All language subtitles for 4. VLAN

In the section we're going to talk about the land's actually.

It was so hard to understand why we use reelin on the first day of my networking days.

But after day by day it was easier to get it.

Generally we're making virtue local area networks on the same switch and making them to communicate.

The main reason we are using realigns is separating the broadcast traffic as you know our local network

broadcasts are not forwarded over rather.

But if you use re-aligned you don't need the rudder to eliminate the broadcast traffic.

You can use relearns on the sense of each and broadcast traffic is not forward.

But when that will pass it will it has on its broadcast traffic lines are not used on Plug and Play

which are the dummy.

So it's.

And please keep in mind that different religions tenets communicate each other without a layer 3D wise

such as a rudder or firewall maybe listicle to the wheel and communication.

Here we have the latest twitchy as you can see in here.

And we have two different religions and we have these two one two three and four in here.

First there is zero one and face it is zero.

Two can communicate with each other because they're on the same Melanne face zero of three and faces

are 0 4 also which are PC 3 and PC four can communicate with each other because they are on this same

wheel and two but there is zero one can not communicate with Prestatyn 0 3 and face the 0 4 because

they are on the difference with Lance.

If you want to establish a connection between first then 0 1 and 3 and 4 with we need to use Layer 3

the word searches or rather or maybe a firewall or something like that.

Let's take a look to the benefits of religion well as proof of the following benefits the first benefit

is security separating systems that have sensitive data from the rest of the network decreases the chances

that people will gain access to the information they are not authorized to see.

The second benefit is logical grouping when users on a real Moochie a new physical location but continue

to perform the same job function.

The station of those users do not need to be reconfigured.

Similarly if users change their job functions they need not physically move.

Changing the membership of the End station to that of the Deity team makes the users and stations local

to the resources of the new team.

The third benefit is will reduce the need of rudders will reduce the need to have rudders deployed on

a network to contain broadcast traffic polluting of a packet is limited to the switch ports that belong

to it to the two that will do for the benefit of the villain is reducing of the network traffic by confining

the broadcast domains and stations on a villain are prevented from listening to or receiving broadcasts

not intended for them.

Moreover if a router is not connected between the Whelan's and stations of a real and cannot communicate

with the installations of the other willen Let's talk about the real Antibes.

Now we have six types of Relafen.

The first type is the default villa.

This is basically where all ports belong to by default guys.

This is technically real one and it can't be deleted from the switch.

The second thing is that the second type of the villans are the they Whelan's.

This is the normal reelin where the traffic is carried and where the client data goes through the local

or network.

The third is the voice we learn the voice we lands are Coover your to carry the voice traffic there

for is the management.

Learn this religion is used on a different network for management purposes.

The fifth is the need to learn the nature we learn.

Is that why Q only concept terrific belonging do need we learn is not taxed.

Not that by default mealand Brown is the native learn on all Cisco catalysed.

So its you can this ignored any Whelan's or as your native land on your switch and not that it need

to merge on both ends of the trunk connection.

The last time we are going to focus on is the research we learn there are some bills that are researched

internally over yours to which in order to use them on other M.R. the environments like FDDI suckering

and something like that.

This specific villans used for these two networks are between 1000 and two and 1000 then five

listicle to the voice feel an operation.

It is always recoupment the two separate data and most terrific and most of the times we are using a

separate We learned to carry was traffic.

Usually I phone sit next to a computer on the same desk guys.

They record the same you pick cables as computers and also use the Internet.

This will work but it has some disadvantages.

You need to install a new cable from the switchboard to the IP phone.

Or maybe you will lose a switch port for the IP phone to Solti's most IP phones including Cisco where

three port switch inside of the IP phone one port connects to the two edge one porch connects to the

computer one internal port connects to the phone.

This the ellos as to connect the IP phone and computer like you see in the screen right now as you can

see in here.

We have a switch and we have an IP phone envy ever PC in here with just one cable coming to our IP phone

and IP form has two different ports.

One of them are local or in a port they are either port.

Is the PC part.

We're terminating the cable coming from switch on the local or in a port and we're terminating the cable

coming from PC on our PC port of the IP phone to Vienna in a year.

We are also different.

We last we're vigilant tend to carry the day of the PC and we're also Villon 30 to carry the voice traffic

coming from the IP phone to the switch.

And here is the configuration we're coming into the interface mode by typing interface and first the

third 0 or 16 for this configuration then to define.

And that's a Willam we are chirruping switch port access will learn and the villain number.

This is the access we learn.

And we're also defining voice we learn as you can see and the command is switch poort voice real and

and the real number which is thought for this situation.

Let's take to the wheel and trying to.

Now we have two modes of switch ports and they are access or trunk and access port can carry a single

will then however truck ports can transport in multivalent information but when we last each frame sets

the real the information and that is known as tagging to for example in here we need to define the big

0 1 as an access port.

We need to define the gig 0 2 as oxers poor.

We need to define the Dijk 0 1 and 0 2 off to see which to also as oxers ports but we need to define

this guy's gig 0 three guys as a trunk port because we're going to carry two different Villines which

are Willum 100 and we learn 200 for example.

Let's go with the wheel and try again.

Trunks are used to carry traffic that belongs to multiple violence between devices all the same link

and diverse can that are mine which will and the traffic belongs to by it's villaine identifier the

villain identifier is a pack that is encapsulated with the data.

I asked the L and the DOT why Q Are two types of encapsulation that are used to carry data for a multiple

villans over trunk lengths.

I asked Al is this guy is a Cisco proprietary protocol for the interconnection of multiple surveys and

maintenance of information as traffic goes between Swades and that mine.

Q Is there I threw Bill EastEnder for taking friends on their trike Let's go ahead with implementing

Whelan's and Bil'in security.

We have different Willum range for different purposes.

The relearns zero and four thousand ninety five are used for system use only.

And their research we love than is the default.

We learn as you know relations between two and one thousand and one that are used for the Internet.

Lance Williams between 1002 and 1005 are used for Cisco defaults for FDDI and the token rent and relearns

between 1000 and twenty five and forty thousand ninety four are the extended range Rylands and they

are used for internet Whelan's only.

Let's take a look to the real and configuration now to configure real and that's pretty straight forward.

On the configuration mode we are typing replan and we're defining every number in here.

On the switch one as you can see we are using two Whelan's Well I'm 100 and we are on two hundred end

by typing Villon and the real number we are getting into the config mill mud on the coffee will melt.

We can do anything to our relearns as you can see which is I tene year and which is HRO for Villon 200

after opening.

Our relations are for after core figuring them globally though we are getting into the interface mode.

For example for interface gigs 0 1 we are defining the switch port mode as access because that's carrying

just Bombay and then is then we are saying our switch port to the related.

We learn as you can see this same thing in here also.

Let's take a look to the trunk configuration only digs 0 3 we are going to make trunk of figuration

because I'm going to carry multiple relay any information from here which are we and one hundred answers

which are real and 100 and 200.

So to define in thrang we're configuring switch port thrang and we are typing the.

Are encapsulation type which is that why Kuna here.

There we are typing switch port mod's through this time instead of access.

Lastly we are typing the switchboard TURANGA elde and we are typing the Meilan numbers that we are allowing

to go from that try Let's take a look to the dynamic TripIt trying Porthcawl DTP now DDP is this is

appropriate.

We're trying to protocol which is used to automatically negotiate throwing spit when it's got quite

severe.

So it's dynamic trunking Porthcawl DTP can be used to negotiate the enformed trunk connection but this

could switch dynamically dynamic trunking protocol can operate in different throwing modes as shown

in the graphic if you want to create truckling between two suites usually use for example to rank and

rank on board.

You can use twang.

And also you Cale's throng.

And are terrible.

You can use Aalto and throng.

Also indiscernible and also retailers that terrible with the throng.

Also and the terrible So

as you can see in here one site is configured as switch poor mode dynamic.

The Super Bowl and the other side is outsole And as I showed you on the previous slide that's horrible

and output is forming the trunk link.

But in here we're defining also on both ends.

But we cannot tronc we cannot perform a trunk link to where they are transport's we are using show interfaces

to run commands.

And we can see the front porch which are making an actual train King.

At that moment and other very fine command is show interfaces and interface name and the switch port

we can see the administratively or the operational mode.

If they are trying or not let's say go to the come on we learn at tech types as to which interface which

is connected to and and the ways a computer may be Grise or a printer are normally in Access mode and

that and they will have to access to its own real traffic from the other religions are not forwarded.

Wired that interface as you know consider a situation where an attacker is connected to a switch interface

which is configured with either dynamic.

There is this terrible dynamic out or trunk Mobbs if the Ebtekar can generate DTP messages from his

computer directing at truckling can be formed between his computer and the switch.

Another method of switch spoofing is by connecting by connecting Rook's which an interface configured

with dynamic.

These are both dynamic ultra or strong modes.

Let's take a look to the double tagging attack.

Lastly double tagging real and hoping ETEC takes advantage of my Q and that like tagging and tags removed.

Process of many types of surveys many surveys review all the data mining to tack you double taking ETEC

and Ebtekar change the or regional frame to add to the land tax and out-of tag which is of his own land

and an inner hidden tag of the victims.

We'll then hear the errors PC must belong to the net.

We love to try and link when double Turks frame reaches the switch one meaning in this example the switch

can only see the outer Whelan of the wheel and that the interface really belongs to this switch so which

one will know remailed all too real and tech and will forward to all the ports belong to Natsu will

land and in this example there is villaine one one copy of that frame is forward to the trunk link to

reach the next switch which is switched to when the frame reaches the switch to.

It will open the frame to see the second tech switch to real.

Now assume that frame blanks to Villon 100 and it is forward will on 100.