Fichas

E3_1

John Dedios CCNA CCNA Español 36 fichas

Fichas del conjunto (36)

1All enterprise networks must: * Support critical applications* Support converged network traffic
* Support diverse business needs
* Provide centralized administrative control
2Failover capability refers to the ability of a device to switch from a non-functioning module, service or device, to a functioning one with little or no break in service.
3Hierarchical Network Design The access layer provides connectivity for the users. The distribution layer is used to forward traffic from one local network to another. Finally, the core layer represents a high-speed backbone layer between dispersed networks.
4Some smaller enterprise networks may implement a two-tier hierarchical design. In a two-tier hierarchical design, the core and distribution layers are collapsed into one layer, reducing cost and complexity,
5Cisco Enterprise Architecture modules include: Enterprise Campus Enterprise Edge Service Provider Edge Remote
6Cisco Enterprise Architecture The Enterprise Campus consists of the entire campus infrastructure, to include the access, distribution, and core layers. * The access layer module contains Layer 2 or Layer 3 switches to provide the required port density. Implementation of VLANs and trunk links to the building distribution layer occurs here** The distribution layer module aggregates building access using Layer 3 devices. "Routing, access control, and QoS" are performed at this distribution layer module.
* The core layer module provides high-speed interconnectivity between the distribution layer modules, data center server farms, and the enterprise edge. Redundancy, fast convergence, and fault tolerance are the focus of the design in this module.
7Cisco Enterprise Architecture In addition to these modules, the Enterprise Campus can include other submodules such as: * Services Module - This area provides access to all services, such as IP Telephony services, wireless controller services, and unified services.* Server Farm and Data Center Module - This area provides high-speed connectivity and protection for servers. It is critical to provide security, redundancy, and fault tolerance.
The network management systems monitor performance by monitoring device and network availability.
8Cisco Enterprise Architecture * The Enterprise Edge - consists of the Internet, VPN, and WAN modules connecting the enterprise with the service provider's network. This module extends the enterprise services to remote sites and enables the enterprise to use Internet and partner resources. It provides QoS, policy reinforcement, service levels, and security.* Service Provider Edge
The Service Provider Edge provides Internet, Public Switched Telephone Network (PSTN), and WAN services.
** All data that enters or exits the Enterprise Composite Network Model (ECNM) passes through an edge device. This is the point that all packets can be examined and a decision made whether the packet should be allowed on the enterprise network.
Intrusion detection systems (IDS) and intrusion prevention systems (IPS) can also be configured at the enterprise edge to protect against malicious activity.
9Failure Domains A failure domain is the area of a network that is impacted when a critical device or network service experiences problems. Smaller failure domains reduce the impact of a failure on company productivity. They also simplify the troubleshooting process, thereby, shortening the downtime for all users.Limiting the Size of Failure Domains
* In the hierarchical design model, it is easiest and usually least expensive to control the size of a failure domain in the distribution layer.
In the distribution layer, network errors can be contained to a smaller area; thus, affecting fewer users. When using Layer 3 devices at the distribution layer, every router functions as a gateway for a limited number of access layer users.
10Advanced network design requirements include: Implementing redundant links in the network between critical devices and between access layer and core layer devices. Using a scalable routing protocol and implementing features within that routing protocol to isolate routing updates and minimize the size of the routing table.
11Increasing Bandwidth EtherChannel uses the existing switch ports; therefore, additional costs to upgrade the link to a faster and more expensive connection are not necessary. The EtherChannel is seen as one logical link using an EtherChannel interface. Most configuration tasks are done on the EtherChannel interface, instead of on each individual port, ensuring configuration consistency throughout the links.
12Increasing Bandwidth EtherChannel uses the existing switch ports; therefore, additional costs to upgrade the link to a faster and more expensive connection are not necessary. The EtherChannel is seen as one logical link using an EtherChannel interface. Most configuration tasks are done on the EtherChannel interface, instead of on each individual port, ensuring configuration consistency throughout the links.
13Fine-tuning Routing Protocols All OSPF networks begin with Area 0, also called the backbone area. As the network is expanded, other, non-backbone areas can be created. All non-backbone areas must directly connect to area 0.
14Enhanced Interior Gateway Routing Protocol (EIGRP). Cisco developed EIGRP as a proprietary distance vector routing protocol with enhanced capabilities. Although configuring EIGRP is relatively simple, the underlying features and options of EIGRP are extensive and robust. For example, EIGRP uses multiple tables to manage the routing process. EIGRP contains many features that are not found in any other routing protocols. It is an excellent choice for large, multi-protocol networks that employ primarily Cisco devices.
15Campus LAN Switches To scale network performance in an enterprise LAN, there are core, distribution, access, and compact switches. These switch platforms vary from fanless switches with eight fixed ports to 13-blade switches supporting hundreds of ports. Campus LAN switch platforms include the Cisco 2960, 3560, 3750, 3850, 4500, 6500, and 6800 Series.
16Cloud-Managed Switches The Cisco Meraki cloud-managed access switches enable virtual stacking of switches. They monitor and configure thousands of switch ports over the web, without the intervention of onsite IT staff.
17Data Center Switches A data center should be built based on switches that promote infrastructure scalability, operational continuity, and transport flexibility. The data center switch platforms include the Cisco Nexus Series switches and the Cisco Catalyst 6500 Series switches.
18Service provider switches fall under two categories: 1. Aggregation switches are carrier-grade Ethernet switches that aggregate traffic at the edge of a network. 2. Service provider Ethernet access switches feature application intelligence, unified services, virtualization, integrated security, and simplified management.
19Virtual Networking Networks are becoming increasingly virtualized. Cisco Nexus virtual networking switch platforms provide secure multi-tenant services by adding virtualization intelligence technology to the data center network.
20Modular switches can support very high-port densities through the addition of multiple switch port line cards. For example, some Catalyst 6500 switches can support in excess of 1,000 switch ports. With a single modular switch, bandwidth aggregation is less of an issue, because the backplane of the chassis can provide the necessary bandwidth to accommodate the devices connected to the switch port line cards.
21The relatively new Cisco Catalyst 2960-C and 3560-C Series compact switches support PoE pass-through. PoE pass-through allows a network administrator to power PoE devices connected to the switch, as well as the switch itself, by drawing power from certain upstream switches
22Multilayer switches often support specialized hardware, such as application-specific integrated circuits (ASICs). ASICs along with dedicated software data structures can streamline the forwarding of IP packets independent of the CPU.Catalyst 2960 switches illustrate the migration to a pure Layer 3 environment. With IOS versions prior to 15.x, these switches supported only one active switched virtual interface (SVI).
With IOS 15.x, these switches now support multiple active SVIs.
23Router Requirements Routers can also act as a translator between different media types and protocols. For example, a router can accept packets from an Ethernet network and re-encapsulate them for transport over a Serial network. Routers also serve other beneficial functions: * Provide broadcast containment * Connect remote locations * Group users logically by application or department * Provide enhanced security
24Routers can also be categorized as fixed configuration or modular. With the fixed configuration, the desired router interfaces are built-in. Modular routers come with multiple slots that allow a network administrator to change the interfaces on the router
25In-Band versus Out-of-Band Management * Out-of-band management is used for initial configuration or when a network connection is unavailable. Direct connection to console or AUX port Terminal emulation client * In-band management is used to monitor and make configuration changes to a network device over a network connection. At least one network interface on the device to be connected and operational Telnet, SSH, or HTTP to access a Cisco device
26In a Router or Switch to save configuration changes using the: " copy running-config startup-config " command. To clear the router configuration, use the: " erase startup-config " command and then the "reload" command.To clear the switch configuration, use the:
" erase startup-config" command and then the "reload" command.
It may also be necessary to erase any VLAN information using the command: "delete flash:vlan.dat"
27Routing Related "show ip protocols" - Displays information about the routing protocols configured. If OSPF is configured, this includes the OSPF process ID, the router ID, networks the router is advertising, the neighbors the router is receiving updates from, and the default administrative distance, which is 110 for OSPF.
28Routing Related "show ip route" Displays routing table information, including: routing codes, known networks, administrative distance and metrics, how routes were learned, next hop, static routes, and default routes
29Routing Related "show ip ospf neighbor" Displays information about OSPF neighbors that have been learned, including the Router ID of the neighbor, priority, the state (Full = adjacency has been formed), the IP address, and the local interface that learned of the neighbor.
30Interface Related "show interfaces" Displays interfaces with line (protocol) status, bandwidth, delay, reliability, encapsulation, duplex, and I/O statistics. If specified without a specific interface designation, all interfaces will be displayed. If a specific interface is specified after the command, information about that interface only will be displayed
31Interface Related "show ip interfaces" Displays interface information, including: protocol status, the IP address, if a helper address is configured, and whether an ACL is enabled on the interface. If specified without a specific interface designation, all interfaces will be displayed. If a specific interface is specified after the command, information about that interface only will be displayed.
32Interface Related "show ip interface brief" Displays all interfaces with IP addressing information and interface and line protocols status.
33Interface Related "show protocols" Displays information about the routed protocol that is enabled, and the protocol status of interfaces..
34" show port-security " Displays any ports with security activated. To examine a specific interface, include the interface ID. Information included in the output: the maximum addresses allowed, current count, security violation count, and action to be taken
35"show port-security address " Displays all secure MAC addresses configured on all switch interfaces.
36"show cdp neighbors" This command displays information on directly connected devices including Device ID, the local interface the device is connected to, capability (R = router, S = switch), the platform, and Port ID of the remote device. The details option includes IP addressing information and the IOS version.