.0.0.5Junos-style
set system services dhcp-local-server group USERS interface irb.10set access address-assignment pool USERS family inet network 10.0.10.0/24set access address-assignment pool USERS family inet dhcp-attributes router 10.0.10.1set access address-assignment pool USERS family inet dhcp-attributes name-server 1.1.1.1VyOS-style
set service dhcp-server shared-network-name USERS subnet 10.0.10.0/24 option default-router 10.0.10.1set service dhcp-server shared-network-name USERS subnet 10.0.10.0/24 option name-server 1.1.1.1set service dhcp-relay interface eth1set service dhcp-relay server 10.0.0.5HSRP with object tracking
configure terminaltrack 1 interface GigabitEthernet0/0 line-protocolinterface Vlan10 standby 1 ip 10.0.10.254 standby 1 priority 110 standby 1 preempt standby 1 track 1 decrement 30endshow standby briefAAA login local with SSH transport
configure terminalusername admin privilege 15 secret netverdictaaa new-modelip ssh version 2line vty 0 4 transport input ssh login localendNTP with authentication
configure terminalntp authenticatentp authentication-key 7 md5 SECRETntp trusted-key 7ntp server 10.0.0.1 prefer version 4 key 7 source GigabitEthernet0/0endshow ntp statusshow ntp associationsWireless controller profile
configure terminalwlan STAFF 1 STAFF security wpa psk set-key ascii SECRET no shutdownap profile SITE-Aendshow wireless client summaryshow ap summaryKnown limits
Section titled “Known limits”Management and telemetry protocols are lightweight operational models. They support labs, compliance checks, event visibility, and packet-flow reasoning, but they are not full SSH, HTTP, SNMP, TFTP, SCP, Syslog, or NetFlow servers.
Wireless support is a controller-oriented behaviour model. It is useful for configuration, state, selected authentication, guest, anchor, and mobility scenarios, but it does not emulate RF propagation, channel contention, roaming physics, or a complete AP radio stack.
DHCPv6, DNS, SNMP, Syslog, NetFlow, IP SLA, GLBP, and CAPWAP are intentionally partial unless a specific lab/test says otherwise.