CCNA Routing and
Switching Study Guide
Chapters 7 & 21: Wide Area
Networks
Instructor & Todd Lammle
Chapter 21 objectives
The ICND2 topics covered in this chapter
include:
2
Chapter 21 objectives (con’t)
The ICND2 topics covered in this chapter
include:
3
New figure 7.1/21.1
New figure 7.2/21.2
New figure 7.3/21.3
WAN terms
WAN connection types
Broadband access using
cable or DSL
Cable network and terms
xDSL connection from
home user to central
office. All types of DSL are
layer 1 technologies.
PPPoE with ADSL
DTE-DCE-DTE WAN
DTE-DCE-DTE WAN connection: Clocking is typically provided
by the DCE network to routers. In nonproduction
environments, a DCE network is not always present.
Cisco’s HDLC frame format:
Each vendor’s HDLC has a proprietary data field to support
multiprotocol environments.
Configuring Cisco’s HDLC
proprietary WAN encapsulation
Corp(config)#int s0/0
Corp(config-if)#ip address [Link] [Link]
Corp(config-if)#no shut
Corp#sh int s0/0
Serial0/0 is up, line protocol is up
Hardware is PowerQUICC Serial
Internet address is [Link]/30
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
PPP protocol stack compared
to the OSI reference model.
PPP session establishment
PPP authentication
example
Failed PPP authentication
Mismatched WAN
encapsulations
Mismatched IP addresses
Example of using a VPN
Benefits of VPNs
Security
VPNs can provide very good security by using advanced encryption and
authentication protocols, which will help protect your network from
unauthorized access. IPsec and SSL fall into this category. Secure Sockets Layer
(SSL) is an encryption technology used with web browsers, which has native
SSL encryption, and are known as Web VPN. You can also use the Cisco
AnyConnect SSL VPN client installed on your PC to provide a SSL VPN solution,
as well as the Clientless Cisco SSL VPN.
Cost Savings
By connecting the corporate remote offices to their closest Internet provider,
and then creating a VPN tunnel with encryption and authentication, I gain a
huge savings over opting for traditional leased point-to-point lines. This also
permits higher bandwidth links and security, all for far less money than
traditional connections.
Scalability
VPNs scale very well to quickly bring up new offices or have mobile users
connect securely while traveling or when connecting from home.
Compatibility with broadband technology
For remote and traveling users and remote offices, any Internet access can
provide a connection to the corporate VPN. This allows users to take
advantage of the high-speed Internet access of DSL or cable modems.
Generic Routing Encapsulation
(GRE) tunnel structure
7.6 Branch Wan Challenges
IT Trends – Branch Challenges
Critical to your Business, WAN Bandwidth Expensive, Pressure Increasing
Cloud
Applications are Moving to the Data Center and Cloud
Internet Edge is Moving to the Branch
Branch Pressure to the WAN Data Center
CLOUD MOBILITY APPS
SaaS, Guest Wi-Fi, Video,
Google Docs, BYOD, VDI,
Office365 APP updates Backup
7.7
Intelligent WAN: Leveraging the Internet
Secure WAN Transport and Internet Access
Hybrid WAN
Transport
IPsec Secure
MPLS (IP-VPN) Private
Cloud
Virtual
Private
Cloud
Branch
Direct Internet
Internet
Public
Access Cloud
Saves customers money – 6 month ROI
Improves application response times
Enables cloud, mobility, and BYOD in the branch
7.8
AVC Private
Cloud
Internet
Virtual
Private
Cloud
3G/4G-LTE
Branch
MPLS Public
WAAS PfR Cloud
Transport Intelligent Path Application Secure
Independent Control Optimization Connectivity
Consistent operational model Application best path based on Application monitoring with Certified strong encryption
delay, loss, jitter, path preference Application Visibility and Comprehensive threat
Simple Provider migrations
Load Balancing for full utilization Control (AVC) defense with ASA and IOS
Scalable and Modular design
of all bandwidth Application Acceleration Firewall/IPS
DMVPN IPsec overlay design and bandwidth savings
Improved network availability Cloud Web Security (CWS)
with WAAS for scalable secure direct
Performance Routing (PfR)
Internet access
MLP network layout, figure 7.18
S0/0: [Link]/30 S0/0: [Link]/30
MLP:
Corp [Link]/24 SF
S0/1: [Link]/30 S0/0: [Link]/30
Figure 7.21 Enterprise-managed
VPNs
Figure 7.22: Provider-managed VPNs
Layer 2 MPLS VPN (VPLS and VPWS):
• Customer routers exchange routes directly.
• Some applications need Layer 2 connectivity to work.
Layer 3 MPLS VPN:
• Customer routers exchange routes with SP routers.
• It provides Layer 3 service across the backbone.
EBGP network layout, figure 7.25
AS=100
AS=1
[Link]
Lo0: [Link]
[Link] R1
Lo0: [Link]
ISP
[Link]
AS=200
[Link] Lo0: [Link]
R2
Written Labs and Review
Questions
– Read through the Exam Essentials section
together in class.
– Open your books and go through all the
written labs and the review questions.
– Review the answers in class.
32