以太网交换机工作机制

以太网交换机工作机制MAC

地址表Mac地址端口号学习逻辑 过虑/转发逻辑 学习逻辑接口 接口交换机用ASIC处理数据的转发–ASIC（ApplicationSpecific

IntegratedCircuit）体系结构（I）硬件结构业务接口、主板、主处理器、内存、FLASH、电源系统等软件结构BootRom引导、初始化程序VRP操作系统平台性能指标系统特性

可扩展接口模块种类、网线类型、输入电压、功耗、工作环境等业务特性

二层转发能力、交换模式、VLAN、组播技术、生成树协议、端口汇聚、MAC地址表、服务质量（QoS〕等Quidway

S系列以太网交换机S6506S8016

S5516 S3016/3026S3526/3516S3526FS2403HS2026CoreRoutingMuluti-layer

SwitchEnterpriseGigabitRouting

SwitchWorkgroup

SwitchDesktop

SwitchDSL

SwitchS3026VMA5300

VNortel

450-24T交换机24口10/100M第2层以太网交换机，带一个扩展插槽，一个堆叠模块2.5Gbps交换矩阵和专用的交换ASIC芯片支持在峰值达到3Mpps时，贯穿所有端口的帧转发和过滤能力。BayStack450交换机内建冗余的堆叠模块可使高达八个单元的堆叠具备自愈能力。当堆叠中的某个交换机发生故障时，其他所有的单元仍能在不中断的情况下，继续正常工作。简单易用的图形管理：北电免费可得的设备管理软件能对其轻松配置和管理。性能BayStack

450-24T交换机每单元最多10/100端口数28每个堆栈最多端口数224帧传输通过量300万pps安全可靠的可堆叠性有交换机底板速率2.5Gbps可扩展的底板带宽2.5Gbps802.1p优先级排队有801.1Q

VLAN群集有VLAN支持有MAC地址16000千兆位以太网与ATM支持有性能指标（cont.）性能规范(65字节数据包)总吞吐量(BayStack

450交换机)3,000,000pps总吞吐量(BayStack

410-24T交换机)1,000,000pps10

Mbps交换端口转发速率14,880

pps100

Mbps交换端口转发速率148,810

pps1000

Mbps交换端口转发速率1,488,100

pps延迟100

Mbps时最短的数据包为9ms订购编号说明AL2012F14Baystack450-24T

交换机24个10Base-T/100Base-TX端口，加上一个MDA槽和一个级联槽AL2033002BayStack400-2FX

2端口100Base-FXMDAAL2033003BayStack400-4FX

4端口100Base-FXMDAAL2033004BayStack400-4TX

4端口10/100Base-TXMDAAL2033005BayStack450-1SX

1-Port

1000Base-SX单个PHY

MDA(仅用于BayStack450交换机）AL2033006BayStack450-1SR

1-Port

1000Base-SX冗余PHY

MDA

包括linksafe(仅用于BayStack450交换机）AL2033007BayStack450-1LX

1-Port

1000Base-LX单个PHY

MDA(仅用于BayStack450交换机）AL2033008BayStack450-1SR

1-Port

1000Base-LX冗余PHY

MDA

包括linksafe(仅用于BayStack450交换机）AL2033010BayStack400-ST1堆叠模块，2.5Gbps(包括堆叠电缆）AL2018001BayStack400-SRC堆叠返回电缆NORTEL

450交换机的模块NORTEL

350-24T交换机24个自感应10/100Base-TX端口（全双工或半双工）上行链路包括千兆以太网、光纤模块快速以太网以及四个额外的10/100自感应以太网端口(最多由四个上行链路端口的多链路中继)。NORTEL

350-24T交换机采用2.5

Gbps交换结构以及所有端口上最快每秒300万个数据包的全帧转发与过滤。每个交换机端口上基于端口或策略的VLAN，并具备802.1Q

VLAN中继及802.10p优先级排队功能。支持Optivity网络管理软件、SNMP及RMON

监视与控制以及带有易于使用的图形用户界面（GUI）的设备管理器软件。参数NortelNetworkBayStack

350-24T每台10/100最多端口数28信帧转发速率3Mbps交换机底板速率2.5Gbps802.1p优先级排队有801.1Q

VLAN群信有VLAN支持有MAC地址16,000千兆位以太网与有NORTEL

350-24T交换机性能指标SelectionIssues:Needfor10Mbps,100Mbps,or1000Mbps

onmediaNeedfortrunkingandinter-switch

linksWorkgroupsegmentation

(VLANs)Portdensity

needsDifferentuser

interfacesDesktop/WorkgroupSolutionsWiringCloset/BackboneSolutionsSwitch

10/100Catalyst3000

seriesCatalyst

2900series

XLCatalyst1900/2820seriesCisco1548

MicroCatalyst4000

seriesCatalyst5000

seriesCatalyst8500

seriesCisco

Catalyst系列交换机IPaddress:

CDP:EnabledSwitchingmode:fragment

free100baseTport:Auto-negotiateduplex

mode10baseTport:Half

duplexSpanningTree:EnabledConsolepassword:noneCatalyst

1900

缺省配置Cat1912Cat192410baseT

portse0/1to

e0/12e0/1to

e0/24AUI

porte0/25e0/25100baseTuplink

portsfa0/26(port

A)fa0/27(port

B)fa0/26(port

A)fa0/27(port

B)PortsontheCatalyst

1900wg_sw_d#shrunBuildingconfiguration...Current

configuration:!!interfaceEthernet

0/1!interfaceEthernet

0/2wg_sw_d#shspanPortEthernet0/1ofVLAN1isForwardingPortpathcost100,Portpriority

128roothaspriority32768,address

0090.8673.3340DesignatedDesignatedDesignatedbridgehaspriority32768,portisEthernet0/1,

pathTimers:messageage20,forward

delayaddress

0090.8673.3340cost

015,hold1wg_sw_a#show

vlan-membershipPort VLAN Membership

Type Port VLAN Membership

Type------------------------------------------------------------------15Static131Static21Static141Static31Static151StaticPortsontheCatalyst

1900交换机的不同类型端口AUI

connectorsare

DB15ISO8877(RJ-45)connectorsandjacksareslightlylarger

thanRJ-11phoneconnectorsand

jacksFiberConnector

Port端口速率标准以太网快速以太网千兆以太网100Mbit/s1000Mbit/s10Mbit/s标准以太网（auto）快速以太网（auto）千兆以太网（auto）标准以太网（auto）10M10M10M快速以太网（auto）10M100M100M千兆以太网（auto）10M100M1000M端口速率端口速率协商结果一览表端口工作模式Full：表示端口工作在全双工模式Auto：表示端口工作在自协商模式Half：表示端口工作在半双工模式端口类型：MDI/MDI-XMDI介质相关接口.MDI-X介质非相关接口;华为交换机可以智能识别MDI/MDIX接口;路由器和PC都属于MDI接口;以太网交换机提供都是MDI-X接口.Receive

PairTransmit

PairTransmit

PairReceive

PairTransmit

PairReceive

PairTransmit

PairReceive

Pair交叉网线直连网线端口流量控制半双工全双工后退压力技术PAUSE数据帧标准以太网快速以太网千兆以太网拥塞优点：1、便于网络的扩展，使用方便2、技术成熟，性能稳定3、兼容性强，标准统一缺点：1、会增加信号的延迟2、建议不超过4层交换机的级连菊花链式堆叠星型堆叠交换机的两种堆叠方式菊花链式堆叠收

发同一个高速端口PCAPCBB访问A的帧A访问B的帧优点：1、便于网络的扩展，使用方便2、实现链路冗余3、支持单一IP地址，统一网管缺点：1、主干部分负载较重2、要求交换机距离很近3、采用专用的堆叠电缆（cont.）星形堆叠MATRIXMEMBER星型堆叠优点：1、性能比菊花链路高2、支持单一IP地址，统一网管缺点：1、需要交换机提供Matrix接口2、要求交换机距离很近，距离不超过2米3、采用专用的堆叠电缆，成本稍偏高（cont.）Configurationscancomefrommany

sourcesConfigurationswillact

indevicememoryConsole

portAuxiliary

portInterfacesPCorUnix

serverWebor

NetworkManagementserverVirtual

terminal交换机配置方法TelnetTFTP交换机配置方式（I）确认PC机的串口可用确认配置线连接正确进入终端仿真程序打开交换机的电源进入配置界面程序附件通讯超级终端通过Console配置进入设置界面交换机配置方式（II）通过TELNET配置华为交换机配置视图用户视图系统视图以太网端口视图VLAN视图VLAN接口视图……用户视图<Quidway>?Userview

commands:bootcdclockclustercopydebuggingdeleteSetboot

optionChangethecurrentpathSpecifythesystemclockRunclustercommandCopythe

fileEnablesystemdebuggingfunctionsDeletethe

file系统视图[Quidway]super

password修改特权用户密码[Quidway]sysname交换机命名[Quidway]interfaceethernet0/1进入接口视图[Quidway]quit退出系统视图[Quidway]info-centerconsolechannelconsole信息输出设置[Quidway]monitor-portethernet

0/1配置流量镜像[Quidway]?接口配置视图下常用命令行[Quidway-Ethernet0/1]duplex{half|full|

auto}配置端口双工工作状态[Quidway-Ethernet0/1]speed{10|100|

auto}配置端口工作速率[Quidway-Ethernet0/1]flow-control配置端口流控[Quidway-Ethernet0/1]mdi{across|auto|normal}配置端口MDI/MDIX状态[Quidway-Ethernet0/1]shutdown/undoshutdown关闭/重起接口[Quidway-Ethernet0/1]?在线帮助命令行接口提供完全帮助和部分帮助两种形式:<Quidway>

?<Quidway>ping

?[Quidway]garptimerleaveall?<Quidway>p?<Quidway>display

ver?命令行错误信息[Quidway]

dispaly^%Unrecognizedcommandfoundat'^'

position.[Quidway]

display^%Incompletecommandfoundat'^'

position.[Quidway]displayinterfaceserial0

0^%Wrongparameterfoundat'^'

position.历史命令[Quidway]display history-commandsystemInts

0Ipadd

Quit<ctrl><p>或↑<ctrl><N>或↓上一条历史命令下一条历史命令命令行接口为每个用户缺省保存10条历史命令编辑特性光标向左移动一个字符位置光标向右移动一个字符位置显示历史命令系统用完整的关键字替代原输普通按键 输入字符到当前光标位置退格键BackSpace 删除光标位置的前一个字符左光标键←右光标键→上下光标键↑↓Tab键入并换行显示显示特性Language-mode中英文显示方式切换暂停显示时键入'Ctrl+c'停止显示和命令执行暂停显示时键入空格键继续显示下一屏信息暂停显示时键入回车键继续显示下一行信息端口镜像镜像分为两种：端口镜像和流镜像。

端口镜像是指将某些指定端口（出或入方向）的数据流

量映射到监控端口，以便集中使用数据捕获软件进行数据分析。

流镜像是指按照一定的数据流分类规则对数据进行分流，然后将属于指定流的所有数据映射到监控端口，以便进行数据分析端口镜像的配置指定和清除端口镜像[undo]monitor-port{interface_typeinterface_num|interface_name}指定和清除被端口镜像

[undo]portmirror{interface_typeinterface_num|interface_name}[to{interface_typeinterface_num|interface_name}]配置和清除镜像端口和被镜像端口[undo]portmirrorinterface_list1

observing-port{interface_typeinterface_num|interface_name

}Findandcheckdevice

hardwareFindandloadCiscoIOSsoftware

imageFindandapplydevice

configurationsCisco交换机启动-OverviewSystemstartuproutinesinitiateswitch

softwareInitialstartupusesdefaultconfiguration

parametersBeforeyoustarttheswitch,verifythecablingandconsoleconnectionAttachthepowercableplugtotheswitchpowersupply

socketObservetheboot

sequenceLEDsontheswitch

chassisCiscoIOSsoftwareoutput

textCatalyst

交换机初始化检查交换机LED

指示灯交换机POST过程中的指示灯Atthestart,allportLEDsare

green.EachLEDturnsoffafteritstest

completes.Ifatestfails,itsLEDturns

amber.SystemLEDturnsamberifanytest

fails.Ifnotestfails,POST

completes.OnPOSTcompletion,LEDsblinkthenturn

off.Configuringthe

SwitchCatalyst

1900Menudriven

interfaceWeb-basedVSM(VisualSwitchManager)IOS

CLI(command-lineinterface)–

使用命令行界面–

在控制台命令模式中键入或粘贴输入项回车后

命令设备解析和执行命令两种主要的执行模式（

EXEC

）：

用户模式、特权模式CiscoIOSIOS

用户界面用户模式对路由器状态进行有限的检查，远程访问CommandPromptis

hostname>TherearetwomainEXECmodesforenteringcommands.First

mode:EXEC

modes特权用户模式详细地检查、调试和测试路由器文件操作及远程访问Commandpromptsonthe

devicehostname#Secondmode(andmostcommonly

used):EXECmodes

（cont.）Initial

BootupConsoleconnectionCatalyst1900Management

ConsoleCopyright

(c)

Cisco

Systems,

Inc. 1993-1998Allrights

reserved.EnterpriseEdition

SoftwareEthernet

Address: 00-50-BD-73-E2-C0PCA

Number: 73-3121-01PCA

Serial

Number: FAA0252A0QXModel

Number: WS-C1924-ENSystem

Serial

Number: FAA0304S0U3Power

Supply

S/N: PHI025101F3-------------------------------------------------1user(s)nowactiveonManagement

Console.UserInterface

Menu[M]

Menus[K]Command

Line[I]IP

ConfigurationEnter

Selection:ConsoleLoggingintotheSwitchandEnteringtheEnable

Password>>

enableEnter

password:

##

disableUsermode

promptUsermode

promptPrivilegedmode

promptPrivilegedmode

promptContext-Sensitive

HelpConsoleError

MessagesIdentifyproblemswithswitchcommandsincorrectlyenteredsothatyoucanalterorcorrect

them.CommandHistory

BufferAllowsrecalloflongorcomplexcommandsorentriesforreentry,review,orcorrection.Providesalistofcommandsandtheargumentsassociatedwithaspecific

command.SwitchCommandLineHelp

Facilities–Configuration

ModesGlobalconfigurationmodewg_sw_a#conftermwg_sw_a(config)#Interfaceconfigurationmodewg_sw_a(config)#interfacee0/1wg_sw_a(config-if)#配置交换机命令目的Step

1configure

terminal进入配置状态Step

2interfacerange

{port-range}进入组配置状态Step

3使用的端口配置命令进行配置Step

4end退回Step

5showinterfaces[interface-id]验证配置Step

6copyrunning-config

startup-config保存配置端口\配置一组端口当使用interface

range命令时有如下的规则:有效的组范围:vlan从1

到4094fastethernet槽位/{firstport}

-

{last

port},

槽位为0gigabitethernet槽位/{first

port}

-

{last

port},槽位为0port-channelport-channel-number-port-channel-number,port-channel号从1到64，端口号之间需要加入空格，如：interface range

fastethernet

0/1

–

5是有效的，而interface

rangeFstethernet0/1-5

是无效的.interface

range

命令只能配置已经存在的interface

vlan所有在同一组的端口必须是相同类别的配置端口\配置一组端口（2）Switch#configureterminalSwitch(config)#interfacerangefastethernet0/1-5Switch(config-if-range)#noshutdown*Oct 608:24:35:%LINK-3-UPDOWN:InterfaceFastEthernet0/1,changedstateto

up*Oct 608:24:35:%LINK-3-UPDOWN:InterfaceFastEthernet0/2,changedstateto

up*Oct 608:24:35:%LINK-3-UPDOWN:InterfaceFastEthernet0/3,changedstateto

up*Oct 608:24:35:%LINK-3-UPDOWN:InterfaceFastEthernet0/4,changedstatetoup*Oct 608:24:35:%LINK-3-UPDOWN:InterfaceFastEthernet0/5,changedstateto

up配置端口\配置一组端口（3）配置不同类型端口的组:Switch#configureterminalSwitch(config)#interfacerangefastethernet0/1-2,gigabitethernet0/1-2Switch(config-if-range)#no

shutdown*Oct 608:29:28:%LINK-3-UPDOWN:InterfaceFastEthernet0/1,changedstateto

up*Oct 608:29:28:%LINK-3-UPDOWN:InterfaceFastEthernet0/2,changedstateto

up*Oct 608:29:28:%LINK-3-UPDOWN:InterfaceGigabitEthernet0/1,changedstateto

up*Oct 608:29:28:%LINK-3-UPDOWN:InterfaceGigabitEthernet0/2,changedstateto

up配置端口\配置一组端口（4）命令目的Step

1configure

terminal进入配置状态Step

2interface{vlanvlan-id}|{{fastethernet|gigabitethernet}interface-id}|

{port-channelport-channel-number}选择要关闭的端口Step

3shutdown关闭Step

4end退出Step

5show

running-config验证使用

no

shutdown

命令重新打开端口.关闭和打开端口配置端口速率及双工模式可以配置快速以太口的速率为10/100Mbps及千兆以太口的速率为10/100/1000-Mbps;但对于GBIC端口则不能配置速率及双工模式，有时可以配置nonegotiate,当需要联接不支持自适应的其它千兆端口时命令目的Step

1configure

terminal进入配置状态.Step

2interface

interface-id进入端口配置状态.Step

3speed{10|100|1000|auto|nonegotiate}设置端口速率（

1000

只工作在千兆口.

GBIC模块只工作在1000Mbps下.

nonegotiate

只能在这些GBIC上用.）Step

4duplex{auto|full|

half}设置全双工或半双工.Step

6showinterfaces

interface-id显示有关配置情况配置端口速率及双工模式（2）Switch#configureterminalSwitch(config)#interfacefastethernet0/3Switch(config-if)#speed10Switch(config-if)#duplexhalf配置端口速率及双工模式（3）wg_sw_a#sh

interfacesForwardTransitions:

1Ethernet0/1isEnabledHardwareisBuilt-in10Base-TAddressis

0090.8673.3341MTU1500bytes,BW10000

Kbits802.1d

STP

State: ForwardingPortmonitoring:DisabledUnknownunicastflooding:

EnabledUnregisteredmulticastflooding:EnabledDescription:Duplexsetting:Half

duplexBackpressure:

DisabledReceive

Statistics-------------------------------------TransmitStatistics-------------------------------------Totalgood

framesTotal

octetsBroadcast/multicastframesBroadcast/multicast

octetsGoodframes

forwardedFrames

filteredRunt

framesNobuffer

discardsErrors:FCSerrorsAlignmenterrorsGiantframesAddress

violations000044841 Totalframes

4045024944550 Total

octets 2959157431011 Broadcast/multicastframes

3909133865029 Broadcast/multicastoctets

2847815444832 Deferrals

09 Singlecollisions

00 Multiplecollisions

00 Excessivecollisions

0Queuefulldiscards

0Errors:LatecollisionsExcessive

deferralsJabber

errorsOthertransmit

errors0000ShowingDuplex

Options端

口

描

述命令目的Step

1configure

terminal进入配置模式Step

2interface

interface-id进入要加入描述的端口Step

3description

string加入描述

(最多240个字符).Step

4end退回.Step

5showinterfacesinterface-iddescriptionorshow

running-config验证.Switch#config

terminalSwitch(config)#interfacefastethernet0/4Switch(config-if)#descriptionConnectsto

MarketingSwitch(config-if)#endSwitch#showinterfacesfastethernet0/4descriptionInterface Status Protocol DescriptionFa0/4 up down Connectsto

Marketing端

口

描

述（2）监控及维护端口Show

Commands目的showinterfaces

[interface-id]显示所有端口或某一端口的状态和配置.showinterfacesinterface-id

status[err-disabled]显示一系列端口的状态或错误－关闭的状态showinterfaces

[interface-id]switchport显示二层端口的状态，可以用来决定此口是否为二层或三层口。showinterfaces

[interface-id]description显示端口描述showrunning-config

interface[interface-id]显示当前配置中的端口配置情况showversion显示软硬件等情况Switch#showinterfaces

statusNameStatusconnectedVlanroutedDuplexSpeed

Typea-fulla-10010/100/1000BaseTXwceserver20.20.2

disabledroutedPortGi0/1Gi0/2Gi0/3Gi0/4ipwccpweb-cache

notconnectnotconnect routedroutedautoauto auto10/100/1000BaseTXauto auto10/100/1000Base

TXauto10/100/1000Base

TX监控及维护端口（2）Switch#showinterfacesfastethernet0/1switchportName:

Fa0/1Switchport:EnabledAdministrativeMode:staticaccessOperationalMode:

downAdministrativeTrunkingEncapsulation:dot1qNegotiationofTrunking:

OffAccessModeVLAN:1(default)TrunkingNativeModeVLAN:1(default)TrunkingVLANsEnabled:

ALLPruningVLANsEnabled:2-1001Protected:falseUnknownunicastblocked:disabledUnknownmulticastblocked:disabledVLAN:dot1p

(Inactive)Appliancetrust:

5监控及维护端口（3）wg_sw_a#show

interfacesForwardTransitions:

1Ethernet0/1isEnabledHardwareisBuilt-in10Base-TAddressis

0090.8673.3341MTU1500bytes,BW10000

Kbits802.1d

STP

State: ForwardingPortmonitoring:DisabledUnknownunicastflooding:

EnabledUnregisteredmulticastflooding:EnabledDescription:Duplexsetting:Half

duplexBackpressure:

DisabledReceive

Statistics-------------------------------------TransmitStatistics-------------------------------------TotalgoodframesTotaloctetsBroadcast/multicastframesBroadcast/multicast

octetsGoodframes

forwardedFrames

filteredRunt

framesNobuffer

discards40450229591574frames 390913octets

284781540000044841 Total

frames4944550 Total

octets31011 Broadcast/multicast3865029 Broadcast/multicast44832 Deferrals9 Single

collisions0 Multiple

collisions0 Excessive

collisionsQueuefulldiscardsErrors:Errors:FCSerrorsAlignmenterrorsGiantframesAddress

violations0000LatecollisionsExcessive

deferralsJabber

errorsOthertransmit

errors0000FCSandLateCollision

Errorswg_sw_a#show

versionCiscoCatalyst1900/2820EnterpriseEditionSoftwareVersion

V8.01.01Copyright(c)CiscoSystems,Inc. 1993-1998ROM:SystemBootstrap,Version

3.03wg_sw_duptimeis8day(s)17hour(s)53minute(s)

25second(s)ciscoCatalyst1900(486sxl)processorwith2048K/1024KbytesofmemoryHardwareboardrevisionis

1UpgradeStatus:Noupgradecurrentlyin

progress.ConfigFileStatus:Filewgswd.cfgdownloadedfrom

27FixedEthernet/IEEE802.3interface(s)BaseEthernetAddress:00-90-86-73-33-40wg_sw_a#Show

Versionwg_sw_c#showrunBuildingconfiguration...Currentconfiguration:!hostname"wg_sw_c"!ipaddress3

ipdefault-gateway!interfaceEthernet

0/1<text

omitted>interfaceEthernet

0/24!InterfaceEthernet

0/25!interfaceFastEthernet

0/26!interfaceFastEthernet

0/27wg_sw_c#showrunBuildingconfiguration...Currentconfiguration:!hostname"wg_sw_c"!ipaddress3

255.255ipdefault-gateway

!interfaceEthernet

0/1<text

omitted>interfaceEthernet0/24!InterfaceEthernet0/25!interfaceFastEthernet0/26!interfaceFastEthernet0/27Switchshow

running-configurationCommandwg_sw_c#show

runBuildingconfiguration...Currentconfiguration:!hostname"wg_sw_c".255.0!ipaddress3

ipdefault-gateway!interfaceEthernet

0/1<text

omitted>interfaceEthernet

0/12!InterfaceEthernet

0/25!interfaceFastEthernet

0/26!interfaceFastEthernet

0/27!!!!!!wg_sw_c#show

runBuildingconfiguration...Currentconfiguration:hostname"wg_sw_c"ipaddress3

ipdefault-gatewayinterfaceEthernet

0/1<text

omitted>interfaceEthernet

0/12InterfaceEthernet0/25interfaceFastEthernet0/26interfaceFastEthernet

0/27Catalyst

1924Catalyst

1912wg_sw_a#show

ipIPaddress:

1Subnetmask:

Defaultgateway:

ManagementVLAN:

1Domain

name:Nameserver1:

Nameserver2:

HTTPserver:EnabledHTTP

port: 80RIP:

Enabledwg_sw_a#查看IP地址Clear命令目的clearcounters[interface-id]清除端口计数器.clearline[number|console0|vty

number]重置异步串口的硬件逻辑clear

counters

命令只清除用show

interface所显示的计数，不影响用snmp得到的计数刷新、重置端口及计数器举例如下：Switch#clearcounters

fastethernet0/5Clear"showinterface"countersonthisinterface[confirm]ySwitch#*Sep3008:42:55:%CLEAR-5-COUNTERS:ClearcounteroninterfaceFastEthernet0/5byvty1(0)可使用clear

line

命令来清除或重置某一端口或串口，在大部分情况下并不需要这样做:Switch#clearinterface

fastethernet0/5刷新、重置端口及计数器（2）管理

Mac

AddressTablewg_sw_a#show

mac-address-tablewg_sw_a#shmac-address-tableNumberofpermanentaddresses:

0Numberofrestrictedstaticaddresses:0Numberofdynamicaddresses:

6Address Dest

Interface TypeSourceInterface

List-------------------------------------------------------------------------------------------------00E0.1E5D.AE2FEthernet

0/2DynamicAll00D0.588F.B604FastEthernet

0/26DynamicAll00E0.1E5D.AE2BFastEthernet

0/26DynamicAll0090.273B.87A4FastEthernet

0/26DynamicAll00D0.588F.B600FastEthernet

0/26DynamicAll00D0.5892.38C4FastEthernet

0/27DynamicAllwg_sw_a#show

mac-address-tableCont.wg_sw_a(config)#mac-address-tablepermanent{mac-addresstype

module/port}SettingPermanentMAC

Addresswg_sw_a(config)#mac-address-tablepermanent{mac-addresstype

module/port}wg_sw_a(config)#mac-address-tablepermanent2222.2222.2222ethernet0/3Cont.wg_sw_a#shmac-address-tableNumberofpermanentaddresses:

1Numberofrestrictedstaticaddresses:0Numberofdynamicaddresses:

4Address Dest

Interface TypeSourceInterface

List--------------------------------------------------------------------------------------------------------------00E0.1E5D.AE2FEthernet0/2DynamicAll2222.2222.2222Ethernet0/3PermanentAll00D0.588F.B604FastEthernet

0/26DynamicAll00E0.1E5D.AE2BFastEthernet

0/26DynamicAll00D0.5892.38C4FastEthernet

0/27DynamicAllwg_sw_a(config)#mac-address-tablepermanent{mac-addresstype

module/port}wg_sw_a(config)#mac-address-tablepermanent2222.2222.2222ethernet0/3Cont.wg_sw_a(config)#mac-address-tablerestrictedstatic{mac-addresstypemodule/port

src-if-list}SettingRestrictedStaticMACAddresswg_sw_a(config)#mac-address-tablerestrictedstatic{mac-addresstypemodule/port

src-if-list}wg_sw_a(config)#mac-address-tablerestrictedstatic1111.1111.1111e0/4

e0/1SettingRestrictedStaticMACAddress1111.1111.1111Ethernet0/4StaticEt0/100E0.1E5D.AE2FEthernet

0/2DynamicAll2222.2222.2222Ethernet0/3PermanentAll00D0.588F.B604FastEthernet

0/26DynamicAll00E0.1E5D.AE2BFastEthernet

0/26DynamicAll00D0.5892.38C4FastEthernet

0/27DynamicAllwg_sw_a(config)#mac-address-tablerestrictedstatic{mac-addresstypemodule/port

src-if-list}wg_sw_a(config)#mac-address-tablerestrictedstatic1111.1111.1111e0/4e0/1wg_sw_a#sh

mac-address-tableNumberofpermanentaddresses:1Numberofrestrictedstaticaddresses:1Numberofdynamicaddresses:

4Address Dest

Interface Type SourceInterface

List-----------------------------------------------------------------------------------------------SettingRestrictedStaticMACAddress配置

Port

Securitywg_sw_a(config-if)#portsecure[max-mac-count

count]Configuresaninterfacetobeasecured

portDefineamaximumnumberofmacaddressesallowedintheaddresstableforthis

portCountcanbefrom1to

132Defaultis

132wg_sw_a(config-if)#portsecure[max-mac-count

count]Configuresaninterfacetobeasecured

portDefineamaximumnumberofmacaddressesallowedintheaddresstableforthis

portCountcanbefrom1to

132Defaultis

132wg_sw_a(config)#interfacee0/4wg_sw_a(config-if)#port

securewg_sw_a(config-if)#portsecuremax-mac-count

1Cont.Cont.wg_sw_a#showmac-address-table

securitywg_sw_a#showmac-address-tablesecurityActionuponaddressviolation:

SuspendInterface Addressing

Security AddressTable

Size------------------------------------------------------------------------------------Ethernet

0/1Ethernet0/2Ethernet0/3Ethernet

0/4DisabledDisabledDisabledEnabled