book

CCDP Self-Study: Designing Cisco Network Architectures (ARCH)

by Keith Hutton, Amir Ranjbar

December 2004

Intermediate to advanced

696 pages

17h 19m

English

Cisco Press

Read now

Unlock full access

Copyright
Dedications
About the Authors
About the Technical Reviewers
Acknowledgments
Icons Used in This Book
Command Syntax Conventions
Foreword
Introduction
Goals of This BookWho Should Read This BookHow This Book Is Organized
1. Introducing Cisco Network Service Architectures
Primary Concerns of Network DeploymentPerformanceScalabilityAvailabilityCisco AVVID FrameworkCisco AVVID Common Network InfrastructureCisco AVVID Intelligent Network ServicesCisco AVVID Network SolutionsEnterprise Composite Network ModelEnterprise Campus Functional AreaCampus Infrastructure ModuleNetwork Management ModuleServer Farm ModuleEdge Distribution ModuleEffects of the Enterprise Campus Functional Area on the Enterprise NetworkEnterprise Edge Functional AreaE-Commerce ModuleInternet Connectivity ModuleRemote Access and VPN ModuleWAN ModuleEffects of the Enterprise Edge Functional Area on the Enterprise NetworkService Provider Edge Functional AreaSummaryReferencesProduct SummaryReview Questions
2. Designing Enterprise Campus Networks
Enterprise Network Design MethodologyCampus Design Within the Enterprise Composite Network ModelTypical Requirements for an Enterprise Campus NetworkEnterprise Campus Design MethodologyAnalyzing Network Traffic PatternsDesigning the Campus InfrastructureDesigning the Logical Campus NetworkOne VLAN Per SwitchUnique VLANs Per SwitchVLANs Spanning Multiple Access SwitchesDesigning the Physical Campus NetworkSelecting Transmission Media and Data-Link ProtocolsSelecting a Physical Network Segmentation StrategySelecting and Implementing Spanning Tree ProtocolSelecting Data Link or Multilayer Switching SolutionsSmall Campus NetworkMedium Campus NetworkMultilayer Switched Campus BackboneSelecting Cisco Hardware and SoftwareIdentifying an IP Addressing StrategySelecting Routing ProtocolsStatic Versus Dynamic RoutingRIP and RIPv2IGRPEIGRPOSPFIS-ISSelecting Areas for NetworksEnterprise Campus Design ExamplesSmall Enterprise Design ExampleMedium Enterprise Design ExampleLarge Enterprise Design ExampleDesigning the Server FarmDesign Objectives for the Server FarmServer Farm Infrastructure ArchitectureDesigning the Server Farm for ScalabilityConsiderations for Server Farm Security and ManageabilitySummaryReferencesProduct SummaryStandards and Specifications SummaryReview QuestionsCase Study: OCSIC Bottling CompanyBackgroundBusiness Goals of OCSICHeadquarters Location, Network, and ApplicationsNorth American Plants and Their ApplicationsNetworking Strategies and GoalsProposed Headquarters Campus Network SolutionProposed Headquarters Server Farm SolutionProposed North American Plan Model
3. Designing Enterprise Edge Connectivity
Reviewing the Enterprise Edge Network Design MethodologyEnterprise Edge DesignTypical Requirements for the Enterprise EdgeEnterprise Edge Design MethodologyAnalyzing Network Traffic PatternsDesigning the Classic WAN ModuleEnterprise Needs for the WANSelecting the WAN TopologyBranch Office WANRegional Office WANEnterprise WAN BackboneSelecting a Service ProviderSelecting the Data-Link LayerSelecting the Physical LayerSelecting WAN FeaturesSelecting Cisco Edge Routing SolutionsRouting Protocol and IP Addressing ConsiderationsAn Enterprise WAN Design ExampleDesigning the Remote Access ModuleEnterprise Needs for Remote AccessSelecting the Remote Access Type and TerminationSelecting the Remote Access Physical ConnectivitySelecting the Remote Access ProtocolSelecting Cisco Access Routing SolutionsSizing the Central Site Remote Access ConnectionAn Enterprise Remote Access Design ExampleDesigning the Internet Connectivity ModuleEnterprise Requirements for the InternetUsing NAT at the Enterprise EdgeDesigning ISP Connectivity SolutionsInternet Connectivity Design ExampleSummaryReferencesProduct SummaryStandards and Specifications SummaryReview QuestionsCase Study: OCSIC Bottling CompanyNorth American Plant Headquarters WANRemote Access and Internet Connectivity RequirementsInternational Manufacturing, Distribution, and Sales PlantsInternational Plant Networks and ApplicationsWAN Module DesignRemote Access DesignInternet Connectivity Module Design

4. Designing Network Management Services
Developing an Enterprise Network Management StrategyFunctional Areas of Network ManagementFCAPSNetwork Management Policies and ProceduresPoliciesProceduresNetwork Management MethodsReactive—Event DrivenProactive—Polling and Event DrivenNetwork Management Strategy ProcessNetwork Management Module FunctionsCisco Network Management StrategyCiscoWorksCiscoWorks Common Management FoundationCiscoWorks LAN Management SolutionBest Practices for Managing the LAN Using LMSCiscoWorks Routed WAN Management SolutionBest Practices for Managing the WAN Using RWANDesigning the Network Management ArchitectureNetwork Management Design ConsiderationsNetwork Management Infrastructure ConsiderationsNetwork Management Data Collection and Management ConsiderationsNetwork Management Station Sizing ConsiderationsSystem Management Resource ConsiderationsNetwork Management Deployment RecommendationsSingle Server DeploymentMultiserver, Split Applications—Single Management DomainMultiple Management DomainsCentralized WAN Management with LAN ManagementKey Questions to ConsiderAvailability Manager IssuesNetwork Management Design ScenariosSmall Site Network Management Design ScenarioMedium Site Network Management Design ScenarioLarge Site Network Management Design ScenarioSummaryReferencesProduct SummaryStandards and Specification SummaryReview QuestionsCase Study: OCSIC Bottling Company
5. Designing High-Availability Services
High-Availability Features and OptionsNetwork Requirements for High AvailabilityCisco IOS High-Availability ArchitectureFault Tolerance and Hardware RedundancyUsing Fault-Tolerant DevicesProviding Redundancy in the Network TopologyRoute Processor RedundancyNetwork Interface Card RedundancyOptions for Layer 3 RedundancyRedundancy and Spanning Tree ProtocolPortFast and UplinkFastDesigning High-Availability Enterprise NetworksDesign Guidelines for High AvailabilityRedundancy OptionsSoftware Features and Protocol AttributesCarrier and Circuit TypesPower AvailabilityHigh-Availability Design Goals and ConclusionsBest Practices for High-Availability Network DesignEnterprise Campus Design Guidelines for High AvailabilityEnterprise Edge Design Guidelines for High AvailabilityHigh-Availability Design ExampleSummaryReferenceProduct SummaryStandards and Specifications SummaryReview QuestionsCase Study: OCSIC Bottling CompanyHigh-Availability Design for the Campus Infrastructure ModuleHigh-Availability Strategy for the Server Farm ModuleHigh-Availability Strategy for the WAN ModuleHigh-Availability Strategy for the Remote Access ModuleHigh-Availability Strategy for the Internet Connectivity ModuleRevised Network Diagrams
6. Designing Security Services
Evaluating Network Security PoliciesNetwork VulnerabilitiesDefining a Security PolicyNetwork Security as a ProcessSecuring the NetworkMonitoring SecurityTesting SecurityImproving SecurityRisk Assessment and ManagementReviewing Cisco Security SolutionsKey Elements of Network SecurityNetwork Security Attack Types and Their SolutionsPacket SniffersIP SpoofingDoS AttacksPassword AttacksMan-in-the-Middle AttacksApplication Layer AttacksNetwork ReconnaissanceTrust ExploitationPort Redirection AttacksUnauthorized Access AttacksViruses and Trojan HorsesFirewall Design OptionsImplementing a Perimeter LANFirewall Filtering RulesPerimeter Security: PIX FirewallPerimeter Security: IOS FirewallIntrusion Detection System Design OptionsIDS OperationIDS DeploymentAuthentication, Authorization, and AccountingRADIUSTACACS+KerberosPublic Key InfrastructureIP SecurityInternet Key ExchangeAuthentication HeaderEncapsulating Security PayloadDevice Security OptionsRoutersSwitchesHostsNetwork-WideApplicationsImplementing Network Security Using the Cisco SAFE Security BlueprintsIntroduction to Cisco SAFE ArchitectureSAFE Security Strategies for Small NetworksSmall Network Internet Connectivity ModuleSmall Network Campus Infrastructure ModuleSAFE Security Strategies for Medium NetworksMedium Network Internet ConnectivityMedium Network Campus Infrastructure ModuleMedium Network WAN ModuleSAFE Security Strategies for Large NetworksCampus Infrastructure ModuleSecure Network Management ModuleSecure Server Farm ModuleSecure Edge Distribution ModuleSAFE Security Strategies for the Enterprise EdgeE-commerce ModuleInternet Connectivity ModuleRemote Access and VPN ModuleWAN Module FeaturesSummaryReferencesProduct SummaryStandards and Specification SummaryReview QuestionsCase Study: OCSIC Bottling Company
7. Designing QoS
Identifying QoS MechanismsEnterprise Network Requirements for QoSDelayDelay VariationPacket LossQoS-Enabled NetworkQoS ArchitecturesIntServDiffServQoS Service LevelsClassification and MarkingCongestion AvoidanceCongestion ManagementTraffic ConditioningCAR: Managing Access Bandwidth Policy and Performing PolicingTraffic Shaping: Controlling Outbound Traffic FlowSignalingLink-Efficiency MechanismsLFIcRTP and dcRTPSummary of Key Cisco IOS Software QoS Categories and FeaturesDesigning QoS for Enterprise NetworksQoS Design GuidelinesQoS Design Guidelines for DataQoS Design Guidelines for VoiceQoS Design Guidelines for Video ConferencingDesigning QoS for the Enterprise NetworkExample: QoS SolutionSummaryReferenceProduct SummaryStandards and Specifications SummaryReview QuestionsCase Study: OCSIC Bottling CompanyQoS Design for the Site-to-Site WANQoS Design for the Campus Infrastructure Module
8. Designing IP Multicast Services
Examining IP Multicast ServicesIP Multicast BasicsIP Multicast Data-Delivery PrinciplesMulticast ForwardingIP Multicast Group Membership and Distribution TreesSource TreesShared TreesComparison of Source Trees and Shared TreesProtocol Independent MulticastPIM Dense ModePIM Sparse ModePIM-SM Source RegistrationPIM-SM SPT SwitchoverSparse Mode, Dense Mode, and Sparse-Dense ModeIP Multicast Control MechanismsIGMPCGMP and IGMP SnoopingDesigning IP Multicast Solutions for Enterprise NetworksIP Multicast Design Considerations for an Enterprise CampusDesigning IP Multicast for a Small CampusDesigning IP Multicast for a Large Enterprise CampusDesigning IP Multicast Over a WANSummaryReferencesProduct SummaryStandards and Specifications SummaryReview QuestionsCase Study: OCSIC Bottling CompanyIP Multicast Design for OCSIC's New Application
9. Designing Virtual Private Networks
VPN TechnologiesEnterprise VPN RequirementsVPN TunnelingVPN SecurityIPSecUser AuthenticationEncryptionVPN TerminationVPN ConcentratorsVPN Client SoftwareVPN ManagementVPN Management ConsiderationsCiscoWorks VPN/Security Management SolutionDesigning Site-to-Site VPNsSite-to-Site VPN RequirementsKey Design Considerations for Site-to-Site VPNsHub-and-Spoke VPN TopologiesSimple Full-Mesh VPN TopologyHierarchical VPN TopologyHigh-Availability and Resiliency ConsiderationsUsing a Routing Protocol Over the VPNMinimizing Packet FragmentationImplementing IPSecSite-to-Site VPN ExamplesExample: Small Site-to-Site VPNSmall Site-to-Site VPN SolutionExample: Large Site-to-Site VPNLarge Site-to-Site VPN SolutionDesigning Remote-Access VPNsRemote-Access VPN RequirementsRemote-Access VPN Design ConsiderationsBroadband Access Design ConsiderationsCapacity Planning for Remote-Access VPNsNAT IssuesOne-to-One TranslationMany-to-One TranslationNAT TraversalVPN Split-Tunnel CommunicationRemote-Access VPN ExamplesExample: Small Remote-Access VPNSmall Remote-Access VPN SolutionExample: Large Remote-Access VPNLarge Remote-Access VPN SolutionSummaryReferencesProduct SummaryStandards and Specification SummaryReview QuestionsCase Study: OCSIC Bottling CompanySite-to-Site VPN SolutionRemote-Access VPN SolutionRevised Network Diagrams
10. Designing Enterprise Wireless Networks
Reviewing the Wireless LAN SolutionEmerging Wireless Enterprise Network NeedsWireless Communication ArchitectureAccess Point CoverageCell Distribution802.11 StandardsCisco Wireless SolutionsAccess Points and Client AdaptersWorkgroup BridgesWireless BridgesAntennasDesigning WLANs for Enhanced Enterprise CommunicationsEnterprise WLAN Design ConsiderationsWLAN Data RatesClient Density and ThroughputWLAN CoverageRF EnvironmentChannel SelectionAccess-Point Placement and NumberInline PowerVLANsIP AddressingInfrastructure AvailabilityBack-End System AvailabilityAccess-Point Hot Standby RedundancyRoamingMulticastQoSVoice over IPAccess-Point FiltersProprietary QoS for 802.11 PhonesWLAN Security Design ConsiderationsWLAN Security Extension—EAPWLAN LAN Extension—IPSecWLAN Static WEPSecurity Extension ComparisonCisco EAPAttack Mitigation Using EAP AuthenticationAttack Mitigation Using IPSecSmall Office WLAN Design ModelEnterprise WLAN Design ModelExample: Enterprise WLAN Site DesignExample: Enterprise WLAN Remote Office DesignRemote-Access and Telecommuter WLAN Design ModelsSummaryReferencesProduct SummaryStandards and Specification SummaryReview QuestionsCase Study: OCSIC Bottling Company
11. Designing IP Telephony Solutions
Reviewing the Cisco IP Telephony SolutionIntroducing the Cisco IP Telephony SolutionCisco CallManagerGateways and Control ProtocolsTranscoders and ConferencingHardware SupportUnicast Conference BridgeCisco IP Telephony ApplicationsDesigning a Network for Cisco IP TelephonyCisco CallManager Cluster Design ConsiderationsCluster Deployment GuidelinesCluster DesignDesigning Single-Site IP Telephony SolutionsExample: Single-SiteSingle-Site SolutionCisco CallManager and Call Admission ControlVoice Mail IntegrationGateway IntegrationDesigning Multisite with Centralized Call Processing IP Telephony SolutionsDesigning Multisite with Distributed Call Processing IP Telephony SolutionsExample: Distributed Call ProcessingDistributed Call Processing SolutionGatewaysCisco CallManagerVoice MailMedia ResourcesFax and Modem SupportClustering over the IP WANLocal FailoverCisco CallManager ProvisioningGatewaysVoice MailMusic on HoldRemote FailoverCisco CallManager ProvisioningGatewaysVoice MailMusic on HoldNetwork Infrastructure Design ConsiderationsLayer 2 Voice TransportVoIP over Leased LinesVoice over Frame RelayVoice over ATMNetwork Bandwidth ProvisioningProvisioning for Voice Bearer TrafficProvisioning for Call Control TrafficTraffic EngineeringDial Plan Design ConsiderationsIntelligent Network Services for IP Telephony and VoiceIP Telephony Network Management ToolsHigh AvailabilityVoice SecurityQoS Design ConsiderationsSummaryReferencesProduct SummaryStandards and Specification SummaryReview QuestionsCase Study: OCSIC Bottling Company
12. Designing Content Networking Solutions
Reviewing the Content Networking SolutionEnterprise Content Networking RequirementsContent Networking ArchitectureContent CachingTransparent Caching DeploymentProxy Caching DeploymentReverse Proxy Caching DeploymentContent SwitchingContent RoutingDirect Mode Content RoutingWCCP Mode Content RoutingContent Distribution and ManagementIntelligent Network Services IntegrationDesigning Content Networking SolutionsContent Networking Design ConsiderationsContent Networking Solutions for Web Content DeliveryExample: Web Content DeliveryWeb Content Delivery SolutionContent Networking Solutions for E-CommerceExample: E-CommerceE-Commerce SolutionContent Networking Solutions for Streaming MediaExample: Streaming MediaStreaming Media SolutionSummaryReferencesProduct SummaryStandards and Specification SummaryReview QuestionsCase Study: OCSIC Bottling Company
13. Designing Storage Networking Solutions
Reviewing the Cisco Storage Networking SolutionEnterprise Needs for Storage NetworkingStorage ConsolidationBusiness Continuance and BackupCisco Storage Networking ArchitectureNetwork Storage ModelsSANsNetwork-Attached StorageNetwork Technology Enablers for Storage NetworksiSCSIFCIPIntelligent Network Services for Storage NetworkingDesigning a Storage Networking Architecture with IP AccessDesigning a Storage Networking ArchitectureIP Access to StorageExample: IP Access to StorageIP Access to Storage SolutionStorage over WANExample: Storage over WANStorage over WAN SolutionExample: Storage over Optical MetroStorage over Optical Metro SolutionNetwork-Attached Storage ModelExample: Network-Attached StorageNetwork-Attached Storage SolutionSummaryReferencesProduct SummaryStandards and Specification SummaryReview QuestionsCase Study: OCSIC Bottling Company
A. Answers to Review Questions
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9Chapter 10Chapter 11Chapter 12Chapter 13
Glossary

Content preview from CCDP Self-Study: Designing Cisco Network Architectures (ARCH)

Introduction

Designing reliable internetworks poses a difficult challenge for today's IT professional. The very scope and scale of present-day network technologies precipitates the requirement for a structured and formalized approach. To meet this requirement, Cisco has developed a comprehensive structured design architecture called Architecture for Voice, Video, and Integrated Data (AVVID). Cisco AVVID provides network designers with a solid foundation for the engineering of enterprise networks.

Goals of This Book

CCDP Self-Study Guide: Designing Cisco Network Architectures (ARCH) assists administrators in the design process by providing a solid foundation for the study of the AVVID framework. This book serves as a companion reference volume and ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Authorized Self-Study Guide Designing Cisco Network Service Architectures (ARCH), Second Edition

Publisher Resources

ISBN: 1587051850Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

CCDP Self-Study: Designing Cisco Network Architectures (ARCH)

by Keith Hutton, Amir Ranjbar

Introduction

Goals of This Book

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.