£29.99

Description

Contents

Introduction xix Part I: Network Fundamentals CHAPTER 1 IPv4 Addressing-How It Works 1 What Are IPv4 Addresses Used For? 1 What Does an IPv4 Address Look Like? 2 Network and Subnetwork Masks 2 Ways to Write a Network or Subnet Mask 3 Network, Node, and Broadcast Addresses 3 Classes of IPv4 Addresses 4 Network vs. Node (Host) Bits 5 RFC (Private) 1918 Addresses 6 Local vs. Remote Addresses 7 Classless Addressing 7 Lessons Learned 9 CHAPTER 2 How to Subnet IPv4 Addresses 11 Subnetting a Class C Network Using Binary 12 Subnetting a Class B Network Using Binary 15 Binary ANDing 17 So Why AND? 19 Shortcuts in Binary ANDing 20 CHAPTER 3 Variable Length Subnet Masking (VLSM) 23 IP Subnet Zero 23 VLSM Example 24 Step 1: Determine How Many H Bits Will Be Needed to Satisfy the Largest Network 25 Step 2: Pick a Subnet for the Largest Network to Use 25 Step 3: Pick the Next Largest Network to Work With 26 Step 4: Pick the Third Largest Network to Work With 28 Step 5: Determine Network Numbers for Serial Links 30 CHAPTER 4 Route Summarization 33 Example for Understanding Route Summarization 33 Step 1: Summarize Winnipeg's Routes 34 Step 2: Summarize Calgary's Routes 35 Step 3: Summarize Edmonton's Routes 35 Step 4: Summarize Vancouver's Routes 36 Route Summarization and Route Flapping 38 Requirements for Route Summarization 38 CHAPTER 5 IPv6 Addressing-How It Works 39 IPv6: A Very Brief Introduction 39 What Does an IPv6 Address Look Like? 40 Reducing the Notation of an IPv6 Address 41 Rule 1: Omit Leading 0s 41 Rule 2: Omit All-0s Hextet 42 Combining Rule 1 and Rule 2 42 Prefix Length Notation 43 IPv6 Address Types 44 Unicast Addresses 45 Multicast Addresses 48 Anycast Addresses 50 CHAPTER 6 Cables and Connections 51 Connecting a Rollover Cable to Your Router or Switch 51 Using a USB Cable to Connect to Your Router or Switch 51 Terminal Settings 52 LAN Connections 53 Serial Cable Types 53 Which Cable to Use? 55 ANSI/TIA Cabling Standards 56 T568A Versus T568B Cables 57 CHAPTER 7 The Command-Line Interface 59 Shortcuts for Entering Commands 59 Using the Tab Key to Complete Commands 60 Console Error Messages 60 Using the Question Mark for Help 60 enable Command 61 exit Command 61 end Command 61 disable Command 61 logout Command 62 Setup Mode 62 Keyboard Help 62 History Commands 63 terminal Commands 64 show Commands 64 Using the Pipe Parameter ( | ) with the show or more Commands 64 Using the no and default Forms of Commands 66 Part II: LAN Switching Technologies CHAPTER 8 Configuring a Switch 67 Help Commands 68 Command Modes 68 Verifying Commands 68 Resetting Switch Configuration 69 Setting Host Names 69 Setting Passwords 69 Setting IP Addresses and Default Gateways 70 Setting Interface Descriptions 70 The mdix auto Command 70 Setting Duplex Operation 71 Setting Operation Speed 71 Managing the MAC Address Table 72 Configuration Example 72 CHAPTER 9 VLANs 75 Creating Static VLANs 75 Creating Static VLANs Using VLAN Configuration Mode 75 Assigning Ports to VLANs 76 Using the range Command 76 Configuring a Voice VLAN 76 Configuring Voice and Data with Trust 77 Configuring Voice and Data Without Trust 78 Verifying VLAN Information 78 Saving VLAN Configurations 79 Erasing VLAN Configurations 79 Configuration Example: VLANs 80 2960 Switch 80 CHAPTER 10 VLAN Trunking Protocol and Inter-VLAN Communication 83 Dynamic Trunking Protocol (DTP) 83 Setting the VLAN Encapsulation Type 84 VLAN Trunking Protocol (VTP) 84 Verifying VTP 86 Inter-VLAN Communication Using an External Router: Router-on-a-Stick 87 Inter-VLAN Communication on a Multilayer Switch Through a Switch Virtual Interface 88 Removing L2 Switchport Capability of an Interface on an L3 Switch 88 Configuring Inter-VLAN Communication on an L3 Switch 88 Inter-VLAN Communication Tips 88 Configuration Example: Inter-VLAN Communication 89 ISP Router 89 CORP Router 90 L2Switch2 (Catalyst 2960) 92 L3Switch1 (Catalyst 3560/3650/3750) 94 L2Switch1 (Catalyst 2960) 95 CHAPTER 11 Spanning Tree Protocol 97 Spanning Tree Protocol Definition 97 Enabling Spanning Tree Protocol 98 Changing the Spanning-Tree Mode 99 BPDU Guard (3650/9xxx Series) 99 Configuring the Root Switch 100 Configuring a Secondary Root Switch 100 Configuring Port Priority 100 Configuring the Path Cost 101 Configuring the Switch Priority of a VLAN 101 Configuring STP Timers 102 Configuring Optional Spanning-Tree Features 102 PortFast 102 BPDU Guard (2xxx/Older 3xxx Series) 103 Enabling the Extended System ID 103 Verifying STP 104 Troubleshooting Spanning Tree Protocol 104 Configuration Example: PVST+ 104 Core Switch (3650) 105 Distribution 1 Switch (3650) 106 Distribution 2 Switch (3650) 106 Access 1 Switch (2960) 107 Access 2 Switch (2960) 107 Spanning-Tree Migration Example: PVST+ to Rapid-PVST+ 108 Access 1 Switch (2960) 108 Access 2 Switch (2960) 108 Distribution 1 Switch (3650) 109 Distribution 2 Switch (3650) 109 Core Switch (3650) 109 CHAPTER 12 EtherChannel 111 EtherChannel 111 Interface Modes in EtherChannel 111 Default EtherChannel Configuration 112 Guidelines for Configuring EtherChannel 112 Configuring Layer 2 EtherChannel 113 Configuring Layer 3 EtherChannel 114 Configuring EtherChannel Load Balancing 114 Configuring LACP Hot-Standby Ports 115 Monitoring and Verifying EtherChannel 116 Configuration Example: EtherChannel 117 DLSwitch (3560 or 9300) 117 ALSwitch1 (2960 or 9200) 118 ALSwitch2 (2960 or 9200) 119 CHAPTER 13 Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP) 121 Cisco Discovery Protocol 121 Configuring CDP 121 Verifying and Troubleshooting CDP 122 CDP Design Tips 122 Link Layer Discovery Protocol (802.1AB) 123 Configuring LLDP (802.1AB) 123 Verifying and Troubleshooting LLDP 124 Part III: Routing Technologies CHAPTER 14 Configuring a Cisco Router 125 Router Modes 126 Entering Global Configuration Mode 126 Configuring a Router Name 126 Configuring Passwords 126 Password Encryption 127 Interface Names 127 Moving Between Interfaces 131 Configuring a Serial Interface 132 Assigning an IPv4 Address to a Fast Ethernet Interface 132 Assigning an IPv4 Address to a Gigabit Ethernet Interface 132 Assigning IPv6 Addresses to Interfaces 133 Creating a Message-of-the-Day Banner 133 Creating a Login Banner 134 Mapping a Local Host Name to a Remote IP Address 134 The no ip domain-lookup Command 134 Working with DNS on a Router 134 The logging synchronous Command 135 The exec-timeout Command 136 Saving Configurations 136 Erasing Configurations 136 The write Command 137 Verifying Your Configurations Using show Commands 137 EXEC Commands in Configuration Mode: The do Command 138 Configuration Example: Basic Router Configuration 138 Boston Router 138 CHAPTER 15 Static Routing 141 Configuring an IPv4 Static Route 141 Static Routes and Recursive Lookups 142 The permanent Keyword 142 Floating Static Routes in IPv4 and Administrative Distance 143 Configuring an IPv4 Default Route 144 Verifying IPv4 Static Routes 144 Configuration Example: IPv4 Static Routes 144 Ketchikan Router 145 Juneau Router 145 Sitka Router 146 Configuring an IPv6 Static Route 146 Floating Static Routes in IPv6 147 Configuring an IPv6 Default Route 147 Verifying IPv6 Static Routes 147 CHAPTER 16 Open Shortest Path First (OSPF) 149 OSPFv2 Versus OSPFv3 149 Configuring OSPF 150 Using Wildcard Masks with OSPF Areas 150 Loopback Interfaces 152 Router ID 152 DR/BDR Elections 153 Timers 153 Verifying OSPFv2 Configurations 153 Troubleshooting OSPFv2 154 Configuration Example: Single-Area OSPF 154 Austin Router 155 Houston Router 156 Galveston Router 157 Part IV: IP Services CHAPTER 17 DHCP 159 Configuring a DHCP Server on an IOS Router 159 Using Cisco IP Phones with a DHCP Server 160 Verifying and Troubleshooting DHCP Configuration 160 Configuring a DHCP Helper Address 161 Configuring a DHCP Client on a Cisco IOS Software Ethernet Interface 162 Configuration Example: DHCP 162 Edmonton Router 162 Gibbons Router 164 CHAPTER 18 Network Address Translation (NAT) 165 Private IP Addresses: RFC 1918 165 Configuring Dynamic NAT: One Private to One Public Address Translation 165 Configuring PAT: Many Private to One Public Address Translation 167 Configuring Static NAT: One Private to One Permanent Public Address Translation 169 Verifying NAT and PAT Configurations 170 Troubleshooting NAT and PAT Configurations 171 Configuration Example: PAT 171 ISP Router 171 Company Router 172 CHAPTER 19 Configuring Network Time Protocol (NTP) 175 NTP Configuration 175 NTP Design 176 Securing NTP 177 Enabling NTP Authentication 177 Limiting NTP Access with Access Lists 178 Verifying and Troubleshooting NTP 178 Setting the Clock on a Router 179 Using Time Stamps 182 Configuration Example: NTP 182 Core1 Router 183 Core2 Router 184 DLSwitch1 185 DLSwitch2 185 ALSwitch1 186 ALSwitch2 186 Part V: Security Fundamentals CHAPTER 20 Layer Two Security Features 187 Setting Passwords on a Switch 187 Configuring Static MAC Addresses 188 Configuring Switch Port Security 188 Configuring Sticky MAC Addresses 189 Verifying Switch Port Security 189 Recovering Automatically from Error-Disabled Ports 190 Verifying Autorecovery of Error-Disabled Ports 190 Configuring DHCP Snooping 191 Verifying DHCP Snooping 192 Configuring Dynamic ARP Inspection (DAI) 193 Verifying Dynamic ARP Inspection 193 Configuration Example: Switch Security 194 CHAPTER 21 Managing Traffic Using Access Control Lists (ACLs) 197 Access List Numbers 197 Using Wildcard Masks 198 ACL Keywords 198 Creating Standard ACLs 198 Applying Standard ACLs to an Interface 199 Verifying ACLs 200 Removing ACLs 200 Creating Extended ACLs 200 Applying Extended ACLs to an Interface 201 The established Keyword 201 The log Keyword 202 Creating Named ACLs 203 Using Sequence Numbers in Named ACLs 203 Removing Specific Lines in Named ACLs Using Sequence Numbers 204 Sequence Number Tips 204 Including Comments About Entries in ACLs 205 Restricting Virtual Terminal Access 206 Tips for Configuring ACLs 206 IPv6 ACLs 207 Verifying IPv6 ACLs 207 Configuration Examples: IPv4 ACLs 208 Configuration Examples: IPv6 ACLs 210 CHAPTER 22 Device Monitoring and Hardening 213 Device Monitoring 213 Configuration Backups 213 Implementing Logging 214 Configuring Syslog 215 Syslog Message Format 215 Syslog Severity Levels 216 Syslog Message Example 216 Device Hardening 217 Configuring Passwords 217 Password Encryption 218 Password Encryption Algorithm Types 218 Configuring SSH 219 Verifying SSH 220 Restricting Virtual Terminal Access 220 Disabling Unneeded Services 221 Part VI: Wireless Technologies CHAPTER 23 Configuring and Securing a WLAN AP 223 Initial Setup of a Wireless LAN Controller (WLC) 223 Monitoring the WLC 229 Configuring a VLAN (Dynamic) Interface 230 Configuring a DHCP Scope 234 Configuring a WLAN 237 Defining a RADIUS Server 239 Exploring Management Options 242 Configuring a WLAN Using WPA2 PSK 246 Part VII: Appendices APPENDIX A How to Count in Decimal, Binary, and Hexadecimal 251 How to Count in Decimal 251 How to Count in Binary 253 How to Count in Hexadecimal 254 Representing Decimal, Binary, and Hexadecimal Numbers 256 APPENDIX B How to Convert Between Number Systems 259 How to Convert from Decimal to Binary 259 How to Convert from Binary to Decimal 260 How to Convert from Decimal IP Addresses to Binary and from Binary IP Addresses to Decimal 261 A Bit of Perspective 262 How to Convert from Hexadecimal to Binary 262 How to Convert from Binary to Hexadecimal 263 How to Convert from Decimal to Hexadecimal 264 How to Convert from Hexadecimal to Decimal 265 APPENDIX C Binary/Hex/Decimal Conversion Chart 267 APPENDIX D Create Your Own Journal Here 275 9780135937822 TOC 10/31/2019

Back