Copyright Implementing Cisco IP Routing (ROUTE) Foundation Learning Guide Foundation learning for the ROUTE 642-902 Exam Diane Teare Copyright© 2010 Cisco Systems, Inc. Published by: Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review. Printed in the United States of America First Printing June 2010 Library of Congress Cataloging-in-Publication Data is on file. ISBN-13: 978-1-58705-882-0 Warning and Disclaimer This book is designed to provide information about Cisco routing. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information is provided on an “as is” basis. The authors, Cisco Press, and Cisco Systems, Inc. shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it. The opinions expressed in this book belong to the authors and are not necessarily those of Cisco Systems, Inc. Trademark Acknowledgments All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark. Corporate and Government Sales The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales, which may include electronic versions and/or custom covers and content particular to your business, training goals, marketing focus, and branding interests. For more information, please contact: U.S. Corporate and Government Sales 1-800-382-3419 Readers’ feedback is a natural continuation of this process. If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through e-mail at Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R) Dedications This book is dedicated to my inspirational husband, Allan Mertin, whose love and encouragement is so welcome; to our delightful and loving son, Nicholas, and his unending curiosity to discover everything about everything; and to my parents, Syd and Beryl, for their constant support and encouragement. About the Author Diane Teare is a professional in the networking, training, project management, and e-learning fields. She has more than 25 years of experience in designing, implementing, and troubleshooting network hardware and software, and has been involved in teaching, course design, and project management. She has extensive knowledge of network design and routing technologies, and is an instructor with one of the largest authorized Cisco Learning Partners. She was the director of e-learning for the same company, where she was responsible for planning and supporting all the company’s e-learning offerings in Canada, including Cisco courses. Diane has a bachelor’s degree in applied science in electrical engineering and a master’s degree in applied science in management science. She currently holds her Cisco Certified Network Professional (CCNP), Cisco Certified Design Professional (CCDP), and Project Management Professional (PMP) certifications. She co-authored the Cisco Press titles Designing Cisco Network Service Architectures (ARCH), Second Edition; Campus Network Design Fundamentals; the three editions of Authorized Self-Study Guide Building Scalable Cisco Internetworks (BSCI); and Building Scalable Cisco Networks. Diane edited the two editions of the Authorized Self-Study Guide Designing for Cisco Internetwork Solutions (DESGN) and Designing Cisco Networks. About the Contributor Catherine Paquet is a practitioner in the field of Internetworking, Network Security, and Security Financials. So far, she has published eight books with Cisco Press. Catherine has in-depth knowledge of security systems, remote access, and routing technology. She is a Cisco Certified Security Professional (CCSP), a Cisco Certified Network Professional (CCNP), and a Certified Cisco Systems Instructor (CCSI) with the largest Cisco training partner, Global Knowledge. Catherine teaches many Cisco security classes such as Securing Networks with ASA (SNAF,SNAA). She also lectures directly with Cisco Systems in emerging countries on the business case for network Security. Her most recent consulting projects include conducting security assessments, performing network designs, configuring and implementing security solutions such as firewalls, virtual private networks, web filters, and intrusion prevention solutions. About the Technical Reviewers Sonya Coker has worked in the Cisco Networking Academy program since 1999 when she started a local academy. She has taught student and instructor classes locally and internationally in topics ranging from IT Essentials to CCNP. As a member of the Cisco Networking Academy development team, she has provided subject matter expertise on new courses and course revisions. Jeremy Creech is a Learning and Development Manager for Cisco Systems with more than 13 years of experience in researching, implementing, and managing data and voice networks. Currently, he is a curriculum development manager for the Cisco Networking Academy Program, leveraging his experience as the Content Development Manager for CCNP Certification exams. He has recently completed curriculum development initiatives for ROUTE, SWITCH, TSHOOT and CCNA Security. Scott Hogg has been a network computing consultant for more than 18 years. He has a B.S. in computer science, a M.S. in telecommunications, along with his CCIE (No. 5133) and CISSP (No. 4610). For the past ten years, Scott has been researching IPv6 technologies and recently has helped many organizations with their IPv6 planning. Scott has given numerous presentations and demonstrations of IPv6 technologies and authored the book titled IPv6 Security. He is also currently the Chair of the Rocky Mountain IPv6 Task Force. Rick Graziani teaches computer science and computer networking courses at Cabrillo College in Aptos, California. Rick has worked and taught in the computer networking and information technology field for almost 30 years. Before teaching, Rick worked in IT for various companies, including Santa Cruz Operation, Tandem Computers, and Lockheed Missiles and Space Corporation. He holds a Master of Arts degree in computer science and systems theory from California State University Monterey Bay. Rick also does consulting work for Cisco Systems and other companies. When Rick is not working, he is most likely surfing. Rick is an avid surfer who enjoys surfing at his favorite Santa Cruz breaks. David Kotfila, CCNA, CCDA, CCNP, CCDP, CCSP, CCVP, CCAI, teaches in the Computer Science department at Rensselaer Polytechnic Institute, Troy, New York. More than 550 of his students have received their CCNA, 200 have received their CCNP, and 14 have received their CCIE. David likes to spend time with his wife, Kate, his daughter, Charis, and his son, Chris. David enjoys hiking, kayaking, and reading. Wayne Lewis has been a faculty member at Honolulu Community College since receiving a Ph.D. in math from the University of Hawaii at Manoa in 1992, specializing in finite rank torsion-free modules over a Dedekind domain. Since 1992, he has served as a math instructor, as the state school-to-work coordinator, and as the legal main contact for the Cisco Academy Training Center (CATC). Dr. Lewis manages the CATC for CCNA, CCNP, and Security, based at Honolulu Community College, which serves Cisco Academies at universities, colleges, and high schools in Hawaii, Guam, and American Samoa. Since 1998, he has taught routing, multilayer switching, remote access, troubleshooting, network security, and wireless networking to instructors from universities, colleges, and high schools in Australia, Britain, Canada, Central America, China, Germany, Hong Kong, Hungary, Indonesia, Italy, Japan, Korea, Mexico, Poland, Singapore, Sweden, Taiwan, and South America, both onsite and at Honolulu Community College. Jim Lorenz is an instructor and curriculum developer for the Cisco Networking Academy Program. Jim has co-authored Lab Companions for the CCNA courses and the textbooks for the Fundamentals of UNIX course. He has more than 25 years of experience in information systems, ranging from programming and database administration to network design and project management. Jim has developed and taught computer and networking courses for both public and private institutions. As the Cisco Academy Manager at Chandler- Gilbert College in Arizona, he was instrumental in starting the Information Technology Institute (ITI) and developed several certificates and degree programs. Jim co-authored the CCNA Discovery online academy courses, Networking for Home and Small Businesses, and Introducing Routing and Switching in the Enterprise, with Allan Reid. Most recently, he developed the hands-on labs for the CCNA Security course and the CCNPv6 Troubleshooting course. Snezhy Neshkova is a Cisco Certified Internetwork Expert (CCIE No. 11931) since 2003. She has more than 20 years of networking experience, including IT field services and support, management of information systems, and all aspects of networking education. Snezhy has developed and taught CCNA and CCNP networking courses to instructors from universities, colleges, and high schools in Canada, the United States, and Europe. Snezhy’s passion is to empower students to become successful and compassionate lifelong learners. Snezhy holds a Master of Science degree in computer science from Technical University, Sofia, Bulgaria. Allan Reid (CCNA, CCNA-W, CCDA, CCNP, CCDP, CCAI, MLS) is a professor in information and communications engineering technology and the lead instructor at the Centennial College CATC in Toronto, Canada. He has developed and taught networking courses for both private and public organizations and has been instrumental in the development and implementation of numerous certificate, diploma, and degree programs in networking. Outside of his academic responsibilities, Allan has been active in the computer and networking fields for more than 25 years and is currently a principal in a company specializing in the design, management, and security of network solutions for small and medium-sized companies. Allan is a curriculum and assessment developer for the Cisco Networking Academy program and has authored several Cisco Press titles. Jerold Swan, CCIE No. 17783, CCSP, works as a senior network engineer for the Southern Ute Indian Tribe Growth Fund in southwest Colorado. Before that, he was a Cisco instructor for Global Knowledge. He has also worked in IT in the service provider and higher-education sectors. His areas of interest include routing protocols, security, and network monitoring. He is a graduate of Stanford University. His other interests include trail running, mountain biking, and volunteer search and rescue. Bob Vachon, CCNP, CCNA-S, CCAI, is a professor in the Computer Systems Technology program at Cambrian College and has more than 20 years of experience in the networking field. In 2001, he began collaborating with the Cisco Networking Academy on various curriculum development projects, including CCNA, CCNA Security, and CCNP courses. For 3 years, Bob was also part of an elite team authoring CCNP certification exam questions. In 2007, Bob co-authored the CCNA Exploration: Accessing the WAN Cisco Press book. Acknowledgments I want to thank many people for helping to put this book together: The Cisco Press team: Mary Beth Ray, the executive editor, coordinated the whole project, steered the book through the necessary processes, and understood when the inevitable snags appeared. Patrick Kanouse, the managing editor, brought the book to production. Vanessa Evans was once again instrumental in organizing the logistics and administration. Dayna Isley, the development editor, has been invaluable in coordinating and producing a high-quality manuscript. I also want to thank Mandie Frank, the project editor, and Keith Cline, the copy editor, for their excellent work in steering this book through the editorial process. The Cisco ROUTE course development team: Many thanks to the members of the team who developed the ROUTE course. The contributing author: I want to thank my friend and colleague, Catherine Paquet, for agreeing to contribute a chapter to this book, enriching it with her expertise and ensuring that the schedule did not suffer. I owe you, Catherine! The technical reviewers: I want to thank the technical reviewers of this book for their thorough, detailed review and valuable input. Special thanks to Bob Vachon for his invaluable (and tedious, I’m sure) screen- capture work. My family: Of course, this book would not have been possible without the endless understanding and patience of my family. They have always been there to motivate and inspire me. I am forever grateful. Icons Used in This Book [View full size image] Command Syntax Conventions The conventions used to present command syntax in this book are the same conventions used in the IOS Command Reference. The Command Reference describes these conventions as follows: • Boldface indicates commands and keywords that are entered literally as shown. In actual configuration examples and output (not general command syntax), boldface indicates commands that are manually input by the user (such as a show command). • Italic indicates arguments for which you supply actual values. • Vertical bars (|) separate alternative, mutually exclusive elements. • Square brackets ([ ]) indicate an optional element. • Braces ({ }) indicate a required choice. • Braces within brackets ([{ }]) indicate a required choice within an optional element. Chapter 1. Routing Services This chapter covers the following topics: • Complex Enterprise Network Frameworks, Architectures, and Models • Creating, Documenting, and Executing an Implementation Plan • Reviewing IP Routing Principles This chapter first describes the frameworks, architectures, and models used in complex enterprise network designs. The next section explores the process of creating, documenting, and executing a network implementation plan. The chapter concludes with a review of IP routing principles. Complex Enterprise Network Frameworks, Architectures, and Models This section introduces converged networks and the variety of traffic within them. To accommodate the requirements of such networks, Cisco has introduced the Intelligent Information Network (IIN) strategy, along with the Service-Oriented Network Architecture (SONA) framework, which guides the evolution of enterprise networks toward an IIN, both of which are described in this section. This section also introduces the components of the Cisco Enterprise Architecture, and describes the traditional hierarchical network model and the Enterprise Composite Network Model. Traffic Conditions in a Converged Network A converged network is one in which data, voice, and video traffic coexist on a single network. When voice and video are transported across a network, the voice and video are seen by the network as being just like any other application data. Converged networks contain a variety of different types of traffic, including the following: • Voice and video traffic— Examples include IP telephony, video broadcast, and conferencing. • Voice applications traffic— Generated by voice-related applications, such as contact centers. • Mission-critical traffic— Generated by applications critical to an organization (for example, information generated by a stock exchange application at a finance company, patient records at a hospital, and so forth). • Transactional traffic— Generated by applications such as those for e-commerce. • Routing protocol traffic— Data from whichever routing protocols are running in the network, such as the Routing Information Protocol (RIP), Open Shortest Path First Protocol (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Intermediate System-to-Intermediate System Protocol (IS-IS), and Border Gateway Protocol (BGP). • Network management traffic— Including information about the status of the network and its devices. Note Although IS-IS is not covered further in this book, it is included in this chapter for completeness. The requirements on the network differ significantly depending on the mix of traffic types, especially in terms of security and performance. For example, voice and video performance requirements include constant bandwidth and low delay and jitter (variation in delay), whereas transactional traffic requires high reliability and security with relatively low bandwidth. Voice applications, such as IP telephony, also require high reliability and availability because users expect to hear a “dial tone” sound when they pick up their phone in an IP network, just as they do in a traditional telephone network. Video traffic is frequently carried as IP multicast traffic, requiring multicast features to be enabled on the network. To meet these traffic requirements, converged networks use quality of service (QoS) mechanisms so that, for example, voice and video traffic are given priority over web-based traffic. Several security strategies, such as device hardening with strict access control and authentication, intrusion protection, intrusion detection, and traffic protection with encryption, can minimize or possibly eliminate network security threats. Security is a key issue in all networks and becomes even more important in wireless networks. Cisco IIN and SONA Framework To accommodate today’s and tomorrow’s network requirements, the Cisco vision of the future includes the IIN, a strategy that addresses how the network is integrated with businesses and business priorities. The Cisco SONA is an architectural framework that illustrates how to build integrated systems and guides the evolution of enterprise networks toward an IIN. Cisco IIN The IIN encompasses the following features: • Integration of networked resources and information assets that have been largely unlinked— The modern converged networks with integrated voice, video, and data require that IT departments (and other departments that were traditionally responsible for other technologies) more closely link the IT infrastructure with the network. • Intelligence across multiple products and infrastructure layers— The intelligence built in to each component of the network is extended networkwide and applies end to end. • Active participation of the network in the delivery of services and applications— With added intelligence, the IIN makes it possible for the network to actively manage, monitor, and optimize service and application delivery across the entire IT environment. The IIN offers much more than basic connectivity, bandwidth for users, and access to applications. It offers an end-to-end functionality and centralized, unified control that promotes true business transparency and agility. With the IIN, Cisco is helping organizations to address new IT challenges, such as the deployment of service- oriented architectures, web services, and virtualization (as described in the upcoming “Phase 2” bullet). The IIN technology vision offers an evolutionary approach that consists of three phases in which functionality can be added to the infrastructure as required, as follows: • Phase 1: Integrated transport— Everything (data, voice, and video) consolidates onto an IP network for secure network convergence. By integrating data, voice, and video transport into a single, standards-based, modular network, organizations can simplify network management and generate enterprisewide efficiencies. Network convergence also lays the foundation for a new class of IP-enabled applications, delivered through Cisco Unified Communications solutions. Note Cisco Unified Communications is the name, launched in March 2006, for the entire range of what were previously known as Cisco IP Communications products. These include all call control, conferencing, voice-mail and messaging, customer contact, IP phone, video telephony, videoconferencing, rich media clients, and voice application products. • Phase 2: Integrated services— When the network infrastructure is converged, IT resources can be pooled and shared, or virtualized, to flexibly address the changing needs of the organization. Integrated services help to unify common elements, such as storage and data center server capacity. By extending this virtualization concept to encompass server, storage, and network elements, an organization can transparently use all of its resources more efficiently. Business continuity is also enhanced because in the event of a local systems failure, shared resources across the IIN can provide needed services. • Phase 3: Integrated applications— This phase focuses on making the network application-aware so that it can optimize application performance and more efficiently deliver networked applications to users. With Application-Oriented Networking (AON) technology, Cisco has entered this third IIN phase. In addition to capabilities such as content caching, load balancing, and application-level security, the Cisco AON makes it possible for the network to simplify the application infrastructure by integrating intelligent application message handling, optimization, and security into the existing network. Cisco SONA Framework The Cisco SONA architectural framework guides the evolution of enterprise networks toward an IIN. Using the SONA framework, enterprises can improve flexibility and increase efficiency by optimizing applications, business processes, and resources to enable IT to have a greater impact on business. The SONA framework uses the extensive product-line services, proven architectures, and experience of Cisco and its partners to help enterprises achieve their business goals. The SONA framework, shown in Figure 1-1, shows how integrated systems can allow a dynamic, flexible architecture and provide for operational efficiency through standardization and virtualization. In this framework, the network is the common element that connects and enables all components of the IT infrastructure. Figure 1-1. Cisco SONA Framework. The SONA framework outlines the following three layers: