Transcript Chapter21x
Sybex ICND2/CCNA R/S Chapter 21: Wide Area Networks Instructor & Todd Lammle Chapter 21 Objectives • The ICND2 Topics Covered in this chapter include: • IP Routing Technologies – • WAN Technologies – – – – – – – – – – – – – – – • Configure and verify operation status of a Serial interface. Identify different WAN Technologies Metro Ethernet VSAT Cellular 3G / 4G MPLS T1 / E1 ISDN DSL Frame relay Cable VPN Configure and verify a basic WAN serial connection Configure and verify a PPP connection between Cisco routers Configure and verify Frame Relay on Cisco routers Implement and troubleshoot PPPoE Troubleshooting – – – – Troubleshoot and Resolve WAN implementation issues Serial interfaces PPP Frame relay 2 WAN terms WAN connection types Broadband access using cable or DSL Cable network and terms xDSL connection from home user to central office. All types of DSL are layer 1 technologies. PPPoE with ADSL DTE-DCE-DTE WAN DTE-DCE-DTE WAN connection: Clocking is typically provided by the DCE network to routers. In nonproduction environments, a DCE network is not always present. Cisco’s HDLC frame format: Each vendor’s HDLC has a proprietary data field to support multiprotocol environments. Configuring Cisco’s HDLC proprietary WAN encapsulation Corp(config)#int s0/0 Corp(config-if)#ip address 172.16.10.1 255.255.255.252 Corp(config-if)#no shut Corp#sh int s0/0 Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Internet address is 172.16.10.1/30 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) the PPP protocol stack compared to the OSI reference model. PPP session establishment PPP authentication example Failed PPP authentication Mismatched WAN encapsulations Mismatched IP addresses Before Frame Relay After Frame Relay DLCIs are local to your router. RouterA uses DLCI 100 to send data to RouterB. Configuring Subinterfaces Corp(config)#int s0/0 Corp(config-if)#no shut Corp(config-if)#encapsulation frame-relay Corp(config-if)#int s0/0.102 ? multipoint Treat as a multipoint link point-to-point Treat as a point-to-point link Corp(config-if)#int s0/0.102 point-to-point Corp(config-subif)#ip address 10.1.12.1 255.255.255.0 Corp(config-subif)#frame-relay interface-dlci 102 Corp(config-subif)#int s0/0.103 Corp(config-subif)#ip address 10.1.13.1 255.255.255.0 Corp(config-subif)#frame-relay interface-dlci 103 Frame Relay mappings So why can’t RouterA talk to RouterB across the Frame Relay network in Figure 7.20? To find that out, take a close look at the frame-relay map statement. See the problem now? You cannot use a remote DLCI to communicate to the Frame Relay switch; you must use your DLCI number! The mapping should have included DLCI 100 instead of DLCI 200. Frame Relay routing problems The correct line for RouterA would look like this: frame-relay map ip 172.16.100.1 100 broadcast Frame Relay OSPF routing problems Since Frame Relay nonbroadcast multi-access (NBMA) networks won’t allow broadcasts or multicasts, an OSPF router will not attempt to dynamically discover any OSPF neighbors on the Frame-Relay interface. Also, since this means that elections won’t be allowed, you’d have to statically configure OSPF neighbors, plus the Corp router would need to be configured as a DR. But the easiest way to fix this problem is to use the command ip ospf network point-to-multipoint on all router Frame-Relay interfaces Frame Relay EIGRP routing problems The hosts behind the Corp router can communicate to all hosts in all remote networks, but hosts in SF, LA, and NY cannot communicate to each other. Let’s take a look at the configuration of the Corp router: interface Serial0/0 ip address 192.168.10.1 255.255.255.0 encapsulation frame-relay frame-relay interface-dlci 101 frame-relay interface-dlci 102 frame-relay interface-dlci 103 We can solve this problem with subinterfaces. Take a look at the Corp router’s new configuration with subinterfaces, which solves the split horizon issues. Here are the steps to take: 1. Remove the IP address and interface-dlci commands from under the physical interface. 2. 2. Create a subinterface (logical interface) for each PVC. 3. Design and implement a separate subnet (address space) for each subinterface. 4. Add the command frame-relay interface-dlci dlci under each subinterface. interface Serial0/0 no ip address (notice there is no IP address on the physical interface!) encapsulation frame-relay ! interface Serial0/0.101 point-to-point ip address 192.168.10.1 255.255.255.252 frame-relay interface-dlci 101 ! interface Serial0/0.102 point-to-point ip address 192.168.10.5 255.255.255.252 frame-relay interface-dlci 102 ! interface Serial0/0.103 point-to-point ip address 192.168.10.9 255.255.255.252 frame-relay interface-dlci 103 ! Example of using a VPN Benefits of VPN’s Security VPNs can provide very good security by using advanced encryption and authentication protocols, which will help protect your network from unauthorized access. IPsec and SSL fall into this category. Secure Sockets Layer (SSL) is an encryption technology used with web browsers, which has native SSL encryption, and are known as Web VPN. You can also use the Cisco AnyConnect SSL VPN client installed on you PC to provide a SSL VPN solution, as well as the Clientless Cisco SSL VPN. Cost Savings By connecting the corporate remote offices to their closest Internet provider, and then creating a VPN tunnel with encryption and authentication, I gain a huge savings over opting for traditional leased pointto-point lines. This also permits higher bandwidth links and security, all for far less money than traditional connections. Scalability VPNs scale very well to quickly bring up new offices or have mobile users connect securely while traveling or when connecting from home. Compatibility with broadband technology For remote and traveling users and remote offices, any Internet access can provide a connection to the corporate VPN. This allows users to take advantage of the high-speed Internet access of DSL or cable modems. Generic Routing Encapsulation (GRE) tunnel structure Written Labs and Review Questions – Read through the Exam Essentials section together in class – Open your books and go through all the written labs and the review questions. – Review the answers in class. 30