Download pdf - Switch multilayerdidatticainformatica.altervista.org/alterpages/files/SWITCH_L3.pdf · Cisco Catalyst 3560X Standalone 24-Port Switch Cisco Catalyst 3560-X Series primary features:

Sistemi e reti

Switch multilayer

A cura dell’Ing. Claudio Traini

Esempio di utilizzo per la gestione di VLAN

Architettura della rete

Apparati impiegati

Cisco router 2900 series – Model 2901

Cisco switch Catalyst 3560 – Multilayer 24 port PoE

Apparati impiegati

Apparati impiegati

Apparati impiegati

Cisco Catalyst 3560X Standalone 24-Port Switch

Cisco Catalyst 3560-X Series primary features:

• 24 and 48 10/100/1000 PoE+, non-PoE models, and 12 and 24 GE SFP port models• 24 and 48 10/100/1000 UPOE-capable models with Energy Efficient Ethernet (EEE) support• Four optional uplink network modules with GE or 10GE ports• Industry first PoE+ with 30W power on all ports in 1 rack unit (RU) form factor• Dual redundant, modular power supplies and fans• Media Access Control Security (MACsec) hardware-based encryption• Flexible NetFlow and switch-to-switch hardware encryption with the Service Module uplink• Open Shortest Path First (OSPF) for routed access in IP Base image• IPv4 and IPv6 routing• Multicast routing• Advanced quality of service (QoS)

Forwarding Rate: 65.5 mppsSwitching Fabric: 160 GbpsPrice: 2.400 / 4.300 $

Cisco Catalyst 3560X Standalone 24-Port Switch

Scenario

Router – configurazione

Router – configurazione

Configurazione switch

interface GigabitEthernet0/1no switchportip address 192.168.1.2 255.255.255.0duplex autospeed auto

ip routing

ip route 0.0.0.0 0.0.0.0 192.168.1.1

Interfaccia Gigabit Ethernet 0/1

Abilitiamo il routing


Definiamo le tre VLAN


Definiamo le tre VLAN – comandi CLI equivalenti

interface Vlan10ip address 192.168.10.1 255.255.255.0ip access-group LAN1 in

interface Vlan20ip address 192.168.20.1 255.255.255.0

interface Vlan30ip address 192.168.30.1 255.255.255.0

ACL per isolare la VLAN 10dalle altre vlan presenti

Configurazione switchConfiguriamo le porte in base alla VLAN di appartenenza

interface FastEthernet0/1switchport access vlan 10





…………………………………………………………….

Configurazione switchConfiguriamo i pool DHCP per le tre VLAN

ip dhcp excluded-address 192.168.10.1ip dhcp excluded-address 192.168.20.1ip dhcp excluded-address 192.168.30.1

ip dhcp pool vlan10network 192.168.10.0 255.255.255.0default-router 192.168.10.1dns-server 8.8.8.8



IP address riservati alle vlancostituenti I loro rispettivi gateway

Pool d’indirizzi

Configurazione switchACL per impedire il traffico tra la VLAN 10 e le restanti vlan

ip access-list extended LAN1permit ip 192.168.10.0 0.0.0.255 192.168.1.0 0.0.0.255deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255deny ip 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255

Nome ACL di tipo extended

Azione Protocollo interessato

Sorgente del trafficoDestinazione del traffico