1 / 26

网络设计与管理实践

网络设计与管理实践. 3.EtherChannel 、 ACL 和单臂路由. 交换机基本访问方法. 通过 telnet 访问交换机 配置交换机 IP conf t line vty 0 4 password 0 cisco login. 保存与清除交换机配置. 察看交换机配置 show startup-config show running-config 保存配置 copy running-config startup-config write memery 清除交换机配置 erase nvram delete flash:config.text.

keagan
Download Presentation

网络设计与管理实践

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. 网络设计与管理实践 3.EtherChannel、ACL和单臂路由

  2. 交换机基本访问方法 • 通过telnet访问交换机 • 配置交换机IP • conf t • line vty 0 4 • password 0 cisco • login

  3. 保存与清除交换机配置 • 察看交换机配置 • show startup-config • show running-config • 保存配置 • copy running-config startup-config • write memery • 清除交换机配置 • erase nvram • delete flash:config.text

  4. EtherChannel

  5. EtherChannel配置方法 • Switch#configure terminal • Switch(config)#interface range fasttethernet0/1 -2 • Switch(config-if-range)#switchport mode access • Switch(config-if-range)#switchport access vlan 10 • Switch(config-if-range)#channel-group 5 mode desirable • Switch(config-if-range)#end • Switch#configure terminal • Switch(config)#interface port-channel channel-number

  6. 访问控制列表ACLs

  7. 访问控制列表(ACLs) • 1-99 IP standard access list • 100-199 IP extended access list • 1300-1999 IP standard access list (expanded range) • 2000-2699 IP extended access list (expanded range)

  8. 访问控制列表命令格式 • (config)#access-list <1-99> <permit|deny> <ip-addr mask | any | host ip-addr > [log] • (config)#access-list <100-199> <permit|deny> protocol <ip-addr mask|any|host ip-addr> <ip-addr mask|any|host ip-addr> {….} • (config)#ip access-list <standard|extended> <id|name>

  9. 访问控制列表(ACLs) • Switch(config)# access-list 6 permit 172.20.128.64 0.0.0.0 • Switch(config)# end • Switch(config)# interface gigabitethernet0/1 • Switch(config-if)# ip access-group 6 in • Switch(config)# access-list 106 deny tcp any any eq 80 • Switch(config)# access-list 106 permit ip any any • Switch(config)# interface gigabitethernet0/2 • Switch(config-if)# ip access-group 106 in

  10. 访问控制列表 • Switch(config)# access-list 2 permit 36.0.0.0 0.255.255.255 • Switch(config)# access-list 2 deny 56.0.0.0 0.255.255.255 • Switch(config)# interface gigabitethernet0/1 • Switch(config-if)# ip access-group 2 in • Switch(config)# access-list 102 permit tcp any 128.88.0.0 0.0.255.255 eq 23 • Switch(config)# access-list 102 permit tcp any 128.88.0.0 0.0.255.255 eq 25 • Switch(config)# interface gigabitethernet0/1 • Switch(config-if)# ip access-group 102 in

  11. 访问控制列表 • Switch(config)# ip access-list extended marketing_group • Switch(config-ext-nacl)# permit tcp any 171.69.0.0 0.0.255.255 eq telnet • Switch(config-ext-nacl)# deny tcp any any • Switch(config-ext-nacl)# permit ip any any • Switch(config)# interface gigabitethernet0/1 • Switch(config-if)# ip access-group marketing_group in

  12. 访问控制列表 • Switch(config)# ip access-list standard prevention • Switch(config-std-nacl)# remark Do not allow Jones subnet through • Switch(config-std-nacl)# deny 171.69.0.0 0.0.255.255 • Switch(config)# ip access-list extended telnetting • Switch(config-ext-nacl)# remark Do not allow Jones subnet to telnet out • Switch(config-ext-nacl)# deny tcp 171.69.0.0 0.0.255.255 any eq telnet

  13. SPAN(Switched Port Analyzer )

  14. SPAN • Switch(config)# no monitor session 1 • Switch(config)# monitor session 1 source interface fastethernet0/1 • Switch(config)# monitor session 1 destination interface fastethernet0/8 encapsulation dot1q • Switch(config)# end

  15. SNMP

  16. 配置SNMP • 关闭SNMP配置 • conf t • no snmp-server • end • 设置SNMP-server • conf t • snmp-server community string [view view-name] [ro | rw] [access-list-number] • access-list access-list-number {deny | permit} source [source-wildcard]

  17. 单播路由

  18. 配置路由接口 • Step 1 configure terminal • Step 2 interface interface-id • Step 3 no switchport • Step 4 ip address ip-address subnet-mask • Step 5 no shutdown • Step 6 end

  19. Subnet Zero • 子网地址零容易造成子网地址和网络地址的混乱。例如：131.108.0.0/24，子网地址网络地址都是131.108.0.0。 • 如果要使用subnet zero • Step 1 configure terminal • Step 2 ip subnet-zero • Step 3 end

  20. 处理广播包操作 • 直接广播 • Step 1 configure terminal • Step 2 interface interface-id • Step 3 ip directed-broadcast [access-list-number] • Step 4 exit • Step 5 ip forward-protocol {udp [port] | nd | sdns} • Step 6 end

  21. 处理广播包操作 • 转发UDP • Step 1 configure terminal • Step 2 interface interface-id • Step 3 ip helper-address address • Step 4 exit • Step 5 ip forward-protocol {udp [port] | nd | sdns} • Step 6 end

  22. IP单播路由 • Step 1 configure terminal • Step 2 ip routing • Step 3 router ip_routing_protocol • Step 4 end

  23. 单臂路由

  24. 单臂路由 • interface FastEthernet0/0.1 • encapsulation isl 1 • ip address 10.10.10.1 255.255.255.0 • no ip redirects • interface FastEthernet0/0.2 • encapsulation isl 2 • ip address 10.10.11.1 255.255.255.0 • no ip redirects

  25. 背靠背连接 Router B Router C V.35电缆 Subnet B 192.168.2.0/25 Subnet C 192.168.3.0/23 Subnet F 10.128.128.192/26

  26. 背靠背连接方法 • clock rate 8000000

More Related