CISCOswitch讲稿4.ppt

1、Campus LAN ProductsImplementing and Managing VLANs,Objectives,Describe the benefits of VLANs Describe the components of VLANs Switches, trunking, routers, servers, management Packet tagging, VPT, ISL Describe how VLANs are managed CiscoWorks for Switched Internetworks, CiscoView, RMON Explain how VL

2、ANs are implemented,Agenda,The Role and Benefits of VLANs VLANs Components Managing VLANs VLAN Implementation Guidelines VLAN Summary,Role and Benefits of VLANs,VLAN membership,VLAN fundamentals,VLANs,OSI model,Data link,Network,Presentation,Session,Application,Transport,Physical,What Is a Virtual L

3、AN (VLAN)?,A logical grouping of networked devices based on a Layer 2 broadcast/multicast domain VLAN members can be created based on Layer 2 through Layer 7 characteristics Port MAC address Network address User ID Inter-VLAN communication is done through routing,WAN,Users grouped by hub location on

4、ly No security on shared segment Security across router ports only User mobility is constrained No optimization of server adjacency Shared broadcast/multicast domain No multicast control for multimedia applications,Users are physically bound,Constraints of Shared LANs,VLANs manage broadcast and mult

5、icast traffic Group ports, stations, and switches into broadcast and multicast groups Performance improves throughout the network Security increases incrementally,broadcast/multicast Group 1,broadcast/multicast Group 2,Primary Benefit: Broadcast Control,Servers centralized for security, mobility, an

6、d administration Performance increases from Layer 2 switching ATM, Fast and Gigabit Ethernet are backbones of choice LANE, ISL, and 802.1Q offer VLAN trunking services VLANs offer broadcast/multicast firewalls,Centralized servers,VLAN Benefit: Centralizing Server Resources,Subnets become virtual Com

7、patible with DHCP Conserves IP addresses and subnets Minimizes configuration changes Centralizes management with policy control,192.132.20.xx,192.132.20.xx,192.132.24.xx,192.132.24.xx,192.132.20.xx,192.132.24.xx,Reducing configuration costs,VLAN Benefit: Campus Mobility,VLAN Components,Switches, rou

8、ters, servers, management,SwitchesMembership determination TrunkingCommon VLAN exchange Multiprotocol routingInter-VLAN exchange ServersMulti-VLAN communication ManagementSecurity, control, administration,Membership establishment,Inter-VLAN communications,Communication across fabric,Centralized admi

9、nistration,Server communication,Components of VLANs,Port driven MAC address driven (Layer 2) Network address driven (Layer 3) Application type driven (Layer 7),Approaches can vary performance,VLAN Component 1Switches to Establish VLAN Membership,VLAN 2,VLAN 1,VLAN 3,Maximizes forwarding performance,

10、Users assigned by port association Requires no lookup, if done in ASICs Easily administered via GUIs Maximizes security between VLANs Packets do not “leak” into other domains Easily controlled across network,Membership by Port,Requires filtering, impacts performance,VLAN 1 020701A3EF1A OA032192FA2A

11、026765175GA3A VLAN 2 050503G4GF2A 040404THTB3A 070706GGGF3A,VLAN 1 020701A3EF1A OA032192FA2A 026765175GA3A VLAN 2 050503G4GF2A 040404THTB3A 070706GGGF3A,Table exchange,Tables addadministration overhead,Users assigned based on MAC addresses Flexible, yet adds overhead Impacts performance, scalability

12、, administration Similar process for higher layers,MAC Address Tables,MAC Address Tables,Membership by Filters,Wide vendor endorsement for 802.1Q tagging standard Cisco to support across Fast Ethernet, gigabit uplinks Cisco will map ISL to 802.1Q dynamically with VTP,Packet tagging as common VLAN ex

13、change,VLAN ComponentTrunking,Establishes membership through ASICs Labels each packet as receivedpacket tagging Eliminates lookups and tables Transports multiple VLANs across links Maps effectively across mixed backbones Protocol, end-station independent Easily managed,Maintains network performance,

14、VLAN Component 3Multiprotocol Routing with ISL,Maps VLAN frame services to ATM LANE services Based on Layer 2 periodic advertising protocol Keeps track of internal tagging schemes Dynamically chooses next available VLAN tag Maintains mapping table globally Converts ISL tags to 802.1Q tags,ATM fabric

15、,VLAN 2,VLAN 1,ISL,LANE,ISL,LANE,LANE,802.1Q,Offers seamless migration,VLAN Component 3Multiprotocol Routing with VTP,Two physical topology approaches,Layer 3 links VLANs together Adds additional security and management Logical links conserve physical ports Multimode depending on protocol Controls a

16、ccess by VLAN Up to 255 VLANs per router,VLAN 2,VLAN 3,VLAN 1,Cisco internetworking software,VLANs 1, 2, 3,Logical communication,Physical link per VLAN,VLAN Component 3 Communicating Between VLANs,Intelligent NICs decode tagging Supported by industry (e.g., Intel, CrossPoint) Maximizes performance,

17、flexibility,VLAN 1,VLAN 2,VLAN 3,Server farm,Multiple tagging to each server,VLAN Component 4Server Connectivity with ISL,Managing VLANs,CiscoWorks for Switched Internetworks (CWSI),This portion of the presentation will be delivered as either: a. Multimedia show, or b. Slide presentation,CWSIThe Swi

18、tched Network Management Solution,Suite of integrated switch management tools: Graphical device management Traffic monitoring and analysis Virtual LAN management ATM/LANE management User tracking and reporting Integrates with popular NMS platforms (e.g., HP OpenView) Provided on Windows NT and UNIX

19、operating systems,8-22CPE SECampus LAN ProductsImplementing and Managing VLANs, 1999, Cisco Systems, Inc.,CWSILogical Representation of Network,Automatically discovers and displays your switched network Displays physical and logical topology by VLAN Tracks configurations across the network Automates

20、 link setup with fine-tuning controls Displays spanning tree details per VLAN Configures redundant links based on preferred paths,Drag-and-drop for configuring ports Organizes names and maintains port associations Tracks configurations by VLANs Centralizes setup and configurations,CWSICentralized VL

21、AN/ELAN Configuration and Management,8-24CPE SECampus LAN ProductsImplementing and Managing VLANs, 1999, Cisco Systems, Inc.,Complete Cisco device support (e.g., switches and routers) Detailed device views help quickly pinpoint problem areas Simple point-and-click to configure multiple ports, interf

22、aces, and chassis parameters Quickly launch real-time monitoring with or without NMS,CiscoView,Device Management,RMON-based LAN/WAN performance management,Performs trend analysis based on traffic flows Uses NetFlow data collection Graphs data automatically Centralized console for analyzing traffic d

23、ata, even on a per-VLAN basis Event manager for reporting errors, collisions, excess broadcast/multicast traffic, etc. Offers troubleshooting capabilities with packet capture and decodes,Traffic Management,VLAN Implementation Guidelines,Switches should be “plug-and-play” out of carton Layer 2 and La

24、yer 3 rules remain intact Benefits need to outweigh administration Scalable across multiple technologies No performance impacts Greater automation without requiring complete overhaul Use centralized management,Back to basics,VLAN Implementation Guidelines,VLAN Summary,Ensure scalability Firewall broadcasts/multicasts Improve network performance Enhance network security Reduce administration expenses Offer versatile server connectivity Support centralized (policy) management,V