| 1 |
What types of networks can L2TPv3-based L2VPNs be deployed over? |
| Answer: |
L2TPv3-based L2VPNs can be deployed over any IP-enabled network. |
| 2 |
What are some of the main advantages of VPWS L2VPNs (including those that are L2TPv3 based)? |
| Answer: |
They allow service providers to consolidate legacy and IP infrastructures, decommission legacy infrastructure, and save both capex and opex; they allow enterprises to have complete control of routing, transport non-IP protocols, and can also help the migration from IPv4 to IPv6. |
| 3 |
Name five types of Layer 2 protocols that L2TPv3 can tunnel over packet-switched networks. |
| Answer: |
Ethernet, ATM, Frame Relay, HDLC, and PPP. |
| 4 |
Which L2TPv3 deployment model applies in a pseudowire configuration? |
| Answer: |
LAC-to-LAC deployment model. |
| 5 |
What functions does the L2TPv3 control connection perform? |
| Answer: |
Setting up the control connection itself; dynamically establishing L2TPv3sessions; providing a keepalive mechanism for the control connection and sessions;signaling circuit status changes; tearing down L2TP sessions; and tearing down the control connection itself. |
| 6 |
If an LCCE wants to request that an L2TPv3 session be torn down, what type of control message does it send? |
| Answer: |
An LCCE sends a Call-Disconnect-Notify (CDN) message. |
| 7 |
What are some drawbacks of the deployment of static L2TPv3 sessions? |
| Answer: |
Management of more than a small number is often impractical; PMTUD forL2TPv3 pseudowires is not supported. |
| 8 |
What types of control connection authentication can be used with L2TPv3? |
| Answer: |
CHAP-like authentication and digest secret authentication. |
| 9 |
Which Cisco IOS command enables you to bind attachment circuits to L2TPv3 pseudowires? |
| Answer: |
The xconnect command. |
| 10 |
When an L2TPv3 pseudowire is used to transport PPP traffic, what part do the LACs take in PPP negotiation? |
| Answer: |
They take no part in PPP negotiation. PPP negotiation takes place between CE devices over the pseudowire. |
Part I: Understanding VPN Technology
What Is a Virtual Private Network?
- What Is a Virtual Private Network?
- VPN Devices
- Deploying Site-to-Site and Remote Access VPNs: A Comparison
- Summary
- Review Questions
Part II: Site-to-Site VPNs
Designing and Deploying L2TPv3-Based Layer 2 VPNs
- Designing and Deploying L2TPv3-Based Layer 2 VPNs
- Benefits and Drawbacks of L2TPv3-Based L2VPNs
- L2TPv3 Pseudowire Operation
- Configuring and Verifying L2TPv3 Pseudowires
- Summary
- Review Questions
Designing and Implementing AToM-Based Layer 2 VPNs
- Designing and Implementing AToM-Based Layer 2 VPNs
- Benefits and Drawbacks of AToM-Based L2VPNs
- AToM Pseudowire Operation
- Deploying AToM Pseudowires
- Implementing Advanced AToM Features
- Summary
- Review Questions
Designing MPLS Layer 3 Site-to-Site VPNs
- Designing MPLS Layer 3 Site-to-Site VPNs
- Advantages and Disadvantages of MPLS Layer 3 VPNs
- MPLS Layer 3 VPNs Overview
- A Detailed Examination of MPLS Layer 3 VPNs
- Deploying MPLS Layer 3 VPNs
- Summary
- Review Questions
Advanced MPLS Layer 3 VPN Deployment Considerations
- Advanced MPLS Layer 3 VPN Deployment Considerations
- The Carriers Carrier Architecture
- The Inter-Autonomous System/Interprovider MPLS VPN Architecture
- Supporting Multicast Transport in MPLS Layer 3 VPNs
- Implementing QoS for MPLS Layer 3 VPNs
- Supporting IPv6 Traffic Transport in MPLS Layer 3 VPNs Using 6VPE
- Summary
- Review Questions
Deploying Site-to-Site IPsec VPNs
- Deploying Site-to-Site IPsec VPNs
- Advantages and Disadvantages of IPsec Site-to-Site VPNs
- IPsec: A Security Architecture for IP
- Deploying IPsec VPNs: Fundamental Considerations
- Summary
- Review Questions
Scaling and Optimizing IPsec VPNs
- Scaling and Optimizing IPsec VPNs
- Scaling IPsec Virtual Private Networks
- Ensuring High Availability in an IPsec VPN
- Designing QoS for IPsec VPNs
- MTU and Fragmentation Considerations in an IPsec VPN
- Summary
- Review Questions
Part III: Remote Access VPNs
Designing and Implementing L2TPv2 and L2TPv3 Remote Access VPNs
- Designing and Implementing L2TPv2 and L2TPv3 Remote Access VPNs
- Benefits and Drawbacks of L2TP Remote Access VPNs
- Operation of L2TP Voluntary/Client-Initiated Tunnel Mode
- Implementing L2TP Voluntary/Client-Initiated Tunnel Mode Remote Access VPNs
- Designing and Implementing L2TP Compulsory/NAS-Initiated Tunnel Mode Remote Access VPNs
- Integrating L2TP Remote Access VPNs with MPLS VPNs
- Summary
- Review Questions
Designing and Deploying IPsec Remote Access and Teleworker VPNs
- Designing and Deploying IPsec Remote Access and Teleworker VPNs
- Comparing IPsec Remote Access VPNs with Other Types of Remote Access VPNs
- Understanding IKE in an IPsec Remote Access VPN Environment
- Deploying IPsec Remote Access VPNs Using Preshared Key and Digital Signature Authentication
- Summary
- Review Questions
Designing and Building SSL Remote Access VPNs (WebVPN)
- Designing and Building SSL Remote Access VPNs (WebVPN)
- Comparing SSL VPNs to Other Types of Remote Access VPNs
- Understanding the Operation of SSL Remote Access VPNs
- Using Clientless SSL Remote Access VPNs (WebVPN) on the Cisco VPN 3000 Concentrator
- Implementing Full Network Access Using the Cisco SSL VPN Client
- Strengthening SSL Remote Access VPNs Security by Implementing Cisco Secure Desktop
- Enabling SSL VPNs (WebVPN) on Cisco IOS Devices
- Deploying SSL VPNs (WebVPN) on the ASA 5500
- Summary
- Review Questions
Part IV: Appendixes
Designing and Building SSL Remote Access VPNs (WebVPN)
- Designing and Building SSL Remote Access VPNs (WebVPN)
- Appendix A. VPLS and IPLS Layer 2 VPNs
- Understanding VPLS
- Understanding IPLS
- Summary: Comparing VPLS and IPLS
Appendix B. Answers to Review Questions
EAN: 2147483647
Pages: 124
