思科網絡技術認證nanpie實驗手冊版chp12交換機基本配置

12換機基本12換機基本配12.1換機簡交換機是第二層的設備，可以隔離沖突域。交換機是基于收到的數(shù)據(jù)幀中的源MAC目的MAC地址來進行工作。交換機的作用主要有這么兩個：一個是維護CAM（ContextAddressMemory）表，該表MAC地址和交換機端口的映射表；另一個是根CAM來進行數(shù)據(jù)幀的轉發(fā)。交換機對幀的處理有三種：交換機收到幀后，查CAM表，如果能查詢到目的計算一端口轉發(fā)出去（Forward）；如果該計算機所在的端口和交換機接收幀的源端口是同一端（Filter（Flood12-以太網交換機轉發(fā)數(shù)據(jù)幀有三種交換方式，如圖12-存儲轉發(fā)（Store-and-直接轉發(fā)（Cut-無碎片（Fragment-12.21:交換機基本配（1）12.21:交換機基本配（1）實驗拓實驗步Enterconfigurationcommands,oneperline.EndS1(config)#enablesecretciscoS1(config)#linevty015switch(config-if)#duplex{full|half|autoswitch(config-if)#speed{10|100|1000|autoS1(config)#intvlanS1(config-if)#ipaddressS1(config-if)#noshutdownS1(config)#ipdefault-gatewaytelnetS1#copyrunning-configstartup-Buildingconfiguration...12.3S1#copyrunning-configstartup-Buildingconfiguration...12.32:交換機端口安理解交換機的MAC表212-3實驗23這里限制f0/1接口只允許R1接入。R1(config)#intg0/0R1(config-if)#ipaddress01R1#showintGigabitEthernet0/0isup,lineprotocolisHardwareisMV96340Ethernet,addressis0019.5535.b828(biaInternetaddressisMTU1500bytes,BW100000Kbit,DLY100（此處省略S1(config)#intf0/1S1(config-if)#switchmodeS1(config-if)#switchport-securitiyS1(config-if)#switchport-securitiymaximumS1(config-if)#switchport-securitiyviolation{protect|shutdown|restrictS1(config-if)#switchport-securitiymaximumS1(config-if)#switchport-securitiyviolation{protect|shutdown|restrictS1(config-if)#switchportport-securitymac-S1(config-if)#noS1(config)#intvlan1S1(config-if)#ipaddressS1#showmac-address-MacAddress（此處省略Mac1TotalMacAddressesforthiscriterion:R1#pingTypeescapesequencetoSending5,100-byteICMPEchosto,timeoutis2Successrateis100percent(5/5),round-tripmin/avg/max=1/1/4R1(config)#intg0/0幾秒鐘后，則在S1上，出現(xiàn)：01:09:39:%PM-4-ERR_DISABLE:psecure-violationerrordetectedonFa0/1,err-disableFa0/10012.0012.0012onportFastEthernet0/1.0012.0012.0012onportFastEthernet0/1.//以上提示f0/1S1#showintFastEthernet0/1isdown,lineprotocolisdown(err-HardwareisFastEthernet,addressis0018.ba11.f503(bia0018.ba11.f503)MTU1500bytes,BW100000Kbit,DLY100usec,reliability255/255,txload1/255,rxload和“noshutdown”命令可以重新打開該接口。4S1#showport-SecurePortSecurityViolationSecurity110TotalAddressesinSystem(excludingmacper:MaxAddresseslimitinSystem(excludingonemacperport):12.43:交換機的密碼恢（1）交換機的密碼恢復步驟23Catalyst3560（Catalyst2950）交換機的密碼恢復BaseethernetMACAddress:00:18:ba:11:f5:00Xmodemfilesystemisavailable.Thepassword-recoverymechanismisThesystemhasbeeninterruptedpriortoinitializingflashfilesystem.Thefollowingcommandswillinitializetheflashfilesystem,andfinishloadingtheoperatingflashfilesystem.Thefollowingcommandswillinitializetheflashfilesystem,andfinishloadingtheoperatingsystemflash_init命Initializingflashfs[0]:3files,1flashfs[0]:0orphanedfiles,0orphaneddirectoriesflashfs[0]:Totalbytes:32514048flashfs[0]:Bytesused:6076928flashfs[0]:Bytesavailable:26437120flashfs[0]:flashfsfscktook12seconds....doneInitializingBootSectorFilesystem(bs)installed,fsid:3Settingconsolebaudrateto9600...loadhelperdirDirectoryof235---private-26437120bytesavailable(6076928bytes（5）renameflash:config.textflash:config.old當出現(xiàn)如下提示時，輸入N：Continuewiththeconfigurationdialog?[yes/no]:renameflash:config.oldflash:config.textSwitch#copyflash:config.textsystem:running-S1#conftS1(config)#enablesecretciscoS1#copyrunning-configstart-（1）交換機的IOS12-4實驗4（1）交換機的IOS12-4實驗4交換機如果已經正常開機，則IOS可以TFTP服務器上恢復，具體步驟請參見路由器的恢復步驟。然而如果交換機無法正常開機，IOS的恢復要使用XModem方式，該方式是concoleIOS9600bps，switch:switch:switch:copyxmodem:flash:c2950-i6q4l2-mz.121-該命令的含義是通過xmodem方式拷貝文件，保存在FLASH，文件名為BegintheXmodemorXmodem-1Ktransfernow...12.6章小密碼IOS恢復方法卻和路由器有較大差別。為了減少非法設備12.6章小密碼IOS恢復方法卻和路由器有較大差別。為了減少非法設備的接入，可以在交換機上配置端口安全特性。表12-1是本章出現(xiàn)的命令。12-1duplex{full|half|autos