Building Cisco Remote Access Networks

by Syngress Media, Inc.

• ISBN13: 9781928994138
• ISBN10: 192899413X
• Format: Paperback
• Copyright: 2000-09-01
• Publisher: Elsevier Science Ltd

Summary

Covers the key protocols involved in the technology area of Cisco remote access networks. Provides the reader with instruction on interconnecting central sites to branch offices, as well as technical connectivity considerations. Softcover.

Table of Contents

Forword	xxiii
Introduction to BCRAN and Cisco Remote Access Solutions	1	(28)
Introduction	2	(1)
WAN Connection Requirements	2	(1)
WAN Topology and Specifications	3	(8)
Connection Types	4	(1)
Dedicated Connections	4	(2)
Circuit-Switched Connections	6	(4)
Packet-Switched Connections	10	(1)
WAN Encapsulation Protocols	11	(3)
SDLC	11	(1)
HDLC	11	(1)
SLIP	12	(1)
PPP	12	(1)
X.25	12	(1)
Frame Relay	13	(1)
ATM	13	(1)
Selecting Cisco Access Servers and Routers	14	(3)
700 Series	14	(1)
800 Series	14	(1)
900 Series	15	(1)
1000 Series	15	(1)
1400 Series	15	(1)
1600 Series	15	(1)
1700 Series	16	(1)
2500 Series	16	(1)
2600 Series	16	(1)
3000 VPN Concentrators	16	(1)
3600 Series	16	(1)
AS5000 Series	17	(1)
7100, 7200, and 7500 Series	17	(1)
Considerations Before Installing a Remote Access Network	17	(7)
Network Planning and Design	18	(1)
Proper Analysis	18	(3)
Identifying Suitable Equipment for Each Site	21	(2)
Staging and Testing	23	(1)
Remote Access Network Implementation Considerations	24	(1)
Change Control Procedures	24	(1)
Backout Plans	24	(1)
Minimizing Network Interruption	25	(1)
Coordination of Resources	25	(1)
Verifying and Troubleshooting Network Installation	25	(1)
Summary	25	(1)
FAQs	26	(3)
Configuring Asynchronous Remote Access Connections	29	(46)
Introduction	30	(1)
Modem Overview	30	(2)
Digital Modems	32	(1)
Modem Signaling and Cabling	32	(1)
Cisco Console and AUX Port Cabling	33	(1)
Modem Modulation Standards	34	(1)
Error Control and Data Compression Methods	35	(3)
Automatic Repeat Request (ARQ)	36	(1)
Microcom Networking Protocol (MNP)	36	(1)
Link Access Procedure for Modems (LAPM)	37	(1)
Data Compression Protocols	37	(1)
Configuring an Asynchronous Connection	38	(35)
Router Configuration	39	(9)
Modem Configuration	48	(1)
Manual Configuration	48	(3)
Automatic Configuration	51	(4)
Chat Scripts	55	(1)
Providing Asynchronous Dial-in Terminal Services	56	(1)
Terminal Services	57	(9)
The Autocommand Feature	66	(1)
Menus	67	(2)
EXEC Callback	69	(4)
Summary	73	(1)
FAQs	74	(1)
Using PPP to Provide Remote Network Access	75	(38)
Introduction	76	(1)
PPP Overview	76	(7)
PPP Features	77	(1)
Multiple Protocols per Communication Line	77	(1)
Authentication	77	(1)
Link Configuration and Negotiation	77	(1)
Error Detection	77	(1)
Header Compression	78	(1)
Bonding of Communications Links	78	(1)
LCP	79	(2)
NCP	81	(1)
PPP vs. SLIP and ARAP	81	(1)
Relevant RFCs	82	(1)
Configuring PPP	83	(16)
Autoselect	84	(1)
PPP Addressing Methods	84	(2)
PPP Link Control Options	86	(1)
PAP and CHAP Authentication	86	(5)
Authentication Failures	91	(1)
PPP Callback	91	(2)
MSCB	93	(1)
PPP Compression	93	(1)
MPPC	93	(1)
Compression Effects	94	(1)
Multilink PPP	94	(2)
Multichassis Multilink PPP	96	(3)
Verifying and Troubleshooting PPP	99	(5)
PPP and Cisco Access Servers	99	(1)
PPP and ISDN Connections between Cisco Routers	99	(5)
Providing Remote Access Services for Microsoft Windows Clients	104	(1)
Microsoft Specific PPP Options	104	(1)
Windows 95 Clients	105	(1)
Windows 98 Clients	105	(2)
Windows NT4 Clients	107	(1)
Windows 2000 Clients	108	(2)
Troubleshooting Microsoft Windows Connections	110	(1)
Summary	111	(1)
FAQs	112	(1)
Utilizing Virtual Private Network (VPN) Technology for Remote Access Connectivity	113	(38)
Introduction	114	(1)
VPN Technology	114	(5)
ISAKMP & IKE	114	(1)
IPSec	115	(1)
DES, Triple Pass DES & 3DES	116	(1)
VPN Operation	116	(1)
Cisco VPN Terminology	117	(2)
Site-to-Site VPN	119	(11)
An Intranet Solution	119	(1)
Configuring ISAKMP/IKE	120	(3)
Configuring IPSec	123	(3)
An Extranet Solution	126	(4)
Remote Access VPN	130	(13)
Configuring IPSec on the Network Access Server	131	(4)
Service Provider Solution	135	(1)
Configuring ISAKMP	136	(1)
Configuring IPSec	137	(1)
Configuring the VPN Client	138	(2)
Verifying and Debugging VPN Operation	140	(3)
Advantages and Disadvantages of VPN	143	(2)
Cisco's VPN Solutions	145	(3)
FW Solution (HW Accelerator)	145	(1)
3000 Series Product Line	145	(2)
Traditional Router with FW Feature Set	147	(1)
Policy Manager 2.x (VPN Configuration and Management)	147	(1)
Summary	148	(1)
FAQs	149	(2)
Using ISDN and DDR to Enhance Remote Access Connectivity	151	(58)
Introduction	152	(1)
ISDN Overview	152	(5)
Basic Rate Interface (BRI)	154	(1)
BRI Call Setup	154	(1)
BRI Reference Points and Functional Groups	155	(1)
Primary Rate Interface (PRI)	156	(1)
PRI Reference Points and Functional Groups	157	(1)
ISDN Protocol Layers	157	(2)
U-plane	158	(1)
C-plane	159	(1)
ISDN Call Setup and Teardown	159	(1)
Dial-on-Demand Routing (DDR)	159	(9)
Interesting Traffic	161	(1)
Topologies	162	(1)
Point-to-Point Topology	162	(1)
Fully Meshed Topology	162	(2)
Hub-and-Spoke Topology	164	(1)
Dialer Interfaces	165	(1)
Dialer Profiles	166	(1)
Dialer Rotary Groups	166	(1)
Dialer Addressing	166	(1)
Dialer Mapping	166	(1)
Encapsulation	167	(1)
Supported Interfaces	167	(1)
Configuring ISDN and DDR	168	(11)
Caller ID Screening	179	(1)
Routing Issues with DDR	179	(3)
Static and Default Routes	180	(1)
Snapshot Routing	180	(1)
OSPF On-demand Circuits	181	(1)
Route Redistribution	182	(1)
Monitoring and Troubleshooting ISDN and DDR	182	(13)
Monitoring the ISDN Interface	182	(4)
Monitoring the Dialer	186	(2)
Monitoring PPP Multilink	188	(1)
Monitoring Snapshot Routing	189	(1)
Troubleshooting ISDN and DDR	190	(5)
Walkthrough	195	(8)
Summary	203	(2)
FAQs	205	(4)
Enabling Dial-on-Demand Routing (DDR)	209	(24)
Introduction	210	(1)
Dialer Rotary Groups	210	(3)
Configuring Dialer Rotary Groups	210	(3)
Dialer Profiles	213	(4)
Physical Interface	214	(1)
Dialer List	214	(1)
Dialer Interface	214	(1)
Dialer Pool	214	(1)
Map Class	214	(1)
Configuring Dialer Profiles	215	(2)
Virtual Profiles	217	(6)
Case 1: Create a Virtual Profile Using the Virtual Template	218	(1)
Configure a Virtual Profile Using Virtual Templates	218	(1)
Case 2: Create a Virtual Profile Using the AAA Server	219	(1)
Configure a Virtual Profile Using the AAA Server	220	(1)
Case 3: Create a Virtual Profile Using Both the Virtual Template and AAA Server	221	(1)
Configure a Virtual Profile Using Both the Virtual Template and AAA Server	222	(1)
Fine Tuning Connections	223	(3)
Dialer Lists	223	(2)
Dialer Timers	225	(1)
Walkthrough	226	(5)
Summary	231	(1)
FAQs	232	(1)
Configuring and Backing Up Permanent Connections	233	(92)
Introduction	234	(1)
Configuring Point-to-Point Connections	234	(3)
X.25 Connections	237	(11)
X.25 Overview	237	(1)
Data Terminal Equipment (DTE) and Data Circuit-Terminating Equipment (DCE)	238	(1)
Frames in X.25	238	(2)
X.25 Virtual Circuits	240	(1)
X.25 Call Setup and Disconnection	240	(1)
Configuring X.25	241	(4)
Verifying and Troubleshooting X.25 Connections	245	(3)
Frame Relay Connections	248	(42)
Frame Relay Overview	248	(5)
Frame Relay Topologies	253	(2)
Split Horizon and Poison Reverse	255	(2)
Subinterfaces	257	(2)
Configuring Frame Relay	259	(4)
Verifying and Troubleshooting Frame Relay	263	(3)
Loopback Tests	266	(1)
Local Loopback	266	(1)
Remote Loopback	267	(4)
Frame Relay Traffic Shaping (FRTS)	271	(1)
Enable Frame Relay Traffic Shaping (FRTS) on the Interface	272	(1)
Configuring Traffic Shaping	272	(8)
Verifying Traffic Shaping	280	(10)
ATM Connections	290	(15)
ATM Overview	290	(1)
ATM Packet Format	290	(1)
ATM Adaptation Layer (AAL)	291	(1)
ATM Virtual Circuits	292	(1)
PVC Mapping and Circuit Buildup	292	(1)
Configuring ATM	293	(4)
Verifying and Troubleshooting ATM Connections	297	(3)
The debug atm packet Command	300	(2)
The debug atm state Command	302	(1)
The debug atm ilmi Command	303	(2)
Backing up Permanent Connections	305	(18)
Backup Interface	305	(3)
The backup load Command	308	(1)
Floating Static Routes and Default Routes	309	(1)
Frame Relay Configuration with ISDN backup	310	(5)
Dialer Watch	315	(1)
Configuring a Dialer Profile	316	(1)
Verifying and Troubleshooting Backup Connections	317	(4)
Routing Issues	321	(1)
Redundant Hardware and Links/Design and Performance Issues	321	(1)
Load Balancing	322	(1)
Summary	323	(1)
FAQs	324	(1)
Securing your Remote Access Network	325	(46)
Introduction	326	(2)
What is a Firewall?	326	(1)
Cisco IOS Firewall Feature Set	327	(1)
Firewall Feature Set Benefits and Features	327	(1)
Phase I	327	(1)
Phase I+	327	(1)
Phase II (Full Features)	327	(1)
Key Benefits	328	(1)
AAA Overview	328	(5)
AAA Servers	329	(1)
CiscoSecure	330	(1)
Authentication	331	(1)
Authorization	331	(1)
Accounting	332	(1)
Method-Lists	332	(1)
Security Protocols	333	(3)
Remote Authentication Dial-in User Service (RADIUS)	333	(1)
Terminal Access Controller Access Control System Plus (TACACS+)	333	(1)
Comparing TACACS+ and RADIUS	334	(2)
Using RADIUS and TACACS+ for AAA Services	336	(1)
Configuring AAA	336	(10)
Enabling AAA	336	(1)
Configuring the RADIUS or TACACS+ Parameters	336	(1)
Configuring TACACS+ Parameters	337	(1)
Configuring RADIUS Parameters	338	(1)
Configuring AAA Authentication	339	(1)
The aaa authentication login Command	339	(1)
The aaa authentication ppp Command	340	(1)
The aaa authentication enable default Command	341	(1)
Configuring AAA Authorization	342	(2)
Configuring AAA Accounting	344	(2)
Virtual Profiles and AAA	346	(12)
Scenario 1: Virtual Profiles Using Virtual Templates	347	(1)
Scenario 2: Virtual Profiles Using AAA Configuration	348	(1)
Scenario 3: Virtual Profiles Using Virtual Templates and AAA Configuration	349	(1)
Configuring Virtual Profiles	349	(1)
Configuring Virtual Profiles Using Virtual Templates	349	(3)
Configuring virtual Profiles Using AAA Configuration	352	(1)
Configuring Virtual Profiles Using Virtual Templates and AAA Configuration	352	(2)
Per-User Configuration Example	354	(1)
User `Remote' RADIUS Configuration	354	(1)
Network Access Server Configuration (central)	355	(3)
Monitoring and Verifying AAA Access Control	358	(4)
AAA Debug And Show Commands	358	(4)
Walkthrough	362	(6)
Summary	368	(1)
FAQs	368	(3)
Optimizing Network Performance with Queuing and Compression	371	(36)
Introduction	372	(1)
Network Performance	372	(1)
Queuing Overview	373	(22)
Queuing Methods and Configuration	373	(1)
First-in, First-out Queuing (FIFO)	374	(1)