diff --git a/CHANGELOG.md b/CHANGELOG.md index 9faed70..0fc2e9b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,12 +6,21 @@ and this project adheres to [Semantic Versioning](http://semver.org/). ## [Unreleased] ### Added +- Section: RADIUS +- Section: TACACS+ ### Changed +## [0.2.0-lw] - 2017-06-01 +### Added +- Section: DHCP +- Section: Inter Vlan Routing + ## [0.1.0-lw] - 2017-05-30 ### Added - Initial version - Section: Spanning Tree -[Unreleased]: https://gitlab.com/netravnen/CiscoLabNotes/compare/v0.1.0-lw...HEAD \ No newline at end of file +[Unreleased]: https://gitlab.com/netravnen/CiscoLabNotes/compare/v0.2.0-lw...HEAD +[0.2.0-lw]: https://gitlab.com/netravnen/CiscoLabNotes/compare/v0.1.0-lw...v0.2.0-lw +[0.1.0-lw]: https://gitlab.com/netravnen/CiscoLabNotes/compare/2ca23bdd5a942ca1af0bb4e568bb97b1be12ab88...v0.1.0-lw diff --git a/chapter/aaa/radius.tex b/chapter/aaa/radius.tex new file mode 100644 index 0000000..de90ecb --- /dev/null +++ b/chapter/aaa/radius.tex @@ -0,0 +1 @@ +\section{RADIUS} \ No newline at end of file diff --git a/chapter/aaa/tacacsplus.tex b/chapter/aaa/tacacsplus.tex new file mode 100644 index 0000000..d7820a4 --- /dev/null +++ b/chapter/aaa/tacacsplus.tex @@ -0,0 +1 @@ +\section{TACACS+} diff --git a/chapter/internet.tex b/chapter/internet.tex deleted file mode 100644 index 35c4ad7..0000000 --- a/chapter/internet.tex +++ /dev/null @@ -1,11 +0,0 @@ -\chapter{The Internet {\footnotesize "Post cold-war modern times"}} - -\section{Service Providers} - -\section{IXP} - -\section{MPLS} - -\section{BGP} - -\section{eVPN} \ No newline at end of file diff --git a/chapter/layer2protocols.tex b/chapter/layer2protocols.tex deleted file mode 100644 index a10c235..0000000 --- a/chapter/layer2protocols.tex +++ /dev/null @@ -1,7 +0,0 @@ -\chapter{Protocols Layer 2} - -\input{chapter/section/switchednetwork} - -\newpage - -\input{chapter/section/spanningtree} diff --git a/chapter/layer3protocols.tex b/chapter/layer3protocols.tex deleted file mode 100644 index 71a2db9..0000000 --- a/chapter/layer3protocols.tex +++ /dev/null @@ -1,7 +0,0 @@ -\chapter{Layer-2-to-Layer-3} - -\input{chapter/section/intervlanrouting} - -\chapter{Protocols Layer 3} - -\input{chapter/section/routednetwork} diff --git a/chapter/section/dhcp.tex b/chapter/section/dhcp.tex new file mode 100644 index 0000000..3ed1fba --- /dev/null +++ b/chapter/section/dhcp.tex @@ -0,0 +1,42 @@ +\section{DHCP Process} + +\fig{dhcp/dhcpdiscoverprocess}{dhcpdiscoverprocess}{DHCP Discover Process} + +\subsection{DHCP Messages} + +\begin{itemize} + \item \textbf{DHCPDECLINE:} Message sent from the client to the server that the address is already in use. + \item \textbf{DHCPNAK:} The server sends a refusal to the client for request for configuration. + \item \textbf{DHCPRELEASE:} Client tells a server that it is giving up a lease. + \item \textbf{DHCPINFORM:} A client already has an IP address but is requesting other configuration parameters that the DHCP server is configured to deliver such as DNS address. +\end{itemize} + +\section{DHCP Options} + +\begin{itemize} + \item \textbf{43} Vendor-encapsulated option that enables vendors to have their own list of options on the server. + \item \textbf{69} SMTP server, if you want to specify available SMTP servers to the client. + \item \textbf{70} POP3 server, if you want to specify available POP3 servers to the client. + \item \textbf{150} TFTP server that enables your phones to access a list of TFTP servers. +\end{itemize} + +\section{DHCP Example Configuration} + +\subsection{Cisco} + +\begin{txt} +ip dhcp excluded-address 192.168.0.254 +! +ip dhcp pool LAN-1-POOL-DHCP + network 192.168.0.0 255.255.255.0 + default-router 192.168.0.254 + lease 2 ! set in days +\end{txt} + +When configuring a Layer 3 interface as a relay port for DHCP request for a subnet. Set the ip helper command on the interface with one \textit{or} more ip addresses. + +\begin{txt} +interface GigabitEthernet 0/3 + ip helper-address 192.168.220.220 + ip helper-address 192.168.222.222 +\end{txt} diff --git a/chapter/section/intervlanrouting.tex b/chapter/section/intervlanrouting.tex index 7eed6ba..d91ff3a 100644 --- a/chapter/section/intervlanrouting.tex +++ b/chapter/section/intervlanrouting.tex @@ -1 +1,93 @@ -\section{Vlan-to-vlan routing} \ No newline at end of file +\section{Vlan-to-vlan routing} + +\myquote{}{Guidance and Understanding of the art of Layer 3 networks. Routing between different slash 24\tsq{s}.\\ \textit{Aka. Inter-vlan routing.}} + +There are different ways to go \tsq{bout} Inter-vlan routing and doing it. + +\begin{itemize} + \item \textbf{Some are using:} + \begin{enumerate} + \item external router, + \item switch virtual interfaces\footnote{\texttt{Switches interface -> Vlan interfaces}}, + \item routed ports\footnote{\texttt{Routed interface -> Subinterfaces}}, + \item bridge virtual interface\footnote{\texttt{L3 bridging interface}} + \end{enumerate} + \item \textbf{Ways to do it:} + \begin{enumerate} + \item router-on-a-stick if the network is running collapsed core or not have a distribution switch in the middle. + \item (...) + \end{enumerate} +\end{itemize} + +\pagebreak + +\subsection{Interface configs} + +\subsubsection{Routed interfaces} + +\begin{txt} +interface GigabitEthernet 0/1.10 + encapsulation dot1q 10 + ip address 192.168.0.1 255.255.255.128 +! +interface GigabitEthernet 0/1.20 + encapsulation dot1q 20 + ip address 192.168.0.129 255.255.255.128 +\end{txt} + +\subsubsection{Switches interfaces} + +\begin{txt} +Vlan10 + name VLAN10 +Vlan20 + name VLAN20 +! +interface Vlan10 + ip address 192.168.1.1 255.255.255.128 +interface Vlan20 + ip address 192.168.1.129 255.255.255.128 +! +interface GigabitEthernet 0/2 + switchport mode trunk + switchport trunk encapsulation dot1q + switchport trunk allowed vlan 10,20 +\end{txt} + +\pagebreak + +\fig{network/routeronastick}{routeronastick}{\bsq{Router on a Stick} concept.} + +\pagebreak + +\subsection{? Troubleshooting ?} + +\begin{enumerate} + \item \textbf{Missing VLAN:} + \begin{itemize} + \item VLAN might not be defined across all the switches. + \item VLAN might not be enabled on the trunk ports. + \item Ports might not be in the right VLANs. + \end{itemize} + \item \textbf{Layer 3 interface misconfiguration:} + \begin{itemize} + \item Virtual interface might have the wrong IP address or subnet mask. + \item Virtual interface might not be up. + \item Virtual interface number might not match with the VLAN number. + \item Routing has to be enabled to route frames between VLAN. + \item Routing might not be enabled. + \end{itemize} + \item \textbf{Routing protocol misconfiguration:} + \begin{itemize} + \item Eyery interface or network needs to be added in the routing protocol. + \item The new interface might not be added to the routing protocol. + \item Routing protocol configuration is needed only if VLAN subnets need to communicate to the other routers, as previously + mentioned in this chapter. + \end{itemize} + \item \textbf{Host misconfiguration:} + \begin{itemize} + \item Host might not have the right IP address or subnet mask. + \item Each host has to have the default gateway that is the SVI or Layer 3 interface to communicate with other networks and VLAN. + \item Host might not be configured with the default gateway. + \end{itemize} +\end{enumerate} \ No newline at end of file diff --git a/commands.tex b/commands.tex index b97f2fb..8014080 100644 --- a/commands.tex +++ b/commands.tex @@ -16,6 +16,9 @@ \end{figure} } +\newcommand{\xkcd}[2]{\fig{xkcd/#1}{#1}{#2\\% + {\tiny\MakeUppercase{https://imgs.xkcd.com/comics/#1.png}}}} + % Usage: \svg{}{