sca n instructorppt_chapter2_final

60
Chapter 2: LAN Redundancy Scaling Networks © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential Presentation_ID 1

Upload: phuc-anh-tran

Post on 14-Aug-2015

93 views

Category:

Internet


0 download

TRANSCRIPT

Chapter 2: LAN Redundancy

Scaling Networks

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1

Chapter 22.0 Introduction

2 1 Spanning Tree Concepts2.1 Spanning Tree Concepts

2.2 Varieties of Spanning Tree Protocols

2 3 S i T C fi ti2.3 Spanning Tree Configuration

2.4 First-Hop Redundancy Protocols

2.5 Summary

Presentation_ID 2© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Chapter 2: Objectives Describe the issues with implementing a redundant network.

Describe IEEE 802.1D STP operation.

Describe the different spanning tree varieties.

Describe PVST+ operation in a switched LAN environment.Describe PVST operation in a switched LAN environment.

Describe Rapid PVST+ operation in a switched LAN environment.

C fi PVST+ i it h d LAN i t Configure PVST+ in a switched LAN environment.

Configure Rapid PVST+ in a switched LAN environment.

Identify common STP configuration issues.

Describe the purpose and operation of first hop redundancy protocols.y

Describe the different varieties of first hop redundancy protocols.

Use Cisco IOS commands to verify HSRP and GLBP

Presentation_ID 3© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Use Cisco IOS commands to verify HSRP and GLBP implementations.

2.1 Spanning Tree CConcepts

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 4

Purpose of Spanning TreeRedundancy at OSI Layers 1 and 2Multiple cabled paths between switches:

Provide physical redundancy in a switched network.

Improves the reliability and availability of the network.

Enables users to access network resources, despite path disruption.

Presentation_ID 5© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Purpose of Spanning TreeIssues with Layer 1 Redundancy: MAC D t b I t bilitMAC Database Instability Ethernet frames do not have a time to live (TTL) attributeEthernet frames do not have a time to live (TTL) attribute.

• Frames continue to propagate between switches endlessly, or until a link is disrupted and breaks the loop. p p

• Results in MAC database instability. • Can occur due to broadcast frames forwarding. g

If there is more than one path for the frame to be forwarded out, an endless loop can result. p

• When a loop occurs, it is possible for the MAC address table on a switch to constantly change with the updates from the b d t f lti i MAC d t b i t bilitbroadcast frames, resulting in MAC database instability.

Presentation_ID 6© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Purpose of Spanning TreeIssues with Layer 1 Redundancy: B d t StBroadcast Storms A broadcast storm occurs when there are so many broadcast

frames caught in a Layer 2 loop that all available bandwidth is consumed. It is also known as denial of service

A broadcast storm is inevitable on a looped network. • As more devices send broadcasts over the network, more

traffic is caught within the loop; thus consuming moretraffic is caught within the loop; thus consuming more resources.

• This eventually creates a broadcast storm that causes theThis eventually creates a broadcast storm that causes the network to fail.

Presentation_ID 7© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Purpose of Spanning TreeIssues with Layer 1 Redundancy: B d t StBroadcast Storms

Presentation_ID 8© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Purpose of Spanning TreeIssues with Layer 1 Redundancy: D li t U i t FDuplicate Unicast Frames Unicast frames sent onto a looped network can result in duplicateUnicast frames sent onto a looped network can result in duplicate

frames arriving at the destination device.

Most upper layer protocols are not designed to recognize, or cope pp y p g g , pwith, duplicate transmissions.

Layer 2 LAN protocols, such as Ethernet, lack a mechanism to y precognize and eliminate endlessly looping frames.

Presentation_ID 9© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Purpose of Spanning TreeIssues with Layer 1 Redundancy: D li t U i t FDuplicate Unicast Frames

Presentation_ID 10© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationSpanning Tree Algorithm: Introductionp g g STP ensures that there is only one logical path between all

destinations on the network by intentionally blocking redundantdestinations on the network by intentionally blocking redundant paths that could cause a loop.

A port is considered blocked when user data is prevented from po t s co s de ed b oc ed e use data s p e e ted oentering or leaving that port. This does not include bridge protocol data unit (BPDU) frames that are used by STP to prevent loops.

The physical paths still exist to provide redundancy, but these paths are disabled to prevent the loops from occurring.

If the path is ever needed to compensate for a network cable or switch failure, STP recalculates the paths and unblocks the necessary ports to allow the redundant path to become activenecessary ports to allow the redundant path to become active.

Presentation_ID 11© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationSpanning Tree Algorithm: Introductionp g g

Presentation_ID 12© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationSpanning Tree Algorithm: Introductionp g g

Presentation_ID 13© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationSpanning Tree Algorithm: Introductionp g g

Presentation_ID 14© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationSpanning Tree Algorithm: Port Rolesp g g

Presentation_ID 15© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationSpanning Tree Algorithm: Root Bridgep g g g

Presentation_ID 16© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationSpanning Tree Algorithm: Path Costp g g

Presentation_ID 17© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP Operation802.1D BPDU Frame Format

Presentation_ID 18© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationBPDU Propagation and Processp g

Presentation_ID 19© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationBPDU Propagation and Processp g

Presentation_ID 20© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OperationExtended System IDy

STP was enhanced to include support for VLANs, requiring the VLAN ID to be included in the BPDU frame through the use of the

t d d t ID

Presentation_ID 21© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

extended system ID

STP OperationExtended System IDy

In the example, the priority of all the switches is 32769. The value is

Presentation_ID 22© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

p , p ybased on the 32768 default priority and the VLAN 1 assignment associated with each switch (32768+1).

2.2 Varieties of Spanning Tree Protocols

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 23

OverviewList of Spanning Tree Protocolsp g STP or IEEE 802.1D-1998

S PVST+

IEEE 802.1D-2004

Rapid Spanning Tree Protocol (RSTP) or IEEE 802.1w

Rapid PVST+p

Multiple Spanning Tree Protocol (MSTP) or IEEE 802.1s

Presentation_ID 24© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP OverviewCharacteristics of the Spanning Tree Protocols

Presentation_ID 25© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+Overview of PVST+Networks running PVST+ have these characteristics:

802 1 S f A network can run an independent IEEE 802.1D STP instance for each VLAN in the network.

O ti l d b l i lt Optimum load balancing can result.

One spanning-tree instance for each VLAN maintained can mean a considerable waste of CPU cycles for all the switches in thea considerable waste of CPU cycles for all the switches in the network. In addition to the bandwidth that is used for each instance to send its own BPDU.

Presentation_ID 26© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+Overview of PVST+

Presentation_ID 27© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+Port States and PVST+ OperationpSTP introduces the five port states:

Presentation_ID 28© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+Extended System ID and PVST+ Operationp In a PVST+ environment, the extended switch ID ensures each

switch has a unique BID for each VLANswitch has a unique BID for each VLAN.

For example, the VLAN 2 default BID would be 32770; priority 32768, plus the extended system ID of 2.3 68, p us t e e te ded syste o

Presentation_ID 29© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Rapid PVST+Overview of Rapid PVST+p RSTP is the preferred protocol for preventing Layer 2 loops in a

switched network environmentswitched network environment.

With Rapid PVST+, an independent instance of RSTP runs for each VLAN.eac

RSTP supports a new port type: an alternate port in discarding state.

There are no blocking ports. RSTP defines port states as discarding, learning, or forwarding.

RSTP (802.1w) supersedes STP (802.1D) while retaining backward compatibility

RSTP keeps the same BPDU format as IEEE 802.1D, except that the version field is set to 2 to indicate RSTP, and the flags field

ll 8 bit

Presentation_ID 30© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

uses all 8 bits.

Rapid PVST+Overview of Rapid PVST+p

Presentation_ID 31© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Rapid PVST+RSTP BPDU

Presentation_ID 32© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Rapid PVST+Edge Portsg

Presentation_ID 33© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Rapid PVST+Link Typesyp

The link type can determine whether the port can immediately transition to forwarding state. Edge port connections and point-to-

Presentation_ID 34© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

point connections are candidates for rapid transition to forwarding state.

2.3 Spanning Tree C fConfiguration

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 35

PVST+ ConfigurationCatalyst 2960 Default Configurationy g

Presentation_ID 36© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+ ConfigurationConfiguring and Verifying the Bridge IDg g y g g

Presentation_ID 37© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+ ConfigurationConfiguring and Verifying the Bridge IDg g y g g

Presentation_ID 38© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+ ConfigurationPortFast and BPDU Guard

When a switch port is configured with PortFastgthat port transitions from blocking to forwarding state immediately.state immediately.

BPDU guard puts the port in an error disabled statein an error-disabled state on receipt of a BPDU.

Presentation_ID 39© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+ ConfigurationPVST+ Load Balancingg

Presentation_ID 40© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+ ConfigurationPVST+ Load Balancingg Another method to specify the root bridge is to set the spanning

tree priority on each switch to the lowest value so that the switch istree priority on each switch to the lowest value so that the switch is selected as the primary bridge for its associated VLAN.

Presentation_ID 41© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+ ConfigurationPVST+ Load Balancingg Display and verify spanning tree configuration details.

Presentation_ID 42© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

PVST+ ConfigurationPVST+ Load Balancingg

Presentation_ID 43© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Rapid PVST+ ConfigurationSpanning Tree Modep g

Rapid PVST+ is the Cisco pimplementation of RSTP. It supports RSTP on a per-VLAN basisVLAN basis.

Presentation_ID 44© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP Configuration IssuesAnalyzing the STP Topologyy g p gy

Presentation_ID 45© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP Configuration IssuesExpected Topology versus Actual TopologyExpected Topology versus Actual Topology

Presentation_ID 46© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP Configuration IssuesOverview of Spanning Tree Statusp g

Presentation_ID 47© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP Configuration IssuesSpanning-Tree Failure Consequencesp g q

STP erroneously moves one or more ports into the forwarding state.

Any frame that is floodedAny frame that is flooded by a switch enters the loop.

Presentation_ID 48© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

STP Configuration IssuesRepairing a Spanning Tree Problemp g p g

One way to correct spanning-tree failure is to manually remove y p g yredundant links in the switched network, either physically or through configuration, until all loops are eliminated from the topologytopology.

Before restoring the redundant links, determine and correct the cause of the spanning-tree failurecause of the spanning tree failure.

Carefully monitor the network to ensure that the problem is fixed.

Presentation_ID 49© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

2.4 First-Hop Redundancy ProtocolsProtocols

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 50

Concept of First-Hop Redundancy ProtocolsDefault Gateway Limitationsy If the default gateway

cannot be reached thecannot be reached, the local device is unable to send packets off the local network segmentlocal network segment.

Even if a redundant t i t th t ldrouter exists that could

serve as a default gateway for that segment, there is no dynamic method by which these deviceswhich these devices can determine the address of a new default gateway

Presentation_ID 51© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

default gateway.

Concept of First-Hop Redundancy ProtocolsRouter Redundancyy

Multiple routers are configured to workconfigured to work together to present the illusion of a single router to thesingle router to the hosts on the LAN.

Th bilit f The ability of a network to dynamically recover from the failure of a device acting as a defaultacting as a default gateway is known as first-hop redundancy

Presentation_ID 52© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

redundancy.

Concept of First-Hop Redundancy ProtocolsSteps for Router Failoverp

Presentation_ID 53© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Varieties of First-Hop Redundancy ProtocolsFirst-Hop Redundancy Protocolsp y Hot Standby Router Protocol (HSRP)

S f 6 HSRP for IPv6

Virtual Router Redundancy Protocol version 2 (VRRPv2)

VRRPv3

Gateway Load Balancing Protocol (GLBP)y g ( )

GLBP for IPv6

ICMP Router Discovery Protocol (IRDP) ICMP Router Discovery Protocol (IRDP)

Presentation_ID 54© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Varieties of First-Hop Redundancy ProtocolsFirst-Hop Redundancy Protocolsp y

Presentation_ID 55© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

FHRP VerificationHSRP Verification

Presentation_ID 56© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

FHRP VerificationGLBP Verification Gateway Load Balancing Protocol (GLBP) is a Cisco proprietary

solution to allow automatic selection and simultaneous use ofsolution to allow automatic selection and simultaneous use of multiple available gateways in addition to automatic failover between those gateways.

Presentation_ID 57© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

2.5 Summaryy

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 58

Chapter 2: Summary IEEE 802.1D is implemented on Cisco switches on a per-VLAN

basis in the form of PVST+. This is the default configuration on Cisco switchesCisco switches.

RSTP, can be implemented on Cisco switches on a per-VLAN basis in the form of Rapid PVST+.in the form of Rapid PVST .

With PVST+ and Rapid PVST+, root bridges can be configured proactively to enable spanning tree load balancing.p y p g g

First hop redundancy protocols, such as HSRP, VRRP, and GLBP provide alternate default gateways for hosts in the switched g yenvironment.

Presentation_ID 59© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential

Presentation_ID 60© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential