课件02实施以太网lan乾颐堂ccnav

实施以太网（乾颐堂首发CCNA200-301v1.0）UsingtheCommand-LineInterfaceyzingEthernetLANSwitchingConfiguringBasicSwitchManagementConfiguringandVerifyingSwitchInterfaces（乾颐堂首发CCNA200-301v1.0）思科交换机的物理连接器叫做interface或者port（接口/端口）思科将这一系列交换机上的操作系统称为：InternetworkOperatingSystem(除了控制交换机的性能和行为外，CiscoIOS还为人类定义了一个界面，称为CLI针对网络设备的三种主 方法vsCablingtheConsole使用USBCOM1//COM端口编号8bit1bit停止位无AccessingtheCLI netand通 UserEnableUserandEnable(Privileged)>#代表处 模模式【enable】可以执行一些功能强 令，比如重启设PasswordSecurityforCLIAccessfromthe CLIError%AmbiguousNotenoughcharacterswere•••••SwitchX#clock%pleteSwitchX#clockset%plete wereleftofftheendoftheSwitchX#>SwitchX#>clockset19:50:0025^%Invalidinputdetectedat"^"Thecaret(^)indicateswherethecommandinterpretercannotdeciphertheCLIHelpCtrl+w

SW1#showrunning-configBuildingconfiguration...Currentconfiguration:819!!Lastconfigurationchangeat12:13:47EETFriDec13!versionservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryptionservicecompress-config!hostname!

乾颐堂首 A（200-301）Routing&Switching实战

SW1#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.SW1(config)#interfaceethernet0/0StoringSwitchConfigurationRAM——Flash——用 系统镜像或者其它文件，类似于电脑的硬ROM——只 器 交换机的引导程序，开机时引导交换机找到系统镜像文NVRAM——非易失 器，用 启动配置文SW1#copyrunning-configstartup-configDestinationfilename[startup-config]?SW1#copyrunning-configstartup-configDestinationfilename[startup-config]?BuildingCompressedconfigurationfrom819bytesto551bytes[OK]ThreemethodstoaccessaswitchCablingoptionsforaconsoleACiscoswitch’sdefaultconsoleportNavigationbetweenuser,enable,andglobalconfigAlistofconfigurationmodeprompts,thenameoftheconfigurationmode,andthecommandusedtoreacheachmodeThenamesandpurposesofthetwoconfigurationfilesinaswitchoryzingEthernetLAN（乾颐堂首发CCNA200-301v1.0）1、NetworkRoleandfunctionofnetworkL2andL3DescribeswitchingMAClearningandFrame

FrameMACaddress2、NetworkDescribetheneedforandbasicoperationsofRapidPVST+SpanningTreeProtocolandidentifybasic 乾颐堂首 A（200-301）Routing&Switching实战1、根据目标MAC地址决定转发2、学习数据帧中的源MAC3、通过生成树协议与其它交换机创建无环环境，Aswitch’sMACaddresstableisalsocalledtheswitchingtable,orbridgingtable,oreventheContent-AddressableMemory(CAM)table,inreferencetothetypeofphysicalmemoryusedtostorethe那么，图中列出的MAC地址记录listMAC+址来构建地址表。如果帧进入交换机，并且源MAC地址不MAC+重点关注学习过程以及MAC交换机将目的使用称为交换机将目的使用称为泛洪的过程对其进行转发。当将帧转发出所有接口（入接口除外）LAN交换机的第三个主要功能是防止环路，这是由生成树协议（STP）如果没有STP为了防止出现循环帧，STP 某些端口转发帧，以便在任何一对LAN网段之间仅存在一条活动路径Larryto对于透明网桥和交换机，STP的行为相同。因此，在讨SwitchesforwardframesbasedonthedestinationMACSwitcheslearnMACSwitchesuseSTPtopreventloopsbycausingsomeinterfacestoblock,meaningthattheydonotsendorreceiveframes.HandsOn乾颐堂首 所有接口都分配给VLAN1Usetheerasestartup-configEXECcommandtoerasethestartup-configUsethedeletevlan.datEXECcommandtodeletetheVLANconfigurationUsethereloadEXECcommandtoreloadtheswitch(therebyusingtheemptystartup-config,withnoVLANinformationconfigured)ConfigurethehostnameSW1commandtosettheswitchclearmacaddress-table

思考SW1和SW2之间的接口上的MACThreemainfunctionsofaLANProcesstoforwardaknownunicastProcesstoforwardaknownunicast,secondProcesstolearnMACSummaryofswitchforwardingTheshowmacaddress-tabledynamicknownunicastSpanningTreeProtocolunknownunicastMACaddress 1.0Network1.6ConfigureandverifyIPv4addressingand4.0IP4.6Configureandverify and4.8Configurenetworkdevicesforremoteaccessusing5.0Security5.3ConfiguredeviceaccesscontrolusinglocalSecuringusermodeandprivilegedmodewithsimpleSecuringusermodeaccesswithlocalSecuringusermodeaccesswithexternalauthenticationSecuringremoteaccesswithSecure SW1#configureSW1#configureEnterconfigurationcommands,oneperline.EndwithCNTL/Z.SW1(config)#enablesecretloveSW1(config)#lineconsole0%Logindisabledonline0,until'password'issetSW1(config-line)#passwordfaithSW1(config)#linevty04SW1(config-line)#passwordhopeshowrunning-showip

SW1#configureEnterconfigurationcommands,oneperline.EndwithCNTL/Z.SW1(config)#hostnameSW1SW1(config)#ip -nameSW1(config)#cryptokeygeneratersaThenameforthekeyswillbe:Choosethesizeofthekeymodulusintherangeof360to2048foryourGeneralPurposeKeys.Choosingakeymodulusgreaterthan512maytakeafewHowmanybitsinthemodulus[512]:%Generating1024bitRSAkeys,keyswillbenon-exportable...[OK](elapsedtimewas4seconds)SW1(config)#ipsshversion2SW1(config)#linevty015SW1(config-line)#loginlocalSW1(config-line)#transportinputsshSW1(config-line)#exitSW1(config)#usernamewendellpasswordodomSW1(config)#usernamechrispasswordyoudamanSW1(config)#^ZHostandSwitchIPConfiguringIPv4onaVerifyingIPv4onalogg