Cisco Certified Internetwork Expert (CCIE) - Enterprise Infrastructure
1 Network Architecture and Design
1-1 Enterprise Network Design Principles
1-2 Network Segmentation and Micro-Segmentation
1-3 High Availability and Redundancy
1-4 Scalability and Performance Optimization
1-5 Network Automation and Programmability
1-6 Network Security Design
1-7 Network Management and Monitoring
2 IP Routing
2-1 IPv4 and IPv6 Addressing
2-2 Static Routing
2-3 Dynamic Routing Protocols (RIP, EIGRP, OSPF, IS-IS, BGP)
2-4 Route Redistribution and Filtering
2-5 Route Summarization and Aggregation
2-6 Policy-Based Routing (PBR)
2-7 Multi-Protocol Label Switching (MPLS)
2-8 IPv6 Routing Protocols (RIPng, EIGRP for IPv6, OSPFv3, IS-IS for IPv6, BGP4+)
2-9 IPv6 Transition Mechanisms (Dual Stack, Tunneling, NAT64DNS64)
3 LAN Switching
3-1 Ethernet Technologies
3-2 VLANs and Trunking
3-3 Spanning Tree Protocol (STP) and Variants (RSTP, MSTP)
3-4 EtherChannelLink Aggregation
3-5 Quality of Service (QoS) in LANs
3-6 Multicast in LANs
3-7 Wireless LANs (WLAN)
3-8 Network Access Control (NAC)
4 WAN Technologies
4-1 WAN Protocols and Technologies (PPP, HDLC, Frame Relay, ATM)
4-2 MPLS VPNs
4-3 VPN Technologies (IPsec, SSLTLS, DMVPN, FlexVPN)
4-4 WAN Optimization and Compression
4-5 WAN Security
4-6 Software-Defined WAN (SD-WAN)
5 Network Services
5-1 DNS and DHCP
5-2 Network Time Protocol (NTP)
5-3 Network File System (NFS) and Common Internet File System (CIFS)
5-4 Network Address Translation (NAT)
5-5 IP Multicast
5-6 Quality of Service (QoS)
5-7 Network Management Protocols (SNMP, NetFlow, sFlow)
5-8 Network Virtualization (VXLAN, NVGRE)
6 Security
6-1 Network Security Concepts
6-2 Firewall Technologies
6-3 Intrusion Detection and Prevention Systems (IDSIPS)
6-4 VPN Technologies (IPsec, SSLTLS)
6-5 Access Control Lists (ACLs)
6-6 Network Address Translation (NAT) and Port Address Translation (PAT)
6-7 Secure Shell (SSH) and Secure Copy (SCP)
6-8 Public Key Infrastructure (PKI)
6-9 Network Access Control (NAC)
6-10 Security Monitoring and Logging
7 Automation and Programmability
7-1 Network Programmability Concepts
7-2 RESTful APIs and NETCONFYANG
7-3 Python Scripting for Network Automation
7-4 Ansible for Network Automation
7-5 Cisco Model Driven Programmability (CLI, NETCONF, RESTCONF, gRPC)
7-6 Network Configuration Management (NCM)
7-7 Network Automation Tools (Cisco NSO, Ansible, Puppet, Chef)
7-8 Network Telemetry and Streaming Telemetry
8 Troubleshooting and Optimization
8-1 Network Troubleshooting Methodologies
8-2 Troubleshooting IP Routing Issues
8-3 Troubleshooting LAN Switching Issues
8-4 Troubleshooting WAN Connectivity Issues
8-5 Troubleshooting Network Services (DNS, DHCP, NTP)
8-6 Troubleshooting Network Security Issues
8-7 Performance Monitoring and Optimization
8-8 Network Traffic Analysis (Wireshark, tcpdump)
8-9 Network Change Management
9 Emerging Technologies
9-1 Software-Defined Networking (SDN)
9-2 Network Function Virtualization (NFV)
9-3 Intent-Based Networking (IBN)
9-4 5G Core Network
9-5 IoT Network Design and Management
9-6 Cloud Networking (AWS, Azure, Google Cloud)
9-7 Edge Computing
9-8 AI and Machine Learning in Networking
3 LAN Switching Explained

3 LAN Switching Explained

Key Concepts

MAC Address Learning

MAC Address Learning is the process by which a switch learns the MAC addresses of devices connected to its ports. When a frame is received, the switch examines the source MAC address and associates it with the incoming port. This information is stored in the switch's MAC address table. For example, if a frame with source MAC address 00:1A:2B:3C:4D:5E arrives on Port 1, the switch will update its MAC address table to associate 00:1A:2B:3C:4D:5E with Port 1.

Frame Forwarding

Frame Forwarding is the process by which a switch forwards frames to their destination. When a frame is received, the switch checks its MAC address table to determine the appropriate outgoing port. If the destination MAC address is found in the table, the frame is forwarded only to that port. If the destination MAC address is not found, the frame is broadcast to all ports except the incoming port. For instance, if a frame with destination MAC address 00:1A:2B:3C:4D:5E is received, and the switch's MAC address table shows that this address is associated with Port 2, the frame will be forwarded only to Port 2.

Switching Loops and Spanning Tree Protocol (STP)

Switching Loops occur when there are multiple paths between switches, leading to frames being forwarded in a continuous loop. This can cause network congestion and broadcast storms. Spanning Tree Protocol (STP) is used to prevent loops by logically blocking redundant paths, ensuring that there is only one active path between any two devices. STP operates by electing a root bridge and calculating the shortest path to the root bridge for each switch. For example, in a network with three switches, STP will determine the root bridge and block redundant links to prevent loops.

VLANs (Virtual Local Area Networks)

VLANs are used to segment a physical network into multiple logical networks. Each VLAN is treated as a separate broadcast domain, meaning that traffic within a VLAN is isolated from other VLANs. This improves security and performance by reducing unnecessary broadcast traffic. For instance, a company might create separate VLANs for HR, Finance, and IT departments, ensuring that traffic between these departments is isolated.

Trunking and Inter-VLAN Routing

Trunking is the process of carrying multiple VLANs over a single link between switches. This is achieved using protocols like 802.1Q, which tags frames with VLAN information. Inter-VLAN Routing is the process of routing traffic between different VLANs. This is typically done using a router or a Layer 3 switch. For example, if a device in VLAN 1 needs to communicate with a device in VLAN 2, the traffic will be routed through the trunk link and then forwarded to the appropriate VLAN.

Examples and Analogies

Consider a large office building with multiple departments. MAC Address Learning is like each department registering its location with the building's directory. Frame Forwarding is like the directory directing visitors to the correct department. Switching Loops are like circular hallways that cause confusion, and STP is like a building manager who blocks off these hallways to ensure smooth navigation.

VLANs are like separate floors in the building, each with its own set of rooms (devices). Trunking is like a central elevator that can take you to any floor, and Inter-VLAN Routing is like a concierge who directs you to the correct floor and room.

Understanding LAN Switching is crucial for designing and managing efficient and secure enterprise networks. By mastering these concepts, network administrators can ensure optimal performance, security, and scalability of their infrastructure.