Networking Essentials – Eric Vanderburg © 2005
SwitchingSwitching
Networking Essentials – Eric Vanderburg © 2005
Port SecurityPort Security
Switchport port security mac-Switchport port security mac-address address mac-addressmac-address
Switchport port security mac-Switchport port security mac-address sticky – learn first MAC address sticky – learn first MAC used and restrict to that oneused and restrict to that one
Networking Essentials – Eric Vanderburg © 2005
Switch modesSwitch modes
Store & forward – waits until entire Store & forward – waits until entire frame is analyzed to forwardframe is analyzed to forward
Fragment free – looks at first 64 Fragment free – looks at first 64 bytes before forwardingbytes before forwarding
Cut through – forwards ASAPCut through – forwards ASAP Adaptive cut through – acts like cut Adaptive cut through – acts like cut
through unless many errors are through unless many errors are encountered. If so, switches to encountered. If so, switches to store & forwardstore & forward
Switching-mode store-and-forwardSwitching-mode store-and-forward
Networking Essentials – Eric Vanderburg © 2005
STPSTP
802.1d802.1d Used to reduce forwarding loopsUsed to reduce forwarding loops Allows redundancy without loopingAllows redundancy without looping Elects root bridge based on lowest Elects root bridge based on lowest
bridge ID (MAC & priority)bridge ID (MAC & priority) Root ports are put in forwarding Root ports are put in forwarding
state, others in blockingstate, others in blocking Root switch enables all portsRoot switch enables all ports
Networking Essentials – Eric Vanderburg © 2005
Other featuresOther features
EtherChannel – allows multiple EtherChannel – allows multiple trunk links to be used as one (2-8 trunk links to be used as one (2-8 links)links)
PortFast – ports connected to hosts PortFast – ports connected to hosts can be enabled at once as soon as can be enabled at once as soon as the first frame is receivedthe first frame is received
Networking Essentials – Eric Vanderburg © 2005
RSTPRSTP
802.1w802.1w Faster converganceFaster convergance PortFast & Etherchannel are both PortFast & Etherchannel are both
built-inbuilt-in Does not work when hubs are on Does not work when hubs are on
the networkthe network Can negotiate a new path to root Can negotiate a new path to root
automatically without a link going automatically without a link going down firstdown first
Networking Essentials – Eric Vanderburg © 2005
VLANsVLANs
Segment into multiple broadcast Segment into multiple broadcast domainsdomains
Requires layer 3 device to send Requires layer 3 device to send data between VLANsdata between VLANs
Requires trunking to move data to Requires trunking to move data to VLANs spread between switchesVLANs spread between switches
Networking Essentials – Eric Vanderburg © 2005
TrunkingTrunking
ISL (Inter-Switch Link)ISL (Inter-Switch Link) encapsulatesencapsulates
IEEE 802.1qIEEE 802.1q Default VLANDefault VLAN Changes headerChanges header
Trunk TypesTrunk Types OnOn OffOff DesirableDesirable AutoAuto
Networking Essentials – Eric Vanderburg © 2005
VTPVTP
VTP allows configuration changes to VTP allows configuration changes to be propagated to other switches in be propagated to other switches in the same domainthe same domain
VTP modesVTP modes Server modeServer mode Client modeClient mode Transparent modeTransparent mode
VTP pruning – does not send VTP info VTP pruning – does not send VTP info to a switch that has no ports in that to a switch that has no ports in that VLANVLAN
Networking Essentials – Eric Vanderburg © 2005
Switch commandsSwitch commands
Interface fastethernet 0/0Interface fastethernet 0/0 Duplex full / half / autoDuplex full / half / auto Speed 10 / 100 / 1000 / autoSpeed 10 / 100 / 1000 / auto Spanning-tree cost Spanning-tree cost cost – changes prioritycost – changes priority Channel-group # - enables etherchannelChannel-group # - enables etherchannel
Show spanning-tree – view info on Show spanning-tree – view info on rootID, bridgeID, & ports that are rootID, bridgeID, & ports that are blocking or forwardingblocking or forwarding
Show vtp status – shows number of Show vtp status – shows number of VLANs, operating mode for this device, & VLANs, operating mode for this device, & domain name, domain name,
Networking Essentials – Eric Vanderburg © 2005
TrunkingTrunking
interface fastethernet 0.1interface fastethernet 0.1 encapsulation isl 1encapsulation isl 1 encapsulation dot1q 2 (do not set for encapsulation dot1q 2 (do not set for
main interface because that will be main interface because that will be default vlan)default vlan)
Networking Essentials – Eric Vanderburg © 2005
VLAN comandsVLAN comands
Vlan databaseVlan database SW1(vlan)#SW1(vlan)# Vlan 1 name TestVlan 1 name Test Vlan 2 name SampleVlan 2 name Sample Vtp domain SampleDomainVtp domain SampleDomain Exit – must exit for changes to take placeExit – must exit for changes to take place
Vtp pruning – turns pruning on in global Vtp pruning – turns pruning on in global configconfig Interface fastethernet 0/0Interface fastethernet 0/0
Switchport mode access – not trunkSwitchport mode access – not trunk Switchport access vlan 1Switchport access vlan 1
Interface range fastethernet 0/1 – 10Interface range fastethernet 0/1 – 10
Networking Essentials – Eric Vanderburg © 2005
1900 switch1900 switch
Interface fastethernet 0/0Interface fastethernet 0/0 Vlan-membership static 2Vlan-membership static 2 ExitExit
Set up vlans in configure terminal Set up vlans in configure terminal instead of vlan databaseinstead of vlan database
Networking Essentials – Eric Vanderburg © 2005
Trunking commandsTrunking commands
Interface fastethernet 0/0Interface fastethernet 0/0 Switchport mode dynamic desirableSwitchport mode dynamic desirable Switchport mode dynamic autoSwitchport mode dynamic auto Switchport mode trunkSwitchport mode trunk Switchport mode accessSwitchport mode access
Interface ethernet 0.2Interface ethernet 0.2 Encapsulation isl vlan#Encapsulation isl vlan# Encapsulation dot1q vlan#Encapsulation dot1q vlan#