交换路由第三章

1、 项目三 交换机基本配置1. 教学情境2. 教学导航3. 预备知识4. 操作实践3.1教学情境 为保证网络能满足公司的需求，小王根据各种需求来设置交换机，实现交换机的各种功能。3.2教学导航1 知识技能目标 （1） 了解交换机的分类及性能指标 （2） 了解交换机的工作原理 （3） 掌握交换机常用配置命令的使用 （4） 掌握交换机的初始化配置 （5） 掌握交换机中系统文件处理方法 （6） 掌握交换机中几种密码的设置 （7） 熟练掌握交换机中口令修复 （8） 熟练掌握交换机接口配置 （9） 熟练掌握交换机管理接口配置 （10）熟练掌握三层交换机配置3.2教学导航2.态度目标 （1） 培养学生勤于思

2、考、认真做事的良好作风 （2） 培养学生勤做总结，把实验成果归纳文档以保存自己成果 的良好习 惯 （3） 培养学生自主学习能力和知识应用能力 （4） 培养学生具有良好的职业道德和较强的工作责任心 （5） 培养学生理论联系实际的独立工作和团队协作能力3.3交换机概述3.3.1 交换机的组成（1）交换机的CPU（2）交换机的端口 ethernet 、 Fast ethernet、 Gigabit ethernet 、 console（3）存储介质主要有 只读存储器 ROM BIOS开机自检 COMS 闪存FLASH 存放IOS文件 非易失性随机存储器NVRAM 存放配置文件startup- con

3、fig 动态随机存储器 DRAM CPU处理系统数据和文件 3.3交换机概述3.3.2交换机的交换原理 交换机是一种基于MAC地址识别，能完成封装转发数据帧功能的网络设备。交换机可以学习MAC地址，并把其存放在内部地址表中，通过在数据帧的始发者和目标接收者之间建立零时的交换路径，使数据帧直接从源地址到达目的地址132224PC3PC1PC2PC4switch1.PC1向交换机发送广播寻找PC2PC1和PC2通信2.交换机向连接的所有PC发送广播3.PC2响应交换机广播请求4.交换机把PC2的回复转发给PC13.3交换机概述3.3.3交换机的分类1.按网络覆盖范围分 广域网交换机 、局域网交换机

4、2、按网络传输介质和传输速度分 以太网交换机 、快速以太网交换机 、千兆以太网交换机、10 千兆以太网交换机 、FDDI、 ATM 令牌交换机3、按接口结构分 固定接口交换机、 模块化交换机4、按应用层次分 接入层交换机、汇聚层交换机、核心层交换机5、按网络管理功能分 网络管理员型交换机 非网络管理员型交换机3.3交换机概述3.3.4交换机的性能指标 1、接口支持 10Mb/s 、100Mb/s、1000Mb/s、10GMb/s。4口、8口、24口、48口 2、背板带宽 背板带宽的最小值为交换机所有接口的带宽之和 3、吞吐量 没有丢帧的情况下发送和接收数据帧所能达到最大速率 4、延迟 收到第一

5、帧和发出第一帧的时间间隔 5、缓存 缓存暂时存储等待转发的数据 6、MAC地址数量 MAC地址表的维护能力 3.3交换机概述3.3.5冲突域与广播域 冲突域：是指若干在同一物理介质相连接的设备，其中任意两台设备同时访问该介质会导致冲突的区域。 广播域：是指网络中若干在同一条物理介质相连接的设备，可以相互接收广播消息3.4操作实践3.4.1 交换机的初始化3.4.2 交换机的主机名、密码配置3.4.3 远程登录交换机的配置3.4.4交换机接口配置3.4.5交换机配置文件操作3.4.6交换机MAC地址表配置3.4.7交换机的口令修复3.4.8三层交换机接口配置3.4操作实践3.4.1 交换机的初始

6、化oSystem Bootstrap, Version 12.1(3r)T2, RELEASE SOFTWARE (fc1)oCopyright (c) 2000 by cisco Systems, Inc.ocisco 2811 (MPC860) processor (revision 0 x200) with 60416K/5120K bytes of memoryoSelf decompressing the image :o# OKo Restricted Rights LegendoUse, duplication, or disclosure by the Government i

7、sosubject to restrictions as set forth in subparagrapho(c) of the Commercial Computer Software - RestrictedoRights clause at FAR sec. 52.227-19 and subparagrapho(c) (1) (ii) of the Rights in Technical Data and ComputeroSoftware clause at DFARS sec. 252.227-7013.o cisco Systems, Inc.o 170 West Tasman

8、 Driveo San Jose, California 95134-1706oCisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(15)T1, RELEASE SOFTWARE (fc2)oTechnical Support: http:/ (c) 1986-2007 by Cisco Systems, Inc.oCompiled Wed 18-Jul-07 06:21 by pt_rel_teamoImage text-base: 0 x400A925C, data-base: 0 x437

9、2CE20oThis product contains cryptographic features and is subject to UnitedoStates and local country laws governing import, export, transfer andouse. Delivery of Cisco cryptographic products does not implyothird-party authority to import, export, distribute or use encryption.oImporters, exporters, d

10、istributors and users are responsible forocompliance with U.S. and local country laws. By using this product youoagree to comply with applicable laws and regulations. If you are unableoto comply with U.S. and local laws, return this product immediately.oA summary of U.S. laws governing Cisco cryptog

11、raphic products may be found at:ohttp:/ you require further assistance please contact us by sending email .ocisco 2811 (MPC860) processor (revision 0 x200) with 60416K/5120K bytes of memoryoProcessor board ID JAD05190MTZ (4292891495)oM860 processor: part number 0, mask 49o2 FastEthernet/IEEE 802.3 i

12、nterface(s)o239K bytes of non-volatile configuration memory.o62720K bytes of ATA CompactFlash (Read/Write)oCisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(15)T1, RELEASE SOFTWARE (fc2)oTechnical Support: http:/ (c) 1986-2007 by Cisco Systems, Inc.oCompiled Wed 18-Jul-07 0

13、6:21 by pt_rel_teamo - System Configuration Dialog -oContinue with configuration dialog? yes/no: yesoAt any point you may enter a question mark ? for help.oUse ctrl-c to abort configuration dialog at any prompt.oDefault settings are in square brackets .oBasic management setup configures only enough

14、connectivityofor management of the system, extended setup will ask youoto configure each interface on the systemoWould you like to enter basic management setup? yes/no: yesoConfiguring global parameters:o Enter host name Router: e109o The enable secret is a password used to protect access too privil

15、eged EXEC and configuration modes. This password, aftero entered, becomes encrypted in the configuration.o Enter enable secret: 123o The enable password is used when you do not specify ano enable secret password, with some older software versions, ando some boot images.o Enter enable password: 456o

16、The virtual terminal password is used to protecto access to the router over a network interface.o Enter virtual terminal password: 789oConfigure SNMP Network Management? no:nooCurrent interface summaryoInterface IP-Address OK? Method Status ProtocoloFastEthernet0/0 unassigned YES manual administrati

17、vely down downoFastEthernet0/1 unassigned YES manual administratively down downoVlan1 unassigned YES manual administratively down downoEnter interface name used to connect to theomanagement network from the above interface summary: fastethernet0/0 oConfiguring interface FastEthernet0/0:o Configure I

18、P on this interface? yes: o% Please answer yes or no.o Configure IP on this interface? yes: yeso IP address for this interface: o Subnet mask for this interface : oThe following configuration command script was created:o!ohostname e109oenable secret 5

19、 $1$mERr$3HhIgMGBA/9qNmgzccuxv0oenable password 456oline vty 0 4opassword 789o!ointerface Vlan1o shutdowno no ip addresso!ointerface FastEthernet0/0o no shutdowno ip address o!ointerface FastEthernet0/1o shutdowno no ip addresso!oendo0 Go to the IOS command prompt without sa

20、ving this config.o1 Return back to the setup without saving this config.o2 Save this configuration to nvram and exit.oEnter your selection 2: 2oBuilding configuration.o%LINK-5-CHANGED: Interface Vlan1, changed state to upo%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to upo%LINK-5-CHANGE

21、D: Interface FastEthernet0/1, changed state to upo%LINK-5-CHANGED: Interface Vlan1, changed state to administratively downo%LINK-5-CHANGED: Interface FastEthernet0/1, changed state to administratively downo%SYS-5-CONFIG_I: Configured from console by consoleoOKoUse the enabled mode configure command

22、to modify this configuration.oPress RETURN to get started!3.4操作实践3.4.2 交换机的主机名、密码配置1配置主机名2配置密码SwitchSwitchen Switch#conf tSwitch(config)#hostSwitch(config)#hostname SW1SW1(config)#SW1(config)#enable password ciscoShow running-configoSW1#sh runoBuilding configuration.oCurrent configuration : 1030 byt

23、eso!oversion 12.2ono service timestamps log datetime msecono service timestamps debug datetime msecono service password-encryptiono!ohostname SW1o!oenable password ciscoo!o!o!ointerface FastEthernet0/1o!ointerface FastEthernet0/2o!ointerface FastEthernet0/3o!ointerface FastEthernet0/4o!ointerface Fa

24、stEthernet0/5o!ointerface FastEthernet0/6o!ointerface FastEthernet0/7o!ointerface FastEthernet0/8o!ointerface FastEthernet0/9o!ointerface FastEthernet0/10o!ointerface FastEthernet0/11o!ointerface FastEthernet0/12o!ointerface FastEthernet0/13o!ointerface FastEthernet0/14o!ointerface FastEthernet0/15o

25、!ointerface FastEthernet0/16o!ointerface FastEthernet0/17o!ointerface FastEthernet0/18o!ointerface FastEthernet0/19o!ointerface FastEthernet0/20o!ointerface FastEthernet0/21o!ointerface FastEthernet0/22o!ointerface FastEthernet0/23o!ointerface FastEthernet0/24o!ointerface GigabitEthernet1/1o!ointerf

26、ace GigabitEthernet1/2o!ointerface Vlan1o no ip addresso shutdowno!o!oline con 0o!oline vty 0 4o loginoline vty 5 15o logino!o!oendhostname enablepasswordoSwitchen oSwitch#conf toEnter configuration commands, one per line. End with CNTL/Z.oSwitch(config)#hostoSwitch(config)#hostname SW1oSW1(config)#

27、enoSW1(config)#enaoSW1(config)#enable seoSW1(config)#enable secret ciscooSW1(config)#exito%SYS-5-CONFIG_I: Configured from console by consoleoSW1#sh runoBuilding configuration.oCurrent configuration : 1055 byteso!oversion 12.2ono service timestamps log datetime msecono service timestamps debug datet

28、ime msecono service password-encryptiono!ohostname SW1o!oenable secret 5 $1$mERr$hx5rVt7rPNoS4wqbXKX7m0o!o!o!ointerface FastEthernet0/1o!ointerface FastEthernet0/2o!ointerface FastEthernet0/3o!ointerface FastEthernet0/4o -More- 配置VTY密码oSwitchen oSwitch#conf toEnter configuration commands, one per li

29、ne. End with CNTL/Z.oSwitch(config)#hostoSwitch(config)#hostname SW1oSW1(config)#enaoSW1(config)#enable passoSW1(config)#enable password 123oSW1(config)#lineoSW1(config)#line vty 0 15oSW1(config-line)#passoSW1(config-line)#password 456oSW1(config-line)#loginoSW1(config-line)#exitoSW1(config)#exitoSW

30、1#o%SYS-5-CONFIG_I: Configured from console by consoleoSW1#wroBuilding configuration.oOKShow running-configohostname SW1o!oenable password 123o!o!o!ointerface FastEthernet0/1o!ointerface FastEthernet0/2o!ointerface FastEthernet0/3o!ointerface FastEthernet0/4o!ointerface FastEthernet0/5o!ointerface F

31、astEthernet0/6o!ointerface FastEthernet0/7o!ointerface FastEthernet0/8o!ointerface FastEthernet0/9o!ointerface FastEthernet0/10o!ointerface FastEthernet0/11o!ointerface FastEthernet0/12o!ointerface FastEthernet0/13o!ointerface FastEthernet0/14o!ointerface FastEthernet0/15o!ointerface FastEthernet0/1

32、6o!ointerface FastEthernet0/17o!ointerface FastEthernet0/18o!ointerface FastEthernet0/19o!ointerface FastEthernet0/20o!ointerface FastEthernet0/21o!ointerface FastEthernet0/22o!ointerface FastEthernet0/23o!ointerface FastEthernet0/24o!ointerface GigabitEthernet1/1o!ointerface GigabitEthernet1/2o!oin

33、terface Vlan1o ip address o!o!oline con 0o!oline vty 0 4o password 456o loginoline vty 5 15o password 456o logino!o!oend配置console 口oSwitch(config)#hostname SW1oSW1(config)#line conoSW1(config)#line console ?o First Line numberoSW1(config)#line console 0oSW1(config-line)#pass

34、oSW1(config-line)#password 123oSW1(config-line)#loginoSW1(config-line)#exitoSW1(config)#exitShow running-configoSW1#sh runoBuilding configuration.oCurrent configuration : 1027 byteso!oversion 12.2ono service timestamps log datetime msecono service timestamps debug datetime msecono service password-e

35、ncryptiono!ohostname SW1o!o!o!ointerface FastEthernet0/1o!ointerface FastEthernet0/2o!ointerface FastEthernet0/3o!ointerface FastEthernet0/4o!ointerface FastEthernet0/5o!ointerface FastEthernet0/6o!ointerface FastEthernet0/7o!ointerface FastEthernet0/8o!ointerface FastEthernet0/9o!ointerface FastEth

36、ernet0/10o!ointerface FastEthernet0/11o!ointerface FastEthernet0/12o!ointerface FastEthernet0/13o!ointerface FastEthernet0/14o!ointerface FastEthernet0/15o!ointerface FastEthernet0/16o!ointerface FastEthernet0/17o!ointerface FastEthernet0/18o!ointerface FastEthernet0/19o!ointerface FastEthernet0/20o

37、!ointerface FastEthernet0/21o!ointerface FastEthernet0/22o!ointerface FastEthernet0/23o!ointerface FastEthernet0/24o!ointerface GigabitEthernet1/1o!ointerface GigabitEthernet1/2o!ointerface Vlan1o no ip addresso shutdowno!o!oline con 0o password 123o logino!oline vty 0 4o loginoline vty 5 15o logino

38、!o!oend配置管理地址oSW1(config)#int vlan 1oSW1(config-if)#ip addoSW1(config-if)#ip address oSW1(config-if)#no shutdoSW1(config-if)#no shutdown 配置接口描述oSwitch(config)#int f0/1oSwitch(config-if)#description ?o LINE Up to 240 characters describing this interfaceoSwitch(config-if)#desc

39、ription to e109oSwitch(config-if)#exitoSwitch(config)#exitShow running-configoSwitch#sh runoBuilding configuration.oCurrent configuration : 1030 byteso!oversion 12.2ono service timestamps log datetime msecono service timestamps debug datetime msecono service password-encryptiono!ohostname Switcho!o!

40、o!ointerface FastEthernet0/1o description to e109o!ointerface FastEthernet0/2o!ointerface FastEthernet0/3o!ointerface FastEthernet0/4配置接口带宽oSwitch(config)#int f0/1oSwitch(config-if)#spoSwitch(config-if)#speeoSwitch(config-if)#speed ?o 10 Force 10 Mbps operationo 100 Force 100 Mbps operationo auto En

41、able AUTO speed configurationoSwitch(config-if)#speed 10oSwitch(config-if)#exitoSwitch(config)#exitShow running-configoSwitch#sh runoBuilding configuration.oCurrent configuration : 1040 byteso!oversion 12.2ono service timestamps log datetime msecono service timestamps debug datetime msecono service

42、password-encryptiono!ohostname Switcho!o!o!ointerface FastEthernet0/1o description to e109o speed 10o!Show running-configoSwitch#sh int f0/1oFastEthernet0/1 is down, line protocol is down (disabled)o Hardware is Lance, address is 0002.4ad9.0701 (bia 0002.4ad9.0701)o Description: to e109o BW 10000 Kb

43、it, DLY 1000 usec,o reliability 255/255, txload 1/255, rxload 1/255o Encapsulation ARPA, loopback not seto Keepalive set (10 sec)o Half-duplex, 10Mb/so input flow-control is off, output flow-control is offo ARP type: ARPA, ARP Timeout 04:00:00o Last input 00:00:08, output 00:00:05, output hang never

44、o Last clearing of show interface counters nevero Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0o Queueing strategy: fifoo Output queue :0/40 (size/max)o 5 minute input rate 0 bits/sec, 0 packets/seco 5 minute output rate 0 bits/sec, 0 packets/seco 956 packets input, 193351 by

45、tes, 0 no buffero Received 956 broadcasts, 0 runts, 0 giants, 0 throttleso 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 aborto 0 watchdog, 0 multicast, 0 pause inputo 0 input packets with dribble condition detectedo -More- 配置接口双工模式oSwitch(config)#int f0/1oSwitch(config-if)#duplex ?o auto

46、Enable AUTO duplex configurationo full Force full duplex operationo half Force half-duplex operationoSwitch(config-if)#duplex haloSwitch(config-if)#duplex half oSwitch(config-if)#exitShow running-configowitch#sh runoBuilding configuration.oCurrent configuration : 1022 byteso!oversion 12.2ono service timestamps log datetime msecono service timestamps debug datetime msecono service password-encryptiono!ohostname Switcho!o!o!ointerface FastEthernet0/1o duplex half