Part4_思科配置专家CCP_路由器配置工具介绍
合集下载
相关主题
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
Cisco Configuration Professional
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Home Page: http://www.cisco.com/go/ciscocp
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
2
Why CCP?
§ Lower Total Cost of Ownership
Productivity: Up and running in under 30 minutes Simplicity: Configurations completed without touching CLI Cost Savings: Lower VAR skill requirements Reliability: CCP uses Cisco TAC approved configurations Increased Uptime: Easy-to-comprehend charts for troubleshooting & real-time monitoring
Design goals
Deep and broad configuration options for each technology supported Support advanced technology deployment on ISRs in a single integrated tool •Leverages SDM v2.5 for security, routing and interfaces •Voice for CUCME and CUCE •New architecture can be extended to other ISR technologies ie, 3G, AXP, Video Surveillance, WAN Optimization
Cisco Confidential
8
Interfaces and Connections
§ Configure a wide variety of ISR LAN and WAN interfaces
Ethernet xDSL Loopback Serial
PDF created with pdfFactory trial version www.pdffactory.com
6
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
CCP Feature Overview
Cisco IOS Feature VPN Support Details
Easy VPN Server, Easy VPN Remote, Enhanced Easy VPN (DVTI), SSL VPN, generic routing encapsulation (GRE) over IPSec, Dynamic Multipoint VPN (DMVPN) (full-mesh or hubspoke), digital certificates, VPN monitor, and troubleshooting Zone-based firewall, stateful inspection, application firewall, granular protocol inspection, firewall log, and policy table Compatible with Cisco IOS Software IPS feature in 12.4(11)T2 release in addition to 12.4(9)T or earlier T train and Cisco IOS Software 12.4 Mainline releases (automatic signature provisioning, dynamic signature update and signature customization, event viewer, signature creation wizards, threat-based signature categories) Cisco IOS Software certificate authority server, AutoQoS phase II, Network Address Translation (NAT) wizards, ACL, VLAN, CLI preview mode, DHCP server, WLAN, date/time, NTP (Network Time Protocol), Domain Name System (DNS), SSHv2, management access policy, dynamic DNS, 802.1x L2 port, 802.1x L3 spouse and kids Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Routing Information Protocol (RIP) v2, and static
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
4
CCP Background
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
3
CCP –Making it Easy
Target audience
Primary: VARs focused on the mid-market commercial market Secondary: Enterprise network, security and voice administrators Assumed knowledge: medium level of expertise in networking technology
ຫໍສະໝຸດ Baidu
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
7
Cisco IOS Security Feature in CCP v1.0
Cisco Confidential
1
Cisco Configuration Professional (CCP)
Intuitive device management GUI for easily configuring Cisco’s Integrated Services Routers
§ Easy to use with smart wizards and built-in tutorials § Results in Cisco recommended IOS configurations § Features:
§ CCP 1.1
Content Filtering Voice –CUCME and CUE Platforms supported –85x, 86x, 87x, 88x, 18xx, 28xx, 38xx, 72xx
Free Download: http://www.cisco.com/go/ciscocp Feedback for CCP: ccp-feedback@cisco.com
Distribution
Free Download from CCO http://www.cisco.com/go/ciscocp CD included with ISR platforms
PDF created with pdfFactory trial version www.pdffactory.com
Firewall
IPS
Advanced configuration
Routing
© 2008 Cisco Systems, Inc. All rights reserved.
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
Routing, Interfaces, QoS, Wireless Security (Firewall, IPS, IPSec VPN, etc) Voice (CCME and CUE)
CCP is the eventual replacement for SDM
Cisco Configuration Professional
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
9
Zone Based Firewall
§ Create, edit and delete “zones” § Applies firewall policies across “zones” § Support deep packet (protocol and application) inspection § Associate URL filter to policies § Supports monitoring of policies
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
5
CCP Availability
§ CCP 1.0
All features in SDM v2.5 -Firewall, VPN, routing, wireless, security audit, status monitoring, etc Platforms supported –86x, 88x, 18xx, 28xx, 38xx, 72xx
CCP provides many features that make it easy to deploy and monitor the ISRs
§ At a glance router status views § Security audit of the router § One step router lockdown § Smart wizards for most frequent routing and security configuration § VPN design guide & wizard § Real-time router and resource monitoring § CCP Express is installed on the flash for basic configurations § License management by cross launching Cisco License Manager GUI
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Home Page: http://www.cisco.com/go/ciscocp
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
2
Why CCP?
§ Lower Total Cost of Ownership
Productivity: Up and running in under 30 minutes Simplicity: Configurations completed without touching CLI Cost Savings: Lower VAR skill requirements Reliability: CCP uses Cisco TAC approved configurations Increased Uptime: Easy-to-comprehend charts for troubleshooting & real-time monitoring
Design goals
Deep and broad configuration options for each technology supported Support advanced technology deployment on ISRs in a single integrated tool •Leverages SDM v2.5 for security, routing and interfaces •Voice for CUCME and CUCE •New architecture can be extended to other ISR technologies ie, 3G, AXP, Video Surveillance, WAN Optimization
Cisco Confidential
8
Interfaces and Connections
§ Configure a wide variety of ISR LAN and WAN interfaces
Ethernet xDSL Loopback Serial
PDF created with pdfFactory trial version www.pdffactory.com
6
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
CCP Feature Overview
Cisco IOS Feature VPN Support Details
Easy VPN Server, Easy VPN Remote, Enhanced Easy VPN (DVTI), SSL VPN, generic routing encapsulation (GRE) over IPSec, Dynamic Multipoint VPN (DMVPN) (full-mesh or hubspoke), digital certificates, VPN monitor, and troubleshooting Zone-based firewall, stateful inspection, application firewall, granular protocol inspection, firewall log, and policy table Compatible with Cisco IOS Software IPS feature in 12.4(11)T2 release in addition to 12.4(9)T or earlier T train and Cisco IOS Software 12.4 Mainline releases (automatic signature provisioning, dynamic signature update and signature customization, event viewer, signature creation wizards, threat-based signature categories) Cisco IOS Software certificate authority server, AutoQoS phase II, Network Address Translation (NAT) wizards, ACL, VLAN, CLI preview mode, DHCP server, WLAN, date/time, NTP (Network Time Protocol), Domain Name System (DNS), SSHv2, management access policy, dynamic DNS, 802.1x L2 port, 802.1x L3 spouse and kids Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Routing Information Protocol (RIP) v2, and static
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
4
CCP Background
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
3
CCP –Making it Easy
Target audience
Primary: VARs focused on the mid-market commercial market Secondary: Enterprise network, security and voice administrators Assumed knowledge: medium level of expertise in networking technology
ຫໍສະໝຸດ Baidu
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
7
Cisco IOS Security Feature in CCP v1.0
Cisco Confidential
1
Cisco Configuration Professional (CCP)
Intuitive device management GUI for easily configuring Cisco’s Integrated Services Routers
§ Easy to use with smart wizards and built-in tutorials § Results in Cisco recommended IOS configurations § Features:
§ CCP 1.1
Content Filtering Voice –CUCME and CUE Platforms supported –85x, 86x, 87x, 88x, 18xx, 28xx, 38xx, 72xx
Free Download: http://www.cisco.com/go/ciscocp Feedback for CCP: ccp-feedback@cisco.com
Distribution
Free Download from CCO http://www.cisco.com/go/ciscocp CD included with ISR platforms
PDF created with pdfFactory trial version www.pdffactory.com
Firewall
IPS
Advanced configuration
Routing
© 2008 Cisco Systems, Inc. All rights reserved.
PDF created with pdfFactory trial version www.pdffactory.com
Presentation_ID
Routing, Interfaces, QoS, Wireless Security (Firewall, IPS, IPSec VPN, etc) Voice (CCME and CUE)
CCP is the eventual replacement for SDM
Cisco Configuration Professional
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
9
Zone Based Firewall
§ Create, edit and delete “zones” § Applies firewall policies across “zones” § Support deep packet (protocol and application) inspection § Associate URL filter to policies § Supports monitoring of policies
Presentation_ID
© 2008 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
5
CCP Availability
§ CCP 1.0
All features in SDM v2.5 -Firewall, VPN, routing, wireless, security audit, status monitoring, etc Platforms supported –86x, 88x, 18xx, 28xx, 38xx, 72xx
CCP provides many features that make it easy to deploy and monitor the ISRs
§ At a glance router status views § Security audit of the router § One step router lockdown § Smart wizards for most frequent routing and security configuration § VPN design guide & wizard § Real-time router and resource monitoring § CCP Express is installed on the flash for basic configurations § License management by cross launching Cisco License Manager GUI