NDC Chapter 4
NDC Chapter 4
Switch(LAN) Configuration
Introduction
➢ Switching breaks up large collision domains into
smaller ones
technology
Cont.
▪ Each port on a switch is actually its own collision domain,
SW1#show mac-address-table
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
1 0001.9744.73c0 DYNAMIC Fa0/1
1 00e0.b0de.eed5 DYNAMIC Fa1/1
Port Security
allowed on a port.
characteristics:
It occurs when
SW1#
Can you ping from PC 0 to PC 1?
Now disconnect the switch fa0/1 interface from PC 0 and re-connect it
with PC 2. Finally check whether you can ping from PC2 to PC 1.
Disabling unused ports: use shutdown command for an
interface or range of interfaces (ex. interface range fa0/1-24)
Introduction to VLANs
local area network which groups together a collection of
machines in a logical and non-physical way
Using (VLANs) it is possible to be free of the limitations of the
physical architecture (geographic constraints, addressing
constraints, etc) by defining logical segmentation based on a
grouping together of machines using criteria (MAC addresses, port
numbers, protocol, etc).
Types of VLANs
depending on switching criteria and the level at which
the VLAN is conducted:
level 1 VLAN (Port Based VLAN) based on the
connection ports on the switch;
level 2 VLAN (MAC Address-Based VLAN)
based on the MAC addresses of the stations; much
more flexible than the port based VLAN because
the network is independent from the location of
the station
VLAN…
A level 3 VLAN: there are several types of level
3 VLANs:
Network Address Based VLAN links subnets
according to the source IP address of the datagrams.
provides great flexibility in so far as the configuration
of the switches changes automatically when a station
is moved.
may be slight degradation in performance since the
information contained in the packets must be
analysed more closely.
Protocol Based VLAN makes it possible to create a
virtual network by protocol type (for example TCP/IP,
IPX, AppleTalk, etc.), therefore grouping together all
the machines using the same protocol on the same
network.
Advantage of VLAN
Limits the size of broadcast domains
Improves network performance
Provides a level of security
Configuring VLANs
Use config-vlan mode to configure
normal-range VLANs (VLAN IDs 1 to 1005) -saved in the
VLAN database if VTP is in transparent or server mode
extended-range VLANs (VLAN IDs 1006 to 4094) -are not
saved in the VLAN database
Syntax
Switch(config)#vlan vlan_number
Switch(config-vlan)#name vlan_name
Switch(config-vlan)#exit
Switch# show vlan
Cont.
By default, all ports are initially members of VLAN1.
❑ Access links
❑ Trunk links
trunk mode
VLAN Tagging
❑Is a VLAN identification given for a frame while
frame tagging
Exercise
VTP (VLAN Trunking Protocol)
VTP modes:
VTP Server
VTP Client
VTP Transparent
VTP Modes • Default
• Creates VLANs
• Modifies VLANs
• Deletes VLANs
• Sends/forwards
advertisements
• Synchronizes
• Saved in NVRAM
• Creates VLANs
• Modifies VLANs
• Deletes VLANs
• Forwards
advertisements
• Forwards • Does not
advertisements synchronize
• Synchronizes • Saved in NVRAM
• Not saved in
NVRAM
VTP Configuration
The domain name and password are case sensitive and must be configured in
each switch that are in the same domain.
STP (Spanning Tree Protocol)
topology
network.
show spanning-tree
show spanning-tree summary
Inter-VLAN Communication
•Although VLANs extend to span multiple switches, only
members of the same VLAN can communicate.
•A Layer 3 device provides connectivity between different
VLANs.
•Method of accomplishing the inter-VLAN routing
✓ Using a separate interface connection to the Layer 3 device for each
VLAN.
✓ Using a feature called subinterfaces.
✓ Subinterfaces logically divide one physical interface into multiple
logical pathways.(Known as router-on-a-stick)
To configure inter-VLAN routing, use the
following steps:
1. Configure a trunk port on the switch.
Switch(config)#interface fa0/2
Switch(config-if)#switchport mode trunk
2. On the router, configure a FastEthernet interface with no IP
address or subnet mask.
Router(config)#interface fa0/1
Router(config-if)#no ip address
Router(config-if)#no shutdown
Cont.
3. On the router, configure one subinterface with an IP address and subnet
mask for each VLAN. Each subinterface has an 802.1Q encapsulation.
Router(config)#interface fa0/0.10
Router(config-subif)#encapsulation dot1q 10
Router(config-subif)#ip address 192.168.10.1 255.255.255.0
4. Use the following commands to verify the inter-VLAN routing
configuration and functionality.
Switch#show trunk
Router#show ip interfaces
Router#show ip interfaces brief
Router#show ip route
WAN Devices and Technologies