<![CDATA[思科交换&路由]]> http://hi.baidu.com http://hi.baidu.com http://img.baidu.com/img/logo-hi.gif http://hi.baidu.com/ciscosr zh-cn www.baidu.com 5 <![CDATA[交换机和路由器基本配置(六)]]> 什么是动态路由

§         网络中的路由器之间相互通信，传递路由信息，利用收到的路由信息更新和维护路由表的过程

§         基于某种路由协议实现的

v      动态路由的特点

§         减少管理任务

§         占用网络带宽

动态路由协议

v      动态路由协议

§         向其他路由器传递路由信息

§         接收其他路由器的路由信息

§         根据收到的路由信息计算出到每个目的网络的最优路径，并由此生成路由表

§         根据网络拓朴变化及时调整路由表，同时向其他路由器宣告拓朴改变的信息

RIP v1路由协议的配置

v      启动RIP进程

Router(config)# router rip

v       宣告主网络号

Router(config-router)# network network-number

验证配置

v      查看路由表

Router# show ip route

v       查看路由协议配置

Router# show ip protocols

v       打开RIP协议调试命令

Rouetr# debug ip rip

RIP v1路由协议配置实例

RouterA(config)#interface f0/0

RouterA(config-if)#ip address 192.168.1.1 255.255.255.0

RouterA(config-if)#no shutdown

RouterA(config)#interface f0/1

RouterA(config-if)#ip address 10.0.0.2 255.0.0.0

RouterA(config-if)#no shutdown

RouterA(config)#router rip

RouterA(config-router)#network 10.0.0.0

RouterA(config-router)#network 192.168.1.0

RouterB(config)#interface f0/0

RouterB(config-if)#ip address 10.0.0.1 255.0.0.0

RouterB(config-if)#no shutdown

RouterB(config)#interface f0/1

RouterB(config-if)#ip address 20.0.0.2 255.0.0.0

RouterB(config-if)#no shutdown

RouterB(config)#router rip

RouterB(config-router)#network 10.0.0.0

RouterB(config-router)#network 20.0.0.0

查看路由表

RouetrA# show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C    192.168.1.0 is directly connected, FastEthernet0/0

C    10.0.0.0 is directly connected, FastEthernet0/1

R    20.0.0.0 [120/1] via 10.0.0.1, 00:00:15, FastEthernet0/1

R    192.168.2.0 [120/2] via 10.0.0.1, 00:00:15, FastEthernet0/1

查看路由协议配置

RouterA# show ip protocol

Routing Protocol is "rip"

  Sending updates every 30 seconds, next due in 25 seconds

  Invalid after 180 seconds, hold down 180, flushed after 240

  Outgoing update filter list for all interfaces is not set

  Incoming update filter list for all interfaces is not set

  Redistributing: rip

  Default version control: send version 1, receive any version

    Interface             Send  Recv  Triggered RIP  Key-chain

    FastEthernet0/0       1     1 2

    FastEthernet0/1       1     1 2

Automatic network summarization is in effect

  Maximum path: 4

  Routing for Networks:

    10.0.0.0

    192.168.1.0

  Routing Information Sources:

    Gateway         Distance      Last Update

    10.0.0.1             120              00:00:20

  Distance: (default is 120)

打开RIP协议调试命令

RouterA# debug ip rip

RIP: sending v1 update to 255.255.255.255 via FastEthernet0/0 (192.168.1.1)

RIP: sending v1 update to 255.255.255.255 via FastEthernet0/1 (10.0.0.2)

RIP: received v1 update from 10.0.0.1 on FastEthernet0/1

20.0.0.0  in 1 hops

192.168.2.0 in 2 hops

RIP: build update entries

network 10.0.0.0 metric 1

network 192.168.2.0 metric 3

network 2.0.0.0 metric 2

RIP v2配置

v      配置RIP协议使用版本2

Router(config)# router rip

Router(config-router)# version 2

Router(config-router)# no auto-summary

查看路由协议配置

RouterA# show ip protocol

Routing Protocol is "rip"

  Sending updates every 30 seconds, next due in 16 seconds

  Invalid after 180 seconds, hold down 180, flushed after 240

  Outgoing update filter list for all interfaces is not set

  Incoming update filter list for all interfaces is not set

  Redistributing: rip

  Default version control: send version 2, receive version 2

    Interface             Send  Recv  Triggered RIP  Key-chain

    FastEthernet0/0       2     2

    FastEthernet0/1       2     2

  Automatic network summarization is in effect

  Maximum path: 4

  Routing for Networks:

    10.0.0.0

    192.168.1.0

  Routing Information Sources:

    Gateway         Distance      Last Update

   10.0.0.1             120              00:00:15

  Distance: (default is 120)

打开RIP协议调试命令

RouterA# debug ip rip

RIP: received v2 update from 10.0.0.1 on FastEthernet0/1

20.0.0.0/8 via 0.0.0.0 in 1 hops

192.168.2.0/24 via 0.0.0.0 in 2 hops

RIP: sending v2 update to 224.0.0.9 via FastEthernet0/0 (192.168.1.1)

RIP: sending v2 update to 224.0.0.9 via FastEthernet0/1 (10.0.0.2)

 阅读全文
类别：交换&路由 查看评论]]> 2007年06月27日 星期三 下午 07:20 http://hi.baidu.com/ciscosr/blog/item/d33afed336066636970a1624.html <![CDATA[交换机和路由器基本配置(五)]]>

v      路由

§         跨越从源主机到目标主机的一个互联网络来转发数据包的过程

路由器--能够将数据包转发到正确的目的地，并在转发过程中选择最佳路径的设备.

静态与默认路由适用的环境

v      静态路由

§         特点

•         路由表是手工设置的

•         除非网络管理员干预，否则静态路由不会发生变化

•         路由表的形成不需要占用网络资源

§         适用环境

•         一般用于网络规模很小、拓扑结构固定的网络中

v       默认路由

§         特点

•         在所有路由类型中，默认路由的优先级最低

§         适用环境

•         一般应用在只有一个出口的末端网络中

•         或作为其他路由的补充

路由和交换对比

v      路由工作在网络层

§         根据“路由表”转发数据

§         路由选择

§         路由转发

v      交换工作在数据链路层

§         根据“MAC地址表”转发数据

§         硬件转发

路由器的配置模式

v      用户模式：Router>

v      特权模式：Router#

v      全局配置模式：Router(config)#

v      接口配置模式：Router(config-if)#

v      子接口配置模式： Router(config)#interface fa0/0.1

                        Router(config-subif)#

v      Line模式：Router(config-line)#

v      路由模式：Router(config-router)#

静态路由的配置

Router A>enable                                     

Router A#config terminal

Router A(config) #interface f0/0

Router A(config-if) #ip address 192.168.2.2 255.255.255.0

Router A(config-if)#no shutdown

Router A(config-if)#exit

Router A(config)#ip route 192.168.1.0 255.255.255.0 192.168.2.1

默认路由的配置

Router B>enable                                     

Router B#config terminal

Router B(config) #interface f0/1

Router B(config-if) #ip address 192.168.2.1 255.255.255.0

Router B(config-if)#no shutdown

Router B(config-if)#exit

Router B(config) #interface f0/0

Router B(config-if) #ip address 192.168.1.1 255.255.255.0

Router B(config-if)#no shutdown

Router B(config-if)#exit

Router B(config)#ip route 0.0.0.0 0.0.0.0 192.168.2.2

查看路由器配置

Router A#show running-config

!

interface Loopback0

no ip address

!

interface FastEthernet0/0

ip address 192.168.2.2 255.255.255.0

duplex auto

speed auto

!

ip classless

ip route 192.168.1.0 255.255.255.0 192.168.2.1

no ip http server

！

line con 0

line aux 0

line vty 0 4

查看路由表

RouterA#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

S    192.168.1.0/24 [1/0] via 192.168.2.1

C    192.168.2.0/24 is directly connected, FastEthernet0/0

检查配置是否正确

v      在路由器A上，使用ping命令检查与192.168.1.0网段的主机是否连通：

      Router A# ping  192.168.1.10

    • 如果ping通，此时在路由器A上显示：

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.10, timeout is 2 seconds:

! ! ! ! !

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

    • 如果不通，在路由器A上会显示：

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.10, timeout is 2 seconds:

. . . . .

Success rate is 0 percent (0/5)

为Cisco 2600路由器配置密码

v      配置控制台密码

teacher(config)#line console 0

teacher((config_line)#login

teacher((config_line)#password cisco

v      配置特权模式密码

teacher(config)#enable password cisco

v      配置加密保存的密码

teacher(config)#enable secret 1234

v      对所有密码加密

teacher(config)#service password-encryption

Cisco 2600路由器的描述信息

v      配置路由器的banner信息

teacher(config)#banner motd $This is Aptech

company’s Router! Please don’t change the

configuration without permission! $

v      配置路由器接口的描述信息

teacher(config)#interface fastethernet 0/0

teacher(config_if)#description This is a fast ethernet

port used to connecting the company’s intranet!

配置路由器的控制台会话

v      配置控制台会话时间

teacher(config)#line console 0

teacher(config_line)#exec-timeout 0 0

v      配置控制台输出日志同步

teacher(config)#line console 0

teacher(config_line)#logging synchronous

v       配置禁用DNS

teacher(config)#no ip domain-lookup

路由器密码恢复

v      进入ROM Monitor模式

v      修改配置寄存器的值，启动时绕过startup-config文件：

§         rommon1>confreg 0x2142

§         rommon2>reset

v      用startup-config覆盖running-config：

§         Router#copy startup-config running-config

v      修改密码：

§         Router(config)#enable password cisco

v      修改配置寄存器的值：

§         Router(config)#config-register 0x2102

查看路由器配置

teacher #show version

Cisco Internetwork Operating System Software

IOS (tm) 2600 Software (C2600-JS-L), Version 12.0(3), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-1999 by cisco Systems, Inc.

Compiled Mon 08-Feb-99 18:18 by phanguye

Image text-base: 0x03050C84, data-base: 0x00001000

ROM: System Bootstrap, Version 11.0(10c), SOFTWARE

BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE(fc1)

wg_ro_a uptime is 20 minutes

System restarted by reload

System image file is "flash:c2600-js-l_120-3.bin"

(output omitted)

--More--

Configuration register is 0x2102

单臂路由的配置

Router(config)# interface f0/0.1

Router(config-subif)# encapsolution dot1q 1

Router(config-subif)# ip address  192.168.1.1 255.255.255.0

Router(config)# interface f0/0.2

Router(config-subif)# encapsolution dot1q 2

Router(config-subif)# ip address  192.168.2.1 255.255.255.0

DCE和DTE设置

router# show controllers serial0    查看串口0的物理层信息 主要是查看DTE/DCE

(config-if)# encapsulation ppp      封装ppp

(config-if)# clockrate 64000        如果是DCE使需要设置时钟速率
                                    如果是DTE使不必设置
(config-if)# bandwidth 64           设置端口带宽为64K

 阅读全文
类别：交换&路由 查看评论]]> 2007年06月27日 星期三 下午 07:18 http://hi.baidu.com/ciscosr/blog/item/c3d9046625012e26ab184c5a.html <![CDATA[交换机和路由器基本配置(四)]]> 三层交换

单臂路由实现VLAN之间通信

Router(config)#interface fastEthernet 0/0
Router(config-if)#no shutdown
Router(config-if)#exit

Router(config)#interface fastEthernet 0/0.1
Router(config-subif)#encapsulation dot1q 1
Router(config-subif)#ip address 10.1.1.1 255.0.0.0
Router(config-subif)#exit

Router(config)#interface fastEthernet 0/0.2
Router(config-subif)#encapsulation dot1q 2
Router(config-subif)#ip address 20.1.1.1 255.0.0.0
Router(config-subif)#end

单臂路由产生的瓶颈

数据量增大，路由器与交换机之间的路径会成为整个网络的瓶颈

三层交换机的配置

v      在三层交换机上启动路由

Switch(config)#ip routing

v      配置VLAN 的IP地址

Switch (config)#interface vlan vlan-id

Switch (config-if)#ip address Ip-address Subnet-mask

Switch (config-if)#no shutdown

v      查看FIB表

Switch (config)#show ip cef

v      查看邻接关系表

Switch (config)#show adjacency detail

v      在三层交换机上配置路由接口

Switch (config-if)#no switchport

v      配置DHCP中继转发

Switch(config)#interface vlan vlan-id

Switch(config-if)#ip helper-address Dhcpserver-address

三层交换机实现VLAN互通实例

v      在2层交换机上配置VLAN

SW-2L(config)#vlan 2

SW-2L(config-vlan)#vlan 3

SW-2L(config-vlan)#exit

SW-2L(config)#interface range f0/11 - 15

SW-2L(config-if-range)#switchport access vlan 2

SW-2L(config-if-range)#switchport mode access

SW-2L(config)#interface range f0/16 - 23

SW-2L(config-if-range)#switchport access vlan 3

SW-2L(config-if-range)#switchport mode access

v      在2层交换机上配制Trunk接口

SW-2L(config)#interface f0/24

SW-2L(config-if)#switchport mode trunk

v      在3层交换机上配置与2层交换机相同的VLAN（配置步骤与方法相同）

v      在3层交换机上启动路由

         SW-3L(config)#ip routing

v      在3层交换机上配置各VLAN的IP地址

SW-3L(config)#interface vlan 1

SW-3L(config-if)#ip address 192.168.1.1 255.255.255.0

SW-3L(config-if)#no shut

SW-3L(config)#interface vlan 2

SW-3L(config-if)#ip address 192.168.2.1 255.255.255.0

SW-3L(config-if)#no shut

SW-3L(config)#interface vlan 3

SW-3L(config-if)#ip address 192.168.3.1 255.255.255.0

SW-3L(config-if)#no shut

v      在3层交换机上查看路由表

SW-3L#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C    192.168.1.0/24 is directly connected, Vlan1

C    192.168.2.0/24 is directly connected, Vlan2

C    192.168.3.0/24 is directly connected, Vlan3

v      在主机192.168.2.156上ping 192.168.3.156

C:\>ping 192.168.3.156

Pinging 192.168.3.156 with 32 bytes of data:

Reply from 192.168.3.156: bytes=32 time<1ms TTL=254

Reply from 192.168.3.156: bytes=32 time<1ms TTL=254

Reply from 192.168.3.156: bytes=32 time<1ms TTL=254

Reply from 192.168.3.156: bytes=32 time<1ms TTL=254

Ping statistics for 192.168.3.156:

        Packets: Sent = 4, Received = 4, Lost = 0(0% loss)

v      查看FIB

SW-3L#show ip cef

Prefix                    Next Hop           Interface

0.0.0.0/32               receive

192.168.1.0/24       attached              Vlan1

192.168.1.0/32        receive

192.168.1.1/32        receive

192.168.1.255/32    receive

192.168.2.0/24        attached             Vlan2

192.168.2.0/32        receive

192.168.2.1/32        receive

192.168.2.156/32    attached              Vlan2

192.168.2.255/32    receive

192.168.3.0/24        attached              Vlan3

192.168.3.0/32        receive

192.168.3.1/32        receive

192.168.3.156/32    attached              Vlan3

192.168.3.255/32     receive

224.0.0.0/4               drop

224.0.0.0/24             receive

255.255.255.255/32  receive

SW-3L#show adjacency detail

Protocol Interface                 Address

IP       Vlan2                     192.168.2.156(6)

                                         0 packets, 0 bytes

                                         epoch 2

                                         sourced in sev-epoch 1

                                         Encap length 14  

                                         00061BE393660016C72EB3800800

                                         ARP

IP       Vlan3                     192.168.3.156(6)

                                         0 packets, 0 bytes

                                         epoch 2

                                         sourced in sev-epoch 1

                                         Encap length 14

                                         0016C72E97000016C72EB3800800

                                         ARP

在三层交换机上配置路由实例

v      在三层交换机上配置路由接口

SW-3L(config)#inter f0/23

SW-3L(config-if)#no switchport

SW-3L(config-if)#ip address 10.1.1.1 255.255.255.252

SW-3L(config)#ip route 0.0.0.0 0.0.0.0 10.1.1.2

v      在路由器上配置路由

Router(config)#ip route 192.168.1.0 255.255.255.0 10.1.1.1

Router(config)#ip route 192.168.2.0 255.255.255.0 10.1.1.1

Router(config)#ip route 192.168.3.0 255.255.255.0 10.1.1.1

v      查看f0/23接口信息

SW-3L#show inter f0/23 switchport

Name: Fa0/23

Switchport: Disabled

v      显示交换机的路由表

SW-3L#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.1.1.2 to network 0.0.0.0

     10.0.0.0/30 is subnetted, 1 subnets

C       10.1.1.0 is directly connected, FastEthernet0/23

C    192.168.1.0/24 is directly connected, Vlan1

C    192.168.2.0/24 is directly connected, Vlan2

C    192.168.3.0/24 is directly connected, Vlan3

S*   0.0.0.0/0 [1/0] via 10.1.1.2

v      在各VLAN互通的前提下，配置DHCP中继服务

SW-3L(config)#interface vlan 1

SW-3L(config-if)#ip helper-address 192.168.2.100

SW-3L(config)#interface vlan 3

SW-3L(config-if)#ip helper-address 192.168.2.100

 阅读全文
类别：交换&路由 查看评论]]> 2007年06月27日 星期三 下午 07:15 http://hi.baidu.com/ciscosr/blog/item/f83457e9ad14063db80e2d58.html <![CDATA[交换机和路由器基本配置(三)]]> 从Trunk中添加、删除Vlan

v      去除VLAN

Switch (config-if )# switchport trunk allowed vlan remove vlan-list

v      添加VLAN

Switch (config-if)# switchport trunk allowed vlan add  vlan-list

v       检查中继端口允许VLAN的列表

Switch # show interface interface-id switchport

从Trunk中删除Vlan配置实例

SW1(config-if)#switchport trunk allowed vlan remove 2

SW1(config-if)#end

SW1#show interface f0/24 switchport

Name: Fa0/24

Switchport: Enabled

Administrative Mode: trunk

Operational Mode: trunk

Administrative Trunking Encapsulation: dot1q

Operational Trunking Encapsulation: dot1q

Negotiation of Trunking: On

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Voice VLAN: none

Administrative private-vlan host-association: none

Administrative private-vlan mapping: none

Operational private-vlan: none

Trunking VLANs Enabled: 1,3-1005

Pruning VLANs Enabled: 2-1001

Capture Mode Disabled

使用show命令检查配置

v      查看端口状态

SW1#show interface interface-id switchport

v      查看VLAN信息

SW1#show vlan brief

v      查看配置

SW1#show run

VTP协议

v      VLAN Trunk Protocol

v      从一个控制点，维护整个企业网上VLAN的添加、删除和重命名工作

VTP 配置

v      创建VTP 域

  switch(config)# vtp domian domain_name

v      配置交换机的VTP模式

  switch(config)# vtp mode server | client | transparent

v      配置VTP口令

switch(config)# vtp password password

v      配置VTP修剪

switch(config)# vtp pruning

v      VTP版本的配置

switch(config)# vtp version 2

v      查看VTP的配置

  switch# show vtp status

VTP配置实例

v      在SwA上配置VTP

SwA(config)# vtp domain test

Changing VTP domain name from null to test

SwA(config)# vtp mode server

Device mode already VTP SERVER.

SwA(config)#interface fastEthernet 0/23

SwA(config-if)#switchport mode trunk

v      在SwB上配置VTP

SwB(config)# vtp domain test

Changing VTP domain name from null to test

SwB(config)# vtp mode client

Device mode already VTP CLIENT mode.

SwB(config)#interface fastEthernet 0/22

SwB(config-if)#switchport mode trunk

SwB(config)#interface fastEthernet 0/23

SwB(config-if)#switchport mode trunk

v      在SwA上添加VLAN

SwA#vlan database

SwA(vlan)#vlan 2 name sales

VLAN 2 added:

    Name: sales

SwA(vlan)#vlan 3 name develop

VLAN 3 added:

    Name: develop

SwA(vlan)#exit

APPLY completed.

Exiting....

v      在SwA的VLAN中添加端口

SwA(config)#interface range fastEthernet 0/2 - 3

SwA(config-if-range)#switchport access vlan 2

SwA(config)#interface range fastEthernet 0/4 - 5

SwA(config-if-range)#switchport access vlan 3

v      配置SwA的管理IP地址

SwA(config)#interface vlan 1

SwA(config-if)#ip address 192.168.1.1 255.255.255.0

SwA(config-if)#no shutdown

v      在SwA上查看VLAN信息

SwA#show vlan brief

VLAN Name          Status    Ports

---- -------------------------------- --------- -------------------------------

1    default         active    Fa0/1, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12

                            Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/24

2    sales          active    Fa0/2, Fa0/3

3    develop       active    Fa0/4, Fa0/5

1002 fddi-default    active    

1003 token-ring-default     active    

1004 fddinet-default       active    

1005 trnet-default        active

v      在SwA上查看VTP状态信息

SwA#show vtp status

VTP Version                      : 2

Configuration Revision              : 2

Maximum VLANs supported locally  : 64

Number of existing VLANs           : 7

VTP Operating Mode                : Server

VTP Domain Name                  : test

VTP Pruning Mode                  : Disabled

VTP V2 Mode                        : Disabled

VTP Traps Generation                : Disabled

MD5 digest                          : 0x34 0x9D 0xE1 0x18 0x50 0x4C

                                    0xC1 0xD0

Configuration last modified by 192.168.1.1 at 7-27-06 11:27:16

Local updater ID is 192.168.1.1 on interface Vl1 (lowest numbered VLAN interface found)

v      配置SwA的VTP口令

SwA(config)#vtp password cisco

Setting device VLAN database password to cisco

v      修改SwA的VLAN配置，添加VLAN 4

SwA#vlan database

SwA(vlan)#vlan 4 name market

VLAN 4 added:

    Name: market

SwA(vlan)#exit

v      配置SwB的VTP密码

SwB(config)#vtp password cisco

Setting device VLAN database password to cisco

v      在SwA上配置VTP修剪

SwA(config)#vtp pruning

Pruning switched on

STP协议介绍

v      STP － Spanning Tree Protocol（生成树协议）

v      逻辑上断开环路，防止广播风暴的产生

v      当线路出现故障，断开的接口被激活，恢复通信，起备份线路的作用

STP的算法

v      STP将一个环形网络生成无环拓朴的步骤：

§         选择根网桥（Root Bridge）

§         选择根端口（Root Ports）

§         选择指定端口（Designated Ports）

选择根网桥的依据

v      网桥ID（BID）

§         网桥ID是唯一的，交换机之间选择BID值最小的交换机作为网络中的根网桥

选择根端口的依据

v      在非根网桥上选择一个到根网桥最近的端口作为根端口

v      选择根端口的依据是：

§         根路径成本最低

§         直连的网桥ID最小

§         端口ID最小

选择指定端口的依据

v      在每个网段上，选择1个指定端口

§         根桥上的端口全是指定端口

§         非根桥上的指定端口：

•         根路径成本最低

•         端口所在的网桥的ID值较小

•         端口ID值较小

PVST的配置命令

v      启用生成树

Switch(config)#spanning-tree vlan vlan-list

v      设置根网桥

Switch(config)#spanning-tree vlan vlan-list root primary | secondary

v      修改网桥的优先级

Switch(config)#spanning-tree vlan vlan-list priority Bridge-priority

v      修改端口成本

Switch(config-if)#spanning-tree vlan vlan-list cost cost

v      修改端口优先级

Switch(config-if)#spanning-tree vlan vlan-list port-priority priority

v      配置上行速链路

Switch(config)#spanning-tree uplinkfast

v      配置端口速链路

Switch(config-if)#spanning-tree portfast

v      查看生成树的配置

Switch#show spanning-tree

v      查看某个VLAN的生成树详细信息

Switch#show spanning-tree vlan vlan-id detail

PVST配置实例

v      配置SwA为VLAN 1和2的根网桥

SwA(config)#spanning-tree vlan 1 root primary

SwA(config)#spanning-tree vlan 2 root primary

v      配置SwB在VLAN 3和4中优先级为4096

SwB(config)#spanning-tree vlan 3 priority 4096

SwB(config)#spanning-tree vlan 4 priority 4096

v      查看配置结果

SwB# show spanning-tree

VLAN0001

  Spanning tree enabled protocol ieee

  Root ID    Priority    24577

                  Address     000d.28bf.4b40

                  Cost        19

                   Port        24 (FastEthernet0/24)

                   Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32769  (priority 32768 sys-id-ext 1)

                    Address     0013.6007.6a00

                    Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

                    Aging Time 300

Interface        Role Sts Cost      Prio.Nbr Type

---------------- ---- --- --------- -------- --------------------------------

Fa0/22           Altn BLK 19          128.22     P2p

Fa0/23           Altn BLK 19          128.23     P2p

Fa0/24           Root FWD 19        128.24     P2p

v      配置交换机C上连接主机的端口为速端口

SwC(config)#interface range fastEthernet 0/1 - 20

SwC(config-if-range)#spanning-tree portfast

%Warning: portfast should only be enabled on ports connected to a single

host. Connecting hubs, concentrators, switches, bridges, etc... to this

interface  when portfast is enabled, can cause temporary bridging loops.

Use with CAUTION

%Portfast will be configured in 20 interfaces due to the range command

but will only have effect when the interfaces are in a non-trunking mode.

v      在交换机C上配置上行速链路

SwC(config)#spanning-tree uplinkfast

EthernetChannel（以太通道）

    • 多条线路负载均衡，带宽提高
    • 容错，当一条线路失效时，其他线路通信，不会丢
    • v      配置接口为以太通道模
  • Switch(config)# interface range fastEthernet 0/1 – 2

Switch(config-if-range)#channel-group 1 mode on

Creating a port-channel interface Port-channel 1

阅读全文
类别：交换&路由 查看评论]]> 2007年06月27日 星期三 下午 07:07 http://hi.baidu.com/ciscosr/blog/item/d33afed336106636970a1652.html <![CDATA[交换机和路由器基本配置(二)]]> 在全局配置模式下创建VLAN

v      Switch(config)#vlan vlan-id

v      Switch(config-vlan)#name vlan-name

进入VLAN 数据库创建VLAN

v      Switch#vlan database

v      Switch(vlan)#vlan 2

VLAN 2 added:

    Name: VLAN0002

v      Switch(vlan)#exit

APPLY completed.

Exiting....

删除已创建的VLAN

v      Switch#vlan database

v      Switch(vlan)#no vlan 2

Deleting VLAN 2...

或：

v      Switch(config)#no vlan 2

将端口加入VLAN

v      Switch(config)# interface f0/1

v      Switch(config-if)# switchport access vlan vlan-id

v      Switch(config-if)# no switchport access vlan vlan-id

    • 也可以同时将多个端口添加到某个VLAN中：

Switch(config)# interface range f0/1 – 10

Switch(config-if-range)# switchport access vlan vlan-id

验证VLAN的配置

v      Switch# show vlan brief

v      Switch# show vlan id vlan-id

VLAN配置实例

Switch#vlan database

Switch(vlan)#vlan 2 name v2

VLAN 2 added:

    Name: v2

Switch(vlan)#exit

APPLY completed.

Exiting....

Switch#config terminal

Switch(config)#interface  range f0/5 - 10

Switch(config-if-range)#switchport access vlan 2

查看VLAN配置

v      Switch#show vlan brief

VLAN Name                             Status      Ports

---- -------------------------------- --------- -------------------------------

1    default                            active      Fa0/1, Fa0/2, Fa0/3, Fa0/4

                                                                   Fa0/11, Fa0/12, Fa0/13, Fa0/14

                                                                   Fa0/15, Fa0/16, Fa0/17, Fa0/18

                                                                   Fa0/19, Fa0/20, Fa0/21, Fa0/22

                                                                   Fa0/23, Fa0/24

2    v2                                active      Fa0/5, Fa0/6, Fa0/7, Fa0/8

                                                                    Fa0/9, Fa0/10

1002 fddi-default                       active

1003 token-ring-default                 active

1004 fddinet-default                    active

1005 trnet-default                      active

其他常用命令

v      其他常用命令

§         指定/删除VLAN描述字符

•         description  string

•         no description

§         查看VLAN设置

•         show vlan [vlan_id ]

§         开启/关闭VLAN接口

•         shutdown

•         no shutdown

•         

？的使用

v      Switch# ？

Exec commands:

  access-enable    Create a temporary Access-List entry

  access-template  Create a temporary Access-List entry

  archive          manage archive files

  cd               Change current directory

  clear            Reset functions

  clock            Manage the system clock

  cns              CNS subsystem

  configure        Enter configuration mode

  connect          Open a terminal connection

  copy             Copy from one file to another

  debug            Debugging functions (see also 'undebug')

  delete           Delete a file

  dir              List files on a filesystem

  disable          Turn off privileged commands

  disconnect       Disconnect an existing network connection

  dot1x            IEEE 802.1X commands

  enable           Turn on privileged commands

v      Switch(config)#s?

scheduler      service     shutdown  snmp  snmp-server

spanning-tree  stackmaker  system

v      Switch(config)#spanning-tree ?

  backbonefast  Enable BackboneFast Feature

etherchannel  Spanning tree etherchannel specific configuration

  extend        Spanning Tree 802.1t extensions

  loopguard     Spanning tree loopguard options

  mode          Spanning tree operating mode

  pathcost      Spanning tree pathcost options

  portfast      Spanning tree portfast options

  uplinkfast    Enable UplinkFast Feature

  vlan          VLAN Switch Spanning Tree

Tab键的使用

v      Switch(config)#ena

v      Switch(config)#enable

使用命令简写

v      Switch>en

v      Switch#conf t

v      Switch(config)#ena pass 123

使用缓存命令

v      使用向上箭头，出现上一次执行的命令

v      Switch# show history

阶段总结:

î      划分VLAN的作用

ø       控制广播

ø       安全性

î      VLAN的种类

ø       静态VLAN－基于端口划分的

ø       动态VLAN－基于MAC地址

î      VLAN的配置

ø       添加VLAN、删除VLAN

ø       将端口加入VLAN

ø       查看VLAN的配置

ISL和802.1Q 的异同

v      相同点

§         都是显式标记，即帧被显式标记了VLAN的信息

v      不同点

§         IEEE 802.1Q是公有的标记方式，ISL是Cisco私有的

§         ISL采用外部标记的方法，802.1Q采用内部标记的方法

§         ISL标记的长度为30字节，802.1Q标记的长度为4字节

配置接口为Trunk模式

Switch(config)# interface  interface-id

Switch(config-if)#switchport mode ?

     access         Set trunking mode to ACCESS unconditionally

     dynamic      Set trunking mode to dynamically negotiate access                       

                          or trunk mode

     trunk            Set trunking mode to TRUNK unconditionally

Switch(config-if)#switchport mode trunk

配置接口为动态协商模式

v      Switch(config-if)#switchport mode dynamic ?

  auto              Set trunking mode dynamic negotiation parameter to           

                        AUTO

  desirable      Set trunking mode dynamic negotiation parameter

                        to  DESIRABLE

查看接口模式

Switch#show interface interface-id switchport

Name: Fax/x

Switchport: Enabled

Administrative Mode: dynamic desirable

Operational Mode: down

Administrative Trunking Encapsulation: dot1q

Negotiation of Trunking: On

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Voice VLAN: none

Administrative private-vlan host-association: none

Administrative private-vlan mapping: none

Operational private-vlan: none

Trunking VLANs Enabled: ALL

Pruning VLANs Enabled: 2-1001

Capture Mode Disabled

Capture VLANs Allowed: ALL

配置VLAN Trunk

v      第一步：在交换机上添加VLAN

SW1#vlan database

SW1(vlan)#vlan 2

VLAN 2 added:

    Name: VLAN0002

SW1(vlan)#vlan 3

VLAN 3 added:

    Name: VLAN0003

SW1(vlan)#exit

APPLY completed.

Exiting....

v      第二步：将接口添加到相应的VLAN中

SW1#config terminal

SW1(config)#interface range f0/4 - 10

SW1(config-if-range)#switchport access vlan 2

SW1(config)#interface range f0/11 - 23

SW1(config-if-range)#switchport access vlan 3

v      第三步：配置交换机之间互联的端口为Trunk

SW1(config)#interface f0/24

SW1(config-if)#switchport mode trunk

查看端口状态

SW1#show interface f0/24 switchport

Name: Fa0/24

Switchport: Enabled

Administrative Mode: trunk

Operational Mode: trunk

Administrative Trunking Encapsulation: dot1q

Operational Trunking Encapsulation: dot1q

Negotiation of Trunking: On

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Voice VLAN: none

Administrative private-vlan host-association: none

Administrative private-vlan mapping: none

Operational private-vlan: none

Trunking VLANs Enabled: ALL

Pruning VLANs Enabled: 2-1001

Capture Mode Disabled

Capture VLANs Allowed: ALL

 阅读全文
类别：交换&路由 查看评论]]> 2007年06月26日 星期二 上午 01:27 http://hi.baidu.com/ciscosr/blog/item/2ca6e4b75ec42df631add1e9.html <![CDATA[交换机和路由器基本配置(一)]]> 以太网交换机

v      交换机是用来连接局域网的主要设备

▪          交换机能够根据以太网帧中目标地址智能的转发数据，因此交换机工作在数据链路层

▪          交换机分割冲突域，实现全双工通信

交换机的配置模式

v      用户模式：Switch>

v      特权模式：Switch>enable

                 Switch#

v      全局配置模式：Switch#config terminal

                     Switch(config)#

v      接口配置模式：Switch(config)#interface fa0/1

                     Switch(config-if)#

v      Line模式：Switch(config)#line console 0

                 Switch(config-line)#

配置主机名

v      Switch>en

v      Switch#conf t

v      Switch(config)# hostname Benet-sw1

v      Benet-sw1(config)#

查看交换机的配置

v      Benet-sw1(config)# show running-config

version 12.1

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname Benet-sw1

配置enable明文口令

v      Benet-sw1(config)#enable password cisco

v      Benet-sw1(config)#exit

v      Benet-sw1#show running-config

version 12.1

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname Benet-sw1

!

enable password cisco

!

ip subnet-zero

!

检验enable口令的作用

v      Benet-sw1# exit

   Press RETURN to get started.

v      Benet-sw1>enable

   Password:cisco

v      Benet-sw1#

配置enable加密口令

v      Benet-sw1(config)# enable secret ciscolab

v      Benet-sw1#show running-config

version 12.1

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname Benet-sw1

!

enable secret 5 $1$e1k3$tmDh/6EG9c5enGXDjjj7j/

enable password cisco

!

检验enable加密口令的作用

v      Benet-sw1# exit

   Press RETURN to get started.

v      Benet-sw1>enable

   Password:ciscolab

v      Benet-sw1#

配置Console口令

v      Benet-sw1(config)#line console 0

v      Benet-sw1(config-line)#password 123

v      Benet-sw1(config-line)#login

v      Benet-sw1#show run

interface Vlan1

no ip address

no ip route-cache

shutdown

!

ip http server

!

line con 0

password 123

login

登录口令的输入

Switch con0 is now available

Press RETURN to get started.

User Access Verification

Password:123

Switch>en

Password:ciscolab

Switch#

配置管理用IP地址与网关

v      Benet-sw1(config)# interface vlan 1

v      Benet-sw1(config-if)# ip address 192.168.1.1 255.255.255.0

v      Benet-sw1(config-if)# no shutdown

v      Benet-sw1# show running-config

!

interface FastEthernet0/24

no ip address

!

interface Vlan1

ip address 192.168.1.1 255.255.255.0

no ip route-cache

!

ip http server

Benet-sw1(config)#ip default-gateway 192.168.1.100

查看MAC地址表

v      Benet-sw1#show mac-address-table

          Mac Address Table

-------------------------------------------

Vlan    Mac Address       Type        Ports

----          -----------             --------        -----

All    000d.28be.b640    STATIC      CPU

All    0100.0ccc.cccc     STATIC      CPU

All    0100.0ccc.cccd     STATIC      CPU

All    0100.0cdd.dddd    STATIC      CPU

1    0013.8044.ff40    DYNAMIC    Fa0/2

   1    0013.8044.ff41    DYNAMIC    Fa0/8

Total Mac Addresses for this criterion: 6

使用CDP协议

v      Benet-sw1#show cdp ?

entry          Information for specific neighbor entry

  interface      CDP interface status and configuration

  neighbors     CDP neighbor entries

  traffic        CDP statistics

  |            Output modifiers

  <cr>

v      Benet-sw1#show cdp neighbor

Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge

                  S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone

Device ID        Local Intrfce     Holdtme    Capability   Platform   Port ID

R1            Fas 0/19         139         R          2621XM    Fas 0/0

v      Benet-sw1#show cdp neighbors  detail

-------------------------

Device ID: R1

Entry address(es):

  IP address: 192.168.1.1

Platform: cisco 2621XM,  Capabilities: Router

Interface: FastEthernet0/19,  Port ID (outgoing port): FastEthernet0/0

Holdtime : 143 sec

Version :

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-IS-M), Version 12.2(21), RELEASE SOFTWARE (fc3)

Copyright (c) 1986-2003 by cisco Systems, Inc.

Compiled Tue 02-Dec-03 16:06 by kellmill

advertisement version: 2

Duplex: full

保存交换机的配置

v      Benet-sw1# copy running-config startup-config

或

v      Benet-sw1# write

Building configuration...

[OK]

恢复设备出厂默认值

v      Benet-sw1# erase startup-config

Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]

[OK]

Erase of nvram: complete

v      Benet-sw1#reload

Proceed with reload? [confirm]

VLAN概述

v      什么是VLAN

§         Virtual LAN（虚拟局域网）是物理设备上连接的不受物理位置限制的用户的一个逻辑组。

v      为什么引入VLAN

§         交换机分割了冲突域，但是不能分割广播域

§         随着交换机端口数量的增多，网络中广播增多，降低了网络的效率

§         为了分割广播域，引入了VLAN

v      VLAN的作用

§         广播控制

§         安全性

§         带宽利用

§         延迟

v      VLAN的种类

§         基于端口划分的静态VLAN

§         基于MAC地址划分的动态VLAN

Cisco交换机上静态VLAN的配置

v      配置VLAN的步骤

§         创建VLAN

§         将端口加入到相应的VLAN中

§         验证

v      创建VLAN有以下2种方法

§         在全局配置模式下创建VLAN

§         进入VLAN数据库中创建VLAN

 阅读全文
类别：交换&路由 查看评论]]> 2007年06月26日 星期二 上午 01:19 http://hi.baidu.com/ciscosr/blog/item/7f5f54083a902bd362d986ef.html