Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking...

63
Chapter 4: Maintaining and T bl h ti Troubleshooting Campus Switched Solutions Solutions CCNP TSHOOT: Maintaining and Troubleshooting IP Networks CCNP TSHOOT: Maintaining and Troubleshooting IP Networks © 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public TSHOOT v6 Chapter 4 1

Transcript of Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking...

Page 1: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4:Maintaining and T bl h tiTroubleshooting Campus Switched SolutionsSolutions

CCNP TSHOOT: Maintaining and Troubleshooting IP NetworksCCNP TSHOOT: Maintaining and Troubleshooting IP Networks

© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco PublicTSHOOT v6 Chapter 4

1

Page 2: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Objectives

Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel problems using

the IOS command line interface.Di d l bl ith SVI d i t VLAN Diagnose and resolve problems with SVIs and inter-VLAN routing. Diagnose and resolve problems related to first hopDiagnose and resolve problems related to first hop

redundancy protocols such as HSRP, VRRP, and GLBP.

Chapter 42© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 3: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

T bl h tiTroubleshooting VLANs

Chapter 43© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 4: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation

Host A pings Host B on the same VLAN (subnet). Host A determines that destination (Host B) IP is on theHost A determines that destination (Host B) IP is on the

same subnet. Host A consults its ARP cache, encapsulates the IP packet

f fin an Ethernet frame and transmits the frame to Host B.

Chapter 44© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 5: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.

DMAC SMAC Type Data FCSDMAC SMAC Type Data FCS

BCAST MAC A 0x0806 ARP Request CRC

If Host A does not have an entry for Host B in its ARP

Chapter 45© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

cache, it will ARP for the Host B MAC address.

Page 6: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.

DMAC SMAC Type 802.1Q Type Data FCS

BCAST MAC A 0x8100 VLAN 10 0x0806 ARP Request CRC

The intermediate switches flood the ARP request over the

Chapter 46© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

q802.1Q trunk links.

Page 7: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.

DMAC SMAC Type Data FCSDMAC SMAC Type Data FCS

MAC A MAC B 0x0806 ARP Reply CRC

Host B sends a unicast ARP reply back to Host A.

Chapter 47© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 8: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.

DMAC SMAC Type 802.1Q Type Data FCSC S C ype 80 Q ype ata CS

MAC A MAC B 0x8100 VLAN 10 0x0806 ARP Reply CRC

Switches forward the ARP reply unicast frame toward Host

Chapter 48© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

p yA.

Page 9: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.

DMAC SMAC Type 802 1Q Type Data FCSDMAC SMAC Type 802.1Q Type Data FCS

MAC B MAC A 0x8100 VLAN 10 0x0800 ICMP Echo Request CRC

Host A encapsulates the IP packet (ICMP Echo Request) in a unicast frame and sends it to Host B. Switches forward ICMP Echo Request unicast frame toward

Chapter 49© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Switches forward ICMP Echo Request unicast frame toward Host B.

Page 10: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.

DMAC SMAC Type 802 1Q Type Data FCSDMAC SMAC Type 802.1Q Type Data FCS

MAC A MAC B 0x8100 VLAN 10 0x0800 ICMP Echo Reply CRC

Switches forward ICMP Echo Reply unicast frame toward

Chapter 410© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

p yHost A.

Page 11: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.

Host A Receives ICMP Echo Reply Back from Host B.

Chapter 411© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

p y

Page 12: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

LAN Switch Operation – Cont.Issues that could cause the communication to fail:

• Physical problems• Bad, missing, or miswired cables• Bad ports• Power failure• Device problems• Software bugs• Performance problems• Misconfiguration• Missing or wrong VLANs• Misconfigured VTP settings• Wrong VLAN setting on access ports• Missing or misconfigured trunks• Native VLAN mismatch

Chapter 412© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

• VLANs not allowed on trunk

Page 13: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Verifying Layer 2 Forwarding

Common findings when following the path of the frames through the switches: Frames are not received on the correct VLAN: This could point to

VLAN or trunk misconfiguration as the cause of the problem. Frames are received on a different port than you expected: This

could point to a physical problem, spanning tree issues, a native VLAN mismatch or duplicate MAC addresses.

The MAC address is not registered in the MAC address table: This tells you that the problem is most likely upstream from this switch. Investigate between the last point where you know that frames were received and this switch.

Chapter 413© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 14: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Verifying Layer 2 Forwarding – Cont.

Useful Layer 2 diagnostic commands: show mac-address-table: Shows learned MAC addresses and

di t d VLAN i ticorresponding port and VLAN associations. show vlan: Verifies VLAN existence and port-to-VLAN associations. show interfaces trunk: Displays all interfaces configured as trunks,

VLANs allowed and what the native VLAN is. show interfaces switchport: Provides a summary of all VLAN

related information for interfaces. show platform forward interface: Used to determine how the

hardware would forward a frame. traceroute mac: Provides a list of switch hops (layer 2 path) that a frame

from a specified source MAC address to a destination MAC address passes through. CDP must be enabled on all switches in the network for this command to work.

Di l L 2 th t k b t t IP h t

Chapter 414© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

traceroute mac ip: Displays Layer 2 path taken between two IP hosts.

Page 15: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

T bl h tiTroubleshooting Spanning Tree

Chapter 415© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 16: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Operation

El R B id /S i h Elect a Root Bridge/Switch. Select a Root Port on each Bridge/Switch (except on the

Root bridge/switch)Root bridge/switch). Elect a Designated device/port on each network segment. Ports that are neither Root Port nor a Designated Port go

Chapter 416© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

g ginto Blocking state.

Page 17: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Operation – Cont.

1. Elect a Root Bridge/Switch.

Chapter 417© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 18: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Operation – Cont.

2. Select a Root Port on each bridge/switch.

Chapter 418© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 19: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Operation – Cont.

3. Elect a Designated device/port on each network segment.

Chapter 419© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 20: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Operation – Cont.

4. Place ports in Blocking state.

Chapter 420© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 21: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Operation – Cont.

Sample output from the show spanning-tree vlan command.

Chapter 421© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 22: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Operation – Cont.

Sample output from the show spanning-tree interface command.

Chapter 422© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 23: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Failures

STP is a reliable but not an absolutely failproof protocol. If STP fails there are usually major negative consequences.If STP fails there are usually major negative consequences. With Spanning Tree, there are two different types of

failures.• Type 1 - STP may erroneously block certain ports that should have

gone to the forwarding state. You may lose connectivity to certain parts of the network, but the rest of the network is unaffected.

• Type 2 - STP erroneously moves one or more ports to the Forwarding state. The failure is more disruptive as bridging loops and broadcast storms can occur.

Chapter 423© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 24: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Failures – Cont.

Type 2 failures can cause these symptoms.• The load on all links in the switched LAN will quickly start increasing. • Layer 3 switches and routers report control plane failures such as

continual HSRP, OSPF and EIGRP state changes or that they are running at a very high CPU utilization load.

• Switches will experience very frequent MAC address table changes. • With high link loads and CPU utilization devices typically become

unreachable, making it difficult to diagnose the problem while it is in progress.

Eliminate topological loops and troubleshoot issues.• Physically disconnect links or shut down interfaces.Physically disconnect links or shut down interfaces.• Diagnose potential problems.• A unidirectional link can cause STP problems. You may be able to

identify and remove a faulty cable to correct the problem

Chapter 424© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

identify and remove a faulty cable to correct the problem.

Page 25: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Spanning Tree Failures – Cont.

Using the show etherchannel 1 detail command

DSW2# show etherchannel 1 detailGroup state = L2 Ports: 2 Maxports = 8Port-channels: 1 Max Port-channels = 1Protocol: -Protocol: Minimum Links: 0Ports in the group:-------------------Port: Fa0/5------------

Port state = Up Cnt-bndl Suspend Not-in-Bndl Channel group = 1 Mode = On Gcchange = -Port-channel = null GC = - Pseudo port-channel = Po1Port index = 0 Load = 0x00 Protocol = -

Age of the port in the current state: 0d:00h:25m:13s

Probable reason: vlan mask is different

Chapter 425© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

<output omitted>

Page 26: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

EtherChannel Operation

EtherChannel bundles multiple physical Ethernet links (100 Mbps,1 Gbps, 10 Gbps) into a single logical link. Traffic is distributed across multiple physical links as one

logical link.Thi l i l li k i t d i Ci IOS t This logical link is represented in Cisco IOS syntax as a “Port-channel” (Po) interface. STP and routing protocols interact with this single port-STP and routing protocols interact with this single port

channel interface. Packets and frames are routed or switched to the port-

fchannel interface. A hashing mechanism determines which physical link will

be used to transmit them

Chapter 426© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

be used to transmit them.

Page 27: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

EtherChannel Problems

Three common EtherChannel problems:1. Inconsistencies between the physical ports that are1. Inconsistencies between the physical ports that are

members of the channel2. Inconsistencies between the ports on the opposite sides

f th Eth Ch l li kof the EtherChannel link3. Uneven distribution of traffic between EtherChannel

bundle membersbundle members

Chapter 427© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 28: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

EtherChannel Diagnostic Commands

Using the show etherchannel summary command

DSW2# show etherchannel summaryFlags: D - down P - bundled in port-channel

I - stand-alone s - suspendedH - Hot-standby (LACP only)R - Layer3 S - Layer2U - in use f - failed to allocate aggregator

M - not in use, minimum links not metu - unsuitable for bundlinggw - waiting to be aggregatedd - default port

Number of channel-groups in use: 2N mbe of agg egato s 2Number of aggregators: 2

Group Port-channel Protocol Ports------+-------------+-----------+-------------------------1 Po1(SD) - Fa0/5(s) Fa0/6(s)

Chapter 428© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

2 Po2(SU) - Fa0/3(P) Fa0/4(P)

Page 29: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

EtherChannel Diagnostics

Using the show spanning-tree command to examine STP

ASW1# show spanning-tree vlan 17

MST0Spanning tree enabled protocol mstpRoot ID Priority 32768

Address 001e.79a9.b580This bridge is the rootHello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768 (priority 32768 sys-id-ext 0)Address 001e.79a9.b580Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Inte face Role Sts Cost P io Nb T peInterface Role Sts Cost Prio.Nbr Type------------------- ---- --- --------- -------- ------------------------------Fa0/7 Desg FWD 200000 128.9 P2p Edge Po1 Desg BLK 100000 128.56 P2p Po2 Desg BKN*100000 128.64 P2p Bound(PVST) *PVST_Inc

Chapter 429© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 30: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Troubleshooting Switched VirtualSwitched Virtual Interfaces and Inter-VLAN RoutingRouting

Chapter 430© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 31: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Inter-VLAN Routing and Multilayer Switching

Similarities between multilayer switches and routers Both routers and multilayer switches use routing protocolsBoth routers and multilayer switches use routing protocols

or static routes to maintain information about the reachability and direction to network destinations (prefixes), and record this information in a routing tableand record this information in a routing table. Both routers and multilayer switches perform the same

functional packet switching actions:p g• They receive a frame and strip off the Layer 2 header.• They perform a Layer 3 lookup to determine the outbound interface

and next hopand next hop.• They encapsulate the packet in a new Layer 2 frame and transmit the

frame.

Chapter 431© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 32: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Inter-VLAN Routing and Multilayer Switching

Differences between multilayer switches and routers Routers connect heterogeneous networks and support a wide variety of

di d i t fmedia and interfaces. Multilayer switches typically connect homogenous networks. Most LAN

switches are Ethernet only. Multilayer switches utilize specialized hardware to achieve wire-speed

Ethernet-to-Ethernet packet switching. Low- to mid-range routers use multi-purpose hardware to perform the

k t it hipacket switching process. On average, the packet switching throughput of routers is lower than the

packet switching throughput of multilayer switches. Routers usually support a wider range of features, mainly because switches

need specialized hardware to be able to support certain data plane features or protocols.O f dd f h h f d

Chapter 432© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

On routers, you can often add features through a software update.

Page 33: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Troubleshooting Routers and Multi-Layer SwitchesSwitchesSample Data Plane and Control Plane commands for routers and multi-layer switches

Chapter 433© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 34: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Troubleshooting Routers and Multi-Layer Switches ContSwitches – Cont.Commands to check the CEF data structures for routers and multi-layer switches.show ip cef

Displays the content of the CEF FIB.• The FIB reflects the content of the routing table with all the recursive lookups• The FIB reflects the content of the routing table with all the recursive lookups

resolved already and the output interface determined for each destination prefix.

• The FIB also holds additional entries for directly connected hosts, the router’s own IP addresses and multicast and broadcast addressesIP addresses, and multicast and broadcast addresses.

show adjacency

Displays the content of the CEF adjacency table.• This table contains preconstructed Layer 2 frame headers with all necessary fields

already filled in. These frame headers are used to encapsulate the egress CEF-switched packets and deliver them to appropriate next hop devices..

Chapter 434© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 35: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Troubleshooting Multi-layer Switches

Commands to check forwarding behavior of switches from the content of TCAM on Catalyst switches:

show platform

On the Catalyst 3560, 3750 and 4500 platforms, the show l tf f il f d b d t bt i d t il dplatform family of commands can be used to obtain detailed

information about the forwarding behavior of the hardware.show mls cefs o s ce

On the Catalyst 6500 platform, the show mls cef family of commands can be used to obtain detailed information about

f fthe forwarding behavior of the hardware.

Chapter 435© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 36: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Switched Virtual Interfaces (SVIs) and Routed PortsPortsA Logical Demonstration of a Multilayer Switch:

Chapter 436© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 37: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Multilayer Switches, VLANs and Routing

A multilayer switch provides three different core functions in a single device:1. Layer 2 switching within each VLAN:

• The traffic switched between ports that belong to the same VLANTh MAC dd t bl f diff t VLANS l i ll t d• The MAC address tables for different VLANS are logically separated.

• No IP or Layer 3 configuration is necessary.

2. Routing and multilayer switching between the local ou g a d u aye s c g be ee e ocaVLANs:

• Layer 3 switching between VLANs requires SVIsE h SVI i i t IP dd d b t k• Each SVI requires an appropriate IP address and subnet mask.

• Hosts on the can use the SVI’s IP address as default gateway.• IP routing must be enabled.

Chapter 437© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 38: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Multilayer Switches, VLANs and Routing – Cont.

A multilayer switch provides three different core functions in a single device – Cont.:3. Routing and multilayer switching between the local VLANs

and one or more routed interfaces:A l h i l it h d t b d t d t• A regular physical switched port can be made a routed port.

• A routed interface does not belong to any user-created or default VLAN and has no dependency on VLAN status (unlike an SVI).

• Traffic on this port is not bridged (switched) to any other port• There is no MAC address table associated to it.• The port acts like a regular router interface and needs its own IPThe port acts like a regular router interface and needs its own IP

address and subnet mask.

Chapter 438© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 39: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Routed Interfaces vs. SVIsThe main differences between SVIs and routed interfaces are: A routed interface is not a Layer 2 port – Layer 2 protocols, such STP and DTP

are not activeare not active. The status of a routed interface is directly related to the availability of the

corresponding directly-connected subnet. If a routed interface goes down the corresponding connected route will If a routed interface goes down, the corresponding connected route will

immediately be removed from the routing table. An SVI is not a physical interface so it generally doesn’t fail. An SVIs status is directly dependent on the status of the VLAN with which it is An SVIs status is directly dependent on the status of the VLAN with which it is

associated. The VLAN must be defined in the VLAN database. An SVI stays up as long as there is at least one port associated to the

corresponding VLANcorresponding VLAN. That port has to be up and in the Spanning Tree forwarding state. An SVI can only go down when the last active port in the VLAN goes down or

loses its Spanning Tree forwarding status (and the corresponding connected

Chapter 439© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

loses its Spanning Tree forwarding status (and the corresponding connected subnet will be removed from the routing table).

Page 40: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Checking SVI Status

Verifying the status of a VLAN and SVI

ASW1# show ip interfaces brief | exclude unassignedInterface IP-Address OK? Method Status ProtocolVlan128 10.1.156.1 YES NVRAM up down

ASW1# show spanning-tree vlan 128Spanning tree instance(s) for vlan 128 does not exist.

ASW1# show vlan id 128VLAN id 128 not found in current VLAN database

Chapter 440© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 41: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Troubleshooing Fi t HFirst Hop Redundancy Protocols

Chapter 441© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 42: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

First Hop Redundancy Protocols (FHRPs) FHRP is an important element in building highly available networks. Clients and servers normally point to a single default gateway and lose

connectivity to other subnets if their gateway failsconnectivity to other subnets if their gateway fails. FHRPs provide redundant default gateway functionality that is transparent to the

end hosts. These protocols provide a virtual IP address and the corresponding virtual MAC These protocols provide a virtual IP address and the corresponding virtual MAC

address. Examples of FHRPs include:

• Hot Standby Router Protocol (HSRP) Cisco• Hot Standby Router Protocol (HSRP) – Cisco• Virtual Router Redundancy Protocol (VRRP) – IETF standard• Gateway Load Balancing Protocol (GLBP) – Cisco

The mechanisms of these protocols revolve around these functions: The mechanisms of these protocols revolve around these functions:• Electing a single router that controls the virtual IP address• Tracking availability of the active router• Determining if control of the virtual IP and MAC addresses should be handed over to

Chapter 442© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

• Determining if control of the virtual IP and MAC addresses should be handed over to another router

Page 43: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Using First Hop Redundancy

Sample HSRP Configuration

Chapter 443© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 44: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Verifying HSRP Operation

Sample output from the show standby brief command

Chapter 444© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 45: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Verifying HSRP Operation – Cont.

Sample output from the show standby interface-idcommandcommand

Chapter 445© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 46: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Verifying HSRP Operation – Cont.

The interface of a router participating in HSRP is shutdown.

Chapter 446© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 47: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Verifying HSRP Operation – Cont.While debug standby terse is enabled on R2, R1’s interface is enabled.

Chapter 447© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 48: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Verifying HSRP Operation – Cont.

Output of debug standby terse on R2 as R1’s interface is enabledR2#*Mar 1 00:16:23.555: HSRP: Fa0/0 Grp 1 Coup in 10.1.1.1 Listen pri 110 vIP 10.1.1.254*Mar 1 00:16:23.555: HSRP: Fa0/0 Grp 1 Active: j/Coup rcvd from higher pri

/router (110/10.1.1.1)*Mar 1 00:16:23.555: HSRP: Fa0/0 Grp 1 Active router is 10.1.1.1, was local*Mar 1 00:16:23.555: HSRP: Fa0/0 Grp 1 Active -> Speak*Mar 1 00:16:23.555: %HSRP-5-STATECHANGE: FastEthernet0/0 Grp 1 state Active -> Speakp*Mar 1 00:16:23.555: HSRP: Fa0/0 Grp 1 Redundancy "hsrp-Fa0/0-1" state Active -> Speak*Mar 1 00:16:33.555: HSRP: Fa0/0 Grp 1 Speak: d/Standby timer expired (unknown)*Ma 1 00 16 33 555 HSRP Fa0/0 G p 1 Standb o te is local*Mar 1 00:16:33.555: HSRP: Fa0/0 Grp 1 Standby router is local*Mar 1 00:16:33.555: HSRP: Fa0/0 Grp 1 Speak -> Standby*Mar 1 00:16:33.555: %HSRP-5-STATECHANGE: FastEthernet0/0 Grp 1 state Speak -> Standby*Mar 1 00:16:33.559: HSRP: Fa0/0 Grp 1 Redundancy "hsrp-Fa0/0-1" state Speak

Chapter 448© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

-> StandbyR2#

Page 49: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Alternatives to HSRP

Operational differences between HSRP, VRRP, and GLBP

Feature HSRP VRRP GLBP

Transparent default gateway redundancy Yes Yes Yes

Virtual IP address can also be a real address

No Yes No

IETF standard No Yes No

Preempt is enabled by default No Yes No

Multiple forwarding routers per group No No Yes

Default Hello timer (seconds) 3 1 3

Chapter 449© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 50: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

HSRP, VRRP, and GLBP Diagnostic Commands

Output of basic show commands for HSRP, VRRP, and GLBPR1# show standby brief

P indicates configured to preempt.|

Interface Grp Prio P State Active Standby Virtual IP /Fa0/0 1 110 P Active local 10.1.1.2 10.1.1.254

…R1# show vrrp briefInterface Grp Pri Time Own Pre State Master addr Group addrFa0/0 1 110 3570 Y Master 10.1.1.1 10.1.1.254 /…R1# show glbp briefInterface Grp Fwd Pri State Address Active router Standby routerFa0/0 1 110 Acti e 10 1 1 254 local 10 1 1 2Fa0/0 1 - 110 Active 10.1.1.254 local 10.1.1.2Fa0/0 1 1 - Active 0007.b400.0101 local -Fa0/0 1 2 - Listen 0007.b400.0102 10.1.1.2 -

Chapter 450© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 51: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

HSRP, VRRP, and GLBP Diagnostic Commands

Main Troubleshooting Commands for HSRP, VRRP, and GLBPGLBP

HSRP VRRP GLBP

show standby brief show vrrp brief show glbp brief

show standby show vrrp show glbpinterface-id interface

interface-idinterface-id

debug standby terse No real equivalent debug glbp tersedebug standby terse No real equivalent option exits. Multiple debug options must be used simultaneously.

debug glbp terse

Chapter 451© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

y

Page 52: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary

Commonly used diagnostic commands for the Layer 2 switching process, VLANs and trunks are as follows:• show mac address-table

• show vlan

• show interfaces trunk• show interfaces trunk

• show interfaces switchport

• show platform forward interface

• traceroute mac

Important commands for gathering information about the status of STP and the corresponding topology are:status of STP and the corresponding topology are:• show spanning-tree [vlan vlan-id]

• show spanning-tree interface interface-id detail

Chapter 452© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 53: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.

Building the spanning tree has the following 4 main steps:1. Elect a Root Bridge/Switch

• This is based on the lowest Bridge-ID.

2. Select a Root Port on each non-Root Bridge/Switch• This is based on the least cost to Root.• Ties are broken based on the lowest upstream Bridge-ID.• Further ties are broken based on the lowest upstream Port-ID.

3 Elect a Designated port on each network segment3. Elect a Designated port on each network segment• This is based on the least cost to Root.• Ties are broken based the on the lowest upstream Bridge-ID.• Further ties are broken based on the lowest upstream Port ID• Further ties are broken based on the lowest upstream Port-ID.

4. Ports that ended up as neither a Root port nor a Designated port go into Blocking state, and the Root Ports and Designated ports move through Listening Learning and Forwarding states

Chapter 453© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

through Listening, Learning and Forwarding states.

Page 54: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.The consequences and corresponding symptoms of broadcast (or unknown MAC) storms are:

Th l d ll li k i th it h d LAN ill i kl t t The load on all links in the switched LAN will quickly start increasing as more and more frames enter the loop. If the Spanning Tree failure has caused more than one bridging

l t f t ffi ill i ti llloop to form, traffic will increase exponentially. When control plane traffic starts entering the loop, the devices

that are running these protocols will quickly start getting l d d d th i CPU ill h 100% tili tioverloaded and their CPU will approach 100% utilization.

Switches will experience very frequent MAC address table changes. Due to the combination of very high load on all links and the CPU

running at maximum load on Layer 3 switches or routers, these devices typically become unreachable, making it nearly i ibl t di th bl hil it i i

Chapter 454© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

impossible to diagnose the problem while it is in progress.

Page 55: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.

Three common EtherChannel problems are: Inconsistencies between the physical ports that areInconsistencies between the physical ports that are

members of the channel (a %EC-5-CANNOT_BUNDLE2 log message is generated)I i t i b t th t th it id f Inconsistencies between the ports on the opposite sides of the EtherChannel link (The switch will generate a %SPANTREE-2-CHNL MISCFG message)_

Uneven distribution of traffic between EtherChannel bundle members

Chapter 455© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 56: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.

Similarities between multilayer switches and routers include: Both routers and multilayer switches use routing protocolsBoth routers and multilayer switches use routing protocols

or static routes to maintain information about the reachability and direction to network destinations (prefixes), and record this information in a routing tableand record this information in a routing table. Both routers and multilayer switches perform the same

functional packet switching actions: p g1. Receive a frame, strip off the Layer 2 header.2. Perform a Layer 3 lookup to determine the outbound interface and

next hopnext hop.3. Encapsulate the packet in a new Layer 2 frame and transmit the

frame.

Chapter 456© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 57: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont. Differences between multilayer switches and routers include: Routers connect heterogeneous networks and support a wide variety of

di d i t fmedia and interfaces. Multilayer switches typically connect homogenous networks. Modern LAN

switches are mostly Ethernet. Multilayer switches utilize specialized hardware to achieve wire-speed

Ethernet-to-Ethernet packet switching. Low- to mid-range routers use multi-purpose hardware to perform the

k t it hipacket switching process. On average, the packet switching throughput of routers is lower than the

packet switching throughput of multilayer switches. Routers usually support a wider range of features, mainly because switches

need specialized hardware to be able to support certain data plane features or protocols.O f dd f h h f d

Chapter 457© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

On routers, you can often add features through a software update.

Page 58: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.

There are two main commands to check the CEF data structures:• show ip cef

• show adjacency

To extract information about the forwarding behavior of To extract information about the forwarding behavior of switches from the TCAMs on some of the common Cisco Catalyst series switches you can use the following commands:• show platform

• show mls cefshow mls cef

Chapter 458© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 59: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.

A multilayer switch provides three different core functions in a single device: Layer 2 switching within each VLAN Routing and multilayer switching between the local VLANs Routing and multilayer switching between the local VLANs

and one or more routed interfaces

Chapter 459© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 60: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.

The main differences between SVIs and router interfaces are as follows: A routed port is not a Layer 2 port. This means that on a

routed port typical Layer 2 protocols that are enabled by default such as Spanning Tree Protocol and Dynamicdefault, such as Spanning Tree Protocol and Dynamic Trunking Protocol (DTP), are not active. There is a direct relationship between the status of a routed p

port and the availability of the corresponding directly-connected subnet. When/if the port goes down, the corresponding connected route will immediately becorresponding connected route will immediately be removed from the routing table. The status of an SVI is directly related to its associated

Chapter 460© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

VLAN, wheras a routed port is not associated with a VLAN.

Page 61: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Summary – Cont.

Among first hop redundancy protocols, VRRP is the only standards based protocol, the only one that has the preempt option enabled by default, and also the only one that allows the virtual IP address to also be a real address assigned to one of the participating routersassigned to one of the participating routers. VRRP's default hello timer is 1 second as compared to

HSRP and GLBP's 3 second default hello timer. Among HSRP, VRRP, and GLBP, only GLBP makes use of

multiple routers in the group to do simultaneous forwarding (load balancing)(load balancing). With respect to debug, VRRP does not have the terse

option, but HSRP and GLBP do.

Chapter 461© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 62: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 4 Labs

Lab 4-1 Layer 2 Connectivity and Spanning Tree Lab 4-2 Layer 3 Switching and First-Hop RedundancyLab 4 2 Layer 3 Switching and First Hop Redundancy

Chapter 462© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public

Page 63: Chapter 4: Maintaining and TblhtiTroubleshooting Campus ... · Diagnose VLAN, VTP, and trunking problems using the IOS command line interface. Diagnose spanning tree and EtherChannel

Chapter 463© 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public