You are previewing CCNP Self-Study: Building Cisco Multilayer Switched Networks (BCMSN), Third Edition.
O'Reilly logo
CCNP Self-Study: Building Cisco Multilayer Switched Networks (BCMSN), Third Edition

Book Description

Cisco authorized self-study book for CCNP switching foundation learning

Prepare for the CCNP BCMSN exam 642-811 with a Cisco authorized self-study guide. This book teaches you how to:

  • Configure basic parameters for Catalyst switches, including SSH, system host name, and IP address management in both Cisco IOS and Cisco CatOS

  • Employ private VLANs, VTP, and 802.1Q trunking in Cisco multilayer switched networks

  • Deploy 802.1D, 802.1D-2004, 802.1s, and 802.1w STP and utilize advanced spanning-tree features such as UplinkFast and root guard

  • Enable Layer 2 features such as including aggressive-mode UDLD, CDP, and Jumbo Ethernet Frames

  • Deploy Inter-VLAN routing

  • Implement QoS on Catalyst switches at Layers 2 and 3

  • Enable Layer 2 and Layer 3 multicasting features such as IGMP snooping

  • Employ VRRP, HSRP, and Supervisor Engine redundancy for high availability

  • Describe the requirements for IP telephony in multilayer switched networks

  • Implement control plane and data plane security features such as 802.1X and DHCP snooping

  • Deploy Ethernet over long distances with Metro Ethernet solutions such as DWDM and CDWM

  • CCNP Self-Study: Building Cisco Multilayer Switched Networks (BCMSN), Third Edition, is a Cisco® authorized, self-paced learning tool for CCNP® switching foundation learning. This book provides you with the knowledge needed to build scalable multilayer switched networks, to create and deploy a global intranet, and to implement basic troubleshooting techniques in environments that use Cisco multilayer switches for client hosts and services. By reading this book, you will learn how to improve traffic flow, reliability, redundancy, performance, and security for Layer 2 and Layer 3 switched networks.

    This comprehensive book provides detailed information and easy-to-grasp tutorials on design, configuration, operation, and troubleshooting of modern multilayer switched networks. This book introduces Cisco Catalyst® switching architectures, including Cisco Express Fowarding, ternary content addressable memory (TCAM), and the Cisco 6500, 4500, 3750, 3550, and 2950 series of switches. The book places an emphasis on configuring Cisco Catalyst switches with Cisco IOS® Software, with many chapters covering both Cisco IOS and Cisco CatOS. You will also learn about emerging technologies such as multicasting, security, IP telephony, storage area networking, and quality of service (QoS) as additions to the campus network design. The book concludes with a discussion of troubleshooting methodologies and tools. Each chapter opens with a list of objectives to help focus your study. Lab exercises are offered throughout to help illuminate theoretical concepts. Each chapter concludes with a summary of key concepts as well as review questions to reinforce your understanding.

    This revision to the popular second edition is fully updated to include designs using new Catalyst products, references to the Catalyst 6500 Sup720, security updates throughout the entire book as well as added coverage of Dynamic Host Configuration Protocol (DHCP) snooping, Address Resolution Protocol (ARP) inspection, ARP throttling, revised metro coverage, and new discussions on voice virtual LANs (VLAN) and Rapid Spanning Tree Protocol (RSTP).

    CCNP Self-Study: Building Cisco Multilayer Switched Networks (BCMSN), Third Edition, is part of a recommended learning path from Cisco Systems® that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.

    Table of Contents

    1. Copyright
      1. Dedications
    2. About the Authors
      1. About the Technical Reviewers
    3. Acknowledgments
    4. Icons Used in This Book
    5. Command Syntax Conventions
    6. Foreword
    7. Introduction
      1. Goals and Purpose
      2. Who Should Read This Book?
      3. Methods
      4. How to Read This Book
      5. How This Book Is Organized
    8. 1. Introduction to Building Cisco Multilayer Switched Networks
      1. Hardware-Switching and Software-Switching Terminology
      2. Multilayer Switching Overview
        1. Understanding Layers 2, 3, 4, and 7 Switching Terminology
          1. Layer 2 Switching
          2. Layer 3 Switching
          3. Layer 4 Switching
          4. Layer 7 Switching
        2. Layer 2 Switching In-Depth
        3. Layer 3 Switching In-Depth
        4. Multilayer Switching
      3. Enterprise Composite Network Model for Building Cisco Multilayer Switched Networks
        1. The Cisco AVVID Framework
        2. Why Build Layer 3 Networks?
        3. Enterprise Composite Network Model
        4. Enterprise Campus
          1. Enterprise Campus Infrastructure
          2. Building Access, Building Distribution, and Campus Backbone Submodules
          3. Network Management, Server Farm, and Edge Distribution Submodules
          4. How Enterprise Campus Modules Meet the Needs of Enterprise Networks
        5. Enterprise Edge
          1. E-Commerce Module
          2. Internet Connectivity Module
          3. Remote Access and VPN Module
          4. WAN Module
        6. Service Provider Edge
          1. ISP Module
          2. PSTN Module
          3. Frame Relay, ATM, and PPP Module
      4. Introducing the Cisco Catalyst Switches
        1. Catalyst 6500 Family of Switches
        2. Catalyst 4500 Family of Switches
        3. Catalyst 3550, 3560, and 3750 Family of Switches
        4. Catalyst 2950, 2955, and 2970 Family of Switches
      5. Study Tips
      6. Summary
      7. Review Questions
    9. 2. The Roles of Switches in Designing Cisco Multilayer Switched Networks
      1. Data-Link Technologies
        1. 10-Mbps Ethernet
        2. Fast Ethernet
        3. Gigabit Ethernet
        4. Fast Ethernet and Gigabit Ethernet Auto-Negotiation
        5. 10-Gigabit Ethernet
        6. Gigabit Interface Converters
        7. Cisco Long-Reach Ethernet
        8. Metro Ethernet
      2. Designing Cisco Multilayer Switched Networks Using the Cisco Catalyst Switches and Data-Link Technologies
        1. Reviewing the Campus Infrastructure Module of the Enterprise Composite Network Model
        2. Selecting Layer 2 or Layer 3 Switches
        3. Small Campus Network Design
        4. Medium-Sized Campus Network Design
        5. Large Campus Network Design
        6. Server Farm Module
          1. Server Farm Infrastructure Architecture
        7. Enterprise Edge
      3. Case Study: Designing a Cisco Multilayer Switched Network
      4. Study Tips
      5. Summary
      6. Review Questions
    10. 3. Initial Configuration and Troubleshooting of Cisco Multilayer Switches
      1. Comparing Cisco CatOS and Cisco IOS
      2. Initial Configuration of Management Parameters of Cisco Catalyst Switches
        1. System Name
        2. Management IP Configuration
        3. Clock and NTP Settings
        4. Telnet and SSH
        5. DNS
        6. System Logging
        7. SNMP
          1. SNMP Configuration
      3. Managing Catalyst Switch Configurations
      4. Understanding the Cisco IOS File System (IFS) and Software Images on Catalyst Switches
        1. Determining the IFS Size and Contents
        2. Cisco IOS Image Naming
          1. Naming Conventions Used by Hybrid and Cisco IOS Images on the Catalyst 6500 Family of Switches
      5. Upgrading Software Versions on Catalyst Switches
      6. Overview of Converting Cisco CatOS to Cisco Native IOS
      7. Basic Troubleshooting Practices
        1. show and debug Commands
        2. Configurations and Commands Useful When Troubleshooting
        3. The Impact of debug Commands and Recommended Use
      8. Initial Configuration Troubleshooting Tips
        1. What to Do When You Are Unable to Connect to a Switch via Console Port
        2. What to Do When You Are Unable to Establish IP Connectivity to or from a Switch Using Telnet or SSH
      9. Study Tips
      10. Summary
      11. Configuration Exercise: Configuring a Cisco IOS–Based Catalyst Switch
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Establish Console (Out-of-Band) Connectivity and Configure Switch Name
        6. Task 2: Configure Switch for IP Connectivity
        7. Task 3: Configure Switch Usernames and Passwords for Privileged and In-Band Access
        8. Task 4: Configure Switch for SSH and Disable Telnet Access
        9. Task 5: Configure the Switch Time Settings, NTP Configuration, and System Logging Configuration
        10. Task 6: Upgrade Switch Cisco IOS Version to a Later Release
      12. Review Questions
    11. 4. Implementing and Configuring VLANs
      1. VLANs
        1. Implementing VLANs in Campus Networks
          1. Understanding the Role and Benefits of VLANs in the Multilayer Switched Network Design
          2. Benefits of End-to-End and Local VLANs in Campus Networks
        2. Static and Dynamic VLANs
        3. VLAN Ranges
        4. Configuring VLANs
        5. Verifying the VLAN Configuration
      2. Troubleshooting VLANs
        1. Troubleshooting Slow Throughput
        2. Troubleshooting Communication Issues
      3. Private VLANs
      4. VLAN Trunking
        1. Implementing Trunking in Multilayer Switched Networks
        2. Trunking Protocols
          1. ISL
          2. IEEE 802.1Q
        3. VLAN Ranges and Mappings
        4. Service Provider–Managed VLAN Services
        5. Cisco Trunking Modes and Methods
      5. Configuring ISL and 802.1Q Trunking
        1. Verifying Trunking Configurations
        2. Troubleshooting Trunking
      6. VLAN Trunking Protocol
        1. VTP Pruning
        2. VTP Versions
          1. VTP Versions 1 and 2
          2. VTP Version 3
        3. VTP Authentication
        4. Configuring VTP
        5. Verifying the VTP Configuration
        6. Troubleshooting VTP
      7. Study Tips
      8. Summary
      9. Configuration Exercise: Configuring VLAN, Trunking, and VTP in Multilayer Switched Networks
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Create a VTP Management Domain
        6. Task 2: Configure Trunking
        7. Task 3: Configure VLANs
        8. Task 4: Assign VLANs with Ports on Your Switch
        9. Task 5: Add a New Switch to the Existing Network
        10. Task 6: Verify the VLAN and VTP Status
        11. Task 7: Configure pVLANs
      10. Review Questions
    12. 5. Understanding and Configuring the 802.1D, 802.1s, and 802.1w Spanning Tree Protocols
      1. Overview of the Spanning Tree Protocol
      2. Identifying Bridging Loops
        1. Preventing Bridging Loops
        2. Building Loop-Free Networks
      3. STP (IEEE 802.1D)
        1. Bridge Identifier
        2. Spanning-Tree Path Cost
        3. Bridge Protocol Data Units
        4. Spanning-Tree Port States and BPDU Timers
      4. STP Operation
        1. Root Bridge Election
        2. Planning Root Bridge Selection
        3. Selection of Root and Designated Port on Nonroot Bridges
        4. Understanding Primary and Backup Root Bridges
      5. Sample Scenario of STP Election Process
      6. STP Topology Changes
      7. Per VLAN Spanning Tree Plus
        1. MAC Address Allocation and Reduction
      8. STP and IEEE 802.1Q Trunks
      9. Configuring the Basic Parameters of PVST+
        1. Configuring the Root Bridge
        2. Configuring Port Cost
      10. Verifying the STP Configuration
      11. Rapid Spanning Tree Protocol
        1. RSTP Port States
        2. RSTP Port Roles
        3. RSTP BPDU Format and BPDU Handling
        4. Rapid Transition to Forwarding
        5. RSTP Topology Change Mechanism
        6. Compatibility with 802.1D
      12. Multiple Spanning Tree
        1. PVST+ Case
        2. 802.1 Q Case
        3. MST Case
        4. MST Regions
        5. IST Instances
        6. MST Instances
      13. Configuring Basic Parameters of MST
      14. Study Tips
      15. Summary
      16. Configuration Exercise: Configuring and Verifying Spanning-Tree Bridge Priorities and Spanning-Tree Port Cost
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Configure and Verify Spanning Tree Root and Backup Bridges and STP Priorities
        6. Task 2: Configure and Verify Spanning Tree Port Cost
        7. Task 3: Identifying STP Topology Changes
      17. Review Questions
    13. 6. Adding Resiliency to Spanning Tree Using Advanced Features and Troubleshooting STP Issues
      1. Enhancements to 802.1D Spanning Tree Protocol
        1. PortFast
          1. Configuring the PortFast Feature
        2. UplinkFast
          1. Configuration and Verification of UplinkFast
        3. BackboneFast
          1. Configuration and Verification of BackboneFast
      2. Improving Spanning-Tree Resiliency
        1. BPDU Guard
        2. BPDU Filtering
        3. Root Guard
      3. Preventing Forwarding Loops and Black Holes
        1. Loop Guard
        2. Comparison Between Aggressive Mode UDLD and Loop Guard
      4. Troubleshooting STP
        1. Potential STP Problems
          1. Duplex Mismatch
          2. Unidirectional Link Failure
          3. Frame Corruption
          4. Resource Errors
          5. PortFast Configuration Error
          6. Inappropriate STP Diameter Parameter Tuning
        2. Troubleshooting Methodology for STP Problems
        3. Know the Network
        4. Identify a Bridging Loop
        5. Restore Connectivity
        6. Check Port Status
        7. Look for Resource Errors
        8. Disable Unneeded Features
      5. Study Tips
      6. Summary
      7. Configuration Exercise: Configuring BackboneFast, UplinkFast, Root Guard, and PortFast
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Configure and Verify BackboneFast
        6. Task 2: Configure and Verify UplinkFast
        7. Task 3: Configure and Verify Root Guard
        8. Task 4: Configure and Verify PortFast
      8. Configuration Exercise: Identify and Resolve a Layer 2 Loop
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Identifying the Layer 2 Loop
        6. Task 2: Divide and Conquer (Disconnect Redundancy)
        7. Task 3: Find Root Cause of Layer 2 Loop (Investigate Network and Hardware)
        8. Task 4 (optional): Check Software Statistics
      9. Review Questions
    14. 7. Enhancing Network Stability, Functionality, Reliability, and Performance Using Advanced Features
      1. EtherChannel
        1. PAgP Modes
        2. LACP Modes
        3. EtherChannel Guidelines
        4. EtherChannel Configuration Example
        5. EtherChannel Load Balancing
      2. CDP
        1. Voice VLAN and CDP
        2. Security Issues
      3. Multiple Default Gateways
      4. MAC Address Notification
      5. Layer 3 Protocol Filtering
      6. DHCP for Management IP Configuration
      7. Debounce Timer Feature
      8. Broadcast and Multicast Suppression
      9. Baby Giants and Jumbo Frames
      10. Error-Disable Feature
      11. IEEE 802.3 Flow Control
      12. UDLD and Aggressive Mode UDLD
      13. Case Study: Function of Aggressive Mode UDLD
      14. Study Tips
      15. Summary
      16. Configuration Exercise
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Configure and Verify EtherChannel
        6. Task 2: Configure and Verify LACP EtherChannel
        7. Task 3: Configure and Verify CDP
        8. Task 4: Configure and Verify Aggressive Mode UDLD
        9. Task 5: Configure and Verify Jumbo Frame
        10. Task 6: Configure and Verify Error-Disable
      17. Review Questions
    15. 8. Understanding and Configuring Inter-VLAN Routing
      1. IP Address Hierarchy in a Multilayer Switched Network
      2. Introduction to Inter-VLAN Routing
        1. Connecting VLANs with Multilayer Catalyst Switches
          1. Routed Ports
          2. Switch Virtual Interfaces
          3. Bridge Virtual Interfaces
        2. Router on a Stick (External Router)
        3. Verifying the Inter-VLAN Routing Configuration
      3. IP Broadcast Forwarding
        1. DHCP Relay Agent
        2. UDP Broadcast Forwarding
      4. Study Tips
      5. Summary
      6. Configuration Exercise: Configuring Inter-VLAN Routing on Cisco IOS–Based Catalyst Switches
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Configure Inter-VLAN Routing Using SVIs on a Building Distribution Switch
        6. Task 2: Configure Simple Routing Using EIGRP
        7. Task 3: Configure Inter-VLAN Routing Using a Router on a Stick
        8. Task 4: Configure SVI Interfaces for DHCP Forwarding
      7. Review Questions
    16. 9. Understanding and Configuring Multilayer Switching
      1. Understanding Traditional MLS
      2. Understanding CEF-Based MLS
        1. Centralized and Distributed Switching
        2. Address Resolution Protocol Throttling
        3. Switching Table Architectures
          1. CAM
          2. TCAM
          3. CEF-Based MLS Operation and Use of TCAM
        4. Sample CEF-Based MLS Operation
        5. CEF-Based MLS Load Sharing
      3. CEF-Based MLS Configuration, Verification, and Troubleshooting
        1. CEF-Based MLS Configuration
        2. CEF-Based MLS Verification and Troubleshooting
          1. Viewing the Layer 3 Engine CEF Table
          2. Viewing the Layer 3 Engine Adjacency Table
          3. Debugging CEF on the Layer 3 Engine
        3. CEF-Based MLS Troubleshooting Methodology
      4. Study Tips
      5. Summary
      6. Configuration Exercise: Troubleshooting CEF-Based MLS
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Establish Console (Out-of-Band) Connectivity or Telnet or SSH Connectivity to the Switch
        6. Task 2: Determine the IP Routing Entry or Subnet That Is Experiencing Connectivity Problems or a CEF-Based MLS Issue
        7. Task 3: Verify the Cisco IOS IP Routing Table and ARP Entries for the Route
        8. Task 4: Verify the IP CEF FIB and Adjacency Entries for the Route
        9. Task 5: Debug the CEF FIB and Adjacency Table’s Downloads to the Centralized Switching and Distributed Switching Engines, and Verify the TCAM Contents for FIB and Adjacency Tables
      7. Review Questions
    17. 10. Understanding and Implementing Quality of Service in Cisco Multilayer Switched Networks
      1. The Need for QoS
        1. Latency
        2. Jitter
        3. Packet Loss
        4. QoS-Enabled Solutions
      2. QoS Service Models
        1. Integrated Services Architecture
        2. Differentiated Services
        3. Assured Forwarding and Expedited Forwarding
          1. Assured Forwarding
          2. Expedited Forwarding
      3. Catalyst QoS Fundamentals
        1. Classification
          1. Trust Boundaries and Configurations
          2. NBAR
        2. Marking
        3. Traffic Conditioning: Policing and Shaping
          1. Shaping
          2. Policing
        4. Congestion Management
          1. FIFO Queuing
          2. Weighted Round Robin Queuing
          3. Shared Round Robin (SRR)
          4. Priority Queuing
          5. Custom Queuing
          6. Other Congestion-Management Features and Components
        5. Congestion Avoidance
          1. Tail Drop
          2. Weighted Random Early Detection
      4. QoS in the Multilayer Switched Network
        1. QoS in the Building Access Submodule
        2. QoS in the Building Distribution Submodule
        3. QoS in the Campus Backbone
      5. Auto QoS
      6. Study Tips
      7. Summary
      8. Configuration Exercise: Configuring QoS on Cisco IOS–Based Catalyst Switches
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Globally Enable QoS
        6. Task 2: Configure the Switch to Trust DSCP on Interfaces FastEthernet 0/1 Through 0/10 if a Cisco IP Phone Is Attached
        7. Task 3: Configure the Switch to Classify All Incoming Frames on Interface FastEthernet 0/11 with a CoS Value of 4 for Untagged Frames
        8. Task 4: Configure a Policy Map, Class Map, and the Interface Such That All Ingress TCP Port 30000 Packets on FastEthernet 0/11 Have Their DSCP Set to 16
        9. Task 5: Configure All Egress Queues Such That CoS Values 4, 6, and 7 Use Queue 3 and a CoS Value of 5 Uses Queue 4
        10. Task 6: Configure Queue 4 as a Strict-Priority Queue
        11. Task 7: Configure WRR Weights Such That Queue 3 Receives Twice as Much Service as Any Other Single Queue
        12. Task 8: Verify All Configurations by Viewing Interface Statistics
      9. Review Questions
    18. 11. Deploying Multicast in the Multilayer Switched Network
      1. Introduction to Multicast
        1. Multicast IP Address Structure
          1. Reserved Link Local Addresses
          2. Globally Scoped Addresses
          3. Source-Specific Multicast Addresses
          4. GLOP Addresses
          5. Limited-Scope Addresses
        2. Multicast MAC Address Structure
        3. Reverse Path Forwarding
        4. Multicast Forwarding Tree
          1. Source Trees
          2. Shared Trees
          3. Comparing Source Trees and Shared Trees
      2. IP Multicast Protocols
        1. PIM
          1. PIM Dense Mode
          2. PIM Sparse Mode
          3. PIM Sparse-Dense Mode
          4. Automating Distribution of RP
          5. Auto-RP
          6. Bootstrap Router
          7. Comparison and Compatibility of PIM Version 1 and Version 2
        2. IGMP
          1. IGMPv1
          2. IGMPv2
          3. IGMPv3
          4. IGMPv3 Lite
      3. Multicast Hardware-Based Switching Methods
        1. MMLS
        2. CEF-Based MMLS
        3. MFIB
      4. Layer 2 Multicast Protocols
        1. IGMP Snooping
        2. Cisco Group Management Protocol
      5. IP Multicast in the Multilayer Switched Network
      6. Configuring Multicast
      7. Monitoring and Verifying IP Multicast Traffic
      8. Study Tips
      9. Summary
      10. Configuration Exercise: Configuring and Verifying Multicast in the Multilayer Switched Network to Support Stock Ticker Video Applications
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
      11. Task 1: Configure Multicast Routing with Sparse-Dense Mode on Distribution Switches
      12. Task 2: Configure the RP/Mapping Agent for Auto-RP on the Core Switches
      13. Review Questions
    19. 12. Implementing High Availability Options in Multilayer Switches
      1. Achieving High Availability in Multilayer Switches
      2. Implementing Redundant Supervisor Engines in Catalyst Switches
        1. Route Processor Redundancy
        2. Route Processor Redundancy Plus
          1. Configuring and Verifying RPR+ Redundancy
      3. Stateful Switchover (SSO)
        1. Configuring and Verifying SSO
        2. NSF with SSO
          1. Configuring and Verifying NSF with SSO
      4. Router Redundancy Using Single Router Mode on the Catalyst 6500 Series of Switches
        1. SRM Failure Scenario with a Catalyst 6500 Supervisor Engine II and MSFC2
        2. SRM Failure Scenario with Supervisor Engine IA
        3. SRM Configuration
      5. Implementing Redundant Supervisor Uplink Modules in Catalyst Switches
      6. Implementing Redundant Power Supplies
      7. Implementing Default Gateway Router Redundancy in Multilayer Switched Networks
        1. Proxy ARP
        2. IRDP
        3. Static Default Gateway Configuration
        4. Hot Standby Routing Protocol
          1. HSRP States
          2. HSRP Virtual MAC Address
          3. HSRP Load Balancing
          4. Configuring HSRP
          5. Defining the HSRP Group
          6. Configuring Router HSRP Group Priority
          7. Configuring HSRP Preempt
          8. Configuring HSRP Group Timers
          9. Configuring HSRP Interface Tracking
          10. Verifying HSRP
          11. HSRP Debugging
        5. Virtual Router Redundancy Protocol
        6. VRRP Scenarios
          1. VRRP Operation Details
          2. Configuring and Verifying VRRP
        7. Gateway Load Balancing Protocol
      8. Cisco IOS Server Load Balancing
        1. Cisco IOS SLB Modes of Operation
        2. Configuring the Server Farm with Real Servers
        3. Configuring Virtual Servers
      9. Study Tips
      10. Summary
      11. Configuration Exercise: Configuring and Verifying RPR+ and HSRP
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Configure and Verify RPR+
        6. Task 2: Configure and Verify HSRP
      12. Review Questions
    20. 13. Introduction to Deploying Cisco IP Telephony
      1. Introduction to IP Telephony Components
      2. Network Design Recommendations for IP Telephony
        1. QoS
        2. Voice (Auxiliary) VLANs
        3. Network Bandwidth Provisioning
        4. Power Considerations
        5. Network Management
        6. IP Telephony High Availability
        7. Security
      3. Best Practices for Deploying IP Telephony in the Enterprise Composite Network Model
      4. Study Tips
      5. Summary
      6. Configuration Exercise: Configuring Voice VLANs on a Catalyst Switch
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Configure Access and Voice VLAN
        6. Task 2: Configure Interfaces for Access and Voice VLANs
        7. Task 3: Configure Interface FastEthernet 0/1 Through 0/10 for a Recommended QoS Configuration for Congestion Management
        8. Task 4: Configure Interface FastEthernet 0/1 for a Classification Based on Trusting CoS
        9. Task 5: Configure Interface FastEthernet 0/2 for Classification Based on Trusting DSCP
        10. Task 6: Configure Interfaces FastEthernet 0/3 Through 0/10 for Trusting CoS Based on Whether an IP Phone Is Attached to the Interface
        11. Task 7: Verify the Voice VLAN Configuration of the FastEthernet Interfaces
      7. Review Questions
    21. 14. Implementing Management and Data Plane Security Features on Cisco Catalyst Switches
      1. Catalyst Switch Configurations for Security in Multilayer Switched Networks
        1. Configuring Strong System Passwords
        2. Restricting Management Access Using Access Control Lists
        3. Securing Physical Access to the Console
        4. Securing Access to vty Lines
        5. Configuring System Warning Banners
        6. Disabling Unneeded or Unused Services
        7. Trimming and Minimizing Use of CDP
        8. Disabling the Integrated HTTP Daemon
        9. Configuring Basic System Logging
        10. Securing SNMP
        11. Limiting Trunking Connections and Propagated VLANs
        12. Securing the Spanning-Tree Topology
      2. Configuring AAA
        1. Authentication
        2. Authorization
        3. Accounting
        4. Configuring AAA Authentication
        5. Configuring AAA Authorization
        6. Configuring AAA Accounting
        7. A Step-by-Step Example of Configuring Cisco AAA on a Cisco IOS-Based Catalyst Switch
        8. Additional Resources for Understanding and Configuring AAA
      3. Port Security
        1. Allowing Traffic Based on Host MAC Addresses
        2. Restricting Traffic Based on Host MAC Addresses
        3. Blocking Unicast Flooding on Desired Ports
        4. Port Security Summary
      4. Network Access Security Using IEEE 802.1X
        1. Configuring IEEE 802.1X
      5. Applying Security Using Access Control Lists
        1. RACLs
        2. VACLs
        3. Port ACLs
      6. Securing Networks Using Firewalls
      7. Security Through Network Address Translation (NAT)
      8. DHCP Snooping
        1. IP Source Guard
        2. Configuring IPSG
      9. Dynamic ARP Inspection
      10. Understanding the Role of Private VLANs as a Security Feature
      11. Understanding the Role of QoS as a Security Feature
      12. Case Study: Understanding and Preventing VLAN Hopping Attacks
      13. Study Tips
      14. Summary
      15. Configuration Exercise 1: AAA, 802.1X, and VACLs
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Enable AAA, Disable Telnet, and Enable SSH
        6. Task 2: Configure AAA Authentication for VTY Access Using RADIUS and the Local Username and Password Database if the Radius Server Is Unavailable
        7. Task 3: Configure 802.1X on a Per-Interface Basis
        8. Task 4: Configure VACL to Drop All Ingress Frames on TCP Port 8889
      16. Configuration Exercise 2: Securing a Cisco Multilayer Switched Network Using DHCP Snooping, IPSG, and DAI
        1. Required Resources
        2. Exercise Objective
        3. Network Diagram
        4. Command List
        5. Task 1: Enable DHCP Snooping
        6. Task 2: Verify DHCP Snooping, IPSG, and DAI Status
        7. Task 3: Simulate an IP Source Guard and DAI Violation
      17. Review Questions
    22. 15. Introduction to the Catalyst Switching Architectures
      1. Catalyst 6500
        1. Catalyst 6500 Supervisor Engine I
        2. Catalyst 6500 with Supervisor Engine II
        3. Catalyst 6500 with Supervisor Engine 720
        4. Catalyst 6500 Modules
        5. Catalyst 6500 Service Modules
        6. Catalyst 6500 Summary
      2. Catalyst 4500
      3. Catalyst 3750
      4. Catalyst 3560
      5. Catalyst 3550
      6. Catalyst 2950
      7. Study Tips
      8. Summary
      9. Review Questions
    23. 16. Designing, Building, and Connecting Cisco Multilayer Switched Networks Using Metro Solutions
      1. Introduction to Cisco Metro Solutions
      2. Metro Ethernet
        1. Metro Ethernet Connectivity and Transport
          1. Transparent LAN Services
          2. Directed VLAN Service
        2. Metro Ethernet over SONET
        3. Metro Ethernet over Wave Division Multiplexing Optical Solutions
          1. Metro Ethernet over DWDM
          2. Metro Ethernet over CDWM
        4. Optical Distance Challenges
      3. Summary
      4. Review Questions
    24. 17. Performance and Connectivity Troubleshooting Tools for Multilayer Switches
      1. Techniques to Enhance Performance
      2. Monitoring Performance with SPAN and VSPAN
        1. Using SPAN to Monitor the CPU Interface of Switches
          1. Case Study: Troubleshooting a Catalyst 6500 Using a SPAN Session to Monitor the sc0 Interface
      3. Monitoring Performance with RSPAN
      4. Monitoring Performance Using VACLs with the Capture Option
      5. Troubleshooting Using L2 Traceroute
      6. Performance Monitoring Using the Network Analysis Module in the Catalyst 6500 Family of Switches
        1. Verification of the NAM Configuration
        2. Troubleshooting Common Problems with the NAM
      7. Study Tips
      8. Summary
      9. Review Questions
    25. A. In-Depth Review of 802.3u and 802.3ad Auto-Negotiation
      1. Purpose of Auto-Negotiation
      2. 10/100/1000-Mbps Auto-Negotiation Architecture
        1. Mixing Manual Configurations with Auto-Negotiation
      3. Summary
    26. B. Answers to Review Questions
      1. Chapter 1
      2. Chapter 2
      3. Chapter 3
      4. Chapter 4
      5. Chapter 5
      6. Chapter 6
      7. Chapter 7
      8. Chapter 8
      9. Chapter 9
      10. Chapter 10
      11. Chapter 11
      12. Chapter 12
      13. Chapter 13
      14. Chapter 14
      15. Chapter 15
      16. Chapter 16
      17. Chapter 17
    27. C. Introduction to Storage Networking
      1. Storage Networking Overview
      2. Storage Networking Protocols
        1. Introduction to Fibre Channel
          1. Fibre Channel Architecture
          2. Fibre Channel Addressing
          3. Fibre Channel Topologies and Port Types
          4. Point-to-Point
          5. Arbitrated Loop
          6. Switched Fabric
        2. Introduction to iSCSI
        3. Introduction to FCIP
      3. Storage Network Integration
      4. Cisco Storage Solutions
        1. Cisco MDS 9000 Multilayer Switches
          1. VSAN
          2. Port Channel
          3. Trunking
          4. Multipath Forwarding
          5. Congestion Control and QoS
          6. Zoning
          7. Buffer-to-Buffer Credits
          8. SPAN
          9. iSCSI/FCIP
          10. Inter-VSAN Routing (IVR)
        2. Cisco SN 542x iSCSI Routers
      5. Summary