ÂõÆÕ³£ÓÃÃüÁîÊÖ²á
2 ÅäÖÃÃüÁî
2.1 ϵͳģʽ¼°Çл»
ģʽÃû³Æ ÆÕͨÓû§Ä£Ê½ ģʽ½øÈë·½·¨ ϵͳÌáʾ·û Í˳ö·½·¨ ¹¦ÄÜ˵Ã÷ µÇ¼É豸 Hostname> Ö´ÐÐexitÃüÁîÍ˳ö ¡¤¸Ä±äÖÕ¶ËÉèÖà ¡¤Ö´Ðлù±¾²âÊÔ ¡¤ÏÔʾϵͳÐÅÏ¢ ÌØÈ¨Óû§Ä£Ê½ È«¾ÖÅäÖÃģʽ ½Ó¿ÚÅäÖÃģʽ ÔÚÆÕͨÓû§Ä£Ê½ÏÂÖ´ÐÐenableÃüÁî Hostname# Ö´ÐÐdisable»òÕßexitÃüÁîÍ˻ص½ÆÕͨÓû§Ä£Ê½ Ö´ÐÐdisable»òÕßexitÃüÁîÍ˻ص½ÆÕͨÓû§Ä£Ê½ Ö´ÐÐexitÃüÁîÍ˻ص½È«¾ÖÅäÖÃģʽ Ö´ÐÐendÃüÁîÍ˻ص½ÌØÈ¨Óû§Ä£Ê½ ¡¤ÅäÖÃÉ豸ÔËÐвÎÊý ¡¤ÏÔʾÉ豸ÔËÐÐÐÅÏ¢ ¡¤ÅäÖÃÉ豸ÔËÐÐËùÐèµÄÈ«¾Ö²ÎÊý ÔÚÌØÈ¨Óû§Ä£Ê½Hostname(config)# ÏÂÖ´ÐÐconfigure terminalÃüÁî ÔÚÈ«¾ÖģʽÏÂÖ´ÐÐinterfaceÃüÁͬʱָ¶¨ÏàÓ¦µÄ½Ó¿Ú»òÕß½Ó¿Ú×飩 Hostname(config-if-xxx[number])# »òÕß Hostname(config-if-group[number])# Hostname(config-fs)# ÔÚ¸ÃģʽÏÂÅäÖÃÉ豸½Ó¿Ú£¬°üÀ¨£º ¡¤ÅäÖø÷ÖÖÀàÐÍµÄ½Ó¿Ú ¡¤ÅäÖýӿÚ×é ÎļþϵͳÅäÖÃģʽ ·ÃÎÊÁбíÅäÖÃģʽ ÔÚÌØÈ¨Óû§Ä£Ê½Ö´ÐÐfilesystemÃüÁî Ö´ÐÐexitÃüÁîÍ˻ص½ÌØÈ¨Óû§Ä£Ê½ ¡¤½øÐÐÉ豸µÄÎļþϵͳµÄ¹ÜÀí ÔÚÈ«¾ÖÅäÖÃģʽÏ£¬Ö´ÐÐip access-list standardÃüÁî»òÕßip access-list extendedÃüÁî Hostname(config-std-nacl)# Hostname(config-ext-nacl)# Ö´ÐÐexitÃüÁîÍ˻ص½È«¾ÖÅäÖÃģʽ Ö´ÐÐ endÃüÁîÍ˻ص½ÌØÈ¨Óû§Ä£Ê½ ÅäÖÃACL·ÃÎÊÁÐ±í£¬ÆäÈÎÎñ°üÀ¨£º ¡¤ÅäÖñê×¼·ÃÎÊÁÐ±í ¡¤ÅäÖÃÀ©Õ¹·ÃÎÊÁбí 2
ÂõÆÕ³£ÓÃÃüÁîÊÖ²á
2.2 »ù´¡ÅäÖÃ
2.2.1 ÅäÖÃÖ÷»úÃû
#configure terminal ++½øÈëÈ«¾Öģʽ++
(config)#hostname SQYH-A ++ÉèÖÃÖ÷»úÃûSQYH-A ++ (config)#exit ++Í˳öÈ«¾Öģʽ++
2.2.2 ÅäÖÃÕË»§
(config)#user admin password 0 admin ++ÅäÖÃÓû§admin£¬ÃÜÂëΪadmin ++
(config)#user admin privilege 15 ++ÅäÖÃÓû§adminµÄÊÚȨ¼¶±ðΪ15£¬0-15£¬Ä¬ÈÏΪ1 ++
2.2.3 ÅäÖõǽ
Telnet怫
#configure terminal ++½øÈëÈ«¾Öģʽ++ (config)# line vty 0 4 ++½øÈëvtyÅäÖÃģʽ++
(config-line)#password 0 admin ++ÉèÖõǽÃÜÂëΪadmin£¬½»»¥Ä£Ê½ÏÂÖ»ÄÜÓÃÃ÷ÎÄ++ (config-line)#login ++ÆôÓÃloginÃÜÂëÈÏÖ¤++
(config)#privilege level 15 ++ÅäÖõǽÓû§È¨ÏÞ¼¶±ð£¬Ä¬ÈÏΪ1++
(config-line)#exec-timeout 10 0 ++ÉèÖÿÕÏг¬Ê±Ê±¼äΪ10·Ö0Ã룬ĬÈÏΪ5·ÖÖÓ++
Console怫
#configure terminal ++½øÈëÈ«¾Öģʽ++ (config)# line con 0 ++½øÈëvtyÅäÖÃģʽ++
(config)#password 0 admin ++ÉèÖõǽÃÜÂëΪadmin£¬½»»¥Ä£Ê½ÏÂÖ»ÄÜÓÃÃ÷ÎÄ++ (config-line)#login ++ÆôÓÃloginÃÜÂëÈÏÖ¤++
(config)#privilege level 15 ++ÅäÖõǽÓû§È¨ÏÞ¼¶±ð£¬Ä¬ÈÏΪ1++
(config-line)#exec-timeout 10 0 ++ÉèÖÿÕÏг¬Ê±Ê±¼äΪ10·Ö0Ã룬ĬÈÏΪ5·ÖÖÓ++
2.2.4 ÅäÖÃVlan
#configure terminal ++½øÈëÈ«¾Öģʽ++
3
ÂõÆÕ³£ÓÃÃüÁîÊÖ²á
(config)#vlan 3 ++´´½¨vlan3£¬²¢½øÈëvlanÊÓͼ++ (config-vlan3)#name hulian ++ΪvlanÃüÃû++ (config-vlan3)#exit ++Í˳övlanÊÓͼ++
(config)#interface fastethernet 0/1 ++½øÈë½Ó¿Úf0/1ÊÓͼ++
(config-if-fastethernet0/1)#switchport mode access ++½Ó¿ÚģʽΪaccess++ (config-if-fastethernet0/1)#switchport access vlan 3 ++½«ÎïÀí½Ó¿Ú»®µ½vlan3++ (config)#interface vlan 3 ++½øÈëvlan½Ó¿ÚÊÓͼ++
(config-if-vlan3)#ip address 192.168.1.1 255.255.255.0 ++ÅäÖÃvlan½Ó¿ÚIPµØÖ·++ (config-if-vlan3)#description hulianjiekou ++vlan½Ó¿ÚÃèÊö++ (config-if-vlan3)#no shutdown ++ÊÖ¶¯¼¤»î½Ó¿Ú++
2.2.5 ÅäÖÃÊ±Çø
#configure terminal ++½øÈëÈ«¾Öģʽ++
(config)# clock timezone BEIJING ++ĬÈÏΪUTC++ (config)#exit
#clock yy mm dd hh mm ss ++ÅäÖÃϵͳʱ¼ä++
2.3 ÅäÖö˿Ú
#configure terminal ++½øÈëÈ«¾Öģʽ++
(config)#interface gigabitethernet0/1 ++½øÈëÎïÀí½Ó¿ÚGi0/1++ (config-if-gigabitethernet0/1)#description to-yinlian ++½Ó¿ÚÃèÊö++
(config-if-gigabitethernet0/1)#speed 100 ++ÊÖ¹¤Ö¸¶¨½Ó¿ÚËÙÂÊ£¬ºÍ¶Ô¶Ë±£³ÖÒ»ÖÂ++ (config-if-gigabitethernet0/1)#duplex ful l ++ÊÖ¹¤Ö¸¶¨È«Ë«¹¤Ä£Ê½£¬ºÍ¶Ô¶Ë±£³ÖÒ»ÖÂ++ (config-if-gigabitethernet0/1)#switchport access vlan 2 ++½«¶Ë¿Ú»®Èëvlan 2++
2.4 ÅäÖÃTrack
#ÅäÖÃTrack×é1¼à¿Ø½»»»¶Ë¿Úfastethernet 0/0״̬ (config)#track 1
(config-track)#switchport fastethernet 0/0
#ÅäÖÃTrack×é1¼à¿Ø½Ó¿Úgigabitethernet0ÍøÂç²ãÐÒé״̬
4
ÂõÆÕ³£ÓÃÃüÁîÊÖ²á
(config)#track 1
(config-track)#interface gigabitethernet0 line-protocol
#ÅäÖÃTrack×é1¼à¿Øµ½ÍøÂç10.1.1.0 255.255.255.0µÄ·ÓɿɴïÐÔ (config)#track 1
(config-track)#ip-route 10.1.1.0 255.255.255.0
#ÅäÖÃTrack×é1¼à¿ØBFD»á»°£¬BFD»á»°½Ó¿ÚΪgigabitethernet0£¬¶Ô¶ËIPµØÖ·Îª10.0.0.2£¬±¾¶ËIPµØÖ·Îª10.0.0.1 (config)#track 1
(config-track)#bfd interface gigabitethernet0 remote-ip 10.0.0.2 local-ip 10.0.0.1
2.5 ÅäÖÃMSTP
#configure terminal ++½øÈëÈ«¾Öģʽ++
(config)# spanning-tree enable ++ʹÄÜÉú³ÉÊ÷ÐÒé++
(config)# spanning-tree mst configuration ++½øÈëmstÓòÅäÖÃÊÓͼ++ (config-mst-region)# region-name CEB ++ÅäÖÃmstÓòÃûΪCEB++
(config-mst-region)# revision-level 1 ++ÅäÖÃmstÓòµÄÐÞ¶©¼¶±ðΪ1£¬È±Ê¡Îª0++ (config-mst-region)# instance 1 vlan 1-4094 ++ÅäÖÃvlan1-4094Ó³Éäµ½Éú³ÉÊ÷ʵÀý1++ (config-mst-region)# active configuration pending ++±ØÐëÅäÖ㬼¤»îmstÓò²ÎÊý++ (config-mst-region)# exit
(config)#spanning-tree mst instance 1 priority 0 ++ÅäÖÃÉ豸ÔÚÉú³ÉÊ÷ʵÀý1ÖеÄÍøÇÅÓÅÏȼ¶Îª0£¬¼´Ö¸¶¨Îª¸ùÍøÇÅ++
2.6 ÅäÖÃVRRP
#configure terminal ++½øÈëÈ«¾Öģʽ++ (config)#interface vlan 3++½øÈëvlan½Ó¿ÚÊÓͼ++
(config-if-vlan3)#ip address 192.168.1.252 255.255.255.0 ++ÅäÖÃvlan½Ó¿ÚµÄʵµØÖ·++ (config-if-vlan3)#vrrp 3 ip 192.168.1.254 ++vrrp×éºÅΪ3£¬Ð鵨ַ192.168.1.254++ (config-if-vlan3)#vrrp 3 priority 120 ++ÉèÖÃÓÅÏȼ¶Îª120(ĬÈÏÓÅÏȼ¶Îª100)£¬ÈôÓÅÏȼ¶Ïàͬ£¬ÔòipµØÖ·´óµÄ³ÉΪMaster++
(config-if-vlan3)#vrrp 3 preempt ++ÅäÖÃΪÇÀռģʽ++
5