1. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 From Hubs to VLANs

2. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Using Hubs Layer 1 devices Inexpensive In one port, out the others One collision domain One broadcast domain

3. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 This is fine for small workgroups, but does not scale well for larger workgroups or heavy traffic. Hub 1 172.30.1.21 255.255.255.0 172.30.1.22 255.255.255.0 172.30.1.23 255.255.255.0 172.30.1.24 255.255.255.0 Single Hub  One Network (IP Network Address - usually)  One Collision Domain  One Broadcast Domain

4. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 What if the computers were on two different subnets? Could they communicate within their own subnet? Yes Between subnets? No, need a router. Single Hub - Two subnets  Two subnets  One Collision Domain  One Broadcast Domain Hub 1 172.30.1.21 255.255.255.0 172.30.1.22172.30.1.23 172.30.1.24 255.255.255.0

5. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Same issues as before, with more of an impact on the network. All Hubs  One Network Address  One Collision Domain  One Broadcast Domain Hub 1 172.30.1.21 255.255.255.0 172.30.1.22 255.255.255.0 172.30.1.23 255.255.255.0 Hub 2 172.30.1.24 255.255.255.0 172.30.1.25 255.255.255.0 172.30.1.26 255.255.255.0 172.30.1.27 255.255.255.0

6. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Using Switches Layer 2 devices Moderate expense for common access switches, but can be very expensive. Layer 2 filtering based on Destination MAC addresses and Source Address Table One collision domain per port One broadcast domain

7. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Switch and Hub Network  One Network  Several Collision Domains  One per switch port  One for the entire Hub  One Broadcast Domain Hub 172.30.1.21 255.255.255.0 172.30.1.22 255.255.255.0 172.30.1.23 255.255.255.0 Switch 172.30.1.24 255.255.255.0 172.30.1.25 255.255.255.0 172.30.1.26 255.255.255.0 172.30.1.27 255.255.255.0 Two virtual circuits: (complete SAT tables) Data traffic from 172.30.1.24 to 172.30.1.25 and from 172.30.1.26 to 172.30.1.27

8. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Switch and Hub Network  One Network  Several Collision Domains  One per switch port  One for the entire Hub  One Broadcast Domain Hub 172.30.1.21 255.255.255.0 172.30.1.22 255.255.255.0 172.30.1.23 255.255.255.0 Switch 172.30.1.24 255.255.255.0 172.30.1.25 255.255.255.0 172.30.1.26 255.255.255.0 172.30.1.27 255.255.255.0 As opposed to the Hub: Data traffic from 172.30.1.21 to 172.30.1.22 and from 172.30.1.23 to 172.30.1.24 Collision!

9. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Switch and Hub Network  One Network  Several Collision Domains  One per switch port  One for the entire Hub  One Broadcast Domain Hub 172.30.1.21 255.255.255.0 172.30.1.22 255.255.255.0 172.30.1.23 255.255.255.0 Switch 172.30.1.24 255.255.255.0 172.30.1.25 255.255.255.0 172.30.1.26 255.255.255.0 172.30.1.27 255.255.255.0 Collisions and Switches: What happens when two devices on a switch, send data to another device on the switch. 172.30.1.24 to 172.30.1.25 and 172.30.1.26 to 172.30.1.25

10. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Switch and Hub Network  One Network  Several Collision Domains  One per switch port  One for the entire Hub  One Broadcast Domain Hub 172.30.1.21 255.255.255.0 172.30.1.22 255.255.255.0 172.30.1.23 255.255.255.0 Switch 172.30.1.24 255.255.255.0 172.30.1.25 255.255.255.0 172.30.1.26 255.255.255.0 172.30.1.27 255.255.255.0 The switch keeps the frames in buffer memory, and queues the traffic for the host 172.30.1.25. This means that the sending hosts do not know about the collisions and do not have to re-send the frames. Frames in buffer

11. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Other Switching Features Review Asymmetric ports: 10 Mbps and 100 Mbps Full-duplex ports Cut-through versus Store-and-Forward switching

12. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Ports between switches and server ports are good candidates for higher bandwidth ports (100 Mbps) and full-duplex ports. All Switched Network  One Network  Several Collision Domains  One per switch port  One Broadcast Domain Switch 1 172.30.1.21 255.255.255.0 172.30.1.22 255.255.255.0 172.30.1.23 255.255.255.0 Switch 2 172.30.1.25 255.255.255.0 172.30.1.26 255.255.255.0 172.30.1.27 255.255.255.0 172.30.1.28 255.255.255.0 172.30.1.24 255.255.255.0

13. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Introducing Multiple Subnets/Networks without Routers Switches are Layer 2 devices Router are Layer 3 devices Data between subnets/networks must pass through a router.

14. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 All Switched Network - Two Networks  Two Subnets  Several Collision Domains  One per switch port  One Broadcast Domain Switch 1 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 Switch 2 172.30.1.25 255.255.255.0 172.30.2.14 255.255.255.0 172.30.1.27 255.255.255.0 172.30.2.16 255.255.255.0 172.30.2.12 255.255.255.0 A Switched Network with two subnets: What are the issues? Can data travel within the subnet? Yes Can data travel between subnets? No, need a router! What is the impact of a layer 2 broadcast, like an ARP Request? ARP Request

15. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 All Switched Network - Two Networks  Two Subnets  Several Collision Domains  One per switch port  One Broadcast Domain Switch 1 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 Switch 2 172.30.1.25 255.255.255.0 172.30.2.14 255.255.255.0 172.30.1.27 255.255.255.0 172.30.2.16 255.255.255.0 172.30.2.12 255.255.255.0 All devices see the ARP Request. One broadcast domain means the switches flood all broadcast out all ports, except the incoming port. Switches have no idea of the layer 3 information contained in the ARP Request. This consumes bandwidth on the network and processing cycles on the hosts.

16. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 One Solution: Physically separate the subnets. But still no data can travel between the subnets. How can we get the data to travel between the two subnets? Two Switched Networks  Two Subnets  Several Collision Domains  One per switch port  Two Broadcast Domain Switch 1 172.30.1.21 255.255.255.0 172.30.1.23 255.255.255.0 172.30.1.25 255.255.255.0 Switch 2 172.30.2.10 255.255.255.0 172.30.2.12 255.255.255.0 172.30.2.14 255.255.255.0 172.30.2.16 255.255.255.0 172.30.1.26 255.255.255.0

17. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Introducing Multiple Subnets/Networks with Routers Switches are Layer 2 devices Router are Layer 3 devices Data between subnets/networks must pass through a router.

18. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Routed Networks  Two Subnets  Several Collision Domains  One per switch port  Communication between subnets Switch 1 172.30.1.21 255.255.255.0 172.30.1.23 255.255.255.0 172.30.1.25 255.255.255.0 Switch 2 172.30.2.10 255.255.255.0 172.30.2.12 255.255.255.0 172.30.2.14 255.255.255.0 172.30.2.16 255.255.255.0 172.30.1.26 255.255.255.0 Router 172.30.1.1 255.255.255.0 172.30.2.1 255.255.255.0 Routed Network: Two separate broadcast domains, because the router will not forward the layer 2 broadcasts such as ARP Requests.

19. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Switches with multiple subnets So far this should have been a review. Let’s see what happens when we have two subnets on a single switch and we want to route between the two subnets.

20. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Routed Networks  Two Subnets  Communication between subnets Switch 1 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 172.30.2.12 255.255.255.0 Router 172.30.1.1 172.30.2.1 sec 255.255.255.0 Router-on-a-stick: When a single interface is used to route between subnets or networks, this is known as a router-on-a-stick. To assign multiple ip addresses to the same interface, secondary addresses or subinterfaces are used. interface e 0 ip address 172.30.1.1 255.255.255.0 ip address 172.30.2.1 255.255.255.0 secondary

21. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Router-on-a-stick Advantages Useful when there are limited Ethernet interfaces on the router. Disadvantage Because a single link is used to connect multiple subnets, one link is having to carry the traffic for multiple subnets. Be sure this is link can handle the traffic. You may wish to use a high-speed link (100 Mbps) and full-duplex.

22. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Gotcha’s 1. Remember to have the proper default gateway set for each host. 172.30.1.0 hosts - default gateway is 172.30.1.1 172.30.2.0 hosts - default gateway is 172.30.2.1 2. The router must still route between subnets, so you must include: Router (config)# router rip Router (config-router)# network 172.30.0.0

23. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Routed Networks  Two Subnets  Communication between subnets Switch 1 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 172.30.2.12 255.255.255.0 Router 172.30.1.1 255.255.255.0 172.30.2.1 255.255.255.0 Multiple interfaces: Two Ethernet router ports may be used instead of one. However this may be difficult if you do not have enough Ethernet ports on your router. E0E1

24. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 One switch two subnets: Good News: Data can travel between subnets and we have two separate broadcast domains. Bad News: Hosts are on different subnets but on a single layer 2 broadcast domain. Routed Networks  Two Subnets  Communication between subnets Switch 1 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 172.30.2.12 255.255.255.0 Router 172.30.1.1 172.30.2.1 sec 255.255.255.0 ARP Request

25. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 An ARP Request from 172.30.1.21 for 172.30.1.23 will still be seen by all hosts on the switch. The switch is a layer 2 device and will flood broadcast traffic out all ports, except the incoming port. Routed Networks  Two Subnets  Communication between subnets Switch 1 172.30.1.21 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 172.30.2.12 255.255.255.0 Router 172.30.1.1 172.30.2.1 sec 255.255.255.0

26. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Introducing VLANs VLANs create separate broadcast domains Routers are needed to pass information between different VLANs VLANs are not necessary to have separate subnets on a switched network, but as we will see they give us more advantages when it comes to things like data link (layer 2) broadcasts.

27. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Two VLANs  Two Subnets Switch 1 172.30.1.21 255.255.255.0 VLAN 1 172.30.2.10 255.255.255.0 VLAN 2 172.30.1.23 255.255.255.0 VLAN 1 172.30.2.12 255.255.255.0 VLAN 2 Layer 2 broadcast control: An ARP Request from 172.30.1.21 for 172.30.1.23 will only be seen by hosts on that VLAN. The switch will flood broadcast traffic out only those ports belonging to that particular VLAN, in this case VLAN 1.

28. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Port-centric VLAN Switches Remember, as the Network Administrator, it is your job to assign switch ports to the proper VLAN. This assignment is only done at the switch and not at the host. Note: The following diagrams show the VLAN below the host, but it is actually assigned within the switch. 1 2 3 4 5 6. 1 2 1 2 2 1. Port VLAN

29. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Catalyst 1900 - VLAN Membership Configuration [M] Membership type [V] VLAN assignment [R] Reconfirm dynamic membership[X] Exit to previous menu Enter Selection: PortVLANMembership Type 11Static 22 31 42 52 61 71 81 91 101Static 111Static 122Static AUI1Static A1 B1

30. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Layer 2 broadcast control: Without VLANs, the ARP Request would be seen by all hosts. Again, consuming unnecessary network bandwidth and host processing cycles. No VLANs  Same as a single VLAN  Two Subnets 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 172.30.2.12 255.255.255.0 Switch 1

31. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Two VLANs  Two Subnets Switch 1 172.30.1.21 255.255.255.0 VLAN 1 172.30.2.10 255.255.255.0 VLAN 2 172.30.1.23 255.255.255.0 VLAN 1 172.30.2.12 255.255.255.0 VLAN 2 With VLANs: Data will only travel within the VLAN. Remember that switches are Layer 2 devices and they can only pass traffic within the VLAN.

32. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 1 2 3 4 5 6. 1 2 1 2 2 1. Port VLAN Switch Port: VLAN ID

33. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Two VLANs  Two Subnets Switch 1 172.30.1.21 255.255.255.0 VLAN 1 172.30.2.10 255.255.255.0 VLAN 2 172.30.1.23 255.255.255.0 VLAN 1 172.30.2.12 255.255.255.0 VLAN 2 With VLANs: A switch cannot route data between different VLANs. Example: Data from 172.30.1.21 to 172.30.2.12 X Switch Port: VLAN ID

34. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Gotcha’s 1.Remember that VLAN IDs (numbers) are assigned to the switch port and not to the host. (Port-centric VLAN switches) 2.Be sure to have all of the hosts on the same subnet belong to the same VLAN, or you will have problems. Hosts on subnet 172.30.1.0/24 - VLAN 1 Hosts on subnet 172.30.2.0/24 - VLAN 2 etc.

35. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Routing and VLANs In the previous example data could travel within the VLAN, but not between VLANs. Just like subnets, a router is needed to route information between different VLANs. The advantage is the switch propagates broadcast traffic only within the VLAN.

36. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 VLANs  Two Subnets  Communication between VLANs  NOTE : VLANs assigned only to the ports Switch 1 172.30.1.21 255.255.255.0 VLAN 1 172.30.2.10 255.255.255.0 VLAN 2 172.30.1.23 255.255.255.0 VLAN 1 172.30.2.12 255.255.255.0 VLAN 2 Router 172.30.1.1 255.255.255.0 VLAN 1 172.30.2.1 255.255.255.0 VLAN 2 Data between VLANs is routed through the router. Data from 172.30.1.21 to 172.30.2.12

37. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Gotcha’s 1. Remember to have the proper default gateway set for each host. 172.30.1.0 hosts - default gateway is 172.30.1.1 172.30.2.0 hosts - default gateway is 172.30.2.1 2. The router must still route between subnets, so you must include: Router (config)# router rip Router (config-router)# network 172.30.0.0 3. The switch ports to the router must have the corresponding VLAN ID to that subnet. Switch port to 172.30.1.1 must be on VLAN 1 Switch port to 172.30.2.1 must be on VLAN 2

38. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Switch Port: VLAN ID Router 172.30.1.1 255.255.255.0 (VLAN 1) 172.30.2.1 255.255.255.0 (VLAN 2) (VLAN ID not set at router.)

39. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 So, what’s the difference? One of the main differences between subnets with VLANs and subnets without VLANs on switched networks, is that VLANs offer layer 2 broadcast control.

40. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Here is an ARP Request example without VLANs. Routed Networks  Two Subnets  Communication between subnets Switch 1 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 172.30.2.12 255.255.255.0 Router 172.30.1.1 255.255.255.0 172.30.2.1 255.255.255.0 ARP Request

41. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Here is an ARP Request example with VLANs. Notice that the broadcast is isolated only to the VLAN that it came from, in this case VLAN 1. VLANs  Two Subnets  Communication between VLANs  NOTE : VLANs assigned only to the ports Switch 1 172.30.1.21 255.255.255.0 VLAN 1 172.30.2.10 255.255.255.0 VLAN 2 172.30.1.23 255.255.255.0 VLAN 1 172.30.2.12 255.255.255.0 VLAN 2 Router 172.30.1.1 255.255.255.0 VLAN 1 172.30.2.1 255.255.255.0 VLAN 2 ARP Request

42. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Can I use the Router-on-a-stick method with multiple VLANs? Can you remind me what Router-on-a-stick is?

43. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Routed Networks  Two Subnets  Communication between subnets Switch 1 172.30.1.21 255.255.255.0 172.30.2.10 255.255.255.0 172.30.1.23 255.255.255.0 172.30.2.12 255.255.255.0 Router 172.30.1.1 172.30.2.1 sec 255.255.255.0 What is Router-on-a-stick? When a single interface is used to route between subnets or networks, this is know as a router-on-a-stick. To assign multiple ip addresses to the same interface, secondary addresses or subinterfaces are used. interface e 0 ip address 172.30.1.1 255.255.255.0 ip address 172.30.2.1 255.255.255.0 secondary

44. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 With Router-on-a-stick, ISL or 802.1Q trunking is needed. We will talk about tagging and trunking in the next section. VLANs  Two Subnets  Communication between VLANs using trunking  NOTE: VLANs assigned only to the ports Switch 1 172.30.1.21 255.255.255.0 VLAN 1 172.30.2.10 255.255.255.0 VLAN 2 172.30.1.23 255.255.255.0 VLAN 1 172.30.2.12 255.255.255.0 VLAN 2 Router 172.30.1.1 172.30.2.1 secondary 255.255.255.0 Trunking ISLor 802.1Q

45. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Non-tagging Switches Lets first see how multiple VLANs are interconnected using switches that do not have the tagging capability.

46. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 100BaseT Ports Port 1 = VLAN 1 & Port 2 = VLAN 2 Moe Larry VLAN 1: Port 1 on switch Moe is connected to Port 1 on Switch Larry. VLAN 2: Port 2 on switch Moe is connected to Port 2 on Switch Larry. Non-tagging Switches For each VLAN, there must be a link between the two switches. One link per VLAN. Be sure the switch ports on the switches are configured for the proper VLAN. 1 2 Port 1 = VLAN 1 & Port 2 = VLAN 2

47. Hubs to VLANs Cisco Networking Academy Program © Cisco Systems, Inc. 2000 Advantages Each VLAN gets its own dedicated link with its own bandwidth. Disadvantages This requires a separate link for each VLAN. There may not be enough ports on the switch to accommodate a lot of different VLANs.