Ch.

4 – Switching Concepts

CCNA 3 version 3.0

Rick Graziani
Cabrillo College
Note to instructors

• If you have downloaded this presentation from the Cisco Networking

Academy Community FTP Center, this may not be my latest version of
this PowerPoint.
• For the latest PowerPoints for all my CCNA, CCNP, and Wireless
classes, please go to my web site:
http://www.cabrillo.edu/~rgraziani/
• The username is cisco and the password is perlman for all of
my materials.
• If you have any questions on any of my materials or the curriculum,
please feel free to email me at graziani@cabrillo.edu (I really don’t
mind helping.) Also, if you run across any typos or errors in my
presentations, please let me know.
• I will add “(Updated – date)” next to each presentation on my web site
that has been updated since these have been uploaded to the FTP
center.
Thanks! Rick
Rick Graziani graziani@cabrillo.edu 2
Overview – Review of CCNA 1

The first part of this presentation should be mostly a review

from CCNA 1:
• Describe the history and function of shared, half-duplex
Ethernet
• Define collision as it relates to Ethernet networks
• Define microsegmentation
• Define CSMA/CD
• Describe some of the key elements affecting network
performance
• Describe the function of repeaters
• Define network latency
• Define transmission time
• Describe the basic function of Fast Ethernet
Rick Graziani graziani@cabrillo.edu 3
Overview – New Concepts

• Define network segmentation using routers, switches, and bridges

• Describe the basic operations of a switch
• Define Ethernet switch latency
• Explain the differences between Layer 2 and Layer 3 switching
• Define symmetric and asymmetric switching
• Define memory buffering
• Compare and contrast store-and-forward and cut-through switching
• Understand the differences between hubs, bridges, and switches
• Describe the main functions of switches
• List the major switch frame transmission modes
• Describe the process by which switches learn addresses
• Identify and define forwarding modes
• Define LAN segmentation
• Define microsegmentation using switching
• Describe the frame-filtering process
• Compare and contrast collision and broadcast domains
• Identify the cables needed to connect switches to workstations
• Identify the cables needed to connect switches to switches
Rick Graziani graziani@cabrillo.edu 4
Overview

Routers
Switches, Bridges
Hub, Repeaters
• Ethernet networks used to be built using repeaters.
• When the performance of these networks began to suffer because too
many devices shared the same segment, network engineers added
bridges to create multiple collision domains.
• As networks grew in size and complexity, the bridge evolved into the
modern switch, allowing microsegmentation of the network.
• Today’s networks typically are built using switches and routers, often
with the routing and switching function in the same device.
Rick Graziani graziani@cabrillo.edu 5
Ethernet/802.3 LAN development

• Distance limitations
• Ethernet is fundamentally a shared technology where all users on a given LAN
segment compete for the same available bandwidth.
• This situation is analogous to a number of cars all trying to access a one-lane
road at the same time.
• Because the road has only one lane, only one car can access it at a time.
• The introduction of hubs into a network resulted in more users competing for
the same bandwidth.
• Collisions are a by-product of Ethernet networks.

Rick Graziani graziani@cabrillo.edu 6

Bridges

• A bridge is a Layer 2 device used to divide, or segment, a network.

• A bridge is capable of collecting and selectively passing data frames
between two network segments.
• Bridges do this by learning the MAC address of all devices on each
connected segment. Using this information, the bridge builds a bridging
table and forwards or blocks traffic based on that table.
• This results in smaller collision domains and greater network efficiency.

• Bridges do NOT restrict broadcast traffic.

Rick Graziani graziani@cabrillo.edu 7
Switches

• Switches create a virtual circuit between two connected devices,

establishing a dedicated communication path between two devices.
• Switches on the network provide microsegmentation.
• This allows maximum utilization of the available bandwidth.
• A switch is also able to facilitate multiple, simultaneous virtual circuit
connections.
• Broadcast frames to all connected devices on the network.

Rick Graziani graziani@cabrillo.edu 8

Router

• A router is a Layer 3 device.

• Used to “route” traffic between two or more Layer 3 networks.
• Routers make decisions based on groups of network addresses, or
classes, as opposed to individual Layer 2 MAC addresses.
• Routers use routing tables to record the Layer 3 addresses of the
networks that are directly connected to the local interfaces and network
paths learned from neighboring routers.
• Routers are not compelled to forward broadcasts.
Rick Graziani graziani@cabrillo.edu 9
Factors that impact network performance

Rick Graziani graziani@cabrillo.edu 10

Elements of Ethernet/802.3 networks

• Broadcast data frame delivery of Ethernet/802.3

• The carrier sense multiple access/collision detect (CSMA/CD) method
allows only one station to transmit at a time.
• Multimedia applications with higher bandwidth demand such as video
and the Internet, coupled with the broadcast nature of Ethernet, can
create network congestion.
• Normal latency as the frames travel across the layers
• Extending the distances and increasing latency of the Ethernet/802.3
LANs by using Layer 1 repeaters.
Rick Graziani graziani@cabrillo.edu 11
Half-Duplex

• Originally Ethernet was a half-duplex technology.

• Using half-duplex, a host could either transmit or receive at one time,
but not both.
• If the network is already in use, the transmission is delayed.
• When a collision occurs, the host that first detects the collision will
send out a jam signal to the other hosts.
• Upon receiving the jam signal, each host will stop sending data, then
wait for a random period of time before attempting to retransmit.
• The back-off algorithm generates this random delay.
• As more hosts are added to the network and begin transmitting,
Rickcollisions are more likely to occur.
Graziani graziani@cabrillo.edu 12
Duplex Transmissions

• Simplex Transmission: One way and one way only.

– One way street
• Half-duplex Transmission: Either way, but only one way at a time.
– Two way street, but only one way at a time (land slide).
• Full-duplex Transmission: Both ways at the same time.
– Two way street

Rick Graziani graziani@cabrillo.edu 13

Network Congestion

• Today's networks are experiencing an increase in the transmission of

many forms of media:
– Large graphics files
– Images
– Full-motion video
– Multimedia applications
Rick Graziani graziani@cabrillo.edu 14
Network Latency

• Latency, or delay, is the time a frame or a packet takes to travel from

the source station to the final destination.
• It is important to quantify the total latency of the path between the
source and the destination for LANs and WANs.
• Latency has at least three sources:
– First, there is the time it takes the source NIC to place voltage
pulses on the wire and the time it takes the receiving NIC to
interpret these pulses. This is sometimes called NIC delay.
– Second, there is the actual propagation delay as the signal takes
time to travel along the cable.
– Third, latency is added according to which networking devices,
whether they are Layer 1, Layer 2, or Layer 3, are added to the
path between the two communicating computers.
Rick Graziani graziani@cabrillo.edu 15
Ethernet 10 BASE-T transmission time

• Transmission time equals the number of bits being sent times the bit
time for a given technology.
• Another way to think about transmission time is the time it takes a
frame to be transmitted.
• Small frames take a shorter amount of time. Large frames take a
longer amount of time.
• Each 10 Mbps Ethernet bit has a 100 ns transmission window.
– Therefore, 1 byte takes a minimum of 800 ns to transmit.
– A 64-byte frame, the smallest 10BASE-T frame allowing CSMA/CD
to function properly, takes 51,200 ns ( 51.2 microseconds).
– Transmission of an entire 1000-byte frame from the source station
requires 800 microseconds.
Rick Graziani graziani@cabrillo.edu 16
The benefits of using repeaters

• The distance that a LAN can cover is limited due to attenuation.

• Attenuation means that the signal weakens as it travels through the
network.
• The resistance in the cable or medium through which the signal travels
causes the loss of signal strength.
• An Ethernet repeater is a physical layer device on the network that
boosts or regenerates the signal on an Ethernet LAN.
Rick Graziani graziani@cabrillo.edu 17
Full-duplex transmitting

• Full-duplex Ethernet allows the transmission of a packet and the

reception of a different packet at the same time.
• To transmit and receive simultaneously, a dedicated switch port is
required for each node.
• The full-duplex Ethernet switch takes advantage of the two pairs of
wires in the cable by creating a direct connection between the transmit
(TX) at one end of the circuit and the receive (RX) at the other end.
• Ethernet usually can only use 50%-60% of the available 10 Mbps of
bandwidth because of collisions and latency.
• Full-duplex Ethernet offers 100% of the bandwidth in both directions.
• This produces a potential 20 Mbps throughput, which results from 10
Mbps TX and 10 Mbps RX.
Rick Graziani graziani@cabrillo.edu 18
Duplex Transmissions

• Simplex Transmission: One way and one way only.

– One way street
• Half-duplex Transmission: Either way, but only one way at a time.
– Two way street, but only one way at a time (land slide).
• Full-duplex Transmission: Both ways at the same time.
– Two way street

Rick Graziani graziani@cabrillo.edu 19

LAN segmentation

• Not the best diagram, let’s look at some examples…

Rick Graziani graziani@cabrillo.edu 20
Sending and receiving Ethernet frames on a bus

1111 222 2 333 3 nnnn Ab brevi ated

MAC
Ad dres ses

3333 1111

• When an Ethernet frame is sent out on the “bus” all

devices on the bus receive it.
• What do they do with it?

Rick Graziani graziani@cabrillo.edu 21

Sending and receiving Ethernet frames on a bus

Hey, that’s
Nop e me! Nop e
1111 222 2 333 3 nnnn Ab brevi ated
MAC
Ad dres ses

3333 1111

• Each NIC card compares its own MAC address with the Destination
MAC Address.
• If it matches, it copies in the rest of the frame.
• If it does NOT match, it ignores the rest of the frame.
– Unless you are running a Sniffer program
Rick Graziani graziani@cabrillo.edu 22
Sending and receiving Ethernet frames on a bus

1111 222 2 333 3 nnnn Ab brevi ated

MAC
Ad dres ses

• So, what happens when multiple computers try to transmit

at the same time?

Rick Graziani graziani@cabrillo.edu 23

Sending and receiving Ethernet frames on a bus

1111 222 2 333 3 nnnn Ab brevi ated

MAC
Ad dres ses

Collision!

Rick Graziani graziani@cabrillo.edu 24

Access Methods

Two common types of access methods for LANs include

• Non-Deterministic: Contention methods (Ethernet, IEEE 802.3)
– Only one signal can be on a network segment at
one time.
– Collisions are a normal occurrence on an
Ethernet/802.3 LAN

• Deterministic: Token Passing (Token Ring)

Rick Graziani graziani@cabrillo.edu 25
•
CSMA/CD
CSMA/CD (Carrier Sense Multiple Access with Collision
Detection)
• Common contention method used with Ethernet and IEEE
802.3
• “Let everyone have access whenever they want and we will
work it out somehow.”

Rick Graziani graziani@cabrillo.edu 26

•
CSMA/CD and Collisions

CSMA/CD (Carrier Sense Multiple Access with Collision Detection)

• Listens to the network’s shared media to see if any other users on “on
the line” by trying to sense a neutral electrical signal or carrier.
• If no transmission is sensed, then multiple access allows anyone onto
the media without any further permission required.
• If two PCs detect a neutral signal and access the shared media at the
exact same time, a collision occurs and is detected.
• The PCs sense the collision by being unable to deliver the entire
frame (coming soon) onto the network. (This is why there are
minimum frame lengths along with cable distance and speed
limitations. This includes the 5-4-3 rule.)
• When a collision occurs, a jamming signal is sent out by the first PC
to detect the collision.
• Using either a priority or random backoff scheme, the PCs wait
certain amount of time before retransmitting.
• If collisions continue to occur, the PCs random interval is doubled,
lessening the chances of a collision.
Rick Graziani graziani@cabrillo.edu 27
•
CSMA/CD and Collisions
Hey, that’s
Nop e me! Nop e
1111 222 2 333 3 nnnn Ab brevi ated
MAC
Ad dres ses

Noti ce the
loc ati on of
th e DA!
3333 1111

And as we said,
• When information (frame) is transmitted, every PC/NIC on the shared
media copies part of the transmitted frame to see if the destination
address matches the address of the NIC.
• If there is a match, the rest of the frame is copied
• If there is NOT a match the rest of the frame is ignored.
Rick Graziani graziani@cabrillo.edu 28
•
Sending and receiving Ethernet frames via a hub

3333 1111

111 1
• So, what does a hub do
? 222 2
when it receives
information?
• Remember, a hub is
nothing more than a
multiport repeater.
555 5

333 3 444 4
Rick Graziani graziani@cabrillo.edu 29
•
Sending and receiving Ethernet frames via a hub
Hub or

Rick Graziani graziani@cabrillo.edu 30

•
Sending and receiving Ethernet frames via a hub

3333 1111

• The hub will flood it out all

111 1 222 2 ports except for the incoming
Nop e port.
• Hub is a layer 1 device.
• A hub does NOT look at layer
2 addresses, so it is fast in
transmitting data.
555 5 • Disadvantage with hubs: A
Nop e hub or series of hubs is a
single collision domain.
• A collision will occur if any two
or more devices transmit at
the same time within the
collision domain.
333 3 For 444 4 Nop e • More on this later.
me!
Rick Graziani graziani@cabrillo.edu 31
•
Sending and receiving Ethernet frames via a hub

2222 1111

• Another disadvantage with

111 1 222 2 hubs is that is take up
For unnecessary bandwidth on
me! other links.

555 5
Nop e
Wa st ed
ban dwi dt h

333 3 Nop e 444 4 Nop e

Rick Graziani graziani@cabrillo.edu 32
•
Sending and receiving Ethernet frames via a switch

Rick Graziani graziani@cabrillo.edu 33

•
Sending and receiving Ethernet frames via a switch

Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
333 3 111 1

• Switches are also known as

switch learning bridges or learning
switches.
• A switch has a source address
table in cache (RAM) where it
stores source MAC address
after it learns about them.
• A switch receives an Ethernet
frame it searches the source
address table for the
111 1 3333 Destination MAC address.
• If it finds a match, it filters the
Abbreviated
MAC
frame by only sending it out
addresses that port.
2222 4444 • If there is not a match if floods
Rick Graziani graziani@cabrillo.edu
it out all ports. 34
•
No Destination Address in table, Flood

Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 333 3 111 1

• How does it learn source MAC

switch addresses?
• First, the switch will see if the
SA (1111) is in it’s table.
• If it is, it resets the timer (more
in a moment).
• If it is NOT in the table it adds
it, with the port number.

111 1 3333
• Next, in our scenario, the
Abbreviated switch will flood the frame out
MAC
addresses
all other ports, because the DA
is not in the source address
2222 4444
table.
Rick Graziani graziani@cabrillo.edu 35
•
Destination Address in table, Filter

Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3 333 111 1 333 3

• Most communications involve

switch some sort of client-server
relationship or exchange of
information. (You will
understand this more as you
learn about TCP/IP.)
• Now 3333 sends data back to
1111.
• The switch sees if it has the SA
stored.
111 1 3333 • It does NOT so it adds it. (This
will help next time 1111 sends
Abbreviated
MAC
to 3333.)
addresses • Next, it checks the DA and in
2222 4444 our case it can filter the frame,
Rick Graziani graziani@cabrillo.edu
by sending it only out port 1. 36
•
Destination Address in table, Filter

Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3 333 333 3 111 1

switch
111 1 333 3

• Now, because both MAC

addresses are in the switch’s table,
any information exchanged
between 1111 and 3333 can be
sent (filtered) out the appropriate
port.
111 1 3333
• What happens when two devices
Abbreviated send to same destination?
MAC • What if this was a hub?
addresses
• Where is (are) the collision
2222 4444 domain(s) in this example?
Rick Graziani graziani@cabrillo.edu 37
•
No Collisions in Switch, Buffering
Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3 333 333 3 111 1
9 44 44

switch
333 3 444 4

• Unlike a hub, a collision does

NOT occur, which would cause
the two PCs to have to
retransmit the frames.
• Instead the switch buffers the
frames and sends them out
111 1 3333
port #6 one at a time.
Abbreviated • The sending PCs have no idea
MAC that their was another PC
addresses
wanting to send to the same
2222 4444 destination.
Rick Graziani graziani@cabrillo.edu 38
•
Collision Domains

Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3 333 333 3 111 1
9 44 44
Co llis io n
switch Domai ns
333 3 444 4

• When there is only one device

on a switch port, the collision
domain is only between the PC
and the switch. (Cisco
curriculum is inaccurate on this
point.)
111 1 3333
• With a full-duplex PC and
Abbreviated
switch port, there will be no
MAC collision, since the devices and
addresses the medium can send and
2222 4444 receive at the same time.
Rick Graziani graziani@cabrillo.edu 39
•
Other Information

Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3 333
9 44 44 • How long are addresses kept in the
Source Address Table?
switch – 5 minutes is common on most
vendor switches.
• How do computers know the
Destination MAC address?
• ARP Caches and ARP
Requests
• How many addresses can be kept
in the table?
111 1 3333 – Depends on the size of the
cache, but 1,024 addresses is
Abbreviated common.
MAC
addresses
• What about Layer 2 broadcasts?
– Layer 2 broadcasts (DA = all
2222 4444
1’s) is flooded out all ports.
Rick Graziani graziani@cabrillo.edu 40
Side Note - Transparent Bridging

• Transparent bridging (normal switching process) is defined in IEEE

802.1d describing the five bridging processes of:
– learning
– flooding filtering
– forwarding
– aging

• These will be discussed further in STP (Spanning Tree Protocol)

Rick Graziani graziani@cabrillo.edu 41

Transparent Bridge Process - Jeff Doyle
Receive Packet

Learn source address or refresh aging timer

Is the destination a broadcast, multicast or unknown unicast?

No Yes Flood Packet

Are the source and destination on the same interface?

No Yes Filter Packet

Forward unicast to correct port

Rick Graziani graziani@cabrillo.edu 42
•
What happens here?
Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3333
1111 333 3
1 22 22 1 3 333

• Notice the Source

Address Table has
multiple entries for
port #1.

3333

111 1 222 2 555 5

Rick Graziani graziani@cabrillo.edu 43
•
What happens here?
Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3333
1111 333 3
1 22 22 1 5 555

• The switch filters the

frame out port #1.
• But the hub is only a
layer 1 device, so it
floods it out all
ports.

• Where is the
collision domain?

3333

111 1 222 2 555 5

Rick Graziani graziani@cabrillo.edu 44
•
What happens here?
Sourc e Ad dress T ab le
Port Source MAC Add. Port Source MAC Add.
1 1 111 6 3333
1111 333 3
1 22 22 1 5 555

Co llisi on Domai n

3333

111 1 222 2 555 5

Rick Graziani graziani@cabrillo.edu 45
•
LAN segmentation with routers

• Routers provide segmentation of networks, adding a latency factor of

20% to 30% over a switched network.
• This increased latency is because a router operates at the network
layer and uses the IP address to determine the best path to the
destination node.
• Bridges and switches provide segmentation within a single network or
subnetwork.
• Routers provide connectivity between networks and
subnetworks.
•RickRouters also do not forward broadcasts while switches and
Graziani graziani@cabrillo.edu 46
•
Layer 2 and layer 3 switching

(routing)

• A layer 3 switch is typically a layer 2 switch that includes a routing

process, I.e. does routing. (Oh yea, also known as routing. Got to
love those people in Marketing.)
• Layer 3 switching has many meanings and in many cases is just a
marketing term.
• Layer 3 switching is a function of the network layer.
• The Layer 3 header information is examined and the packet is
forwarded based on the IP address.
Rick Graziani graziani@cabrillo.edu 47
•
Symmetric and asymmetric switching

Note: Most switches are now

10/100, which allow you to use
them symmetrically or
asymmetrically.
Rick Graziani graziani@cabrillo.edu 48
Ethernet switch latency

• Latency is the period of time from when the beginning of a frame

enters to when the end of the frame exits the switch.
• Latency is directly related to the configured switching process and
volume of traffic.

Rick Graziani graziani@cabrillo.edu 49

•
Memory buffering

switch • An Ethernet switch may use a buffering

technique to store and forward frames.
• Buffering may also be used when the
destination port is busy.
• The area of memory where the switch
stores the data is called the memory
buffer.
• This memory buffer can use two methods
for forwarding frame:
1111 3333
– port-based memory buffering
Abbreviated – shared memory buffering
MAC
addresses
• In port-based memory buffering frames
are stored in queues that are linked to
2222 4444 specific incoming ports.
• Shared memory buffering deposits all
frames into a common memory buffer
which all the ports on the switch share.

Rick Graziani graziani@cabrillo.edu 50

•
Two switching methods

• Store-and-forward – The entire frame is received before any

forwarding takes place.
– The destination and source addresses are read and filters are
applied before the frame is forwarded.
– CRC Check done
• Cut-through – The frame is forwarded through the switch before the
entire frame is received.
– This mode decreases the latency of the transmission, but also
reduces error detection.
• 1900 and 2800 series switches this is configurable, otherwise depends
Rickon thegraziani@cabrillo.edu
Graziani model of the switch. 51
•
Cut-through

Cut-through
• Fast-forward – Offers the lowest level of latency.
– Fast-forward switching immediately forwards a packet after reading
the destination address.
– There may be times when packets are relayed with errors.
– Although this occurs infrequently and the destination network
adapter will discard the faulty packet upon receipt.

Rick Graziani graziani@cabrillo.edu 52

•
Cut-through

Cut-through
• Fragment-free – Fragment-free switching filters out collision fragments before
forwarding begins.
– Collision fragments are the majority of packet errors.
– In a properly functioning network, collision fragments must be smaller than
64 bytes.
– Anything greater than 64 bytes is a valid packet and is usually received
without error.
– Fragment-free switching waits until the packet is determined not to be a
collision fragment before forwarding.

Rick Graziani graziani@cabrillo.edu 53

•
Two switching methods

• Adaptive cut-through
– In this mode, the switch uses cut-through until it detects
a given number of errors.
– Once the error threshold is reached, the switch changes
to store-and-forward mode.

Rick Graziani graziani@cabrillo.edu 54

Functions of a switch

• The main features of Ethernet switches are:

– Isolate traffic among segments
– Achieve greater amount of bandwidth per user by creating smaller
collision domains
Rick Graziani graziani@cabrillo.edu 55
How switches learn
addresses

“Learning bridges” or
Learning switches”

• Bridges and switches learn in the following ways:

– Reading the source MAC address of each received frame or
datagram
– Recording the port on which the MAC address was received.
• The bridge or switch learns which addresses belong to the devices
connected to each port.
• The learned addresses and associated port or interface are stored in
the addressing table.
• The bridge examines the destination address of all received frames.
• The bridge then scans the address table searching for the destination
address.
Rick Graziani graziani@cabrillo.edu 56
Filter or Flood (Switch)

• If a switch has the frame’s destination address in its CAM table (or
Source Address Table) it will only send the frame out the appropriate
port.
• If a switch does not have the frame’s destination MAC address in its
CAM table, it floods (sends) it out all ports except for the incoming port
(the port that the frame came in on) known as an Unknown Unicast, or
if the destination MAC address is a broadcast.
• Note: A CAM table may contain multiple entries per port, if a hub or a
switch is attached to that port.
•RickMost Ethernet bridges can filter broadcast and multicast frames.
Graziani graziani@cabrillo.edu 57
Filter or Flood (Switch)

• Switches flood frames that are:

– Unknown unicasts
– Layer 2 broadcasts
– Multicasts (unless running multicast snooping or IGMP)
• Multicast are special layer 2 and layer 3 addresses
that are sent to devices that belong to that “group”.
Rick Graziani graziani@cabrillo.edu 58
Why segment LANs? (Layer 2 segments)

Hub Switch

• First is to isolate traffic between segments.

• The second reason is to achieve more bandwidth per user
by creating smaller collision domains.

Rick Graziani graziani@cabrillo.edu 59

•
Why segment LANs? (Layer 2 segments)

switch

Co llisi on
Domai ns
• A switch employs
111 1 3333 “microsegmentation” to
reduce the collision
Abbreviated
MAC domain on a LAN.
addresses

2222 4444
• The switch does this by
creating dedicated network
segments, or point-to-point
connections.

Rick Graziani graziani@cabrillo.edu 60

•
Broadcast domains

S w itc h 1
1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 6
1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3 1 7 2 .3 0 .2 .1 2 S w itc h 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

•A l l ARP
S w i t c hRequest
e d N e tw o rk
T w o S u b n e ts
- T w o N e tw o rk s
1 7 2 .3 0 .1 .2 5
 S e v e r a l C o llis io n D o m a in s 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .1 .2 7
 O n e p e r s w itc h p o r t 1 7 2 .3 0 .2 .1 4 2 5 5 .2 5 5 .2 5 5 .0
 O n e B r o a d c a s t D o m a in 2 5 5 .2 5 5 .2 5 5 .0

• Even though the LAN switch reduces the size of collision domains, all
hosts connected to the switch are still in the same broadcast domain.
• Therefore, a broadcast from one node will still be seen by all the other
nodes connected through the LAN switch.
Rick Graziani graziani@cabrillo.edu 61
•
Switches and broadcast domains

These are logical not

physical representations
of what happens to
these frames.

• Switches flood frames that are:

– Unknown unicasts
– Layer 2 broadcasts
– Multicasts (unless running multicast snooping or IGMP)
• Multicast are special layer 2 and layer 3 addresses that are sent
to devices that belong to that “group”.
Rick Graziani graziani@cabrillo.edu 62
Switches and broadcast domains

• When a device wants to send out a Layer 2 broadcast, the destination

MAC address in the frame is set to all ones.
• A MAC address of all ones is FF:FF:FF:FF:FF:FF in hexadecimal.
• By setting the destination to this value, all the devices will accept and
process the broadcasted frame.
Rick Graziani graziani@cabrillo.edu 63
Switches and broadcast domains

Rick Graziani graziani@cabrillo.edu 64

Communication between switches and
workstation

Rick Graziani graziani@cabrillo.edu 65

•

Hubs to VLANs
Part 1

(Part 2 will be discussed when we cover VLANs.)

•
Using Hubs

• Layer 1 devices
• Inexpensive
• In one port, out the others
• One collision domain
• One broadcast domain

Rick Graziani graziani@cabrillo.edu 67

•
Single Hub

Hub 1

1 7 2 .3 0 .1 .2 1 1 7 2 .3 0 .1 .2 4
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 2 1 7 2 .3 0 .1 .2 3
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
S in g le H u b
 O n e N e tw o r k ( I P N e t w o r k A d d r e s s - u s u a lly )
 O n e C o llis io n D o m a in
 O n e B r o a d c a s t D o m a in

This is fine for small workgroups, but does not scale

well for larger workgroups or heavy traffic.

Rick Graziani graziani@cabrillo.edu 68

•
Single Hub

Hub 1

1 7 2 .3 0 .1 .2 1 1 7 2 .3 0 .2 .2 2
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

Note: Different color

1 7 2 .3 0 .1 .2 2 1 7 2 .3 0 .2 .2 1 hosts refer to
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0 different subnets.
S in g le H u b - T w o s u b n e ts
 T w o s u b n e ts
 O n e C o llis io n D o m a in
 O n e B r o a d c a s t D o m a in
• What if the computers were on two different subnets?
• Could they communicate within their own subnet? Yes
• Between subnets? No, need a router. The sending host will check the destination IP
address with its own IP address and subnet mask. The AND operation will determine
that it is on a different subnet and cannot be reached without sending the packet to a
default gateway (router). This is even though they are on the same physical network.
Rick Graziani graziani@cabrillo.edu 69
•
Multiple Hubs

Hub 1

1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 7
1 7 2 .3 0 .1 .2 3 Hub 2 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .1 .2 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

A ll H u b s
1 7 2 .3 0 .1 .2 4
 O ne N e tw o rk A d d re s s 2 5 5 .2 5 5 .2 5 5 .0
 O ne C o llis io n D o m a in 1 7 2 .3 0 .1 .2 6
1 7 2 .3 0 .1 .2 5 2 5 5 .2 5 5 .2 5 5 .0
 O ne B r o a d c a s t D o m a in 2 5 5 .2 5 5 .2 5 5 .0

• Same issues as before, with more of an impact on the network.

Rick Graziani graziani@cabrillo.edu 70

•
Using Switches

• Layer 2 devices
• Layer 2 filtering based on Destination MAC addresses and
Source Address Table
• One collision domain per port
• One broadcast domain across all switches

Rick Graziani graziani@cabrillo.edu 71

•
Switches create multiple parallel paths

Hub

1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 7
1 7 2 .3 0 .1 .2 3 S w itc h 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .1 .2 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

S w itc h a n d H u b N e tw o r k
1 7 2 .3 0 .1 .2 4
 O n e N e tw o rk 2 5 5 .2 5 5 .2 5 5 .0
 S e v e r a l C o llis io n D o m a in s 1 7 2 .3 0 .1 .2 6
1 7 2 .3 0 .1 .2 5 2 5 5 .2 5 5 .2 5 5 .0
 O n e p e r s w it c h p o r t 2 5 5 .2 5 5 .2 5 5 .0
 O n e fo r th e e n tir e H u b
 O n e B r o a d c a s t D o m a in

Two parallel paths: (complete SAT tables)

• Data traffic from 172.30.1.24 to 172.30.1.25
• Data traffic from 172.30.1.26 to 172.30.1.2
Rick Graziani graziani@cabrillo.edu 72
•
Hubs do not create multiple parallel paths
Collision!

Hub

1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 7
1 7 2 .3 0 .1 .2 3 S w itc h 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .1 .2 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

S w itc h a n d H u b N e tw o r k
1 7 2 .3 0 .1 .2 4
 O n e N e tw o rk 2 5 5 .2 5 5 .2 5 5 .0
 S e v e r a l C o llis io n D o m a in s 1 7 2 .3 0 .1 .2 6
1 7 2 .3 0 .1 .2 5 2 5 5 .2 5 5 .2 5 5 .0
 O n e p e r s w it c h p o r t 2 5 5 .2 5 5 .2 5 5 .0
 O n e fo r th e e n tir e H u b
 O n e B r o a d c a s t D o m a in

As opposed to the Hub:

• Data traffic from 172.30.1.21 to 172.30.1.22
• Data traffic from 172.30.1.23 to 172.30.1.24
Rick Graziani graziani@cabrillo.edu 73
•
Switches create multiple parallel paths

Hub

1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 7
1 7 2 .3 0 .1 .2 3 S w itc h 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .1 .2 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

S w itc h a n d H u b N e tw o r k
1 7 2 .3 0 .1 .2 4
 O n e N e tw o rk 2 5 5 .2 5 5 .2 5 5 .0
 S e v e r a l C o llis io n D o m a in s 1 7 2 .3 0 .1 .2 6
1 7 2 .3 0 .1 .2 5 2 5 5 .2 5 5 .2 5 5 .0
 O n e p e r s w it c h p o r t 2 5 5 .2 5 5 .2 5 5 .0
 O n e fo r th e e n tir e H u b
 O n e B r o a d c a s t D o m a in

Collisions and Switches:

What happens when two devices on a switch, send data to another device
on the switch?
172.30.1.24 to 172.30.1.25 and 172.30.1.26 to 172.30.1.25
Rick Graziani graziani@cabrillo.edu 74
•
Switches create multiple parallel paths

Hub

Frames
1 7 2 .3 0 .1 .2 1 buffered
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 7
1 7 2 .3 0 .1 .2 3 S w itc h 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .1 .2 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

S w itc h a n d H u b N e tw o r k
1 7 2 .3 0 .1 .2 4
 O n e N e tw o rk 2 5 5 .2 5 5 .2 5 5 .0
 S e v e r a l C o llis io n D o m a in s 1 7 2 .3 0 .1 .2 6
1 7 2 .3 0 .1 .2 5 2 5 5 .2 5 5 .2 5 5 .0
 O n e p e r s w it c h p o r t 2 5 5 .2 5 5 .2 5 5 .0
 O n e fo r th e e n tir e H u b
 O n e B r o a d c a s t D o m a in

The switch keeps the frames in buffer memory, and queues the traffic for
the host 172.30.1.25.
This means that the sending hosts do not know about the collisions and do
not have to re-send the frames.
Rick Graziani graziani@cabrillo.edu 75
•
Other Switching Features

Review
• Asymmetric ports: 10 Mbps and 100 Mbps
• Full-duplex ports
• Cut-through versus Store-and-Forward switching

Rick Graziani graziani@cabrillo.edu 76

•
Other Switching Features

S w itc h 1
1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 8
1 7 2 .3 0 .1 .2 2 1 7 2 .3 0 .1 .2 3 1 7 2 .3 0 .1 .2 4 S w itc h 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

A ll S w itc h e d N e tw o r k
1 7 2 .3 0 .1 .2 5
 O n e N e tw o rk 2 5 5 .2 5 5 .2 5 5 .0
 S e v e r a l C o llis io n D o m a in s 1 7 2 .3 0 .1 .2 7
1 7 2 .3 0 .1 .2 6 2 5 5 .2 5 5 .2 5 5 .0
 O n e p e r s w itc h p o r t 2 5 5 .2 5 5 .2 5 5 .0
 O n e B r o a d c a s t D o m a in

• Ports between switches and server ports are good candidates for
higher bandwidth ports (100 Mbps) and full-duplex ports.
• Most switch ports today are full-duplex.
Rick Graziani graziani@cabrillo.edu 77
• Introducing Multiple Subnets/Networks
without Routers
• Switches are Layer 2 devices
• Router are Layer 3 devices
• Data between subnets/networks must pass through a
router.

Rick Graziani graziani@cabrillo.edu 78

•
Switched Network with Multiple Subnets
ARP Request

Switch 1
172.30.1.21
255.255.255.0

172.30.2.16
172.30.2.10 172.30.1.23 172.30.2.12 Switch 2 255.255.255.0
255.255.255.0 255.255.255.0 255.255.255.0

All Switched Network - Two Networks

 Two Subnets
172.30.1.25
 Several Collision Domains 255.255.255.0
172.30.1.27
 One per switch port 172.30.2.14 255.255.255.0
 One Broadcast Domain 255.255.255.0

• What are the issues?

• Can data travel within the subnet? Yes
• Can data travel between subnets? No, need a router!
• What is the impact of a layer 2 broadcast, like an ARP Request?
Rick Graziani graziani@cabrillo.edu 79
•
Switched Network with Multiple Subnets
ARP Request

S w itc h 1
1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 6
1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3 1 7 2 .3 0 .2 .1 2 S w itc h 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

A ll S w itc h e d N e tw o r k - T w o N e tw o r k s
 T w o S u b n e ts
1 7 2 .3 0 .1 .2 5
 S e v e r a l C o llis io n D o m a in s 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .1 .2 7
 O n e p e r s w itc h p o r t 1 7 2 .3 0 .2 .1 4 2 5 5 .2 5 5 .2 5 5 .0
 O n e B r o a d c a s t D o m a in 2 5 5 .2 5 5 .2 5 5 .0

• All devices see the ARP Request, even those on the other subnets that do not need to
see it.
• One broadcast domain means the switches flood all broadcast out all ports, except the
incoming port.
• Switches have no idea of the layer 3 information contained in the ARP Request.This
consumes bandwidth on the network and processing cycles on the hosts.
Rick Graziani graziani@cabrillo.edu 80
•
One Solution: Physically separate the subnets

S w itc h 1
1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 6
1 7 2 .3 0 .1 .2 3 1 7 2 .3 0 .1 .2 5 1 7 2 .3 0 .1 .2 6 S w itc h 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

T w o S w itc h e d N e tw o r k s
 T w o S u b n e ts
1 7 2 .3 0 .2 .1 0
 S e v e r a l C o llis io n D o m a in s 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .2 .1 4
 O n e p e r s w itc h p o r t 1 7 2 .3 0 .2 .1 2 2 5 5 .2 5 5 .2 5 5 .0
 T w o B r o a d c a s t D o m a in 2 5 5 .2 5 5 .2 5 5 .0

• But still no data can travel between the subnets.

• How can we get the data to travel between the two subnets?

Rick Graziani graziani@cabrillo.edu 81

•
Another Solution: Use a Router

1 7 2 .3 0 .1 .1
2 5 5 .2 5 5 .2 5 5 .0
S w itc h 1 1 7 2 .3 0 .2 .1
1 7 2 .3 0 .1 .2 1
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
R o u te r

1 7 2 .3 0 .2 .1 6
1 7 2 .3 0 .1 .2 3 1 7 2 .3 0 .1 .2 5 1 7 2 .3 0 .1 .2 6 S w itc h 2 2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

R o u te d N e tw o rk s
 T w o S u b n e ts
1 7 2 .3 0 .2 .1 0
 S e v e r a l C o llis io n D o m a in s 2 5 5 .2 5 5 .2 5 5 .0
1 7 2 .3 0 .2 .1 4
 O n e p e r s w itc h p o r t 1 7 2 .3 0 .2 .1 2 2 5 5 .2 5 5 .2 5 5 .0
 C o m m u n ic a tio n b e tw e e n s u b n e ts 2 5 5 .2 5 5 .2 5 5 .0

• Two separate broadcast domains, because the router will

not forward the layer 2 broadcasts such as ARP Requests.

Rick Graziani graziani@cabrillo.edu 82

•
Switches with multiple subnets

• So far this should have been a review.

• Lets see what happens when we have two subnets on a
single switch and we want to route between the two
subnets.

Rick Graziani graziani@cabrillo.edu 83

•
Router-on-a-stick or One-Arm-Router (OAR)
interface e 0 1 7 2 .3 0 .1 .1
ip address 172.30.1.1 255.255.255.0 1 7 2 .3 0 .2 .1 s e c
ip address 172.30.2.1 255.255.255.0 secondary R o u te r 2 5 5 .2 5 5 .2 5 5 .0

ARP Request

Secondary addresses S w itc h 1

can be used when the 1 7 2 .3 0 .1 .2 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
router does not support 2 5 5 .2 5 5 .2 5 5 .0
sub-interfaces which will
be discussed later.

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
R o u te d N e tw o rk s 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

 T w o S u b n e ts
 C o m m u n ic a tio n b e tw e e n s u b n e ts
• When a single interface is used to route between subnets or networks,
this is know as a router-on-a-stick.
• To assign multiple ip addresses to the same interface, secondary
addresses or subinterfaces are used.
Rick Graziani graziani@cabrillo.edu 84
•
Router-on-a-stick or One-Arm-Router (OAR)
interface e 0 1 7 2 .3 0 .1 .1
ip address 172.30.1.1 255.255.255.0 1 7 2 .3 0 .2 .1 s e c
ip address 172.30.2.1 255.255.255.0 secondary R o u te r 2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
R o u te d N e tw o rk s 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

Advantages  T w o S u b n e t s
• Useful when C o m are
 there m u limited
n i c a t i o Ethernet
n b e t w e interfaces
e n s u b n e on
t s the router.
Disadvantage
• Because a single link is used to connect multiple subnets, one link is having
to carry the traffic for multiple subnets.
• Be sure this is link can handle the traffic.
Rick Graziani graziani@cabrillo.edu 85
•
Router-on-a-stick or One-Arm-Router (OAR)
interface e 0 1 7 2 .3 0 .1 .1
ip address 172.30.1.1 255.255.255.0 1 7 2 .3 0 .2 .1 s e c
ip address 172.30.2.1 255.255.255.0 secondary R o u te r 2 5 5 .2 5 5 .2 5 5 .0

ARP Request

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
R o u te d N e tw o rk s 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

 T w o S u b n e ts
 C o m m u n ic a tio n b e tw e e n s u b n e ts

• Still the same problem of the switch forwarding broadcast

traffic to all devices on all subnets.
Rick Graziani graziani@cabrillo.edu 86
•
Router-on-a-stick or One-Arm-Router (OAR)
interface e 0 1 7 2 .3 0 .1 .1
ip address 172.30.1.1 255.255.255.0 1 7 2 .3 0 .2 .1 s e c
ip address 172.30.2.1 255.255.255.0 secondary R o u te r 2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
R o u te d N e tw o rk s 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

 T w o S u b n e ts
 C o m m u n ic a tio n b e tw e e n s u b n e ts

Remember to have the proper default gateway set for each host.
• 172.30.1.0 hosts - default gateway is 172.30.1.1
• 172.30.2.0 hosts - default gateway is 172.30.2.1
Rick Graziani graziani@cabrillo.edu 87
•
Interface for each subnet
1 7 2 . 3 0 . 1 . 1 E0 E1 1 7 2 . 3 0 . 2 . 1
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
R o u te r

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
R o u te d N e tw o rk s 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

 T w o S u b n e ts
 C o m m u n ic a t io n b e t w e e n s u b n e t s
• An Ethernet router interface per subnet may be used instead of one.
• However this may be difficult if you do not have enough Ethernet ports
on your router.
Rick Graziani graziani@cabrillo.edu 88
•
Still one broadcast domain
1 7 2 .3 0 .1 .1 1 7 2 .3 0 .2 .1
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
R o u te r

ARP Request

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
R o u te d N e tw o rk s 2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0

 T w o S u b n e ts
 C o m m u n ic a t io n b e t w e e n s u b n e t s

• Still the same problem of the switch forwarding broadcast

traffic to all devices on all subnets.

Rick Graziani graziani@cabrillo.edu 89

•
Introducing VLANs

• VLAN = Subnet
• VLANs create separate broadcast domains within the
switch.
• Routers are needed to pass information between different
VLANs
• This is only an introduction, as we will discuss VLANs
and Inter-VLAN Routing in later chapters.

Rick Graziani graziani@cabrillo.edu 90

•
Layer 2 Broadcast Segmentation
Switch Port: VLAN ID
ARP Request

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0
VLAN 1
VLAN 2

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
VLAN 2 VLAN 1 123456. Port
121221. VLAN

Tw o VLANs
 T w o S u b n e ts
• An ARP Request from 172.30.1.21 for 172.30.1.23 will only be seen by
hosts on that VLAN.
• The switch will flood broadcast traffic out only those ports belonging to
that particular VLAN, in this case VLAN 1.
Rick Graziani graziani@cabrillo.edu 91
•
Layer 2 Broadcast Segmentation

123456. Port
121221. VLAN
Port-centric VLAN Switches
• As the Network Administrator, it is your job to assign switch
ports to the proper VLAN.
• This assignment is only done at the switch and not at the
host.
• Note: The following diagrams show the VLAN below the
host, but it is actually assigned on the switch.
Rick Graziani graziani@cabrillo.edu 92
•
Without VLANs – No Broadcast Control

ARP Request

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
No VLANs
 S a m e a s a s in g le V L A N
 T w o S u b n e ts

• Without VLANs, the ARP Request would be seen by all hosts.

• Again, consuming unnecessary network bandwidth and host processing
cycles.

Rick Graziani graziani@cabrillo.edu 93

•
With VLANs – Broadcast Control
Switch Port: VLAN ID
ARP Request

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0
VLAN 1
VLAN 2

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
VLAN 2 VLAN 1 123456. Port
121221. VLAN

Tw o VLANs
 T w o S u b n e ts

Rick Graziani graziani@cabrillo.edu 94

•
Inter-VLAN Traffic
Switch Port: VLAN ID

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0
VLAN 1
VLAN 2

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
VLAN 2 VLAN 1 123456. Port
121221. VLAN

1. Remember that T w VLAN

o V L A IDs
N s (numbers) are assigned to the switch port
and not to the host. T w o(Port-centric
S u b n e t s VLAN switches)
2. Be sure to have all of the hosts on the same subnet belong to the same
VLAN, or you will have problems.
• Hosts on subnet 172.30.1.0/24 - VLAN 1
• Hosts on subnet 172.30.2.0/24 - VLAN 2
•Ricketc.
Graziani graziani@cabrillo.edu 95
•
Inter-VLAN Traffic
Switch Port: VLAN ID
To 172.30.2.12

1 7 2 .3 0 .1 .2 1
S w itc h 1
1 7 2 .3 0 .2 .1 2
2 5 5 .2 5 5 .2 5 5 .0
2 5 5 .2 5 5 .2 5 5 .0
VLAN 1
VLAN 2

1 7 2 .3 0 .2 .1 0 1 7 2 .3 0 .1 .2 3
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
VLAN 2 VLAN 1 123456. Port
121221. VLAN

Tw o VLANs
 T w o S u b n e ts
• A switch cannot route data between different VLANs.
• Note: The host will not even send the Packet unless it has a
default gateway to forward it to.
Rick Graziani graziani@cabrillo.edu 96
•
Inter-VLAN Routing needs a Router

1 7 2 .3 0 .1 .1 1 7 2 .3 0 .2 .1
2 5 5 .2 5 5 .2 5 5 .0 2 5 5 .2 5 5 .2 5 5 .0
(V L A N 1 ) R o u te r (V L A N 2 )

123456. Port
121221. VLAN

• A router is need to route traffic between VLANs (VLAN = Subnet).

• There are various methods of doing this including Router-on-a-stick
with trunking (more than one VLAN on the link).
• This will be discussed later when we get to the chapter on VLANs and
Inter-VLAN Routing.

Rick Graziani graziani@cabrillo.edu 97

Ch. 4 – Switching Concepts

CCNA 3 version 3.0

Rick Graziani
Cabrillo College