Network Configuration Guide

Transcription

1 Network Configuration Guide LAN Switching (Design and Configuration) RouteHub Group, LLC October 23, 2007

2 ROUTEHUB GROUP END-USER LICENSE AGREEMENT END USER LICENSE FOR ONE (1) PERSON ONLY IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS, DO NOT OPEN OR USE THE TRAINING MATERIALS. IMPORTANT BE SURE TO CAREFULLY READ AND UNDERSTAND ALL OF THE RIGHTS AND RESTRICTIONS SET FORTH IN THIS END-USER LICENSE AGREEMENT ("EULA"). YOU ARE NOT AUTHORIZED TO USE THIS NETWORK CONFIGURATION GUIDE/TRAINING UNLESS AND UNTIL YOU ACCEPT THE TERMS OF THIS EULA. This EULA is a binding legal agreement between you and ROUTEHUB GROUP, LLC (hereinafter "Licensor") for the materials accompanying this EULA, including the accompanying computer Network Configuration Guide/Training, associated media, printed materials and any "online" or electronic documentation (hereinafter the "Network Configuration Guide/Training"). By using the Network Configuration Guide/Training, you agree to be bound by the terms of this EULA. If you do not agree to the terms of this EULA, do not install or attempt to use the Network Configuration Guide/Training. The Guide & Training Materials shall be used by only ONE (1) INDIVIDUAL who shall be the sole individual authorized to use the Guide & Training Materials throughout the term of this License. 1. Grant of License The Network Configuration Guide/Training is protected by copyright laws and international copyright treaties, as well as other intellectual property laws and treaties. The Network Configuration Guide/Training is licensed, not sold. This EULA grants you the following rights: A. You may use, access, display and run only one copy of the Network Configuration Guide/Training, on a single computer, workstation or terminal ("Computer"). The primary user of the Computer on which the Network Configuration Guide/Training is installed may make a second copy for his or her exclusive use for archival purposes only. B. You may store or install a copy of the Network Configuration Guide/Training on a storage device, such as a network server, used only to run the Network Configuration Guide/Training on your other Computers over an internal network. You must, however, acquire a license for each separate Computer on which the Network Configuration Guide/Training is run, displayed or utilized from the server or similar device. A license for the Network Configuration Guide/Training may not be shared or used concurrently on different Computers. C. Your license rights under this EULA are non-exclusive. All rights not expressly granted herein are reserved by Licensor. D. You may not sell, transfer or convey the Network Configuration Guide/Training to any third party without Licensor's prior express written consent. 2. Price and Payment If you have not previously paid the license fee for the Network Configuration Guide/Training, then you must pay the license fee within the period indicated in the applicable invoice sent to you by Licensor. 3. Support Services This EULA is a license of the Network Configuration Guide/Training only, and Licensor does not assume any obligation to provide maintenance, patches or fixes to the Network Configuration Guide/Training. Licensor further disclaims any obligation to provide support or to prepare and distribute modifications, enhancements, updates and new releases of the Network Configuration Guide/Training.

3 4. Replacement, Modification and/or Upgrades Licensor may, from time to time, and for a fee, replace, modify or upgrade the Network Configuration Guide/Training. When accepted by you, any such replacement or modified Network Configuration Guide/Training code or upgrade to the Network Configuration Guide/Training will be considered part of the Network Configuration Guide/Training and subject to the terms of this EULA (unless this EULA is superceded by a further EULA accompanying such replacement or modified version of or upgrade to the Network Configuration Guide/Training). 5. Termination You may terminate this EULA at any time by destroying all your copies of the Network Configuration Guide/Training. Your license to the Network Configuration Guide/Training automatically terminates if you fail to comply with the terms of this agreement. Upon termination, you are required to remove the Network Configuration Guide/Training from your computer and destroy any copies of the Network Configuration Guide/Training in your possession. No refund with the product will be granted. 6. Copyright A. All title and copyrights in and to the Network Configuration Guide/Training (including but not limited to any images, photographs, animations, video, audio, music and text incorporated into the Network Configuration Guide/Training), the accompanying printed materials, and any copies of the Network Configuration Guide/Training, are owned by Licensor or its suppliers. This EULA grants you no rights to use such content. If this Network Configuration Guide/Training contains documentation that is provided only in electronic form, you may print one copy of such electronic documentation. Except for any copies of this EULA, you may not copy the printed materials accompanying the Network Configuration Guide/Training. B. You may not reverse engineer, de-compile, disassemble, alter, duplicate, modify, rent, lease, loan, sublicense, make copies of, create derivative works from, distribute or provide others with the Network Configuration Guide/Training in whole or part, transmit or communicate the application over a network. 7. Export Restrictions You may not export, ship, transmit or re-export Network Configuration Guide/Training in violation of any applicable law or regulation including but not limited to Export Administration Regulations issued by the U. S. Department of Commerce. 8. Disclaimer of Warranties LICENSOR AND ITS SUPPLIERS PROVIDE THE NETWORK CONFIGURATION GUIDE/TRAINING "AS IS" AND WITH ALL FAULTS, AND HEREBY DISCLAIM ALL OTHER WARRANTIES AND CONDITIONS, EITHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO ANY (IF ANY) IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, OF FITNESS FOR A PARTICULAR PURPOSE, OF LACK OF VIRUSES, AND OF LACK OF NEGLIGENCE OR LACK OF WORKMANLIKE EFFORT. ALSO, THERE IS NO WARRANTY OR CONDITION OF TITLE, OF QUIET ENJOYMENT, OR OF NONINFRINGEMENT. THE ENTIRE RISK ARISING OUT OF THE USE OR PERFORMANCE OF THE NETWORK CONFIGURATION GUIDE/TRAINING IS WITH YOU. 9. Limitation of Damages TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR OR ITS SUPPLIERS BE LIABLE FOR ANY CONSEQUENTIAL, INCIDENTAL, DIRECT, INDIRECT, SPECIAL, PUNITIVE OR OTHER DAMAGES WHATSOEVER ARISING OUT OF OR IN ANY WAY RELATED TO THE USE OF OR INABILITY TO USE THE NETWORK CONFIGURATION GUIDE/TRAINING AND WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF LICENSOR OR ANY SUPPLIER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS EXCLUSION OF DAMAGES WILL BE EFFECTIVE EVEN IF ANY REMEDY FAILS OF ITS ESSENTIAL PURPOSE. 10. Arbitration Any dispute arising under this EULA will be subject to binding arbitration by a single Arbitrator with the American Arbitration Association (AAA), in accordance with its relevant industry rules, if any. The parties agree that this EULA will be governed by and construed and interpreted in accordance with the laws of the State of California. The arbitration will be held in California. The Arbitrator will have the authority to grant injunctive relief and specific performance to enforce the terms of this EULA. Judgment on any award rendered by the Arbitrator may be entered in any Court of competent jurisdiction.

4 11. Severability If any term of this EULA is found to be unenforceable or contrary to law, it will be modified to the least extent necessary to make it enforceable, and the remaining portions of this Agreement will remain in full force and effect. 12. No Waiver No waiver of any right under this EULA will be deemed effective unless contained in writing signed by a duly authorized representative of the party against whom the waiver is to be asserted, and no waiver of any past or present right arising from any breach or failure to perform will be deemed to be a waiver of any future rights arising out of this EULA. 13. Entire Agreement This EULA constitutes the entire agreement between the parties with respect to its subject matter, and supersedes all prior agreements, proposals, negotiations, representations or communications relating to the subject matter. Both parties acknowledge that they have not been induced to enter into this EULA by any representations or promises not specifically stated herein.

5 Network Diagram The network diagram below depicts a large LAN campus infrastructure consisting of a LAN Core, Distribution (User and Server Farm), and Access (User and Server Farm) networks. A larger version of this picture is included in this package. The details of this design are discussed in the first section of this document. The hardware for this infrastructure will consist of the following: Cisco Catalyst 3560 Cisco Catalyst 3750G Cisco Catalyst 2960G

6 Outline 1a. LAN Switching Overview and Concepts LAN Switching uses technologies such as VLANs, Trunking, VTP, and Spanning Tree to allow networks to be extended across a LAN, provide reliability, and ease of LAN network administration. At the same time, building a robust LAN switching infrastructure is critical because the smallest mis-configuration, for example, can bring an entire network to its knees. This has been something I have witnessed on many occasions. A lot of elements come into place when we discuss designing and building a robust Switching infrastructure. The biggest debate among network people is whether companies should use an End-to- End Routing environment or an End-to-End Switching environment. I have deployed numerous networks under both environments and it all comes down to how the network will be designed and configured. There are more recommended items needed with a LAN switching design to minimize the overall risk. Let's discuss these two infratruction options a little further (Routing vs Switching)... 1b. LAN Switching Design In our design we will build a LAN Campus infrastructure that consist of a LAN Core, Distribution, Access, Server Farm Distribution, and Server Farm Access networks. Layer 2 trunks will be configured end-toend on our network, with a few restrictions to control what our switching network will look like. We will configure User VLANs within our User Distribution network 2. LAN Core Design and Configuration Our LAN Core will be the backbone to our LAN switching infrastructure. It will be configured for EIGRP routing with summarized routes coming in from the two Distributions networks. Point to Point VLANs will be configured between two of the LAN endpoints for the Interconnections between all Distributions and the other Core. Each Inter-connection (ICT). Our LAN Core will consist of two L3-switches, Cisco Catalyst 3750G models. ROUTEHUB-CSR01 Current configuration : 3531 bytes version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption hostname routehub-csr01 no aaa new-model switch 1 provision ws-c3750g-24ts vtp domain ROUTEHUB vtp mode transparent udld aggressive

7 ip subnet-zero ip routing no ip domain-lookup no file verify auto spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree extend system-id spanning-tree backbonefast vlan internal allocation policy ascending vlan 678 name ROUTEHUB-V678-MGMT vlan 912 name ROUTEHUB-V912-ICT vlan 913 name ROUTEHUB-V913-ICT vlan 914 name ROUTEHUB-V914-ICT vlan 915 name ROUTEHUB-V915-ICT vlan 999 name bit-bucket interface GigabitEthernet1/0/1 switchport trunk encapsulation dot1q switchport trunk native vlan 999 switchport trunk allowed vlan 678,912 switchport mode trunk switchport nonegotiate carrier-delay msec 0 udld port aggressive.

8 7. Monitor: LAN Core The following reflects various show commands on our LAN Core network, reflecting the configuration we applied to our network and what we expect to see on our LAN Core in a running working state in regards to LAN switching. We will look at our switching environment in terms of VLANs, Trunking, VTP, Spanning Tree, and IP Routing. We will look at our spanning tree states, trunking status, vlans configured, routing neighbors, our main routing table, and other details of our switching environment. routehub-csr01#show vlan VLAN Name Status Ports default active Gi1/0/5, Gi1/0/6, Gi1/0/7 Gi1/0/8, Gi1/0/9, Gi1/0/10 Gi1/0/11, Gi1/0/12, Gi1/0/13 Gi1/0/14, Gi1/0/15, Gi1/0/16 Gi1/0/17, Gi1/0/18, Gi1/0/19 Gi1/0/20, Gi1/0/21, Gi1/0/22 Gi1/0/23, Gi1/0/24, Gi1/0/25 Gi1/0/26, Gi1/0/27, Gi1/0/ ROUTEHUB-V678-MGMT active 912 ROUTEHUB-V912-ICT active 913 ROUTEHUB-V913-ICT active 914 ROUTEHUB-V914-ICT active 915 ROUTEHUB-V915-ICT active 999 bit-bucket active 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans enet enet enet enet enet enet enet fddi tr fdnet ieee trnet ibm Remote SPAN VLANs Primary Secondary Type Ports

9 routehub-csr01#show vlan summary Number of existing VLANs : 11 Number of existing VTP VLANs : 11 Number of existing extended VLANs : Breakdown spanning-tree mode rapid-pvst spanning-tree vlan 200,202 priority vlan 100 name VLAN100-SF. Enables the Rapid Spanning Tree operation on the entire switch. Configures VLANs 200 and 202 on the switch to be assigned priority value The lower priority (for these two VLANs) between other switches will be the Root Bridge. This configures the layer 2 VLAN and assigns a description or name to the VLAN Various Monitoring Commands show spanning-tree summary total show vlan virtual-port slot X show port <mod/port>.