Bai Giang Mon Thiet Bi Mang - 9 Chuong

7/29/2019 Bai Giang Mon Thiet Bi Mang - 9 Chuong

1/538

1

THIT B MNG

GV: ThS. T Nguyn Nht Quang


2/538

2

NI DUNG MN HC

Chng 1: C bn v Networking (S3 S35)Chng 2: Mi trng v thit b truyn dn (S36 S59)Chng 3: Thit b lin kt mng (S60 S93)

Chng 4: Router (S94 S172)Chng 5: Switch (S173 S316)Chng 6: Cc giao thc nh tuyn (S317 S380)

Chng 7:Access Control List - ACL (S381 S420)Chng 8: Network Access Translation (S421 S442)Chng 9: Cc cng ngh WAN (S443 S540)


3/538

3

CHNG 1


4/538

4

CBN V NETWORKING

Nhu cu kt ni Internet Cc k hiu (icons) thng dng

Lc mng Phn loi mng

M hnh OSI v TCP/IP Cc h thng s

a ch IP


5/538

5

Nhu cu kt ni Internet


6/538

6

Nhu cu kt ni Internet


7/538

7

Cc k hiu thng dng


8/538

8

Lc mng (Network topology)


9/538

9

Phn loi mngMng cc b (Local Area Networks - LANs)

C gii hn va l Tc truyn d liu cao Do mt t chc qun l

Sdng k thut Ethernet hoc Token Ring Cc thit b thng dng trong mng lRepeater, Brigde, Hub, Switch, Router.

802.3 Ethernet 802.5 Token Ring


10/538

10

Phn loi mngMng cc b (Local Area Networks - LANs)


11/538

11

Phn loi mngMng thnh ph(Metropolitan Area Network - MANs)

C kch thc vng a l ln hn LAN Do mt t chc qun l Thng dng cp ng trc hoc cp quang


12/538

12

Phn loi mngMng din rng (Wide Area Networks - WANs)

L skt ni nhiu LAN Khng c gii hn va l Tc truyn d liu thp Do nhiu t chc qun l Sdng cc k thut Modem, ISDN,

DSL, Frame Relay, ATM


13/538

13

Phn loi mngMng din rng (Wide Area Networks - WANs)


14/538

14

Phn loi mngMng khng dy (Wireless Networking)

Do t chc IEEE xy dng v c t chc Wi-fi Alliance a vo sdng trn ton thgii. C 3 tiu chun: chun 802.11a, chun

802.11b, chun 802.11g (sdng ph bin th trng Vit Nam).

Thit b cho mng khng dy gm 2 loi: cardmng khng dy v b tip sng/im truycp (Access Point - AP).


15/538

15

Phn loi mngMng khng dy (Wireless Networking)


16/538

16

Phn loi mngMng ring o (Virtual Private Networks - VPNs)


17/538

17

M hnh OSI v TCP/IPM hnh OSI (Open Systems Interconnection)

L do hnh thnh: Sgia tngmnh m v s lng v kchthc mng dn n hintng bt tng thch gia cc

mng. u im ca m hnh OSI:

Gim phc tp Chun ha cc giao tip m bo lin kt hot ng n gin vic dy v hc


18/538

18

M hnh OSI v TCP/IPng gi d liu trong m hnh OSI

Data

Segments

Packet

Frame

Bits

Data

Data


19/538

19

M hnh OSI v TCP/IPDng d liu trn mng trong m hnh OSI


20/538

20

M hnh OSI v TCP/IPM hnh TCP/IP


21/538

21

M hnh OSI v TCP/IPM hnh TCP/IP Lp ng dng

Kim sot ccgiao thc lpcao, cc ch v trnh

by, biu dinthng tin, mha v iu

khin hithoi. c tcho cc ng

dng phbin.


22/538

22

M hnh OSI v TCP/IPM hnh TCP/IP Lp Vn chuyn

Cung ng dch v vn chuyn thostngun n host ch. Thit lp mt cuni lun l gia cc u cui ca mng,

gia host truyn v host nhn.


23/538

23

M hnh OSI v TCP/IPM hnh TCP/IP Lp Internet

Mc ch ca lp Internet l chn ng itt nht xuyn qua mng cho cc gi dliu di chuyn ti ch. Giao thc chnh calp ny l Internet Protocol (IP).


24/538

24

M hnh OSI v TCP/IPM hnh TCP/IP Lp Truy nhp mng

nh ra cc th tc giao tip viphn cng mng v truy nhp mitrng truyn. C nhiu giao thchot ng ti lp ny


25/538

25

M hnh OSI v TCP/IPCc giao thc trong m hnh TCP/IP


26/538

26

Cc h thng s H 2 (nh phn): gm 2 k s0, 1 H 8 (bt phn): gm 8 k s0, 1, , 7

H 10 (thp phn): gm 10 k s0, 1,, 9

H 16 (thp lc phn): gm cc k s0, 1, , 9 v cc chci A, B, C, D, E, F


27/538

27

Cc h thng sChuyn i gia h nh phn sang h thp phn

101102

= (1 x 24 = 16) + (0 x 23 = 0) + (1 x 22 = 4) +

(1 x 21 = 2) + (0 x 20 = 0) = 22


28/538

28

Cc h thng sChuyn i gia h thp phn sang h nh phn

Convert 20110 to binary:201 / 2 = 100 remainder 1100 / 2 = 50 remainder 0

50 / 2 = 25 remainder 025 / 2 = 12 remainder 1

12 / 2 = 6 remainder 0

6 / 2 = 3 remainder 03 / 2 = 1 remainder 1

1 / 2 = 0 remainder 1

When the quotient is 0, take all the remainders inreverse order for your answer: 20110 = 110010012


29/538

29

Cc h thng sChuyn i h nh phn sang bt phn v thp lc phn

Nh phn sang bt phn: Gom nhm snh phn thnh tng nhm 3chstnh tphi sang tri. Mi nhm

tng ng vi mt chs h bt phn.V d: 1101100 (2) = 154 (8)

Nh phn sang thp lc phn: Tng tnhnh phn sang bt phn

nhng mi nhm c 4 chs.V d: 1101100

(2)= 6C

(16)

a ch IP


30/538

30

a ch IP

Khi nim va ch IP

a ch IP l a ch c cu trc vi mtcon sc kch thc 32 bit, chia thnh4 phn mi phn 8 bit gi l octet hoc

byte.V d:

172.16.30.56 10101100 00010000 00011110 00111000.AC 10 1E 38

a ch IP


31/538

31

a ch IP

Khi nim va ch IP

a ch host l a ch IP c thdng t cho ccinterface ca cc host. Hai host nm cng mt mngs c network_id ging nhau v host_id khc nhau.

a ch mng (network address): l a ch IP dngt cho cc mng. Phn host_id ca a ch chcha cc bit 0. V d 172.29.0.0

a ch Broadcast: l a ch IP c dng idin cho tt c cc host trong mng. Phn host_idch cha cc bit 1. V d 172.29.255.255.

a ch IP


32/538

32

a ch IP

Cc lp a ch IP

a ch IP


33/538

33

a ch IP

Cc lp a ch IP

a ch IP


34/538

34

a ch IP

Cc lp a ch IP

a ch IP


35/538

35

a ch IP

a ch IP dnh ring


36/538

36

CHNG 2

MI TRNG


37/538

37

MI TRNG

V THIT B TRUYN DN Mi trng truyn dn Bng thng (Bandwidth) Cc c t v cp Cp ng trc (Coaxial cable) Cp xon i (Twisted pair cable)

Cp STP (Shield Twisted-Pair) Cp UTP (Unshield Twisted-Pair) Cc loi kt ni cp

Cp quang (Fiber Optic Cable) Cc thng sc bn ca cc loi cp


38/538

38

Mi trng truyn dn L phng tin vt l cho php truyn

ti tn hiu gia cc thit b. Hai loi phng tin truyn dn chnh:

Hu tuynV tuyn

H thng sdng hai loi tn hiu: DigitalAnalog


39/538

39

Bng thng (bandwidth) L lng thng tin c thchy qua mt kt

ni mng trong mt khong thi gian chotrc.

Bng thng l hu hn Bng thng khng min ph Nhu cu bng thng tng khng ngng

Dng tng tbng thng: B rng mt ci ng S ln xe trn ng cao tc


40/538

40

Bng thng (bandwidth)

Cc gi l nc

Cc thit b mng l my bm, van, lc, u ni

Bng thng ging ln ca ng


41/538

41

Bng thng (bandwidth)Bng thng ging s ln xe trn ng cao tc

Cc thit b mng l cc ch dn lu thng, bn

Cc gi ging phng tin giao thng

B th


42/538

42

Bng thngn vo lng bng thng


43/538


44/538

44

Cc c t v cp Phm cht cp

Tc truyn s liu Truyn dn bng c bn (Baseband) v bng

rng (Broadband) Truyn dn digital v analog Khong cch truyn dn v ssuy gim ca

tn hiu

Cc c t: Ethernet: 10BASE-T, 10BASE5, 10BASE2 Fast Ethernet: 100BASE-T


45/538

45

Cc c t v cp

T: twisted(cp xoni)

5: 500 m 2: 200 m


46/538

46

Cp ng trc (Coaxial cable)

V bcLi chn bng ng

Dy dn ng

Cch in

Cu to Phn loi

Thinnet/Thicknet Baseband/

Broadband Thng sk thut

Chiu di cp Tc truyn Nhiu Lp t/bo tr Gi thnh Kt ni


47/538

47

Cp ng trc (Coaxial cable) Thicknet:

Cng, khlp t, chiph cao nnt dng.

Thinnet: Chi

ph thp, dlp tnhng nhiu

cao.

Cp xon i


48/538

48

Cp xon iCp STP (Shield Twisted-Pair)

V

bc

Chn

ngoi

Chn

trongi xon

V nhac mutheo m

Tc : 10 100Mbps

Gi: va phi Chiu di cp tia: 100 m Chng nhiu tt

Dng cho mng ckch thc trungbnh v ln

Cp xon i


49/538

49

Cp xon iCp UTP (Unshield Twisted-Pair)

Vbc

i xon

Nha cchin c mu

theo m

Tc : 10 100 1000 Mbps

Gi: r Chiu di cp tia: 100 m Chng nhiu km

D lp t Dng cho mng c

kch thc nh


50/538

50

Cc loi kt ni cp

Kt ni km K t ni tt


51/538

51

Cc loi kt ni cp

Pin 1Pin 2

Pin 3

Pin 4Pin 5

Pin 6

Pin 7Pin 8

Pin 1Pin 2

Pin 3

Pin 4Pin 5

Pin 6

Pin 7Pin 8

Pin 1Pin 2

Pin 3

Pin 4Pin 5

Pin 6

Pin 7Pin 8

Pin 3Pin 6

Pin 1

Pin 4Pin 5

Pin 2

Pin 7Pin 8

Pin 1Pin 2

Pin 3

Pin 4Pin 5

Pin 6

Pin 7Pin 8

Pin 8Pin 7

Pin 6

Pin 5Pin 4

Pin 3

Pin 2Pin 1

Straight-thru cable Crossover cable Rollover cable


52/538


53/538

53

Cc loi kt ni cp Sdng cp thng (Straight-through cable)

i vi: Switch Router

Switch PC hoc Server Hub PC hoc Server


54/538


55/538

55

Cc loi kt ni cp Sdng cp Rollover i vi:

PC Router hoc Switch (cng COM nicng Console)


56/538

56

Cp quang (Fiber Optic Cable)


57/538

57

ST Connector c dng vi cp Single-mode. SC Connector c dng vi cp Multimode

Cp quang (Fiber Optic Cable)


58/538

58

Thng sc bn ca cc loi cp


59/538

59

Thng sc bn ca cc loi cp


60/538

60

CHNG 3


61/538

61

THIT B LIN KT MNG Lab center NIC (Network Interface Card Card mng) Modem (Biu hp) Repeater (B chuyn tip) Hub (Concentrator - B tp trung) Bridge (Cu ni) Switch (B chuyn mch)

Router (Bnh tuyn) Gateway (Cng ni) Thit b mng khng dy Thit b h tr thi cng mng


62/538

62

Lab center


63/538

63

Card mng (NIC)

Kt ni gia my tnh v cp mngpht hoc nhn d liu vi cc

my tnh khc thng qua mng. Kim sot lung d liu gia my

tnh v h thng cp.


64/538


65/538

65

ISA

PCI

Card mng (NIC)

Card ISA 8 bits hoc 16 bits trong khi card PCI 32 bits. Tc bus mc nh ca slot ISA l 8,33MHz (bng

thng 8,33MB/s) v slot PCI l 33,33MHz (bng thng133,33MB/s).

Card ISA phi cu hnh cng bng cc jumper, card PCIc thcu hnh bng phn mm. center


66/538

66

Card mng (NIC) Mi NIC c mtm duy nht gi

l a ch MAC(Media Access

Control). MAC address c

6 byte, 3 byteu l m snh

sn xut, 3 bytesau l sserialca card.


67/538


68/538

68

Modem

Modem trongModem ngoi


69/538

69

Modem


70/538

70

Repeater (b chuyn tip)

Khuch i, phc hi cc tn hiu b suythoi do tn tht nng lng trong khitruyn.

Cho php m rng mng vt xa chiu digii hn ca mt mi trng truyn.

Chc dng ni hai mng c cng giaothc truyn thng.

Hot ng lp Physical.


71/538

71

Repeater (b chuyn tip)


72/538

72

Hub (b tp trung) Chc nng nhRepeater nhng m rng hn

vi nhiu u cm cc u cp mng. To ra im kt ni tp trung ni mng

theo kiu hnh sao. Tn hiu c phn phi n tt c cc kt

ni. C 3 loi Hub: thng, chng, thng

minh.


73/538

73

Hub (b tp trung) Hub thng (Passive Hub): chm bo chc nng kt

ni, khng xl li tn hiu. Hub chng (Active Hub): c kh nng khuch i tn hiu

chng suy hao. Hub thng minh (Intelligent Hub): l Hub chng nhng

c thm kh nng to ra cc gi tin thng bo hot ngca mnh gip cho vic qun tr mng d dng hn.


74/538

74

Hub (b tp trung)


75/538

75

Hub (b tp trung)


76/538

76

Bridge (cu ni)

Dng ni 2 mng c giaothc ging hoc khc nhau. Chia mng thnh nhiu phn

on nhm gim lu lngtrn mng.

Hot ng lp Data Link vi2 chc nng chnh l lc vchuyn vn.

Da trn bng a ch MAC lutr, Brigde kim tra cc gi tinv x l chng trc khi cquyt nh chuyn i haykhng.


77/538


78/538


79/538

79

Switch (b chuyn mch)


80/538

80

Switch (b chuyn mch)


81/538


82/538

82

Router (Bnh tuyn)


83/538

83

Router (Bnh tuyn)


84/538

84

Gateway (Proxy - cng ni) Thng dng kt ni cc

mng khng thun nht, chyu l mng LAN vi mng lnbn ngoi chkhng dng ktni LAN LAN.

Kim sot lung d liu ra vo

mng. Hot ng phc tp v chm

hn Router.


85/538

85

Thit b mng khng dy Cc chun thng dng l:

802.11: tc 1-2 Mbps 802.11b: tc 11 Mbps

802.11a: tng t802.11b Mng khng dy gm 2 thit b:

Cc node (my tnh) c gn wireless NIC. Access point (AC) ng vai tr nhmtcentral hub cho WLAN.


86/538

86

Thit b mng khng dy


87/538

87

Thit b mng khng dy


88/538

88

Thit b mng khng dy


89/538

89

Thit b mng khng dy

Thit b h tr thi cng mngThit b ki t bl


90/538

90

Thit b kim tra cable

Thit b h tr thi cng mngC i d th i


91/538

91

Crimp down the wires

Thit b h tr thi cng mngPatch Panel


92/538

92

Patch Panel

Thit b h tr thi cng mngWiring block


93/538

93

Wiring block


94/538

94

CHNG 4


95/538

95

ROUTER (bnh tuyn) Chc nng v phn loi Router Wan v Router

Cc thnh phn ca Router Khi ng Router

Mt s lnh c bn Cu hnh cho Router

Chc nng v phn loiCh


96/538

96

Chc nng Hot ng tng Network. Phn cch cc mng thnh cc segment ringbit:

Gim ng Gim broadcast Bo mt

Kt ni cc mng my tnh cch xa nhau

qua cc ng truyn thng nhin thoi,ISDN, T1, X25

Chc nng v phn loiPh l i


97/538

97

Phn loi

Fix configuration routerRemote

access

Low-end

router Multiprotocolrouter

Multiportserialrouter

Router/hub

Cisco 2509Cisco 2510Cisco 2511Cisco 2512AS5xxx

Cisco 500-CS

Cisco 7xxCisco 8xxCisco 100x

Cisco 2501Cisco 2502Cisco 2503Cisco 2504Cisco 2513Cisco 2514Cisco 2515

Cisco 2520Cisco 2521Cisco 2522Cisco 2523

Cisco 2505Cisco 2506Cisco 2507Cisco 2508Cisco 2516Cisco 2518

Cisco 2524Cisco 2525Cisco 160xCisco 17xxCisco 26xxCisco 36xxCisco 4xxx

Cisco 7xxx

Modular

router

Phn loi router ca Cisco

Chc nng v phn loiSeries Cisco Router


98/538

98

Series Cisco Router

Chc nng v phn loiSeries Cisco Router Cisco 800 Series Router


99/538

99

Series Cisco Router - Cisco 800 Series Router

Cisco 800 Series lgii php l tngcho cc kt ni

Internet an ton vcc kt ni mngcho cc vn phngnh hoc nhngngi lm vic txa (teleworkers).

Chc nng v phn loiSeries Cisco Router - Cisco 800 Series Router


100/538

100


Bn cnh tnh d trin khai v cc tnh nng qun

l tp trung, cc thit bnh tuyn truy nhpthuc h Cisco 800 vi cc dch v tch hp cungcp nhng tnh nng nh:

An ninh mng tch hp Mt kt ni mng WAN, vi a la chn Bn cng chuyn mch 10/100 Mbps c qunl C ti 10 ng hm VPN H tr cc tiu chun mng LAN v tuyn802.11b v 802.11g

Chc nng v phn loiSeries Cisco Router - Cisco 800 Series Router


101/538

101


Chc nng v phn loiSeries Cisco Router - Cisco 1800 Series Routers


102/538

102

Series Cisco Router Cisco 1800 Series Routers

An ninh mng c tch

hp. H thng qun l thit ban ninh mng v thit b

nh tuyn (SDM) ngin ha tc v qun l. C ti 2 cng nh tuyntch hp tc 10/100Mbps. H tr cc tiu chunmng LAN khng dy

802.11a/b/g



103/538

103


Cc dng thit b cnh (1801, 1802, 1803, 1811,

1812): Tc truy nhp ln n tc bng rng 8 cng chuyn mch tch hp tc 10/100 Mbpsvi ty chn v cp ngun qua mng Ethernet (PoE),

cung cp ngun DC n cc thit b mng nhccmy in thoi IP Ln ti 50 ng hm VPN

Thit b dng 1841 c cu trc m un, cng vi: Tc c th ln ti tc T1/E1 4 cng chuyn mch tch hp tc 10/100 Mbps 800 ng hm VPN



104/538

104


Chc nng v phn loi

Series Cisco Router - Cisco 2800 Series Routers


105/538

105


An ninh mng tch hp Mt thit b c cu trc mun vi mt di rt rng ccty chn v giao din C ti 2 cng nh tuyn tch

hp tc 10/100/1000 Mbps C ti 64 cng chuyn mchtc 10/100 Mbps vi tychn v cp ngun qua mng

Ethernet (PoE), cp ngunDC n cc thit b mng nhl my in thoi IP C ti 1500 ng hm VPN


106/538

Chc nng v phn loiSeries Cisco Router - Cisco 3600 Series Multiservice

Platforms


107/538

107

Platforms

L dng sn phm dngmodular, multiservice access

platforms cho cc vn phngtrung bnh v ln hoc ccISP loi nh. C hn 70 chn la

modular interfaces. Cisco 3600 cung cp ccgii php cho data, voicevideo, hybrid dial access,virtual private networks(VPNs), v multiprotocoldata routing.

Chc nng v phn loiSeries Cisco Router - Cisco 3700 Series Multiservice

Access Routers


108/538

108

Cho php cc tnh nng v

module hon ton mi v mnhm hn, nhiu kt ni hn. Khi sdng module 16- or 36-port EtherSwitch, Cisco 3700

Series tr thnh mt thit b tchhp c routing v low-densityswitching. C thh tr internal inlinepower cho cc EtherSwitchports, to nn mt platform duynht cho gii php IP telephony.



109/538

109

An ninh mng tch hp C ti 2 cng nh tuyn tchhp tc 10/100/1000 Mbps C ti 112 cng chuyn mch10/100 Mbps vi ty chn vcp ngun qua mng Ethernet(PoE), cp ngun DC n

cc thit b mng nhmyin thoi IP C ti 2500 ng hm VPN



110/538

110



111/538

111

Gom lu lng bng rng: ln ti 16,000 phin PPP trn mt

khung my Chuyn mch nhn a giao thc (MPLS): La chn hng ucho trin khai bin mng ca nh cung cp dch v Mng ring o An ninh IP (IPsec): nh c ti 5000 ng hm

trm mt khung my. Tch hp thoi, d liu v video. Thit km un: din tch t my 3RU vi mt di rng ccgiao din linh hot c tnh m un (tDS0 n OC-3).

Tnh linh hot: h tr Fast Ethernet, Gigabit Ethernet, Packettrn nn SONET v nhiu tnh nng khc.



112/538

112



113/538

113

Cc tnh nng quan trng: Hiu nng cao vi tc ln n 720 Gbps trn mt khung my hocdung lng 40 Gbps trn mi khe cm Mt la chn v kch thc c xy dng theo mc ch hoc dnh cho kh dng cao Thit kI-Flex ca Cisco: Mt h sn phm v b giao tip vi cng c

chia s (SPAs) v cc b vi x l giao din SPA (SIPs) vi kh nng kimsot cm nhn v cc dch v thoi, video v d liu Kim sot tip nhn cuc gi Video tch hp vi cm nhn v cht lnghnh nh sng to dnh cho c pht thanh truyn hnh qung b v video

theo yu cu (VoD) Cng dch v thng minh, cung cp s lng thu bao nh c v khnng nhn bit ng dng vi tnh nng xc nh a chiu v cc chnh schiu khin



114/538

114

Cc ng dng: Mng Ethernet ca nh khai thc: gom lu lng tccdch v ca doanh nghip v ca ngi tiu dng Bin mng dch v Ethernet: cc dch v IP c c nhn

ha Mng v tuyn hnh li v hi t cc dch v di ng nh tuyn bin mng IP/MPLS ca nh cung cp dch v

Gom lu lng mng WAN doanh nghip nh tuyn mng li trong tr s ca doanh nghip

WAN v RouterKt ni WAN


115/538

115



116/538

116



117/538

117

DTE (DataTerminalEquipment): thitb d liu u cui.

DCE (Data Circuit-terminalEquipment): thitbu cui mch

d liu, thng pha nh cung cpdch v, c th lmodem hoc

CSU/DSU.



118/538

118

WAN v RouterCc loi u cp kt ni trong mng WAN


119/538

119

WAN v RouterCc loi u cp DCE


120/538

120

WAN v RouterKiu kt ni WAN


121/538

121

WAN v Router

nh tuyn trong mng WAN


122/538

122

Cc thnh phn ca Router

Series 2600 router


123/538

123



124/538

124


Cc thnh phn ca RouterSeries 2600 router


125/538

125



126/538

126



127/538

127


Kt ni cng Auxiliary vi Modem


128/538

128


Kt ni Console vi my tnh


129/538

129




130/538

130




131/538

131



132/538

132

p


CPU, RAM, ROM


133/538

133

CPU: n v x l trung tm.

RAM (DRAM - Dynamic Random Access Memory) Lu bng nh tuyn v bng ARP. Duy tr hng i v vng nhm cho cc gi d liu.

Cung cp b nh tm thi cho tp tin cu hnh ca router. Thng tin trn DRAM s mt i khi b ngt in.

ROM (Read - Only Memory) Lu gichng trnh tkim tra khi khi ng(POST Power-on Self Test). Lu chng trnh bootstrap v hiu hnh c bn.


NVRAM, FLASH MEMORY NVRAM (Non-volative Random-access


134/538

134

NVRAM (Non-volative Random-access

Memory) Lu gitp tin cu hnh khi ng ca router. Ni dung NVRAM khng mt i khi b tt in.

Flash Memory Lu hiu hnh IOS. C thcp nht. Ni dung vn c lu gikhi router b ngt

in. C th lu nhiu phin bn IOS khc nhau trn

flash. L loi ROM xo v lp trnh c (EPROM).


Cc cng giao tipCc cng giao tip: 3 loi


135/538

135

Cc cng giao tip: 3 loi LAN: Cng Ethernet hoc Token Ring. C th

gn cnh trn router hoc di dng cardri.

WAN: Cng Serial hoc ISDN. C thgn cnh hoc di dng card ri.

Console/AUX: l cng ni tip, thng dngkt ni vi my tnh thng qua cng COMhoc modem khi cu hnh cho router.

Khi ng Router

Cc ch giao tip vi ngi dng


136/538

136

Phn mm IOS ca Cisco sdng giao din dng lnh command-lineinterface (CLI) lm giao tip truyn thng gia ngi dng v thit b.

C 3 phng php truy cp chnh n thit b: Console AUX port (modem)

Telnet

Khi ng Router

Cc ch giao tip vi ngi dng


137/538

137

Khi ng Router

Tn tp tin hiu hnh ca Cisco Router


138/538

138

Khi ng Router

Tn tp tin hiu hnh ca Cisco Router


139/538

139

Khi ng RouterTn tp tin hiu hnh ca Cisco Router


140/538

140

Khi ng RouterXem phin bn hiu hnh


141/538

141

Khi ng RouterXem phin bn hiu hnh


142/538

142

Khi ng RouterCc bc khi ng


143/538

143

Khi ng RouterCc ch thn LET trn Router


144/538

144

ON: An interface LED indicates the activity of the correspondinginterface.

OFF: If an LED is off when the interface is active and the interface is

correctly connected, a problem may be indicated. ALWAYS ON: If an interface is extremely busy, its LED will always be

on. The green OK LED to the right of the AUX port will be on after the

system initializes correctly

Khi ng RouterCh ci t


145/538

145


146/538

Khi ng RouterMn hnh khi ng


147/538

147


148/538

Mt s lnh c bnThng bo li ti giao din dng lnh


149/538

149

Mt s lnh c bnLnh ?


150/538

150

Mt s lnh c bnLnh ?


151/538

151


152/538

Mt s lnh c bnXem history


153/538

153

Mt s lnh c bnLnh show version


154/538

154

Mt s lnh c bnLnh show version


155/538

155

Cu hnh cho RouterThit lp phin kt ni bng Hyper Terminal

Router


156/538

156

Rollover cable

Console port

Com1 or Com2 serial port

Terminal or a

PC withterminal

emulation

software

Router

Cu hnh cho RouterThit lp phin kt ni bng Hyper Terminal

Kt ni thit bucui (PC) vo cng


157/538

157

( ) g

Console trn routerbng cp rollover vb chuyn i RJ45-DB9 hoc RJ45-DB25.

Cu hnh thit bucui hoc cu hnhphn mm m phngtrn PC vi cc thngs: 9600 baud, 8 databits, 1 stop bit, no flowcontrol.

Cu hnh cho RouterCc ch giao tip dng lnh


158/538

158

Cu hnh cho Routert tn cho Router


159/538

159

Cu hnh cho Routert mt khu cho Router


160/538

160

Cu hnh cho RouterKim tra bng cc lnh Show

Show interface: hin th trng thi cc cng giao tip


161/538

161

Show host: hin th danh sch tn v a ch tng ng Show users: hin th cc users ang kt ni vo router

Show flash: hin th thng tin b nh flash v IOS

Show ARP: hin th bng ARP trn router Show protocol: hin th trng thi ton cc v trng thi

ca cc cng giao tip c cu hnh giao thc lp 3

Show start: hin th tp tin cu hnh lu trong NVRAM

Show run: hin th tp tin cu hnh trn RAM

Cu hnh cho RouterCu hnh cho cng giao tip


162/538

162

Cu hnh cho RouterCu hnh cho cng giao tip

Router#conf i g tRouter(config)#i nt er f ace ser i al 0/ 1


163/538

163

Router(config-if)#i p addr ess 200. 100. 50. 75 255. 255. 255. 240Router(config-if)#cl ock r at e 56000 (required for serial DCE only)Router(config-if)#no shut downRouter(config-if)#exi tRouter(config)#i nt f 0/ 0Router(config-if)#i p addr ess 150. 100. 50. 25 255. 255. 255. 0Router(config-if)#no shut downRouter(config-if)#exi tRouter(config)#exi t

Router#

On older routers, Serial 0/1 would be just Serial 1 and f0/0 would be e0.

s = serial e = Ethernet f = fast Ethernet

Cu hnh cho RouterCu hnh cho cng Serial


164/538

164

Cu hnh cho RouterCu hnh cho cng Ethernet v FastEthernet


165/538

165

Cu hnh cho RouterPhn gii tn my


166/538

166

Cu hnh cho RouterTFTP


167/538

167

Cu hnh cho RouterLu h thng file IOS v tp tin cu hnh


168/538

168

Cu hnh cho RouterLu h thng file IOS v tp tin cu hnh


169/538

169

Cu hnh cho RouterLu file IOS


170/538

170

Cu hnh cho RouterLu tp tin cu hnh


171/538

171

Cu hnh cho RouterS tng qut


172/538

172

CHNG 5


173/538

173

SWITCH (b chuyn mch)

1. Cc khi nim v chuyn mch


174/538

174

2. Thit kmng LAN3. Cu hnh Switch4. Giao thc Spanning Tree5. VLANs v VTP

Cc khi nim v chuyn mchMng LAN ngy nay


175/538

175

Cc khi nim v chuyn mchChc nng hot ng theo lp ca cc thit b mng


176/538

176

Cc khi nim v chuyn mchChc nng hot ng theo lp ca cc thit b mng

(routing)


177/538

177

Cc khi nim v chuyn mchng xy ra trong mng


178/538

178

Cc khi nim v chuyn mchKt ni user bng Hub


179/538

179

Cc khi nim v chuyn mchKt ni user bng Bridge


180/538

180

Cc khi nim v chuyn mchLayer 2 Bridging (Bc cu lp 2)

Ethernet l mt mi

trng chia s ch mtd th t


181/538

181

trng chia s, ch mtnode c thtruyn sliu vo mt thi im

Tng s lng host trn

mt segment, xc sutng tng, a nkt qu c nhiu hotng truyn li hn.

Gii php: chia segmentln thnh nhiu segmentnh.

Bngbccu

Cc khi nim v chuyn mchKt ni user bng Switch


182/538

182

Cc khi nim v chuyn mchLayer 2 Switching (chuyn mch lp 2)

Mt bridge ch c haiport v chia mt minng thnh hai


183/538

183

ng thnh haiphn.

Bridge hot ng datrn a ch MAC vkhng nh hng na ch lp 3. Bridge

chia min ng chkhng nh hngn min qung b.

Cc khi nim v chuyn mchLayer 2 Switching

Mt Switch v c bn l mt bridge nhiu port, n thitlp ng v duy tr mt bng CAM (Content

Addressable Memory) lu tr tt c thng tin MAC choi t


184/538

184

Addressable Memory) lu trtt c thng tin MAC chomi port.

Khi nhn c gi tin, Switch s kim tra a ch ngunca gi tin c trong bng MAC cha. Nu cha, ns thm a ch MAC ny vo trong bng MAC.

Tip theo Switch s kim tra a chch ca gi tin ctrong bng MAC cha. Nu cha c th n s gi gi tin

i tt c cc cng (ngoi trcng gi gi tin vo).Ngc li Switch s kim tra port ch v port ngun,nu trng nhau th n s loi b gi tin, nu khc nhauth n s gi gi tin n port ch tng ng.

Cc khi nim v chuyn mchHot ng chuyn mch ca Switch


185/538

185

Cc khi nim v chuyn mchCc phng php chuyn mch

Store-and-Forward: Mt switch nhn ton bframe trc khi gi n ra ngoi port ch nhm

m bo frame nhn c l tt trc khi chuynra ngoi


186/538

186

m bo frame nhn c l tt trc khi chuynra ngoi.

Cut-Through: Mt switch c thbt u truyn

frame ngay khi nhn c MAC addr ch. Fragment-Free: Dung ha gia ch cut-

through v store-and-forward, c 64 byte u

tin, bao gm c frame header v bt u chuynmch trc khi ton b data v checksum cc.

Cc khi nim v chuyn mchCc phng php chuyn mch


187/538

187

Cc khi nim v chuyn mchChia s bng thng


188/538

188

Cc khi nim v chuyn mchCc yu ttc ng n hiu sut mng


189/538

189

Cc khi nim v chuyn mchCh song cng v bn song cng

Simplex Transmission Half-duplex Transmission Full-duplex Transmission


190/538

190

Full-duplex Transmission

Cc khi nim v chuyn mchLatency

Latency l thi gian tr tnh tthi immt frame bt u ri khi ngun cho nthi im frame i n ch Thi gian


191/538

191

thi im frame i n ch. Thi gianny b nh hng bi:

Trng truyn. Tr mch in t.

Tr phn mm.

Tr bi ni dung ca frame.

Cc khi nim v chuyn mchMin ng v min qung b

Min ng (Collision domain)

L cc segment mng vt l c kt ni ccc ng c th xy ra


192/538

192

g g cc ng c thxy ra.

Mi khi mt ng xy ra trn mng, tt c cc

hot ng truyn dng li trong mt khong thigian.

Thit b thuc lp 1 khng chia tch min ng

m ch m rng min ng . Thit b thuc lp 2 v 3 chia tch min ng

thnh cc min ng nh hn (sphn on

mng segmentation)


Min qung b (Broadcast domain)

Mt broadcast domain l mt nhm cc min


193/538

193

ng c kt ni bi cc thit b lp 2.

Cc broadcast nu qu mc c th lm gimhiu sut ca mng LAN.

Broadcast c kim sot bi thit b lp 3.Router c thphn chia cc broadcast domain.


Broadcast lp 2 Khi mt host cn truyn thng ti mt host trn mng, n

gi mt broadcast frame ti a ch MAC ch l0xFFFFFFFFFFFF


194/538

194

0xFFFFFFFFFFFF.

Stch ly lu lng broadcast c th lm trn ngp mng

v khng cn bng thng cho ng dng truyn s liu ->bo broadcast.

Cc my trm broadcast yu cu ARP khi cn nh v mta ch MAC khng c trong bng ARP.

Cc giao thc nh tuyn cng c thgy ra broadcast. Mi30 giy, RIPv1 dng broadcast truyn li ton b bngnh tuyn RIP n cc router khc.



195/538

195



196/538

196

Cc khi nim v chuyn mchPhn on mng LAN


197/538

197

Cc khi nim v chuyn mchPhn on mng vi Bridge


198/538

198

Cc khi nim v chuyn mchPhn on mng vi Switch


199/538

199

Cc khi nim v chuyn mchPhn on mng vi Switch

switch

lli i i


200/538

200

1111

2222

3333

4444

AbbreviatedMACaddresses

Collision Domains

Cc khi nim v chuyn mchPhn on mng vi Router


201/538

201

Cc khi nim v chuyn mchLayer 2 Broadcast


202/538

202

Cc khi nim v chuyn mchBroadcast Domain

Switch 1172.30.1.21

255.255.255.0


203/538

203

All Switched Network - Two Networks

y Two Subnets

y Several Collision Domains

y One per switch port

y One Broadcast Domain

172.30.2.10255.255.255.0

172.30.1.23255.255.255.0

Switch 2

172.30.1.25

255.255.255.0

172.30.2.14

255.255.255.0

172.30.1.27

255.255.255.0

172.30.2.16

255.255.255.0172.30.2.12255.255.255.0

ARP Request

Cc khi nim v chuyn mchBroadcast Domain


204/538

204

Thit kmng LAN

Cc mc tiu: Kh nng hot ng c Kh nng m rng Kh nng thch ng


205/538

205

Kh nng thch ng Kh nng qun l

Nhng iu cn quan tm: Chc nng v v trt server Pht hin ng Phn on mng Min qung b

Thit kmng LANV trt server


206/538

206

Thit kmng LANS mng theo lp OSI


207/538

207

Thit kmng LANS lun l


208/538

208

Enterprise servers sc t ti MainDistribution Facility (MDF).

Workgroup servers sc t tiIntermediate Distribution Facilities (IDFs)

Thit kmng LANS vt l


209/538

209

Thit kmng LANS vt l

MDF

IDF


210/538

210

Thit kmng LANSa ch


211/538

211

Thit kmng LANThit kLayer 1


212/538

212



213/538

213



214/538

214



215/538

215



216/538

216



217/538

217

Thit kmng LANM hnh thit kphn cp trong mng LAN va v ln

Tng truy cp: cung cp kt ni vo

h thng mng cho user. Tng phn phi: cung cp cc chnh


218/538

218

g p p g psch kt ni.

Tng trc chnh: cung cp svnchuyn ti u gia cc site.

Chc nng catng truy cp:

Chia s bngthng.



219/538

219

Chuyn mchbng thng.

Lc lp MAC. Microsegment


Cc dng Switch ca Ciscosdng tng truy cp


220/538

220

Catalyst 4000 Switch

Chc nng ca

tng phn phi: Xc nh min

qung b hay



221/538

221

qung b haymin multicast.

nh tuynVLAN.

Bo mt


Cc dngSwitch dng

tng phn phi: Catalyst 2926G.


222/538

222

Catalyst 5000. Catalyst 6000.

Catalyst 2926G Switch


Chc nng ca

tng trc chnh: Chuyn mch tc

cao.



223/538

223

cao.

C thsdngrouter ring bnngoi.

Khng cn tr giduy tr tc .


Cc dngSwitch dng

tng trcchnh:Catalyst 6500


224/538

224


Catalyst 6500. Catalyst 8500. IGX 8400.

Switch a dch v IGX 8400

Cu hnh SwitchCu to vt l

Switch l mt

my tnh cbit c:


225/538

225

CPU RAM Hiu hnh Ports

Cu hnh Switchn LED bo hiu trn switch


226/538

226


227/538


n RPS (Redundant power supply) Tt: module RPS khng ci t. Xanh: module RPS ang hot ng. Chp xanh (Flashing green): RPS kt ni

nhng khng hot ng v ang cp ngun cho


228/538

228

nhng khng hot ng v ang cp ngun cho

thit b khc. Vng cam (Amber): RPS ci t nhng khng

hot ng. Chp vng cam (Flashing Amber): ngun ni b

hng v RPS ang cung cp ngun cho switch.


n STAT: Tt: khng c link. Xanh: link c, khng kch hot. Chp xanh: c link, c d liu truyn.


229/538

229

p , y

Xen k Xanh v Vng cam: link c li. Vng cam (Amber): cng khng chuyn

tip do khng c kch hot v l do qun

tr (vi phm a ch, b kha do SpanningTree Protocol).


n theo di ti(Bandwidth utilization UTL LED):

Xanh: hin trang ang dng ti. Vng cam: sti cc i ang dng.

n Full duplex (FDUP LED on):


230/538

230

n Full duplex (FDUP LED on):

Xanh: cng c cu hnh full-duplex. Tt: cng c cu hnh half-duplex.

n 100:

Tt: ang hot ng 10 Mbps. Xanh: ang hot ng 100 Mbps.

Cu hnh SwitchKt ni switch n my tnh


231/538

231



232/538

232

Cu hnh SwitchCi t thng scho Hyper Terminal


233/538

233

Cu hnh SwitchQu trnh khi ng ca switch


234/538

234

Cu hnh SwitchQu trnh khi ng ca switch


235/538

235



236/538

236

Cu hnh SwitchGiao din dng lnh (CLI) ca switch


237/538

237

Cu hnh SwitchMt sthao tc trn dng lnh ca switch


238/538

238

Cu hnh SwitchMt slnh Show trn switch


239/538

239

Cu hnh SwitchMt slnh Show trn switch


240/538

240

Cu hnh SwitchChuyn i Mode


241/538

241

Cu hnh SwitchXem phin bn IOS


242/538

242

Cu hnh SwitchKim tra cu hnh mc nh ca switch


243/538

243

Cu hnh Switchc im mc nh ca cc port trn switch


244/538

244

Cu hnh SwitchQun l bng a ch MAC


245/538

245

Cu hnh SwitchQun l bng a ch MAC


246/538

246

Cu hnh SwitchCu hnh mc nh ca VLAN


247/538

247

Cu hnh SwitchNi dung mc nh ca flash


248/538

248

Cu hnh SwitchXo mi cu hnh c trn switch


249/538

249

Cu hnh Switcht tn v mt khu cho ng console v vty


250/538

250

Cu hnh SwitchCu hnh tc v ch song cng cho port


251/538

251

Cu hnh SwitchCu hnh a ch IP


252/538

252

Cu hnh SwitchCu hnh Default Gateway


253/538

253

Cu hnh SwitchCopy IOS tTFTP Server


254/538

254

Giao thc Spanning-TreeCu trc dphng (Redundancy)


255/538

255

One Bridge Redundant Bridges

Giao thc Spanning-TreeCu trc chuyn mch dphng


256/538

256

Giao thc Spanning-TreeTrn bo qung b (Broadcast Storm)


257/538

257

Giao thc Spanning-TreeTruyn nhiu lt frame


258/538

258

Giao thc Spanning-TreeC s dliu MAC khng n nh


259/538

259

Giao thc Spanning-TreeCu trc dphng v Spanning-Tree


260/538

260



261/538

261



262/538

262

Giao thc Spanning-TreeGi tr chi ph mc nh tng ng vi tc ca ng kt ni


263/538

263

Giao thc Spanning-TreeKt qu tnh ton ca giao thc Spanning-Tree


264/538

264

Giao thc Spanning-TreeKt qu tnh ton ca giao thc Spanning-Tree


265/538

265

Giao thc Spanning-TreeChn Root Bridge

ALSwi t ch#show spanni ng- t r ee

VLAN0001

Spanni ng t r ee enabl ed pr ot ocol i eee

Root I D Pr i or i t y 32768

Addr ess 0003. e334. 6640

Cost 19

Por t 23 ( Fast Et her net 0/ 23)

Hel l o Ti me 2 sec Max Age 20 sec For war d Del ay 15 sec

Br i dge I D Pr i or i t y 32769 ( pr i or i t y 32768 sys- i d- ext 1)Addr ess 000b f c28 d400


266/538

266

Addr ess 000b. f c28. d400


Agi ng Ti me 300

I nt er f ace Por t I D Desi gnat ed Por t I D

Name Pr i o. Nbr Cost St s Cost Br i dge I D Pr i o. Nbr

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Fa0/ 23 128. 23 19 FWD 0 32768 0003. e334. 6640 128. 25

ALSwi t ch#

Giao thc Spanning-TreeChn Root Porte

2950#show spanni ng- t r ee

VLAN0001

Spanni ng t r ee enabl ed pr ot ocol i eee

Root I D Pr i or i t y 32768Addr ess 0003. e334. 6640

Cost 19

Por t 23 ( Fast Et her net 0/ 23)



267/538

267

Br i dge I D Pr i or i t y 32769 ( pr i or i t y 32768 sys- i d- ext 1)

Addr ess 000b. f c28. d400


Agi ng Ti me 300

I nt er f ace Por t I D Desi gnat ed Por t I D

Name Pr i o. Nbr Cost St s Cost Br i dge I D Pr i o. Nbr

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Fa0/ 23 128. 23 19 FWD 0 32768 0003. e334. 6640 128. 2

Giao thc Spanning-TreeTrng thi ca cc port trong Spanning-Tree


268/538

268

Giao thc Spanning-TreePortFast


269/538

269

Giao thc Spanning-Treecu hnh PortFast


270/538

270

Giao thc Spanning-TreeHot ng ca giao thc Spanning-Tree


271/538

271



272/538

272



273/538

273

Giao thc Spanning-TreeTnh ton li Spanning-Tree


274/538

274

VLANsPhn on mng LAN truyn thng v theo VLAN


275/538

275

VLANsPhn on mng LAN theo VLAN


276/538

276

VLANsMin qung b vi VLAN

1) WithoutVLANs

2) With

VLANs

10.0.0.0/8 10.1.0.0/16

10.2.0.0/16

10.3.0.0/16


277/538

277

10.3.0.0/16

VLANsMin qung b vi VLAN


278/538

278

VLANsVLAN cnh


279/538

279

VLANsVLAN ng


280/538

280

VLANsChia VLAN theo port


281/538

281

VLANsch li ca VLAN

Di chuyn my trm trong LAN d dng.

Thm my trm vo LAN d dng. Thay i cu hnh LAN d dng. Kim sot giao thng mng d dng. Gia tng kh nng bo mt.


282/538

282

Gia tng kh nng bo mt.

VLANsCc loi VLAN


283/538

283

VLANsCc loi VLAN


284/538

284

VLANsCu hnh VLAN cnh S lng VLAN ti a ph thuc vo switch. VLAN 1 l VLAN mc nh. Switch phi ch VTP server to, thm

hoc xa VLAN. Cu hnh VLAN:

Switch#vlan database Switch(vlan)#vlan vlan_number Switch(vlan)#exit


285/538

285

( )

Gn port vo VLAN:

Switch(config)#interface fastethernet 0/9 Switch(config-if)#switchport access vlan vlan_number

VLANsCu hnh VLAN cnh

Assign ports to the VLAN Switch(config)#interface fastethernet 0/9

vlan10

Defaultvlan 1

Defaultvlan 1


286/538

286

Switch(config-if)#switchport access vlan 10

access Denotes this port as an access port and not a trunk link (later)


vlan

300Default

vlan 1

Default

vlan 1


287/538

287


SydneySwitch(config)#interface fastethernet 0/5 SydneySwitch(config-if)#switchport access vlan 2 SydneySwitch(config-if)#exit

vlan 2


288/538

288

SydneySwitch(config)#interface fastethernet 0/6 SydneySwitch(config-if)#switchport access vlan 2 SydneySwitch(config-if)#exit SydneySwitch(config)#interface fastethernet 0/7 SydneySwitch(config-if)#switchport access vlan 2



289/538

289



290/538

290



291/538

291

VLANsKim tra cu hnh VLAN


292/538

292

VLANsKim tra cu hnh VLAN


293/538

293

VLANsLu cu hnh VLAN


294/538

294

VLANsXo VLAN


295/538

295

VTP (VLAN Trunking Protocol)VLANs


296/538

296

VTP (VLAN Trunking Protocol)Trunking operation


297/538

297



298/538

298



299/538

299

VTPVLANs v Trunking

Trunk Link

Non-Trunk Links

Non-Trunk Links


300/538

300

ng Trunk l mt kt ni im ni im gia mt hay nhiu

interface ca switch v cc thit b router hoc switch khc. 802.1Q ISL

VTPCu hnh Trunking

Lu : Trnnhiu switches,lnh switchporttrunk

encapsulation

cn phi cthc hin trclnh switchportmode trunk.


301/538

301

VTPCu hnh Trunking


302/538

302

Swi t ch( conf i g- i f ) swi t chpor t t r unk encapsul at i on [ dot 1q| i sl ]

VTPCu hnh Trunking


303/538

303

VTPTnh nng ca VTP


304/538

304

VTPC chca VTP


305/538

305

VTPHot ng ca VTP


306/538

306

VTPVTP Pruning


307/538

307

VTPCu hnh VTP


308/538

308

VTPCu hnh VTP


309/538

309

VTPCu hnh VTP


310/538

310

VTPCu hnh VTP


311/538

311

VTPCu hnh VTP


312/538

312

VTPCu hnh 802.1Q Trungking


313/538

313

VTPCu hnh VTP Kim tra


314/538

314



315/538

315



316/538

316

CHNG 6


317/538

317

CC GIAO THC NH TUYN

Gii thiu vnh tuyn

nh tuyn tnh nh tuyn ng

Theo vect khong cch: RIP Theo trng thi ng lin kt: OSPF


318/538

318

Gii thiu vnh tuyn

Router

Router

Router

Router Router

What is

an optimal

route ?

What is

an optimal

route ?

Switch

Switch

Routing Protocol


319/538

319

Gii thiu vnh tuyn


320/538

320

nh tuyn tnhHot ng ca nh tuyn tnh Ngi qun tr cu hnh cc ng cnh cho router bnglnh ip route. Router ci t cc ng i ny vo bng nh tuyn. Gi d liu c nh tuyn theo cc ng cnh ny. Lu tp tin cu hnh ang hot ng thnh tp tin cu hnh

khi ng bng lnh copy running-config startup-config.


321/538

321

nh tuyn tnhHot ng ca nh tuyn tnh

Chstincy

0

1


322/538

322

cy1

nh tuyn tnhCu hnh ng mc nh cho router chuyn gi i

ip route 0.0.0.0 0.0.0.0 [next-hop-address| outgoing interface]


323/538

323

nh tuyn tnhKim tra cu hnh ng cnh vi lnh show ip route


324/538

324

nh tuyn tnhX l scvi lnhpingv traceroute


325/538

325

nh tuyn tnhX l scvi lnhpingv traceroute

Ping v Traceroute c sdng kim tra kt ni. Nhng trc khi sdng lnh ping v

traceroute, nn kim tra trng thica kt ni c ang up hay downbng lnh: show interface show interface s0


326/538

326

show ip interface brief

nh tuyn theo vect khong cchc im chung

Truyn bn sao ca bng nhtuyn trouter ny sang

Hng xmv ch lhng xm


327/538

327

y y g

router khc theo nh k. Sdng thut ton Bellman-

Ford.


2 Hops

1 Hop1 Hop

Destination

192.16.1.0

192.16.5.0

192.16.7.0

Distance

1

1

2

Routing table contains the addressesof destinations and the distance

of the way to this destination.

Flow of routing

Flow of routing

Router B Router CRouter A Router D


328/538

328

Flow of routing

information

Flow of routing

information192.16.1.0192.16.1.0 192.16.7.0192.16.7.0

192.16.5.0192.16.5.0

nh tuyn theo vect khong cchCp nht thng tin nh tuyn

Qu trnh cpnht bngnh tuyn

Router A gi rabng nh

tuyn cpnht

Qu trnh cpnht bng nhtuyn


329/538

329

Bng inh tuync cp nhtnh k

nh tuyn theo vect khong cchLi nh tuyn lp


330/538

330

nh tuyn theo vect khong cchnh ngha gi tr ti a


331/538

331

nh tuyn theo vect khong cchTrnh nh tuyn lp vng bng split horizone


332/538

332

nh tuyn theo vect khong cchTrnh nh tuyn lp vng bng Route poisoning


333/538

333

nh tuyn theo vect khong cchTrnh nh tuyn lp vng bng c chcp nht tc thi


334/538

334

nh tuyn theo vect khong cchTrnh nh tuyn lp vng bng thi gian holddown


335/538

335


Copy bng nh tuyn cho router lng ging. Cp nht nh k. RIPv1 v RIPv2 sdng s lng hop lm thng

snh tuyn. Mi router nhn h thng mng theo schi phi

ca cc router lng ging. Hi t chm. D b lp vng. D cu hnh v d qun tr.


336/538

336

Tn nhiu bng thng.

RIP (Routing Information Protocol)Tin trnh ca RIP

c m t trong RFC 1058 v Tiu chun InternetSTD 56. C 2 phin bn l RIPv1 v RIPv2.

RIPv2 c c chxc minh gia cc router khi cpnht bo mt cho bng nh tuyn v c h trthm VLSM (Variable Length Subnet Masking).

Thng snh tuyn l s lng hop. S lng hopti a cho mi ng l 15. Chu k cp nht mcnh l 30 giy.

C split horizon v thi gian holddown trnh cp


337/538

337

nht thng tin nh tuyn khng chnh xc.

RIPCu hnh RIP


338/538

338

RIPSdng lnh ip classless


339/538

339

RIPMt s lnh tng tc hi t khi cu hnh RIP Tt c chsplit horizon:

GAD(config-if)#no ip split-horizon

Thay i thi gian holddown (ngm nh 180 giy): Router(config-router)#timer basic update invalid

holddown flush [sleeptime]

Thay i chu k cp nht: GAD(config-router)#update-timer seconds

Khng cho php gi thng tin cp nht nh tuynra mt cng no :


340/538

340

GAD(config-router)#passive-interface Fa0/0

RIPKim tra cu hnh RIP


341/538

341

RIPKim tra cu hnh RIP


342/538

342

RIPX l scv hot ng cp nht ca RIP


343/538

343



344/538

344Subnet khng lin tc



345/538

345Trng Subnet

RIPChia ti vi RIP


346/538

346

Ngm nh 4 ng, ti a 6 ng.

Ch quan tm n shop.

RIPChia ti cho nhiu ng

Chi ti th i d li


347/538

347

Administrative distance: ch stin cy Chia ti theo gi dliu

Chia ti theo a chch

RIPTch hp ng cnh vi RIP


348/538

348

RIPTch hp ng cnh vi RIP


349/538

349

nh tuyn theo trng thi ng lin ktc im chung

Sdng ng ngn nht. Ch cp nht khi c skin xy ra. Gi gi thng tin v trng thi cc ng lin kt cho tt

c cc router trong mng. Mi router c ci nhn y v cu trc h thng mng. Hi t nhanh.

Khng b lp vng. Cu hnh phc tp hn. i hi nhiu b nh.

Tn t bng thng


350/538

350

Tn t bng thng.


Cc router trao i thng tin nh tuyn xy dng mt bn y v cu trc hthng mng. Router ttnh ton v chn ng i tt nht n mng ch a lnbng nh tuyn.


351/538

351

bng nh tuyn. Khi cc router c hi t th mi thay i cu trc mng sc cp nht bng mt

gi thng tin nh chkhng phi nguyn bng nh tuyn.


Router A Router C

Router B Router D

Router E2

2

1

1

4

4

2

2

4

4

1

1

B - 2

C - 1

B - 2

C - 1A - 2

D - 4

A - 2

D - 4A - 1

D - 2

E - 4

A - 1

D - 2

E - 4

C - 2

B - 4

E - 1

C - 2

B - 4

E - 1

C - 4

D - 1

C - 4

D - 1

Router A Router B Router C Router D Router E

Link State Database

A

A B

BC

C D

D

Link State Routing (LSR)


352/538

352

CB

D

A D

EC

D A

E B

E C B

A

OSPF (OPEN SHORTEST PATH FIRST)Tng qut v OSPF

OSPF ctrin khai datheo cc chun

m. Tt hn RIP. C kh nng

m rng. C thcu hnh

n vng sdng cho ccmng nh


353/538

353

mng nh.

OSPF (OPEN SHORTEST PATH FIRST)Mt sthut ngca OSPF

Link: mt cng trnrouter. Link-state: trng thi

ca mt ng lin ktgia 2 router.

Topological database:danh sch cc thng tinv mi ng lin kttrong vng.

Area: tp hp cc mngv cc router c cngch sdanh nh vng.Mi router trong 1 vngch xy dng c s dliu v trng thi ng

lin kt trong vng .


354/538

354

lin kt trong vng .


Cost: gi tr chi pht cho mt nglin kt (da trnbng thng hoc tc

ca ng lin kt). Routing table: bng

nh tuyn l kt qu

chn ng ca thutton chn ng datrn c s d liu vtrng thi ng linkt.


355/538

355


Adjacency database:danh sch cc routerlng ging c miquan h hai chiu.Mi router c mtdanh sch khc nhau.

DR (DesignatedRouter) v BDR(Backup Designated

Router) l router ctt c cc router khctrong cng mng bura lm i din. Mimng s c mt DR

v BDR ring.


356/538

356

v BDR ring.

OSPF (OPEN SHORTEST PATH FIRST)Thut ton tm ng ngn nht


357/538

357

OSPF (OPEN SHORTEST PATH FIRST)Cc loi mng OSPF

OSPF nhn bit 3loi mng:

Mng qung b

a truy cp. Mng im ni

im.

Mng khngqung b a truycp (NBMA Nonbroadcast


358/538

358

Nonbroadcastmultiaccess).

OSPF (OPEN SHORTEST PATH FIRST)Cc loi mng OSPF


359/538

359

OSPF (OPEN SHORTEST PATH FIRST)Cc kiu gi tin OSPF


360/538

360

OSPF (OPEN SHORTEST PATH FIRST)DR v BDR nhn cc gi LSAs

Router vi Router IDcao nht c chnlm DR, ktip l BDR.

Cc router ch githng tin v trng thing lin kt cho DR.

DR s gi thng tinny cho cc routertrong mng bng ach multicast 224.0.0.5.


361/538

361

OSPF (OPEN SHORTEST PATH FIRST)Phn header ca gi OSPF v OSPF Hello


362/538

362

OSPF (OPEN SHORTEST PATH FIRST)Router ID

Router ID l mt s32 bit, c gi trduy nht, dng nhn dng router.

Mc nh Router ID c chn tach IP cao nht trong scc giao tip

ang hot ng trn router, ngoi trloopback interface hoc Router Priorityc cu hnh (mc nh l 1).


363/538

363

OSPF (OPEN SHORTEST PATH FIRST)Cc bc hot ng ca OSPF

Bc 1: pht hinrouter lng ging bnggiao thc OSPF Hello.

Bc 2: bu DR v

BDR(trong mng a truycp).

Bc 3: Mi router githng tin v trng thing lin kt trong

gi LSAs (Link-StateAdvertisements). Saukhi c s d liu vtrng thi ng linkt y , p dngthut ton SPF chnng tt nht a


364/538

364

ng tt nht avo bng nh tuyn.

OSPF (OPEN SHORTEST PATH FIRST)Cu hnh OSPF n vng

Khi ng nh tuyn OSPF:

Router(config)#router ospfprocess-id

Khai bo a ch mng cho OSPF:

Router(config-router)#networkaddress willcard-maskarea area-id


365/538

365

OSPF (OPEN SHORTEST PATH FIRST)Cu hnh OSPF n vng

R2

R1 R3

S0 S1

E0

S0

E0

S0

200.0.0.17

200.0.0.9

200.0.0.10 200.0.0.13

200.0.0.14

200.0.0.18 200.0.0.34255.255.255.240

255.255.255.252 255.255.255.252

255.255.255.224

200.0.0.33

R1#config tEnter configuration commands, one per line. End with CNTL/Z.R1(config)#router ospf 1R1(config-router)#network 200.0.0.16 0.0.0.15 area 0R1(config-router)#network 200.0.0. 8 0.0.0.3 area 0R1(config-router)#^Z

A B

R3#config tEnter configuration commands, one per line. End with CNTL/Z.R3(config)#router ospf 1R3(config-router)#network 200.0.0. 32 0.0.0.31 area 0R3(config-router)#network 200.0.0. 12 0.0.0.3 area 0R3(config-router)#^Z

32 - 63


366/538

36612 - 15

OSPF (OPEN SHORTEST PATH FIRST)Cu hnh a ch loopback cho OSPFTo cng loopback v t a ch IP:

Router(config)#interface loopbacknumber

Router(config-if)#ip address ip-address subnet-mask


367/538

367

OSPF (OPEN SHORTEST PATH FIRST)Cu hnh quyn u tin cho routerThay i gi tru tin cho OSPF:

Router(config-if)#ip ospf priority number

Router#show ip ospf interfacetype number

(0 255)


368/538

368

OSPF (OPEN SHORTEST PATH FIRST)Cu hnh quyn u tin cho router


369/538

369

OSPF (OPEN SHORTEST PATH FIRST)Thay i gi tr chi ph ca OSPFThay i gi tr chi ph cho OSPF:

Router(config)#interface serial 0/0

Router(config-if)#bandwidth 64


370/538

370

OSPF (OPEN SHORTEST PATH FIRST)OSPF thc hin qung b ng mc nhCu hnh ng mc nh cho router c cng kt ni ra ngoi:

Router(config)#ip route 0.0.0.0 0.0.0.0 [interface | next-hop address]

Router(config-router)#default-information originate


371/538

371

OSPF (OPEN SHORTEST PATH FIRST)Cc lnh showdng kim tra cu hnh OSPF


372/538

372



373/538

373


Rout erA# show i p r out e ospf

Codes: C - connect ed, S - st at i c, I - I GRP, R - RI P, M - mobi l e,B - BGP, D - EI GRP, EX - EI GRP ext er nal , O - OSPF,I A - OSPF i nt er ar ea, E1 - OSPF ext er nal t ype 1,

E2 - OSPF ext ernal t ype 2, E - EGP, i - I S- I S, L1 - I S- I Sl evel - 1, L2 - I S- I S l evel - 2, * - candi dat e def aul t

Gat eway of l ast r esor t i s not set10. 0. 0. 0 255. 255. 255. 0 i s subnet t ed, 2 subnet s

O 10. 2. 1. 0 [ 110/ 10] vi a 10. 64. 0. 2, 00: 00: 50, Et her net 0

Rout erB# show i p ospf nei ghbor

Nei ghbor I D Pr i St at e Dead Ti me Address I nt er f ace

10. 64. 1. 1 1 FULL/ BDR 00: 00: 31 10. 64. 1. 1 Et her net 010. 2. 1. 1 1 FULL/ - 00: 00: 38 10. 2. 1. 1 Ser i al 0


374/538

374

OSPF (OPEN SHORTEST PATH FIRST)Cc lnh clearv debugdng kim tra hot ng OSPF


375/538

375

CDP (Cisco Discovery Protocol)


376/538

376

377

CDP (Cisco Discovery Protocol)Show cdp ?


377/538

377

378

CDP (Cisco Discovery Protocol)Show cdp neighbors


378/538

378

379

CDP (Cisco Discovery Protocol)Show cdp entry


379/538

379

380

CDP (Cisco Discovery Protocol)Show cdp traffic


380/538

380

381

CHNG 7


381/538

381

382

Danh sch kim tra truy cp (ACL)Gii thiu


382/538

382

383


ACL l mt danh sch cc iu kin cp dng cho lu lng i qua mt cngca router. Danh sch ny cho bit loigi no c chp nhn hay b tchi.

ACL c sdng qun l lu lngmng v bo v truy cp ra hoc vo hthng mng.

ACL kim tra cc gi da vo a chngun v ch, giao thc, sport, hngdi chuyn ca gi quyt nh chuyn

gi i hay hy b gi.


383/538

383

384



384/538

38

385



385/538

386

Danh sch kim tra truy cp (ACL)Cng dng ca ACL

Gii hn lu lng mng tng hiusut hot ng ca mng. V d cm lu lng truyn Video.

Kim tra dng lu lng, quyt nh chophp hoc cm loi lu lng no ci qua.

V d lu lng email, telnet. Bo v truy cp.

Ch cho php user truy cp vo mt loi tp

tin no , vo vng mng no trong hthng.


386/538

387

Danh sch kim tra truy cp (ACL)Hot ng ca ACL


387/538

388

Danh sch kim tra truy cp (ACL)Phn loi

ACL c bn (1-99): thc hin kim tra a ch IP ngun ca gid liu.

ACL m rng (100-199): kim tra a ch ngun v ch ca gid liu, kim tra giao thc ln sport.

ACL t tn (Name): t phin bn Cisco IOS 11.2 tr i, chophp to ACL c bn v m rng theo tn thay v theo s.


388/538

389

Danh sch kim tra truy cp (ACL)To ACL c bn

C php lnh:

Router(config)#access-list access-list-number {deny | permit}

source [source-wildcard]..

Router(config-if)#{protocol} access-group access-list-number

{in | out}

Hy mt ACL:Router(config)#no access-list access-list-number


389/538

390



390/538

391



391/538

392



392/538

393



393/538

394

Danh sch kim tra truy cp (ACL)Mt snguyn tc c bn khi to ACL

Mt ACL cho mt giao thc trn mtchiu ca mt cng.

ACL c bn nn t v tr gn mng

ch nht. ACL m rng nn t v tr gn mng

ngun nht.

Cc cu lnh trong mt ACL sc kimtra tun tttrn xung cho n khi c

mt cu lnh c tho, nu khng thgi d liu cng s b tchi.


394/538

395

Danh sch kim tra truy cp (ACL)Mt snguyn tc c bn khi to ACL

C mt cu lnh tchi tuyt i nm n cuicng trong ACL.

Cc cu lnh trong ACL nn xp tchi tit ntng qut.

Trong mt cu lnh ACL, iu kin c kimtra trc ri mi kim tra ti vic cho php haytchi.

Nn sdng cng c son tho vn bn son trc cc cu lnh ACL. Dng lnh mi lun c thm vo cui danh

sch ACL. Lnh no access-list x s xa tan bACL x.


395/538

396

Danh sch kim tra truy cp (ACL)Wildcard mask


396/538

397


MASK (192.168.1.1) Matching IP0.0.0.0 (host) 192.168.1.1

0.0.0.255 192.168.1.0-255

0.0.255.255 192.168.0-255.0-255

0.255.255.255 192.0-255.0-255.0-255

255.255.255.255 0-255.0-255.0-255.0-255 (any)


397/538

398



398/538

399

Danh sch kim tra truy cp (ACL)Tkha Any v Host

Access-list 1 permit 200.0.0.9 0.0.0.0hay

permit host 200.0.0.9

Access-list 1 permit 0.0.0.0 255.255.255.255hay

permit any


399/538

400

Danh sch kim tra truy cp (ACL)Tkha Any v Host


400/538

401

Danh sch kim tra truy cp (ACL)To ACL m rng


401/538

402



402/538

403



403/538

404



404/538

405



405/538

406


S0

S0

E0 E0

A B

192.168.0.34 should be denied FTP of 192.168.0.18

On Router R1Config# Access-list 100 deny tcp 192.168.0.34 0.0.0.0

192.168.0.18 0.0.0.0 eq 21

Config# access-list 100 permit IP any any

Config#int s0Config-if# ip access-group 100 IN

192.168.0.18 should be denied website of 192.168.0.34

On Router R3Config# Access-list 100 deny tcp 192.168. 0.18 0.0.0.0 192.168.0.34

0.0.0.0 eq 80Config# access-list 100 permit IP any any

Config#int s0Config-if# ip access-group 100 IN

S1S0

192.168.0.17255.255.255.248

192.168.0.5255.255.255.252

192.168.0.6255.255.255.252

192.168.0.33

255.255.255.240

192.168.0.34

255.255.255.240

192.168.0.18255.255.255.248

192.168.0.9255.255.255.252

192.168.0.10255.255.255.252

7/29/2019

Bai Giang Mon Thiet Bi Mang - 9 Chuong

Documents

Transcript of Bai Giang Mon Thiet Bi Mang - 9 Chuong