Hjem

Introduction xix
Part I: ROUTE
Chapter 1 Basic Network and Routing Concepts 1 Cisco Hierarchical Network Model 1 Cisco Enterprise Composite Network Model 2 Typically Used Routing Protocols 2 IGP Versus EGP Routing Protocols 3 Routing Protocol Comparison 3 Administrative Distance 3 Static Routes: permanent Keyword 4 Floating Static Routes 5 Static Routes and Recursive Lookups 5 Default Routes 6 Verifying Static Routes 6 Assigning IPv6 Addresses to Interfaces 7 Implementing RIP Next Generation (RIPng) 7 Verifying and Troubleshooting RIPng 8 Configuration Example: RIPng 9 IPv6 Ping 11 IPv6 Traceroute 12
Chapter 2 EIGRP Implementation 13 Configuring EIGRP 14 EIGRP Router ID 15 EIGRP Autosummarization 15 Passive EIGRP Interfaces 16 "Pseudo" Passive EIGRP Interfaces 17 EIGRP Timers 17 Injecting a Default Route into EIGRP: Redistribution of a Static Route 18 Injecting a Default Route into EIGRP: IP Default Network 18 Injecting a Default Route into EIGRP: Summarize to
0.0.0.0/0 19 Accepting Exterior Routing Information: default-information 20 Load Balancing: Maximum Paths 20 Load Balancing: Variance 20 Bandwidth Use 21 Stub Networks 21 EIGRP Unicast Neighbors 22 EIGRP over Frame Relay: Dynamic Mappings 23 EIGRP over Frame Relay: Static Mappings 24 EIGRP over Frame Relay: EIGRP over Multipoint Subinterfaces 25 EIGRP over Frame Relay: EIGRP over Point-to-Point Subinterfaces 26 EIGRP over MPLS: Layer 2 VPN 28 EIGRP over MPLS: Layer 3 VPN 30 EIGRPv6 31 Enabling EIGRPv6 on an Interface 31 Configuring the Percentage of Link Bandwidth Used by EIGRPv6 32 EIGRPv6 Summary Addresses 32 EIGRPv6 Timers 32 EIGRPv6 Stub Routing 32 Logging EIGRPv6 Neighbor Adjacency Changes 33 Adjusting the EIGRPv6 Metric Weights 33 EIGRP Address Families 33 Named EIGRP Configuration Modes 34 Verifying EIGRP and EIGRPv6 35 Troubleshooting EIGRP 37 Configuration Example: EIGRPv4 and EIGRPv6 using Named Address Configuration 37
Chapter 3 Implementing a Scalable Multiarea Network OSPF-Based Solution 41 OSPF Message Types 42 OSPF LSA Types 43 Configuring OSPF 44 Using Wildcard Masks with OSPF Areas 44 Configuring Multiarea OSPF 45 Loopback Interfaces 45 Router ID 46 DR/BDR Elections 46 Passive Interfaces 46 Modifying Cost Metrics 47 OSPF auto-cost reference-bandwidth 47 OSPF LSDB Overload Protection 48 Timers 48 IP MTU 49 Propagating a Default Route 49 OSPF Special Area Types 49 Stub Areas 50 Totally Stubby Areas 50 Not-So-Stubby Areas 51 Totally NSSA 51 Route Summarization 52 Interarea Route Summarization 52 External Route Summarization 52 Configuration Example: Virtual Links 52 OSPF and NBMA Networks 53 OSPF over NBMA Topology Summary 57 IPv6 and OSPFv3 57 Enabling OSPF for IPv6 on an Interface 58 OSPFv3 and Stub/NSSA Areas 58 Interarea OSPFv3 Route Summarization 59 Enabling an IPv4 Router ID for OSPFv3 59 Forcing an SPF Calculation 59 IPv6 on NBMA Networks 60 OSPFv3 Address Families 60 Verifying OSPF Configuration 61 Troubleshooting OSPF 63 Configuration Example: Single-Area OSPF 64 Configuration Example: Multiarea OSPF 65 Configuration Example: OSPF and NBMA Networks 69 Configuration Example: OSPF and Broadcast Networks 72 Configuration Example: OSPF and Point-to-Multipoint Networks 76 Configuration Example: OSPF and Point-to-Point Networks Using Subinterfaces 80 Configuration Example: IPv6 and OSPFv3 83 Configuration Example: OSPFv3 with Address Families 86
Chapter 4 Configuration of Redistribution 91 Defining Seed and Default Metrics 91 Redistributing Connected Networks 93 Redistributing Static Routes 93 Redistributing Subnets into OSPF 93 Assigning E1 or E2 Routes in OSPF 94 Redistributing OSPF Internal and External Routes 95 Configuration Example: Route Redistribution for IPv4 95 Configuration Example: Route Redistribution for IPv6 97 Verifying Route Redistribution 98 Route Filtering Using the distribute-list Command 98 Configuration Example: Inbound and Outbound Distribute List Route Filters 99 Configuration Example: Controlling Redistribution with Outbound Distribute Lists 100 Verifying Route Filters 100 Route Filtering Using Prefix Lists 101 Configuration Example: Using a Distribute List That References a Prefix List to Control Redistribution 103 Verifying Prefix Lists 104 Using Route Maps with Route Redistribution 104 Configuration Example: Route Maps 105 Manipulating Redistribution Using Route Tagging 106 Changing Administrative Distance for Internal and External Routes 108 Passive Interfaces 108
Chapter 5 Path Control Implementation 111 Verifying Cisco Express Forwarding 111 Configuring Cisco Express Forwarding 111 Path Control with Policy-Based Routing 112 Verifying Policy-Based Routing 113 Configuration Example: PBR with Route Maps 114 Cisco IOS IP Service Level Agreements 115 Step
1: Define One (or More) Probe(s) 116 Step
2: Define One (or More) Tracking Object(s) 117 Step 3a: Define the Action on the Tracking Object(s) 117 Step 3b: Define Policy Routing Using the Tracking Object(s) 117 Step
4: Verify IP SLA Operations 118
Chapter 6 Enterprise Internet Connectivity 119 Configuring a Provider Assigned Static or DHCP IPv4 Address 120 Configuring Static NAT 121 Configuring Dynamic NAT 121 Configuring NAT Overload (PAT) 122 Verifying NAT 124 NAT Virtual Interface 124 Configuration Example: NAT Virtual Interfaces and Static NAT 124 Configure Basic IPv6 Internet Connectivity 125 Configuring IPv6 ACLs 126 Verifying IPv6 ACLs 127 Configuring Redistribution of Default Routes with Different Metrics in a Dual-Homed Internet Connectivity Scenario 127 Configuring BGP 128 BGP and Loopback Addresses 129 iBGP Next-Hop Behavior 129 eBGP Multihop 130 Verifying BGP Connections 132 Troubleshooting BGP Connections 132 Default Routes 133 Attributes 134 Route Selection Decision Process 134 Weight Attribute 134 Using AS_PATH Access Lists to Manipulate the Weight Attribute 136 Using Prefix Lists and Route Maps to Manipulate the Weight Attribute 136 Local Preference Attribute 137 Using AS_PATH Access Lists with Route Maps to Manipulate the Local Preference Attribute 138 AS_PATH Attribute Prepending 139 AS_PATH: Removing Private Autonomous Systems 141 MED Attribute 142 Route Aggregation 144 Route Reflectors 145 Regular Expressions 146 Regular Expressions: Examples 146 BGP Route Filtering Using Access Lists and Distribute Lists 147 Configuration Example: Using Prefix Lists and AS_PATH Access Lists 149 BGP Peer Groups 150 MP-BGP 151 Configure MP-BGP Using Address Families to Exchange IPv4 and IPv6 Routes 151 Verifying MP-BGP 153
Chapter 7 Routers and Routing Protocol Hardening 155 Securing Cisco Routers According to Recommended Practices 156 Securing Cisco IOS Routers Checklist 156 Components of a Router Security Policy 157 Configuring Passwords 157 Password Encryption 158 Configuring SSH 159 Restricting Virtual Terminal Access 160 Securing Access to the Infrastructure Using Router ACLs 161 Configuring Secure SNMP 162 Configuration Backups 165 Implementing Logging 166 Disabling Unneeded Services 169 Configuring Network Time Protocol 169 NTP Configuration 170 NTP Design 171 Securing NTP 172 Verifying NTP 173 SNTP 174 Setting the Clock on a Router 174 Using Time Stamps 178 Configuration Example: NTP 178 Authentication of Routing Protocols 182 Authentication Options for Different Routing Protocols 182 Authentication for EIGRP 183 Authentication for OSPF 185 Authentication for BGP and BGP for IPv6 189
Part II: SWITCH
Chapter 8 Basic Concepts and Network Design 191 Hierarchical Model (Cisco Enterprise Campus Architecture) 191 Verifying Switch Content-Addressable Memory 192 Switching Database Manager Templates 192 Configuring SDM Templates 192 Verifying SDM Templates 193 LLDP (802.1AB) 194 Configuring LLDP 194 Verifying LLDP 195 Power over Ethernet 196 Configuring PoE 196 Verifying PoE 196
Chapter 9 Campus Network Architecture 197 Virtual LANs 198 Creating Static VLANs 198 Normal-Range static VLAN Configuration 198 Extended-Range static VLAN Configuration 199 Assigning Ports to Data and Voice VLANs 199 Using the range Command 200 Dynamic Trunking Protocol 200 Setting the Trunk Encapsulation and Allowed VLANs 201 Verifying VLAN Information 202 Saving VLAN Configurations 202 Erasing VLAN Configurations 203 Verifying VLAN Trunking 203 VLAN Trunking Protocol 204 Using Global Configuration Mode 204 Verifying VTP 206 Configuration Example: VLANs 206 Layer 2 Link Aggregation 209 Link Aggr