Cisco Dual Layer Configuration

Summary


Dual Layer Networking prepared to ensure LAN’s traffic flow among themselves without reaching Antikor v2.
If any client which in a LAN wants to reach an external address, it shall get service from Antikor v2 otherwise it wants to reach an internal but different LAN, it will suffice to get service from backbone switch.

Network Topology

image

Configuration

The configurations these are required for the backbone switch shown below:

Spine Switch

Building configuration...

Current configuration : 1599 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Spine_Switch
!
ip routing
!
spanning-tree mode pvst
!
!
interface FastEthernet0/1
 switchport trunk allowed vlan 100-102
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet0/1
 description Antikor
 switchport trunk allowed vlan 100-102
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan100
 description Engineer
 ip address 10.33.100.1 255.255.255.0
!
interface Vlan101
 description Architect
 ip address 10.33.101.1 255.255.255.0
!
interface Vlan102
 description Administrative
 ip address 10.33.102.1 255.255.255.0
!
ip classless
!
ip flow-export version 9
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
end

Faculty of Engineering and Architecture Switch:

Note: Depending on demand, more endpoints can be carried as many times as desired.

Building configuration...

Current configuration : 1562 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Engineer_Architecture 
!
!
!
!
ip routing
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/1
 switchport trunk allowed vlan 100-102
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface FastEthernet0/2
 switchport access vlan 100
!
interface FastEthernet0/3
 switchport access vlan 101
!
interface FastEthernet0/4
 switchport access vlan 102
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan100
 description Engineer
 ip address 10.33.100.2 255.255.255.0
!
interface Vlan101
 description Architect
 ip address 10.33.101.2 255.255.255.0
!
interface Vlan102
 description Administrative
 ip address 10.33.102.2 255.255.255.0
!
ip classless
!
ip flow-export version 9
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end

Testing

When we run traceroute from PC 2 to PC 0, we saw that the traffic did not go as far as Antikor v2 and turn around to right destination Network from Backbone Switch.

image

Please follow Antikor v2 Dual Layer Configurations Manual for required settings on the Antikor v2 side.

Troubleshooting

Executing Command Error Message Solution Proposal
ping 10.2.1.2 — Ping statistics for 10.0.0.1 — 5 packets transmitted, 0 packets received, 100.0% packet loss Check the status of the ports.
    Review VLAN settings.

ePati Cyber Security Co.

Mersin Üniversitesi Çiftlikköy Kampüsü
Teknopark İdari Binası Kat:4 No: 411
Posta Kodu: 33343
Yenişehir / Mersin / TURKEY

Web: www.epati.com.tr
e-Mail: info@epati.com.tr
Tel: +90 324 361 02 33
Fax: +90 324 361 02 39