Lab Course RouterLab Virtual LAN (VLAN) Apoorv Shukla Philipp S. - - PowerPoint PPT Presentation
Lab Course RouterLab Virtual LAN (VLAN) Apoorv Shukla Philipp S. - - PowerPoint PPT Presentation
Lab Course RouterLab Virtual LAN (VLAN) Apoorv Shukla Philipp S. Tiesel Thorben Krueger Feedback from Worksheet-1 Any Questions or Problems (e.g. time slots)? First worksheet due tonight Sign up for module before the second
SLIDE 1
SLIDE 2
Feedback from Worksheet-1
Any Questions or Problems (e.g. time slots)? First worksheet due tonight Sign up for module before the second
worksheet debriefjng (at Prüfungsamt)
From now on: Meeting at 16.00 sharp on
- Thursdays. Any problems?
SLIDE 3
Defjnitions
❒ LAN
❍
broadcast domain
❍
Switches „connect“ difgerent LAN segments
❍
Ethernet ❒ Virtual LAN (VLAN)
❍
Group of devices can communicate with each
- ther as if they were on the same LAN
❍
confjgured on switches (and routers)
SLIDE 4
VLAN Example
SLIDE 5
VLAN Example
SLIDE 6
„T ypes“ of VLANs
❒ Port-based VLANs
❍
A switch port is exclusively used by one VLAN ❒ T
runking
❍
Required if multiple VLANs share the same physical link/ switch port
❍
A VLAN ID is added to the Ethernet header
❍
Switches forward Ethernet frame with VLAN ID X to all ports that are enabled for „trunking“ of X
SLIDE 7
VLAN Example
SLIDE 8
Port-based VLANs
❒ Each switchport
❍
can be assigned to a VLAN
❍
accepts incoming traffjc from a specifjc VLAN
❍
forwards packets to ports that belong to same VLAN ❒ Confjguration
❍
(confjg-if) switchport access vlan <vlan-id>
❍
(confjg-if) switchport mode access
SLIDE 9
Trunking (802.1Q)
❒ Needed if multiple VLANs on same link ❒ Switch
❍
(confjg-if) switchport trunk allowed vlan 500,501
❍
(confjg-if) switchport mode trunk
❒ Cisco: subinterface, e.g., f0/0.100
❍
(confjg-subif) encapsulation dot1Q <vlan_id>
❒ Juniper: extra unit
❍
vlan-tagging
❍
unit 500 {vlan-id 500}
❒ Loadgen: extra interface ethX.<vlan-id>
❍
vconfjg add ethX <vlan-id>
SLIDE 10
VLAN Example
SLIDE 11
VLAN Example
SLIDE 12
Native VLAN
❒ By default all switchports use a native VLAN
with vlanid = 1
SLIDE 13
VLANs - Summary
❒ Rule of thumb
❍
Use access mode if a physical link corresponds to a single VLAN
- No subinterfaces on routers/loadgens required
❒ The following is possible:
❍
Example: Send Ethernet frame on direct link from router to switch
❍
Router: Adds VLAN tag (vconfjg)
❍
Switch: Removes VLAN tag on outgoing port (access mode) before forwarding ❒ More info in ISIS
SLIDE 14
VLAN Example
SLIDE 15
Worksheet – Question 1
❒ Background reading
❍
VLAN motivations
❍
Port based vs trunked
❍
VLANs in practice
SLIDE 16
Worksheet – Question 2
❒ Confjgure VLANs ❒ Figure out whether to use access or trunk mode
SLIDE 17
Worksheet – Question 3
❒ Enable routing between VLANs
❍
Devices in VLAN X should be able to communicate with devices in VLAN Y
❍
Confjgure static routes
SLIDE 18
Worksheet – Question 4
❒ Linux VLAN Trunking
❍
Enable multiple VLAN subinterfaces on the loagens
SLIDE 19