Table Of Content

93_FP_cover.qx 11/22/00 11:34 AM Page 1 1 YEAR UPGRADE B U Y E R P R O T E C T I O N P L A N BUILDING CISCO REMOTE ACCESS NETWORKS FREE Monthly Technology Updates ”BCRAN is about technological empowerment. This book will help you One-year Vendor grow technically, expand your career Product Upgrade opportunities, and enhance your Protection Plan experience of the Internet Revolution.“ —Ralph Troupe, President and CEO FREE Membership to Callisma Access.Globalknowledge Mark Edwards, CCNP, CCDP, MCSE, CNE Ron Fuller, CCDP, CCNP, MCP, MCNE, CCIE Andy McCullough, CCNA, CCDA TECHNICAL EDITOR: Wayne Lawson, CCIE, CCNA, CCDA, NNCSE, CNX, MCSE, CNE, CBE 93_sbcran_FM 10/23/00 1:59 PM Page 1 s o l u t i o n s @ s y n g r e s s . c o m With over 1,500,000 copies of our MCSE, MCSD, CompTIA, and Cisco study guides in print, we have come to know many of you personally. By listening, we've learned what you like and dislike about typical computer books. The most requested item has been for a web-based service that keeps you current on the topic of the book and related technologies. In response, we have created [email protected], a service that includes the following features: (cid:2) A one-year warranty against content obsolescence that occurs as the result of vendor product upgrades. We will provide regular web updates for affected chapters. (cid:2) Monthly mailings that respond to customer FAQs and provide detailed explanations of the most difficult topics, written by content experts exclusively for [email protected]. (cid:2) Regularly updated links to sites that our editors have determined offer valuable additional information on key topics. (cid:2) Access to “Ask the Author”™ customer query forms that allow readers to post questions to be addressed by our authors and editors. Once you've purchased this book, browse to www.syngress.com/solutions. To register, you will need to have the book handy to verify your purchase. Thank you for giving us the opportunity to serve you. 93_sbcran_FM 10/23/00 1:59 PM Page 2 93_sbcran_FM 10/23/00 1:59 PM Page 3 BUILDING CISCO R E M O T E A C C E S S N E T W O R K S 93_sbcran_FM 10/23/00 1:59 PM Page 4 Syngress Publishing, Inc., the author(s), and any person or firm involved in the writing, editing, or production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of profits, lost savings, or other incidental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable case, including backup and other appropriate precautions, when working with computers, networks, data, and files. Syngress Media® and Syngress® are registered trademarks of Syngress Media, Inc. “Career Advancement Through Skill Enhancement™,” “Ask the Author™,” “Ask the Author UPDATE™,” and “Mission Critical™,” and “Hack Proofing™” are trademarks of Syngress Publishing, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY SERIAL NUMBER 001 6LTM3ADSE2 002 XPS5PQB4C4 003 W3BM28FV7A 004 VBC8N4R52F 005 Z745QJJXBR 006 PF62RTSRR4 007 7TPLA5ZGG8 008 A2ZF743RTG 009 HN38M941DS 010 SM35MR55NT PUBLISHED BY Syngress Publishing, Inc. 800 Hingham Street Rockland, MA 02370 Building Cisco Remote Access Networks Copyright © 2000 by Syngress Publishing, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written per- mission of the publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 ISBN: 1-928994-13-X Copy edit by: Joeth Barlas and Judy Eby Proofreading by: Kate Bresnahan Technical edit by: Wayne Lawson Page Layout and Art by: Shannon Tozier Index by: Robert Saigh Co-Publisher: Richard Kristof Project Editor: Katharine Glennon Distributed by Publishers Group West 93_sbcran_FM 10/23/00 1:59 PM Page v Acknowledgments We would like to acknowledge the following people for their kindness and support in making this book possible. Richard Kristof, Duncan Anderson, Jennifer Gould, Robert Woodruff, Kevin Murray, Dale Leatherwood, Shelley Everett, Laurie Hedrick, Rhonda Harmon, Lisa Lavallee, and Robert Sanregret of Global Knowledge, for their generous access to the IT industry’s best courses, instructors and training facilities. Ralph Troupe and the team at Rt. 1 Solutions for their invaluable insight into the challenges of designing, deploying and supporting world-class enterprise networks. Karen Cross, Kim Wylie, Harry Kirchner, John Hays, Bill Richter, Kevin Votel, Brittin Clark, Sarah Schaffer, Luke Kreinberg, Ellen Lafferty and Sarah MacLachlan of Publishers Group West for sharing their incredible marketing experience and expertise. Peter Hoenigsberg, Mary Ging, Caroline Hird, Simon Beale, Julia Oldknow, Kelly Burrows, Jonathan Bunkell, Catherine Anderson, Peet Kruger, Pia Rasmussen, Denelise L'Ecluse, Rosanna Ramacciotti, Marek Lewinson, Marc Appels, Paul Chrystal, Femi Otesanya, and Tracey Alcock of Harcourt International for making certain that our vision remains worldwide in scope. Special thanks to the professionals at Osborne with whom we are proud to publish the best-selling Global Knowledge Certification Press series. vv 93_sbcran_FM 10/23/00 1:59 PM Page vi From Global Knowledge At Global Knowledge we strive to support the multiplicity of learning styles required by our students to achieve success as technical professionals. As the world's largest IT training company, Global Knowledge is uniquely positioned to offer these books. The expertise gained each year from providing instructor-led training to hundreds of thousands of students worldwide has been captured in book form to enhance your learning experience. We hope that the quality of these books demonstrates our commitment to your lifelong learning success. Whether you choose to learn through the written word, computer based training, Web delivery, or instructor-led training, Global Knowledge is committed to providing you with the very best in each of these categories. For those of you who know Global Knowledge, or those of you who have just found us for the first time, our goal is to be your lifelong competency partner. Thank your for the opportunity to serve you. We look forward to serving your needs again in the future. Warmest regards, Duncan Anderson President and Chief Executive Officer, Global Knowledge vi 93_sbcran_FM 10/23/00 1:59 PM Page vii Contributors Tony Olzak (CCNP, MCSE) presently works as a consultant at Frontway in Toledo, OH. He specializes in the planning, design, and implementation of enterprise networks and is working towards the CCIE certification. In his free time, Tony likes to play guitar and write music. Ron Fuller (CCIE, CCDP, CCNP-ATM, CCNP-Security, MCNE) has been in the internetworking industry for over six years. In that time he has worked as a consultant for clients looking for design, integration, and implementation expertise in Novell and Cisco environments. Kevin Davis (MCP+I, MCSE, CCNA) is a consultant at Callisma in Dallas, TX. He has over ten years of WAN/LAN network design experience that includes some of the largest networks in the world using Cisco routers, WAN and LAN switches, Novell NetWare, and Microsoft Windows NT. Kevin graduated from the Dwight Look College of Engineering at Texas A&M University, College Station, TX with a degree in Computer Engineering. Recently he has con- sulted with some of the largest service providers in support of their Fortune 500 clients, and has authored several white papers on network security and anti-virus postures within a network. Chris Larson (CNE, MCP+I, CCNP+Security) is a senior network engineer for PCT3, an international ASP. He has over 12 years of experience in network design and implementations. Andy McCullough (CCNP, CCDA) has been in the network consulting industry for over five years. He is currently working at Lucent NPS as Chief Technical Architect. Andy has done design work for several global customers of Lucent Technologies including Level 3 Communications, Sprint, MCI/WorldCom, London Stock Exchange, and Birch Telecom. Prior to working for Lucent, Andy ran his own consulting company, Cisco reseller, and ISP. Andy is also an assistant professor teaching at a Cisco Network Academy in Lenexa, KS. vii 93_sbcran_FM 10/23/00 1:59 PM Page viii Venkata Ammu holds a master’s degree in Computer Science, and is presently a manager at Callisma. Venkata has over 15 years of experience in the internetworking area, specifically in designing and implementing large networks. Venkata lives with his wife Syamala, son Kartik, and daughter Bhargavi in East Brunswick, NJ. Mark Edwards (CCNP, CCDP, MCSE, CNE) is an IT consultant based in South Wales, UK. He qualified from the University of Glamorgan with a BSc (Hons) in Computer Science in 1994, and has been working in the network field ever since. He is currently working on achieving CCIE status and is set to take the lab in late 2000. Mark has worked for many large international organizations and has held a wide variety of roles in various major projects. These have included project management, infrastructure design and implementation, training, and testing. Mark is currently working as an infrastructure consultant for ACNielsen on their global intranet team. Mark lives in Cardiff, UK, and can be contacted at [email protected]. Darrel Hinshaw (CCIE, CCNA, MCSE, MCP+I, MCNE) is a senior consultant at Callisma. He currently provides senior-level strategic and technical consulting to all Callisma clients in the south-central region of the US. His specialties include Cisco routers and LAN switches, Microsoft NT, Novell design and implementation, strategic network planning, network architecture and design, and network troubleshooting and optimization. Darrel’s background includes positions as a senior engineer at Chancellor Media, and as a senior network engineer at Lucent Technologies in the Octel Messaging Division. Richard Hamilton is a senior consultant at Callisma. He is currently responsible for leading engineering teams specializing in the design and deployment of ATM and WAN/LAN technologies. He is accountable for providing end-to-end solutions for diverse net- working environments primarily in the service provider space. Richard has spent the past 13 years in both staff and consulting roles in the financial and service provider industries, for companies that include International Network Services Inc., and NatWest/ Fleet Bank N.A. viii 93_sbcran_FM 10/23/00 1:59 PM Page ix Pankaj Chandhok is a senior network design consultant who has engineered, maintained, and managed worldwide LAN/WAN network infrastructures. He works at Callisma in Parsippany, NJ where he is accountable for leading a project team in the design and implementation of large-scale network projects. He has also taught formal training classes ranging from Microsoft Windows to Layer 3 Switching concepts. His formal education includes a M.S. and B.S. in Electrical Engineering from Rutgers University. He and his wife Poonam are expecting their first baby this year. He can be contacted at [email protected]. Cameron Brandon (MCSE, CNE, CNA, MCSE+Internet, A+, Network+) works as a network engineer/administrator in Portland, OR, and he specializes in Windows NT with BackOffice Integration. He helped in Intel’s large-scale migration at its Oregon facility to Windows NT. Cameron completed all of his certifications in five months, demonstrating that determination and a strong sense of direction are the keys to success in one’s career. J.D. Wegner is a founder and director of The Empowerment Group, Inc. He has been working with computers for over 30 years, the last twelve of those involved with the design, installation, and support of data networks. As an instructor and course director for Global Knowledge, he has presented topics ranging from Internetworking with TCP/IP to Web Security to IP Address Management to thousands of IT professionals in the U.S. and abroad. His clients include many of the Fortune 500 as well as several government agencies. He lives in Hickory, NC with his wife, Laurie, and their two children, David and Sarah. John Senkow (CCNA, CCDA, CCNP) is currently a consulting engineer at Callisma, in Philadelphia, PA. His key responsibilities include design, configuration, implementation, and analysis of LAN/WAN architectures. John has over five years of experience working with various network infrastructures. His background is primarily in Cisco routers and switches as well as in SNMP management. ix