cisco交换机基本配置

Top

NSD NETWORK DAY04

  1. 查看及配置交换机管理地址

1 查看及配置交换机管理地址

1.1 问题

交换机是目前用于组建局域网的主要设备,交换机根据MAC地址表实现数据帧的转发,通过查看MAC地址表更加有利于交换机工作原理的理解;通过查看CISCO设备邻居信息来了解网络拓扑;通过telnet方式远程访问、配置交换机,这种方式要求此交换机已配置有IP地址。

  • 查看交换机MAC地址表
  • 查看CISCO设备邻居信息
  • 交换机地址配置及默认网关

1.2 方案

网络拓扑,如图-1所示。

/

图-1

 

步骤一:查看交换机MAC地址表

1)按拓扑配置PC1及PC2的IP地址并查看,如下所示:

 
  1. PC>ipconfig
  2. FastEthernet0 Connection:(default port)
  3. Link-local IPv6 Address.........: FE80::2D0:97FF:FED2:2DB0 //PC1的MAC地址
  4. IP Address......................: 192.168.1.1 //PC1的IP地址
  5. Subnet Mask.....................: 255.255.255.0
  6. Default Gateway.................: 0.0.0.0
  7. PC>ipconfig
  8. FastEthernet0 Connection:(default port)
  9. Link-local IPv6 Address.........: FE80::2D0:BCFF:FE56:AB31 //PC2的MAC地址
  10. IP Address......................: 192.168.1.2 //PC2的IP地址
  11. Subnet Mask.....................: 255.255.255.0
  12. Default Gateway.................: 0.0.0.0

2)PC1通过ping命令测试与PC2的连通性:

 
  1. PC>ping 192.168.1.2
  2. Pinging 192.168.1.2 with 32 bytes of data:
  3. Reply from 192.168.1.2: bytes=32 time=2ms TTL=128
  4. Reply from 192.168.1.2: bytes=32 time=0ms TTL=128
  5. Reply from 192.168.1.2: bytes=32 time=3ms TTL=128
  6. Reply from 192.168.1.2: bytes=32 time=0ms TTL=128
  7. Ping statistics for 192.168.1.2:
  8. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
  9. Approximate round trip times in milli-seconds:
  10. Minimum = 0ms, Maximum = 3ms, Average = 1ms

3)查看交换机MAC地址表:

 
  1. Switch#show mac-address-table
  2. Mac Address Table
  3. -------------------------------------------
  4. Vlan Mac Address Type Ports
  5. ---- ----------- -------- -----
  6. 1 00d0.97d2.2db0 DYNAMIC Fa0/1
  7. 1 00d0.bc56.ab31 DYNAMIC Fa0/2

步骤二:查看CISCO设备邻居信息

1)配置路由器接口IP:

  1. Router>enable
  2. Router#configure terminal
  3. Router(config)#interface fastEthernet 0/0
  4. Router(config-if)#ip address 192.168.1.254 255.255.255.0
  5. Router(config-if)#no shutdown

2)进入交换机特权模式通过命令查看CISCO设备邻居信息:

  1. Switch#show cdp neighbors
  2. Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
  3. S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone
  4. Device ID Local Intrfce Holdtme Capability Platform Port ID
  5. Router Fas 0/3 179 R C2600 Fas 0/0

步骤三:交换机地址配置及默认网关

1)配置IP地址(192.168.1.10/24)

执行“int vlan1”(或interface vlan1)指令进入交换机的vlan1接口配置,再执行“ip add 192.168.1.10 255.255.255.0”配置IP地址(ip add指令相当于ip address),执行“no shutdown”启用此接口,如下所示:

 
  1. Switch(config)# int vlan1     //进入vlan1接口
  2. Switch(config-if)# ip add 192.168.1.10 255.255.255.0     //配置IP地址
  3. Switch(config-if)# no shutdown //启用接口
  4. %LINK-5-CHANGED: Interface Vlan1, changed state to up
  5. %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up

2)进入交换机全局配置模式配置交换机默认网关地址:

 
  1. Switch#configure terminal
  2. Switch(config)#ip default-gateway 192.168.1.254

3)确认当前的运行配置

直接执行“end”指令返回特权模式:

 
  1. Switch(config-if)# end     //返回特权模式
  2. Switch#
  3. %SYS-5-CONFIG_I: Configured from console by console

4)确认vlan1接口的IP及网关地址信息:

 
  1. Switch#show running-config
  2. Building configuration...
  3. Current configuration : 1026 bytes
  4. !
  5. version 12.1
  6. no service timestamps log datetime msec
  7. no service timestamps debug datetime msec
  8. no service password-encryption
  9. !
  10. hostname Switch
  11. !
  12. !
  13. !
  14. spanning-tree mode pvst
  15. !
  16. interface FastEthernet0/1
  17. !
  18. interface FastEthernet0/2
  19. !
  20. interface FastEthernet0/3
  21. !
  22. interface FastEthernet0/4
  23. interface FastEthernet0/5
  24. !
  25. interface FastEthernet0/6
  26. !
  27. interface FastEthernet0/7
  28. !
  29. interface FastEthernet0/8
  30. !
  31. interface FastEthernet0/9
  32. !
  33. interface FastEthernet0/10
  34. !
  35. interface FastEthernet0/11
  36. !
  37. interface FastEthernet0/12
  38. !
  39. interface FastEthernet0/13
  40. !
  41. interface FastEthernet0/14
  42. !
  43. interface FastEthernet0/15
  44. !
  45. interface FastEthernet0/16
  46. !
  47. interface FastEthernet0/17
  48. !
  49. interface FastEthernet0/18
  50. !
  51. interface FastEthernet0/19
  52. !
  53. interface FastEthernet0/20
  54. !
  55. interface FastEthernet0/21
  56. !
  57. interface FastEthernet0/22
  58. !
  59. interface FastEthernet0/23
  60. !
  61. interface FastEthernet0/24
  62. !
  63. interface Vlan1
  64. ip address 192.168.1.10 255.255.255.0 //IP地址与配置一致
  65. !
  66. ip default-gateway 192.168.1.254 //网关地址与配置一致
  67. !
  68. !
  69. !
  70. !
  71. line con 0
  72. !
  73. line vty 0 4
  74. login
  75. line vty 5 15
  76. login
  77. !
  78. !
  79. end
  80. Top

     

    1. 配置静态路由

    1 配置静态路由

    1.1 问题

    路由器可以将不同网段之间的网络连接到一起,当路由器接收到数据包后要查看数据包中的目标IP,再检查自己的路由表,如果路由表中有和目标IP相匹配的路由条目,路由器才能将数据包按照该路由条目所指定的端口转发出去,实现不同网络之间的通信,那么路由器中的路由表是如何实现的呢?配置了路由器接口IP并为UP状态路由表中自动生成直连路由,对于非直连的路由,需通过静态路由管理员手工添加或通过配置动态路自动学习。

    • 配置静态路由
    • 配置浮动静态路由
    • 配置缺省路由

    1.2 方案

    网络环境及IP地址规划,如图-1所示。

    图-1

      

     

    本例中的配置练习采用思科模拟器 —— Cisco Packet Tracer 6.0,Route采用2621路由器实现。

    1.3 步骤

    实现此案例需要按照如下步骤进行。

    步骤一:配置静态路由

    1)R1上配置接口IP

    1. R1(config)#interface fastEthernet 0/0
    2. R1(config-if)#ip address 192.168.1.254 255.255.255.0
    3. R1(config-if)#no shutdown
    4. R1(config-if)#exit
    5. R1(config)#interface fastEthernet 0/1
    6. R1(config-if)#ip address 192.168.2.1 255.255.255.0
    7. R1(config-if)#no shutdown

    2)R2上配置接口IP

    1. R2(config)#interface fastEthernet 0/1
    2. R2(config-if)#ip address 192.168.2.2 255.255.255.0
    3. R2(config-if)#no shutdown
    4. R2config-if)#exit
    5. R2(config)#interface fastEthernet 0/0
    6. R2(config-if)#ip address 192.168.3.254 255.255.255.0
    7. R2(config-if)#no shutdown

    3)R1上添加静态路由

     
    1. R1(config)#ip route 192.168.3.0 255.255.255.0 192.168.2.2

    4)R1上查看路由表

     
    1. R1#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is not set
    10. C 192.168.1.0/24 is directly connected, FastEthernet0/0
    11. C 192.168.2.0/24 is directly connected, FastEthernet0/1
    12. S 192.168.3.0/24 [1/0] via 192.168.2.2 //S表示静态路由

    5)R2上添加静态路由

    1. R2(config)#ip route 192.168.1.0 255.255.255.0 192.168.2.1

    6)R2上查看路由条目

    1. R2#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is not set
    10. S 192.168.1.0/24 [1/0] via 192.168.2.1 //S表示静态路由
    11. C 192.168.2.0/24 is directly connected, FastEthernet0/1
    12. C 192.168.3.0/24 is directly connected, FastEthernet0/0

    7)配置PC1的IP地址为192.168.1.1,网关为192.168.1.254

    8)配置PC2的IP地址为192.168.3.1,网关为192.168.3.254

    9)测试网络连通性,PC1 ping 192.168.3.1

    1. PC>ping 192.168.3.1
    2. Pinging 192.168.3.1 with 32 bytes of data:
    3. Reply from 192.168.3.1: bytes=32 time=1ms TTL=126
    4. Reply from 192.168.3.1: bytes=32 time=11ms TTL=126
    5. Reply from 192.168.3.1: bytes=32 time=10ms TTL=126
    6. Reply from 192.168.3.1: bytes=32 time=11ms TTL=126
    7. Ping statistics for 192.168.3.1:
    8. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    9. Approximate round trip times in milli-seconds:
    10. Minimum = 1ms, Maximum = 11ms, Average = 8ms

    步骤二:配置浮动静态路由

    1)在以上静态路由实验的基础上,先分别进入R1与R2的特权模式输入write命令保存配置信息,然后分别进入R1与R2的物理配置界面,点击开关按钮关闭路由器,添加NM-1FE-TX模块并再次点击开关按钮,如下图-2所示。

    图-2

     

    2)添加模块后将R1的F1/0接口连接到R2的F1/0接口修改拓扑如下图-3所示:

    图-3

     

    3)配置R1的F1/0接口IP

    1. R1(config)#interface fastEthernet 1/0
    2. R1(config-if)#ip address 192.168.4.1 255.255.255.0
    3. R1(config-if)#no shutdown

    4)配置R2的F1/0接口IP

    1. R2(config)#interface fastEthernet 1/0
    2. R2(config-if)#ip address 192.168.4.2 255.255.255.0
    3. R2(config-if)#no shutdown

    5)R1上添加静态浮动路由

    1. R1(config)#ip route 192.168.3.0 255.255.255.0 192.168.4.2 50 //管理距离50

    6)R2上添加静态浮动路由

    1. R2(config)#ip route 192.168.1.0 255.255.255.0 192.168.4.1 50 //管理距离50

    7)R1上查看路由表

    1. R1#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is not set
    10. C 192.168.1.0/24 is directly connected, FastEthernet0/0
    11. C 192.168.2.0/24 is directly connected, FastEthernet0/1
    12. S 192.168.3.0/24 [1/0] via 192.168.2.2
    13. C 192.168.4.0/24 is directly connected, FastEthernet1/0
    14. R1#show ip rou
    15. R1#show ip route
    16. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    17. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    18. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    19. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    20. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    21. * - candidate default, U - per-user static route, o - ODR
    22. P - periodic downloaded static route
    23. Gateway of last resort is not set
    24. C 192.168.1.0/24 is directly connected, FastEthernet0/0
    25. C 192.168.2.0/24 is directly connected, FastEthernet0/1
    26. S 192.168.3.0/24 [1/0] via 192.168.2.2 //只有下一跳为192.168.2.2的静态路由
    27. C 192.168.4.0/24 is directly connected, FastEthernet1/0

    8)禁用F/01接口

    1. R1(config)#interface fastEthernet 0/1
    2. R1(config-if)#shutdown

    9)R1上查看路由表

    1. C 192.168.1.0/24 is directly connected, FastEthernet0/0
    2. S 192.168.3.0/24 [50/0] via 192.168.4.2//下一跳接口为192.168.4.2的路由生效
    3. C 192.168.4.0/24 is directly connected, FastEthernet1/0

    10)测试网络连通性,PC1 ping 192.168.3.1

    1. PC>ping 192.168.3.1
    2. Pinging 192.168.3.1 with 32 bytes of data:
    3. Reply from 192.168.3.1: bytes=32 time=0ms TTL=126
    4. Reply from 192.168.3.1: bytes=32 time=10ms TTL=126
    5. Reply from 192.168.3.1: bytes=32 time=11ms TTL=126
    6. Reply from 192.168.3.1: bytes=32 time=1ms TTL=126
    7. Ping statistics for 192.168.3.1:
    8. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    9. Approximate round trip times in milli-seconds:
    10. Minimum = 0ms, Maximum = 11ms, Average = 5ms

    步骤三:配置缺省路由

    1)网络环境及IP地址规划,如图-4所示

    图-4

     

    2)R1上配置接口IP

    1. Router(config)#interface fastEthernet 0/0
    2. R1(config-if)#ip address 192.168.1.254 255.255.255.0
    3. R1(config-if)#no shutdown
    4. R1(config-if)#exit
    5. R1(config)#interface fastEthernet 0/1
    6. R1(config-if)#ip address 192.168.2.1 255.255.255.0
    7. R1(config-if)#no shutdown

    3)R2上配置接口IP

    1. R2(config)#interface f0/1
    2. R2(config-if)#ip address 192.168.2.2 255.255.255.0
    3. R2(config-if)#no shutdown
    4. R2(config-if)#exit
    5. R2(config)#interface fastEthernet 0/0
    6. R2(config-if)#ip address 192.168.3.1 255.255.255.0
    7. R2(config-if)#no shutdown

    4)R3上配置接口IP

    1. R3(config)#interface fastEthernet 0/1
    2. R3(config-if)#ip address 192.168.3.2 255.255.255.0
    3. R3(config-if)#no shutdown
    4. R3(config-if)#exit
    5. R3(config)#interface fastEthernet 0/0
    6. R3(config-if)#ip address 192.168.4.254 255.255.255.0
    7. R3(config-if)#no shutdown

    5)R1、R2、R3上分别添加静态路由

    1. R1(config)#ip route 192.168.3.0 255.255.255.0 192.168.2.2
    2. R1(config)#ip route 192.168.4.0 255.255.255.0 192.168.2.2
    3. R2(config)#ip route 192.168.1.0 255.255.255.0 192.168.2.1
    4. R2(config)#ip route 192.168.4.0 255.255.255.0 192.168.3.2
    5. R3(config)#ip route 192.168.1.0 255.255.255.0 192.168.3.1
    6. R3(config)#ip route 192.168.2.0 255.255.255.0 192.168.3.1

    6)R1上查看路由表

    1. R1#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is not set
    10. C 192.168.1.0/24 is directly connected, FastEthernet0/0
    11. C 192.168.2.0/24 is directly connected, FastEthernet0/1
    12. S 192.168.3.0/24 [1/0] via 192.168.2.2 //静态路由
    13. S 192.168.4.0/24 [1/0] via 192.168.2.2 //静态路由

    7)R2上查看路由表

    1. R2#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is not set
    10. S 192.168.1.0/24 [1/0] via 192.168.2.1 //静态路由
    11. C 192.168.2.0/24 is directly connected, FastEthernet0/1
    12. C 192.168.3.0/24 is directly connected, FastEthernet0/0
    13. S 192.168.4.0/24 [1/0] via 192.168.3.2 //静态路由

    8)R3上查看路由表

    1. R3#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is not set
    10. S 192.168.1.0/24 [1/0] via 192.168.3.1 //静态路由
    11. S 192.168.2.0/24 [1/0] via 192.168.3.1 //静态路由
    12. C 192.168.3.0/24 is directly connected, FastEthernet0/1
    13. C 192.168.4.0/24 is directly connected, FastEthernet0/0

    9)按图-4配置PC的IP地址

    10)测试网络连通性,PC1 ping 192.168.2.2、192.168.3.1、192.168.3.2、192.168.4.1

    1. PC>ping 192.168.2.2 //ping 192.168.2.2
    2. Pinging 192.168.2.2 with 32 bytes of data:
    3. Reply from 192.168.2.2: bytes=32 time=0ms TTL=254
    4. Reply from 192.168.2.2: bytes=32 time=0ms TTL=254
    5. Reply from 192.168.2.2: bytes=32 time=0ms TTL=254
    6. Reply from 192.168.2.2: bytes=32 time=0ms TTL=254
    7. Ping statistics for 192.168.2.2:
    8. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    9. Approximate round trip times in milli-seconds:
    10. Minimum = 0ms, Maximum = 0ms, Average = 0ms
    11. PC>ping 192.168.3.1 //ping 192.168.3.1
    12. Pinging 192.168.3.1 with 32 bytes of data:
    13. Reply from 192.168.3.1: bytes=32 time=0ms TTL=254
    14. Reply from 192.168.3.1: bytes=32 time=3ms TTL=254
    15. Reply from 192.168.3.1: bytes=32 time=0ms TTL=254
    16. Reply from 192.168.3.1: bytes=32 time=0ms TTL=254
    17. Ping statistics for 192.168.3.1:
    18. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    19. Approximate round trip times in milli-seconds:
    20. Minimum = 0ms, Maximum = 3ms, Average = 0ms
    21. PC>ping 192.168.3.2 //ping 192.168.3.2
    22. Pinging 192.168.3.2 with 32 bytes of data:
    23. Reply from 192.168.3.2: bytes=32 time=0ms TTL=253
    24. Reply from 192.168.3.2: bytes=32 time=12ms TTL=253
    25. Reply from 192.168.3.2: bytes=32 time=0ms TTL=253
    26. Reply from 192.168.3.2: bytes=32 time=12ms TTL=253
    27. Ping statistics for 192.168.3.2:
    28. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    29. Approximate round trip times in milli-seconds:
    30. Minimum = 0ms, Maximum = 12ms, Average = 6ms
    31. PC>ping 192.168.4.1 //ping 192.168.4.1
    32. Pinging 192.168.4.1 with 32 bytes of data:
    33. Reply from 192.168.4.1: bytes=32 time=0ms TTL=125
    34. Reply from 192.168.4.1: bytes=32 time=10ms TTL=125
    35. Reply from 192.168.4.1: bytes=32 time=0ms TTL=125
    36. Reply from 192.168.4.1: bytes=32 time=22ms TTL=125
    37. Ping statistics for 192.168.4.1:
    38. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    39. Approximate round trip times in milli-seconds:
    40. Minimum = 0ms, Maximum = 22ms, Average = 8ms

    11)R1、R3取消静态路由

    1. R1(config)#no ip route 192.168.3.0 255.255.255.0 192.168.2.2
    2. R1(config)#no ip route 192.168.4.0 255.255.255.0 192.168.2.2
    3. R3(config)#no ip route 192.168.1.0 255.255.255.0 192.168.3.1
    4. R3(config)#no ip route 192.168.2.0 255.255.255.0 192.168.3.1

    12)R1、R3添加默认路由

    1. R1(config)#ip route 0.0.0.0 0.0.0.0 192.168.2.2
    2. R3(config)#ip route 0.0.0.0 0.0.0.0 192.168.3.1

    13)R1上查看路由表

    1. R1#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is 192.168.2.2 to network 0.0.0.0
    10. C 192.168.1.0/24 is directly connected, FastEthernet0/0
    11. C 192.168.2.0/24 is directly connected, FastEthernet0/1
    12. S* 0.0.0.0/0 [1/0] via 192.168.2.2 //默认路由

    14)R3上查看路由表

    1. R3#show ip route
    2. Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
    3. D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    4. N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    5. E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
    6. i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    7. * - candidate default, U - per-user static route, o - ODR
    8. P - periodic downloaded static route
    9. Gateway of last resort is 192.168.3.1 to network 0.0.0.0
    10. C 192.168.3.0/24 is directly connected, FastEthernet0/1
    11. C 192.168.4.0/24 is directly connected, FastEthernet0/0
    12. S* 0.0.0.0/0 [1/0] via 192.168.3.1 //默认路由

    15)测试网络连通性,PC1 ping 192.168.4.1

    1. PC>ping 192.168.4.1
    2. Pinging 192.168.4.1 with 32 bytes of data:
    3. Reply from 192.168.4.1: bytes=32 time=1ms TTL=125
    4. Reply from 192.168.4.1: bytes=32 time=0ms TTL=125
    5. Reply from 192.168.4.1: bytes=32 time=14ms TTL=125
    6. Reply from 192.168.4.1: bytes=32 time=14ms TTL=125
    7. Ping statistics for 192.168.4.1:
    8. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    9. Approximate round trip times in milli-seconds:
    10. Minimum = 0ms, Maximum = 14ms, Average = 7ms

     

    1 telnet远程管理

    1.1 问题

    在企业中为方便网络管理员对Cisco设备的配置,一般需事先在Cisco交换机及路由器上开启远程管理的服务,借助网络通过telnet方式远程访问。

    1.2 方案

    网络管理员通过telnet方式远程管理S1、R1、S2,网络拓扑如图-1所示。

    图-1

     

    本例中的配置练习采用思科模拟器 —— Cisco Packet Tracer 6.0来实现。

    1.3 步骤

    实现此案例需要按照如下步骤进行。

    步骤一:Telnet远程访问思科交换机、路由器

    1)配置交换机S1的管理IP

     
    1. S1(config)#interface vlan 1
    2. S1(config-if)#ip address 192.168.1.2 255.255.255.0 //交换机管理IP
    3. S1(config-if)#no shutdown

    2)开启S1的telnet远程管理服务

    1. S1(config)#line vty 0 4
    2. S1(config-line)#password 123 //远程管理的密码
    3. S1(config-line)#login

    3)配置用户模式进入特权模式的密码(明文或密文之一)

    1. S1(config)#enable password 456

    4)按图-1所示的IP配置PC1的IP地址,PC1通过telnet方式远程管理S1

    1. PC>telnet 192.168.1.2
    2. Trying 192.168.1.2 ...Open
    3. User Access Verification
    4. Password: //输入远程管理密码123
    5. S1>en
    6. S1>enable
    7. Password: //输入用户模式进入特模式密码456
    8. S1# //通过telnet方式登录到S1的特权模式

    步骤二:PC1远程管理R1

    1)配置路由器R1的接口IP

    1. R1(config)#interface fastEthernet 0/0
    2. R1(config-if)#ip address 192.168.1.254 255.255.255.0
    3. R1(config-if)#no shutdown
    4. R1(config-if)#exit
    5. R1(config)#interface fastEthernet 0/1
    6. R1(config-if)#ip address 192.168.2.254 255.255.255.0
    7. R1(config-if)#no shutdown

    2)开启R1的telnet远程管理服务

    1. R1(config)#line vty 0 4
    2. R1(config-line)#password 123 //远程管理的密码
    3. R1(config-line)#login

    3)配置用户模式进入特权模式的密码(明文或密文之一)

    1. R1(config)#enable password 456

    4)PC1通过telnet方式远程管理R1

    1. PC>telnet 192.168.1.254
    2. Trying 192.168.1.254 ...Open
    3. User Access Verification
    4. Password: //输入远程管理密码123
    5. R1>en
    6. R1>enable
    7. Password: //输入用户进入特模式密码456
    8. R1# //通过telnet方式登录到R1的特权模式

    步骤三:PC1远程管理S2

    1)配置交换机S2的管理IP

    1. S2(config)#interface vlan 1
    2. S2(config-if)#ip address 192.168.2.2 255.255.255.0 //交换机管理IP
    3. S2(config-if)#no shutdown
    4. S2(config-if)#exit
    5. S2(config)#ip default-gateway 192.168.2.254 //不同网段主机远程管理需给交换机配置网关地址

    2)开启S2的telnet远程管理服务

    1. S2(config)#line vty 0 4
    2. S2(config-line)#password 123 //远程管理的密码
    3. S2(config-line)#login

    3)配置用户模式进入特权模式的密码(明文或密文之一)

    1. S2(config)#enable password 456

    4)PC1通过telnet方式远程管理S2

    1. PC>telnet 192.168.2.2
    2. Trying 192.168.2.2 ...Open
    3. User Access Verification
    4. Password: //输入远程管理密码123
    5. S2>en
    6. S2>enable
    7. Password: //输入用户模式进入特模式密码456
    8. S2# //通过telnet方式登录到S2的特权模式

     

     

    1 Vlan与trunk配置

    1.1 问题

    VLAN(虚拟局域网)是对连接到的第二层交换机端口的网络用户的逻辑分段,不受网络用户的物理位置限制而根据用户需求进行网络分段。一个VLAN可以在一个交换机或者跨交换机实现。VLAN可以根据网络用户的位置、作用、部门或者根据网络用户所使用的应用程序和协议来进行分组。基于交换机的虚拟局域网能够为局域网解决冲突域、广播域、带宽问题。

    1)按企业部门规划vlan

    2)配置交换机之间的链路为中继链路

    1.2 方案

    企业网络的拓扑如图-1所示:

    图-1

     

    1.3 步骤

    实现此案例需要按照如下步骤进行。

    步骤一:将两台交换机所连的f0/24端口设置为中继模式

    为了使得不同交换机上相同的VLAN可以通信,需要交换机间的链路可以承载所有VLAN数据。Trunk链路不属于任何VLAN,但是可以承载所有VLAN通信。

    1. tarena-sw1(config)#interface fastEthernet 0/24
    2. tarena-sw1(config-if)#switchport mode trunk
    3. tarena-sw1(config-if)#    
    4. tarena-sw2(config)#interface fastEthernet 0/24
    5. tarena-sw2(config-if)#switchport mode trunk
    6. tarena-sw2(config-if)#

    步骤二:分别在tarena-sw1和tarena-sw2上创建人事部VLAN5和销售部VLAN10

    1. tarena-sw1(config)#vlan 5
    2. tarena-sw1(config-vlan)#name HR
    3. tarena-sw1(config-vlan)#exit
    4. tarena-sw1(config)#vlan 10
    5. tarena-sw1(config-vlan)#name Sales
    6. tarena-sw1(config-vlan)#exit
    7. tarena-sw1(config)#
    8. tarena-sw2(config)#vlan 5
    9. tarena-sw2(config-vlan)#name HR
    10. tarena-sw2(config-vlan)#exit
    11. tarena-sw2(config)#vlan 10
    12. tarena-sw2(config-vlan)#name Sales
    13. tarena-sw2(config-vlan)#exit
    14. tarena-sw2(config)#

    步骤三:将PC1所连的tarena-sw1的f0/1端口和PC3所连的tarena-sw2的f0/3加入到人事部VLAN5;将PC2所连的tarena-sw1的f0/2端口和PC4所连的tarena-sw2的f0/4加入到销售部VLAN10

    把交换机端口加入到VLAN时,也可以不指定switchport mode access,但是有些交换机的端口默认是企望或自动状态。如果该端口所连用户通过软件协商成中继状态,那么他就可以向任何VLAN发送数据,对安全产生威胁。因此,强烈建议设置switchport mode access语句。

    1. tarena-sw1(config)#interface fastEthernet 0/1
    2. tarena-sw1(config-if)#switchport mode access
    3. tarena-sw1(config-if)#switchport access vlan 5
    4. tarena-sw1(config-if)#exit
    5. tarena-sw1(config)#interface fastEthernet 0/2
    6. tarena-sw1(config-if)#switchport mode access
    7. tarena-sw1(config-if)#switchport access vlan 10
    8. tarena-sw1(config-if)#exit
    9. tarena-sw1(config)#
    10. tarena-sw2(config)#interface fastEthernet 0/3
    11. tarena-sw1(config-if)#switchport mode access
    12. tarena-sw2(config-if)#switchport access vlan 5
    13. tarena-sw2(config-if)#exit
    14. tarena-sw2(config)#interface fastEthernet 0/4
    15. tarena-sw1(config-if)#switchport mode access
    16. tarena-sw2(config-if)#switchport access vlan 10
    17. tarena-sw2(config-if)#exit
    18. tarena-sw2(config)#

    步骤四:分别在两台交换机上验证VLAN配置结果

    交换机所有端口默认都属于VLAN1,VLAN1是交换机预设VLAN,它还有一些特殊应用,不能被删除。

    1. tarena-sw1#show vlan brief
    2. VLAN Name Status Ports
    3. ---- -------------------------------- --------- ---------------------
    4. 1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6
    5. Fa0/7, Fa0/8, Fa0/9, Fa0/10
    6. Fa0/11, Fa0/12, Fa0/13, Fa0/14
    7. Fa0/15, Fa0/16, Fa0/17, Fa0/18
    8. Fa0/19, Fa0/20, Fa0/21, Fa0/22
    9. Fa0/23
    10. 5 HR active Fa0/1
    11. 10 Sales active Fa0/2
    12. 1002 fddi-default active
    13. 1003 token-ring-default active
    14. 1004 fddinet-default active
    15. 1005 trnet-default active
    16. tarena-sw1#
    17. tarena-sw2#show vlan brief
    18. VLAN Name Status Ports
    19. ---- -------------------------------- ---------------------------------
    20. 1 default active Fa0/1, Fa0/2, Fa0/5, Fa0/6
    21. Fa0/7, Fa0/8, Fa0/9, Fa0/10
    22. Fa0/11, Fa0/12, Fa0/13, Fa0/14
    23. Fa0/15, Fa0/16, Fa0/17, Fa0/18
    24. Fa0/19, Fa0/20, Fa0/21, Fa0/22
    25. Fa0/23
    26. 5 HR active Fa0/3
    27. 10 Sales active Fa0/4
    28. 1002 fddi-default active
    29. 1003 token-ring-default active
    30. 1004 fddinet-default active
    31. 1005 trnet-default active
    32. tarena-sw2#

    结果显示已经将端口加入到相应VLAN中

    步骤五:查看交换机的中继端口状态:

    注意端口的Administrative Mode和Operational Mode,管理模式Administrative Mode是指该端口配置模式,而操作模式Operational Mode才是真正生效的模式。比如端口的管理模式Administrative Mode有可能是动态企望dynamic desireble模式,但操作模式Operational Mode是中继trunk。

    1. tarena-sw1#show interfaces fastEthernet 0/24 switchport
    2. Name: Fa0/24
    3. Switchport: Enabled
    4. Administrative Mode: trunk
    5. Operational Mode: trunk
    6. Administrative Trunking Encapsulation: dot1q
    7. Operational Trunking Encapsulation: dot1q
    8. Negotiation of Trunking: On
    9. Access Mode VLAN: 1 (default)
    10. Trunking Native Mode VLAN: 1 (default)
    11. Voice VLAN: none
    12. Administrative private-vlan host-association: none
    13. Administrative private-vlan mapping: none
    14. Administrative private-vlan trunk native VLAN: none
    15. Administrative private-vlan trunk encapsulation: dot1q
    16. Administrative private-vlan trunk normal VLANs: none
    17. Administrative private-vlan trunk private VLANs: none
    18. Operational private-vlan: none
    19. Trunking VLANs Enabled: ALL
    20. Pruning VLANs Enabled: 2-1001
    21. Capture Mode Disabled
    22. Capture VLANs Allowed: ALL
    23. Protected: false
    24. Appliance trust: none
    25. tarena-sw1#

    结果显示tarena-sw1的f0/24端口当前为中继链路,采用了802.1q的封装

    步骤六:从PC1[192.168.5.10/24]测试到PC3[192.168.5.20/24]的连通性

    1. PC>ping 192.168.5.20
    2. Pinging 192.168.5.20 with 32 bytes of data:
    3. Reply from 192.168.5.20: bytes=32 time=27ms TTL=128
    4. Reply from 192.168.5.20: bytes=32 time=22ms TTL=128
    5. Reply from 192.168.5.20: bytes=32 time=22ms TTL=128
    6. Reply from 192.168.5.20: bytes=32 time=5ms TTL=128
    7. Ping statistics for 192.168.5.20:
    8. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    9. Approximate round trip times in milli-seconds:
    10. Minimum = 5ms, Maximum = 27ms, Average = 19ms
    11. PC>

    结果表明两台处于相同VLAN的PC可以互通。不同VLAN的主机,即使IP地址在相同网络也不能通信。如果想实现VLAN间的互通,需要用到后面的“VLAN间路由”知识。

    步骤七:从PC2[192.168.10.10]测试到PC4[192.168.10.20]的连通性

    1. PC>ping 192.168.10.20
    2. Pinging 192.168.10.20 with 32 bytes of data:
    3. Reply from 192.168.10.20: bytes=32 time=25ms TTL=128
    4. Reply from 192.168.10.20: bytes=32 time=11ms TTL=128
    5. Reply from 192.168.10.20: bytes=32 time=13ms TTL=128
    6. Reply from 192.168.10.20: bytes=32 time=12ms TTL=128
    7. Ping statistics for 192.168.10.20:
    8. Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    9. Approximate round trip times in milli-seconds:
    10. Minimum = 11ms, Maximum = 25ms, Average = 15ms
    11. PC>

    结果表明两台处于相同VLAN的PC可以互通

    2 以太通道配置

    2.1 问题

    企业需要增加带宽和网络可用性,以太通道可以同时满足这两个条件,而又无需购买新设备。

    用练习一,通过调整FTP服务端配置,实现以下目标:

    2.2 方案

    在某些环境下,为了在现有条件下增加带宽而不增加额外的设备,以太通道是可用技术之一。以太通道为交换机提供了端口捆绑的技术,允许两个交换机之间通过两个或多个端口并行连接,同时传输数据,以提供更高的带宽。

    企业网络模拟拓扑环境如图-2所示:

    图-2

     

    2.3 步骤

    实现此案例需要按照如下步骤进行。

    步骤一:在交换机A上分别配置以太通道

    太通道的配置模式与Trunk类似,也有开启、企望等。同样的,在生产环境下都是强制设置以太通道处于on的状态,而不是让它们自动协商。

    1. tarena-sw1(config)# interface range fastEthernet 0/1 – 2
    2. tarena-sw1(config-if-range)#channel-group 1 mode on
    3. tarena-sw1(config-if-range)#

    步骤二:在交换机B上分别配置以太通道

    1. tarena-sw2(config)# interface range fastEthernet 0/3 – 4
    2. tarena-sw2(config-if-range)#channel-group 1 mode on
    3. tarena-sw2(config-if-range)#

    步骤三:在交换机A上查看以太通通道配置

    1. tarena-sw1# show etherchannel 1 summary
    2. Flags: D - down P - in port-channel
    3. I - stand-alone s - suspended
    4. H - Hot-standby (LACP only)
    5. R - Layer3 S - Layer2
    6. U - in use f - failed to allocate aggregator
    7. u - unsuitable for bundling
    8. w - waiting to be aggregated
    9. d - default port
    10. Number of channel-groups in use: 1
    11. Number of aggregators: 1
    12. Group Port-channel Protocol Ports
    13. ------+-------------+-----------+---------------------------------
    14. 1 Po1(SU) - Fa0/1(P) Fa0/2(P)

    根据输出最后一行小括号中的提示,可以获知以太通道是二层的(S)、正在被使用的(U),端口Fa0/1和Fa02在以太通道中(P)。

    步骤四:创建以太通道后,系统会增加一个名称为Port-channel 1的端口,可以通过show running-config命令查看到其信息

    1. tarena-sw2#show running-config
    2. Building configuration...
    3. Current configuration : 1308 bytes
    4. !
    5. version 12.2
    6. no service timestamps log datetime msec
    7. no service timestamps debug datetime msec
    8. no service password-encryption
    9. !
    10. hostname tarena-sw2
    11. !
    12. !
    13. .. ..
    14. interface Port-channel 1 //以太通道信息
    15. switchport mode trunk
    16. !
    17. .. ..

    3 DHCP服务配置

    3.1 问题

    大型企业网络客户机数量较多,客记机IP地址配置如果都为静态配置存在如下问题:

    1)增加网络管理员工作量

    2)静态手动配置容易输入错误

    3)静态手动配置容易冲突

    3.2 方案

    在路由器上配置DHCP服务为客户端自动分配IP地址如图-3所示:

    图-3

     

      • VLAN 1:192.168.1.0/24
      • 网关192.168.1.244
      • 首选DNS为202.106.0.20
      • 预留IP地址打印服务器:192.168.1.1
      • 预留IP地址文件服务器:192.168.1.10

     

    3.3 步骤

    实现此案例需要按照如下步骤进行。

    步骤一:路由器R1配置DHCP服务

    1)配置路由器接口IP

    1. R1(config)#interface fastEthernet 0/0
    2. R1(config-if)#ip address 192.168.1.254 255.255.255.0
    3. R1(config-if)#no shutdown

    2)DHCP服务配置

    1. R1(config)#ip dhcp pool vlan1
    2. R1(dhcp-config)#network 192.168.1.0 255.255.255.0
    3. R1(dhcp-config)#default-router 192.168.1.254
    4. R1(dhcp-config)#dns-server 202.106.0.20
    5. R1(config)#ip dhcp excluded-address 192.168.1.1
    6. R1(config)#ip dhcp excluded-address 192.168.1.100

    3)设置主机A的IP配置为自动获取如图-4所示:

    图-4

     

 

转载于:https://www.cnblogs.com/fyy-hhzzj/p/8305683.html

  • 3
    点赞
  • 15
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值