Cisco Certified Design Associate

Cisco Certified Design Associate

1. Lesson 4

   • 4.1
   • 4.2
     • Challenges in the Data Center
       • Power required
       • Physical rack space usage
       • Limits to scale
       • Management (Resource, Firmware)
       • Server Security
       • Virtualization support
       • Management effort required
     • Data Center Facility Aspects
       • Architectural and Mechanical Specifications
       • Environmental Conditions
     • Data Center Space
       • Factors to Consider
         • The number of employees who will be supporting the data center
         • The number of Servers and the amount of storage gear and networking equipment
     • Data Center Power
       • PDUs, Circuit Breaker, Conduits
     • Data Center Cooling
       • Cold and Hot Aisles
     • Data Center Heat
     • Data Center Cabling
       • CAT6A w/RJ-45
   • 4.3 Enterprise Data Center Infrasture
     • Includes access to LAN, WAN and DMZ
     • Data Center Storage
       • SAN (Storage Area Networks)
       • DAS (Direct Attached Storage)
     • Data Center Reference Architecture
     • Defining the Data Center Access Layer
     • Defining the Data Center Aggregation Layer
     • Defining the Data Center Core Layer
     • Security in the Data Center
       • Firewalls, and IPS sensors
     • Fabric Extenders (FEX)
   • 4.4 Virtualization Overview
     • Defining Virtualization and Benefits
     • Virtualization Risks
     • Types of Virtualization
       • VLAN: Virtual Local Area Network
       • VSAN: Virtual Storage Area Network
       • VRF: Virtual Routing and Forwarding
       • VPN: Virtual Private Network
       • vPC: Virtual Port Channel
       • Device Virtualization includes:
         • Server Virtualization: Virtual Machines (VM)
         • Virtual Switching System (VSS)
         • Cisco Adaptive Security Appliance (ASA) firewall context
         • Virtual Device Contexts (VDCs)

2. Lesson1

3. Lesson 2

4. Lesson 3

5. Lesson 5: Wireless LAN Technologies

   • 5.1 WLAN Standards
     • 802.11 approved by IEEE in 1997
     • 802.11b in 1999
     • 802.11g in 2003
     • 802.11n in 2009
     • 802.11ac in 2013
     • ISM and UNII
       • ISM frequencies are set aside by ITU-R Radio
       • UNII radio bands were initially specified for use with 802.11a wireless
         • UNII 1: 5.150 GHz to 5.250 GHz
         • UNII 2: 5.230 GHz to 5.350 GHz and 5.470 GHz to 5.725 GHz
         • UNII 3: 5.725 GHz to 5.875GHz. This range overlaps with ISM.
     • Service Set Identifier
       • Guest SSID - VLAN999 - 192.168.100.0/24
       • Employees SSID - VLAN100 - 10.10.10.0/24
       • Contractors SSID - VLAN200 - 10.100.10.0/24
     • WLAN Security
       • WEP is Vulnerable
       • 4-way Handshake and Group Key Handshake
       • Robust Security Network (RSN)
       • Advanced Encryption Standard (AES)
   • 5.2 Cisco Unified Wireless Network
     • Cisco UWN Architecture
       • Client devices
         • These include laptops, workstations, IP Phones, PDAs, and manufacturing devices to access to WLAN
       • Access Points
         • These devices provide access to the wireless network. APs are placed strategic locations to minimize interference
       • Network Unificiation
         • The WLAN system should be able to support wireless applications by providing security policies, QoS, intrusion prevention, and radio frequency (RF) management. Cisco WLAN controllers provide this functionality and integration into major switching and routing platforms
       • Network Management
         • Cisco Wireless Control System (WCS)
       • Mobility Services
         • include guest access, location services, voice services, and threat detection and mitigation
       • Benefits: Reduced total cost of ownership (TCO), Enhanced visibility and control,
     • Lightweight Access Point Protocol (LWAPP) preceded CAPWAP
       • Control and Provisioning for Wireless Access Point (CAPWAP)
         • uses Datagram Transport Layer Security (DTLS) for authentication and encryption to protect traffic between APs and controllers. LWAPP uses AES
     • AP Modes
       • Local mode
         • The default mode of operation, every 180 seconds the AP measures noise
       • Hybrid Remote Edge AP (H-REAP) mode
         • For remote LAP management across WAN links and still be able to communicate with the WLC
       • Monitor Mode
         • is a feature designed to allow specified CAPWAP enabled APs to exclude themselves from handling data traffic between clients and infrastructure
       • Rogue Detector Mode
       • Sniffer Mode
       • Bridge Mode
     • WLAN Authentication
       • EAP-Transport Layer Security
     • WLAN Controller Components
       • WLC interface is logical connection that maps to a VLAN on the wired network
     • Roaming and Mobility Groups
       • Intracontroller Roaming
       • Layer 2 Intercontroller Roaming
       • Layer 3 Intercontroller Roaming

6. Lesson 6: WAN Technologies and the Enterprise Edge

   • 6.1 WAN and Enterprise Edge Overview
     • WANs provide network connectivity for the enterprise core and the remote branch locations.
     • WAN Defined: are communications network used to connect geographically disperse network locations.
       • WANs can transport data, voice, and video traffic
       • Service Level Agreement (SLA)
       • Cost and Usage
       • Three Key Objectives
         • support the goals and policies of the organization
         • need to meet the current application requirements and provide for growth
         • proposed design should incorporate security and ensure high availiblity
     • WAN Edge Module
       • Generally across a service provider network, such as MPLS WAN
     • Enterprise Edge Modules
       • Demilitarized Zone (DMZ)
       • Service Provider Edge (SP)
   • 6.2 WAN Transport Technologies
     • ISDN
       • All digital phone line connection that was standardized in the early 80s
     • DSL
     • Cable
       • Technology used to transport data using a coaxial cable
     • Wireless
     • Frame Relay
     • TDM
     • Metro Ethernet
     • Sonet/SDH
     • MPLS
     • Dark Fiber
     • DWDM
   • 6.3 WAN and Edge Design Methodologies
     • Response Time
     • Throughput
       • the measure of data transferred from one host to another
     • Reliability
       • five-nines 99.999 percent
     • Bandwidth Consideration
     • WAN Link Categories
     • Optimizing Bandwidth Using QoS