• Aucun résultat trouvé

Building Cisco Multilayer Building Cisco Multilayer Switched Networks (BCMSN) Switched Networks (BCMSN) Gateway Redundancy Protocols

N/A
N/A
Protected

Academic year: 2022

Partager "Building Cisco Multilayer Building Cisco Multilayer Switched Networks (BCMSN) Switched Networks (BCMSN) Gateway Redundancy Protocols"

Copied!
5
0
0

Texte intégral

(1)

http://www.INE.com

Building Cisco Multilayer Building Cisco Multilayer Switched Networks (BCMSN) Switched Networks (BCMSN)

Gateway Redundancy Protocols

What is Gateway Redundancy?

What is Gateway Redundancy?

• End hosts typically do not “route” into the network, they default to their gateway

• If the gateway is down, connectivity is lost

• First Hop/Gateway Redundancy allows another device to take over for a host’s default gateway if it goes down

– Transparent to the end host

– No need for dual gateways in DHCP

(2)

Copyright

Copyright ©© 2009 Internetwork Expert, Inc 2009 Internetwork Expert, Inc www.INE.com

www.INE.com

Network Failure Without

Network Failure Without FHRPs FHRPs

SW3

SW1

A B

SW2 SW4

Network Failure With

Network Failure With FHRPs FHRPs

(3)

Copyright

Copyright ©© 2009 Internetwork Expert, Inc 2009 Internetwork Expert, Inc www.INE.com

www.INE.com

IP over Ethernet Review IP over Ethernet Review

• When a HostA wants to communicate with HostB via IP…

– If HostB is on my subnet…

• Check the ARP cache for HostB’s MAC

• If no MAC, ARP for HostB – If HostB is not on my subnet

• Check the ARP cache for gateway’s MAC

• If no MAC, ARP for gateway

How Gateway Redundancy Works How Gateway Redundancy Works

• Virtualizes the IP to MAC mapping for the hosts default gateway

• Routers in the redundancy group share a virtual IP address and virtual MAC address

– Host has default gateway set to virtual IP

• When host ARPs for gateway, current “active”

router responds with virtual MAC

• If “active” router goes down, next router in the group takes over the virtual MAC

– Floods new frames to update the CAM

• Convergence depends on dead router detection and switchover

(4)

Copyright

Copyright ©© 2009 Internetwork Expert, Inc 2009 Internetwork Expert, Inc www.INE.com

www.INE.com

Gateway Redundancy Protocols Gateway Redundancy Protocols

• Three protocols

– Same major functionality – Difference enhancements

– Different behind the scenes communication

• Hot Standby Router Protocol (HSRP)

• Virtual Router Redundancy Protocol (VRRP)

• Gateway Load Balancing Protocol (GLBP)

HSRP HSRP

• Hot Standby Router Protocol

• Cisco proprietary

– Communication via UDP multicast to 224.0.0.2 at port 1985

• Uses active/standby routers

– Active forwards for virtual MAC

– Standby checks to make sure active is up

• If down take over the MAC

standby interface level command

(5)

Copyright

Copyright ©© 2009 Internetwork Expert, Inc 2009 Internetwork Expert, Inc www.INE.com

www.INE.com

VRRP VRRP

• Virtual Router Redundancy Protocol

• Open standard per RFC 3768

– Communication with own multicast transport via IP protocol 112 to 224.0.0.18

• Uses master/backup routers

– Master forwards for virtual MAC

– Backup checks to make sure master is up

• If down take over the MAC

vrrp interface level command

GLBP GLBP

• Gateway Load Balancing Protocol

• Cisco proprietary

– Communication via UDP multicast 224.0.0.102 at port 3222

• Like HSRP/VRRP but provides load balancing – One virtual IP address

– Multiple virtual MAC addresses

• Active Virtual Gateway (AVG)

– Assigns virtual MACs by replying to ARP requests with either it’s own MAC or another forwarder’s MAC

• Active Virtual Forwarder (AVF)

– Router that AVG responds to ARP request on behalf of

Références

Documents relatifs

– Bridge priority per VLAN configurable as spanning- tree vlan [vlan] [priority|root]. • Separate Root Port & Designated Port elections

• In addition to layer 2 switchports, most layer 3 switches can run ports in native layer 3 routed mode. –

classification policy based on “trust” boundaries – Trusted ports maintain markings received. – Untrusted ports remark/rewrite/overwrite markings

• Some DHCP implementation don’t use client source MAC address but instead use “Client Hardware Address” inside DHCP request payload. • Attacker can keep source MAC

– Upstream switch sends TCAck in Configuration BPDU back – Upstream switch sends TCN out Root Port. – Next upstream switch sends TCAck in Configuration BPDU back – Next

Administrative private-vlan host-association: none Administrative private-vlan mapping: none Administrative private-vlan trunk native VLAN: none Administrative private-vlan

Copyright © © 2009 Internetwork Expert, Inc 2009 Internetwork Expert, Inc

– Next-hop is the IP address used to peer with the EBGP neighbor they learned it from. •