Designing Cisco Network Service Architectures ARCH v2.1; 5 Days, Instructor-led

Transcription

1 Designing Cisco Network Service Architectures ARCH v2.1; 5 Days, Instructor-led Course Description The Designing Cisco Network Service Architectures (ARCH) v2.1 course is a five-day instructor-led course. The aim of the course is to enable learners to perform the conceptual, intermediate, and detailed design of a network infrastructure that supports desired network solutions over intelligent network services, in order to achieve effective performance, scalability, and availability. This course enables learners, by applying solid Cisco network solution models and recommended design practices, to provide viable, stable enterprise internetworking solutions. The course presents concepts and examples that are necessary to design converged enterprise networks. Advanced network infrastructure technologies, such as virtual private networks (VPNs) and other security solutions, are also covered. Course Objectives Upon completing this course, the student will be able to meet these overall objectives: Introduce the Cisco Network Architectures for the Enterprise and explain how this concept addresses enterprise network needs for performance, scalability, and availability Describe how the Cisco Network Architectures for the Enterprise can be used as a framework for designing enterprise networks Create conceptual, intermediate, and detailed enterprise campus network designs Create conceptual, intermediate, and detailed enterprise data center designs Create conceptual, intermediate, and detailed enterprise edge and remote infrastructure designs Create conceptual, intermediate, and detailed network service designs for security considerations Create conceptual, intermediate, and detailed VPN designs Prerequisites Before taking the ARCH v2.1 course, learners should be familiar with internetworking technologies, Cisco products, and Cisco IOS features. To gain the prerequisite skills and knowledge, Cisco strongly recommends knowledge of Cisco CCNA, Cisco CCDA, Implementing Cisco IP Routing (ROUTE), and Implementing Cisco Switched Networks (SWITCH) content: The recommended courses for CCNA are the Interconnecting Cisco Network Devices Part 1 (ICND1) and Interconnecting Cisco Network Devices Part 2 (ICND2) courses. The recommended course for CCDA is designing for Cisco Internetwork Solutions (DESGN). The recommended course for the ROUTE exam is Implementing Cisco IP Routing (ROUTE). The recommended course for the SWITCH exam is Implementing Cisco IP Switched Networks (SWITCH).

2 Who Should Attend The primary audience for this course is as follows: Individuals seeking the Cisco CCDP certification and those working toward the Cisco CCDE certification The secondary audience for this course is as follows: Presales and post sales network engineers that are involved in network design, planning, and implementation Network administrators and designers that are responsible for designing and implementing the enterprise network Cisco CCDA, CCDP, and CCDE candidates Course Outline Module 1: Cisco Network Architectures for the Enterprise Lesson 1: Review of Network Architectures for the Enterprise o Hierarchical Model o Enterprise Network Design for Cisco Architectures o Service and Application Integration o Modularity in Cisco Network Architectures for the Enterprise Lesson 2: Reviewing the Cisco PPDIOO Approach o PPDIOO Network Life-Cycle Approach o Using the Design Methodology Under PPDIOO Module 2: Enterprise Campus Network Design Lesson 1: High Availability in the Enterprise Campus o Enterprise Campus Infrastructure Review o High Availability Considerations Lesson 2: Layer 2 Design Recommendations o Recommended Practices for Spanning-Tree Configuration o Recommended Practices for STP Hardening o Recommended Practices for Trunk Configuration o Recommended Practices for UDLD Configuration o Recommended Practices for EtherChannel o Supporting Virtual Switching Systems Designs Lesson 3: Layer 3 Design Recommendations o Managing Oversubscription and Bandwidth o Link Load Balancing o Routing Protocol Design o First-Hop Redundancy Lesson 4: Designing the Layer 2-to-Layer 3 Boundary o Layer 2-to-Layer 3 Boundary Design Models o Potential Design Issues Lesson 5: Describing Enterprise Network Virtualization Technologies o Describing Network Virtualization

3 o Describing Device Virtualization o Describing Server Virtualization Lesson 6: Infrastructure Services Considerations o IP Telephony Considerations o Video Considerations o QoS Considerations Module 3: Advanced Addressing and Routing Design Lesson 1: Advanced Addressing Design o IP Address Planning as a Foundation o Applications of Summarizable Addressing o Design Considerations for IPv6 in Campus Networks Lesson 2: Advanced Routing Design o Route Summarization and Default Routing o Route Filtering in the Network Design o Designing Redistribution Lesson 3: Scalable EIGRP Design o Scaling EIGRP Designs o EIGRP with Multiple Autonomous Systems Lesson 4: Scalable OSPF Design o Factors Influencing OSPF Scalability o Fast Convergence in OSPF Lesson 5: Scalable BGP Design o Scaling IBGP Designs o Scaling IBGP with BGP Route Reflectors o Scaling IBGP with BGP Confederations Module 4: Advanced WAN Services Design Considerations Lesson 1: Optical Technologies for WANs o Advanced WAN Service Layers o Overview of SONET and SDH o WDM Overview Lesson 2: Using Metro Ethernet, VPLS, and MPLS VPN Technologies o Metro Ethernet Overview o VPLS Overview o MPLS VPN Overview Lesson 3: Advanced WAN Service Implementations o Advanced WAN Service Selection o SLA Overview o Application Performance Across the WAN o Cisco PfR Overview

4 Module 5: Enterprise Data Center Design Lesson 1: Core and Aggregation Layer Design o Data Center Architecture Overview o Data Center Core Layer Design o Aggregation Layer Design o Using the Cisco Nexus 7000 Series in the Core and Aggregation Layer Lesson 2: Access Layer Design o Overview of the Data Center Access Layer o Layer 2 Looped Designs o Layer 2 Loop-Free Designs o Layer 2 Flex Link Designs o Layer 3 Access Layer Designs o Blade Server Overview o Cisco Nexus Switch Family in the Access Layer Lesson 3: Scaling the Data Center Architecture o End-of-Row vs. Top-of-Rack Designs o Scaling Bandwidth and Uplink Density Lesson 4: Spanning-Tree Sizing and High Availability o STP Scalability o High Availability in the Data Center Module 6: E-Commerce Module Design Lesson 1: Common Component Designs for the E-Commerce Module o Common Firewall Designs for E-Commerce o Common Server Load Balancer Designs for E-Commerce o Common Topology Designs for E-Commerce Lesson 2: Integrated E-Commerce Designs o Base E-Commerce Module Design o Design with Two Firewall Layers o One-Armed Design with Two Firewall Layers o One-Armed SLB Design with Firewall Contexts Module 7: SAN Design Considerations Lesson 1: Identifying SAN Components and Technologies o SAN Overview and Components o Storage Topologies o SAN Technologies Lesson 2: SAN and SAN Extension Design o SAN Design Factors o SAN Extension Lesson 3: Integrated Fabric Designs Using Cisco Nexus Technology o Unified Fabric Technologies o Unified Fabric Design Considerations

5 Module 8: Security Services Design Lesson 1: Firewall Design Considerations o Firewall Modes o Zone-Based Policy Firewall o Virtual Firewall Overview o Active-Active Firewall Topology o Asymmetric Routing with Firewalls o Performance Scaling with Multiple Cisco FWSM Devices Lesson 2: Network Admission Control Design o Network Security with Access Control o Cisco NAC Appliance Fundamentals o Cisco NAS Deployment Options o Cisco NAC Appliance Designs Lesson 3: Intrusion Detection and Prevention Designs o IDS and IPS Overview o IDS and IPS Deployment Considerations o IDS and IPS Monitoring and Management Module 9: IPsec and SSL VPN Design Lesson 1: Remote Access VPN Design o Remote Access VPN Overview o SSL VPN Overview o Remote Access VPN Design Considerations Lesson 2: Site-to-Site VPN Design o Site-to-Site VPN Applications o Site-to-Site VPN Design Considerations Lesson 3: IPsec VPN Technologies o IPsec VPN Overview o Cisco Easy VPN o GRE over IPsec o Dynamic Multipoint VPNs o VTI Overview o GET VPN Overview Lesson 4: VPN Management and Scaling o Recommendations for Managing VPNs o Considerations for Scaling VPNs Module 10: IP Multicast Design Lesson 1: IP Multicast Overview o Overview of IP Multicast o IP Multicast Group Membership o Multicast Routing o Multicast Forwarding at Layer 2

6 Lesson 2: PIM and RP Considerations o PIM Deployment Models o RP Considerations Lesson 3: IP Multicast Security o Security Considerations for IP Multicast o Multicast Access Control o Multicast over IPsec VPNs Module 11: Network Management Capabilities with Cisco IOS Software Lesson 1: Embedded Management Capabilities o Embedded Management Rationale o Syslog Considerations Lesson 2: NetFlow Considerations o NetFlow Technology Overview o Definition of a Flow o Flow Record Creation o NetFlow Cache Management o NetFlow Export Versions o NetFlow Deployment Lesson 3: NBAR Considerations o NBAR Overview o NBAR and Cisco AutoQoS Lesson 4: IP SLA Considerations o IP SLA Technology Overview o Deploying IP SLA Measurements o Network Management Applications Using IP SLA Measurements