Name - Khant Phyo
Year of exp - Field Engr (RayTel Myanmar)
- Outdoor Wireless Engr (Frontiir)
- PS core Engr (Huawei)
> CDMA800 swap project
> MPT/KSGM Unified Core Project
> Telenor New License project
- Core Network Team Leader (Ericsson Myanmar)
CCNA Routing & Switching (M2)
In this course, you will learn about Binary & Decimal,
Hexadecimal, APR, MAC address Table and all about switch
HexaDecimal
Address Resolution Protocol (ARP)
The Address Resolution Protocol was specified in RFC-Standard 826 in 1982 to
accomplish the resolution of IPv4 addresses into MAC addresses. ARP is indispensable for the
transmission of data in Ethernet networks for two reasons: on the one hand, the individual
data frames (also Ethernet frames) of an IP packet can only be sent to the desired
destination hosts by means of the hardware address. However, the Internet protocol cannot
refer to these physical addresses independently. On the other hand, due to its’ limited
length, the IPv4 protocol does not provide the option to store device addresses. ARP provides
a solution with its’ own ARP caching mechanism. For the newer IPv6, the corresponding
functions are adopted by the Neighbor Discovery Protocol (NDP).
When resolving the address via ARP, a distinction must always be made as to whether the
target host’s IP address is located in the same local network of another subnet. In that case,
if the MAC address is to be assigned to a specific address, the subnet mask is first inspected.
If the IP is located in the local network, the first step is to check whether there is
already an entry for this in the ARP cache.
How does ARP work?
At the network layer when the source wants to find out the MAC address of the destination
device it first looks for the MAC address(Physical Address) in the ARP cache or ARP table. If
present there then it will use the MAC address from there for communication. If you want to
view your ARP cache(in Windows Operating System) then open Command Prompt and type
command —‘arp -a’ (without quotes). An ARP table looks something like this.
If the MAC address is not present in the ARP table then the source device will generate an
ARP Request message. In the request message the source puts its own MAC address, its IP
address, destination IP address and the destination MAC address is left blank since the source is
trying to find this.
Sender's MAC Address 00-11-0a-78-45-AD
Sender's IP Address 192.16.10.104
Target's MAC Address 00-00-00-00-00-00
Target's IP Address 192.16.20.204
The source device will broadcast the ARP request message to the local network.
The broadcast message is received by all the other devices in the LAN network. Now each
device will compare the IP address of the destination with its own IP address. If the IP address
of destination matches with the device's IP address then the device will send an ARP Reply
message. If the IP addresses do not match then the device will simply drop the packet.
Switch will float out that arp request (Broadcast msg) to all of it’s port (except sender port) if not in it’s MAC address table..
How does a switch learn MAC Addresses
There’s a switch in the middle and we have 3 computers. All computers have a MAC address
but I’ve simplified them. Our switch has a MAC address table and it will learn where all the
MAC addresses are in the network. Let’s send something from H1 to H2:
#show port-security
#show port-security address
#show port-security interface fa0/1
Port Security Lab 2 - Sticky
enable
conf t
int fa0/3
interface fa0/1 ကို access mode
switchport mode access ေြပာင်းေပးလိက
ု ်တာပါ။
port security feature ကို enable လုပ်လိက
ု ်တာပါ။
switchport port-security ပီ းေတာ့
switchport port-security mac-address sticky mac ကို stickly learning လုပ်မယ်လို့ ဆိုလိတ
ု ာပါ
switchport port-security maximum 4 default maximum number ကေတာ့ 1 ပါ
default violation mode က shutdown ပါ default
Switch(config-if)#switchport port-security violation ? အတိငု ်းပဲ ထားလိကု ်ပါ
protect Security violation protect mode
restrict Security violation restrict mode
shutdown Security violation shutdown mode
switch(config-if)#switchport port-security aging time 5 Aging time ကို 5 မိ နစ်ထားလိက
ု ်ပါ
Port Security lab 3 - Dynamic
Absolute timeout vs Inactive timeout
An aging timer. This provides for a MAC address to be removed from being learned after a
configured amount of time. By default, aging is not enabled and addresses are not deleted unless
the device is rebooted or the MAC addresses are cleared through a removal command being
issued.
There are two different methods of implementing secure MAC address aging,
Absolute— ခု command အရ သူသည် Secure MAC address ကို specific time (2 min) ေရာက်ရင် ဖယ်ထုတ်
(delete) လိက
ု ်မှာပါ။
Inactivity— သည်ေကာင်ကေတာ့ Secure MAC address တစ် ခု idle ြဖစ် တဲအ
့ ချ ိန် နှစ်မိနစ် ကာမှ ဖျက်ပစ် တာပါ။
Final Lab
