Bøger i Networking Technology serien

Before an enterprise answers "How can we achieve a Zero Trust architecture?" they should be asking "Why are we looking at Zero Trust as an access model? Does it align with our vision?" In an innovative format, Cisco security architecture expert Avinash Naduvath guides you through the philosophical questions and practical answers for an enterprise looking to start the Zero Trust journey.   A conversational model will take you from the initial stages of identifying goals and pitching solutions, through practical tasks that highlight tangible outcomes-including common primary use cases-in order to bring focus to the correct implementation and maintenance of a Zero Trust architecture.   For a future where success is measured as much by the security of a system as by the functionality, In Zero Trust We Trust is designed to help everyone at every stage and level of leadership understand not only the conceptual underpinnings, but the real-world context of when, how, and why to deploy Zero Trust security controls. This book provides the starting point for helping you change the mindset of others, and getting them to understand why Zero Trust isn't simply a conversation to be had, but a movement to embrace.   Origins of the Zero Trust philosophy in security architecture explained, and why it took so long to catch onDetailed examination of how to ask the right questions so as to implement the right security answers for clientsUnderstanding the metrics by which to measure Zero Trust success, and what maintaining that success looks likeIdentifying the stakeholders and empowering a Zero Trust team within an enterpriseExamples of how to catalyze opinion and tailor tactics to motivate investment in secure Zero Trust architectureImplement, monitor, feedback, repeat: Presenting and building a roadmap for a sustainable security architectureLooking ahead to a Zero Trust Lifecycle Framework and a blueprint for the future

Are you ready to challenge the ways you have always approached networking? The IT world has undergone a transformation, and fast solutions just aren't fast enough anymore. A platform-based approach with automated processing of data is no longer a dream of the future-it's a requirement of the present.   In Cisco Meraki Fundamentals, you will learn how to "think" platform: end-to-end control, management, and visibility of operations, all with less complexity. As you embrace this thinking, the possibilities for producing optimized solutions to problems now and in the future become constraints merely of your imagination.   Cisco Meraki Fundamentals provides everything you need to get started forging a platform-centric journey. From the basics of cloud architecture and building the Dashboard, through automation, best practices, and a look at the Meraki admin experience, Cisco Meraki Fundamentals provides a powerful foundation from which to forge a digital operation for the future.   Learn the origins of the Cisco Meraki cloud-managed platform, from founding concept through philosophy and goalsLearn to manage data that emerges from day-to-day operations and how to get to outcomes more quicklyUnderstand the differences between cloud-managed Meraki networks and more traditional networksGet to know the basics of administering a network with the Meraki DashboardSee examples of Meraki-specific best practices, as well as how to integrate and automate with non-Meraki tools and servicesSee an overview of how the cloud platform assists in identifying and troubleshooting potential issues more easilyLook in on a day in the life of a Meraki-based platform administrator, including use cases for the Meraki cloud platform

Practical strategies and techniques for automating network infrastructureAs networks grow ever more complex, network professionals are seeking to automate processes for configuration, management, testing, deployment, and operation. Using automation, they aim to lower expenses, improve productivity, reduce human error, shorten time to market, and improve agility. In this guide, expert practitioner Ivo Pinto presents all the concepts and techniques students will need to move their entire physical and virtual infrastructure towards greater automation and maximize the value it delivers.Writing for experienced professionals, the author reviews today's leading use cases for automation, compares leading tools, and presents a deep dive into using the open source Ansible engine to automate common tasks. Students will find everything they need: from practical code snippets to real-world case studies to a complete methodology for planning strategy.This guide is for everyone seeking to improve network operations and productivity, including system, network, storage, and virtualization administrators, network and security engineers, and many other technical professionals and managers. Students can apply its vendor-neutral concepts throughout their entire environment--from servers to the cloud, switches to security.Explore modern use cases for network automation, and compare today's most widely used automation toolsCapture essential data for use in network automation, using standard formats such as JSON, XML, and YAMLGet more value from the data their networks can provideInstall Ansible and master its building blocks, including plays, tasks, modules, variables, conditionals, loops, and rolesPerform common networking tasks with Ansible playbooks: manage files, devices, VMs, cloud constructs, APIs, and moreSee how Ansible can be used to automate even the largest global network architecturesTransform their approach to automationand create a new NetDevOps pipeline, step by stepBuild a network automation strategy from the ground up, reflecting lessons from the world's largest enterprises

This authoritative guidebook combines comprehensive coverage of Cisco SD-WAN with complete official preparation for Cisco's new CCNP Enterprise ENSDWI 300-415 certification exam. Authored by a team of Cisco architects responsible for training both Cisco and partner engineers on SD-WAN solutions, it covers all facets of the product: benefits, use cases, components, workings, configuration, support, and more. Throughout, practical examples demonstrate Cisco SD-WAN at work in diverse cloud and premises environments, and the authors show how to apply Cisco SD-WAN technologies and tools in their own real-world environments. As Cisco's official ENSDWI 300-415 study guide, this book covers all exam objectives and is organized to simplify and streamline preparation. It also contains an access code for two full practice exams delivered through Pearson's advanced test prep application.

Direct from Cisco, Containers in Cisco IOS-XE, IOS-XR, and NX-OS: Orchestration and Operation is the complete guide to deploying and operating "containerized” application and network services in Cisco platforms.The authors begin by reviewing the virtualization and containerization concepts network professionals need to know, and introducing today's leading orchestration tools. Next, they take a deep dive into container networking, introducing Cisco architectural support for container infrastructures. Students will find modular coverage of characteristics, configuration, and operations for each key Cisco software platform: IOS-XE, IOS-XR, and NX-OS. A full chapter on developer tools and resources shows how to build container images with Docker, and introduces Cisco's toolkits, APIs, NX-SDK or Open Access Containers (OAC), telemetry, Nexus Data Broker, management tools, Puppet, Chef, Ansible, and more. The authors conclude with multiple use cases, showing how users in diverse markets can drive value with containers.

The authoritative, comprehensive guide to Cisco Hyperflex solution planning and implementation Thoroughly covers HyperFlex Edge, HyperFlex Standard, HyperFlex stretched clusters, and Intersight integration Explains key concepts with extensive configuration examples, topologies, verification steps, and best-practice guidelines and recommendations Presents straight-from-the-trenches "do's and don'ts” for designing complex solutions and achieving maximum efficiency Shows how to deploy HyperFlex technologies quickly across a wide variety of datacenter environments hyperconvergence; hci; hyperflex; datacenter automation; hybrid cloud; hyperflex edge; hyperflex standard; hyperflex stretched clusters; intersight; sdn; software defined networks; private cloud; public cloud

Intent-Based Networking (IBN) enables you to create networks that capture business intent, automatically activate it across your network, assure that your network has responded properly, proactively detect and contain security threats, and remedy other network issues before users even notice. Intent-based networking makes networks dramatically more valuable, but few organizations have the luxury of building them from the ground up. In this guide, leading IBN expert Pieter-Jans Nefkens presents a unique four-phase approach to preparing and transforming existing network infrastructures, architectures, and organization to gain maximum value from IBN with minimum disruption and cost.Writing for network consultants, network architects, network designers, and senior network engineers, Nefkens outlines the problems IBN is intended to solve, and illuminates its implications: not only for technical infrastructure but also for network architecture, team management, and culture. Drawing on his pioneering IBN experience, Nefkens makes specific recommendations, identifies pitfalls, and show how to overcome them. You'll discover how to implement IBN with Cisco's Digital Network Architecture and DNA Center, and walk through several real-world use cases: large enterprise networks, worldwide campus networks, mid-sized enterprises, and smaller businesses. Introduces a unique 4-phase methodology for incremental, non-disruptive "brownfield” transformations, since you probably can't create a new network from the ground up Presents detailed guidance for implementing IBN with Cisco DNA and DNA Center Explains IBN's crucial implications for managing network teams and evolving culture Contains start-to-finish case study scenarios: large enterprise networks, worldwide campus networks, mid-sized enterprises, and smaller businessesHow to migrate today's networks to intent-based networking — and drive transformative improvements in simplicity, security, management, cost, and agility Introduces a unique 4-phase methodology for incremental, non-disruptive "brownfield” transformations, since you probably can't create a new network from the ground up Presents detailed guidance for implementing IBN with Cisco DNA and DNA Center Explains IBN's crucial implications for managing network teams and evolving culture Contains start-to-finish case study scenarios: large enterprise networks, worldwide campus networks, mid-sized enterprises, and smaller businesses

Network Programmability and Automation, Volume 1, covers designing, implementing, monitoring and operating networks using programmable interfaces on network devices versus the legacy (and soon-to-be obsolete) methods and protocols such as the Command Line Interface (CLI) and Simple Network Management Protocol (SNMP). It discusses the protocols, tools, techniques and technologies upon which Network Programmability is based.Covering the fundamentals that a network engineer needs to transition to the software and programmability domains, the book opens with an introduction that lays the foundation by discussing the market trends and emerging technologies such as SDN, NFV and Cloud, and how network programmability skills are paramount for aligning oneself with these technologies. It provides network engineers with a solid foundation in Python programming and Linux in the context of network programmability and automation.

In Hyperconverged Infrastructure Data Centers, best-selling author Sam Halabi demystifies HCI technology, outlines its use cases, and compares solutions from a vendor-neutral perspective. He guides students through evaluation, planning, implementation, and management, helping them decide where HCI makes sense, and how to migrate legacy data centers without disrupting production systems. Easy reading with no marketing fluff or heavy technical jargon Progression through the chapters from easy to advanced First book to address storage, compute, virtualization, networking and automation in details and under one umbrella. Bridges the technology gap between the different IT departments (Storage, compute, networking and management) Coverage of latest HCI functionality Discusses Automation as it compares to Cloud offerings such as AWS Integrate and automate storage, compute, networking, and virtualization with SDN Easy reading with no marketing fluff or heavy technical jargon Progression through the chapters from easy to advanced Comprehensive coverage of the topic at both a technical and business level First book to be released on the topic First book to address storage, compute, virtualization, networking and automation in details and under one umbrella. Bridges the technology gap between the different IT departments (Storage, compute, networking and management) Beneficial to IT professionals trying to evaluate whether to move in the HCI direction Beneficial to IT management, CIO, CTO evaluating HCI vs. public cloud Coverage of latest HCI functionality Discusses Automation as it compares to Cloud offerings such as AWS

Enterprise and service provider networks are increasingly adopting SIP as the guiding protocol for session management, and require leveraging Session Border Controller (SBC) technology to enable this transition. Thousands of organisations have made the Cisco Unified Border Element (CUBE) their SBC technology of choice. Understanding Session Border Controllers gives network professionals and consultants a comprehensive guide to SBC theory, design, deployment, operation, security, troubleshooting, and more. Using CUBE-based examples, the authors offer insights that will be valuable to technical professionals using any SBC solution. The authors thoroughly cover native call control protocols, SBC behaviour, and SBC's benefits for topology abstraction, demarcation and security, media, and protocol interworking. They also present practical techniques and configurations for achieving interoperability with a wide variety of collaboration products and solutions. Evaluate key benefits of SBC solutions for security, management, and interoperability Master core concepts of SIP, H.323, DTMF, signalling interoperability, call routing, fax/modem over IP, security, media handling, and media/signal forking in the SBC context Compare SBC deployment scenarios, and optimise deployment for your environment Size and scale an SBC platform for your environment, prevent oversubscription of finite resources, and control cost through careful licensing Use SBCs as a back-to-back user agent (B2BUA) to interoperate between asymmetric VoIP networks Establish SIP trunking for PSTN access via SBCs Interoperate with call servers, proxies, fax servers, ITSPs, redirect servers, call recording servers, contact centres, and other devices Secure real-time communications over IP Mitigate security threats associated with complex SIP deployments Efficiently monitor and manage an SBC environment

Straight from Cisco: The authoritative guide to transforming enterprise networks with Cisco's Digital Network Architecture By Cisco DNA team members who are transforming the DNA vision into profitable reality for enterprise customers Practical techniques for moving towards a network architecture that's open, extensible, programmable, flexible, and adaptable How to holistically combine virtualization, automation, analytics, and cloud services to create radically new possibilities for your business Web edition eligible for regular updates through the Pearson Content Update Program

The Cisco Nexus platform and NX-OS switch operating system combine to deliver unprecedented speed, capacity, resilience, and flexibility in today's data center networks. Troubleshooting Cisco Nexus Switches and NX-OS is your single reference for quickly identifying and solving problems with these business-critical technologies.Three expert authors draw on deep experience with large Cisco customers, emphasizing the most common issues in real-world deployments, including problems that have caused major data center outages. Their authoritative, hands-on guidance addresses both features and architecture, helping you troubleshoot both control plane forwarding and data plane/data path problems and use NX-OS APIs to automate and simplify troubleshooting. Throughout, you'll find real-world configurations, intuitive illustrations, and practical insights into key platform-specific behaviors.This is an indispensable technical resource for all Cisco network consultants, system/support engineers, network operations professionals, and CCNP/CCIE certification candidates working in the data center domain.

IP multicast is central to today's enterprise and service provider networks. However, the set of technologies and practices surrounding IP multicast has evolved and matured: older books on the topic are severely out of date. IP Multicast Architectures offers comprehensive guidance for deploying modern IP multicast systems of all kinds: basic and advanced, enterprise and service provider. Focused on Cisco devices and technologies, IP Multicast Architectures addresses common features, deployment models, and field best practices. Each section offers immersive real-world explanations of multicast theory, and present multiple case studies showcasing best-practice multicast design methodologies. Each case study is carefully crafted to offer pragmatic "first-hand" guidance for building the right network for each environment and set of applications. Coverage includes Layer 2 and Layer 3 multicast; routing, forwarding, domains, inter-domain routing, wireless multicast forwarding, Inter-AS, mVPN, mVRF, cloud mVPN transport, and much more. Throughout, the authors' configurations, designs, features, and parameters reflect all that's been learned since IP multicast first became widespread.

In an era of ubiquitous clouds, virtualisation, mobility, and the Internet of Things, information and resources must be accessible anytime, from anywhere. Connectivity to devices and workloads must be seamless even when people move: location must be fully independent of device identity. The LISP protocol makes all this possible. LISP is address-family agnostic, so it can encapsulate any protocol within another, and route across virtually any network. LISP applications include very-large-scale virtualisation for WANs and multi-tenant data centers; host mobility and location services across data centres; advanced mobile networks; ad-hoc networks; IPv6 enablement, seamless site multi-homing; workload mobility; cellular mobility; multicast and traffic engineering, and more. The LISP Network is the first comprehensive, in-depth guide to LISP concepts, architecture, techniques, and applications. Co-authored by LISP co-creator Dino Farinacci and two pioneering developers of Cisco's LISP implementation, this guide will help you plan and implement LISP in any data center, WAN edge, or service provider core network. Largely implementation-agnostic, this book offers actionable answers to questions such as: What problems does LISP address, and how does it address them? How does LISP work? What are LISP's applications, and how do you architect LISP solutions for each application? How does LISP fit with SDN, IoT, and IPv6? What is LISP's future? The LISP Network concludes with detailed deployment case studies of several LISP applications, each drawn from the authors' pioneering experience.

This is today's best single source for the techniques you need to troubleshoot BGP issues in modern Cisco IOS, IOS XR, and NxOS environments. BGP has expanded from being an Internet routing protocol and provides a scalable control plane for a variety of technologies, including MPLS VPNs and VXLAN. Bringing together content previously spread across multiple sources, Troubleshooting BGP describes BGP functions in today's blended service provider and enterprise environments. Two expert authors emphasise the BGP-related issues you're most likely to encounter in real-world deployments, including problems that have caused massive network outages. They fully address convergence and scalability, as well as common concerns such as BGP slow peer, RT constraint filtering, and missing BGP routes. For each issue, key concepts are presented, along with basic configuration, detailed troubleshooting methods, and clear illustrations. Wherever appropriate, OS-specific behaviors are described and analysed.

This is the only comprehensive guide and deployment reference for building flexible data centre network fabrics with VXLAN and BGP EVPN technologies. Writing for experienced network professionals, three leading Cisco experts address everything from standards and protocols to functions, configurations, and operations. The authors first explain why and how data centre fabrics are evolving, and introduce Cisco's fabric journey. Next, they review key switch roles, essential data centre network fabric terminology, and core concepts such as network attributes, control plane details, and the associated data plane encapsulation. Building on this foundation, they provide a deep dive into fabric semantics, efficient creation and addressing of the underlay, multi-tenancy, control and data plane interaction, forwarding flows, external interconnectivity, and service appliance deployments. You'll find detailed tutorials, descriptions, and packet flows that can easily be adapted to accommodate customised deployments. This guide concludes with a full section on fabric management, introducing multiple opportunities to simplify, automate, and orchestrate data centre network fabrics. Learn how changing data centre requirements have driven the evolution to overlays, evolved control planes, and VXLAN BGP EVPN spine-leaf fabrics Discover why VXLAN BGP EVPN fabrics are so scalable, resilient, and elastic Implement enhanced unicast and multicast forwarding of tenant traffic over the VXLAN BGP EVPN fabric Build fabric underlays to efficiently transport uni- and multi-destination traffic Connect the fabric externally via Layer 3 (VRF-Lite, LISP, MPLS L3VPN) and Layer 2 (VPC) Choose your most appropriate Multi-POD, multifabric, and Data Center Interconnect (DCI) options Integrate Layer 4-7 services into the fabric, including load balancers and firewalls Manage fabrics with POAP-based day-0 provisioning, incremental day 0.5 configuration, overlay day-1 configuration, or day-2 operations

Cisco« Nexus« switches and th

This book brings together realistic, start-to-finish guidance for implementing cloud solution architectures in virtualized data centers. It introduces cloud "newcomers" to essential cloud concepts, and offers experienced operations professionals detailed information for setting up and provisioning Infrastructure as a Service (IaaS), Software as a Service (SaaS), and Platform as a Service (PaaS). Drawing on extensive experience working with leading cloud software vendors and integrators, the authors present comprehensive practical resources - including detailed operations flows, templates, and configurations. They offer best practices for managing cloud-based network, compute, and storage infrastructure, including a fully-tested management reference architecture. Coverage includes: * Public, private, and hybrid clouds and their components * Virtualization and cloud benefits and ROI analysis * Delivering cloud infrastructure services: from self-service customer requests to dynamic provisioning * Load balancing, firewalling, disaster recovery, and content delivery * Tracking, maintaining, and automating cloud network and compute resources * Managing server virtualization * Storage and I/O convergence in the data center * User portals, service catalogs, and customer self care * Service monitoring, billing, chargeback, and much more

Presents the service capabilities of IPv6, the features supporting these services, and the ways in which they can be implemented in a scalable, production-level network. This book offers information in the context of IPv4 operational and design concepts. The primary goal of the book is to show that IPv6 is a mature technology ready for deployment.