Click on the drop down menu above to view available dates and location.  To register, click on acceptable date.  If you don't see an acceptable date, please contact us and we will find a solution for you. 

Building Cisco® Multilayer Switched Networks v3.0

In this course, learn to implement campus networks using multilayer switching technologies over high-speed Ethernet and wireless topologies. This course addresses the integration of routing and switching technologies to create an efficient campus network. Design, build, and configure a campus network with device and link redundancy for high reliability, while maintaining the performance to meet today's demanding application requirements, such as voice, video, and secure wireless technologies. Learn to choose and configure the necessary Layer 2 and 3 protocols and features to guarantee constant access.

Technologies such as Spanning Tree, Rapid Spanning Tree (802.1W), Multiple Spanning Tree (802.1S), Uplinkfast and Backbonefast will be covered in detail to determine how to optimize a network's convergence times in the event a physical path fails. Also learn how to get more bandwidth between network devices by configuring EtherChannel. Learn the advantages of and how to configure and troubleshoot HSRP, convergence of voice, video and data in a real-time environment, and QoS. Configure basic security options such as 802.1x, Port security, BPDU guard, and DHCP spoof attack prevention.

What You'll Learn

Course Outline

1. Introduction to Campus Networks

2. Defining Virtual Networks (VLANs)

• Best Practices for VLAN Topologies

  • Issues in a Poorly Designed Network

  • Grouping Business Functions into VLANs

  • Interconnection Technologies

  • Determining Equipment and Cabling Needs

  • Mapping VLANs in a Hierarchical Network

  • Considering Traffic Source to Destination

  • Reviewing Switch Configuration Interfaces

• Implementing VLANs

  • Benefits of VLANs in an Enterprise Network

  • Local VLANs

  • End-to-End VLANs

  • VLAN Configuration Modes

  • VLAN Access Ports

  • VLAN Implementation Commands

  • Implementing a VLAN

• Implementing Trunks

  • VLAN Trunks

  • ISL Trunking

  • 802.1Q Trunking

  • 802.1Q Native VLANs

  • Issues with 802.1Q Native VLANs

  • VLAN Ranges

  • Trunking Configuration Commands

  • Configuring Trunking

  • Setting Dynamic Trunking Protocol (DTP)

• Propagating VLAN Configurations with VTP

  • VTP Domains

  • VTP Protocol

  • VTP Modes

  • VTP Pruning

  • VTP Operation

  • VTP Configuration Commands

  • Configuring a VTP Management Domain

  • Adding New Switches to an Existing VTP

• Correcting Common VLAN Configuration Errors

  • Issues with 802.1Q Native VLANS

  • Resolving Trunk Link Problems

3. Implementing Spanning Tree

• Spanning Tree Protocol

  • Transparent Bridges

  • Identifying Traffic Loops

  • Loop Free Network

  • 802.1D Spanning Tree Protocol

  • Root Bridge

  • Port Roles

  • Enhancements to STP

• Preventing STP Forwarding Loops

  • Unidirectional Link Detection

  • Loop Guard

  • Preventing STP Failures Due to Unidirectional Links

  • Configuring UDLD and Loop Guard

• Implementing Rapid Spanning Tree Protocol (RSTP)

  • RSTP

  • RSTP Port States

  • RSTP Port Roles

  • Edge Ports

  • RSTP Link Types

  • RSTP BPDU

  • RSTP Proposal and Agreement Process

  • RSTP Topology Change

  • RSTP Implementation Commands

  • Implementing RSTP Commands

• Implementing the Multiple Spanning Tree Protocol (MSTP)

  • MSTP

  • MSTP Regions

  • Extended System ID

  • Interacting between MSTP regions and 802.1Q

  • MSPT Implementation Commands

  • Configuring and Verifying MSTP

• Configuring Link Aggregation and EtherChannel

  • EtherChannel

  • PAgP and LACP Protocols

  • EtherChannel Configuration

  • Configuring Port Channels using EtherChannel

  • Configuring Load Balancing over EtherChannel

4. Implementing InterVLAN Routing

• Routing Between VLANs

  • Multilayer Switching

  • Layer 2 Switch Forwarding Process

  • Inter-VLAN Routing using an External Router

  • Inter-VLAN Routing using External Router Configurtion Commands

  • Configuring Inter-VLAN Routing using an External Router

• Deploying CEF-Based Multilayer Switching

  • Layer 3 Switching

  • CEF-Based Multilayer Switches

  • Multilayer Switch Packet Forwarding Process

  • CEF Configuration Commands

  • Enabling CEF-Based Multilayer Switching

  • Common CEF problems and Solutions

  • CEF Troubleshooting Commands

  • Troubleshooting CEF-Based Multilayer Switching

• Enabling Routing Between VLANs

  • Layer 3 Switch Virtual Interfaces

  • Routed Interfaces on a Multilayer Switch

  • Configuration Commands for Inter-VLAN Communication on a Multilayer Switch

  • Configuring Inter-VLAN Routing on a Multilayer Switch

5. Implementing High Availability in a Campus Environment

• Configuring Layer 3 Redundancy with HSRP

  • Router Redundancy Process

  • Routing Issues

  • HSRP

  • HSRP Operations

  • HSRP States

  • HSRP Configuration Commands

  • Enabling HSRP

  • HSRP Optimization Options

  • Tuning HSRP Operations

  • HSRP Debug Commands

  • Debugging HSRP Operations

• Configuring Layer 3 Redundancy with VRRP and GLBP

  • Virtual Router Redundancy

  • VRRP Operations Process

  • Gateway Load Balancing Protocol

  • GLBP Operations Process

  • VRRP and GLBP Configuration

  • Enabling VRRP and GLBP

6. Wireless Client Access

• Introducing Wireless LANs (WLANs)

  • WLANs

  • Similarities Between A LAN and a WLAN

  • Differences Between a LAN and WLAN

  • WLAN Components

  • WLAN Technology Implementations

  • Building Blocks of AP WLAN Topologies

  • Building Blocks of Bridging WLAN Topologies

  • Topology Implementations

• Wireless Theory and Standards

  • Radio Frequency (RF) Basics

  • WLAN Math

  • Types of Antennas

  • Regulatory Agencies Governing WLANs

  • Operational Standards of IEEE 802.11

  • IEEE 802.11 Standards in the 2.4GHz Band

  • IEEE 802.11a

  • Comparing the 802.11 Standards

• Implementing WLANs

  • 802.11b/g Channel Reuse

  • 802.11a Channel Reuse

  • WLAN as a Shared Medium - Best Practices

  • Bridging Path Considerations

  • Power Implementation

• Cisco WLAN

  • Enterprise WLAN Issues

  • Overview of Cisco WLAN

  • Comparing Autonomous and Lightweight WLAN

  • Comparing Core and Advanced Feature Roaming

  • Split MAC Architecture

  • LWAPP AP Association

  • Mixing WLAPP with Autonomous APs

• Cisco Wireless Clients

  • Wireless Client Association

  • Open Authentication

  • Pre-Shared Key Authentication (WEP)

  • Introducing WLAN Security

  • Cisco Client Cards

  • Cisco Compatible Extensions Program

• Configuring Basic WLAN

  • Available Interfaces for WLAN Configuration

  • Connect to Controller

  • Configuring the Controller

  • Verify Controller Configuration

7. Configuring Campus Switches to Support Voice

• Planning for Implementation of Voice in a Campus Network

  • Converged Network Benefits

  • VoIP Network Components

  • Traffic Characteristics of Voice and Data

  • VoIP Call Flow

  • Auxiliary VLANs

  • Quality of Service (QoS)

  • Importance of High Availability for VoIP

  • Power Requirements in Support of VoIP

• Accommodating Voice Traffic on Campus Switches

  • QoS Trust Boundaries

  • LAN-Based Classification and Marking

  • Basic Switch Commands to Support Attachment of a Cisco IP Phone

  • Configuring a Switch for the Attachment of a Cisco IP Phone

  • What is AutoQoS VoIP?

  • Configuring AutoQoS VoIP on a Catalyst Switch

8. Minimizing Service Loss and Data Theft in a Campus Network

• Switch Security Issues

  • Overview of Switch Security Concerns

  • Switch Attack Categories

  • MAC Flood Attack

  • Port Security

  • Port Security Configuration

  • Configuring Port Security on a Switch

  • Port Security with Sticky MAC Addresses

  • Unauthorized Access by Rogue Devices

  • 802.1x Port-Based Authentication

• Protecting Against VLAN Attacks

  • VLAN Hopping

  • Mitigating VLAN Hopping

  • VLAN Access Control Lists (VACLs)

  • Configuring VACLs

  • Private VLANs (PVLANs)

  • Configuring PVLANs

• Protecting Against Spoof Attacks

  • DHCP Spoof Attack

  • DHCP Snooping

  • DHCP Snooping Configuration Commands

  • Configuring DHCP Snooping

  • MAC Spoof Attack

  • Address Resolution Protocol

  • Commands to Configure Dynamic ARP Inspection

  • Protecting Against ARP Spoofing Attacks

• Securing Network Switches

  • Vulnerabilities in the Cisco Discovery Protocol

  • Vulnerabilities in the Secure Shell Protocol

  • Vulnerabilities in the Telnet Protocol

  • VTY ACLs

  • Commands to Apply ACLs to VTY

• STP Security Mechanisms

  • Protecting the Operation of STP

  • BPDU Guard Configuration

  • BPDU Filtering Configuration

  • Root Guard

  • Root Guard Configuration Commands

  • Configuring Root Guard

Labs

Practice Quiz: Describing the Campus Infrastructure Module

Given diagrams of the Enterprise Composite Network model, the Enterprise Campus submodules, and Campus Infrastructure module, students will correctly identify the functions and relationships of the components in these diagrams.

Lab 1-2: Getting started with Cisco Catalyst Equipment

Login and establish a connection to the Client PC/Router, build an access switch, and build a distribution switch. Provide a base configuration for the Catalyst 2950s and Catalyst 3550s.

Lab 2: Configuring VLANs and VTP

Configure the Cisco's VTP protocol, including the effect of different VTP modes. Enable 802.1q trunking between switches and restrict the trunk to only the necessary VLANs. Create multiple VLANs for use by users and as a management VLAN for the switches. Associate ports to the newly created VLANs.

Lab 3-1: Configuring Primary and Backup Root Bridges

Configure a new primary root bridge and a backup root bridge on each VLAN so that the loop free topology uses the root bridge as a reference point.

Lab 3-2: Implementing Rapid-PVST Spanning Tree Protocol

Implement the Rapid-PVST Spanning Tree Protocol and learn to configure Rapid-PVST in access and distribution switches.

Lab 3-3: Implementing Multiple Spanning Tree (MST)

This activity helps familiarize you with MST implementation and tuning as you configure MST on the building access and building distribution switches and verify the configuration.

Lab 3-4: Configuring EtherChannel

Configure EtherChannel on the distribution switches to shorten the time for spanning tree to converge after a network event and to better use available bandwidth.

Lab 3-5: Troubleshooting Spanning Tree

Troubleshoot trunks and VLANs in a multi-VLAN environment.

Quiz 4-1: Describing Routing Between VLANs

Answer questions about routing in a given LAN setup. Correctly describe routing and performance enhancements of multilayer switches between VLANs.

Lab 4-2: Routing Between VLANs

In the previous lab activities, you configured the building distribution switches to support multiple VLANS. In this lab, you will set up multilayer features of the switch to support routing between these VLANS.

Lab 5-1: Enabling and Optimizing HSRP

Configure HSRP on the router to support routing redundancy in case of a distribution switch failure.

Lab 6-1: Configuring Switches of WLANs

Configure the switch to provide DHCP services and configure VLANs on the switch to support wireless access.

Lab 6-2: Setting up the Wireless LAN Controller

Using the CLI, create a basic configuration for the WLAN controller to establish console management connectivity to the controller, become familiar with the startup wizard that runs on initial startup, and complete the necessary steps to establish an SSL web connection to the controller.

Lab 6-3: Configuring the Wireless LAN Controller via the Web Browser

Use the web browser to configure the wireless LAN controller. Open the web browser and connect to the controller by entering the IP address of the controller.

Lab 7-1: Configuring IP Telephony Support

Configure access ports to carry voice traffic in 802.1Q frames using the auxiliary/Voice VLAN capability of the switch ports.

Case Study 8-1: Apply Security Practices to Secure Devices in the Campus

In a case study, you will examine a common network environment for the types of security threats that might be present and suggest potential remedies.

Case Study 8-2: Using Security Tools to Secure Devices in the Campus

You will be asked to evaluate a network attack in progress and suggest the appropriate security tactic to reduce or remove the security threat.

Lab 8-3: Applying Security Tools

Configure the devices to prevent attacks and reduce the potential risk for network service interruption or data loss.