Networking Technology – serie

Improve Manageability, Flexibility, Scalability, and Control with Hyperconverged Infrastructure Hyperconverged infrastructure (HCI) combines storage, compute, and networking in one unified system, managed locally or from the cloud. With HCI, you can leverage the cloud’s simplicity, flexibility, and scalability without losing control or compromising your ability to scale. In Hyperconverged Infrastructure Data Centers, best-selling author Sam Halabi demystifies HCI technology, outlines its use cases, and compares solutions from a vendor-neutral perspective. He guides you through evaluation, planning, implementation, and management, helping you decide where HCI makes sense, and how to migrate legacy data centers without disrupting production systems. The author brings together all the HCI knowledge technical professionals and IT managers need, whether their background is in storage, compute, virtualization, switching/routing, automation, or public cloud platforms. He explores leading solutions including the Cisco HyperFlex platform, VMware vSAN, Nutanix Enterprise Cloud, Cisco Application-Centric Infrastructure (ACI), VMware’s NSX, the open source OpenStack and Open vSwitch (OVS) / Open Virtual Network (OVN), and Cisco CloudCenter for multicloud management. As you explore discussions of automation, policy management, and other key HCI capabilities, you’ll discover powerful new opportunities to improve control, security, agility, and performance. Understand and overcome key limits of traditional data center designs Discover improvements made possible by advances in compute, bus interconnect, virtualization, and software-defined storage Simplify rollouts, management, and integration with converged infrastructure (CI) based on the Cisco Unified Computing System (UCS) Explore HCI functionality, advanced capabilities, and benefits Evaluate key HCI applications, including DevOps, virtual desktops, ROBO, edge computing, Tier 1 enterprise applications, backup, and disaster recovery Simplify application deployment and policy setting by implementing a new model for provisioning, deployment, and management Plan, integrate, deploy, provision, manage, and optimize the Cisco HyperFlex hyperconverged infrastructure platform Assess alternatives such as VMware vSAN, Nutanix, open source OpenStack, and OVS/OVN, and compare architectural differences with HyperFlex Compare Cisco ACI (Application- Centric Infrastructure) and VMware NSX approaches to network automation, policies, and security This book is part of the Networking Technology Series from Cisco Press, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

The CCNA 200-301 exam will challenge you to focus not only on the theory of a technology but the ability to demonstrate mastery of configuration, verification, and troubleshooting.

 

In CCNA 200-301 Hands-on Mastery with Packet Tracer, you will be guided through the required configuration, verification, and troubleshooting steps for every technology needed for the latest CCNA exam topics. Each section and chapter concludes with a practical lab that will challenge you to perform the hands-on tasks you must know in a manner very similar to the actual exam.

 

The many Packet Tracer labs included with this text are all graded simulations, allowing you to receive instant feedback regarding your mastery of the configurations. This text will allow you to learn the best practices used by seasoned engineers when configuring, verifying, and troubleshooting the many technologies called out in the latest exam topic list. Upon completing this text and the accompanying labs, you can approach the CCNA exam with great confidence and a strong desire to attack the hands-on simulations you will face in the actual exam.

 

Each chapter also provides practice questions and concise overviews of the theory behind the technologies, helping you review key exam topics and setting the context for the labs. This combination of succinct topic overviews, practice questions, and hands-on labs presents a complete test preparation package that ensures you are fully prepared for exam success.

 

Exam preparation features include:

 

Access guidance for acquiring the very latest Cisco Packet Tracer network simulator Learn to build realistic Packet Tracer labs Learn valuable customizations to the Packet Tracer lab environment Practice critical configuration and verification tasks in topic-based, expert-guided, and graded practice labs Test your configuration and verification skills in challenging graded Chapter Review labs Gain confidence in all configuration and verification tasks possible for the latest CCNA exam topics Reinforce key conceptual content also required for success in the latest CCNA exam

SaaS Fundamentals: A Guide to Modern Cloud Solutions

SaaS Fundamentals is a clear, straightforward introduction to Software as a Service that blends foundational technical knowledge with real-world application. This guide helps you confidently evaluate, migrate, and navigate the intricacies of SaaS while highlighting proven solutions.

Modern organizations depend on SaaS for collaboration, networking, visibility, and security. This book explains how SaaS differs from traditional software, why it accelerates innovation, and how to assess SaaS offerings for business value, reliability, security, and cost. You’ll learn how SaaS works in practice through established enterprise examples, including Cisco Umbrella, Cisco Webex, and Cisco ThousandEyes, demonstrating how cloud-managed networking, digital experience monitoring, and hybrid operations fit into modern IT environments.

Designed for busy professionals, each chapter stands alone, making it easy to reference architectures, migration planning, best practices, and detailed overviews of trusted SaaS solutions. The focus is practical, jargon-free, and directly applicable on the job.

Whether you’re moving from on-premises systems or refining an existing cloud strategy, this book helps you reduce risk, simplify operations, and improve agility with SaaS.

What You Will Learn

How SaaS works and how it differs from traditional software models How to evaluate SaaS for business value, security, compliance, and reliability How to plan and support SaaS migrations with minimal disruption How SaaS is used in real enterprises with Cisco Webex, Cisco ThousandEyes, and Cisco Umbrella Key SaaS operational concepts, including identity, integration, monitoring, and governance Emerging trends such as AI-assisted SaaS, hybrid multicloud, and edge integration

Migrate to Intent-Based Networking–and improve network manageability, cost, agility, security, and simplicity

With Intent-Based Networking (IBN), you can create networks that capture and automatically activate business intent, assure that your network responds properly, proactively detect and contain security threats, and remedy network issues before users even notice.

Intent-Based Networking makes networks far more valuable, but few organizations have the luxury of building them from the ground up. In this book, leading expert Pieter-Jans Nefkens presents a unique four-phase approach to preparing and transforming campus network infrastructures, architectures, and organization–helping you gain maximum value from IBN with minimum disruption and cost.

The author reviews the problems IBN is intended to solve, and illuminates its technical, business, and cultural implications. Drawing on his pioneering experience, he makes specific recommendations, identifies pitfalls, and shows how to overcome them. You’ll learn how to implement IBN with the Cisco Digital Network Architecture and DNA Center and walk through real-world use cases. In a practical appendix, Nefkens even offers detailed technical configurations to jumpstart your own transformation.

Review classic campus network deployments and understand why they need to change

Learn how Cisco Digital Network Architecture (DNA) provides a solid foundation for state-of-the-art next generation network infrastructures Understand “intent” and how it can be applied to network infrastructure Explore tools for enabling, automating, and assuring Intent-Based Networking within campus networks Transform to Intent-Based Networking using a four-phased approach: Identify challenges; Prepare for Intent; Design and Deploy; and Enable Intent Anticipate how Intent-Based Networking will change your enterprise architecture, IT operations, and business

A comprehensive guide to learning container and application hosting capabilities in Cisco platforms, and implementing them to achieve higher efficiency in network deployments and operations

Cisco architectures offer comprehensive compute virtualization capabilities to accommodate both native and third-party container hosting, so you can containerize and instantiate any application or network service and gain unprecedented value from your networks.Direct from Cisco, this is the complete guide to deploying and operating containerized application and network services on Cisco platforms. First, the authors review essential virtualization and containerization concepts for all network professionals and introduce leading orchestration tools. Next, they take a deep dive into container networking, introducing Cisco architectural support for container infrastructures. You’ll find modular coverage of configuration, activation,orchestration, operations, and application hosting for each key Cisco software platform: IOS-XE, IOS-XR, and NX-OS.The authors explore diverse orchestration tools, including LXC,Docker, and Kubernetes, and cover both Cisco and open-source tools for building and testing applications. They conclude with multiple use cases that show how containerization can improve agility and efficiency in a wide range of network environments.

Review the motivation, drivers, and concepts of computing virtualization Learn how Cisco platforms are achieving infrastructure virtualization Explore the Cisco reference model for developing cloud-native services and moving to cloud-native network functions Master Cisco container networking fundamentals, supported modes, and configuration Enable,install, activate, and orchestrate containerized applications in Cisco IOS-XE,IOS-XR, and NX-OS Compare tools and methods for developing, testing, hosting, and orchestrating containerized applications Discover real-world use cases for Day-0, Day-1, and Day-2 operations, with practical deployment examples Preview merging trends in network containerization

The definitive Cisco SD-Access resource, from the architects who train Cisco’s own engineers and partners

This comprehensive book guides you through all aspects of planning, implementing, and operating Cisco Software-Defined Access (SD-Access). Through practical use cases, you’ll learn how to use intent-based networking, Cisco ISE, and Cisco DNA Center to improve any campus network’s security and simplify its management.

Drawing on their unsurpassed experience architecting solutions and training technical professionals inside and outside Cisco, the authors explain when and where to leverage Cisco SD-Access instead of a traditional legacy design. They illuminate the fundamental building blocks of a modern campus fabric architecture, show how to design a software-defined campus that delivers the most value in your environment, and introduce best practices for administration, support, and troubleshooting.

Case studies show how to use Cisco SD-Access to address secure segmentation, plug and play, software image management (SWIM), host mobility, and more. The authors also present full chapters on advanced Cisco SD-Access and Cisco DNA Center topics, plus detailed coverage of Cisco DNA monitoring and analytics.

Learn how Cisco SD-Access addresses key drivers for network change, including automation and security Explore how Cisco DNA Center improves network planning, deployment, evolution, and agility Master Cisco SD-Access essentials: design, components, best practices, and fabric construction Integrate Cisco DNA Center and Cisco ISE, and smoothly onboard diverse endpoints Efficiently operate Cisco SD-Access and troubleshoot common fabric problems, step by step Master advanced topics, including multicast flows, Layer 2 flooding, and the integration of IoT devices Extend campus network policies to WANs and data center networks Choose the right deployment options for Cisco DNA Center in your environment Master Cisco DNA Assurance analytics and tests for optimizing the health of clients, network devices, and applications

Practical strategies and techniques for automating network infrastructure

As networks grow ever more complex, network professionals are seeking to automate processes for configuration, management, testing, deployment, and operation. Using automation, they aim to lower expenses, improve productivity, reduce human error, shorten time to market, and improve agility. In this guide, expert practitioner Ivo Pinto presents all the concepts and techniques you’ll need to move your entire physical and virtual infrastructure towards greater automation and maximize the value it delivers.

Writing for experienced professionals, the author reviews today’s leading use cases for automation, compares leading tools, and presents a deep dive into using the open source Ansible engine to automate common tasks. You’ll find everything you need: from practical code snippets to real-world case studies to a complete methodology for planning strategy.

This guide is for everyone seeking to improve network operations and productivity, including system, network, storage, and virtualization administrators, network and security engineers, and many other technical professionals and managers. You can apply its vendor-neutral concepts throughout your entire environment—from servers to the cloud, switches to security.

Explore modern use cases for network automation, and compare today’s most widely used automation tools Capture essential data for use in network automation, using standard formats such as JSON, XML, and YAML Get more value from the data your network can provide Install Ansible and master its building blocks, including plays, tasks, modules, variables, conditionals, loops, and roles Perform common networking tasks with Ansible playbooks: manage files, devices, VMs, cloud constructs, APIs, and more See how Ansible can be used to automate even the largest global network architectures Discover how NetDevOps can transform your approach to automation--and create a new NetDevOps pipeline, step by step Build a network automation strategy from the ground up, reflecting lessons from the world’s largest enterprises

Get ready to configure and operate modern data centers—and move up to high-value CCNP Data Center (DC) certification

Cisco Data Center Fundamentals is the complete guide for network engineers and other professionals who need a solid understanding of modern data center technologies. Especially useful for those preparing for the Cisco DCCOR exam and Cisco Certified Network Professional (CCNP) Data Center certification, it fully addresses the essentials of networking, storage, compute, and automation in today's data center environments.

Authored by two long-time experts in operating Cisco data centers and developing official Learning@Cisco training for them, this guide explains each concept step by step, balancing depth and breadth, and maximizing clarity throughout. The authors go far beyond introducing relevant products, protocols, and features. They illuminate underlying technologies, identify key interdependencies, walk through configuring working solutions, and truly help prepare you to set up and operate a modern data center.

Gain a holistic, unified understanding of the data center and its core components Walk through installation and deployment of key data center technologies Explore potential applications to see what's possible in your environment Learn how Cisco switches and software implement data center networking and virtualization Discover and apply data center network design and security best practices Review Cisco data center storage technologies and concepts, including Fibre Channel, VSANs, storage virtualization, and FCoE Explore the building blocks of the Cisco UCS data center compute solution, and how UCS uses hardware abstraction and server virtualization Use automation and APIs to improve data center productivity and agility Create and customize scripts for rapid troubleshooting Understand cloud computing for the data center: services, deployment models, and the Cisco Intersight hybrid cloud operations platform

Manage, operate, and integrate existing infrastructure in hybrid and multicloud environments

 

Hybrid cloud adoption is accelerating, as companies discover that hybrid cloud architectures can reduce hosting costs, improve agility, promote scalability, accelerate deployment, and enhance security. Cisco Cloud Infrastructure is the definitive reference for every IT professional, IT manager, and CIO who needs to understand, implement, or manage Cisco hybrid cloud solutions for networking, compute, storage, applications, or security.

 

Bringing together crucial information, a team of leading Cisco architects present end-to-end insights for seamlessly integrating management and operation of public cloud resources and on-premises deployments. The authors describe each Cisco solution and offering in detail, from both technical and business viewpoints. They review each leading deployment option, reviewing key concepts, best practices, guidelines, tradeoffs, design do's and don'ts, case studies, and more.

 

Cisco Cloud Infrastructure contains many configuration examples--including topologies, configuration, and verification--each based on actual Cisco Cloud deployments, and specifically designed to help you drive value faster.

 

Use Cisco data center orchestration software to automate tasks and operations, and enable an agile DevOps approach to continual improvement Gain big-picture insights and actionable drill-down data from the Cisco API-driven monitoring and assurance solutions Optimize workloads across clouds, on-premises data centers, labs, and co-location facilities for scale, performance, agility, and value Use AppDynamics enterprise-grade performance cloud monitoring and analytics tools to identify issues and overcome growth challenges Efficiently manage modern workloads with Intersight Workload Optimization Manager, Cisco Container Platform, and Intersight Kubernetes Service (IKS) Manage interdependencies between networks, compute, storage, application, and security in hybrid cloud environments Take advantage of Cisco Cloud Webex to improve collaboration in hybrid/multicloud environments Integrate operational hardware with the Internet of Things (IoT) to gain deeper insight for greater efficiency Protect users, data, and applications everywhere with Cloudlock, Umbrella, Cloud Analytics, Duo, and API-based integrations

The complete practical guide to architect storage networks for maximum efficiency, and to quickly troubleshoot congestion issues.

Data is the most important entity in a data center. In addition to being stored securely for the long term, data must be accessible to applications with low latency so that high performance can be maintained 24/7. To meet this performance goal of applications, the storage infrastructure services must be designed accordingly.

In Detecting, Troubleshooting, and Preventing Congestion in Storage Networks, leading Cisco experts take a practical approach to explaining the congestion handling mechanisms of the transport technologies like FC, FCoE, RoCE, and TCP. The authors share proven troubleshooting methodology developed through years of firsthand experience as well as analytical techniques for monitoring the storage fabrics and gaining predictive insights.

Through real-world experiences and case study examples, you'll learn what questions to ask, how to start planning, what exists today, what components still must evolve, and how to drive value in building custom applications in detecting congestion in large-scale storage networks.

Optimize user experience with faster resolution of congestion in storage networks in production data centers Master congestion handling mechanisms in technologies like FC, FCoE, RoCE, and TCP Applicable to networks connected to all storage array types and vendors including Dell, HPE, IBM, NetApp, Hitachi Real-world case studies and troubleshooting methodology ensuring storage SLAs are consistently met Increase uptime with custom analytical tools for predicting and resolving congestion Boost storage infrastructure efficiency in a hybrid cloud model Save on employee training and reduce support ticket hassles with vendors

Use Cisco Intersight to streamline, unify, and secure IT operations across data centers, clouds, and the edge

 

The Cisco Intersight cloud operations platform delivers intelligent visualization, optimization, and orchestration for applications and infrastructure across any hybrid cloud environment. Using it, you can operate and maintain traditional infrastructure with the agility of cloud-native infrastructure, as you enhance stability and governance in cloud-native environments.

 

This unique guide shows how to use Intersight to transform heterogeneous IT environments and simplify operations throughout your organization. It has been authored by Cisco insiders with 150+ years of combined experience across every key role associated with enterprise datacenters and cloud technology.

 

The authors cover all facets of Intersight architecture, planning, and administration--from foundational concepts and security to operating infrastructure, servers, networks, storage, virtualization, and workloads--with chapters on Kubernetes, orchestration, programmability, and Infrastructure as Code.

 

Cisco Intersight: A Handbook for Intelligent Cloud Operations is for every IT operator, administrator, manager, and director responsible for operations, programming/automation, information gathering, or monitoring, as well as decision-makers evaluating Intersight or leading implementation. Whatever your role in operating disparate data centers, clouds, and edge environments, Intersight will radically simplify your work--and this guide will help you maximize its value.

 

Understand the platform architecture underlying Intersight's capabilities Establish a cohesive approach to securing all your services Explore Intersight's infrastructure operations capabilities, and integrate with other ops platforms Deploy, configure, operate, and update Cisco UCS servers and network infrastructure Centralize storage management, from Cisco HyperFlex to traditional storage Control virtualized compute infrastructure, on-premises or in the cloud Simplify deployment and management of Kubernetes clusters and service meshes Use Workload Optimization to continually assure performance, minimize cost, and maximize utilization Operationalize repeatable activities across the enterprise Get started with Intersight programmability, learning from easy examples Learn how "code-ifying" infrastructure can improve compliance and reduce risk

Master a holistic approach to NetDevOps—from concepts to practical implementation

This is your comprehensive, holistic, end-to-end practitioner's guide to all things NetDevOps: all you need to use NetDevOps techniques to enhance network agility, productivity, and value.

Enterprise networking pioneers Ivo Pinto and Faisal Chaudhry introduce NetDevOps' origins, components, advantages, shortcomings, use cases, and adoption challenges. Next, they drill down into NetDevOps CI/CD pipelines and testing, Jenkins automation, EVE-NG clientless multivendor network emulation, and more from a vendor-neutral perspective.

Automating and Orchestrating Networks with NetDevOps is for every network or cloud operator, administrator, engineer, architect, and developer who implements, manages, or maintains network infrastructure. You'll find everything from detailed syntax and reusable code examples to deployment best practices, culminating in a full walkthrough of building your own NetDevOps architecture. Throughout, review questions help you reinforce and verify your understanding. Whatever your background or environment, this guide will help you embark confidently on your own NetDevOps journey.

Understand where NetDevOps excels (and where it doesn't) Explore the components of practical implementations, and how they fit together Plan for common challenges, decisions, and investments Implement efficient, automated CI/CD pipelines with Jenkins—with practical tooling and example code Use EVE-NG to create and configure virtual topologies for testing and verification Master proven NetDevOps architectural best practices from industry leaders Build your own architecture, step-by-step Address common use cases such as configuration changes and compliance verification Integrate NetDevOps with ChatOps, and interact with networks via Slack

Unlock the power of automated network testing with the Cisco pyATS framework.

Written by industry experts John Capobianco and Dan Wade, Cisco pyATS—Network Test and Automation Solution is a comprehensive guide to the Cisco pyATS framework, a Python-based environment for network testing, device configuration, parsing, APIs, and parallel programming.

Capobianco and Wade offer in-depth insights into the extensive capabilities of pyATS and the pyATS library (Genie). You'll learn how to leverage pyATS for network testing, including software version testing, interface testing, neighbor testing, and reachability testing. You'll discover how to generate intent-based configurations, create mock devices, and integrate pyATS into larger workflows using CI/CD pipelines and artificial intelligence. You'll explore the pyATS Blitz feature, which introduces a low-code no-code approach to network testing by allowing you to configure devices and write test cases using YAML, much like Ansible. And you'll learn how to reset devices during or after testing with the pyATS Clean feature, build a pyATS image from scratch for containerized application deployment, and much more.

Whether you're a network professional, software developer, or preparing for the Cisco DevNet Expert Lab exam, this book is a must-have resource.

Understand the foundations of NetDevOps and the modern network engineer's toolkit

Install, upgrade, and work with the pyATS framework and library Define test cases, control the flow of test execution, and review test results with built-in reporting features Generate automated network documentation with Jinja2 templates and Genie Conf objects Apply CI/CD practices in network automation with GitLab, Ansible, and pyATS Leverage artificial intelligence in pyATS for enhanced network automation

Unlock the power of automated network testing with the Cisco pyATS framework.

Written by industry experts John Capobianco and Dan Wade, Cisco pyATS—Network Test and Automation Solution is a comprehensive guide to the Cisco pyATS framework, a Python-based environment for network testing, device configuration, parsing, APIs, and parallel programming.

Capobianco and Wade offer in-depth insights into the extensive capabilities of pyATS and the pyATS library (Genie). You'll learn how to leverage pyATS for network testing, including software version testing, interface testing, neighbor testing, and reachability testing. You'll discover how to generate intent-based configurations, create mock devices, and integrate pyATS into larger workflows using CI/CD pipelines and artificial intelligence. You'll explore the pyATS Blitz feature, which introduces a low-code no-code approach to network testing by allowing you to configure devices and write test cases using YAML, much like Ansible. And you'll learn how to reset devices during or after testing with the pyATS Clean feature, build a pyATS image from scratch for containerized application deployment, and much more.

Whether you're a network professional, software developer, or preparing for the Cisco DevNet Expert Lab exam, this book is a must-have resource.

Understand the foundations of NetDevOps and the modern network engineer's toolkit

Install, upgrade, and work with the pyATS framework and library Define test cases, control the flow of test execution, and review test results with built-in reporting features Generate automated network documentation with Jinja2 templates and Genie Conf objects Apply CI/CD practices in network automation with GitLab, Ansible, and pyATS Leverage artificial intelligence in pyATS for enhanced network automation

The comprehensive guide to design integration in a multi-domain environment providing consistent design across large-scale environments.

 

Prajapati, Bowman, and Suvarna’s more than 50 years of combined customer network-building experience will help you translate your organization’s business and technical intent into a fully functioning, secure, and efficient network.

 

Catalyst SDA, Catalyst SD-WAN, ACI MPLS, CNFs, Cloud, and Security technology domains account for a large market share in consumer networks as a replacement for traditional monolothic networks. Designing Real-World Multi-Domain Networks is designed for architects and engineers who want to integrate these new and emerging multi-domain technologies so you can be at the front of this inevitable network change.

 

Written with great care, this technical book is divided into three clear sections, guiding readers into the world of blending architecture with technology. Each chapter focuses on a different aspect, explaining how modern technology integrates and interoperates with other architectures.

 

You have the freedom to choose how you read. You can go through the book from start to finish like a story, or you can jump straight to the parts that interest you the most. The layout is made to be flexible, suiting both those who like to read in order, and those who want quick solutions.

 

The book ends with five real-life examples, connecting theoretical ideas to practical results. These stories make the lessons clear, giving you the understanding and skills needed for real-world projects.

 

Understand how Cisco Catalyst SD-Access, Catalyst SD-WAN, ACI, MPLS, CNFs, Cloud, and Security interoperate with each other to form end-to-end segmented and secure networks Understand details on how a packet behaves as it transits one technology domain to another Get answers to big what, whys, and hows surrounding multi-domain networks Learn from actual real-world deployment of Cisco customers Gain valuable insight from the authors’ previous large-scale deployments Utilize reference architecture for using these technologies in tandem

Are you ready to challenge the ways you have always approached networking? The IT world has undergone a transformation, and fast solutions just aren’t fast enough anymore. A platform-based approach with automated processing of data is no longer a dream of the future—it's a requirement of the present.

 

In Cisco Meraki Fundamentals, you will learn how to “think” platform: end-to-end control, management, and visibility of operations, all with less complexity. As you embrace this thinking, the possibilities for producing optimized solutions to problems now and in the future become constraints merely of your imagination.

 

Cisco Meraki Fundamentals provides everything you need to get started forging a platform-centric journey. From the basics of cloud architecture and building the Dashboard, through automation, best practices, and a look at the Meraki admin experience, Cisco Meraki Fundamentals provides a powerful foundation from which to forge a digital operation for the future.

 

Learn the origins of the Cisco Meraki cloud-managed platform, from founding concept through philosophy and goals Learn to manage data that emerges from day-to-day operations and how to get to outcomes more quickly Understand the differences between cloud-managed Meraki networks and more traditional networks Get to know the basics of administering a network with the Meraki Dashboard See examples of Meraki-specific best practices, as well as how to integrate and automate with non-Meraki tools and services See an overview of how the cloud platform assists in identifying and troubleshooting potential issues more easily Look in on a day in the life of a Meraki-based platform administrator, including use cases for the Meraki cloud platform

 

Online Bonus Content:

Access all the images from the book on the book's companion website.

Zero Trust in Resilient Cloud and Network Architectures, written by a team of senior Cisco engineers, offers a real-world, hands-on guide to deploying automated architectures with a focus on segmentation at any scale--from proof-of-concept to large, mission-critical infrastructures. Whether you’re new to software-defined and cloud-based architectures or looking to enhance an existing deployment, this book will help you:

Implement Zero Trust: Segment and secure access while mitigating IoT risks Automate Network Operations: Simplify provisioning, authentication, and traffic management Deploy at scale following best practices for resilient and secure enterprise-wide network rollouts Integrate with Cloud Security, bridging on-prem and cloud environments seamlessly Learn from Real-World Case Studies: Gain insights from the largest Cisco enterprise deployments globally

 

This edition covers Meraki, EVPN, Pub/Sub, and Terraform and Ansible-based deployments with a key focus on network resilience and survivability. It also explores quantum security and Industrial Zero Trust, along with Cisco’s latest evolutions in software-defined networking, providing exclusive insights into its enhancements, architecture improvements, and operational best practices. If you're a network, security, or automation specialist, this book is your essential guide to building the next-generation, zero-trust network.

Unlock the Future of Networking with Segment Routing: Your Comprehensive Guide to SR-MPLS and SRv6 for Service Provider and Enterprise Networks

 

In the ever-evolving landscape of networking, this book is your essential resource for mastering the cutting-edge technology of Segment Routing (SR). Authored by industry experts, this book offers a deep dive into the world of SR, from foundational principles to advanced implementations.

 

This guide begins with a brief recap of MPLS, setting the stage for an in-depth exploration of SR-MPLS and SRv6. Each chapter is meticulously crafted to provide a holistic understanding of SR, featuring practical examples and detailed configurations for both IOS-XR and IOS-XE platforms. Network engineers, architects, and operators will find invaluable insights and step-by-step instructions to effectively implement and manage SR technologies and overlay services.

 

Beyond the technical details, the book delves into the business and organizationalimplications of adopting SR. Learn how SR can drive growth, improve customer experience, and streamline operations. With sections on SRv6 deployments in data centers and cloud environments, including lab support materials, you’ll be ready for the next wave of networking innovations.

 

Book features include:

Practical insights drawn from real-world deployments, including diagrams, design guidelines, configuration examples, packet captures, and troubleshooting tips Logical progression from basic concepts to advanced implementations, suitable for both beginners and seasoned professionals Extensive configuration and verification examples for overlay services like L2VPN (EVPN) and L3VPN SRv6 open-source implementations for data centers and cloud environments Business-oriented chapters outlining the benefits of SR

Before an enterprise answers “How can we achieve a Zero Trust architecture?” they should be asking “Why are we looking at Zero Trust as an access model? Does it align with our vision?” In an innovative format, Cisco security architecture expert Avinash Naduvath guides you through the philosophical questions and practical answers for an enterprise looking to start the Zero Trust journey.

 

A conversational model will take you from the initial stages of identifying goals and pitching solutions, through practical tasks that highlight tangible outcomes—including common primary use cases—in order to bring focus to the correct implementation and maintenance of a Zero Trust architecture.

 

For a future where success is measured as much by the security of a system as by the functionality, In Zero Trust We Trust is designed to help everyone at every stage and level of leadership understand not only the conceptual underpinnings, but the real-world context of when, how, and why to deploy Zero Trust security controls. This book provides the starting point for helping you change the mindset of others, and getting them to understand why Zero Trust isn’t simply a conversation to be had, but a movement to embrace.

 

Origins of the Zero Trust philosophy in security architecture explained, and why it took so long to catch on Detailed examination of how to ask the right questions so as to implement the right security answers for clients Understanding the metrics by which to measure Zero Trust success, and what maintaining that success looks like Identifying the stakeholders and empowering a Zero Trust team within an enterprise Examples of how to catalyze opinion and tailor tactics to motivate investment in secure Zero Trust architecture Implement, monitor, feedback, repeat: Presenting and building a roadmap for a sustainable security architecture Looking ahead to a Zero Trust Lifecycle Framework and a blueprint for the future

 

Cisco ThousandEyes, the cloud-based network intelligence tool, delivers expanded visibility, automated insights, and seamless workflows to ensure digital experiences across any network—whether on premise, on the Internet, or in the cloud. ThousandEyes is the authority when monitoring SaaS, hybrid, and multi-cloud environments. With unparalleled real-time analytics and insights, it enables IT admins to quickly identify and resolve issues for a reduction of downtime and improved user experience.

In Cisco ThousandEyes, network solutions specialists Aaron Trompeter and Robert Webb offer a deep dive into the intricacies and power of the Cisco ThousandEyes platform and demonstrate how to leverage it to solve complex problems and optimize your digital experience. Through real-world experiences and use cases, the authors demonstrate how to plan and design network monitoring solutions, as well as how to improve performance and availability. You’ll also learn how ThousandEyes can be integrated with other Cisco products and third-party tools.

This is an essential resource for any network administrator, DevOps engineer, IT professional, enterprise IT team, cloud engineer, application team, and service provider responsible for managing and optimizing the performance of an organization’s network infrastructure and application performance.

Explore Cisco ThousandEyes and its capabilities, and learn how to harness its potential for your organization Delve into agent setup, test configurations, alerts, and dashboards, and learn how to apply them effectively Understand the intricacies of monitoring and troubleshooting network performance issues, and use these skills to enhance network efficiency Conduct advanced tests using transactional scripts and integrations, and use them for complex problem-solving Implement best practices for test optimization and device monitoring to ensure optimal functionality Understand the importance of account settings and automation and their roles in streamlining operations Align the role of business strategy in the context of digital experience monitoring with your organization’s goals

Unleash the power of Cisco SD-WAN with this comprehensive guide to design, deployment, and security. Cisco Catalyst SD-WAN: Design, Deploy, and Secure Your WAN is your definitive guide to mastering Cisco's Software-Defined Wide Area Networking. This comprehensive resource equips you with the knowledge and skills to optimize performance and enhance security for your organization's network. Whether you're an IT professional, network engineer, or system administrator, this completely revised edition provides the essential tools and knowledge you need to excel in today's demanding networking landscape. With insights from four leading Cisco technology experts, this book also helps you prepare for the CCNP Enterprise Implementing Cisco SD-WAN Solutions ENSDWI 300-415 exam. Covering all of the exam topics, this is the only self-study resource approved by Cisco. It provides a proven test-preparation routine to help you pass the ENSDWI 300-415 exam on your first attempt.

Exam preparation features include:

Chapter-ending review questions to reinforce your learning The powerful Pearson Test Prep Practice Test software with exam-realistic questions and detailed performance reports An online Flash Cards application to help you drill on Key Terms by chapter

Key Features:

Architectural Mastery: Understand the key components and benefits of Cisco SD-WAN Efficient Design and Migration: Learn the steps to transition your network smoothly to Cisco Catalyst SD-WAN Policy Implementation: Gain detailed insights into SD-WAN policies and their application Advanced Security: Discover techniques to safeguard your network effectively Up-to-date Content: Includes new chapters on Cloud OnRamp, monitoring, and troubleshooting

Content Update Program:

This fully updated second edition includes the latest topics and additional information covering changes to the latest CCNP Enterprise Implementing Cisco SD-WAN Solutions ENSDWI 300-415 exam. Visit ciscopress.com for information on annual digital updates for this book that align to Cisco exam blueprint version changes.

 

This extensively updated new edition contains updated policy chapters to include new technologies, such as:

Enhanced App Aware Routing Coverage of configuration and policy groups Completely updated security content including segmentation New chapters on Cloud OnRamp and monitoring and troubleshooting

Companion Website:

The companion website contains the Pearson Test Prep practice test software with two full exams for the CCNP Enterprise ENSDWI 300-415 exam and Key Terms flash cards.

The industry's leading resource for Internet routing solutions and scenarios

Explore the functions, attributes, and applications of BGP-4, the de facto interdomain routing protocol, through practical scenarios and configuration examples Learn the contemporary Internet structure and understand how to evaluate a service provider in dealing with routing and connectivity issues Master the addressing techniques--including Classless Interdomain Routing (CIDR)--that are demanded today to facilitate the Internet's rapid and continuing growth Develop optimal routing policies--redundancy, traffic balancing, symmetry, and stability--for your network Learn how to seamlessly integrate your intradomain and interdomain routing and manage large and growing autonomous systems

Internet Routing Architectures, Second Edition, explores the ins and outs of interdomain routing network designs with emphasis on BGP-4 (Border Gateway Protocol Version 4)--the de facto interdomain routing protocol.

Using a practical, example-oriented approach, this comprehensive resource provides you with real solutions for ISP connectivity issues. You will learn how to integrate your network on the global Internet and discover how to build large-scale autonomous systems. You will also learn to control expansion of interior routing protocols using BGP-4, design sound and stable networks, configure the required policies using Cisco IOS Software, and explore routing practices and rules on the Internet.

157870233X020206

 

As data centers grow in size and complexity, enterprises are adopting server virtualization technologies such as VMware, VMotion, NIC teaming, and server clustering to achieve increased efficiency of resources and to ensure business resilience. However, these technologies often involve significant expense and challenges to deal with complex multisite interconnections and to maintain the high availability of network resources and applications.

 

Interconnecting Data Centers Using VPLS presents Virtual Private LAN Service (VPLS) based solutions that provide high-speed, low-latency network and Spanning Tree Protocol (STP) isolation between data centers resulting in significant cost savings and a highly resilient virtualized network. The design guidance, configuration examples, and best practices presented in this book have been validated under the Cisco Validated Design (CVD) System Assurance program to facilitate faster, more reliable and more predictable deployments. The presented solutions include detailed information about issues that relate to large Layer 2 bridging domains and offer guidance for extending VLANs over Layer 3 networks using VPLS technology.

 

Implementing this breakthrough Data Center Interconnect (DCI) strategy will evolve your network to support current server virtualization techniques and to provide a solid foundation for emerging approaches. The book takes you from the legacy deployment models for DCI, problems associated with extending Layer 2 networks, through VPN technologies, to various MST-, EEM-, and GRE-based deployment models and beyond. Although this book is intended to be read cover-to-cover, it is designed to be flexible and allow you to easily move between chapters to develop the solution most compatible with your requirements.

 

 

Describes a variety of deployment models to effectively transport Layer 2 information, allowing your virtualization solution to operate effectively Explains benefits and trade-offs of various solutions for you to choose the solution most compatible with your network requirements to ensure business resilience Provides detailed design guidance and configuration examples that follow Cisco best practice recommendations tested within the CVD

This book is part of the Networking Technology Series from Cisco Press®, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

 

 

Techniques for optimizing large-scale IP routing operation and managing network growth

Understand the goals of scalable network design, including tradeoffs between network scaling, convergence speed, and resiliency Learn basic techniques applicable to any network design, including hierarchy, addressing, summarization, and information hiding Examine the deployment and operation of EIGRP, OSPF, and IS-IS protocols on large-scale networks Understand when and how to use a BGP core in a large-scale network and how to use BGP to connect to external networks Apply high availability and fast convergence to achieve 99.999 percent, or “five 9s” network uptime Secure routing systems with the latest routing protocol security best practices Understand the various techniques used for carrying routing information through a VPN

Optimal Routing Design provides the tools and techniques, learned through years of experience with network design and deployment, to build a large-scale or scalable IP-routed network. The book takes an easy-to-read approach that is accessible to novice network designers while presenting invaluable, hard-to-find insight that appeals to more advanced-level professionals as well.

Written by experts in the design and deployment of routing protocols, Optimal Routing Design leverages the authors’ extensive experience with thousands of customer cases and network designs. Boiling down years of experience into best practices for building scalable networks, this book presents valuable information on the most common problems network operators face when seeking to turn best effort IP networks into networks that can support Public Switched Telephone Network (PSTN)-type availability and reliability.

Beginning with an overview of design fundamentals, the authors discuss the tradeoffs between various competing points of network design, the concepts of hierarchical network design, redistribution, and addressing and summarization. This first part provides specific techniques, usable in all routing protocols, to work around real-world problems. The next part of the book details specific information on deploying each interior gateway protocol (IGP)—including EIGRP, OSPF, and IS-IS—in real-world network environments. Part III covers advanced topics in network design, including border gateway protocol (BGP), high-availability, routing protocol security, and virtual private networks (VPN). Appendixes cover the fundamentals of each routing protocol discussed in the book; include a checklist of questions and design goals that provides network engineers with a useful tool when evaluating a network design; and compare routing protocols strengths and weaknesses to help you decide when to choose one protocol over another or when to switch between protocols.

“The complexity associated with overlaying voice and video onto an IP network involves thinking through latency, jitter, availability, and recovery issues. This text offers keen insights into the fundamentals of network architecture for these converged environments.”

—John Cavanaugh, Distinguished Services Engineer, Cisco Systems®

This book is part of the Networking Technology Series from Cisco Press‚ which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

NX-OS and Cisco Nexus Switching

Next-Generation Data Center Architectures

Second Edition

The complete guide to planning, configuring, managing, and troubleshooting NX-OS in the enterprise–updated with new technologies and examples

Using Cisco Nexus switches and the NX-OS operating system, data center professionals can build unified core networks that deliver unprecedented scalability, resilience, operational continuity, flexibility, and performance. NX-OS and Cisco Nexus Switching, Second Edition, is the definitive guide to applying these breakthrough technologies in real-world environments. This extensively updated edition contains five new chapters addressing a wide range of new technologies, including FabricPath, OTV, IPv6, QoS, VSG, Multi-Hop FCoE, LISP, MPLS, Layer 3 on Nexus 5000, and Config sync. It also presents a start-to-finish, step-by-step case study of an enterprise customer who migrated from Cisco Catalyst to a Nexus-based architecture, illuminated with insights that are applicable in virtually any enterprise data center. Drawing on decades of experience with enterprise customers, the authors cover every facet of deploying, configuring, operating, and troubleshooting NX-OS in today’s data center. You’ll find updated best practices for high availability, virtualization, security, L2/L3 protocol and network support, multicast, serviceability, provision of networking and storage services, and more. Best of all, the authors present all the proven commands, sample configurations, and tips you need to apply these best practices in your data center.

Ron Fuller, CCIE No. 5851 (Routing and Switching/Storage Networking), Technical Marketing Engineer on Cisco’s Nexus 7000 team, specializes in helping customers design end-to-end data center architectures. Ron has 21 years of industry experience, including 7 at Cisco. He has spoken at Cisco Live on VDCs, NX-OS multicast, and general design.

David Jansen, CCIE No. 5952 (Routing/Switching), is a Cisco Technical Solutions Architect specializing in enterprise data center architecture. He has 20 years of industry experience, 15 of them at Cisco (6 as a solution architect); and has delivered several Cisco Live presentations on NX-OS and data center solutions.

Matthew McPherson, senior systems engineer and solutions architect for the Cisco Central Select Operation, specializes in data center architectures. He has 12 years of experience working with service providers and large finance and manufacturing enterprises, and possesses deep technical knowledge of routing, switching, and security.

Understand the NX-OS command line, virtualization features, and file system Utilize the NX-OS comprehensive Layer 2/Layer 3 support: vPC, Spanning Tree Protocol, Cisco FabricPath, EIGRP, OSPF, BGP, HSRP, GLBP, and VRRP Configure IP multicast with PIM, Auto-RP, and MSDP Secure your network with CTS, SGTs, ACLs, CoPP, and DAI Establish a trusted set of network devices with Cisco TrustSec Maximize availability with ISSU, stateful process restart/switchover, and non-stop forwarding Improve serviceability with SPAN, ERSPAN, configuration checkpoints/rollback, packet analysis, Smart Call Home, Python, and PoAP Unify storage and Ethernet fabrics with FCoE, NPV, and NPIV Take full advantage of Nexus 1000V in a virtualized environment Achieve superior QoS with MQ CLI, queuing, and marking Extend L2 networks across L3 infrastructure with Overlay Transport Virtualization (OTV) Deliver on SLAs by integrating MPLS application components such as L3 VPNs, traffic engineering, QoS, and mVPN Support mobility via the new Locator ID Separation Protocol (LISP) Walk step-by-step through a realistic Nexus and NX-OS data center migration

The Art of Network Architecture

Business-Driven Design

The business-centered, business-driven guide to architecting and evolving networks

The Art of Network Architecture is the first book that places business needs and capabilities at the center of the process of architecting and evolving networks. Two leading enterprise network architects help you craft solutions that are fully aligned with business strategy, smoothly accommodate change, and maximize future flexibility.

Russ White and Denise Donohue guide network designers in asking and answering the crucial questions that lead to elegant, high-value solutions. Carefully blending business and technical concerns, they show how to optimize all network interactions involving flow, time, and people.

The authors review important links between business requirements and network design, helping you capture the information you need to design effectively. They introduce today’s most useful models and frameworks, fully addressing modularity, resilience, security, and management. Next, they drill down into network structure and topology, covering virtualization, overlays, modern routing choices, and highly complex network environments.

In the final section, the authors integrate all these ideas to consider four realistic design challenges: user mobility, cloud services, Software Defined Networking (SDN), and today’s radically new data center environments.

• Understand how your choices of technologies and design paradigms will impact your business

• Customize designs to improve workflows, support BYOD, and ensure business continuity

• Use modularity, simplicity, and network management to prepare for rapid change

• Build resilience by addressing human factors and redundancy

• Design for security, hardening networks without making them brittle

• Minimize network management pain, and maximize gain

• Compare topologies and their tradeoffs

• Consider the implications of network virtualization, and walk through an MPLS-based L3VPN example

• Choose routing protocols in the context of business and IT requirements

• Maximize mobility via ILNP, LISP, Mobile IP, host routing, MANET, and/or DDNS

• Learn about the challenges of removing and changing services hosted in cloud environments

• Understand the opportunities and risks presented by SDNs

• Effectively design data center control planes and topologies

The definitive guide to troubleshooting today’s complex BGP networks

This is today’s best single source for the techniques you need to troubleshoot BGP issues in modern Cisco IOS, IOS XR, and NxOS environments. BGP has expanded from being an Internet routing protocol and provides a scalable control plane for a variety of technologies, including MPLS VPNs and VXLAN. Bringing together content previously spread across multiple sources, Troubleshooting BGP describes BGP functions in today’s blended service provider and enterprise environments.

Two expert authors emphasize the BGP-related issues you’re most likely to encounter in real-world deployments, including problems that have caused massive network outages. They fully address convergence and scalability, as well as common concerns such as BGP slow peer, RT constraint filtering, and missing BGP routes. For each issue, key concepts are presented, along with basic configuration, detailed troubleshooting methods, and clear illustrations. Wherever appropriate, OS-specific behaviors are described and analyzed.

Troubleshooting BGP is an indispensable technical resource for all consultants, system/support engineers, and operations professionals working with BGP in even the largest, most complex environments.

· Quickly review the BGP protocol, configuration, and commonly used features

· Master generic troubleshooting methodologies that are relevant to BGP networks

· Troubleshoot BGP peering issues, flapping peers, and dynamic BGP peering

· Resolve issues related to BGP route installation, path selection, or route policies

· Avoid and fix convergence problems

· Address platform issues such as high CPU or memory usage

· Scale BGP using route reflectors, diverse paths, and other advanced features

· Solve problems with BGP edge architectures, multihoming, and load balancing

· Secure BGP inter-domain routing with RPKI

· Mitigate DDoS attacks with RTBH and BGP Flowspec

· Understand common BGP problems with MPLS Layer 3 or Layer 2 VPN services

· Troubleshoot IPv6 BGP for service providers, including 6PE and 6VPE

· Overcome problems with VXLAN BGP EVPN data center deployments

· Fully leverage BGP High Availability features, including GR, NSR, and BFD

· Use new BGP enhancements for link-state distribution or tunnel setup

This book is part of the Networking Technology Series from Cisco Press, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

Improve operations and agility in any data center, campus, LAN, or WAN

Today, the best way to stay in control of your network is to address devices programmatically and automate network interactions. In this book, Cisco experts Ryan Tischer and Jason Gooley show you how to do just that. You’ll learn how to use programmability and automation to solve business problems, reduce costs, promote agility and innovation, handle accelerating complexity, and add value in any data center, campus, LAN, or WAN.

The authors show you how to create production solutions that run on or interact with Nexus NX-OS-based switches, Cisco ACI, Campus, and WAN technologies.You’ll learn how to use advanced Cisco tools together with industry-standard languages and platforms, including Python, JSON, and Linux. The authors demonstrate how to support dynamic application environments, tighten links between apps and infrastructure, and make DevOps work better.

This book will be an indispensable resource for network and cloud designers, architects, DevOps engineers, security specialists, and every professional who wants to build or operate high-efficiency networks.

Drive more value through programma­bility and automation, freeing resources for high-value innovation Move beyond error-prone, box-by-box network management Bridge management gaps arising from current operational models Write NX-OS software to run on, access, or extend your Nexus switch Master Cisco’s powerful on-box automation and operation tools Manage complex WANs with NetConf/Yang, ConfD, and Cisco SDN Controller Interact with and enhance Cisco Application Centric Infrastructure (ACI) Build self-service catalogs to accelerate application delivery Find resources for deepening your expertise in network automation