CCNP SWITCH Portable Command Guide Book

Introduction xiii

Chapter 1 Analyzing Campus Network Designs 1

Cisco Hierarchical Model of Network Design 1

Cisco Enterprise Composite Network Model 2

Cisco Service-Oriented Network Architecture 3

PPDIOO Lifecycle Approach 4

Chapter 2 Implementing VLANs in a Campus Network 5

Virtual Local Area Networks 6

Creating Static VLANs 6

Assigning Ports to VLANs 7

Using the range Command 8

Dynamic Trunking Protocol 8

Setting the Encapsulation Type 9

Verifying VLAN Information 10

Saving VLAN Configurations 10

Erasing VLAN Configurations 11

Verifying VLAN Trunking 12

VLAN Trunking Protocol 12

Verifying VTP 15

Configuration Example: VLANs 15

Private Virtual Local Area Networks 19

Configuring Private VLANs 19

PVLAN Trunk on the Catalyst 3560/3750 21

PVLAN Trunk on the Catalyst 4500 22

PVLAN on a 3750 Layer 3 Switch 22

Verifying PVLANs 23

Configuration Example: PVLAN 23

EtherChannel 27

Interface Modes in EtherChannel 27

Guidelines for Configuring EtherChannel 27

Configuring L2 EtherChannel 28

Configuring L3 EtherChannel 29

Verifying EtherChannel 29

Configuration Example: EtherChannel 31

Chapter 3 Implementing Spanning Tree 35

Enabling Spanning Tree Protocol 35

Configuring the Root Switch 36

Configuring a Secondary Root Switch 37

Configuring Port Priority 37

Configuring the Path Cost 38

Configuring the Switch Priority of a VLAN 38

Configuring STP Timers 39

FlexLinks 39

Verifying STP 40

Optional STP Configurations 40

PortFast 40

BPDU Guard 41

BPDU Filtering 41

UplinkFast 42

BackboneFast 43

Root Guard 43

Loop Guard 43

Unidirectional Link Detection 44

Changing the Spanning-Tree Mode 45

Extended System ID 45

Enabling Rapid Spanning Tree 46

Enabling Multiple Spanning Tree 46

Verifying MST 48

Troubleshooting Spanning Tree 48

Configuration Example: STP 49

Core Switch (3560) 49

Distribution 1 Switch (3560) 50

Distribution 2 Switch (3560) 51

Access 1 Switch (2960) 52

Access 2 Switch (2960) 53

Chapter 4 Implementing Inter-VLAN Routing 55

Inter-VLAN Communication Using an External Router: Router-on-a-Stick 55

Inter-VLAN Communication Tips 56

Inter-VLAN Communication on a Multilayer Switch Through a Switch Virtual Interface 57

Removing L2 Switchport Capability of a Switch Port 57

Configuring SVI Autostate 57

Configuring a Layer 3 EtherChannel 58

Configuring Inter-VLAN Communication 58

Configuration Example: Inter-VLAN Communication 59

ISP Router 60

CORP Router 61

L2Switch2 (Catalyst 2960) 64

L3Switch1 (Catalyst 3560) 66

L2Switch1 (Catalyst 2960) 68

Configuring DHCP Server on a Router or Layer 3 Switch 69

Verifying and Troubleshooting DHCP Configuration 70

Configuring a DHCP Helper Address 71

DHCP Client on a Cisco IOS Software Ethernet Interface 72

Configuration Example: DHCP 72

Edmonton Router 73

Gibbons Router 75

Configuring Cisco Express Forwarding 76

Verifying CEF 76

Troubleshooting CEF 77

Chapter 5 Implementing a Highly Available Network 79

Implementing Network Logging 79

Configuring Syslog 79

Configuring an SNMP Managed Node 81

Service Level Agreements (SLA) 83

Configuring IP SLA (Catalyst 3750) 83

Monitoring IP SLA Operations 86

Chapter 6 Implementing a First Hop Redundancy Protocols Solution 87

Hot Standby Routing Protocol 87

Configuring HSRP 88

Default HSRP Configuration Settings 88

Verifying HSRP 89

HSRP Optimization Options 89

Multiple HSRP 91

HSRP IP SLA Tracking 92

Debugging HSRP 93

Virtual Router Redundancy Protocol 94

Configuring VRRP 94

Verifying VRRP 95

Debugging VRRP 95

Gateway Load Balancing Protocol 96

Configuring GLBP 96

Verifying GLBP 99

Debugging GLBP 99

Configuration Example: HSRP on L3 Switch 99

Switch DLS1 101

Switch DLS2 103

IP SLA Tracking—Switch DLS1 VLAN 10 105

Configuration Example: GLBP 106

DLS1 107

DLS2 109

Chapter 7 Minimizing Service Loss and Data Theft in a Campus Network 111

Configuring Static MAC Addresses 111

Configuring Switch Port Security 112

Verifying Switch Port Security 113

Sticky MAC Addresses 114

Programming Authentication Methods 114

Adding 802.1x Port-Based Authentication 115

Mitigating VLAN Hopping: Best Practices 117

VLAN Access Maps 117

Verifying VLAN Access Maps 119

Configuration Example: VLAN Access Maps 120

DHCP Snooping 121

Verifying DHCP Snooping 123

Implementing Dynamic ARP Inspection 124

Verifying DAI 125

Configuring IP Source Guard 125

Understanding Cisco Discovery Protocol Security Issues 126

Link Layer Discovery Protocol Configuration 126

Configuring the Secure Shell Protocol 127

Restricting Management Access with ACLs 128

Telnet Sessions 128

Web Interface Sessions 128

Disabling Unneeded Services 129

Securing End-Device Access Ports 129

Chapter 8 Accommodating Voice and Video in Campus Networks 131

Communications Subsystems 132

Configuring and Verifying Voice VLANs 132

Power over Ethernet 133

High Availability for Voice and Video 134

Configuring AutoQoS: 2960/3560/3750 137

Verifying Auto QoS Information: 2960/3560/3750 138

Configuring AutoQoS: 6500 139

Verifying AutoQoS Information: 6500 140

Chapter 9 Integrating Wireless LANs into a Campus Network 141

Wireless Roaming and Controllers 141

Switch Configuration for Standalone APs and HREAPs 142

Switch Configuration for WLC and Controller-Based APs 143

Configuration for the LWAP Connection 144

Configuration for the WLC Connection 144

Switch Configuration for 4400 Series Controllers (EtherChannel) 145

The Wireless Services Module 146

Configuring Communication Between the Supervisor 720 and Cisco WiSM 146

The Initial WiSM Configuration 152

Configuration Example: 4402 WLAN Controller Using the Configuration Wizard 153

Configuration Example: 4402 WLAN Controller Using the Web Interface 162

Configuration Example: Configuring a 3560 Switch to Support WLANs and APs 171

Configuration Example: Configuring a Wireless Client 173

Appendix A Private VLAN Catalyst Switch Support Matrix 177

Appendix B Create Your Own Journal Here 179