cisco for dummiesboolb00/3_csco4dummies.pdf · cisco for dummies 3. lan switching – fast track!...

18
CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK

Upload: dinhthuan

Post on 28-Feb-2019

231 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK !

Page 2: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

ZANIM ZACZNIEMY…

26/04/15

Piotr Adam Buler KNI WMiI UMK 2

Page 3: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

AGENDA •  Kilka słów o switchach •  Podstawy konfiguracji switchy L2 i L3, •  Logiczna separacja sieci lokalnej – VLANy

•  Komunikacja między VLAN-ami - InterVLAN routing

•  (nie)bezpieczna auto-konfiguracja VTP

•  STP vs Etherchannel

•  PortFast i Port-security* •  Q&A

26/04/15

Piotr Adam Buler KNI WMiI UMK 3

Page 4: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

KILKA SŁÓW O SWITCHACH

27/04/15

Piotr Adam Buler KNI WMiI UMK 4

Switch Cisco Nexus 5010 Series

A network switch is a computer networking device that connects devices together on a computer network, by using packet switching to receive, process and forward data to the destination device.

Switch Cisco Catalyst 2960G Series

Switch Cisco Catalyst 3750Series

Page 5: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

KILKA SŁÓW O SWITCHACH

27/04/15

Piotr Adam Buler KNI WMiI UMK 5

BUDOWA – FRONT:

Switch Cisco Catalyst 2960G Series

Page 6: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

KILKA SŁÓW O SWITCHACH

27/04/15

Piotr Adam Buler KNI WMiI UMK 6

BUDOWA – FRONT:

Page 7: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

KILKA SŁÓW O SWITCHACH

27/04/15

Piotr Adam Buler KNI WMiI UMK 7

BUDOWA – WNĘTRZE:

Switch Cisco Catalyst 2960G Series

Page 8: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

LAN SWITCHING

27/04/15

Piotr Adam Buler KNI WMiI UMK 8

PODSTAWY:

MAC table, filter table, or Content addressable memory (CAM) table refers to a dynamic table in a network switch that maps MAC addresses to ports. It is the essential mechanism that separates network switches from network hubs.

Page 9: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

VIRTUAL LAN

27/04/15

Piotr Adam Buler KNI WMiI UMK 9

PODSTAWY:

A VLAN is a group of end stations with a common set of requirements, independent of physical location. VLANs have the same attributes as a physical LAN but allow you to group end stations even if they are not located physically on the same LAN segment.

Page 10: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

INTER VLAN SWITCHING – L2

27/04/15

Piotr Adam Buler KNI WMiI UMK 10

Router-on-a-stick is a term frequently used to describe a setup up that consists of a router and swi tch connected us ing one Ethernet link configured as an 802.1q trunk link. In this setup, the switch is configured with multiple VLANs and the router performs all routing between the different networks/VLANs.

Page 11: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

INTER VLAN SWITCHING – L3

27/04/15

Piotr Adam Buler KNI WMiI UMK 11

Page 12: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

SPANNING TREE PROTOCOL

27/04/15

Piotr Adam Buler KNI WMiI UMK 12

Spanning-Tree Protocol (STP) prevents loops from being formed when switches or bridges are interconnected via multiple paths. Spanning-Tree Protocol implements the 802.1D IEEE algorithm by exchanging BPDU messages with other switches to detect loops, and then removes the loop by shutting down selected bridge interfaces. This algorithm guarantees that there is one and only one active path between two network devices.

Page 13: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

SPANNING TREE PROTOCOL

27/04/15

Piotr Adam Buler KNI WMiI UMK 13

From blocking to listening: 20 seconds From listening to learning: 15 seconds From learning to forwarding: 15 seconds

Switch-C# show spanning-tree interface fa0/3 detail Port 3 (FastEthernet0/3) of VLAN0001 is forwarding Port path cost 19, Port priority 128, Port Identifier 128.2. Designated root has priority 8192, address 0001.96a0.2c00 Designated bridge has priority 28673, address 0009.b7aa.9c80 Designated port id is 128.2, designated path cost 19 ….

Page 14: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

ETHERCHANNEL

27/04/15

Piotr Adam Buler KNI WMiI UMK 14

An EtherChannel is comprised of physical, individual links that are bundled together into a single logical link. Each EtherChannel can consist of up to eight ports. Physical links in an EtherChannel must share similar characteristics, such as be defined in the same VLAN or have the same speed and duplex settings and STP configurations.

Page 15: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

VLAN TRUNKING PROTOCOL

27/04/15

Piotr Adam Buler KNI WMiI UMK 15

PODSTAWY:

VLAN Trunking Protocol (VTP) is a Cisco proprietary protocol that propagates the definition of Virtual Local Area Networks (VLAN) on the whole local area network. To do this, VTP carries VLAN information to all the switches in a VTP domain.

Page 16: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

VLAN TRUNKING PROTOCOL

27/04/15

Piotr Adam Buler KNI WMiI UMK 16

Page 17: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

Q&A

26/04/15

Piotr Adam Buler KNI WMiI UMK 17

Page 18: CISCO FOR DUMMIESboolb00/3_csco4dummies.pdf · CISCO FOR DUMMIES 3. LAN SWITCHING – FAST TRACK! ... InterVLAN routing • (nie)bezpieczna auto-konfiguracja VTP ... VLAN Trunking

DZIĘKUJĘ!

26/04/15

Piotr Adam Buler KNI WMiI UMK 18