Campus Networking Best Practices Session 2: Layer 3: Dale Smith University of Oregon & NSRC Dsmith@uoregon - Edu
Campus Networking Best Practices Session 2: Layer 3: Dale Smith University of Oregon & NSRC Dsmith@uoregon - Edu
Best Practices
Session 2: Layer 3
Dale Smith
University of Oregon & NSRC
[email protected]
Routing versus Switching
Layer 2 versus Layer 3
• Routers provide more isolation between
devices (they stop broadcasts)
• Routing is more complicated, but also
more sophisticated and can make more
efficient use of the network, particularly if
there are redundancy elements such as
loops
Switching versus Routing
These links must be routed, not switched
Core Network
• Reliability is the key
– remember many users and possibly your whole network relies on the core
• May have one or more network core locations
• Core location must have reliable power
– UPS battery backup (redundant UPS as your network evolves)
– Generator
• Core location must have reliable air conditioning
• As your network evolves, core equipment should be equipped with
dual power supplies, each powered from separate UPS
• Border routers separate from Core
• Firewalls and Traffic Shaping Devices
• Intrusion Detection
• Intrusion Prevention
• Network Address Translation
Core Network
• At the core of your network should be routers – you must
route, not switch.
• Routers give isolation between subnets
• A simple core:
Firewall/
Border Router Core Router All router
Traffic Shaper
interfaces on a
separate subnet
Central
Servers for
campus
Where to put Servers?
• Servers should be on a high speed interface off of your
core router
• Servers should be at your core location where there is
good power and air conditioning
Firewall/
Border Router Core Router All router
Traffic Shaper
interfaces on a
separate subnet
Servers
in core
Border Router
• Connects to outside world
• RENs and Peering are the reason you need
them
• Must get Provider Independent IP address space
to really make this work right
Internet
Exchange REN
Campus
Network
Putting it all Together
Firewall/
Border Traffic Shaper
Router
REN switch
Core
Router
Core Servers
Core Core
Router Switch
Core Servers
Core Switch
Local Internet
exchange switch
Core Router Fiber Links to remote buildings Core Router
Alternative Core Designs
• Wireless Links versus Fiber
Firewall/
Traffic Shaper
Border
Router
REN switch
Core
Router
Core Servers
Wireless Links
Layer 2 and 3 Summary
• Build star networks – don’t daisy chain
• Use managed switches – re-purpose your
old unmanaged switches for labs
• Route in the core – don’t switch
Thanks
Questions?
Symbols to use for diagrams