LAN design - how to implement a core switch?

Hi all,
First post here so please be gentle :-)
I'm looking for a bit of advice with a LAN setup I've been tasked with.
The basic requirements are to have a demonstration suite of servers/storage devices networked with internet access with certain devices segmented in different VLANs. Also, a separate VLAN is required for training and meeting rooms which will receive DHCP addresses from a WIN2K3 server.
The kit I've inherited consists of:
1 ADSL Modem/Router
1 2611XM router
2 Catalyst 4006 switches with Supervisor II engines (CatOS :-( ), one with a layer 3 routing module
Several Catalyst 2950/3500xl switches
Netscreen 100 Firewall
F5 Firepass for VPN
After a lot of fun resetting devices I've currently setup the LAN with a router on a stick configuration which routes between different VLANs (on the 3500/2950s) and which has internet access via the 2611 and ADSL modem router in turn. That's about as far as my current knowledge goes I'm afraid!
What I have to do is incorporate the 4006s but I don't really know how to go about it or what's the best way to use them. How would I use them as core switches?
I was hoping someone could point me in the right direction on the best way to connect the switches up, i.e. network design, cabling (fibre uplinks between switches) and some basic configuration advice with the layer 3 routing module.
Any advice will be most appreciated!! It's my first networking job and I'm a bit lost.
Thanks.

Peter,
I would do the same - with a twist...
Have 1 4006 as a VTP server, also the spanningtree root for all vlans.
Have a trunk between the two 4006's - and make it an etherchannel 2 or 3 ethernet links (redundancy).
Make the second 4006 also a vtp server (redundancy) and have that 4006 the secondary 4006 for spanningtree (more redundancy!)
That way if you decide to have a distribution layer - you have 2 uplinks into the core 1 into 4006-1 as the primary, and the second 4006-2 as the secondary.
You could then have a trunk (etherchannel) between the distribution switches, then have a access layer into the distribution layer with duel links. This way you could have multiple switch and or link failures and still work!!!
You use the layer 3 module to do the inter-vlan routing - correct. Then have your adsl modem/router as the gateway to the internet - you put a default route in the layer 3 module point to the adsl modem! then you have the routes for the various vlan subnets pointing from the modem back to the layer 3 module......done!
HTH.

Similar Messages

How to implement the query switch?

Hi all:
could you please tell me how to do query switch , for example, as I click on the characteristic field , then the query switch to another query or ABAP report ?
thank you very much

Hi Sony,
if i really understood you, you will like to jump from one query to an ABAP Report or another Query.
Here are the steps:
1.Run T-code RSBBS.
2.In the One Query tab enter the technical name of the Query
3. In the One Query tab select or enter a technical name of a query
4. Click on the create Button
5. Select one Report type: u201CABAP Reportu201D
6. n the tab Target System: u201CLocalu201D
7.Enter the Report Title
8. Click on save
9. Execute your Query in Bex Analyzer
10.Right-click on any value in the table --> Choose Goto
I hope it could be helpful.
BR
Gilo

How to create a Access list on core switch to bloxk all Internet Traffic & allow some specific Internet Traffic

Hellp Everyone,
I am trying to create a Access-List on my Core Switch, in which I want to allow few internet website & block the rest of them.
I want to allow the whole Intranet but few intranet websites also needs access to the internet.
Can we create such Access-List with the above requirement.
I tried to create the ACL on the switch but it blocks the whole internet access.
i want to do it for a subnet not for a specific IP.
Can someone help me in creating such access list.
Thanks in Advance

The exact syntax depends on your subnets and how they connect to the Internet. If you can share a simple diagram that would be much more informative.
In general just remember that access-lists are parsed from the top down and as soon as a match is found, the processing stops. So you put the most specific rules at the top. also, once you add an access-list, there is an implicit "deny any any" at the end.
The best approach is to create some network object-groups and then refer to them in your access list. From your description, that would be something like three object-groups - one for the Intranet (Intranet), one for the allowed servers that can use Internet (allowed_servers), and a third for the permitted Internet sites (allowed_sites).
You would then use them as follows:
ip access-list extended main_acl
permit any object-group intranet any
permit object-group allowed_servers object-group allowed_sites any
interface vlan
ip access-group main_acl in
More details on the syntax and examples can be found here:
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-2mt/sec-object-group-acl.html#GUID-BE5C124C-CCE0-423A-B147-96C33FA18C66

How to implement parent entity for core data

Hi there.
I am starting a document-based Core Data application (Cocoa) and developed the following data model;
The 'invoice' entity is a parent entity of 'items', because ideally I would want there to be many items for each invoice. I guess my first point here is - is what I am trying to do going to be achieved using this method?
If so, I have been trying several ways in Interface Builder to sort out how to implement this structure with cocoa bindings. I have made a Core Data app before, just with one entity. So this time, I have two separate instances of NSArrayController's connected to tables with relevant columns. I can add new 'invoice' entities fine, but I can't get corresponding 'items' to add.
I tried setting the Managed Object Context of the 'item' NSArrayController to this;
I thought this would resolve the issue, but I still have found no resolution to the problem.
If anyone done something similar to this, I'd appreciate any help
Thanks in advance,
Ricky.

Second, when you create a Core Data Document Based application, XCode generates the MyDocument class, derivating from NSPersistentDocument. This class is dedicated to maintain the Managed Object Model and the Managed Object Context of each document of your application.
There is only one Context and generally one Model for each Document.
In Interface Builder, the Managed Object Context must be bound to the managedObjectContext of the MyDocument instance: it's the File's owner of the myDocument.xib Nib file.
It's not the case in your Nib File where the Managed Object Context is bound to the invoiceID of the Invoice Controller.
It's difficult to help you without an overall knowledge of your application, perhaps could you create an InvoiceItem Controller and bind its Content Set to the relationship of your invoice.

How to implement schedule workflow using SharePoint Designer?

Hi All,
Please let me know , How to implement the schedule workflow using Share Point Designer.
Thank You.
Regards,
~Sri

+1 to this. The closest that you'll get with list / level features is using Information Rights. You can trigger workflows based on time/date columns, which may serve your needs.
Failing that, you will indeed need a custom timer job.
Steven Andrews
SharePoint Business Analyst: LiveNation Entertainment
Blog: baron72.wordpress.com
Twitter: Follow @backpackerd00d
My Wiki Articles:
CodePlex Corner Series
Please remember to mark your question as "answered" if this solves (or helps) your problem.

Webinar: How to implement secure scenarios with SAP NW PI 7.1

SAP Intelligence Platform & NetWeaver RIG APJ Expert Call
Dear valued SAP Experts,
Next SAP Intelligence Platform & NetWeaver RIG Expert Call Session will take place on Tuesday, August 18.
The SAP Intelligence Platform & NetWeaver RIG Expert Call Sessions are designed to support consultants, partners and customers during their implementation projects. The sessions cover all different aspects of SAP NetWeaver and are aimed at
thus provide knowledge which is not available via standard training courses. The session duration is typically 60min and includes questions and answers.
Tuesday, August 18, 2009:
How to implement secure scenarios with SAP NetWeaver Process Integration 7.1
Time: 2.00 - 3.00 p.m. Singapore Time (UTC +8)
This event will feature Makoto Sugishita with the SAP Intelligence Platform & NetWeaver Regional Implementation Group.
Makoto provides the following abstract:
In this session you will learn more about the core security concepts that are provided with the service-oriented architecture (SOA)
management capabilities in SAP NetWeaver Process Integration (SAP NetWeaver PI). This session will cover main use cases and
supported scenarios of secure SAP NetWeaver PI deployments.
SAP Connect Link: https://sap.emea.pgiconnect.com/I016095
(no passcode needed)
Dial in:
For dial in details please register here http://www.surveymonkey.com/s.aspx?sm=EFeuZl9PxrwKOW5i5W556g_3d_3d
Kind regards,
Sarma Sishta
SAP Intelligence Platform & NetWeaver RIG APJ

hi,
I'm making this a sticky thread till August 18 so it will have better visibility
Regards,
Michal Krawczyk

How to implement Oracle DWH using JDBC

Hello,
i'm new to the Oracle database and i'm wondering how to implement a DWH Core or Datamart System using Oracle 11g Express. How can i "switch" a relational oracle database to a dimensional one, preparing it for OLAP/BI queries´, preferably using the JDBC interface ?
Thanks a lot!

An good introduction to Oracle OLAP is found on the OTN site: Oracle OLAP.
--Ken Chin

LAN Design Question

Hi Team, i need some information regarding LAN Design, Please see Diagram 1 Current Setup. in which when our Core switch trunk ports are full we install 2 aggregate switches and connect both aggregate switches with core switches.
but mostly in documentation i see connectivity as mentioned in 2nd diagram with name "setup online" , where RED lines are added, i mostly see such full mesh physical connectivity.
May i know if there is any real problem in first design? where we only connect Core1 with Aggregate 1 and Core 2 with aggregate 2?
thank you in advance.
Just to add HSRP is running on LAN side between both Core and all LAN gateway are on Core switches. and EIGRP is running between 2 routers and 2 Core switch.

Wow ... 3560G core and you want to do multiple redundant links. One word will sum this all up: NIGHTMARE.
On paper, you'll be able to get this right by fine-tuning STP, PVSTP, MSTP, etc. In the real world, I wouldn't touch this scenario. Not with a switch that does NOT support stacking.
Let's say your core is a stack of 3750G/E/X or 3650 or 3850 and your access switch are 2960S/X/XR. If this is the case, then you'll have a pair of routers with their links going down to a stack of 3750 and from the stack of 3750 you have links going down to the access switch.
NOTE: I'm holding back the "method" because I'm waiting for more information from you.

Looking for the list of maintaining and configuring tasks on Core switch.

I have some experiences DMS switches, things like setting up zone, alias, zoneset etc, but never have any experiences on core switches or something between core and edge switches since the SAN environment here has not reached that scale.
Would you please list those tasks that needs to be done in daily maintenance, and required configurations? or some related documents? including those on core switches or something between core and edge switches?
Thank you very much for your ideas.

Hello ciscomagic1,
The definition of core and edge swicthes in a FC architecture is related the topology point of view.
The core could be NPIV enabled switche and all edges running as NPV mode.
Also the core could be the switch that will make the translation of FC to another protocol as FCoE, FCIP or iSCSI and should be licensed to those protocols.
Normally the core is the more centralized switch in the entire fabric, with more backplane capacity, redundancy and high port density. Of course this is not a rule at all.
Essentially the core and edge switches can perform the same tasks and have the same functionality, the point is how them will be better availed in a design.

How large of an Ethernet Switch can you add to an Airport Extreme gigabit router?

I have a gigabit Airport Extreme router. I like using the Airport Utility to control my network. I want to convert a large number of wireless connections to wired ethernet devices, about 24. The reason is that I just get too many wireless dropouts, and I need a more reliable network. I am looking for the best way to design this. It seems like adding a gigabit Ethernet switch is the easiset and best way to accomplish this. My questions are:
1. How large of a gigabit switch can you add to the LAN port of an Airport Extreme: 24-port, 48-port?
2. How far down can you cascade switches? In other words, can I connect three 5-port switches (level 1 switches) to the three LAN ports on the Airport Extreme, and then connect more 5-port switches to the level 1 switches?
3. What are the performance implications for either design. Can you achieve gigabit performance with these designs?
Thanks for the help.

I have a network with an Extreme base station, 3 Extreme wired extenders and 1 express wired extender - in the mix are four 24 port gigabit switches and two 8 port gigabit switches - so you can add as much as you want within the limits of the internal IP address range which is controling the number of devices on the network.

How to implement this calendar function in ABAP code

Hi everyone,
Our requirement is : Give a date (e.g. YYYY.MM.DD, 1983.12.26), then we need to know which weekday it is. Is there a existing FM for this fuction? or how to implement it in ABAP?
Thanks a lot for any hint
Best regards
Deyang

Hi Deyang Liu,
Could you please check these the below links they would give you some idea ....[SAP Calendar Control|http://help.sap.com/printdocu/core/print46b/en/data/en/pdf/BCCICALENDAR/SAP_KALENDER.pdf]
[Calendar functions |http://help.sap.com/saphelp_nw04/Helpdata/EN/2a/fa00f6493111d182b70000e829fbfe/content.htm]
[SAP Functions|http://abap4.tripod.com/SAP_Functions.html]
[Determine calendar |http://help.sap.com/saphelp_nw04/helpdata/en/2a/fa00e9493111d182b70000e829fbfe/content.htm]
Regards,
S.Manu

How to implement 'hypelink' in ALV GRID

Hi,everybody,please tell me how to implement 'hypelink' in ALV GRID?
I just try to design a ALV GRID report but I do not kown the way of using 'hypelink'. I refer to some documents but failsed. somebody can help me and give a example including entire code.

1. Create a table where hyperlinks & corresponding handles are stored (TYpe LVC_T_HYPE)
DATA ls_hype TYPE lvc_s_hype .
data lt_hype type lvc_t_hype.
ls_hype-handle = '1' .
ls_hype-href = 'http://www.company.com/carrids/car1' .
APPEND ls_hype TO lt_hype .
2. In your list data table create additional field of type INT4 which will contain the handle of the hyper link (ex. '1' for above hyperlink)
DATA carrid_handle TYPE int4 .
3. For the field which shall contain the hyperlink, make an entry in the field catalog indicating the field name which contains handle for the hyperlink. This is done by setting the handle field name in WEB_FIELD.
ls_fieldcat-fieldname = 'CARRID'
ls_fieldcat-web_field = 'CARRID_HANDLE'.
4. While calling set_table_for_first_display, pass the hyperlink table created in step 1 to parameter 'it_hyperlink'
~Piyush Patil

How to implement this Java Script?

Hello,
I have this script to remove the link from titles of web parts. I am new to SharePoint 2013 development. I am not sure where to put it. Not sure what file to put it and how to implement it. How can ensure this code gets run on pages through out
my SharePoint 2013 site.
jQuery(document).ready(function () {
       $('a').filter("[href='###']").each(function () {
        $(this).replaceWith($(this).html());
Reference
https://expectedexception.wordpress.com/2012/01/30/how-to-remove-the-list-view-web-part-title-bar-link/
Paul

Get the page Url from the website and go to Sharepoint Designer and browse the page and add the script within a scritp tag <script>jQuery(document).ready(function
       $('a').filter("[href='###']").each(function () {
        $(this).replaceWith($(this).html());
});</script>
how to open a site in SP Designer:
https://support.office.com/en-ie/article/Open-a-SharePoint-site-94d33d70-3f07-4a8e-b5b5-1137a9c36e74
another option is to find the global file that contain the scripts and add it as a method there. You can check these files by viewing source of the page.
note also that the Jquery reference is needed for this code to execute.
Fouad Roumieh

How to Implement HTTP Request Status Code Processing

I actually have two questions. First, I wondering how to add multiple status code processing to an http request. Secondly, I was wondering how to go about using alternate http requests to different servers in case the primary server is down. What kind of parameter would the program use to determine that the server is unavailable and switch to another server??
Currently, the program I've written calls an rdf server (http://www.rdfabout.com/sparql) using a sparql query,
the server returns an xml string, the program parses it, and calculates numbers
from the string. The program works, but the problem is that the server is down occasionally.
When the server is down, we need to add calls to another server to
increase reliability. So, the next task is to call this server:
http://www.melissadata.com/lookups/ZipDemo2000.asp
I need to do exactly the same things I did with the rdf server. The
difference will be constructing a request and a bit different parsing of
the response.
current SPARQL query is defined as follows:
PREFIX dc: <http://purl.org/dc/elements/1.1/>
PREFIX census: <http://www.rdfabout.com/rdf/schema/census/>
PREFIX census1: <tag:govshare.info,2005:rdf/census/details/100pct/>
DESCRIBE ?table WHERE {
<http://www.rdfabout.com/rdf/usgov/geo/census/zcta/90292> census:details
?details .
?details census1:totalPopulation ?table .
?table dc:title "SEX BY AGE (P012001)" .
}current HTTP Request is defined as follows:
import java.net.*;
import java.net.URL;
import java.net.URLConnection;
import java.io.*;
import java.io.DataOutputStream;
import java.io.BufferedReader;
import java.io.StringReader;
import java.io.InputStreamReader;
import java.io.PrintStream;
import java.util.Scanner;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
import java.util.Arrays;
public class MyConnection
     static Scanner sc = new Scanner(System.in);//allows user to input zipcode
    public static void main(String[] args) throws Exception
         int zip;//zipcode is declared as integer format
        //User defines zip through input
        //proceed to put SPARQL query into string, which is then used to call the server
        String requestPart1 =
        "query=PREFIX+dc%3A++%3Chttp%3A%2F%2Fpurl.org%2Fdc%2Felements%2F1.1%2F%3E+%0D%0APREFIX+census%3A+%3Chttp%3A%2F%2Fwww.rdfabout.com%2Frdf%2Fschema%2Fcensus%2F%3E+%0D%0APREFIX+census1%3A+%3Ctag%3Agovshare.info%2C2005%3Ardf%2Fcensus%2Fdetails%2F100pct%2F%3E+%0D%0A%0D%0ADESCRIBE+%3Ftable+WHERE+%7B+%0D%0A+%3Chttp%3A%2F%2Fwww.rdfabout.com%2Frdf%2Fusgov%2Fgeo%2Fcensus%2Fzcta%2F";
        String requestPart2 = "" + zip; // zipcode is transformed from int to string format and plugged into SPARQL query here
        String requestPart3 =
        "%3E+census%3Adetails+%3Fdetails+.+%0D%0A+%3Fdetails+census1%3AtotalPopulation+%3Ftable+.+%0D%0A+%3Ftable+dc%3Atitle+%22SEX+BY+AGE+%28P012001%29%22+.+%0D%0A%7D%0D%0A&outputMimeType=text%2Fxml";
        String response = "";
        URL url = new URL("http://www.rdfabout.com/sparql");//designates server to connect to
        URLConnection conn = url.openConnection();//opens connection to server
        // Set connection parameters.
        conn.setDoInput (true);
        conn.setDoOutput (true);
        conn.setUseCaches (false);
        // Make server believe we are form data
        conn.setRequestProperty("Content-Type","application/x-www-form-urlencoded");
        DataOutputStream out = new DataOutputStream (conn.getOutputStream ());
        // Write out the bytes of the content string to the stream.
        out.writeBytes(requestPart1 + requestPart2 + requestPart3);
        out.flush ();
        out.close ();
        // Read response from the input stream.
        BufferedReader in = new BufferedReader (new InputStreamReader(conn.getInputStream ()));
        String temp;
        while ((temp = in.readLine()) != null)
             response += temp + "\n";
        temp = null;
        in.close ();
        //parsing stuff is taken care of after here
}What remains now is to:
1) add status code processing: notify if the server is not available, ect.
2) add ability to connect to additional server if primary server is down.
I'm thinking an if/else statement, which I've tried a few different ways,
but I don't quite know how to implement that...Also trying to add the
status code processing/error handling, but I'm not sure how to do that
for multiple/different errors, such as 404, 503, 504, ect.. try/catch statements?
So yeah, just been scratching my head on this trying to figure out how to work it..
If you can help me out on this, I've been going nuts trying to figure this out...

I think your issue comes form the fact that you are not casting URLConnection to HttpURLConnection.
Doing the cast would allow you to use getResponseCode() - among other methods - and test for a response different than 200.
Read: [http://mindprod.com/jgloss/urlconnection.html|http://mindprod.com/jgloss/urlconnection.html]

Connecting core switch to the internet ?

Hi,
We have 2 6506's connected through an ether-channel trunk.
On these 6506's we have configured a vlan, vlan interface and 2 access ports for 2 ASA's.
These ASA's run in failover mode but only one ASA is physically connected at the moment.
We want to be more resilient so our provider has provided us with a redundant setup of routers for our internet connection.
However, for this construction they would need a layer 2 connection on our side to have HSRP running.
There are 2 options in my opinion :
- Buy a set of switches to facilitate the layer-2 connection between te routers and to connect the outside of the ASA's.
- Instead of buying 2 new switches, create a new unrouted vlan on our core 6506's and use access-ports for the routers and the ASA's.
But how safe is it to connected the core switch with an unrouted vlan to the internet router ?
In terms of vlan hopping or other possible attacks ?
I think i have to disable DTP, Spanning-Tree, CDP and maybe a lot more ?

I am as far as applying this to secure the port :
switchport
switchport mode access
switchport access vlan X
switchport nonegotiate
spanning-tree bpdufilter enable
spanning-tree portfast edge
switchport port-security
switchport port-security maximum 3
switchport port-security violation restrict
no cdp enable
Any additions to this ?

LAN design - how to implement a core switch?

Similar Messages

Maybe you are looking for