Secure Networks with EVPN-VXLAN скачать в хорошем качестве

Secure Networks with EVPN-VXLAN

Network segmentation is a cornerstone of modern cybersecurity aimed at enhancing security, performance, and management by dividing networks into smaller, isolated sections. Traditional methods, such as VLANs and firewalls, face scalability, complexity, and flexibility limitations. Ethernet Virtual Private Network (EVPN), combined with Virtual Extensible LAN (VXLAN), represents a significant advancement, leveraging BGP for control plane operations and encapsulating Layer 2 frames over Layer 3 networks. This paper examines the architecture and operation of EVPN-VXLAN, highlighting its benefits in contemporary data center and enterprise network environments, including improved security, optimal path utilization, and enhanced regulatory compliance. Additionally, it outlines strategies for securing EVPN-VXLAN segmentation, ensuring robust protection against cyber threats. =============== Table of Contents: 00:00 - Introduction 03:03 - Importance of Segmentation 04:51 - Traditional Approaches 06:55 - Traditional Methods Challenges 08:48 - EVPN-VXLAN Overview 11:00 - EVPN-VXLAN Architecture 13:45 - EVPN-VXLAN Operation 15:44 - Alternative Architecture =============== Video Script/Study Guide https://www.researchgate.net/publicat... =============== Domain Separation and Segmentation    • Communication and Network Security - ...   How L2 Switches Use MAC Addresses    • How L2 Switches Use MAC Addresses   EVPN-VXLAN Explainer    • EVPN-VXLAN Explainer   =============== References Airheads Broadcasting. (2022). EVPN-VXLAN Explainer. YouTube.    • EVPN-VXLAN Explainer   Brown, L., & Davis, K. (2019). Cybersecurity Frameworks and Regulatory Compliance. Wiley Publishing Cisco. (2019). Cisco TrustSec: Software-Defined Access Control. Cisco Press. Cisco. (2020). Micro-Segmentation with Security Groups. Cisco Blogs. Retrieved from https://blogs.cisco.com/security/micr... Cisco. (2021). Cisco Networking Essentials. Cisco Press Cisco. (2021a). BGP Security Best Practices. Cisco Networking Essentials. Cisco Press. Cisco. (2021b, February). Configure the Cisco Fabric Border Provider Edge (BorderPE) for VXLAN EVPN Fabric White Paper. Cisco. https://www.cisco.com/c/en/us/td/docs... Cisco. (2021b). Data Plane Security for VXLAN. Cisco Technical Documentation. Retrieved from https://www.cisco.com/c/en/us/td/docs... Cisco Blogs. (2020, April 20). Why transition to BGP EVPN VXLAN in enterprise campus. Retrieved from https://blogs.cisco.com/networking/wh... Cisco Press. (n.d.). Virtual Extensible LAN (VXLAN) overview. Retrieved from https://www.ciscopress.com/articles/a... Exabeam. (n.d.). Network segmentation: Your last line of defense? Retrieved from https://www.exabeam.com/explainers/in... Forouzan, B. A. (2017). Data Communications and Networking. McGraw-Hill Johnson, R. (2021). Advanced Network Management and Segmentation. McGraw-Hill Education Juniper Networks. (n.d.). Understanding EVPN with VXLAN data plane encapsulation. Retrieved from https://www.juniper.net/documentation... Oppenheimer, P. (2010). Top-Down Network Design. Pearson Education Patel, A. (2018). IoT Security and Management. Springer Smith, J. (2020). Network Security Essentials: Applications and Standards. Pearson Education Splunk. (2023, June 20). What is network segmentation? A complete guide. Retrieved from https://www.splunk.com/en_us/blog/lea... Stallings, W. (2018). Network Security Essentials: Applications and Standards. Pearson Tanenbaum, A. S., & Wetherall, D. J. (2011). Computer Networks. Pearson TrueFort. (2023, March 15). Why organizations can't rely on traditional network infrastructure. Retrieved from https://truefort.com/traditional-netw... Zero Networks. (2023, August 1). Network segmentation vs. VLAN: Which strategy delivers true security? Retrieved from https://zeronetworks.com/blog/network... Zhang, Y., & Parashar, M. (2019). Software-Defined Networking and Security. Springer Zscaler. (2019, November 5). Network segmentation: Issues and opportunities to look beyond. Retrieved from https://www.zscaler.com/blogs/product...