Module 3 Picture Descriptions Module 3.0 ? Chapter Introduction 3.0.1 ? Introduction One Diagram Diagram 1, Slideshow Introduction Slide 1 Before a new design can be created, the existing network must be investigated and characterized. Slide 2 The design team determines the strengths and weaknesses of the existing network that must be addressed with the new design. Slide 3 To prepare the network for the introduction of new technologies, the existing network devices are updated. Slide 4 A complete design requirements document is created and approved in order to move to the next phase of the project. Slide 5 Upon successfully completing this chapter, you will be able to: Characterize an existing network to identify strengths and weaknesses present in the design. Choose the appropriate hardware and software upgrades to prepare the network for the integration of new technologies. Upgrade the Cisco IOS software on a router or switch. Describe the process to perform a wireless site survey. Create a detailed network Design Requirements document. Module 3.1 ? Documenting the Existing Network 3.1.1 ? Creating a Network Diagram Five Diagrams Diagram 1, Image Contains no useful information Diagram 2, Image Screen capture of Cisco Network Assistant application Diagram 3, Image The picture depicts some of the Cisco IOS commands a network designer may user to learn about devices. The commands are as follows: Show ip route Show running-config Show cdp neighbors detail Diagram 4, Activity You are connected to a Cisco 1841 router using Hyperterminal the show cdp neighbors detail command has been issued to view the surrounding devices. Use the commands output to answer the following questions. Exhibit EdgeRouter#show cdp neighbors detail Device ID: TeamSwitch Entry address(es): IP address: 192.168.5.2 Platform: cisco WS-C2960-24TT-L, Capabilities: Switch IGMP Interface: FastEthernet0/0/1, Port ID (outgoing port): GigabitEtherent0/1 Holdtime: 155 sec Version: Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)SEE2, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2006 by Cisco Systems, Inc. Compiled Fri 28-Jul-06 04:33 by yenanh Advertisement Version 2 Protocol Hello: OUI=0x00000C, Protocol ID=0x0112; payload len=27, Value=000000000FFFFFFFF010221FF00000000000000019A9A7F00FF000 VTP Management Domain: Native VLAN: 1 Duplex: full Power drawn: 4.294 Watts Diagram 5, Packet Tracer Lab Investigating Existing Network Devices Device ID: VendorSwitch Entry address(es): Platform: cisco WS-C2950-24, Capabilities: Switch IGMP Interface: FastEthernet0/0/0, Port ID (outgoing port): FastEthernet0/1 Hooldtime: 151 sec Version: Cisco Internetwork Operating System Software ISO (tm) C9250 Software (C2950-I6Q4L2-M), Version 12.1(11)EA1, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2002 by cisco Systems, Inc. Compiled Wed 28-August-02 10:25 by antonino Advertisement version: 2 Protocol Hello: OUI=0x00000C, Protocol ID=0x0112; payload len=27, Value=00000000FFFFFFFF010221FF000000000000000B5F4D7780FF0000 VTP Management Domain: ?? Duplex: full Power drewn: 4.294 Watts Device ID: StadiumSwitch Entry address(es): IP address: 192.168.5.4 Platform: cisco WS-C3550-24, Capabilities: Switch IGMP Interface: FastEthernet0/0/3, Port ID (outgoing port): FastEthernet0/1 Holdtime: 138 sec Version: Cisco Internetwork Operating System Software IOS (tm) C3550 Software (C3550-I5Q3L2-M), Version 12.1(19)EA1c, RELEASE SOFTWARE (fc2) Copyright (c) 1986-2004 by cisco Systems, Inc. Compiled Tue 03-Feb-04 05:31 by yenanh Advertisement version: 2 Protocol Hello: OUI=0x00000C, Protocol ID=0x0112; payload len=27, Value=00000000FFFFFFFF010221FF0000000000000000F34F55E00FF0000 VTP Management Domain: ?? Native VLAN: 1 Duplex: full Power drawn: 4.294 Watts Device ID: VIPSwitch Entry address(es0: IP address: 192.168.5.3 Platform: cisco WS-C2960-24TT-L, Capabilities: Switch IGMP Interface: FastEthernet0/0/2, Port ID (outgoing port): GigabitEthernet0/1 Holdtime: 147 sec Version: Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)SEE2, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2006 by Cisco Systems, Inc. Compiled Fri 28-Jul-06 04:33 by yenanh Advertisement version: 2 Protocol Hello: OUI=0x00000C, Protocol ID=0x0112; payload len=27 Value=00000000FFFFFFFF010221FF000000000000000019AA8D1180FF0000 VTP Management Domain: ?? Native VLAN: 1 Duplex: full Power drawn: 4.294 Watts EdgeRouter# 1. How is the teamSwitch connected to the EdgeRouter? Fast Ethernet 0/1 Fast Ethernet 0/0/0 Fast Ethernet 0/0/1 Fast Ethernet 0/0/2 Fast Ethernet 0/0/3 Gigabit Ethernet 0/1 2. How is the VendorSwitch connected to the 1841 EdgeRouter? Fast Ethernet 0/1 Fast Ethernet 0/0/0 Fast Ethernet 0/0/1 Fast Ethernet 0/0/2 Fast Ethernet 0/0/3 Gigabit Ethernet 0/1 3. What model type is the VendorSwitch? 2950 with 24 ports 2960 with 16 ports 2960 with 24 ports 3550 with 24 ports 4. What IOS version is the TeamSwitch currently running? Version 2 Version 12.1 Version 12.2 Version 25 Version C2960-LANBASE-M Version WS-C2960-24TT-L 5. What duplex is running between the EdgeRouter and the TeamSwitch? Full Half Auto Administratively down 6. Based on the show cdp neighbors detail command, what can be said about the directly connected devices? The EdgeRouter device has 3 directly connected devices. Telnet can not be used to modify the VendorSwtch device. The VendorSwitch Device connects to the FastEthernet 0/0/3 port on the EdgeRouter device. The TeamSwitch device and the VIPSwitch device are not on the same VLAN management network. How many devices running CDP are directly connected to the Edge Router? 3 4 5 6 7 8 Diagram 5, Packet Tracer Exercise 3.1.2 ? Diagramming the Logical Architecture Three Diagrams Diagram 1, Image Diagramming the Logical Architecture The picture depicts a Network Overview Diagram, The Diagram outlines the buildings architecture (Offices) and identifies the entire network architecture as it is structured in the building. Diagram 2, Image The picture depicts a Logical Diagram, The Diagram identifies the entire network architecture as it is structured in the building. This includes IP Addressing of specific devices, Cabling, and specific teams connected to each device (Accounting Management). Diagram 3, Hands On Lab 3.1.3 ? Developing a Modular Diagram Two Diagrams Diagram 1, Image Developing a Modular Diagram The picture depicts a Modular Block Diagram, The diagram outlines the buildings architecture (Offices) and identifies the entire network architecture as it is structured in the building. The diagram has been broken down into four sections, End Devices, Access Layer, Distribution Layer, Core Services ad Management. The End Devices block include all Hosts, Servers, The Access Layer Block includes all Switches, The Distribution Layer shows all connections to the Gateway/Edge Router, and the Core Services and Management Block includes the Gateway/Edge Router. Diagram 2, Packet Tracer Exercises 3.1.4 ? Strengths and Weaknesses of the Existing Network Three Diagrams Diagram 1, Image The picture depicts a Network Overview Diagram, The Diagram outlines the buildings architecture (Offices) and identifies the entire network architecture as it is structured in the building. The has one Room (Room 116) highlighted, this is the room that has been chosen for the new data center. The picture shows that two switches from other locations will connect to this room. Diagram 2, Image The picture depicts a block Diagram, highlighting the entire architecture of the Network. The Network equipment has been broken down into four categories, equipment that can be reused, No stateful Firewall, Infrastructure has adequate wiring, No redundant connectivity. These categories have been highlighted on the map, this will assist the Administrator to determine which equipment needs attention, which equipment needs replacement. Diagram 3, Packet Tracer Exercise Module 3.2 ? Updating the Existing Cisco IOS 3.2.1 ? Cisco CCO Features and Navigation One Diagram Diagram 1, Image Cisco CCO Features and Navigation, contains 5 screen captures of the registration process web pages. 3.2.2 ? Investigating the Installed Cisco IOS Software Four Diagrams Diagram 1, Animation The picture depicts a screen capture of a Routers Command Prompt, highlighting the key information required when Verifying the System. The highlighted information?s is as follows: IOS Version ISO(tm)2500 Software (C2500-1-L), Version 12.0(17a), RELEASE SOFTWARE (fc1) Bootstrap Version ROM:system Bootsttrap, Version 11.0(10c), SOFTWARE BOOTFLASH :3000 Bototstrap Software (IGS-BOOT_R), Version 11.0(10c), RELEASE SOFTWARE(fc1) Model and CPU Cisco 2500 ((68030 processor) revision N) Amount of RAM With 2048K/2048K Number and type of interfaces 1 Ethernet/IEEE 802.3 interfaces(s) 2 Serial network interfaces(s) Amount of NVRAM 32K bytes of non-volatile Configuration memory. Amount of flash 8192K bytes of processor board system flash (Read ONLY) Diagram 2, Hands On Lab Diagram 3, Image Investigating the Installed Cisco IOS Software The picture depicts features of Cisco IOS software, and how they are represented in the IOS Filename. Advanced Enterprise Services ? Full Cisco IOS Software Filename ? c2800nm-adventerprisek9-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? adventerprisek9 Hardware Platform (2800 Series Integrated Services Router) ? c28nm Advanced IP Services - IPv6, Advanced Security, Service Provider Services Filename ? c2800nm-advipservicesk9-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? advipservicesk9 Hardware Platform (2800 Series Integrated Services Router) ? c28nm Enterprise Services ? Enterprises Base, Full IBM support, Service Provider Services Filename ? c2800nm-entservicesk9-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? entservicesk9 Hardware Platform (2800 Series Integrated Services Router) ? c28nm Advanced Security ? Cisco IOS Firewall, IDS, IPSec, 3DES, VPN, SSH Filename ? c2800nm-advsecurityk9-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? advsecurityk9 Hardware Platform (2800 Series Integrated Services Router) ? c28nm SP Services ? MPLS, SSH, ATM, VoATM Filename ? c2800nm-spservicesk9-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? spservicesk9 Hardware Platform (2800 Series Integrated Services Router) ? c28nm Enterprise Base ? Multi-protocols, IBM Support Filename ? c2800nm-entbase-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? entbase Hardware Platform (2800 Series Integrated Services Router) ? c28nm IP Voice ? VoIP, VoFR and IP Telephony Filename ? c2800nm-ipvoice-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? ipvoice Hardware Platform (2800 Series Integrated Services Router) ? c28nm IP Base ? Entry level Cisco IOS Software Image Filename ? c2800nm-ipbase-mz.123-14.T7.bin Version Number (12.3(14)T7) ? 123-14.T7.bin File Format (RAM compressed) - -mz Feature Set (Supported Feature Set) ? ipbase Hardware Platform (2800 Series Integrated Services Router) ? c28nm Diagram 4, Image The picture depicts the implementation of a Firewall, There is a test network, which the firewall has been placed in front of to both separate it from the rest of the network, and protect it. 3.2.3 ? Choosing an Appropriate Cisco IOS Image Three Diagrams Diagram 1, Image The picture depicts the use of CCO Feature Navigator, to determine the correct IOS Version for your hardware. 1. From the Cisco.com Homepage select Tools & Resources. 2. Select Tool by Category. 3. NOTE: Software downloads are available only to registered Cisco.com users with a Cisco service contract. NOTE: This page changes frequently. If you cannot find Feature Navigator using these directions, please use the Search Function to find the Feature Navigator. More Information Cisco IOS Release Codes: Early Deployment (ED) Early Deployment (ED) relates to software releases that provide new features and new platform support. The releases also provide bug fixes. Limited Deployment (LD) A Major Release of Cisco IOS or a Release Train of Catalyst OS (CatOS) software is said to be in the "Limited Deployment" phase of its life cycle during the period between Early Deployment (ED) and the General Deployment (GD) milestone. No new features or new platform support is added in this phase, only bug fixes. General Deployment (GD) Date at which this software release reached the "General Deployment" milestone in its life cycle. A Major Release of Cisco IOS or a Release Train of CatOS software reaches the "General Deployment" milestone when Cisco feels it is suitable for deployment anywhere in customer networks where the features and functionality of the release are required. An example of a Cisco IOS Major Release that has reached GD is 12.2. An example of a CatOS Release Train that has reached GD is 7.x. Criteria for reaching the "General Deployment" milestone are based on, but not limited to, customer feedback surveys from production and test networks using the releases, CE bug reports, and reported field experience. Diagram 2, Hands On Lab Diagram 3, Image Choosing an Appropriate Cisco IOS Image The picture depicts installation of new IOS Software from a TFTP Server, there are two screen captures of a Routers command line as follows: Copy to TFTP Server Router1#show flash # - 1 length - 15372500 date/time ? Oct 3 2007 19:44:08 path ? c1841-ipbase-mz-124-4.T7.bin # - 2 length ? 14516669 date/time ? Oct 3 2007 18:53:46 path ? SDM-V241.zip 2174976 bytes available (29896704 bytes used) Router1#copy flash tftp Source filename []? C1841-ipbase-mz-124-4.T7.bin Address or name of remote host []? 172.17.1.1 Destination filename [c1841-ipbase-mz-124-4-T7.bin]? !!!!!!! 15372500 bytes copied in 51.388 secs (299146 bytes/sec) Router1# Copy from TFTP Server Router1#copy tftp flash Address or name of remote host []? 172.17.1.1 Source fileame []? c1841-ipbase-mz-124-4.T7.bin Destination filename [c1841-ipbase-mz-124-4.T7.bin]? %Warning:there is a file already existing with this name Do you want to over write? [confirm] Accessing://172.17.1.1/c1841-ipbase-mz-124-4.T7.bin? Loading c1841-ipbase-mz-124-4.T7.bin from 172.17.1.1 (via FaastEthernet0/0) [OK ? 15372500 bytes] 15372500 bytes copied in 52.704 secs (291676 bytes/sec) Router1# 3.2.4 ? Download and Install Cisco IOS Software Five Diagrams Diagram 1, Image The picture depicts a screen capture of the Cisco Website (Cisco Feature Navigator), the Search by Software tab has been highlighted. There are sections highlighted as follows: DRAM: min Flash ? 128/32 Release Notes Diagram 2, Image The picture depicts a Screen Capture of a Routers command prompt, displaying the results of the show file systems command. Diagram 3, Animation The animation depicts the use of the copy tftp flash command. Router issues the copy tftp flash command, the TFTP server receives the request and responds sending the Router the desired information. Diagram 4, Packet Tracer Exercise Diagram 5, Hands On Lab 3.2.5 ? The Router Startup Process Two Diagrams Diagram 1, Tabular The picture depicts the stages of the bootup process. 1. Perform POST ROM ? POST ? Perform Post 2. Execute Bootstrap Loader ROM ? Bootstrap Load Bootstrap 3. Locate the IOS Flash ? Cisco Internetwork Operating System ? Locate and Load operating System 4. Load the IOS TFTP Server ? Cisco Internetwork Operating System ? Locate and load Operating System 5. Locate the Configuration file NVRAM ? Configuration ? Locate and load Configuration file or enter ?setup? mode 6. Execute the Configuration file? TFTP Server ? Configuration ? Locate and load Configuration file or enter ?setup? mode or 7 Enter Setup Mode ? Console Console ? Configuration ? Locate and load Configuration file or enter ?setup? mode Diagram 2, Hands On Lab Module 3.3 ? Upgrading Existing Hardware 3.3.1 ? Investigating Installed Hardware Features One Diagram Diagram 1, Image The picture depicts the internal and external components of a Router, which are as follows: Internal Synchronous dynamic RAM (SDRAM) - used for holding the running configuration and routing tables, and for supporting packet buffering. Nonvolatile RAM (NVRAM) - and boot flash memory used for storing the ROMMON boot code as well as NVRAM data. Advanced Integration Module (AIM) option that offloads processor-intensive functions such as encryption from the main CPU. [CPU Shield for WAN interface card WIC or high-speed WIC (HWIC) x2 Power Supply Fan External High-speed WIC (HWIC) x2 USB port Fast Ethernet ports Console port Auxiliary (Aux) port Power cable connector 3.3.2 ? Investigating Appropriate Hardware Options Three Diagrams Diagram 1, Image Diagram depicts the steps on locating the router documentation from the cisco.com web site. Diagram 2, Activity Investigating Appropriate hardware Options To support voice, video, and data traffic on a new network, the designer has listed the possible technologies and media. Match the connection to the corresponding technology. Connections A: Fiber Gigabit NICs for servers B: 10/100 Mbps copper to 2950 switch C: 2960 switch with SFP module D: 1841 ISR router High-speed serial interface E: 1841 ISR router with DSL interface for high-speed digital subscriber line DSL Technologies 1. End User connection to Access Layer switch 2. High bandwidth connections in the data center 3. Connection between two WAN sites 4. Connection to the Network layer 5. Connection to the Internet 6. Connection between two Distribution Layer switches Diagram 3, Hands On Lab 3.3.3 ? Installing a New Hardware Option Two Diagrams Diagram 1, Animation Animation depicts the installation of an options card being installed on an 1841 router. Diagram 2, Packet Tracer Exercise Module 3.4 ? Performing a Wireless Site Survey 3.4.1 ? Visiting the Customer Site Four Diagrams Diagram 1, Image Contains no useful information Diagram 2, Image Contains no useful information Diagram 3, Image Contains no useful information Diagram 4, Hands On Lab 3.4.2 ? Physical Network Considerations Two Diagrams Diagram 1, Image The picture depicts a map of a Stadium with a wireless network installed. The map shows both where the Access Points are installed, and points in the stadium where interference could be an issue. Diagram 2, Activity Determine whether the following scenarios will or will not reduce wireless coverage in the stadium (see section 3.4.2, Diagram 1) 1. Thick concrete pillars and walls between the luxury suites 2. Microwave ovens in the concession areas and luxury boxes 3. Rapidly changing video and digital advertising billboards 4. Spectators using the messaging features on their cellular mobile phones 5. Sports and news journalists using wireless telephones and headsets 6. Elevator machinery in shafts near the stadium restaurant and the luxury suites 7. A large number of people simultaneously using their magnetic swipe cards to enter the stadium turnstiles 3.4.3 ? Wireless Site Survey and Planning Five Diagrams Diagram 1, Image The picture depicts several devices, which may be used when conducting a site survey, listed as follows: Laptop Tape Measure Antennas and Power cord Wireless Interface Card for the laptop, with software Access Point Floor Plan Diagram 2, Image Screen capture of the Cisco Aironet Site Survey Utility Diagram 3, Packet Tracer Exercise Diagram 4, Hands On Lab Diagram 5, Game This game is currently inaccessible Module ? 3.5 ? Documenting Network Design Requirements 3.5.1 ? Creating a Network Design Requirements Document Two Diagrams Diagram 1, Image The picture depicts the table of contents of a Design Requirements Document. Certain sections of the document have been highlighted, and a brief description included as follows: Overall Project Goal Desired project outcomes Benefits of these outcomes to the customer Project Scope Affected resources and user groups List out-of-scope resources and user groups Diagram 2, Image The picture depicts the table of contents of a Design Requirements Document. Certain sections of the document have been highlighted, and a brief description included as follows: Network Requirements Business goals Constraints User groups requirements Applications requirements Current State of the Network Logical and physical diagrams Equipment lists Application used Strengths and weaknesses 3.5.2 ? Overall Project Goal Two Diagrams Diagram 1, Animation The animation identifies the overall project goal for the stadium. The overall project goal is to upgrade the existing LAN and WAN in order to provide the following Better performance for existing applications Integration of voice and video networks Addition of new applications without impacting existing service levels A conversation between 2 people is displayed: Person 1: I want to check the goals of the project. You want to upgrade the existing LAN and WAN? Person 2: Yes...it's important that we have better performance from the existing network. Person 1: Good...I've already noted that. You also want to integrate new voice and video technology? Person 2: Yes...we want to offer top-of-the-range technologies to our customers Person 1: And to be able to add new applications? Person 2: Without disturbing existing service, yes. You seem to have summarized what we want. Diagram 2, Hands On Lab 3.5.3 ? Project Scope Three Diagrams Diagram 1, Animation The animation identifies the Project scope for the stadium, which is as follows Project Scope The scope of this project is to upgrade the existing LAN connections in the main stadium network. Add wireless coverage Relocate servers to data center server farm Upgrade bandwidth to remote sites Implement new security measures Out of Scope Installing IP telephony system Replacing any infrastructure wiring Diagram 2, Activity Question 1 Company ABC wants to improve the physical security of the IT department. Determine if the following are valid or invalid. 1. Upgrade and relocate the data center 2. Upgrade the NICs in all PCs to 10/100/1000 3. Upgrade the WAN link to the branch offices 4. Record the serial numbers of existing network devices 5. Review network physical security measures 6. Install keypad security locks on all wiring closet doors 7. Sales area desktop computers will require RAM upgrades Question 2 Company XYZ wants to upgrade the existing LAN connections and two WAN locations. Determine if the following are valid or invalid. 1. Upgrade and relocate the data center 2. Upgrade the NICs in all PCs to 10/100/1000 3. Upgrade the WAN link to the branch offices 4. Record the serial numbers of existing network devices 5. Review network physical security measures 6. Install keypad security locks on all wiring closet doors 7. Sales area desktop computers will require RAM upgrades Diagram 3, Hands On Lab 3.5.4 ? Business Goals and Technical Requirements Five Diagrams Diagram 1, Image Business Goals and Technical Requirements The picture depicts an example of the Business Goals section of the Design Requirements Document, as follows The business goals that have been identified for this project are as follows: Reduce costs by consolidating the separate voice, video, and data networks. Improve server security and control access to network resources. Streamline the online ticket purchasing and customer entry processes. Add additional wireless coverage to meet customer demand. Support the growth of the stadium company as it adds new types of entertainment, new partners, and new vendors. Provide additional services, such as voice and video, to the remote sites. Diagram 2, Image Business Goals and Technical Requirements The picture depicts an example of the Technical Requirements Section of the Design Requirements Document, as follows. Technical Requirements Section Scalability: Support 50% growth of the proposed network in number of users and sites within the next two years. Support 75% growth of the proposed network in wireless coverage area. Support 75% growth of the proposed network in e-commerce traffic Availability: Support 24 x 7 network availability for web ?enabled applications. Support 24 x 7 network availability for security applications. Support 24 x 7 network availability for the telephone system. Improve transaction-processing time to less than 3 seconds. Provide high-quality voice and streaming video. Guarantee Quality of Service Diagram 3, Image The picture depicts an example of the Technical Requirements Section of the Design Requirements Document, as follows. Technical Requirements Section Security: Improve security with the addition of filtering, firewalls, and IDS Centralize servers and management. Provide wireless security. Manageability: Maintain the new network with existing personnel. Provide reporting and management tools. Train the stadium IT staff. Diagram 4, Activity Match the stated business goals to the technical requirements. Business Goals A: Improve security and Manage user access to network resources B: Reduce costs by consolidating the separate networks C: Improve customer service by reducing transaction processing time D: Provide voice and video services to remote sites E: Minimize downtime as services are added F: Meet growing demand for wireless connectivity Technical Requirements 1. Provide QoS on WAN links 2. Increase secure wireless LAN coverage 3. Centralize servers and network access management 4. Implement converged network services and infrastructure 5. Implement high bandwidth path to servers and restrict unwanted traffic Diagram 5, Hands On Lab 3.5.5 ? Existing Network Characterization Three Diagrams Diagram 1, Tabular Weakness ? Flat Network Design Impact ? No scalability ? network cannot grow without impacting performance Possible Fix ? Create routed hierarchy Weakness ? Flat Network Design Impact ? No network segmentation ? cannot filter or isolate traffic creating security risks Possible Fix ? Create segmentation with VLANs Apply traffic filters Weakness ? No Redundancy Impact ? Large failure domains ? link and device failures affect large areas of the network Possible Fix Create smaller failure domains Use redundancy where possible Weakness ? Distributed Servers Impact ? Servers at risk ? no controlled environment, power backup or redundant connectivity Possible Fix ? Move servers to data center server farm Weakness ? Distributed Servers Impact Servers not available ? no high-speed links to servers Possible Fix ? Install gigabit links to servers centrally locate Weakness ? Limited Fiber Availability Impact ? Limits the possible redundancy in the network Possible Fix ? Stack switches and add high-speed uplinks Weakness ? No Stateful Firewall Impact ? Filtering only, does not prevent all unauthorized or unwanted traffic Possible Fix ? Use IOS stateful firewall features Weakness ? Firewall Only at the Edge of the Network Impact ? Internal devices vulnerable ? no protection from internal attacks Possible Fix Create layered firewall and filtering mechanisms Add IDS at data center Diagram 2, Activity Match the Network Weakness with the possible Improvement Strategies. Network Weakness A: Data Center servers directly accessible from Internet B: There are no baseline network performance data and details C: Different users have different accounts and logins for different network services D: Switches are not linked together E: Wireless LAN can be accessed by anyone within range F:Network has only one VLAN and all useable addresses have been exhausted Improvement Strategies 1. Provide wireless security and encryption 2. Centralize servers and user account management 3. Relocate Data Center 4. Improve security with the addition of filtering, firewalls, and IDS 5. Implement a structured classless IP addressing scheme and corresponding VLAN structure 6. Provide redundant links between switches and implement spanning Tree Protocol 7. Provide network reporting and management tools Diagram 3, Hands On Lab Module 3.6 ? Chapter Summary 3.6.1 ? Summary One Diagram Diagram 1, Slideshow Summary Slide 1 The network designer examines the existing network to determine if the design goals are realistic and feasible, and if the current network can meet the expectations for scalability, availability, security and manageability. One of the first tasks the designer does when characterizing the network is to ensure that the network documentation and topology diagrams are up-to-date. Tools such as Cisco Network Assistant can discover information about the devices currently installed in the network. Using show commands, the network designers and engineers gather information about the devices and the configurations of the network. Slide 2 By organizing the current network into a modular block diagram, the designer can get an accurate picture of where the design needs to be improved. The designer categorizes various elements of the network into either strengths or weaknesses of the current design and installation. The new design should address all of the identified weaknesses in the current network first, before adding additional features and technology. Slide 3 Cisco.com can provide the network designer and engineers with valuable information, including documentation for existing installed devices, tools to assist in evaluating the network, downloads of new software and applications, as well as provide a forum for collaboration with other network professionals. The show version command output provides information to create an inventory sheet for each existing piece of installed equipment that includes the model and type of device, the installed memory, the number and types of interfaces and the installed Cisco IOS software version. Cisco IOS software names provide information about the feature set support by the IOS version. Feature Navigator, a Cisco.com tool, assists designers in choosing the appropriate IOS features to provide the necessary functionality in the network. >Before upgrading to a new IOS version, it is important to verify that the device has sufficient memory to load the new software. Testing the upgrade in a test environment is critical, because IOS versions have different default configuration options. Slide 4 After upgrading the IOS on a device, it is necessary to observe the boot up process to ensure that software is loaded correctly and functioning properly. There are three stages to the device boot up process: 1. The POST testing and the initial bootstrap software load, 2. Locating and loading the Cisco IOS software, and 3. Locating and loading the configuration file. When incorporating existing equipment into a new network design, the designer needs to be aware of the hardware options and upgrades that are available. Cisco.com is a good resource to find this information. Before producing a wireless network design, it is usually necessary to do a wireless site survey. Wireless site surveys identify the coverage areas and any sources of interference that affect the wireless signal. Planning a site survey requires the designer and technicians to identify the coverage areas, determine preliminary Access Point locations and use a wireless utility to measure signal strength at various distances from the AP. At the completion of the Planning phase of the PPDIOO model, a detailed design requirements document is produced. The final network design is based on the requirements stated in this document.