VLAN Knowledge:

-

Virtual LAN (VLAN), Trunk and VTP

1) One VLAN is one broadcast domain.

2) Address Space ( Easy to summarization ).

3) Access port, Trunk port and Voice VLAN port.

4) Trunk can carry multiple VLAN frames. If you have only one switch, you don't need to use trunk link.

5) If you have multiple switches and VLANs, you can use trunk link by connecting Switch to Switch and Switch to Router. 

6) Cisco Switch uses ISL ( inter switch link ) and IEEE uses 802.1Q. Now a day, cisco devices do not support the ISL.


VLAN Membership:

1) Static VLAN ( Can add port into the VLAN by manually ).

2) Dynamic VLAN ( Can assign VLAN using VLAN membership policy server- VMPS server ).

3) Voice VLAN.


Native VLAN and VLAN Ranges:

- Cisco switch can use VLAN range ( 1-4094 )

- Normal Range is 1-1005 and Extended VLAN range 1006-4094.

- VLAN 1 is the native VLAN.


VLAN Trunking Protocol (VTP)

- Older protocol of cisco device. 

- Can exchange information among the switches.

- Three VTP modes are: Server mode, Client mode and Transparent mode.

- Using VTP Pruning can reduce the traffic which is unnecessary.





Comments

Post a Comment

Popular posts from this blog

FortiGate-100D: EXT2-fs(sdb1):previous I/O error to superblock detection

-
When you are facing the issues that the kernel errors something like firewall is rebooting auto or outage of power supply accidently. So all the LAN interfaces shut down in the firewall. Problem: The errors will be like this: EXT2-fs(sdb1):previous I/O error to superblock detected. EXT2-fs(sdb1):previous I/O error to superblock detected. EXT2-fs(sdb1):previous I/O error to superblock detected. Troubleshooting Commands: 1) Try to get the debug logs https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-download-debug-log-file-at-different/ta-p/193211 2) Get the result details #get hardware status #get system status #get system performance status # diagnose sys flash list # diagnose autoupdate status # diagnose autoupdate versions # diag debug crashlog read # diagnose hardware sysinfo memory # diagnose hardware sysinfo shm # diagnose hardware sysinfo slab # diagnose debug crashlog read # diagnose hardware deviceinfo disk # diagnose sys session stat Resolution: The issue is res...
Read more

SFTP (CrushFTP serevr) renew Certificate

-
Image
  SFTP (CrushFTP serevr) renew Certificate 1.        Use a certificate issued legitimately from CA (Sectigo) 2.        Generate PFX file via IIS  Manager Ensure the file type is *.pfx Password: star_photostriker 3.        Copy file over to SFTP server 4.        Convert PFX file to jks 5.     keytool -importkeystore -srckeystore mypfxfile.pfx -srcstoretype pkcs12 -destkeystore identity.jks -deststoretype JKS    6.   Login into CrushFTP web console 7.      Go to navigate to Preferences, Encryption and open the SSL tab. Click on the Import Reply button   8.        Input Keystore Path and Keystore Password   9.        Click on the Browse button next to the Import Certificate Authority Reply File and upload the certific...
Read more

Check the cisco device MAC address and IP address

-
 To check the cisco device MAC address and IP address C2960#sh mac address-table interface gi1/0/3  and C2960#sh mac address-table address 2894.0f64.0340  Mac Address Table ------------------------------------------- Vlan    Mac Address       Type        Ports ----    -----------       --------    -----  413    2894.0f64.0340    DYNAMIC     Gi1/0/3 ========================================================= C2960#sh ip arp 2894.0f64.0340 Protocol  Address          Age (min)  Hardware Addr   Type   Interface Internet  191.65.230.30          154   2894.0f64.0340  ARPA   Vlan413
Read more