Difference between revisions of "Galaxy Network - Network Layout"
From Teknologisk videncenter
(→VLANs currently in use) |
(→Configuration of VLAN Layer-2 Security) |
||
| Line 28: | Line 28: | ||
==== Configuration of VLAN Layer-2 Security ==== | ==== Configuration of VLAN Layer-2 Security ==== | ||
| − | + | <pre> | |
vlan access-map NAME 10 | vlan access-map NAME 10 | ||
match ip address <telnet access list> | match ip address <telnet access list> | ||
| Line 44: | Line 44: | ||
switchport trunk allowed vlan remove 1 | switchport trunk allowed vlan remove 1 | ||
| + | </pre> | ||
==== Interface security ==== | ==== Interface security ==== | ||
Revision as of 12:13, 25 May 2009
Contents
Network Layout
IP Topology
VLAN Topology
Predefined VLAN assocations
While only a few of these VLANs are actually in use, the VLAN ranges will allow our network to scale almost indefinitely.
- 1: Not in use; clear from all trunks. This is a Cisco best practice implementation (not required).
- 2-99: Management VLAN on all switches.
- 100–399: Access layer devices.
- 400–599: Data center devices.
- 600–699: Internet and partner connections.
- 700–899: Reserved for future use.
- 900–999: Point-to-point links between switches (Layer 3).
VLANs currently in use
- VLAN 45: Management VLAN used on all switches in the network.
- VLAN 102: Skywalker Enterprises.
- VLAN 400: Wireless access.
- VLAN 401: Wide-Area Network access.
- VLAN 402: ISDN/PSTN access.
Configuration of VLAN Layer-2 Security
vlan access-map NAME 10 match ip address <telnet access list> action drop vlan access-map 20 match ip address <ssh access list> action forward switchport mode access (default) N/A (default) no cdp enable udld port disable interface vlan <management vlan> switchport trunk allowed vlan remove 1
Interface security
switchport mode access (default) N/A (default) no cdp enable udld port disable spanning-tree portfast spanning-tree portfast bpduguard default
spanning-tree guard root
vtp mode transparent
no mls qos trust {default}
shutdown