aruba交换机配置-实战篇.docx

一，忘记密码按以下操作超级账号密码passwordforgetme!Admin 密码修改ArubaS2500-24P) (config) #mgmt-user admin rootPassword:* /admin123!Re-Type password:* /admin123!(ArubaS2500-24P) (config) #endEnable 密码重新设置(ArubaS2500-24P) (config) #enable secret?secret Enter the enable password (ArubaS2500-24P) (config) #enable secretPassword:* 、直接输入新密码、Re-Type password:* 再次输入这个账号只能用于需改密码，需要配置的话要退出用admin账号进入才能操作二，交换机初始化User: adminPassword: * /admin123/默认密码(ArubaS2500-24P) enablePassword:* /enableQuick-setup helps in setting the basic configuration of the systemAutoconfiguration of system will be stopped, if Quick-setup is launched by userInvoke Quick-setup (y|n)? y:y* Welcome to the ArubaS2500-24P setup dialog *This dialog will help you to set the basic configuration for the switch.These settings, except for the Country Code, can later be changed from theCommand Line Interface or Graphical User Interface.Commands: Submit input or use default value, Help Back, Forward, Line begin, Line end Delete, Delete back, Delete to end of line Previous question , Restart beginning, to exitEnter System name ArubaS2500-24P: aruba2500-xmu-2fConfigure inband management VLAN yes|no: yes 是否开启管理VLANInband management vlan id 1: 711 管理VLAN段Enter the member interfaces for management VLAN (Example 0/0/0,0/0/1): 0/0/23,0/1/1 添加需要trunk的端口Enter management VLAN IP address 54: 管理ipEnter mgmt VLAN interface subnet mask : 回车Enter Out of band management interface IP address none: 回车Enter IP Default gateway none: 网关Enter Country code (ISO-3166), for supported list: CN 中国You have chosen Country code CN for China (yes|no)?: yesEnter Time Zone PST-8:0: CST+8:0Enter Time in UTC 03:48:15: Enter Date (MM/DD/YYYY) 7/4/2013: Enter Password for admin login (up to 32 chars): * /admin123!Re-type Password for admin login: * /admin123! Enter Password for enable mode (up to 15 chars): * /enablleRe-type Password for enable mode: * /enable Current choices are:System name: aruba2500-xmu-2fConfigure inband management VLAN: yesvlan id for inband management 1-4094: 711Members interfaces of management VLAN: 0/0/23,0/1/1IP address of management VLAN: Management VLAN interface subnet mask: IP Default gateway: Country code: CNTime Zone: CST+8:0Type to go back and change answer for any questionDo you wish to accept the changes (yes|no|abort): yesCreating configuration. Done.Configuring.Saving Configuration.Configuration Saved.(aruba2500-xmu-2f) #configure terEnter Configuration commands, one per line. End with CNTL/Z (aruba2500-xmu-2f) (config) #telnet cli /开启telnet功能(aruba2500-xmu-2f) (config) #end(aruba2500-xmu-2f) #show ip interface brief Interface IP Address / IP Netmask Admin Protocolvlan 711 / Up Up mgmt unassigned / unassigned Up Down(aruba2500-xmu-2f) #ping Press q to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:.Success rate is 0 percent (0/5)(aruba2500-xmu-2f) #ping (aruba2500-xmu-2f) #configure ter(aruba2500-xmu-2f) (config) #interface-group gigabitethernet ap 创建端口组(aruba2500-xmu-2f) (gigabitethernet ap) #apply-to 0/0/0-0/0/23 把0/0/0-0/0/23加入组中(aruba2500-xmu-2f) (gigabitethernet ap) #exit(aruba2500-xmu-2f) (switching profile ap) #vlan 712 创建 vlan712（我给AP用的）(aruba2500-xmu-2f) (VLAN 712) #exit (aruba2500-xmu-2f) (config) #interface-profile switching-profile ap (aruba2500-xmu-2f) (switching profile ap) #access-vlan 712 关联(aruba2500-xmu-2f) (switching profile ap) #exit(aruba2500-xmu-2f) (config) #interface-profile poe-profile ap(aruba2500-xmhu-2f) (Power over Ethernet profile ap) #enable 开启POE供电功能(aruba2500-xmu-2f) (Power over Ethernet profile ap) #exit(aruba2500-xmu-2f) (config) #interface-group gigabitethernet ap(aruba2500-xmu-2f) (gigabitethernet ap) #switching-profile ap 应用到端口(aruba2500-xmu-2f) (gigabitethernet ap) #poe-profile ap 应用到端口(aruba2500-xmu-2f) (gigabitethernet ap) #end如果想把那个端口trunk，可以这样(aruba2500-xmu-2f) (config) #interface g 0/0/2 (aruba2500-xmu-2f) #switching-profile Upstream-profile删除的话就加no (aruba2500-xmu-2f) #no switching-profile Upstream-profile如果要把那个端口加入vlan20(aruba2500-xmu-2f) #vlan 20(aruba2500-xmu-2f) (VLAN 20) #exit (aruba2500-xmu-2f) (config) #interface-profile switching-profile 20 (aruba2500-xmu-2f) (switching profile ap) #access-vlan 20(aruba2500-xmu-2f) (config) #interface g 0/0/2 (aruba2500-xmu-2f) #switching-profile 20 删除就加no (aruba2500-xmu-2f) #no switching-profile 20或者(aruba2500-xmu-2f) #no switching-profile 三，升级配置把网线接到23口，电脑开启tftp服务器软件ArubaS2500-24P) (config) #interface-profile switching-profile ftp /-创建模板FTP(ArubaS2500-24P) (switching profile ftp) #access-vlan 1 关联vlan1 (ArubaS2500-24P) (switching profile ftp) #exit(ArubaS2500-24P) (config) #interface gigabitethernet 0/0/23(ArubaS2500-24P) (gigabitethernet 0/0/23) #switching-profile ftp /启用ftp(ArubaS2500-24P) (gigabitethernet 0/0/23) #exit(ArubaS2500-24P) (config) #interface vlan 1(ArubaS2500-24P) (vlan 1) #ip address (ArubaS2500-24P) (vlan 1) #exit(ArubaS2500-24P) (config) #end(ArubaS2500-24P) #ping (ArubaS2500-24P) #(ArubaS2500-24P) #(ArubaS2500-24P) #copy ftp: admin ArubaOS_MAS__38712 system: partition 0Password:* /-admin和密码是ftp的用户名和没密码，是电脑的ipPress q to abort.Copying file:.File copied successfully.Saving file to flash:.Member-0:The system will boot from partition 0 during the next reboot.(ArubaS2500-24P) #re? reload Coldstart the switchrename rename a filerestore restore file or configuration(ArubaS2500-24P) #reload Do you want to save the configuration(y/n): nDo you really want to restart the system(y/n): ySystem will now restart!Shutdown processing started(aruba2500-xmu-2f) #write memory 保存Saving Configuration.Configuration Saved.(aruba2500-xmu-2f) #show running-config Building Configuration.# Configuration file for ArubaOSversion 7.2enable secret *telnet clihostname aruba2500-xmu-2fclock timezone CST 8location Building1.floor1 controller config 3ip access-list eth validuserethacl permit any !ip access-list stateless dns-acl-stateless any any svc-dns permit !ip access-list stateless http-acl-stateless any any svc-http permit !ip access-list stateless https-acl-stateless any any svc-https permit ! ip access-list stateless icmp-acl-stateless any any svc-icmp permit !ip access-list stateless logon-control-stateless any any svc-icmp permit any any svc-dns permit any any svc-dhcp permit any any svc-natt permit !ip access-list session validuser network any any deny any any any permit ipv6 alias any6 alias any6 any permit !user-role authenticated access-list stateless allowall-stateless!user-role denyall!user-role guest access-list stateless http-acl-stateless access-list stateless https-acl-stateless access-list stateless dhcp-acl-stateless access-list stateless icmp-acl-stateless access-list stateless dns-acl-stateless!user-role logon access-list stateless logon-control-stateless!crypto ipsec transform-set default-boc-bm-transform esp-3des esp-sha-hmaccrypto ipsec transform-set default-rap-transform esp-aes256 esp-sha-hmaccrypto isakmp eap-passthrough eap-tlscrypto isakmp eap-passthrough eap-peapcrypto isakmp eap-passthrough eap-mschapv2mgmt-user admin root 9a05893a01941ea9fadbe8f7f92075bc5b5c8189ef96622520no firewall attack-rate cp 1024ipv6 firewall ext-hdr-parse-len 100! firewall cppacket-capture-defaults tcp disable udp disable sysmsg disable other disable!ip domain lookup!country CNaaa authentication mac default!aaa authentication dot1x default!aaa server-group default auth-server Internal set role condition role value-of!aaa profile default!aaa authentication captive-portal default!aaa authentication vpn default!aaa authentication mgmt!aaa authentication wired! web-server!aaa password-policy mgmt!traceoptions!qos-profile default!policer-profile default!ip-profile default-gateway !lcd-menu!interface-profile ospf-profile default area !interface-profile pim-profile default!interface-profile igmp-profile default!stack-profile! ipv6-profile!interface-profile switching-profile ap access-vlan 712!interface-profile switching-profile default!interface-profile switching-profile Upstream-profile switchport-mode trunk!interface-profile poe-profile ap enable!interface-profile poe-profile default!interface-profile poe-profile poe-factory-initial enable!interface-profile enet-link-profile default!interface-profile lldp-profile default!interface-profile lldp-profile lldp-factory-initial lldp transmit lldp receive med enable!interface-profile mstp-profile default!interface-profile pvst-port-profile default!vlan-profile mld-snooping-profile default!vlan-profile igmp-snooping-profile default!vlan-profile igmp-snooping-profile igmp-snooping-factory-initial!spanning-tree mode mstp!gvrp!mstp!lacp!vlan 1 igmp-snooping-profile igmp-snooping-factory-initial!vlan 711!vlan 712!interface gigabitethernet 0/1/1 switching-profile Upstream-profile!interface vlan 711 ip address !interface mgmt!interface-group gigabitethernet ap apply-to 0/0/0-0/0/23 poe-profile ap switching-profile ap!interface-group gigabitethernet default apply-to ALL lldp-profile lldp-factory-initial poe-profile poe-factory-initial!snmp-server view ALL oid-tree iso included snmp-server group ALLPRIV v1 read ALL notify ALL snmp-server group ALLPRIV v2c read ALL notify ALL snmp-server group ALLPRIV v3 noauth read ALL notify ALL snmp-server group AUTHPRIV v3 priv read ALL notify ALL snmp-server group AUTHNOPRIV v3 auth read ALL notify ALL snmp-server enable trapprocess monitor logend(aruba2500-xmu-2f) # (aruba2500-xmu-2f) #(aruba2500-xmu-2f) #(aruba2500-xmu-2f) #write memory Saving Configuration.Configuration Saved.(aruba2500-xmu-2f) #show ip interface brief Interface IP Address / IP Netmask Admin Protocolvlan 711 / Up Up mgmt unassigned / unassigned Up Down(aruba2500-xmu-2f) #ping Press q to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 1.525/1.922/2.534 ms(aruba2500-xmu-2f) #write memory Saving Configuration.Configuration Saved.(aruba2500-xmu-2f) #configure terminal Enter Configuration commands, one per line. End with CNTL/Z(aruba2500-xmu-2f) (config) #end (aruba2500-xmu-2f) #(aruba2500-xmu-2f) #(aruba2500-xmu-2f) #(aruba2500-xmu-2f) #copy ftp: .1 ? Enter the user name(aruba2500-xmu-2f) #copy ftp: .1 endwin ? Enter the file name(aruba2500-xmu-2f) #copy ftp: .1 endwin ArubaOS_MAS__38712 ?flash: Copy to the flash file systemmember: Copy to a stack membersystem: System Partition(aruba2500-xmu-2f) #copy ftp: .1 endwin ArubaOS_MAS__38712 system: partition 0 ?(aruba2500-xmu-2f) #copy ftp: .1 endwin ArubaOS_MAS__38712 system: partition 0 ?(aruba2500-xmu-2f) #dir -rw-r-r- 1 root root 35729264 Jul 4 09:36 ArubaOS_MAS__38712.1_38712-rw-r-r- 1 root root 4905 Jul 4 11:55 default.cfg-rw-r-r- 1 root root 40 Jul 4 11:46 stack_db.dbdrwx- 2 root root 4096 Jul 4 11:00 tpm(aruba2500-xmu-2f) #copy running-config ?flash: Copy to the flash file systemftp: Ftp file systemstartup-config Copy to Startup configurationtftp: TFTP file system(aruba2500-xmu-2f) #configure ter Enter Configuration commands, one per line. End with CNTL/Z(aruba2500-xmu-2f) (config) #interface vlan 1(aruba2500-xmu-2f) (vlan 1) #ip address (aruba2500-xmu-2f) (vlan 1) #exit(aruba2500-xmu-2f) (config) #interface gigabitethernet 0/0/23(aruba2500-xmu-2f) (gigabitethernet 0/0/23) #switching-profile ? Profile name(aruba2500-xmu-2f) (gigabitethernet 0/0/23) #exit (aruba2500-xmu-2f) (config) #interface-profile switching-profile ftp(aruba2500-xmu-2f) (switching pro