CCDP Self-Study: Designing Cisco Network Architectures (ARCH)

A new edition of this title is available, ISBN-10: 1587055740 ISBN-13: 9781587055744   Cisco authorized self-study book for CCDP® 642-871 architectures foundation learning   Prepare for the CCDP ARCH exam 642-871 with the Cisco authorized self-study guide. This book teaches you how to: Understand the composition and deployment of the Cisco AVVID framework in network design Understand the composition and role of the Enterprise Composite Network Model in enterprise network design Design enterprise campus networks and their edge network connectivity to the Internet Understand and implement network management solutions in the network Integrate new technologies designed to enhance network performance and availability in the enterprise, such as high availability, QoS, multicasting, and storage and content networking Design and implement appropriate security solutions for enterprise networks Deploy wireless technologies within the enterprise Implement and design IP telephony solutions for the enterprise network CCDP Self-Study: Designing Cisco Network Architectures (ARCH) is a Cisco® authorized self-paced learning tool. By presenting a structured format for the conceptual and intermediate design of AVVID network infrastructures, this book teaches you how to design solutions that scale from small to large enterprise networks and take advantage of the latest technologies. Whether you are preparing for the CCDP® certification or simply want to gain a better understanding of how to architect network solutions over intelligent network services to achieve effective performance, scalability, and availability, you will benefit from the foundation information presented in this book.   This comprehensive book provides detailed information and easy-to-grasp tutorials on a broad range of topics related to architecture and design, including security, fine-tuning routing protocols, switching structures, and IP multicasting. To keep pace with the Cisco technological developments and new product offerings, this study guide includes coverage of wireless networking, the SAFE Blueprint, content networking, storage networking, quality of service (QoS), IP telephony, network management, and high availability networks. Design examples and sample verification output demonstrate implementation techniques. Configuration exercises, which appear in every chapter, provide a practical review of key concepts to discuss critical issues surrounding network operation. Chapter-ending review questions illustrate and help solidify the concepts presented in this book.   CCDP Self-Study: Designing Cisco Network Architectures (ARCH) is part of a recommended learning path from Cisco Systems® that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.   This volume is in the Certification Self-Study Series offered by Cisco Press®. Books in this series provide officially developed training solutions to help networking professionals understand technology implementations and prepare for the Cisco Career Certifications examinations.  

Table of Contents:
Introduction. 1. Introducing Cisco Network Service Architectures.     Primary Concerns of Network Deployment       Performance       Scalability       Availability     Cisco AVVID Framework       Cisco AVVID Common Network Infrastructure       Cisco AVVID Intelligent Network Services       Cisco AVVID Network Solutions     Enterprise Composite Network Model       Enterprise Campus Functional Area       Campus Infrastructure Module       Network Management Module       Server Farm Module       Edge Distribution Module     Effects of the Enterprise Campus Functional Area on the Enterprise Network       Enterprise Edge Functional Area       E-Commerce Module       Internet Connectivity Module       Remote Access and VPN Module       WAN Module     Effects of the Enterprise Edge Functional Area on the Enterprise Network       Service Provider Edge Functional Area       Summary       References       Product Summary       Review Questions 2. Designing Enterprise Campus Networks.     Enterprise Network Design Methodology       Campus Design Within the Enterprise Composite Network Model       Typical Requirements for an Enterprise Campus Network       Enterprise Campus Design Methodology       Analyzing Network Traffic Patterns     Designing the Campus Infrastructure       Designing the Logical Campus Network       One VLAN Per Switch       Unique VLANs Per Switch       VLANs Spanning Multiple Access Switches     Designing the Physical Campus Network       Selecting Transmission Media and Data-Link Protocols       Selecting a Physical Network Segmentation Strategy       Selecting and Implementing Spanning Tree Protocol     Selecting Data Link or Multilayer Switching Solutions       Small Campus Network       Medium Campus Network       Multilayer Switched Campus Backbone     Selecting Cisco Hardware and Software     Identifying an IP Addressing Strategy     Selecting Routing Protocols       Static Versus Dynamic Routing       RIP and RIPv2       IGRP       EIGRP       OSPF       IS-IS     Selecting Areas for Networks     Enterprise Campus Design Examples       Small Enterprise Design Example       Medium Enterprise Design Example       Large Enterprise Design Example     Designing the Server Farm       Design Objectives for the Server Farm       Server Farm Infrastructure Architecture       Designing the Server Farm for Scalability       Considerations for Server Farm Security and Manageability     Summary     References     Product Summary     Standards and Specifications Summary     Review Questions     Case Study: OCSIC Bottling Company       Background       Business Goals of OCSIC       Headquarters Location, Network, and Applications       North American Plants and Their Applications       Networking Strategies and Goals       Proposed Headquarters Campus Network Solution       Proposed Headquarters Server Farm Solution       Proposed North American Plan Model 3. Designing Enterprise Edge Connectivity.     Reviewing the Enterprise Edge Network Design Methodology       Enterprise Edge Design       Typical Requirements for the Enterprise Edge       Enterprise Edge Design Methodology       Analyzing Network Traffic Patterns     Designing the Classic WAN Module       Enterprise Needs for the WAN       Selecting the WAN Topology       Branch Office WAN       Regional Office WAN       Enterprise WAN Backbone       Selecting a Service Provider       Selecting the Data-Link Layer       Selecting the Physical Layer       Selecting WAN Features       Selecting Cisco Edge Routing Solutions       Routing Protocol and IP Addressing Considerations       An Enterprise WAN Design Example     Designing the Remote Access Module       Enterprise Needs for Remote Access       Selecting the Remote Access Type and Termination       Selecting the Remote Access Physical Connectivity       Selecting the Remote Access Protocol       Selecting Cisco Access Routing Solutions       Sizing the Central Site Remote Access Connection       An Enterprise Remote Access Design Example     Designing the Internet Connectivity Module       Enterprise Requirements for the Internet       Using NAT at the Enterprise Edge       Designing ISP Connectivity Solutions       Internet Connectivity Design Example     Summary     References     Product Summary     Standards and Specifications Summary     Review Questions     Case Study: OCSIC Bottling Company       North American Plant Headquarters WAN       Remote Access and Internet Connectivity Requirements       International Manufacturing, Distribution, and Sales Plants       International Plant Networks and Applications       WAN Module Design       Remote Access Design       Internet Connectivity Module Design 4. Designing Network Management Services.     Developing an Enterprise Network Management Strategy       Functional Areas of Network Management       FCAPS       Network Management Policies and Procedures       Policies       Procedures       Network Management Methods       Reactive-Event Driven       Proactive-Polling and Event Driven       Network Management Strategy Process       Network Management Module Functions       Cisco Network Management Strategy     CiscoWorks       CiscoWorks Common Management Foundation       CiscoWorks LAN Management Solution       Best Practices for Managing the LAN Using LMS       CiscoWorks Routed WAN Management Solution       Best Practices for Managing the WAN Using RWAN     Designing the Network Management Architecture     Network Management Design Considerations       Network Management Infrastructure Considerations       Network Management Data Collection and Management Considerations       Network Management Station Sizing Considerations       System Management Resource Considerations     Network Management Deployment Recommendations       Single Server Deployment       Multiserver, Split Applications-Single Management Domain       Multiple Management Domains       Centralized WAN Management with LAN Management       Key Questions to Consider       Availability Manager Issues     Network Management Design Scenarios       Small Site Network Management Design Scenario       Medium Site Network Management Design Scenario       Large Site Network Management Design Scenario     Summary     References     Product Summary     Standards and Specification Summary     Review Questions     Case Study: OCSIC Bottling Company 5. Designing High-Availability Services.     High-Availability Features and Options       Network Requirements for High Availability       Cisco IOS High-Availability Architecture       Fault Tolerance and Hardware Redundancy       Using Fault-Tolerant Devices       Providing Redundancy in the Network Topology       Route Processor Redundancy       Network Interface Card Redundancy       Options for Layer 3 Redundancy       Redundancy and Spanning Tree Protocol       PortFast and UplinkFast     Designing High-Availability Enterprise Networks       Design Guidelines for High Availability       Redundancy Options       Software Features and Protocol Attributes       Carrier and Circuit Types       Power Availability       High-Availability Design Goals and Conclusions       Best Practices for High-Availability Network Design       Enterprise Campus Design Guidelines for High Availability       Enterprise Edge Design Guidelines for High Availability       High-Availability Design Example     Summary     Reference     Product Summary     Standards and Specifications Summary     Review Questions     Case Study: OCSIC Bottling Company       High-Availability Design for the Campus Infrastructure Module       High-Availability Strategy for the Server Farm Module       High-Availability Strategy for the WAN Module       High-Availability Strategy for the Remote Access Module       High-Availability Strategy for the Internet Connectivity Module       Revised Network Diagrams 6. Designing Security Services.     Evaluating Network Security Policies       Network Vulnerabilities       Defining a Security Policy       Network Security as a Process       Securing the Network       Monitoring Security       Testing Security       Improving Security       Risk Assessment and Management     Reviewing Cisco Security Solutions       Key Elements of Network Security       Network Security Attack Types and Their Solutions       Packet Sniffers       IP Spoofing       DoS Attacks       Password Attacks       Man-in-the-Middle Attacks       Application Layer Attacks       Network Reconnaissance       Trust Exploitation       Port Redirection Attacks       Unauthorized Access Attacks       Viruses and Trojan Horses       Firewall Design Options       Implementing a Perimeter LAN       Firewall Filtering Rules       Perimeter Security: PIX Firewall       Perimeter Security: IOS Firewall       Intrusion Detection System Design Options       IDS Operation       IDS Deployment       Authentication, Authorization, and Accounting       RADIUS       TACACS+       Kerberos       Public Key Infrastructure       IP Security       Internet Key Exchange       Authentication Header       Encapsulating Security Payload       Device Security Options       Routers       Switches       Hosts       Network-Wide       Applications     Implementing Network Security Using the Cisco SAFE Security Blueprints       Introduction to Cisco SAFE Architecture       SAFE Security Strategies for Small Networks       Small Network Internet Connectivity Module       Small Network Campus Infrastructure Module       SAFE Security Strategies for Medium Networks       Medium Network Internet Connectivity       Medium Network Campus Infrastructure Module       Medium Network WAN Module       SAFE Security Strategies for Large Networks       Campus Infrastructure Module       Secure Network Management Module       Secure Server Farm Module       Secure Edge Distribution Module       SAFE Security Strategies for the Enterprise Edge       E-Commerce Module       Internet Connectivity Module       Remote Access and VPN Module       WAN Module Features     Summary     References     Product Summary     Standards and Specification Summary     Review Questions     Case Study: OCSIC Bottling Company 7. Designing QoS.     Identifying QoS Mechanisms       Enterprise Network Requirements for QoS       Delay       Delay Variation       Packet Loss       QoS-Enabled Network       QoS Architectures       IntServ       DiffServ       QoS Service Levels       Classification and Marking       Congestion Avoidance       Congestion Management       Traffic Conditioning       CAR: Managing Access Bandwidth Policy and Performing Policing       Traffic Shaping: Controlling Outbound Traffic Flow       Signaling       Link-Efficiency Mechanisms       LFI       cRTP and dcRTP       Summary of Key Cisco IOS Software QoS Categories and Features     Designing QoS for Enterprise Networks       QoS Design Guidelines       QoS Design Guidelines for Data       QoS Design Guidelines for Voice       QoS Design Guidelines for Video Conferencing       Designing QoS for the Enterprise Network       Example: QoS Solution     Summary     Reference     Product Summary     Standards and Specifications Summary     Review Questions     Case Study: OCSIC Bottling Company       QoS Design for the Site-to-Site WAN       QoS Design for the Campus Infrastructure Module 8. Designing IP Multicast Services.     Examining IP Multicast Services       IP Multicast Basics       IP Multicast Data-Delivery Principles       Multicast Forwarding       IP Multicast Group Membership and Distribution Trees       Source Trees       Shared Trees       Comparison of Source Trees and Shared Trees       Protocol Independent Multicast       PIM Dense Mode       PIM Sparse Mode       Sparse Mode, Dense Mode, and Sparse-Dense Mode       IP Multicast Control Mechanisms       IGMP       CGMP and IGMP Snooping       Designing IP Multicast Solutions for Enterprise Networks       IP Multicast Design Considerations for an Enterprise Campus     Designing IP Multicast for a Small Campus       Designing IP Multicast for a Large Enterprise Campus       Designing IP Multicast Over a WAN     Summary     References     Product Summary     Standards and Specifications Summary     Review Questions     Case Study: OCSIC Bottling Company       IP Multicast Design for OCSIC's New Application 9. Designing Virtual Private Networks.     VPN Technologies       Enterprise VPN Requirements       VPN Tunneling       VPN Security       IPSec       User Authentication       Encryption       VPN Termination       VPN Concentrators       VPN Client Software       VPN Management       VPN Management Considerations       CiscoWorks VPN/Security Management Solution     Designing Site-to-Site VPNs       Site-to-Site VPN Requirements       Key Design Considerations for Site-to-Site VPNs       Hub-and-Spoke VPN Topologies       Simple Full-Mesh VPN Topology       Hierarchical VPN Topology       High-Availability and Resiliency Considerations       Using a Routing Protocol over the VPN       Minimizing Packet Fragmentation       Implementing IPSec       Site-to-Site VPN Examples       Example: Small Site-to-Site VPN       Small Site-to-Site VPN Solution       Example: Large Site-to-Site VPN       Large Site-to-Site VPN Solution     Designing Remote-Access VPNs       Remote-Access VPN Requirements       Remote-Access VPN Design Considerations       Broadband Access Design Considerations       Capacity Planning for Remote-Access VPNs       NAT Issues       One-to-One Translation       Many-to-One Translation       NAT Traversal       VPN Split-Tunnel Communication       Remote-Access VPN Examples       Example: Small Remote-Access VPN       Small Remote-Access VPN Solution       Example: Large Remote-Access VPN       Large Remote-Access VPN Solution     Summary     References     Product Summary     Standards and Specification Summary     Review Questions     Case Study: OCSIC Bottling Company       Site-to-Site VPN Solution       Remote-Access VPN Solution       Revised Network Diagrams 10. Designing Enterprise Wireless Networks.     Reviewing the Wireless LAN Solution       Emerging Wireless Enterprise Network Needs       Wireless Communication Architecture       Access Point Coverage       Cell Distribution       802.11 Standards       Cisco Wireless Solutions       Access Points and Client Adapters       Workgroup Bridges       Wireless Bridges       Antennas     Designing WLANs for Enhanced Enterprise Communications       Enterprise WLAN Design Considerations       WLAN Data Rates       Client Density and Throughput       WLAN Coverage       RF Environment       Channel Selection       Access-Point Placement and Number       Inline Power       VLANs       IP Addressing       Infrastructure Availability       Back-End System Availability       Access-Point Hot Standby Redundancy       Roaming       Multicast       QoS       WLAN Security Design Considerations       WLAN Security Extension-EAP       WLAN LAN Extension-IPSec       WLAN Static WEP       Security Extension Comparison       Cisco EAP       Attack Mitigation Using EAP Authentication       Attack Mitigation Using IPSec       Small Office WLAN Design Model       Enterprise WLAN Design Model       Example: Enterprise WLAN Site Design       Example: Enterprise WLAN Remote Office Design       Remote-Access and Telecommuter WLAN Design Models     Summary     References     Product Summary     Standards and Specification Summary     Review Questions     Case Study: OCSIC Bottling Company 11. Designing IP Telephony Solutions.     Reviewing the Cisco IP Telephony Solution       Introducing the Cisco IP Telephony Solution       Cisco CallManager       Gateways and Control Protocols       Transcoders and Conferencing       Hardware Support       Unicast Conference Bridge       Cisco IP Telephony Applications     Designing a Network for Cisco IP Telephony       Cisco CallManager Cluster Design Considerations       Cluster Deployment Guidelines       Cluster Design       Designing Single-Site IP Telephony Solutions       Example: Single-Site       Single-Site Solution       Designing Multisite with Centralized Call Processing IP Telephony Solutions       Designing Multisite with Distributed Call Processing IP Telephony Solutions       Example: Distributed Call Processing       Distributed Call Processing Solution       Clustering over the IP WAN       Local Failover       Remote Failover       Network Infrastructure Design Considerations       Layer 2 Voice Transport       VoIP over Leased Lines       Voice over Frame Relay       Voice over ATM       Network Bandwidth Provisioning       Provisioning for Voice Bearer Traffic       Provisioning for Call Control Traffic       Traffic Engineering       Dial Plan Design Considerations       Intelligent Network Services for IP Telephony and Voice       IP Telephony Network Management Tools       High Availability       Voice Security       QoS Design Considerations     Summary     References     Product Summary     Standards and Specification Summary     Review Questions     Case Study: OCSIC Bottling Company 12. Designing Content Networking Solutions.     Reviewing the Content Networking Solution       Enterprise Content Networking Requirements       Content Networking Architecture       Content Caching       Transparent Caching Deployment       Proxy Caching Deployment       Reverse Proxy Caching Deployment       Content Switching       Content Routing       Direct Mode Content Routing       WCCP Mode Content Routing       Content Distribution and Management       Intelligent Network Services Integration     Designing Content Networking Solutions       Content Networking Design Considerations       Content Networking Solutions for Web Content Delivery       Example: Web Content Delivery       Web Content Delivery Solution       Content Networking Solutions for E-Commerce       Example: E-Commerce       E-Commerce Solution       Content Networking Solutions for Streaming Media       Example: Streaming Media       Streaming Media Solution     Summary     References     Product Summary     Standards and Specification Summary     Review Questions     Case Study: OCSIC Bottling Company 13. Designing Storage Networking Solutions.     Reviewing the Cisco Storage Networking Solution       Enterprise Needs for Storage Networking       Storage Consolidation       Business Continuance and Backup       Cisco Storage Networking Architecture       Network Storage Models       SANs       Network-Attached Storage       Network Technology Enablers for Storage Networks       iSCSI       FCIP       Intelligent Network Services for Storage Networking     Designing a Storage Networking Architecture with IP Access       Designing a Storage Networking Architecture       IP Access to Storage       Example: IP Access to Storage       IP Access to Storage Solution       Storage over WAN       Example: Storage over WAN       Storage over WAN Solution       Example: Storage over Optical Metro       Storage over Optical Metro Solution       Network-Attached Storage Model       Example: Network-Attached Storage       Network-Attached Storage Solution     Summary     References     Product Summary     Standards and Specification Summary     Review Questions     Case Study: OCSIC Bottling Company Appendix A. Answers to Review Questions.     Chapter 1     Chapter 2     Chapter 3     Chapter 4     Chapter 5     Chapter 6     Chapter 7     Chapter 8     Chapter 9     Chapter 10     Chapter 11     Chapter 12     Chapter 13 Glossary. Index.

About the Author :
Keith Hutton is a senior Cisco network administrator with Magma Communications Ltd., Canada’s leading, full-service Internet company. Prior to joining Magma, Keith worked as a certified Cisco Systems instructor with Global Knowledge Canada. He currently holds the CCNP® and CCDP certifications.   Amir Ranjbar, CCIE® No. 8669, is a senior network architect at Global Knowledge and is a certified Cisco Systems instructor. Amir is author of the CCNP CIT Exam Certification Guide, published by Cisco Press.