Professional Documents
Culture Documents
2
Chapter 11 Objectives
• The Following CompTIA Network+ Exam
Objectives Are Covered in This Chapter:
• Default gateway
• PoE and PoE+ (802.3af, 802.3at)
• Switch management
• o User/passwords
• o AAA configuration
• o Console
• o Virtual terminals
• o In-band/Out-of-band management
• Managed vs unmanaged
• 3.3 Given a scenario, implement network hardening
techniques
• o Network-based
• Switch port security
• o MAC address filtering
• o VLAN assignments
• Network segmentation
3
Switching and Virtual LANs
(VLANs)
4
The first LAN
Hubs
Server Farm
Token Ring
Server Farm
Switches
Token Ring
Switched network design
Server
• Layer 2 switching provides the following benefits:
– Hardware-based bridging (ASIC)
– Wire speed
– Low latency
8
– Low cost
Switch Functions at Layer 2
• There are three distinct functions of Layer 2 switching
– Address learning
– Forward/filter decisions
– Loop avoidance
9
Address Learning
MAC Forward/Filter Table
E0/0:
E0/1:
E0/2:
E0/3:
E0/0 E0/3
E0/1 E0/2
E0/0 E0/3
E0/1 E0/2
Step 1
3 4 3 3
When the hosts start communicating, the switch places the source
hardware address of each frame in the table along with the 11
corresponding port
Forwarding/Filter Table Evaluation
Switch#sh mac address-table
VLAN Mac Address Ports
-------- ------------------- --------
1 0005.dccb.d74b Fa0/4
1 000a.f467.9e80 Fa0/5
1 000a.f467.9e8b Fa0/6
A B C D
Segment 1
Broadcast Switch B
Switch A
Segment 2
Router C Unicast
Segment 1
Unicast Unicast
Switch B Switch A
Segment 2
15
Switching Loops
• Blocking
– A blocked port won’t forward frames; it just listens to BPDUs and will
drop all other frames.
• Listening
– The port listens to BPDUs to make sure no loops occur on the network
before passing data frames without populating the MAC address table.
• Learning
– A port in learning state populates the MAC address table but doesn’t
forward data frames.
• Forwarding
– The port sends and receives all data frames on the bridged port. If the
port is still a designated or root port at the end of the learning state, it
enters the forwarding state.
• Disabled
– A port in the disabled state (administratively) does not
participate in the frame forwarding or STP.
17
Switching Design
STP root
Bridge Priority 4096
6500
Host A Host D
• The frame is only forwarded out of the port where Host D is located. This is a huge
improvement over hubbed networks.
21
Physical LANs
Connected to a Router
Hubs
Engineering Sales
Shipping Marketing
Finance Management
Provides inter-VLAN
Communication and
WAN services
Marketing VLAN2 172.16.20.0/24
Shipping VLAN3 172.16.30.0/24
Engineering VLAN4 172.16.40.0/24
Finance VLAN5 172.16.50.0/24
Management VLAN6 172.16.60.0/24
Sales VLAN7 172.16.70.0/24
23
Quality of Service
• Delay
• Dropped packets
• Error
• Jitter
• Out-of-order delivery
24
VLAN Memberships
• Static VLANs
– Creating static VLANs is the most
common way to create a VLAN, and one
of the reasons for that is because static
VLANs are the most secure
• Dynamic VLANs
– On the other hand, a dynamic VLAN
determines a host’s VLAN assignment
automatically. Using intelligent
management software, you can base
VLAN assignments on hardware (MAC)
addresses, protocols, or even applications
that work to create dynamic VLANs.
25
Access and Trunk Links
10Base-T/100Base-TX Catalyst 2950 SERIES
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 A 100Base-FX B
SYST RPS
MODE
Trunk Link
MODE
26
VLAN Identification Methods
27
VLAN Trunking Protocol
Server
Client Transparent
31
Port Security
Figure 11.19
Port Bonding
Figure 11.20
Chapter 11
Switched Ethernet ports can provide power to devices.
Figure 11.21
Advanced Features of Switches
35
Power over Ethernet (PoE)
• Switches can provide power to end devices by injecting
power into the Ethernet cabling.
• If PoE switches are not implemented, power can be injected
into the cabling outside the switch.
36
Port Mirroring/Spanning
37
Port Mirroring
B
A Sniffer
Switch
• Summary
• Exam Essentials Section
• Written Labs
• Review Questions
39