IMPLEMENTING CISCO IP SWITCHED NETWORKS (SWITCH)

Transcription

1 IMPLEMENTING CISCO IP SWITCHED NETWORKS (SWITCH) COURSE DESCRIPTION: SWITCH includes extensive hands-n labs t help yu learn t plan, cnfigure, and verify the implementatin f cmplex enterprise switching slutins fr campus envirnments using the Cisc Enterprise Campus Architecture. Type: Cisc Duratin: 5 days WHAT YOU WILL LEARN: Analyze campus netwrk designs Implement VLANs in a netwrk campus Audience: Netwrk engineers with at least ne year f prfessinal wrk experience wh are ready t advance their skills and wrk independently n cmplex netwrk slutins. Implement spanning tree Implement inter-vlan ruting in a campus netwrk Implement high-availability technlgies and techniques using multilayer switches in a campus envirnment Implement security features in a switched netwrk Integrate WLANs int a campus netwrk Accmmdate vice and vide in campus netwrks 1

2 CONTENT ANALYZING CAMPUS NETWORK DESIGNS Enterprise Campus Architecture Cisc SONA Benefits f the enterprise campus architecture Functin f the cre layer Impact f traffic types n the netwrk infrastructure Cisc Lifecycle Services and Netwrk Implementatin PPDIOO lifecycle apprach PPDIOO implementatin planning IMPLEMENTING VLANS IN CAMPUS NETWORKS Best Practices fr VLAN Tplgies VLAN segmentatin mdels Creating an implementatin plan Implementatin chices and their cnsequences Implementatin and verificatin plans fr a VLAN netwrk with end-t-end VLANs and trunks and VLAN Trunk Prtcl (VTP) Cnfiguring Private VLANs (PVLANs) Cnfigure islated and cmmunity PVLANs Implementatin and verificatin plans fr a VLAN netwrk design that cntains PVLANs Cnfigure PVLANs acrss multiple switches Cnfiguring Link Aggregatin with EtherChannel Benefits f EtherChannel Cmpare the PAgP and the LACP Create and execute an implementatin and verificatin plan in a VLAN netwrk with Layer 2 EtherChannel links and lad balancing amng the prts included in an EtherChannel IMPLEMENTING SPANNING TREE Spanning Tree Prtcl (STP) Enhancements STP standards and peratins Implement and cnfigure PVRST+ and MSTP RSTP prt rles Verify RSTP cnfiguratins STP Stability Mechanisms Prtect and ptimize the peratin f STP Cnfigure BPDUGuard, BPDUFilter, RtGuard, and LpGuard 2

3 Cnfigure UDLD t detect and shut dwn unidirectinal links IMPLEMENTING INTER-VLAN ROUTING Ruting Between VLANs Cnfigure and verify inter-vlan ruting in a Layer 2 tplgy using an external ruter, a switch SVI, r a switch-ruted interface Cnfigure bth a switch and ruter t accmmdate inter-vlan packet transfer using an external ruter Layer 3 SVI Cmmands used t cnfigure an SVI A ruted prt n a multilayer switch Cmmands used t cnfigure a ruted prt n a multilayer switch Cnfigure Layer 3 EtherChannel links Cnfigure inter-vlan ruting n a multilayer switch Cnfigure DHCP services n a Layer 3 switch Deplying Multilayer Switching with Cisc Express Frwarding Cnfigure and verify inter-vlan ruting in a Layer 2 tplgy using multilayer switching with Cisc Express Frwarding Multilayer switching and hw it differs when yu are perfrming Layer 2 vs. Layer 3 switching Packet and frame header rewriting perfrmed by a multilayer switch Layer 3 switch prcessing Switching methds available n a Cisc switch Cnfigure Cisc Express Frwarding n a Cisc switch IMPLEMENTING A HIGHLY AVAILABLE NETWORK High Availability Uses, requirements, benefits, and perfrmance expectatins Resiliency fr high availability Design the netwrk fr ptimal redundancy Implementing High Availability Use Cisc StackWise technlgy n access switches Evaluate the impact f t little redundancy Assess the impact f uplink failure Implementing Netwrk Mnitring Cnfigure IP SLA technlgy IMPLEMENTING LAYER 3 HIGH AVAILABILITY Cnfiguring Layer 3 Redundancy with HSRP Ruting issues Ruter redundancy prcess Cnfigure HSRP peratins 3

4 Fine-tune and trublesht HSRP Cnfiguring Layer 3 Redundancy with VRRP and GLBP VRRP peratins prcess Cnfigure VRRP GLBP peratins prcess Cnfigure GLBP MINIMIZING SERVICE LOSS AND DATA THEFT IN A CAMPUS NETWORK Switch Security Issues Switch and Layer 2 security as a subset f an verall netwrk security plan Hw a rgue device gains unauthrized access t a netwrk Categrize switch attack types and list mitigatin ptins Hw a MAC flding attack verflws a CAM Campus Backbne Layer table Hw prt security is used t blck input frm devices based n Layer 2 restrictins Cnfigure prt security n a switch Authenticatin methds using AAA Prt-based authenticatin using 802.1X Prtecting Against VLAN Attacks VLAN hpping Cnfigure a switch t mitigate VLAN hpping attacks VACLs and their purpse as part f VLAN security Cnfigure VACLs Prtecting Against Spfing Attacks DHCP spfing attacks Cnfigure DHCP snping ARP pisning Prtect against ARP spfing attacks with DAI Securing Netwrk Services Cisc Discvery Prtcl and LLDP vulnerabilities Telnet prtcl vulnerabilities Cnfigure SSH Cnfigure vty ACLs Cnfigure Cisc IOS secure HTTP server Switch security cnsideratins ACCOMMODATING VOICE AND VIDEO IN CAMPUS NETWORKS Planning fr Supprt f Vice in a Campus Netwrk Cmpnents f a VIP netwrk and IP telephny Bandwidth cnsumptin f vice traffic vs. data traffic Vide bandwidth cnsumptin vs. vice and data bandwidth cnsumptin Slve fr latency, jitter, bandwidth, packet lss, and reliability 4

5 Security fr vice and vide traffic integratin int a data netwrk Integrating and Verifying VIP in a Campus Infrastructure Plan fr VIP requirements Vice VLANs Cnfigure and Verify Vice VLANs Plan PE requirements and cnfigure PE Prvide additinal services required by VIP devices Create a Test Plan fr VIP integratin Accmmdate Vice and Vide n Campus Switches High availability applied t VIP r vide traffic Build an integrated vice/vide/data campus netwrk The need fr QS fr VIP and vide integratin Cnfigure basic QS fr vice and vide VLANs INTEGRATING WIRELESS LANS INTO A CAMPUS NETWORK Cmparing WLANs with Campus Netwrks Cmpare wired and wireless LAN Main wireless LAN tplgies Settings specific t WLANs, such as SSIDs, and WLAN-t-VLAN mapping Assessing the Impact f WLANs n Campus Netwrks WLAN implementatins Cmpare WLAN slutins Assess traffic flw and impact n the campus LAN f an autnmus AP cnfiguratin and a cntrller-based cnfiguratin Preparing the Campus Infrastructure fr WLANs Best placement fr APs and cntrllers Cnfigure switches fr WLAN devices Gather WLAN requirements Plan WLAN integratin Create a test plan 5