0 penilaian0% menganggap dokumen ini bermanfaat (0 suara)
200 tayangan8 halaman
This project will provide support for High-Definition IP cameras for DeVry's campus network. In the past few months, the university has experienced a number of issues with layer 2 loops and the loss of VLAN's. Your manager is concerned with the network's inability to self-heal when experiencing these types of network issues.
This project will provide support for High-Definition IP cameras for DeVry's campus network. In the past few months, the university has experienced a number of issues with layer 2 loops and the loss of VLAN's. Your manager is concerned with the network's inability to self-heal when experiencing these types of network issues.
This project will provide support for High-Definition IP cameras for DeVry's campus network. In the past few months, the university has experienced a number of issues with layer 2 loops and the loss of VLAN's. Your manager is concerned with the network's inability to self-heal when experiencing these types of network issues.
This project will provide support for High-Definition IP cameras for DeVrys campus network. In Phase 1, you designed a network switching infrastructure that supported both the existing data traffic, as well as additional camera traffic. In Phase 2, you created standards and provided a configuration template for implementation teams to use in future deployments. In Phase 3, you will look into the health of the network at layer 2. Phase 3 Assignment
Over the past few months, the university has experienced a number of issues with layer 2 loops and the loss of VLANs. It was discovered that a student connected a switch that was purchased at a local garage sale to the network, and inadvertently bridged the network, causing a Layer 2 loop. The switch also wiped out the VLANs on the upstream switches. Your manager is concerned with the networks inability to self-heal when experiencing these types of network issues. As the network engineer, he has asked you to do a network assessment on the networks health and how to prepare the network for any future STP and VTP issues.
Design Requirements Your analysis and recommendations should address each of the following: 1. Layer 2 spanning-tree hardening; and
2. VTP standardization Running Head: ASSESSMENT ON THE NETWORKS HEALTH 2 Deliverables You are required to prepare a detailed network report for your manager at the next scheduled meeting. Your report should: 1. Describe in detail all issues associated with layer 2 loops and VTP; and
2. Present best design practices to minimize layer 2 loops and VTP; IMPORTANT: A report template is provided beginning on the next page and you must use it to submit your assignment. Before submitting your assignment, delete the first three pages of this document containing the instructions. Your submitted assignment should begin with the Title Page and only contain your report. Research References
The following websites are available to assist in your research and design for this project. Cisco: http://www.cisco.com NetworksOnline: http://www.networkers-online.com Slideshare: http://www.slideshare.net/networksguy/topdown-network-design
Running Head: ASSESSMENT ON THE NETWORKS HEALTH 3
Assessment on the Networks Health Name DeVry University NETW206: Introduction to Switching
Submitted to: Professor: Date:
ASSESSMENT ON THE NETWORKS HEALTH 4 4
STP (Spanning Tree Protocol) STP is a Cisco proprietary protocol. We are using STP to eliminate the layer 2 loops of a network. STP provides path redundancy while preventing undesirable loops in a network that are created by multiple active paths between stations. Root Bridge The root bridge is the bridge with the best bridge ID. With STP, the key is for all the switches in the network to elect a root bridge that becomes the focal point in the network. All other decisions in the networksuch as which port is to be blocked and which port is to be put in forwarding modeare made from the perspective of this root bridge.
BPDU All the switches exchange information to use in the selection of the root switch as well as in subsequent configuration of the network. Each switch compares the parameters in the Bridge Protocol Data Unit (BPDU) that it sends to one neighbor with the one that it receives from another neighbor.
Bridge ID The bridge ID is how STP keeps track of all the switches in the network. It is determined by a combination of the bridge priority (32,768 by default on all Cisco switches) and the base MAC address. The bridge with the lowest bridge ID becomes the root bridge in the network.
Nonroot bridges These are all bridges that are not the root bridge. Nonroot bridges exchange BPDUs with all bridges and update the STP topology database on all switches, preventing loops and providing a measure of defense against link failures.
Port cost Port cost determines the best path when multiple links are used between two switches and none of the links is a root port. The cost of a link is determined by the bandwidth of a link.
Root port The root port is always the link directly connected to the root bridge, or the shortest path to the root bridge. If more than one link connects to the root bridge, then a port cost is determined by checking the bandwidth of each link. The lowest-cost port becomes the root port. If multiple links have the same cost, the bridge with the lower advertising bridge ID is used. Since multiple links can be from the same device, the lowest port ASSESSMENT ON THE NETWORKS HEALTH 5 5
number will be used. Designated port A designated port is one that has been determined as having the best (lowest) cost. A designated port will be marked as a forwarding port.
Nondesignated port A nondesignated port is one with a higher cost than the designated port. Nondesignated ports are put in blocking modethey are not forwarding ports. Forwarding port A forwarding port forwards frames. Blocked port A blocked port is the port that, in order to prevent loops, will not forward frames. However, a blocked port will always listen to frames.
In a STP operation of a network, the first thing is to do is electing the Root Bridge. Root Bridge is the switch with the lowest priority in the network.
Bridge Priority = Bridge ID + MAC Address
First we are checking about the Bridge ID. By default in Cisco switches, its 32,768. If Bridge Ids are equal, then we are watching for the MAC address.
Switch A Default priority 32768 MAC 0c0011111111 Switch B Default priority 32768 MAC 0c0022222222 Fa 0/11 Fa 0/11 Fa 0/12 Fa 0/12 100 Mbps 100 Mbps
In the above mentioned diagram, Bridge IDs are equal. So then we chose the Switch with lowest MAC address as the Root Bridge. So then its Switch A. So then the highest port of the nonroot bridge is become the Blocking port. Fa 0/11 of Switch B is root port. In STP algorithm, ports are running on four different states they are,
Blocking:- A blocked port wont forward frames; it just listens to BPDUs. The purpose of the blocking state is to prevent the use of looped paths. All ports are in blocking state by default when the switch is powered up. ASSESSMENT ON THE NETWORKS HEALTH 6 6
Listening :- The port listens to BPDUs to make sure no loops occur on the network before passing data frames. A port in listening state prepares to forward data frames without populating the MAC address table.
Learning :- The switch port listens to BPDUs and learns all the paths in the switched network. A port in learning state populates the MAC address table but doesnt forward data frames. Forward delay means the time it takes to transition a port from listening to learning mode, which is set to 15 seconds by default and can be seen in the show spanning-tree output.
Forwarding :- The port sends and receives all data frames on the bridged port. If the port is still a designated or root port at the end of the learning state, it enters the forwarding state. Disabled A port in the disabled state (administratively) does not participate in the frame forwarding or STP. A port in the disabled state is virtually nonoperational.
VTP (VLAN Trunking Protocol)
VTP is also another Cisco proprietary protocol, which we are using to configure VLANs in Cisco routers. The basic goals of VLAN Trunking Protocol (VTP) are to manage all configured VLANs across a switched internetwork
Server This is the default mode for all Catalyst switches. You need at least one server in your VTP domain to propagate VLAN information throughout that domain. Also important: The switch must be in server mode to be able to create, add, and delete VLANs in a VTP domain. VTP information has to be changed in server mode, and any change made to a switch in server mode will be advertised to the entire VTP domain. In VTP server mode, VLAN configurations are saved in NVRAM.
Client In client mode, switches receive information from VTP servers, but they also send and receive updates, so in this way, they behave like VTP servers. The difference is that they cant create, change, or delete VLANs. Plus, none of the ports on a client switch can be added to a new VLAN before the VTP server notifies the client switch of the new VLAN. Also good to know is that VLAN information sent from a VTP server isnt stored in NVRAM, which is important because it means that if the switch is reset or reloaded, the VLAN information will be deleted. ASSESSMENT ON THE NETWORKS HEALTH 7 7
Transparent Switches in transparent mode dont participate in the VTP domain or share its VLAN database, but theyll still forward VTP advertisements through any configured trunk inks. They can create, modify, and delete VLANs because they keep their own database one they keep secret from the other switches. Despite being kept in NVRAM, the VLAN database in transparent mode is actually only locally significant. The whole purpose of transparent mode is to allow remote switches to receive the VLAN database from a VTP server-configured switch through a switch that is not participating in the same VLAN assignments.
Part of a VTP configuration of a cisco switch Switch>enable Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#vtp domain TEST Changing VTP domain name from NULL to TEST Switch(config)#vtp mode server Device mode already VTP SERVER.