Inom nätverksbranchen finns en strävan att gå från proprietära lösningar till en öppen standard för hård- och mjukvara. En term för detta är Whiteboxing och det innebär att användaren ges möjlighet att plocka ihop komponenter efter behov, och själv välja vilken mjukvara som används. I sin enklaste form byggs en Whiteboxrouter av en konventionell PC med två nätverkskort och en mjukvarubaserad routingapplikation. Företaget ÅF är intresserade av att veta hur Whitebox-lösningar för routrar står sig prestandamässigt i relation till konventionella routerlösningar med Application Specific Integrated Circuit. Detta arbete har undersökt prestandan genom att mäta throughput och goodput hos en Cisco 2911-router, en Whiteboxrouter med mjukvaran pfSense, samt en Whiteboxrouter som körde pfSense virtualiserat på ESXi. Dessutom undersöktes respektive konfigurations prestanda när trafiken skickades över IPsec VPN. För mätningarna användes filöverföringar med FTP och mätprogrammet Iperf3. Målet med arbetet var att skapa ett beslutsunderlag som klargjorde eventuella prestandaskillnader och utarbetade rekommendationer för framtida val av routerlösning. Resultatet visade att vid generell paketförmedling var prestandan mellan routrarna relativt jämn, dock rekommenderas den virtualiserade Whiteboxroutern då den fick det bästa resultatet. När trafiken sedan krypterades med IPsec VPN var det stora prestandaskillnader mellan enheterna. Bäst prestanda fick Whiteboxroutern. Författaren ser en vinning med Whitebox-tekniken i stort då den medger att serverutrustning som ska utrangeras på grund av prestandakrav, istället kan fungera som nätverksutrustning (routrar och brandväggar) och fortsätta användas under en större del av den tekniska livslängden. Detta kan på sikt leda till minskad miljöpåverkan och besparingar för företaget.

Eleven years ago Cisco introduced three types of applications on the same converged network and named it AVVID (Architecture for Voice, Video and Integrated Data). In spite of the initial interest and hype surrounding AVVID, the feature was and still is unable to confront problems such as: data priority, load balancing and network congestion. The work in this report addressed these issues within the network. Different Cisco Internetwork Operating System (IOS) methods: routing protocols, Cisco IOS QoS (including LLQ, LFI and Header Compression), Path Control and Cisco Performance Routing (PfR) were all tested to see which feature would work best at enhancing network performance. A practical network was created in which these features were carefully implemented one after another. In every step, the results were observed and recorded and if necessary repeated in order to check their validity. The results for RTT (Round Trip Time) and MOS (Mean Opinion Score) showed that in comparison to Path Control and Cisco IOS QoS (Quality of Service) mechanisms, Cisco PfR was able to generate routes on the fly during times of network congestion. This cannot be achieved with the use of Cisco QoS and Path Control which makes Cisco Performance Routing a far more superior feature. Although the focus of the work was VoIP (Voice over Internet Protocol) data, it is possible to construct a network with any application as Cisco PfR is able to reroute data. Cisco PfR is an easily accessible IOS feature which, once implemented, requires very little updating and maintenance.

The diploma thesis is focused on analysis and deployment of Quality of Services (QoS) in a computer network of The University of Economics in Prague (VŠE). The thesis describes the main QoS technologies focusing on technology Diffserv and its deployment with using available network devices in computer network of VŠE. In thesis the needs of network services and protocols for quality of services with division into different classes of services according to priority are discussed. The thesis explains the benefits and drawbacks of deploying QoS in the environment of VŠE with regard to wired and wireless network. In the practical part recommendations are applied to the production network and subsequently the benefits of modification are evaluated.

The purpose of this project was to establish a CISCO program at San Bernardino High School. This program facilitates student matriculating with the program being taught at San Bernardino Valley College. Students earn certification as a Cisco Certified Networking Professional (CCNP) certification.

This master’s thesis deals with description of information protocol of network flow, mainly definition of Cisco NetFlow version 9. Describes it’s features, message format and attributes of transmitted data. The thesis is primarly focused onto NetFlow v9 transmitted template, which defines fileds and data in consecutive data flow. The essence of the thesis consists in implementation of simple NetFlow v9 parser, which has been programmed in Python prog.language, it’s tests of captured UDP data from file and port capture testing on development server in lab. There is a possibility of saving captured and parsed data into prepared database within implementation as output from capturing.

This master's thesis analyses and demonstrates selected IPv6 attacks including two Man-in-the-Middle attacks and one Denial of Service attack - Rogue Router Advertisement, Neighbor Cache Poisoning and Duplicate Address Detection DoS, respectively. In the first part the author presents necessary information related to the issue and provides detailed information on how to realize these attacks in practice using publicly available tools. The second part of the thesis presents various ways of mitigating presented attacks, analyses implementations of some of those countermeasures on Cisco and H3C devices and discussess their applicability.

This master's thesis report deals with the theoretical analysis of FHRP. First Hop Redundancy Protocols are network protocols which are designed to protect the default gateway and also to ensure high availability in the network by using redundancy. The reader becomes familiar with protocols VRRP, HSRP and GLBP and also learn the way how to configure them to on real Cisco devices. It also describes how implement VRRP int the simulated enviroment of OMNeT++. The result of the implementation is verified in the test topologies.

Multicast traffic is common in today's networks. We need to simulate multicast architecture to be familiarized with its functionality in all situations. This thesis describes modelling and simulation of multicast routing using OMNeT++ tool. The text introduces protocol PIM and its particular modes (DM, SM, SSM, and BiDir) with emphasis on PIM-DM. The thesis focuses especially on design and implementation of OMNeT++ extension by multicast routing protocol PIM-DM. Correctness of implementation is verified by comparison of simulation and real network on example.

pyAXL ist eine Programmierschnittstelle (API) zur Steuerung des "Cisco Call Manager", eine enterprise-VoIP-Verwaltung. Der Vortrag zeigt, wie pyAXL aufgebaut ist. An ein paar Beispielen wird die Verwendung von pyAXL demonstriert.

This MSc Thesis focuses on principles, practical performability and security against four attacks used in contemporary local-area networks: CAM Table Overflow capable of capturing traffic in switched networks, ARP Man-in-the-Middle, whose target is to redirect or modify traffic and against two variants of VLAN Hopping attack allowing a hacker to send and capture data from VLANs he has no access to.