Cisco 交换机培训资料

配置CISCO交换机1交换机加电交换机接入电源后，如果成功地完成了POST,系统LED就会变绿;如果POST 失败了,系统LED就会变成琥珀色。

连接交换机的控制台端口至计算机的串口，可以通过超级终端对交换机进行配置（在交换机加电之前连接交换机和计算机，可以看到交换机的启动过程）。

2配置超级终端打开超级终端如图名称中输入cisco(可任意输入)，点击“确定”连接时使用选择COM1（根据实际连接的COM端口而定），点击“确定”，然后点击“还原为默认值”点击确定后显示交换机的启动过程，随即打开交换机的配置界面,然后就可以对交换机进行相应的配置3交换机配置基础帮助命令在任何情况下都可以通过输入“？”来获得下一步的操作指导，按“TAB”键可以补全输入不完整的命令。

输入en，按“TAB”后交换机常用命令改变交换机名字依次输入下列命令#后为相应操作或注释，改变了交换机的名字，如图345#>en ＃按TAB键345#>enablePassword: ＃输入进入交换机的密码345##config ＃按TAB键345##configure ter ＃按TAB键345##configure terminalEnter configuration commands, one per line. End with CNTL/Z.345#(config)#host ＃按TAB键345#(config)#hostname ciscocisco(config)#可以通过输入“？”来查看在全局配置模式下的可用命令cisco(config)#?Configure commands:aaa Authentication, Authorization and Accounting.access-list Add an access list entryalias Create command aliasarp Set a static ARP entrybanner Define a login bannerboot Boot Commandsbridge Bridge Group.buffers Adjust system buffer pool parameterscdp Global CDP configuration subcommandsclass-map Configure QoS Class Mapclock Configure time-of-day clockcluster Cluster configuration commandscns CNS agentsdefault Set a command to its defaultsdefault-value Default character-bits valuesdefine interface range macro definitiondnsix-dmdp Provide DMDP service for DNSIXdnsix-nat Provide DNSIX service for audit trailsdo To run exec commands in config modedot1x Dot1x Global Configuration Commands downward-compatible-config Generate a configuration compatible with older --More—最后显示--More—表示还有未显示完整的信息，“Enter”键单行向下滚动，“Space”整屏向下滚动，“CTRL＋C”中断当前操作。

设置交换机密码cisco>encisco#conf tcisco(config)#enable password 123456cisco(config)#enable secret 654321cisco(config)#line vty 0 15cisco(config-ling)#password telnetcisco(config-line)#logincisco(config)#int vlan 1cisco(config-if)#ip address 192.168.0.2 255.255.255.0cisco(config-if)#no shutcisco(config-if)#exitcisco(config)#line console 0cisco(config-if)#password consolecisco(conifg-if)#logincisco(config-if)#endcisco#copy run startup说明：password 为不加密的密码，在交换机配置里可以看到密码明文，secret为加密的密码，在交换机配置里看到的是加密的密码，当两者同时配置时,secret生效。

Line vty 配置telnet连接时的密码，line console 配置直接用计算机COM口连接交换机控制口时的密码。

配置line vty 时必须配置VLAN 1的IP地址。

cisco(config)#endcisco#show run #查看交换机的配置信息如下Current configuration : 38417 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname cisco!enable secret 5 $1$LE./$69qho/L1.6GRmWs/.a3FW.enable password 123456!ip subnet-zeroip routing!!spanning-tree mode pvstspanning-tree extend system-id!!!interface FastEthernet0/1 switchport mode dynamic desirable!interface FastEthernet0/2switchport mode dynamic desirable!interface FastEthernet0/3switchport mode dynamic desirable!interface FastEthernet0/4switchport mode dynamic desirable!interface FastEthernet0/5switchport mode dynamic desirable!interface FastEthernet0/6switchport mode dynamic desirable对交换机的端口进行配置cisco>encisco#conf tcisco(config)#int f0/1cisco(config-if)#description f0/1cisco(config-if)#switchport access vlan 2cisco(config-if)#no shutcisco(config-if)#int range f0/2 – 4cisco(config-if-range)#description f0/2-4cisco(config-if-range)#switchport access vlan 4cisco(config-if-range)#shutdowncisco(config-if-range)#int range f0/5 - 6 , f0/7 - 8cisco(config-if-range)#description f0/56789cisco(config-if-range)#switchport access vlan 6cisco(config-if-range)#int f0/9cisco(config-if-range)#speed 10cisco(config-if-range)#duplex halfcisco(config-if-range)#int f0/10cisco(config-if-range)# duplex fullcisco(config-if-range)#speed 100说明：int f0/X用来配置交换机单个端口，int range 用来配置一系列端口，查看交换机配置后的信息如下：cisco(config-if-range)#endcisco#show running-configCurrent configuration : 38869 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname cisco!enable secret 5 $1$LE./$69qho/L1.6GRmWs/.a3FW. enable password 123456!ip subnet-zeroip routing!!spanning-tree mode pvstspanning-tree extend system-id!!interface FastEthernet0/1 description f0/1switchport access vlan 2 switchport mode dynamic desirable !interface FastEthernet0/2 description f0/2-4switchport access vlan 4 switchport mode dynamic desirable shutdown!interface FastEthernet0/3 description f0/2-4switchport access vlan 4 switchport mode dynamic desirable shutdown!interface FastEthernet0/4 description f0/2-4switchport access vlan 4switchport mode dynamic desirable shutdown!interface FastEthernet0/5 description f0/56789switchport access vlan 6 switchport mode dynamic desirable !interface FastEthernet0/6 description f0/56789switchport access vlan 6 switchport mode dynamic desirable !interface FastEthernet0/7 description f0/56789switchport access vlan 6 switchport mode dynamic desirable !interface FastEthernet0/8 description f0/56789switchport access vlan 6 switchport mode dynamic desirable!interface FastEthernet0/9 description f0/56789switchport access vlan 6 switchport mode dynamic desirable speed 10duplex half!interface FastEthernet0/10 switchport mode dynamic desirable speed 100duplex full!interface FastEthernet0/11 switchport mode dynamic desirable !interface FastEthernet0/12 switchport mode dynamic desirable !interface FastEthernet0/13 switchport mode dynamic desirable !interface FastEthernet0/14switchport mode dynamic desirable!也可以用命令sho int status来查看交换机端口状态cisco#sho int statusPort Name Status Vlan Duplex Speed TypeFa0/1 f0/1 notconnect 2 auto auto 10/100BaseTXFa0/2 f0/2-4 disabled 4 auto auto 10/100BaseTXFa0/3 f0/2-4 disabled 4 auto auto 10/100BaseTXFa0/4 f0/2-4 disabled 4 auto auto 10/100BaseTXFa0/5 f0/56789 notconnect 6 auto auto 10/100BaseTXFa0/6 f0/56789 notconnect 6 auto auto 10/100BaseTXFa0/7 f0/56789 notconnect 6 auto auto 10/100BaseTX10/100BaseTXFa0/9 f0/56789 notconnect 6 half 10 10/100BaseTXFa0/10 notconnect 1 full 100 10/100BaseTXFa0/11 notconnect 1 auto auto 10/100BaseTXFa0/12 notconnect 1 auto auto 10/100BaseTXFa0/13 notconnect 1 auto auto 10/100BaseTXFa0/14 notconnect 1 auto auto 10/100BaseTXFa0/15 notconnect 1 auto auto 10/100BaseTXFa0/16 notconnect 1 auto auto 10/100BaseTXFa0/17 notconnect 1 auto auto 10/100BaseTXFa0/18 notconnect 1 auto auto 10/100BaseTXFa0/20 notconnect 1 auto auto 10/100BaseTX Fa0/21 notconnect 1 auto auto 10/100BaseTX 4配置交换机的端口安全方式1：手工绑定1个固定MAC地址，违犯规则时关闭端口cisco#config tconfig(config)#int f0/1config(config)#switchport mode accesscisco(config-if)#switchport port-security maximum 1cisco(config-if)#switchport port-security mac-address 001a.4d3f.67bbcisco(config-if)#switchport port-security violation shutdown方式2：自动绑定多个固定MAC地址，违犯规则时阻止端口cisco#config tconfig(config)#int f0/2config(config)#switchport mode accesscisco(config-if)#switchport port-security maximum 2cisco(config-if)#switchport port-security mac-address 001a.4d3f.67aacisco(config-if)#switchport port-security mac-address 001a.4d3f.67bbcisco(config-if)#switchport port-security violation protectcisco(config-if)#endcisco#write说明：无论哪种方法配置，第3条命令不可少，cisco交换机默认情况下的端口模式是dymactic，在这种模式下无法绑定固定MAC地址。