TCP/IP Essentials A Lab-Based Approach Shivendra Panwar, Shiwen Mao Jeong-dong Ryoo, and Yihan Li Chapter 3 Bridges, LANs and the Cisco IOS.
Post on 01-Apr-2015
213 Views
Preview:
Transcript
TCP/IP Essentials
A Lab-Based Approach
Shivendra Panwar, Shiwen Mao Jeong-dong Ryoo, and Yihan Li
Chapter 3
Bridges, LANs and the Cisco IOS
2Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Devices for Interconnecting Networks
Ethernet
Router
Ethernet
Ethernet
Token-ring
Gateway
Bridge
Repeater
X.25Network
3Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Repeaters
Used to interconnect multiple Ethernet segments Merely extends the baseband cable Amplifies all signals including collisions
IP
LLC
802.3 MAC
IP
LLC
802.3 MACRepeater
Repeater
4Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Bridges
Interconnect multiple LANs, possibly of different types Bridges operate at the Data Link Layer (Layer 2) Require routing if paths are not unique
BridgeToken-ring
BridgeIP
LLC
802.3 MAC 802.3 MAC 802.5 MAC
LLC
IP
LLC
802.5 MACLAN LAN
5Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Routers
Subnet-work
Router
Subnet-work
Router
Subnet-work
Application
TCP
IP
NetworkAccess
Application
TCP
IP
NetworkAccess
IP protocol IP protocol
DataLink
NetworkAccess
IP
NetworkAccess
NetworkAccess
IP
NetworkAccess
DataLink
DataLink
IP protocol
RouterRouter HostHost
Routers operate at the Network Layer (Layer 3) Interconnect different subnetworks
6Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Gateways The term “Gateway” is used with different meanings in different contexts “Gateway” is a generic term for routers (Level 3) “Gateway” is also used for a device that interconnects different Layer 3 networks and which performs translation of protocols (“Multi-protocol
router”)
SNANetwork
Gateway
IP Network
Gateway
X.25Network
SNA: System Network Architecture
7Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Bridges
Interconnect multiple LANs. Pass frames to a different LAN if the destination is not on
the local LAN. A single bridge may connect to more than two LANs
LAN 1 Bridge LAN 2
8Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Why Bridges ?
Bridges allow to have multiple small LANs instead of one single LAN, which increases reliability throughput security geography
Transparent bridges are not seen by hosts. A frame is simply copied to the destination network. No change in the header and data section.
9Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Bridge Function – an Example
Frames to Host1 to Host 10 are accepted and repeated on LAN A Frames to Host11 to Host 20 are accepted and repeated on LAN B
...
...
LAN A
LAN B
Host1 Host2 Host10
Host11 Host12 Host20
Bridge
10Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Filtering Database of a Bridge
MAC addresses of the hosts are stored in a filtering database in the bridge.
Elements of each entry of the filtering database The destination MAC address The bridge port where frames for this destination MAC address
should be forwarded to The age of this entry
The filtering database could be set statically. In an IEEE 802.1d bridge, the filtering database is
maintained automatically by an address learning process.
11Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Address Learning Process
When a frame is received, its source MAC address and the incoming port are updated in the bridge’s filtering database.
The default age of a new entry is 300 sec.
12Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Address Learning – an Example
Consider the following packets: <Src=A, Dest=F>, <Src=C, Dest=A>, <Src=E, Dest=C>
What have the bridges learned?
Bridge 1
Port1
LAN 1
A
LAN 2
CB D
LAN 3
E F
Port2
Bridge 2
Port1 Port2
13Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Bridge Operations
A bridge makes forwarding decisions by filtering database lookups.
If an entry is found, the bridge forwards the frame to the network segment indicated by the entry.
Otherwise, flooding is used. The frame is copied to all active ports except the incoming port.
14Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Forwarding conditions
Forward a MAC frame if and only if The receiving port is in a forwarding state The transmitting port is in a forwarding state Either the filtering database indicates the port number for
the destination MAC address or no such entry is present (in which case all ports are eligible transmission ports)
Do not transmit on port on which frame was received The maximum service data unit size supported by the LAN
to which the transmitting port is connected is not exceeded.
15Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Need for Routing
when some LANs are reachable only in multiple hops
When the path between two LANs is not unique
LAN 2
Bridge 2
LAN 5
LAN 3
LAN 1
LAN 4
Bridge 5
Bridge 4Bridge 3
d
Bridge 1
16Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Routing with Bridges
Three principal approaches can be found: Fixed Routing Source Routing Spanning Tree Routing (transparent bridges)
Fixed routing is used in many commercial products. The other two are standardized by IEEE 802:
Source routing is standardized by the token ring (802.5) committee.
Spanning tree is standardized by the 802.1 committee.
We only discuss the spanning tree routing in detail.
17Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Danger of Loops Address learning and forwarding scheme may cause serious problems when there is a loop. Assume
host 1 sends a frame to host x (not shown). There is no entry in Bridge 1 and Bridge 2’s filtering database.
Bridges 1 and 2 both receive the frame on LAN B, and learn that host 1 is on LAN B, correctly add the entry for Host 1 in their filtering database, and Forward the frame to LAN A using flooding since there is no entry for host x.
Then, each bridge will receive the same frame forwarded by the
other bridge, and will incorrectly change the filtering database
entry to indicate that host 1 is on LAN A. This process will repeat indefinitely, which
leads to a broadcast storm.
18Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Spanning Trees
The solution to the loop problem is to remove loops.
IEEE 802.1 has an algorithm that builds and maintains a spanning tree in a dynamic environment.
Bridges exchange messages, Configuration Bridge Protocol Data Unit (Configuration BPDUs), to configure the bridge and build the tree.
Modified by M. Veeraraghavan and S. Mao (original by J. Liebeherr)
19Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Bridge ID
Each bridge has a unique identifier (8 bytes): Bridge ID = <priority level + MAC address> Priority level = 2 bytes A bridge has several MAC addresses (one for each port), but only one ID using the MAC address of the
lowest numbered bridge port (port 1) Each port within a bridge has a unique identifier (port ID).
51:24:68:1f:3:4 0:0:1:2:3:5
fe:64:96:12:1:3
3 12
Priority: 0x12:41
Bridge
Bridge ID = 12:41:fe:64:96:12:1:3Bridge ID = 12:41:fe:64:96:12:1:3
20Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Root bridge of a network Root Bridge: The bridge with the lowest identifier is the
root of the spanning tree.
Root bridge is bridge 3, since it has the smallest ID.Root bridge is bridge 3, since it has the smallest ID.
Bridge 3 with ID 0:1:34:1:21:56:19:87
Bridge 1 with ID 4:1:21:1:21:56:19:87
Bridge 2 with ID 6:4:55:4:21:56:19:87
2 1
LAN A
LAN B
1
1
21Panwar, Mao, Ryoo, Li: TCP/IP Essentials
For each bridge
Root Port: Each bridge has a root port which identifies the next hop from a bridge to the root.
Root Path Cost: the cost of the min-cost path to the root. Example on previous slide, for bridge 1:
The root port is port 2 since it leads to the root bridge (bridge 3) The root path cost is 1 since bridge 1 is one hop away from the
root bridge (I.e., bridge 3).
Note: We assume that “cost” of a path is the number of “hops”. This “cost” can be set to different values when designing the network.
22Panwar, Mao, Ryoo, Li: TCP/IP Essentials
For each LAN
Designated Bridge, Designated Port: Single bridge on a LAN that provides the minimal cost path to the root for this LAN, and the port on this minimal cost path. If two bridges have the same cost, select the one with highest priority
(lower bridge ID) If the min-cost bridge has two or more ports on the LAN, select the
port with the lowest identifier
Example on slide 20: For LAN A, the designated bridge is bridge 3 since it is the root bridge
itself; the designated port is port 1. For LAN B, the designated bridge is bridge 1 since this is closer to the
root bridge than bridge 2. The designated port is port 1.
23Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Designated bridge/port
Even though each LAN is the entity that has a designated bridge/designated port, it is each bridge that determines whether or not it is the designated bridge for the LAN on each of its ports, because a LAN is a group of hosts, there is no centralized control over a LAN.
Example: Bridge 1 in the example on slide 20 determines whether it is the designated bridge for LAN A (to which its port 2 is connected) and for LAN B (to which its port 1 is connected).
24Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Spanning Tree Algorithm
Step 1. Determine the root bridge of the whole network.
Step 2. For all other bridges determine root ports.
Step 3. For all bridges, determine which of the bridge ports are designated ports for their corresponding LANs.
The spanning tree consists of all the root ports and the designated ports.
These ports are all set to the “forwarding state,” while all other ports are in a “blocked state.”
25Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Determine the Spanning Tree
Bridges determines the spanning tree in a “distributed manner” by using BPDUs. Elect a single bridge as the root bridge. Each bridge can determine:
a root port, the port that gives the best path to the root. And the corresponding root path cost
Each bridge determines whether it is a designated bridge, for the LANs connected to each of its ports. The designated bridge will forward packets towards the root bridge.
Select ports to be included in the spanning tree. Root ports and designated ports
It takes a period of time for the network to converge.
26Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Configuration BPDUs
time since root sent a
message on
which this message is based
2 protocol identifier
1 version
1 message type
1 flags
8 root ID
4 Cost
8 bridge ID
2 port ID
message age
maximum age
hello time
forward delay
Set to 0 Set to 0Set to 0
lsb is "topology change bit (TC bit)"
ID of root Cost of the path from the bridge
sending this message to the root
port ID of the port on which this
message is transmitted
ID of bridge sending this message
Max. age of this
BPDU before it is
discarded
Time between
BPDUs from the root
(default: 1sec)
size in bytes
Ignore this field
27Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Short form notation for BPDUs
Each bridge sends out BPDUs that contain the following information:
root bridge (what the sender thinks it is)
root IDroot ID costcost bridge ID/port IDbridge ID/port ID
Identifies sending bridgeIdentifies port on which this BPDU is sent
root path cost for sending bridge
28Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Ordering of Messages
We can order BPDU messages with the following ordering relation ““:
If (R1 < R2)
M1 M2
elseif ((R1 == R2) and (C1 < C2))
M1 M2
elseif ((R1 == R2) and (C1 == C2) and (B1 < B2))
M1 M2
ID R1ID R1 C1C1 ID B1 ID B1 ID R2ID R2 C2 C2 ID B2ID B2M1 M2
29Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Initially, each bridge assumes itself is the root bridge. Each bridge B sends BPDUs of this form on its LANs:
Each bridge looks at the BPDUs received on all its ports and its own transmitted BPDUs.
Root bridge is the smallest received root ID that has been received so far (Whenever a smaller ID arrives, the root is updated).
Determine the Root Bridge
BB 00 BB
30Panwar, Mao, Ryoo, Li: TCP/IP Essentials
At this time: Bridge B has a belief of who the root is, say R. Bridge B determines the Root Path Cost (Cost) as follows:
If B = R : Cost = 0. If B R: Cost = {Smallest Cost in any of
BPDUs that were received from R} + 1
B’s root port is the port from which B received the lowest cost path to R (in terms of relation ““).
Knowing R and Cost, B can generate its BPDU (but will not necessarily send it out):
Calculate the Root Path CostDetermine the Root Port
RR CostCost BB
31Panwar, Mao, Ryoo, Li: TCP/IP Essentials
B has generated its BPDU
B will send this BPDU on one of its ports, say port x, only if its BPDU is lower (via relation ““) than any BPDU that B received from port x.
In this case, B also assumes that it is the designated bridge for the LAN to which the port connects.
If the bridge is the designated bridge for any of the LANs connected to its ports …
RR CostCost BB
Bridge BPort A Port C
Port x
Port B
32Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Select Ports for the Spanning Tree
Bridge B has calculated the root bridge for the network, its root port, root path cost, and whether it is the designated bridge for each of its LANs.
Now B can decide which ports are in the spanning tree: B’s root port is part of the spanning tree All ports for which B is the designated bridge are part of the spanning
tree.
B’s ports that are in the spanning tree will forward packets (forwarding state)
B’s ports that are not in the spanning tree will block packets (blocking state)
33Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Build the Spanning Tree
LAN 2
Bridge
LAN 5
LAN 3
LAN 1
LAN 4
Bridge
BridgeBridge
Bridge
DD
R
R
DR R
R
D
Consider the network on the right.
Assume that the bridges have calculated the designated ports (D) and the root ports (R) as indicated.
What is the spanning tree?
34Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Adapt to Changes
Bridges continually exchange BPDU’s according to the rules we just discussed.
This allows the bridges to adapt to changes to the topology.
Whenever a BPDU arrives on a port, say port x, bridge B determines: Can B become the designated bridge for the LAN that
port x is attached to? Can port x become the root port?
35Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Example 1 A Bridge with ID 18 The lowest messages received on its 4 ports are shown in
the figure. Then
What is the root? -- the bridge with ID12 What is the Root Path Cost? -- 85 +1 = 86 What is the root port? -- Port 2 What is 18’s configuration BPDU? -- 12.86.18 For which LAN (port), if any, is B the designated bridge? -- For
Ports 1,3, 4
Bridge 18Port 1
Port 2
Port 4
Port 3
12.93.51
12.85.47
15.31.27
81.0.81
36Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Example 2 (Practice)
A bridge with ID 3, the lowest messages received on its five ports are shown. What is the root? What is the Root Path Cost? What is the root port ? What is 3’s configuration BPDU? For which LAN (port), if any, is B the designated bridge ?
Bridge 3
Port 1
Port 2 Port 4
Port 5
Port 381.0.81
41.19.125
41.13.90
41.12.11141.12.315
37Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Example 2 (Solution)
A bridge with ID 3, the lowest messages received on its five ports are shown. What is the root? Bridge 41 What is the Root Path Cost? 13 What is the root port ? Port 4 What is 3’s configuration BPDU? 41.13.3 For which LAN (port), if any, is B the designated bridge ? 1,2,5
Bridge 3
Port 1
Port 2 Port 4
Port 5
Port 381.0.81
41.19.125
41.13.90
41.12.11141.12.315
38Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Network ExampleLAN 2
Bridge 2
LAN 5
LAN 3
LAN 1
LAN 4
Bridge 5
Bridge 4Bridge 3
d
Bridge 1
Port1a
Port1b
Port 2a
Port 2b Port 2c
Port 5b
Port 5a
Port 4a
Port 4b
Port 3a
Port3b
The ID’s of the bridges are 1,2,3,4,5 and the port ID’s are as indicated in the figure.
The bridges run the spanning tree algorithm.
Assume that the root cost path is the number of hops.
Assume an initial state. Show which messages are
exchanged until the tree is built.
39Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Interesting case 1
If two min-cost BPDUs received at a bridge on two different ports are equal in the root ID, root path cost and sending bridge ID, and the root ID is the smallest of the root Ids on all previously received
BPDUs,
then the designated ports for the LANs corresponding to the two ports on which the two BPDUs are received are compared. The smaller one of these (which will have the higher priority) will
be chosen. The port on the bridge receiving these BPDUs which is on the LAN
of this selected designated port is the root port of the bridge.
40Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Example
Bridge 2 receives two BPDUs [1,0,1] on both its ports 3 and 4
The designated port for LAN A is port 1 on bridge 1 The designated port for LAN B is port 2 on bridge 1 Since port 1 is lower than port 2, it has higher priority. Hence port 4 is the root port.
Bridge 2 Bridge 1
LAN A
LAN B
Port 1
Port 2
Port 4
Port 3
41Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Interesting case 2
Furthermore, if even the designated ports of the LANs corresponding to the ports on which a bridge receives the same BPDUs are the same,
then look at the port numbers on the bridge itself at which these BPDUs are received and select the lower one to be the root port.
42Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Example
Ports 4 and 2 of bridge 2 are on LAN A. They will both receive BPDU [1,0,1] from bridge 1.
The designated port for LAN A is port 1 on bridge 1. So even the designated ports are the same.
Hence choose between ports 2 and 4 by selecting the lower one, which is port 2 as the root port.
Bridge 2 Bridge 1
LAN A
LAN B
Port 1
Port 2
Port 4
Port 3
Port 2
43Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Priority
Two bridge identifiers when compared numerically, the lesser number shall denote the bridge of the higher priority.
Is it possible for two bridges to have the same priority?
Is it possible for two bridges to have the same bridge ID?
44Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Configure a Bridge or Router
Higher layer functions for the configuration and management tasks are needed.
Cisco Internet Operating System (IOS) is the most widely deployed network system software.
45Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Cisco IOS
Delivers network services such as operations, administration, and maintenance of the network platforms and Internet applications.
Supports a broad range of platforms and many networking protocol families.
Enables network applications on the network platforms.
46Panwar, Mao, Ryoo, Li: TCP/IP Essentials
Cisco IOS Configuration Modes
Cisco IOS provides different ways to configure and maintain a Cisco device.
Cisco IOS command-line interface (CLI) is the primary user interface.
There are six different configuration modes in CLI.
top related