Difference between revisions of "Galaxy Network - Network Layout"
From Teknologisk videncenter
(→IP Topology) |
(→VLAN Topolog) |
||
| Line 11: | Line 11: | ||
*'''1:''' Not in use; clear from all trunks. This is a Cisco best practice implementation (not required). | *'''1:''' Not in use; clear from all trunks. This is a Cisco best practice implementation (not required). | ||
| − | *''' | + | *'''45:''' Management VLAN on all switches. |
*'''100–399:''' Access layer devices. | *'''100–399:''' Access layer devices. | ||
| − | *'''400–599:''' Data center devices | + | *'''400–599:''' Data center devices. |
*'''600–699:''' Internet and partner connections. | *'''600–699:''' Internet and partner connections. | ||
*'''700–899:''' Reserved for future use. | *'''700–899:''' Reserved for future use. | ||
| Line 22: | Line 22: | ||
---- | ---- | ||
The following VLANs are in use. | The following VLANs are in use. | ||
| + | |||
| + | vlan access-map NAME 10 | ||
| + | match ip address <telnet access list> | ||
| + | action drop | ||
| + | vlan access-map 20 | ||
| + | match ip address <ssh access list> | ||
| + | action forward | ||
| + | |||
| + | switchport mode access (default) | ||
| + | N/A (default) | ||
| + | no cdp enable | ||
| + | udld port disable | ||
| + | |||
| + | interface vlan <management vlan> | ||
| + | |||
| + | switchport trunk allowed vlan remove 1 | ||
| + | |||
| + | |||
| + | ==== Interface security ==== | ||
| + | |||
| + | switchport mode access (default) | ||
| + | N/A (default) | ||
| + | no cdp enable | ||
| + | udld port disable | ||
| + | spanning-tree portfast | ||
| + | spanning-tree portfast bpduguard default | ||
| + | |||
| + | spanning-tree guard root | ||
| + | |||
| + | vtp mode transparent | ||
| + | |||
| + | no mls qos trust {default} | ||
| + | |||
| + | shutdown | ||
Revision as of 11:59, 25 May 2009
Contents
Network Layout
IP Topology
VLAN Topolog
Predefined VLAN assocations
While only a few of these VLANs are actually in use, the VLAN ranges will allow our network to scale almost indefinitely.
- 1: Not in use; clear from all trunks. This is a Cisco best practice implementation (not required).
- 45: Management VLAN on all switches.
- 100–399: Access layer devices.
- 400–599: Data center devices.
- 600–699: Internet and partner connections.
- 700–899: Reserved for future use.
- 900–999: Point-to-point links between switches (Layer 3).
VLANs currently in use
The following VLANs are in use.
vlan access-map NAME 10 match ip address <telnet access list> action drop vlan access-map 20 match ip address <ssh access list> action forward
switchport mode access (default) N/A (default) no cdp enable udld port disable
interface vlan <management vlan>
switchport trunk allowed vlan remove 1
Interface security
switchport mode access (default) N/A (default) no cdp enable udld port disable spanning-tree portfast spanning-tree portfast bpduguard default
spanning-tree guard root
vtp mode transparent
no mls qos trust {default}
shutdown