A practical guide for comparing, designing, and deploying IPsec, MPLS Layer 3, L2TPv3, L2TPv2, AToM, and SSL virtual private networks

• Explore the major VPN technologies and their applications, design, and configurations on the Cisco IOS® Router, Cisco® ASA 5500 Series, and the Cisco VPN 3000 Series Concentrator platforms
• Compare the various VPN protocols and technologies, learn their advantages and disadvantages, and understand their real-world applications and methods of integration
• Find out how to design and implement Secure Socket Layer (SSL) VPNs, including consideration of clientless operation, the Cisco SSL VPN Client, the Cisco Secure Desktop, file and web server access, e-mail proxies, and port forwarding
• Learn how to deploy scalable and secure IPsec and L2TP remote access VPN designs, including consideration of authentication, encryption, split-tunneling, high availability, load-balancing, and NAT transparency
• Master scalable IPsec site-to-site VPN design and implementation including configuration of security protocols and policies, multiprotocol/ multicast traffic transport, NAT/PAT traversal, quality of service (QoS), Dynamic Multipoint VPNs (DMVPNs), and public key infrastructure (PKI)

Virtual private networks (VPNs) enable organizations to connect offices or other sites over the Internet or a service provider network and allow mobile or home-based users to enjoy the same level of productivity as those who are in the same physical location as the central network. However, with so many flavors of VPNs available, companies and providers are often hard pressed to identify, design, and deploy the VPN solutions that are most appropriate for their particular network architecture and service needs.

Comparing, Designing, and Deploying VPNs brings together the most popular VPN technologies for convenient reference. The book examines the real-world operation, application, design, and configuration of the following site-to-site VPNs: Layer 2 Tunneling Protocol version 3 (L2TPv3)-based Layer 2 VPNs (L2VPN); Any Transport over MPLS (AToM)-based L2VPN; MPLS Layer 3-based VPNs; and IP Security (IPsec)-based VPNs. The book covers the same details for the following remote access VPNs: Layer 2 Tunneling Protocol version 2 (L2TPv2) VPNs; L2TPv3 VPNs; IPsec-based VPNs; and Secure Socket Layer (SSL) VPNs. Through the operation, application, and configuration details offered in each chapter, you’ll learn how to compare and contrast the numerous types of VPN technologies, enabling you to consider all relevant VPN deployment options and select the VPN technologies that are most appropriate for your network.

Comparing, Designing, and Deploying VPNs begins with an introduction of the types of VPNs available. Subsequent chapters begin with an overview of the technology, followed by an examination of deployment pros and cons that you can use to determine if the particular VPN technology is appropriate for your network. Detailed discussion of design, deployment, and configuration make up the heart of each chapter. Appendix A offers insight into two multipoint emulated LAN services that can be deployed over a MAN or WAN: Virtual Private LAN Service (VPLS) and IP-only Private LAN Service (IPLS).

If you are a network architect, network engineer, network administrator, an IT manager, or CIO involved in selecting, designing, deploying, and supporting VPNs, you’ll find Comparing, Designing, and Deploying VPNs to be an indispensable reference.

This book is part of the Cisco Press® Networking Technology Series, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

About the Author

Mark Lewis, CCIE® No. 6280, is technical director of MJL Network Solutions (www.mjlnet.com), a leading provider of internetworking solutions that focuses on helping enterprise and service provider customers to implement leading-edge technologies. Mark specializes in next-generation network technologies and has extensive experience designing, deploying, and migrating large-scale IP/MPLS networks. He is an active participant in the IETF, a member of the IEEE, and a certified Cisco Systems® instructor. Mark is the author of Troubleshooting Virtual Private Networks, published by Cisco Press.

A comprehensive guide to implementing QoS in IP/MPLS networks using Cisco IOS and Cisco IOS XR Software

• Understand IP QoS architectures and how they apply to MPLS
• Take a detailed look at traffic management using policing, shaping, scheduling, and active queue management
• Study Cisco QoS behavioral model and the modular QoS command-line interface (MQC)
• Learn the operation of MPLS TE with its DiffServ extensions and applicability as a traffic-protection alternative
• Find multiple configuration and verification examples illustrating the implementation of MPLS TE, DS-TE, and FRR
• Review the different designs, ranging from a best-effort backbone to the most elaborate scenarios combining DiffServ, DS-TE, and FRR 

Quality of service (QoS) plays a key role in the implementation of IP and MPLS networks today. However, QoS can be one of the most complex aspects of networking. The industry efforts to achieve convergence have generated a need for increased levels of traffic differentiation. Today’s networks need to meet an array of QoS requirements to support distinct applications (such as voice, video, and data) and multiple network services (such as IP, Ethernet, and ATM) on a single converged, multiservice network. QoS has therefore has become an integral part of network design, implementation, and operation.

QoS for IP/MPLS Networks is a practical guide that will help you facilitate the design, deployment, and operation of QoS using Cisco® IOS® Software and Cisco IOS XR Software. The book provides a thorough explanation of the technology behind MPLS QoS and related technologies, including the different design options you can use to build an MPLS network with strict performance requirements. This book discusses MPLS Traffic Engineering (MPLS TE) as a tool to complement MPLS QoS and enhance the performance characteristics of the network. You’ll learn technology, configuration, and operational details, including the essentials facts about the behavior and configuration of the rich MPLS QoS and related MPLS TE functionality. To get the most out of this book, you should have a basic understanding of both IP and MPLS, including the basics of IP addressing and routing and the basics of MPLS forwarding.

About the Author

Santiago Alvarez, CCIE® No. 3621, is a technical marketing engineer for Cisco Systems® where he has worked on MPLS and QoS since 2000. Prior to Cisco, Santiago worked in software development for Lucent Technologies. He has been involved with computer networking since 1991. Santiago is a frequent speaker at Cisco Networkers Conferences and a periodic contributor to Cisco Packet Magazine. He holds a bachelor of science degree in computer science from EAFIT University in Medellin, Columbia, a master of science degree in computer science from Colorado State University, and a master of science in telecommunications from the University of Colorado at Boulder.