Module 3: LAN Switching

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Core Layer

Distribution Layer

Access Layer

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Cut-Through Switch checks destination address and immediately begins forwarding frame.

Store and Forward Complete frame is received and checked before forwarding.

Fragment-Free Switch checks the first 64 bytes, then immediately begins forwarding frame.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 Initial MAC address table is empty.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 Station A sends a frame to station C. Switch caches the MAC address of station A to port E0 by learning the source address of data frames.

The frame from station A to station C is flooded out to all ports except port E0 (unknown unicasts are flooded).
2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

 Station D sends a frame to station C.

Switch caches the MAC address of station D to port E3 by learning the source address of data frames. The frame from station D to station C is flooded out to all ports except port E3 (unknown unicasts are flooded).
2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

 Station A sends a frame to station C. Destination is known; frame is not flooded.

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

 Station D sends a broadcast or multicast frame. Broadcast and multicast frames are flooded to all ports other than the originating port.
2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

12

 Unbounded failure domains

Large broadcast domains Large amount of unknown MAC unicast traffic Unbounded multicast traffic Management and support challenges Possible security vulnerabilities

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

13

 Segmentation Flexibility Security

VLAN = Broadcast Domain = Logical Network (Subnet)

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

15

 Each logical VLAN is like a separate physical bridge.

VLANs can span across multiple switches.

Trunks carry traffic for multiple VLANs. Trunks use special encapsulation to distinguish between different VLANs.
16

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

17

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

18

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

19

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

20

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

21

 Create VLANs Modify VLANs

Delete VLANs
Sends and forwards advertisements Synchronizes

Cannot create, change, or delete VLANs

Create local VLANs only Modify local VLANs only Delete local VLANs only

Sends and forwards advertisements

Synchronizes

Forwards advertisements
Does not synchronize

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

22

 VTP advertisements are sent as multicast frames. VTP servers and clients are synchronized to the latest revision number. VTP advertisements are sent every 5 minutes or when there is a change.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

23

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

24

1. 2. 3. 4.

Configure and verify VTP.

Configure and verify 802.1Q trunks.

Create or modify a VLAN on the VTP server switch. Assign switch ports to a VLAN and verify.

5.
6.

Execute adds, moves, and changes.

Save the VLAN configuration.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

25

 VTP defaults for the Cisco Catalyst switch:

VTP domain name: None
VTP mode: Server mode VTP pruning: Enabled or disabled (model specific) VTP password: Null

VTP version: Version 1

A new switch can automatically become part of a domain once receives an advertisement from a server. A VTP client can overwrite a VTP server database if the client has a higher revision number. A domain name cannot be removed after it is assigned; it can only be reassigned.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

26

SwitchX# configure terminal SwitchX(config)# vtp mode [ server | client | transparent ] SwitchX(config)# vtp domain domain-name SwitchX(config)# vtp password password SwitchX(config)# vtp pruning SwitchX(config)# end

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

27

SwitchX(config)# vtp domain ICND Changing VTP domain name to ICND SwitchX(config)# vtp mode transparent Setting device to VTP TRANSPARENT mode. SwitchX(config)# end SwitchX# show vtp status VTP Version : 2 Configuration Revision : 0 Maximum VLANs supported locally : 64 Number of existing VLANs : 17 VTP Operating Mode : Transparent VTP Domain Name : ICND VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x7D 0x6E 0x5E 0x3D 0xAF 0xA0 0x2F 0xAA Configuration last modified by 10.1.1.4 at 3-3-93 20:08:05 SwitchX#

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

28

SwitchX(config-if)# switchport mode {access | dynamic {auto | desirable} | trunk} Configures the trunking characteristics of the port

SwitchX(config-if)# switchport mode trunk Configures the port as a VLAN trunk

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

29

SwitchX# show interfaces interface [switchport | trunk] SwitchX# show interfaces fa0/11 switchport Name: Fa0/11 Switchport: Enabled Administrative Mode: trunk Operational Mode: down Administrative Trunking Encapsulation: dot1q Negotiation of Trunking: On Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) . . . SwitchX# show interfaces fa0/11 trunk Port Fa0/11 Port Fa0/11 Port Fa0/11 Mode desirable Encapsulation 802.1q Status trunking Native vlan 1

Vlans allowed on trunk 1-4094 Vlans allowed and active in management domain 1-13
Cisco Confidential 30

2011 Cisco and/or its affiliates. All rights reserved.

 The maximum number of VLANs is switch-dependent. Most Cisco Catalyst desktop switches support 128 separate spanningtree instances, one per VLAN. VLAN 1 is the factory default Ethernet VLAN. Cisco Discovery Protocol and VTP advertisements are sent on VLAN 1. The Cisco Catalyst switch IP address is in the management VLAN (VLAN 1 by default). If using VTP, the switch must be in VTP server or transparent mode to add or delete VLANs.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

31

SwitchX# configure terminal SwitchX(config)# vlan 2 SwitchX(config-vlan)# name switchlab99

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

32

SwitchX# show vlan [brief | id vlan-id || name vlan-name]

SwitchX# show vlan id 2

VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------2 switchlab99 active Fa0/2, Fa0/12
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 ---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ -----2 enet 100002 1500 0 0 . . . SwitchX#

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

33

SwitchX(config-if)# switchport access [vlan vlan# | dynamic]

SwitchX# configure terminal SwitchX(config)# interface range fastethernet 0/2 - 4 SwitchX(config-if)# switchport access vlan 2 SwitchX# show vlan VLAN ---1 2 Name Status Ports -------------------------------- --------- ---------------------default active Fa0/1 switchlab99 active Fa0/2, Fa0/3, Fa0/4

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

34

SwitchX# show vlan brief

SwitchX# show vlan brief VLAN Name ---- -------------------------------1 default 2 switchlab99 3 vlan3 4 vlan4 1002 fddi-default 1003 token-ring-default VLAN ---1004 1005 Name -------------------------------fddinet-default trnet-default

Status --------active active active active act/unsup act/unsup

Ports ------------------------------Fa0/1 Fa0/2, Fa0/3, Fa0/4

Status Ports --------- ------------------------------act/unsup act/unsup

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

35

SwitchX(config-if)# show interfaces interface switchport

SwitchX# show interfaces fa0/2 switchport Name: Fa0/2 Switchport: Enabled Administrative Mode: dynamic auto Operational Mode: static access Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: native Negotiation of Trunking: On Access Mode VLAN: 2 (switchlab99) Trunking Native Mode VLAN: 1 (default) --- output omitted ----

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

36

 When using VTP, the switch must be in VTP server or transparent mode to add, change, or delete VLANs. When you make VLAN changes from a switch in VTP server mode, the change is propagated to other switches in the VTP domain. Changing VLANs typically implies changing IP networks. After a port is reassigned to a new VLAN, that port is automatically removed from its previous VLAN. When you delete a VLAN, any ports in that VLAN that are not moved to an active VLAN will be unable to communicate with other stations.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

37

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

38

 When using VTP, the switch must be in VTP server or transparent mode to add, change, or delete VLANs. When you make VLAN changes from a switch in VTP server mode, the change is propagated to other switches in the VTP domain. Changing VLANs typically implies changing IP networks. After a port is reassigned to a new VLAN, that port is automatically removed from its previous VLAN. When you delete a VLAN, any ports in that VLAN that are not moved to an active VLAN will be unable to communicate with other stations.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

39

Technology Fast Ethernet Gigabit Ethernet

Use Connects end-user devices to the access layer switch Connects access switch to distribution switch and high use servers to switches Provides high-speed switch to switch links, backbones Provides high-speed switch to switch links, backbones with redundancy

10-Gigabit Ethernet EtherChannel

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

40

Each link provides adequate bandwidth for the total aggregate traffic over that link.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

41

 Logical aggregation of similar links between switches Load-shares across links Viewed as one logical port to STP Redundancy

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

42

 Redundant topology eliminates single points of failure. Redundant topology causes broadcast storms, multiple frame copies, and MAC address table instability problems.
43

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 Station D sends a broadcast frame. Broadcast frames are flooded to all ports except the originating port.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

44

 Host X sends a broadcast. Switches continue to propagate broadcast traffic over and over.
2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 45

 Host X sends a unicast frame to router Y.

The MAC address of router Y has not been learned by either switch. Router Y will receive two copies of the same frame.
2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 46

 Provides a loop-free redundant network topology by placing certain ports in the blocking state Published in the IEEE 802.1D specification Enhanced with the Cisco PVST+ implementation

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

47

 One root bridge per broadcast domain.

One root port per nonroot bridge.

One designated port per segment. Nondesignated ports are unused.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

48

 BPDU (default = sent every 2 seconds) Root bridge = bridge with the lowest bridge ID Bridge ID = Bridge
Priority
MAC Address

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

49

Spanning tree transits each port through several different states:

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

50

PortFast is configured on access ports, not trunk ports.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

51

SwitchX(config-if)#

spanning-tree portfast

Configures PortFast on an interface OR

SwitchX(config)#

spanning-tree portfast default

Enables PortFast on all non-trunking interfaces

SwitchX#

show running-config interface interface

Verifies that PortFast has been configured on an interface

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

52

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

53

Link Speed

Cost (New IEEE Specification)

Cost (Old IEEE Specification)

10 Gb/s 1 Gb/s 100 Mb/s 10 Mb/s

2 4 19 100

1 1 10 100

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

54

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

55

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

56

Bridge ID without the extended system ID

Extended bridge ID with system ID

System ID = VLAN

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

57

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

58

Cisco Catalyst switches support three types of STPs:

PVST+ PVRST+ MSTP

The default STP for Cisco Catalyst switches is PVST+ :

A separate STP instance for each VLAN One root bridge for all VLANs No load sharing

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

59

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

60

SwitchA(config)#

spanning-tree vlan 1 root primary

This command forces this switch to be the root for VLAN 1.

SwitchA(config)#

spanning-tree vlan 2 root secondary

This command configures this switch to be the secondary root for VLAN 2. OR
SwitchA(config)#

spanning-tree vlan # priority priority

This command statically configures the priority (increments of 4096).

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 61

SwitchB(config)# spanning-tree vlan 2 root primary

This command forces the switch to be the root for VLAN 2.

SwitchB(config)# spanning-tree vlan 1 root secondary

This command configures the switch to be the secondary root VLAN 1. OR

SwitchB(config)# spanning-tree vlan # priority priority

This command statically configures the priority (increments of 4096).

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

62

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

63

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

64

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

65

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

66

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

67

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

68

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

69

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

70

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

71

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

72

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

73

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

74

Thank you.

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

75