Cisco Software-Defined Access

Cisco Software-Defined Access PDF Author: Srilatha Vemula
Publisher: Cisco Press
ISBN: 0136448291
Category : Computers
Languages : en
Pages : 566

Get Book

Book Description
The definitive Cisco SD-Access resource, from the architects who train Cisco's own engineers and partners This comprehensive book guides you through all aspects of planning, implementing, and operating Cisco Software-Defined Access (SD-Access). Through practical use cases, you'll learn how to use intent-based networking, Cisco ISE, and Cisco DNA Center to improve any campus network's security and simplify its management. Drawing on their unsurpassed experience architecting solutions and training technical professionals inside and outside Cisco, the authors explain when and where to leverage Cisco SD-Access instead of a traditional legacy design. They illuminate the fundamental building blocks of a modern campus fabric architecture, show how to design a software-defined campus that delivers the most value in your environment, and introduce best practices for administration, support, and troubleshooting. Case studies show how to use Cisco SD-Access to address secure segmentation, plug and play, software image management (SWIM), host mobility, and more. The authors also present full chapters on advanced Cisco SD-Access and Cisco DNA Center topics, plus detailed coverage of Cisco DNA monitoring and analytics. * Learn how Cisco SD-Access addresses key drivers for network change, including automation and security * Explore how Cisco DNA Center improves network planning, deployment, evolution, and agility * Master Cisco SD-Access essentials: design, components, best practices, and fabric construction * Integrate Cisco DNA Center and Cisco ISE, and smoothly onboard diverse endpoints * Efficiently operate Cisco SD-Access and troubleshoot common fabric problems, step by step * Master advanced topics, including multicast flows, Layer 2 flooding, and the integration of IoT devices * Extend campus network policies to WANs and data center networks * Choose the right deployment options for Cisco DNA Center in your environment * Master Cisco DNA Assurance analytics and tests for optimizing the health of clients, network devices, and applications

Cisco Software-Defined Access

Cisco Software-Defined Access PDF Author: Srilatha Vemula
Publisher: Cisco Press
ISBN: 0136448291
Category : Computers
Languages : en
Pages : 566

Get Book

Book Description
The definitive Cisco SD-Access resource, from the architects who train Cisco's own engineers and partners This comprehensive book guides you through all aspects of planning, implementing, and operating Cisco Software-Defined Access (SD-Access). Through practical use cases, you'll learn how to use intent-based networking, Cisco ISE, and Cisco DNA Center to improve any campus network's security and simplify its management. Drawing on their unsurpassed experience architecting solutions and training technical professionals inside and outside Cisco, the authors explain when and where to leverage Cisco SD-Access instead of a traditional legacy design. They illuminate the fundamental building blocks of a modern campus fabric architecture, show how to design a software-defined campus that delivers the most value in your environment, and introduce best practices for administration, support, and troubleshooting. Case studies show how to use Cisco SD-Access to address secure segmentation, plug and play, software image management (SWIM), host mobility, and more. The authors also present full chapters on advanced Cisco SD-Access and Cisco DNA Center topics, plus detailed coverage of Cisco DNA monitoring and analytics. * Learn how Cisco SD-Access addresses key drivers for network change, including automation and security * Explore how Cisco DNA Center improves network planning, deployment, evolution, and agility * Master Cisco SD-Access essentials: design, components, best practices, and fabric construction * Integrate Cisco DNA Center and Cisco ISE, and smoothly onboard diverse endpoints * Efficiently operate Cisco SD-Access and troubleshoot common fabric problems, step by step * Master advanced topics, including multicast flows, Layer 2 flooding, and the integration of IoT devices * Extend campus network policies to WANs and data center networks * Choose the right deployment options for Cisco DNA Center in your environment * Master Cisco DNA Assurance analytics and tests for optimizing the health of clients, network devices, and applications

Cisco Software-Defined Wide Area Networks

Cisco Software-Defined Wide Area Networks PDF Author: Jason Gooley
Publisher: Cisco Press
ISBN: 0136533167
Category : Computers
Languages : en
Pages : 1032

Get Book

Book Description
This is the eBook edition of Cisco Software-Defined Wide-Area Networks. This eBook does not include access to the companion website with practice exam that comes with the print edition. Access to the video mentoring is available through product registration at Cisco Press; or see the instructions in the back pages of your eBook. This study guide from Cisco Press will help you learn, prepare, and practice for exam success. This guide is built with the objective of providing assessment, review, and practice to help ensure you are prepared for your certification exam. Master Cisco Implementing Cisco SD-WAN Solutions (ENSDWI 300-415) exam topics Assess your knowledge with chapter-opening quizzes Review key concepts with exam preparation tasks Cisco Software-Defined Wide-Area Networks presents you with an organized test preparation routine using proven series elements and techniques. Key Topic tables help you drill on key concepts you must know thoroughly. Chapter-ending Review Questions help you to review what you learned in the chapter. Cisco Software-Defined Wide-Area Networks focuses specifically on the objectives for the Implementing Cisco SD-WAN Solutions (ENSDWI 300-415) exam. Four leading Cisco technology experts share preparation hints and test-taking tips, helping you improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics. Well regarded for its level of detail, assessment features, comprehensive design scenarios, this study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time. The official study guide helps you master all the topics on the Implementing Cisco SD-WAN Solutions (ENSDWI 300-415) exam, including: Architecture Controller Deployment Router Deployment Policies Security and Quality of Service Management and Operations Cisco Software-Defined Wide-Area Networks is part of a recommended learning path from Cisco that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit http://www.cisco.com/web/learning/index.html

Cisco Digital Network Architecture

Cisco Digital Network Architecture PDF Author: Tim Szigeti
Publisher: Cisco Press
ISBN: 0134723961
Category : Computers
Languages : en
Pages : 1144

Get Book

Book Description
The complete guide to transforming enterprise networks with Cisco DNA As networks become more complex and dynamic, organizations need better ways to manage and secure them. With the Cisco Digital Network Architecture, network operators can run entire network fabrics as a single, programmable system by defining rules that span their devices and move with their users. Using Cisco intent-based networking, you spend less time programming devices, managing configurations, and troubleshooting problems so you have more time for driving value from your network, your applications, and most of all, your users. This guide systematically introduces Cisco DNA, highlighting its business value propositions, design philosophy, tenets, blueprints, components, and solutions.Combining insider information with content previously scattered through multiple technical documents, it provides a single source for evaluation, planning, implementation, and operation. The authors bring together authoritative insights for multiple business and technical audiences. Senior executives will learn how DNA can help them drive digital transformation for competitive advantage. Technical decision-makers will discover powerful emerging solutions for their specific needs. Architects will find essential recommendations, interdependencies, and caveats for planning deployments. Finally, network operators will learn how to use DNA Center’s modern interface to streamline, automate, and improve virtually any network management task. · Accelerate the digital transformation of your business by adopting an intent-based network architecture that is open, extensible, and programmable · Integrate virtualization, automation, analytics, and cloud services to streamline operations and create new business opportunities · Dive deep into hardware, software, and protocol innovations that lay the programmable infrastructure foundation for DNA · Virtualize advanced network functions for fast, easy, and flexible deployments · Translate business intent into device configurations and simplify, scale, and automate network operations using controllers · Use analytics to tune performance, plan capacity, prevent threats, and simplify troubleshooting · Learn how Software-Defined Access improves network flexibility, security, mobility, visibility, and performance · Use DNA Assurance to track the health of clients, network devices, and applications to reveal hundreds of actionable insights · See how DNA Application Policy supports granular application recognition and end-to-end treatment, for even encrypted applications · Identify malware, ransomware, and other threats in encrypted traffic

Enhanced IP Services for Cisco Networks

Enhanced IP Services for Cisco Networks PDF Author: Donald C. Lee
Publisher: Cisco Press
ISBN: 9781578701063
Category : Computers
Languages : en
Pages : 438

Get Book

Book Description
Learn how to manage and deploy the latest IP services in Cisco-centric networks. Understand VPN security concepts: confidentiality, integrity, origin authentication, non-repudiation, anti-replay, perfect forward secrecyDeploy quality of service technologies to protect your mission-critical applicationsFind out how IPsec technology works and how to configure it in IOSLearn how to set up a router as a firewall and intrusion detection systemGain efficient use of your IP address space with NAT, VLSM, IP unnumberedSolve real-world routing problems with redistribution, route filtering, summarization, policy routingEnable authentication, authorization, and accounting (AAA) security services wih RADIUS and TACACS+ servers "Enhanced IP Services for Cisco Networks" is a guide to the new enabling and advanced IOS services that build more scalable, intelligent, and secure networks. You will learn the technical details necessary to deploy quality of service and VPN technologies, as well as improved security and advanced routing features. These services will allow you to securely extend the network to new frontiers, protect your network from attacks, and enhance network transport with application-level prioritization. This book offers a practical guide to implementing IPsec, the IOS Firewall, and IOS Intrusion Detection System. Also included are advanced routing principles and quality of service features that focus on improving the capability of your network. A good briefing on cryptography fully explains the science that makes VPNs possible. Rather than being another routing book, this is a guide to improving your network's capabilities by understanding and using the sophisticated features available to you in Cisco's IOS software

Cisco Multiservice Switching Networks

Cisco Multiservice Switching Networks PDF Author: Carlos Pignataro
Publisher: Cisco Press
ISBN: 1587050684
Category : Computers
Languages : en
Pages : 482

Get Book

Book Description
Learn theory framework and configuration of multiservice switching and design guidelines in this workbook that includes a case study with MPLS and PNNI within or utilizing all the platforms.

Programming and Automating Cisco Networks

Programming and Automating Cisco Networks PDF Author: Ryan Tischer
Publisher: Cisco Press
ISBN: 0134436768
Category : Computers
Languages : en
Pages : 835

Get Book

Book Description
Improve operations and agility in any data center, campus, LAN, or WAN Today, the best way to stay in control of your network is to address devices programmatically and automate network interactions. In this book, Cisco experts Ryan Tischer and Jason Gooley show you how to do just that. You’ll learn how to use programmability and automation to solve business problems, reduce costs, promote agility and innovation, handle accelerating complexity, and add value in any data center, campus, LAN, or WAN. The authors show you how to create production solutions that run on or interact with Nexus NX-OS-based switches, Cisco ACI, Campus, and WAN technologies.You’ll learn how to use advanced Cisco tools together with industry-standard languages and platforms, including Python, JSON, and Linux. The authors demonstrate how to support dynamic application environments, tighten links between apps and infrastructure, and make DevOps work better. This book will be an indispensable resource for network and cloud designers, architects, DevOps engineers, security specialists, and every professional who wants to build or operate high-efficiency networks. Drive more value through programmability and automation, freeing resources for high-value innovation Move beyond error-prone, box-by-box network management Bridge management gaps arising from current operational models Write NX-OS software to run on, access, or extend your Nexus switch Master Cisco’s powerful on-box automation and operation tools Manage complex WANs with NetConf/Yang, ConfD, and Cisco SDN Controller Interact with and enhance Cisco Application Centric Infrastructure (ACI) Build self-service catalogs to accelerate application delivery Find resources for deepening your expertise in network automation

Transforming Campus Networks to Intent-Based Networking

Transforming Campus Networks to Intent-Based Networking PDF Author: Pieter-Jan Nefkens
Publisher: Cisco Press
ISBN: 0135466202
Category : Computers
Languages : en
Pages : 582

Get Book

Book Description
Migrate to Intent-Based Networking–and improve network manageability, cost, agility, security, and simplicity With Intent-Based Networking (IBN), you can create networks that capture and automatically activate business intent, assure that your network responds properly, proactively detect and contain security threats, and remedy network issues before users even notice. Intent-Based Networking makes networks far more valuable, but few organizations have the luxury of building them from the ground up. In this book, leading expert Pieter-Jans Nefkens presents a unique four-phase approach to preparing and transforming campus network infrastructures, architectures, and organization–helping you gain maximum value from IBN with minimum disruption and cost. The author reviews the problems IBN is intended to solve, and illuminates its technical, business, and cultural implications. Drawing on his pioneering experience, he makes specific recommendations, identifies pitfalls, and shows how to overcome them. You’ll learn how to implement IBN with the Cisco Digital Network Architecture and DNA Center and walk through real-world use cases. In a practical appendix, Nefkens even offers detailed technical configurations to jumpstart your own transformation. Review classic campus network deployments and understand why they need to change Learn how Cisco Digital Network Architecture (DNA) provides a solid foundation for state-of-the-art next generation network infrastructures Understand “intent” and how it can be applied to network infrastructure Explore tools for enabling, automating, and assuring Intent-Based Networking within campus networks Transform to Intent-Based Networking using a four-phased approach: Identify challenges; Prepare for Intent; Design and Deploy; and Enable Intent Anticipate how Intent-Based Networking will change your enterprise architecture, IT operations, and business

Learning SD-WAN with Cisco

Learning SD-WAN with Cisco PDF Author: Stuart Fordham
Publisher: Apress
ISBN: 9781484273463
Category : Computers
Languages : en
Pages : 429

Get Book

Book Description
Explore the rise of SD-WAN with CISCO and transform your existing WAN into an agile, efficient, and cost-effective network. Learning SD-WAN with Cisco helps you understand the development of SD-WAN and its benefits to modern networks. This book starts with an exploration of the different components of SD-WAN, such as vBond for orchestration, vManage for management, vSmart for control, and the vEdge devices. From there, it moves on to building a network from the ground up using EVE-NG, focusing on how to install EVE-NG, get the required licenses via a SmartNET account, download the components, and begin to create your network by installing vManage. Once you have this foundation, you will create the organization and certificates, and look at local users as well as single- and multi-tenancy options and clustering. As you continue to build your network, you will dig down into the overlay protocols used in SD-WAN, and then deploy your controllers and edge devices, looking at zero-touch provisioning along the way. After building your network, you will configure and apply policies and templates to manage the control and data planes as well as VPNs, Internet access, security, and quality of service. The book also explores reporting and management using vManage, along with upgrading and troubleshooting the various components, using techniques from simple ping and trace route through to advanced techniques such as DTLS and TLOC troubleshooting and traffic simulation. After reading this book, you will have hands-on experience working with SD-WAN. You will understand how to deploy, configure, manage, and troubleshoot it. What You Will Learn Know what SD-WAN is, how it came about, and why we need it Understand troubleshooting and traffic simulation of DTLS and TLOC Monitor, report, and troubleshoot the SD-WAN environment Who This Book Is For Network professionals with experience in Linux and Cisco devices

Cisco Router Firewall Security

Cisco Router Firewall Security PDF Author: Richard Deal
Publisher: Cisco Press
ISBN: 0133818993
Category : Computers
Languages : en
Pages : 2132

Get Book

Book Description
Harden perimeter routers with Cisco firewall functionality and features to ensure network security Detect and prevent denial of service (DoS) attacks with TCP Intercept, Context-Based Access Control (CBAC), and rate-limiting techniques Use Network-Based Application Recognition (NBAR) to detect and filter unwanted and malicious traffic Use router authentication to prevent spoofing and routing attacks Activate basic Cisco IOS filtering features like standard, extended, timed, lock-and-key, and reflexive ACLs to block various types of security threats and attacks, such as spoofing, DoS, Trojan horses, and worms Use black hole routing, policy routing, and Reverse Path Forwarding (RPF) to protect against spoofing attacks Apply stateful filtering of traffic with CBAC, including dynamic port mapping Use Authentication Proxy (AP) for user authentication Perform address translation with NAT, PAT, load distribution, and other methods Implement stateful NAT (SNAT) for redundancy Use Intrusion Detection System (IDS) to protect against basic types of attacks Obtain how-to instructions on basic logging and learn to easily interpret results Apply IPSec to provide secure connectivity for site-to-site and remote access connections Read about many, many more features of the IOS firewall for mastery of router security The Cisco IOS firewall offers you the feature-rich functionality that you've come to expect from best-of-breed firewalls: address translation, authentication, encryption, stateful filtering, failover, URL content filtering, ACLs, NBAR, and many others. Cisco Router Firewall Security teaches you how to use the Cisco IOS firewall to enhance the security of your perimeter routers and, along the way, take advantage of the flexibility and scalability that is part of the Cisco IOS Software package. Each chapter in Cisco Router Firewall Security addresses an important component of perimeter router security. Author Richard Deal explains the advantages and disadvantages of all key security features to help you understand when they should be used and includes examples from his personal consulting experience to illustrate critical issues and security pitfalls. A detailed case study is included at the end of the book, which illustrates best practices and specific information on how to implement Cisco router security features. Whether you are looking to learn about firewall security or seeking how-to techniques to enhance security in your Cisco routers, Cisco Router Firewall Security is your complete reference for securing the perimeter of your network. This book is part of the Networking Technology Series from Cisco Press, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

Network Programmability and Automation

Network Programmability and Automation PDF Author: Jason Edelman
Publisher: "O'Reilly Media, Inc."
ISBN: 1491931310
Category : Computers
Languages : en
Pages : 842

Get Book

Book Description
Like sysadmins before them, network engineers are finding that they cannot do their work manually anymore. As the field faces new protocols, technologies, delivery models, and a pressing need for businesses to be more agile and flexible, network automation is becoming essential. This practical guide shows network engineers how to use a range of technologies and tools—including Linux, Python, JSON, and XML—to automate their systems through code. Network programming and automation will help you simplify tasks involved in configuring, managing, and operating network equipment, topologies, services, and connectivity. Through the course of the book, you’ll learn the basic skills and tools you need to make this critical transition. This book covers: Python programming basics: data types, conditionals, loops, functions, classes, and modules Linux fundamentals to provide the foundation you need on your network automation journey Data formats and models: JSON, XML, YAML, and YANG for networking Jinja templating and its applicability for creating network device configurations The role of application programming interfaces (APIs) in network automation Source control with Git to manage code changes during the automation process How Ansible, Salt, and StackStorm open source automation tools can be used to automate network devices Key tools and technologies required for a Continuous Integration (CI) pipeline in network operations