网络设备配置

一、交换机基本配置Switch>（交换机用户模式）Switch>enable（输入enable进入到交换机的特权模式）Switch#conft（进入到交换机的全局配置模式）Switch（config）#intf0/1（进入到交换机的接口模式）Switch（config-if）#exit（退回到交换机全局配置模式）Switch（config）#Switch（config）#lineconsole0（进入到交换机line模式）Switch（config-line）#exit（退回到交换机全局配置模式）Switch（config）#Switch（config）#hostnameSW1（交换机命名为SW1）SW1（config）#enablepasswordcisco（给交换机配置口令）SW1（config）#exit（退回到特权模式）SW1#SW1#showrunning-config（查看交换机当前配置）!Version12.1servicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryption!hostnameSW1enablepasswordciscoF0/：PC10/24二、交换机Vlan的配置F0/：PC10/24SWF0/2PC20/24交换机的配置Switch>enSwitch#conftSwitch(config)#hostSWSW(config)#enablepassciscoSW(config)#linevty04(进入交换机虚拟终端)SW(config-line)#passcisco(配置虚拟终端口令)SW(config-line)#login(使配置的虚拟终端口令生效)SW(config-line)#exitSW(config)#vlan2(创建Vlan2)或者SW#vlandatabaseSW(vlan)#vlan2SW(config)#vlan3(创建Vlan3)或者SW#vlandatabaseSW(vlan)#vlan3SW(config)#intf0/2SW(config-if)#switchportaccessvlan2(将交换机端口添加到Vlan2)SW(config-if)#exitSwitch(config)#SW(config)#intf0/3SW(config-if)#switchportaccessvlan3(将交换机端口添加到Vlan3)Switch(config)#Switch（config）#Switch#showvlanbrief（查所有Vlan信息）SW#showrunning-config（查看交换机当前配置）!Version12.1servicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryption!hostnameSWenablepasswordciscoipsubnet-zerospanning-treeextendsystem-idinterfaceFastEthernet0/1!interfaceFastEthernet0/2switchportaccessvlan2interfaceFastEthernet0/3switchportaccessvlan3interfaceFastEthernet0/4!interfaceFastEthernet0/5!interfaceFastEthernet0/6!interfaceFastEthernet0/7!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!vtpdomainbigdomain!interfaceVlan1noipaddressnoiproute-cache!vlan2nameVLAN0002vlan3nameVLAN0003ipclasslessnoiphttpserverlinecon0transportinputnonelineaux0linevty015loginpasswordcisconoschedulerallocateendPC1的配置:C:>ipconfig/ip0（配置PC1的IP地址）C:>ipconfig/dg（配置PC1的网关）C:>ipconfig（查看PC1的IP信息）C:>ping0（测试与PC2的连通性）Pinging0with32bytesofdata:Requesttimedout.Requesttimedout.Requesttimedout.Requesttimedout.Requesttimedout.Pingstatisticsfor0:Packets:Sent=5,Received=0,Lost=5（100%loss）,Approximateroundtriptimesinmilli-seconds:

Minimum=0ms,Maximum=PC2的配置:0ms,Average=0msC:>ipconfig/ip0（配置PC2的IP地址）C:>ipconfig/dg（配置PC2的网关）C:>ipconfig（查看PC2的IP信息）C:>ping0（测试与PC1的连通性Minimum=0ms,Maximum=PC2的配置:0ms,Average=0msRequesttimedout.Requesttimedout.Requesttimedout.Requesttimedout.Requesttimedout.Pingstatisticsfor0:Packets:Sent=5,Received=0,Lost=5（100%loss）,Approximateroundtriptimesinmilli-seconds:Minimum=0ms,Maximum=0ms,Average=0ms三、单臂路由的配置能够访问相同VLAN的主机不能访问不同VLAN的主机实验要求：完成标准-连接在2台交换机上的主机，-连接在2台交换机上的主机，-PC不能访问交换机IP-交换机之间能够互访・注：不同vlan对应不同网段实验步骤：能够访问相同VLAN的主机不能访问不同VLAN的主机SW1的配置Switch>Switch>enSwitch#conftSwitch(config)#hostSW1SW1(config)#vlan2或者SW#vlandatabaseSW(vlan)#vlan2(创建vlan2)SW1(config)#vlan3或者SW#vlandatabaseSW(vlan)#vlan3(创建vlan3)SW1(config)#intf0/2SW1(config-if)#switchportaccessvlan2(将端口f0/2添加到vlan2中)SW1(config-if)#exitSW1(config)#intf0/3

SW1(config-if)#switchportaccessvlan3(将端口f0/3添加到vlan3中)SW1(config-if)#exitSW1(config)#enSW1(config)#enablepasscisco(配置交换机密码)SW1(config)#linevty015SW1(config-line)#passcisco(配置交换机远程登录密码)SW1(config-line)#loginSW1(config-line)#exitSW1(config)#intvlan1SW1(config-if)#ipaddress(给交换机配置管理IP地址)SW1(config-if)#noshutdown(激活vlan1端口)SW1(config-if)#exitSW1(config)#intf0/10SW1(config-if)#switchporttrunkencapsulationdot1q(将端口f0/10封装为802.1q)SW1(config-if)#switchportmodetrunk(将端口f0/10指定为trunk口)验证：SW1#shvlanbrief(查看交换机vlan的配置情况)VLANNameStatusPortsdefaultFa0/6Fa0/10Fa0/14VLAN0002activeFa0/1,Fa0/4,Fa0/5,Fa0/7,Fa0/8,Fa0/9,Fa0/11,defaultFa0/6Fa0/10Fa0/14VLAN0002activeFa0/33activeFa0/3active1002fddi-default1003token-ring-defaultactive1004fddinet-defaultactive1005trnet-defaultactiveSW1#showinttrunk（查看交换机trunk的配置情况）PortModeEncapsulationStatusNativevlanFa0/10on802.1qtrunkingPortactive1003token-ring-defaultactive1004fddinet-defaultactive1005trnet-defaultactiveSW1#showinttrunk（查看交换机trunk的配置情况）PortModeEncapsulationStatusNativevlanFa0/10on802.1qtrunkingPortVlansallowedontrunkFa0/101-4094PortVlansallowedandactiveinmanagementdomainFa0/102,3PortVlansinspanningtreeforwardingstateandnotprunedFa0/102,3验证远程登录:SW1#telnet(远程登录到SW2上)Trying...OpenSW2>enEnterpassword:SW1#telnet(远程登录到SW2上)Trying...OpenSW2>enEnterpassword:SW2#exit(退回到SW1上)[Connectiontoclosedbyforeignhost]SW1#SW2的配置Switch>Switch>enSwitch#conftSwitch(config)#hostSW2SW2(config)#linevty015SW2(config-line)#passcisco（配置交换机远程登录密码）SW2(config-line)#loginSW2(config-line)#exitSW2(config)#enablepasscisco(配置交换机密码)SW2(config)#vlan2或者SW#vlandatabaseSW(vlan)#vlan2SW2(config)#vlan3或者SW#vlandatabaseSW(vlan)#vlan3SW2(config)#intf0/2SW2(config-if)#switchportaccessvlan2(将端口f0/2添加到vlan2中)SW2(config-if)#exitSW2(config)#intf0/3SW2(config-if)#switchportaccessvlan3(将端口f0/3添加到vlan3中)SW2(config-if)#exitSW2(config)#intvlan1SW2(config-if)#ipaddress(给交换机配置管理IP地址)SW2(config-if)#nosh(激活vlan1端口)SW2(config-if)#exitSW2#conftSW2(config)#intf0/10SW2(config-if)#switchporttrunkencapsulationdot1q(将端口f0/10封装为802.1q)SW2(config-if)#switchportmodetrunk(将端口f0/10指定为trunk口)验证：SW2#showvlanbrief(查看交换机vlan的配置情况)VLANNameStatusPorts1defaultactiveFa0/1,Fa0/4,Fa0/5,Fa0/6Fa0/7,Fa0/8,Fa0/9,Fa0/13,Fa0/142VLAN0002activeFa0/23VLAN0003activeFa0/3fddi-defaulttoken-ring-defaultactiveactivefddinet-defaultactivetrnet-defaultactiveSW2#showinttrunk（查看父换机trunk的配置情况）PortModeEncapsulationStatusNativevlanFa0/10on802.1qtrunking1PortVlansallowedontrunkFa0/101-4094PortVlansallowedandactiveinmanagementdomainFa0/102,3PortVlansinspanningtreeforwardingstateandnotprunedFa0/102,3SW2#telnet（远程登录到SW2上）Trying...OpenSW1>enPassword:SW1#exit（退回到SW2上）[Connectiontoclosedbyforeignhost]SW2#四、单臂路由的配置F0/0.1:/24FO/0.2：/24F00IP：0/24IP：0/24交换机的配置Switch#conftSwitch(config)#hostSWSW(config)#enablepasscisco(配置交换机密码)SW(config)#linevty015SW(config-line)#passcisco(配置交换机远程登录密码)SW(config-line)#loginSW(config-line)#exitSW(config)#intf0/2SW(config-if)#exitSW(config)#vlan2或者SW#vlandatabaseSW(vlan)#vlan2

SW(config)#vlan3或者SW#vlandatabaseSW(vlan)#vlan3SW(config)#intf0/2SW(config-if)#switchportaccessvlan2(将端口添加到vlan2中)SW(config-if)#exitSW(config)#intf0/3SW(config-if)#switchportaccessvlan3(将端口添加到vlan3中)SW(config-if)#exitSW(config)#intF0/0.1:/24FO/0.2：/24F00IP：0/24IP：0/24SW(config-if)#switchporttrunkencapsulationdot1q(将端口f0/4封装为802.1q)SW(config-if)#switchportmodetrunk(将端口f0/4指定为trunk口)SW#shvlanbriefStatusPortsVLANNamedefaultFa0/6Fa0/10Fa0/14VLAN0002VLAN0003fddi-defaulttoken-ring-defaultfddinet-defaulttrnet-default路由器的配置Router>Router>enactiveFa0/1,Fa0/4,Fa0/5,Fa0/7,StatusPortsdefaultFa0/6Fa0/10Fa0/14VLAN0002VLAN0003fddi-defaulttoken-ring-defaultfddinet-defaulttrnet-default路由器的配置Router>Router>enRouter#conftRouter(config)#hostRR(config)#enablepasswordcisco(配置路由器密码)R(config)#linevty04R(config-line)#passcisco(配置路由器远程登录密码)R(config-line)#loginR(config-line)#exitR(config)#intf0/0R(config-if)#noshR(config-if)#noipaddress(在此接口下不配置IP地址)R(config-if)#exitR(config)#intf0/0.1R(config-subif)#encapsulationdot1q2(封装子接口为802.1q，并且此子接口分配给vlan2作为网关用)R(config-subif)#ipaddress(配置子接口的IP地址)R(config-subif)#nosh(激活子接口)R(config-subif)#exitR(config)#intf0/0.2R(config-subif)#encapsulationdot1q3(封装子接口为802.1q，并且此子接口分配给v