网络技术培训

网络技术培训1内容提要网络基础Extreme交换机管理Juniper防火墙管理2网络基础3名词术语TCP(TransportControlProtocol)传输控制协议

IP(InternetworkingProtocol)网间网协议

UDP(UserDatagramProtocol)用户数据报协议

ICMP(InternetControlMessageProtocol)互联网控制信息协议

SMTP(SimpleMailTransferProtocol)简单邮件传输协议

SNMP(SimpleNetworkmanageProtocol)简单网络管理协议

TransferProtocol)文件传输协议

ARP(AddressResolationProtocol)地址解析协议

。。。。。。。。4TCP/IP协议结构网络接口层负责接收IP数据报并通过网络发送之，或者从网络上接收物理帧，抽出IP数据报，交给IP层网间网层负责相邻计算机之间的通信。其功能包括三方面。一、处理来自传输层的分组发送请求，收到请求后，将分组装入IP数据报，填充报头，选择去往信宿机的路径，然后将数据报发往适当的网络接口。二、处理输入数据报：首先检查其合法性，然后进行寻径--假如该数据报已到达信宿机，则去掉报头，将剩下部分交给适当的传输协议；假如该数据报尚未到达信宿，则转发该数据报。三、处理路径、流控、拥塞等问题。

传输层提供应用程序间的通信。其功能包括：一、格式化信息流；二、提供可靠传输。为实现后者，传输层协议规定接收端必须发回确认，并且假如分组丢失，必须重新发送。应用层向用户提供一组常用的应用程序，比如电子邮件、文件传输访问、远程登录等。5TCP/IP协议与OSI对应关系OSI中的层

功能

TCP/IP协议族

应用层

文件传输，电子邮件，文件服务，虚拟终端

TFTP，HTTP，SNMP，FTP，SMTP，DNS，Telnet表示层

数据格式化，代码转换，数据加密

没有协议

会话层

解除或建立与别的接点的联系

没有协议

传输层

提供端对端的接口

TCP，UDP网络层

为数据包选择路由

IP，ICMP，RIP，OSPF，BGP，IGMP数据链路层

传输有地址的帧以及错误检测功能

SLIP，CSLIP，PPP，ARP，RARP，MTU物理层

以二进制数据形式在物理媒体上传输数据

ISO2110，IEEE802。IEEE802.26IP地址分类A类B类C类D类E类7局域网专用IP地址

私有IP地址IP地址范围网络类型网络个数--55A类1--55B类16--55C类2568特殊IP地址9常用掩码（1）10常用掩码（2）注：每个网络中能容纳的主机数量为2n-2，其中n位主机号所占位数。11子网划分TCP/IP上的每台主机都需要用一个子网屏蔽号。它是一个4字节的地址，用来封装或“屏蔽”IP地址的一部分，以区分网络号和主机号。当网络还没有划分为子网时，可以使用缺省的子网屏蔽；当网络被划分为若干个子网时，就要使用自定义的子网屏蔽了。12子网划分13路由基础不同网络或网段的主机相互访问时需要建立路由表常用的路由协议静态路由RIP（RoutingInformationProtocol-路由信息协议）、OSPF（OpenShortestPathFirst--开放式最短路优先）IS-IS（Intra-domainRoutingProtocol--域内路由协议）IGRP（InteriorGatewayRoutingProtocol--内部网关路由协议）EIGRP（EnhancedInteriorGatewayRoutingProtocol--增强的内部网关路由选择协议）BGP（BorderGatewayProtocol—边界网关协议）14路由基础举例（1）实现两台PC通讯路由器配置：配置E0，E1接口IP地址PC1配置：IP地址：1/24默认网关：PC2配置：IP地址：1/24默认网关：路由器路由表/24（E0）/24（E1）PC1路由表/0/241PC1路由表/0/24115路由基础举例（2）R1路由表/24（E0）/16（S0）*/24*/24*/24R2路由表/24（E0）/16（S0）/16（S1）*/24*/24*/24R3路由表/24（E0）/24（E1）/16（S1）/24/2416Extreme交换机管理17交换机结构ExtremeSummit400-48T交换结构带宽：97.6Gbps，包转发速率：72.6Mpps48个10/100/1000Mbps接口4个mini-GBIC光纤接口18命令结构19命令帮助提示Summit4:3#show<tab>Nextpossiblecompletions:accountsconfigurationripvlanprotocollogstpdswitchqosproigmpfdbipfdbmemorymanagementiparpiprouteportsversionsessionipqosipconfigdvmrpdiagnosticsedpmirroringbannerospfgvrpipmc<vlanname><spanningtreename><protocolname><QOSprofile>Summit4:3#showport<tab>Nextpossiblecompletions:configurationstatscollisionspacketinfotxerrorsrxerrorsutilizationqosmonitor<portnumber>Summit4:3#showportsconfiguration<tab>Nextpossiblecompletions:<cr>Summit4:3#showportsconfigurationFirst-tiercommand:Usingthecommandcompletionkeydisplaysallofthesecond-tieroptionsPreviouscommandisechoed,SecondandThird-tiercommandsareaddedtosyntaxstringCompletedcommandsyntax20ExtremeWareSoftwareFilesSoftwareImage

PrimarySecondarySoftwareConfiguration

PrimarySecondary21SwitchSoftwareConfigurationFilesContainswitchconfigurationinformationContaincustomizedsetofparametersthattheuserselectedtorunontheswitchTwodifferentfilesarestoredinlocations:PrimarySecondary22常用查看命令--showshowswitchshowdiagnosticsshowmanagementshowaccounts23CLICommand-showswitch

24查看端口命令showportshowportconfigshowportinfoshowportpacketshowportRXerrorsshowportTXerrorsshowportstatisticsshowportutilization25Displaysreal-timecollisionstatistics.Syntax:showport{<portlist>}collisionsPortCollisionMonitorWedSep923:14:091998PortLinkCollisionHistogramNumStatus12345678910111213141516================================================================================1ACTIVE00000000000000002READY00000000000000003READY00000000000000004READY00000000000000005READY00000000000000006READY00000000000000007READY00000000000000008READY0000000000000000===============================================================================0->ClearCountersU->pageupD->pagedownESC->exitShowPortCollisions26showport{<portnumber>}configurationShowPortConfigurationSyntax:Displaystheportconfiguration,including:PortStateLinkstateLinkspeedDuplexmodeFlowcontrolLoadsharinginformationlinkmediainformation27Summit4#showportconfigPortConfigurationMonitorWedSep923:21:281998PortPortLinkAutoSpeedDuplexFlowLdShareMediaNumStateStatusNegCfgActualCfgActualCtrlMasterPriRed================================================================================1ENABLEDACTIVEONAUTO100AUTOFULLNONEUTP2ENABLEDREADYONAUTOAUTOUTP3ENABLEDREADYONAUTOAUTOUTP4ENABLEDREADYONAUTOAUTOUTP5ENABLEDREADYONAUTOAUTOUTP6ENABLEDREADYONAUTOAUTOUTP7ENABLEDREADYONAUTOAUTOUTP8ENABLEDREADYONAUTOAUTOUTP9ENABLEDREADYONAUTOAUTOUTP10ENABLEDREADYONAUTOAUTOUTP11ENABLEDREADYONAUTOAUTOUTP12ENABLEDREADYONAUTOAUTOUTP13ENABLEDREADYONAUTOAUTOUTP14ENABLEDREADYONAUTOAUTOUTP15ENABLEDACTIVEONAUTO100AUTOFULLNONEUTP16ENABLEDACTIVEONAUTO100AUTOFULLNONEUTP17ENABLEDACTIVEON10001000AUTOFULLNONESX18ENABLEDACTIVEON10001000AUTOFULLNONESX================================================================================U->pageupD->pagedownESC->exitExample-showportconfiguration28showport{<portnumber>}infoShowPortInfoSyntaxDisplaysdetailedsystem-relatedinformationBRIDGE_LAB_2:19#showportsinfoInformationforport1:Portstate:activeConfiguredDuplexmode:autoActualDuplexMode:fullConfiguredspeed:autoActualSpeed:100Porttype:UTPHasredundantport:noSummitLinkdisabledExtremeDiscoveryProtocol:enabledLoadsharingisnotenabledMACLearning:enabledBridgeinformation:red(untagged)VlanId:4095SpanningTreeInformation:Stpd:s0,enabledonthisportPortState:FORWARDINGDesignatedRoot:00:00:00:00:00:00:00:00DesignatedBridge:00:00:00:00:00:00:00:00DesignatedCost:0DesignatedPortId:0Protocol:VlanredPriority:0type:EtherTypevalue:ffffQosProfile:Noneconfigured29showport{<portnumber>}packetReceivePacketStatisticsWedSep923:26:061998PortLinkPacketSizesNumStatus0-6465-127128-255256-511512-10231024-1518================================================================================1ACTIVE88847131002READY0000003READY0000004READY0000005READY0000006READY0000007READY0000008READY0000009READY00000013READY00000014READY00000015ACTIVE000700016ACTIVE163140700017ACTIVE280201600018ACTIVE814010800================================================================================0->ClearCountersU->pageupD->pagedownESC->exitShowPortPacketDisplaysahistogramofpacketstatisticsSyntax:30showport{<portnumber>}rxerrorsPortRxErrorMonitorWedSep923:27:571998PortLinkRxRxRxRxRxRxRxNumStatusCRCOverUnderFragJabberAlignLost================================================================================1ACTIVE60000002READY00000003READY00000004READY00000005READY00000006READY00000007READY00000008READY00000009READY000000013READY000000014READY000000015ACTIVE000000016ACTIVE000000017ACTIVE000000018ACTIVE0000000================================================================================0->ClearCountersU->pageupD->pagedownESC->exitShowPortRXerrorsDisplaysreal-timereceiveerrorstatisticsSyntax:31showport{<portnumber>}txerrorsPortTxErrorMonitorWedSep923:30:031998PortLinkTxTxTxTxTxNumStatusCollLateCollDeferredErrorParity================================================================================18ACTIVE0000019READY0000020READY0000021ACTIVE0000022ACTIVE00000================================================================================0->ClearCountersU->pageupD->pagedownESC->exitShowPortTXerrorsDisplaysreal-timetransmiterrorstatisticsSyntax:32showport{<portnumber>}statsPortStatisticsWedSep923:31:141998PortLinkTxPktTxByteRxPktRxByteRxRxNumStatusCountCountCountCountBcastMcast================================================================================1ACTIVE1874127627336112197722READY0000003READY0000004READY0000005READY0000006READY0000007READY0000008READY0000009READY00000013READY00000014READY00000015ACTIVE2673831575256500016ACTIVE7525650266382511266517ACTIVE3517778922163933341618ACTIVE22547591211466005929===============================================================================0->ClearCountersU->pageupD->pagedownESC->exitShowPortStatsDisplaysreal-timeportstatisticsSyntax:33showport{<portnumber>}utilizationShowPortUtilizationDisplaysreal-timeportutilizationinformationSyntax:Bypressing<spacebar>,

usermaytogglebetweendisplaysofpacketspersecondbytespersecondpercent(%)bandwidth34showport{<portnumber>}utilizationpacketspersecondLinkUtilizationAveragesWedSep923:33:111998PortLinkReceivePeakRxTransmitPeakTransmitNumStatuspacket/secpkt/secpkt/secpkt/sec================================================================================1ACTIVE0100...15ACTIVE000016ACTIVE000017ACTIVE000018ACTIVE0000================================================================================spacebar->togglescreenU->pageupD->pagedownESC->exitExample1-ShowPortUtilization35showport{<portnumber>}utilizationbytespersecondLinkUtilizationAveragesWedSep923:34:321998PortLinkReceivePeakRxTransmitPeakTransmitNumStatusbytes/secbytes/secbytes/secbytes/sec===============================================================================1ACTIVE21671346...15ACTIVE1111135816ACTIVE1358111117ACTIVE23444418ACTIVE25372277===============================================================================spacebar->togglescreenU->pageupD->pagedownESC->exitExample2-ShowPortUtilization36showport{<portnumber>}utilization%bandwidthLinkUtilizationAveragesWedSep923:38:321998PortLinkLinkReceivePeakRxTransmitPeakTransmitNumStatusSpeed%bandwidth%bandwidth%bandwidth%bandwidth===============================================================================1ACTIVE1000.000.000.000.00...15ACTIVE1000.000.000.000.0016ACTIVE1000.000.000.000.0017ACTIVE10000.000.000.000.0018ACTIVE10000.000.000.000.00===============================================================================spacebar->togglescreenU->pageupD->pagedownESC->exitExample3-ShowPortUtilization37常用管理命令（1）download

下载软件或参数文件，download<image|config>upload

上载软件或参数文件，upload<image|config>use

使用软件或配置文件，use<image|config>Reboot重启save

保存saveconfig38常用管理命令（2）unconfig

删除配置unconfig<switch><all>（删除交换机配置）Delete清除命名deletevlanCreate创建createvlanConfig修改configvlanEnabledisable39downloadimage[xmodem|<ipaddress>|<hostname>][<>]{primary|secondary}DownloadsanewsoftwareimagefromaToverthenetworktooneofthetwostoragecontainers.PrimaryorSecondary.CLICommand-downloadimage40useimage[primary|secondary]Configurestheswitchtouseaparticularimageonthenextreboot.CLICommand-useimage41CLICommand-rebootreboot{<date><time>|cancel}Thiscommandwillreboottheswitch.42uploadconfig[<ipaddress>|<hostname>]<>{every<time>|cancel}UploadsthecurrentruntimeconfigurationtothespecifiedT.CLICommand-uploadconfig43 downloadconfiguration [<ipaddress>|<hostname>]<> DownloadsapreviouslysavedASCIIconfiguration aspecificIPhost.CLICommand-downloadconfig44save{configuration}{primary|secondary} Savestheconfigurationtothelocation selected,eitherprimaryorsecondary.CLICommand-saveconfig45useconfiguration{primary|secondary}Configurestheswitchtouseaparticularconfigurationonthenextreboot.CLICommand-useconfig46CLICommand-unconfigswitchunconfigswitch Returnsswitchconfigurationtofactory defaultsexceptuseraccountsand passwordsandthedateandtimeunconfigswitchall Returnsswitchconfigurationtofactory defaultsexceptthedateandtime47configurevlan<vlanname>ipaddress<ipaddress>{<addressmask>} unconfigurevlan<vlanname>ipaddressExample:configvlanREDipaddressorconfigvlanREDipaddress/24CLICommand-configvlan48WEB管理49EnableandDisableWebAccessWebaccessisenabledbydefaultontheswitchTodisableWebaccess,usetheCLIcommand:disablewebTore-enableWebaccess,usetheCLIcommand:enablewebReboottheswitchforchangestotakeeffect50VistaAccessandLogonAccesstheWebBrowserEnterattheURLAddressLocationfieldhttp://<switchip_address>/Clickon<Logon>Enterusername&password51NavigatingExtremeWareVistaVistadividestheBrowserscreenintothefollowingsections:TaskframeContentframeStandalonebuttonsTheTaskFramehastwosectionsMenubuttonsConfigurationStatisticsSupportLogoutSub-menulinks52SwitchConfigurationScreenContentFrameTaskFrameTaskButton53Statistics-PortUtilization54DisplayStatistics-IPConfiguration55DisplayConfiguration-UserAccounts56DisplaySupport-T57SavingChangesUsingVistaSelectSaveConfigurationfromtheConfigurationtaskbutton,SwitchoptionClickingtheLogoutbutton58功能配置59Exampleof2and4PortLoadSharing60VerifyingLoadSharingConfigurationExecutetheCLIcommand: Summit4#showportsconfiguration61Port-Mirroring--端口镜像Configurestheswitchtocopyalltrafficassociatedwithoneormoreportstoamonitorportontheswitch.ThemonitorportcanbeconnectedtoanetworkanalyzerorRMONprobeforpacketanalysis.Trafficfilterisdefinedbasedon:MACsource/destinationaddressPhysicalportVLANVirtualportAlldataspecifictoaVLANonaspecificportUpto8mirroringfiltersandonemonitorport Framesthatcontainerrorsarenotmirrored!62Port-MirroringCLICommandsenablemirroringto<port> Example:enablemirroringtoport3configmirroringadd/delports

vlan<vlanname><hexoctet>

configmirroringadd[mac<mac_address>|vlan<name>|port<port>|vlan<name>port<portlist>]disablemirroringshowmirroring*Summit3:8#shmirMirrorport:3isup

63VLAN64WhatareVLANs?VirtualLocalAreaNetworkReferstoacollectionofdevicesthatcommunicateasiftheywereonthesamephysicalLANCanbecomprisedofoneormoreportsAportmayparticipateinoneormoreVLANs65VLANBenefitsHelptocontroltrafficProvideextrasecurityEasethechangeandmovementofdevices66VLANinExtremeSwitchesEachSwitchcanhaveamaximumof4096VLANs4095ofthemcanbeconfiguredbytheuser1pre-configuredVLANnamed“default”67AllSummitswitchescomepre-configuredwithasingleVLANnamedDEFAULT.AllportsareinitiallymembersofVLAN-DefaultVLAN-DefaultcannotberenamedandcannotbedeletedVLAN-Default68Port-basedVLANTaggedVLANsProtocol-basedVLANTypesofVLANs69SingleSwitchMultipleswitchInterconnectionperVLANisrequiredPort-basedVLAN70Port-basedVLANs

StepsforSpanningSwitches

AssigntheportoneachswitchtotheVLANCablethetwoswitchestogetherusingoneportoneachswitchperVLAN71VLANTaggingTaggingisaprocessthatinsertsamarker(calleda

tag)intotheEthernetframe.ThetagcontainstheidentificationnumberofaspecificVLAN,calledtheVLANid.IEEE802.1QVLANspecificationIsintegralintheoperationofaSummitswitchanditsabilitytosupportVLANsAllowsasingleinterconnectiontocarrytrafficformultipleVLANs72EthernetFrame-Before&AfterTagging73Configurable.1QEthertypeDefault=8100DestinationaddressSourceaddressTypefieldDatafieldCRCLengthfieldDatafieldCRCEthernetV2.0With802.1QTagIEEE802.3With802.1QTag6bytes2bytesUpto1500bytes4bytesUpto1496bytes6bytes123456784bytes802.1QTag4bytes2bytes802.1QTag4bytesDestinationaddressSourceaddress6bytes6bytes802.1p3bitsVLANID12bitsOctet3Octet4CFITagControlInformation(TCI)FormatTagProtocolIdentifier(TPID)Octet1Octet2Ethernet-encodedTPID0x8100VLANTagging-HowItWorks74UsesofTaggedVLANsMostcommonly,tospanmultipleswitchesAbilitytohaveaportbeamemberofmultipleVLANsAsingleportcanbeamemberofonlyoneport-basedVLANtrunk75AssigningAVLANTagEachVLANmaybeassignedan802.1QVLANtagNotallportsinaVLANneedtobetaggedAsportsareaddedtoVLANwithtag,youdecidewhethereachportwillusetagging forthatVLANTheswitchaddsandstripstagsbasedonVLANconfigurationTheCLIcommandtoassignatagtoaportisconfigvlan<name>addport<portlist>tag76PhysicalConfigurationLogicalEquivalentNetworkExampletrunk77UsePre-definedProtocolsIP,IPX,Netbios,Decnet,IPX_8022,IPX_SNAP,AppleTalkOrCreateaCustomizedProtocolFilteronEthertype,LLCorSNAPheaderMaximumof7(15)

active

user-definedfiltersperswitchProtocol-basedVLAN78User-DefinedProtocolFiltersMaximum:15protocolwithupto6filterseachcanbedefinedCreatefilterbyusingtheCLIcommandcreateprotocol<protocol_name>ConfigurefilterbyusingCLIcommandconfigureprotocol<protocol_name>add<protocol_type><hex_value>Supportedprotocoltypesincludeetype -EtherTypellc -LLCServiceAdvertisingProtocol(SAP)snap -EtherTypeinsidetheIEESNAPpacket encapsulation79配置VLAN步骤创建VLAN分配IP地址和掩码(如果需要)配置VLANid（如果指定VLANid）添加端口，（在需要的端口上标记VLANid）启动VLAN的三层转发80VLAN配置命令create/deletevlan<name>config/unconfigvlanipaddress<x.x.x.x/x>configvlanadd/delporttag|untaggedEnableipforwordingShowvlan81createvlan<vlanname>deletevlan<vlanname>Createsorremovesauser-definedVLAN.Oncecreated,IPaddress,portlists,andqualityofservicefilterscanbeassignedasrequired.NotethataVLANnameislimitedto32characters.CLICommand-create/deletevlan82configurevlan<vlanname>ipaddress<ipaddress>{<addressmask>}unconfigurevlan<vlanname>ipaddressAssignsorremovesanIPaddressandoptionalmasktothenamedVLAN.Themasknotationcantakeeitheroftwoforms:configvlanREDipaddress

orconfigvlanREDipaddress/24CLICommand-config/unconfigvlan83configurevlan<vlanname>[add|delete]port<portnumber>{tagged|untagged}AddordeleteoneormoreportstoaVLAN.Portscanbespecifiedastaggedoruntagged.Iftagged,theportwillonlyacceptdataonthatVLANcarryingtheappropriateID.Bydefault,portsareuntagged.CLICommand-configvlanadd/delport84showvlan{<name>|all}DisplaysoneoralloftheVLANsconfiguredontheswitch.IncludedistheVLANID(tag),theIPaddress,anyassignedprotocolfilters,theQoSprofile,theassignedportlist,theassignedspanningtreedomain,andthestateofIGMPsnooping.CLICommand-showvlan85BRIDGE_LAB_2:31#showvlanblueVLANInterface[3-fd8]withname"blue"createdbyuser Tagging: Untagged(Internaltag4094) IP: / IPX: Notconfigured STPD: Domain"s0"isnotrunningspanning treeprotocol Protocol: Matchallunfilteredprotocols. QosProfile:QP1 Ports: 3.(Numberofactiveport=3) Untag:151822ExampleCLICommand-showvlan86VLANConfigurationwithTagsUsestheCLIcommandconfigvlan<name>tag<vlantag>Exampleofcreatingatag-basedVLANnamed“video”createvlanvideoconfigvideotag1000configvideoaddport4-8tagged87configurevlan<vlanname>tag<vlanID>AssignsanumericalVLANID.Thevalidrangeisfrom1to4095.NotethatVLANtagsareusedinternallybyallSummitswitches,whetheronehasbee