Advanced Switches. Chapter 4.

Transcription

1 Advanced Switches Chapter 4

2 Outline Ethernet Technology Principles of Ethernet CSMA/CD Ethernet Switch Features Virtual LANs Access Port Trunks STP Broadcast Storms Link Aggregation PoE Port Monitoring Port Mirroring User Authentication

3 Ethernet IEEE Base5 (Thicknet) 10Base2 (thinnet or Cheapernet)

4 CSMA/CD Carrier Sense Multiple Access / Collision Detection Scalability Limits Collision Domain

5 One Collision Domain Half-Duplex Layer 1

6 Four Collision Domain Full-Duplex Layer 2 Every switchport is its own collision domain

7 Types of Ethernet Ethernet Standard Media Type Bandwidth Capacity Distance Limitation 10Base5 Coax (thicknet) 10 Mbps 500 m 10Base2 Coax (thinnet) 10 Mbps 185 m 10Base-T Cat 3 (or higher) UTP 10 Mbps 100 m 100Base-TX Cat 5 (or higher) UTP 100 Mbps 100 m 100Base-FX MMF 100 Mbps 2 km 1000Base-T Cat 5e (or higher) UTP 1 Gbps 100 m 1000Base-TX Cat 6 (or higher) UTP 1 Gbps 100 m 1000Base-LX MMF/SMF 1 Gbps 5 km 1000Base-LH SMF 1 Gbps 10 km 1000Base-ZX SMF 1 Gbps 70 km

8 Types of Ethernet (continued ) Ethernet Standard Media Type Bandwidth Capacity Distance Limitation 10GBase-SR MMF 10 Gbps m 10GBase-LR SMF 10 Gbps 10 km 10GBase-ER SMF 10 Gbps 40 km 10GBase-SW MMF 10 Gbps 300 m 10GBase-LW SMF 10 Gbps 10 km 10GBase-EW SMF 10 Gbps 40 km 10GBase-T Cat 6A (or higher) UTP 10 Gbps 100 m 100GBase-SR10 MMF 100 Gbps 125 m 100GBase-LR4 SMF 100 Gbps 10 km 100GBase-ER4 SMF 100 Gbps 40 km

9 Virtual LANs

10 Switch Access Port Configuration

11 Trunk Access (dot1q)

12 Switch Trunk Port Configuration

13 Corruption of a Switch s MAC Table

14 Broadcast Storms

15 STP Operation

16 Port Types with equal cost

17 Port Types with different cost

18 STP Port States BPDU = Bridge Protocol Data Units Blocking: The port remains in the blocking state for 20 seconds by default. During this time, the nondesignated port evaluates BPDUs in an attempt to determine its role in the spanning tree. Listening: The port moves from the blocking state to the listening state and remains in this state for 15 seconds by default. During this time, the port sources BPDUs, which inform adjacent switches of the port s intent to forward data.

19 STP Port States BPDU = Bridge Protocol Data Units Learning: The port moves from the listening state to the learning state and remains in this state for 15 seconds by default. During this time, the port begins to add entries to its MAC address table. Forwarding: The port moves from the learning state to the forwarding state and begins to forward frames.

20 Link Aggregation LACP = Link Aggregation Control Protocol

21 Link Aggregation LACP = Link Aggregation Control Protocol

22 Power over Ethernet (802.3af PoE)

23 Port Monitoring Wireshark Network Monitor

24 Port Monitoring Unable to Capture Traffic

25 Port Mirroring

26 User Authentication (802.1x)

27 User Authenication Supplicant: Authenticator: Authentication server: NAC 802.1x The device that wants to gain access to the network. The authenticator forwards the supplicant s authentication request on to an authentication server. After the authentication server authenticates the supplicant, the authenticator receives a key that is used to communicate securely during a session with the supplicant. The authentication server (for example, a Remote Authentication Dial In User Service [RADIUS] server) checks a supplicant s credentials. If the credentials are acceptable, the authentication server notifies the authenticator that the supplicant is allowed to communicate on the network. The authentication server also gives the authenticator a key that can be used to securely transmit data during the authenticator s session with the supplicant. Verify characteristics of the device seeking admission to the network.

28 Switch Management Unmanaged Does not support an IP address No console port Managed IP assigned Console access is most secure Encrypted Password OOB SSH

29 Management Access

30 Management Access

31 First-Hop Redundancy HSRP GLBP VRRP CARP

32 Advanced Switches Chapter 4