Exploring the Enterprise Network Infrastructure Introducing Routing and Switching in the Enterprise – Chapter 2 ITE I Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 1 Objectives Interpret network documentation. – Describe the equipment in the enterprise Network Operations Center. Explain the importance of the enterprise edge in the provisioning of services. – Describe the Point-of-Presence for service delivery. – Identify security considerations and equipment at the enterprise edge. Identify router and switch hardware characteristics and use router CLI configuration and verification commands. ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 2 Interpret Network Documentation Network infrastructure diagrams – keep track of the location, function, & status of devices Physical topology map – document location of hosts, networking devices and media Logical topology map – groups hosts by network usage (host names, addresses, applications) Control plane information: failure domains ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 3 Interpret Network Documentation Floor plans and blueprints Redlining shows changes As-built diagram documents changes from original plans ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 4 Other important types of documentation. Business Continuity Plan – identify the steps to be taken to continue in case of disaster Business Security Plan – authentication, authorization, remote access, monitoring Network Maintenance Plan Service Level Agreement ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 5 ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 6 ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 7 Describe the Equipment in the Enterprise NOC Raised floors High performance UPS and HVAC Fire suppression systems Network monitoring equipment MDF switches and routers ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 8 Describe the Equipment in the Enterprise NOC Server farm Data storage Storage Area Network (SAN) ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 9 Interpret Network Documentation Structured cabling standards Main Distribution Facility (MDF) Telecommunications room - Intermediate Distribution Facility (IDF) - contains the Access Layer networking devices ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Point-of-Presence (POP) At the outer edge of the enterprise network Provides an entry point for services to the enterprise network Provides links to outside services and sites Demarc Provides a boundary Designates responsibility for equipment maintenance and troubleshooting between the service provider (SP) and customer ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 11 Security considerations at the enterprise edge – Denial of Service (DoS) attacks – Application of filtering policies Firewall Demilitarized zone Intrusion detection and prevention ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 12 Connection services WAN punchdown block Channel Service Unit/Data Service Unit (CSU/DSU) provide the proper electrical interface and signaling for the service provider Customer Premises Equipment (CPE) all equipment located within the POP at the customer site ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 13 ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 14 Identify Router Hardware Characteristics Router functions Provides access to other private networks and the Internet Provide broadcast containment Connect remote locations Group users logically by application or department Provide enhanced security (using NAT and ACLs) Form factors Interfaces Management options ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 15 Use Router CLI Show Commands General Use: show running-config show startup-config show version Routing Related: show ip protocols show ip route Interface Related: show interfaces show ip interface brief show protocols Connectivity Related: show cdp neighbors show sessions show ssh ping traceroute ACTIVITY 2.3.2.3 ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 16 Use Basic Router Configuration Commands Configuration management Global settings Line settings Interface settings Routing settings ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 17 Identify Switch Hardware Characteristics Switch functions Form factors Port density ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 18 Use Switch CLI Show Commands General use Interface/port related Connectivity related ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 19 Use Switch CLI Configuration Commands Configuration management Global settings Interface settings ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 20 Summary Network infrastructure diagrams document devices in a network The enterprise NOC manages and monitors all network resources The enterprise edge provides Internet and local access services and security against attacks Access Layer switches provide end user connections, security services, and microsegmentation of collision domains Distribution Layer routers control broadcasts and move packets between locations and the Internet ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 21 ITE 1 Chapter 6 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 22