学习交换机的深入笔记036000switch的配置.doc

目录目录1Catalyst60002Catalyst OS Tips26509-Cat OS-6.2(2)36509 CatOS命令236509 IOS命令236509的软件升级：CatOS update to Cisco IOS266500配置的注意事项26增加三种VLAN28增加2 layer的vlan：28删除2 layer的vlan：29增加3 layer的vlan：29删除3 layer的vlan：29增加services vlan：29*29使用 RGMP: 基础内容与案例分析29介绍29硬件和软件版本30协议限制30RGMP减少网络负载30RGMP详情32是什么使路由器发送RGMP数据包33当交换机接收RGMP数据包时将发生什么34RGMP配置与检验35运行本地IOS的Catalyst 6000上的RGMP35案例分析36在交换机上启用RGMP37在路由器上启用RGMP39VLAN 2中的RGMP操作39RGMP Join Operation in VLAN 342RGMP Leave操作43RGMP Bye操作463750命令47Asiainfo 6509 core47Asiainfo的安全策略和核心交换的配置47Policy的实施:486509的CVDM的安装512005-01-26- AICNBJ-C6509-3A -core config-55Asiainfo所有口令107Asiainfo的2005-01-22的最新配置模块配置：108模块108Port-channel109dir all-filesystems110Asiainfo的最新模块介绍112AICNBJ-C6509-3B-2113AICNBJ-C6509-4A-1142AICNBJ-C6509-4B-2176aicnbjstack-3-1-3209ascnbjstack-6-1-1220ascnbjstack-6-2-22512924XL284ascnbjstack-8-1-1287ascnbjstack-8-2-2344Intra-3660-config398Extra-3660-config408杭州2501414杭州3640415AS5300-voip420AS5300 Voip config example425Brach Office router432pix520 V 5.1(4)435pix完美配置448pix520-H323452SECOM Router-2004-8-1-route-2-NAT公司461END467Catalyst6000思科Catalyst6000/5000交换机常用维护命令Catalyst 6000 系列和Catalyst 5000 系列局域网交换机功能强大，包括很多使用及维护命令。下面，列出几条常用的命令及简单说明。 所有有关的维护命令请详见随硬件设备提供的有关手册。 1 关于端口的设置 设置端口名称 et port name mod_num/port_num name_string 设置端口优先级 et port level mod_num/port_num noramal|high 设置端口速率 et port speed mod_num/port_num 设置端口传输类型 et port duplex mod_num/port_num full|half 检查端口配置状态 how port mod_num/port_num 2 关于网络端口 sc0 的设置 在VLAN中设置供物理连接的逻辑端口 sc0 et interface sc0 vlan_num ip_address netmask broadcast 3 关于VLAN的设置 定义一个VLAN 的序号，名字，类型 et vlan vlan_num name name type type 检查VLAN 配置状态 how vlan 4 关于Trunk的测试 在某个特定的端口建立中继 et trunk mod_num/port_num on|off|desirable|auto vlans 检查中继的配置状态 how trunk 5 关于 spantree 的设置 在某 vlan 中设置 spantree et spantree enable vlan 在某 vlan 中 设置 桥接的转发时延 et spantree fwddelay delay vlan 在某 vlan 中 设置 hello 报文的发送间隔 et spantree hello interval vlan 设置某 vlan 中桥接的最大持续时间 et spantree maxage agingtime vlan 设置某端口的桥接路径成本 et spantree portcost mod_num/port_num cost 6 关于SNMP协议的配置 配置SNMP的域串： et snmp community read-only | read-write | read-write-all community_string 设置一个受限制的地址或域： et snmp trap rcvr_address rcvr_community 检查SNMP配置状态： how snmp 7 关于 IP 包的分段 在FDDI 与以太网的桥接中设置IP 包的分段 et ip fragmentation enable | disable 8 关于ICMP 未到达的消息 et ip unreachable enable | disable 9 关于ARP 表的设置 创立一个 arp 表并设置该表的刷新时间 et arp ip_addr hw_addr | agingtime agingtime 10 关于交换机三层交换模块的配置 telnet ip_address 登陆到三层交换模块。 rsmenable rsm#show run 显示当前配置文件 rsm#show int vlan id显示vlan 状态 rsm#show ip route 显示路由信息 三层交换vlan 的配置: rsm#conf t rsm(config)# int vlan id rsm(config)# ip address a。b。c。d netmask rsm(config)# no shutdown rsm#wr memCatalyst OS Tips最近一次网络测试的时候，发现 Ping 网络中的Catalyst 2980交换机的时候，环回时间明显过大，平均达到30ms，比较奇怪(一般都不会超过10ms)，因为到那些交换机的链路可是千兆的，而且网络中的流量并不是很大。前两天在CCO上泡，终于碰巧在Open Forum中看到了解答，原来2980交换机将发往本机管理地址的通讯设为最低优先级，所以Ping起来慢，做为替代的测试方法，可以Ping连接在2980上的主机，环回时间应该是正常的。 顺便也在Open Forum中阅读了关于Catalyst系列交换机的Q&A集，将其中一些较有价值的Tips整理如下： 1. 6500: 只能用内置的MSFC做MLS，不能用外置的路由器（当然，用外置的路由器做VLAN间路由是可以的）; 配置双引擎时，第二个引擎上的PCMCIA槽编址为：2/slot0:,在MSFC中引用时为：sup-slot0:; 支持FlexWAN模块需用Hybird版的软件（即引擎与MSFC分开的）。 2.出现%CDP-4-NVLANMISMATCH:Native vlan mismatch detected on port 1/1 错误时，如果是同一个VTP域，请确定两端设置的Native vlan 相同(命令set vlan 1 1/1或switchport access vlan 1);如果连接的是其它VTP域或VTP Transparent的交换机的时候，可以禁止在这个端口上的cdp: set cdp disable 1/1. 如果您用6500与别的6500（或4000等）做第三层的连接，假设通过千兆光纤端口1/1相联，通过命令: 6500:set vlan 33 1/1MSFC:interface vlan 33ip address 52把这个端口划分在一个独立的VLAN (本例中为33)中，然后通过MSFC的Vlan Interface设置互联地址时，建议你：关闭此端口上的 CDP（如果双方所用的VLAN号不一致的话），关闭这个VLAN上的SPANTREE，手工指定端口为非TRUNK方式（set trunk 1/1 off）。 3. Catalyst系列交换机光纤端口连接GSR时，请把端口的自动协商关闭 set port negotiation mod/port disable。 4.当您为Catalyst 4000/5000/6000系列交换机设置了网关时,它将会按一定间隔向网关发送icmp echo包(Ping)以检查网关是否可用，可以通过命令:set feature mdg disable禁止这一属性。 5.当一个Catalyst 3500的Cluster中有超过两台交换机时，千兆接口将会工作于半双工状态，有可能检测到传输中的CRC等错误。 6.Terminal Monitor之Cat版为: set logging session enable. 6509-Cat OS-6.2(2)Console (enable) show config all.begin!# * ALL (DEFAULT and NON-DEFAULT) CONFIGURATION *!#time: Sun Oct 21 2001, 21:36:49 !#version 6.2(2)!set password $2$FMFQ$HfZR5DUszVHIRhrz4h6V70set enablepass $2$FMFQ$HfZR5DUszVHIRhrz4h6V70set prompt Consoleset length 24 defaultset logout 20set config mode binaryset banner motd CC!#testset test diaglevel minimal!#errordetectionset errordetection inband disableset errordetection memory disableset errordetection portcounter enable!#systemset system baud 9600set system modem disableset system name set system location set system contact set system countrycode set traffic monitor 100set system highavailability disableset system highavailability versioning disableset system core-dump disableset system core-file slot0:crashinfoset feature log-command enableset feature supmon enable!#powerset power redundancy enable!#frame distribution methodset port channel all distribution ip both!#mac address reductionset spantree macreduction disable!#default portcost modeset spantree defaultcostmode short!#snmpset snmp community read-only publicset snmp community read-write privateset snmp community read-write-all secretset snmp rmon disableset snmp rmonmemory 85set snmp trap disable moduleset snmp trap disable chassisset snmp trap disable bridgeset snmp trap disable repeaterset snmp trap disable vtpset snmp trap disable authset snmp trap disable ippermitset snmp trap disable vmpsset snmp trap disable entityset snmp trap disable configset snmp trap disable stpxset snmp trap disable syslog!#tacacs+set tacacs attempts 3set tacacs directedrequest disableset tacacs timeout 5!#radiusset radius deadtime 0set radius timeout 5set radius retransmit 2!#kerberos!#authenticationset authentication login tacacs disable console set authentication login tacacs disable telnet set authentication login tacacs disable http set authentication enable tacacs disable console set authentication enable tacacs disable telnet set authentication enable tacacs disable http set authentication login radius disable console set authentication login radius disable telnet set authentication login radius disable http set authentication enable radius disable console set authentication enable radius disable telnet set authentication enable radius disable http set authentication login local enable console set authentication login local enable telnet set authentication login local enable http set authentication enable local enable console set authentication enable local enable telnet set authentication enable local enable http set authentication login kerberos disable console set authentication login kerberos disable telnet set authentication login kerberos disable http set authentication enable kerberos disable console set authentication enable kerberos disable telnet set authentication enable kerberos disable http set authentication login attempt 3 consoleset authentication login attempt 3 telnetset authentication login lockout 0 consoleset authentication login lockout 0 telnetset authentication enable attempt 3 consoleset authentication enable attempt 3 telnetset authentication enable lockout 0 consoleset authentication enable lockout 0 telnet!#stp modeset spantree mode pvst+!#vtpset vtp domain hbuset vtp mode serverset vtp v2 disableset vtp pruning disableset vtp pruneeligible 2-1000clear vtp pruning 1001-1005set vlan 1 name default type ethernet mtu 1500 said 100001 state active set vlan 99 name wh type ethernet mtu 1500 said 100099 state active set vlan 101 name xinzhongxin type ethernet mtu 1500 said 100101 state active set vlan 102 name laozhongxin type ethernet mtu 1500 said 100102 state active set vlan 103 name chukou type ethernet mtu 1500 said 100103 state active set vlan 510 name 02x type ethernet mtu 1500 said 100510 state active set vlan 511 name 02d type ethernet mtu 1500 said 100511 state active set vlan 512 name 04x type ethernet mtu 1500 said 100512 state active set vlan 513 name 06x type ethernet mtu 1500 said 100513 state active set vlan 514 name 06d type ethernet mtu 1500 said 100514 state active set vlan 515 name 09x type ethernet mtu 1500 said 100515 state active set vlan 516 name 09d type ethernet mtu 1500 said 100516 state active set vlan 517 name 12x type ethernet mtu 1500 said 100517 state active set vlan 518 name 12d type ethernet mtu 1500 said 100518 state active set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state acti set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active s set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state act set dot1q-all-tagged disable!#ipset feature mdg enableset feature psync-recovery no-powerdownset interface sc0 1 00/ 55 set interface sc0 upset interface sl0 set interface sl0 upset arp agingtime 1200set ip redirect enableset ip unreachable enableset ip fragmentation enableset ip alias default !#command alias!#vmpsset vmps server retry 3set vmps server reconfirminterval 60set vmps downloadmethod tftp set vmps downloadserver vmps-config-database.1 set vmps state disable !#rcpset rcp username ! #dnsset ip dns disable!#spantree#uplinkfast groupsset spantree uplinkfast disable#backbonefastset spantree backbonefast disable#portfastset spantree portfast bpdu-guard disableset spantree portfast bpdu-filter disable#bpdu-skewingset spantree bpdu-skewing disable#vlan 1003set spantree enable 1003set spantree fwddelay 4 1003set spantree hello 2 1003set spantree maxage 10 1003set spantree priority 32768 1003#vlan 1005set spantree enable 1005set spantree fwddelay 4 1005set spantree hello 2 1005set spantree maxage 10 1005set spantree priority 32768 1005#vlan(defaults)set spantree enable 1,99,101-103,510-518set spantree fwddelay 15 1,99,101-103,510-518set spantree hello 2 1,99,101-103,510-518set spantree maxage 20 1,99,101-103,510-518set spantree priority 32768 1,99,101-103,510-518!#syslogset logging console enableset logging telnet enableset logging server disableset logging level cdp 4 defaultset logging level mcast 2 defaultset logging level dtp 5 defaultset logging level earl 2 defaultset logging level ip 2 defaultset logging level pruning 2 defaultset logging level snmp 2 defaultset logging level spantree 2 defaultset logging level sys 5 defaultset logging level tac 2 defaultset logging level tcp 2 defaultset logging level telnet 2 defaultset logging level tftp 2 defaultset logging level vtp 2 defaultset logging level vmps 2 defaultset logging level kernel 2 defaultset logging level filesys 2 defaultset logging level pagp 5 defaultset logging level mgmt 5 defaultset logging level mls 5 defaultset logging level protfilt 2 defaultset logging level security 2 defaultset logging level radius 2 defaultset logging level udld 4 defaultset logging level gvrp 2 defaultset logging level cops 3 defaultset logging level qos 3 defaultset logging level acl 5 defaultset logging level rsvp 3 defaultset logging level ld 3 defaultset logging level privatevlan 3 defaultset logging server facility LOCAL7set logging server severity 4set logging timestamp enableset logging buffer 500set logging history 1!#ntpset ntp broadcastclient disableset ntp broadcastdelay 3000set ntp client disableset ntp authentication disableclear timezoneset summertime disable set summertime recurring!#set boot commandset boot config-register 0x2set boot config-register auto-config overwriteset boot config-register auto-config sync disableset boot system flash bootflash:cat6000-sup.6-2-2.binset config acl nvram!#permit listset ip permit disable telnetset ip permit disable sshset ip permit disable snmp!#permanent arp entries!#igmpset igmp disableset igmp fastleave disable!#rgmpset rgmp disable!#protocolfilterset protocolfilter disable!#mlsset mls flow destinationset mls nde version 7set mls agingtime 256set mls agingtime ipx 256set mls agingtime fast 0 0set mls nde disable!#vlan mapping!#gmrpset gmrp disable!#garpset garp timer all 200 600 10000!#cdpset cdp interval 60set cdp holdtime 180set cdp enableset cdp version v2!#dot1xset dot1x system-auth-control enableset dot1x quiet-period 60set dot1x tx-period 30set dot1x supptimeout 30set dot1x servertimeout 30set dot1x maxreq 2set dot1x re-authperiod 3600set dot1x re-authentication disable! #qosset qos disableset qos drop-threshold 1q4t rx queue 1 50 60 80 100 set qos map 2q2t tx 1 1 cos 0set qos map 2q2t tx 1 1 cos 1set qos map 2q2t tx 1 2 cos 2set qos map 2q2t tx 1 2 cos 3set qos map 2q2t tx 2 1 cos 4set qos map 2q2t tx 2 1 cos 5set qos map 2q2t tx 2 2 cos 6set qos map 2q2t tx 2 2 cos 7set qos drop-threshold 2q2t tx queue 1 80 100 set qos drop-threshold 2q2t tx queue 2 80 100 set qos wrr 2q2t 5 255 set qos txq-ratio 2q2t 80 20 set qos map 1p1q4t rx 1 1 cos 0set qos map 1p1q4t rx 1 1 cos 1set qos map 1p1q4t rx 1 2 cos 2set qos map 1p1q4t rx 1 2 cos 3set qos map 1p1q4t rx 1 3 cos 4set qos map 1p1q4t rx 2 1 cos 5set qos map 1p1q4t rx 1 3 cos 6set qos map 1p1q4t rx 1 4 cos 7set qos drop-threshold 1p1q4t rx queue 1 50 60 80 100 set qos map 1p2q2t tx 1 1 cos 0set qos map 1p2q2t tx 1 1 cos 1set qos map 1p2q2t tx 1 2 cos 2set qos map 1p2q2t tx 1 2 cos 3set qos map 1p2q2t tx 2 1 cos 4set qos map 1p2q2t tx 3 1 cos 5set qos map 1p2q2t tx 2 1 cos 6set qos map 1p2q2t tx 2 2 cos 7set qos wrr 1p2q2t 5 255 set qos txq-ratio 1p2q2t 70 15 15 set qos wred 1p2q2t tx queue 1 40:70 70:100 set qos wred 1p2q2t tx queue 2 40:70 70:100 set qos map 1p3q1t tx 1 1 cos 0set qos map 1p3q1t tx 1 1 cos 1set qos map 1p3q1t tx 2 1 cos 2set qos map 1p3q1t tx 2 1 cos 3set qos map 1p3q1t tx 2 1 cos 4set qos map 1p3q1t tx 4 1 cos 5set qos map 1p3q1t tx 3 1 cos 6set qos map 1p3q1t tx 3 1 cos 7set qos wrr 1p3q1t 100 150 200 set qos wred 1p3q1t tx queue 1 70:100 set qos wred 1p3q1t tx queue 2 70:100 set qos wred 1p3q1t tx queue 3 70:100 set qos map 1p1q0t rx 1 cos 0set qos map 1p1q0t rx 1 cos 1set qos map 1p1q0t rx 1 cos 2set qos map 1p1q0t rx 1 cos 3set qos map 1p1q0t rx 1 cos 4set qos map 1p1q0t rx 2 cos 5set qos map 1p1q0t rx 1 cos 6set qos map 1p1q0t rx 1 cos 7set qos rxq-ratio 1p1q0t 80 20 set qos map 1p2q1t tx 1 1 cos 0set qos map 1p2q1t tx 1 1 cos 1set qos map 1p2q1t tx 2 1 cos 2set qos map 1p2q1t tx 2 1 cos 3set qos map 1p2q1t tx 1 1 cos 4set qos map 1p2q1t tx 3 1 cos 5set qos map 1p2q1t tx 2 1 cos 6set qos map 1p2q1t tx 1 1 cos 7set qos wrr 1p2q1t 5 255 set qos txq-ratio 1p2q1t 70 15 15 set qos wred 1p2q1t tx queue 1 0:100 set qos wred 1p2q1t tx queue 2 0:100 set qos rxq-ratio 1p1q8t 80 20 set qos wred 1p1q8t rx queue 1 0:100 0:100 0:100 0:100 0:100 0:100 0:100 0:100 set qos bridged-microflow-policing disable 1-1000,1025-4094set qos cos-dscp-map 0 8 16 24 32 40 48 56 set qos ipprec-dscp-map 0 8 16 24 32 40 48 56 set qos dscp-cos-map 0-7:0set qos dscp-cos-map 8-15:1set qos dscp-cos-map 16-23:2set qos dscp-cos-map 24-31:3set qos dscp-cos-map 32-39:4set qos dscp-cos-map 40-47:5set qos dscp-cos-map 48-55:6set qos dscp-cos-map 56-63:7set qos policed-dscp-map 0:0set qos policed-dscp-map 1:1set qos policed-dscp-map 2:2set qos policed-dscp-map 3:3set qos policed-dscp-map 4:4set qos policed-dscp-map 5:5set qos policed-dscp-map 6:6set qos policed-dscp-map 7:7set qos policed-dscp-map 8:8set qos policed-dscp-map 9:9set qos policed-dscp-map 10:10set qos policed-dscp-map 11:11set qos policed-dscp-map 12:12set qos policed-dscp-map 13:13set qos policed-dscp-map 14:14set qos policed-dscp-map 15:15set qos policed-dscp-map 16:16set qos policed-dscp-map 17:17set qos policed-dscp-map 18:18set qos policed-dscp-map 19:19set qos policed-dscp-map 20:20set qos policed-dscp-map 21:21set qos policed-dscp-map 22:22set qos policed-dscp-map 23:23set qos policed-dscp-map 24:24set qos policed-dscp-map 25:25set qos policed-dscp-map 26:26set qos policed-dscp-map 27:27set qos policed-dscp-map 28:28set qos policed-dscp-map 29:29set qos policed-dscp-map 30:30set qos policed-dscp-map 31:31set qos policed-dscp-map 32:32set qos policed-dscp-map 33:33set qos policed-dscp-map 34:34set qos policed-dscp-map 35:35set qos policed-dscp-map 36:36set qos policed-dscp-map 37:37set qos policed-dscp-map 38:38set qos policed-dscp-map 39:39set qos policed-dscp-map 40:40set qos policed-dscp-map 41:41set qos policed-dscp-map 42:42set qos policed-dscp-map 43:43set qos policed-dscp-map 44:44set qos policed-dscp-map 45:45set qos policed-dscp-map 46:46set qos policed-dscp-map 47:47set qos pol