思科網(wǎng)絡(luò)技術(shù)認(rèn)證nanpie實(shí)驗(yàn)手冊版chp12交換機(jī)基本配置

12換機(jī)基本12換機(jī)基本配12.1換機(jī)簡交換機(jī)是第二層的設(shè)備，可以隔離沖突域。交換機(jī)是基于收到的數(shù)據(jù)幀中的源MAC目的MAC地址來進(jìn)行工作。交換機(jī)的作用主要有這么兩個(gè)：一個(gè)是維護(hù)CAM（ContextAddressMemory）表，該表MAC地址和交換機(jī)端口的映射表；另一個(gè)是根CAM來進(jìn)行數(shù)據(jù)幀的轉(zhuǎn)發(fā)。交換機(jī)對幀的處理有三種：交換機(jī)收到幀后，查CAM表，如果能查詢到目的計(jì)算一端口轉(zhuǎn)發(fā)出去（Forward）；如果該計(jì)算機(jī)所在的端口和交換機(jī)接收幀的源端口是同一端（Filter（Flood12-以太網(wǎng)交換機(jī)轉(zhuǎn)發(fā)數(shù)據(jù)幀有三種交換方式，如圖12-存儲轉(zhuǎn)發(fā)（Store-and-直接轉(zhuǎn)發(fā)（Cut-無碎片（Fragment-12.21:交換機(jī)基本配（1）12.21:交換機(jī)基本配（1）實(shí)驗(yàn)拓實(shí)驗(yàn)步Enterconfigurationcommands,oneperline.EndS1(config)#enablesecretciscoS1(config)#linevty015switch(config-if)#duplex{full|half|autoswitch(config-if)#speed{10|100|1000|autoS1(config)#intvlanS1(config-if)#ipaddressS1(config-if)#noshutdownS1(config)#ipdefault-gatewaytelnetS1#copyrunning-configstartup-Buildingconfiguration...12.3S1#copyrunning-configstartup-Buildingconfiguration...12.32:交換機(jī)端口安理解交換機(jī)的MAC表212-3實(shí)驗(yàn)23這里限制f0/1接口只允許R1接入。R1(config)#intg0/0R1(config-if)#ipaddress01R1#showintGigabitEthernet0/0isup,lineprotocolisHardwareisMV96340Ethernet,addressis0019.5535.b828(biaInternetaddressisMTU1500bytes,BW100000Kbit,DLY100（此處省略S1(config)#intf0/1S1(config-if)#switchmodeS1(config-if)#switchport-securitiyS1(config-if)#switchport-securitiymaximumS1(config-if)#switchport-securitiyviolation{protect|shutdown|restrictS1(config-if)#switchport-securitiymaximumS1(config-if)#switchport-securitiyviolation{protect|shutdown|restrictS1(config-if)#switchportport-securitymac-S1(config-if)#noS1(config)#intvlan1S1(config-if)#ipaddressS1#showmac-address-MacAddress（此處省略Mac1TotalMacAddressesforthiscriterion:R1#pingTypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/1/4R1(config)#intg0/0幾秒鐘后，則在S1上，出現(xiàn)：01:09:39:%PM-4-ERR_DISABLE:psecure-violationerrordetectedonFa0/1,err-disableFa0/10012.0012.0012onportFastEthernet0/1.0012.0012.0012onportFastEthernet0/1.//以上提示f0/1S1#showintFastEthernet0/1isdown,lineprotocolisdown(err-HardwareisFastEthernet,addressis0018.ba11.f503(bia0018.ba11.f503)MTU1500bytes,BW100000Kbit,DLY100usec,reliability255/255,txload1/255,rxload和“noshutdown”命令可以重新打開該接口。4S1#showport-SecurePortSecurityViolationSecurity110TotalAddressesinSystem(excludingmacper:MaxAddresseslimitinSystem(excludingonemacperport):12.43:交換機(jī)的密碼恢（1）交換機(jī)的密碼恢復(fù)步驟23Catalyst3560（Catalyst2950）交換機(jī)的密碼恢復(fù)BaseethernetMACAddress:00:18:ba:11:f5:00Xmodemfilesystemisavailable.Thepassword-recoverymechanismisThesystemhasbeeninterruptedpriortoinitializingflashfilesystem.Thefollowingcommandswillinitializetheflashfilesystem,andfinishloadingtheoperatingflashfilesystem.Thefollowingcommandswillinitializetheflashfilesystem,andfinishloadingtheoperatingsystemflash_init命Initializingflashfs[0]:3files,1flashfs[0]:0orphanedfiles,0orphaneddirectoriesflashfs[0]:Totalbytes:32514048flashfs[0]:Bytesused:6076928flashfs[0]:Bytesavailable:26437120flashfs[0]:flashfsfscktook12seconds....doneInitializingBootSectorFilesystem(bs)installed,fsid:3Settingconsolebaudrateto9600...loadhelperdirDirectoryof235---private-26437120bytesavailable(6076928bytes（5）renameflash:config.textflash:config.old當(dāng)出現(xiàn)如下提示時(shí)，輸入N：Continuewiththeconfigurationdialog?[yes/no]:renameflash:config.oldflash:config.textSwitch#copyflash:config.textsystem:running-S1#conftS1(config)#enablesecretciscoS1#copyrunning-configstart-（1）交換機(jī)的IOS12-4實(shí)驗(yàn)4（1）交換機(jī)的IOS12-4實(shí)驗(yàn)4交換機(jī)如果已經(jīng)正常開機(jī)，則IOS可以TFTP服務(wù)器上恢復(fù)，具體步驟請參見路由器的恢復(fù)步驟。然而如果交換機(jī)無法正常開機(jī)，IOS的恢復(fù)要使用XModem方式，該方式是concoleIOS9600bps，switch:switch:switch:copyxmodem:flash:c2950-i6q4l2-mz.121-該命令的含義是通過xmodem方式拷貝文件，保存在FLASH，文件名為BegintheXmodemorXmodem-1Ktransfernow...12.6章小密碼IOS恢復(fù)方法卻和路由器有較大差別。為了減少非法設(shè)備12.6章小密碼IOS恢復(fù)方法卻和路由器有較大差別。為了減少非法設(shè)備的接入，可以在交換機(jī)上配置端口安全特性。表12-1是本章出現(xiàn)的命令。12-1duplex{full|half|autos