It7370-En Switch v6 Ch04.Pptx

8/15/2019 It7370-En Switch v6 Ch04.Pptx

1/39

Chapter 41© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

S#I$C%v& Chapter 41

Chapter 4'

Implementing Inter()*A+o!ting

CCNP SWITCH: Implementing IP Switching


2/39

Chapter 42© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

Chapter 4 Objectives

▪-plain methods o/ inter()*A+ ro!ting.

▪Con/ig!re and veri/y inter()*A+ ro!ting in a *ayer 2

topology !sing m!ltilayer sitching.

▪-plain %C operation and con/ig!re %C.

▪

Con/ig!re and veri/y inter()*A+ ro!ting in a *ayer 2topology !sing C-("ased m!ltilayer sitching.


3/39


Describing

Inter-!"N#$%ting


4/39


Intr$&%cti$n t$ Inter-!"N #$%ting

)*A+s isolate tra//ic "y design.

Inter()*A+ ro!ter o/ some sort re5!ired.

Inter()*A+ ro!ting sho!ld occ!r in the distri"!tion layer.

6!ltilayer sitch is recommended to terminate )*A+s.


5/39


Inter-!"N #$%ting Opti$ns

-ternal ro!ter ith a separate inter/ace /or each )*A+.

-ternal ro!ter tr!n8ed to *ayer 2 sitch 9ro!ter(on(a(stic8:.

6!ltilayer sitch 9pict!red:.


6/39

Chapter 4&© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

Catal'st Switch !a'er ( Inter)aces

▪#$%te& p$rt: A p!re *ayer 3 inter/ace similar to a ro!tedport on a Cisco I;S ro!ter.

▪Switch virt%al inter)ace *SI+: A virt!al )*A+ inter/ace /or

inter()*A+ ro!ting. In other ords, S)Is are virt!al ro!ted

)*A+ inter/aces.▪,ri&ge virt%al inter)ace *,I+: A *ayer 3 virt!al "ridging

inter/ace.


7/39Chapter 4

7© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

Catal'st Switch !a'er ( Inter)aces

Typ

e ofSwit ch

Inter-

VLANRouti ngCapability

Inter-VLAN

RoutingSolution

Cat alyst29!"29#!"2 9##" 29$ !"29%!

No &

Cat alys

t'#$

(es Catalyst!!!

runningCisco Cat)S


8/39Chapter 4

=© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

#$%ter-$n-a-Stic

*ayer 2 sitch lin8ed to

ro!ter via tr!n8 9in lie! o/

!sing a m!ltilayer sitch:.

o!ter inter/ace, typically

ast -thernet, s!"dividedinto logical s!"inter/aces,

one per )*A+.


9/39Chapter 4

>© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

#$%te&.!(-Switche& vs/ !0 Switche& Design

o!ting can no "e per/ormed at *2 sitching speeds "y

sitching /rames?pac8ets !sing speciali@ed hardarecirc!its.

*3 sitches serve as de/a!lt gateays, terminating )*A+s

9one I s!"net per )*A+:.


10/39Chapter 4


Switch irt%al Inter)aces *SI1s+

Con/ig!red on m!ltilayer sitches, one per )*A+.

$he management inter/ace on an *2 sitch is an S)I, "!t an*2 sitch is limited to one active S)I.

An S)I associates ith an *2 )*A+ – a sitch m!st have anactive *2 instance o/ a )*A+ in order /or an 9*3: S)I to/!nction.


11/39Chapter 4


#$%te& P$rts


12/39Chapter 4


!( 2therChannels

!st as ith physical

inter/aces on m!ltilayer

sitches, "!ndles o/

inter/aces 9port channels:

can "e con/ig!red as

ro!ted ports.

ort channels con/ig!red

as ro!ted ports are called

*3 -therChannels.

*2 -therChannels are

normally !sed only hen

connecting /rom an access

layer sitch.


13/39


C$n)ig%ring Inter-!"N #$%ting


14/39


C$n)ig%ring #$%ter-$n-a-Stic

▪Step 3/ -na"le tr!n8ing on the sitch port.

Switch(config-if)# switchport trunk encapsulation dot1q

Switch(config-if)# switchport mode trunk

Switch(config-if)# switchport trunk native vlan #

▪Step 0/ -na"le the ro!ter inter/ace.

Router(config-if)# no shutdown

▪Step (/ Create the s!"inter/aces /or each )*A+ that re5!iresinter()*A+ ro!ting.

Router(config)# interface interface_id

slot/port.subinterface

▪Step 4/ Con/ig!re the tr!n8ing encaps!lation and I address onthe s!"inter/aces corresponding to the )*A+s.

Router(config-subif)# encapsulation [dot1q | isl] vlan-id {native}

Router(config-subif)# ip address ip_address subnet_mask


15/39


#$%ter-$n-a-Stic 2ample

Router(config)# interface Fastthernet!"!

Router(config-if)#no shutdown

Router(config-if)# interface Fastthernet !"!1

Router(config-subif) description $%&' 1

Router(config-subif)# encapsulation dot1q 1 native

Router(config-subif)# ip address 1!111 !

Router(config-subif)# e*itRouter(config)# interface Fastthernet !"!

Router(config-subif)# description $%&'

Router(config-subif)# encapsulation dot1q

Router(config-subif)# ip address 1!1 !

Router(config-subif)# e*it

Router(config)# end

#####Cisco IOS switch Trunking Configurtion Connecte! to Interfce

"stthernet$%$

Switch(config)# interface Fastthernet +"

Switch(config-if)# switchport trunk encapsulation dot1q

Switch(config-if)# switchport mode trunk

Switch(config-if)# end

%ere, )*A+ 100 is !sed as native )*A+. It is a sec!rity "est

practice to !se a d!mmy?!n!sed )*A+ /or the native )*A+.


16/39


C$n)ig%ring Inter-!"N #$%ting with SI1s

▪Step 3/ Speci/y an S)I "y !sing a )*A+ inter/ace

command'

Switch(config)# interface vlan vlan-id

▪Step 0/ Assign an I address to the )*A+'

Switch(config-if)# ip address ip_address subnetmask

▪Step (/ -na"le the inter/ace'

Switch(config-if)# no shutdown

▪Step 4/ 9;ptional.: -na"le I ro!ting on the ro!ter'

Switch(config)# ip routing

▪Step 5/ 9;ptional.: Speci/y an I ro!ting protocol or !se

static ro!tes'

Switch(config)# router ip_routing_protocol options


17/39


SI-,ase& Inter-!"N #$%ting 2ample


Switch(config)# router rip

Switch(config-router)# network 1!!!!

Switch(config)# interface vlan 1!Switch(config-if)# ip address 1!1!11 !!!


Switch(config-if)# interface vlan !

Switch(config-if)# ip address 1!!11 !



18/39

Chapter 41=© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

C$n)ig%ring #$%te& P$rts

▪ Step 3. Select the inter/ace /or con/ig!ration.

Switch(config)# interface interface-id

▪ Step 0. Convert this port /rom a physical *ayer 2 port to a physical

*ayer 3 inter/ace.

Switch(config-if)# no switchport

▪

Step (. Con/ig!re the I address and I s!"net mas8. $his address ill"e !sed "y hosts on the segment connected to this inter/ace /or

comm!nication to the sitch on this inter/ace, or as the de/a!lt gateay

to other netor8s.

Switch(config-if)# ip address ip_address subnet_mask

▪ Step 4. 9;ptional.: -na"le I ro!ting on the ro!ter.Switch(config)# ip routing

▪ Step 5. 9;ptional.: Speci/y an I ro!ting protocol or !se static ro!tes'

Switch(config)# router ip_routing_protocol options


19/39

Chapter 41>© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco !"lic

#$%te& P$rt 2ample

Switch(config)# interface ,igabitthernet 1"1

Switch(config-if)# no switchportSwitch(config-if)# ip address 1!1!11

Switch(config-if)# e*it

Switch(config)# interface ,igabitthernet 1"

Switch(config-if)# ip address 1!!1+

& I' !!resses not be configure! on *+ ,inks

Switch(config-if)# no switchportSwitch(config-if)# ip address 1!!1+


20/39


Inter-!"N #$%ting eri)icati$n *3+

Switch# show interfaces vlan !

.,n+$ is u/0 ,ine /rotoco, is u/

1r!wre is thernet S.I0 !!ress is $$2344"56$7 (bi $$2344"56$7)

Internet !!ress is 8$8+$8%+7

9T: 83$$ btes0 5; 8$$$$$$ ,o! 8%+330 r>,o! 8%+33

nc/su,tion ?R'?0 ,oo/bck not set

?R' t/e@ ?R'?0 ?R' Tieout $7@$$@$$

*st in/ut neAer0 out/ut neAer0 out/ut hng neAer

*st c,ering of Bshow interfce counters neAer

In/ut Dueue@ $%E3%$%$ (siFe%>%!ro/s%f,ushes)G Tot, out/ut !ro/s@ $

Hueueing strteg@ fifo

Out/ut Dueue@ $%7$ (siFe%>)

3 inute in/ut rte $ bits%sec0 $ /ckets%sec

3 inute out/ut rte $ bits%sec0 $ /ckets%sec

$ /ckets in/ut0 $ btes0 $ no buffer

ReceiAe! $ bro!csts0 $ runts0 $ gints0 $ thrott,es

$ in/ut errors0 $ CRC0 $ fre0 $ oAerrun0 $ ignore!

$ /ckets out/ut0 $ btes0 $ un!erruns

$ out/ut errors0 $ interfce resets

$ out/ut buffer fi,ures0 $ out/ut buffers sw//e! out

)eri/y the stat!s o/ an S)I.


21/39


Inter-!"N #$%ting eri)icati$n *0+

Switch# show running-config interface Fastthernet "

5ui,!ing configurtion

interfce "stthernet+%4

no switch/ort

i/ !!ress 8E+86+++ +33+33+33+3+Jout/ut oitte!K

isplay the inter/ace con/ig!ration o/ a ro!ted port.


22/39


Inter-!"N #$%ting eri)icati$n *(+

Switch# show ip interface fastethernet!"+

"stthernet$%+7 is u/0 ,ine /rotoco, is u/

Internet !!ress is 8$88$8%+7

5ro!cst !!ress is +33+33+33+33

?!!ress !eterine! b setu/ con!

9T: is 83$$ btes1e,/er !!ress is not set

2irecte! bro!cst forwr!ing is !isb,e!

9u,ticst reserAe! grou/s Loine!@ ++7$$8$

Outgoing ccess ,ist is not set

Inboun! ccess ,ist is not set

'ro> ?R' is enb,e!

*oc, 'ro> ?R' is !isb,e!

Securit ,eAe, is !efu,t

S/,it horiFon is enb,e!

IC9' re!irects re ,ws sent

IC9' unrechb,es re ,ws sent

IC9' sk re/,ies re neAer sent

I' fst switching is enb,e!

I' C" switching is enb,e!

isplay the I properties on a ro!ted port.


23/39


C$mm$n Inter-!"N #$%ting Pr$blems4roble

,

4ossible Cause

issingVLAN

VLAN ,ight not beefine across all theswitches5VLAN ,ight not beenable on the trun6 ports54orts ,ight not be inthe right VLANs5

Lay er 'interfac econf igur ation

Virtual interface ,ightha*e the wrong I4aress or subnet,as65

Virtual interface ,ightnot be up5Virtual interfacenu,ber ,ight not be,atch with the VLANnu,ber5Routing has to be

enable to routefra,es between


24/39


C$n)ig%ring !a'er ( 2therChannels

▪ Step 3/ Create a virt!al *ayer 2 inter/ace.

Switch(config)# interface port-channel 1

▪ Step 0/ Convert to a *ayer 3 inter/ace to ena"le I con/ig!ration.

Switch(config-if)# no switchport

▪ Step (/ Assign an I address to the port(channel inter/ace'

Switch(config-if)#ip address ip_address subnet_mask

▪ Step 4/ +avigate to the inter/aces that are to "e associated ith the-therChannel "!ndle'

Switch(config)# interface range interface_id portnumber_range

▪ Step 5/ or a *ayer 3 -therChannel to /orm, the associated physical

ports m!st "e con/ig!red as *ayer 3 ports. Assign the inter/aces to the-therChannel gro!p'

Switch(config-if-rnge# no switchport

Switch(config-if-rnge)# channel-group channel-group-number

mode {auto [non-silent] | desirable [non-silent] | on} |

{active | passive}


25/39


!a'er ( 2therChannel 2ample


26/39


#$%ting Pr$t$c$l C$n)ig%rati$n


Switch(config)# router eigrp 1!!

Switch(config-router)# no auto-summar.

Switch(config-router)# network 1!!!!

Switch(config-router)# passive-interface default

Switch(config-router)# no passive-interface fa!"+

Switch(config)# interface fa!"+

Switch(config-if)# description /plink

Switch(config-if)# ip summar.-address eigrp 1!! 1!1!! +!!


27/39


eri)'ing #$%ting *3+

Switch# show ip route

Co!es@ C - connecte!0 S - sttic0 R - RI'0 9 - obi,e0 5 - 5M'2 - IMR'0 N - IMR' e>tern,0 O - OS'"0

I? - OS'" inter re

8 - OS'" SS? e>tern, t/e 80

+ - OS'" SS? e>tern, t/e +

8 - OS'" e>tern, t/e 80 + - OS'" e>tern, t/e +

i - IS-IS0 su - IS-IS sur0 *8 - IS-IS ,eAe,-80

*+ - IS-IS ,eAe,-+i - IS-IS inter re0 P - cn!i!te !efu,t0

: - /er-user sttic route

o - O2R0 ' - /erio!ic !own,o!e! sttic route

Mtew of ,st resort is not set

8$$$$%4 is Arib, subnette!0 8Q subnets0 + sks

2 8$8Q$%+7 [$%+4786] Ai 8$88$8$0 $4@$@70 .,n8$2 8$8+$%+7 [$%+4786] Ai 8$88$8$0 $4@$@70 .,n8$

C 8$88$$%+7 is !irect, connecte!0 .,n8$


28/39


eri)'ing #$%ting *0+

Switch# show ip protocol

Routing 'rotoco, is Beigr/ 8

Outgoing u/!te fi,ter ,ist for ,, interfces is not set

Incoing u/!te fi,ter ,ist for ,, interfces is not set

2efu,t networks f,gge! in outgoing u/!tes

2efu,t networks cce/te! fro incoing u/!tes

IMR' etric weight iu /th@ 7

Routing for etworks@

8$$$$

'ssiAe Interfce(s)@

.,n8

.,n88

Routing Infortion Sources@

Mtew 2istnce *st :/!te

8$8$$88E+$+ $ +$@+3@8$

8$8$$88Q+$8 $ +$@+3@8$

2istnce@ intern, $ e>tern, 8E$


30/39


DHCP Overview

▪istri"!tion m!ltilayer

sitches o/ten act as *ayer 3gateays /or clientsconnecting to the accesssitches on vario!s )*A+s.$here/ore, the %C service

can "e provided directly "ythe distri"!tion sitches.

▪ Alternatively, %C servicescan "e concentrated in aneternal, dedicated %C

server. In that case,distri"!tion sitches need toredirect the incoming clients%C re5!ests to theeternal %C server.


31/39


DHCP Operati$n

▪ Step 3/ $he client sends a %CISC;)- "roadcast message to locate a Cisco I;S %C server.

▪ Step 0/ A %C server o//ers con/ig!ration parameters 9s!ch as an I address, a 6AC address, a

domain name, and a lease /or the I address: to the client in a %C;- !nicast message. A

%C client might receive o//ers /rom m!ltiple %C servers and can accept any one o/ the o//ersD

hoever, the client !s!ally accepts the /irst o//er it receives. Additionally, the o//er /rom the %Cserver is not a g!arantee that the I address ill "e allocated to the clientD hoever, the server !s!ally

reserves the address !ntil the client has had a chance to /ormally re5!est the address.

▪ Step (/ $he client ret!rns a /ormal re5!est /or the o//ered I address to the %C server in a

%C-E


32/39


C$n)ig%ring DHCP

▪ Step 1. Create a pool ith the ip dhcp pool command.

▪ Step 2. #ithin the dhcp pool con/ig!ration s!"mode, con/ig!re the netor8 val!e, hich

indicates in hich s!"net addresses are o//ered. Also, con/ig!re items s!ch as the de/a!lt(

gateay, lease d!ration, s!"netmas8, and +S server I addresses, among others.

▪ Step 3. Gy de/a!lt, the sitch o//ers addresses ta8en /rom the hole range. $o ecl!de

some addresses, in glo"al con/ig!ration mode, !se the ip dhcp e*cluded-address

command /olloed "y the range o/ addresses to ecl!de /rom the %C o//ers. or adiscontin!o!s address range, con/ig!re ecl!ded addresses /or each %C scope.

Switch(config)# ip dhcp e*cluded-address 1!11!1 1!11!!

Switch(config)# ip dhcp pool 021!

Switch(config-!hc/)# network 1!11!! !Switch(config-!hc/)# default-router 1!11!1

Switch(config-!hc/)# option 1! 1!11!

Switch(config-!hc/)# lease ! !

Switch(config-!hc/)# 3 ! da.s hours ! minutes

Switch(config)# interface vlan1!

Switch(config-if)# ip address 1!11!1 !


33/39


DHCP #ela'

▪


34/39


eri)'ing an& Tr$%blesh$$ting DHCP

Switch# show ip dhcp binding

5in!ings fro ,, /oo,s not ssocite! with .R"@

I' !!ress C,ient-I2% *ese e>/irtion T/e

1r!wre !!ress%

:ser ne

8$88$+8 $8$$8b!38Q+!+ un +3 +$$ $6@$ ?9 ?utotic

8$88$++ $8$$7$676$ un +3 +$$ $@7$ ?9 ?utotic

8$88$+Q $8$$7$643 un +3 +$$ 88@+4 ?9 ?utotic

Switch# debug ip dhcp server packet21C'2@ 21C'2ISCO.R receiAe! fro c,ient $8$$8b!38Q+!+ on interfce .,n6

21C'2@ Sen!ing 21C'O""R to c,ient $8$$8b!38Q+!+ (8$88$+8)

21C'2@ bro!csting 5OOTR'*= to c,ient $$8b!38Q+!+

21C'2@ 21C'RH:ST receiAe! fro c,ient $8$$8b!38Q+!+

21C'2@ Sen!ing 21C'?C< to c,ient $8$$8b!38Q+!+ (8$88$+8)

21C'2@ bro!csting 5OOTR'*= to c,ient $$8b!38Q+!+


35/39


Chapter 4 S%mmar' *3+

▪$his chapter disc!ssed in detail *ayer 3 ro!ting and its

implementation, incl!ding coverage o/ inter()*A+ ro!ting andro!ter(on(a(stic8, %C services, and the /orarding path o/m!ltilayer sitching !sing C-.

▪ Inter()*A+ ro!ting provides comm!nication "eteen the devicesin di//erent )*A+s. evices in di//erent )*A+s cannotcomm!nicate "eyond )*A+ "o!ndaries itho!t a *ayer 3device. 6!ltilayer sitches s!pport to types o/ *ayer 3inter/aces' ro!ted ports and S)Is 9)*A+ inter/aces:.

▪o!ted ports are point(to(point connections s!ch as those thatinterconnect the "!ilding distri"!tion s!"mod!les and thecamp!s "ac8"one s!"mod!les.

▪S)Is are )*A+ inter/aces that ro!te tra//ic "eteen )*A+s. Inm!ltilayer sitched netor8s ith *ayer 3 in the distri"!tion layerand *ayer 2 in the access layer, S)Is ro!te tra//ic /rom )*A+s onthe access(layer sitches.


36/39


Chapter 4 S%mmar' *0+

▪


37/39


▪ !ab 4-3Inter-!"N #$%ting with an 2ternal #$%ter

▪ !ab 4-0Inter-!"N #$%ting with an Internal #$%te Pr$cess$r

an& 6$nit$ring C27 7%ncti$ns

▪ !ab 4-(!"Ns8 TP8 an& Inter-!"N #$%ting Case St%&'

Chapter 4 !abs


38/39


#es$%rces

▪.cisco.com?en?


39/39

It7370-En Switch v6 Ch04.Pptx

Documents

Transcript of It7370-En Switch v6 Ch04.Pptx