•After a collision occurs and all stations allow the cable to become idle each waits the Randomly Backoff Time become idle each waits the full inter-frame spacing •The stations that coll
Trang 1Chapter 2: Basic switch concepts
and configurations
CCNA Exploration 4.0
1
Trang 2Học viện mạng Bach Khoa - Website: www.bkacad.com 2
Trang 4Media Access Control (MAC)
•MAC refers to protocols that determine which computer
logical bus topology and
Deterministic, Non-Deterministic
on a shared-medium environment, or collision domain, is allowed to transmit the data
topology and physical star or extended star
transmit the data.
•MAC, with LLC, comprises the IEEE version of the OSI Layer 2
logical ring topology and a Layer 2
•There are two broad categories of Media Access Control, deterministic ( taking
physical star topology
turns ) and non-deterministic
( first come, first served)
logical ring topology and physical dual ring
Học viện mạng Bach Khoa - Website: www.bkacad.com 4
physical dual-ring topology
Trang 5Transmitting&
layers of the OSI model
3 Detecting errors within data packets or on the
listening Why ???
p network
???
Học viện mạng Bach Khoa - Website: www.bkacad.com 5
Trang 6Flow chart
Học viện mạng Bach Khoa - Website: www.bkacad.com 6
Trang 7•After a collision occurs and all stations allow the cable to become idle (each waits the
Randomly Backoff Time
become idle (each waits the full inter-frame spacing)
•The stations that collided must wait an additional and
must wait an additional and potentially progressively longer period of time before attempting to retransmit the p g collided frame
•The waiting period is intentionally designed to be random
•If the MAC layer is unable to send the frame after sixteen attempts it gi es p and
Học viện mạng Bach Khoa - Website: www.bkacad.com 7
attempts, it gives up and generates an error to the network layer
Trang 8Ethernet Communications
Học viện mạng Bach Khoa - Website: www.bkacad.com 8
Trang 10Ethernet frame structure
•At the data link layer the frame
structure is nearly identical for
all speeds of Ethernet from 10
all speeds of Ethernet from 10 Mbps to 10,000 Mbps
•At the physical layer almost all versions of Ethernet are
substantially different from one another with each speed having a distinct set of
architecture design rules
•The Ethernet II Type field is incorporated into the current
802 3 frame definition The
802.3 frame definition The
which higher-layer protocol is present in an incoming frame
Học viện mạng Bach Khoa - Website: www.bkacad.com 10
present in an incoming frame
by examining the Length/Type field
Trang 11Ethernet frame structure
•The Preamble is used for timing synchronization in the
Synchronization, Address types
slower implementations of Ethernet Faster versions of Ethernet are synchronous, and this timing information is
multicast (group), or (g p), broadcast
(all nodes)
•The source address is generally the unicast address
Học viện mạng Bach Khoa - Website: www.bkacad.com 11
of the transmitting Ethernet node (can be virtual entity – group or multicast)
Trang 12Ethernet frame structure
•The type value specifies the upper-layer protocol to
receive the data after
Length if value < 1536 decimal, (0x600) Î need LLC to identify receive the data after
Ethernet processing is completed.
•The length indicates the
(0x600) Î need LLC to identify upper protocol
number of bytes of data that follows this field (so contents
of the Data field are decoded per the protocol indicated)
•The maximum transmission unit (MTU) for Ethernet is
1500 octets so the data
1500 octets, so the data should not exceed that size
•Ethernet requires that the frame be not less than 46
4 bytes CRC
Học viện mạng Bach Khoa - Website: www.bkacad.com 12
frame be not less than 46 octets or more than 1518 octets (Pad is required if not enough data)
Type if value => 1536 decimal, (0x600) Î it identify upper protocol
CRC
Trang 13Naming on Ethernet
MAC ADDRESS
Ethernet uses MAC addresses that are 48 bits in length and expressed as
•Ethernet uses MAC addresses that are 48 bits in length and expressed as
12 hexadecimal digits
•Sometimes referred to as burned-in addresses ( BIA ) because they are
Học viện mạng Bach Khoa - Website: www.bkacad.com 13
burned into read-only memory (ROM) and are copied into random-access memory (RAM) when the NIC initializes
Trang 14Học viện mạng Bach Khoa - Website: www.bkacad.com 14
Trang 15Ethernet in full duplex
Full duplex Full duplex
• If the attached station is operating in full duplex then the station may
send and receive simultaneously and collisions should not occur Full
send and receive simultaneously and collisions should not occur duplex operation also changes the timing considerations and
Full-eliminates the concept of slot time
• In half-duplex if no collision the sending station will transmit 64 bits
Học viện mạng Bach Khoa - Website: www.bkacad.com 15
In half-duplex, if no collision, the sending station will transmit 64 bits
(timing synchronization) preamble, DA, SA, certain other header
information, actual data payload, FCS
Trang 16Ethernet in full duplex
Học viện mạng Bach Khoa - Website: www.bkacad.com 16
Trang 17Ethernet in full duplex
Học viện mạng Bach Khoa - Website: www.bkacad.com 17
Trang 18• Fast Ethernet and 10/100/1000 ports: default is auto
• 100BASE-FX ports: default is full p
• 10/100/1000 ports operate in either half- or full-duplex
mode when they are set to 10 or 100 Mb/s, but when set to
1 000 Mb/s they operate only in full duplex mode
1,000 Mb/s, they operate only in full-duplex mode
• Default: when Default: when autonegotiation fails autonegotiation fails ÆCatalyst switch sets ÆCatalyst switch sets the corresponding switch port to half-duplex mode
Học viện mạng Bach Khoa - Website: www.bkacad.com 18
Trang 19releases between Cisco IOS Release 12.1(14)EA1 and ( )
12.2(18)SE, the auto-MDIX feature is disabled by default
Học viện mạng Bach Khoa - Website: www.bkacad.com 19
Trang 20MAC Addressing and Switch MAC Address
Tables
Học viện mạng Bach Khoa - Website: www.bkacad.com 20
Trang 21Học viện mạng Bach Khoa - Website: www.bkacad.com 21
Trang 22Học viện mạng Bach Khoa - Website: www.bkacad.com 22
Trang 23Học viện mạng Bach Khoa - Website: www.bkacad.com 23
Trang 24Học viện mạng Bach Khoa - Website: www.bkacad.com 24
Trang 25Học viện mạng Bach Khoa - Website: www.bkacad.com 25
Trang 26Bandwidth and Throuhgput
Học viện mạng Bach Khoa - Website: www.bkacad.com 26
Trang 27Collision Domains
Học viện mạng Bach Khoa - Website: www.bkacad.com 27
Trang 28Collision Domains
Học viện mạng Bach Khoa - Website: www.bkacad.com 28
Trang 29Broadcast Domains
Học viện mạng Bach Khoa - Website: www.bkacad.com 29
Trang 30Broadcast Domains - Example
When a switch receives a broadcast frame, it forwards the frame to each of its ports, except the incoming port where the switch received the broadcast frame Each attached device recognizes the broadcast frame and processes it
it.
Học viện mạng Bach Khoa - Website: www.bkacad.com 30
Trang 31Broadcast Domains - Example
Học viện mạng Bach Khoa - Website: www.bkacad.com 31
Trang 32Network Latency
Học viện mạng Bach Khoa - Website: www.bkacad.com 32
Trang 33Network Congestion
• Causes of network congestion: g
– Increasingly powerful computer and network
Trang 34LAN Segmentation
Học viện mạng Bach Khoa - Website: www.bkacad.com 34
Trang 35Học viện mạng Bach Khoa - Website: www.bkacad.com 35
Trang 36Học viện mạng Bach Khoa - Website: www.bkacad.com 36
Trang 37Học viện mạng Bach Khoa - Website: www.bkacad.com 37
Trang 38Controlling Network Latency
Học viện mạng Bach Khoa - Website: www.bkacad.com 38
Trang 39Removing Network Bottlenecks
Học viện mạng Bach Khoa - Website: www.bkacad.com 39
Trang 40Switch Packet Forwarding Methods
Học viện mạng Bach Khoa - Website: www.bkacad.com 40
Trang 41Switch Packet Forwarding Methods
Học viện mạng Bach Khoa - Website: www.bkacad.com 41
Trang 42Học viện mạng Bach Khoa - Website: www.bkacad.com 42
Trang 43Học viện mạng Bach Khoa - Website: www.bkacad.com 43
Trang 44Symmetric and Asymmetric Switching
Học viện mạng Bach Khoa - Website: www.bkacad.com 44
Trang 45Port Based and Shared Memory Buffering
Học viện mạng Bach Khoa - Website: www.bkacad.com 45
Trang 46Layer 2 and Layer 3
Layer 2 and Layer 3
Switching
Học viện mạng Bach Khoa - Website: www.bkacad.com 46
Trang 47Học viện mạng Bach Khoa - Website: www.bkacad.com 47
Trang 48Layer 3 Switch and Router Comparison
Học viện mạng Bach Khoa - Website: www.bkacad.com 48
Trang 49Review you understanding
Học viện mạng Bach Khoa - Website: www.bkacad.com 49
Trang 50Review you understanding
Học viện mạng Bach Khoa - Website: www.bkacad.com 50
Trang 51Switch configuration
Học viện mạng Bach Khoa - Website: www.bkacad.com 51
Trang 52The Command Line Interface Modes
Học viện mạng Bach Khoa - Website: www.bkacad.com 52
Trang 53Học viện mạng Bach Khoa - Website: www.bkacad.com 53
Trang 54GUI-based Alternatives to the CLI
Học viện mạng Bach Khoa - Website: www.bkacad.com 54
Trang 55Học viện mạng Bach Khoa - Website: www.bkacad.com 55
Trang 56Học viện mạng Bach Khoa - Website: www.bkacad.com 56
Trang 57Học viện mạng Bach Khoa - Website: www.bkacad.com 57
Trang 58Context Sensitive Help
Học viện mạng Bach Khoa - Website: www.bkacad.com 58
Trang 59Console Error Messages
Học viện mạng Bach Khoa - Website: www.bkacad.com 59
Trang 60The Command History Buffer
Học viện mạng Bach Khoa - Website: www.bkacad.com 60
Trang 61Configure the Command History Buffer
Học viện mạng Bach Khoa - Website: www.bkacad.com 61
Trang 62Describe the Boot Sequence
Học viện mạng Bach Khoa - Website: www.bkacad.com 62
Trang 63Prepare to Configure the Switch
Step 1
Học viện mạng Bach Khoa - Website: www.bkacad.com 63
Trang 64Step 2
Học viện mạng Bach Khoa - Website: www.bkacad.com 64
Trang 65Step 3
Học viện mạng Bach Khoa - Website: www.bkacad.com 65
Trang 67Management Interface Considerations
Học viện mạng Bach Khoa - Website: www.bkacad.com 67
Trang 68Học viện mạng Bach Khoa - Website: www.bkacad.com 68
Trang 69Học viện mạng Bach Khoa - Website: www.bkacad.com 69
Trang 70Học viện mạng Bach Khoa - Website: www.bkacad.com 70
Trang 71Configure Duplex and Speed
Học viện mạng Bach Khoa - Website: www.bkacad.com 71
Trang 72Configure a Web Interface
Học viện mạng Bach Khoa - Website: www.bkacad.com 72
Trang 73Managing the MAC Address Table
show mac-address-table
show mac address table
Học viện mạng Bach Khoa - Website: www.bkacad.com 73
Trang 74Show Commands
Học viện mạng Bach Khoa - Website: www.bkacad.com 74
Trang 75Show running-config
Học viện mạng Bach Khoa - Website: www.bkacad.com 75
Trang 76Show interfaces
Học viện mạng Bach Khoa - Website: www.bkacad.com 76
Trang 77Backing Up the Configuration
Học viện mạng Bach Khoa - Website: www.bkacad.com 77
Trang 78Restoring the Configuration
Học viện mạng Bach Khoa - Website: www.bkacad.com 78
Trang 79Back up Configuration Files to a TFTP Server
Học viện mạng Bach Khoa - Website: www.bkacad.com 79
Trang 80Clearing Configuration Information
Học viện mạng Bach Khoa - Website: www.bkacad.com 80
Trang 81Config Password g
Học viện mạng Bach Khoa - Website: www.bkacad.com 81
Trang 82Configure Console Access
Học viện mạng Bach Khoa - Website: www.bkacad.com 82
Trang 83Secure the vty Ports
Học viện mạng Bach Khoa - Website: www.bkacad.com 83
Trang 84Configure EXEC Mode Passwords
Clear text password
Encrypted, Priority than enable password
Học viện mạng Bach Khoa - Website: www.bkacad.com 84
Trang 85Configure Encrypted Passwords
Trang 86Enable Password Recovery
Học viện mạng Bach Khoa - Website: www.bkacad.com 86
Trang 87Password Recovery
• Step 1 Connect a terminal or PC with terminal-emulation software to the switch console port.
• Step 2 Set the line speed on the emulation software to 9600 baud.
• Step 3 Power off the switch Reconnect the power cord to the switch and within 15 seconds, press the Mode button while the System LED is still flashing green Continue pressing the Mode button until the System LED turns briefly amber and then solid green Then release the Mode button.
• Step 4 Initialize the Flash file system using the flash_init command.
• Step 5 Load any helper files using the load helper command.
Học viện mạng Bach Khoa - Website: www.bkacad.com 87
Step 5 Load any helper files using the load_helper command.
Trang 88• 16128000 bytes total (10003456 bytes free)
• Step 7 Rename the configuration file to config.text.old, which contains the password definition, using the rename flash:config.text
the password definition, using the rename flash:config.text
flash:config.text.old command.
• Step 8 Boot the system with the boot command
Học viện mạng Bach Khoa - Website: www.bkacad.com 88
Trang 89Password Recovery
• Step 9 You are prompted to start the setup program Enter N at the prompt, and then when the system prompts whether to continue with the configuration dialog, enter N.
• Step 10 At the switch prompt enter privileged EXEC mode using the enable command
• Step 10 At the switch prompt, enter privileged EXEC mode using the enable command.
• Step 11 Rename the configuration file to its original name using the rename
flash:config.text.old flash:config.text command.
• Step 12 Copy the configuration file into memory using the copy flash:config.text
system:running-config command After this command has been entered, the follow is displayed on the console:
– Source filename [config.text]?
– Destination filename [running-config]?
Trang 90• Step 15 Return to privileged EXEC mode using the exit command.
• Step 16 Write the running configuration to the startup configuration file Step 16 Write the running configuration to the startup configuration file using the copy running-config startup-config command.
• Step 17 Reload the switch using the reload command.
• Note: The password recovery procedure can be different depending on the Cisco switch series, so you should refer to the product
Học viện mạng Bach Khoa - Website: www.bkacad.com 90
documentation before you attempt a password recovery.
Trang 91Configure a Login Banner
Học viện mạng Bach Khoa - Website: www.bkacad.com 91
Trang 92Configure a MOTD Banner
Học viện mạng Bach Khoa - Website: www.bkacad.com 92
Trang 93Telnet and SSH
• Remote control tool of switch and router
• SSH encrypt data before transmit yp
Học viện mạng Bach Khoa - Website: www.bkacad.com 93
Trang 94Configuring Telnet
Học viện mạng Bach Khoa - Website: www.bkacad.com 94
Trang 95Configuring SSH
Học viện mạng Bach Khoa - Website: www.bkacad.com 95
Trang 96Configuring SSH
• The switch supports SSHv1 or SSHv2 for the server component The
switch supports only SSHv1 for the client component
• To implement SSH, you need to generate RSA keys
– Step 1. Enter global configuration mode using the configure terminal
– Step 5. Return to privileged EXEC mode using the end command.
– Step 6 p Show the status of the SSH server on the switch using the show ip g p ssh or show ssh command.
– To delete the RSA key pair, use the crypto key zeroize rsa global
configuration command After the RSA key pair is deleted, the SSH server
is automatically disabled
Học viện mạng Bach Khoa - Website: www.bkacad.com 96
Trang 97Configuring the SSH Server
• Step 1 Enter global configuration mode using the configure terminal command
• Step 2 (Optional) Configure the switch to run SSHv1 or SSHv2 using Step 2 (Optional) Configure the switch to run SSHv1 or SSHv2 using the ip ssh version [1 | 2] command
– If you do not enter this command or do not specify a keyword, the If you do not enter this command or do not specify a keyword, the SSH server selects the latest SSH version supported by the SSH client For example, if the SSH client supports SSHv1 and SSHv2, the SSH server selects SSHv2
• Step 3 Configure the SSH control parameters:
– Specify the time-out value in seconds: default of 10 minutes
– Specify the number of times that a client can re-authenticate to the server The default is 3; the range is 0 to 5
Học viện mạng Bach Khoa - Website: www.bkacad.com 97
– Command: ip ssh {timeoutseconds | authentication-retriesnumber}.