Cis82 5 InterVLANRouting - SHORT

CIS 82 Routing and Swithing Inter-VLAN Routing
Routing
Rick Graziani
Cabrillo College
[email protected]
Spring 2015
Chapter 5
5.1 Inter-VLAN Routing Configuration
5.2 Troubleshooting Inter-VLAN Routing
5.3 Layer 3 Switching
5.4 Summary
Chapter 5: Objectives
 Describe the three primary options for enabling inter-VLAN routing.
 Configure legacy inter-VLAN routing.
 Configure router-on-a-stick inter-VLAN routing.
 Troubleshoot common inter-VLAN configuration issues.
 Troubleshoot common IP addressing issues in an inter-VLAN-routed
environment.
 Configure inter-VLAN routing using Layer 3 switching.
 Troubleshoot inter-VLAN routing in a Layer 3-switched environment.
Internetwork Communications
C:>ping 172.16.30.100
172.16.10.100/24 172.16.20.100/24 172.16.30.100/24
 Can two hosts on different subnets communicate without a router?

 No
 What would happen if a host tried to ping another host?
 They could not communicate.
 Would it send an ARP Request? Why or why not?
 The host would not send an ARP Request because there is no
default-gateway.
4
Internetwork Communications
 Then Destination MAC Address is that of the same device as the Destination IP Address.
 Check ARP cache for entry of Destination IP Address and its MAC Address.
 If no entry, ARP Request Destination IP Address asking for MAC Address.
 Then Destination MAC Address will be that of the Default Gateway.

 Check ARP cache for entry of Default Gateway’s IP Address and its MAC Address.
 If no entry, ARP Request Default Gateway’s IP Address asking for MAC Address.
5
What is Inter-VLAN routing?
 Layer 2 switches cannot forward traffic between VLANs without
the assistance of a router.
 Inter-VLAN routing is a process for forwarding network traffic from
one VLAN to another, using a router.
 Legacy Inter-VLAN
Routing
 Router-on-Stick
 Switch SVI
 Switch Routed Ports
Legacy Inter-VLAN Routing
 Routers used to route between VLANs.

 Each VLAN was connected to a different physical router interface.
 Packets would arrive on the router through one through interface, be routed
and leave through another.
 Router interfaces connected to VLANs and have IP addresses from that
specific VLAN.
 Large networks with large number of VLANs required many router 8
interfaces.
192.168.20.1
255.255.255.0
192.168.10.1
255.255.255.0
A B C D
192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0
GW 192.168.10.1 GW 192.168.10.1 GW 192.168.20.1 GW 192.168.20.1
 Router is required to connect (route) between subnets/VLANs

S1(config)# vlan 10
S1(config-vlan)# vlan 30
S1(config-vlan)# exit
S1(config)# interface f0/11
S1(config-if)# switchport access vlan 10
S1(config-if)# exit
S1(config-if)# exit
S1(config)# switchport access vlan 30
S1(config-if)# exit
R1(config)# interface g0/0
R1(config-if)# ip address 172.17.10.1 255.255.255.0
R1(config-if)# no shutdown
R1(config)# exit
R1(config-if)# interface g0/1
R1(config-if)# ip address 172.17.30.1 255.255.255.0
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
<output omitted>
172.17.0.0/16 is variably subnetted, 4 subnets, 2 masks

C 172.17.10.0/24 is directly connected, GigabitEthernet0/0
L 172.17.10.1/32 is directly connected, GigabitEthernet0/0
Router-on-a-Stick
Router-on-a-Stick
 The router-on-a-stick approach uses a different path to route between VLANs.

 One of the router’s physical interfaces is configured as a 802.1Q trunk port so it
can understand VLAN tags.
 Logical subinterfaces are created; one subinterface per VLAN.
 Each subinterface is configured with an IP address from the VLAN it represents.
 VLAN members (hosts) are configured to use the subinterface address as a default
gateway.
14
 Only one of the router’s physical interface is used.
S1(config)# vlan 10
S1(config-vlan)# vlan 30
S1(config-vlan)# exit
S1(config-if)# exit
S1(config)# switchport access vlan 30
S1(config-if)# exit
S1(config-vlan)# interface f0/5
S1(config-if)# switchport mode trunk
S1(config-if)# 15
R1(config)# interface g0/0.10
R1(config-subif)# encapsulation dot1q 10
R1(config-subif)# ip address 172.17.10.1 255.255.255.0
R1(config-subif)# exit
R1(config)# interface g0/0.30
R1(config-subif)# encapsulation dot1q 30
R1(config-subif)# ip address 172.17.30.1 255.255.255.0
R1(config-subif)# exit
R1(config)# interface g0/0
16
R1# show vlans
<output omitted>
Virtual LAN ID: 10 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: GigabitEthernet0/0.10
Protocols Configured: Address: Received: Transmitted:

IP 172.17.10.1 11 18
<output omitted>
Virtual LAN ID: 30 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: GigabitEthernet0/0.30
Protocols Configured: Address: Received: Transmitted:

IP 172.17.30.1 11 8
<output omitted>
17
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B –
BGP
<output omitted>

C 172.17.10.0/24 is directly connected, GigabitEthernet0/0.10
L 172.17.10.1/32 is directly connected, GigabitEthernet0/0.10
C 172.17.30.0/24 is directly connected, GigabitEthernet0/0.30
L 172.17.30.1/32 is directly connected, GigabitEthernet0/0.30
18
Verify Switch Configuration
19
Verify Switch Configuration
20
Multi-layer Switches and Inter-
VLAN Routing
Routers vs Multilayer Switches
 Routers and multilayer switches both perform routing (connecting

networks)
 Routers may have different types of interfaces (Ethernet, serial,
ATM, etc.) while multilayer switches will only have Ethernet
interfaces.
 While routers can be used to segment LAN devices, their major use
is as WAN devices.
 Each devices does have its own advantages.
 Routers are:
 The backbone devices of large intranets and of the Internet
 They operate at Layer 3 (network layer) of the OSI model
22
 They make decisions based on network addresses (IPv4, IPv6).
Switched Network Design
 Core –
Route/Switch
packets quickly
across between
distribution
multilayer
switches.
 Distribution –
Route between
VLANs/Subnets,
ACLs
 Access –
Provide access
to end devices
and provide port
security.
23
Multilayer
Switch Inter-
VLAN Routing
 Multilayer switches can perform Layer 2 and Layer 3 functions, replacing the need for
dedicated routers.
 Multilayer switches support dynamic routing and inter-VLAN routing.
 A switch virtual interface (SVI) exists for VLAN 1 by default.
 On a multilayer switch, a logical (layer 3) interface can be configured for any VLAN.
 With a multilayer switch, traffic is routed internal to the switch device.
 This routing process is a suitable and scalable solution.
24
Configure Router On A Stick: 802.1Q Trunk Link
interface GigabitEthernet 0/0
no shutdown ! Does not show in config
!
interface GigabitEthernet 0/0.2
description VLAN 2
encapsulation dot1Q 2 native
ip address 172.16.1.2 255.255.255.0
!
172.16.10.100/ 172.16.20.100/
24 24 description VLAN 10
encapsulation dot1Q 10
ip address 172.16.10.1 255.255.255.0
!
interface GigabitEthernet 1/1 interface GigabitEthernet 0/0.20
switchport mode trunk description VLAN 20
ip address 172.16.20.1 255.255.255.0
 Router on a stick is very !
simple to implement. description VLAN 30
ip address 172.16.30.1 255.255.255.0
!
description VLAN 40
ip address 172.16.40.1 255.255.255.0 25
Routed Ports versus Switched Virtual Interfaces
 Routed Ports – Just like a router, the port has an IP address/mask that makes it
a member of that subnet.
 SVI – The switch is a member of that IP subnet/VLAN. All switch ports that are a
26
member of that VLAN can communicate with the switch
Multilayer Switch Interfaces
Layer 2: Access or Trunk Ports
Physical Interface
Logical Interface (SVI)
 Performs both Layer 2 switching and interVLAN routing.

 Layer 2 Interface: Access or Trunk ports
 Layer 3 Interface:
 Has an IP address assigned to it.
 The Default Gateway for any hosts connected to that interface or VLAN.
 Physical interface
 Same as a router
 Aka “Routed Port”
 Example: interface gigabit 0/1
 Logical Interface
 Represents an entire VLAN
 Switched Virtual Interface (SVI)
27
 Example: interface vlan 10
SVI VLAN 10 SVI VLAN 20
192.168.10.1 192.168.20.1
255.255.255.0 255.255.255.0
A B C D
192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0
GW 192.168.10.1 GW 192.168.10.1 GW 192.168.20.1 GW 192.168.20.1
 Layer 3 functionality can also be enabled for an entire VLAN.
 The IP address is assigned to the logical interface – the VLAN.
 This is needed when routing is required between VLANs.
 SVI (Switched Virtual Interface)
 No physical connection
 VLANs must be created before the SVI can be used.
 The IP address associated of the VLAN interface is the default gateway of the 28
workstation.
192.168.10.1 192.168.20.1
255.255.255.0 255.255.255.0
A B C D
192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0
GW 192.168.10.1 GW 192.168.10.1 GW 192.168.20.1 GW 192.168.20.1
<VLANs have been created or will be created when configured on
the interface>
S1(config)# interface range fastethernet 0/1 - 12
S1(config-if-range)# switchport mode access
S1(config-if-range)# switchport access vlan 10
S1(config-if-range)# exit
S1(config)# interface range fastethernet 0/12 - 24
S1(config-if-range)# switchport mode access
S1(config-if-range)# switchport access vlan 20
29
S1(config-if-range)# end
192.168.10.1 192.168.20.1
255.255.255.0 255.255.255.0
A B C D
192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0
GW 192.168.10.1 GW 192.168.10.1 GW 192.168.20.1 GW 192.168.20.1
DLS1(config)# inter vlan 10
DLS1(config-if)# description Engineering VLAN
DLS1(config-if)# ip address 192.168.10.1 255.255.255.0
DLS1(config-if)# no shutdown
DLS1(config-if)# description IT VLAN
DLS1(config-if)# no shutdown 30
192.168.10.1 192.168.20.1
255.255.255.0 255.255.255.0
A B C D
192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0
GW 192.168.10.1 GW 192.168.10.1 GW 192.168.20.1 GW 192.168.20.1
Alternative Configuration
31
192.168.10.1 192.168.20.1
255.255.255.0 255.255.255.0
Distribution
Layer Switch
Trunk
Access
Layer Switch
A B C D
192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0
GW 192.168.10.1 GW 192.168.10.1 GW 192.168.20.1 GW 192.168.20.1
DLS1(config)# inter gig 0/2
DLS1(config-if)# switchport mode trunk
ALS1(config)# inter fa 0/9 32

ALS1(config-if)# switchport mode trunk
Multilayer Switch Interfaces
Layer 2: Access or Trunk Ports
Physical Interface (L3)

Logical Interface (SVI – L3)
DLS1# show interface gig 0/2 switchport

Name: Gig0/2
Switchport: Enabled
<output omitted>
 Layer 2 or Layer 3 Interface? Is it a “switch” port?

 Default on most Catalyst switches: Layer 2
 Default on Catalyst 6500: Layer 3
 Verify mode:
 Switch# show interface type mod/num switchport
 Switchport: Think Layer 2
 Enabled: Layer 2
 Disabled: Layer 3 33
Multilayer Switch
Interfaces
Is it a “switch” port?
DLS1(config)# interface gig 0/2

DLS1(config-if)# no switchport Converts interface to Layer 3
DLS1(config-if)# end
Name: Gig0/2
Switchport: Disabled Layer 3
<output omitted>
DLS1# config t
DLS1(config-if)# switchport Converts interface to Layer 2
DLS1(config-if)# end
Name: Gig0/2
Switchport: Enabled Layer 2
<output omitted>
 If in Layer 3 mode switchport interface command puts the port into Layer 34
2 mode.
SVI Interfaces
- Logical Interfaces
Switch(config)# vlan vlan-number

Switch(config-vlan)# name vlan-name
SwitchA(config)# interface vlan vlan-number
SwitchA(config-if)# ip address ip-address mask
SwitchA(config-if)# no shutdown
 Layer 3 functionality can also be enabled for an entire VLAN.

 The IP address is assigned to the logical interface – the VLAN.
 This is needed when routing is required between VLANs.
 SVI (Switched Virtual Interface)
 No physical connection
 VLANs must be created before the SVI can be used.
 The IP address associated of the VLAN interface is the default gateway of 35
the workstation.
Creating VLANs
 DLS1: Create and name the user VLANs: 10,
11, 20 and 21.
 DLS1: Create and name a Management VLAN
(used to telnet into switches)
 DLS1: Create and name a NATIVE VLAN other
than VLAN 1 (default)
 DLS1: Create and name a Garbage VLAN
(assigned to all unused ports.)
 All ports that are not used (trunks and
access) will be assigned as an access port
to this VLAN.
DLS1
vlan 2
name NATIVE
vlan 10
name Engineering
vlan 11
name IT
vlan 20
name Sales
vlan 21
name Administration
vlan 99
name ManagementVLAN
vlan 222 36
name GarbageVLAN
Management VLAN (SVI)
 For each device in the network
we configured it to be a member
of the management VLAN.
On each switch
Switch(config)# inter vlan 99

Switch(config-if)# description Management VLAN
Switch(config-if)# ip address 172.16.99.x 255.255.255.0
Switch(config-if)# no shutdown
Switch(config-if)# exit
If you want to reach the management VLAN from other VLANs, assign
this address to one of the multilayer switches (DLS1 and DLS2):
DLS1(config)# ip default-gateway 172.16.99.1 37
Default Gateway (SVI)
 Configure DLS1 to be the default gateway
for VLANs 10 and 11.
 All hosts on these VLANs will use these
addresses as their default gateway
addresses.

DLS1(config-if)# description Management VLAN
DLS1(config-if)# description Engineering VLAN
DLS1(config-if)# description IT VLAN
DLS1(config-if)# no shutdown 38
 Configure DLS2 to be the
default gateway for VLANs 20
and 21.
 All hosts on these VLANs will
use these addresses as their
default gateway addresses.

DLS2(config-if)# description Sales VLAN
DLS2(config-if)# no shut

DLS2(config-if)# description Administration VLAN
DLS2(config-if)# no shut
39
172.16.10.10
255.255.255.0 Statically or Dynamically assigned
172.16.10.1
40
Layer 3 Port Configuration
– Physical Interfaces

DLS1(config-if)# no switchport

DLS2(config-if)# no switchport
 Physical switch ports can operate as Layer 3 interfaces using the

interface command:
Switch(config)# interface type mod/num
Switch(config-if)# no switchport
Switch(config-if)# ip address ip-address mask
41
Switched Network Design
 Core –
Route/Switch
packets quickly
across between
distribution
multilayer
switches.
 Distribution –
Route between
VLANs/Subnets,
ACLs
 Access –
Provide access
to end devices
and provide port L3 = Routed Ports, over IP, separate subnets
security.
L2 = SVI, VLANs over Trunks OR individual VLANs
42
Verifying
 Verify IP addresses
DLS1#show ip inter brief

Interface IP-Address OK? Method Status Protocol
FastEthernet0/1 192.168.4.6 YES manual up up
GigabitEthernet0/1 192.168.1.1 YES manual up up
Vlan10 172.16.10.1 YES manual up up
Vlan11 172.16.11.1 YES manual up up

43
InterVLAN Routing
External Router
No VLANs
VLAN 1
External Router VLAN 2
VLANs VLAN 3
VLANs 1, 2, 3
Router on a stick
Trunk
VLANs or No VLANs
VLAN 1
VLAN 2
Multilayer Switch VLAN 3
Trunk
Multilayer Switch
44
SDM
 Interface F0/6 on S1 is assigned
Enabling IPv4 Routing to VLAN 2.
 The SVIs for VLANs 1 and 2 are
Functionality on a 2960
also configured with IP
addresses 192.168.1.1/24 and
192.168.2.1/24, respectively.
S1(config-if)# interface vlan 1
S1(config-if)# ip address 192.168.1.1 255.255.255.0
 IP routing is enabled with the ip
S1(config-if)# interface vlan 2 routing global configuration
S1(config-if)# ip address 192.168.2.1 255.255.255.0
S1(config-if)# no shutdown mode command.
Mar 20 01:00:25.021: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to up
S1(config)# ip routing
S1(config)# do show ip route
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set

C 192.168.1.0/24 is directly connected, Vlan1
L 192.168.1.1/32 is directly connected, Vlan1
Router Participating in
Routing with a Switch
 R1 has two IPv4 networks configured:
 Interface G0/1 has IP address 192.168.1.10/24
 loopback interface Lo0 has IP address
209.165.200.225/27
R1# show ip route


C 209.165.200.224/27 is directly connected, Loopback0
L 209.165.200.225/32 is directly connected, Loopback0
Configuring a Static Route on a 2960
 A default route is configured on S1
S1(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.10

S1(config)# do show ip route
Gateway of last resort is 192.168.1.10 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 192.168.1.10

Final Routing Table on Router
 A static route to the remote network 192.168.2.0/24

(VLAN 2) is configured on R1
R1(config)# ip route 192.168.2.0 255.255.255.0 g0/1

R1(config)# do show ip route

S 192.168.2.0/24 is directly connected, GigabitEthernet0/1
C 209.165.200.224/27 is directly connected, Loopback0
L 209.165.200.225/32 is directly connected, Loopback0
Host Connectivity
209.165.200.225/27
 PC-A is configured with IP address 192.168.2.2/24
in VLAN 2
 PC-B is configured with IP address 192.168.1.2/24
in VLAN 1.
 PC-B is able to ping both PC-B and the loopback
interface on R1.
192.168.2.2/24 192.168.1.2/24
VLAN 2 VLAN 1
CIS 82 Routing and Swithing Inter-VLAN Routing
Routing
Rick Graziani
Cabrillo College
[email protected]

Cis82 5 InterVLANRouting - SHORT

Uploaded by

Copyright:

Available Formats

Cis82 5 InterVLANRouting - SHORT

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Cis82 5 InterVLANRouting - SHORT

Uploaded by

Copyright:

Available Formats

CIS 82 Routing and Swithing Inter-VLAN Routing

172.16.10.100/24 172.16.20.100/24 172.16.30.100/24

 Can two hosts on different subnets communicate without a router?

 Then Destination MAC Address will be that of the Default Gateway.

 Routers used to route between VLANs.

192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

 Router is required to connect (route) between subnets/VLANs

172.17.0.0/16 is variably subnetted, 4 subnets, 2 masks

 The router-on-a-stick approach uses a different path to route between VLANs.

vLAN Trunk Interface: GigabitEthernet0/0.10

Protocols Configured: Address: Received: Transmitted:

vLAN Trunk Interface: GigabitEthernet0/0.30

Protocols Configured: Address: Received: Transmitted:

172.17.0.0/16 is variably subnetted, 4 subnets, 2 masks

 Routers and multilayer switches both perform routing (connecting

 Performs both Layer 2 switching and interVLAN routing.

192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

192.168.10.10 192.168.10.11 192.168.20.12 192.168.20.13

ALS1(config)# inter fa 0/9 32

Physical Interface (L3)

DLS1# show interface gig 0/2 switchport

 Layer 2 or Layer 3 Interface? Is it a “switch” port?

DLS1(config)# interface gig 0/2

Switch(config)# vlan vlan-number

 Layer 3 functionality can also be enabled for an entire VLAN.

Switch(config)# inter vlan 99

DLS1(config)# inter vlan 99

DLS2(config)# inter vlan 20

DLS2(config)# inter vlan 21

DLS1(config)# interface gig 0/1

DLS2(config)# interface gig 0/1

 Physical switch ports can operate as Layer 3 interfaces using the

DLS1#show ip inter brief

FastEthernet0/1 192.168.4.6 YES manual up up

GigabitEthernet0/1 192.168.1.1 YES manual up up

Vlan10 172.16.10.1 YES manual up up

Vlan11 172.16.11.1 YES manual up up

Gateway of last resort is not set

192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks

R1# show ip route

Gateway of last resort is not set

192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks

 A default route is configured on S1

S1(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.10

Gateway of last resort is 192.168.1.10 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 192.168.1.10

 A static route to the remote network 192.168.2.0/24

R1(config)# ip route 192.168.2.0 255.255.255.0 g0/1

Gateway of last resort is not set

192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks

You might also like