chpt_01.book Page i Thursday, January 9, 2003 4:32 PM CCNP Self-Study CCNP BSCI Exam Certification Guide Clare Gough Cisco Press Cisco Press 201 W 103rd Street Indianapolis, IN 46290 chpt_01.book Page ii Thursday, January 9, 2003 4:32 PM ii CCNP BSCI Exam Certification Guide Clare Gough Copyright © 2003 Cisco Systems, Inc Published by: Cisco Press 201 West 103rd Street Indianapolis, IN 46290 USA All rights reserved No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review Printed in the United States of America First Printing January 2003 Library of Congress Cataloging-in-Publication Number: 20-02115641 ISBN: 1-58720-078-3 Warning and Disclaimer This book is designed to provide information about building scalable Cisco networks Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied The information is provided on an “as is” basis The author, Cisco Press, and Cisco Systems, Inc., shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it The opinions expressed in this book belong to the author and are not necessarily those of Cisco Systems, Inc Trademark Acknowledgments All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark Feedback Information At Cisco Press, our goal is to create in-depth technical books of the highest quality and value Each book is crafted with care and precision, undergoing rigorous development that involves the unique expertise of members from the professional technical community Readers’ feedback is a natural continuation of this process If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through e-mail at feedback@ciscopress.com Please make sure to include the book title and ISBN in your message We greatly appreciate your assistance chpt_01.book Page iii Thursday, January 9, 2003 4:32 PM iii Publisher Editor-in-Chief Executive Editor Cisco Representative Cisco Press Program Manager Cisco Marketing Communications Manager Cisco Marketing Program Manager Production Manager Acquisitions Editor Development Editor Copy Editor Technical Editors CD-ROM Question Authors CD-ROM Technical Editors Team Coordinator Book Designer Cover Designer Production Team Indexer Corporate Headquarters Cisco Systems, Inc 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 John Wait John Kane Brett Bartow Anthony Wolfenden Sonia Torres Chavez Tom Geitner Edie Quiroz Patrick Kanouse Michelle Grandin Dayna Isley Krista Hansing Keith Cline Jorge Aragon Steve Gifkins Martin Walshaw Steve Wisniewski David Barnes Martin Walshaw Steve Gifkins Mike Truett Tammi Ross Gina Rexrode Louisa Adair Mark Shirar Lisa Stumpf European Headquarters Cisco Systems Europe 11 Rue Camille Desmoulins 92782 Issy-les-Moulineaux Cedex France http://wwweurope.cisco.com Tel: 33 58 04 60 00 Fax: 33 58 04 61 00 Drew Cupp Timothy Sammut Brent Stewart Americas Headquarters Cisco Systems, Inc 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-7660 Fax: 408 527-0883 Asia Pacific Headquarters Cisco Systems Australia, Pty., Ltd Level 17, 99 Walker Street North Sydney NSW 2059 Australia http://www.cisco.com Tel: +61 8448 7100 Fax: +61 9957 4350 Cisco Systems has more than 200 offices in the following countries Addresses, phone numbers, and fax numbers are listed on the Cisco Web site at www.cisco.com/go/offices Argentina • Australia • Austria • Belgium • Brazil • Bulgaria • Canada • Chile • China • Colombia • Costa Rica • Croatia • Czech Republic • Denmark • Dubai, UAE • Finland • France • Germany • Greece • Hong Kong • Hungary • India • Indonesia • Ireland Israel • Italy • Japan • Korea • Luxembourg • Malaysia • Mexico • The Netherlands • New Zealand • Norway • Peru • Philippines Poland • Portugal • Puerto Rico • Romania • Russia • Saudi Arabia • Scotland • Singapore • Slovakia • Slovenia • South Africa • Spain Sweden • Switzerland • Taiwan • Thailand • Turkey • Ukraine • United Kingdom • United States ã Venezuela ã Vietnam ã Zimbabwe Copyright â 2000, Cisco Systems, Inc All rights reserved Access Registrar, AccessPath, Are You Ready, ATM Director, Browse with Me, CCDA, CCDE, CCDP, CCIE, CCNA, CCNP, CCSI, CD-PAC, CiscoLink, the Cisco NetWorks logo, the Cisco Powered Network logo, Cisco Systems Networking Academy, Fast Step, FireRunner, Follow Me Browsing, FormShare, GigaStack, IGX, Intelligence in the Optical Core, Internet Quotient, IP/VC, iQ Breakthrough, iQ Expertise, iQ FastTrack, iQuick Study, iQ Readiness Scorecard, The iQ Logo, Kernel Proxy, MGX, Natural Network Viewer, Network Registrar, the Networkers logo, Packet, PIX, Point and Click Internetworking, Policy Builder, RateMUX, ReyMaster, ReyView, ScriptShare, Secure Script, Shop with Me, SlideCast, SMARTnet, SVX, TrafficDirector, TransPath, VlanDirector, Voice LAN, Wavelength Router, Workgroup Director, and Workgroup Stack are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, Empowering the Internet Generation, are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, Cisco, the Cisco Certified Internetwork Expert Logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Collision Free, Enterprise/Solver, EtherChannel, EtherSwitch, FastHub, FastLink, FastPAD, IOS, IP/TV, IPX, LightStream, LightSwitch, MICA, NetRanger, Post-Routing, Pre-Routing, Registrar, StrataView Plus, Stratm, SwitchProbe, TeleRouter, are registered trademarks of Cisco Systems, Inc or its affiliates in the U.S and certain other countries All other brands, names, or trademarks mentioned in this document or Web site are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company (0010R) chpt_01.book Page iv Thursday, January 9, 2003 4:32 PM iv About the Author Clare Gough, CCIE No 2893, has been a certified Cisco Systems instructor for the ICRC, ACRC, CIT, CLSC, and CID courses She holds a master's degree in education and a master’s degree in information systems Over the last 15 years, she has developed and taught a variety of networking and internetworking courses throughout the world for Digital Equipment Company and various Cisco training partners She moved from England in 1991 and now lives in San Francisco with her family About the Technical Reviewers Jorge Aragon, CCIE No 5567, is a network engineer with Perot Systems Corporation (PSC) in Dallas, Texas He holds a bachelor of science degree in electrical engineering from the National Polytechnic Institute in Mexico, and has a master of science degree in telecommunications from the University of Pittsburgh He also holds an MCSE certification and several Cisco specializations Jorge is part of the PSC Global Infrastructure team, where he designs, implements, and troubleshoots LAN and WAN networks for clients in multiple industries across the globe He enjoys spending time with his wife and children, reading, jogging, and practicing martial arts Jorge can be reached at jorge.aragon@ps.net Steve Gifkins is a CCIE and CCSI of four and five years, respectively He is based in the United Kingdom, where he runs his own independent Cisco-only consulting and training business He is married with no children, and his hobbies include anything to with outdoor life Having retired with a knee injury from playing active sports such as squash, rugby, and soccer, he has taken up new hobbies in horse eventing and show jumping In addition, he enjoys skiing and hill scrambling Tim Sammut, CCIE No 6642, is a senior network engineer for ExtraTeam, a Cisco partner in San Francisco, California Tim has served in key project roles involving technologies from LAN switching to security to SNA integration and has helped many organizations, ranging from 100 to 130,000 users, make the most of their network investment Tim also holds the CISSP, CCIE Security, MCNE, and MCSE certifications Brent Stewart is a Cisco instructor for Global Knowledge As a Global Knowledge employee, he participated in the development of ICND, BSCI, BCMSN, BCRAN, and CIT for Internet-based delivery and served as SME (Subject Matter Expert) for the CD-based ICND and CIT titles He is currently participating in the BSCI 2.0 update as the lab development engineer Prior to working for Global Knowledge, Brent owned an ISP and worked as an IT consultant Brent holds the CCNP and CCDP certifications Martin Walshaw, CCIE No 5629, CCNP, CCDP, is a systems engineer working for Cisco Systems in the enterprise line of business in South Africa His areas of specialty are multiservice (voice and video) as well as security, which keeps him busy both night and day During the last 12 years or so, Martin has dabbled in many aspects of the IT industry, ranging from programming in RPG III and Cobol to PC sales When Martin is not working, he likes to spend all his available time with his wife, Val, and his son, Joshua Without their patience, understanding, and support, projects such as this would not be possible Steve Wisniewski is CCNP certified and has a master of science degree from Stevens Institute of Technology in telecom management Steve works for Lehman Brothers as a senior implementation specialist implementing Cisco switches and routers He has also previously edited several other Cisco books and authored a book titled Network Administration for Prentice Hall Steve lives in East Brunswick, New Jersey, with his wife, Ellen chpt_01.book Page v Thursday, January 9, 2003 4:32 PM v Dedication This book is dedicated to David and Jack, who make everything worthwhile chpt_01.book Page vi Thursday, January 9, 2003 4:32 PM vi Acknowledgments All books are the product of a team, and I have been blessed with a dedicated and professional team, whose expertise in their given areas have made this book Over the course of writing this book and its predecessor, I have come to think of members of this team as friends as well as colleagues In particular, I would like to thank John Kane, the editor in chief, and Drew Cupp, the development editor, who were always there with solutions and support My thanks go also to Amy Lewis for her understanding and flexibility Of course, I thank all the members of the Cisco Press team helping to bring this book together, including the project editor, Marc Fowler, and the copy editor, Krista Hansing The technical editors, Steve Gifkins, Martin Walshaw, Jorge Aragon, and Steve Wisniewski, were extremely thorough Their careful attention to detail and constructive advice improved this book immeasurably I would particularly like to thank Jorge Aragon and Steve Wisniewski who went the extra mile by testing configurations and producing output screens I would also like to thank Wendell Odom, who led me into the art of book writing and has ever generously shared his expertise Of course, I am immensely grateful to my husband, David, for his support, in spite of the long hours demanded by this book, and to our small son, Jack, for making me laugh and see the joy of life chpt_01.book Page vii Thursday, January 9, 2003 4:32 PM vii Contents at a Glance Chapter Cisco Certifications, the BSCI Exam, and This Book’s Features Chapter Managing Scalable Network Growth Chapter IP Addressing Chapter IP Routing Principles Chapter Using OSPF in a Single Area Chapter Using OSPF Across Multiple Areas Chapter Configuring the Integrated IS-IS Protocol Chapter Using EIGRP in Enterprise Networks Chapter Connecting to Other Autonomous Systems—The Basics of BGP-4 Chapter 10 Implementing and Tuning BGP for Use in Large Networks Chapter 11 Controlling Routing Updates Across the Network Chapter 12 Scenarios for Final Preparation Appendix A Answers to Quiz Questions Appendix B Sample Configurations Appendix C Glossary Index 903 859 27 83 157 843 205 771 665 283 339 423 593 539 483 chpt_01.book Page viii Thursday, January 9, 2003 4:32 PM viii Contents Chapter Cisco Certifications, the BSCI Exam, and This Book’s Features Goals of This Book This Book’s Intended Audience Prerequisites to Reading the Book Overview of Cisco Certifications Exams Required for Certification What’s on the BSCI Exam Cisco BSCI Exam Outline File Excerpts from Cisco.com Author’s Note About Exam Content 12 Topics in This Book 13 How to Use This Book to Pass the Exam 15 I’ve Taken BSCI—Now What? 17 I’ve Taken the Cisco Networking Academy Courses—Now What? 17 I’m New to Internetworking with Cisco, and I Will Not Be Taking the BSCI Course—Now What? 18 I’ve Learned a Lot About CCNP Topics Through Experience, But I Will Not Be Taking the BSCI Course—Now What? 19 The Features of This Book 20 Command Syntax Conventions 20 References and Suggested Reading 21 Strategies for The Exam Day 21 Icons Used in This Book 22 Conclusion 24 Chapter Managing Scalable Network Growth 27 How to Best Use This Chapter 27 “Do I Know This Already?” Quiz 28 Foundation Topics 32 Introduction to Corporate Networks—Growth, Scalability, and Congestion 32 Key Requirements of a Network 33 Reliability 33 chpt_01.book Page ix Thursday, January 9, 2003 4:32 PM ix Responsiveness 33 Efficiency 34 Adaptability/Serviceability 34 Accessibility/Security 34 Factors That Increase Network Traffic 35 Identifying the Problems Created by Network Congestion 35 Traffic Analysis and Network Design 35 Problems Created by Network Congestion 36 Excessive Traffic 36 Physical Problems of Ethernet 36 Dropped Packets 37 Retransmission of Packets 37 Incomplete Routing Tables 37 Incomplete Server Lists 38 The Spanning-Tree Protocol Breaks 38 Runaway Congestion 39 Symptoms of Congestion 39 Applications Time Out 40 Clients Cannot Connect to Network Resources 40 Network Death Results 40 Creating a Network That Meets the Key Requirements 40 Cisco’s Hierarchical Design 41 Why Scaling Reduces Congestion 41 How Hierarchical Is Hierarchical? 41 The Functions of Each Layer 41 The Access Layer 42 The Distribution Layer 42 The Core Layer 42 General Design Rules for Each Layer 42 IP Access Lists: Alleviating Congestion with Cisco Routers 43 Cisco Proprietary Solutions 44 Managing Network Congestion for IP 44 The Implementation of IP Access Lists 44 IP Access List Overview 45 Standard IP Access Lists 45 Extended IP Access Lists 46 Guidelines for Writing Access Lists 48 Verifying Filter Configuration 49 chpt_01.book Page x Thursday, January 9, 2003 4:32 PM x Uses of IP Access Lists 51 Security Using Access Lists 51 Controlling Terminal Access 51 Configuration 52 Traffic Control Through Routing Updates 52 Prioritization 54 Types of Prioritization 54 Reducing Network Traffic: Alternatives to Access Lists 55 Null Interface 55 Configuration of Null Interfaces 55 Internet Example 55 Intranet Example 56 CPU Considerations and Additional Methods for Controlling Network Traffic 57 Fast, Autonomous, and Silicon Switching 58 Cisco Express Forwarding 58 Placement of Client/Server 59 Design Principles of a Client/Server Network 59 IP Helper Address 59 Configuration of IP Helper Address 60 Enhanced Interior Gateway Routing Protocol 60 Tunneling into IP 61 Configuration of Tunneling into IP 63 Conclusion 64 Foundation Summary 65 Chapter Glossary 68 Q & A 69 Scenarios 74 Scenario 2-1 74 Scenario 2-2 76 Scenario 2-3 76 Scenario Answers 77 Scenario 2-1 Answers 77 Scenario 2-2 Answers 78 Scenario 2-3 Answers 79 ... for Certification What’s on the BSCI Exam Cisco BSCI Exam Outline File Excerpts from Cisco.com Author’s Note About Exam Content 12 Topics in This Book 13 How to Use This Book to Pass the Exam. .. Chapter Cisco Certifications, the BSCI Exam, and This Book’s Features Goals of This Book This Book’s Intended Audience Prerequisites to Reading the Book Overview of Cisco Certifications Exams Required...chpt_01.book Page ii Thursday, January 9, 2003 4:32 PM ii CCNP BSCI Exam Certification Guide Clare Gough Copyright © 2003 Cisco Systems, Inc Published by: Cisco Press 201