Chapter 7. The Extended SAFE Blueprints

Terms you'll need to understand:

• CA

• PPVPN

• Split tunneling

• Headend

• XAUTH

• PFS

• SA

• PMTUD

• MODCFG

• DPD

• Stale SAs

Techniques you'll need to master:

• Implementing a SAFE small network design

• Implementing a SAFE medium network design

• Implementing a SAFE remote- user network design

The Enterprise SAFE Blueprint is written for large enterprises and those that have an e-commerce operation. The Extended SAFE Blueprints cover smaller organizations (the SMR SAFE Blueprint) and specialized operations (VPNs, IP telephony, and wireless). The CSI exam description states

The Cisco SAFE Implementation exam tests the knowledge and skills needed to use and implement the principles and axioms presented in the SAFE Small, Midsize, and Remote User (SMR) White Paper. Candidates are tested on knowledge of how the following devices can be used to create a complete end-to-end solution: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Host IDS, and the Cisco VPN Client.

The Enterprise SAFE Blueprint provides the foundation for the design principles used in the SMR and the other SAFE Blueprints. But the SAFE SMR adds a twist that is not in the Enterprise SAFE: remote-user networks. In fact, the SMR is a cross between the Enterprise SAFE (without resiliency and e-commerce) and the SAFE VPN Blueprints. Therefore, we need to look into the VPN Blueprint before we put those pieces together in the SMR Blueprint. Because Cisco might modify the exam between the time this book is published and the time you actually take the exam, we look (lightly) at the specialty SAFE Blueprints, the IP Telephony, and Wireless Blueprints.

To be sure you have it fresh in your mind when looking at products in the modules (Chapters 8, "Products in the Campus," and 9, "Products in the Edge"), we take things in this order: VPN (to cover the second necessary major topic), IPT, and wireless (just in case questions are added concerning them). We close by pulling together the Enterprise and VPN concepts into the SMR Blueprint. By the time you see the ideas in that section, you should be getting them for the third time or even more. Repetition helps, especially when you are under stress from taking the exam.