FBN Network

Documentation

Prepared for:

FBN Industries
1234 Main Street
Boulder, CO

Prepared by:

PC Consulting
4321 Main Street
Suite 500
Denver, CO 80209
303.123.4567
http://www.pcconsulting.com

1st Revision:
January 1, 2003

Inc. . Network Documentation for FBN 1 Table of Contents Overview 3 Equipment 3 Core 3 Distribution 3 Physical Topology 3 Server Room 3 Floor Closets 4 Logical Topology 4 VLANs 4 Network Addressing 4 Technical Considerations 5 Technical Considerations for Switches 5 Redundancy 5 Spanning Tree Protocol 6 STP Portfast Mode 6 Port VLAN Assignment 7 Trunk Creation 7 Native VLANs on Trunks 7 VTP 8 VTP Pruning 8 EtherChannel configuration 8 Technical Considerations for Routers 8 Redundancy 9 Helper Addresses 9 Classless IP Routing 9 Fast Switching 9 IPX Encapsulation 10 Standards 10 Closet Switches Port Speeds and Duplex 10 Core Switch Port Speeds and Duplex 10 Core Switch Port Names 10 PC Consulting.

. Inc. Network Documentation for FBN 2 VTP Configuration 11 Common Changes 11 Changing Speed and/or Duplex 11 Changing VLAN Membership of Ports 11 Adding Names to Ports on the Core Switch 12 Adding and Removing VLANs on the Network 12 Adding New Switches to the Network 13 Sample Configuration 14 Conclusion 18 Appendix A: Switch Information 19 PC Consulting.

These are not capable of providing in-line power. there are two spare Cat3524s and one spare Cat3548.0(5. These switches are also capable of providing in-line power to IP telephones. Each supervisor includes a Multi-layer Switch Feature Card 2 (MSFC2) for Layer 3 switching. All of the Cat3500s are running IOS v12. Each supervisor also includes two Gigabit Ethernet ports.5(3). each of which contains 16 Gigabit Ethernet ports. Core The core switch is a Cisco Catalyst 6509 with dual supervisors (in slots 1 and 2).) There are two 6348 blades (in slots 7 and 8). Equipment This section describes the new network equipment installed in the FBN network. There are three Catalyst 3524s. Physical Topology The following section describes the physical layout of the switches in the network. .2)XU. Distribution The closet switches are all Cisco Catalyst 3500-series switches. each of which has 24 Fast Ethernet ports and two Gigabit Ethernet ports. Server Room The server room contains the Cat6509 core switch. PC Consulting. and the MSFC2s are running IOS v12. and some servers also have Gigabit Ethernet interfaces that connect to the Cat6509. The servers connect to the Fast Ethernet ports on the Cat6509. Network Documentation for FBN 3 Overview This document contains detailed information about the network at the Boulder office of FBN Industries. There are also 14 Catalyst 3548s. The Cat6509 is running IOS v5. PC Consulting was contracted to install new LAN switches from Cisco Systems and provide documentation of the new network configuration. each of which has 48 Fast Ethernet ports and two Gigabit Ethernet ports.1(2)E Desktop Edition. Inc. (All of the Gigabit Ethernet ports require Gigabit Interface Converter (GBIC) modules for connectivity. along with the cabling. There are four 6416 blades (in slots 3 through 6). In addition to the 17 switches in production. each of which contains 48 Fast Ethernet ports.

168. Network Addressing IP and IPX are the two network protocols in use on the FBN network.0/24 86 1st Floor West 192. and all of the VLANs correspond to a single wiring closet.0/24 87 1st Floor East PC Consulting. the fiber connections terminate in the GigabitEthernet0/1 interfaces in the top and bottom switches in each closet. one Cat3524  3rd Floor West – four Cat3548s There are two active connections from the core switch to each closet. Logical Topology This section outlines the logical topology (Layer 3) of the FBN network. The closet layouts are as follows:  1st Floor East – two Cat3548s  1st Floor West – one Cat3548. Inc. inter-switch connections are made through GigaStack GBICs.168. The following table lists the IP and IPX networks assigned to various part of the FBN network: IP Network IPX Network Location/Purpose 192. There is also a test VLAN that is not routed to the rest of the network.86. The following are the VLAN assignments for the closets:  VLAN 86 – 1st Floor West  VLAN 87 – 1st Floor East  VLAN 88 – 2nd Floor West  VLAN 89 – 2nd Floor East  VLAN 91 – 3rd Floor East  VLAN 92 – 3rd Floor West  There are two VLANs used in the server room—VLANs 93 and 94. VLANs The FBN network is divided into several VLANs. In each closet. one Cat3524  3rd Floor East – two Cat3548s.87. In each closet. one Cat3524  2nd Floor East – two Cat3548s  2nd Floor West – three Cat3548s. rather than fiber. Network Documentation for FBN 4 Floor Closets Each closet contains several Cat3500 switches. The switches are linked together by connecting each switch to its two nearest neighbors (the switches directly above and below) in the closet. which is VLAN 100. which use short-distance copper cabling as a transport. .

Inc. the other power supply can support all of the power load. Should the active supervisor fail. which share the power load when both are on. If one of the power supplies fails or is removed.168.92.3.0/24 1003 Server Room 192. which act as the default gateway on each subnet. Technical Considerations This section contains information about the technical considerations that influenced the configurations of the switches and the routers.0/24 N/A Test VLAN – NOT ROUTED Each switch has an IP address assigned for management purposes. Redundancy The dual supervisors in the Cat6509 provide redundancy in the core switch. Router 1 (the primary HSRP router) uses the IP address .0/24 91 3rd Floor East 192.88.2 for each VLAN. The IP address for each switch is assigned from the VLAN for the closet in which it resides. The list of switches in Appendix A includes the IP address of each switch.168. Hot Standby Router Protocol (HSRP) is enabled on VLANs for failover between the two MSFC2s in the Cat6509.93.168.1 for each of the VLANs. and the other remains in standby mode.0/24 1002 Server Room 192. half of the switches in a closet use one fiber link.89.168. Technical Considerations for Switches The following considerations were taken into account when creating the switch configurations.168.0/24 88 2nd Floor West 192. The Cat6509 also contains dual power supplies. . and Router 2 (the secondary router) uses .0/24 89 2nd Floor East 192. Network Documentation for FBN 5 192. and the other half of the switches use the other PC Consulting. Only one supervisor is active at any time. the standby supervisor immediately takes over the switching functions of the Cat6509. They are configured such that all changes to the active supervisor configuration will also update the standby supervisor. Under normal operating conditions. all users should be able to access the network if any one cable fails or is removed.168.100. The virtual router IP address is .91. The trunks to the closet switches are redundant through use of the GigaStack modules that connect all of the switches in a closet together. With the two fiber connections back to the core from two different switches in the closet.94.0/24 92 3rd Floor West 192. The interruption to the network traffic should be less than one second. As a general rule. so failure of one blade should not affect any others.168. The only critical part of the Cat6509 that is not redundant is the backplane. Each interface blade in the Cat6509 is independent.

the switches automatically change over to the other fiber connection out of the closet. It is important to note that connecting switches via ports that are in portfast mode can be detrimental to the network. In order to optimize traffic and eliminate guesswork. This gives the middle switch in that closet two connections of equal cost to the core. If these things happen before a port is in the STP forwarding state. every port connected to an end station should be put into portfast mode. Therefore. This results in at least a 30-second delay in the station receiving any traffic. in which there are three switches. In that time.) The priority configured on the Cat6509 is 8192. STP permits Layer 2 networks to be built with loops while preventing the negative impact loops normally have. Selection of an appropriate root bridge will also minimize the impact of network failures on other parts of the network. the switch must cycle through listening and learning states before it can forward packets on those ports. To prevent the failure of any one blade in the Cat6509 from isolating a group of users. so it becomes active immediately. the two fiber connections from each closet connect to two independent blades. STP Portfast Mode By default. Therefore. Network Documentation for FBN 6 link. when the network is stable. network services can fail. Explicitly choosing a root bridge is important to ensure optimal path selection by STP. Spanning Tree Protocol The Spanning Tree Protocol (STP) is used by switches to detect and disable physical loops in the Layer 2 network. STP allows switches to calculate the structure of the network and disable ports as needed to eliminate loops. the port does not run STP. they are desirable for their fault tolerance capabilities. every Cat3500 should use the shortest path to reach the Cat6509. and the NetWare Client has tried to identify a logon server. while the default for the other switches is 32. The most important switch on any network is the STP root bridge. This failover requires a recalculation of the Spanning Tree Protocol. If a loop is introduced on a portfast port. When a port becomes active. In portfast mode. On the FBN network. Because the Cat6509 is the root bridge. usually DHCP has already attempted to lease an IP address.768. . Although loops are detrimental to Layer 2 networks. STP is enabled on all switch ports. The root bridge is the reference point for every other switch on the network to calculate STP. that switch has been explicitly configured to prefer the fiber link through the bottom switch in the closet. (Every VLAN has its own instance of STP. The only exception to this rule is in the 3rd Floor East closet. each closet switch prefers the most direct route to it. Only if there is a problem with that connection should a switch failover to the other fiber connection in the closet. A switch can be given preference in the root selection process by configuring it with a priority lower than that of all other switches on the network. Should either fiber link fail. which required about 45 seconds in testing. the switches may PC Consulting. Inc. the Cat6509 is configured to be the root bridge on all VLANs. rather than the top switch.

This change is configured manually on each switch. This allows VLANs to exist across multiple switches. Therefore.1q encapsulation for trunking. a switch includes VLAN information along with the frames that are sent from that port. This makes the ports become active faster when a host boots. They do need trunking explicitly configured on trunk ports. On the Cat6509. but the ports in blade 6 are in portfast mode. make sure the native VLAN is set to VLAN 1. For ease of administration. They use 802. so all switch ports must be assigned to other VLANs.1q trunk is in VLAN 1. Native VLANs on Trunks Trunks using the 802. When configured as a trunk. The only ports not assigned to VLANs are trunk ports (explained next). Trunk Creation By default. Cat3500 switches cannot auto-negotiate trunking. Generally this is the correct mode for all ports connecting to hosts. all switch ports are access ports. every port on a switch is in VLAN 1. so they require no configuration changes on their nontrunk ports. Whenever creating a trunk port. Inc. Port VLAN Assignment By default. If the loop is not disabled. which means they belong to only one VLAN. However. Network Documentation for FBN 7 not detect it and respond accordingly. this has not been changed on the trunk ports on the FBN network. VLAN 1 is not used for any ports in the FBN production network. as they are reserved for servers with Gigabit Ethernet Connections. if an 802. frames for every other VLAN are tagged with the appropriate identifying information. the default trunking configuration is to auto-negotiate. the network will likely suffer a debilitating broadcast storm. This is done for every host port on the closet switches and the core switch. All of the Fast Ethernet ports on all of the switches are set to portfast mode. it is important to note this setting for future changes to the network. making them activate more quickly. The default native VLAN for all ports is VLAN 1. On the Cat6509. Nontrunk ports (such as those that connect to servers) should be configured with trunking explicitly off. PC Consulting. Ports that are to be trunk ports should all be explicitly configured as well. All inter-switch connections on the FBN network are configured as trunks. then all frames for VLAN 1 sent on that port are not tagged.1q trunking protocol only tag frames that are not in the native VLAN of the port. the Gigabit Ethernet ports in blades 3 and 4 are included in STP. Connections between switches can be configured as access ports or trunk ports. However. which is an open standard. For example. it is important that two switches that share a trunk are configured with the same native VLAN on directly connected interfaces. All of the Gigabit Ethernet ports on all of the Cat3500s are included in STP (they are not in portfast mode). .

they can be bonded to provide twice the bandwidth (effectively 4 Gbps. which makes troubleshooting easier. including its name. There can be an unlimited number of VTP servers on a network. so there should be no traffic on it. the Cat6509 switch is the only VTP server. Network Documentation for FBN 8 VTP Switches can share VLAN information with each other using the VLAN Trunking Protocol (VTP). thereby increasing the bandwidth available between the switches. and every Cat3500 switch is a VTP client. This way. This behavior is inefficient and defeats some of the purpose of creating VLANs. Therefore. so this functionality is explicitly turned off on all ports. If a switch has ports in VLAN 91. If there is a broadcast storm on any one subnet. it requests traffic for VLAN 91. However. only required traffic crosses the trunk. The FBN network is not using EtherChannels. By default. Cat3500 switches cannot auto-negotiate EtherChannels. This saves time and effort. if two Gigabit Ethernet ports on one switch connect to two Gigabit Ethernet ports on another switch. VLAN 1 is not used for any production subnets at FBN. EtherChannel configuration EtherChannels allow two adjacent Cisco switches to exchange traffic over more than one physical interface. all VLANs must be created on the Cat6509 before any ports on any switch can be made members of the VLANs. PC Consulting. the default behavior is to send traffic from every VLAN across every trunk. it requests that VLAN 92 be pruned by the upstream switch. every VLAN would have to be configured on every switch. The one exception to pruning is VLAN 1. For example. that traffic would cross every trunk port on the network. all ports on a Cat6509 switch are set to auto-negotiate EtherChannels. If it has no ports in VLAN 92. This prevents delays in the time it takes the ports to become active. because without VTP. On the FBN network. Inc. VTP carries VLAN information across trunking interfaces of adjacent switches. so they require no configuration changes to disable EtherChannels. VTP transfers useful information about each VLAN. but it is a good idea to limit the exposure to VLAN changes. VTP Pruning When using trunks to carry traffic for multiple VLANs between switches. VLAN information can be updated only on VTP servers. since the ports are running in full duplex mode). . Technical Considerations for Routers The following considerations were taken into account when creating the router configurations. VTP pruning allows the switches to communicate which VLANs they need to receive traffic for. using significant bandwidth. VLAN 1 is used for control purposes and can never be pruned.

) Having both routers active offers the advantage that the routers and switches can failover independently of each other. the router looks for any routes to any part of the classful network to which the packet is destined. The configuration of the helper address is required on the VLAN interface for every other VLAN. The virtual IP address is configured to be the default gateway on every VLAN. it will forward the packet via the default route. If either MSFC2 fails. To prevent extra protocol traffic from being forwarded. the router checks if any routes match the destination of the packet. because they are generally configured with only one default gateway. First. having two routers poses no problem. (The default depends on the version of IOS on a router. as traffic destined for other VLANs simply has two possible routers to go through. If not. If a packet arrives for which the router has no matching route. DHCP packets need to be forwarded to the DHCP server on VLAN 94. For information about the IP addresses in use. When a router is using classless routing. For IP and IPX. However. After a packet is routed the first time two hosts exchange traffic. Inc. for which only one supervisor is active. the PC Consulting. classless routing is preferable. see the “Network Addressing” section earlier in this document. if the classful network has one or more subnet routes. the router discards the packet rather than forwarding it. both MSFC2s are active concurrently. this can be a problem. additional packets with the same header information will not be processed by the MSFC2. Instead. Cisco routers use the Hot Standby Router Protocol (HSRP) to share virtual IP and MAC addresses. the unnecessary this is explicitly disabled in the router configurations—only DHCP traffic should be forwarded. the other router still answers for the virtual IP address. Classless IP Routing Cisco routers can make routing decisions using two different methods—classful and classless. its routing decisions are very simple. Cisco routers forward eight protocols to those addresses by default. However. When a router is using classful IP routing. On the FBN network. Helper Addresses In order to use DHCP across IP subnets. If no such routes are found. it follows a more complicated procedure when making routing decisions. helper addresses must be configured on the router interfaces attached to subnets that do not have a DHCP server of their own. (This differs from the switching software. Fast Switching Fast switching allows the 6509 to take advantage of the Layer 3 Switching feature of the IOS. the packet is sent via the default route. Network Documentation for FBN 9 Redundancy In a Cat6509 switch with dual supervisors and dual MSFC2s.) In most cases. so client machines can still route through their default gateways. for non-routing IP hosts on the networks. In order to allow these hosts to communicate via their configured default gateway. . When configured with helper addresses. and it is the default in the IOS on the FBN MSFC2s.

As necessary. which is the default on Cisco routers. odd-length IPX packets need to be padded to be received by hosts. . Although port names are not required for proper operation of the switch. this information can be extremely helpful when troubleshooting. the port configurations should be changed manually. Therefore. IPX Encapsulation The FBN IPX traffic uses 802. This should be done for any other ports that do not function correctly in autosensing mode. and these have been changed manually. all of the Fast Ethernet ports have been configured to operate at 100Mbps and full duplex by default. This can be a problem in some environments. Therefore. the port name is the name of the server or closet switch to which the port connects. PC Consulting. Closet Switches Port Speeds and Duplex On all Cat3500 closet switches. In most cases. the packets cannot receive any special processing from the router IOS.3 encapsulation. At FBN. For all hosts that will not work at 100Mbps and full duplex. Core Switch Port Speeds and Duplex On the Cat6509 core switch. and it is enabled by default. Network Documentation for FBN 10 switching cache can determine which port should receive the frame. and every effort should be made to ensure that they are followed as the network changes. It is strongly recommended that FBN continue to keep this information updated. In the case of Novell networks. Inc. It is important to verify the speed and duplex requirements of every host to be connected to the core switch. so it can be fast switched. Standards This section describes the standards that have been created for the FBN network. all used ports have been configured with descriptive port names that indicate their purpose. almost all interfaces have been configured for autosensing speed and duplex. ports can be configured with named. This can be done in the router. even across VLANs. Because fast switching prevents the MSFC2 from processing packets. this setting does not need to be changed for IP. These have been followed in the migration to the new network. Fast switching speeds the traffic between VLANs. the ‘ipx network’ interface configuration command does not need to specify the encapsulation. a few ports have been manually configured to a particular speed and duplex. Some of the ports currently in use require other settings. but IPX fast switching must be explicitly disabled. The IP traffic at FBN should not require any special processing by the MSFC2. but it may result in problems for some hosts. Core Switch Port Names On the Cat6509 core switch. This should work fine with most end stations.

End with CNTL/Z. End with CNTL/Z. . The core switch is the only VTP server. Inc. use the following commands: FBN-3548-1e-1#configure terminal Enter configuration commands. FBN-3548-1e-1(config)#interface FastEthernet 0/1 FBN-3548-1e-1(config-if)#speed 10 FBN-3548-1e-1(config-if)#duplex half FBN-3548-1e-1(config-if)#end FBN-3548-1e-1#copy running-config startup-config Destination filename [startup-config]? Building configuration. you must enter interface configuration mode for the interface for which you wish to change the settings. Common Changes This section describes changes that are common to many networks and how they should be handled on the FBN network. To change the speed and/or duplex settings of the interface. All new switches added to the network should be configured with this information. To change the VLAN membership of the interface. Network Documentation for FBN 11 VTP Configuration The VTP domain on the network is ‘fbn’. in which case VLAN changes could be made from either VTP server on the network. it could be configured as a VTP server. use the following configuration commands: FBN-3548-1e-1#configure terminal Enter configuration commands. you can change the speed and/or duplex of more than one port at a time by specifying a port range with these commands. Any new closet switches should also be configured as VTP clients only. Changing Speed and/or Duplex On the Cat3500 closet switches. one per line.. FBN-6509-Core > (enable) set port duplex 8/40 half Port(s) 3/9 set to half-duplex. FBN-3548-1e-1# On the Cat6509 core switch. FBN-6509-Core> (enable) On the Cat6509. and a VTP password is in use on that domain. one per line. FBN-3548-1e-1(config)#interface FastEthernet 0/1 FBN-3548-1e-1(config-if)#switchport access vlan 100 FBN-3548-1e-1(config-if)#end FBN-3548-1e-1#copy running-config startup-config PC Consulting. all other switches are VTP clients. If another core switch is added. use the following commands to change the speed and/or duplex settings of particular ports: FBN-6509-Core> (enable) set port speed 8/40 10 Port(s) 3/9 speed set to 10Mbps. Changing VLAN Membership of Ports On the Cat3500 closet switches.. you must enter interface configuration mode for the interface for which you wish to change the settings.

. use the following command to change the VLAN membership of a particular port: FBN-6509-Core> (enable) set vlan 100 8/40 VLAN 100 modified. those ports will be immediately disabled when the VLAN is removed. the Cat6509 core switch is the only VTP server. Network Documentation for FBN 12 Destination filename [startup-config]? Building configuration. VLAN 94 modified. it is a good idea to use descriptive names for all VLANs. If any switch has ports in that VLAN. enter the following command: FBN-6509-Core> (enable) set port name 8/40 NewServer FBN-6509-Core> (enable) Adding and Removing VLANs on the Network New VLANs can only be added to a VTP server. you can change the VLAN membership of more than one port at a time by specifying a port range with this command. On the FBN network. and enter the following command: FBN-6509-Core> (enable) clear vlan 150 This command will deactivate all ports on vlan 150 in the entire management domain Do you want to continue(y/n) [n]?y Vlan 150 deleted FBN-6509-Core> (enable) This command removes the VLAN from all switches on the network. PC Consulting. Adding Names to Ports on the Core Switch Port names are used only on the Cat6509 core switch..8/40 15/1 FBN-6509-Core> (enable) On the Cat6509. Once this command is entered. VLAN Mod/Ports ---. and the other switches are all VTP clients. . Inc.4/1-6.----------------------- 100 3/1-6. all switches on the network should show the new VLAN in their VLAN databases. To delete a VLAN. To change the name of a port on the Cat6509. Therefore. FBN-3548-1e-1# On the Cat6509 core switch. to create new VLANs. use the following command on the Cat6509: FBN-6509-Core> (enable) set vlan 150 name NewVLAN Vlan 150 configuration successful FBN-6509-Core> (enable) Although a VLAN name is optional. make sure that no ports remain in that VLAN on any switches.

Exiting. but it is required to use any VLAN other than VLAN 1 for management purposes. and it is updated using the following commands: FBN-3548-1e-3#vlan database FBN-3548-1e-3(vlan)#vtp client Setting device to VTP CLIENT mode. PC Consulting. There is a special mode called the VLAN database mode. such as the appropriate place to use it. The following properties should all be configured on every new switch:  Host name  Telnet and enable passwords  Speed and duplex on every Fast Ethernet port  VLAN of every Fast Ethernet port  Trunk configuration on Gigabit Ethernet port(s). Network Documentation for FBN 13 Adding New Switches to the Network When adding new switches to the network. FBN-3548-1e-3(vlan)#exit In CLIENT state. including 802. along with IP address  Default IP gateway It is important to note that the configuration of the management VLAN interface requires the use of the ‘management’ configuration command... FBN-3548-1e-3# It is important to note that because the VLAN database is independent of the switch configuration. the ‘management’ command must still be entered manually. This command enables the VLAN interface in question and shuts down the VLAN 1 interface. because otherwise new switches will not have the appropriate VLANs available to them.1q encapsulation  Management VLAN interface. Attempting to shutdown the VLAN 1 interface with the ‘shutdown’ command does not have the desired result. Inc. make sure that they are configured to the standards listed in this document. In addition to the configuration changes. It is important that this information be updated to match the rest of the network.) Please see the sample configuration for the Cat3524s for additional information on the ‘management’ configuration command. the VTP settings on new switches must be updated. erasing the configuration has no effect on the VLAN database. This is done outside of the configuration for Cat3500s. . if the old switch dies and is being replaced). no apply attempted.. (This is the only way to accomplish these tasks. If a configuration from another switch is pasted into a new switch (for example. FBN-3548-1e-3(vlan)#vtp domain fbn Changing VTP domain name from NULL to fbn FBN-3548-1e-3(vlan)#vtp password rusleeping Setting device VLAN database password to rusleeping. This command does not appear in the configuration.

255. Network Documentation for FBN 14 Sample Configuration This section contains a sample configuration from FBN-6509-Core.0.10.10. . set spantree priority 8192 1 Set the STP priority for this switch to 8192 set spantree priority 8192 86 set spantree priority 8192 87 (sufficient to be the root bridge) for each VLAN. and the switch will prompt for passwords.94. set spantree priority 8192 88 set spantree priority 8192 89 set spantree priority 8192 91 PC Consulting.0.0 10. Only frames from the VLANs required by each closet switch will be forwarded to that switch. set vtp passwd fbn set vtp pruning enable Enables VTP pruning.94.255 Set the management interface (sc0) IP address.0/0. set system highavailability enable Enable the automatic update of the configuration of the standby supervisor.0 10. Passwords are encrypted. (VLAN 1 is the default VLAN and is 100086 state active automatically added by the switch. Per the Cisco default. only the non-default configuration commands are listed. set system name FBN-6509-Core Set the host name of the switch. This feature prevents VLAN traffic from being forwarded unnecessarily across trunk links.255.94.) set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active stp ibm set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state active mode srb aremaxhop 7 stemaxhop 7 backupcrf off set interface sc0 94 10.10. set vlan 1 name default type ethernet mtu 1500 said 100001 Configure the Ethernet VLANs in use on the FBN state active set vlan 86 name 1st-Floor-West type ethernet mtu 1500 said network.5/255. enter these commands without typing a password. set ip route 0. set password $2$kKsj4kelSvnmwoo7prja02jv Set the console/telnet password and the enable set enablepass $2$ao5H2pbmz/wLow2kajoOKjjwq02L (privileged access) passwords.0. begin Automatically added by the switch. so configuration changes affect both supervisors. set vtp domain FBN Set the VTP domain name and domain password. To change passwords. Inc. (These are the 101002 state active set vlan 1004 name fddinet-default type fddinet mtu 1500 said configurations for the default VLANs for other 101004 state active stp ieee media types.1 Configure a default route for the management interface.) set vlan 87 name 1st-Floor-East type ethernet mtu 1500 said 100087 state active set vlan 88 name 2nd-Floor-West type ethernet mtu 1500 said 100088 state active set vlan 89 name 2nd-Floor-East type ethernet mtu 1500 said 100089 state active set vlan 91 name 3rd-Floor-East type ethernet mtu 1500 said 100091 state active set vlan 92 name 3rd-Floor-West type ethernet mtu 1500 said 100092 state active set vlan 93 name Server-Net93 type ethernet mtu 1500 said 100093 state active set vlan 94 name Server-Net94 type ethernet mtu 1500 said 100094 state active set vlan 100 name TestNetwork type ethernet mtu 1500 said 100100 state active set vlan 1002 name fddi-default type fddi mtu 1500 said Automatically added by the switch.0. Each line of the configuration is also includes a comment with important information about that command.

set mls enable ipx Automatically added by the switch.) set port channel 3/13-16 7 set port channel 4/1-4 8 set port channel 4/5-8 9 set port channel 4/9-12 10 set port channel 4/13-16 11 set port channel 5/1-4 12 set port channel 5/5-8 13 set port channel 5/9-12 14 set port channel 5/13-16 15 set port channel 6/1-4 16 set port channel 6/5-8 17 set port channel 6/9-12 18 set port channel 6/13-16 19 set port channel 7/1-4 20 set port channel 7/5-8 21 set port channel 7/9-12 22 set port channel 7/13-16 23 set port channel 7/17-20 24 set port channel 7/21-24 25 set port channel 7/25-28 26 set port channel 7/29-32 27 set port channel 7/33-36 28 set port channel 7/37-40 29 set port channel 7/41-44 30 set port channel 7/45-48 31 set port channel 8/1-4 32 set port channel 8/5-8 33 set port channel 8/9-12 34 set port channel 8/13-16 35 set port channel 8/17-20 36 set port channel 8/21-24 37 set port channel 8/25-28 38 set port channel 8/29-32 39 set port channel 8/33-36 40 set port channel 8/37-40 41 set port channel 8/41-44 42 set port channel 8/45-48 43 set port name 3/1 1st-East-1 Set the port name for each port on module 3.1q trunking on all ports on module 3. set summertime enable CDT set boot config-register 0x2 Set the boot settings for the switch. These are not set port channel 3/9-12 6 used on the FBN network.5-5-3. set trunk 3/2 on dot1q 1-1005 set trunk 3/3 on dot1q 1-1005 set trunk 3/4 on dot1q 1-1005 set trunk 3/5 on dot1q 1-1005 set trunk 3/6 on dot1q 1-1005 set trunk 3/7 on dot1q 1-1005 set trunk 3/8 on dot1q 1-1005 set trunk 3/9 on dot1q 1-1005 set trunk 3/10 on dot1q 1-1005 set trunk 3/11 on dot1q 1-1005 set trunk 3/12 on dot1q 1-1005 set trunk 3/13 on dot1q 1-1005 set trunk 3/14 on dot1q 1-1005 PC Consulting. set port name 3/2 1st-West-1 set port name 3/3 2nd-East-1 set port name 3/4 2nd-West-1 set port name 3/5 3rd-East-1 set port name 3/6 3rd-West-1 set trunk 3/1 on dot1q 1-1005 Enable 802. Network Documentation for FBN 15 set spantree priority 8192 92 set spantree priority 8192 93 set spantree priority 8192 94 set spantree priority 8192 100 set timezone CST -6 0 Configure the clock settings. (The port ! set port channel 3/1-4 4 channel commands establish the administrative set port channel 3/5-8 5 groups for use with EtherChannels.bin file name of the IOS in bootflash. . including the set boot system flash bootflash:cat6000-supcv. Inc.

.6/15 Set the VLAN for the ports on module 6.7/11-21. These two blades contain all of the trunk connections between switches. set port speed 7/3. set trunk 6/4 off negotiate 1-1005 set trunk 6/5 off negotiate 1-1005 set trunk 6/6 off negotiate 1-1005 set trunk 6/7 off negotiate 1-1005 set trunk 6/8 off negotiate 1-1005 set trunk 6/9 off negotiate 1-1005 set trunk 6/10 off negotiate 1-1005 set trunk 6/11 off negotiate 1-1005 set trunk 6/12 off negotiate 1-1005 set trunk 6/13 off negotiate 1-1005 set trunk 6/14 off negotiate 1-1005 set trunk 6/15 off negotiate 1-1005 set trunk 6/16 off negotiate 1-1005 set spantree portfast 6/1-16 enable All ports on module 6 are in STP portfast mode.7/11-21. The ports on module 6 connect to the servers with Gigabit Ethernet NICs. Network Documentation for FBN 16 set trunk 3/15 on dot1q 1-1005 set trunk 3/16 on dot1q 1-1005 set port channel 3/1-16 mode off Disable auto-negotiation of EtherChannels on all ports on module 3. set port channel 6/1-16 mode off Disable auto-negotiation of EtherChannels on all ports on module 6.7/8. Inc.7/27-28. PC Consulting. (This module is currently unused.7/29-47 100 Ethernet) ports on module 7.7/23-26.7/23-26. set vlan 89 7/47 Set the VLAN for the ports on module 7. set port name 6/1 Server_01 Set the port name for each port on module 6 in use.7/9-10.) set vlan 93 6/1-4. full set port name 7/3 Firewall Set the port name for each port on module 7 in use.7/48 10 Set the port speed and duplex for the (Fast set port speed 7/1-2. (The previous commands to configure the ports on module 3 are repeated for the other ports on modules 4.7/22.7/4-5. The set vlan 92 7/48 set vlan 93 7/1-46 ports on module 7 connect to hosts in the server room.7/4-5. set port name 7/4 Gateway_01 set port name 7/5 Fax Server set port name 7/6 Server A set port name 7/7 Server B set port name 7/8 Server C set port name 7/9 Server D set port name 7/10 Server E set port name 7/11 Server F set port name 7/12 Server G set port name 7/13 Server H set port name 7/14 Server I set port name 7/16 Server J set port name 7/17 Server K set port name 7/18 Server L set port name 7/19 Server M set trunk 7/1 off negotiate 1-1005 Disable auto-negotiation of trunks on all ports on set trunk 7/2 off negotiate 1-1005 set trunk 7/3 off negotiate 1-1005 module 7.7/8.7/29-47 match the settings of the servers. These settings should set port duplex 7/1-2.) set port channel 5/1-16 mode off Disable auto-negotiation of EtherChannels on all ports on module 5.7/6-7. set port name 6/2 Server_02 set port name 6/3 Server_03 set port name 6/4 Router set trunk 6/1 off negotiate 1-1005 Disable auto-negotiation of trunks on all ports on set trunk 6/2 off negotiate 1-1005 set trunk 6/3 off negotiate 1-1005 module 6. STP will not run on these ports.

) end Automatically added by the switch. This document or another one with this type of information should continue to be updated as changes are made to the network. Network Documentation for FBN 17 set trunk 7/4 off negotiate 1-1005 set trunk 7/5 off negotiate 1-1005 set trunk 7/6 off negotiate 1-1005 set trunk 7/7 off negotiate 1-1005 set trunk 7/8 off negotiate 1-1005 set trunk 7/9 off negotiate 1-1005 set trunk 7/10 off negotiate 1-1005 set trunk 7/11 off negotiate 1-1005 set trunk 7/12 off negotiate 1-1005 set trunk 7/13 off negotiate 1-1005 set trunk 7/14 off negotiate 1-1005 set trunk 7/15 off negotiate 1-1005 set trunk 7/16 off negotiate 1-1005 set trunk 7/17 off negotiate 1-1005 set trunk 7/18 off negotiate 1-1005 set trunk 7/19 off negotiate 1-1005 set trunk 7/20 off negotiate 1-1005 set trunk 7/21 off negotiate 1-1005 set trunk 7/22 off negotiate 1-1005 set trunk 7/23 off negotiate 1-1005 set trunk 7/24 off negotiate 1-1005 set trunk 7/25 off negotiate 1-1005 set trunk 7/26 off negotiate 1-1005 set trunk 7/27 off negotiate 1-1005 set trunk 7/28 off negotiate 1-1005 set trunk 7/29 off negotiate 1-1005 set trunk 7/30 off negotiate 1-1005 set trunk 7/31 off negotiate 1-1005 set trunk 7/32 off negotiate 1-1005 set trunk 7/33 off negotiate 1-1005 set trunk 7/34 off negotiate 1-1005 set trunk 7/35 off negotiate 1-1005 set trunk 7/36 off negotiate 1-1005 set trunk 7/37 off negotiate 1-1005 set trunk 7/38 off negotiate 1-1005 set trunk 7/39 off negotiate 1-1005 set trunk 7/40 off negotiate 1-1005 set trunk 7/41 off negotiate 1-1005 set trunk 7/42 off negotiate 1-1005 set trunk 7/43 off negotiate 1-1005 set trunk 7/44 off negotiate 1-1005 set trunk 7/45 off negotiate 1-1005 set trunk 7/46 off negotiate 1-1005 set trunk 7/47 off negotiate 1-1005 set trunk 7/48 off negotiate 1-1005 set spantree portfast 7/1-48 enable All ports on module 7 are in STP portfast mode. . Inc. These two blades contain the connections for servers. (The previous commands to configure the ports on module 7 are repeated for the other ports on module 8. PC Consulting. STP will not run on these ports. set port channel 7/1-48 mode off Disable auto-negotiation of EtherChannels on all ports on module 7. Conclusion The information contained in this document reflects the state of the FBN network after the installation of the new Cisco infrastructure by PC Consulting.

.10.88.8 4/4 FBN-3548-3e-1 10.89.10.6 FBN-3548-2w-3 10.10.5 3/4 FBN-3548-2w-2 10.6 4/3 FBN-3548-2w-1 10.88.6 4/1 FBN-3548-1w-1 10.89.92.5 3/3 FBN-3548-2e-2 10.5 3/6 FBN-3548-3w-2 10.5.6 FBN-3548-3w-3 10.5 3/1 FBN-3548-1e-2 10.6 4/2 FBN-3548-2e-1 10.10.87.10.10.5 3/5 FBN-3548-3e-2 10.10. and its IP address 10.10.10.91.10. The following is the information for the Cat3500 closet switches: Connection Name IP Address at Core FBN-3548-1e-1 10.92.7 FBN-3524-2w-4 10.92.7 4/5 FBN-3548-3w-1 10.92.10.10.88.91.10.88. Inc.5 3/2 FBN-3524-1w-2 10.86.8 4/6 PC Consulting.86. Network Documentation for FBN 18 Appendix A: Switch Information The Cat6509 core switch is named FBN-6509-Core.87.6 FBN-3524-3e-3 10.91.94.7 FBN-3548-3w-4 10.10.10.10.10.10.