Introduction xix
Chapter 1 WAN Concepts 1
Objectives 1
Key Terms 1
Introduction (1.0) 3
WAN Technologies Overview (1.1) 3
Purpose of WANs (1.1.1) 3
Why a WAN? (1.1.1.1) 3
Are WANs Necessary? (1.1.1.2) 4
WAN Topologies (1.1.1.3) 5
Evolving Networks (1.1.1.4) 8
Small Office (1.1.1.5) 8
Campus Network (1.1.1.6) 9
Branch Networks (1.1.1.7) 10
Distributed Network (1.1.1.8) 11
WAN Operations (1.1.2) 13
WANs in the OSI Model (1.1.2.1) 13
Common WAN Terminology (1.1.2.2) 14
WAN Devices (1.1.2.3) 16
Circuit Switching (1.1.2.4) 17
Packet Switching (1.1.2.5) 18
Selecting a WAN Technology (1.2) 20
WAN Services (1.2.1) 20
WAN Link Connection Options (1.2.1.1) 20
Service Provider Network Infrastructure (1.2.1.2) 21
Private WAN Infrastructures (1.2.2) 23
Leased Lines (1.2.2.1) 23
Dialup (1.2.2.2) 25
ISDN (1.2.2.3) 26
Frame Relay (1.2.2.4) 28
ATM (1.2.2.5) 29
Ethernet WAN (1.2.2.6) 30
MPLS (1.2.2.7) 32
VSAT (1.2.2.8) 32
Public WAN Infrastructure (1.2.3) 33
DSL (1.2.3.1) 34
Cable (1.2.3.2) 35
Wireless (1.2.3.3) 36
3G/4G Cellular (1.2.3.4) 37
VPN Technology (1.2.3.5) 38
Selecting WAN Services (1.2.4) 39
Choosing a WAN Link Connection (1.2.4.1) 40
Choosing a WAN Link Connection (Cont.) (1.2.4.2) 41
Summary (1.3) 43
Practice 44
Class Activities 44
Labs 44
Check Your Understanding Questions 44
Chapter 2 Point-to-Point Connections 49
Objectives 49
Key Terms 49
Introduction (2.0) 51
Serial Point-to-Point Overview (2.1) 51
Serial Communications (2.1.1) 52
Serial and Parallel Ports (2.1.1.1) 52
Point-to-Point Communication Links (2.1.1.2) 53
Serial Bandwidth (2.1.1.3) 54
HDLC Encapsulation (2.1.2) 56
WAN Encapsulation Protocols (2.1.2.1) 56
HDLC Encapsulation (2.1.2.2) 57
Configuring HDLC Encapsulation (2.1.2.3) 58
Troubleshooting a Serial Interface (2.1.2.4) 59
PPP Operation (2.2) 63
Benefits of PPP (2.2.1) 63
Introducing PPP (2.2.1.1) 64
Advantages of PPP (2.2.1.2) 65
LCP and NCP (2.2.2) 65
PPP-Layered Architecture (2.2.2.1) 65
PPP: Link Control Protocol (LCP) (2.2.2.2) 66
PPP: Network Control Protocol (NCP) (2.2.2.3) 66
PPP Frame Structure (2.2.2.4) 67
PPP Sessions (2.2.3) 68
Establishing a PPP Session (2.2.3.1) 68
LCP Operation (2.2.3.2) 69
PPP Configuration Options (2.2.3.3) 72
NCP Explained (2.2.3.4) 72
PPP Implementation (2.3) 74
Configure PPP (2.3.1) 74
PPP Configuration Options (2.3.1.1) 74
PPP Basic Configuration Command (2.3.1.2) 76
PPP Compression Commands (2.3.1.3) 76
PPP Link Quality Monitoring Command (2.3.1.4) 77
PPP Multilink Commands (2.3.1.5) 78
Verifying PPP Configuration (2.3.1.6) 81
Configure PPP Authentication (2.3.2) 82
PPP Authentication Protocols (2.3.2.1) 83
Password Authentication Protocol (PAP) (2.3.2.2) 83
Challenge Handshake Authentication Protocol (CHAP) (2.3.2.3) 85
PPP Authentication Command (2.3.2.4) 86
Configuring PPP with Authentication (2.3.2.5) 87
Troubleshoot WAN Connectivity (2.4) 89
Troubleshoot PPP (2.4.1) 89
Troubleshooting PPP Serial Encapsulation (2.4.1.1) 90
Debugging PPP (2.4.1.2) 91
Troubleshooting a PPP Configuration with Authentication (2.4.1.3) 94
Summary 96
Practice 97
Class Activities 97
Labs 97
Packet Tracer Activities 98
Check Your Understanding Questions 98
Chapter 3 Branch Connections 101
Objectives 101
Key Terms 101
Introduction (3.0) 103
Remote-Access Connections (3.1) 104
Broadband Connections (3.1.1) 104
What Is a Cable System? (3.1.1.1) 104
Cable Components (3.1.1.2) 105
What Is DSL? (3.1.1.3) 107
DSL Connections (3.1.1.4) 107
Wireless Connection (3.1.1.5) 109
Select a Broadband Connection (3.1.2) 112
Comparing Broadband Solutions (3.1.2.1) 112
PPPoE (3.2) 113
PPPoE Overview (3.2.1) 113
PPPoE Motivation (3.2.1.1) 113
PPPoE Concepts (3.2.1.2) 114
Implement PPPoE (3.2.2) 115
PPPoE Configuration (3.2.2.1) 115
PPPoE Verification (3.2.2.2) 116
PPPoE Troubleshooting (3.2.2.3) 118
PPPoE Negotiation (3.2.2.4) 118
PPPoE Authentication (3.2.2.5) 119
PPPoE MTU Size (3.2.2.6) 120
VPNs (3.3) 122
Fundamentals of VPNs (3.3.1) 122
Introducing VPNs (3.3.1.1) 123
Benefits of VPNs (3.3.1.2) 124
Types of VPNs (3.3.2) 125
Site-to-Site VPNs (3.3.2.1) 125
Remote-Access VPNs (3.3.2.2) 126
DMVPN (3.3.2.3) 127
GRE (3.4) 128
GRE Overview (3.4.1) 129
GRE Introduction (3.4.1.1) 129
GRE Characteristics (3.4.1.2) 130
Implement GRE (3.4.2) 131
Configure GRE (3.4.2.1) 131
Verify GRE (3.4.2.2) 133
Troubleshoot GRE (3.4.2.3) 134
eBGP (3.5) 136
BGP Overview (3.5.1) 136
IGP and EGP Routing Protocols (3.5.1.1) 137
eBGP and iBGP (3.5.1.2) 138
BGP Design Considerations (3.5.2) 139
When to Use BGP (3.5.2.1) 139
When Not to Use BGP (3.5.2.2) 140
BGP Options (3.5.2.3) 140
eBGP Branch Configuration (3.5.3) 142
Steps to Configure eBGP (3.5.3.1) 142
BGP Sample Configuration (3.5.3.2) 143
Verify eBGP (3.5.3.3) 145
Summary (3.6) 148
Practice 149
Check Your Understanding Questions 150
Chapter 4 Access Control Lists 155
Objectives 155
Key Terms 155
Introduction (4.0.1.1) 156
Standard ACL Operation and Configuration Review (4.1) 156
ACL Operation Overview (4.1.1) 156
ACLs and the Wildcard Mask (4.1.1.1) 156
Applying ACLs to an Interface (4.1.1.2) 158
A TCP Conversation (4.1.1.3) 159
ACL Packet Filtering (4.1.1.4) 160
Types of IPv4 ACLs (4.1.2) 162
Standard and Extended IPv4 ACLs (4.1.2.1) 162
Numbered and Named ACLs (4.1.2.2) 163
Where to Place ACLs (4.1.2.3) 163
Standard ACL Placement Example (4.1.2.4) 165
Extended ACL Placement Example (4.1.2.5) 166
Standard IPv4 ACL Implementation (4.1.3) 167
Configure a Standard IPv4 ACL (4.1.3.1) 167
Apply a Standard IPv4 ACL (4.1.3.2) 169
Standard Named IPv4 ACLs (4.1.3.3) 170
Verify ACLs (4.1.3.4) 171
Extended IPv4 ACLs (4.2) 173
Structure of an Extended IPv4 ACLs (4.2.1) 173
Extended ACLs (4.2.1.1) 173
Filtering Ports and Services (4.2.1.2) 173
Configure Extended IPv4 ACLs (4.2.2) 175
Configuring Extended ACLs (4.2.2.1) 175
Applying Extended ACLs to Interfaces (4.2.2.2) 177
Filtering Traffic with Extended ACLs (4.2.2.3) 178
Creating Extended Named ACLs (4.2.2.4) 180
Verifying Extended ACLs (4.2.2.5) 181
Editing Extended ACLs (4.2.2.6) 182
IPv6 ACLs (4.3) 184
IPv6 ACL Creation (4.3.1) 184
Types of IPv6 ACLs (4.3.1.1) 184
Comparing IPv4 and IPv6 ACLs (4.3.1.2) 185
Configuring IPv6 ACLs (4.3.2) 186
Configuring IPv6 Topology (4.3.2.1) 186
Configuring IPv6 ACLs (4.3.2.2) 188
Applying an IPv6 ACL to an Interface (4.3.2.3) 189
IPv6 ACL Examples (4.3.2.4) 190
Verifying IPv6 ACLs (4.3.2.5) 192
Troubleshoot ACLs (4.4) 194
Processing Packets with ACLs (4.4.1) 194
Inbound and Outbound ACL Logic (4.4.1.1) 194
ACL Logic Operations (4.4.1.2) 195
Standard ACL Decision Process (4.4.1.3) 196
Extended ACL Decision Process (4.4.1.4) 197
Common ACL Errors (4.4.2) 197
Troubleshooting IPv4 ACLs: Example 1 (4.4.2.1) 197
Troubleshooting IPv4 ACLs: Example 2 (4.4.2.2) 198
Troubleshooting IPv4 ACLs: Example 3 (4.4.2.3) 199
Troubleshooting IPv4 ACLs: Example 4 (4.4.2.4) 200
Troubleshooting IPv4 ACLs: Example 5 (4.4.2.5) 200
Troubleshooting IPv6 ACLs: Example 1 (4.4.2.6) 201
Troubleshooting IPv6 ACLs: Example 2 (4.4.2.7) 203
Troubleshooting IPv6 ACLs: Example 3 (4.4.2.8) 205
Summary (4.5) 208
Practice 209
Check Your Understanding Questions 210
Chapter 5 Network Security and Monitoring 215
Objectives 215
Key Terms 215
Introduction (5.0.1.1) 217
LAN Security (5.1) 217
LAN Security Attacks (5.1.1) 218
Common LAN Attacks (5.1.1.1) 218
CDP Reconnaissance Attack (5.1.1.2) 219
Telnet Attacks (5.1.1.3) 220
MAC Address Table Flooding Attack (5.1.1.4) 222
VLAN Attacks (5.1.1.5) 225
DHCP Attacks (5.1.1.6) 226
LAN Security Best Practices (5.1.2) 227
Secure the LAN (5.1.2.1) 227
Mitigate MAC Address Flooding Table Attacks (5.1.2.2) 228
Mitigate VLAN Attacks (5.1.2.3) 229
Mitigate DHCP Attacks (5.1.2.4) 230
Secure Administrative Access Using AAA (5.1.2.5) 231
Secure Device Access Using 802.1X (5.1.2.6) 233
SNMP (5.2) 234
SNMP Operation (5.2.1) 234
Introduction to SNMP (5.2.1.1) 235
SNMP Operation (5.2.1.2) 236
SNMP Agent Traps (5.2.1.3) 237
SNMP Versions (5.2.1.4) 238
Community Strings (5.2.1.5) 241
Management Information Base Object ID (5.2.1.6) 243
SNMPv3 (5.2.1.7) 246
Configuring SNMP (5.2.2) 248
Steps for Configuring SNMP (5.2.2.1) 248
Verifying SNMP Configuration (5.2.2.2) 249
SNMP Best Practices (5.2.2.3) 252
Steps for Configuring SNMPv3 (5.2.2.4) 254
Verifying SNMPv3 Configuration (5.2.2.5) 254
Cisco Switch Port Analyzer (5.3) 255
SPAN Overview (5.3.1) 256
Port Mirroring (5.3.1.1) 256
Analyzing Suspicious Traffic (5.3.1.2) 257
Local SPAN (5.3.1.3) 257
Remote SPAN (5.3.1.4) 259
SPAN Configuration (5.3.2) 260
Configuring Local SPAN (5.3.2.1) 260
Verifying Local SPAN (5.3.2.2) 261
SPAN as a Troubleshooting Tool (5.3.3) 262
Troubleshooting with SPAN Overview (5.3.3.1) 262
Summary (5.4) 264
Practice 264
Check Your Understanding Questions 265
Chapter 6 Quality of Service 269
Objectives 269
Key Terms 269
Introduction (6.0.1.1) 271
QoS Overview (6.1) 271
Network Transmission Quality (6.1.1) 271
Prioritizing Traffic (6.1.1.1) 271
Bandwidth, Congestion, Delay, and Jitter (6.1.1.2) 272
Packet Loss (6.1.1.3) 273
Traffic Characteristics (6.1.2) 275
Network Traffic Trends (6.1.2.1) 275
Voice (6.1.2.2) 276
Video (6.1.2.3) 276
Data (6.1.2.4) 277
Queueing Algorithms (6.1.3) 278
Queuing Overview (6.1.3.1) 279
First-In First-Out (FIFO) (6.1.3.2) 279
Weighted Fair Queuing (WFQ) (6.1.3.3) 280
Class-Based Weighted Fair Queuing (CBWFQ) (6.1.3.4) 281
Low Latency Queuing (LLQ) (6.1.3.5) 282
QoS Mechanisms (6.2) 283
QoS Models (6.2.1) 283
Selecting an Appropriate QoS Policy Model (6.2.1.1) 283
Best Effort (6.2.1.2) 284
Integrated Services (6.2.1.3) 285
Differentiated Services (6.2.1.4) 286
QoS Implementation Techniques (6.2.2) 288
Avoiding Packet Loss (6.2.2.1) 288
QoS Tools (6.2.2.2) 289
Classification and Marking (6.2.2.3) 290
Marking at Layer 2 (6.2.2.4) 291
Marking at Layer 3 (6.2.2.5) 292
Trust Boundaries (6.2.2.6) 295
Congestion Avoidance (6.2.2.7) 296
Shaping and Policing (6.2.2.8) 297
Summary (6.3) 299
Practice 300
Check Your Understanding Questions 300
Chapter 7 Network Evolution 303
Objectives 303
Key Terms 303
Introduction (7.0.1.1) 305
Internet of Things (7.1) 305
IoT Elements (7.1.1) 305
What Is the IoT? (7.1.1.1) 305
The Converged Network and Things (7.1.1.2) 305
Challenges to Connecting Things (7.1.1.3) 306
The Six Pillars of the Cisco IoT System (7.1.1.4) 307
IoT Pillars (7.1.2) 307
The Network Connectivity Pillar (7.1.2.1) 308
The Fog Computing Pillar (7.1.2.2) 308
The Security Pillar (7.1.2.3) 311
Data Analytics Pillar (7.1.2.4) 312
Management and Automation Pillar (7.1.2.5) 313
Application Enablement Platform Pillar (7.1.2.6) 313
Cloud and Virtualization (7.2) 314
Cloud Computing (7.2.1) 314
Cloud Overview (7.2.1.2) 314
Cloud Services (7.2.1.3) 315
Cloud Models (7.2.1.4) 315
Cloud Computing versus Data Center (7.2.1.5) 316
Virtualization (7.2.2) 317
Cloud Computing and Virtualization (7.2.2.1) 317
Dedicated Servers (7.2.2.2) 318
Server Virtualization (7.2.2.3) 319
Advantages of Virtualization (7.2.2.4) 320
Abstraction Layers (7.2.2.5) 321
Type 2 Hypervisors (7.2.2.6) 321
Virtual Network Infrastructure (7.2.3) 323
Type 1 Hypervisors (7.2.3.1) 323
Installing a VM on a Hypervisor (7.2.3.2) 324
Network Virtualization (7.2.3.3) 324
Network Programming (7.3) 326
Software-Defined Networking (7.3.1) 326
Control Plane and Data Plane (7.3.1.1) 326
Virtualizing the Network (7.3.1.2) 327
SDN Architecture (7.3.1.3) 329
Controllers (7.3.2) 331
SDN Controller and Operations (7.3.2.1) 331
Cisco Application Centric Infrastructure (7.3.2.2) 332
Core Components of ACI (7.3.2.3) 332
Spine-Leaf Topology (7.3.2.4) 333
SDN Types (7.3.2.5) 334
APIC-EM Features (7.3.2.6) 336
APIC-EM ACL Analysis (7.3.2.7) 337
Summary (7.4) 340
Practice 341
Check Your Understanding Questions 341
Chapter 8 Network Troubleshooting 347
Objectives 347
Key Terms 347
Introduction (8.0.1.1) 349
Troubleshooting Methodology (8.1) 349
Network Documentation (8.1.1) 349
Documenting the Network (8.1.1.1) 349
Network Topology Diagrams (8.1.1.2) 352
Establishing a Network Baseline (8.1.1.3) 355
Steps to Establish a Network Baseline (8.1.1.4) 355
Measuring Data (8.1.1.5) 358
Troubleshooting Process (8.1.2) 360
General Troubleshooting Procedures (8.1.2.1) 360
Gathering Symptoms (8.1.2.2) 362
Questioning End Users (8.1.2.3) 364
Isolating the Issue Using Layered Models (8.1.3) 365
Using Layered Models for Troubleshooting (8.1.3.1) 365
Troubleshooting Methods (8.1.3.2) 367
Other Troubleshooting Methods (8.1.3.3) 370
Guidelines for Selecting a Troubleshooting Method (8.1.3.4) 371
Troubleshooting Scenarios (8.2) 372
Using IP SLA (8.2.1) 372
IP SLA Concepts (8.2.1.1) 372
IP SLA Configuration (8.2.1.2) 373
Sample IP SLA Configuration (8.2.1.3) 375
Verifying an IP SLA Configuration (8.2.1.4) 376
Troubleshooting Tools (8.2.2) 377
Software Troubleshooting Tools (8.2.2.1) 377
Protocol Analyzers (8.2.2.2) 379
Hardware Troubleshooting Tools (8.2.2.3) 380
Using a Syslog Server for Troubleshooting (8.2.2.4) 385
Symptoms and Causes of Network Troubleshooting (8.2.3) 387
Physical Layer Troubleshooting (8.2.3.1) 387
Data Link Layer Troubleshooting (8.2.3.2) 390
Network Layer Troubleshooting (8.2.3.3) 392
Transport Layer Troubleshooting: ACLs (8.2.3.4) 394
Transport Layer Troubleshooting: NAT for IPv4 (8.2.3.5) 396
Application Layer Troubleshooting (8.2.3.6) 397
Troubleshooting IP Connectivity (8.2.4) 398
Components of Troubleshooting End-to-End Connectivity (8.2.4.1) 398
End-to-End Connectivity Problem Initiates Troubleshooting (8.2.4.2) 400
Step 1: Verify the Physical Layer (8.2.4.3) 402
Step 2: Check for Duplex Mismatches (8.2.4.4) 404
Step 3: Verify Layer 2 and Layer 3 Addressing on the Local Network (8.2.4.5) 406
Step 4: Verify Default Gateway (8.2.4.6) 411
Step 5: Verify Correct Path (8.2.4.7) 415
Step 6: Verify the Transport Layer (8.2.4.8) 418
Step 7: Verify ACLs (8.2.4.9) 420
Step 8: Verify DNS (8.2.4.10) 422
Summary (8.3) 425
Practice 426
Check Your Understanding Questions 427
Appendix A Answers to the "Check Your Understanding" Questions 431
Glossary 443
9781587134326 TOC 8/11/2017
