Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
116 Cards in this Set
- Front
- Back
why does ethernet frame loops happen?
|
-there is not TTL like in IP for ethernet packets. So, if they are not properly terminated, they continue to bounce.
|
|
loops are possible for
|
broacast packets
unicast packets when a cable is connected to ports on the same switch |
|
EtherChannel
|
grouping of ethernet ports on a switch that act as a single logical network connection. Because the switch treats the ports configured for the EtherChannel as a single network link, loops are not possible.
|
|
STP
|
ensures that there is only one logical path between all destinations on the network by intentionally blocking redundant paths that could cause a loop.
|
|
BPDU
|
-bridge protocol data unit.
sent even if the port is blocked. |
|
STP algorithm
|
SPA (spanning tree algorithm)
-determine which switch ports on a network need to be configured for blocking |
|
root bridge
|
designates a single switch as the root bridge and uses it as a reference for all calculations.
|
|
how is root bridge chosen?
|
all switches using STP exchange BPDU and determine which has the lowest bridge ID. The lowest BID becomes the root.
|
|
STA process
|
-after root is selected,
STA calculates the shortest path to the root. -while STA determines the best path to root, all traffic is blocked. -STA considers both path and port costs to determine which to block. |
|
path costs
|
pasth costs are based on port cost based on port speed. The sum of port costs dtermine the overall path cost to the root.
|
|
root port
|
switch ports closest to the root bridge.
|
|
designated ports
|
all non-root ports that are permitted to forward traffic.
|
|
non-designated ports
|
all ports configured to be in a blocking state to prevent loops.
|
|
BPDU fields
|
12 fields
|
|
Bridge id consists of
|
Bridge Priority
Extended system ID MAC address |
|
configure bridge priority
|
spanning-tree vlan vlan-id root primary
|
|
extended system id
|
id of the vlan with which the BPDU is associated.
|
|
broadcast storm
|
occurs when there are so many broadcast frames caught in layer 2 loop that all available bandwidth is consumed.
|
|
BPDU
|
is the message frame exchanged by siwtches for STP
|
|
BID (bridge ID)
|
contained in a BPDU.
contains a priority and MAC address of the sender and optional extended system id |
|
switch bootup behavior
|
all switches in a broadcast domain participate in the election process.
-when a switch boots, it sends a bpdu with bid and root ID every 2 secs. -root id matches the local bid -the root id is for the root bridge on the netowrk -each switch identifes as root bridge after bootup. -if the adjacent switches root id is less that it's own root id, the root id for itself is updated with the neighbor's root id. -the switch with the lowest bid ends up as the root bridge |
|
STP BPDU
|
12 fields
-1st 4 fields have the path and priority info -protocol id, version, message, flags 4-8 determines the root bridge and cost of the path to the root bridge -8-12 determines timer fields that determine the frequency of messages |
|
default frequency of BPDU
|
2 seconds
|
|
local switch info
|
it's own BID,root ID and path cost to root
|
|
BPDU process
|
priority is the first factor for picking the root bridge.
if priority is the same, mac address is used. |
|
BID fields
|
contains priority, extended system id and mac
|
|
bridge priority
|
can be changed to influence the selection of the root bridge. 1 is the highest priority
|
|
extended system id
|
id of the vlan on which the BPDU is associated.
|
|
to ensure that the switch has the lowest bridge priority
|
configure :
spanning-tree vlan vlan-id root primary this will be set to a predefine value or to the next 4096 decremented value below the lowest bridge priority detected on the network |
|
to ensure that a switch is picked as the secondary root bridge
|
configure:
spanning tree vlan vlan-id root secondary |
|
second method for configuring the primary`
|
spanning-tree vlan vlan-id priority value
-a value configured in increments of 4096 |
|
port roles
|
location of the root bridge in the network topology determines how port roles are calculated.
|
|
root port
|
-root port exists on non-root bridges and is the switch port with the best parth to the root bridge.
-root ports forward traffic toward the root bridge -the source mac received on the root port are populated in the mac table. -only one root port is allowed per bridge. |
|
designated port
|
-exists on root and non-root bridges
-for a root bridge, all ports are designated ports -only one designated port is allowed per segment. -if multiple switches are on the same segment, an election process is done to determine the deisgnated switch. |
|
non-designated port
|
- is a switch port that is blocked.
|
|
disabled port
|
-is a switch port that is administratively shutdown.
|
|
root port
|
switch port with the lowest cost to the root bridge.
|
|
root port
|
exists on non-root bridges and is the switch port with the best path to the root bridge.
|
|
designated port
|
-only one allowed per segment.
-for non-root bridges, a designated port is the switch port that receives and forwards frames toward the root bridge as needed. -capable of populating the MAC table |
|
non designated port
|
blocked
-not fowarding -not populating the mac address table -also called the alternate port |
|
disabled port
|
switch that's administratively down
|
|
port roles
|
when there are two ports with the same lowest path cost to the root bridge, switch uses the port priority value or the port ID
|
|
port ID
|
the interface ID of the switch port
-ex: priority.id when one port is chosen over the other, the other is marked as non-designated port |
|
configure port priority
|
configure terminal
interface ifid spanning-tree port-priority <priority> |
|
port role decisions
|
-root bridge automatically configures all of its ports as designated ports. Other ports have to decide on their non root ports
|
|
how to decide which is the designated port and which is the non-designated port
|
- the two switches with ports on the same LAN that are not root ports, they exchange BPDUs. The switch with lowest path cost get the designated port. If they are both equal, the switch with the lower BID gets the designated port.
|
|
each port transitions through 5 states and 3 timers
|
-blocking
-listening -learning -forwarding -disabled |
|
blocking
|
non designatedp ort. receives BPDUs to determin the location and the root id
|
|
listening
|
stp determined the port can participate in frame forwarding. it is transmitting it's BPDU frames to tell others that it can participate in active topology.
|
|
learning
|
prepares to participate in frame forwarding and begins to populate the MAC address table
|
|
forwarding
|
the port is considered part of the active topology
|
|
disabled
|
does not participate in spanning tree and does not forward frames.
|
|
hello time
|
-the hello time is the time between each BPDU frame that is sent on a port.
-2 sec by default, can be between 1 and 10 |
|
forward delay
|
-the forward delay is the time spent in the listening and learning state.
-the default is 15 secs. can be between 4 and 30 |
|
maximum age
|
the max age timer controls the maximum length of time a switch port saves a configuration BPDU info.
20 secs by default |
|
switch diameter
|
number of switches a frame has to traverse to travel from the two farthest point on the broadcast domain
|
|
configure switch diameter
|
spanning-tree vlan 1 root primary diameter 5. 7 is the maximum allowed.
|
|
convergence
|
is the time it takes to recalculate the spanning tree if a switch or a link fails.
|
|
cisco portfast
|
a switchport configured with portfast is configured as an access port, the port transitions from blocking to forwarding state immediately.
|
|
purpose of portfast
|
minimizes the time that access ports must wait for spanning tree convergence
-should only be used on access ports |
|
configure portfast
|
spanning-tree portfast in the interface config mode
|
|
convergence steps
|
1. elect a root bridge
2. elect root ports 3. elect the designated and non-designated ports |
|
electing a root bridge
|
trigged after boot up or if a path failure is detected.
|
|
initial state of a port
|
blocking and lasts 20 secs
|
|
election time for a root bridge
|
14 seconds due to the diameter max being 7.
|
|
after boot up
|
-BPDU is sent at every hello timer expiry by default 2 secs.
|
|
TCN
|
topology change notification
|
|
tcn
|
-happens when a port that was forwarding goes down
-happens when a port transitions to forwarding and the switch has a designated port. |
|
what does the switch that detects tcn do with this info
|
notifies the root bridge of the STP.
root bridge broadcasts the information to the network |
|
normal stp operation
|
a switch gets BPDU from the root bridge on the root port, but never sends a BPDU to the root bridge.
|
|
TCN
|
is the only BPDU that a switch sends to the root bridge.
|
|
TCN format
|
contains no infol
sent at the time of the hello interval expiry. |
|
receiver of the TCN
|
is called the designated bridge.
-it acks the TCN by sending back a normal BPDU with a TCA bit set. This happens until one designated bridge forwards the BPDU to the root bridge and root bridge responds. |
|
root bridge broadcast of TCN
|
sends a broadcast BPDU with the Topology change bit set. The switch can receive this both on the forwarding and the blocking ports.
|
|
TC bit
|
set by the root for a period of
max age + forward delay seconds 20+15=35 sec by default. |
|
per-vlan spanning tree (PVST)
|
maintains spanning tree instance for each vlan
|
|
PVST
|
-uses Cisco proprietary ISL trunking protocol that allows a VLAN trunk to be forwarding for some VLANs while blocking other vlans.
|
|
PVST
|
-treats each vlan as a separate network
-load balance traffic at layer 2 -each vlan has an instance of spanning tree -includes extenstions |
|
PVST +
|
support IEEE 802.1Q trunking
-includes extensions -includes portfast enhancements called BPDU guard and root guard. |
|
Rapid-PVST+
|
-based on IEEE 802.1w
-faster convergence than 802.1d |
|
RSTP
|
-faster than 8021.d
-implements generic version of cisco propiertary STP extensions |
|
MSTP
|
-multiple vlans mapped into the same spanning-tree instance
-provides multiple forwarding paths for data traffic and enables load balancing. |
|
PVST +
|
-all switches are engaged in converging the network.
-all switch ports have to accomodate the additional bandwdth used for each PSVST+ to send it's own BPDUs |
|
PVST+ root bridge implentations
|
-half the vlans can forward on each uplink trunk.
-configure on switch to be elected the root bridge for half of the total number of vlans in the network -configure a second switch to be elected the root bridge for tthe other half of the vlans. |
|
PVST+ bridge id
|
-extneded system Id is added to the BID to indiate the vlan id. When this happens, the priority becomes 4 bits insead of 16.
|
|
PVST+ priority field
|
increments of 4096 instead of 1.
The default priority is 32768 |
|
configure 2960 series for PVST+
|
enable state - enabled on vlan 1
STP mode - PVST+ switch priority - port priority - 128 port cost - 4 for 1000, 19 for 100 and 100 for 10 |
|
PVST +
|
-all switches are engaged in converging the network.
-all switch ports have to accomodate the additional bandwdth used for each PSVST+ to send it's own BPDUs |
|
PVST+ root bridge implentations
|
-half the vlans can forward on each uplink trunk.
-configure on switch to be elected the root bridge for half of the total number of vlans in the network -configure a second switch to be elected the root bridge for tthe other half of the vlans. |
|
PVST+ bridge id
|
-extneded system Id is added to the BID to indiate the vlan id. When this happens, the priority becomes 4 bits insead of 16.
|
|
PVST+ priority field
|
increments of 4096 instead of 1.
The default priority is 32768 |
|
configure 2960 series for PVST+
|
enable state - enabled on vlan 1
STP mode - PVST+ switch priority - port priority - 128 port cost - 4 for 1000, 19 for 100 and 100 for 10 vlan port priority - 128 vlan port cost - same as port cost timers - hello 2secs forward delay - 15 max age time 20 transmit hold count - 6 BPDUs |
|
configure PVST +
|
-select the switch to be primary and secondary root bridges for each vlan.
-configure a switch to be primary for one vlan -configure a switch to be secondary root bridge for a vlan. -set the spanning tree priority to be low enough so the configured switches will assume it's roles |
|
configure primary root bridge for PVST+
|
spanning-tree mode pvst
spanning-tree extended system-id spanning-tree vlan vlan-id root primary |
|
configure secondary root bridge for PVST+
|
spanning-tree vlan vlan-id root secondary
|
|
configure priority
|
spanning-tree vlan vlan-id priority <increments of 4096)
|
|
show active spanning tree config
|
show spanning-tree active
|
|
RSTP port states
|
discarding, learning or forwarding
-discarding port is the alternate |
|
RSTP charasteristics
|
-speeds up convergence
-redefines the type of port states -preferred protocol -cisco proprietary protocols are not compatible -backward compatible to STP -BPDU is the same STP, version is incremented to 2. -actively confimr that a port can transition to forwarding without relying on timer configuration. |
|
RSTP flag field
|
-indicates the port role, state, TCA, TCN etc.
|
|
RSTP BPDU
|
-info can be immediately aged on a port is a hello is not received for 3 consecutive hello times or if the max age expires
|
|
edge port
|
can never be connected another switch.
immediately transitions to forwarding |
|
edge port
|
an RSTP edge port that receives a BPDU loses edge port status and becomes part of the normal spanning tree port.
|
|
edge port configuration
|
spanning-tree portfast
|
|
link type
|
-predetermine the active role that the port plays
|
|
non-edge ports link types
|
point-to-point and shared.
|
|
edge port link type
|
point-to-point
|
|
port roles
|
-before link type is considered, RSTP determines port roles
-root ports do not have link type parameter -root ports can transition to forwarding as the port is in sync -alternate and backup ports do not link type -designated ports use link type. Transition of a DP to forwarding occurs when the link type indicates a point-point link |
|
RSTP port states
|
discarding - prevents forwarding of data frames. Can happen in the active state or topology sync state.
learning - accepts and populates the MAC table forwarding - only during stable active topology. Forwarding of data frames occurs only after a proposal and agreement process. |
|
difference between STP and RSTP port states
|
stp rstp
blocking discarding listening discarding learning learning forwarding forwarding disabled disabled |
|
rstp port roles
|
defines the purpose of a switch port and how it handles the data frames.
-root port -designated port -alternate port |
|
proposal and agreement process
|
in stp, when a port becomes the designated port, it has to wait 2 times the forward delay before moving to forwarding state.
in rstp, convergence is done on a link by link basis. |
|
Rapid PVST-+
|
RSTP version to use on Cisco systems
|
|
Rapid PVST+ configuration
|
- spanning tree instance is created when an interface is assigned to a vlan and it is removed when the last interface is moved to another vlan.
|
|
cisco 2960
|
supports PVST+, RPVST+ and MSTP
|
|
configuration commands
|
configure terminal
spanning-tree mod rapid-pvst interface interface-id spanning-tree link-type point-to-point clear spanning-tree detected protocols |