BRKRST-1001.Pdf

Networking 101 Can I get a Refresh

Steven Heinsius, Jason Grant Solutions Specialists

BRKRST-1001 Cisco Webex Teams

Questions? Use Cisco Webex Teams to chat with the speaker after the session How 1 Find this session in the Cisco Events Mobile App 2 Click “Join the Discussion” 3 Install Webex Teams or go directly to the team space 4 Enter messages/questions in the team space

• Today’s speakers

• What are we going to talk about?

• A Brief History of Networking

• Some Common Words and Acronyms

• Designing

• The Famous OSI Model

• Over to today’s world

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 6 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 7 Today’s speakers BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 9 Jason Grant @shutostrike

Field Engineer VAR

Cisco Distributor

Startup in the Middle East

Joined Cisco in 2010

In my spare time… Scuba Diving Runner Snowboarding Dad Husband Mountain biking Singing

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 16 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 17 1984 1986 1990 1990 1990 1993 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 18 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 19 End-to-End Networking

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 20 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 21 A brief history of network management

Network Controller • AI Powered Health Network • Automated Config Management • Are you functioning? • Centralized config Element Management • Are you there? • Manual Config

Time

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 22 Common Words and Acronyms BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 24 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 25 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 26 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 27 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 28 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 29 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 30 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 31 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 32 TLA’s, aFLA’s, XLA’s,

EIGRP LLQ PoE WRED OSPF LFI IntServ dTS PBR PCQ PQ MPLS FRF.12 CQ CBWFQ GCRA SLB dCAR VRF SBM RSVP dCBWFQ PSIRT CAR ACL GTS CRTP WFQ FRTS BGP dWRED DLB NBAR PFQ DSCP PQCBWFQ IP RTP STP TOS EPD TPD DiffServ UNI/NNI RED VLAN QoS UX VPN

Product Security PoE Incident Response Team

PSIRT ACL

Internet STP

VPN VLAN QoS

Hub Management Interface Switch

Router Firewall Multi Layer Switch Change Access Point AP Icon

Flat Design Router-on-a-Stick Design

Access Access Layer 2 Layer 2

Distribution Distribution Layer 2 Layer 2 Building A Building B Building A Building B < VLAN Trunk Core Core Layer 2 Layer 3

Collapsed Core Design L3 Distribution Design

Access Access Layer 2 Layer 2

Distribution Distribution Layer 2 Layer 3 Building A Building B Building A Building B

Core Core Layer 3 Layer 2 MPLS

• Understand the business and technical requirements

• Use a simple, hierarchical model

• Develop a scalable design

• Minimize internetwork down time

• Use state-of-the-art techniques and technologies

• Implement cost-effective solutions

Access User admission Device connectivity

Distribution Value add services QoS, ACL’s, FHRP

Core Optimal transport high speed

Data Center Key places (blocks) in the network

WAN Internet Voice/Video

HOST A HOST B

Application Application

Data Presentation Presentation

Session Session

Transport Segment Transport Header Data Transport

Transport Packet Network Network Header DataHeader Data Network

Frame FrameFrame NetworkNetworkTransportTransport Data Link HeaderHeader DataHeaderDataHeader DataHeaderDataHeader Data Data Link

Bits Physical 010110101011000101110 Physical

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 42 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 43 How do I Remember the OSI Model

Away Alligator 7 Application All All

Pizza Pet 6 Presentation People People

Sausage Steve’s 5 Session Seem Standing

Throw Touch 4 Transport To Totally

Not Not 3 Network Need Naked

Do Do 2 Data Link Data Don’t

Please Please 1 Physical Processing Perspire

Layer 0 Power • We really need electrons Layer 8 User/Politics • Is this a pet project? • Who designed this brain-dead mess? Layer 9 Budget • Someone must pay for this • Get it right the first time, hurts less

7 Application

6 Presentation Applications User Domain

5 Session

4 Transport Informed Domain 3 Network Router

Broadcast Domain 2 Data Link Bridge Switch

1 Physical Collision Domain Hub Repeater

Ethernet

One device sending at a Hub time All nodes share 100 Mbps

Switched Ethernet Backbone Multiple devices sending at the same Each node has 100 time

EthernetSwitch Mbps or 1 Gbps

Hubs = Layer 1 Collision domain

Collision Domains 1 Broadcast Domains 1

Collision Domains 4 Broadcast Domains 1

Collision Domains 4 Broadcast Domains 4

WLAN (Local Area Network) PAN (Personal Area Network)

PAN WLAN WWAN GSM, GPRS, Standards 802.15, Bluetooth 802.11, Wi-Fi CDMA, 4G & 5G 10 Kbps to Speed < 1 Mbps 2Mbps to 9.6 Gbps >100Mbps Range Short Medium Long Smartphones, Peer-to-Peer Applications You know… (backup) WAN and Device-to-Device Remote Locations

2 3 4

One device sending at a time

Hub All nodes share 100 Mbps

One device sending at a time

Destination address (6) Source address (6) Type (2) Data (Variable)

00:00:0C xx:xx:xx Also known as IEEE Vendor hardware address assigned assigned (or WiFi address on iPhone)

MAC Address 00:00:04:12:34:56 08:00:2B:00:2E:3C 02:60:8C:3D:2E:11 Media Access Control

• Unicast 1:1 • A→D

• Multicast 1:some • A→B,C A B C D • 01:00:5E:xx:yy:zz

• Broadcast 1:all • A→All A B and C D • FF:FF:FF:FF:FF:FF Application Application Application Presentation Presentation Presentation Session Session Session Transport Transport Transport Network Network Network Data Link Data Link Data Link Physical Physical Physical

A B W X

Port Port C D 1 Bridge 2 Y Z Address Port A 1 B 1 C 1 D 1 W 2 X 2 Y 2 Z 2

A B C W X Y

Address Port A 1 Switch B 2 C 3 W 4 X 5 Y 6

A switch is a multi-port bridge that implements the bridging function in ASICs

A B C G H K Address Port VLAN A 1 200 B 2 200 Broadcast Domain C 3 200 G 4 220 H 5 220 Broadcast Domain K 6 220 Switch Q 7 230 R 8 230 Broadcast Domain S 9 230 Q R S W X Y W 10 275 X 11 275 Broadcast Domain Y 12 275

A B C G H K

Switch Trunk

Routing Table Q R S W X Y Network Interface Green Trunk Purple Trunk Orange Trunk Red Trunk Internet E0

A B C G H K

Switch

FAST SLOW Routing Table DUMB INTELLIGENT CHEAP EXPENSIVE LOOPS (flooding) NO LOOPS EASY IP Addressing COMPLEX IP addressing

A B C G H K

Routing Table FAST FAST INTELLIGENT INTELLIGENT CHEAP CHEAP NO LOOPS NO LOOPS COMPLEX IP Addressing COMPLEX IP Addressing

It hurts when IP

Host Host

Company A Company B

• Unique addressing allows communication between end stations • Path choice is based on location • Location is represented by an address

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 69 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public Computers count in Binary and in Hexadecimals Decimal Binary Hex 0 0000 0 1 0001 1 2 0010 2 3 0011 3 4 0100 4 5 0101 5 6 0110 6 7 0111 7 8 1000 8 9 1001 9 10 1010 A 11 1011 B 12 1100 C 13 1101 D 14 1110 E 15 1111 F Base 10 System Base 2 System Base 16 System

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 71 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public Computers count in Binary and in Hexadecimals Decimal Binary 0 0000 1 0001 2 0010 3 0011 4 0100 5 0101 6 0110 7 0111 8 1000 9 1001 10 1010 11 1011 12 1100 13 1101 14 1110 15 1111 Base 10 System Base 2 System

32 Bits

Network Host

8 Bits 8 Bits 8 Bits 8 Bits

172 16 122 204

8 4 2 1

8 4 2 1 8 4 2 1

64 32 16

32 64 16

64 32 16 64 32 16

128

128 128 10101100 00010000 01111010 11001100 172 . 16 . 122 . 204

Network Host

32-bit IP Address 172 16 0 1

Subnet Mask 255 255 0 0

How the Subnet 11111111 11111111 00000000 00000000 Mask is Seen

65,536 65,536 Networks Hosts

Network Host

32-bit IP Address 172 16 0 1

Subnet Mask 255 255 240 0

How the Subnet 11111111 11111111 11110000 00000000 Mask is Seen

65,536 4,096 Networks Hosts

172.16.2.200 172.16.3.5 172.16.3.1 E1 172.16.2.2 E0 172.16.3.100 172.16.2.1

172.16.2.160 172.16.3.150

172.16 . 2 . 160 Network / Subnet Host

172.16.3.0 R2 172.16.4.0

R1 Routing Table 172.16.1.0 R1 172.16.2.0 R2 Routing Table Network Interface Network Interface 172.16.1.0 E0 172.16.3.0 E0 172.16.2.0 E1 172.16.4.0 S0 172.16.4.0 S0 172.16.1.0 Via S0 172.16.3.0 Via S0 172.16.2.0 Via S0

Version Header Type of Total Length (16) (4) Length (4) Service (8)

Identification (16) Flags Fragment offset (16)

Time to live (8) Protocol (8) Header checksum (16)

Source IP Address (32)

Destination IP Address (32)

Options (0-320)

• Internet addresses are allocated by the InterNIC

First Octet Possible Subnet Mask Host Count Starts With networks A 0 to 127 255.0.0.0 16,777,214 each 256 See the B 128 to 191 255.255.0.0 65,534 each 16,384 C 192 to 223 255.255.255.0 256 each 16,777,216 Problem? Well, what do we do now?

Private Addressing IPv6

• RFC 1918

• Use however you want, as long as it doesn’t touch the Internet

• Great for users, lousy for servers

Number of Subnet Mask with Largest IP Address Range addresses Address Block Class A 10.0.0.0-10.255.255.255 16,777,216 255.0.0.0

Class B 172.16.0.0-172.31.255.255 1,048,576 255.240.0.0

Class C 192.168.0.0-192.168.255.255 65,536 255.255.0.0

Always, always, always put a router or firewall between private addresses and the Internet! NAT

• Address space increased from 32 bits to 128 bits

• About 18.4 quintillion possible addresses …per network!

• (18,446,744,073,710,000,000)

Global Route Prefix Subnet Id Interface Id 2001 : 0db8 : 0100 : 1111 : 0000 : 0000 : 0000 : 0001

16 bits 16 bits 16 bits 16 bits 16 bits 16 bits 16 bits 16 bits

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 85 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 86 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 87 Layer 4 Protocol Field

Transmission Control Protocol

User Datagram Protocol

TCP UDP

• Block FTP (TCP ports 21 & 22) • From anyone to the server

• Permit WWW (TCP port 80) 172.16.3.0 Internet 172.16.4.0 • From internal hosts to Web server G1 172.16.4.13 172.16.3.111 F0

access-list 101 deny tcp 0.0.0.0 255.255.255.255 172.16.3.0 0.0.0.255 eq 21 access-list 101 deny tcp 0.0.0.0 255.255.255.255 172.16.3.0 0.0.0.255 eq 20 access-list 101 permit tcp 172.16.4.0 0.0.0.255 any eq 80 (implicit “deny all”)

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 90 ip access-list extended voice permit udp any 172.17.20.0 0.0.1.255 range 1718 1719 permit udp any range 1718 1719 172.17.20.0 0.0.1.255 permit tcp any 172.17.20.0 0.0.1.255 eq 1720 permit tcp any eq 1720 172.17.20.0 0.0.1.255 permit tcp any 172.17.20.0 0.0.1.255 range 2000 2002 permit tcp any range 2000 2002 172.17.20.0 0.0.1.255 permit udp any 172.17.20.0 0.0.1.255 eq 2427 permit udp any eq 2427 172.17.20.0 0.0.1.255 permit tcp any 172.17.20.0 0.0.1.255 eq 2428 permit tcp any eq 2428 172.17.20.0 0.0.1.255 permit tcp any 172.17.20.0 0.0.1.255 eq 2748 permit tcp any eq 2748 172.17.20.0 0.0.1.255 permit udp any 172.17.20.0 0.0.1.255 eq 2748 permit udp any eq 2748 172.17.20.0 0.0.1.255 permit tcp any 172.17.20.0 0.0.1.255 eq 5060 permit tcp any eq 5060 172.17.20.0 0.0.1.255 permit udp any 172.17.20.0 0.0.1.255 eq 5060 permit udp any eq 5060 172.17.20.0 0.0.1.255 permit tcp any 172.17.20.0 0.0.1.255 range 11000 11999 permit tcp any range 11000 11999 172.17.20.0 0.0.1.255 permit udp any 172.17.20.0 0.0.1.255 range 16384 32767 permit udp any range 16384 32767 172.17.20.0 0.0.1.255 permit udp any host 192.168.143.126 range 1718 1719 permit udp any 192.168.144.0 0.0.15.255 range 1718 1719 permit udp any range 1718 1719 host 192.168.143.126 permit udp any range 1718 1719 192.168.144.0 0.0.15.255 permit tcp any host 192.168.143.126 eq 1720 permit tcp any 192.168.144.0 0.0.15.255 eq 1720 permit tcp any eq 1720 host 192.168.143.126 permit tcp any eq 1720 192.168.144.0 0.0.15.255 eq 1720BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 91 permit tcp any host 192.168.143.126 range 2000 2002 Over to the world of Today Virtual LAN (VLAN’s)

A B C G H K

Switch Trunk

Routing Table Q R S W X Y Network Interface Green Trunk Purple Trunk Orange Trunk Red Trunk Internet E0

A B C G H K

Switch

FAST SLOW Routing Table DUMB INTELLIGENT CHEAP EXPENSIVE LOOPS (flooding) NO LOOPS EASY IP Addressing COMPLEX IP Addressing

A B C G H K

Routing Table FAST FAST INTELLIGENT INTELLIGENT CHEAP CHEAP NO LOOPS NO LOOPS COMPLEX IP Addressing COMPLEX IP Addressing

G K A B C Overlay H

Routing Table FAST FAST INTELLIGENT INTELLIGENT CHEAP CHEAP NO LOOPS NO LOOPS EASY IP Addressing EASY IP Addressing

HOW is this possible????-> overlay

G K A B C Overlay H

Routing Table FAST FAST INTELLIGENT INTELLIGENT CHEAP CHEAP NO LOOPS NO LOOPS EASY IP Addressing EASY IP Addressing

VXLAN (est. 2014) • Virtual, Extendable LAN • Creates dynamic tunnels on demand from switch to switch • Devices think they’re directly connected Data Center LISP (est. 2006) • Locator ID Separation Protocol Branch • Reference database of where all things are connected Campus • Typically runs on distribution switch Network SGT (est. 2010) • Scalable Group Tags • ID Cards that packets carry with them • Assigned to user based on who/where they are • Resources require certain tags to Software Defined Access access Fabric Overlay

Reduce the time and complexity involved in getting your network connected and doing what you intended it to do.

Deploment Management Assurance

Devices automatically discovered Define network and security Ensure the network is doing what and configuration applied policies that will be applied you intend it to do

• Baselines established • Access devices should… • Firmware updates • Edge devices should… • AI powered anomaly • Moves, Adds, Changes detection • Core devices should… • Compliance • Users should… • Guided & automated remediation Reduce downtime, increase Guarantee Define Intent user productivity Performance

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 99 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 100 Digital Readiness Model Current state of the network

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 101 Closing thought BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 103 But if everything else fails…

BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 104 Complete your online session • Please complete your session survey survey after each session. Your feedback is very important.

• Complete a minimum of 4 session surveys and the Overall Conference survey (starting on Thursday) to receive your Cisco Live t-shirt.

• All surveys can be taken in the Cisco Events Mobile App or by logging in to the Content Catalog on ciscolive.com/emea.

Cisco Live sessions will be available for viewing on demand after the event at ciscolive.com.

Demos in the Walk-In Labs Cisco Showcase

Meet the Engineer Related sessions 1:1 meetings

Sandbox Cisco Driven Innovations and Industry Standardization ROUTING • IPv6, MPLS (TAG Switching), L2TPV3, GRE IGRP, ODR, BGP, Tag• RSVP Traffic Engineering, Diffserv-TE AToM, PIM, Netflow • Fast Convergence (BGP, ISIS, OSPF) SWITCHING • 802,1q, GVRP • 802.1s, 802.1w, 802.3x ISL, VTP, STP+, PVST+, EC, WCCP • 802.3af, 802.3ae SECURITY • First Security Appliance NBAR, TACACS+, • 802.1x, EAP-TLS, PEAP TKIP, LEAP • IPsec, Radius AVAILABILITY • VRRP HSRP, SSO/NSF, • TE/FRR, MPLS OAM ISSU, ELMI • Ethernet OAM • Packet over SONET/SDH OPTICAL • RPR DPT, VSR • Integrating ADM & broadband digital cross-connect (BBDXC)

VOICE • MGCP, H.248, SIP, SIP-T SCP, SRST • NSS © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 110 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 111 BRKRST-1001 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 112 Cisco invented Cisco invented Cisco invented PoE PoE+ Cisco UPOE

802.3af 802.3at 802.3bt

1999 2003 2004 2009 2011 2018

15.4W 15.4W 30W 30W 60W 60W, 90W

Cisco maintained its Leadership in PoE and Helped Standardize it

Network Powered Light HVAC VAV’s USB-C Dongle Touchscreen PCs POE Displays UHD IP Cameras

Badge Readers

People UPOE Powered Compact Switches Nurse call systems Biometric counting CBRS Environmental Door Locks sensors Private LTE Sensor Hubs

90W Driving Convergence of IT and IoT