Revision as of 14:24, 29 August 2011

Inter-VLAN Routing

Because VLANs isolate trafficto a defined broadcast domain and subnet, network devices in different VLANs cannot communicate with each other natively.

Isolated VLANs

Inter-VLAN Routing

Adding an external routing with subinterface routing does not scale beyond 50 VLANs. Cisco IOS routers only support trunking in IP Plus Feature set and above.

Catalyst Multilayer Switches support 3 different routed interface types:

Routed Port

A pure Layer 3 interface similar to a routed port on a Cisco IOS router.

Switched Virtual Interface (SVI)

A virtual VLAN interface for inter-VLAN routing. In other words, SVIs are the virtual routed VLAN interfaces.

Bridged Virtual Interfaces (BVI)

A Layer 3 virtual bridging interface.

All Cisco Layer 3 Switches support routing protocols, but several models requires enhanced software for specific routing protocol features.

To change between routed and switchports use no switchport and switchport interface commands respectively. Catalyst 6500 switches use L3 interfaces by default, so depending on the switching model the swithport and no switchport command might be present in the running-config files.

Router-on-a-Stick

Inter-VLAN subinterface Routing forwarding path

Router-on-a-Stick Advantages and Disanvantages

• Works on any L2 switch that support Trunking.
• Simpel Implementation. Only one swithc port and one router interface require configuration.
• The Router provides Inter-VLAN Routing i a Layer 2 network.
• The Router is a single point of failure.
• Trunk link may be congested when multible VLANs use it.
• Latency might be higher as frames leave and re-enter the switch chassis multiple times and the router makes software-based routing decisions.

Router(config)# interface FastEthernet0/0
Router(config-if)#no shutdown
Router(config-if)#no ip address
Router(config)# interface FastEthernet 0/0.1
Router(config-subif)# description VLAN 1
Router(config-subif)# encapsulation dot1Q 1 native
Router(config-subif)# ip address 10.1.1.1 255.255.255.0
Router(config-subif)# exit
Router(config)# interface FastEthernet 0/0.2
Router(config-subif)# description VLAN 2
Router(config-subif)# encapsulation dot1Q 2
Router(config-subif)# ip address 10.2.2.1 255.255.255.0
Router(config-subif)# exit
Router(config)# end
!! Switch Configuration  **************************
switch(config)# interface FastEthernet 0/24
switch(config-if)# switchport trunk encapsulation dot1q
switch(config-if)# switchport mode trunk
switch(config-if)# end

Inter-VLAN Routing Using SWI

A long time ago high performance network consisted of L2 Switches. Routers routed i software and performed slow whereas switches switched in hardware.

Routed vs switches Campus Architecture

As networks evolved routing became faster and got implemented in ASICs. Routing in hardware performs at wire-speed in most L3 Switches.

SVI Example

The number of Switch Virtual Interfaces a Layer 3 Switch support is not the same at the number of VLAN supported.

SVI is use to:

• Provide gateways for VLAN Clients
• Provide Layer 3 IP connectivity to the switch
• Support Routing Protocols

SVI: Advantages and Disadvantages:

• It is much faster than router-on-a-stick because everything is hardware switched and routed.
• No need for external links from the switch to the router for routing.
• Not limited to one link. Layer 2 EtherChannels can be used between the switches to get more bandwidth.
• Latency is much lower because it doesn’t need to leave the switch.
• It needs a Layer 3 switch to perform Inter-VLAN routing, which is more expensive.

Configure SVI inter-VLAN Routing

Switch# <input>configure terminal</input>
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)# <input>ip routing</input>
Switch(config)# <input>interface vlan 10</input>
Switch(config-if)# <input>ip address 10.10.1.1 255.0.0.0</input>
Switch(config-if)# <input>no shutdown</input>
Switch(config-if)# <input>exit</input>
Switch(config)# <input>interface vlan20</input>
Switch(config-if)# <input>ip address 10.20.1.1 255.255.255.0</input>
Switch(config-if)# <input>no shutdown</input>

SVI Autostate

SVi interfaces are consideres up if:

• The VLAN exists and is active in the VLAN database on the switch.
• The VLAN interface exists and is not administratively down.
• At least one Layer 2 (access or trunk) port exists on the switch, has a link in the up state on this VLAN, and is in the spanning-tree forwarding state on the VLAN.

Disable autostate

Switch(config)# <input>interface gigabitEthernet0/1</input>
Switch(config-if)# <input>switchport autostate exclude</input>

Routing with Routed Ports

Routed interfaces don’t support subinterfaces as with Cisco IOS routers. But it is possible to configure a routed EtherChannel. Routed ports removes Layer 2 protocols such as STP and VTP.

Configuring a routed port

Switch(config)#<input>interface fastethernet 0/1</input>
Switch(config-if)#<input>no switchport</input>
Switch(config-if)#<input>ip address 192.168.1.1 255.255.255.0</input>
Switch(config-if)#<input>no shutdown</input>

Configure Layer 3 EtherChannel

It is important to match the EtherChannel configuration on both sides on the switches, and the IP addresses on the Portchannel Interfaces should be on the same sub-nets/VLAN to communicate.

switch(config)#<input> interface fastethernet 0/23</input>
switch(config-if)# <input>no switchport</input>
switch(config-if)#<input> channel-group 1 mode on</input>
switch(config)# <input>interface fastethernet 0/24</input>
switch(config-if)# <input>no switchport</input>
switch(config-if)# <input>channel-group 1 mode on</input>
switch(config)# <input>interface port-channel 1</input>
switch(config-if)# <input>no switchport</input>
switch(config-if)# <input>ip address 10.1.20.1 255.255.255.0</input>

Multilayer Switch Routing Protocol configuration

Switch(config)#<input> ip routing</input>
Switch(config)# <input>router eigrp 100</input>
Switch(config-router)#<input> no auto-summary</input>
Switch(config-router)# <input>network 10.0.0.0</input>
Switch(config-router)# <input>passive-interface default</input>
Switch(config-router)# <input>no passive-interface fa0/24</input>
Switch(config)#<input> interface f0/24</input>
Switch(config-if)# <input>description Uplink</input>
Switch(config-if)# <input>ip summary-address eigrp 100 10.1.0.0 255.255.240.0</input>

Implementing Dunamic Host Configuration Protocol in a Multilayer Switched Environment

As defined in RFC 2131, Dynamic Host Configuration Protocol (DHCP) provides configuration parameters to Internet hosts.

External DHCP Server

DHCP DORA

Multilayer Switch Configuration Example

Switch(config)# <input>ip dhcp excluded-address 10.1.10.1 10.1.10.20</input>
Switch(config)# <input>ip dhcp pool VLAN10</input>
Switch(config-dhcp)# <input>network 10.1.10.0 255.255.255.0</input>
Switch(config-dhcp)# <input>default-router 10.1.10.1</input>
Switch(config-dhcp)# <input>option 150 10.1.1.50</input>
Switch(config-dhcp)# <input>lease 0 8 0</input>
Switch(config-dhcp)# ! 0 days 8 hours 0 minutes
Switch(config)#<input> interface vlan10</input>
Switch(config-if)#<input> ip address 10.1.10.1 255.255.255.0</input>

Configure DHCP Relay

To relay breadcast DHCP messages from the local subnet to the DHCP server an DHCP relay mechanism is use in Cisco IOS. The DHCP broadcast message is replayed from the switch as a unicast to the DHCP server and back again to the switch. The switch then broadcasts the message on to the local subnet.

DHCP Relay

Switch(config)# <input>interface vlan10</input>
Switch(config-if)# <input>ip address 10.1.10.1 255.255.255.0</input>
Switch(config-if)# <input>ip helper-address 10.1.100.1</input>

Verify DHCP Operation

switch#<input> show ip dhcp binding</input>
Bindings from all pools not associated with VRF:
IP address  Client-ID/        Lease expiration      Type
Hardware address/
User name
10.1.10.21  0100.1bd5.132a.d2  Jun 25 2009 06:09 AM  Automatic
10.1.10.22  0100.4096.a46a.90  Jun 25 2009 09:40 AM  Automatic
10.1.10.23  0100.4096.aa98.95  Jun 25 2009 11:28 AM  Automatic

switch#<input> debug ip dhcp server packet</input>
DHCPD: DHCPDISCOVER received from client 0100.1bd5.132a.d2 on interface Vlan6.
DHCPD: Sending DHCPOFFER to client 0100.1bd5.132a.d2 (10.1.10.21).
DHCPD: broadcasting BOOTREPLY to client 001b.d513.2ad2.
DHCPD: DHCPREQUEST received from client 0100.1bd5.132a.d2.
DHCPD: Sending DHCPACK to client 0100.1bd5.132a.d2 (10.1.10.21).
DHCPD: broadcasting BOOTREPLY to client 001b.d513.2ad2.

Deploying CEF-Based Multilayer Switching

Layer 3 switching provides a wire-speed mechanism by which to route packets between VLANs using tables that store Layer2 and Layer3 forwarding information in the hardware.

A Layer 3 switch performs three major functions:

• Packet Switching
• Route Processing
• Intelligent network services

Frame Rewrite:

Checksum calculation and rewrite.

CAM and TCAM Tables

CAM table

The primary table used to make Layer 2 forwarding decisions. The table is built by recording the source MAC address and inbound port of all incoming frames. When a frame arrives at the switch with a destination MAC address of an entry in the CAM table, the frame is forwarded out through only the port that is associated with that specific MAC address.

TCAM table

Stores ACL, QoS, and other information generally associated with Layer 3 and up layer processing.

CAM

TCAM

TCAM Layout

The TCAM is devided into several regions such as one for ACL, one for multicast and one for IP-PREFIX.

The regions have these lookup types:

Exact-match region

Consistsof Layer 3 entries for regions such as IP adjacencies. IP adjacencies are the next-hop information (MAC address) for an IP address. Other examples of exact-match regions are Layer 2 switching tables and UDP flooding tables.

Longest-match region

Consistsof multiple “buckets” or groups of Layer 3 address entries organized in decreasing order by mask length. All entries within a bucket share the same mask value and key size. The buckets change their size dynamically by borrowing address entries from neighboring buckets. Although the size of the whole protocol region is fixed, as mentioned in Table 4-4, several platforms support configuration of the region size. For most platforms, the reconfigured size of the protocol region is effective only after the next system reboot.

First-match region

Consists of regions that stop lookups after the first match of the entry. An example of when a first-match region is used is for ACL entries.

Distributed Hardware Forwarding

hardware forwarding overview

Cisco Switching Methods

Process Switching

In process switching, the router strips off the Layer 2 header for each incoming frame, looks up the Layer 3 destination network address in the routing table for each packet.

Fast Switching

After the lookup of the first packet destined for a particular IP network, the router initializes the fast-switching cache used by the Fast switching mode.

Cisco Express Forwarding (CEF)

The default-switching mode. CEF is less CPU-intensive than fast switching or process switching.

CEF modes of operation

• Central CEF mode
• Distributed CEF mode(dCEF)

CEF Processing

CEF

The FIB contains a pointer to the Adjacency table with rewrite information.
The point could also point to these special adjacencies:

Punt adjacency

Usedfor packets that require special handling by the Layer 3 engine or for features that are not yet supported by hardware switching.

Drop or discard adjacency

Used to drop ingress packets.

Null adjacency

Used to drop packets destined for a Null0 interface. The use of a Null0 interface is for access filtering of specific source IP packets.

Glean adjacency

When no rewrite information exists the switch needs to make an ARP.

ARP Throttling

he ARP throttling adjacency drops the first packet in any communication between due to ARP processing when no ARP entries exist for the Hosts.

CEF Troubleshooting

show ip cef vlan 10 detail
show adjacency
show adjacency gigabitethernet 1/5 detail