RG-S21交换机（端口+IP+MAC）配置模板.doc

S21交换机（端口+IP+MAC）配置模板锐捷网络远程技术支持中心技术热线：4008-111-000S21交换机（端口+IP+MAC）配置模板：IP+MAC+端口：例：在端口F0/2上绑定：IP:192.168.12.202 MAC: 00d0.f800.073c的主机。Switch# configure terminal!进入全局配置模式Enter configuration commands, one per line. End with CNTL/Z.Switch(config)# interface fastethernet 0/2!进入端口2配置模式Switch(config-if)# switchport mode access!把端口模式改为access口Switch(config-if)# switchport port-security!启用端口安全Switch(config-if)# switchport port-security maximum 24!最多允许24个mac地址，最大128Switch(config-if)# switchport port-security mac-address 00d0.f800.073c !端口和mac地址的绑定Switch(config-if)# switchport port-security mac-address 00d0.f800.073c ip-address 192.168.12.202!端口+mac地址+ip地址绑定Switch(config-if)# endSwitch#wr下面是操作时的截图： Initializing. Done 2006-03-10 14:57:06 5-COLDSTART:System coldstart Switch Switch Switchen Password: Switch#config t Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#interface f 0/2 2006-03-10 14:57:38 5-CONFIG:Configured from outband Switch(config-if)#switchport mode access 2006-03-10 14:58:32 5-CONFIG:Configured from outbandSwitch(config-if)#switchport port-securitySwitch(config-if)#switchport port-security maximum 242006-03-10 15:04:51 5-CONFIG:Configured from outbandSwitch(config-if)#Switch(config-if)#switchport port-security mac-address 00d0.f800.073c2006-03-10 15:24:56 5-CONFIG:Configured from outbandSwitch(config-if)#$rity mac-address 00d0.f800.073c ip-address 192.168.12.2022006-03-10 15:25:13 5-CONFIG:Configured from outband% Prompt: enable ARP check can provide more secure policy to refuse illegal ARPpacket.Switch(config-if)#end2006-03-10 15:25:43 5-CONFIG:Configured from outbandSwitch#wrBuilding configuration.OKSwitch#模版如下：configure terminalinterface fastethernet 0/2switchport mode accessswitchport port-securityswitchport port-security maximum 24switchport port-security mac-address 00d0.f800.073c switchport port-security mac-address 00d0.f800.073c ip-address 192.168.12.202endS21交换机（端口+IP）配置模板：配置信息：Switch#show runSystem software version : 1.63 Build Jan 6 2006 RelBuilding configuration.Current configuration : 1183 bytes!version 1.0!no enable services web-server hostname Switchvlan 1!enable secret level 1 5 &tPaeinqubfjo+rv8cgkE,smdhl&-enable secret level 15 5 &tsv1quT7+.trvV/,|7zsW&-/-a!interface fastEthernet 0/5 switchport port-security violation shutdown ！当出现端口和IP不匹配的情况，端口自动关闭。 switchport port-security aging time 2 switchport port-security ip-address 10.32.1.48 switchport port-security ip-address 10.32.1.49!interface fastEthernet 0/6 switchport port-security switchport port-security violation shutdown switchport port-security aging time 2 switchport port-security ip-address 10.32.1.50!interface vlan 1 no shutdown ip address 10.32.1.10 255.255.255.0 !ip default-gatew