Articles and Papers

by Dr. Peter J. Welcher


I intend to try to post an article every month. 

Articles 1-142 are from Enterprise Networking and Server Magazine, formerly CiscoWorld Magazine.  

The articles written in 2007 are strictly white papers for this web site.

Click here to jump to a table of ZIP archived PDF versions of the articles.


Articles

In reverse chronological order... 

Title and Link to Article

Tech Areas

Additional Comments

PDF Version

145 Cisco Network Access Control (NAC)  6/22/2007 New! Security, NAC, Design   PDF New!
144 Data Center Segmentation  2/25/2007 New! Data Center, Security, NAC Appliance, FWSM, Design   
 PDF New!
143 CNC Newsletter  based on Introduction to IPv6 -- Part 1 (below). 2/13/2007
       Available as PDF only. 
IPv6, Newsletter I was too busy to complete and post an article in January 2007. Part of that was due to the mechanics of getting this email newsletter published.  To register to receive the newsletter, click here  PDF 
142 Introduction to IPv6 -- Part 3 12/3/2006  IPv6, Routing, Tunnels, Security IPv6 tunnels, IPv6 multi-homing and SHIM6. PDF 
141 Introduction to IPv6 -- Part 2 11/11/2006
Fixed typos re unique local addresses 1/8/2006.  
Fixed typo about source addresses, 8/24/2007. 
IPv6, Routing, Switching, Security IPv6 addressing, routing, links to security and IPv6 portal/article sites. PDF 
140 Introduction to IPv6 -- Part 1 10/9/2006  IPv6, Routing, Switching
Why should you care about IPv6?
PDF 
139 Understanding PIX Behavior 9/11/2006  Security

PDF 
138 IP Multicast, Best Practices and Control 8/7/2006  IP Multicast, Routing

PDF 
137 More AAA: Simple Authentication, Authorization, and Accounting 7/10/2006

Version of this with smaller images (might be more readable but requires a browser that lets you separately view/magnify images).

AAA, TACACS+, Security,  Network Management The PDF version is large due to screen capture images. PDF

3.4 MB
136 AAA Authentication Basics 6/8/2006

Version of this with smaller images (might be more readable but requires a browser that lets you separately view/magnify images).

AAA, TACACS+, Security,  Network Management
The PDF version is large due to screen capture images.
PDF

3.9 MB
135 A Smorgasbord of Small Topics 5/7/2006  QoS, WAN, MPLS VPN customer, Routing

PDF
134 The New Cisco Channel Specializations 4/5/2006  Training, Courses, Cisco Certifications

PDF 

133 Cisco Secure Access Control Server for Windows 4.0 3/11/2006 updated format 4/4/2006 

Version of this with smaller images (might be more readable but requires a browser that lets you separately view/magnify images).

AAA, RADIUS, TACACS+, Security, Network Management, 802.1x, NAC See also the below links to detailed ACS 4.0 screen captures -- 4 large PDF files (virtual tutorial).

The PDF version is large due to screen capture images.
PDF 

6.2 MB

132 Configuring Cisco Optimized Edge Routing (OER) 2/7/2006  IP Routing

PDF 
131 Basics of Cisco Optimized Edge Routing (OER) 1/11/2006  IP Routing, Enterprise design

PDF 
130 A Bit More 6500 QoS 12/10/2005. Links updated 9/18/2008 QoS, Switch

PDF
129 QoS for the Cisco 6500 (Revisited)  11/4/2005 QoS, Switch

PDF
128 Managing Cisco Devices with ASDM and SDM 10/9/2005 Configuration, Security
Updated GUI power tools, great for NAT, IPsec VPN!
PDF
127 NetFlow and IPFIX 9/4/2005, updated 11/4/2005 Network Management, NetFlow
Updates 2001 article, talks about IPFIX standard. 11/4/05 update fixes a reference to show commands that didn't get included.
PDF
126 New Features in Cisco IOS 12.4 8/15/2005 Cisco IOS

PDF
125 Buying Layer 2 Ethernet Services 7/8/2005 MPLS, Optical, Switch, Enterprise design

PDF
124 Enterprise Buyer's Guide to Layer 3 MPLS VPN Services 6/13/2005  MPLS VPN, Enterprise  design
For the 99% of Enterprises buying MPLS VPN services, as opposed to deploying internal MPLS.
PDF
123 Recent Trends In Security  5/4/2005 Security, Wireless, Design, VoIP, IP Telephony

PDF
122 How Secure is WEP, Anyway?  4/7/2005  Wireless, Security, Labwork

PDF
121 Designing Wireless LANs, Part 2  2/27/2005
Wireless, Security, Design

PDF
120 Designing Wireless LANs 2/1/2005 Wireless, Security, Design

PDF
119 TCL'ing Your Cisco Router 1/3/2005 Tcl, Cisco  IOS, Labwork
Program your Cisco router using Tcl!
PDF 
118 The Stress Is On QoS 12/4/2004 QoS
How to build a demo lab showing the benefits of QoS!
PDF
117 The Missing Link 11/4/2004, updated 1/16/2005 Routing, Switching, HSRP, Design
When you should connect distribution layer switches, and why.

Updated 1/16/2005: clarifyied that either a double outage occurs or only one access switch is in VLAN 10.
PDF
116 Certificate Authorities 10/5/2004, updated 12/17/2004 PKI, Certificate Authorities, Security
Useful for router labs!
12/17/04: Corrected statement about DNS.
PDF
115 Making Your Router Serve 9/6/2004 DHCP, DNS, IP Services
Useful for router labs!
PDF
114 Working with Cisco VPN Concentrator 7/30/2004 IPSec, VPN, Security

PDF
113 Clever Addressing Schemes 7/6/2004  Design

PDF 
112 Case Study: IPSec VPN Performance
6/18/2004, with Israel Engle
Security, IPSec, Performance Testing

PDF 
111 Deploying Identity-Based Access Control 5/2/2004  Security, 802.1x, NAC

PDF 
110 Examining 802.1x and EAP 4/6/2004  Security, 802.1x Switching,  Wireless

PDF 
109 Managing Security with SDM  3/8/2004  Cisco IOS, Security, IPSec VPN
PDF 
108 Managing a Cisco PIX with PDM 2/6/2004
Security, IPSec VPN

PDF 
107 Buying Metro Ethernet Services  1/4/2004 WAN, Access, Switching, MPLS

PDF
106 Security Best Practices 12/7/2003, with Carole Warner Reece  Security
See Carole's forthcoming Cisco Packet magazine article on security!
PDF
105 Network Detection of Worms and Viruses 10/29/2003, with Carole Warner Reece Security, Net Mgmt, NetFlow

PDF
104 Vaccination Against Worms and Viruses 10/6/2003, with Carole Warner Reece  Security

PDF 
103 Network Management with Periscope 9/8/2003, with Kevin Stone. Updated article itself, 3/18/2008: product name is now NetMRI. Network Management, Performance
Periscope is now called NetMRI (2005). It is sold by Netcordia, found at  http://www.netcordia.com.
PDF  
102 Troubleshooting Poor Performance, and Dsniff Woes, 8/9/2003  Security, Network Management, Performance

PDF 
101 802.11 Wireless LAN Security and the Cisco SWAN Program , 7/6/2003 Wireless, Security, Design
 Revised slightly, re-posted 7/7/2003
PDF
100 Cisco IOS 12.3 Features , 6/3/2003
Cisco IOS, QoS, VPN, Security
 
PDF

99 Path MTU Discovery , 5/5/2003. Minor clarity update 3/9/2004.

IP, Tunnel, VPN,  Security

 

PDF

98 Visual Tour of Cisco CallManager 3.2 -- Part 3 , 4/8/2003 

Voice, VoIP, IP Telephony

See also Call Manager 3.2 Screen Captures below, posted 3/3/2003. 

PDF

97 Visual Tour  of Cisco CallManager  3.2 -- Part 2 , 3/6/2003

Voice, VoIP, IP Telephony

See also Call Manager 3.2 Screen Captures below, posted 3/3/2003.

PDF

96 Visual Tour  of Cisco CallManager  3.2 -- Part 1 , 2/6/2003 

Voice, VoIP, IP Telephony

See also Call Manager 3.2 Screen Captures below, posted 3/3/2003. 

PDF  

95 Network Management Configuration Templates , 1/2/2003, updated 12/3/2006

Net Mgmt

6/1/2003: added note about set errdisable-timeout.

12/3/2006: adding missing and useful clock summer-time recurring command

PDF

94 Troubleshooting Too Much Multicast , 12/5/02

IP Multicast, Routing

Real World Story

PDF

93 QoS Device Manager , 11/5/02

QoS, Net Mgmt

 

PDF
(large)

92 MPLS VPN's From the Customer Side , 10/2/02 

MPLS, Routing

Updated 12/30/2002: Cisco does now support EIGRP as PE-CE protcol for MPLS VPN's as of 12.0(22) S. See the article for a link to the details.

PDF

91 Wireless LAN Security , 9/3/02, with Marty Adkins

Wireless

 

PDF

90 Wireless LAN , 8/6/02, with Marty Adkins 

Wireless

 

PDF

 9 Dial on Demand Routing   1/96

Access

 

PDF

89 New Cisco MPLS Features , 7/9/02 

MPLS

 

PDF

88 Cisco PIX Firewalls: IPsec on a PIX, 6/7/02, with Grant Moerschel

Security, IPSec VPN

See Grant's company page at http://www.flackjacket.net/

PDF

87 Cisco PIX Firewalls: Fixups, Failover, and DHCP , 5/4/02, with Grant Moerschel 

Security

See Grant's company page at http://www.flackjacket.net/

PDF

86 Cisco PIX Firewalls: Access Lists and Management , 4/6/02, with Grant Moerschel 

Security

See Grant's company page at http://www.flackjacket.net/

PDF

85 Cisco PIX Firewall Basics , 3/4/02, with Grant Moerschel 

Security

See Grant's company page at http://www.flackjacket.net/

PDF

84 New Features in Cisco IOS 12.2(4)T 2/4/2002 

Cisco IOS

 

PDF

83 Mobile Router 12/28/2001

83a Configs and Show Command Output 12/28/2001

IP Addressing and Services, Routing

 

PDF

PDF

82 IP Multicast and PIM Rendezvous Points 12/4/01, updated 1/5/04

IP Multicast, Routing

Minor correction thanks to Scott Morris.

PDF

81 PIM Sparse Mode 11/2/01 

IP Multicast,  Routing

 

PDF

80 PIM Dense Mode 10/1/01, updated 2/16/2004 and 12/17/2004.

IP Multicast,  Routing

Corrected typo (IGMP)  2/16/2004. Clarified DR portion, 12/17/2004.

PDF

79 The Protocols of IP Multicast 9/4/01

IP Multicast,  Routing

 

PDF

78 Configuring QoS in the Campus 8/5/01

QoS, Switching

 

PDF

77 QoS in the Campus 6/29/01, updated 11/4/2005

QoS, Switching

 Left out mention of Mentor Technologies

PDF

76 Lessons Learned: Route Filtering 6/13/01

Routing

Real World Story

PDF

75 The New Cisco CCIP and CCIE C&S Certifications 6/10/01

Certification

 

PDF

74 NetFlow 5/8/01

74a New document listing key files and directories for NetFlow 5/11/01 

Cisco IOS, Net Mgmt, NetFlow

Lightly revised 5/11/01. 

PDF


PDF

73 Cisco Certifications 3/30/01 

Certification

 

PDF

72 Secure Management of Routers 3/4/01

Security, Net Mgmt

 

PDF

71 IPsec Simplified — Part 2 2/7/01

Security, IPSec VPN

 

PDF

70 IPsec Simplified 1/8/01

Security, IPSec VPN

 

PDF

69 CiscoWorks 2000 Update 11/30/00

Net Mgmt

Includes screen captures!

PDF

68 Service Assurance Agent (SAA) and the Management Engine 11/8/00

Net Mgmt

 

PDF

67 BGP and MPLS-Based VPNs 10/4/00

MPLS, Routing

 

PDF

66 MPLS, Part II 9/4/2000

MPLS

 

PDF

65 Introduction to MPLS 8/7/2000

MPLS

One broken link fixed, 11/6/2001

PDF

64 Mobility and Mobile IP 7/4/2000. Updated 12/26/2000

IP Addressing and Services, Routing

 

PDF

63 Cisco Secure Integrated Firewall Software 6/1/2000

Security

 

PDF

62 Overview of New Features in Cisco IOS 12.1 5/2/2000

Cisco IOS

Revised 8/7/2000: 12.0 became GD with release 12.0(8) (no T).

PDF

61 New Quality of Service Features in Cisco IOS 12.1 4/5/2000

QoS

 

PDF

60 Switched Multimegabit Data Service (SMDS) 3/6/2000, with Alec Bullard

WAN

 

PDF

59 Service Provider Fundamentals 2/5/2000

Service Provider

 

PDF

58 Switching: Campus Design 1/4/2000

Switching

 

PDF

57 Switching: MultiLayer Switching 12/6/99

Switching

 

PDF

56 Switching: CiscoWorks 2000/CWSI 11/2/99

Switching, Net Mgmt

Note (11/5/2001): CWSI is obsolete, replaced by the CiscoWorks 2000 Campus Manager.

PDF

55 Switching: Dynamic VLAN's, VQP, and VMPS 10/10/99

Switching

 

PDF

54 Switching: Trunks and Dynamic Trunking Protocol (DTP) 9/4/99

Switching

 

PDF

53 Switching: VLAN's 8/1/99

Switching

 

PDF

52 Configuring SNMP on Switches, and Syslog 6/24/99

Switching, Net Mgmt

 

PDF

51 Configuring SNMP in Cisco Routers 6/6/99

Net Mgmt

 

PDF

50 Reflexive Access Lists 5/5/99

 

 

PDF

49 Miscellaneous Topics 3/31/99


Includes CLI Search, RFC 1573, CiscoWorks 2000 in the Real World, Books.

PDF

48 CiscoWorks 2000 3/3/99

Net Mgmt

 

PDF

47 Resource Reservation Protocol, RSVP 2/9/99

QoS

 

PDF

46 Quality of Service, Part III 1/2/99

QoS

 

PDF

45 Quality of Service, Part II 11/98

QoS

 

PDF

44 QoS Features 10/98

QoS

 

PDF

43 OSPF -- Part III 10/98

Routing

See also OSPF Note .

PDF

42 OSPF and Route Summarization 9/98

Routing

Updated (/24 to /16) 9/9/99.

PDF

41 Summarizable Address Blocks 8/98

Routing

Updated (typo fix) 10/23/98.

PDF

40 Introducing OSPF   7/98

Routing

 

PDF

39 Voice and Data, Part II   6/98

Voice

 

PDF

38 BGP Part II   5/98

Routing

 

PDF

37 Beginning BGP   4/98

Routing

Fixed private AS range typo, 6/23/2000.

PDF

36 Mixing Voice and Data   3/98

Voice

 

PDF

35 RMON2 and NetScout   2/98

Net Mgmt

 

PDF

34 MPOA: Multi-Protocol Over ATM   1/98

ATM

 

PDF

33 Next Hop Resolution Protocol   12/97

IP Addressing and Services, ATM

 

PDF

32 Wrapping Up DLSw   11/97

IBM

 

PDF

31 Diving Deeper Into DLSw   10/97

IBM

Revised 1/15/01: port lists cannot include Ethernet interfaces.

PDF

30 Diving Into DLSw   9/97

IBM

 

PDF

29 Cisco Tag Switching   8/97

MPLS

 

PDF

28 Access Lists: New Features in IOS 11.2   7/97

IP Addressing & Services, Security

 

PDF

27 Dial-Up Access: MMP   6/97

Access

 

PDF

26 Tuning Tunnels   5/97

Access

 

PDF

25 Designing Default and Dial Backup   4/97

Access, Routing

Revised, see Notes1 and Notes4 . Fixed link, 1/99

PDF

24 Threshold Manager   3/97

Net Mgmt

Note: Threshold Manager was developed for CiscoView 4 and has not been carried forward to CiscoView 5 (Web CiscoView). 7/24/2001 

PDF

23 Integrated Routing and Bridging   2/97

Routing

 

PDF

22 What's New in Frame Relay   1/97

WAN

 

PDF

21 Old and New Routing Techniques   12/96

Routing

 

PDF

20 Network Address Translation   11/96

IP Addressing & Services, Security

 

PDF

19 RMON   10/96

Net Mgmt

 

PDF

18 Performance Management   9/96

Net Mgmt

 

PDF

17 Looking Into Lock-and-Key   8/96

Access, Security

 

PDF

16 Configuring for Manageability, Part III   7/96

Net Mgmt

 

PDF

15 Configuring for Manageability, Part II   6/96

Net Mgmt

 

PDF

14 Configuring for Manageability, Part I   5/96

Net Mgmt

 

PDF

13 Joy of CCIE   4/96

Certification

 

PDF

12 Discovering Cisco Discovery Protocol   4/96

Cisco IOS, LAN

 

PDF

11 Troubleshooting   3/96

Misc

 

PDF

10 TACACS+, Part II   2/96

Net Mgmt, Security, TACACS+, AAA

 

PDF

09 Dial on Demand Routing   1/96 Cisco IOS, Dial

PDF

08 The TACACS+ System   12/95

Net Mgmt, Security, TACACS+, AAA

 

PDF

07 Netsys Enterprise/Solver Connectivity Toolkit   11/95

Net Mgmt

Cisco sold Netsys to WANDL, see  http://www.wandl.com/ or Click Here for Cisco's page about it.

PDF

06 The Cisco Router User Interface   10/95

Cisco IOS

 

PDF

05 Managing Cisco Routers   9/95

Net Mgmt

 

PDF

04 Frame Relay Design   8/95

WAN

Figure updated 1/99.

PDF

03 Introduction to Frame Relay   7/95

WAN

 

PDF

02 Hot Standby Routing Protocol   6/95

LAN (L2)

Additional info, see Notes2 . JPEG images 11/23/98.

PDF

01 Privilege Levels 5/95

Cisco IOS, Net Mgmt

 

PDF

Notes

n07 Voice3 , 10/17/98

Voice

Addendum on recent Voice Over X capabilities.

PDF

n06 OSPF Note , 10/17/98

Routing

Small clarification on subnet summarization with OSPF. 

PDF

n05 Notes6 , 9/9/98

Access

Information about dialer methods. 

PDF

 

N/A

The former Notes5 (/9/9/98) was incorporated into Configuring for Manageability II -- Best Practices , listed above. 

 

n04 Notes4 , Last updated: 9/9/98.

Access

Some more information about ISDN dial. 

PDF

n03 Notes3 , 3/19/98

Routing

Some information about IGRP/EIGRP routing metrics. 

PDF

n02 HSRP2 , 4/10/98

Cisco IOS, LAN

Information submitted by a reader on HSRP. 

PDF

n01 Notes1 , 3/19/98

Access

Changes in my thinking, new information, corrections, etc.  See also Notes4 , below. 

PDF

Other Papers

p 23 CiscoSecure ACS 4.0 Captures 01 3/11/2006 AAA, RADIUS, TACACS+, Security, Network Management, 802.1x, NAC PDF only. Large file (16 MB)!

One of four (4) parts. Replaces the ACS 3.2 captures file
PDF
p 22 CiscoSecure ACS 4.0 Captures 02 3/11/2006 AAA, RADIUS, TACACS+, Security, Network Management, 802.1x, NAC PDF only. Large file (17 MB)!

One of four (4) parts. Replaces the ACS 3.2 captures file
PDF
p 21 CiscoSecure ACS 4.0 Captures 03 3/11/2006 AAA, RADIUS, TACACS+, Security, Network Management, 802.1x, NAC PDF only. Large file (17 MB)!

One of four (4) parts. Replaces the ACS 3.2 captures file
PDF
p 20 CiscoSecure ACS 4.0 Captures 04 3/11/2006 AAA, RADIUS, TACACS+, Security, Network Management, 802.1x, NAC
PDF only. Large file (12 MB)!

One of four (4) parts. Replaces the ACS 3.2 captures file
PDF
p 19 The Network Monitor article, 3/2004 Network Management
Starts on page 5.
PDF
p 18 PDM 3.0 Screen Captures 2/2004 Security, IPSec VPN
3 MB
PDF
p 17 SDM 1.1 Screen Captures  2/2004 Security, IPSec VPN
3.5 MB
PDF
p16 The Network Monitor article, 1/15/2004 Network Management
Updated 1/15/2004
PDF

p15 Newsletter: Cisco AutoQoS , 5/5/2003 

QoS, IP Telephony

 

PDF 

p14 Call Manager 3.2 Screen Captures Part 4 , 3/3/2003 

Voice, VoIP, IP Telephony

PDF only. 1.4 MB. Serviceability Tools.

PDF

p13 Call Manager 3.2 Screen Captures Part 3 , 3/3/2003 

Voice, VoIP, IP Telephony

PDF only. 1.2 MB. User, Application, and Help Menus.

PDF

p12 Call Manager 3.2 Screen Captures Part 2 , 3/3/2003 

Voice, VoIP, IP Telephony

PDF only. 1.5 MB. Feature and Device Menus.

PDF

p11 Call Manager 3.2 Screen Captures Part 1 ,  3/3/2003 

Voice, VoIP, IP Telephony

PDF only. 2.4 MB. System, Route Plan, and Service Menus.

PDF

p10 Cisco Catalyst Command Comparison Sheet 11/26/2002

Switching

PDF only. It's in landscape mode, so it looks better when printed than when tilting your head to read it!

PDF

p09 Network Management Configuration Templates

Net Mgmt

Linked now to magazine article (above) replacing former posting.

PDF

p08 Configuring for Manageability II -- Best Practices 12/98

Net Mgmt

Updated (mildly) 9/5/99.

PDF

p07 Distributed Director 11/98

Content Delivery Networking

 

PDF

p06 Local Director 11/98

Content Delivery Networking

 

PDF

p05 Web Cache Engine 11/98

Content Delivery Networking

 

PDF

p04 QoS (Quality of Service) Features 11/98

QoS

Updated 2/10/99.

PDF

p03 Network Address Translation 11/98

IP Addressing and Services, Security

 

PDF

p02 BGP Commands 11/98

Routing

 

PDF

p01 Configuring Routers to Manage Them   6/96

Net Mgmt

 

PDF


ZIP Archives of the PDF versions of articles. 

Archive of articles 141-160
  (Contains the most recent articles, plus the
  PDF version of the latest index file)
ZIP 2 MB Updated 6/22/2007 new image

Archive of articles 121-140

ZIP
 16 MB

Updated 10/9/2006

Archive of articles 101-120

ZIP

11 MB

Updated 2/1/2005

Archive of articles 081 - 100

ZIP

20 MB

Updated 10/29/2003

Archive of articles 041 - 080

ZIP

23 MB

Updated (mildly) 4/23/2006

Archive of articles 001 - 040

ZIP

21 MB

Updated 1/6/2003

Archive of other notes and articles
Does not include the (big) ACS capture documents.
ZIP 21 MB Updated 2/5/2004

I've broken this into separate ZIP files, hoping that most of the time you'll only need the most recent articles ZIP archive. 


Dr. Peter J. Welcher (CCIE #1773, CCSI #94014, CCIP) is a Senior Consultant with Chesapeake NetCraftsmen. NetCraftsmen is a high-end consulting firm and Cisco Premier Partner dedicated to quality consulting and knowledge transfer. NetCraftsmen has six CCIE's, with expertise including large network high-availability routing/switching and design, VoIP, QoS, MPLS, network management, security, IP multicast, and other areas. See http://www.netcraftsmen.net for more information about NetCraftsmen. Pete's links start at http://www.netcraftsmen.net/welcher . New articles will be posted under the Articles link. Questions, suggestions for articles, etc. can be sent to pjw <at> netcraftsmen <dot> net


Update 9/18/2008
Copyright (C) 1999, 2000, 2001, 2002 , 2003, 2004, 2005, 2006, 2007, 2008 Peter J. Welcher