Cisco SWAN includes the Wireless LAN Threat Defense Solution, which includes an intrusion detection system (IDS) (refer to Figure 23-2). This safeguards the wireless LAN from malicious and unauthorized access. For example, the IDS detects and suppresses rogue access points by disallowing them to authenticate with the network, and identifies unassociated clients through MAC address association tables. The IDS integrates with the Cisco Self-Defending Network, the Cisco vision f..
Different Types of Adjacencies
There are several types of adjacencies: Null adjacency Packets destined for null-interface are dropped. This is used for dropping packets to unknown destinations. It can be used as an effective form of access filtering. Glean adjacency When a router is connected to a subnet, the FIB table maintains a prefix for the subnet rather than for each individual host. This subnet prefix points to a glean adjacency. When a packet must be..
Global Load Balancing Protocol (GLBP) can load balance traffic destined for a next-hop gateway across a collection of routers, known as a GLBP group. Specifically, when a client sends an Address Resolution Protocol (ARP) request, in an attempt to determine the MAC address corresponding to a known IP address, GLBP can respond with the MAC address of one member of the GLBP group. The next such request would receive a response containing the MAC address of a different member of ..
The remaining sections of this chapter focus on the Frame Relay PIPQ feature. The Frame Relay PIPQ feature works by providing a PQ scheme at the interface level. Similar to the generic PQ feature enabled at the interface level for nonserial interfaces or other encapsulation types, the Frame Relay PIPQ feature provides four queues of ascending levels of priority: low, normal, medium, and high. NOTE The Frame Relay PIPQ feature is supported in Cisco IOS Release 12.1(1)T and l..
Route summarization works best when the subnet planning process considers route summarization. To accommodate summarization, the engineer assigning subnets can assign larger address blocks to one part of the topology. The engineers working with that part of the internetwork can break the address blocks into individual subnets as needed. At the edge of that part of the network, the engineers can configure route summaries to be advertised to the other parts of the internetwork...
