Вы находитесь на странице: 1из 10

10/11/2011

CCIE Service Provider Ver. 3.0


Advanced Technologies Class
Layer 2 Technologies

http://www.INE.com

Layer 2 Overview
Layer 2 technologies goal
Establish basic connectivity between directly
connected devices

Protocols covered

Ethernet
Frame Relay
HDLC
PPP

Copyright www.INE.com

10/11/2011

Catalyst ME 3400 Overview


Mostly similar to other Catalyst IOS platforms

VLANs
Trunking
EtherChannel
802.1Q Tunneling
IPv4 & IPv6 Routing
Etc.

Feature navigator can be used for comparisons


http://www.cisco.com/go/fn
Copyright www.INE.com

ME 3400 Caveats
Some key differences can affect basic
switching operation
Interfaces are in shutdown state by default
No dynamic port modes
VTP not supported
Rapid PVST by default
Port-Types and UNI VLANs
Copyright www.INE.com

10/11/2011

ME 3400 Port Types


Port type defines if interface goes
Upstream towards Service Provider
Downstream towards Customer

Three different types of ports

User-Network Interfaces (UNIs)


Enhanced Network Interfaces (ENIs)
Network Node Interfaces (NNIs)
Defined as port-type [uni | eni | nni]

Copyright www.INE.com

User-Network Interfaces (UNIs)

Typically connect to customers end hosts


All ports by default except uplinks
Can only send traffic to NNI ports by default
Do not support
STP
CDP & LLDP
LACP & PAgP

Copyright www.INE.com

10/11/2011

Enhanced Network Interfaces (ENIs)


Typically connect to customers routers or
switches
Same functionality as UNI, but can support

STP
CDP & LLDP
LACP & PAgP
Each must be manually enabled

Copyright www.INE.com

Network Node Interfaces (NNIs)


AKA Network to Network Interface
Typically connect to SPs router or switch
Uplinks are NNI by default
Also in no shutdown state

Does not filter layer 2 control plane protocols


Similar to ports on regular Catalyst IOS platforms
Copyright www.INE.com

10/11/2011

ME 3400 UNI VLANs


VLANs are in uni-vlan isolated mode by default
UNI/ENI ports in the same UNI isolated VLAN can only
talk to NNI ports in the same VLAN
NNI ports behave like promiscuous Private VLAN ports

UNI/ENI ports in the same UNI VLAN can talk when in


uni-vlan community mode
UNI VLANs can be converted to Private VLANs
private-vlan [community|isolated|primary]

Copyright www.INE.com

NBMA Overview
Non-Broadcast Multi-Access Media
Frame Relay
ATM

No native broadcast support


Broadcast as a replicated unicast
Implies layer 3 to layer 2 resolution issues
SP networks typically avoid this via P2P
subinterfaces
Copyright www.INE.com

10/11/2011

NBMA Interface Types


Multipoint interfaces
Can terminate multiple layer 2 circuits
Requires layer 3 to layer 2 resolution

Point-to-Point interfaces
Can terminate only one layer 2 circuit
Does not require layer 3 to layer 2 resolution

Copyright www.INE.com

Multipoint Frame Relay Example


R1:
interface Serial0/0
encapsulation frame-relay
ip address 10.0.0.1 255.255.255.0
frame-relay map ip 10.0.0.2 100 broadcast
R2:
interface Serial0/0
encapsulation frame-relay
ip address 10.0.0.2 255.255.255.0
frame-relay map ip 10.0.0.1 200 broadcast
Copyright www.INE.com

10/11/2011

Point-to-Point Frame Relay Example


R1:
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 10.0.0.1 255.255.255.0
frame-relay interface-dlci 100
R2:
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 10.0.0.2 255.255.255.0
frame-relay interface-dlci 200

Copyright www.INE.com

PPP - The Point-to-Point Protocol


Media independent encapsulation
Extends functionality of layer 2 protocols by
supporting
Authentication
Multilink
Routing
peer neighbor route

encapsulation ppp interface level command


Copyright www.INE.com

10/11/2011

PPP Authentication
PAP
Clear text username
Clear text password

CHAP
Clear text username
MD5 hashed password

MSCHAP / MSCHAPv2 / EAP / etc


Copyright www.INE.com

PPP PAP Authentication


Authentication Request
ppp authentication pap

Authentication Response
no ppp pap refuse (default option)
ppp pap sent-username password

Verification
debug ppp negotiation
debug ppp authentication
Copyright www.INE.com

10/11/2011

PPP CHAP Authentication


Authentication Request
ppp authentication chap

Authentication Response
no ppp chap refuse (default option)

Usernames
global hostname vs. interface hostname

Passwords
username database vs. interface password
MD5 hash irreversible

Verification
debug ppp negotiation
debug ppp authentication
Copyright www.INE.com

Peer Neighbor Route


Used to provide reachability when both ends
of the PPP link are not on the same logical
subnet
Dial-up NAS
IP unnumbered

Can be safely disabled when both ends of the


link are on the same logical IP subnet
Copyright www.INE.com

10/11/2011

PPP over Ethernet


Typically used in DSL implementations
IOS supports two variations
PPPoE Server
Accept connections for clients

PPPoE Client
Initiate PPPoE negotitiation to server

Copyright www.INE.com

Questions?

Copyright www.INE.com

10

Вам также может понравиться