www.CiscoGuide

1 Cisco Press800 East 96th StreetIndianapolis, IN 46240 CCNP SWITCH 642-813 Official Certification GuideDavid Hucaby, CCIE No. 4594 CCNP SWITCH 642-813 Official Certification GuideDavid Hucaby, CCIE No. 4594 Copyright 2010 Pearson Education, byCisco Press800 East 96th Street Indianapolis, IN 46240 USAAll rights reserved. No part of this book may be reproduced or transmitted in any form or by any means,electronic or mechanical, including photocopying, recording, or by any information storage and retrievalsystem, without written permission from the publisher, except for the inclusion of brief quotations in in the United States of AmericaFirst Printing February 2010 Library of Congress Cataloging-in-Publication Data:Hucaby, SWITCH 642-813 official certification guide / David : 978-1-58720-243-8 ISBN-10: 1-58720-243-31. Virtual LANs Examinations study guides. 2. Telecommunications engineers Certification. 3. Cisco Systems, Inc. Examinations study guides.

2 I. Title. dc222009050384 Warning and DisclaimerThis book is designed to provide information about the CCNP SWITCH Exam (Exam 642-813) for theCCNP Routing and switching certification. Every effort has been made to make this book as completeand as accurate as possible, but no warranty or fitness is information is provided on an as is basis. The authors, Cisco Press, and Cisco Systems, Inc. shall haveneither liability nor responsibility to any person or entity with respect to any loss or damages arising fromthe information contained in this book or from the use of the discs or programs that may accompany opinions expressed in this book belong to the author and are not necessarily those of Cisco Systems, AcknowledgmentsAll terms mentioned in this book that are known to be trademarks or service marks have been appropriate-ly capitalized. Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information. Use ofa term in this book should not be regarded as affecting the validity of any trademark or service SWITCH 642-813 Official Certification GuideCorporate and Government SalesThe publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or spe-cial sales, which may include electronic versions and/or custom covers and content particular to your busi-ness, training goals, marketing focus, and branding interests.

3 For more information, please contact: and Government Sales 1-800-382-3419 sales outside the United States please contact: International InformationAt Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each bookis crafted with care and precision, undergoing rigorous development that involves the unique expertise ofmembers from the professional technical feedback is a natural continuation of this process. If you have any comments regarding how wecould improve the quality of this book, or otherwise alter it to better suit your needs, you can contact usthrough email at Please make sure to include the book title and ISBN in greatly appreciate your :Paul BogerBusiness Operation Manager, Cisco Press:Anand SundaramAssociate Publisher:Dave DusthimerManager Global Certification:Erik UllandersonExecutive Editor: Brett BartowCopy Editor:Keith ClineManaging Editor:Patrick KanouseTechnical Editors:Geoff Tagg and Sean WilkinsDevelopment Editor: Andrew CuppProofreader: Apostrophe Editing ServicesSenior Project Editor: Tonya SimpsonEditorial Assistant: Vanessa EvansBook Designer: Louisa AdairComposition: Mark ShirarIndexer: Tim WrightiiiAbout the AuthorDavid Hucaby, CCIE No.

4 4594, is a lead network engineer for the University ofKentucky, where he works with healthcare networks based on the Cisco Catalyst, ASA,FWSM, and VPN product lines. David has a Bachelor of Science degree and Master ofScience degree in electrical engineering from the University of Kentucky. He is theauthor of several Cisco Press titles, including Cisco ASA, PIX, and FWSM FirewallHandbook, Second Edition; Cisco Firewall Video Mentor; and Cisco LANS witching Video lives in Kentucky with his wife, Marci, and two the Technical ReviewersGeoff Taggruns a small networking company and has worked in the networkingindustry for nearly 30 years. Before that, he had 15 years of experience with systems pro-gramming and management on a wide variety of installations. Geoff has clients rangingfrom small local businesses to large multinationals and has combined implementationwith training for most of his working life. Geoff s main specialties are routing, switching ,and networked storage.

5 He lives in Oxford, England, with his wife, Christine, and family,and is a visiting professor at nearby Oxford Brookes Wilkinsis an accomplished networking consultant and has been in the field of ITsince the mid-1990s, working with companies such as Cisco, Lucent, Verizon, and AT&Tand several other private companies. Sean currently holds certifications with Cisco(CCNP/CCDP), Microsoft (MCSE), and CompTIA (A+ and Network+). He also has aMaster of Science degree in information technology with a focus in network architectureand design, a Master s certificate in network security, a Bachelor of Science degree incomputer networking, and an Associate of Applied Science degree in computer informa-tion systems. In addition to working as a consultant, Sean spends a lot of his time as atechnical writer and editor for various SWITCH 642-813 Official Certification GuideDedicationsAs always, this book is dedicated to the most important people in my life: my wife,Marci, and my two daughters, Lauren and Kara.

6 Their love, encouragement, and supportcarry me along. I m so grateful to God, who gives endurance and encouragement(Romans 15:5), and who has allowed me to work on projects like has been my great pleasure to work on another Cisco Press project. I enjoy the net-working field very much, and technical writing even more. And more than that, I mthankful for the joy and inner peace that Jesus Christ gives, making everything writing may be hard work, but I m finding that it s also quite fun because I mworking with very good friends. Brett Bartow, Drew Cupp, and Patrick Kanouse havegiven their usual expertise to this project, and they are am very grateful for the insight, suggestions, and helpful comments that Geoff Tagg andSean Wilkins contributed. Each one offered a different perspective, which helped makethis a more well-rounded book and me a more educated at a GlanceForewordxxIntroductionxxiPart I New CCNP Exam Approaches3 Chapter 1 The Planning Tasks of the CCNP Exams5 Part II Building a Campus Network15 Chapter 2 Switch Operation17 Chapter 3 Switch Port Configuration39 Chapter 4 VLANs and Trunks61 Chapter 5 VLAN Trunking Protocol85 Chapter 6 Aggregating Switch Links105 Chapter 7 Traditional Spanning Tree Protocol123 Chapter 8 Spanning-Tree Configuration151 Chapter 9 Protecting the Spanning Tree Protocol Topology177 Chapter 10 Advanced Spanning Tree Protocol193 Chapter 11 Multilayer Switching215 Part III Designing Campus Networks241 Chapter 12 Enterprise Campus Network Design243 Chapter 13 Layer 3 High Availability265 Part IV Campus Network Services299 Chapter 14 IP Telephony301 Chapter 15 Integrating Wireless LANs331 Part V Securing Switched Networks367 Chapter 16 Securing Switch Access369 Chapter 17 Securing with

7 VLANs393viCCNP SWITCH 642-813 Official Certification GuidePart VI Final Exam Preparation411 Chapter 18 Final Preparation413 Part VII Appendixes419 Appendix AAnswers to the Do I Know This Already? Quizzes421 Glossary431 Index440On This Book s Website:Appendix BSWITCH Exam Updates: Version This Book s CD:Appendix C Memory TablesAppendix D Memory Tables Answer KeyviiContents ForewordxxIntroductionxxiPart I New CCNP Exam Approaches3 Chapter 1 The Planning Tasks of the CCNP Exams5 Perspectives on CCNP Exam Topics Related to Planning5 CCNP Switch Exam Topics That Do Not Require the CLI6 Planning Exam Topics7 Relating the Exam Topics to a Typical Network Engineer s Job8A Fictitious Company and Networking Staff9 The Design Step10 Implementation Planning Step10 Verification Planning Step11 Documenting Implementation Results12 Summary of the Role of Network Engineers12 How to Prepare for the Planning Topics on the CCNP Exams13 Part II Building a Campus Network15 Chapter 2 Switch Operation17 Do I Know This Already?

8 Quiz17 Foundation Topics20 Layer 2 Switch Operation20 Transparent Bridging20 Follow That Frame!22 Multilayer Switch Operation24 Types of Multilayer Switching24 Follow That Packet!25 Multilayer switching Exceptions26 Tables Used in Switching27 Content-Addressable Memory27 Ternary Content-Addressable Memory28 Monitoring switching Tables32 CAM Table Operation32 TCAM Operation35 Exam Preparation Tasks36 Review All Key Topics36viiiCCNP SWITCH 642-813 Official Certification GuideDefine Key Terms36 Use Command Reference to Check Your Memory36 Chapter 3 Switch Port Configuration39 Do I Know This Already? Quiz39 Foundation Topics42 Ethernet Concepts42 Ethernet (10 Mbps)42 Fast Ethernet43 Gigabit Ethernet4510-Gigabit Ethernet47 Connecting Switches and Devices48 Ethernet Port Cables and Connectors48 Gigabit Ethernet Port Cables and Connectors49 Switch Port Configuration50 Selecting Ports to Configure50 Identifying Ports52 Port Speed52 Port Duplex Mode52 Managing Error Conditions on a Switch Port53 Enable and Use the Switch Port55 Troubleshooting Port Connectivity55 Exam Preparation Tasks57 Review All Key Topics57 Define Key Terms57 Use Command Reference to Check Your Memory57 Chapter 4 VLANs and Trunks61 Do I Know This Already?

9 Quiz61 Foundation Topics65 Virtual LANs65 VLAN Membership65 Deploying VLANs69 VLAN Trunks70 VLAN Frame Identification71 Dynamic Trunking Protocol74 VLAN Trunk Configuration75 VLAN Trunk Configuration75ixTroubleshooting VLANs and Trunks79 Exam Preparation Tasks82 Review All Key Topics82 Define Key Terms82 Use Command Reference to Check Your Memory82 Chapter 5 VLAN Trunking Protocol85 Do I Know This Already? Quiz85 Foundation Topics88 VLAN Trunking Protocol88 VTP Domains88 VTP Modes88 VTP Advertisements89 VTP Configuration92 Configuring a VTP Management Domain93 Configuring the VTP Mode93 Configuring the VTP Version95 VTP Configuration Example96 VTP Status96 VTP Pruning97 Enabling VTP Pruning99 Troubleshooting VTP100 Exam Preparation task102 Review All Key Topics102 Complete Tables and Lists from Memory102 Define Key Terms102 Use Command Reference to Check Your Memory102 Chapter 6 Aggregating Switch Links105 Do I Know This Already? Quiz105 Foundation Topics108 Switch Port Aggregation with EtherChannel108 Bundling Ports with EtherChannel109 Distributing Traffic in EtherChannel109 Configuring EtherChannel Load Balancing111 EtherChannel Negotiation Protocols112 Port Aggregation Protocol113 Link Aggregation Control Protocol113xCCNP SWITCH 642-813 Official Certification GuideEtherChannel Configuration114 Configuring a PAgP EtherChannel114 Configuring a LACP EtherChannel115 Troubleshooting an EtherChannel116 Exam Preparation Tasks120 Review All Key Topics120 Complete Tables and Lists from Memory120 Define Key Terms120 Command Reference to Check Your Memory120 Chapter 7 Traditional Spanning Tree Protocol123 Do I Know This Already?

10 Quiz123 Foundation Topics126 IEEE Overview126 Bridging Loops126 Preventing Loops with Spanning Tree Protocol129 Spanning-Tree Communication: Bridge Protocol Data Units130 Electing a Root Bridge131 Electing Root Ports133 Electing Designated Ports135 STP States137 STP Timers139 Topology Changes141 Types of STP146 Common Spanning Tree147 Per-VLAN Spanning Tree147 Per-VLAN Spanning Tree Plus147 Exam Preparation Tasks149 Review All Key Topics149 Complete Tables and Lists from Memory149 Define Key Terms149 Chapter 8 Spanning-Tree Configuration151 Do I Know This Already? Quiz151 Foundation Topics154 STP Root Bridge154 Root Bridge Placement154 Root Bridge Configuration157xiSpanning-Tree Customization161 Tuning the Root Path Cost161 Tuning the Port ID163 Tuning Spanning-Tree Convergence164 Modifying STP Timers164 Redundant Link Convergence167 PortFast: Access-Layer Nodes167 UplinkFast: Access-Layer Uplinks168 BackboneFast: Redundant Backbone Paths170 Monitoring STP171 Exam Preparation Tasks173 Review All Key Topics173 Complete Tables and Lists from Memory173 Define Key Terms173 Use Command Reference to Check Your Memory173 Chapter 9 Protecting the Spanning Tree Protocol Topology177 Do I Know This Already?