Администрирование / Разбор ЛР3

Overview of Laboratory Work on Network Administration

Introduction to the Lab

• The video discusses the third laboratory work focused on network administration, specifically on advanced spanning tree protocols and channel aggregation protocols.

• The aim is to understand port security at the data link layer, including similarities and differences through examples.

Network Topology

• The topology consists of two large local networks connected by a router with two interfaces (FastEthernet 00/01).

• VLAN configurations include VLAN 30 (static IP addresses) and VLAN 40 (DHCP assigned addresses).

Router Configuration

• The router interface connected to the left network must support two subinterfaces for VLAN configuration.

• Spanning Tree Protocol (STP) should be configured in Rapid STP mode, requiring specific settings for links between switches.

Port Security Implementation

• Port security limits access based on MAC addresses; static configurations are necessary for devices connecting to the network.

• A cheat sheet is provided for configuring devices logically throughout the lab exercises.

Device Configuration Steps

Initial Setup

• Accessing devices requires using a command line interface from an admin computer due to direct connections being blocked.

• IP address selection follows a structured approach based on student group numbers and device roles within the network topology.

Connecting to Devices

• Initial connection attempts involve accessing router interfaces via Telnet, starting with identifying known IP addresses like 192.168.10.1 as default gateways.

• Commands such as show cdp neighbors help identify neighboring devices connected to the router's interfaces.

Switch Configuration Example

Configuring Switches

• An example switch configuration begins with Telnet access followed by basic setup commands like hostname changes and enabling domain lookup features to prevent name resolution errors.

• Setting up VLAN 30 and VLAN 40 involves configuring trunk ports that connect this switch to others in the topology, ensuring proper traffic flow across networks.

Configuring Cisco Switches and Port Security

Initial Setup and Configuration

• The discussion begins with the need to connect to a Cisco router and switch, suggesting a direct connection to the switch for efficiency.

• Emphasis is placed on configuring the spanning tree protocol (STP) mode to ensure proper network functionality, specifically mentioning "spanning-tree mouth 200."

• The speaker demonstrates how to change link types for specific interfaces in STP settings, indicating that adjustments are necessary for interface 12.

Ensuring Network Connectivity

• It is crucial to connect all switches properly and create necessary VLANs while ensuring devices are interconnected through trunk links.

• A troubleshooting scenario arises where an incorrect interface is shut down during diagnostics, highlighting the importance of selecting the right interface.

Port Security Configuration

• The speaker identifies a specific switch as "sw1" and begins configuring port security on Fast Ethernet interface 03.

• To enable port security effectively, it must be set up in access mode; this includes defining MAC address restrictions for enhanced security measures.

Addressing IP Configuration

• The configuration process requires determining device MAC addresses using commands like ipconfig, which helps in setting static port security rules.

• IP addresses are assigned based on student numbers, demonstrating practical application of network addressing within VLAN configurations.

Finalizing VLAN and Port Security Settings

• Before finalizing port security settings, necessary VLAN configurations must be added; this ensures that all components work harmoniously within the network structure.

• Static MAC address entries are established for port security enforcement; this step is critical in preventing unauthorized access through rogue devices.

Testing Network Integrity

• A test scenario involves introducing a malicious computer with an overlapping IP address to verify if port security functions correctly by blocking unauthorized access.

Configuring Port Security and Aggregation in Networking

Understanding Port Security

• The speaker discusses enabling port fast on a switch, allowing packets to pass through effectively. A test is conducted by connecting another computer, which triggers port security measures.

• To exit the current mode, the command sequence "shutdown" must be executed on the interface.

Dynamic vs Static Port Security

• The configuration of dynamic port security differs from static; instead of manually entering MAC addresses, the command mac-address sticky can be used to automatically record device MAC addresses in the configuration file.

• Three types of channel aggregation are mentioned for two switches: static and dynamic configurations will differ based on operational modes.

Steps for Interface Configuration

• Recommended steps include configuring interfaces using "interface range," ensuring they are initially set to shutdown before proceeding with further configurations.

• Commands for setting up channel groups involve specifying group numbers and modes (e.g., active or passive).

Example Protocol Configuration

• An example protocol setup is introduced using PAgP (Port Aggregation Protocol), starting with router connections and specific IP addresses.

• Connection details are provided for a switch with interfaces 17 and 18 being configured as trunk ports.

Troubleshooting Common Issues

• The importance of proper VLAN creation is emphasized; errors often arise from incorrect sequence settings leading to spanning tree issues. Power cycling devices may resolve these problems.

• It’s crucial to save configuration files using commands like "write" after making changes to prevent data loss.