Intro To VLANS on the CRS Joshua Gray, Brian Vargyas Baltic Networks MUM 2016 CRS VLans

Transcription

1 Intro To VLANS on the CRS Josha Gray, Brian Vargyas Baltic Networks 1

2 Josha Bio Josha Gray Network Engineer Since 2008 Finishing masters degree in Network Engineering and Secrity at DePal University. Ipv6, MTCNA, MTCRE, MTCWE, MTCINE, InfraGard 2

3 Brian Bio As the owner of Baltic Networks and a former wireline and wireless ISP, I m always looking for that next prodct or service that makes yor job as a service provider easier and improves yor bottom line. I started in telecommnications in 1986 and got involved with Mikrotik in 2003 deploying large scale hotpots in airports worldwide. I m also a certified Mikrotik trainer. 3

4 The Swiss Army knife of VLANs The CRS is not yor grandfather s switch A corncopia of VLAN fn awaits yo (Vlan Tag Switching) Nmber one reqest we get on CRS devices

5 Benefits of Using VLANS Many switches connected together can create an isse with scalability The larger the broadcast domain the more traffic that is consmed in jst broadcast frames One might not want a broadcast to reach a certain port for secrity concerns VLANS allow a physical layer two network to be split into several virtally isolated networks QOS- Different VLANS can have different priorities. 5

6 VLAN Planning Ports can be pt into a trnk mode or access level mode Broadcasts are sent only to ports that are participating in the VLAN Each VLAN shold be a single sbnet. 6

7 Inter VLAN Roting?!?! One can rote between vlans sing a roter on a stick. Or sing the CRS bt keep in mind it is not extremely powerfl. 7

8 OSI Model 8

9 Ethernet Frame 9

10 Packet Captre 10

11 Packet Captre 11

12 Packet Captre Trnk Access Level VLAN Tag No VLAN Tag 12

13 Trnk VS Access Trnks Access Links between switches Links to servers with mltiple sbnets Links to other network devices that spport Vlans Admin systems that need access to mltiple Vlans Links between end ser devices Links to APs that only needs single VLAN Gest devices 13

14 Setp Trnk Office Gest One trnk back to core switches. (Eth1) Ports 3-6 trnked for mltiple SSID on access points Ports 9-13 access ports for Office sers (VLAN 11) Ports access ports for Gest sers (VLAN 21) 14

15 Set p Switch Chip Slave all all ports to Eth1 15

16 Set p Switch Chip Slave all all ports to Eth1 /interface ethernet set [ find defalt-name=ether2 ] master-port=ether1 set [ find defalt-name=ether3 ] master-port=ether1 set [ find defalt-name=ether4 ] master-port=ether1 set [ find defalt-name=ether5 ] master-port=ether1 set [ find defalt-name=ether6 ] master-port=ether1 set [ find defalt-name=ether7 ] master-port=ether1 set [ find defalt-name=ether8 ] master-port=ether1 set [ find defalt-name=ether9 ] master-port=ether1 set [ find defalt-name=ether10 ] master-port=ether1 set [ find defalt-name=ether11 ] master-port=ether1 set [ find defalt-name=ether12 ] master-port=ether1 16

17 Add Vlans Switch > VLAN + Add Vlan 11 Add Ports 1,2,3,4,5,6 (Will Be Trnk) Add Ports 9,10,11,12,13 (Will be Access Layer) These ports are for the office network. 17

18 Add Vlans Switch > VLAN + Add Vlan 21 Add Ports 1,3,4,5,6 (Trnk ports) Add Ports17,18,19,20 (Will be Access Layer) These ports are for the office network. 18

19 Add Vlans Switch > VLAN + Add Vlan 11 Add Vlan 21 /interface ethernet switch vlan add ports= ether1,ether2,ether3,ether4,ether5,ether6,\ ether9,ether10,ether11,ether12,ether13 vlan-id=11 add ports=ether1,ether3,ether4,ether5,ether6,ether17,\ ether18,ether19,ether20 vlan-id=21 19

20 Setp Trnk Ports Switch > VLAN > Eg. VLAN TAG 20

21 Setp Trnk Ports Switch > VLAN > Eg. VLAN TAG /interface ethernet switch egress-vlan-tag add tagged-ports=ether1,ether2,ether3,ether4,ether5,\ ether6 vlan-id=21 add tagged-ports=ether1,ether2,ether3,ether4,ether5,\ ether6 vlan-id=11 21

22 Ingress Ports Setp access level ports to tag traffic that comes in appropriately. Switch > VLAN > In. VLAN TAG Service VID: Used for service provider tagging PCP: Used to set priority DEI: Drop eligibility indicator 22

23 Ingress Ports Set access level ports for the office network Traffic inbond to the switch Ports 9, 10, 11,12, 13 23

24 Ingress Ports Set access level ports for the Gest network Traffic inbond to the switch Ports 17,18,19,20 24

25 Ingress Ports /interface ethernet switch ingress-vlan-translation add cstomer-vid=0 new-cstomer-vid=11 ports=\ ether9,ether10,ether11,ether12,ether13 add cstomer-vid=0 new-cstomer-vid=21 ports=ether17\, ether18,ether19,ether20 25

26 Egress Setp access level ports to tag traffic that comes in appropriately. Switch > VLAN > Eg. VLAN TAG 26

27 Egress Set access level ports for the Gest network Traffic otbond from the switch Ports 9, 10, 11,12, 13 27

28 Egress Set access level ports for the Gest network Traffic inbond to the switch Ports 17,18,19,20 28

29 Egress /interface ethernet switch egress-vlan-translation add cstomer-vid=11 cstomer-vlan-format=ntagged-or-tagged\ new-cstomer-vid=0 ports=ether9,ether10,ether11,ether12\,ether13 ports=ntagged-or-tagged add cstomer-vid=21 cstomer-vlan-format=ntagged-or-tagged\ new-cstomer-vid=0 ports=ether17,ether18,ether19,ether20\ cstomer-vlan-format=ntagged-or-tagged 29

30 CRS IP on the VLAN? Add switch chip to VLAN and Eg. VLAN Tag. 30

31 CRS IP on the VLAN? Create VLAN on Master Port. 31

32 CRS IP on the VLAN? Assign IP to that port. 32

33 Qestions? 33