7-交换机配置-端口安全

CCNA(640-802),CCNA200-120,CCIE：41722QQ：2952545837,Catalyst交换机默认配置,IP地址：CDP:启动10/100端口：自动协商生成树协议：启用控制台密码：没有端口状态：开启以太网通道：配置,配置查看命令,端口命名规则Showrunning-configShowspanning-treeShowvlanShowipinterfacebrief,交换机配置IP地址、子网掩码和默认网关,Switch(config)#interfacevlan1Switch(config-if)#ipaddressip地址子网掩码Switch(config-if)#noshutdownSwitch(config)#ipdefault-gatewayVlan1和interfacevlan1的区别,双工模式和速率,半双工(CSMA/CD)单向数据流产生冲突率高Hub连接,全双工点到点的连接要求两端设备同时配置为全双工避免冲突,设置双工模式,Catalyst2950,wg_sw_2950(config)#interfacefe0/1wg_sw_2950(config-if)#duplexauto|full|half,ShowingDuplexOptions,Switch#showinterfacesfastethernet0/3FastEthernet0/3isup,lineprotocolisdownHardwareisFastEthernet,addressis0000.0000.0003(bia0000.0000.0003)MTU1500bytes,BW100000Kbit,DLY100usec,reliability255/255,txload1/255,rxload1/255EncapsulationARPA,loopbacknotsetKeepaliveset(10sec)Half-duplex,10Mb/sinputflow-controlisoff,outputflow-controlisoffARPtype:ARPA,ARPTimeout04:00:00Lastinputnever,outputnever,outputhangneverLastclearingofshowinterfacecountersneverQueueingstrategy:fifoOutputqueue0/40,0drops;inputqueue0/75,0drops5minuteinputrate0bits/sec,0packets/sec5minuteoutputrate0bits/sec,0packets/sec0packetsinput,0bytes,0nobufferReceived0broadcasts,0runts,0giants,0throttles0inputerrors,0CRC,0frame,0overrun,0ignored0inputpacketswithdribbleconditiondetected0packetsoutput,0bytes,0underruns0outputerrors,0collisions,2interfaceresets0babbles,0latecollision,0deferred0lostcarrier,0nocarrier0outputbufferfailures,0outputbuffersswappedout,配置Portfast,Portfast命令能使端口直接进入转发状态Switch(config-if)spanning-treeportfast,管理MAC地址表,Catalyst2950,wg_sw_2950#showmac-address-tableDynamicAddressCount:1SecureAddressCount:0StaticAddress(User-defined)Count:0SystemSelfAddressCount:25TotalMACaddresses:26MaximumMACaddresses:8192Non-staticAddressTable:DestinationAddressAddressTypeVLANDestinationPort-0050.0f02.3372Dynamic1FastEthernet0/2,设置静态MAC地址,wg_sw_2950(config)#mac-address-tablestaticmac_addrvlanvlan_15,Catalyst2950only,限制静态MAC地址,wg_sw_2950#mac-address-tablesecure0003.3333.3333fa0/1vlan1wg_sw_2950#showmac-address-tableDynamicAddressCount:1SecureAddressCount:1StaticAddress(User-defined)Count:1SystemSelfAddressCount:25TotalMACaddresses:28MaximumMACaddresses:8192Non-staticAddressTable:DestinationAddressAddressTypeVLANDestinationPort-0050.0f02.3372Dynamic1FastEthernet0/20003.3333.3333Secure1FastEthernet0/1StaticAddressTable:DestinationAddressVLANInputPortOutputPorts-2222.2222.22221ALLFa0/1,wg_sw_2950(config)#mac-address-tablesecurehw-addrinterfacevlanvlan-id,配置PortSecurity,Catalyst2950,wg_sw_2950(config-if)#portsecuritymax-mac-countcount,wg_sw_2950(config)#interfacefa0/1wg_sw_2950(config-if)#portsecuritywg_sw_2950(config-if)#portsecuritymax-mac-count10,在交换机上验证PortSecurity,wg_sw_2950#showmac-address-tablesecure,wg_sw_2950#showport-security,wg_sw_2950#showmac-address-tablesecureNon-staticAddressTable:DestinationAddressAddressTypeVLANDestinationPort-0003.3333.3333Secure1FastEthernet0/1,wg_