legacy inter-vlan routing · ppt file · web view ·...

61
Inter-VLAN Routing

Upload: dangdiep

Post on 08-Mar-2018

254 views

Category:

Documents


5 download

TRANSCRIPT

Page 1: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Inter-VLAN Routing

Page 2: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Objectives

Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing. Configure router-on-a-stick inter-VLAN routing. Troubleshoot common inter-VLAN configuration issues. Troubleshoot common IP addressing issues in an inter-VLAN-routed

environment. Configure inter-VLAN routing using Layer 3 switching. Troubleshoot inter-VLAN routing in a Layer 3-switched environment.

Page 3: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

3

Internetwork Communications

Can two hosts on different subnets communicate without a router? No

What would happen if a host tried to ping another host? They could not communicate.

Would it send an ARP Request? Why or why not? The host would not send an ARP Request because there is no

default-gateway.

C:>ping 172.16.30.100

172.16.10.100/24 172.16.20.100/24 172.16.30.100/24

Page 4: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

4

Internetwork Communications

Then Destination MAC Address is that of the same device as the Destination IP Address. Check ARP cache for entry of Destination IP Address and its MAC Address.

If no entry, ARP Request Destination IP Address asking for MAC Address.

Then Destination MAC Address will be that of the Default Gateway. Check ARP cache for entry of Default Gateway’s IP Address and its MAC Address.

If no entry, ARP Request Default Gateway’s IP Address asking for MAC Address.

Page 5: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

What is Inter-VLAN routing? Layer 2 switches cannot forward traffic between VLANs without

the assistance of a router. Inter-VLAN routing is a process for forwarding network traffic from

one VLAN to another, using a router.

Legacy Inter-VLAN Routing

Router-on-Stick Switch SVI Switch Routed Ports

Page 6: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Legacy Inter-VLAN Routing

Page 7: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Routers used to route between VLANs. Each VLAN was connected to a different physical router interface. Packets would arrive on the router through one through interface, be routed

and leave through another. Router interfaces connected to VLANs and have IP addresses from that

specific VLAN. Large networks with large number of VLANs required many router

interfaces.7

Legacy Inter-VLAN Routing

Page 8: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

A B C D

192.168.10.1255.255.255.0

192.168.20.1255.255.255.0

Legacy Inter-VLAN Routing

192.168.10.10255.255.255.0GW 192.168.10.1

192.168.10.11255.255.255.0GW 192.168.10.1

192.168.20.12255.255.255.0GW 192.168.20.1

192.168.20.13255.255.255.0GW 192.168.20.1

Router is required to connect (route) between subnets/VLANs

Page 9: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

S1(config)# vlan 10S1(config-vlan)# vlan 30S1(config-vlan)# exitS1(config)# interface f0/11S1(config-if)# switchport access vlan 10S1(config-if)# exitS1(config)# interface f0/4S1(config-if)# switchport access vlan 10S1(config-if)# exitS1(config)# interface f0/6S1(config)# switchport access vlan 30S1(config-if)# exitS1(config)# interface f0/5S1(config-if)# switchport access vlan 30

Page 10: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

R1(config)# interface g0/0R1(config-if)# ip address 172.17.10.1 255.255.255.0R1(config-if)# no shutdownR1(config)# exitR1(config-if)# interface g0/1R1(config-if)# ip address 172.17.30.1 255.255.255.0R1(config-if)# no shutdown

Page 11: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

R1# show ip routeCodes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP<output omitted>

172.17.0.0/16 is variably subnetted, 4 subnets, 2 masksC 172.17.10.0/24 is directly connected, GigabitEthernet0/0L 172.17.10.1/32 is directly connected, GigabitEthernet0/0C 172.17.30.0/24 is directly connected, GigabitEthernet0/1L 172.17.30.1/32 is directly connected, GigabitEthernet0/1

Page 12: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Router-on-a-Stick

Page 13: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

The router-on-a-stick approach uses a different path to route between VLANs. One of the router’s physical interfaces is configured as a 802.1Q trunk port so it

can understand VLAN tags. Logical subinterfaces are created; one subinterface per VLAN. Each subinterface is configured with an IP address from the VLAN it represents. VLAN members (hosts) are configured to use the subinterface address as a

default gateway. Only one of the router’s physical interface is used.

13

Router-on-a-Stick

Page 14: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

14

S1(config)# vlan 10S1(config-vlan)# vlan 30S1(config-vlan)# exitS1(config)# interface f0/11S1(config-if)# switchport access vlan 10S1(config-if)# exitS1(config)# interface f0/6S1(config)# switchport access vlan 30S1(config-if)# exitS1(config-vlan)# interface f0/5S1(config-if)# switchport mode trunkS1(config-if)#

Page 15: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

15

R1(config)# interface g0/0.10R1(config-subif)# encapsulation dot1q 10R1(config-subif)# ip address 172.17.10.1 255.255.255.0R1(config-subif)# exitR1(config)# interface g0/0.30R1(config-subif)# encapsulation dot1q 30R1(config-subif)# ip address 172.17.30.1 255.255.255.0R1(config-subif)# exitR1(config)# interface g0/0R1(config-if)# no shutdown

Page 16: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

16

R1# show vlans<output omitted>Virtual LAN ID: 10 (IEEE 802.1Q Encapsulation)

vLAN Trunk Interface: GigabitEthernet0/0.10

Protocols Configured: Address: Received: Transmitted: IP 172.17.10.1 11 18<output omitted>Virtual LAN ID: 30 (IEEE 802.1Q Encapsulation)

vLAN Trunk Interface: GigabitEthernet0/0.30

Protocols Configured: Address: Received: Transmitted: IP 172.17.30.1 11 8<output omitted>

Page 17: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

17

R1# show ip routeCodes: L - local, C - connected, S - static, R - RIP, M - mobile, B – BGP

<output omitted>

172.17.0.0/16 is variably subnetted, 4 subnets, 2 masksC 172.17.10.0/24 is directly connected, GigabitEthernet0/0.10L 172.17.10.1/32 is directly connected, GigabitEthernet0/0.10C 172.17.30.0/24 is directly connected, GigabitEthernet0/0.30L 172.17.30.1/32 is directly connected, GigabitEthernet0/0.30

Page 18: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Verify Switch Configuration

18

Page 19: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Verify Switch Configuration

19

Page 20: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Problem #1

20

VLAN 10

S1(config)# interface fa0/4S1(config-if)# switchport access vlan 10

Page 21: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Problem #2

21

S1(config)# interface fa0/5S1(config-if)# switchport mode trunk

Trunk

Page 22: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

22

S1(config)# interface fa0/5S1(config-if)# switchport mode trunk

Trunk

Problem #3

VLAN 10

Page 23: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Verify Router Configuration

23

Page 24: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Problem #4

24

R1(config)# interface g0/0R1(config-if)# ip address 172.17.10.1 255.255.255.0

172.17.10.1/24

Page 25: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Problem #5

25

172.17.10.21/24

Page 26: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Problem #6

26

172.17.10.21/24

Page 27: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Verifying IP Addressing

27

Page 28: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Multi-layer Switches and Inter-VLAN Routing

Page 29: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Routers vs Multilayer Switches

Routers and multilayer switches both perform routing (connecting networks)

Routers may have different types of interfaces (Ethernet, serial, ATM, etc.) while multilayer switches will only have Ethernet interfaces.

While routers can be used to segment LAN devices, their major use is as WAN devices.

Each devices does have its own advantages. Routers are:

The backbone devices of large intranets and of the Internet They operate at Layer 3 (network layer) of the OSI model They make decisions based on network addresses (IPv4, IPv6). 29

Page 30: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Switched Network Design

Core – Route/Switch packets quickly across between distribution multilayer switches.

Distribution – Route between VLANs/Subnets, ACLs

Access – Provide access to end devices and provide port security.

30

Page 31: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Multilayer switches can perform Layer 2 and Layer 3 functions, replacing the need for dedicated routers.

Multilayer switches support dynamic routing and inter-VLAN routing. A switch virtual interface (SVI) exists for VLAN 1 by default. On a multilayer switch, a logical (layer 3) interface can be configured for any

VLAN. With a multilayer switch, traffic is routed internal to the switch device. This routing process is a suitable and scalable solution.

31

Multilayer Switch Inter-

VLAN Routing

Page 32: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

32

Configure Router On A Stick: 802.1Q Trunk Link

interface GigabitEthernet 1/1 switchport mode trunk

interface GigabitEthernet 0/0 no shutdown ! Does not show in config!interface GigabitEthernet 0/0.2 description VLAN 2 encapsulation dot1Q 2 native ip address 172.16.1.2 255.255.255.0!interface GigabitEthernet 0/0.10 description VLAN 10 encapsulation dot1Q 10 ip address 172.16.10.1 255.255.255.0!interface GigabitEthernet 0/0.20 description VLAN 20 encapsulation dot1Q 20 ip address 172.16.20.1 255.255.255.0!interface GigabitEthernet 0/0.30 description VLAN 30 encapsulation dot1Q 30 ip address 172.16.30.1 255.255.255.0!interface GigabitEthernet 0/0.40 description VLAN 40 encapsulation dot1Q 40 ip address 172.16.40.1 255.255.255.0

172.16.10.100/24

172.16.20.100/24

Router on a stick is very simple to implement.

Page 33: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Routed Ports versus Switched Virtual Interfaces

Routed Ports – Just like a router, the port has an IP address/mask that makes it a member of that subnet.

SVI – The switch is a member of that IP subnet/VLAN. All switch ports that are a member of that VLAN can communicate with the switch

33

Page 34: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

34

Multilayer Switch Interfaces

Performs both Layer 2 switching and interVLAN routing. Layer 2 Interface: Access or Trunk ports Layer 3 Interface:

Has an IP address assigned to it. The Default Gateway for any hosts connected to that interface or VLAN. Physical interface

Same as a router Aka “Routed Port” Example: interface gigabit 0/1

Logical Interface Represents an entire VLAN Switched Virtual Interface (SVI) Example: interface vlan 10

Physical InterfaceLogical Interface (SVI)

Layer 2: Access or Trunk Ports

Page 35: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

35

192.168.10.10255.255.255.0GW 192.168.10.1

192.168.10.11255.255.255.0GW 192.168.10.1

192.168.20.12255.255.255.0GW 192.168.20.1

192.168.20.13255.255.255.0GW 192.168.20.1

A B C D

Layer 3 functionality can also be enabled for an entire VLAN. The IP address is assigned to the logical interface – the VLAN. This is needed when routing is required between VLANs. SVI (Switched Virtual Interface)

No physical connection VLANs must be created before the SVI can be used. The IP address associated of the VLAN interface is the default gateway of the

workstation.

SVI VLAN 10192.168.10.1255.255.255.0

SVI VLAN 20192.168.20.1255.255.255.0

Page 36: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

36

A B C D

<VLANs have been created or will be created when configured on the interface>

S1(config)# interface range fastethernet 0/1 - 12 S1(config-if-range)# switchport mode access S1(config-if-range)# switchport access vlan 10S1(config-if-range)# exitS1(config)# interface range fastethernet 0/12 - 24 S1(config-if-range)# switchport mode access S1(config-if-range)# switchport access vlan 20 S1(config-if-range)# end

192.168.10.10255.255.255.0GW 192.168.10.1

192.168.10.11255.255.255.0GW 192.168.10.1

192.168.20.12255.255.255.0GW 192.168.20.1

192.168.20.13255.255.255.0GW 192.168.20.1

SVI VLAN 10192.168.10.1255.255.255.0

SVI VLAN 20192.168.20.1255.255.255.0

Page 37: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

37

A B C D

DLS1(config)# inter vlan 10DLS1(config-if)# description Engineering VLANDLS1(config-if)# ip address 192.168.10.1 255.255.255.0DLS1(config-if)# no shutdownDLS1(config)# inter vlan 20DLS1(config-if)# description IT VLANDLS1(config-if)# ip address 192.168.20.1 255.255.255.0DLS1(config-if)# no shutdown

192.168.10.10255.255.255.0GW 192.168.10.1

192.168.10.11255.255.255.0GW 192.168.10.1

192.168.20.12255.255.255.0GW 192.168.20.1

192.168.20.13255.255.255.0GW 192.168.20.1

SVI VLAN 10192.168.10.1255.255.255.0

SVI VLAN 20192.168.20.1255.255.255.0

Page 38: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

38

A B C D

192.168.10.10255.255.255.0GW 192.168.10.1

192.168.10.11255.255.255.0GW 192.168.10.1

192.168.20.12255.255.255.0GW 192.168.20.1

192.168.20.13255.255.255.0GW 192.168.20.1

SVI VLAN 10192.168.10.1255.255.255.0

SVI VLAN 20192.168.20.1255.255.255.0

Alternative Configuration

Page 39: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

39

A B C D

DLS1(config)# inter gig 0/2DLS1(config-if)# switchport mode trunk

ALS1(config)# inter fa 0/9ALS1(config-if)# switchport mode trunk

192.168.10.10255.255.255.0GW 192.168.10.1

192.168.10.11255.255.255.0GW 192.168.10.1

192.168.20.12255.255.255.0GW 192.168.20.1

192.168.20.13255.255.255.0GW 192.168.20.1

SVI VLAN 10192.168.10.1255.255.255.0

SVI VLAN 20192.168.20.1255.255.255.0

Trunk

Distribution Layer Switch

Access Layer Switch

Page 40: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

40

Multilayer Switch Interfaces

Layer 2 or Layer 3 Interface? Is it a “switch” port? Default on most Catalyst switches: Layer 2 Default on Catalyst 6500: Layer 3

Verify mode: Switch# show interface type mod/num switchport

Switchport: Think Layer 2 Enabled: Layer 2 Disabled: Layer 3

Physical Interface (L3)Logical Interface (SVI – L3)

Layer 2: Access or Trunk Ports

DLS1# show interface gig 0/2 switchportName: Gig0/2Switchport: Enabled<output omitted>

Page 41: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

41

Multilayer Switch Interfaces

If in Layer 3 mode switchport interface command puts the port into Layer 2 mode.

DLS1(config)# interface gig 0/2DLS1(config-if)# no switchportDLS1(config-if)# endDLS1# show interface gig 0/2 switchportName: Gig0/2Switchport: Disabled<output omitted>DLS1# config tDLS1(config)# interface gig 0/2DLS1(config-if)# switchportDLS1(config-if)# endDLS1# show interface gig 0/2 switchportName: Gig0/2Switchport: Enabled<output omitted>

Layer 3

Layer 2

Converts interface to Layer 2

Is it a “switch” port?

Converts interface to Layer 3

Page 42: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

42

SVI Interfaces- Logical Interfaces

Layer 3 functionality can also be enabled for an entire VLAN. The IP address is assigned to the logical interface – the VLAN. This is needed when routing is required between VLANs. SVI (Switched Virtual Interface)

No physical connection VLANs must be created before the SVI can be used. The IP address associated of the VLAN interface is the default gateway of

the workstation.

Switch(config)# vlan vlan-numberSwitch(config-vlan)# name vlan-nameSwitchA(config)# interface vlan vlan-numberSwitchA(config-if)# ip address ip-address maskSwitchA(config-if)# no shutdown

Page 43: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

43

Creating VLANs

DLS1vlan 2 name NATIVEvlan 10 name Engineeringvlan 11 name ITvlan 20 name Salesvlan 21 name Administrationvlan 99 name ManagementVLANvlan 222 name GarbageVLAN

DLS1: Create and name the user VLANs: 10, 11, 20 and 21.

DLS1: Create and name a Management VLAN (used to telnet into switches)

DLS1: Create and name a NATIVE VLAN other than VLAN 1 (default)

DLS1: Create and name a Garbage VLAN (assigned to all unused ports.) All ports that are not used (trunks and

access) will be assigned as an access port to this VLAN.

Page 44: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

44

Management VLAN (SVI)

On each switch

Switch(config)# inter vlan 99Switch(config-if)# description Management VLANSwitch(config-if)# ip address 172.16.99.x 255.255.255.0Switch(config-if)# no shutdownSwitch(config-if)# exit

If you want to reach the management VLAN from other VLANs, assign this address to one of the multilayer switches (DLS1 and DLS2):

DLS1(config)# ip default-gateway 172.16.99.1

For each device in the network we configured it to be a member of the management VLAN.

Page 45: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

45

Default Gateway (SVI)

DLS1(config)# inter vlan 99DLS1(config-if)# description Management VLANDLS1(config-if)# ip address 172.16.99.1 255.255.255.0DLS1(config-if)# no shutdownDLS1(config)# inter vlan 10DLS1(config-if)# description Engineering VLANDLS1(config-if)# ip address 172.16.10.1 255.255.255.0DLS1(config-if)# no shutdownDLS1(config)# inter vlan 11DLS1(config-if)# description IT VLANDLS1(config-if)# ip address 172.16.11.1 255.255.255.0DLS1(config-if)# no shutdown

Configure DLS1 to be the default gateway for VLANs 10 and 11.

All hosts on these VLANs will use these addresses as their default gateway addresses.

Page 46: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

46

Default Gateway (SVI) Configure DLS2 to be the

default gateway for VLANs 20 and 21.

All hosts on these VLANs will use these addresses as their default gateway addresses.

DLS2(config)# inter vlan 20DLS2(config-if)# description Sales VLANDLS2(config-if)# ip address 172.16.20.1 255.255.255.0DLS2(config-if)# no shut

DLS2(config)# inter vlan 21DLS2(config-if)# description Administration VLANDLS2(config-if)# ip address 172.16.21.1 255.255.255.0DLS2(config-if)# no shut

Page 47: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

47

Default Gateway (SVI)

Statically or Dynamically assigned

172.16.10.10

172.16.10.1255.255.255.0

Page 48: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

48

Layer 3 Port Configuration – Physical Interfaces

Physical switch ports can operate as Layer 3 interfaces using the interface command:Switch(config)# interface type mod/numSwitch(config-if)# no switchportSwitch(config-if)# ip address ip-address mask

DLS1(config)# interface gig 0/1DLS1(config-if)# no switchportDLS1(config-if)# ip address 192.168.1.1 255.255.255.252

DLS2(config)# interface gig 0/1DLS2(config-if)# no switchportDLS2(config-if)# ip address 192.168.1.2 255.255.255.252

Page 49: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Switched Network Design

Core – Route/Switch packets quickly across between distribution multilayer switches.

Distribution – Route between VLANs/Subnets, ACLs

Access – Provide access to end devices and provide port security.

49

L3 = Routed Ports, over IP, separate subnetsL2 = SVI, VLANs over Trunks OR individual VLANs

Page 50: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

50

Verifying

DLS1#show ip inter briefInterface IP-Address OK? Method Status Protocol FastEthernet0/1 192.168.4.6 YES manual up up

GigabitEthernet0/1 192.168.1.1 YES manual up up Vlan10 172.16.10.1 YES manual up up Vlan11 172.16.11.1 YES manual up up

Verify IP addresses

Page 51: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

51

InterVLAN Routing

VLAN 1

VLAN 3

VLAN 2

VLANs 1, 2, 3Trunk

VLAN 1VLAN 2VLAN 3

External RouterVLANs

Router on a stickVLANs or No VLANs

Multilayer Switch

External RouterNo VLANs

Multilayer SwitchTrunk

Page 52: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

SDM

Page 53: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Cisco Switch Database Manager (SDM)

A Catalyst 2960 switch can function as a Layer 3 device and route between VLANs and a limited number of static routes.

The Cisco Switch Database Manager (SDM) provides multiple templates for the 2960 switch.

The templates can be enabled to support specific roles depending on how the switch is used in the network.

For example, the sdm lanbase-routing template can be enabled to allow the switch to route between VLANs and to support static routing.

53

Page 54: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Switch Database Manager Template

S1# show sdm prefer The current template is "default" template. The selected template optimizes the resources in the switch to support this level of features for 0 routed interfaces and 255 VLANs.

number of unicast mac addresses: 8K number of IPv4 IGMP groups: 0.25K number of IPv4/MAC qos aces: 0.125k number of IPv4/MAC security aces: 0.375k

show sdm prefer command applies the default template

Default does not support static routing.

If IPv6 addressing has been enabled, the template will be dual-ipv4-and-ipv6 default.

Page 55: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

S1# configure terminalEnter configuration commands, one per line. End with CNTL/Z.S1(config)# sdm prefer ? default Default bias dual-ipv4-and-ipv6 Support both IPv4 and IPv6 lanbase-routing Supports both IPv4 and IPv6 Static Routing qos QoS bias

S1(config)# sdm prefer lanbase-routingChanges to the running SDM preferences have been stored, but cannot take effect until the next reload.Use 'show sdm prefer' to see what SDM preference is currently active.Switch(config)# do reload

System configuration has been modified. Save? [yes/no]: yesBuilding configuration...[OK]Proceed with reload? [confirm]

*Mar 20 00:10:24.557: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.

SDM Template sdm prefer to change the template Switch must be reloaded for the new

template to take effect.

Page 56: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

2960 Static Route Support

Switch# show sdm prefer The current template is "lanbase-routing" template. The selected template optimizes the resources in the switch to support this level of features for 0 routed interfaces and 255 VLANs.

number of unicast mac addresses: 4K number of IPv4 IGMP groups + multicast routes: 0.25K number of IPv4 unicast routes: 0.75K number of directly-connected IPv4 hosts: 0.75K number of indirect IPv4 routes: 16 number of IPv6 multicast groups: 0.375k number of directly-connected IPv6 addresses: 0.75K number of indirect IPv6 unicast routes: 16 number of IPv4 policy based routing aces: 0 number of IPv4/MAC qos aces: 0.125k number of IPv4/MAC security aces: 0.375k number of IPv6 policy based routing aces: 0 number of IPv6 qos aces: 0.375k number of IPv6 security aces: 127

lanbase-routing template is active on S1. With this template, static routing is supported

for up to 750 static routes.

Page 57: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

S1(config)# interface f0/6S1(config-if)# switchport access vlan 2S1(config-if)# interface vlan 1S1(config-if)# ip address 192.168.1.1 255.255.255.0S1(config-if)# interface vlan 2S1(config-if)# ip address 192.168.2.1 255.255.255.0S1(config-if)# no shutdownMar 20 01:00:25.021: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to upS1(config)# ip routingS1(config)# do show ip routeCodes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override

Gateway of last resort is not set

192.168.1.0/24 is variably subnetted, 2 subnets, 2 masksC 192.168.1.0/24 is directly connected, Vlan1L 192.168.1.1/32 is directly connected, Vlan1 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masksC 192.168.2.0/24 is directly connected, Vlan2L 192.168.2.1/32 is directly connected, Vlan2

Enabling IPv4 Routing Functionality on a 2960

Interface F0/6 on S1 is assigned to VLAN 2.

The SVIs for VLANs 1 and 2 are also configured with IP addresses 192.168.1.1/24 and 192.168.2.1/24, respectively.

IP routing is enabled with the ip routing global configuration mode command.

Page 58: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

R1# show ip routeCodes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override

Gateway of last resort is not set

192.168.1.0/24 is variably subnetted, 2 subnets, 2 masksC 192.168.1.0/24 is directly connected, GigabitEthernet0/1L 192.168.1.10/32 is directly connected, GigabitEthernet0/1 209.165.200.0/24 is variably subnetted, 2 subnets, 2 masksC 209.165.200.224/27 is directly connected, Loopback0L 209.165.200.225/32 is directly connected, Loopback0

Router Participating in Routing with a Switch

R1 has two IPv4 networks configured: Interface G0/1 has IP address 192.168.1.10/24 loopback interface Lo0 has IP address

209.165.200.225/27

Page 59: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

S1(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.10S1(config)# do show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override

Gateway of last resort is 192.168.1.10 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 192.168.1.10 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masksC 192.168.1.0/24 is directly connected, Vlan1L 192.168.1.1/32 is directly connected, Vlan1 192.168.2.0/24 is variably subnetted, 2 subnets, 2 masksC 192.168.2.0/24 is directly connected, Vlan2L 192.168.2.1/32 is directly connected, Vlan2

Configuring a Static Route on a 2960

A default route is configured on S1

Page 60: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

R1(config)# ip route 192.168.2.0 255.255.255.0 g0/1R1(config)# do show ip routeCodes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override

Gateway of last resort is not set

192.168.1.0/24 is variably subnetted, 2 subnets, 2 masksC 192.168.1.0/24 is directly connected, GigabitEthernet0/1L 192.168.1.10/32 is directly connected, GigabitEthernet0/1S 192.168.2.0/24 is directly connected, GigabitEthernet0/1 209.165.200.0/24 is variably subnetted, 2 subnets, 2 masksC 209.165.200.224/27 is directly connected, Loopback0L 209.165.200.225/32 is directly connected, Loopback0

Final Routing Table on Router

A static route to the remote network 192.168.2.0/24 (VLAN 2) is configured on R1

Page 61: Legacy Inter-VLAN Routing · PPT file · Web view · 2016-04-18Objectives. Describe the three primary options for enabling inter-VLAN routing. Configure legacy inter-VLAN routing

Host Connectivity

192.168.2.2/24VLAN 2

192.168.1.2/24VLAN 1

209.165.200.225/27 PC-A is configured with IP address 192.168.2.2/24 in VLAN 2

PC-B is configured with IP address 192.168.1.2/24 in VLAN 1.

PC-B is able to ping both PC-B and the loopback interface on R1.