Karteikarten
E4_1 Design Hierarchy
Karten in diesem Stapel (27)
- 1Network Requirements - Small network - up to 200 devices. - Medium-sized network - for 200 to 1000 devices. - Large network - for 1000+ devices. ** Note: The Cisco Certified Design Associate (CCDA®) is an industry-recognized certification for network design engineers, technicians, and support engineers, who demonstrate the skills required to design basic campus, data center, security, voice, and wireless networks.
- 2Structured Engineering Principles 1. Hierarchy - A hierarchical network model is a useful high-level tool for designing a reliable network infrastructure. It breaks the complex problem of network design into smaller and more manageable areas.2. Modularity - By separating the various functions that exist on a network into modules, the network is easier to design.
Cisco has identified several modules, including the enterprise campus, services block, data center, and Internet edge. - 3Structured Engineering Principles 4. Flexibility - The ability to modify portions of the network, add new services, or increase capacity without going through a major fork-lift upgrade (i.e., replacing major hardware devices). 3. Resiliency - The network must remain available for use under both normal and abnormal conditions.Normal conditions include normal or expected traffic flows and traffic patterns, as well as scheduled events such as maintenance windows.
Abnormal conditions include hardware or software failures, extreme traffic loads, unusual traffic patterns, Denial-of-Service (DoS) events, whether intentional or unintentional, and other unplanned events. - 4Network Hierarchy In networking, a hierarchical design involves dividing the network into discrete layers. Each layer, or tier, in the hierarchy provides specific functions that define its role within the overall network. This helps the network designer and architect to optimize and select the right network hardware, software, and features to perform specific roles for that network layer. Hierarchical models apply to both LAN and WAN design.A typical enterprise hierarchical LAN campus network design includes the following three layers:
* Access layer - Provides workgroup/user access to the network.
* Distribution layer - Provides policy-based connectivity and controls the boundary between the access and core layers.
* Core layer - Provides fast transport between distribution switches within the enterprise campus - 5—
- 6The Access Layer In a LAN environment, the access layer grants end devices access to the network. In the WAN environment, it may provide teleworkers or remote sites access to the corporate network across WAN connections.
- 7The Access Layer The access layer serves a number of functions including: - Layer 2 switching - High availability - Port security- QoS classification and marking and trust boundaries
- Address Resolution Protocol (ARP) inspection
- VLAN Access Control List (VACL)
- Spanning tree
- Power over Ethernet (PoE) and auxiliary VLANs for VoIP - 8The Distribution Layer The distribution layer device is the focal point in the wiring closets. Either a router or a multilayer switch is used to segment workgroups and isolate network problems in a campus environment. A distribution layer switch may provide upstream services for many access layer switches.
- 9The distribution layer can provide: - Aggregation of LAN or WAN links - Policy-based security in the form of access control lists (ACLs) and filtering - Routing services between LANs and VLANs and between routing domains (e.g., EIGRP to OSPF)- Redundancy and load balancing
- A boundary for route aggregation and summarization configured on interfaces toward the core layer
- Broadcast domain control, because routers or multilayer switches do not forward broadcasts. The device acts as the demarcation point between broadcast domains - 10The Core Layer The core layer is also referred to as the network backbone. The core layer consists of high-speed network devices such as the Cisco Catalyst 6500 or 6800. These are designed to switch packets as fast as possible and interconnect multiple campus components, such as distribution modules, service modules, the data center, and the WAN edge.
- 11Considerations at the core later include: - Providing high-speed switching (i.e., fast transport) - Providing reliability and fault tolerance** Scaling by using faster, and not more, equipment
** Avoiding CPU-intensive packet manipulation caused by security, inspection, quality of service (QoS) classification, or other processes - 12Two-Tier Collapsed Core Design The three-tier hierarchical design maximizes performance, network availability, and the ability to scale the network design. However, many small enterprise networks do not grow significantly larger over time. Therefore, a two-tier hierarchical design where the core and distribution layers are collapsed into one layer is often more practical.
- 13Modular Design A modular network design separates the network into various functional network modules, each targeting a specific place or purpose in the network. The modules represent areas that have different physical or logical connectivity. They designate where different functions occur in the network. The use of modules in network design enables flexibility and facilitates implementation and troubleshooting.
- 14Using a modular approach has several benefits, including: * Failures that occur within a module can be isolated from the remainder of the network, providing for simpler problem detection and higher overall system availability. * Network changes, upgrades, or the introduction of new services can be made in a controlled and staged fashion, allowing greater flexibility in the maintenance and operation of the campus network.* When a specific module no longer has sufficient capacity or is missing a new function or service, it can be updated or replaced by another module that has the same structural role in the overall hierarchical design.
* Security can be implemented on a modular basis allowing for more granular security control - 15Modules in the Enterprise Architecture Basic network modules include: 1. Access-distribution - Also called the distribution block, this is the most familiar element and fundamental component of a campus design. 2. Services - This is a generic block used to identify services such as centralized Lightweight Access Point Protocol (LWAPP) wireless controllers, unified communications services, policy gateways, and more
- 16Modules in the Enterprise Architecture Basic network modules include: 3. Data center - Originally called the server farm. This block is responsible for managing and maintaining many data systems that are vital to modern business operations. ** 4. Enterprise Edge - Consists of the Internet Edge and the WAN Edge. These blocks offer connectivity to voice, video, and data services outside the enterprise.
- 17Cisco Enterprise Architecture Model The Cisco Enterprise Architecture model separates the enterprise network into functional areas that are referred to as modules. The modularity that is built into the architecture allows flexibility in network design and facilitates implementation and troubleshooting.
- 18Cisco Enterprise Campus The enterprise campus module describes the recommended methods to create a scalable network, while addressing the needs of campus-style business operations. The architecture is modular and can easily expand to include additional campus buildings or floors as the enterprise grows.
- 19Cisco Enterprise Campus The enterprise campus module consists of the following submodules: - Building access - Building distribution - Campus core - Data center Together these submodules:* Provide high availability through a resilient hierarchical network design.
* Integrate IP communications, mobility, and advanced security.
* Utilize multicast traffic and QoS to optimize network traffic.
* Provide increased security and flexibility using access management, VLANs and IPSec VPNs. - 20Cisco Enterprise Edge The enterprise edge module consists of the following submodules: 1. E-commerce networks and servers - The e-commerce submodule enables enterprises to support e-commerce applications through the Internet. Devices located in the e-commerce submodule include web, application, and database servers, firewall and firewall routers, and network intrusion prevention systems (IPS).2. Internet connectivity and demilitarized zone (DMZ) - The Internet submodule of the enterprise edge provides internal users with secure connectivity to Internet services such as public servers, email, and DNS.
Connectivity to one or several Internet Service Providers (ISP) is also provided.
Components of this submodule include firewall and firewall routers, Internet edge routers, FTP and HTTP servers, SMTP relay servers, and DNS servers. - 21Cisco Enterprise Edge The enterprise edge module consists of the following submodules: 3. Remote Access and VPN - The VPN/remote access submodule of the enterprise edge provides remote-access termination services, including authentication for remote users and sites. Components of this submodule include firewalls, dial-in access concentrators, Cisco Adaptive Security Appliances (ASA), and network Intrusion Prevention System (IPS) appliances.4. WAN - The WAN submodule uses various WAN technologies for routing traffic between remote sites and the central site.
Enterprise WAN links include technologies such as Multiprotocol Label Switching (MPLS), Metro Ethernet, leased lines, Synchronous Optical Network (SONET) and Synchronous Digital Hierarchy (SDH), PPP, Frame Relay, ATM, cable, digital subscriber line (DSL), and wireless. - 22Service Provider Edge - SP: * Spans across large geographic areas in a cost effective manner * Converges voice, video, and data services over a single IP communications network * Supports QoS and service level agreements * Supports security using VPNs (IPsec / MPLS) over Layer 2 and Layer 3 WANs
- 23—
- 24Remote Functional Area - The enterprise data center module - is a data center with all of the same functional options as a campus data center, but exists at a remote location. This provides an added layer of security as the offsite data center can provide disaster recovery and business continuance services for the enterprise.** High-end switches such as the Cisco Nexus series switch use fast WAN services such as Metro Ethernet (MetroE) to connect the enterprise campus to the remote enterprise data center.
** Redundant data centers provide backup using synchronous and asynchronous data and application replication. - 25Cisco Borderless Networks Is a network solution that allows organizations and individuals to connect securely, reliably, and seamlessly to the corporate network in a BYOD environment. It is based on wired, wireless, routing, switching, security, and application optimization devices working in harmony to help IT balance demanding business challenges and changing business models
- 26Collaboration Architecture Working in a collaborative environment helps increase productivity. Collaboration and other types of groupware are used to bring people together for one reason or another The Cisco Collaboration Architecture comprises a portfolio of products, applications, software development kits (SDKs), and APIs. The individual components work together to provide a comprehensive solution.
- 27Data Center and Virtualization - three components: 1. Cisco Unified Management Solutions - Management solutions simplify and automate the process of deploying IT infrastructure and services with speed and enterprise reliability. 2. Unified Fabric Solutions - Flexible network solutions deliver network services to servers, storage, and applications, providing transparent convergence, scalability, and sophisticated intelligence.** Solutions include Cisco Nexus switches, Catalyst switches, Cisco Fabric Manager, and Cisco NX-OS software.
3. Unified Computing Solutions - Cisco’s next-generation data center system unites computing, network, storage access, and virtualization into a cohesive system designed to reduce total cost of ownership (TCO) and increase business agility.
The Cisco Unified Computing System (Cisco UCS) is built with blade servers, rack-mount servers, fabric interconnects, and virtual interface cards (VICs).
Informationen
- Beschreibung
- CCNA CCNA Karteikarten am E4_1 Design Hierarchy, erstellt von John Dedios am 24/08/2016.
- Erstellt von
- John Dedios
- Aufrufe
- 2
- Tags
- Bewertung