Title Page
by Nir Ben-Dvora, Anthony Lockhart, David Prall, Jean-Marc Barozet, Brad Edgeworth
Cisco Intelligent WAN (IWAN)
- About This E-Book
- Title Page
- Copyright Page
- About the Authors
- About the Technical Reviewers
- Dedications
- Acknowledgments
- Contents at a Glance
- Contents
- Icons Used in This Book
- Command Syntax Conventions
- Foreword
- Introduction
- Part I: Introduction to IWAN
- Part II: Transport Independent Design
- Chapter 2. Transport Independence
- Chapter 3. Dynamic Multipoint VPN
- Generic Routing Encapsulation (GRE) Tunnels
- Next Hop Resolution Protocol (NHRP)
- Dynamic Multipoint VPN (DMVPN)
- DMVPN Configuration
- Spoke-to-Spoke Communication
- Problems with Overlay Networks
- IP NHRP Authentication
- Unique IP NHRP Registration
- DMVPN Failure Detection and High Availability
- DMVPN Dual-Hub and Dual-Cloud Designs
- IWAN DMVPN Sample Configurations
- Sample IWAN DMVPN Transport Models
- Backup Connectivity via Cellular Modem
- IWAN DMVPN Guidelines
- Troubleshooting Tips
- Summary
- Further Reading
- Chapter 4. Intelligent WAN (IWAN) Routing
- Routing Protocol Overview
- Topology
- WAN Routing Principles
- EIGRP for IWAN
- Border Gateway Protocol (BGP)
- BGP Routing Logic
- Base Configuration
- BGP Neighbor Sessions
- Default Route Advertisement into BGP
- Routes Learned via DMVPN Tunnel Are Always Preferred
- Branch Router Configuration
- Changing BGP Administrative Distance
- Route Advertisement on DMVPN Hub Routers
- Traffic Steering
- Complete BGP Configuration
- Advanced BGP Site Selection
- FVRF Transport Routing
- Multicast Routing
- Summary
- Further Reading
- Chapter 5. Securing DMVPN Tunnels and Routers
- Part III: Intelligent Path Control
- Chapter 6. Application Recognition
- What Is Application Recognition?
- What Are the Benefits of Application Recognition?
- NBAR2 Application Recognition
- NBAR2 Application ID, Attributes, and Extracted Fields
- NBAR2 Operation and Functions
- Custom Applications and Attributes
- NBAR2 State with Regard to Device High Availability
- Encrypted Traffic
- NBAR2 Interoperability with Other Services
- NBAR2 Protocol Discovery
- NBAR2 Visibility Dashboard
- NBAR2 Protocol Packs
- Release and Download of NBAR2 Protocol Packs
- NBAR2 Protocol Pack License
- Application Customization
- NBAR2 Protocol Pack Types
- NBAR2 Protocol Pack States
- Identifying the NBAR2 Software Version
- Verifying the Active NBAR2 Protocol Pack
- Loading an NBAR2 Protocol Pack
- NBAR2 Taxonomy File
- Protocol Pack Auto Update
- Validation and Troubleshooting
- Verify the Software Version
- Check the Device License
- Verifying That NBAR2 Is Enabled
- Verifying the Active NBAR2 Protocol Pack
- Checking That Policies Are Applied Correctly
- Reading Protocol Discovery Statistics
- Granular Traffic Statistics
- Discovering Generic and Unknown Traffic
- Verifying the Number of Flows
- Summary
- Further Reading
- Chapter 7. Introduction to Performance Routing (PfR)
- Chapter 8. PfR Provisioning
- Chapter 9. PfR Monitoring
- Chapter 10. Application Visibility
- Chapter 6. Application Recognition
- Part IV: Application Optimization
- Chapter 11. Introduction to Application Optimization
- Chapter 12. Cisco Wide Area Application Services (WAAS)
- Chapter 13. Deploying Application Optimizations
- Part V: QoS
- Chapter 14. Intelligent WAN Quality of Service (QoS)
- Part VI: Direct Internet Access
- Chapter 15. Direct Internet Access (DIA)
- Guest Internet Access
- Guest Access Quality of Service (QoS)
- Guest Access Web-Based Acceptable Use Policy
- Internal User Access
- Fully Specified Static Default Route
- Verification of Internet Connectivity
- Network Address Translation (NAT)
- Policy-Based Routing (PBR)
- Internal Access Zone-Based Firewall (ZBFW)
- Cloud Web Security (CWS)
- Baseline Configuration
- Outbound Proxy
- WAAS and WCCP Redirect
- Prevention of Internal Traffic Leakage to the Internet
- Summary
- References in this Chapter
- Chapter 15. Direct Internet Access (DIA)
- Part VII: Migration
- Chapter 16. Deploying Cisco Intelligent WAN
- Part VIII: Conclusion
- Appendix A. Dynamic Multipoint VPN Redundancy Models
- Appendix B. IPv6 Dynamic Multipoint VPN
- Index
- Code Snippets
Cisco Intelligent WAN (IWAN)
Brad Edgeworth, CCIE No. 31574
Jean-Marc Barozet
David Prall, CCIE No. 6508
Anthony Lockhart
Nir Ben-Dvora
800 East 96th Street
Indianapolis, Indiana 46240 USA
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.