ptg13806505 www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE Routing and Switching v5.0 Official Cert Guide, Volume 2 Fifth Edition Narbik Kocharians, CCIE No. 12410 Terry Vinson, CCIE No. 35347 ptg13806505 Cisco Press 800 East 96th Street Indianapolis, Indiana 46240 USA www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb i 10/17/14 12:35 PM CCIE Routing and Switching v5.0 Official Cert Guide, Volume 2, Fifth Edition Narbik Kocharians, CCIE No. 12410 Terry Vinson, CCIE No. 35347 Copyright© 2015 Pearson Education, Inc. Published by: Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review. Printed in the United States of America First Printing November 2014 Library of Congress Control Number: 2014950779 ISBN-13: 978-1-58714-491-2 ISBN-10: 1-58714-491-3 ptg13806505 Warning and Disclaimer This book is designed to provide information about the Cisco CCIE Routing and Switching Written Exam. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information is provided on an “as is” basis. The authors, Cisco Press, and Cisco Systems, Inc. shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it. The opinions expressed in this book belong to the author and are not necessarily those of Cisco Systems, Inc. Trademark Acknowledgments All terms mentioned in this book that are known to be trademarks or service marks have been appropri- ately capitalized. Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark. www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb ii 10/17/14 12:35 PM iii Special Sales For information about buying this title in bulk quantities, or for special sales opportunities (which may include electronic versions; custom cover designs; and content particular to your business, training goals, marketing focus, or branding interests), please contact our corporate sales department at [email protected] or (800) 382-3419. For government sales inquiries, please contact [email protected] . For questions about sales outside the U.S., please contact [email protected] . Feedback Information At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book is crafted with care and precision, undergoing rigorous development that involves the unique expertise of members from the professional technical community. Readers’ feedback is a natural continuation of this process. If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through email at [email protected] . Please make sure to include the book title and ISBN in your message. We greatly appreciate your assistance. Publisher: Paul Boger Copy Editor: John Edwards Associate Publisher: Dave Dusthimer Technical Editor(s): Dave Burns, Sean Wilkins ptg13806505 Business Operation Manager, Cisco Press: Jan Editorial Assistant: Vanessa Evans Cornelssen Cover Designer: Mark Shirar Executive Editor: Brett Bartow Composition : Tricia Bronkella Managing Editor: Sandra Schroeder Indexer: Tim Wright Senior Development Editor: Christopher Proofreader : Chuck Hutchinson Cleveland Senior Project Editor: Tonya Simpson www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb iii 10/17/14 12:35 PM iv CCIE Routing and Switching v5.0 Official Cert Guide, Volume 2 About the Authors Narbik Kocharians , CCIE No. 12410 (Routing and Switching, Security, SP), is a Triple CCIE with more than 32 years of experience in the IT industry. He has designed, implemented, and supported numerous enterprise networks. Narbik is the president of Micronics Training, Inc. (w ww.Micronicstraining.com) , where he teaches CCIE R&S and SP boot camps. Terry Vinson , CCIE No. 35347 (Routing and Switching, Data Center), is a seasoned instructor with nearly 25 years of experience teaching and writing technical courses and training materials. Terry has taught and developed training content, as well as provided technical consulting for high-end firms in the north Virginia/Washington, D.C. area. His technical expertise lies in the Cisco arena with a focus on all routing and switching technologies as well as the latest data center technologies, including Nexus switching, unified computing, and storage-area networking (SAN) technologies. Terry currently teaches for CCIE R&S and Data Center Bootcamps for Micronics Training, Inc. and enjoys sailing and game design in his “free time.” ptg13806505 www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb iv 10/17/14 12:35 PM v About the Technical Reviewers David Burns has in-depth knowledge of routing and switching technologies, network security, and mobility. He is currently a senior systems engineering manager for Cisco, leading the engineering team covering cable/MSO and content service providers in the United States. In July 2008, Dave joined Cisco as a lead systems engineer in several areas, including Femtocell, Datacenter, MTSO, and security architectures, working for a U.S.- based SP Mobility account. He came to Cisco from a large U.S.-based cable company, where he was a senior network and security design engineer. Dave held various roles before joining Cisco during his ten-plus years in the industry, working in SP operations, SP engineering, SP architecture, enterprise IT, and U.S. military intelligence communi- cations engineering. He holds various sales and industry/Cisco technical certifications, including the CISSP, CCSP, CCDP, and two associate-level certifications. Dave recently passed the CCIE Security Written exam and is currently preparing for the CCIE Security Lab. Dave is a big advocate of knowledge transfer and sharing and has a passion for net- work technologies, especially as they relate to network security. Dave has been a speaker at Cisco Live on topics such as Femtocell (IP mobility) and IPS (security). Dave earned his Bachelor of Science degree in telecommunications engineering technology from Southern Polytechnic State University, Georgia, where he currently serves as a member of the Industry Advisory Board for the Computer & Electrical Engineering Technology School. Dave also earned a Master of Business Administration (MBA) degree from the University of Phoenix. ptg13806505 Sean Wilkins is an accomplished networking consultant for SR-W Consulting and has been in the field of IT since the mid 1990s, working with companies such as Cisco, Lucent, Verizon, and AT&T as well as several other private companies. Sean currently holds certifications with Cisco (CCNP/CCDP), Microsoft (MCSE), and CompTIA (A+ and Network+). He also has a Master of Science degree in information technology with a focus in network architecture and design, a Master of Science in organizational management, a Master’s Certificate in network security, a Bachelor of Science in com- puter networking, and an Associate of Applied Science in computer information sys- tems. In addition to working as a consultant, Sean spends most of his time as a technical writer and editor for various companies. Check out his work at his author website, www.infodispersion.com . www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb v 10/17/14 12:35 PM vi CCIE Routing and Switching v5.0 Official Cert Guide, Volume 2 Dedications From Narbik Kocharians: I would like to dedicate this book to my wife, Janet, for her love, encouragement, and continuous support, and to my dad, for his words of wisdom. From Terry Vinson : I would like to dedicate this book to my father, who has taught me many things in life and include the one thing I’ve tried to live by: “Never give up on your dreams. Hard work and diligence will see you through so long as you never give up.” So it is with all my love, respect, and admiration that I dedicate this to you. ptg13806505 www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb vi 10/17/14 12:35 PM vii Acknowledgments From Narbik Kocharians: First, I would like to thank God for giving me the opportunity and ability to write, teach, and do what I truly enjoy doing. Also, I would like to thank my family, especially my wife of 29 years, Janet, for her constant encouragement and help. She does such an amazing job of interacting with students and handling all the logistics of organizing classes as I focus on teaching. I also would like to thank my children, Chris, Patrick, Alexandra, and my little one Daniel, for their patience. A special thanks to Mr. Brett Bartow for his patience with our constantly changing dead- lines. It goes without saying that the technical editors and reviewers did a phenomenal job; thank you very much. Finally, I would like to thank all my students, who inspire me every day, and you, for reading this book. From Terry Vinson: The opportunity to cooperate on the new edition of this book has been an honor and privilege beyond words for me. I have to thank Narbik for approaching me with the opportunity and for all his support and mentoring over the years. If it were not for him, I would not be where I am today. Additionally, I would like to thank all the fine people at Cisco Press for being so cool and understanding over the last few months. Among those people, I want to specifically thank Brett Bartow, whose patience has been almost ptg13806505 infinite (yet I managed to tax it), David Burns, and Sean Wilkins for their incredible sug- gestions and devotion to making sure that I stayed on track. Last but not least among the Cisco Press crew there is Christopher Cleveland, who diligently nudged, kicked, and all- out shoved when necessary to see that things got done. Personally, I need to thank my wife, Sheila. She has been the difference I was looking for in my life, the impetus to try to do more and to get up each day and try to make myself a better person, a better engineer, and a better instructor. Without her, I would not have the life I have come to love so much. Finally, I want to thank my students and Micronics Training for giving me the opportu- nity to do what I enjoy every day. Thanks for all your questions, patience, and unbridled eagerness to learn. You guys are absolutely stellar examples of why this industry is like no other on the planet. www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb vii 10/17/14 12:35 PM viii CCIE Routing and Switching v5.0 Official Cert Guide, Volume 2 Contents at a Glance Introduction xxvii Part I IP BGP Routing Chapter 1 Fundamentals of BGP Operations 3 Chapter 2 BGP Routing Policies 69 Part II QoS Chapter 3 Classification and Marking 135 Chapter 4 Congestion Management and Avoidance 171 Chapter 5 Shaping, Policing, and Link Fragmentation 207 Part III Wide-Area Networks Chapter 6 Wide-Area Networks 245 Part IV IP Multicast ptg13806505 Chapter 7 Introduction to IP Multicasting 267 Chapter 8 IP Multicast Routing 317 Part V Security Chapter 9 Device and Network Security 399 Chapter 10 Tunneling Technologies 483 Part VI Multiprotocol Label Switching (MPLS) Chapter 11 Multiprotocol Label Switching 515 Part VII Final Preparation Chapter 12 Final Preparation 573 www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb viii 10/17/14 12:35 PM ix Part VIII Appendixes Appendix A Answers to the “Do I Know This Already?” Quizzes 579 Appendix B CCIE Exam Updates 583 Index 585 CD-Only Appendix C Decimal to Binary Conversion Table Appendix D IP Addressing Practice Appendix E Key Tables for CCIE Study A ppendix F Solutions for Key Tables for CCIE Study Glossary ptg13806505 www.allitebooks.com From the Library of Eleni Papageorgakopoulou CCIE.indb ix 10/17/14 12:35 PM