Etherchannels

October 20, 2013

To finish up the first topic under LAN Switching Technologies, identifying enhanced switching technologies. I will give you an overview of Etherchannels.

What they are, what they do and how to configure one for yourself.

Firstly an Etherchannel is a configuration that allows a switch to treat two parallel links as one physical link. This also allows STP to treat the entire channel as one and either block or forward traffic over this link as per vlan.

As a result of this, the switch can now load balance traffic over the channel. Without Etherchannel one of the links would be blocked by STP, as is shown in the example below.

Before Etherchannel, STP blocks Fa0/2 from SW1.

In the above example, SW0 and SW1 are connected via two links. Fa0/1 to Fa0/1 and Fa0/2 to Fa0/2, but due to STP it has blacked Fa0/2 on SW1 from forwarding frames. STP at this point see’s these two links as they are, separate from one another.

02_spanning-tree_onSW1When we run a show spanning-tree command on SW1 we discover that, port Fa0/1 is in a forwarding state as the RP, Port Fa0/2 is blocked and Fa0/3 is the DP. Running the show spanning-tree command on SW0 would show us that it is the Root Bridge and all three ports are DP’s or Designated Ports.

To make STP use both the Fa0/1 and Fa0/2 links on SW0 and SW1 we need to configure the interfaces in the same Channel-group or Etherchannel. Doing so will change how STP see’s those two links. From two separate links to one link which can be used to load balance. We are not actually making one physical link but like a VLAN where we can make many Virtual LAN’s we are creating one Virtual Link using 2 parallel links.

For this network the configuration is virtually the same, just remember you will need to add the correct interfaces in the same channel group for an Etherchannel to become active.

The following image shows you how to correctly configure an Etherchannel, using the command channel-group 1 mode on, you can configure upto 8 parallel links on the one Etherchannel.

03_Channel-group

Below you can see the new show spanning-tree output displayed on SW1 after the Etherchannel has been configured. Notice the Po1, that indicates that all the configuration parameters checked and that is the new channel group 1, which was configured earlier.

04_newSTPonSW1

The new diagram, with the two links now bundled in the new Etherchannel. Notice how Fa0/2 has come out of blocking mode to become a RP

05_Etherchannel


Problems avoided using STP

October 15, 2013

If you are going to setup a LAN with redundant paths, it is important that STP is running. If not you will be opening yourself up to these few problems

  • Broadcast Storms
  • MAC Table instability
  • Multiple frame transmission

While the issue of broadcast storms may seem obvious, the other two may not be the things you think about at all. In the case of MAC table instability your switches will experience frequent updates to their MAC tables with wrong entires, from the looped frames which are being sent around the LAN.

The second issue of Multiple frame transmission can be somewhat, a disastrous side affect of not running STP. Duplicate copies of the looping frame can end up at the end host, in turn completely confusing it, resulting in discarded frames.

Luckily though on CISCO switches STP is on by DEFAULT


Spanning Tree Protocol Port Roles

October 1, 2013

The diagram below is the network in use:

Switch 3

FA0/1 – DP

FA1/1 – DP

Switch 1

FA1/1 – RP

FA0/1 DP

Switch 2

FA1/1 – RP

FA0/1 – DP

Switch 0

FA0/1 – RP

FA1/1 – ALTN

The lab for this example can be downloaded  by clicking here
01_Diagram 02_STP_Ports_Roles 03_STP_Port_Roles


VLAN Database

August 25, 2013

To forward traffic for a VLAN, a switch needs to know the VLAN’s ID and it’s name and that’s the job of VTP.

The VLAN database itself is actually stored in flash as VLAN.dat 


ISL and 802.1Q Overview

August 21, 2013

ISL and 802.1Q Similarities

  • Both define a VLAN header with a VLAN ID field
  • Both support 4094 VLANS
  • Both use a 12bit VLAN header to number VLANS
  • Both support separate instances of STP for each VLAN

 

ISL and 802.1Q Differences

  • ISL is proprietary and 802.1Q is standard
  • Each use a different header
  • 802.1Q uses the native VLAN concept

CDP Video Tutorial

May 31, 2013

A quick run through the CDP commands to help you map a network, HD is available for this video guys.

[youtube=http://youtu.be/nzGconvPllo]


Three most Common Types of Attacks

May 30, 2013

Denial of Service (DoS)

  • Erasers try to harm the host, destroying hardware and files
  • Crashers cause hosts to fail or no longer allow hosts to connect to the network
  • Flooders flood the network with packets to make the network unusable.

Reconnaissance Attacks

  • The goal is to gather information to perform an access attack and causing harm can be a side effect.

Access Attack

  • An attempt to steal data typically for some type of financial gain.

*This topic will definitely be asked in the exam room, make note and have this stuff drilled in


DHCP – Information That it Shares

May 14, 2013

The following is a list of the information that a DHCP server will share with hosts.

  • Host IP address
  • Subnet Mask
  • Default Gateway
  • IP Address(es) of any DNS servers

Dynamic Host Control Protocol (DHCP)


Fast Fact 1

May 12, 2013

Routers break up broadcast domains.Network_Gear_by_pyrexshards


Port Security

April 28, 2013

Switches examine the source MAC address of the received frame, switches can take a few possible options if it discovers that the incoming MAC address on that port is NOT SECURE.

  •  shutdown (the switch shuts down the port and sends a log message and drops the frame/s , also the interface status will read err-disabled you have to run a no shutdown to open the port again) ON BY DEFAULT
  • restrict (drops the frames and transmits a log message but does not shutdown the port)
  • protect (only drops the frames)

When configuring Port security and the source MAC address is unknown switchport port-security mac-address sticky can be used and the switch will use the first mac address learned as the Secure MAC address