博科交换机配置指导手册

FastTrackTraining,Agenda,SessionOneLayer2SwitchesAdministrationEssentials:Connection,commandlineandGUIessentialsNetworkConfiguration:DefaultVLAN,VLANsTrunksandLAGRedundantConnections:Spanningtree,RSTP,MSTPBaseLayer3:VEsandVLANs,RoutingPorts,StaticRoutesSessionTwoLayer3SwitchesDynamicRouting:RIPandOSPFRedundantRoutinginterfaces:VRRPandVRRP-EISPBorderrouting:BGPTrafficControl:ACLsAdditionalSlidesAdditionalTheorySlides(Ifrequired)AdditionalMaterialusefulforsomestudentsbutoutsidetheBCNEsubjects(egRate-Limiting),THANKYOU,Section1.1Layer2SwitchesAdministrationEssentials,DB-9maleinterface.VT-100terminal-straight-throughcable(femaletofemalenotanull-modem).TheVT-100configurationis:9600Baud8DataBitsParity=NoneStopBits=1FlowControl=NoneForMODEMCross-Overcable(typicallyaDB-9FtoDB-9Fcable),ConsolePort,SW-FastIronenableNopasswordhasbeenassignedyet.SW-FastIron#showchassisSW-FastIron#configureterminalSW-FastIron(config)#showchassisInterfaceLevelFixedConfigurationproductsspecifythePortnumber(FastIronSimulator)SW-FastIron(config)#inteth1(eth1=ethernetport#1)SW-FastIron(config-if-1)#ChassisproductsspecifytheSlot/Port(BigIronSimulator)SW-FastIron(config)#inteth2/1(eth2/1=Chassisslot#2,ethernetport#1)StackableproductsspecifytheStack-Number/Unit-Number/PortSW-FastIron(config)#inteth1/2/1(eth1/2/1=Stack-number#1,Unit-number#2,ethernetport#1),CLIBasics(Part1/2),Movebackupthemenutreeusing“exit”SW-ServerIron(config-rs-c1)#exitSW-ServerIron(config)#exitSW-ServerIron#exitSW-ServerIronUse“end”orCntl-Ztoreturnto“#”promptDisplaytherunning-configandsavedstartup-configSW-ServerIron#writeterminalSW-ServerIron#showrunning-configSW-ServerIron#showconfigErasetheStartup-ConfigSW-ServerIron#erasestartup-configTheCLIsupportsup/downarrowforaccesstothelastcommandsenteredSW-ServerIron(config)#pingInvalidinput-pingType?foralistSW-ServerIron(config)#exitSW-ServerIron#,CLIBasics(Part2/2),TwoImageStorageAreasPrimaryandSecondaryViewTheFlash:BigIronRouter#shversionBigIronRouter#shflashActivemanagementmodule:CodeFlashType:AMD29F032B,Size:64*65536=4194304,Unit:2BootFlashType:AMD29F040,Size:8*65536=524288CompressedPriCodesize=3485205,Version07.5.01T53(b2r07501.bin)CompressedSecCodesize=3494253,Version07.5.02T53(b2r07502.bin)MaximumCodeImageSizeSupported:3866112(0 x003afe00)BootImagesize=149324,Version07.02.01(m2b07201.bin),FileManagement(Part1/3),Specifywheretobootfrom:PrimaryFlashSecondaryFlashTFTPServerBootPServerWhereyouenterthecommandalsodictateswhentoloadPRIVELEDGEDlevelINTERMEDIATEreboot/reloadConfigLevelLoadatnextscheduledrebootOrBigIron#(config)#boosyfsBigIron#(config)#wrimemBigIron#reloadat06:00:0001-19-04,System,TFTPServer,FlashPrimaryFlashSecondary,ImageCode,ManagementModule,abbreviatedbutuniquecommandline,FileManagement(Part2/3),From/ToTFTPServersFrom/ToPrimaryorSecondaryFlashExecPrivilegedLevel:NetIron#copytftpflash4vm1r07501.binsecondaryCopiesfromtheTFTPserverthefile“vm1r07501.bin”andstoresittothesecondaryflashareaNetIron#copyflashtftp4vm1r07501.binsecondaryCopiesthesystemimagefromthesecondaryflashareaandstoresittotheTFTPserverasfilename“vm1r07501.binTurboIron#copyflashflash?primaryCopysecondarytoprimarysecondaryCopyprimarytosecondaryTurboIron#copyflashflashprimaryCopiesthesystemimagefromthesecondaryflashareatotheprimary.SW-FastIron#copyrunning-configtftp4new.cfgCopiesfromthecurrentrunningconfig(notthestoredconfig)andwritesittotheTFTPserverasfilename“new.cfg”.NetIron#copytftpflash4nib06007.binbootCopiesthebootimagefromtftpservertothebootmemorylocationofflash.(“boot”isahiddenparameter),ManagementModule,FlashPrimaryFlashSecondary,FileManagement(Part3/3),Showcommands:NetIron#showarpRPcacheNetIron#showipinterfaceipinterfaceinformationNetIron#showipcacheIPhost/MACtableNetIron#showipospfOSPFinformationNetIron#showiprouteIProutesandtheirstatusNetIron#showiptrafficIP(ICMP,UDP,TCP,RIP)trafficstatisticsNetIron#showipdvmrpDVMRPinformationManyoftheabovecommandshaveseveralbranchesAnexampleis:NetIron#showipospfneighborNeighborrouterinformationReferencethemanualforacompletelistofallcommands,ShowCommands,ClearforwardingandroutetablesSwitch/Routerclearcommands:(SW-FastIron,TurboIron,BigIron)TurboIron#cleararpClearsARPtableTurboIron#clearmac-addressClearstheMACforwardingtablesTurboIron#clearstatisticsClearsallstatisticcounters.NetIron#clearloggingClearsthesystemlogRouter-onlyclearcommands:(NetIron,TurboIron,BigIron)NetIron#cleariprouteClearsIProutetables.NetIron#clearipcacheClearsIPhost/MACtablesClearingIndividualEntriesThemacparameterclearsonlytheentriesthatmatchthespecifiedaddressandmask.ThevlanparameterclearsonlytheentriesthatmatchthespecifiedVLAN.clearmac-addressRemoveslearnedMACaddressentriesfromtheMACaddresstable.EXAMPLE:BigIron#clearmac-addressethernet1/1,ClearCommands,HelpfulwhentryingtoverifyconnectivityCannotbeenteredwhenin“configure”modeAfewpingcommands:SW-FastIronping0SW-FastIron#ping0count100SW-FastIronping0size1200SW-FastIron#ping0ttl5c10s200Issues10pingswithatimetoliveof5andeachpingis200byteslongUse“?”aftertheaddressforotheroptionsSyntax:ping|sourcecounttimeoutttlsizequietnumericno-fragmentverifydatabrief,PingCommands,ShowCPUStatistics,FastIron(config)#showprocesscpuProcessName5Sec(%)1Min(%)5Min(%)15Min(%)Runtime(ms)ACL0.000.000.000.000ARP90.20134792BGP0.000.000.000.000DOT1X0.000.000.000.000GVRP0.000.000.000.000ICMP0.000.000.000.003721IP0.000.000.000.001271L2VLAN9.1012.1711.1210.818220839NAT0.000.000.000.000OSPF0.000.000.000.000RIP0.000.000.000.00129STP0.010.010.010.0111588VRRP0.000.000.000.000,BigIronRouter#showcpu2percentbusy,from81secago1secavg:1percentbusy5secavg:1percentbusy60secavg:1percentbusy300secavg:3percentbusy,AllocatingAdditionalMemoryforVLANSandVEs,Systemmaximumnumberdependson:ProductandManagementModuleBigIron(config)#system-maxvlan2048BigIron(config)#system-maxvirtual-interface2048BigIron(config)#writememoryBigIron(config)#endBigIron#reload,ManagementIPAddressandDefault-Gateway,LAN,IPAdd:5,FastIron#contFastIron#(Config)ipaddress5FastIron#(Config)ipdefault-gatewayBigIronRouter#contBigIronRouter#(Config)inteth1/1BigIronRouter#(Config)ipaddress5,Passwords,FactoryDefault=noEnablepasswordsPasswordscanbeupto32characterslongMultiplelevelsof“Enable”passwordaccessAccessdependsonwhichpasswordyouuseSuperUser-Unlimitedaccess,canchangeallparametersConfigurePort-ChangeinterfacelevelparametersReadOnly-Viewonly,nochangingallowedBigIron(config)#enablesuper-user-passwordSuPswdBigIron(config)#enableport-config-passwordPCPswdBigIron(config)#enableread-only-passwordROPswdBigIronenablePCPswdorBigIronenablePassword:Ifthesystempasswordisnotyetset,thesystemwarnsyouBigIronenableNopasswordhasbeenassignedyet.,Passwords,recovering,YoucanrecoverfromaforgottenpasswordsRequiresdirectaccesstotheSerialPortandaSystemResetHaveterminalsessionpluggedintoserialport,then:RebootthesystemWithin2seconds,enterbtoinitiatethebootmonitorBOOTMONITORnopassword(cannotbeabbreviated)BOOTMONITORbootsystemflashprimaryThisbypassesthesystempasswordcheckSW-FastIronenableNopasswordhasbeenassignedyetSW-FastIron#ReassignSuper-Userpasswordifnotconfigured,fallbacktolocallydefinedusernamesaaaauthenticationwebdefaultradiuslocalenableTheWebBrowserwillfirstlookat1.RADIUSusernames,ifnotconfigured,2.locallydefinedusernames,ifnotconfigured3.usethe“enable”super-user,port-config,andread-onlypasswords,Passwords-aaaauthenticationexamples,SNMPrequiredinformation:SW-FastIron(config)#ipaddress5SW-FastIron(config)#ipdefault-gatewaySW-FastIron(config)#snmp-servercontact“BillClinton”SW-FastIron(config)#snmp-serverlocationthe_white_houseSW-FastIron(config)#snmp-serverhost5publicSW-FastIron(config)#snmp-servercommunitynotsaferoSW-FastIron(config)#snmp-servercommunitysaferwNote:Thefirsttwocommandsarevalidforswitchesonly.RouterswouldassignanIPaddressattheinterfacelevel,notatthegloballevel.BigIron(config)interfaceethernet1/2BigIron(config-if-1/2)#ipaddress5,SNMPConfigurations,EnabledwithwebbrowserUsernameCustomerdoesntneedtolearnInternetroutesButtheInternet,needstolearncustomer(stubAS)routes3waysISPslearnandadvertisecustomersroutes:staticroutesonISProuter,learnedviaIGP,orviaBGP,3waystoadvertiseStubASs,DiscoveryTOIFOSpeersinitiallyexchangefullBGProutingtables.After,incrementalupdatesTCPstaysaliveforeveroruntilproblemscausetermination,DiscoveryTOIFOS&M-EOSRoadmap,June,2009,Multi-homedASs:BGPconnectivityto2ISPs,Multi-homedASswithIBGP,DiscoveryTOIFOS&M-EOSRoadmap,June,2009,AS100(customer)usesIBGPwithanIGPIBGPbetweencustomers2borderroutersBorderroutersspeakEBGPtothedifferentASs(ISP1&ISP2),EBGPvs.IBGP,EBGP:AconnectionbetweendifferentAss(Noroutesareadvertisedbydefault)IBGP:AconnectionwithinthesameAS(EntireBGProutertableissenttopeer),DiscoveryTOIFOS&M-EOSRoadmap,June,2009,CommonServiceProvider-BIGASs,AdvertisesexteriorroutestootherIBGPpeerswithinISP(AS100)FullIBGPmeshrequiredforAS100IGPcarriesISPlocalinformationonly,DiscoveryTOIFOS&M-EOSRoadmap,June,2009,WhyuseInternalBGP?IBGP,IBGPislikeatunnelthroughanASfromoneEBGProutertoanotherEBGProuterShieldsIGPinternalroutersfromtheloadofexternalroutingupdatesInternetroutingtable.IBGPallowsyoutousepoliciestochooseexitIGPscant.Note:IGPisusedtoestablishrequiredreachability.IBGPpeerswillneverbecomeestablishedunlessthereisIPconnectivitybetweenthetwopeers.,DiscoveryTOIFOS&M-EOSRoadmap,June,2009,InternalBGPUpdatesourceloopback,IBGPpeersuseloopbacks-EBGPpeersdonotupdate-sourceloopbackcommandsays“usetheloopbackforpeer(neighbor)communication”LoopbackinterfaceusedforIBGPuntiesitfromrelyingontheavailabilit