Ata Ullah Saleem Cisco Certified

Ata Ullah CCNA Certificate

Cisco Academy Faisalabad CCNA & CCNP Training

CCNA Recent Certified Cisco Academy Faisalabad Pakistan

Cisco Training Center Faisalabad

Cisco Networking Academy Faisalabad

Cisco Instructor at Cisco Academy Faisalabad

Cisco Expert Level Instructor Excellence Award

Cisco Expert Level Instructor Excellence Award 

Cisco Certified Expert Instructor Saeed Ahmad Faisalabad Pakistan

Benefits of VPNs , CCNA in Faisalabad

Cost savings 

•Enable organizations to use cost-effective, third-party Internet transport to connect remote offices and remote users to the main site.

Scalability 

•Enable organizations to use the Internet infrastructure within ISPs and devices, which makes it easy to add new users.

Compatibility with broadband technology 

•Allow mobile workers and telecommuters to take advantage of high-speed, broadband connectivity, such as DSL and cable, to gain access to the networks of their organization, providing workers flexibility and efficiency.

•Provide a cost-effective solution for connecting remote offices.

Security 

•Can include security mechanisms that provide the highest level of security by using advanced encryption and authentication protocols that protect data from unauthorized access.

Connect entire networks to each other, in the past, a leased line or Frame Relay connection was required to connect sites, but because most corporations now have Internet access, these connections can be replaced with site-to-site VPNs.

Internal hosts have no knowledge that a VPN exists.

Created when devices on both sides of the VPN connection are aware of the VPN configuration in advance.

End hosts send and receive normal TCP/IP traffic through a VPN gateway.

The VPN gateway is responsible for encapsulating and encrypting outbound traffic for all traffic from a particular site

The VPN gateway then sends it through a VPN tunnel over the Internet to a peer VPN gateway at the target site.

Upon receipt, the peer VPN gateway strips the headers, decrypts the content, and relays the packet toward the target host inside its private network.

Best Practices for VLAN Design

§One to three VLANs per access module and limit those VLANs to a couple of access switches and the distribution switches.

§Avoid using VLAN 1 as the "blackhole" for all unused ports. Use a dedicated VLAN separate from VLAN 1 to assign all the unused ports.

§Separate the voice VLANs, data VLANs, the management VLAN, the native VLAN, blackhole VLANs, and the default VLAN (VLAN 1).

§Avoid VTP when using local VLANs; use manually allowed VLANs on trunks.

§For trunk ports, turn off Dynamic Trunking Protocol (DTP) and configure trunking. Use IEEE 802.1Q rather than ISL because it has better support for QoS and is a standard protocol.

§Manually configure access ports that are not specifically intended for a trunk link.

§Prevent all data traffic from VLAN 1; only permit control protocols to run on VLAN 1 (DTP, VTP, STP BPDUs, PAgP, LACP, CDP, etc.).

§Avoid using Telnet because of security risks; enable SSH support on management VLANs.

Local VLANs CCNP SWITCH Exam Faisalabad

•The Campus Enterprise Architecture is based on the local VLAN model wherein users of geographically common switches are grouped into a single VLAN, regardless of the organizational function of the users.

•Local VLANs are generally confined to a wiring closet, as shown in the figure, and VLANs are local to one access switch which trunks to the distribution switch.

•If users move from one location to another in the campus, their connection changes to the new VLAN at the new physical location.

•In the local VLAN model, Layer 2 switching is implemented at the access level and routing is implemented at the distribution and core level, as shown in the figure, to enable users to maintain access to the resources they need.

§Create local VLANs with physical boundaries in mind rather than job functions of the users. 

§Local VLANs exist between the access and distribution layers.

§Traffic from a local VLAN is routed at the distribution and core levels. 

§Switches are configured in VTP transparent mode.

§Spanning tree is used only to prevent inadvertent loops in the wiring closet.

§One to three VLANs per access layer switch recommended.