
Implementing Cisco Networking Solutions
Description
Alles über E-Books | Antworten auf Fragen rund um E-Books, Kopierschutz und Dateiformate finden Sie in unserem Info- & Hilfebereich.
More details
Person
Harpreet is a professional with 8+ years of experience in the field of Ethical Hacking, Penetration Testing, Vulnerability Research & Red Teaming. He is the author of "Hands-On: Web Penetration Testing with Metasploit" and "Hands-On: Red Team Tactics" published by Packt Publishing. He's also an OSCP, OSWP, CRTP certified professional. Over the years of his experience, Harpreet has acquired the Offensive & Defensive skill set. He is a professional who specializes in Wireless & network exploitation including but not limited to Mobile exploitation, Web Application exploitation and he has also performed few Red Team Engagements in Banks & Financial Groups.
Content
- Intro
- Copyright
- Credits
- About the Author
- About the Reviewer
- www.PacktPub.com
- Customer Feedback
- Dedication
- Table of Contents
- Preface
- Chapter 1: Network Building Essentials
- Introduction to networks
- The OSI model and the TCP/IP stack
- Basic OSI reference model
- Layer 1 - The physical layer
- Layer 2 - The data link layer
- Layer 3 - The network layer
- Layer 4 - The transport layer
- Layer 5 - The session layer
- Layer 6 - The presentation layer
- Layer 7 - The application layer
- The TCP/IP model
- Internet Protocol (IP)
- Transmission Control Protocol (TCP)
- User Datagram Protocol (UDP)
- IP version 6
- Building a network
- Purpose of networks
- Network lifecycle
- Advantages of network lifecycle approach
- Prepare phase
- Plan phase
- Design phase
- Implement phase
- Operate phase
- Optimize phase
- Summary
- Chapter 2: Networks for Digital Enterprises
- The impact of technology on business
- Digitization as the key enabler
- A digital-ready infrastructure
- Enabling technologies
- Input/output systems
- IoT systems
- Network
- Software-defined networking
- Network function virtualization
- Network programmability
- Processing centres
- Edge computing
- Cloud computing
- Analytics
- Network as the cornerstone
- Network enabling new experiences
- Network providing new Insights
- Facets of a digital infrastructure
- Functionality
- Resiliency
- Modularity
- Flexibility
- Scalability
- Security
- Agility
- Manageability
- Visibility and analytics
- Cisco Digital Network Architecture
- Summary
- Chapter 3: Components of the Enterprise Network
- Networking devices and their functions
- Switches
- Wireless Access Points
- Routers
- Firewalls
- Introduction to Cisco IOS
- IOS command modes
- Configuration files
- Places in the network
- Campus network
- Wide Area Network (WAN)
- Data center
- Internet edge
- Interdependency between the various components
- Summary
- Chapter 4: Understanding and Configuring Campus Network Technologies
- Campus network technologies
- Layer 2 technologies
- Ethernet
- Ethernet switch and MAC-based forwarding
- Virtual LANs
- Access ports and trunk ports
- Spanning Tree Protocols
- Link aggregation
- Address Resolution Protocol (ARP)
- Configuring layer 2 protocols
- Layer 3 technologies
- IP addressing
- IPv4 addresses
- Routable and private addresses
- Sample addressing
- Configuring IP addresses
- A note about WAN addresses
- Secondary addresses
- First Hop Redundancy Protocols (FHRP)
- HSRP
- VRRP
- GLBP
- Routing protocols
- Routing table
- Static routing
- Dynamic routing
- Distance vector routing
- Link-state routing
- External routing
- Route redistribution
- Routing table segmentation
- Campus LAN design considerations
- Topology choices
- Ring and star topologies
- Physical versus logical topology
- Naming convention
- Layer 2 versus layer 3 boundaries
- Sizing the campus network
- Stacking switches
- A sample network
- Summary
- Chapter 5: Understanding and Configuring Wireless Access Technologies
- Benefits of wireless networks
- Wireless fundamentals
- An RF signal
- Signal strength
- Modulation
- Signal to Noise Ratio (SNR)
- Frequency bands
- Channels
- MIMO
- Channel bonding
- Antenna characteristics
- Wireless standards
- IEEE 802.11
- IEEE 802.11a
- IEEE 802.11b
- IEEE 802.11g
- IEEE 802.11n
- IEEE 802.11ac
- Mixed mode operation/interoperability
- Configuring the WLAN
- Cisco mobility express
- Wireless LAN controller and CAPWAP
- Configuring AP using Cisco Mobility Express
- Configuration using the WLC
- WLC redundancy
- HA stateful switchover
- Configuring the WLC deployment
- FlexConnect mode
- Configuring the APs in FlexConnect mode
- Summary
- Chapter 6: Understanding and Configuring WAN Technologies
- Considerations for a WAN design
- WAN technology choices
- Configuring WAN serial links
- Serial links with PPP/HDLC encapsulation
- FR encapsulation
- Multilink PPP
- Configuring overlay P2P links
- Virtual private networks
- Layer 2 VPNs
- Layer 3 VPNs
- VRF-Lite
- Remote access VPNs
- Managed versus unmanaged services
- Connecting to the internet
- Routing at the internet edge
- Static routing
- BGP
- Encrypting and securing the WAN
- Optimizing the WAN
- Summary
- Chapter 7: Understanding and Configuring Data Center Technologies
- Functions of a data center
- Evolution of the DC
- Network
- Computers
- Virtualization
- Storage
- Cloud computing
- Management systems
- Design of a DC
- Application hierarchy
- Zoning of the data center
- Types of networks in a DC
- Introduction to firewalls
- Firewall inspection
- Basic access control
- Protecting from IP fragments
- Application inspection
- Applying connection limits and TCP normalization
- Enabling threat detection
- Firewall security context
- Scaling the firewall
- Connecting the DC to the internet
- Network Address Translation
- Designing a sample DC
- Network design
- Firewall design
- Firewall redundancy
- Server redundancy
- NIC teaming
- Virtualization
- Server load balancers
- Planning a disaster recovery
- Providing remote access to the DC
- Summary
- Chapter 8: Understanding and Configuring Network Security
- Security landscape
- Elements of enterprise security
- Securing network infrastructure
- Data plane security
- Controlling network access
- Password protection on wireless networks
- Network access control (NAC)
- Port security and MAC limiting
- Preventing spoofed attacks
- ARP spoofing
- Unicast RPF
- IP source guard
- Limiting punting to CPU
- IP options and source routing
- ICMP attacks
- Controlling user traffic
- Rate limiting and storm control
- Controlling user to user traffic
- Access control lists
- Preventing denial of service attacks
- Control plane security
- Disable unused services
- Disabling unused global services
- Disabling interface services
- Layer 2 control plane security
- STP security
- DHCP snooping
- Dynamic ARP Inspection (DAI)
- Control plane policing
- Protocol security
- Management plane security
- Security beyond the network devices
- Securing the network perimeter
- Firewalls
- Securing services
- Email services
- Web security
- Advanced Malware Protection (AMP)
- Securing the endpoints
- DNS-based security
- Securing data in transit
- Network behavioral analysis
- Summary
- Chapter 9: Understanding and Configuring Quality of Service
- The need for QoS
- Network impact on traffic
- Packet loss
- Latency
- Jitter
- QoS models
- The integrated services model
- The differentiated services model
- QoS tools
- Traffic conditioning
- Policing
- Shaping
- Markdown
- Packet classification
- Packet marking
- Congestion management
- Queuing
- Scheduling
- Low latency queueing (LLQ)
- Class-based weighted fair queueing (CBWFQ)
- Congestion avoidance
- Tail drop
- Random early detection
- Weighted random early detection (WRED)
- Modular QoS command-line interface
- QoS design for an enterprise
- Defining the trust boundary
- Defining traffic types
- Assigning bandwidths
- Assessing hardware and assigning classes to queues
- Implementing configurations
- The ingress policy
- The egress policy
- QoS in a hybrid model with service provider WAN
- Summary
- Chapter 10: A Systematic Approach to Network Management
- Frameworks related to network management
- Network management planning
- Pillars of network management
- People
- Processes
- Tools and technologies
- The importance of metrics
- Network operations systems components
- Simple Network Management Protocol (SNMP)
- SNMP traps
- SNMP polling
- Syslog
- Network Time Protocol (NTP)
- Controlling device access using RADIUS
- Role-based user access
- IP Service Level Assurance (IP-SLA)
- Management network
- Cisco Prime Infrastructure
- Implementing the network management strategy
- Summary
- Chapter 11: Basic Troubleshooting Skills and Techniques
- A framework for structured troubleshooting
- Establishing the normal and detecting deviations
- The network baseline
- Application baseline
- Network troubleshooting commands
- IOS commands
- The ping command
- The traceroute command
- The debug commands
- Troubleshooting the network
- Troubleshooting user connectivity
- Troubleshooting layer 2 issues
- Troubleshooting the first hop connectivity
- Troubleshooting routing issues
- Troubleshooting forwarding plane issues
- Troubleshooting performance issues
- Troubleshooting the management plane
- Troubleshooting device level issues
- Hardware issues
- Software issues
- Summary
- Index
System requirements
File format: ePUB
Copy protection: Adobe-DRM (Digital Rights Management)
System requirements:
- Computer (Windows; MacOS X; Linux): Install the free reader Adobe Digital Editions prior to download (see eBook Help).
- Tablet/smartphone (Android; iOS): Install the free app Adobe Digital Editions or the app PocketBook before downloading (see eBook Help).
- E-reader: Bookeen, Kobo, Pocketbook, Sony, Tolino and many more (not Kindle).
The file format ePub works well for novels and non-fiction books – i.e., „flowing” text without complex layout. On an e-reader or smartphone, line and page breaks automatically adjust to fit the small displays.
This eBook uses Adobe-DRM, a „hard” copy protection. If the necessary requirements are not met, unfortunately you will not be able to open the eBook. You will therefore need to prepare your reading hardware before downloading.
Please note: We strongly recommend that you authorise using your personal Adobe ID after installation of any reading software.
For more information, see our ebook Help page.