Network Design
Chapter 4
Designing Remote Connectivity
Introduction to WANs
A WAN is a data communications network that covers a relatively broad geographic area. A WAN
typically uses the transmission facilities provided by service providers(SP) (also called carriers), such
as telephone companies.
Switches, or concentrators, connect the WAN links, relay information through the WAN, and enable
the services it provides. A network provider often charges users a fee, called a tariff, for the services
provided by the WAN. Therefore, WAN communication is often known as a service.
Recall that the purpose of the Cisco Enterprise architecture is to modularize the enterprise
network. All WAN connections are concentrated in a single functional area: the Enterprise Edge.
A WAN provides the Enterprise Edge with access to remote sites and the outside world. Using
various Layer 2 and Layer 3 technologies, WANs operate between the Enterprise Edge and the
Service Provider Edge.
Enterprise Edge WAN Design Methodology
The network designer should follow these steps when planning and designing the Enterprise Edge
based on the PPDIOO methodology:
Analyzing customer requirements: The initial step in the design methodology is to analyze the
requirements of the network and its users, including the type of applications, the traffic volume,
and traffic patterns. User needs continually change in response to changing business conditions
and changing technology. For example, as more voice and video-based network applications
become available, there is pressure to increase network bandwidth.
Characterizing the existing network and sites: The second step is to analyze the existing
networking infrastructure and sites, including the technology used and the location of hosts,
servers, terminals, and other end nodes. Together with the network’s physical description, the
analysis should evaluate the possibility of extending the network to support new sites, new
features, or the reallocation of existing nodes. For example, the future integration of data and
telephone systems requires considerable changes in the network’s configuration. In this case, a
detailed evaluation of current options is important.
Designing the network topology and solutions: The final step in the design methodology is to
develop the overall network topology and its appropriate services, based on the availability of
technology, and taking into account the projected traffic pattern, technology performance
constraints, and network reliability. The design document describes a set of discrete functions
performed by the Enterprise Edge modules and the expected level of service provided by each
selected technology, as dictated by the SP.
Compiled By Chalachew A. 1|Page
Network Design
Planning and designing WAN networks involves a number of trade-offs, including the following:
Application aspects of the requirements driven by the performance analysis
Technical aspects of the requirements dealing with the geographic regulations and the
effectiveness of the selected technology
Cost aspects of the requirements; costs include those of the equipment and of the owned or leased
media or communication channel.
WAN connections are typically characterized by the cost of leasing WAN infrastructure and
transmission media from an SP. WAN designs must therefore tradeoff between the cost of bandwidth
and the bandwidth efficiency.
The network’s design should also be adaptable for the inclusion of future
technologies and should not include any design elements that limit the adoption
of new technologies as they become available. There might be trade-offs
between these considerations and cost throughout the network design and
implementation. For example, many new internetworks are rapidly adopting VoIP
technology. Network designs should be able to support this technology without
requiring a substantial upgrade by provisioning hardware and software that have
options for expansion and upgradeability.
Application Requirements of WAN Design
Just as application requirements drive the Enterprise Campus design (as
illustrated in Chapter 3,
“Designing Basic Campus and Data Center Networks”), they also affect the
Enterprise Edge WAN design. Application availability is a key user requirement;
the chief components of application availability are response time, throughput,
packet loss, and reliability. Table 4.1 analyzes these components, which are
discussed in the following sections.
Table 4.1Application Requirements on the WAN
Compiled By Chalachew A. 2|Page
Network Design
Enterprise Edge WAN Technologies
WAN Interconnections
Figure 4-1 illustrates the three ways that WAN technologies connect the Enterprise Edge modules with
the outside world, represented by the service provider network. Typically, the intent is to provide the
following connections:
Connectivity between the Enterprise Edge modules and the Internet Service Provider (ISP)
Edge module
Connectivity between Enterprise sites across the ISP network
Connectivity between Enterprise sites across the SP or public switched telephone network
(PSTN) carrier network
Compiled By Chalachew A. 3|Page
Network Design
Figure 4-1: Different Types of WAN Connections Are Appropriate for Different Uses
WAN connections can be point-to-point between two locations or connections to a multipoint
WAN service offering, such as a Frame Relay or Multiprotocol Label Switching (MPLS) network.
NOTE:The available service provider offerings often limit designers and thus directly affect
the WAN selection process. Review the availability of offerings from multiple service providers
to support your WAN design.
Traditional WAN Technologies
Traditional WAN technologies include the following:
Leased lines: Point-to-point connections indefinitely reserved for transmissions, rather than used
only when transmission is required. The carrier establishes the connection either by dedicating a
Compiled By Chalachew A. 4|Page
Network Design
physical wire or by delegating a channel using frequency division multiplexing or time-division
multiplexing (TDM). Leased-line connections usually use synchronous transmission.
Circuit-switched networks: A type of network that, for the duration of the connection, obtains
and dedicates a physical path for a single connection between two network endpoints. Ordinary
voice phone service over the PSTN is circuit-switched; the telephone company reserves a specific
physical path to the number being called for the call’s duration. During that time, no one else can
use the physical lines involved. Other circuit-switched examples include asynchronous serial
transmission and ISDN.
Packet-switched and cell-switched networks: A carrier creates permanent virtual circuits (PVC)
or switched virtual circuits (SVC) that deliver packets of data among customer sites. Users share
common carrier resources and can use different paths through the WAN (for example, when
congestion or delay is encountered). This allows the carrier to use its infrastructure more
efficiently than it can with leased point-to-point links. Examples of packet-switched networks
include X.25, Frame Relay, and Switched Multimegabit Data Service.
Leased lines and circuit-switched networks offer users dedicated bandwidth that other users cannot
take. In contrast, packet-switched networks have traditionally offered more flexibility and used
network bandwidth more efficiently than circuit-switched networks. Cell switching combines some
aspects of circuit switching and packet switching to produce networks with low latency and high
throughput.
WAN transport technology
Table 4-2 compares various WAN technologies, based on the main factors that influence technology
selection. This table provides typical baseline characteristics to help you compare the performance and
features offered by different technologies. Often, the offerings of the service provider limit your
technology decisions.
Note: Some WAN technology characteristics differ between service providers
Technology bandw Latency Connect traffic Initial reliability
idth and Jitter Time Cost
TDM (leased line) M L L M M M
ISDN L M/H M M L M
Frame Relay L L L M M M
Compiled By Chalachew A. 5|Page
Network Design
ATM M/H L L M M H
MPLS M/H L L M M H
Metro Ethernet M/H L L M M H
DSL L/M M/H L L L M
Cable modem L/M M/H L L M L
Wireless L/M M/H L L M L
SONET/SDH H L L M H H
DWDM H L L M H H
Dark Fiber H L L M H H
L = low, M = medium, H = high
These technologies are introduced in the following sections.
TDM (Leased Lines): TDM is a type of digital multiplexing in which pulses representing bits
from two or more channels are interleaved, on a time basis. Rather than using bandwidth only as
required, TDM indefinitely reserves point-to-point connection bandwidth for transmissions.
ISDN: ISDN is a system of digital phone connections that has been available as a communications
standard since 1984. This system allows voice and data to be transmitted simultaneously across the
world using end-to-end digital connectivity.
ISDN connectivity offers increased bandwidth, reduced call setup time, reduced latency, and lower
signal-to-noise ratios, compared to analog [Link], because the industry is moving toward
using broadband technologies—such as Digital Subscriber Line (DSL), cable, and public wireless—to
IP security (IPsec) VPNs, ISDN presents an effective solution only for remote-user applications where
broadband technologies are not available.
Frame Relay: Frame Relay is an example of a packet-switched technology for connecting devices
on a WAN that has been deployed since the late 1980s. Frame Relay is an industry-standard
networking protocol that handles multiple virtual circuits (VC) using a derivation of High-Level Data
Link Control (HDLC) encapsulation between connected [Link] Relay networks transfer data
using one of two connection types:PVCs, which are permanent connections; and SVCs, which are
temporary connections created for each data transfer and then terminated when the data transfer is
complete. SVCs are not widely used.
Asynchronous Transfer Mode: ATM uses cell-switching technology to transmit fixed-sized
(53-byte) [Link] ATM cell can be processed asynchronously (relative to other related cells),
queued, and multiplexed over the transmission path. ATM provides support for multiple Quality of
Service (QoS) classes to meet delay and loss requirements.
Compiled By Chalachew A. 6|Page
Network Design
MPLS:MPLS is an Internet Engineering Task Force (IETF) standard architecture that combines the
advantages of Layer 3 routing with the benefits of Layer 2 switching. MPLS is a connection-oriented
technology whose operation is based on a label attached to each packet as it enters the MPLS
[Link] enables scalable VPNs, end-to-end QoS, and other IP services that allow efficient
utilization of existing networks with simpler configuration and management and quicker fault
correction.
Metro Ethernet: Metro Ethernet uses Ethernet technology to deliver cost-effective, high-speed
connectivity for MAN and WAN [Link] providers offer Metro Ethernet services to
deliver converged voice, video, and data networking. Metro Ethernet provides a data-optimized
connectivity solution for the MAN and WAN based on Ethernet technology widely deployed within
the enterprise LAN. It also supports high-performance networks in the metropolitan area, meeting the
increasing need for faster data speeds and more stringent QoS requirements.
Where traditional TDM access is rigid, complex, and costly to provision, Metro
Ethernet services
provide scalable bandwidth in flexible increments, simplified management, and
faster and lowercost provisioning. This simple, easy-to-use technology appeals to
customers who are already using Ethernet on their LANs.
DSL Technologies: DSL delivers high bandwidth over traditional telephone copper lines. It works
by way of two modems at either end of the wire. Like dialup, cable, wireless, and T1, DSL is a
transmission technology that enables SPs to deliver a wide variety of services to their customers.
These can include premium, high-speed Internet and intranet access, voice, VPNs, videoconferencing,
and video on demand. The two basic DSL categories are Asymmetric DSL (ADSL) and Symmetric
DSL (SDSL).
ADSL can be used only over shortdistances (typically less than 2 km).With it, traffic moves
upstream and downstream at different speeds. With SDSL, traffic in either
direction travels at the same speed over a single copper [Link] is
sometimes referred to as single-pair DSL.
Cable modem Technology: The cable technology for data transport uses coaxial cable media
over cable distribution systems. The cable network is a high-speed copper platform that supports
analog and digital video services over coaxial [Link] technology is a good option for
environments where cable television is widely deployed. Cable service providers support both
residential and commercial customers. Cable modems are installed at the customer premises to support
small businesses, branch offices, and corporate telecommuters.
Compiled By Chalachew A. 7|Page
Network Design
Wireless Technologies: With wireless technologies, networks do not have the limitations of
wires or cables; instead, electromagnetic waves carry the RF [Link] examples of wireless
equipment include cellular phones and pagers, global positioning systems, cordless computer
peripherals, satellite television, and wireless LANs (WLAN).
Figure 4.2: Three wireless implementation
SONET/SDH: It is a circuit-based bandwidth-efficient technology. SONET/SDH establishes high-
speed circuits using TDM frames in ring topologies over an optical infrastructure. It results in
guaranteed bandwidth, regardless of actual usage. Common bit rates are 155 Mbps and 622 Mbps,
with a current maximum of 10 Gigabits per second (Gbps).
SONET/SDH rings support two IP encapsulations for user interfaces: ATM, and
Packet over
SONET/SDH (POS), which sends native IP packets directly over SONET/SDH
frames. SONET/
SDH rings provide major innovations for transport and have important
capabilities, such as
proactive performance monitoring and automatic recovery (self-healing) via an
automatic
protection switching mechanism. These capabilities increase their reliability to
cope with system
faults. Failure of a single SONET/SDH link or a network element does not lead to
failure of the
entire network.
Compiled By Chalachew A. 8|Page
Network Design
Dense Wavelength Division Multiplexing (DWDM):DWDM illustrated in Figure 4.3,
increases bandwidth on an optical medium.
Figure 4.3 DWDM
DWDM increases the available bandwidth on a single strand of fiber by using multichannel
[Link] is a crucial component of optical networks. It maximizes the use of installed fiber
cable and allows new services to be provisioned efficiently over existing infrastructure. Flexible add
and drop modules allow individual channels to be dropped and inserted along a route. An open
architecture system allows the connection of a variety of devices, including
SONET terminals,
ATM switches, and IP routers. DWDM is also used inside the SONET/SDH ring.
Dark Fiber:Dark fiber refers to fiber-optic cables leased from an SP and connected to a company’s
own infrastructure.
Dark fiber use is illustrated in Figure 4.4. The framing for the dark fiber is
provided by the
company’s devices and does not have to be SONET/SDH. As a result, the dark-
fiber connection
eliminates the need for SONET/SDH multiplexers, which are required in
SONET/SDH rings. The
edge devices connect directly over the site-to-site dark fiber using a Layer 2
encapsulation such as
Gigabit Ethernet. When such connectivity is used to transmit data over
significantly long
distances, regenerators or DWDM concentrators are inserted into the link to
maintain signal
integrity and provide appropriate jitter control.
Compiled By Chalachew A. 9|Page
Network Design
Figure 4.4:Dark Fiber
Depending on the carrier and location, dark fiber might be available for sale on
the wholesale
market for both metro and wide-area links at prices previously associated with
leased-line rental.
Enterprise Edge WAN Considerations
When selecting Enterprise Edge technologies, consider the following factors:
Support for network growth: Enterprises that anticipate significant growth should choose a
technology that allows the network to grow with their business. WAN technologies with high
support for network growth make it possible to add new branches or remote offices with minimal
configuration at existing sites, thus minimizing the costs and IT staff requirements for such
changes. WAN technologies with lower support for network growth require significantly more
time, effort, and cost to expand the network.
Appropriate availability: Businesses heavily affected by even the smallest disruption in network
communications should consider high availability an important characteristic when choosing a
connectivity technology. Highly available technologies provide inherent redundancy where no
single point of failure exists in the network. Lower-availability technologies can still dynamically
recover from a network disruption in a short time period, but this minor disruption might be too
costly for some businesses. Technologies that do not inherently provide high availability can be
made more available through redundancy in design, by using products with redundant
characteristics such as multiple WAN connections, and by using backup power supplies.
Operational expenses: Some WAN technologies result in higher costs than others. A private-line
technology such as Frame Relay or ATM, for example, typically results in higher carrier fees than
a technology such as an IPsec-based IP VPN, which takes advantage of the public Internet to help
reduce costs. It is important to note, however, that migrating to a particular technology for the sole
purpose of reducing carrier fees, without considering network performance and QoS, can limit
support for some advanced technologies such as voice and video.
Operational complexity: Cisco MAN and WAN technologies have varying levels of inherent
technical complexity, so the level of technical expertise required within the enterprise also varies.
Compiled By Chalachew A. 10 | P a g e
Network Design
In most cases, businesses can upgrade their MAN or WAN and take advantage of the expertise of
the existing IT staff, requiring minimal training. When an enterprise wants to maintain greater
control over its network by taking on responsibilities usually borne by an SP, extensive IT training
could be required to successfully deploy and manage a particular WAN technology.
Voice and video support: Most Cisco MAN and WAN technologies support QoS, which helps
enable advanced applications such as voice and video over the network. In cases where a WAN
technology uses an SP with a Cisco QoS-certified multiservice IP VPN, an adequate level of QoS
is assured to support voice and video traffic. In cases where the public Internet is used as the WAN
connection, however, QoS cannot always be guaranteed, and a high-bandwidth broadband
connection might be required for small offices, teleworkers, and remote contact center agents using
voice and video communications.
Effort and equipment cost to migrate from private connectivity:When an enterprise is
migrating from private connectivity to another technology, it is important to evaluate the short- and
long-term costs and benefits of this migration. In many cases, this is accomplished with minimal
investment in equipment, time, and IT staffing. In some instances, however, this migration requires
a significant short-term investment, not only in new equipment, but also in IT training. Such an
investment might also provide long-term increased cost savings, lower operational expenditures,
and increased productivity.
Network segmentation support: Network segmentation means supporting a single network
that is logically segmented. One advantage of network segmentation is that it reduces expenditures
associated with equipment and maintenance, network administration, and network carrier charges
as compared to separate physical networks. Another advantage is increased security; segmentation
can help isolate departments or limit partners’ access to the corporate network.
Selecting Enterprise Edge Components
Hardware Selection
When selecting hardware, use the vendor documentation to evaluate the WAN hardware components.
The selection process typically considers the function and features of the particular devices, including
their port densities, packet throughput, expandability capabilities, and readiness to provide redundant
connections.
Software Selection
The next step is to select the appropriate software features; when using Cisco equipment, the software
is the Cisco IOS. The Cisco IOS Software has been optimized for different markets, network roles, and
platforms. Cisco IOS Software meets the requirements of various markets (enterprise, service
provider, and commercial) and places in the network (access, core and distribution, and edge).
Compiled By Chalachew A. 11 | P a g e
Network Design
Enterprise Branch Design
Enterprises are seeking opportunities to protect, optimize, and grow their businesses by increasing
security; consolidating voice, video, and data onto a single IP network; and investing in applications
that will improve productivity and operating efficiencies. These services provide enterprises with new
opportunities to reduce costs, improve productivity, and safeguard information assets in all their
locations. The Cisco Enterprise Branch architecture takes into account the services that enterprises
want to deploy at their endpoints, no matter how far away the endpoints are or how they are
connected. Common network components that might be implemented in the Enterprise Branch include
the following:
Routers providing WAN edge connectivity
Switches providing the LAN infrastructure
Security appliances defending the branch devices
Wireless access points for device mobility
Call-processing and video equipment for IP telephony and video support
End-user devices, including IP phones and computers
Enterprise Branch Design considerations
Requirements differ with the size of the branch offices. Consider to the following questions when
designing the Enterprise Branch:
How many branch locations need to be supported?
How many existing devices (including end users, hosts, and network infrastructure) are to be
supported at each location? The number of devices supported is limited by the physical number of
ports available.
How much growth is expected at each location, and therefore what level of scalability is required?
What are the high availability requirements at each location?
What level of security is required in the design? Should security be managed locally or through
the central location?
Are there any requirements for local server farms or networks between the internal network and
the external network (for example, in a demilitarized zone [DMZ])?
Should network management be supported locally or via the central location?
What wireless services are needed, and how will they be used by the clients? What effect will the
network and the environment have on the wireless devices?
What is the approximate budget available?
Compiled By Chalachew A. 12 | P a g e
Network Design
Branch offices can be categorized based on the number of users:
Small office: Up to 50 users, using a single-tier design
Medium office: Between 50 and 100 users, using a dual-tier design
Large office: Between 100 and 200 users, using a three-tier design
Enterprise Teleworker (Branch of One) Design
Organizations are constantly striving to reduce costs, improve employee
productivity, and retain
valued employees. These goals can be furthered by allowing employees to work
from home with
quality, function, performance, convenience, and security similar to that available
in the office.
With a work environment in the residence, employees can optimally manage
their work schedules,
allowing for higher productivity (less affected by office distractions) and greater
job satisfaction
(flexibility in schedule). This transparent extension of the enterprise to employee
homes is the
objective of the Cisco Enterprise Teleworker (or Branch of One) architecture.
The Cisco Enterprise Teleworker architecture is part of the overallsecure Cisco
Enterprise architecture infrastructure. It companies the capability to integrate
andsecurely manage their remote workers within the corporate network while
simultaneouslyproviding a high-quality end-user experience supporting a full
range of enterprise applications forthe enterprise teleworker.
Compiled By Chalachew A. 13 | P a g e
Network Design
Within this architecture, centralized management means that the enterprise
applies security
policies, pushes configurations, and periodically tests the connection through the
broadband cloud
and back to the corporate office to determine the latency, jitter, and packet loss
experienced at any
time. This solution supports advanced applications such as voice and video as
part of the full suite
of enterprise services for the end user. For example, a teleworker can access the
central-office IP
telephone system from home with comparable voice quality and can thereby take
advantage of the
higher-function IP telephony capabilities instead of using the PSTN.
Compiled By Chalachew A. 14 | P a g e