實施以太網（乾頤堂首發(fā)CCNA200-301v1.0）UsingtheCommand-LineInterfaceyzingEthernetLANSwitchingConfiguringBasicSwitchManagementConfiguringandVerifyingSwitchInterfaces（乾頤堂首發(fā)CCNA200-301v1.0）思科交換機的物理連接器叫做interface或者port（接口/端口）思科將這一系列交換機上的操作系統稱為：InternetworkOperatingSystem(除了控制交換機的性能和行為外，CiscoIOS還為人類定義了一個界面，稱為CLI針對網絡設備的三種主 方法vsCablingtheConsole使用USBCOM1//COM端口編號8bit1bit停止位無AccessingtheCLI netand通 UserEnableUserandEnable(Privileged)>#代表處 模模式【enable】可以執(zhí)行一些功能強 令，比如重啟設PasswordSecurityforCLIAccessfromthe CLIError%AmbiguousNotenoughcharacterswere?????SwitchX#clock%pleteSwitchX#clockset%plete wereleftofftheendoftheSwitchX#>SwitchX#>clockset19:50:0025^%Invalidinputdetectedat"^"Thecaret(^)indicateswherethecommandinterpretercannotdeciphertheCLIHelpCtrl+w

SW1#showrunning-configBuildingconfiguration...Currentconfiguration:819!!Lastconfigurationchangeat12:13:47EETFriDec13!versionservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryptionservicecompress-config!hostname!

乾頤堂首 A（200-301）Routing&Switching實戰(zhàn)

SW1#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.SW1(config)#interfaceethernet0/0StoringSwitchConfigurationRAM——Flash——用 系統鏡像或者其它文件，類似于電腦的硬ROM——只 器 交換機的引導程序，開機時引導交換機找到系統鏡像文NVRAM——非易失 器，用 啟動配置文SW1#copyrunning-configstartup-configDestinationfilename[startup-config]?SW1#copyrunning-configstartup-configDestinationfilename[startup-config]?BuildingCompressedconfigurationfrom819bytesto551bytes[OK]ThreemethodstoaccessaswitchCablingoptionsforaconsoleACiscoswitch’sdefaultconsoleportNavigationbetweenuser,enable,andglobalconfigAlistofconfigurationmodeprompts,thenameoftheconfigurationmode,andthecommandusedtoreacheachmodeThenamesandpurposesofthetwoconfigurationfilesinaswitchoryzingEthernetLAN（乾頤堂首發(fā)CCNA200-301v1.0）1、NetworkRoleandfunctionofnetworkL2andL3DescribeswitchingMAClearningandFrame

FrameMACaddress2、NetworkDescribetheneedforandbasicoperationsofRapidPVST+SpanningTreeProtocolandidentifybasic 乾頤堂首 A（200-301）Routing&Switching實戰(zhàn)1、根據目標MAC地址決定轉發(fā)2、學習數據幀中的源MAC3、通過生成樹協議與其它交換機創(chuàng)建無環(huán)環(huán)境，Aswitch’sMACaddresstableisalsocalledtheswitchingtable,orbridgingtable,oreventheContent-AddressableMemory(CAM)table,inreferencetothetypeofphysicalmemoryusedtostorethe那么，圖中列出的MAC地址記錄listMAC+址來構建地址表。如果幀進入交換機，并且源MAC地址不MAC+重點關注學習過程以及MAC交換機將目的使用稱為交換機將目的使用稱為泛洪的過程對其進行轉發(fā)。當將幀轉發(fā)出所有接口（入接口除外）LAN交換機的第三個主要功能是防止環(huán)路，這是由生成樹協議（STP）如果沒有STP為了防止出現循環(huán)幀，STP 某些端口轉發(fā)幀，以便在任何一對LAN網段之間僅存在一條活動路徑Larryto對于透明網橋和交換機，STP的行為相同。因此，在討SwitchesforwardframesbasedonthedestinationMACSwitcheslearnMACSwitchesuseSTPtopreventloopsbycausingsomeinterfacestoblock,meaningthattheydonotsendorreceiveframes.HandsOn乾頤堂首 所有接口都分配給VLAN1Usetheerasestartup-configEXECcommandtoerasethestartup-configUsethedeletevlan.datEXECcommandtodeletetheVLANconfigurationUsethereloadEXECcommandtoreloadtheswitch(therebyusingtheemptystartup-config,withnoVLANinformationconfigured)ConfigurethehostnameSW1commandtosettheswitchclearmacaddress-table

思考SW1和SW2之間的接口上的MACThreemainfunctionsofaLANProcesstoforwardaknownunicastProcesstoforwardaknownunicast,secondProcesstolearnMACSummaryofswitchforwardingTheshowmacaddress-tabledynamicknownunicastSpanningTreeProtocolunknownunicastMACaddress 1.0Network1.6ConfigureandverifyIPv4addressingand4.0IP4.6Configureandverify and4.8Configurenetworkdevicesforremoteaccessusing5.0Security5.3ConfiguredeviceaccesscontrolusinglocalSecuringusermodeandprivilegedmodewithsimpleSecuringusermodeaccesswithlocalSecuringusermodeaccesswithexternalauthenticationSecuringremoteaccesswithSecure SW1#configureSW1#configureEnterconfigurationcommands,oneperline.EndwithCNTL/Z.SW1(config)#enablesecretloveSW1(config)#lineconsole0%Logindisabledonline0,until'password'issetSW1(config-line)#passwordfaithSW1(config)#linevty04SW1(config-line)#passwordhopeshowrunning-showip

SW1#configureEnterconfigurationcommands,oneperline.EndwithCNTL/Z.SW1(config)#hostnameSW1SW1(config)#ip -nameSW1(config)#cryptokeygeneratersaThenameforthekeyswillbe:Choosethesizeofthekeymodulusintherangeof360to2048foryourGeneralPurposeKeys.Choosingakeymodulusgreaterthan512maytakeafewHowmanybitsinthemodulus[512]:%Generating1024bitRSAkeys,keyswillbenon-exportable...[OK](elapsedtimewas4seconds)SW1(config)#ipsshversion2SW1(config)#linevty015SW1(config-line)#loginlocalSW1(config-line)#transportinputsshSW1(config-line)#exitSW1(config)#usernamewendellpasswordodomSW1(config)#usernamechrispasswordyoudamanSW1(config)#^ZHostandSwitchIPConfiguringIPv4onaVerifyingIPv4onalogg