Cisco 813-RF - 813 Router Specifikace stáhnout pdf (Strana 90)

CHAPTER 7

Campus Network Security

n Use SSH instead of Telnet.

n Physically secure access to the device.

n Use banners that warn against unauthorized access.

n Remove unused services, such as finger, the TCP and UDP small servers, service config, and HTTP server.

n Set up and monitor Syslog.

n Disable automatic trunking on all nontrunk ports.

n Disable CDP on ports where it is not needed.

[ 90 ]

CCNP SWITCH 642-813 Quick Reference by Denise Donohue

9781587140112.qxd 11/23/09 11:35 AM Page 90

www.CareerCert.info

1 2 ... 85 86 87 88 89 90 91 92 93 94 95 ... 111 112

CCNP SWITCH 642-813 1
Quick Reference 1
About the Author 2
About the Technical Editor 2
Icons Used 3
Chapter 1 4
The Core Layer 5
Small Campus Design 6
Medium Campus Design 6
Data Center Design 7
Network Traffic Flow 8
FIGURE 1-3 10
Chapter 2 12
FIGURE 2-1 13
FIGURE 2-2 13
VLAN Planning 14
Verifying VLAN Configuration 15
VLAN Trunking 17
Configuring a Trunk Link 18
VLANs Allowed on the Trunk 19
VLAN Trunking Protocol 20
VTP Switch Roles 21
Configuring VTP 22
Verifying and Monitoring VTP 23
EtherChannels 24
Configuring an EtherChannel 25
Verifying an EtherChannel 26
Troubleshooting VLAN Issues 27
Troubleshooting VTP 28
Chapter 3 29
FIGURE 3-1 30
The STP Election 32
Root Port Election 33
Designated Port Election 33
Bridge Protocol Data Units 34
Spanning Tree Port States 36
Per-VLAN Spanning-Tree 36
Configuring Spanning Tree 37
Rapid Spanning Tree 38
RSTP Port Roles 39
BPDU Differences in RSTP 39
RSTP Fast Convergence 39
Multiple Spanning Tree 40
(config-mst)# revision number 41
(config-mst)# end 41
# show spanning-tree mst 41
UplinkFast 42
BackboneFast 42
BPDU Guard 43
BPDU Filtering 43
Root Guard 44
Unidirectional Link Detection 44
Loop Guard 45
Troubleshooting STP 46
Identifying a Bridging Loop 47
Spanning-Tree Best Practices 47
FIGURE 3-3 48
Chapter 4 49
MLS Interfaces 53
CEF Switching 55
FIGURE 4-1 56
# show cef drop 58
# show adjacency 58
Chapter 5 59
Technology 60
Processes 61
Network Level Resiliency 63
Fast Failover 63
Optimizing Redundancy 64
Designing for Redundancy 65
FIGURE 5-2 66
FIGURE 5-3 67
FIGURE 5-4 67
Chapter 6 72
HSRP States 73
Configuring HSRP 74
Chapter 7 79
MAC Address-Based Attacks 80
Port-Based Authentication 82
VLAN-Based Attacks 83
802.1Q Double-Tagging 84
Private VLANs 86
Protected Ports 87
Spoof Attacks 88
Securing Your Switch 89
Chapter 8 91
VoIP in a Campus Network 92
FIGURE 8-1 93
Voice VLANs 94
QoS for VoIP 95
QoS Actions 96
DSCP Values 97
Trust Boundaries 98
Manual Configuration 99
Using AutoQoS 100
Video over IP 101
Chapter 9 102
WLAN Topologies 104
Client Connectivity 105
Autonomous (Stand-alone) APs 106
Lightweight Access Points 107
Wireless LAN Controllers 109
Switch Configuration 110
CCNP SWITCH Quick Reference 112

Komentáře k této Příručce

Žádné komentáře

Cisco 813-RF - 813 Router Specifikace Strana 90

Komentáře k této Příručce

Související produkty a manuály pro Sítě Cisco 813-RF - 813 Router