CCNP ONT Official Exam Certification Guide Amir S. Ranjbar, CCIE No. 8669 Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA ii CCNP ONT Official Exam Certification Guide Amir S. Ranjbar, CCIE No. 8669 Copyright© 2007 Cisco Systems, Inc. Published by: Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the pub- lisher, except for the inclusion of brief quotations in a review. Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 First Printing: May 2007 Library of Congress Cataloging-in-Publication data is on file. ISBN-10: 1-58720-176-3 ISBN-13: 978-1-58720-176-9 Warning and Disclaimer This book is designed to provide information about the topics covered on the Optimizing Converged Cisco Networks (642-845 ONT) CCNP exam. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information is provided on an “as is” basis. The author, Cisco Press, and Cisco Systems, Inc. shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it. The opinions expressed in this book belong to the author and are not necessarily those of Cisco Systems, Inc. Trademark Acknowledgments All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Cisco Press or Cisco Systems, Inc. cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark. Corporate and Government Sales Cisco Press offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales. For more informa- tion, please contact: U.S. Corporate and Government Sales 1-800-382-3419 [email protected] For sales outside of the U.S. please contact: International Sales 1-317-581-3793 [email protected] iii Feedback Information At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book is crafted with careand pre- cision, undergoing rigorous development that involves the unique expertise of members from the professional technical community. Readers’ feedback is a natural continuation of this process. If you have any comments regarding how we could improve the quality of this book or otherwise alter it to better suit your needs, you can contact us through e-mail at [email protected]. Please make sure to include the book title and ISBN in your message. We greatly appreciate your assistance. Publisher: Paul Boger Cisco Representative: Anthony Wolfenden Associate Publisher: David Dusthimer Cisco Press Program Manager: Jeff Brady Executive Editor: Mary Beth Ray Technical Editors: Dave Minutella, Mike Valentine Managing Editor: Patrick Kanouse Book and Cover Designer: Louisa Adair Development Editor: Andrew Cupp Composition:Mark Shirar Senior Project Editor: San Dee Phillips Indexer:WordWise Publishing Copy Editor: Karen A. Gill Publishing Coordinator: Vanessa Evans iv About the Author Amir S. Ranjbar, CCIE No. 8669, is an internetworking trainer and consultant. Born in Tehran, Iran, he moved to Canada in 1983. He received his bachelor’s degree in computer science (1989) and master of science degree in knowledge-based systems (1991) from the University of Guelph in Guelph, Ontario, Canada. After graduation, Amir worked as a programmer/analyst for Statistics Canada until 1995 when he was hired by Digital Equipment Corporation as a certified Microsoft trainer. After performing training on Microsoft Backoffice products such as Windows NT, Exchange Server, and Systems Management Server for three years, he shifted his focus to Cisco Systems. In 1998, he joined GEOTRAIN Corporation, which was later acquired by Global Knowledge Network, and worked for them as a full-time Certified Cisco Systems Instructor until 2005. In October 2005, Amir started his own business (AMIRACAN Inc.) in the field of internetwork consulting, but his major activity is still conducting training for Global Knowledge Network on a contractual basis. His areas of specialty are MPLS, BGP, QoS, VoIP, and advanced routing and switching. Amir’s e-mail address is [email protected] About the Contributing Author Troy Houston, CCNP, CCDP, and CCIE-written, independently provides contracted business and knowledge solutions to enterprise customers in the Mid-Atlantic area. The first half of his career was in the Aerospace industry where he gained extensive RF knowledge making him the WLAN SME today. Over the past 10 years, Troy has planned, designed, implemented, operated, and troubleshot LANs, WANs, MANs, and WLANs. He attained his bachelor of science degree in management of information systems from Eastern University. Additionally, he is an inventor and holds a patent for one of his many ideas. Formerly in the military, Troy returned to the military on a reserve basis after 9/11. He provides the Air Force Reserves his skills and knowledge as a Computers-Communications Systems Specialist (3C0). He can be contacted at [email protected]. v About the Technical Reviewers Dave Minutella (CCNP, CCDP, CCSP, INFOSEC, CISSP, MCSA, MCDST, CTP, Security+, Network +, A+) has been working in the IT and telecom industry for more than 12 years. He currently serves as vice president of educational services for TechTrain/The Training Camp. Prior to that, he was the lead Cisco instructor, primarily teaching CCNA, CCDA, and CCNP courses. Dave is also the technical author of CSVPN Exam Cram 2 and coauthor of CCNA Exam Prep 2 from Que Publishing, and he is the present Cisco certifications expert for SearchNetworking.com’s Ask the Networking Expert panel. Mike Valentine has 12 years of experience in the IT field, specializing in network design and installation. His projects include the installation of network services and infrastructure at the largest private aircraft maintenance facility in Canada, Cisco Unified CallManager implementations for small business clients in southwest Florida, and implementation of network mergers and development for Prospera Credit Union in British Columbia. He now heads up his own network consulting company near Vancouver, BC, providing contract Cisco certification instruction and network infrastructure consulting services to clients throughout North America. Mike is the senior Cisco instructor for The Training Camp. His diverse background and exceptional instructional skills make him a consistent favorite with students. In addition to providing training and developing courseware for The Training Camp, he is the senior network engineer for The Client Server, Inc. in Bonita Springs, Florida, responsible for network infrastructure, security, and VoIP projects. Mike holds a Bachelor of Arts in anthropology, in addition to the following certifications: MCP+i, MCSA, MCSE (Security, Sec+, Net+), CCDA, CCNP, IPTX, C|EH, and CTP. Mike coauthored the popular CCNA Exam Cram 2, published in December 2005. vi Dedications This book is dedicated to my wife, Elke Haugen-Ranjbar, whose love, hard work, understanding, and support have made my home a dream come true. Should my children Thalia, Ariana, and Armando choose a life partner when they grow up, I wish they will make as good of a choice as I did. —Amir Ranjbar vii Acknowledgments I would like to thank the technical editors, Dave and Mike, for their valuable comments and feedback. Special thanks to Mary Beth Ray for her patience and understanding, and to Andrew Cupp for a well-done job. This book is the product of the hard work of a team and not just a few individuals. Managers, editors, coordinators, and designers: All of you, please accept my most sincere appreciation for your efforts and professional input. viii This Book Is Safari Enabled The Safari® Enabled icon on the cover of your favorite technology book means the book is available through Safari Bookshelf. When you buy this book, you get free access to the online edition for 45 days. Safari Bookshelf is an electronic reference library that lets you easily search thousands of technical books, find code samples, download chapters, and access technical information whenever and wherever you need it. To gain 45-day Safari Enabled access to this book: • Go to www.ciscopress.com/safarienabled • Complete the brief registration form • Enter the coupon code 73CA-7AVE-SIZ3-46EN-LGGK If you have difficulty registering on Safari Bookshelf or accessing the online edition, please e-mail [email protected]. ix Contents at a Glance Foreword xvii Introduction xviii Part I Voice over IP 3 Chapter 1 Cisco VoIP Implementations 5 Part II Quality of Service 55 Chapter 2 IP Quality of Service 57 Chapter 3 Classification, Marking, and NBAR 93 Chapter 4 Congestion Management and Queuing 123 Chapter 5 Congestion Avoidance, Policing, Shaping, and Link Efficiency Mechanisms 149 Chapter 6 Implementing QoS Pre-Classify and Deploying End-to-End QoS 177 Chapter 7 Implementing AutoQoS 201 Part III Wireless LAN 229 Chapter 8 Wireless LAN QoS Implementation 231 Chapter 9 Introducing 802.1x and Configuring Encryption and Authentication on Lightweight Access Points 255 Chapter 10 WLAN Management 287 Part IV Appendix 319 Appendix A Answers to the “Do I Know This Already?” Quizzes and Q&A Sections 321 Index 354