TAILIEUCHUNG - Network Virtualization — Path Isolation Design Guide

Each partition is logically isolated from the others, and must provide the same services that are available in a traditional dedicated enterprise network. The end user experience should be as if connected to a dedicated network providing privacy, security, an independent set of policies, service level, and even routing decisions. At the same time, the network administrator can easily create and modify virtual work environments for various user groups, and adapt to changing business requirements adequately. The latter is possible because of the ability to create security zones that are governed by policies enforced centrally; these policies usually control (or. | Network Virtualization Path Isolation Design Guide Contents Introduction 3 Path Isolation Overview 6 Policy-Based Path Isolation 7 Control Plane-Based Path Isolation 8 Network Device Virtualization with VRF 9 Data Path Virtualization Single- and Multi-Hop Techniques 11 Path Isolation Initial Design Considerations 12 Path Isolation Using Distributed Access Control Lists 14 Connectivity Requirements 15 Configuration Details 15 Path Differentiation 17 High Availability Considerations 19 Challenges and Limitations of Distributed ACLs 19 Path Isolation over the WAN using Distributed ACLs 19 Path Isolation using VRF-Lite and GRE 21 Connectivity Requirements 21 Configuration Details 23 Using Point-to-Point GRE 23 Using mGRE Technology 32 MTU Considerations 37 Loopback IP Address Considerations 39 High Availability Considerations 43 Using VRF-Lite and GRE over the WAN 44 Americas Headquarters Cisco Systems Inc. 170 West Tasman Drive San Jose CA 95134-1706 USA 2007 Cisco Systems Inc. All rights reserved. Contents Configuration Details 49 QoS in Hub-and-Spoke Deployments 51 Wired Clients 52 Wireless Clients 59 Challenges and Limitations Using VRF and GRE 68 Path Isolation Deploying MPLS VPN 69 MPLS VPN Technology Overview 69 MPLS Rehearsal 69 MPLS VPN Rehearsal 72 MPLS VPN in Campus 75 High Level Design Principles 75 Network Topologies 77 Network Device Roles 79 VRF and MPLS on Catalyst 6500 Platforms 80 Virtualizing the Campus Distribution Block 95 Configuring the Core Devices P Routers 117 Redundancy and Traffic Load Balancing 118 Dealing with MTU Size Issues 124 Tagging or not-Tagging Global Table Traffic 127 Convergence Analysis for VPN and Global Traffic 130 Summary of Design Recommendations 138 MPLS-Specific Troubleshooting Tools 139 Extending Path Isolation over the WAN 141 Overview 141 Design Options Three Deployment Models 141 Initial Conditions 142 Enterprise MPLS Terminology 142 Mapping Enterprise VRFs to Service Provider VPN Profile 1 143 Connecting the .

TỪ KHÓA LIÊN QUAN
TAILIEUCHUNG - Chia sẻ tài liệu không giới hạn
Địa chỉ : 444 Hoang Hoa Tham, Hanoi, Viet Nam
Website : tailieuchung.com
Email : tailieuchung20@gmail.com
Tailieuchung.com là thư viện tài liệu trực tuyến, nơi chia sẽ trao đổi hàng triệu tài liệu như luận văn đồ án, sách, giáo trình, đề thi.
Chúng tôi không chịu trách nhiệm liên quan đến các vấn đề bản quyền nội dung tài liệu được thành viên tự nguyện đăng tải lên, nếu phát hiện thấy tài liệu xấu hoặc tài liệu có bản quyền xin hãy email cho chúng tôi.
Đã phát hiện trình chặn quảng cáo AdBlock
Trang web này phụ thuộc vào doanh thu từ số lần hiển thị quảng cáo để tồn tại. Vui lòng tắt trình chặn quảng cáo của bạn hoặc tạm dừng tính năng chặn quảng cáo cho trang web này.