Implementing a Network Security Policy
After a security policy has been defined, the next step is implementing it. Implementing a security policy is not a simple matter. It involves technical as well as nontechnical aspects. Although it is challenging enough to find the correct equipment that can work together and implement the security policy in its true spirit, coming up with a design that is workable for all parties concerned is equally challenging. Here are some points you need to keep in mind before you begi..
Optional EIGRP Commands over WANs
There are EIGRP design and configuration issues concerning WANs. Here you must deal with limited capacity to a greater degree than at other points in the network. Furthermore, routing updates and data transmissions compete for that limited space. EIGRP is unique in that it restricts its use of bandwidth. By default it uses no more than half the link capacity, which is superior to the scant consideration shown by every other routing protocol. Although the default setti..
Example 14-4 shows how a router might be configured for CB Marking when an attached LAN switch is performing QoS based on CoS. In this case, R3 looks at frames coming in its fa0/0 interface, marking the DSCP values based on the incoming CoS settings. Additionally, R3 looks at the DSCP settings for packets exiting its fa0/0 interface toward the switch, setting the CoS values in the 802.1Q header. The actual values used on R3’s fa0/0 interface for classification and markin..
To configure a private VLAN, begin by defining any secondary VLANs that are needed for isolation using the following configuration commands: Switch(config)# vlan vlan-id Switch(config-vlan)# private-vlan {isolated | community} The secondary VLAN can be an isolated VLAN (no connectivity between isolated ports) or a community VLAN (connectivity between member ports). Now define the primary VLAN that will provide the underlying private VLAN connectivity using the following c..
MPLS Traffic Engineering with Autoroute
This recipe uses Cisco's Autoroute feature for managing Traffic Engineering (TE) with OSPF in an MPLS network. For this method, we must explicitly define all of the traffic paths and associate them with Tunnels on the PE routers: Router-PE1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router-PE1(config)#mpls traffic-eng tunnels Router-PE1(config)#interface Loopback0 Router-PE1(config-if)#ip address 10.0.0.2 255.255.255.255 Router..
