Outlines: ROUTE: 1. Planning Routing Services to Requirements

Transcription

1 Outlines: ROUTE: 1. Planning Ruting Services t Requirements Assessing Cmplex Enterprise Netwrk Requirements Cisc hierarchical netwrk mdel Cisc Enterprise Architecture Traffic cnditins in a cnverged netwrk Cisc SONA framewrk Ruting and ruting prtcls Cmmn Maintenance Prcesses and Prcedures Typical implementatin plan infrmatin and tasks Implementatin dcumentatin 2. Implementing an EIGRP-Based Slutin Planning Fur key technlgies emplyed by EIGRP Hw EIGRP perates Five cmpnents f the metric used by EIGRP Calculate the EIGRP metric fr a range f pathways between ruters Create a typical implementatin plan fr an EIGRP-based slutin Dcument EIGRP implementatin, peratins, and maintenance prcesses Implementing and Verifying Basic EIGRP fr the Enterprise LAN Architecture Cmmands used in a basic EIGRP cnfiguratin task Select the interfaces and netwrks that will participate in EIGRP ruting use the netwrk cmmand and wildcard masks Verify basic EIGRP peratins, and that the ruter recgnizes EIGRP neighbrs and their rutes Create neighbr relatinships using the neighbr cmmand and verify that the ruter recgnizes EIGRP neighbrs and rutes Cntrl ruting update advertisements using the passive-interface cmmand Cnfigure and verify the last-resrt gateway r default rute Cmpare manual rute summarizatin t default autmatic rute summarizatin Cnfigure and verify rute summarizatin Cnfiguring and Verifying EIGRP fr the Enterprise WAN Architecture Effect n EIGRP peratins Circuit emulatin link such as Metr Ethernet r EMPLS MPLS VPNs

2 Frame Relay Physical and Lgical multipint interfaces Dynamic DLCI mapping Static DLCI mapping Bradcast vs. nn-bradcast Lgical multipint interface Dynamic DLCI mapping Static DLCI mapping bradcast vs. nn-bradcast Lgical pint-t-pint interface Cnfigure and verify EIGRP perating ver Frame Relay Features f lad balancing acrss equal paths Cnfigure and verify EIGRP lad balancing acrss unequal cst paths Cnfigure EIGRP bandwidth use acrss WAN links Implementing and Verifying EIGRP Authenticatin Evaluate ruter authenticatin Cnfigure MD5 authenticatin Trublesht MD5 authenticatin Advanced EIGRP Features in an Enterprise Netwrk Factrs affecting scalability in large internetwrks Using queries t update ruting tables when a rute is lst and there is n successr Mark the spkes f a large netwrk as stubs t reduce EIGRP queries and imprve netwrk scaling Why stuck-in-active (SIA) cnnectins ccur Minimize active rutes Illustrate hw graceful shutdwn prevents lss f packets when ruters g dwn 3. Implementing a Scalable Multiarea Netwrk OSPF-Based Slutin Planning Link-state ruting prtcls Tw-tier hierarchy structure Hw link-state ruting prtcls establish neighbr adjacencies Hw OSPF calculates the best path t each destinatin netwrk Hw link-state updates (LSUs) verify active links Different OSPF area types Create a typical implementatin plan and dcumentatin package fr an OSPF-based slutin Hw OSPF Packet Prcesses Wrk Five OSPF packet types Hw OSPF neighbr adjacencies are established

3 Exchanging and synchrnizing link-state databases (LSDBs) r tplgy tables Maintaining a database f the mst recent link-state sequence numbers Verifying that OSPF packets are flwing prperly between tw ruters Imprving Ruting Perfrmance in a Cmplex Enterprise Netwrk OSPF netwrk types Determine adjacency behavir Pint-t-pint links Bradcast netwrks Metr Ethernet and EMPLS netwrks MPLS netwrks Select a DR and BDR Implement OSPF ver Frame Relay Frame Relay NBMA Pint-t-pint Frame Relay netwrk Pint-t-multipint Frame Relay netwrk Use subinterfaces in OSPF ver Frame Relay Cnfiguring and Verifying OSPF Ruting Cnfigure basic single-area and multiarea OSPF Enable the rute prcess Cnfigure a ruter ID Enable OSPF n netwrks and interfaces using the netwrk and ip spf cmmands Cnfigure and verify basic multiarea OSPF peratins Neighbr relatinship OSPF ruter types LSAs defined by OSPF Interpret the OSPF LSDB and ruting table Cntrlling ruting advertisements using the passive-interface cmmand Effects f a nn-cntiguus backbne r area that des nt cnnect t area 0 and hw OSPF virtual links are used t address these issues Cnfigure and verify an OSPF virtual link Change the cst metric frm default values Cnfiguring and Verifying OSPF Rute Summarizatin Functins f inter-area rute summarizatin and external rute summarizatin Cnfigure rute summarizatin in OSPF Benefits f a default rute in OSPF Cnfigure a default rute injectin int OSPF Cnfiguring and Verifying OSPF Special Area Types OSPF area types Cnfigure OSPF stub areas and ttally stubby areas

4 Interpret ruting tables fr stub areas and ttally stubby areas Cnfigure OSPF NSSAs Verify all types f OSPF stub areas Cnfiguring and Verifying OSPF Authenticatin Distinguish between the tw types f authenticatin used in OSPF Cnfigure and trublesht simple passwrd authenticatin Cnfigure and trublesht MD5 authenticatin 4. Implement an IPv4-Based Redistributin Slutin Assessing Netwrk Ruting Perfrmance and Security Issues Cmmn netwrk perfrmance issues Hw distributin lists, prefix lists, and rute maps wrk and hw they cntrl ruting updates Use rute maps t filter rutes Suppress ruting updates using passive interfaces Operating a Netwrk Using Multiple IP Ruting Prtcls The need t use multiple IP ruting prtcls Rute redistributin Cnfigure dynamic ruting prtcl updates fr passive interfaces and distribute lists Use f Plicy ruting and rute maps Seed metrics used by varius ruting prtcls Prcess fr pints f distributin in a netwrk and identifying pssible ruting lps Create a distributin and lp map fr a given netwrk Cnfiguring and Verifying Rute Redistributin Prcedures necessary t cnfigure rute redistributin int RIP, EIGRP, and OSPF Advantages f administrative distance in terms f ruting prtcls Mdify administrative distance n the ruter glbally and specifically Assess the impact f administrative distance changes n ruting tables Implement rute maps with rute redistributin t prevent ruting lps Verify rute redistributin peratins 5. Implementing Path Cntrl Assessing Path Cntrl Netwrk Perfrmance Issues Use filters t determine path selectin Use PBR t determine path selectin Cnfigure and verify PBR Additinal Path Cntrl Sessins via E-Learning ROUTE-01 Lessn 1: Parallel Prcesses when Implementing Path Cntrl ROUTE-01 Lessn 2: Directed Dem f Prcedures t Implement Path Cntrl by Other Methds

5 ROUTE-01 Lessn 3: Self-Check Assessment Cnfiguring and Verifying Basic BGP Operatins Initiate basic BGP cnfiguratin Activate a BGP sessin fr external and internal neighbring ruters Administratively shut dwn and re-enable a BGP neighbr Factrs and ptins t crrectly cnfigure BGP BGP neighbr states Cnfigure MD5 authenticatin n the BGP TCP cnnectin between tw ruters Cnfigure and verify BGP peratins in a single-hmed envirnment Trublesht BGP cnfiguratin Using the BGP Attributes and Path Selectin Prcess BGP attributes that affect utbund EBGP path selectin Criteria fr selecting a BGP path Cnfigure the AS path attribute t affect utbund EBGP path selectin Cnfigure lcal preference attribute t affect utbund path selectin 6- IPv6 and Ruting fr Branch Offices and Remte Wrkers Implementing IPv6 Implementing Ruting Facilities fr Branch Offices and Mbile Wrkers Analyzing Mbile Wrkers Designs and Planning fr Mbile Wrkers Installatins Directed Dem: Implement Special Facilities fr Mbile Wrkers SWITCH: 1. Analyzing Campus Netwrk Designs Enterprise Campus Architecture Cisc SONA Benefits f the enterprise campus architecture Functin f the cre layer Impact f traffic types n the netwrk infrastructure Cisc Lifecycle Services and Netwrk Implementatin PPDIOO lifecycle apprach PPDIOO implementatin planning

6 2. Implementing VLANs in Campus Netwrks Best Practices fr VLAN Tplgies VLAN segmentatin mdels Creating an implementatin plan Implementatin chices and their cnsequences Implementatin and verificatin plans fr a VLAN netwrk with end-t-end VLANs and trunks and VLAN Trunk Prtcl (VTP) Cnfiguring Private VLANs (PVLANs) Cnfigure islated and cmmunity PVLANs Implementatin and verificatin plans fr a VLAN netwrk design that cntains PVLANs Cnfigure PVLANs acrss multiple switches Cnfiguring Link Aggregatin with EtherChannel Benefits f EtherChannel Cmpare the PAgP and the LACP Create and execute an implementatin and verificatin plan in a VLAN netwrk with Layer 2 EtherChannel links and lad balancing amng the prts included in an EtherChannel 3. Implementing Spanning Tree Spanning Tree Prtcl (STP) Enhancements STP standards and peratins Implement and cnfigure PVRST+ and MSTP RSTP prt rles Verify RSTP cnfiguratins STP Stability Mechanisms Prtect and ptimize the peratin f STP Cnfigure BPDUGuard, BPDUFilter, RtGuard, and LpGuard Cnfigure UDLD t detect and shut dwn unidirectinal links 4. Implementing Inter-VLAN Ruting Ruting Between VLANs Cnfigure and verify inter-vlan ruting in a Layer 2 tplgy using an external ruter, a switch SVI, r a switch-ruted interface Cnfigure bth a switch and ruter t accmmdate inter-vlan packet transfer using an external ruter Layer 3 SVI Cmmands used t cnfigure an SVI A ruted prt n a multilayer switch Cmmands used t cnfigure a ruted prt n a multilayer switch Cnfigure Layer 3 EtherChannel links

7 Cnfigure inter-vlan ruting n a multilayer switch Cnfigure DHCP services n a Layer 3 switch Deplying Multilayer Switching with Cisc Express Frwarding Cnfigure and verify inter-vlan ruting in a Layer 2 tplgy using multilayer switching with Cisc Express Frwarding Multilayer switching and hw it differs when yu are perfrming Layer 2 vs. Layer 3 switching Packet and frame header rewriting perfrmed by a multilayer switch Layer 3 switch prcessing Switching methds available n a Cisc switch Cnfigure Cisc Express Frwarding n a Cisc switch 5. Implementing a Highly Available Netwrk High Availability Uses, requirements, benefits, and perfrmance expectatins Resiliency fr high availability Design the netwrk fr ptimal redundancy Implementing High Availability Use Cisc StackWise technlgy n access switches Evaluate the impact f t little redundancy Assess the impact f uplink failure Implementing Netwrk Mnitring Cnfigure IP SLA technlgy 6. Implementing Layer 3 High Availability Cnfiguring Layer 3 Redundancy with HSRP Ruting issues Ruter redundancy prcess Cnfigure HSRP peratins Fine-tune and trublesht HSRP Cnfiguring Layer 3 Redundancy with VRRP and GLBP VRRP peratins prcess Cnfigure VRRP GLBP peratins prcess Cnfigure GLBP 7. Minimizing Service Lss and Data Theft in a Campus Netwrk Switch Security Issues Switch and Layer 2 security as a subset f an verall netwrk security plan Hw a rgue device gains unauthrized access t a netwrk

8 Categrize switch attack types and list mitigatin ptins Hw a MAC flding attack verflws a CAM Campus Backbne Layer table Hw prt security is used t blck input frm devices based n Layer 2 restrictins Cnfigure prt security n a switch Authenticatin methds using AAA Prt-based authenticatin using 802.1X Prtecting Against VLAN Attacks VLAN hpping Cnfigure a switch t mitigate VLAN hpping attacks VACLs and their purpse as part f VLAN security Cnfigure VACLs Prtecting Against Spfing Attacks DHCP spfing attacks Cnfigure DHCP snping ARP pisning Prtect against ARP spfing attacks with DAI Securing Netwrk Services Cisc Discvery Prtcl and LLDP vulnerabilities Telnet prtcl vulnerabilities Cnfigure SSH Cnfigure vty ACLs Cnfigure Cisc IOS secure HTTP server Switch security cnsideratins 8. Accmmdating Vice and Vide in Campus Netwrks Planning fr Supprt f Vice in a Campus Netwrk Cmpnents f a VIP netwrk and IP telephny Bandwidth cnsumptin f vice traffic vs. data traffic Vide bandwidth cnsumptin vs. vice and data bandwidth cnsumptin Slve fr latency, jitter, bandwidth, packet lss, and reliability Security fr vice and vide traffic integratin int a data netwrk Integrating and Verifying VIP in a Campus Infrastructure Plan fr VIP requirements Vice VLANs Cnfigure and Verify Vice VLANs Plan PE requirements and cnfigure PE Prvide additinal services required by VIP devices Create a Test Plan fr VIP integratin Accmmdate Vice and Vide n Campus Switches

9 High availability applied t VIP r vide traffic Build an integrated vice/vide/data campus netwrk The need fr QS fr VIP and vide integratin Cnfigure basic QS fr vice and vide VLANs 9. Integrating Wireless LANs int a Campus Netwrk Cmparing WLANs with Campus Netwrks Cmpare wired and wireless LAN Main wireless LAN tplgies Settings specific t WLANs, such as SSIDs, and WLAN-t-VLAN mapping Assessing the Impact f WLANs n Campus Netwrks WLAN implementatins Cmpare WLAN slutins Assess traffic flw and impact n the campus LAN f an autnmus AP cnfiguratin and a cntrller-based cnfiguratin Preparing the Campus Infrastructure fr WLANs Best placement fr APs and cntrllers Cnfigure switches fr WLAN devices Gather WLAN requirements Plan WLAN integratin Create a test plan TSHOOT: 1. Maintenance Planning Maintenance Methdlgies Mdels Prcedures Supprting Tls Maintenance Prcesses and Prcedures Essential Netwrk Maintenance Tasks Maintenance Planning Change Cntrl Dcumentatin Disaster Recvery Netwrk Mnitring and Perfrmance Measurement Tls, Applicatins, and Resurces

10 Fundamental Tls Dcumentatin Tls Disaster Recvery Tls Netwrk Mnitring Tls Perfrmance Measurement Tls 2. Planning Trubleshting Prcesses Trubleshting Methdlgies Trubleshting Principles Structured Netwrk Trubleshting Cmmn Trubleshting Appraches Planning and Implementing Trubleshting Prcedures Netwrk Trubleshting Prcedures Reprting, Defining, and Assigning Prblems Gathering Relevant Infrmatin Analyzing Gathered Infrmatin Prpsing and Eliminating Prblem Causes Prpsing Hyptheses Testing and Verifying a Prpsed Hypthesis Wrapping Up the Prcess Integrating Trubleshting int the Netwrk Maintenance Prcess Dcumentatin Creating a Baseline Cmmunicatin Change Cntrl 3. Maintenance and Trubleshting Tls and Applicatins Assembling a Basic Diagnstic Tlkit Selecting and Filtering Infrmatin Cnnectin Testing Hardware Diagnstics Specialized Tls Trubleshting and Supprting Tls Traffic Capturing Statistics Gathering and Traffic Accunting Ntificatin 4. Trubleshting Campus Switching-Based Slutins VLANs LAN Switching Operatin

11 Switch Data Structures Spanning Tree and Rapid Spanning Tree Analyzing the Tplgy Spanning Tree Failures EtherChannel Operatin Switched Virtual Interfaces and Inter-VLAN Ruting Inter-VLAN Ruting and Multilayer Switching Switched Virtual Interfaces and Ruted Prts FHRPs Using HSRP fr First-Hp Redundancy Verifying HSRP Operatin Using VRRP and GLBP as Alternatives t HSRP Switch Perfrmance Prblems Physical and Data Link Layer Prblems TCAM Prblems High CPU Lad n Switches Additinal Campus Switching Technlgies (via E-Learning) 5. Trubleshting Ruting-Based Slutins Netwrk Layer Cnnectivity Layer 3 Cnnectivity Overview Layer 3 Data Structures Layer 3 t Layer 2 Mapping EIGRP Data Structures Infrmatin Flw Cisc IOS EIGRP Cmmands OSPF Data Structures Infrmatin Flw Inside an Area Infrmatin Flw frm Area t Area Rute Redistributin Prcess Verifying Redistributin BGP Data Structures Ruting Infrmatin Flw Cisc IOS Cmmands Ruter Perfrmance Prblems

12 High CPU Cisc IOS Switching Paths Ruter Memry Issues Trubleshting NAT and DHCP (via E-Learning) 6. Netwrk Security Slutins Trubleshting Security Features Netwrk and Device Security Security Features Review Trubleshting Transprt Layer Prblems Cisc IOS Firewall Authenticatin, Authrizatin, and Accunting 7. Integrated, Cmplex Enterprise Netwrks