交换机的基本配置

基本交换机的配置拓扑图如下:2950T-24Switch^-一、编址表设备接口IP地址子网掩码默认子关PC0网卡11PC1网卡21S1VLAN991二、学习目标清除交换机的现有配置检验默认交换机配置创建基本交换机配置管理MAC地址表配置端口安全性三、实验过程任务1：清除交换机的现有配置步骤1：键入enable命令进入特权模式Switch>enati1eSwitch#Switchitdeleteflash:vlail-datDe1etefilenaiiie[vlail-dat]?De1eteflash:/vlaii-dat?[confirm]%Errordeletingflash:/vlaii-dat(Nasuchfileordirectory)步骤2：删除VLAN数据库信息文件Switclittdeletsflash:vlaii.datI：1e1etefilenaiiie[vlaii-dat]?De1eteflash:/vlaii-dat?[confiriii]%Errordeletingflash:/vlaii.dat(Nosuchfileordirectory)Switch#|步骤3：从NVRAM删除交换机启动配置文件Switchiterasestartup-configErasingthenvranifilesysteiawillremciveallconfiiT-irationfiles!Continue?[confirm][OK]Eraseofnvraiii:cciiiplete%SYS-7L0CK_INIT:InitializedthegeoiLLetryofnvraiaSwit>zhfi步骤4：确认VLAN信息已删除SwitchfishowvlaiibriefVLAIJNaiiieStatusPort?;1defaultactiveFaO/1,FaO/Z,FaO/3,FaO/4FaO/5,FaO/6,FaO/7,FaO/8FaO/9,Fa0/10,FelD/11.FaLi/lZFaO/13^FelD/14.FaO/lEfFaLi/16FMS,FaO/18,Fa0/19fFaLi/ZOFaO/Zl,FaO/ZZ,Fa0/Z3rFaLi/Z4100Zfddi-defaultactive1003token-ring-defaultactive1004fddinet-defaultactive1LI0Etrnet-defaultactive步骤5：重新加载交换机SwitchitreloadProceedwithreload?[confiriii]%SYS-5-P.ELUAl：1:P.elijadre stedbyconsole-P.eloadP.eason:P.e1>jadCoioniaricl-CZ950BootLoader(C2950-HE：00T-H)Version1Z_1(Hr)EA1,RELEASESOFTWAP.E(fcl)Coiiipi1edHon2Z-Jul-OZ18:57hylaiwangCiscoWS-CZ950-Z4(RC32300)processor(revisionCO)with21039KLytmsofiiieiLLury-Z950-Z4starting...BaseethernetMACAddress:000C.8SZ3.D954>：j±lc>demfilesysteiiiisavailaL'le.Z950-Z4starting...BaseethernetMACAddress:000C.8SZ3.D954>：j±lc>demfilesysteiiiisavailaL'le.InitializingFlash-..flashfs[0]:flashfs[0]:flashfs[0]:flashfs[0]:flashfs[0]:flashfs[0]:1files,0directories0orphaiiedfiles,0orphaiieddirectoriesTotalEytesEytesb3rr.es:640163S4used:3058048availatile:60958336flashfsfscktook1se>zonds..--doneInitializingFlash.EootSectorFilesysteiii(bs:)instailed,,fsid:3ParanieterElockFilesystem(pb:)instailed,,fsid:4Loading**flash:/cZ9E0-i6q41Z-mz.1Z1-ZZ-EA4.bin".--##魁拜##赚拜##魁拜#魁魁#盘魁##盘赚##魁冥#魁冥#魁冥#魁冥#魁拜##魁拜##赚拜##魁拜#魁冥[OK]P.astrictedP.ighteLegendsi-djparagraph-Restrictedsi-ttiparagraphDataaildComputerUse,dup1icatic>nordisclosurebytheGoveriuiientissliLisi-djparagraph-Restrictedsi-ttiparagraphDataaildComputerSoftwareclauseatDFARSsec.ZSZ.ZZ7-7013.ciscoSysteiiisInc.170WestTasiiiELtj.DriveSailJose,California9E134-1706任务2：检查默认交换机配置步骤1：进入特权模式，键入enable步骤2：检查当前交换机配置发出showrunning-config命令

交换机有多少个快速以太网接口？交换机有多少千兆以太网接口？显示的VTY线路值范围是什么？答：交换机有多少个快速以太网接口？交换机有多少千兆以太网接口？显示的VTY线路值范围是什么？答：答：答：从上图显示，共有24个快速以太网接口2个0-15发出showstartup-config命令，检查当前NVRAM的内容Switchitshowstart-up一configstartup-configisnotpresentSwitch#答：交换机作出这个响应的原因是因为在任务一中已经清楚了交换机中NVRAM的内容。发出showinterfacevlan1命令，检查虚拟接口VLAN1的特征Switch.itsiiowmtertacevlai±lVlaiilisailmiiiistrativelydoT.mrlineprotocolisdoT-m.HardwareisCPUInterface,addressis0001.96ha.4e3h(hia0001-96ha-4e3b)HTU1E00b3rr.es,EW100000Kbit.DLY1000000usecrreliat-ilityZSS/ZSS^txload1/ZEE,rxload1/Z5SEncapsulationAP.PA,1oopbacknotsetAP.Pt.ype:AP.PA,AP.PTimeout04:00z00LastinputZ1:40:El,outputnever,outputhangneverLastclearingof"showinterface"comitersneverInputi^i.ieue:0/75/0/0(size/max/drops/flushes);Totaloutputdrops20Queueingstrat&gy:fitoOutput151-ieue:0/40(size/iiiax)5minuteinputrate0hits/sec,0packets/sec5minuteoutputrate0bit.s/secr0packets/sec16SZpacketsinput,S3095Sl?yt.日与.0nobufferReceived0broadcasts(0IPmulticast)0riUitsr0giai±tsr0throttles0inputerrorsr0CP.C,0fraiiier0□vwrirLui.0±14110red5638S9packetsoutput.0Lyt日与#0miderriuis0outputerrorsr23interfaceresets0outputhufferfailures0outputhuffersswappedout交换机设置了IP地址吗？ 答：从上图看出，此时交换机还没有配置IP地址虚拟交换机接口的MAC地址是什么？答：从上图得出硬件地址即MAC地址是0001.96ba.4e3b此接口打开了吗？ 答：从vlanisadministrativelydown， 得出该接口应该没有打开发出showipinterfacevlan1命令查看接口的IP属性SwitchttshowipinterfacevIeqiIVlaiilisailministrativelydomi,lineprotoc□1isdoi-mInternetprotocolprocessingdisahi1edSwitclift|看到的输出是什么？答：从上图的输出时vlan1没有打开，线路不通，互联网协议处理没办法正常运行步骤3：显示CiscoIOS信息Switch#showversionCiscoInteriletworkOperatingSyst-eniSoftwareIOSi：tni：iCZ950Software(CZ950-I6Q4L2-H：i,Version1Z_1(22)EA4rRELEASESOFTWAREi：fcl)Copyright(c)1986-Z00EbyciscoSysteias,Inc-CompiledWed18-Hay-OSZZ:31byjharirbaIiiiagptext-base:OkSOOIOOOOdata-base:0x80562000P.OM:EootstrapprogramisisC29E0boot1□aderSwitchuptiiiieis6SysteiiireturnedtoSwitchuptiiiieis6Systeiiireturnedtoiiiinutam.33secondsP.OMbypower-onCiscoWS-CZ950T-Z4(P.C3Z300Jprocessor(revisionC□Jwith21039KEiyt^s：ofiiieiLLoryCiscoWS-CZ950T-Z4Processorboard!!：■FHKQEI口，口WCLastresetfrdillsystem-resetpi-uitiingStandardIiiiage24FastEtharnet/IEEE802.3interface(s)ZGigalziitEthernet/IEEE80Z.3interface(sJ63488KEiytmsoff1ash-siiiiulat&dnon-vo1ati1econfiiT-irationiLLPiiiory-BaseethemetMACAddress:0001.96EA-4E3EMotherb□ardasseiiiLilymuiiLier:73-5781-09Powersupplypartmui±ier:34-0965-01MotherboardserialnuiLitier:F0C061004SZPowersupplyserialminitier:DAE：0609127DModelrevisionni-inil：ier:COHotherb□ardrevisionmmitier:A0ModelmiiiitiPt:WS-CZ950T-24SysteiiiserialmuiLtier:FHFlLi610Z0TiJCConfiiT-irationregisterisOxFS-witclj.it交换机运行的CISCOIOS交换机运行的CISCOIOS版本是多少？答:软件名为C2950-I6Q4L2-M，版本为12.1(22)EA4系统图像文件名是什么？答：0x80010000此交换机的基本EA4系统图像文件名是什么？答：0x80010000此交换机的基本MAC地址是什么？答：0001.96BA.4E3B步骤4：检查快速以太网接口Suitchitshowinterfacefastetl±ernet0/ISFastEtl±emet0/18isdox-m.,lineprotocolisdoxm(disatiled)HardwareisLaiice,addressis0040.Ohee.e91Z(bia0040-Ohee-e91Z)EW100000Kbit,DLY1000usee,reliat.ility255/ZS5,,txloadl/Z5Sfrxlcad1/255En«zapsulationAP.PA,loopbacknotsetKeepaliveset(10sec)Half-duplex,lOOHb/sinputflow-controlisoffroutputflow-controlisoffARPtype:ARPA,ARPTimeout04:00:00Lastinput00:00:08foutput00:00:0Sfoutputhai±gneverLastclearingof"showinterface"coiuitersneverInputi^i-isue:0/75/0/0(size/iiiax/drops/flushee);Tat-aloutputdrope:uQueueingstrategy:fifoOutputi^i-ieue:0/40(size/iiiax)5iiiinuteinputrate0bits/secr0packet-s/sec5minuteoutputrateUbits/sec,0packets/sec9S6packetsinputf193351hyt-0nobufferP.eceived956broadcastsr0rluitsr0giants,uthrottles0inputerrors,0CRC,0frame,0overri-ui,,.0ignared,0atiort0watclidog^0iiiulticastf0pauseinput0inputpacketswithdribbleconditiondetected23S7packetsoutput,263570 ,0i-Uidemuis0outputerrorsr0co11ieionsf10interfaceresets0hatibles,0latecollision^0deferred0lostcarrier,0nocarrier0outputbufferfailures,0outputbuffersswappedoutSuitchit此接口是打开还是关闭的？答：从FastEthernet0/18isdown,lineprotocolisdown看出该接口是关闭的什么事件会打开接口？ 答：switch#showinterface事件可以打开接口接口的MAC地址是什么？ 答：0040.0bee.e912该接口的速率和双工设置是什么？ 答：其双工设置的是半双工，速率是：100Mb/s步骤5：检查VLAN信息

Suitch#showvlai±7LAIJNajneStatusPorts1 default active100Zfddi-default act/Luisuptoken-ring-default act/misupfddinet-default act/misuptmet-default act/misupFa0/l,FaO/Z,FaO/3,FaO/4FaO/S,FaO/6,FaO/7,FaO/8FmD/9.FaO/10,FaLi/llfFaO/12FaO/13,FaO/14,FaO/lS,FaLi/16FaO/17,FaO/18,Fa0./19,FaO/ZOFaO/Zl,FaO/ZZrFa0/£3,FaO/24Gigl/1,Gigl/ZVLAI-ITypaSAIDHTU ParentP.ingNoBridgeNoStpErdgllodeTraiislTraiisZ1 enet1000011500 - - -- - 0 01002fddi1010021500 - 一 -- - 0 01003tr 1010031500 - - -- - 0 01004f.iiet101004IE00 - - -ieee- 0 01005trnet101005RemoteSPAIJVLAIJs1500 - - -ibiii- 0 0PrimarySecondaryType： PortsSwitch#VLAN1的名称是什么？答：Default：默认此VLAN中有哪些端口？答：Fa0/1〜Fa0/24,24个快速以太网接口，2个千兆以太网接口Vlan1是活动的吗？答：Vlan1是活动的，从active看出什么类型的VLAN是默认的VLAN?答：enet类型的vlan是默认的步骤6：检查闪存Suitchitshowf1ashDirectoryofflash:/1-rw-3058043 date>c29SLi-i6q41Z-iiiz.121-ZZ.EA4_bin64016384b^rt-estotal(60958336bytesftree)Switchtt|发现了哪些文件或目录？答：发现了一个rw的目录，里面有c2950-i6q412-mz.121-22.EA4.bin文件,该文件共64016384字节，剩余的空间还有60958336字节步骤7：检查并保存启动配置文件Switchitconfigriret&riiiinalEnterconfigutrationcoiiiiLLELtids,oneper1ine-EndwithCUTL/ZSwitch(configjtthostiiaiaesisi(config)itexitsltt%SYS-S-CONFI :ConfiiT-iredfrontconsolebyconsole把要运行配置文件的内容保存到非易失性RAM(NVRAM)slttcopyri-UTtiing-configstart-up-configDestinationfilename[startup-config]?Euildingconfiguration [OK]sltt任务3：创建基本交换机配置步骤1：为交换机制定名称slficonfigui;et-erminalEnterconfigutationcijiLUiiaiids.oneper1ine-EndwithCNTL/Z-si(config)fthostnaiiies1sii：configjitexitsltt-S-CONFIG_I:Configuredfromcons.olebyconsole步骤2：设置访问口令Eliteonfigui;eterminalEnterconfigrirationcijiiiiiiaiids.oneperline-EndwithCUTL/Z.si(config)ftlineconsole0si(config-line)ftpasswordciscosi(config-1ine)ft1□ginsi(config-line)ftlinevty015sii：config-line)Spasswordciscosi(config-1ineJif1□ginsi(config-1ine)itexitsi(canfig)#为什么要login命令？ 答：使用login命令之后，它能使用户输入密码后才能进入用户模式，保证系统的安全性。步骤3：设置命令模式口令£1(config)#enati1esecretclassel(config)步骤4：配置交换机的第3层地址sl(config)ttvlaii99si(config-vlEQi)#exit-si(config)ifinterfacevlaii99si(config-if)等%LINK-S-CHANGED:InterfaceVIany9,chaiigedstatetoupsi(config-if)flipaddress172_17_99.11ZSS.ZSS.ZSS.Osi(config-if)ftnoshutdoxmsi(config-if)ttexitsi(config)tt步骤5：为交换机VLAN分配端口sl(config)ftinterfacefa0/1s1(config-if)#switcliportaccessvlaii99%LINEPP.OT0-5-UPDOW:LineprotocolonInterfaceVlaii99rchaiigedstatetoupsl(config-if)#exitsl(config)#步骤6：设置交换机默认网关sl(config)#ipdefault-gatewaysl(configjitexitsltt%SYS-5-C0NFIG_I:ConfiiT-iredfroiiiconsolebyconsole步骤7：检验管理LAN设置siitshowinterfacevlaii99Vlai±99isup.lineprotocolisupHardwareisCPUInterfa»zeaddressis0001.96ba.4e3b(hia0001.9tha.4e3h)Internetaddressis172.17.99-11/Z4HTU1.500旦三.EW100000Kbit.DLY1000000usecfreliat-ilityZSS/ZSSrtxload1/EE5,rxload1/ZSEEncapeuIationAP.PA,loopbacknotsetAP.Ptnqje:AP.PA,,AP.PTimeout04z00:00Lastinput21:40:21FoutputneverroutputhangneverLastclearingof11showinterface"coi-uitersneverInputi^i.ieue:0/7S/0/0(size/maK/drops/flushes);Tot-aloutputdrcps:0Queueingstrategy:fifoOutput-i^i-ieue:0/40(size/iiiax)Sminuteinputrate0hits/sec,0packets/sec5iiiinuteoutputrate0bits/secrUpackets/sec16SEpacketsinputrE309SELyte：三,0nobufferReceived0broadcasts(0IPiiiulticast-)0ri_uitsr0giaiitsr0throttles0inputerrorsr0CP.C,0fraiiie0ovemui,,0iiZRioredE63859packetsoutput,0byt-es,0iuiderrims0outputerrors,23interfaceresets0outputbutferfailuresf0outputbuffersswappedoutsi#此接口的带宽是多少？答：10000Kbit排队策略是什么？答：fifo即先入先出队列。先入先出队列(FIFO:FirstInputFirstOutput):这是一种传统的按序执行方法，先进入的指令先完成并引退，跟着才执行第二条指令。步骤8：配置PC1的IP地址和默认网关

：9：检验连通性再次检查连通性POping172-17.99-11Pinging17Z.17.99.11with3Zbytesofdata:：9：检验连通性再次检查连通性POping172-17.99-11froiii172-17.99.11froiii172-17-99-11froiii1froiii17Z-17.99.11步骤10:配置快速以太网接口的端口速率和双工设置slftconfiguteteriiiinalEnterconfigritationcoiQiLLELtids,oneper1ine-EndwithCUTL/Zsi(config)ttinterfacefastetl±ernet0/18sii：config-if)Sspeed100si(config-if)ftdupIsxfullsi(config-if)ftendslS%SYS-S-CONFI :ConfiiT-iredfromconsolebyconsole

siftshowinterfacefastethernet0/18FEthernet-0/18isdoT-m.,lineprotocolisdox-m.(dieati1ed)HardwareisLancia,addressis0040-Obee.e91Z(bia0040-Obee.e91Z)EW100000Kbit.DLY1000usee,reliat-ilityZSE/Z5S,txload1/ZE5,rxload1/ZSSEncapsulationAP.PA,loopbacknotsetKeepaliveset(10sec)Half-duplex,lOOMk./sinputf1ow-contro1isoff,outputf1ow-contro1isoffARPe:ARPA,,ARPTimaout04:00:00Lastinput-U0:00:08,output00:00:05,outputhaiigneverLastclearingof"showinterface"«zoi-UitersneverInputeue:0/7S/0/0(size/iiiax/drops/flushes);Totaloutputdrops:0Queueingstrategy:fifoOutputi^i.ieue:0/40(size/niax)Siiiinuteinputrate0bits/secr0packets/sec步骤11:保存配置步骤11:保存配置Siiiiiiut-eoutputrate0bits/sec,0packets/sec9S6packetsinput,1933S1bytes,0nobufferP.eceived956hroadcasts.0riu±ts.0giaiite.0throttlas0inputerrors,0CRC,0fraiiie,0ovemui,,0Igriored.,0atiort0watclidog,0iiiulticast0pauseinput0inputpacketswithdribbleconditiondet&ctedZ3S7packetsoutput,Z63S70b^rtes,0tuiderrmis0outputerrors,0collisions10interfaceresets0batibles,0latecollision,.0deferred0lostcarrier,0nocarrier0outputbufferfailures,0output-huffersswappedcut步骤11:保存配置步骤11:保存配置slfEcapyrunning—configstartup-configDestinationfilenaiiie[st-artup-config]?BuildingconfiiT-iration---[OK]si#步骤12：检查启动配置文件步骤检查启动配置文件slffshowstartup一configUsing1ZZ7Lyt.旦与interfaceFast-Ethernet0/17interfaceFastEthernet0/18interfaceFastEthernet0/19interfaceFastEthernetO/Z0interfaceFastEthernet0/21interfaceFast-EthernetO/ZZinterfaceFastEthernet0/Z3interfaceFastEtheriietO/24interfaceGigatiitEthernet1/1interfaceGigatiitEthernet1/2interfaceVlaiilnoipaddressshutdOT.niIinterface