NetworkLabNotes/main.tex

369 lines
13 KiB
TeX
Raw Normal View History

2017-05-22 10:12:53 +00:00
% Declare Document Class
2017-05-22 15:38:51 +00:00
\documentclass[a4paper,12pt,twoside,twocolumn]{book}
\input{structure} % Load structure cfg for document
2017-05-23 08:00:36 +00:00
2017-05-22 13:14:02 +00:00
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN DOCUMENT %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
2017-05-22 10:12:53 +00:00
2017-05-22 09:53:21 +00:00
\begin{document}
2017-05-22 10:12:53 +00:00
% Which info to insert on the title page
2017-05-22 13:08:28 +00:00
\title{r17dinh409}
2017-05-22 10:12:53 +00:00
\author{Christoffer Hansen <zbcchhan11 at zbc.dk>}
\date{May 22 - June 30, 2017}
\titlepic{\includegraphics[width=0.3\textwidth]{profilepic/pic1}}
2017-05-22 10:12:53 +00:00
\maketitle
\tableofcontents
2017-05-23 08:00:36 +00:00
%\setlength{\parindent}{4em}
2017-05-22 15:38:51 +00:00
% Define length between paragrahps
\setlength{\parskip}{0.35em}
2017-05-22 15:38:51 +00:00
% Define lineheight
\renewcommand{\baselinestretch}{1.15}
2017-05-22 13:08:28 +00:00
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN CHAPTER: Base Configuration %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
2017-05-22 10:12:53 +00:00
2017-05-22 13:08:28 +00:00
\chapter{Base Configuration}
\section{Cisco Lab}
2017-05-22 10:12:53 +00:00
2017-05-22 10:19:53 +00:00
% <!-- ROUTER -->
2017-05-22 10:12:53 +00:00
\subsection{Router}
2017-05-22 10:19:53 +00:00
\subsubsection{File: base.cfg}
2017-05-22 10:52:13 +00:00
%\lstinputlisting[language=tcl]{code/router/base.cfg}
2017-05-22 10:19:53 +00:00
\subsubsection{File: reset.tcl}
2017-05-22 10:52:13 +00:00
%\lstinputlisting[language=tcl]{code/router/reset.tcl}
2017-05-22 10:44:49 +00:00
2017-05-22 13:08:28 +00:00
\newpage
2017-05-22 10:44:49 +00:00
% <!-- LAYER 3 SWITCH -->
2017-05-22 10:12:53 +00:00
2017-05-22 10:44:49 +00:00
\subsection{Layer 3 Switch}
2017-05-22 13:08:28 +00:00
\subsubsection{FILE: base.cfg}
2017-05-22 10:52:13 +00:00
\lstinputlisting[language=tcl]{code/l3switch/base.cfg}
2017-05-22 13:08:28 +00:00
\subsubsection{FILE: reset.tcl}
2017-05-22 10:52:13 +00:00
\lstinputlisting[language=tcl]{code/l3switch/reset-tcl.txt}
2017-05-22 13:08:28 +00:00
\subsubsection{FILE: resetvlans.tcl}
\lstinputlisting[language=tcl]{code/l3switch/resetvlans-tcl.txt}
\newpage
2017-05-22 10:12:53 +00:00
2017-05-22 10:44:49 +00:00
% <!-- LAYER 2 SWITCH -->
2017-05-22 10:12:53 +00:00
2017-05-22 10:44:49 +00:00
\subsection{Layer 2 Switch}
2017-05-22 13:08:28 +00:00
\subsubsection{FILE: base.cfg}
2017-05-22 10:52:13 +00:00
\lstinputlisting[language=tcl]{code/l2switch/base.cfg}
2017-05-22 13:08:28 +00:00
\subsubsection{FILE: reset.tcl}
2017-05-22 10:52:13 +00:00
\lstinputlisting[language=tcl]{code/l2switch/reset-tcl.txt}
2017-05-22 13:08:28 +00:00
\subsubsection{FILE: resetvlans.tcl}
\lstinputlisting[language=tcl]{code/l2switch/resetvlans-tcl.txt}
2017-05-22 10:12:53 +00:00
2017-05-22 13:08:28 +00:00
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN CHAPTER: Protocols %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\chapter{Protocols}
\section{Routed Network}
2017-05-22 13:08:28 +00:00
\subsection{OSPF}
\subsection{IS-IS}
\subsection{EIGRP}
\subsection{RIP}
\subsection{Static}
\subsection{BGP}
2017-05-22 15:38:51 +00:00
\newpage
\section{Switch Network}
2017-05-22 13:14:02 +00:00
2017-05-22 14:02:02 +00:00
\subsection{VTP}
2017-05-22 15:38:51 +00:00
\fig{vtp/implementing-vtp}{imp-vtp1}{VTP}
\subsubsection{VTP Modes}
The tree modes a VTP \textit{enabled} device can operate are
\begin{itemize}
\item Transparent
\item Server
\item Client
\end{itemize}
Of course you can \textit{disable} VTP altogether.
Key things to be aware of \textit{before} enabling VTP in your environment is to make double sure of only having 1 VTP domain. \textbf{If} 2 or more VTP domains exists. Be triple sure to separate them! As to avoid having an VTP server DB overridden with data from another VTP domain.
The three VTP modes \textit{operates} as follow
\begin{itemize}
\item Transparent
\begin{itemize}
\item Creates, modifies and deletes \textit{local} vlans only
\item Forwards advertisements
\item Does \textit{not} synchronizes vlan configurations.
\end{itemize}
\item Server
\begin{itemize}
\item Creates, modifies and deletes vlans
\item Sends and forwards advertisements
\item Synchronizes vlan configurations
\end{itemize}
\begin{itemize}
\item Cannot create, modify or delete vlans
\item Send and forwards advertisements
\item Synchronizes vlan configurations
\end{itemize}
\end{itemize}
\subsubsection{VTP Announcement}
VTP operates with announcements sent out in intervals. Summarized it amounts to
\begin{itemize}
\item 1 \textit{summary} announcement per 5th minute from the server
\item The summary announcement informs clients of the current revision
\item An announcement is sent out \textit{on the spot} when a change has been made on the VTP server
\end{itemize}
Do remember it is \textbf{only} the VTP server which has the vlan configuration stored \textbf{on disk}. All device clients and transparent nodes do only store the vlans delegated by VTP in memory.
\subsubsection{Common Issues}
\begin{itemize}
\item Different/Incompatible VTP versions
\item Wrong password
\item Incorrect mode name
\item No server set (all devices configured in transparent/client/vtp disabled mode)
\end{itemize}
\subsubsection{VTP Versions}
\begin{itemize}
\item Version 1
\item Version 2
\begin{itemize}
\item Version-dependent transparent mode
\item Consistencycheck
\item Token ring support
\item Unrecognized type-length-value support
\end{itemize}
\item Version 3 (not "yet" common)
\begin{itemize}
\item Extended VLAN support: Allow ranges are 1-1005,1018-2095. Not mentioned vlans ranges up to 4095 is still reserved.
\item Domain name is not automatically learned.
\item Better security.
\item Better database propagation.
\item MST now supported.
\end{itemize}
\end{itemize}
\subsubsection{VTP Pruning}
The art of only allowing the vlan traffic to flow on \textit{necessary} links.
This means if there are no clients in a vlan on a device. Then no traffic for the inactive vlans is send down-/upstream on the link in question.
\fig{vtp/vtp-pruning}{vtpruning1}{VTP Pruning}
\subsubsection{Security}
It is \textbf{strongly} recommended to enable the security features supported in VTP.
\textbf{Password:} MD5 hashing, Case-sensitive, Length between 8 and 64 chars.
2017-05-22 16:21:13 +00:00
\notice{VTP Scaling}{
2017-05-22 16:27:48 +00:00
As the network grows and grows and grows and grows some more over long/short timespans.
You will \textbf{for certain} come to cross-rode, where you \textbf{must} consider to
go away from using VTP in the network. The problems of managing an elderly network and
wiping and re-introducing nodes in the network. You \textbf{will} face the issue of a
wiped vlan database from the VTP domain.
2017-05-22 16:21:13 +00:00
}
2017-05-22 15:38:51 +00:00
\subsubsection{Example configuration}
\lstinputlisting{code/vtp/example.cfg}
\subsection{Channel Bundling (aka. EtherChannel, PortChannel)}
Channel bundling is the "art" of using multiple physical links as one single logical link in when viewed from the perspective of the forwarding plane.
Technologies:
\begin{itemize}
\item \textbf{PAgP:} The Cisco-only thingy
2017-05-22 18:22:29 +00:00
\item \textbf{LACP:} The IEEE standard
\item \textbf{Static:} Just forced on
\end{itemize}
2017-05-22 18:22:29 +00:00
\fig{channelbundling/network-without-channelbundling}{noethernetchannel}%
{No Channelbundling present}
2017-05-22 18:22:29 +00:00
Channel bundling of switch ports in the network may or may not be the best idea, in regards to the networks growth rate in terms of min. required bandwidth.
Channel bundling spreads out the in and egress flows based upon one of several methods configured on the switch:
\begin{itemize}
\item Source to Destination MAC
\item Source to Destination IP
\end{itemize}
Keep in mind this will by no means archive true load balancing. Where all links are equally used based upon number of flows \textit{or} in terms of used bandwidth.
\begin{table}[h]
\centering
\caption{Channel bundling mechanisms}
\label{chbundmech1}
\resizebox{\columnwidth}{!}{%
\begin{tabular}{|l|l|l|}
\hline
Hash Input Code & Hash Input Detecision & Switch Model \\ \hline
dst-ip & Dest IP addr & All models \\ \hline
dst-mac & Dest MAC addr & All models \\ \hline
src-dst-ip & Src and dest IP addr & All models \\ \hline
src-dst-mac & Src and dest MAC addr & All models \\ \hline
src-ip & Src IP addr & All models \\ \hline
src-mac & Src MAC addr & All models \\ \hline
src-port & Src port no & 4500,6500 \\ \hline
dst-port & Dest port no & 4500,6500 \\ \hline
src-dst-port & Src and dest port no & 4500,6500 \\ \hline
\end{tabular}%
}
\end{table}
2017-05-22 18:22:29 +00:00
\fig{channelbundling/network-with-channelbundling}{withethernetchannel}%
{Channelbundling present}
\subsubsection{Protocol Properties}
\begin{itemize}
\item LACP
\begin{itemize}
\item Active: Enabled
\item Passive: Waits for LACP packets on the wire before enabled
\end{itemize}
\item PAgP
\begin{itemize}
\item Desirable: Enabled
\item Auto: Waits for PAgP packets on the wire before enabled
\end{itemize}
\end{itemize}
Some other \underline{required} settings to be (equal across all ports) aware of when configuring Channel bundling are
\begin{enumerate}
\item Port speeds
\item Duplex mode
\item Configured vlan ranges
\end{enumerate}
\subsubsection{Example configuration}
\lstinputlisting{code/channelbundling/example.cfg}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN section: Spanning Tree %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
2017-05-22 13:14:02 +00:00
\newpage
2017-05-22 13:14:02 +00:00
\section{Spanning Tree}
2017-05-22 13:08:28 +00:00
Spanning Tree exists for the \textbf{sole} reason to save "your" network and all the broadcast storms an network engineer having a bad day can by mistake create!
STP comes from the above desire where redundancy was wanted but no protocol existed before STP to help in this regard.
\begin{table}[h]
\centering
\caption{Spanning Tree standrds}
\label{stpstandards}
\resizebox{\columnwidth}{!}{%
\begin{tabular}{|l|l|l|l|l|}
\hline
\textbf{} & \textbf{Standard} & \textbf{Ressource Usage} & \multicolumn{2}{l|}{\textbf{Convergence}} \\ \hline
CST & 802.1D & Low & Slow & All vlans \\ \hline
PVST+ & Cisco & High & Slow & Per vlan \\ \hline
RSTP & 802.1w & So-so (Med.) & Fast & All vlans \\ \hline
RPVST+ & Cisco & On-the-double (V.High) & Fast & Per vlan \\ \hline
MST & 802.1s & Med. - High & Fast & Vlan list \\ \hline
\end{tabular}%
}
\end{table}
\subsection{Port Roles}
When a switch is enabled for Spanning Tree. One of the following roles will have been assumed by any port on the switch in question.
\begin{itemize}
\item \textbf{Root port:} Only 1 port on any switch (non-counting the root bridge!). Is always the port with the lowest metric (aka. best path) to the root bridge.
\item \textbf{Designated port:} A designated port is the port on any segment closest to the root bridge and forwarding traffic.
\item \textbf{\textit{Non}-designated port:} Put in blocking mode and not currently forwarding traffic.
\item \textbf{Disabled port:} The port has been one-way-or-another shut down.
\end{itemize}
\subsection{Standards}
\subsubsection{STP}
\subsubsection{PVST}
2017-05-22 13:08:28 +00:00
\subsubsection{RPVST+}
\subsubsection{MST}
\subsection{Features}
\begin{itemize}
\item PortFart
\item UplinkFast
\item BackboneFast
\item BPDU Guard
\item BPDU Filter
\item Root Guard
\item Loop Guard
\item Unidirectional Link Detection (UDLD)
\item FlexLinks
\end{itemize}
2017-05-22 10:12:53 +00:00
2017-05-22 13:08:28 +00:00
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN CHAPTER: Internet %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
2017-05-22 10:12:53 +00:00
2017-05-22 13:08:28 +00:00
\chapter{Internet}
2017-05-22 10:12:53 +00:00
2017-05-22 13:08:28 +00:00
\section{BGP}
2017-05-22 10:12:53 +00:00
2017-05-22 15:38:51 +00:00
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN LIST OF FIGURES %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
2017-05-22 18:22:29 +00:00
\renewcommand{\listfigurename}{List of {\footnotesize hidden} Figures}
2017-05-22 15:38:51 +00:00
\listoffigures
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN LIST OF TABLES %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\renewcommand{\listtablename}{Tables {\footnotesize hidding} on the pages}
2017-05-22 15:38:51 +00:00
\listoftables
2017-05-22 14:02:02 +00:00
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% BEGIN REFERENCES %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\bibliographystyle{unsrt}
\bibliography{unsrt}
2017-05-22 13:14:02 +00:00
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% %
% END DOCUMENT %
% %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
2017-05-22 09:53:21 +00:00
\end{document}