Chapter 3: Branch Connections

CCNA Routing and Switching

Connecting Networks v6.0

Chapter 3 - Sections & Objectives
 3.1 Remote Access Connections

• Select broadband remote access technologies to support business requirements.

• Compare remote access broadband connection options for small to medium-sized businesses.
• Select an appropriate broadband connection for a given network requirement.
 3.2 PPPoE

• Configure a Cisco router with PPPoE.

• Explain how PPPoE operates.
• Implement a basic PPPoE connection on a client router.
 3.3 VPNs

• Explain how VPNs secure site-to-site and remote access connectivity.

• Describe benefits of VPN technology.
• Describe site-to-site and remote access VPNs.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
Chapter 3 - Sections & Objectives (Cont.)
 3.4 GRE

• Implement a GRE tunnel.

• Explain the purpose and benefits of GRE tunnels.
• Troubleshoot a site-to-site GRE tunnel.
 3.5 eBGP

• Implement eBGP in a single-homed remote access network.

• Describe basic BGP features.
• Explain BGP design considerations.
• Configure an eBGP branch connection.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
3.1 Remote Access
Connections

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
Broadband Connections
What is a Cable System?
 Cable system uses a coaxial
cable that carries radio frequency
(RF) signals across the network.
 Cable systems provide high-
speed Internet access, digital
cable television, and residential
telephone service.
 Use hybrid fiber-coaxial (HFC)
networks to enable high-speed
transmission of data.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
Broadband Connections
Cable Components
 Two types of equipment are required to send signals upstream and downstream
on a cable system:
• Cable Modem Termination System (CMTS) at the headend of the cable operator. The
headend is a router with databases for providing Internet services to cable subscribers.
• Cable Modem (CM) on the subscriber end.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
Broadband Connections
What is DSL?
 Digital Subscriber Line (DSL) is a means of
providing high-speed connections over
installed copper wires.
 Asymmetric DSL (ADSL) provides higher
downstream bandwidth to the user than
upload bandwidth.
 Symmetric DSL (SDSL) provides the same
capacity in both directions.
The figure shows a representation of bandwidth
 For satisfactory ADSL service, the local loop space allocation on a copper wire for ADSL. POTS
length must be less than 3.39 miles (5.46 km). (Plain Old Telephone System) identifies the
frequency range used by the voice-grade telephone
service. The area labeled ADSL represents the
frequency space used by the upstream and
downstream DSL © 2016 signals.
Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
Broadband Connections
DSL Connections
 The DSL connection is set up between the
customer premises equipment (CPE) and the
DSL access multiplexer (DSLAM) device
located at the Central Office (CO).
 Key components in the DSL connection:
• Transceiver - Usually a modem in a router which
connects the computer of the teleworker to the
DSL.
• DSLAM - Located at the CO of the carrier, it
combines individual DSL connections from users
into one high-capacity link to an ISP.
 Advantage of DSL over cable technology is
that DSL is not a shared medium. Each user
has a separate direct connection to the
DSLAM.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
Broadband Connections
Wireless Connection
 Three main broadband wireless technologies:
• Municipal Wi-Fi - Most municipal wireless
networks use a mesh of interconnected access
points as shown in figure.
• Cellular/mobile - Mobile phones use radio waves
to communicate through nearby cell towers.
Cellular speeds continue to increase. LTE
Category 10 supports up to 450 Mb/s download
and 100 Mb/s upload.
• Satellite Internet - Used in locations where land-
based Internet access is not available. Primary
installation requirement is for the antenna to have
a clear view toward the equator.
Note: WiMAX has largely been replaced by LTE for
mobile access, and cable or DSL for fixed access.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
Select a Broadband Connection
Comparing Broadband Solutions
 Factors to consider in selecting a broadband
solution:
• Cable - Bandwidth shared by many users, slow data
rates during high-usage hours.
• DSL - Limited bandwidth that is distance sensitive (in
relation to the ISP’s central office).
• Fiber-to-the-Home - Requires fiber installation directly
to the home.
• Cellular/Mobile - Coverage is often an issue.
• Wi-Fi Mesh - Most municipalities do not have a mesh
network deployed.
• Satellite - Expensive, limited capacity per subscriber

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
3.2 PPPoE

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
PPPoE Overview
PPPoE Motivation
 PPP can be used on all serial links
including those links created with dial- PPP Frames Over An Ethernet Connection
up analog and ISDN modems.
 ISPs often use PPP as the data link
protocol over broadband connections.
• ISPs can use PPP to assign each
customer one public IPv4 address.
• PPP supports CHAP authentication.
 Ethernet links do not natively support
PPP.
• PPP over Ethernet (PPPoE) provides a
solution to this problem.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
PPPoE Overview
PPPoE Concepts
 PPPoE creates a PPP tunnel over an Ethernet connection.

 This allows PPP frames to be sent across the Ethernet cable to the ISP from the
customer’s router.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
Implement PPPoE
PPPoE Configuration
 To create the PPP tunnel a dialer interface
is configured.
• Use interface dialer number command
 The PPP CHAP is then configured. Use
ppp chap hostname name and ppp chap
password password.

 The physical Ethernet interface connected

to the DSL modem is enabled with the
command pppoe enable interface
configuration command.

 Dialer interface is linked to the Ethernet

interface with the dialer pool and pppoe-
client interface configuration commands.

 The MTU should be set to 1492 to

accommodate PPPoE headers.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
Implement PPPoE
PPPoE Verification
 Use the following commands to verify
PPPoE:
• show ip interface brief - verify the IPv4
address automatically assigned.
• show interface dialer - verifies the MTU
and PPP encapsulation.
• show ip route
• show pppoe session - displays
information about currently active PPPoE
sessions.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
Implement PPPoE
PPPoE Troubleshooting
 The following are possible causes of
problems with PPPoE:
• Failure in the PPP negotiation process
• Failure in the PPP authentication process
• Failure to adjust the TCP maximum
segment size

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16
Implement PPPoE
PPPoE Negotiation
 Use the debug ppp negotiation command to verify PPP negotiation.

 Four possible points of failure in PPP negotiation:

• No response from the remote device.
• Link Control Protocol (LCP) not open.
• Authentication failure.
• IP Control Protocol (IPCP) failure.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
Implement PPPoE
PPPoE Authentication
 Verify that the CHAP username and password are correct using debug ppp negotiation
command.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
Implement PPPoE
PPPoE MTU Size Adjusted maximum segment size with PPPoE Header

 PPPoE supports an MTU of only 1492

bytes in order to accommodate the
additional 8-byte PPPoE header.
 Use show running-config command
to verify PPPoE MTU.
 The ip tcp adjust-mss max-segment-
size interface command prevents TCP
sessions from being dropped by
adjusting the MSS value during the
TCP 3-way handshake.

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19