Boeing HIP Secure Mobile Architecture - update
|
|
|
- Arnold Simon
- 6 years ago
- Views:
Transcription
1 Boeing HIP Secure Mobile Architecture - update IETF 73 HIPRG Meeting (November 21, 2008) Tom Henderson (thomas.r.henderson@boeing.com), presenting for the Boeing SMA team BOEING is a trademark of Boeing Management Company.
2 Overview Boeing is using HIP as part of a Secure Mobile Architecture (SMA) implementation Provides secure connectivity to SCADAnet equipment over an untrusted factory wireless network 777 assembly line, Everett WA Supported by HIP overlays EOT_PW_Sub_no-icon.ppt 12/10/2007 2
3 Problem statement Provide layer-2 connectivity between SCADAnet (IPv4) devices legacy IPv4 device legacy IPv4 device legacy IPv4 device HIP gateway legacy IPv4 device HIP SA (tunnel) untrusted network directory services EOT_PW_Sub_no-icon.ppt 12/10/2007 3
4 User view Overlay provides a layer-2 VPN -like service to legacy IPv4 devices Illusion of a single L2 flooding domain (unicast, multicast) IP traffic only A given device may be reachable from more than one overlay interface Ethernet MTU (1500 bytes) is supported Overlay devices Overlay Interfaces crossconnect layer-2 switch layer-2 switch EOT_PW_Sub_no-icon.ppt 12/10/2007 4
5 Standards view Instance of an IP-Only LAN Service A Virtual Private LAN Service (VPLS) [VPLS] is used to interconnect systems across a wide-area or metropolitan-area network, making it appear that they are on a private LAN. The systems which are interconnected may themselves be LAN switches. If, however, they are IP hosts or IP routers, certain simplifications to the operation of the VPLS are possible. We call this simplified type of VPLS an "IP-only LAN Service" (IPLS). Overlay devices Overlay Interfaces crossconnect layer-2 switch layer-2 switch Customer Edge (CE) devices EOT_PW_Sub_no-icon.ppt 12/10/2007 5
6 Implementation view Secure tunneling between end points HIP gateway-- a PE device implementing HIP for secure tunneling Requires directory services for tunnel endpoint discovery (overlay definition) and DNS (rendezvous) functions Some directory services circumvented by configuration files (for now) Provider Edge (PE) devices (EndBox) Directory services Secure tunnels A z wide area network A w A x y A1 EOT_PW_Sub_no-icon.ppt 12/10/2007 6
7 Naming view Multiple overlays supported Each overlay has a unique name Each PE device has a name (an asset tag) Also, a DNS name of form <asset-tag>.domain.com IP address ranges are allowed to overlap in the two domains Overlay devices Overlay Interfaces crossconnect layer-2 switch layer-2 switch EOT_PW_Sub_no-icon.ppt 12/10/2007 7
8 Differences from standard HIP HIP is deployed as a bump-in-the-wire (BITW) instead of bump-in-the-stack (BITS) Unlike IPsec BITW gateways, we do not decrement TTL Host identities in the system are bound via certificates to Boeing names (asset tags) Could be integrated to enterprise PKI EOT_PW_Sub_no-icon.ppt 12/10/2007 8
9 Recent progress Integration with LDAP server for storing configuration data Support for HIP mobile router EOT_PW_Sub_no-icon.ppt 12/10/2007 9
10 Configuration requirements Certificates binding management friendly distinguished name (e.g. gateway asset tag) to a host identity public key Legacy end devices are named by IPv4 address Additional configuration needed: 1) End device IP address to LSI which HIP gateway fronts for which end device 2) LSI to underlay IP address 3) Access control lists EOT_PW_Sub_no-icon.ppt 12/10/
11 Walk-through Scadanet devices DNS/LDAP Responder HIP gateway A56 possible cross-connect A34 bcwin A78 layer-2 switch layer-2 switch A12 Initiator EOT_PW_Sub_no-icon.ppt 12/10/
12 Walk-through ARP request (who has ?) ARP must be proxied or carried over the overlay EOT_PW_Sub_no-icon.ppt 12/10/
13 Walk-through ARP response ( is at [A34 MAC]) at least one gateway needs to respond EOT_PW_Sub_no-icon.ppt 12/10/
14 Walk-through Data to remote IP address maps to a particular HIP gateway configuration data may be stored locally or fetched from an LDAP DB HIP gateway maps to an underlying IP address Access controls applied (can A34 talk to A78?) EOT_PW_Sub_no-icon.ppt 12/10/
15 Walk-through Base exchange Access controls may also be applied here EOT_PW_Sub_no-icon.ppt 12/10/
16 Walk-through Ethernet frame is encapsulated and tunneled through HIP SA Data to EOT_PW_Sub_no-icon.ppt 12/10/
17 Benefits of using HIP Mobility (overlay nodes can change address without breaking security associations) Access controls tied to PKI and use of certificates DoS-resistance on the security underlay (via HIP base exchange) EOT_PW_Sub_no-icon.ppt 12/10/
18 SMA/SCADANet Endbox EOT_PW_Sub_no-icon.ppt 12/10/
19 Related Work L2VPN IP-only LAN Service (IPLS) Build a virtual LAN using HIP tunnels instead of GRE tunnels Secure Pseudowire with IPsec/L2TPv3 Microsoft Server and Domain Isolation OpenVPN project, supports ethernet bridging: hernet-bridging.html ISI X-Bone HIP BONE EOT_PW_Sub_no-icon.ppt 12/10/
20 Credits A large set of contributors in Boeing are responsible for this work: Richard Paine Steven Venema David Mattes Orlie Brewer Jin Fang Jeff Meegan EOT_PW_Sub_no-icon.ppt 12/10/
21 EOT_PW_Sub_no-icon.ppt 21
Configuring Routed Pseudowire and VPLS
Routed Pseudowire and VPLS feature routes Layer 3 traffic and Layer 2 frames for pseudowire connections between provider edge (PE) devices using Virtual Private LAN Services (VPLS) multipoint PE. Prerequisites
Network Configuration Example
Network Configuration Example Configuring BGP Autodiscovery for LDP VPLS Release NCE0035 Modified: 2017-01-24 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net
Module 11b MPLS VPLS Configuration Lab (LDP Manual)
APNIC MPLS Workshop Lab Module 11b MPLS VPLS Configuration Lab (LDP Manual) Objective: All the routers are pre-configured with basic interface, OSPF, BGP, MPLS Label Distribution Protocol (LDP) configuration
Lab 1: Static MPLS LSP-RTX4-RTX1 LSP-RTX1-RTX4 LSP-RTX3-RTX2 LSP-RTX2-RTX3
Lab 1: Static MPLS First lab gives a basic understanding of MPLS label swapping No signaling manually assign labels like static routing Understand configuration, forwarding tables, and debugging of MPLS
PassTorrent. Pass your actual test with our latest and valid practice torrent at once
PassTorrent http://www.passtorrent.com Pass your actual test with our latest and valid practice torrent at once Exam : 352-011 Title : Cisco Certified Design Expert Practical Exam Vendor : Cisco Version
Configuring Virtual Private LAN Services
Virtual Private LAN Services (VPLS) enables enterprises to link together their Ethernet-based LANs from multiple sites via the infrastructure provided by their service provider. This module explains VPLS
Implementing VXLAN. Prerequisites for implementing VXLANs. Information about Implementing VXLAN
This module provides conceptual information for VXLAN in general and configuration information for layer 2 VXLAN on Cisco ASR 9000 Series Router. For configuration information of layer 3 VXLAN, see Implementing
Configuring Virtual Private LAN Service (VPLS) and VPLS BGP-Based Autodiscovery
Configuring Virtual Private LAN Service (VPLS) and VPLS BGP-Based Autodiscovery Finding Feature Information, page 1 Configuring VPLS, page 1 Configuring VPLS BGP-based Autodiscovery, page 17 Finding Feature
IPSec. Overview. Overview. Levente Buttyán
IPSec - brief overview - security associations (SAs) - Authentication Header (AH) protocol - Encapsulated Security Payload () protocol - combining SAs (examples) Overview Overview IPSec is an Internet
Request for Comments: Cisco Systems, Inc. September Framework for Layer 2 Virtual Private Networks (L2VPNs)
Network Working Group Request for Comments: 4664 Category: Informational L. Andersson, Ed. Acreo AB E. Rosen, Ed. Cisco Systems, Inc. September 2006 Framework for Layer 2 Virtual Private Networks (L2VPNs)
Internet Engineering Task Force (IETF) Request for Comments: F. Le Faucheur G. Heron Cisco Systems January 2015
Internet Engineering Task Force (IETF) Request for Comments: 7436 Category: Historic ISSN: 2070-1721 H. Shah Cinea Corp. E. Rosen Juniper Networks F. Le Faucheur G. Heron Cisco Systems January 2015 IP-Only
HIP Host Identity Protocol. October 2007 Patrik Salmela Ericsson
HIP Host Identity Protocol October 2007 Patrik Salmela Ericsson Agenda What is the Host Identity Protocol (HIP) What does HIP try to solve HIP basics Architecture The HIP base exchange HIP basic features
Contents. EVPN overview 1
Contents EVPN overview 1 EVPN network model 1 MP-BGP extension for EVPN 2 Configuration automation 3 Assignment of traffic to VXLANs 3 Traffic from the local site to a remote site 3 Traffic from a remote
LARGE SCALE IP ROUTING LECTURE BY SEBASTIAN GRAF
LARGE SCALE IP ROUTING LECTURE BY SEBASTIAN GRAF MODULE 07 - MPLS BASED LAYER 2 SERVICES 1 by Xantaro MPLS BASED LAYER 2 VPNS USING MPLS FOR POINT-TO-POINT LAYER 2 SERVICES 2 by Xantaro Why are Layer-2
L2 MPLS VPN (VPLS) Technology White Paper
S9500 L2 MPLS VPN (VPLS) Technology White Paper L2 MPLS VPN (VPLS) Technology White Paper Keywords: MPLS, VPLS Abstract: MPLS technologies make it very easy to provide VPN services based on IP technologies
Creating User Manageable Security Zones
Creating User Manageable Security Zones The Boeing SCADAnet Technology Craig Dupler, Boeing Eric Byres, Byres Security Inc. Three Important Things for Security 1. Simplicity 2. Bite-size e Pieces 3. Clear
Enterprise. Nexus 1000V. L2/L3 Fabric WAN/PE. Customer VRF. MPLS Backbone. Service Provider Data Center-1 Customer VRF WAN/PE OTV OTV.
2 CHAPTER Cisco's Disaster Recovery as a Service (DRaaS) architecture supports virtual data centers that consist of a collection of geographically-dispersed data center locations. Since data centers are
VXLAN Overview: Cisco Nexus 9000 Series Switches
White Paper VXLAN Overview: Cisco Nexus 9000 Series Switches What You Will Learn Traditional network segmentation has been provided by VLANs that are standardized under the IEEE 802.1Q group. VLANs provide
Host Identity Protocol (HIP): Connectivity, Mobility, Multi-Homing, Security, and Privacy over IPv4 and IPv6
Host Identity Protocol (HIP): Connectivity, Mobility, Multi-Homing, Security, and Privacy over IPv4 and IPv6 by Pekka Nikander, Andrei Gurtov, and Thomas R. Henderson Johannes Bachhuber Jacobs University
Configure Virtual LANs in Layer 2 VPNs
The Layer 2 Virtual Private Network (L2VPN) feature enables Service Providers (SPs) to provide L2 services to geographically disparate customer sites. A virtual local area network (VLAN) is a group of
Operation Manual MPLS VLL. Table of Contents
Table of Contents Table of Contents... 1-1 1.1 MPLS VLL Overview... 1-2 1.1.1 Concepts in MPLS VLL... 1-2 1.1.2 Introduction to MPLS VLL... 1-2 1.1.3 Packet Forwarding... 1-3 1.1.4 Implementation... 1-4
E : Internet Routing
E6998-02: Internet Routing Lecture 18 Overlay Networks John Ioannidis AT&T Labs Research ji+ir@cs.columbia.edu Copyright 2002 by John Ioannidis. All Rights Reserved. Announcements Lectures 1-18 are available.
Introduction to Multi-Protocol Label
Introduction to Multi-Protocol Label Switching (MPLS) Matthew Bocci, Alcatel-Lucent IP Division Agenda History of MPLS Standardisation MPLS Architecture Control Plane QoS and Traffic Engineering Protection
Configuring VPLS. VPLS overview. Operation of VPLS. Basic VPLS concepts
Contents Configuring VPLS 1 VPLS overview 1 Operation of VPLS 1 VPLS packet encapsulation 4 H-VPLS implementation 5 Hub-spoke VPLS implementation 7 Multi-hop PW 8 VPLS configuration task list 9 Enabling
IP over IPv6 Tunnels. Information About IP over IPv6 Tunnels. GRE IPv4 Tunnel Support for IPv6 Traffic
IPv6 supports IP over IPv6 tunnels, which includes the following: Generic routing encapsulation (GRE) IPv4 tunnel support for IPv6 traffic IPv6 traffic can be carried over IPv4 GRE tunnels using the standard
Multipoint Bridged Ethernet Using MPLS Virtual Private LAN Services
Multipoint Bridged Ethernet Using MPLS Virtual Private LAN Services By Scott Kotrla How VPLS Compares to Existing VPN Technologies Multipoint Bridged Ethernet is a service offering that attempts to recreate
2. Layer-2 Ethernet-based VPN
2.1. Full Ethernet Virtualization The key concept of the method of realizing VPN by SoftEther VPN is the full virtualization of Ethernet segments, layer-2 Ethernet switches and Ethernet adapters. In order
Configuring MPLS L2VPN
Contents Configuring MPLS L2VPN 1 MPLS L2VPN overview 1 Basic concepts of MPLS L2VPN 2 Implementation of MPLS L2VPN 2 MPLS L2VPN configuration task list 4 Configuring MPLS L2VPN 5 Configuring CCC MPLS
Junos MPLS and VPNs. Day(s): 5. Course Code: Overview
Junos MPLS and VPNs Day(s): 5 Course Code: JMV Overview This five-day course is designed to provide students with MPLS-based virtual private network (VPN) knowledge and configuration examples. The course
Data Center Configuration. 1. Configuring VXLAN
Data Center Configuration 1. 1 1.1 Overview Virtual Extensible Local Area Network (VXLAN) is a virtual Ethernet based on the physical IP (overlay) network. It is a technology that encapsulates layer 2
On Distributed Communications, Rand Report RM-3420-PR, Paul Baran, August 1964
The requirements for a future all-digital-data distributed network which provides common user service for a wide range of users having different requirements is considered. The use of a standard format
Network Configuration Example
Network Configuration Example Configuring Ethernet CFM Over VPLS Modified: 2017-01-24 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights
TopGlobal MB8000 VPN Solution
TopGlobal Solution Top Global MobileBridge connects 3G and Ethernet network, as well as WiFi network. MB8000 is a product of MobileBridge serials. MB8000 provides a gateway service for its LAN (including
CompTIA Network+ Study Guide Table of Contents
CompTIA Network+ Study Guide Table of Contents Course Introduction Table of Contents Getting Started About This Course About CompTIA Certifications Module 1 / Local Area Networks Module 1 / Unit 1 Topologies
HP A5820X & A5800 Switch Series MPLS. Configuration Guide. Abstract
HP A5820X & A5800 Switch Series MPLS Configuration Guide Abstract This document describes the software features for the HP 5820X & 5800 Series products and guides you through the software configuration
Implementing IP in IP Tunnel
This chapter module provides conceptual and configuration information for IP in IP tunnels on Cisco ASR 9000 Series Router. Note For a complete description of the IP in IP tunnel commands listed in this
IP over ETH over IEEE draft-riegel-16ng-ip-over-eth-over Max Riegel
IP over ETH over IEEE802.16 draft-riegel-16ng-ip-over-eth-over-80216-01 Max Riegel 2006-11-07 Outline IP over ETH over IEEE802.16 IPoETH-CS Problem Statement Link models
MPLS VPN over mgre. Finding Feature Information. Last Updated: November 1, 2012
MPLS VPN over mgre Last Updated: November 1, 2012 The MPLS VPN over mgre feature overcomes the requirement that a carrier support multiprotocol label switching (MPLS) by allowing you to provide MPLS connectivity
The OSI model of network communications
The OSI model of network communications The TCP/IP networking layers are mapped to the OSI model The Next Generation TCP/IP stack IPv6 is supported natively in Windows Vista, Windows 7, Windows Server
MPLS design. Massimiliano Sbaraglia
MPLS design Massimiliano Sbaraglia - MPLS layer 2 VPN diagram flowchart - MPLS layer 2 VPN pseudowire VPWS diagram - MPLS layer 2 VPN VPLS diagram - MPLS layer 2 EVPN diagram - MPLS layer 3 VPN diagram
RBRIDGES/TRILL. Donald Eastlake 3 rd Stellar Switches AND IS-IS.
RBRIDGES/TRILL AND IS-IS 1 Donald Eastlake 3 rd donald.eastlake@stellarswitches.com, +1-508-333-2270 Stellar Switches CAVEATS The base protocol specification may change: It is currently in TRILL WG Last
Himanshu Shah. Prabhu Kavi Eric Rosen Giles Heron Sunil Khandekar Vach Kompella Vijay Aggarwal
Himanshu Shah Prabhu Kavi Eric Rosen Giles Heron Sunil Khandekar Vach Kompella Vijay Aggarwal Jeremy Brayley Rafael Francis Arun Vishwanathan Ashwin Moranganti Waldemar Augustyn 1 VPWS for IP L2 Interworking
CS-580K/480K Advanced Topics in Cloud Computing. Network Virtualization
CS-580K/480K Advanced Topics in Cloud Computing Network Virtualization 1 Network Diagram of A Company 2 University Network Topology https://www.researchgate.net/figure/234782590_fig1_fig-5-see-university-network-infrastructure
lane global-lecs-address
lane global-lecs-address lane global-lecs-address To specify a list of LECS addresses to use when the addresses cannot be obtained from the ILMI, use the lane global-lecs-address command in interface configuration
Managing and Securing Computer Networks. Guy Leduc. Chapter 7: Securing LANs. Chapter goals: security in practice: Security in the data link layer
Managing and Securing Computer Networks Guy Leduc Chapter 7: Securing LANs Computer Networking: A Top Down Approach, 7 th edition. Jim Kurose, Keith Ross Addison-Wesley, April 2016. (section 8.8) Also
Networks Fall This exam consists of 10 problems on the following 13 pages.
CSCI 466 Final Networks Fall 2011 Name: This exam consists of 10 problems on the following 13 pages. You may use your two- sided hand- written 8 ½ x 11 note sheet during the exam and a calculator. No other
Module 11a MPLS VPWS Configuration Lab (LDP)
APNIC MPLS Workshop Lab Module 11a MPLS VPWS Configuration Lab (LDP) Objective: All the routers are pre-configured with basic interface, OSPF, BGP, MPLS Label Distribution Protocol (LDP) configuration
Configure Multipoint Layer 2 Services
This module provides the conceptual and configuration information for Multipoint Layer 2 Bridging Services, also called Virtual Private LAN Services (VPLS). Note VPLS supports Layer 2 VPN technology and
WiNG 5.x How-To Guide
WiNG 5.x How-To Guide Tunneling Remote Traffic using L2TPv3 Part No. TME-08-2012-01 Rev. A MOTOROLA, MOTO, MOTOROLA SOLUTIONS and the Stylized M Logo are trademarks or registered trademarks of Motorola
Gigabit SSL VPN Security Router
As Internet becomes essential for business, the crucial solution to prevent your Internet connection from failure is to have more than one connection. PLANET is the ideal to help the SMBs increase the
BGP Support for the L2VPN Address Family
BGP support for the Layer 2 Virtual Private Network (L2VPN) address family introduces a BGP-based autodiscovery mechanism to distribute L2VPN endpoint provisioning information. BGP uses a separate L2VPN
HPE FlexFabric 5940 Switch Series
HPE FlexFabric 5940 Switch Series EVPN Configuration Guide Part number: 5200-2002b Software version: Release 25xx Document version: 6W102-20170830 Copyright 2017 Hewlett Packard Enterprise Development
Deploy VPLS. APNIC Technical Workshop October 23 to 25, Selangor, Malaysia Hosted by:
Deploy VPLS APNIC Technical Workshop October 23 to 25, 2017. Selangor, Malaysia Hosted by: Issue Date: [201609] Revision: [01] Acknowledgement Cisco Systems 2 VPLS Overview 3 Virtual Private LAN Service
Configuring MPLS L2VPN
Contents Configuring MPLS L2VPN 1 MPLS L2VPN overview 1 About MPLS L2VPN 1 Comparison with traditional VPN 2 Comparison with MPLS L3VPN 2 Basic concepts 2 MPLS L2VPN implementation 3 MPLS L2VPN configuration
Computer Network Architectures and Multimedia. Guy Leduc. Chapter 2 MPLS networks. Chapter 2: MPLS
Computer Network Architectures and Multimedia Guy Leduc Chapter 2 MPLS networks Chapter based on Section 5.5 of Computer Networking: A Top Down Approach, 6 th edition. Jim Kurose, Keith Ross Addison-Wesley,
BGP Support for the L2VPN Address Family
BGP Support for the L2VPN Address Family Last Updated: November 21, 2012 BGP support for the Layer 2 Virtual Private Network (L2VPN) address family introduces a BGP-based autodiscovery mechanism to distribute
Configuring MPLS L2VPN
Contents Configuring MPLS L2VPN 1 Overview 1 Comparison with traditional VPN 1 Comparison with MPLS L3VPN 2 Basic concepts 2 MPLS L2VPN implementation 3 MPLS L2VPN configuration task list 4 Configuring
The IPsec protocols. Overview
The IPsec protocols -- components and services -- modes of operation -- Security Associations -- Authenticated Header (AH) -- Encapsulated Security Payload () (c) Levente Buttyán (buttyan@crysys.hu) Overview
Multi-site Datacenter Network Infrastructures
Multi-site Datacenter Network Infrastructures Petr Grygárek rek 2009 Petr Grygarek, Advanced Computer Networks Technologies 1 Why Multisite Datacenters? Resiliency against large-scale site failures (geodiversity)
Network Configuration Example
Network Configuration Example Configuring VPLS Multihoming Using Autodiscovery (FEC 129) Release NCE0072 Modified: 2016-10-26 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA
Internet Engineering Task Force (IETF) ISSN: A. Sajassi Cisco J. Uttaro AT&T May 2018
Internet Engineering Task Force (IETF) Request for Comments: 8388 Category: Informational ISSN: 2070-1721 J. Rabadan, Ed. S. Palislamovic W. Henderickx Nokia A. Sajassi Cisco J. Uttaro AT&T May 2018 Usage
Implementing IEEE 802.1ah Provider Backbone Bridge
Implementing IEEE 802.1ah Provider Backbone Bridge This module provides conceptual and configuration information for IEEE 802.1ah Provider Backbone Bridge on Cisco ASR 9000 Series Routers. The IEEE 802.1ah
On Host Identity Protocol
On Host Identity Protocol Miika Komu Data Communications Software Group Dep. of Computer Science and Engineering School of Science Aalto University 17.10.2011 Table of Contents Introduction
BIG-IP TMOS : Tunneling and IPsec. Version 13.0
BIG-IP TMOS : Tunneling and IPsec Version 13.0 Table of Contents Table of Contents Creating IP Tunnels... 7 About IP tunnels...7 About point-to-point tunnels... 7 Creating a point-to-point IP tunnel...8
Cisco BGP Overview. Finding Feature Information. Prerequisites for Cisco BGP
Border Gateway Protocol (BGP) is an interdomain routing protocol designed to provide loop-free routing between separate routing domains that contain independent routing policies (autonomous systems). The
L2 VPNs. Javed Asghar Muhammad Waris Sagheer 2005, Cisco Systems, Inc. All rights reserved.
L2 VPNs Javed Asghar jasghar@cisco.com Muhammad Waris Sagheer waris@cisco.com 2005, Cisco Systems, Inc. All rights reserved. 1 Agenda! Topics:! L2VPN Introduction! L2VPN Models! Quality of Service! L2VPN
Configuring 802.1Q VLAN Interfaces
A VLAN is a group of devices on one or more LANs that are configured so that they can communicate as if they were attached to the same wire, when in fact they are located on a number of different LAN segments.
Spirent TestCenter EVPN and PBB-EVPN AppNote
Spirent TestCenter EVPN and PBB-EVPN AppNote Executive summary 2 Overview of EVPN 2 Relevant standards 3 Test case: Single Home Test Scenario for EVPN 4 Overview 4 Objective 4 Topology 4 Step-by-step instructions
Huawei AR1000V Brochure
Huawei AR1000V Brochure AR1000V Brochure AR1000V Brochure Huawei AR1000V is a virtual router based on Network Functions Virtualization (NFV). As a software product, the AR1000V uses the x86 server hardware
Higher scalability to address more Layer 2 segments: up to 16 million VXLAN segments.
This chapter tells how to configure Virtual extensible LAN (VXLAN) interfaces. VXLANs act as Layer 2 virtual networks over Layer 3 physical networks to stretch Layer 2 networks. About VXLAN Encapsulation
Cisco Campus Fabric Introduction. Vedran Hafner Systems engineer Cisco
Cisco Campus Fabric Introduction Vedran Hafner Systems engineer Cisco Campus Fabric Abstract Is your Campus network facing some, or all, of these challenges? Host Mobility (w/o stretching VLANs) Network
H3C S6520XE-HI Switch Series
H3C S6520XE-HI Switch Series EVPN Configuration Guide New H3C Technologies Co., Ltd. http://www.h3c.com.hk Software version: Release 1108 Document version: 6W100-20171228 Copyright 2017, New H3C Technologies
Network Design with latest VPN Technologies
Network Design with latest VPN Technologies Carsten Rossenhövel Managing Director Which VPN type fits the purpose? SOHO Teleworkers Internet Branch Office Questions to identify: What are the business goals?
Wireless Client Isolation. Overview. Bridge Mode Client Isolation. Configuration
Wireless Client Isolation Overview Wireless Client Isolation is a security feature that prevents wireless clients from communicating with one another. This feature is useful for guest and BYOD SSIDs adding
Virtual Subnet : A L3VPN-based Subnet Extension Solution draft-xu-l3vpn-virtual-subnet-01
Virtual Subnet : A L3VPN-based Subnet Extension Solution draft-xu-l3vpn-virtual-subnet-01 Xiaohu Xu (Huawei) Susan Hares (Adara Networks) Yongbing Fan (China Telecom) Christian Jacquenet (Orange) Truman
Network Working Group. Category: Standards Track September 2006
Network Working Group W. Luo Request for Comments: 4667 Cisco Systems, Inc. Category: Standards Track September 2006 Layer 2 Virtual Private Network (L2VPN) Extensions for Layer 2 Tunneling Protocol (L2TP)
Table of Contents 1 Multicast VPN Configuration 1-1
Table of Contents 1 Multicast VPN Configuration 1-1 Multicast VPN Overview 1-1 Introduction to MPLS L3VPN 1-1 Introduction to Multicast VPN 1-2 Introduction to MD-VPN 1-4 Protocols and Standards 1-7 How
L2VPN Interworking. Finding Feature Information
Interworking is a transforming function that is required to interconnect two heterogeneous attachment circuits (ACs). Several types of interworking functions exist. The function that is used would depend
Contents. Configuring EVI 1
Contents Configuring EVI 1 Overview 1 Layer 2 connectivity extension issues 1 Network topologies 2 Terminology 3 Working mechanism 4 Placement of Layer 3 gateways 6 ARP flood suppression 7 Selective flood
www. .org New Quagga fork with open development and community Martin Winter
www..org New Quagga fork with open development and community Martin Winter mwinter@opensourcerouting.org 1 What is FRR? (for the not so technical People) Open Source (GPLv2+) Routing Stack Implements RIP,
Virtual Subnet (VS): A Scalable Data Center Interconnection Solution
Virtual Subnet (VS): A Scalable Data Center Interconnection Solution draft-xu-virtual-subnet-05 Xiaohu Xu (xuxh@huawei.com) NANOG52, Denver Requirements for Data Center Interconnection To interconnect
Configuring MPLS and EoMPLS
37 CHAPTER This chapter describes how to configure multiprotocol label switching (MPLS) and Ethernet over MPLS (EoMPLS) on the Catalyst 3750 Metro switch. MPLS is a packet-switching technology that integrates
IPV6 SIMPLE SECURITY CAPABILITIES.
IPV6 SIMPLE SECURITY CAPABILITIES. 50 issues from RFC 6092 edited by J. Woodyatt, Apple Presentation by Olle E. Johansson, Edvina AB. ABSTRACT The RFC which this presentation is based upon is focused on
Homework 4 assignment for ECE374 Posted: 04/06/15 Due: 04/13/15
ECE374: Homework 4 1 Homework 4 assignment for ECE374 Posted: 04/06/15 Due: 04/13/15 Note: In all written assignments, please show as much of your work as you can. Even if you get a wrong answer, you can
Lecture 7 Advanced Networking Virtual LAN. Antonio Cianfrani DIET Department Networking Group netlab.uniroma1.it
Lecture 7 Advanced Networking Virtual LAN Antonio Cianfrani DIET Department Networking Group netlab.uniroma1.it Advanced Networking Scenario: Data Center Network Single Multiple, interconnected via Internet
Configuration and Management of Networks. Pedro Amaral
Configuration and Management of Networks Pedro Amaral 2012 Service Provider Networks Carrier grade networks that carry customers traffic: Triple play residential customers Voice High Speed Internet Broadcast
Hierarchical Fabric Designs The Journey to Multisite. Lukas Krattiger Principal Engineer September 2017
Hierarchical Fabric Designs The Journey to Multisite Lukas Krattiger Principal Engineer September 2017 A Single Fabric, a Single Data Center External Layer-3 Network Pod 1 Leaf/ Topologies (aka Folded
Recommended Configuration Maximums
Recommended Configuration Maximums NSX for vsphere 6.3 Update 2 Last Updated December 21, 2017 This document supports the version of each product listed and supports all subsequent versions until the document
The link-local prefix ff00::/8 specifies any addresses which are used only in software.
Which statement is true about the IPv6 prefix ff00::/8? The link-local prefix ff00::/8 specifies any addresses which are used only in software. The link-local prefix ff00::/8 specifies all addresses which
Internet Engineering Task Force (IETF) Request for Comments: 8014 Category: Informational. M. Lasserre Independent T. Narten IBM December 2016
Internet Engineering Task Force (IETF) Request for Comments: 8014 Category: Informational ISSN: 2070-1721 D. Black Dell EMC J. Hudson L. Kreeger M. Lasserre Independent T. Narten IBM December 2016 An Architecture
Optimizing Layer 2 DCI with OTV between Multiple VXLAN EVPN Fabrics (Multifabric)
White Paper Optimizing Layer 2 DCI with OTV between Multiple VXLAN EVPN Fabrics (Multifabric) What You Will Learn This document describes how to achieve a VXLAN EVPN multifabric design by integrating Virtual
Implementing Virtual Private LAN Services
Implementing Virtual Private LAN Services This module provides the conceptual and configuration infmation f Virtual Private LAN Services (VPLS) on Cisco IOS XR software. VPLS suppts Layer 2 VPN technology
Lecture 8. Basic Internetworking (IP) Outline. Basic Internetworking (IP) Basic Internetworking (IP) Service Model
Lecture 8 Basic Internetworking (IP) Reminder: Homework 3, Programming Project 2 due on Tuesday. An example internet is shown at right. Routers or gateways are used to connect different physical networks.
Foreword xxiii Preface xxvii IPv6 Rationale and Features
Contents Foreword Preface xxiii xxvii 1 IPv6 Rationale and Features 1 1.1 Internet Growth 1 1.1.1 IPv4 Addressing 1 1.1.2 IPv4 Address Space Utilization 3 1.1.3 Network Address Translation 5 1.1.4 HTTP
Vendor: HP. Exam Code: HP2-Z32. Exam Name: Implementing HP MSM Wireless Networks. Version: Demo
Vendor: HP Exam Code: HP2-Z32 Exam Name: Implementing HP MSM Wireless Networks Version: Demo QUESTION 1 A network administrator deploys several HP MSM APs and an HP MSM Controller. The APs discover the
IPv6. Dispelling the Magic
IPv6 Dispelling the Magic Board Chairman RIPE NCC 1 Why the Title? 96 more bits. No Magic Gaurab Raj Upadhaya 2 Agenda RIPE NCC Background to IPv6 History of IPv6 Why Deploy Ipv6? Where are we Conclusions
Cisco Nexus 7000 Series NX-OS LISP Configuration Guide
First Published: 2011-10-25 Last Modified: 2014-04-25 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387)
Virtual Extensible LAN and Ethernet Virtual Private Network
Virtual Extensible LAN and Ethernet Virtual Private Network Contents Introduction Prerequisites Requirements Components Used Background Information Why you need a new extension for VLAN? Why do you chose
MPLS VPN. 5 ian 2010
MPLS VPN 5 ian 2010 What this lecture is about: IP CEF MPLS architecture What is MPLS? MPLS labels Packet forwarding in MPLS MPLS VPNs 3 IP CEF & MPLS Overview How does a router forward packets? Process
VXLAN Design with Cisco Nexus 9300 Platform Switches
Guide VXLAN Design with Cisco Nexus 9300 Platform Switches Guide October 2014 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 39 Contents What