support for standards, such as 802.1x and
Extensible Authentication Protocol (EAP). It also provides the
flexibility to add IP Security (IPSec) and Multiprotocol Label
Switching Virtual Private Networks (MPLS VPNs), identity and
access management, and VLANs to compartmentalize access. This
helps improve performance and security and decreases costs.
Data Center Architecture
The Cisco Enterprise data
center architecture is a cohesive, adaptive network
architecture that supports the requirements for consolidation,
business continuance, and security while enabling emerging
SOAs, virtualization, and on-demand computing. IT staff can
easily provide departmental staff, suppliers, or customers with
secure access to applications and resources. This approach
simplifies and streamlines management, significantly reducing
overhead. Redundant data centers provide backup using
synchronous and asynchronous data and application replication.
The network and devices offer server and application load
balancing to maximize performance. This solution allows
enterprises to scale without major changes to the
infrastructure. Branch Architecture
The Cisco
Enterprise branch architecture allows enterprises to extend
head-office applications and services, such as security, IP
Communications, and advanced application performance, to
thousands of remote locations and users, or to a small group of
branches. Cisco integrates security, switching, network
analysis, caching, and converged voice and video services into
a series of integrated services routers in the branch so that
enterprises can deploy new services when they are ready without
buying new equipment. This solution provides secure access to
voice, mission-critical data, and video applications anywhere,
anytime. Advanced network routing, VPNs, redundant WAN links,
application content caching, and local IP telephony call
processing provide a robust architecture with high levels of
resilience for all the branch offices. An optimized network
leverages the WAN and LAN to reduce traffic and save bandwidth
and operational expenses. Enterprises can easily support branch
offices with the ability to centrally configure, monitor, and
manage devices located at remote sites, including tools, such
as AutoQoS, that proactively resolve congestion and bandwidth
issues before they affect network performance. Teleworker
Architecture
Also called the Enterprise Branch-of-One,
the Cisco Enterprise teleworker architecture allows enterprises
to securely deliver voice and data services to remote small or
home offices over a standard broadband access service,
providing a business resiliency solution for the enterprise and
a flexible work environment for employees. Centralized
management minimizes IT support costs, and robust integrated
security mitigates the unique security challenges of this
environment. Integrated security and identity-based networking
services enable the enterprise to help extend campus security
policies to the teleworker. Staff can securely log into the
network over an “always-on” VPN and gain access to authorized
applications and services from a single cost-effective
platform. The productivity can further be enhanced by adding an
IP phone, providing cost-effective access to a centralized IP
Communications system with voice and unified messaging
services. WAN and MAN Architectures
The Cisco
Enterprise WAN and MAN architectures offer the convergence of
voice, video, and data services over a single IP Communications
network. This approach enables enterprises to cost-effectively
span large geographic areas. QoS, granular service levels, and
comprehensive encryption options help ensure the secure
delivery of high-quality corporate voice, video, and data
resources to all corporate sites, enabling staff to work
productively and efficiently from any location. Security is
provided with multiservice VPNs (IPSec and MPLS) over Layer 2
or Layer 3 WANs, hub-and-spoke, or full mesh topologies.
Web Links Cisco Enterprise Architectures
http://www.cisco.com/en/US/netsol/ns517/networking
_solutions_market_segment_solutions_home.html
Cisco
Enterprise Architectures - Poster
http://www.cisco.com/application/pdf/en/us/guest/
netsol/ns477/c643/cdccont_0900aecd8039e0ea.pdf Cisco
Enterprise Campus Architecture
http://www.cisco.com/en/US/netsol/ns340/ns394/
ns431/networking_solutions_packages_list.html
Cisco Enterprise Branch Architecture
http://www.cisco.com/en/US/netsol/ns477/
networking_solutions_packages_list.html
Cisco
Enterprise Data Center Architecture
http://www.cisco.com/en/US/netsol/ns340/
ns394/ns224/networking_solutions_packages_list.html
Cisco Enterprise Teleworker Architecture
http://www.cisco.com/en/US/netsol/ns497/
networking_solutions_packages_list.html
Cisco
Enterprise WAN/MAN Architectures
http://www.cisco.com/en/US/netsol/ns483/
networking_solutions_packages_list.html
Content
1.1 IIN, SONA, and the ECNM 1.1.6
The Hierarchical Network Model Traditionally, the
three-layer hierarchical model has been used in network design.
The model provides a modular framework that allows flexibility
in network design and facilitates implementation and
troubleshooting. The hierarchical network model divides
networks or their modular blocks into the access, distribution,
and core layers, with these features: - Access
layer: Grants user access to network devices. In a network
campus, the access layer generally incorporates switched LAN
devices with ports that provide connectivity to workstations
and servers. In the WAN environment, the access layer at remote
sites or teleworkers may provide access to the corporate
network across WAN technology.
- Distribution
layer: Aggregates the wiring closets and uses switches to
segment workgroups and isolate network problems in a campus
environment. Similarly, the distribution layer aggregates WAN
connection at the edge of the campus and provides policy-based
connectivity.
- Core layer (also referred to as the
backbone): Designed to switch packets as fast as possible.
Because the core is critical for connectivity, it must provide
a high level of availability and adapt to changes very
quickly.
For example, the hierarchical model can be
applied specifically to the enterprise campus. It can also be
applied to the enterprise WAN. Obviously, another model is
required to break down and analyze an existing modern
enterprise network or to plan a new one. Interactive Media
Activity Point and Click: Layered Design Model
In this media activity, the student learns characteristics
of the Layered Design Model. This is a point and click activity
where the student clicks their choice.
Content 1.1
IIN, SONA, and the ECNM 1.1.7 The
Enterprise Composite Network Model Since the Intelligent
Network Service, security is critically important to all
network planning and implementation. For this reason, Cisco has
developed a set of best practices for security. These best
practices constitute a blueprint for network designers and
administrators for the proper deployment of security solutions
to support network solutions and the existing network
infrastructure. This blueprint is called Security Architecture
for Enterprise (SAFE). SAFE includes the Enterprise Composite
Network Model (ECNM) (also called the Enterprise Composite
Model [ECM]), which network professionals can use to describe
and analyze any modern enterprise network. Three functional
areas are defined by the model: - Enterprise
campus: Contains the modules required to build a
hierarchical, highly robust campus network. Access,
distribution, and core principles are applied to these
modules.
- Enterprise edge: Aggregates
connectivity from the various elements at the edge of the
enterprise network. It provides a description of connectivity
to remote locations, the Internet, and remote users.