Difference between revisions of "Galaxy Network - Network Layout"

From Teknologisk videncenter
Jump to: navigation, search
(→‎IP Topology)
(→‎IP Topology)
Line 1: Line 1:
 
==IP Topology==
 
==IP Topology==
 
===Amidala===
 
===Amidala===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/1
 
*'''Interface:''' FA 0/1
 
**'''IP:''' None
 
**'''IP:''' None
Line 42: Line 40:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 55: Line 52:
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===Anakin===
 
===Anakin===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/1
 
*'''Interface:''' FA 0/1
 
**'''IP:''' None
 
**'''IP:''' None
Line 97: Line 93:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 108: Line 103:
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===QuiGon===
 
===QuiGon===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' S 0/3/0
 
*'''Interface:''' S 0/3/0
 
**'''IP:''' 192.168.50.1 /30
 
**'''IP:''' 192.168.50.1 /30
Line 134: Line 128:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 143: Line 136:
 
<br />
 
<br />
 
====Access List====
 
====Access List====
−
----
 
 
*'''Access List'''
 
*'''Access List'''
 
**'''Number:''' 1
 
**'''Number:''' 1
Line 154: Line 146:
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===ObiWan===
 
===ObiWan===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' S 0/1/0
 
*'''Interface:''' S 0/1/0
 
**'''IP:''' 192.168.50.6 /30
 
**'''IP:''' 192.168.50.6 /30
Line 180: Line 171:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 188: Line 178:
 
<br />
 
<br />
 
====Access List====
 
====Access List====
−
----
 
 
*'''Access List'''
 
*'''Access List'''
 
**'''Number:''' 1
 
**'''Number:''' 1
Line 199: Line 188:
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===MaceWindu===
 
===MaceWindu===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/1
 
*'''Interface:''' FA 0/1
 
**'''IP:''' 192.168.254.14 /30
 
**'''IP:''' 192.168.254.14 /30
Line 221: Line 209:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 230: Line 217:
 
<br />
 
<br />
 
====Access List====
 
====Access List====
−
----
 
 
Der skal sættes access list op så kun vlan 40 kan komme ind og vlan 30 kun kan komme i kontakt med vlan 40
 
Der skal sættes access list op så kun vlan 40 kan komme ind og vlan 30 kun kan komme i kontakt med vlan 40
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===HanSolo===
 
===HanSolo===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/0
 
*'''Interface:''' FA 0/0
 
**'''IP:''' 192.168.254.22 /30
 
**'''IP:''' 192.168.254.22 /30
Line 248: Line 233:
 
<br />
 
<br />
 
====Access List====
 
====Access List====
−
----
 
 
Der skal sættes access list op så kun vlan 30 kan komme ind og vlan 40 kun kan komme i kontakt med vlan 30
 
Der skal sættes access list op så kun vlan 30 kan komme ind og vlan 40 kun kan komme i kontakt med vlan 30
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===Palpatine===
 
===Palpatine===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/0
 
*'''Interface:''' FA 0/0
 
**'''IP:''' 172.42.10.1 /24
 
**'''IP:''' 172.42.10.1 /24
Line 278: Line 261:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 286: Line 268:
 
<br />
 
<br />
 
====Access List====
 
====Access List====
−
----
 
 
Der skal sættes access list op så vlan 10 kun kan komme ud på netted
 
Der skal sættes access list op så vlan 10 kun kan komme ud på netted
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===Luke===
 
===Luke===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/1
 
*'''Interface:''' FA 0/1
 
**'''IP:''' None
 
**'''IP:''' None
Line 320: Line 300:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 330: Line 309:
 
<br />
 
<br />
 
====Access List====
 
====Access List====
−
----
 
 
Der skal sættes access list op så vlan 20 kun kan komme ud på netted
 
Der skal sættes access list op så vlan 20 kun kan komme ud på netted
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===Leia===
 
===Leia===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/1
 
*'''Interface:''' FA 0/1
 
**'''IP:''' None
 
**'''IP:''' None
Line 364: Line 341:
 
<br />
 
<br />
 
====Routing====
 
====Routing====
−
----
 
 
*'''Protocrol:''' EIGRP
 
*'''Protocrol:''' EIGRP
 
**'''AS:''' 1337
 
**'''AS:''' 1337
Line 374: Line 350:
 
<br />
 
<br />
 
====Access List====
 
====Access List====
−
----
 
 
Der skal sættes access list op så vlan 20 kun kan komme ud på netted
 
Der skal sættes access list op så vlan 20 kun kan komme ud på netted
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===R2D2===
 
===R2D2===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/1
 
*'''Interface:''' FA 0/1
 
**'''IP:''' None
 
**'''IP:''' None
Line 400: Line 374:
 
<br />
 
<br />
 
<br />
 
<br />
 +
 
===C3PO===
 
===C3PO===
−
----
 
 
====Interface====
 
====Interface====
−
----
 
 
*'''Interface:''' FA 0/1
 
*'''Interface:''' FA 0/1
 
**'''IP:''' None
 
**'''IP:''' None

Revision as of 14:49, 25 May 2009

IP Topology

Amidala

Interface

  • Interface: FA 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked link to Anakin (Port-group 1)
  • Interface: FA 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunked link to Anakin (Port-group 1)
  • Interface: FA 0/3
    • IP: None
    • Type: Switched
    • Description: Trunked link to Leia
  • Interface: FA 0/4
    • IP: None
    • Type: Switched
    • Description: Trunked link to Luck
  • Interface: FA 0/21
    • IP: 172.16.10.6 /30
    • Type: Routed
    • Description: Link to R7 (Cloud)
  • Interface: FA 0/22
    • IP: 192.168.254.21 /30
    • Type: Routed
    • Description: Link to HanSolo
  • Interface: FA 0/23
    • IP: None
    • Type: Switched
    • Description: Link to MaceWindu
  • Interface: FA 0/24
    • IP: 192.168.254.29 /30
    • Type: Routed
    • Description: Link to QuiGon
  • Interface: Loopback 0
    • IP: 192.168.45.1 /30
    • Type: Routed
    • Description: Management interface


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 192.168.45.0 0.0.0.255
      • 192.168.254.8 0.0.0.3
      • 192.168.254.16 0.0.0.3
      • 192.168.254.20 0.0.0.3
      • 192.168.254.28 0.0.0.3
      • 192.168.254.36 0.0.0.3
      • 192.168.254.40 0.0.0.3



Anakin

Interface

  • Interface: FA 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Amidala (Port-group 1)
  • Interface: FA 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunk link to Amidala (Port-group 1)
  • Interface: FA 0/2
    • IP: 192.168.254.5 /30
    • Type: Routed
    • Description: Link to Luke
  • Interface: FA 0/4
    • IP: 192.168.254.1 /30
    • Type: Routed
    • Description: Link to Leia
  • Interface: FA 0/21
    • IP: 172.16.10.2 /30
    • Type: Routed
    • Description: Link to R4 (Cloud)
  • Interface: FA 0/22
    • IP: 192.168.254.25 /30
    • Type: Routed
    • Description: Link to Palpatine
  • Interface: FA 0/23
    • IP: 192.168.254.13 /30
    • Type: Routed
    • Description: Link to MaceWindu
  • Interface: FA 0/24
    • IP: 192.168.254.33 /30
    • Type: Routed
    • Description: Link to ObiWan
  • Interface: Loopback 0
    • IP: 192.168.45.5 /30
    • Type: Routed
    • Description: Management interface


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 192.168.254.0 0.0.0.3
      • 192.168.254.4 0.0.0.3
      • 192.168.254.12 0.0.0.3
      • 192.168.254.24 0.0.0.3
      • 192.168.254.32 0.0.0.3



QuiGon

Interface

  • Interface: S 0/3/0
    • IP: 192.168.50.1 /30
    • Type: Routed
    • Description: Link to ObiWan DTC (128.000)
  • Interface: S 0/3/1
    • IP: 192.168.50.5 /30
    • Type: Routed
    • Description: Link to ObiWan DTE
  • Interface: FA 0/0
    • IP: DHCP
    • Type: Routed
    • Description: Link to Mercantec (WAN NAT w/ ACL 1)
  • Interface: FA 0/1
    • IP: 192.168.254.30 /30
    • Type: Routed
    • Description: Link to Amidala
  • Interface: Loopback 0
    • IP: 192.168.45.9 /30
    • Type: Routed
    • Description: Management interface


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 192.168.50.0
      • 192.168.254.28
      • 192.168.254.40


Access List

  • Access List
    • Number: 1
      • IP: 172.42.10.0
      • Wilcrad/Netmask: 0.0.0.255
      • Type:permit
      • IP: 172.42.20.0
      • Wilcrad/Netmask: 0.0.0.255
      • Type:permit



ObiWan

Interface

  • Interface: S 0/1/0
    • IP: 192.168.50.6 /30
    • Type: Routed
    • Description: Link to QuiGon DCE
  • Interface: S 0/1/1
    • IP: 192.168.50.2 /30
    • Type: Routed
    • Description: Link to QuiGon DTC (128.000)
  • Interface: FA 0/0
    • IP: DHCP
    • Type: Routed
    • Description: Link to Mercantec (WAN NAT w/ ACL 1)
  • Interface: FA 0/1
    • IP: 192.168.254.34 /30
    • Type: Routed
    • Description: Link to Anakin
  • Interface: Loopback 0
    • IP: 192.168.45.13 /30
    • Type: Routed
    • Description: Management interface


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 192.168.50.0 0.0.0.3
      • 192.168.254.32 0.0.0.3


Access List

  • Access List
    • Number: 1
      • IP: 172.42.10.0
      • Wilcrad/Netmask: 0.0.0.255
      • Type:permit
      • IP: 172.42.20.0
      • Wilcrad/Netmask: 0.0.0.255
      • Type:permit



MaceWindu

Interface

  • Interface: FA 0/1
    • IP: 192.168.254.14 /30
    • Type: Routed
    • Description: Link to Anakin
  • Interface: FA 0/2
    • IP: 192.168.254.18 /30
    • Type: Routed
    • Description: Link to Amidala
  • Interface: FA 0/24
    • IP: None
    • Type: Switched
    • Description: Link to Cisco Call Manager
  • Interface: Loopback 0
    • IP: 192.168.45.33 /30
    • Type: Routed
    • Description: Management interface


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 192.168.22.73 0.0.0.3
      • 192.168.254.12 0.0.0.3
      • 192.168.254.16 0.0.0.3


Access List

Der skal sættes access list op så kun vlan 40 kan komme ind og vlan 30 kun kan komme i kontakt med vlan 40

HanSolo

Interface

  • Interface: FA 0/0
    • IP: 192.168.254.22 /30
    • Type: Routed
    • Description: Link to Amidala
  • Interface: Loopback 0
    • IP: 192.168.45.53 /30
    • Type: Routed
    • Description: Management interface


Access List

Der skal sættes access list op så kun vlan 30 kan komme ind og vlan 40 kun kan komme i kontakt med vlan 30

Palpatine

Interface

  • Interface: FA 0/0
    • IP: 172.42.10.1 /24
    • Type: Routed
    • Description: Gateway for wireless clients
  • Interface: FA 0/1
    • IP: 192.168.254.26 /30
    • Type: Routed
    • Description: Link to Anakin
  • Interface: Loopback 0
    • IP: 192.168.45.17 /30
    • Type: Routed
    • Description: Management interface
  • Interface: Wlan-Controller
    • IP: 192.168.45.21 /30
    • Type: Routed
    • Description: Management interface
  • Interface: AP-Management
    • IP: 192.168.45.25 /30
    • Type: Routed
    • Description: AP Management interface


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 172.42.10.0 0.0.0.3
      • 192.168.254.24 0.0.0.3


Access List

Der skal sættes access list op så vlan 10 kun kan komme ud på netted

Luke

Interface

  • Interface: FA 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to C3PO (Port-group 1)
  • Interface: FA 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to C3PO (Port-group 1)
  • Interface: FA 0/3
    • IP: 192.168.45.6 /30
    • Type: Routed
    • Description: Link to Anakin
  • Interface: FA 0/4
    • IP: 192.168.45.38 /30
    • Type: Routed
    • Description: Link to Amadala
  • Interface: FA 0/23
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Leia (Port-group 2)
  • Interface: FA 0/24
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Leia (Port-group 2)


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 192.168.254.4 0.0.0.3
      • 192.168.254.36 0.0.0.3
      • 192.168.200.0 0.0.0.255
      • 172.42.20.0 0.0.0.255


Access List

Der skal sættes access list op så vlan 20 kun kan komme ud på netted

Leia

Interface

  • Interface: FA 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to R2D2 (Port-group 1)
  • Interface: FA 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to R2D2 (Port-group 1)
  • Interface: FA 0/3
    • IP: 192.168.45.10 /30
    • Type: Routed
    • Description: Link to Amadala
  • Interface: FA 0/4
    • IP: 192.168.45.2 /30
    • Type: Routed
    • Description: Link to Anakin
  • Interface: FA 0/23
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Luke (Port-group 2)
  • Interface: FA 0/24
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Luke (Port-group 2)


Routing

  • Protocrol: EIGRP
    • AS: 1337
    • Networks
      • 192.168.254.0 0.0.0.3
      • 192.168.254.8 0.0.0.3
      • 192.168.200.0 0.0.0.255
      • 172.42.20.0 0.0.0.255


Access List

Der skal sættes access list op så vlan 20 kun kan komme ud på netted

R2D2

Interface

  • Interface: FA 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Leia (Port-group 1)
  • Interface: FA 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Leia (Port-group 1)
  • Interface: GI 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to C3PO (Port-group 1)
  • Interface: GI 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to C3PO (Port-group 1)



C3PO

Interface

  • Interface: FA 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Luke (Port-group 1)
  • Interface: FA 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to Luke (Port-group 1)
  • Interface: GI 0/1
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to R2D2 (Port-group 1)
  • Interface: GI 0/2
    • IP: None
    • Type: Etherchannel
    • Description: Trunked to R2D2 (Port-group 1)



VLAN Topology

In order to allow our network to be scalable, we have allocated VLAN ranges to specific areas. Please note that even though we only use a range of 1000 VLANs, newer switches allow for more than 4000.

Predefined VLAN assocations

While only a few of these VLANs are actually in use, the VLAN ranges will allow our network to scale almost indefinitely.

  • 1: Not in use; clear from all trunks. This is a Cisco best practice implementation (not required).
  • 2-99: Management VLAN on all switches.
  • 100–399: Access layer devices.
  • 400–599: Data center devices.
  • 600–699: Internet and partner connections.
  • 700–899: Reserved for future use.
  • 900–999: Point-to-point links between switches (Layer 3).

VLANs currently in use

  • VLAN 45: Management VLAN used on all switches in the network.
  • VLAN 100: Skywalker Enterprises.
  • VLAN 400: Wireless.
  • VLAN 401: Wide-Area Network.
  • VLAN 402: ISDN/PSTN.

Configuration of VLAN Layer-2 Security

vlan access-map NAME 10
match ip address <telnet access list>
action drop
vlan access-map 20
match ip address <ssh access list>
action forward

switchport mode access (default)
N/A (default)
no cdp enable
udld port disable

interface vlan <management vlan>

switchport trunk allowed vlan remove 1

Configuration of Interface Security

switchport mode access (default)
N/A (default)
no cdp enable
udld port disable
spanning-tree portfast
spanning-tree portfast bpduguard default

spanning-tree guard root

vtp mode transparent

no mls qos trust {default}

shutdown
Retrieved from "http://mars.merhot.dk/w/index.php?title=Galaxy_Network_-_Network_Layout&oldid=6280"