實(shí)驗(yàn)—配置Cisco交換機(jī)+實(shí)驗(yàn)(2)—配置VLAN

1、實(shí)驗(yàn)(1)配置Cisco交換機(jī)要配置好Cisco交換必需要熟悉配置命令及相關(guān)的知識(shí)。一、幾種配置命令模式switch這種提示符表示是在用戶命令模式，只能使用一些查看命令。switch#這種提示符表示是在特權(quán)命令模式。switch(config)#這種提示符表示是全局配置模式switch(config-if)#端口配置命令模式lenatilEjIS1 if di s ati 1 elenEiLileIffccnf tEnter confiizn.iration coioiLLELtids, one per line. End with i1 (ccnf igj tthostname CoreSW

2、CoreSW(config)tt int e r face f0/1C o r e SW (c on f i g- i f J #|圖1幾種命令模式二、檢查、查看命令這些命令是查看當(dāng)前配置狀況，通常是以show(sh)為開始的命令。show version查看IOS的版本、show flash查看flash內(nèi)存使用狀況、show mac-address-table 查看 MAC 地址列表Core SIiJ if show ver si onCisco IOS Software C2960 Software (C2960-LAI-IE：ASE-H) r Version 1Z. Z (25) FX

3、f P.ELEAS E SOFTWARE (fcl)Copyright (cJ 1986-Z00S by Cisco Systeiiis, Inc.Coiiipiled Wed 12-Oct-O E ZZ: 05 by pt_teaiiiD.OH: CZ960 Boot Leader (C2960-HE；00T-H：i Version 12.2 (Z5rJ FX, RELEASE SOFTTiTAP.E (fc 4)Systeiii returned to P.OH by power-onCisco WS-CZ960-Z4TT (RC3Z300) processor (revision CO)

4、 with Z1039K b3rt.es o f iLLPiiiorZ4 F ast Etl ie rnet/IEEE 802-3 inter face(s)2 Gigalziit Ethernet/IEEE E：0Z. 3 inter f ace (s)0001- 4397. DI：1464K byt es o f flash-simulated non-vo1at i1e configut at: Base ethernet MAC Address73-9832-06341-0097-0Z圖2Mcitherhoard assmmhly nuioher P owe r supp ly p a

5、rt muil：i e rCoreSTiJitsh flashDire ct o ry o f flash:/1 -rw- 44149Z1 cZ960-1 EQiLiase-iiLZ_ 1ZZ-Z5. FX - bin640163S4 brr.es total (S9601463 hrt-es free) CoreSWit圖3CoreSWfish iiiac-address-tatileMac Address TatileVI aiiHac AddressTypgPorts000d.bdBc.6cddDT1JAMICFaO/21CoreSW|00d0-baa9.975cDT1JAMICFaO/

6、1Show ?幫助命令顯示當(dāng)前所有的查看命令三、密碼設(shè)置命令Cisco交換機(jī)、路由器中有很多密碼，設(shè)置好這些密碼可以有效地提高設(shè)備 的安全性。switch(config)#enable password 設(shè)置進(jìn)入特權(quán)模式進(jìn)的密碼switch(config-line)可以設(shè)置通過console端口連接設(shè)備及telnet遠(yuǎn)程登錄時(shí)所需要的密碼CoreSIiTpconf t Enter confiiT-iration comiLLELtids, one per line- End with CNTL/Z- Co r e SW (c on fig) it enati le pas swo rd ati

7、le CoreSW(conf ig) it 1 ine console 0Core SW i： c on f ig-1 ine J ftp as swo rd lineCore SW (c on f ig-1 ine ) ft loginCoreSIff(config-line) ttline vty 0 4Core SW (c on fig-1 ine) ftp as swo r dCore SW (c on f ig-1 ine ) ft loginCoreSW(config-1ine)ttexitCoreSW (config) #|圖6設(shè)置交換機(jī)的各種密碼默認(rèn)情況下，這些密碼都是以明文的

8、形式存儲(chǔ)，所以很容易查看到。為了避 免這種情況，使用保存的口令：Switch (config)#enable secret “密碼”四、配置IP地址及默認(rèn)網(wǎng)關(guān)CoreSW# conf tEnter confiiin-iration coiiiiiiaids, one per line- End with CNTL/Z-Core SW ( conf igj tt int er face vl aiilCoreSW(ccnfig-if)Sip address 19Z.16S.0.Z53 ZSS.Z5S.ZSS.QCoreSW(config-i f)fiCoreSW(config) it ip de

9、fault-gateway 19Z_ 168-0. Z54圖7五、管理MAC地址表switch#show mac-address-table 顯示 MAC 地址列表switch#clear mac-address-table dynamic 清除動(dòng)態(tài) MAC 地址列表CoreSWttshow mac-address-tEiLileHac Address Table：VI ailMac AddressTypePort-?0005.Sed3.c4blDYNAMICFa0./41OOOd-bdSc.6cddDYNAMICFaO/21LiLidO_baa9.975cDYNAMICFa0/lCoreSW

10、ficlear iliac-address一七atile clynaiiiiz CoreSWitCor eSW (config) ttiiiac-addr ess-tatile st at i c OOdO - baa9 - 975c vlaii 1 int e r f ac e f aU /1CoreSW (config) it exit-% SYS - E - C ONFI G_I: Conf i iT-ire d f roiii console by consoleCor eSWifsh iliac - addr e s s -t ati 1 eMac Address TahileVI

11、ailMac AddressTypePorts10UU5.5ed3.c4blDYNAMICFaO/4100ud-bdSc.6cddDYNAMICFaO/Z10Lid0.baa9_975cSTATICFaO/1CoreSWit圖9設(shè)置靜態(tài)MAC地址七、一個(gè)配置實(shí)例圖10實(shí)例拓?fù)鋱DSwitchSwitcheiSwit chit z on figConf iiT-ir ing from terminal, niemory, or network teriiiinal ? t Ent er c on f i grit at i on c omiiiaiids . one per line - End

12、with CNT L/Z Switch (config) it int e r face f aO/1Suit ch i： c on f i g- i f J if descript i on 1 ink P.out e rASwitch(conf ig-if) ftinter f ace vlaiilS wit ch (c on f i g- i f) ft ip address 19Z-168-1.Z 2SS. Z55.255.0Switchi：conf ig-if) ttaxitSwit ch (z on fig) itho st-nanie Z960Z960 (c on f i a)

13、ft in de f ault - aat ewav 192 - 168 -1 - 1圖11圖122960 ( c iZn fig) Jtse rvi ce pas swot cl- enc r ypt i on2960 (c on fig) Jtenaile pas swo rd atle2960 (conf ig) Jtline console 02960(config-line)#p assword 1ine2960(config-line)flogin2960(config-line)SIine vty 0 42 9 6 0 i； c on fig-line) #p as swo r

14、d vtyZ960(config-line)#loginZ960(c口n fig-line)#exitfrnnf-i rr、itl圖13圖14保存對(duì)交換機(jī)的配置實(shí)驗(yàn)(2)-配置VLANVlan(Virtual Local Area Network)即虛擬局域網(wǎng)。VLAN可以把同一個(gè)物理 網(wǎng)絡(luò)劃分為多個(gè)邏輯網(wǎng)段，因此，Vlan可以抑制網(wǎng)絡(luò)風(fēng)暴，增強(qiáng)網(wǎng)絡(luò)的安全性。、實(shí)例拓?fù)鋱D圖1 交換機(jī)Cisco 2960二、創(chuàng)建VLAN在Cisco IOS中有兩種方式創(chuàng)建vlan，在全局配置模式下使用vlan vlanid 命令，如 switch(config)#vlan 10；在 vlan database

15、下創(chuàng)建 vlan,如 switch(vlan)vlan 20SwitchmenSwitch#conf tEnt er c on f i gur at i on c oiiiiiLELtids . one per line - End with CNTL/Z -Suit ch i； c cn fig) itho st-naiiie Core SWC o r ej STiT i； c cn fig) ttvl aii 1UCar e SW ( c on f i g-vl an) itnaiiLe HathCore SW (c on f i g_vl ail J it e x itCoreSW(co

16、nfig)fiexit% SYS - 5 - C ONFI: Conf iizn-ir ed f r om console by consoleCore SWttvl ail dat ah as e% Warning: It is r ecomiiLended to c on f i iT-ir e VLAN f r oill c on fig iiio de f as VLAN datatiase illode is hieing deprecated. Please consult user do CLunent. at i on for 已口1、figuring VTP/VLAIJ in

17、 c on fig mo de.CoreSTiTi；vlail) itvlan Z0 naiiie ChineseVLAIJ 20 added:Naiiie: ChineseCoreSKI(vlaiij ttvlaii 30 name 0therVLA1J 30 added:Naiiie: Other圖2創(chuàng)建vlan三、把端口劃分給vlan(基于端口的vlan)switch(config)#interface fastethernet0/1 進(jìn)入端口配置模式 switch(config-if)#switchport mode access 配置端口為 access 模式 switch(conf

18、ig-if)#switchport access vlan 10 把端口劃分到 vlan 10Cor eSTiTenCoreSWitconf tEnt er c on f i gut at ion c oiLLDiaiids . one per line. End with CNT L/Z -Core SW (c on f i g) it int er face f aO/1Core Slff (c an f i g- i f ) fl swit clip ort ill ode ac cessCoreSW (conf ig-i f J if switcliport access vlaii

19、10Car eSW (conf ig-i f) ft int e r face f aO/7CoreSW(conf ig-if) ifswitchport mode accessCoreSW (conf ig-i f) itswitcliport access vlan 10CareSW(conf ig-if) it|圖3如果一次把多個(gè)端口劃分給某個(gè)vlan可以使用interface range命令。CoreSW (conf ig-i f ) ttinter f ace r aiige f aO/Z 一 4Core SW (c on f ig-i f-r aiige) # swit clip

20、o rt mo de accessCore SW (c on f ig-i f-r aiige) # suit clip o rt access vl aii 2 0CoreSW (conf ig-i f-r aiige) Sinter face range f aO/5 一 6Core SW (c on f i g- i f - r aiige) # swit clip o rt mo de accessCore SW (c on f i g- i f - r aiige) 3 suit clip o rt access vl aii 3 0CoreSW (conf ig-i f-raiig

21、e) #|圖4四、查看vlan信息switch#show vlanCoreSWftsh vlaiiVLAIJ NameSt- atusPorts1de f aultactiveFaU/8, Fa0/9f Fa0/10, Fa0/llFaU/lZ, FaO/13, FaO/14, FaO/15FaU/16f FaO/17 FaO/18, FaO/19FaU/ZOr FaO/Zl, FaO/ZZ, Fa0/Z3FaU/Z4, Gigl/1, Gigl/Z10 HathactiveFaU/I, FaO/7ZO ChineseactiveFau/Z, Fa0/3r FaO/430 Otheractiv

22、eFaU/5 FaLi/b1LI0Z fddi-de faultactive1003 token-ring-de f aultactive1004 fddinet-de faultactive1U 0 5 t-rnet-de f aultactiveVLA1J Typa SAIDHTU Parent P.ingNo BridgeNo Stp Brdgllcde Traiisl TraiisZ1enet 1000011-500-10 enet 1000101500-Z0 enet 1000201500-30 enet 1000301500-1ULIZ enet 1LH00Z1-EOLi -100

23、3 enet 1010031500-1004 enet 1010041500-1005 enet 1010051500-CoreSTiTftshoTj vlaii briefVLAIJ NaiaeSt at-usPorts1de faultactiveFaO/8, Fa0/9r Fa0/10, Fa0/llFaO/lZ, FaO/13, FaO/14, FaO/15FaLi/16r FaO/17, FaO/18, FaO/19Fa0/20 FaO/Zl, FaO/ZZ, Fa0/Z3Fa0/24r Gigl/1, Gigl/210 HathactiveFaO/1, FaO/7Z0 Chines

24、eactiveFaO/2, FaO/3, FaO/430Utlie ractiveFaO/5100Z fddi-defaultactive1003 token-ring-de f aultactive1004 fddinet-de faultactive100-5 trnet-de f aultactiveCoreSW圖6 show vlan brief 查看vlan簡明信息CoreSTijffshow vlaii id 10VLAIJ NaiiieStatusPorts.luVLAIJHathType：SAIDHTUactiveP ar ent P.ingNo E： r i dFa0/l,g

25、eNo StpFaO/7E： r dgllo deTranslTransS；（10enet1000101500 一 00CoreSWsh vlaii id 30VLAIJ NameStatusPorts30 OtheractiveFaO/SVLAIJ Type： SAIDHTUPar ent P.ingN o E r i dgeN o30 enet 1000301500-圖7查看id為10的vlanCoreSTiTfishow vlaii name MathVLAIJ NaiiLeSt- atusPorts10 HathactiveFM/JL. FaO/7VLAN Type SAIDHTU ParentP.ingNo EridgeNo Stp ErdgMode Traiisl TraiisZ10 enet 1000101500-_-00CoreSTiTfislio-w