Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay,...

36
Top-Down Network Design Chapter Five Designing a Network Topology Copyright 2004 Cisco Press & Priscilla Oppenheimer PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Transcript of Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay,...

Page 1: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Top-Down Network Design

Chapter Five

Designing a Network Topology

Copyright 2004 Cisco Press & Priscilla Oppenheimer

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 2: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Topology• A branch of mathematics concerned with those

properties of geometric configurations that areunaltered by elastic deformations such asstretching or twisting

• A term used in the computer networking field todescribe the structure of a network

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 3: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Network Topology DesignThemes

• Hierarchy• Redundancy• Modularity• Well-defined entries and exits• Protected perimeters

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 4: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Why Use a Hierarchical Model?

• Reduces workload on network devices– Avoids devices having to communicate with

too many other devices (reduces “CPUadjacencies”)

• Constrains broadcast domains• Enhances simplicity and understanding• Facilitates changes• Facilitates scaling to a larger size

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 5: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Hierarchical Network Design

Enterprise WANBackbone

Campus A Campus B

Campus C

Building C-1 Building C-2

Campus C Backbone

Core Layer

DistributionLayer

Access Layer

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 6: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Cisco’s Hierarchical DesignModel

• A core layer of high-end routers andswitches that are optimized for availabilityand speed

• A distribution layer of routers and switchesthat implement policies and segment traffic

• An access layer that connects users viahubs, switches, and other devices

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 7: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Flat Versus Hierarchy

Flat Loop Topology

Headquarters inMedford

Grants PassBranch Office

AshlandBranchOffice

Klamath FallsBranch Office

Headquarters inMedford

AshlandBranchOffice

Klamath FallsBranch Office

Grants PassBranchOffice

White CityBranch Office

Hierarchical Redundant Topology

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 8: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

MeshDesigns

Partial-Mesh Topology

Full-Mesh Topology

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 9: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

A Partial-Mesh Hierarchical Design

Headquarters(Core Layer)

Branch Offices (Access Layer)

RegionalOffices

(DistributionLayer)

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 10: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

A Hub-and-Spoke Hierarchical Topology

CorporateHeadquarters

Branch Office Branch OfficeHome OfficePDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 11: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Avoid Chains and Backdoors

Core Layer

Distribution Layer

Access Layer

ChainBackdoor

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 12: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

How Do You Know When YouHave a Good Design?

• When you already know how to add a newbuilding, floor, WAN link, remote site, e-commerce service, and so on

• When new additions cause only local change, tothe directly-connected devices

• When your network can double or triple in sizewithout major design changes

• When troubleshooting is easy because there are nocomplex protocol interactions to wrap your brainaround

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 13: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Cisco’s Enterprise CompositeNetwork Model

NetworkManagement

BuildingAccess

BuildingDistribution

CampusBackbone

Server Farm

EdgeDistribution

E-Commerce

InternetConnectivity

VPN/ RemoteAccess

WAN

ISP A

ISP B

PSTN

FrameRelay,ATM

Cam

pusI

nfra

stru

ctur

e

Enterprise Campus

Enterprise EdgeService

ProviderEdge

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 14: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Campus Topology Design

• Use a hierarchical, modular approach• Minimize the size of bandwidth domains• Minimize the size of broadcast domains• Provide redundancy

– Mirrored servers– Multiple ways for workstations to reach a

router for off-net communications

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 15: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Enterprise Campus Modules

• Server farm• Network management module• Edge distribution module for connectivity to

the rest of the world• Campus infrastructure module:

– Building access submodule– Building distribution submodule– Campus backbone

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 16: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

A Simple Campus Redundant Design

Host A

Host B

LAN X

LAN Y

Switch 1 Switch 2

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 17: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Bridges and Switches use Spanning-Tree Protocol (STP) to Avoid Loops

X

Host A

Host B

LAN X

LAN Y

Switch 1 Switch 2

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 18: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Bridges (Switches) Running STP• Participate with other bridges in the election of a single

bridge as the Root Bridge.• Calculate the distance of the shortest path to the Root

Bridge and choose a port (known as the Root Port) thatprovides the shortest path to the Root Bridge.

• For each LAN segment, elect a Designated Bridge and aDesignated Port on that bridge. The Designated Port is aport on the LAN segment that is closest to the Root Bridge.(All ports on the Root Bridge are Designated Ports.)

• Select bridge ports to be included in the spanning tree. Theports selected are the Root Ports and Designated Ports.These ports forward traffic. Other ports block traffic.

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 19: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Elect a Root

Bridge B Bridge C

Bridge A ID =80.00.00.00.0C.AA.AA.AA

Bridge B ID =80.00.00.00.0C.BB.BB.BB

Bridge C ID =80.00.00.00.0C.CC.CC.CC

Port 1

Port 2

Port 1

Port 2

Port 1 Port 2

LAN Segment 2100-Mbps Ethernet

Cost = 19

LAN Segment 1100-Mbps Ethernet

Cost = 19

LAN Segment 3100-Mbps Ethernet

Cost = 19

RootBridge A

Lowest Bridge IDWins!

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 20: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Determine Root Ports

Bridge B Bridge C

RootBridge A

Bridge A ID =80.00.00.00.0C.AA.AA.AA

Bridge B ID =80.00.00.00.0C.BB.BB.BB

Bridge C ID =80.00.00.00.0C.CC.CC.CC

Port 1

Port 2

Port 1

Port 2

Port 1 Port 2

LAN Segment 2100-Mbps Ethernet

Cost = 19

LAN Segment 1100-Mbps Ethernet

Cost = 19

LAN Segment 3100-Mbps Ethernet

Cost = 19

Root Port Root Port

Lowest CostWins!

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 21: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Determine Designated Ports

Bridge B Bridge C

RootBridge A

Bridge A ID =80.00.00.00.0C.AA.AA.AA

Bridge B ID =80.00.00.00.0C.BB.BB.BB

Bridge C ID =80.00.00.00.0C.CC.CC.CC

Port 1

Port 2

Port 1

Port 2

Port 1 Port 2

LAN Segment 2100-Mbps Ethernet

Cost = 19

LAN Segment 1100-Mbps Ethernet

Cost = 19

LAN Segment 3100-Mbps Ethernet

Cost = 19

Root Port Root Port

Designated Port Designated Port

Designated Port

Lowest Bridge IDWins!

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 22: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Bridge B Bridge C

RootBridge A

Bridge A ID =80.00.00.00.0C.AA.AA.AA

Bridge B ID =80.00.00.00.0C.BB.BB.BB

Bridge C ID =80.00.00.00.0C.CC.CC.CC

Port 1

Port 2

Port 1

Port 2

Port 1 Port 2

LAN Segment 2100-Mbps Ethernet

Cost = 19

LAN Segment 1100-Mbps Ethernet

Cost = 19

LAN Segment 3100-Mbps Ethernet

Cost = 19

Root Port Root Port

Designated Port Designated Port

Designated Port Blocked Port

X

Prune Topology into a Tree!

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 23: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

React to Changes

Bridge B Bridge C

RootBridge A

Bridge A ID =80.00.00.00.0C.AA.AA.AA

Bridge B ID =80.00.00.00.0C.BB.BB.BB

Bridge C ID =80.00.00.00.0C.CC.CC.CC

Port 1

Port 2

Port 1

Port 2

Port 1 Port 2

LAN Segment 2LAN Segment 1

LAN Segment 3

Root Port Root Port

Designated Port Designated Port

Designated Port BecomesDisabled

Blocked Port Transitions toForwarding State

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 24: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Scaling the Spanning TreeProtocol

• Keep the switched network small– It shouldn’t span more than seven switches

• Use BPDU skew detection on Ciscoswitches

• Use IEEE 802.1w– Provides rapid reconfiguration of the spanning

tree– Also known as RSTP

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 25: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Virtual LANs (VLANs)

• An emulation of a standard LAN that allowsdata transfer to take place without thetraditional physical restraints placed on anetwork

• A set of devices that belong to anadministrative group

• Designers use VLANs to constrainbroadcast traffic

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 26: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

VLANs versus Real LANs

Switch A

Station A1 Station A2 Station A3

Network A

Switch B

Station B1 Station B2 Station B3

Network B

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 27: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

A Switch with VLANsStation A1 Station A2 Station A3

VLAN A

Station B1 Station B2 Station B3

VLAN BPDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 28: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

VLANs Span Switches

Switch A

Station B1 Station B2 Station B3

Switch B

Station B4 Station B5 Station B6

Station A1 Station A2 Station A3 Station A4 Station A5 Station A6

VLAN B

VLAN A

VLAN B

VLAN A

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 29: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

WLANs and VLANs• A wireless LAN (WLAN) is often

implemented as a VLAN• Facilitates roaming• Users remain in the same VLAN and IP

subnet as they roam, so there’s no need tochange addressing information

• Also makes it easier to set up filters (accesscontrol lists) to protect the wired networkfrom wireless users

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 30: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Workstation-to-RouterCommunication

• Proxy ARP (not a good idea)• Listen for route advertisements (not a great

idea either)• ICMP router solicitations (not widely used)• Default gateway provided by DHCP (better

idea but no redundancy)– Use Hot Standby Router Protocol (HSRP) for

redundancyPDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 31: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

HSRP

Active Router

Standby Router

Virtual Router

Workstation

Enterprise Internetwork

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 32: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Multihoming the InternetConnection

Enterprise

Enterprise

Enterprise

ISP 1

ISP 1 ISP 2

ISP 1

ISP 1 ISP 2

EnterpriseOption A

Option B

Option C

Option D

Paris NY

Paris NY

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 33: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Security Topologies

EnterpriseNetwork

DMZ

Web, File, DNS, Mail Servers

Internet

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 34: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Security Topologies

Internet

Enterprise NetworkDMZ

Web, File, DNS, Mail Servers

Firewall

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 35: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Summary

• Use a systematic, top-down approach• Plan the logical design before the physical

design• Topology design should feature hierarchy,

redundancy, modularity, and security

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com

Page 36: Top-Down Network Design - Unisinosprofessor.unisinos.br/jcgluz/proj-redes/Chapter05.pdfFrame Relay, ATM C a m p u s I n f r a s t r u c t u r e Enterprise Campus Enterprise Edge Service

Review Questions

• Why are hierarchy and modularity important fornetwork designs?

• What are the three layers of Cisco’s hierarchicalnetwork design?

• What are the major components of Cisco’s enterprisecomposite network model?

• What are the advantages and disadvantages of thevarious options for multihoming an Internetconnection?

PDF Creator - PDF4Free v2.0 http://www.pdf4free.com