Network.Warrior.思科网络工程师必备手册(第2版)

Network.Warrior 网络安全，这是思科网络方面的实现，是工程师必备手册。还是(第2版。Network WarriorSECOND EDITIONNetwork warriorGary A. donahueO REILLYBeijing· Cambridge· Farnham·Koln· Sebastopol· TokyoNetwork Warrior Second editionA. DonahueCopyright@ 2011 Gary Donahue. All rights reservedPrinted in the United States of americaPublished by O Reilly Media, Inc, 1005 Gravenstein Highway North, Sebastopol, CA 95472O'Reilly books may be purchased for educational, business, or sales promotional use. Online editionsarealsoavailableformosttitles(http://my.safaribooksonline.com).Formoreinformationcontactourcorporate/institutionalsalesdepartment:(800)998-9938orcorporate@oreilly.comEditor: Mike LoukidesIndexer: Lucie haskinsProduction editor: Adam zarembaCover designer Karen montgomeryCopyeditor: Amy ThomsonInterior Designer: David FutatoProofreader: Rachel Monaghanllustrator: Robert romanoProduction Services: Molly SharpPrinting historyJune 2007First editionMay 2011econd editionNutshell Handbook, the Nutshell Handbook logo, and the O Reilly logo are registered trademarks ofO'Reilly media, Inc. Network Warrior, the image of a german boarhound, and related trade dress aretrademarks of O'Reilly Media, IncMany of the designations used by manufacturers and sellers to distinguish their products are claimed asrademarks. Where those designations appear in this book, and O'Reilly Media, Inc. was aware of atrademark claim, the designations have been printed in caps or initial capsWhile every precaution has been taken in the preparation of this book. the publisher and author assumeno responsibility for errors or omissions, or for damages resulting from the use of the information con-tained hereinISBN:978-1-449-38786-01305147383Table of contentsPreface1. What Is a network?2. Hubs and switchesSwitchesSwitch Types14Planning a Chassis-Based Switch Installation163. AutonegotiationWhat Is Autonegotiation?How Autonegotiation Works20When Autonegotiation Fails21Autonegotiation best practicesConfiguring Autonegotiation234. VLaNsConnecting vlansConfiguring vlans29CatOsIOS Using VLAN Database31IOS USing Global Commands33Nexus and nX-os355. Trunking.....37How Trunks workISL39802.1Q39Which Protocol to use40Trunk negotiationConfiguring TrunksIOS42CatOs44Nexus and nX-OS466.Ⅶ LAN Trunking Protocol∴.VTP Pruning52Dangers of VTP54Configuring vtp55VTP Domains5VTP Mode56VTP PasswordVTP Pruning587. Link AggregationEtherChannel63Ether Channel Load BalancingConfiguring and Managing Ether ChannelCross-Stack Ether ChannelMultichassis Ether Channel (MecVirtual port channelInitial vPC Configuration5567Adding a vPC8. Spanning Tree,,81Broadcast storms82MAC Address table instabilityPreventing Loops with Spanning treeHow Spanning Tree WorksManaging Spanning TreeAdditional Spanning Tree Features95Port Fast95BPDU GuardUplinkFastBackbone FastCommon Spanning Tree Problems100Duplex mismatch100Unidirectional Links101Bridge Assurance103Designing to Prevent Spanning Tree Problems104Use routing instead of Switching for redundancy104Always Configure the root bridge104ⅵ i Table of Contents9. Routing and RoutersRouting tables106Route Types109The IP Routing table109Host route111Subnet112Summary(group of subnets112Major Network113Supernet ( group of major Networks114Default route114Virtual routing and forwarding11510. Routing ProtocolsCommunication between routers120Metrics and Protocol TypesAdministrative distance125Specific routing protocolsRIP129RIPv2132EIGRP133OSPF137BGP14311. RedistributionRedistributing into rip149Redistributing into EIGRP152Redistributing into OSPF154Mutual redistribution156Redistribution loops157Limiting redistribution159Route tags159A Real-World Example16312. Tunnels167GRE Tunnels168GRE Tunnels and Routing protocols173GRE and access lists17813. First Hop Redundancy,181HSRP181HSRP Interface Tracking184When HSRP Isn' t Enough186Table of contents|ⅶiNexus and HSRP189GLBP189Object Tracking in GLBP19414. Route maps197Building a Route Map198Policy Routing Example200Monitoring Policy routing20315. Switching Algorithms in Cisco Routers.................. 207Process Switching209Interrupt Context Switching210Fast Switching211Optimum Switching213CEF213Configuring and Managing Switching Paths216Process Switching216Fast Switching218CEF2116. Multilayer Switches221Configuring SⅥs223IOS(4500,6500,3550,3750,etc.,)223Hybrid Mode(4500, 6500225NX-OS(Nexus 7000, 5000)227Multilayer switch models22817. Cisco 6500 Multilayer Switches231Architecture233B234Enhanced chassis237Vertical Enhanced Chassis238Supervisors238240Cats Versus los249Installing VSs253Other Recommended VSS Commands259VSS Failover commands261Miscellaneous vss commands262vss Best practic6318. Cisco nexus265exus hardware265ⅶ ii Table of Contents