Network Virtualization
Published on 27. July 2006
Book
Hardback
408 pages
978-1-58705-248-4 (ISBN)
Description
Share network resources and reduce costs while providing secure network services to diverse user communities
Presents the business drivers for network virtualization and the major challenges facing network designers today
Shows how to use virtualization designs with existing applications, such as VoIP and network services, such as quality of service and multicast
Provides design alternatives for different real-world deployment scenarios, with configuration examples and case studies
Today's enterprises have several groups of users with specific needs. The differences between these groups translate into specific network requirements. Within some organizations, these requirements are so dissimilar that the different groups need to be treated as totally separate customers by the enterprise's IT department. As the number of groups increases, keeping them separate and secure is a challenge to IT departments, particularly with the advent of wireless networks, the requirement for enterprise-wide user mobility, and the need for cross group collaboration with resource sharing on a per project basis. Network Virtualization provides design guidance for virtualized enterprise networks and arms network architects with the background necessary to make sound technological choices in the face of different business requirements. As a means of introduction, Network Virtualization lays out the fundamentals of enterprise network design. The book builds upon these fundamental principles to introduce the different virtualization methods as the logical evolution of the enterprise network architecture. Detailed descriptions of the technology, design principles, network configurations, and real-world case studies are provided throughout the book, helping readers develop a pragmatic understanding of virtualized enterprise network architectures. Specific examples are included that tailor deployment advice to the small, medium, and large enterprise environment.
Presents the business drivers for network virtualization and the major challenges facing network designers today
Shows how to use virtualization designs with existing applications, such as VoIP and network services, such as quality of service and multicast
Provides design alternatives for different real-world deployment scenarios, with configuration examples and case studies
Today's enterprises have several groups of users with specific needs. The differences between these groups translate into specific network requirements. Within some organizations, these requirements are so dissimilar that the different groups need to be treated as totally separate customers by the enterprise's IT department. As the number of groups increases, keeping them separate and secure is a challenge to IT departments, particularly with the advent of wireless networks, the requirement for enterprise-wide user mobility, and the need for cross group collaboration with resource sharing on a per project basis. Network Virtualization provides design guidance for virtualized enterprise networks and arms network architects with the background necessary to make sound technological choices in the face of different business requirements. As a means of introduction, Network Virtualization lays out the fundamentals of enterprise network design. The book builds upon these fundamental principles to introduce the different virtualization methods as the logical evolution of the enterprise network architecture. Detailed descriptions of the technology, design principles, network configurations, and real-world case studies are provided throughout the book, helping readers develop a pragmatic understanding of virtualized enterprise network architectures. Specific examples are included that tailor deployment advice to the small, medium, and large enterprise environment.
More details
Language
English
Place of publication
Indianapolis
United States
Publishing group
Pearson Education (US)
Target group
College/higher education
Dimensions
Height: 240 mm
Width: 193 mm
Thickness: 30 mm
Weight
856 gr
ISBN-13
978-1-58705-248-4 (9781587052484)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Persons
Kumar Reddy is a senior manager of Technical Marketing Engineering at Cisco Systems. Kumar has more than 15 years of industry experience. He has held a variety of roles at Cisco as a technical specialist for a range of products and technology, including Broadband DSL, LAN Switching and, most recently, designing end-to-end systems for small and medium businesses.
Victor Moreno, CCIE #6908, is a Technical Marketing Engineer at Cisco Systems. Victor is a CCIE and has more than 10 years of industry experience. Victor is a recognized expert in the field of virtual enterprise networks and has been involved with enterprise campus network virtualization since 2001. Victor resides in San Jose, CA.
Victor Moreno, CCIE #6908, is a Technical Marketing Engineer at Cisco Systems. Victor is a CCIE and has more than 10 years of industry experience. Victor is a recognized expert in the field of virtual enterprise networks and has been involved with enterprise campus network virtualization since 2001. Victor resides in San Jose, CA.
Content
Table of Contents
Introduction
Part I A Network Architecture for the Virtual Enterprise3
Chapter 1 Business Drivers Behind Enterprise Network Virtualization
Why Virtualize?
Visitors, Partners, Contractors, and Quarantine Areas
Regulatory Compliance
Secure Service Areas
Network Consolidation
Acquisitions and Mergers
Multitenant Enterprises
Virtual Project Environment: Next-Generation Business Processes
Business Requirements Drive Technical Requirements
Summary
Chapter 2 Designing Scalable Enterprise Networks
Hierarchical Campus Design
Virtualizing the Campus
WAN Design
WAN Provider Service Offerings
WAN Architecture
WAN Resiliency
WAN Routing Considerations
Securing the WAN
WAN Virtualization
Summary
Chapter 3 Basic Virtualized Enterprise
The Virtual Enterprise
Transport Virtualization-VNs
VLANs and Scalability
Virtualizing the Routed Core
The LAN Edge: Authentication and Authorization
Central Services Access: Virtual Network Perimeter
Unprotected Services
Summary
Chapter 4 A Virtualization Technologies Primer: Theory
Network Device Virtualization
Layer 2: VLANs
Layer 3: VRF Instances
Layer 2 Again: VFIs
Virtual Firewall Contexts
Network Device Virtualization Summary
Data-Path Virtualization
Layer 2: 802.1q Trunking
Generic Routing Encapsulation
IPsec
L2TPv3
Label Switched Paths
Data-Path Virtualization Summary
Control-Plane Virtualization-Routing Protocols
VRF-Aware Routing
Multi-Topology Routing
Control-Plane Virtualization Summary
Summary
Chapter 5 Infrastructure Segmentation Architectures: Theory
Hop to Hop
Layer 3 H2H
Single Address Space Alternatives
H2H Summary
Tunnel Overlay for L3VPN
L3VPN Using GRE and IPsec Overlay
Putting It All Together: DMVPN
Layer 3 Tunnel Summary
Tunnel Overlay for Layer 2 VPNs
Layer 2 P2P Overlay Using L2TPv3
Layer 2 P2P Overlay Using MPLS
Layer 2 VPN MP2MP Using MPLS (VPLS)
Layer 2 VPN Summary
Peer-Based Model for Layer 3 VPNs
RFC 2547bis the MPLS Way
RFC 2547bis Forwarding-Plane Alternatives
Inter-Autonomous System Connectivity: Another Application of Tunnels
Carrier Supporting Carrier
Inter-Autonomous System Routing
Inter-Autonomous System Connectivity Summary
Summary
Part II Enterprise Virtualization Techniques and Best Practices
Chapter 6 Infrastructure Segmentation Architectures: Practice
Hop-to-Hop VLANs
Layer 3 Hop to Hop
Single Address Space Solutions
Tunnel Overlay for Layer 3 VPNs
GRE Tunnels
Multipoint GRE Tunnels
Mapping Traffic to Tunnels
Resiliency and Routing Considerations
Encryption Considerations
Layer 3 VPNs
RFC 2547bis the MPLS Way
RFC 2547bis over L2TPv3
RFC 2547bis over GRE
IGP Best Practices
BGP Best Practices: Route Reflectors
BGP Best Practices: Route Distinguishers and ECMP Routing
Migration Recommendations
Layer 2 VPNs
Ethernet over MPLS
VPLS
Summary
Chapter 7 Extending the Virtualized Enterprise over the WAN
WAN Services
IP Services
Layer 2 Circuits
P2P GRE
Multipoint GRE
Dynamic Multipoint VPN
Extending Segmentation over the WAN
MPLS over Layer 2 Circuits
VRF-to-VRF Connections at the Autonomous System Border Routers
MP-eBGP Exchange of Labeled VPN-IPv4 Routes Between Adjacent ASBRs
Multihop MP-eBGP Between Remote Autonomous Systems
Using MPLS over Layer 2 Circuits for Segmented Branch Aggregation
Benefits and Drawbacks
Contracting Multiple IP VPNs
Benefits and Drawbacks
Carrier Supporting Carrier (CsC)
Using CsC for Segmented Branch Aggregation
Benefits and Drawbacks
MPLS over GRE
Benefits and Drawbacks
RFC 2547 VPNs over L2TPv3 Tunnels
Benefits and Drawbacks
VRFs Interconnected by a GRE or DMVPN Overlay
Benefits and Drawbacks
RFC 2547 VPNs over DMVPN
Benefits and Drawbacks
Summary
Chapter 8 Traffic Steering and Service Centralization
Shared Services: Protected vs. Unprotected
Unprotected Services
Protected Services
Unprotected Services Access
Basic Import/Export Mechanism
Any-to-Any and Hub-and-Spoke VPNs
Extranet VPN
Localized Inter-VPN Communication
Leaking Traffic with the Global Table
Protected Services Access
Firewalling for Common Services
Routed Firewalls and Transparent Firewalls
Routed Firewall Deployments
Transparent Firewall Deployments
Providing IP Services
DHCP
Domain Name System (DNS) Services
Summary
Chapter 9 Multicast in a Virtualized Environment
Multicast Introduction
Internet Group Management Protocol (IGMP)
Multicast Routing
Protocol Independent Multicast (PIM)
VRFs and Multicast
Multicast Sourced from an External IP Network
Multicast Across VRFs (mVPN Extranet)
mVPN Transport
Global
Tunnel Overlay
mVPN
Connecting the WAN
Summary
Chapter 10 Quality of Service in a Virtualized Environment
QoS Models and Mechanisms: A Review
Differentiated Services
MPLS Quality of Service
Tunnels and Pipes
MPLS Traffic Engineering and Guaranteed Bandwidth
DS-TE and Guaranteed Bandwidth
Do I Really Need This in an Enterprise Network?
QoS Models for Virtualized Networks
One Policy per Group
Summary
Chapter 11 The Virtualized Access Layer
Access Layer Switching
Implementing Dynamic Authentication and Authorization
Clientless Authentication
Client-Based Layer 2
Virtualizing the Access Layer
Layer 3 Access
Summary
Part III Appendixes
Appendix A L2TPv3 Expanded Coverage
L2TPv3 Control Channel
L2TPv3 Data Channel
Appendix B MPLS QoS, Traffic Engineering, and Guaranteed Bandwidth
MPLS QoS-Uniform Tunnel and Pipe Modes
MPLS Traffic Engineering
MPLS Fast Reroute
Guaranteed Bandwidth
Appendix C Recommended Reading
Appendix D RFCs and Internet Drafts
Index
Introduction
Part I A Network Architecture for the Virtual Enterprise3
Chapter 1 Business Drivers Behind Enterprise Network Virtualization
Why Virtualize?
Visitors, Partners, Contractors, and Quarantine Areas
Regulatory Compliance
Secure Service Areas
Network Consolidation
Acquisitions and Mergers
Multitenant Enterprises
Virtual Project Environment: Next-Generation Business Processes
Business Requirements Drive Technical Requirements
Summary
Chapter 2 Designing Scalable Enterprise Networks
Hierarchical Campus Design
Virtualizing the Campus
WAN Design
WAN Provider Service Offerings
WAN Architecture
WAN Resiliency
WAN Routing Considerations
Securing the WAN
WAN Virtualization
Summary
Chapter 3 Basic Virtualized Enterprise
The Virtual Enterprise
Transport Virtualization-VNs
VLANs and Scalability
Virtualizing the Routed Core
The LAN Edge: Authentication and Authorization
Central Services Access: Virtual Network Perimeter
Unprotected Services
Summary
Chapter 4 A Virtualization Technologies Primer: Theory
Network Device Virtualization
Layer 2: VLANs
Layer 3: VRF Instances
Layer 2 Again: VFIs
Virtual Firewall Contexts
Network Device Virtualization Summary
Data-Path Virtualization
Layer 2: 802.1q Trunking
Generic Routing Encapsulation
IPsec
L2TPv3
Label Switched Paths
Data-Path Virtualization Summary
Control-Plane Virtualization-Routing Protocols
VRF-Aware Routing
Multi-Topology Routing
Control-Plane Virtualization Summary
Summary
Chapter 5 Infrastructure Segmentation Architectures: Theory
Hop to Hop
Layer 3 H2H
Single Address Space Alternatives
H2H Summary
Tunnel Overlay for L3VPN
L3VPN Using GRE and IPsec Overlay
Putting It All Together: DMVPN
Layer 3 Tunnel Summary
Tunnel Overlay for Layer 2 VPNs
Layer 2 P2P Overlay Using L2TPv3
Layer 2 P2P Overlay Using MPLS
Layer 2 VPN MP2MP Using MPLS (VPLS)
Layer 2 VPN Summary
Peer-Based Model for Layer 3 VPNs
RFC 2547bis the MPLS Way
RFC 2547bis Forwarding-Plane Alternatives
Inter-Autonomous System Connectivity: Another Application of Tunnels
Carrier Supporting Carrier
Inter-Autonomous System Routing
Inter-Autonomous System Connectivity Summary
Summary
Part II Enterprise Virtualization Techniques and Best Practices
Chapter 6 Infrastructure Segmentation Architectures: Practice
Hop-to-Hop VLANs
Layer 3 Hop to Hop
Single Address Space Solutions
Tunnel Overlay for Layer 3 VPNs
GRE Tunnels
Multipoint GRE Tunnels
Mapping Traffic to Tunnels
Resiliency and Routing Considerations
Encryption Considerations
Layer 3 VPNs
RFC 2547bis the MPLS Way
RFC 2547bis over L2TPv3
RFC 2547bis over GRE
IGP Best Practices
BGP Best Practices: Route Reflectors
BGP Best Practices: Route Distinguishers and ECMP Routing
Migration Recommendations
Layer 2 VPNs
Ethernet over MPLS
VPLS
Summary
Chapter 7 Extending the Virtualized Enterprise over the WAN
WAN Services
IP Services
Layer 2 Circuits
P2P GRE
Multipoint GRE
Dynamic Multipoint VPN
Extending Segmentation over the WAN
MPLS over Layer 2 Circuits
VRF-to-VRF Connections at the Autonomous System Border Routers
MP-eBGP Exchange of Labeled VPN-IPv4 Routes Between Adjacent ASBRs
Multihop MP-eBGP Between Remote Autonomous Systems
Using MPLS over Layer 2 Circuits for Segmented Branch Aggregation
Benefits and Drawbacks
Contracting Multiple IP VPNs
Benefits and Drawbacks
Carrier Supporting Carrier (CsC)
Using CsC for Segmented Branch Aggregation
Benefits and Drawbacks
MPLS over GRE
Benefits and Drawbacks
RFC 2547 VPNs over L2TPv3 Tunnels
Benefits and Drawbacks
VRFs Interconnected by a GRE or DMVPN Overlay
Benefits and Drawbacks
RFC 2547 VPNs over DMVPN
Benefits and Drawbacks
Summary
Chapter 8 Traffic Steering and Service Centralization
Shared Services: Protected vs. Unprotected
Unprotected Services
Protected Services
Unprotected Services Access
Basic Import/Export Mechanism
Any-to-Any and Hub-and-Spoke VPNs
Extranet VPN
Localized Inter-VPN Communication
Leaking Traffic with the Global Table
Protected Services Access
Firewalling for Common Services
Routed Firewalls and Transparent Firewalls
Routed Firewall Deployments
Transparent Firewall Deployments
Providing IP Services
DHCP
Domain Name System (DNS) Services
Summary
Chapter 9 Multicast in a Virtualized Environment
Multicast Introduction
Internet Group Management Protocol (IGMP)
Multicast Routing
Protocol Independent Multicast (PIM)
VRFs and Multicast
Multicast Sourced from an External IP Network
Multicast Across VRFs (mVPN Extranet)
mVPN Transport
Global
Tunnel Overlay
mVPN
Connecting the WAN
Summary
Chapter 10 Quality of Service in a Virtualized Environment
QoS Models and Mechanisms: A Review
Differentiated Services
MPLS Quality of Service
Tunnels and Pipes
MPLS Traffic Engineering and Guaranteed Bandwidth
DS-TE and Guaranteed Bandwidth
Do I Really Need This in an Enterprise Network?
QoS Models for Virtualized Networks
One Policy per Group
Summary
Chapter 11 The Virtualized Access Layer
Access Layer Switching
Implementing Dynamic Authentication and Authorization
Clientless Authentication
Client-Based Layer 2
Virtualizing the Access Layer
Layer 3 Access
Summary
Part III Appendixes
Appendix A L2TPv3 Expanded Coverage
L2TPv3 Control Channel
L2TPv3 Data Channel
Appendix B MPLS QoS, Traffic Engineering, and Guaranteed Bandwidth
MPLS QoS-Uniform Tunnel and Pipe Modes
MPLS Traffic Engineering
MPLS Fast Reroute
Guaranteed Bandwidth
Appendix C Recommended Reading
Appendix D RFCs and Internet Drafts
Index