Implementing Cisco IP Routing Volume 1

Transcription

1 ROUTE v1.0 Implementing Cisco IP Routing Volume 1 Course Introduction Student Skills and Knowledge Course Goal and Course Flow Cisco Icons and Symbols Your Training Curriculum General Administration Planning Routing Services to Requirements Module Assessing Complex Enterprise Network Requirements Defining Cisco Network Modules Traffic Conditions in a Converged Network Cisco SONA Framework Routing and Routing Protocols Creating an Implementations Plan and Documenting the Implementation Creating an Implementation Plan Implementation Plan Tasks Implementation Plan Documentation Implementation Plan Example Lab 1 1 Debrief Lab and Verification Sample Solution and Alternatives Module Answer Key Implementing an EIGRP Based Solution

2 ROUTE v1.0 Module Planning Routing Implementations with EIGRP EIGRP Capabilities and Attributes EIGRP Operation and Metric Example: EIGRP Tables Example: Advertised Distance Example: Feasible Distance Example: Successor and Feasible Successor Example: EIGRP Metric Calculation Planning and Documenting for EIGRP Implementing Basic EIGRP Example: Basic EIGRP Configuration Implementing and Verifying Basic EIGRP for the Enterprise LAN Architecture Verifying EIGRP Routes for IPv4 Using the passive Interface Command with EIGRP Advertising an IP Default Network in EIGRP EIGRP Route Summarization Utilizing Manual Route Summarization Lab 2 1 Debrief Lab and Verification Sample Solution and Alternatives Configuring and Verifying EIGRP for the Enterprise WAN Architecture EIGRP over Frame Relay and on a Physical Interface EIGRP over Multipoint Subinterfaces EIGRP over Point to Point Subinterfaces Load Balancing Across Equal Metric Paths Load Balancing Across Unequal Metric Paths EIGRP Bandwidth Use Across WAN Links EIGRP over EoMPLS and Metro Ethernet Lab 2 2 Debrief

3 ROUTE v1.0 Lab and Verification Sample Solutions and Alternatives Implementing and Verifying EIGRP Authentication Router Authentication for EIGRP MD5 Authentication for EIGRP Implementing MD5 Authentication for EIGRP Verifying MD5 Authentication for EIGRP Lab 2 3 Debrief Lab and Verification Sample Solution and Alternatives Advanced EIGRP Features in an Enterprise Network Scalability in Large Networks EIGRP Queries SIA Connections in EIGRP EIGRP Stub Routers Lab 2 4 Debrief Lab and Verification Instructions Module Answer Key

4 ROUTE v1.0 Implementing Cisco IP Routing Volume 2 Implementing a Scalable Multiarea Network OSPF Based Solution Module Planning Routing Implementations with OSPF as the Scalable Routing Protocol Link State Routing Protocols OSPF Area Structure OSPF Adjacency Database Calculating the OSPF Metric Link State Data Structures Maintaining Link State Sequence Numbers Example: LSA Sequence Numbers and Maximum Age Planning for Implementing OSPF How OSPF Packet Processes Work OSPF Packet Types Establishing OSPF Neighbor Adjacencies Exchanging and Synchronizing LSDBs Maintaining Network Routes Verifying Packet Flow Example: debug ip ospf packet Improving Routing Performance in a Complex Enterprise Network Introducing OSPF Network Types Adjacency Behavior in Point to Point Links Adjacency Behavior in a Broadcast Network Adjacency Behavior in a Metro Ethernet and EoMPLS Network Adjacency Behavior in MPLS Networks Selecting a DR and BDR OSPF over Different Frame Relay Implementations OSPF over Frame Relay NBMA Example: NBMA Configuration Example: show ip ospf neighbor Command Using Subinterfaces in OSPF over Frame Relay Example: Point to Point Subinterface Example: Multipoint Subinterface

5 ROUTE v1.0 Implementing OSPF over a Point to Point Frame Relay Network Example: Point to Point Configuration Implementing OSPF over a Point to Multipoint Frame Relay Network Example: Point to Multipoint Configuration Example: OSPF over NBMA Topology Configuring and Verifying OSPF Routing Module Initializing Single Area and Multiarea OSPF Activating OSPF Within a Router in Single Area and Multiarea Defining the Router ID Verify OSPF Operations Identifying LSA Types within the LSDB Type 1 Type 2 Types 3 and 4 Type 5 Type 6 Type 7 Type 8 Types 9, 10 and 11 Type 1 LSA Link Types Example: LSA Type 4 ASBR LSA Example: Types of LSAs Limiting Adjacencies in OSPF with the passive interface Command Design Limitations of OSPF OSPF Virtual Links and Solutions to Discontiguous Area Problems Changing the Cost Metric Lab 3 1 Debrief Lab and Verification Sample Solution and Alternatives Lab 3 2 Debrief Lab and Verification Sample Solution and Alternatives Configuring and Verifying OSPF Route Summarization

6 ROUTE v1.0 OSPF Route Summarization Implementing OSPF Route Summarization Benefits of a Default Route in OSPF Using a Default Route in OSPF Lab 3 3 Debrief Lab and Verification Sample Solution and Alternatives Configuring and Verifying OSPF Special Area Types OSPF Area Types Defining and Implementing a Stub Area Defining and Implementing a Totally Stubby Area Example: Totally Stubby Configuration Interpreting Routing Tables for OSPF Area Types Defining and Implementing an NSSA and Totally NSSA in OSPF Verifying All OSPF Area Types Lab 3 4 Debrief Lab and Verification Sample Solution and Alternatives Configuring and Verifying OSPF Authentication Types of OSPF Authentication Implementing Simple Password Authentication for OSPF Configuring MD5 Authentication for OSPF Troubleshooting Authentication for OSPF Lab 3 5 Debrief Lab and Verification Sample Solution and Alternatives

7 ROUTE v1.0 Module Answer Key Implement an IPv4 Based Redistribution Solution Assessing Network Routing Performance and Security Issues Common Network Performance Issues How Distribute Lists Work Using Distribute Lists to Control Routing Updates How Prefix Lists Work Using a Prefix List to Control Routing Updates How Route Maps Work Using Route Maps to Control Routing Updates Using Route Maps to Filter Routes Suppressing Routing Updates Using a Passive Interface Operating a Network using Multiple IP Routing Protocols Describe a Complex Routing Network Defining Route Redistribution Default Metrics for Redistributed Routes Determining Where to Redistribute Caveats of Redistribution Configuring and Verifying Route Redistribution Examples of Redistribution The Administrative Distance Attribute Route Redistribution Using Administrative Distance Impact of Using Administrative Distance for Route Manipulation Redistribution Using Route Maps Lab 4 1 Debrief Lab and Verification

8 ROUTE v1.0 Sample Solution and Alternatives Module Answer Key Implementing Cisco IP Routing Volume 3 Implementing Path Control Module Assessing Path Control Network Performance Issues Assessing Path Control and Network Performance Using Filters to Determine Path Selection Using PBR to Determine Path Selection Configuring and Verifying PBR Configuring and Verifying PBR Operations on a Cisco Router Lab 5 1 Debrief Lab and Verification Sample Solution and Alternatives References to Additional Path Control in E Learning Preview of E Learning on Implementing Path Control Module Answer Key Connect an Enterprise Network to an ISP Network Planning the Enterprise to ISP Connection

9 ROUTE v1.0 Connecting Enterprise Networks to an ISP Exchanging Routing Updates with an ISP Defining the Types of Connections to an ISP Considering the Advantages of Using BGP Using BGP to Connect to an ISP BGP Mulithoming Options BGP Routing Between Autonomous Systems Comparison with IGPs Path Vector Functionality Features of BGP Comparing the Functions and Uses of EBGP and IBGP BGP Neighbor Relationships Establishing External EBGP Neighbor Relationships Establishing Internal IBGP Neighbor Relationships Configuring and Verifying Basic BGP Operations Specifications for Implementing BGP Establishing Internal and External BGP Neighbors Shutting Down a BGP Neighbor BGP Configuration Considerations Identifying BGP Neighbor States BGP Authentication Example of Activating Basic BGP BGP Verification Lab 6 1 Debrief Lab and Verification Sample Solution and Alternatives Using the BGP Attributes and Path Selection Process

10 ROUTE v1.0 BGP Path Selection Path Selection with Multihomed Connection Characteristics of BGP Attributes for Path Selection and Path Manipulation Filtering of BGP Routing Updates Lab 6 2 Debrief Lab overview and Verification Sample Solution and Alternatives References to IPv6 and Implementing Remote Access Connectivity in E Learning Preview of E Learning Modules Module References Answer Key

11 ROUTE v1.0 Implementing Cisco IP Routing Lab Guide This guide presents instructions and other information concerning the lab activities for this course. You can find the solutions in the Lab Activity Answer Key. Outline This guide includes these activities: Lab 1 1: Assess Skills for Implementing Complex Networks Lab Hints Lab 2 1: Configure and Verify EIGRP Operations Lab Hints Lab 2 2: Configure and Verify EIGRP Circuit Emulation and Frame Relay Operations Lab Hint Lab 2 3: Configure and Verify EIGRP Authentication Lab Hints Lab 2 4: Troubleshoot and Verify EIGRP Operations Lab Hints Lab 3 1: Configure and Verify OSP to Improve Routing Performance Lab Hints Lab 3 2: Implement and Verify OSPF Multiarea Routing Lab Hints Lab 3 3: Configure and Verify OSPF Route Summarization for Interarea and External Routes Lab Hints Lab 3 4: Configure and Verify OSPF Special Area Types Lab Hints

12 ROUTE v1.0 Lab 3 5: Configure and Verify OSPF Authentication Lab Hints Lab 4 1: Configure Route Redistribution Between Multiple IP Routing Protocols Lab Hints Lab 5 1: Configure and Verify Path Control Between Multiple IP Routing Protocols Lab Hints Lab 6 1: Configure BGP Operations Lab Hints Lab 6 2: Manipulate EBGP Path Selections Lab Hints Answer Key

13 SWITCH Implementing Cisco Switched Networks Volume 1 Course Introduction Learner Skills and Knowledge Course Goal and Course Flow Additional References Cisco Glossary of Terms Your Training Curriculum General Administration Analyzing Campus Network Designs Module Enterprise Campus Architecture of SONA SONA Benefits Cisco Enterprise Campus Architecture Enterprise Campus Architecture Access Layer Distribution Layer Core Layer Is a Core Layer needed? Campus Core layer Small Campus Network Medium Campus Network Data Center Infrastructure Network Traffic Types Peer to Peer Applications Client Server Farm Applications Client Enterprise Edge Applications Cisco Lifecycle Services and Network Implementation PPDIOO Life Cycle Approach Benefits of the Life Cycle Approach Planning an Implementation Implementation Components Implementation Plan Detailed Implementation Plan

14 SWITCH Lab 1 1 Debrief Review and Verification Module Answer Key Implementing VLANs in a Campus Network Module Applying Best Practices for VLAN Topologies VLAN Deployment End to End VLANs and Local VLANs Comparison Planning and End to End VLAN Implementation Implementing VLANs and Trunks Verifying VLAN Configuration Implementing Trunks Identifying the Modes for Trunking Trunk Configuration Recommendations VTP Configuration Verifying VTP Configuration Common Problems with VTP Configuration VTP Verification and Troubleshooting Verifying VLAN Operations Common Trunk Link Problems Example of a Troubleshooting Plan Resolving Trunk Link Problems Issues with Native VLAN on Trunks Configuring Private VLANs Protected Port Feature Private VLANs PVLAN Port Types Isolated PVLAN Configuration Sample Isolated PVLAN Configuration Isolated PVLAN Verification Community PVLAN Configuration Sample Community PVLAN Configuration Community PVLAN Verification

15 SWITCH Example of PVLAN Configuration PVLANs Across Switches Configuring Link Aggregation with EtherChannel Describe Etherchannel PAgP and LACP PAgP Modes LACP Modes Configuring Port Channels Using EtherChannel Guidelines for Configuring EtherChannel Layer 2 EtherChannel Configuration Steps Verifying EtherChannel EtherChannel Load Balancing Options Lab 2 1 Debrief Review and Verification Lab 2 2 Debrief Review and Verification Trouble Ticket A: Switch Replacement Has Failed Trouble Ticket B: VLAN 66 Access Problem Trouble Ticket C: Gateway Unreachable Lab 2 3 Debrief Review and Verification Module Answer Key Implementing Spanning Tree Module Spanning Tree Protocol Enhancements STP Standards Comparison of Spanning Tree Protocols Spanning Tree Protocol

16 SWITCH Spanning Tree Operation Cisco Spanning Tree Default Configuration PVRST+ Configuration RSTP Port Roles Spanning Tree Port Types and States RSTP State Transitions RSTP Link Types RSTP Edge Ports Port Fast Configuration Bridge Priority Verifying PVRST+ Multiple Spanning Tree Protocol MST Regions Extended System ID for MSTP MSTP Configuration Verifying MSTP Describing STP Stability Mechanisms Cisco STP Toolkit Protection of STP Operation BPDUGuard BPDUFilter BPDU RootGuard BPDUGuard Configuration Applying BPDUGuard Globally vs. per Port Configuring BPDUGuard Verifying BPDUGuard BPDU Filter Configuration Applying BPDU Filter globally vs. Per Port Configuring BPDU Filter Verifying BPDUFilter RootGuard Example of Using RootGuard RootGuard Verification LoopGuard Configuring LoopGuard Enabling LoopGuard on and Interface UniDirectional Link Detection Configuring UDLD Comparing LoopGuard with UDLD Recommended Practices UDLD Configuration STP Implementation Recommendations FlexLinks in the Access Layer

17 SWITCH Lab 3 1 Debrief Review and Verification Lab 3 2 Debrief Review and Verification Lab 3 3 Debrief Review and Verification Trouble Ticket A: Switch Optimization Gone Wrong Trouble Ticket B: Unstable STP Module Answer Key Implementing Inter VLAN Routing Module Describing Routing Between VLANs Inter VLAN Routing Using an External Router Example: Router on a Stick External Router Configuration External Router: Advantages and Disadvantages Switch Virtual Interfaces Configuration of an SVI on a Multilayer Switch SVI Configuration SVI autostate Command Routed Ports on a Multilayer Switch Configuring a Routed Port on a Multilayer Switch Layer 2 EtherChannel vs. Layer 3 EtherChannel Configuration of Layer 3 EtherChannel Verification of SVIs and Routed Interfaces Routing Protocol Configuration Verifying Routing Protocol DHCP Service DHCP Configuration DHCP with the ip helper Command Verifying DHCP Operation

18 SWITCH Deploying Multilayer Switching with Cisco Express Forwarding Explain Multilayer Switching Frame Rewrite CAM and TCAM Tables Distributed Hardware Forwarding Explaining Layer 3 Switch Processing Cisco Switching Methods Route Caching Topology Based Switching Multilayer Switches Based on Cisco Express Forwarding Verifying Cisco Express Forwarding Lab 4 1 Debrief Review and Verification Lab 4 2 Debrief Review and Verification Trouble Ticket A: Missing Routes on Some Switches Trouble Ticket B: Troubleshoot EIGRP on Layer 3 Switch Trouble Ticket C: Disappearing Routes and VLANs Module Answer Key

19 SWITCH Implementing Cisco Switched Networks Volume 2 Implementing a Highly Available Network Module Understanding High Availability Components of High Availability Redundancy Technology People Processes Tools Resiliency for High Availability Network Level Resiliency High Availability and Failover Times Optimal Redundancy Provide Alternate Paths Avoid Too Much Redundancy Avoid Single Point of Failure Cisco NSF with SSO Routing Protocols and NSF Implementing High Availability Distributed VLANs on Access Switches Local VLANs on Access Switches Layer 3 Access To Distribution Interconnection Daisy Chaining Access Layer Switches Daisy Chaining Access Layer Switch Issues Cisco Stack Wise Access Switches Too Little Redundancy Impact of Uplink Failure Implementing Network Monitoring Network Monitoring Syslog Syslog Features Syslog Message Format Syslog Message Log

20 SWITCH Example: Syslog Messages System Log Configuration SNMP SNMPv1 vs. SNPv2 About SNMPv3 SNMP Recommendations SNMP Configuration IP SLA Configuration IP SLA Measurements IP SLA Operations IP SLA Source and Responder IP SLA Operations with Responder IP SLA Responder Time Stamps IP SLA Configuration IP SLA Verification Lab 5 1 Debrief Review and Verification Module Answer Key Implementing Layer 3 High Availability Module Configuring Layer 3 Redundancy with HSRP Describing Routing Issues Using Proxy ARP Using Default Gateways Identifying the Router Redundancy Process Router Redundancy Failover HSRP Configuration Virtual Router MAC Address Forwarding Through Active Router Virtual Router Active Router HSRP Active and Standby Router Interaction HSRP State Stable HSRP State Transition HSRP Priority and Pre emption HSRP Active Router and Spanning Tree Topology

21 SWITCH HSRP Authentication HSRP and Timer Considerations HSRP Timer Configuration Subsecond Failover Pre empt Time Aligned with Router Boot Time HSRP Versions Displaying the Standby Status HSRP Interface Tracking HSRP and Tracking HSRP and IP SLA Tracking Multiple HSRP Groups Multiple HSRP Group Configurations HSRP Monitoring Configuring Layer 3 Redundancy with VRRP and GLBP Virtual Router Redundancy Protocol About the VRRP Operations Process VRRP Transition Process Configuring VRRP Describing GLBP GLBP Functions GLBP Features Identifying the GLBP Operations Process GLBP Operation GLBP Interface Tracking GLBP Implementation GLBP and VLAN Spanning Lab 6 1 Debrief Review and Verification Lab 6 2 Debrief Review and Verification Module Answer Key Minimizing Service Loss and Data Theft in a Campus Network Understanding Switch Security Issues

22 SWITCH of Switch Security Issues Security Infrastructure Services Reason for Internal Security Unauthorized Access by Rogue Devices Switch Attack Categories MAC Flooding Attack Suggested Mitigation for MAC Flooding Attacks Port Security Configure Port Security Caveats to Prot Security Configuration Steps Verifying Port Security Port Security with Sticky MAC Addresses Authentication and Authorization Methods Local User Authentication with AAA 802.1X Port Based Authentication Configuring 802.1X Protecting Against VLAN Attacks Explaining VLAN Hopping Switch Spoofing VLAN Hopping With Double Tagging Mitigating VLAN Hopping VLAN Access Control Lists Configure VACLs Protecting Against Spoofing Attacks DHCP Spoofing Attacks DHCP DHCP Snooping Configure DHCP Snooping DHCP Snooping Verification ARP Poisoning Dynamic ARP Inspection Dynamic ARP Inspection Configuration IP Source Guard IP Source Guard Configuration Securing Network Services

23 SWITCH Vulnerabilities in Cisco Discovery Protocol Neighbor Discovery Protocols Cisco Discovery Protocol Configuration LLDP Configuration Cisco Discover Protocol Vulnerabilities Telnet Vulnerabilities About SSH Configuration of SSH VTY ACLs HTTP Secure Server Configuration Switch Security Considerations Organizational Security Policies Secure Switch Devices Switch Security Recommendations Mitigating Compromises Launched Through a Switch Lab 7 1 Debrief Review and Verification Module Answer Key Accommodating Voice and Video in Campus Networks Module Planning for Support of Voice in a Campus Network Unified Communications IP Telephony Components Characteristics of Voice and Data Video Applications Voice and Video Traffic Requirements for Voice, Data, and Video Traffic Voice and Video in the Campus Network Integrating and Verifying VoIP in a Campus Infrastructure Planning for VoIP Requirements

24 SWITCH Integrating VoIP in the Campus Voice VLANs IP Telephony Extends the Network Edge Multi VLAN Access Port Configuring and Verifying Voice VLANs Power over Ethernet Power over Ethernet 802.3af New Power over Ethernet Developments PoE Configuration Switch Power Budget PoE Verification Adding Upper Layer Services Test Plan Working with Specialists to Accommodate Voice and Video on Campus Switches High Availability for VoIP and Video Example: Cisco Reliability and Availability Building Voice/Video/Data Campus Networks Quality of Service Recommended Practices for QoS QoS and Time Sensitive Traffic LAN Based Classification and Marking Layer 2 QoS Marking Layer 3 QoS Marking Describing QoS Trust Boundaries Cisco Phone Connected to a Switch Configuring QoS for Voice VLANs Configuring Cisco AutoQoS Cisco Auto QoS Configuration Monitoring Cisco AutoQoS Lab 8 1 Debrief Review and Verification Module Answer Key Integrating Wireless LAN into a Campus Network Module Comparing WLANs to Campus Networks

25 SWITCH WLAN Wireless LAN Wired and Wireless LAN Similarities Between WLANs and LANs Differences Between WLANs and LANs of WLAN and LAN Differences WLAN Access Point Topology About SSIDs SSID and VLAN Support Client Roaming Layer 2 and Layer 3 Roaming Security on WLAN and LAN Assessing the Impact of WLANs on Campus Networks WLAN Implementations Standalone WLAN Solution Traffic Flow Between Clients Standalone WLAN Solution Controller Based WLAN Solution Traffic Flow Between Clients Controller Based WLAN Solution Hybrid Remote Edge Access Points Comparison of the WLAN Solutions About WLCs Connection of the Standalone solution to the Network SSIDs, VLANs and Trunks in the Standalone solution Connection of the Controller Based Solution to the Network SSIDs, VLANs, and Trunks in the Controller Based Solution Controller Based AP Protocol Cisco WLC Ports and Protocols Preparing the Campus Infrastructure for the WLANs Access Point and Controller Placement Distributed Controller Placement Distributed WLC Design Centralized Controller Placement Centralized WLC Placement WLAN Devices Connected to the LAN Switches Configure Switches for WLAN Devices Switch Configuration for Standalone APs and H REAPs Switch Configuration for Controller Based APs

26 SWITCH Switch Configuration for a WLC Link Aggregation for 4400 Series Controllers Link Aggregation Switch Configuration for 4400 Series Controllers Switch Configuration for Cisco WiSM Controllers Switch Configuration for Cisco WiSM Controllers Gathering requirements Planning the Integration Creating a Test Plan Lab 9 1 Debrief Review and Verification Module Answer Key

27 SWITCH Implementing Cisco Switched Networks Lab Guide This guide presents instructions and other information concerning the lab activities for this course. You can find the solutions in the Lab Activity Answer Key. Outline This guide includes these activities: Lab 1 1: New Hire Test Lab 2 1: Design and Implement VLANs, Trunks, and EhterChannel Lab 2 2: Troubleshoot Common VLAN Configuration and Security Issues Lab 2 3: Implement Private VLANs Lab 3 1: Implement Multiple Spanning Tree Lab 3 2: Implement PVRST+ Lab 3 3: Troubleshoot Spanning Tree Issues Lab 4 1: Implement Inter VLAN Routing Lab 4 2: Troubleshoot Inter VLAN Routing Lab 5 1: Implement High Availability and Reporting in a Network Design Lab 6 1: Implement and Tune HSRP Lab 6 2: Implementing VRRP Lab 7 1: Secure Network Switches to Mitigate Security Attacks Lab 8 1: Plan Implementation and Verification of VoIP in a Campus Network Lab 9 1: Integrate Wireless in the Campus

28 ARCH version 2.1 Designing Cisco Network Service Architectures Volume 1 Course Introduction Student Skills and Knowledge Course Goal and Course Flow Additional References Cisco Glossary of Terms Your Training Curriculum Other Resources General Administration Cisco Network Architecture for the Enterprise Module Review of Network Architectures for the Enterprise Hierarchical Model Example: Hierarchical Network Enterprise Network Design for Cisco Architectures Service and Application Integration Modularity in Cisco Network Architectures for the Enterprise Reviewing the Cisco PPDIOO Approach PPDIOO Network Life Cycle Approach Benefits of the Life Cycle Approach Using the Design Methodology Under PPDIOO Identifying Customer Requirements Characterizing the Existing Network and Sites Designing the Topology and Network Solutions Example: Dividing the Network into Areas Module References Answer Key

29 ARCH version 2.1 Enterprise Campus Network Design Model Designing High Availability in the Enterprise Campus Enterprise Campus Infrastructure Review Access Layer Distribution Layer Core Layer High Availability Considerations Implementing Optimal Redundancy Providing Alternative Paths Avoiding Single Points of Failure Cisco NSF with SSO Layer 2 Design Recommendations Recommended Practices for Spanning Tree Configuration Cisco STP Toolkit STP Standards and Features Recommended Practices for STP Hardening Recommended Practices for Trunk Configuration Recommended Practices for UDLD Configuration Recommended Practices for EtherChannel Supporting Virtual Switching Systems Designs Common Access Distribution Block Designs Multi chassis EtherChannels and VSS VSS Design Considerations Dual Active Detection and Recovery VSS Design Best Practices Layer 3 Design Recommendations Managing Oversubscription and Bandwidth Bandwidth Management with EtherChannel Bandwidth Management with 10 Gigabit Interfaces Link Load Balancing EtherChannel Load Balancing Routing Protocol Design Building Redundant Triangles Peering Only on Transit Links

30 ARCH version 2.1 Summarizing at the Distribution Layer First Hop Redundancy Preempt Delay Tuning Elimination of FHRP in VSS Designs of Gateway Load Balancing Protocol Optimizing FHRP Convergence Designing the Layer 2 to Layer 3 Boundary Layer 2 to Layer 3 Boundary Design Models Layer 2 Distribution Switch Interconnection Layer 3 Distribution Switch Interconnection Layer 3 Distribution Interconnection with GLBP Layer 3 Distribution Switch with VSS Interconnection Layer 3 Access to Distribution Interconnection EIGRP to the Edge Design Recommendations OSPF to the Edge Design Recommendations Potential Design Issues Daisy Chaining Access Layer Switches Cisco StackWise Technology in the Access Layer Too Much Redundancy Too Little Redundancy Asymmetric Routing (Unicast Flooding) Unicast Flooding Prevention Describing Enterprise Network Virtualization Technologies Describing Network Virtualization Definition of Virtualization Network Virtualization Describing Device Virtualization Device Virtualization in Network Devices Clustering Network Devices Describing Server Virtualization Server Virtualization Benefits Networking in a Virtualized Server Environment Cisco Unified Computing System in a Virtualized Server Environment Infrastructure Services Considerations IP Telephony Considerations IP Telephony Extends the Network Edge

31 ARCH version 2.1 Power Budget and Management Multi VLAN Access Port Video Considerations Typical Media Application Models Voice and Video Compared Medianet Architectural Framework Cisco TelePresence Solutions QoS Considerations Recommended Practices for QoS Transmit Queue Congestion QoS Role in the Campus Campus QoS Design Considerations Module References Answer Key Advanced Addressing and Routing Design Module Advanced Addressing Design IP Address Planning as a Foundation Summarizable Blocks of Addresses Changing IP Addressing Needs Planning Addresses Applications of Summarizable Addressing Implementing Role Based Addressing Bit Splitting for Route Summarization Example: Bit Splitting for Area 1 IPv6 Address Planning Addressing for VPN Clients NAT in the Enterprise NAT with External Partners Design Considerations for IPv6 in Campus Networks Advanced Routing Design Route Summarization and Default Routing Originating Default Stub Areas and Default Route Route Filtering in the Network Design

32 ARCH version 2.1 Avoid Inappropriate Transit Traffic Defensive Filtering Designing Redistribution Filtered Redistribution Migrating Between Routing Protocols Scalable EIGRP Design Scaling EIGRP Designs EIGRP Fast Convergence EIGRP Fast Convergence Metrics EIGRP with Multiple Autonomous Systems Example: Queries with Multiple EIGRP Autonomous Systems Reasons for Multiple EIGRP Autonomous Systems Scalable OSPF Design Factors Influencing OSPF Scalability Number of Adjacent Neighbors Routing Information in the Area and Domain Designing Areas Area Size: How Many Routers in an Area? OSPF Hierarchy Area and Domain Summarization OSPF Hub and Spoke Design Number of Areas in OSPF Hub and Spoke Design Issues with Hub and Spoke Design OSPF Hub and Spoke Network Types OSPF Area Border Connection Behavior OSPF Area Border Connection Considerations Fast Convergence in OSPF Tuning OSPF Parameters Bidirectional Forwarding Detection Scalable BGP Design Scaling IBGP Designs Full Mesh IBGP Scalability Scaling IBGP with BGP Route Reflectors BGP Route Reflector Definitions Additional BGP Route Reflector Definitions BGP Route Reflector Basics

33 ARCH version 2.1 Reducing Meshing with BGP Route Reflectors Scaling IBGP with BGP Confederations BGP Confederation Definitions BGP Confederation Basics Combining BGP Confederations and Route Reflectors Deploying BGP Confederations Module References Answer Key Advanced WAN Services Design Considerations Module Optical Technologies for WANs Advanced WAN Service Layers Enterprise Optical Interconnections of SONET and SDH Enterprise View of SONET WDM CWDM Technical DWDM Technical Using Metro Ethernet, VPLS, and MPLS VPN Technologies Metro Ethernet Metro Ethernet Service Model Metro Ethernet Architecture Metro Ethernet LAN Services Any Transport over MPLS End to End QoS Shaping and Policing on Sub rate Ethernet WAN Choosing the Right Service VPLS VPLS Architecture Model VPLS in the Enterprise Scaling VPLS QoS Issues with EMS or VPLS EMS or VPLS and Routing Implications VPLS and IP Multicast VPLS Availability

34 ARCH version 2.1 MPLS VPN Customer Considerations with MPLS VPNs Routing Consideration: Backdoor Routes Routing Consideration: Managed Router Combined with Internal Routing Routing Consideration: Managed Router from Two Service Providers Advanced WAN Service Implementations Advanced WAN Service Selection Business Risk Assessment WAN Features and Requirements SLA SLA Monitoring Application Performance Across the WAN Cisco PfR Cisco PfR Operations Cisco PfR Solution Topologies Cisco PfR Deployment Considerations Module References Answer Key

35 ARCH version 2.1 Designing Cisco Network Service Architectures Volume 2 Enterprise Data Center Design Module Core and Aggregation Layer Design Data Center Architecture Benefits of the Three Layer Model The Services Layer Data Center Core Layer Design Layer 3 Characteristics for the Data Center Core Routing Protocol Design Recommendations Aggregation Layer Design Scaling the Aggregation Layer STP Design Integrated Services Modules Service Modules and the Services Layer Active STP, HSRP, and Service Context Alignment Active/Standby Service Module Design Active/Active Service Module Design Establishing Inbound Path Preference Using VRFs in the Data Center Using the Cisco Nexus 7000 Series in the Core and Aggregation Layer Virtual Device Contexts Virtual Port Channels Layer 2 Multipathing Access Layer Design of the Data Center Access Layer Layer 2 Looped Designs Layer 2 Looped Topologies Layer 2 Looped Design Issues Layer 2 Loop Free Designs Loop Free Topologies Example: Loop Free U Design and Layer 2 Service Modules Example: Loop Free U Design and the Cisco ACE Module Layer 2 Flex Link Designs Flex Link Issues and Considerations Comparison of Layer 2 Access Designs

36 ARCH version 2.1 Layer 3 Access Layer Designs Multicast Source Support Benefits of Layer 3 Access Drawbacks of Layer 3 Access Blade Service Blade Service Connectivity Options Blade Server Trunk Failover Feature Virtual Blade Switching VSS in the Data Center Access Layer Cisco Nexus Switch Family in the Access Layer Top of Rack and End of Row Designs Static and Dynamic Pinning Virtual Port Channel in the Data Center Access Layer Cisco Nexus 1000V in the Data Center Access Layer Scaling the Data Center Architecture End of Row vs. Top of Rack Designs Cabinet Design with Top of Rack Switching Example: Network Topology with Top of Rack Switching Model Cabinet Design with End of Row Access Switches Example: Network Topology with End of Row Access Switches Cabinet Design with Fabric Extenders Example: Network Topology with FEXs Server NIC Density Hybrid Example with Separate OOB Management Oversubscription and Uplinks Scaling Bandwidth and Uplink Density Optimizing EtherChannel Utilization with Load Balancing Optimizing EtherChannel Utilization with Min Links Scaling with Service Layer Switches Scaling Service Chains Spanning Tree Sizing and High Availability STP Scalability STPs in the Data Center STP Scaling STP Logical Interfaces STP Scaling with 120 Systemwide VLANs STP in Top of Rack Designs STP Scaling Design Guidelines High Availability in the Data Center

37 ARCH version 2.1 Common NIC Teaming Configurations Server Attachment Methods High Availability and Failover Times High Availability and Cisco NSF with SSO Module References Answer Key E Commerce Module Design Module Common Component Designs for the E Commerce Module Common Firewall Designs for E Commerce Typical E Commerce Topology Server as Application Gateway Virtualization with Firewall Contexts Virtual Firewall Layers Firewall Modes Common Server Load Balancer Designs for E Commerce Functions of a Server Load Balancer SLB Design Models SLB Router Mode SLB Inline Bridge Mode SLB One Armed Mode Misconfigured SLB One Armed Mode Flows SLB Full Rewrite Common Topology Designs for E Commerce Design Option: Unique External Prefix Per ISP Design Option: Stateful Failover with Common External Prefix Design Option: Distributed Data Centers Additional Data Center Services Integrated E Commerce Designs Base E Commerce Module Design Base Design Routing Logic Base Design Server Traffic Flows Design with Two Firewall Layers Traffic Flows in a Design with Two Firewall Layers One Armed Design with Two Firewall Layers

38 ARCH version 2.1 Traffic Flows in a One Armed Design with Two Firewall Layers Traffic Flows in a One Armed Design with Direct Server One Armed SLB Design with Firewall Contexts Traffic Flows in a One Armed SLB Design with Firewall Contexts Module References Answer Key SAN Design Considerations Identifying SAN Components and Technologies SAN and Components SAN Components RAID Storage Topologies Direct Attached Storage Network Attached Storage SAN Technologies SCSI Fibre Channel Fibre Channel Communications Model Virtual SAN Inter VSAN Routing Fabric Shortest Path First Zoning SAN and SAN Extension Design SAN Design Factors Port Density and Topology Requirements Device Oversubscription Traffic Management Fault Isolation Convergence and Stability Collapsed Core Single Switch Design Collapsed Core Design with Dual Fabric Core Edge Design SAN Extension SAN Extension Protocols

39 ARCH version 2.1 Fibre Channel over IP Internet SCSI High Availability SAN Extension Integrated Fabric Designs Using Cisco Nexus Technology Unified Fabric Technologies 10 Gigabit Ethernet and FCoE FCoE Components Unified Fabric Design Considerations Module References Answer Key Security Services Design Module Firewall Design Considerations Lesson Firewall Modes Zone Based Policy Firewall Virtual Firewall Firewall Context Design Considerations MSFC Placement Active Active Firewall Topology Active Standby and Active Active Firewall Redundancy Active Active Topology Features Asymmetric Routing with Firewalls Asymmetric Routing Groups on a Single Cisco FWSM Asymmetric Routing with Active Active Topology Performance Scaling with Multiple Cisco FWSM Devices Example: Cisco FWSM Load Balancing Using PBR Example: Cisco FSWM Load Balancing Using ECMP Routing Network Admission Control Design Lesson Network Security with Access Control Cisco NAC Appliance Fundamentals Cisco NAC Appliance Components Cisco NAS Scaling

40 ARCH version 2.1 Cisco NAS Deployment Options Cisco NAS Gateway Modes Cisco NAS Operating Modes Cisco NAS Client Access Modes Physical Deployment Models Cisco NAC Appliance Designs Layer 2 In Band Designs Layer 2 OOB Designs Layer 3 In Band Designs Layer 3 OOB Designs Intrusion Detection and Prevention Designs Lesson IDS and IPS IDS and IPS Components IDS and IPS Design Considerations IDS and IPS Deployment Considerations IPS Appliance Deployment Options IPS Deployment Challenges IDS and IPS Management Interface Deployment Options IDS and IPS Monitoring and Management Module References Answer Key

41 ARCH version 2.1 Designing Cisco Network Service Architectures Volume 3 IPsec and SSL VPN Design Module Remote Access VPN Design Remote Access VPN Example: Cisco Easy VPN Client IPsec Implementation SSL VPN Clientless Access Thin Client Thick Client Remote Access VPN Design Considerations VPN Termination Device and Firewall Placement Routing Design Considerations Address Assignment Design Considerations Other Design Considerations Example: VPN Architecture Site to Site VPN Design Site to Site VPN Applications WAN Replacement Using Site to Site IPsec VPNs WAN Backup Using Site to Site IPsec VPNs Regulatory Encryption Using Site to Site IPsec VPNs Site to Site VPN Design Considerations IP Addressing and Routing Scaling, Sizing, and Performance Design Topologies VPN Device Placement Designs IPsec VPN Technologies IPsec VPN Extensions to Basic IPsec VPNs Cisco Easy VPN GRE over IPsec GRE over IPsec Design Recommendations Dynamic Multipoint VPNs

42 ARCH version 2.1 DMVPN Example: DMVPN Topology DMVPN Deployment Considerations VTI GET VPN GET VPN Topology VPN Management and Scaling Recommendations for Managing VPNs Considerations for Scaling VPNs Determining Packets Per Second Determining the Packets Per Second Rate Routing Protocol Considerations for IPsec VPNs Module References Answer Key IP Multicast Design Module IP Multicast of IP Multicast Unicast vs. Multicast TCP vs. UDP Multicast Adoption Cisco Multicast Architecture IP Multicast Group Membership Multicast Group Address Range IP Multicast MAC Address Mapping Multicast Address Assignment Internet Group Management Protocol Multicast Routing Multicast Distribution Tree Creation RFP Multicast Distribution Trees Multicast Forwarding at Layer 2 IGMP Snooping

43 ARCH version 2.1 PIM and RIP Considerations PIM Deployment Modules Any Source Multicast Bidirectional PIM Source Specific Multicast PIM Dense Mode RP Considerations Static RP Addressing Anycast RP Auto RP Bootstrap Router IP Multicast Security Security Considerations for IP Multicast Unicast and Multicast State Requirements Multicast State and Traffic Replication Attack Traffic in Multicast Networks Scoped Addresses Multicast Access Control Host Receiver Side Access Control PIM SM Source Control Disabling Multicast Groups Multicast over IPsec VPNs Multicast over IPsec GRE Multicast over DMVPN Multicast Using GET VPN Module References Answer Key Network Management Capabilities with Cisco IOS Software Module Embedded Management Capabilities Embedded Management Rationale Network Management Functional Areas

44 ARCH version 2.1 Cisco IOS Software Support of Network Management Application Optimization and Cisco IOS Technologies Syslog Considerations Cisco IOS Syslog Message Standard Syslog Issues NetFlow Considerations NetFlow Technology Principal NetFlow Uses Definition of a Flow Traditional IP Flows Flow Record Creation Example: NetFlow Data Before QoS Deployment Example: NetFlow Data After QoS Deployment NetFlow Cache Management NetFlow Export Versions NetFlow Version 9 Export Packet NetFlow Deployment Where to Apply NetFlow Monitoring NBAR Considerations NBAR of NBAR NBAR Packet Inspection NBAR Protocol Discovery NetFlow and NBAR Differentiation Reporting NBAR Protocol Discovery Statistics from the Command Line NBAR and Cisco AutoQos Cisco Auto QoS for the Enterprise Example: Cisco AutoQoS Discovery Progress Example: Cisco AutoQoS Suggested Policy IP SLA Considerations IP SLA Technology Cisco IOS IP SLA Measurements IP SLA SNMP Features Deploying IP SLA Measurements Impact of QoS on IP SLA Statistics Scaling IP SLA Deployments

45 ARCH version 2.1 Hierarchical Monitoring with IP SLA Measurements Network Management Applications Using IP SLA Measurements Network Management Application Considerations Module References Answer Key

46 ARCH version 2.1 Designing Cisco Network Service Architectures Lab Guide This guide presents the instructions and other information concerning the lab activities for this course. You can find the solutions in the Lab Activity Answer Key. Outline This guide includes these activities: Case Study 2 1: MegaCorp Campus Design Case Study 3 1: CP Hotels Addressing Design Case Study 5 1: CP Hotels Routing Design Case Study 6 1: CP Hotels Network E Commerce Initiative Case Study 7 1: CP Hotels Network Server Initiative Case Study 8 1: CP Hotels Cisco NAC Appliance Design Case Study 9 1: CP Hotels Security and IPsec VPN Network Case Study 11 1: DS Medical Research Institute Network Infrastructure