CLASS- 07
B R I D G E , N T P, V L A N , V R R P
M.T.M. Monty
Topics we cover
Bridge
NTP
VLAN
Bonding
VRRP
LAB Work
Bridge
Bridge is a way to connect a number of network segment together in a
protocol itself. The bridge feature allows the interconnection of hosts
connected to separate LANs (using EoIP, geographically distributed
networks can be bridged as well if any kind of IP network
interconnection exists between them) as if they were attached to a
single LAN. Packets that forwarded based on Ethernet address, no IP
address. Because the packet forwarding done at Layer-2, all protocol
can be via a bridge.
Bridge
Why Use Bridges?
1. Bridges are important in some networks because the networks are
divided into many parts geographically remote from one another.
Something is required to join these networks so that they can become
part of the whole network.
2. LAN (for example Ethernet) can be limited in its transmission
distance. We can eliminate this problem using bridges as repeaters, so
that we can connect a geographically extensive network within the
building or campus using bridges. Hence geographically challenged
networks can be created using Bridges.
3. The network administrator can control the amount of traffic going
through bridges sent across the expensive network media.
NTP
Network Time Protocol (NTP) is a networking protocol for clock
synchronization between systems/routers over packet-switched,
variable-latency data networks. In operation since before 1985, NTP is
one of the oldest Internet Protocols. NTP was designed by David L.
Mills of the University of Delaware.
VLAN
A VLAN is a group of devices on one or more LANs that are configured
to communicate as if they were attached to the same wire, when in fact
they are located on a number of different LAN segments. Because
VLANs are based on logical instead of physical connections, they are
extremely flexible. Each VLANs is treated as separate subnet/broadcast
domain.
It is can be set the following parameters for creating a VLAN
VLAN number
VLAN name
VLAN state (active or suspended)
Maximum transmission unit (MTU) for the VLAN
VLAN on Interface
VLAN
WHY?
o Multiple LAN in a single physical interface
o Make the local network more simple
o Multiple broadcast domain in a single physical interface
o VLANs can increase security and management of different network
in one single interface
o Priority
Interface Bonding
Bonding is a technology that allows aggregation of multiple Ethernet-
like interfaces into a single virtual link, thus getting higher data rates
and providing failover. Provided High Available and Maximum
Throughput.
Balance-rr Round-robin load balancing. Slaves in bonding interface
will transmit and receive data sequential order. Provides load balancing
and fault tolerance.
Balance-xor: This mode balance outgoing traffic across the active
ports based on the hashed protocol header information and accepts
incoming traffic from any active port.
Active Backup: provides link backup. Online one slave can be active
at a time. Another slave becomes active only, if first one fails.
Interface Bonding
Link Monitoring: method to use for monitoring the link (Whether it
is up or down)
ARP Monitoring: ARP monitoring sends ARP queries and uses the
response as an indication that the link is operational.
MII Monitoring: Media Independent Interface is an abstract layer
between the operating system and the NIC which detects whether the
link is running (It performs also other functions, but in our case this is
the most important.
VRRP
VRRP ( Virtual Router Redundancy Protocol ) is a virtual (interface) interface of
RouterOS MikroTik which enables us to create multiple routers as gateways from
one segment's local network. Communication between routers will use a Virtual
Router ID and on the VRRP interface on each router will be installed a single IP
Address which will be used as a gateway of the local network.
A node of a virtual router can be in one of the following states:
MASTER state, when the node answers all the requests to the instance's IP
addresses. There may only be one MASTER node in a virtual router. This node
sends VRRP advertisement packets to all the backup routers (using multicast
address) every once in a while (set in interval property).
BACKUP state, when the VRRP router monitors the availability and state of the
Master Router. It does not answer any requests to the instance's IP addresses.
Should master become unavailable (if at least three sequential VRRP packets are
lost), election process happens, and new master is proclaimed based on its priority.
For more details on virtual routers, see RFC2338.
The principle of finding the Master is the highest Priority is Active. The rest of the
group is Standby. If the Active device dies, the Standby acts as Active.
Prepared by: M.T.M. Monty ([email protected])
Prepared by: M.T.M. Monty ([email protected])
Bridge
NTP
VLAN
Bonding
VRRP
Bridge
Bridge
Creating Bridge for Bridge-1
Prepared by: M.T.M. Monty (
[email protected])
Bridge
Creating Bridge for Bridge-2
Bridge
Bridge
Before assigning interfaces on bridge port, we must check the interfaces Master port.
Here ether3’s Master port is ether2 Let’s assign all the ports without any
Master ports
Prepared by: M.T.M. Monty ([email protected])
Bridge
Assign Interfaces on Bridge Interface. According to
our topology ether-2 & 3 will be under Bridge-1,
and ether-4 & 5 will be under Bridge-2
Bridge
In this portion if you use Master Port of
any interface, than you need not to
assign interfaces individually. Only
Master port will be assign and slaves
interfaces will be automatically added.
Bridge
IP Setup on Bridge Interfaces
Bridge
Now lets check from Downside…
Host connected from port-2/3
Bridge
Now lets check from Downside…
Host connected from port-4/5
Bridge
Now lets check the reachability from Network-1 to Network-2 …
So, it is reachable
Prepared by: M.T.M. Monty ([email protected])
NTP
VLAN
ROUTER-01 ROUTER-02
If we think this kind of topology, then what we need to do:
1. Create VLAN
2. Set IP addresses on VLAN
VLAN
VLAN
Check the Interfaces List
VLAN
Set the IP Address on VLAN-100 interface
VLAN
The same procedure will be for Router-2
VLAN
The same procedure will be for Router-2
VLAN
Configuration Done. Lets check the point to point connectivity.
Its pinging. So the Point to point connectivity has been established. And
traffic can be pass through VLAN.
VLAN
If we think this kind of topology, then what we need to do:
1. Create VLAN
2. Create Bridge
3. Assigning ports on Bridge
4. Assigning IP addresses
5. DHCP Setup
6. Check from Downside
Prepared by: M.T.M. Monty (
[email protected])
VLAN
1. VLAN Creation Done
VLAN
2. Bridge Creation Done
VLAN
3. Port
assigning
on bridge
done
VLAN
4. IP Assigning has done
VLAN
5. DHCP setup has done
VLAN
6. Now let’s check from LAN side
IP Obtained from port 3 of Mikrotik
Prepared by: M.T.M. Monty (
[email protected])
VLAN
6. Now let’s check from LAN side
IP Obtained from port 4 of Mikrotik
Prepared by: M.T.M. Monty (
[email protected])
Interface Bonding
Bonding IP Network is: 192.168.100.0/30
Interface Bonding
1. Creating Bonding by
assigning interfaces to be
bond
Interface Bonding
2. Create a bridge and assign
bonding interface on bridge port
Interface Bonding
Mikrotik-01 configuration has been done. Now the same procedure
will needed to do in Mikrotik-02 also.
Prepared by: M.T.M. Monty (
[email protected])
Interface Bonding
Interface Bonding
Interface Bonding
Mikrotik-02 configuration also has been done.
Interface Bonding
Now check the point to point rechability from both Mikrotik 1 & 2
Interface Bonding
Now check the traffic
VRRP
VRRP
Creating VRRP Interface on Mikrotik-01
VRRP
Add the IP address according to the topology in Mikoritk-1
VRRP
Creating VRRP Interface on Mikrotik-02
VRRP
Add the IP address according to the topology in Mikrotik-2
VRRP
Now check from Router-01. VRRP is in Master mode, because its value (120) is
greater than Router-2
Prepared by: M.T.M. Monty ([email protected])
VRRP
Router-2 is in Backup Mode. If Router-1 is failure, Than the Router-2 VRRP will
be in action.
Prepared by: M.T.M. Monty ([email protected])
Thank You Very Much!!
