CCDP ARCH Quick Reference

101 Pages·2007·3.29 MB·English

CCDP ARCH Quick Reference
Table of Contents
Copyright..................................................................................................... 1
About the Authors....................................................................................... 3
About the Technical Editor.......................................................................... 3
Introduction............................................................................................... 4
Chapter 1. Cisco Design Models................................................................... 5
Service-Oriented Network Architecture......................................................................................................................................... 5
PPDIOO........................................................................................................................................................................................... 7
Chapter 2. Network Design Considerations for the Enterprise Campus...
10
High-Availability Design............................................................................................................................................................... 10
Layer 2 Design............................................................................................................................................................................... 12
Layer 3 Design............................................................................................................................................................................... 14
Layer 2 to Layer 3 Boundary Design............................................................................................................................................. 16
Infrastructure Design Considerations........................................................................................................................................... 17
Chapter 3. Addressing and Routing Design Considerations....................... 19
Designing IP Addressing............................................................................................................................................................... 19
Designing Advanced Routing Solutions....................................................................................................................................... 22
Scalable EIGRP............................................................................................................................................................................. 23
Scalable OSPF Design................................................................................................................................................................... 24
Design Scalable BGP Solutions..................................................................................................................................................... 27
Chapter 4. Design Considerations for Advanced WAN Services................. 29
Constructing WANs Using Optical Technologies......................................................................................................................... 29
Metro Ethernet.............................................................................................................................................................................. 31
VPLS.............................................................................................................................................................................................. 32
MPLS VPN..................................................................................................................................................................................... 34
Implementing Advanced WAN Services....................................................................................................................................... 34
Chapter 5. Data Center Design for the Enterprise...................................... 36
Core and Aggregation Layer Infrastructure Design..................................................................................................................... 36
Scaling Data Center Architecture................................................................................................................................................. 42
Spanning-Tree Design for High Availability................................................................................................................................ 43
Chapter 6. Storage-Area Network Design.................................................. 45
An Overview of SAN Components and Technologies................................................................................................................... 45
Chapter 7. Designing an E-Commerce Module........................................... 51
Achieving High Availability........................................................................................................................................................... 51
Integrated E-Commerce Designs.................................................................................................................................................. 54
Chapter 8. Securing an Enterprise Network.............................................. 57
Firewalls........................................................................................................................................................................................ 57
NAC Design Considerations......................................................................................................................................................... 60
IDS and IPS Design Considerations............................................................................................................................................. 63
Chapter 9. Virtual Private Network Design............................................... 66
Remote-Access VPNs.................................................................................................................................................................... 66
Site-to-Site VPNs.......................................................................................................................................................................... 68
IPsec VPNs..................................................................................................................................................................................... 71
Managing and Scaling VPNs......................................................................................................................................................... 73
Chapter 10. IP Multicast Design Considerations........................................ 74
Fundamentals of IP Multicast....................................................................................................................................................... 74
Protocol Independent Multicast Design....................................................................................................................................... 81
Securing IP Multicast Networks................................................................................................................................................... 82
Chapter 11. Designing Voice over WLAN Networks................................... 84
Introduction to VoWLAN Technologies....................................................................................................................................... 84
Provisioning for VoWLAN Coverage............................................................................................................................................ 86
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference
VoWLAN Design Requirements................................................................................................................................................... 88
Chapter 12. Cisco IOS Software Network Management Capabilities.......... 90
Built-In Management Capabilities............................................................................................................................................... 90
Working with NetFlow.................................................................................................................................................................. 91
Network Based Application Recognition...................................................................................................................................... 94
Overview of IP SLA....................................................................................................................................................................... 95
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference Page 1 Return to Table of Contents
Introduction.....................................3
Cisco Design Models.........................4
Network Design Considerations for
the Enterprise Campus......................9
Addressing and Routing Design
Considerations...............................18
Design Considerations for Advanced
CCDP ARCH Quick WAN Services................................28
Data Center Design for the
Reference Enterprise......................................35
Storage-Area Network Design..........44
Designing an E-Commerce Module...50
Securing an Enterprise Network.......56
Kevin Wallace and Michael Watkins
Virtual Private Network Design.........65
IP Multicast Design Considerations...73
Designing Voice over WLAN
Networks.......................................83
Cisco IOS Software Network
Management Capabilities................89
ciscopress.com
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference Page 2 Return to Table of Contents
[ 98]
CCDP ARCH Quick Reference Trademark Acknowledgments
All terms mentioned in this digital Short Cut that are known to be trademarks or service marks have been appropri-
Kevin Wallace and Michael Watkins ately capitalized. Cisco Press or Cisco Systems,Inc. cannot attest to the accuracy of this information. Use of a term
Copyright ©2008 Cisco Systems,Inc. in this digital Short Cut should not be regarded as affecting the validity of any trademark or service mark.
Published by:
Feedback Information
Cisco Press
800 East 96th Street At Cisco Press,our goal is to create in-depth technical books of the highest quality and value. Each book is crafted
Indianapolis,Indiana 46240 USA with care and precision,undergoing rigorous development that involves the unique expertise of members of the
All rights reserved. No part of this digital short cut may be reproduced or transmit- professional technical community.
ted in any form or by any means,electronic or mechanical,including photocopying, Reader feedback is a natural continuation of this process. If you have any comments on how we could improve the
recording,or by any information storage and retrieval system,without written quality of this digital short cut,or otherwise alter it to better suit your needs,you can contact us through e-mail at
permission from the publisher,except for the inclusion of brief quotations in a [email protected]. Please be sure to include the digital Short Cut title and ISBN in your message.
review. We greatly appreciate your assistance.
First Digital Edition October 2007
ISBN-10:1-58705-499-X Corporate and Government Sales
ISBN-13:978-1-58705-499-0 The publisher offers excellent discounts on this digital short cut when ordered in quantity for bulk purchases or
special sales,which may include electronic versions and/or custom covers and content particular to your business,
Warning and Disclaimer training goals,marketing focus,and branding interests. For more information,please contact:U.S. Corporate and
Government Sales 1-800-382-3419 [email protected].
This digital Short Cut is designed to provide information about networking. Every
effort has been made to make this digital Short Cut as complete and accurate as For sales outside the United States please contact:International [email protected]
possible,but no warranty or fitness is implied. Licensed by
The information is provided on an “as is”basis. The authors,Cisco Press,and Cisco
Systems,Inc. shall have neither liability nor responsibility to any person or entity
with respect to any loss or damages arising from the information contained in this
digital short cut.
The opinions expressed in this digital Short Cut belong to the authors and are not
necessarily those of Cisco Systems,Inc.
Kevin Kem
© 2008 Cisco Systems Inc. All rights reserved. This publication is protected by copyright.Please see page 98 for more details.
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference Page 3 Return to Table of Contents
[ 2]
CCDP ARCH Quick Reference by Kevin Wallace and Michael Watkins
About the Authors:
Kevin Wallace,CCIE No. 7945,is a certified Cisco instructor and a full-time instructor for SkillSoft. With 18 years of
Cisco networking experience,Kevin has been a network design specialist for The Walt Disney World Resort and a
network manager for Eastern Kentucky University. Kevin holds a bachelor’s of science in electrical engineering from the
University of Kentucky. Kevin is also a CCVP,CCSP,CCNP,and CCDP with multiple Cisco security and IP communica-
tions specializations.
Michael Watkins,CCNA/CCNP/CCVP/CCSP,is a full-time senior technical instructor with SkillSoft. With 12 years of
network management,training,and consulting experience,Michael has worked with organizations such as Kraft Foods,
Johnson and Johnson,Raytheon,and the United States Air Force to help them implement and learn the latest network
technologies. In addition to holding over 20 industry certifications in the areas of networking and programming technolo-
gies,Michael holds a bachelors of arts degree from Wabash College.
About the Technical Editor:
Anthony Sequeira,CCIE RS No. 15626,possesses high-level certifications from both Cisco and Microsoft. For the past
15 years,he has written and lectured to massive audiences about the latest in networking technologies. Anthony is
currently a certified Cisco instructor with SkillSoft. Anthony currently lives with his wife and daughter in Tampa,
Florida.
© 2008 Cisco Systems Inc. All rights reserved. This publication is protected by copyright.Please see page 98 for more details.
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference Page 4 Return to Table of Contents
[ 3]
CCDP ARCH Quick Reference by Kevin Wallace and Michael Watkins
Introduction
Introduction
The Cisco Designing Cisco Network Service Architecture (ARCH)course helps prepare students for the Cisco Certified
Design Professional(CCDP) certification. Objectives for the ARCH course include the following:
n Explain Cisco Service-Oriented Enterprise Network Architecture (SONA).
n Discuss how SONA can be used for enterprise network design.
n Illustrate how to design functionality,performance,scalability,and availability into the various functional areas of
the enterprise network.
n Review network management,high availability,security,QoS,and IP multicast design considerations.
n Explain design principles for virtual private networks (VPNs) and wireless networks.
These Quick Reference Sheets summarize the main topics presented in the ARCH course materials. The information
presented represents the version of content on which exam number 642-873 bases its questions.
© 2008 Cisco Systems Inc. All rights reserved. This publication is protected by copyright.Please see page 98 for more details.
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference Page 5 Return to Table of Contents
[ 4]
CHAPTER 1 CCDP ARCH Quick Reference by Kevin Wallace and Michael Watkins
Cisco Design Models
Chapter 1: Cisco Design Models
This section introduces you to Ciscos Service-Oriented Network Architecture(SONA) framework for network design. In
addition,you learn how to use the PPDIOO approach to network design.
Service-Oriented Network Architecture
Cisco recently updated their Architecture for Voice Video and Integrated Data(AVVID) design approach to the Intelligent
Information Network(IIN). IIN is a complete architecture that is more all-encompassing than AVVID.
The three phases of constructing an IIN are as follows:
n Integrated transport:Voice,data,and video are all converged onto a single transport.
n Integrated services:Services,such as Voice over IP(VoIP) or storage networking,rely on the underlying network
transport mechanisms.
n Integrated applications:Applications (for example,Cisco IP Communicator) leverage services (for example,VoIP),
which rely on the network transport.
Ciscos architectural approach to designing an IIN is their SONA framework. Figure 1-1 shows individual IIN components
and how those components are categorized by SONA’s three layers:(1) Networked Infrastructure Layer,(2) Infrastructure
Services Layer,and (3) Application Layer.
© 2008 Cisco Systems Inc. All rights reserved. This publication is protected by copyright.Please see page 98 for more details.
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference Page 6 Return to Table of Contents
[ 5]
CHAPTER 1 CCDP ARCH Quick Reference by Kevin Wallace and Michael Watkins
Cisco Design Models
FIGURE 1-1
SONA Layers ApplicationLayer Business Applications Collaboration Applications
InteractiveServicesLayer AppliIcnafrtiaosnt rNucettuwroer Skienrgv iSceesrvices AdaptiveManagementServices
NetworkedInfrastructureLayer CampSuesrver Branch DaStato Craegneter WAN/MAN ClieTenltesworker
SONA offers the following benefits to a network design:
n Functionality:Functions in a way that the design supports organizational requirements
n Scalability:Meets organizational growth demands
n Availability:Makes network services available consistently and reliably
n Performance:Offers acceptable responsiveness,bandwidth utilization,and throughput for applications
n Manageability:Offers administrators control over the network,monitoring of the network,and fault detection
within the network
n Efficiency:Meets design objectives within stated financial constraints
© 2008 Cisco Systems Inc. All rights reserved. This publication is protected by copyright.Please see page 98 for more details.
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.
CCDP ARCH Quick Reference Page 7 Return to Table of Contents
[ 6]
CHAPTER 1 CCDP ARCH Quick Reference by Kevin Wallace and Michael Watkins
Cisco Design Models
PPDIOO
Cisco categorizes a network’s life cycle into six phases identified with the acronym PPDIOO,as follows:
n Prepare:This phase involves determining the network’s requirements,formulating a network strategy,and suggest-
ing a conceptual architecture of the network.
n Plan:This phase compares the existing network with the proposed network to help identify tasks,responsibilities,
milestones,and resources required to implement the design.
n Design:This phase clearly articulates the detailed design requirements.
n Implement:This phase integrates equipment into the existing network (without disrupting the existing network) to
meet design requirements.
n Operate:This phase entails the day-to-day network operation,while responding to any issues that arise.
n Optimize:This phase gathers feedback from the Operate phase to potentially make adjustments in the existing
network. Changes might be implemented to address ongoing network support issues.
PPDIOO’s life-cycle approach offers the following benefits:
n PPDIOO reduces total cost of ownership(TCO).
n PPDIOO improves network availability.
n PPDIOO allows business networks to quickly respond to changing needs.
n PPDIOO accelerates access to network applications and services.
© 2008 Cisco Systems Inc. All rights reserved. This publication is protected by copyright.Please see page 98 for more details.
CCDP ARCH Quick Reference
CCDP ARCH Quick Reference By Kevin Wallace, Michael Watkins ISBN: 9781587054990 Prepared for Kevin Kem, Safari ID: [email protected]
Publisher: Cisco Press Licensed by Kevin Kem
Print Publication Date: 2007/10/26 User number: 1023945 Copyright 2007, Safari Books Online, LLC.
This PDF is exclusively for your use in accordance with the Safari Terms of Service. No part of it may be reproduced or transmitted in any form by any means without the prior
written permission for reprints and excerpts from the publisher. Redistribution or other use that violates the fair use priviledge under U.S. copyright laws (see 17 USC107) or that
otherwise violates the Safari Terms of Service is strictly prohibited.