1 00:00:00,000 --> 00:00:00,500 2 00:00:00,500 --> 00:00:03,100 In a previous Nugget, we took a look at some predictions 3 00:00:03,100 --> 00:00:05,290 regarding network traffic and what the Mac Address 4 00:00:05,290 --> 00:00:07,260 Tables would look like on some switches. 5 00:00:07,260 --> 00:00:10,030 In this Nugget, you and I get to verify, or at least 6 00:00:10,030 --> 00:00:13,150 see if our predictions were correct. 7 00:00:13,150 --> 00:00:15,490 Here in the top we have Switch 1, and in the bottom, 8 00:00:15,490 --> 00:00:16,870 we have Switch 2. 9 00:00:16,870 --> 00:00:18,310 And these are Cisco switches. 10 00:00:18,310 --> 00:00:21,400 And to make it a little bit easier and more direct, 11 00:00:21,400 --> 00:00:23,360 I've created a few aliases. 12 00:00:23,360 --> 00:00:25,690 So if we do the command, Show Alias and press Enter, 13 00:00:25,690 --> 00:00:27,580 I've created an alias called clean. 14 00:00:27,580 --> 00:00:30,910 So what that basically means is, if we type in the word clean, 15 00:00:30,910 --> 00:00:34,300 it's automatically going to execute the command Clear, Mac 16 00:00:34,300 --> 00:00:38,260 Address Table Dynamic, which will remove any previously 17 00:00:38,260 --> 00:00:41,110 learned dynamic Mac addresses from the Mac Address Table. 18 00:00:41,110 --> 00:00:44,800 Also I created a little alias called SMT, 19 00:00:44,800 --> 00:00:46,420 for Show Mac Address Table. 20 00:00:46,420 --> 00:00:48,700 And on the switch, if I type that alias name, 21 00:00:48,700 --> 00:00:51,280 it'll issue the command Show, space, Max, space, 22 00:00:51,280 --> 00:00:53,687 Address-Table on the Cisco switch. 23 00:00:53,687 --> 00:00:56,270 And it will help us focus on the prediction of our Mac address 24 00:00:56,270 --> 00:00:58,210 tables, rather than having to type that out 25 00:00:58,210 --> 00:00:59,629 in full each time. 26 00:00:59,629 --> 00:01:02,170 So starting on Switch 1, we'll go ahead and issue the command 27 00:01:02,170 --> 00:01:06,550 Clean, which is Clear Mac Address-Table, space Dynamic, 28 00:01:06,550 --> 00:01:09,440 and we'll do the same thing on Switch 2. 29 00:01:09,440 --> 00:01:12,790 Then we'll do an SMT just for grins on each one, 30 00:01:12,790 --> 00:01:14,770 for Show Mac Address Table. 31 00:01:14,770 --> 00:01:16,830 So we're starting off with a clean slate. 32 00:01:16,830 --> 00:01:20,680 Next, let's go over to PC-1, clear it's ARP cache, 33 00:01:20,680 --> 00:01:23,890 and then do a ping from PC-1 over to PC-2. 34 00:01:23,890 --> 00:01:26,050 So here on PC-1, we'll do a Clear ARP. 35 00:01:26,050 --> 00:01:28,230 Now on these virtual machines that I'm running, 36 00:01:28,230 --> 00:01:30,290 that's the command to clear the ARP cache. 37 00:01:30,290 --> 00:01:33,019 So the command to clear an ARP cache on a local computer 38 00:01:33,019 --> 00:01:34,810 is going to vary based on the device you're 39 00:01:34,810 --> 00:01:38,690 using, whether it be Windows, or Linux, or some other platform. 40 00:01:38,690 --> 00:01:41,710 So if we do a Show ARP, the ARP cache of the ARP table 41 00:01:41,710 --> 00:01:43,252 is empty on this device. 42 00:01:43,252 --> 00:01:44,710 And let's go ahead and do our ping. 43 00:01:44,710 --> 00:01:49,480 So we're going to ping over to PC-2 at 10.100.0.2, 44 00:01:49,480 --> 00:01:50,410 press Enter. 45 00:01:50,410 --> 00:01:51,910 That looks fantabulous. 46 00:01:51,910 --> 00:01:55,300 Let's go take a look at our Mac Address Tables on both Switch 1 47 00:01:55,300 --> 00:01:57,989 and Switch 2 and see if our predictions were correct. 48 00:01:57,989 --> 00:01:59,530 So here on switch one and switch two, 49 00:01:59,530 --> 00:02:02,680 we'll hit the up arrow key to do the Show Mac Address Table 50 00:02:02,680 --> 00:02:03,610 command. 51 00:02:03,610 --> 00:02:05,080 And let's verify. 52 00:02:05,080 --> 00:02:07,720 So we have two entries for VLAN 100. 53 00:02:07,720 --> 00:02:09,910 One is PC-1, one is PC-2. 54 00:02:09,910 --> 00:02:11,860 They are both dynamically learned. 55 00:02:11,860 --> 00:02:14,400 And PC-1 was learned on GIG0/1. 56 00:02:14,400 --> 00:02:16,390 And PC-2 was learned on GIG0/2. 57 00:02:16,390 --> 00:02:19,180 And that's exactly the prediction that we had, 58 00:02:19,180 --> 00:02:22,120 based on looking at both the ARP request and reply, as well 59 00:02:22,120 --> 00:02:23,754 as the ping request and reply. 60 00:02:23,754 --> 00:02:26,170 And now on switch two, we have one dynamically learned Mac 61 00:02:26,170 --> 00:02:29,920 address, that is PC-1's Mac address, right there. 62 00:02:29,920 --> 00:02:32,440 It was learned on switch two on its GIG1/0, 63 00:02:32,440 --> 00:02:34,040 which the trunk interface. 64 00:02:34,040 --> 00:02:36,190 And because it came in with an 802.1q tag, 65 00:02:36,190 --> 00:02:39,040 saying this broadcast is ARP request was associated with 66 00:02:39,040 --> 00:02:42,370 VLAN 100, switch two knows that that Mac address is associated 67 00:02:42,370 --> 00:02:43,690 with VLAN 100. 68 00:02:43,690 --> 00:02:47,440 And it can be reached off that GIG1/0 port. 69 00:02:47,440 --> 00:02:49,030 So my friend, here's what's next. 70 00:02:49,030 --> 00:02:52,630 I would like us to take each of these scenarios independently. 71 00:02:52,630 --> 00:02:56,530 So we'll call them A, B, and C. And with each one of them, 72 00:02:56,530 --> 00:02:59,920 imagine having clean MAC Address Tables with nothing in them. 73 00:02:59,920 --> 00:03:03,370 And also the PCs with no initial ARP cache entries at all. 74 00:03:03,370 --> 00:03:06,640 And then based on the traffic from PC-1 to PC-4, 75 00:03:06,640 --> 00:03:09,020 predict what the Mac Address Tables 76 00:03:09,020 --> 00:03:10,702 will be on Switch 1 and 2. 77 00:03:10,702 --> 00:03:12,910 And then starting again, we clean up caches and clean 78 00:03:12,910 --> 00:03:16,230 tables, do that same scenario for situation B. 79 00:03:16,230 --> 00:03:18,304 And then once again for situation C. 80 00:03:18,304 --> 00:03:20,470 And then what we'll do together in a separate Nugget 81 00:03:20,470 --> 00:03:22,960 is we'll walk through the logic of those three 82 00:03:22,960 --> 00:03:25,720 additional scenarios, as well as the implementation 83 00:03:25,720 --> 00:03:28,930 and verification that our predictions were correct. 84 00:03:28,930 --> 00:03:31,990 Until then, I hope this has been informative for you, 85 00:03:31,990 --> 00:03:35,245 and I'd like to thank you for viewing. 86 00:03:35,245 --> 00:03:35,745