academy conference 2010 ipv6 survival kit

60
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public IPv6 & Packet Tracer 1 Academy Conference 2010 IPv6 Survival Kit Dr. Jim Bergquist [email protected] Lakes Country Service Cooperative August 2010

Upload: kadeem

Post on 25-Feb-2016

37 views

Category:

Documents


1 download

DESCRIPTION

Academy Conference 2010 IPv6 Survival Kit. Dr. Jim Bergquist [email protected] Lakes Country Service Cooperative August 2010. IPv6 Survival Kit Session Goals. Brief overview of IPv6 topics to build confidence in configuring IPv6 Explore ways in which IPv4 and IPv6 can coexist on devices - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: Academy Conference 2010  IPv6 Survival Kit

© 2009 Cisco Systems, Inc. All rights reserved. Cisco PublicIPv6 & Packet Tracer 1

Academy Conference 2010 IPv6 Survival Kit

Dr. Jim Bergquist [email protected] Lakes Country Service CooperativeAugust 2010

Page 2: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 2© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Survival Kit Session Goals Brief overview of IPv6 topics to build confidence in

configuring IPv6 Explore ways in which IPv4 and IPv6 can coexist on

devices Use Packet Tracer to build, configure and troubleshoot

a simple IPv6 network Take away knowledge, tips and resources for effectively

adding IPv6 content to Discovery 4 and Exploration 4 Provide your students with fun and interesting facts

about this important protocol

Page 3: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 3© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

A big “Thank you” to …

Michael McKeever, Computer Networking and Security Instructor, Santa Rosa Junior College, Petaluma, CA

Dallas Shiroma, Manager of Emerging Technologies, Pacific Center for Advanced Technology Training, Honolulu, HI

Page 4: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 4© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Visualizing the IPv6 Address Space

… and other fun stuff

Page 5: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 5© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Earth drawing credit: http://flickr.com/photos/ontdesign/http://search.creativecommons.org/

Visualizing the IPv6 Address Space

Assign one IPv6 address per grain of sand

How many grains of sand would be needed to use all IPv6 addresses?

Fill Earth-sized containers with the sand

128 bit addresses2 128 is a very large number

Fill here

HollowEarth-sizedcontainerSand

Grain

Page 6: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 6© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Visualizing the IPv6 Address SpaceThe filled Earth-sized containers would make 20 circles around the outer orbit of our solar system (Pluto)

Our Solar System

Blue dots are Earth- sized containers

Based on image from public image gallery at

http://www.eso.org/

Page 7: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 7© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Features Enhanced by IPv6

Address autoconfigurationPlug and Play networking with wide variety of devices

Connectivity to roaming mobile devices Built-in Security – Security is easier Better reliability through multihoming hosts More efficient route aggregation Simpler packet header Many devices and apps already support IPv6

See Chapter 7 of Exploration, Accessing the WAN,Chapter 6 of Discovery, Designing and Supporting Computer Networks

Page 8: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 8© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Address Format, Types and Scopes

Just what we need to know

Page 9: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 9© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Address Format

128 bits separated into eight blocks of 16 bits, as hex:FC00:00D3:0000:2F00:02AA:00FF:FE28:9C5A

In each 16-bit block, leading zeros may be removed:FC00:00D3:0000:0000:02AA:00FF:FE28:9C5AFC00:D3:0:0:2AA:FF:FE28:9C5A

Adjacent zeroes can be compressed (once):FC00:D3::2AA:FF:FE28:9C5A

Page 10: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 10© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Prefix Length, Allocation of Bits Example: 2001:DB8:0:2F00:2AA:FF:FE28:9C5A/64 Prefix length (number of network bits) is 64 Same notation as CIDR in IPv4, no subnet masks 16 subnet bits, (/49 to /64) given to a site – 65,535 LANs! Usually 64 bits are used for hosts in IPv6

Page 11: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 11© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Types of IPv6 Addresses Unicast (one to one) Also:

Multicast (one to many) Loopback (0:0:0:0:0:0:0:1) Anycast (one to “nearest,” not widely used)

No broadcasts in IPv6

Page 12: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 12© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Unicast IPv6 Address Scopes Link-local addresses—only on single link, not routed

FE80 prefix

Unique-local addresses—routed within private networkFC00 prefix

Global unicast addresses—globally routable2001 prefix currently being issued64 bit host portion

Page 13: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 13© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Address Assignment

Often, it does the work for us

Page 14: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 14© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Stateless Autoconfiguration

Host automatically configures its own link-local address

With link-local address, a host discovers connected routers to obtain a global prefix

A host then builds its own global unicast address

Static assignments are also possible

Page 15: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 15© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Stateless Autoconfiguration Process Uses MAC Address

00 90 27 FF FE 17 FC 0F

FF FE

00 90 27 17 FC 0F

00 90 27 17 FC 0F

000000U0 Where U=1 = Unique0 = Not Unique

02 90 27 FF FE 17 FC 0F

U = 1

48 bit MAC Address

64 bits become part of IPv6 address

Page 16: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 16© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Router(config)#ipv6 unicast-routingRouter(config)#int fa0/1Router(config-if)#ipv6 addr 2001:db8::/64 eui-64Router(config-if)#ipv6 enableRouter(config-if)#no shut

Stateless AutoconfigurationOnly the network part of the address is suppliedin the ipv6 address command

Page 17: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 17© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Stateless AutoconfigurationRouter’s fa0/1 interface generates its link-local address and global unicast address

Router#sho ipv6 int briFastEthernet0/0 [administratively down/down]FastEthernet0/1 [up/up] FE80::201:42FF:FE44:3C02 2001:DB8::201:42FF:FE44:3C02

Page 18: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 18© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Good Practice in IPv6 Addressing

Hosts should have globally routable addresses created with stateless autoconfiguration

Use 2001 prefixUse /64 eui-64 to create them

Serial links between routers should not use globally routable addresses

Use FC00 prefix and static addressingUse a prefix length /64However, the prefix length could also be, for example, /112

Page 19: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 19© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Good Practice in IPv6 AddressingStatic addresses between routersStateless autoconfiguration for hosts

Page 20: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 20© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Commands for Students to Compare

Page 21: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 21© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Commands for Students to Compare

show ip interface brief show ipv6 interface briefshow ip route show ipv6 routeshow ip protocols show ipv6 protocols

Page 22: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 22© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Ping Command for IPv6

Cisco routers, Packet Tracer routers and Packet Tracer PCs use ping

Windows XP uses ping6 Packet Tracer PCs and Windows XP uses ipv6config

Page 23: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 23© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

ConfiguringIPv6 RIP

Differs slightly from RIP for IPv4

Page 24: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 24© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Global Commands

Router(config)#ipv6 unicast-routing (enable IPv6)

Router(config)#ipv6 router rip CIRCUS (define a routing process called CIRCUS)

Page 25: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 25© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Interface Commands- Auto ConfigRouter(config)#int fa0/0Router(config-if)#ipv6 enableRouter(config-if)#ipv6 addr

2001:db8:2:3::/64 eui-64Router(config-if)#ipv6 rip CIRCUS enableRouter(config-if)#no shut

The router is now configured with IPv6 RIP on fa0/0Repeat for other involved interfacesEnsure that the PCs are set for Auto Config in the Config Tab

The IPv4 network command is not used

Page 26: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 26© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv4 and IPv6 Co-existence

Configuring Dual Stack

Page 27: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 27© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Dual Stack Example

Dual stack means configuring IPv4 and IPv6 on router interfaces and PCs

No special router commands neededWorks on any router that supports IPv6

Main tasks:Configure IPv4 and IPv6 addresseson appropriate interfaces

Enable RIP and IPv6 RIP routing protocols (or OSPF and OSPFv3)Note: The IPv4 and IPv6 routing tables are separate

Page 28: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 28© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

PC0 is a Dual Stack Host Ping from an IPv4 host to PC0

Destination

Page 29: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 29© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

PC0 is a Dual Stack Host Ping from an IPv6 host to PC0

Destination

Page 30: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 30© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv4 Routing Table, Router1Router1#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, …<output omitted>

Gateway of last resort is not set R 192.168.2.0/24 [120/1] via 192.168.5.2, 00:00:04, Serial0/0/1

C 192.168.4.0/24 is directly connected, Serial0/0/0C 192.168.5.0/24 is directly connected, Serial0/0/1R 192.168.7.0/24 [120/1] via 192.168.4.1, 00:00:05, Serial0/0/0

Page 31: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 31© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Routing Table, Router1Router1#sho ipv6 routeIPv6 Routing Table - 6 entriesCodes: C - Connected, L - Local, S - Static, R - RIP

C 2001:DB8:0:1::/64 [0/0] via ::, FastEthernet0/0

L 2001:DB8:0:1:202:16FF:FE53:4601/128 [0/0] via ::, FastEthernet0/0

R 2001:DB8:0:7::/64 [120/1] via FE80::2D0:BCFF:FEAB:6681, Serial0/0/0

C FC00:0:0:1::/64 [0/0] via ::, Serial0/0/0L FC00:0:0:1::2/128 [0/0] via ::, Serial0/0/0L FF00::/8 [0/0] via ::, Null0

Page 32: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 32© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Configuring Dual Stack - Lab

Open this lab with Packet Tracer 5.3 Work with a neighbor on questions that arise

Page 33: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 33© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

ICMPv6 Packet Type Numbers

You can look at packet details with Packet Tracer

Page 34: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 34© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Some ICMPv6 Type Numbers

Router Advertisement(Neighbor Discovery)- 134

Specific to IPv6Sent periodically to neighbors

v6 Echo Request (ping)- 128Compare with v4: Type 8

v6 Echo Reply (ping)- 129Compare with v4: Type 0

Activity: Use Packet Tracer in Simulation modeClick a packet to see type number

Type 134

Page 35: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 35© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Modeling in Packet Tracer

Page 36: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 36© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

IPv6 Modeling in Packet Tracer

In PT, click Help. In browser, click Modeling, Layer 3 IP Addressing topics

Click Modeling, Routing IPv6 routing protocols

Page 37: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 37© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Links to Additional Information

Page 38: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 38© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Additional Information

“IPv6” (go to)General IPv6 information, FAQ, links

go6, (“The IPv6 portal”) (go to)Upcoming events, blog, wiki, newsletter, member area

IPv6 Task Force (“The IPv6 Portal”) (go to)Introduction, news, pressroom, RSS, IPv6 Guide, and Portal

The IPv6 Forum (go to)Events, news, book recommendations, government news, competitions, and an “IPv4 Exhaustion Counter”!

Portals, Forums, information sites

Page 39: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 39© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Additional Information

IETF RFC repository (go to)Find an RFC if you know its number

networksorcery.com list of IPv6 RFCs (go to)Excellent searchable list, including obsoleted RFCs

Microsoft IPv6 implementation (go to)RFCs used to implement IPv6 in Windows 2003 Server and XP

Useful RFCs and lists

Page 40: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 40© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Additional Information Introduction to IPv6 – Why IPv6? (go to)

Overview and In-depth sections

Cisco IOS IPv6 Command Reference (go to)Excellent source for learning and troubleshooting

List of RFCs for IPv6 (go to)Useful for understanding Cisco IPv6 implementations

A description of address types IPv6 Introduction video podcast by Darrel Root

Page 41: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 41© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Related Academy Conference Sessions

Page 42: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 42© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Related Academy ConferenceSession Material

IPv6 and Packet Tracer, Dr. Jim Bergquist, 2009 Getting Ready for IPv6, Dr. Ron Kovac and graduate

students, 2010 IPv6 Survival Kit, Julian Carranza, 2010 IPv6 Survival Kit, Michael McKeever, 2010

Will include a lab for configuring NetLabs

Page 43: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 43© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

List of Activities in IPv6 and Packet Tracer

Stateless AutoconfigurationStateless Autoconfig.pktBuild an IPv6 EUI-64 Address.doc (A separate activity)

IPv6 RIPIPv6 RIP.pkt

IPv6 OSPFIPv6 OSPF CCNP Lab 8-1.pkt

Comparing ICMPv4 and ICMPv6 PacketsComparing ICMPv4 and ICMPv6 Packet types.doc (and answers)ICMPv4 ICMPv6 packets.pkt

From 2009 conference

Page 44: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 44© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

List of Activities in IPv6 and Packet Tracer Broken Networks

3 Router-IPv6 RIP-broken1.pktIPv6 RIP-broken2.pkt

Unconfigured NetworkUnconfigured.pkt (Configured.pkt included for reference)

Dual StackDual stack-both IPv6 and IPv4.pkt

Upgrade IOS for PT 2620XM to support IPv6Upgrading IOS of Packet Tracer 2620XM router.docUpgrading IOS of Packet Tracer 2620XM router_ANSWERS.docNo pkt file

Page 45: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 45© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Obtaining Conference Materials

Go to https://cisco.webex.com/meet/kalderso Click the Files tab Select the + to expand the “2009USAcadConf” folder, OR Select the + to expand the “2010USAcadConf” folder

(It will be posted after completion of all conferences)

Download the files you want

Page 46: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 46© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Obtaining Conference Materials

Login to the 2010 Virtual Academy Conference In the Resource Room, session materials are posted

for each conference separately

Another method, for 2010 materials

Page 47: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 47© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Topics Not Covered Here …

… but check the additional resources I’ve referenced

Page 48: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 48© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Topics Covered in Other Resources

Why IPv6, and why not NAT? Time frame for implementation Details of the parts of the address Special addresses Type and scope of addresses Details of packet header Neighbor discovery

See the links to resources and additional information

Page 49: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 49© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Topics Covered in Other Resources

IPv6 ACLs Security with IPv6 Mobility with IPv6 IPv4 to IPv6 migration: dual stack, tunneling, translation Current deployment status of IPv6 Some IPv6 sites on internet Tunneling

See the links to resources and additional information

Page 50: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 50© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Q & A

Page 51: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 51© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Page 52: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 52© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Page 53: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 53© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

FAQ Area

Page 54: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 54© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Where is IPv6 covered in Exploration?

Network Fundamentals6.3.6

Routing Protocols and Concepts1.1.3, 3.1.1, 5.1.1, 10.2.3, 11.1.1, 11.7.1

LAN Switching and Wirelessno coverage

Accessing the WAN7.0.1, 7.3, 7.5.1

Page 55: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 55© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Where is IPv6 covered in Discovery?

Networking for Home and Small BusinessesNo coverage

Working at a Small-to-Medium Business or ISP4.1.6

Introducing Routing and Switching in the Enterprise5.2.1

Designing and Supporting Computer Networks6.3

Page 56: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 56© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

What are the “Documentation” Addresses? Addresses within 2001:db8::/32 range should be used

only in examples given in documentation for networking scenarios or tutorials

Page 57: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 57© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

Does BGP Support IPv6?

The current version of BGP is BGP4 BGP4 does support IPv6 See http://tools.ietf.org/html/draft-ietf-idr-bgp4-ipv6-01

Page 58: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 58© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

What IOS do I need to run IPv6? You need 12.0(21)T, or later, or 12.2(2)T or later To find out when a command was introduced, see the

Cisco IOS IPv6 Command Reference (go to). Locate the command. The listing will show when it was introduced

Also see Cisco IOS Software Release Specifics for IPv6 Features (go to)

The Packet Tracer 2620XM router does not support IPv6 unless you upgrade the IOS image

Page 59: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 59© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public

How many IPv6 addresses can I configure?

Router#show run (part of output)

interface FastEthernet0/0 ip address 192.168.0.1 255.255.255.0 duplex auto speed auto ipv6 address 2001:1:1::/64 eui-64 ipv6 address 2001:DB8:2::1/112 ipv6 address FC00:1:3::1/112 ipv6 address FC00:1:4::1/112

Example, of IPv4 address and four IPv6 addresses, in addition to link-local address (not shown)

Page 60: Academy Conference 2010  IPv6 Survival Kit

IPv6 & Packet Tracer 60© 2009 Cisco Systems, Inc. All rights reserved. Cisco Public