思科网络技术培训之6：Catalyst操作.ppt

objectives uponcompletionofthischapter youwillbeabletoperformthefollowingtasks describelayer2switching bridging operationsdescribethecatalyst1900switchoperationsdescribethecatalyst1900switchdefaultconfigurationconfigurecatalyst1900switchuseshowcommandstoverifycatalyst1900switchconfigurationandoperations addresslearningforward filterdecisionloopavoidance threeswitchfunctions howswitcheslearnhostlocations initialmacaddresstableisempty macaddresstable 0260 8c01 1111 0260 8c01 2222 0260 8c01 3333 0260 8c01 4444 e0 e1 e2 e3 a b c d howswitcheslearnhostslocations stationasendsaframetostationcswitchcachesstationamacaddresstoporte0bylearningthesourceaddressofdataframestheframefromstationatostationcisfloodedouttoallportsexceptporte0 unknownunicastsareflooded macaddresstable 0260 8c01 1111 0260 8c01 2222 0260 8c01 3333 0260 8c01 4444 e0 0260 8c01 1111 e0 e1 e2 e3 d c b a howswitcheslearnhostlocations stationdsendsaframetostationcswitchcachesstationdmacaddresstoporte3bylearningthesourceaddressofdataframestheframefromstationdtostationcisfloodedouttoallportsexceptporte3 unknownunicastsareflooded macaddresstable 0260 8c01 1111 0260 8c01 2222 0260 8c01 3333 0260 8c01 4444 e0 0260 8c01 1111 e3 0260 8c01 4444 e0 e1 e2 e3 d c a b howswitchesfilterframes stationasendsaframetostationcdestinationisknown frameisnotflooded e0 0260 8c01 1111 e2 0260 8c01 2222 e1 0260 8c01 3333 e3 0260 8c01 4444 0260 8c01 1111 0260 8c01 2222 0260 8c01 3333 0260 8c01 4444 e0 e1 e2 e3 x x d c a b macaddresstable broadcastandmulticastframes stationdsendsabroadcastormulticastframebroadcastandmulticastframesarefloodedtoallportsotherthantheoriginatingport 0260 8c01 1111 0260 8c01 2222 0260 8c01 3333 0260 8c01 4444 e0 e1 e2 e3 d c a b e0 0260 8c01 1111 e2 0260 8c01 2222 e1 0260 8c01 3333 e3 0260 8c01 4444 macaddresstable redundanttopology redundanttopologyeliminatessinglepointsoffailureredundanttopologycausesbroadcaststorms multipleframecopies andmacaddresstableinstabilityproblems segment1 segment2 server hostx routery broadcaststorms segment1 segment2 server hostx routery broadcast switcha switchb hostxsendsabroadcast broadcaststorms segment1 segment2 server hostx routery broadcast switcha switchb hostxsendsabroadcast broadcaststorms segment1 segment2 server hostx routery broadcast switchescontinuetopropagatebroadcasttrafficoverandover switcha switchb multipleframecopies segment1 segment2 server hostx routery unicast switcha switchb hostxsendsanunicastframetorouteryrouterymacaddresshasnotbeenlearnedbyeitherswitchyet multipleframecopies segment1 segment2 server hostx routery switcha switchb hostxsendsanunicastframetorouteryrouterymacaddresshasnotbeenlearnedbyeitherswitchyetrouterywillreceivetwocopiesofthesameframe macdatabaseinstability segment1 segment2 server hostx routery unicast unicast switcha switchb hostxsendsanunicastframetorouteryrouterymacaddresshasnotbeenlearnedbyeitherswitchyetswitchaandblearnhostxmacaddressonport0 port0 port1 port0 port1 macdatabaseinstability segment1 segment2 server hostx routery unicast unicast switcha switchb hostxsendsanunicastframetorouteryrouterymacaddresshasnotbeenlearnedbyeitherswitchyetswitchaandblearnhostxmacaddressonport0frametorouteryisfloodedswitchaandbincorrectlylearnhostxmacaddressonport1 port0 port1 port0 port1 complextopologycancausemultipleloopstooccurlayer2hasnomechanismtostoptheloop server host workstations loop loop loop multipleloopproblems solution spanning treeprotocol providesaloopfreeredundantnetworktopologybyplacingcertainportsintheblockingstate block x spanning treeoperations onerootbridgepernetworkonerootportpernonrootbridgeonedesignatedportpersegment x designatedport f rootport f designatedport f nondesignatedport b rootbridge nonrootbridge swx swy 100baset 10baset switchydefaultpriority32768 8000hex mac0c0022222222 switchxdefaultpriority32768 8000hex mac0c0011111111 spanning treeprotocolrootbridgeselection bpdu bpdu bridgeprotocoldataunit default sentevery2seconds rootbridge bridgewiththelowestbridgeidbridgeid bridgepriority bridgemacaddressintheexample whichswitchhasthelowestbridgeid switchydefaultpriority32768mac0c0022222222 switchxdefaultpriority32768mac0c0011111111 spanning treeprotocolportstates rootbridge x port0 port1 port0 port1 100baset 10baset designatedport f rootport f nondesignatedport b designatedport f spanning treeprotocolpathcost linkspeedcost reratifyieeespec cost previousieeespec 10gbps211gbps41100mbps191010mbps100100 switchymac0c0022222222defaultpriority32768 switchxmac0c0011111111defaultpriority32768 port0 port1 port0 port1 switchzmac0c0011110000defaultpriority32768 port0 canyoufigureout whatistherootbridge whatarethedesignated nondesignated androotparts whicharetheforwardingandblockingports 100baset 100baset spanning tree switchymac0c0022222222defaultpriority32768 switchxmac0c0011111111defaultpriority32768 port0 port1 port0 port1 switchzmac0c0011110000defaultpriority32768 port0 canyoufigureout whatistherootbridge whatarethedesignated nondesignated androotparts whicharetheforwardingandblockingports 100baset 100baset spanning tree designatedport f rootport f nondesignatedport blk designatedport f rootport f spanning treeportstates spanning treetransitionseachportthroughseveraldifferentstate spanning treerecalculation spanning treerecalculation keyissue timetoconvergence convergenceoccurswhenalltheswitchesandbridgeportshavetransitionedtoeithertheforwardingorblockingstate whennetworktopologychanges switchesandbridgesmustrecomputethespanning treeprotocol whichdisruptsusertraffic primarilysoftwarebasedonespanning treeinstanceperbridgeusuallyupto16portsperbridge bridging primarilyhardwarebased asic manyspanning treeinstancesperswitchmoreportsonaswitch lanswitching bridgingcomparedtolanswitching transmittingframesthroughaswitch cut throughswitchchecksdestinationaddressandimmediatelybeginsforwardingframe frame fragmentfree modifiedcut through cat1900defaultswitchchecksthefirst64bytesthenimmediatelybeginsforwardingframe frame storeandforwardcompleteframeisreceivedandcheckedbeforeforwarding frame frame frame duplexoverview halfduplex csma cd unidirectionaldataflowhigherpotentialforcollisonhubsconnectivity switch hub fullduplexpoint to pointonlyattachedtodedicatedswitchedportrequiresfull duplexsupportonbothendscollisionfreecollisiondetectcircuitdisabled configuringtheswitch catalyst1900menudriveninterfaceweb basedvsm visualswitchmanager ioscli command lineinterface catalyst1900defaultconfigurations ipaddress 0 0 0 0cdp enabledswitchingmode fragmentfree100basetport auto negotiateduplexmode10basetport halfduplexspanningtree enabledconsolepassword none portsonthecatalyst1900 cat1912 cat1924 10basetportsauiport100basetuplinkports e0 1toe0 12 e0 1toe0 24 e0 25 e0 25 fa0 26 porta fa0 27 portb fa0 26 porta fa0 27 portb portsonthecatalyst1900 wg sw d shrunbuildingconfiguration currentconfiguration interfaceethernet0 1 interfaceethernet0 2 wg sw d shspanportethernet0 1ofvlan1isforwardingportpathcost100 portpriority128designatedroothaspriority32768 address0090 8673 3340designatedbridgehaspriority32768 address0090 8673 3340designatedportisethernet0 1 pathcost0timers messageage20 forwarddelay15 hold1 wg sw a showvlan membershipportvlanmembershiptypeportvlanmembershiptype 15static131static21static141static31static151static configuringtheswitch configurationmodesglobalconfigurationmodewg sw a conftermwg sw a config interfaceconfigurationmodewg sw a config interfacee0 1wg sw a config if configuringtheswitchipaddress wg sw a config ipaddress ipaddress mask wg sw a config ipaddress10 5 5 11255 255 255 0 configuringtheswitchipaddress wg sw a config ipaddress ipaddress mask wg sw a config ipdefault gateway ipaddress configuringtheswitchdefaultgateway wg sw a config ipdefault gateway10 5 5 3 wg sw a config ipdefault gateway ipaddress configuringtheswitchdefaultgateway showingtheswitchipaddress wg sw a showipipaddress 10 5 5 11subnetmask 255 255 255 0defaultgateway 10 5 5 3managementvlan 1domainname nameserver1 0 0 0 0nameserver2 0 0 0 0httpserver enabledhttpport 80rip enabledwg sw a speedandduplexoptions wg sw a config interfacee0 1wg sw a config if duplex auto full full flow control half settingduplexoptions wg sw a config if duplexhalf wg sw a config interfacee0 1wg sw a config if duplex auto full full flow control half showingduplexoptions duplexmismatches themanuallysetduplexparameterdiffersbetweenconnectedportstheswitchportisinautonegotiateandtheattachedportissettofullduplexwithnoauto negotiationcapabilitycausingtheswitchporttobeinhalf duplexmode fcsandlatecollisionerrors managingmacaddresstable wg sw a showmac address table managingmacaddresstable wg sw a shmac address tablenumberofpermanentaddresses 0numberofrestrictedstaticaddresses 0numberofdynamicaddresses 6addressdestinterfacetypesourceinterfacelist 00e0 1e5d ae2fethernet0 2dynamicall00d0 588f b604fastethernet0 26dynamicall00e0 1e5d ae2bfastethernet0 26dynamicall0090 273b 87a4fastethernet0 26dynamicall00d0 588f b600fastethernet0 26dynamicall00d0 5892 38c4fastethernet0 27dynamicall wg sw a showmac address table settingpermanentmacaddress wg sw a shmac address tablenumberofpermanentaddresses 1numberofrestrictedstaticaddresses 0numberofdynamicaddresses 4addressdestinterfacetypesourceinterfacelist 00e0 1e5d ae2fethernet0 2dynamicall2222 2222 2222ethernet0 3permanentall00d0 588f b604fastethernet0 26dynamicall00e0 1e5d ae2bfastethernet0 26dynamicall00d0 5892 38c4fastethernet0 27dynamicall wg sw a config wg sw a config mac address tablepermanent2222 2222 2222ethernet0 3 settingrestrictedstaticmacaddress wg sw a shmac address tablenumberofpermanentaddresses 1numberofrestrictedstaticaddresses 1numberofdynamicaddresses 4addressdestinterfacetypesourceinterfacelist 1111 1111 1111ethernet0 4staticet0 100e0 1e5d ae2fethernet0 2dynamicall2222 2222 2222ethernet0 3permanentall00d0 588f b604fastethernet0 26dynamicall00e0 1e5d ae2bfastethernet0 26dynamicall00d0 5892 38c4fastethernet0 27dynamicall wg sw a config mac address tablerestrictedstatic1111 1111 1111e0 4e0 1 wg sw a config mac address tablerestrictedstatic mac addresstypemodule portsrc if list configuringportsecurity wg sw a config if configuresaninterfacetobeasecuredportdefineamaximumnumberofmacaddressesallowedintheaddresstableforthisportcountcanbefrom1to132defaultis132 portsecure max mac countcount configuringportsecurity wg sw a config if configuresaninterfacetobeasecuredportdefineamaximumnumberofmacaddressesallowedintheaddresstableforthisportcountcanbefrom1to132defaultis132 wg sw a config interfacee0 4wg sw a config if portsecuremax mac count1 portsecure max mac countcount configuringportsecurity wg sw a showmac address tablesecurity wg sw a showmac address tablesecurityactionuponaddressviolation suspendinterfaceaddressingsecurityaddresstablesize ethernet0 1disabledn aethernet0 2disabledn aethernet0 3disabledn aethernet0 4enabled1ethernet0 5disabledn aethernet0 6disabledn aethernet0 7disabledn aethernet0 8disabledn aethernet0 9disabledn aethernet0 10disabledn aethernet0 11disabledn aethernet0 12disabledn a configuringportsecurity wg sw a showmac address tablesecurity wg sw a config address violation suspend disable ignore wg sw a showmac address tablesecurityactionuponaddressviolation suspendinterfaceaddressingsecurityaddresstablesize ethernet0 1disabledn aethernet0 2disabledn aethernet0 3disabledn aethernet0 4enabled1ethernet0 5disabledn aethernet0 6disabledn aethernet0 7disabledn aethernet0 8disabledn aethernet0 9disabledn aethernet0 10disabledn aethernet0 11disabledn aethernet0 12disabledn a showversion managingconfigurationfile copynvramtftp host dst file wg sw a tosendtheconfigurationtoatftpserver managingconfigurationfile copytftp host src filenvram copynvramtftp host dst file wg sw a tosendtheconfigurationtoatftpserver wg sw