雨伞:Cisco交换机以太网经典配置

Cisco交换机以太网经典配置2009年09月10日 星期四 上午 11:28 【导读】 很经典啊，我用的。

Configurations

The configurations in this document were implemented in an isolated lab environment. The configurations were cleared by issuing the write erase command on the routers, and the clear config all command on the switches to ensure that all devices have a default configuration. Make sure you understand the potential impact of any configuration or command on your network before using it.

Catalyst 6500 Switch

Note: The following screen captures show the commands that were entered on the Catalyst 6500 switch. Comments between the commands are added in blue italics to explain certain commands and steps.

!-- Set the IP address and default gateway for VLAN 1 for management purposes.

Catalyst6500> (enable) set int sc0 10.10.10.2 255.255.255.0

Interface sc0 IP address and netmask set.

Catalyst6500> (enable) set ip route default 10.10.10.1

Route added.

!-- Set the VTP mode.

!-- In our example, we have set the mode to be transparent. !-- Depending on your network, set the VTP mode accordingly. !-- For details on VTP, refer to Understanding and Configuring VLAN Trunk Protocol (VTP).

Catalyst6500> (enable) set vtp mode transparent

VTP domain modified

!-- Adding VLAN 2. VLAN 1 already exists by default.

Catalyst6500> (enable) set vlan 2

VLAN 2 configuration successful

!-- Adding port 3/4 to VLAN 2. Port 3/3 is already in VLAN 1 by default.

Catalyst6500> (enable) set vlan 2 3/4

VLAN 2 modified.

VLAN 1 modified.

VLAN Mod/Ports

---- -----------------------

2 3/4

! -- Set the port speed and duplex at 100 and full. One of

!-- the requirements for EtherChannel to work is for speed and duplex to be the same on

!-- both sides. To guarantee this, we will hard code both speed and duplex on ports 3/1 and 3/2.

Catalyst6500> (enable) set port speed 3/1-2 100

Ports 3/1-2 transmission speed set to 100Mbps.

Catalyst6500> (enable) set port duplex 3/1-2 full

Ports 3/1-2 set to full-duplex.

! -- Enable FEC on ports 3/1 and 3/2.

! -- Becuase routers do not understand Port Aggregation Protocol(PAgP),

! -- we set the channel mode to on which causes ports to channel,

! -- but not generate PAgP frames.

Catalyst6500> (enable) set port channel 3/1-2 on

Port(s) 3/1-2 are assigned to admin group 105.

Port(s) 3/1-2 channel mode set to on.

! -- Enable trunking on ports 3/1 and 3/2.

! -- Becuase routers do not understand Dynamic Trunking Protocol(DTP),

! -- we set the trunking mode to nonegotiate which causes ports to trunk,

! -- but not generate DTP frames.

! -- Notice that becuase we configured EtherChannel first,

! -- any trunk settings applied now to one port automatically apply to all other ports in the channel.

! -- Enter the trunking encapsulation as either isl ...

Catalyst6500> (enable) set trunk 3/1 nonegotiate isl Port(s) 3/1-2 trunk mode set to nonegotiate.

Port(s) 3/1-2 trunk type set to isl.

! -- ... or as dot1q.

! -- Make sure the native VLAN(default is VLAN 1) matches across the link.

! -- For more information on the native VLAN and 802.1q trunking, refer to

! -- Trunking Between Catalyst 4000, 5000, and6000 Family Switches Using 802.1q Encapsulation.

Catalyst6500> (enable) set trunk 3/1 nonegotiate dot1q

Port(s) 3/1-2 trunk mode set to nonegotiate.

Port(s) 3/1-2 trunk type set to dot1q.

Catalyst6500> (enable) show config

This command shows non-default configurations only.

Use 'show config all' to show both default and non-default configurations.

.........

..................

..

begin

!

# ***** NON-DEFAULT CONFIGURATION *****

!

!

#time: Thu May 2 2002, 01:26:26

!

#version 5.5(14)

!

!

#system

set system name Catalyst6500

!

#!

#vtp

set vtp mode transparent

set vlan 1 name default type ethernet mtu 1500 said 100001 state active

set vlan 2 name VLAN0002 type ethernet mtu 1500 said 100002 state active

set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active

set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active stp ieee

set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active stp ibm

set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state active

mode srb aremaxhop 7 stemaxhop 7

backupcrf off

!

#ip

set interface sc0 1 10.10.10.2/255.255.255.0 10.10.10.255

set ip route 0.0.0.0/0.0.0.0 10.10.10.1 !

#set boot command

set boot config-register 0x2102

set boot system flash bootflash:cat6000-sup.5-5-14.bin

!

#port channel

set port channel 3/1-2 105

!

# default port status is enable

!

!

#module 1 empty

!

#module 2 : 2-port 1000BaseX Supervisor

!

#module 3 : 48-port 10/100BaseTX Ethernet

set vlan 2 3/4

set port disable 3/5

set port speed 3/1-2 100

set port duplex 3/1-2 full

set trunk 3/1 nonegotiate isl 1-1005

set trunk 3/2 nonegotiate isl 1-1005

!-- If IEEE 802.1q is configured,

!-- you will see the following output instead:

set trunk 3/1 nonegotiate dot1q 1-1005

set trunk 3/2 nonegotiate dot1q 1-1005

set port channel 3/1-2 mode on

!

#module 4 : 24-port 100BaseFX MM Ethernet

!

#module 5 empty

!

#module 6 empty

!

#module 15 empty

!

#module 16 empty

end

Cisco 7500 Router

Note: The following screen captures show the commands that were entered on the Cisco 7500 router. Comments between the commands are added in blue italics to explain certain commands and steps.

! -- Configure a port-channel interface to enable FEC.

7500#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

7500(config)#int port-channel 1

01:34:10: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel1, changed

state to down

! -- Configure full-duplex to match the duplex setting on the Catalyst switch side.

7500(config-if)#full-duplex

7500(config-if)#exit

! -- If using ISL trunking, configure two port-channel sub-interfaces and enable ISL trunking

! -- by issuing the encapsulation isl command.

! -- Configure IP addresses for InterVLAN routing.

7500(config)#int port-channel 1.1

7500(config-subif)#encapsulation isl 1

7500(config-subif)#ip address 10.10.10.1 255.255.255.0

7500(config-subif)#exit

7500(config)#int port-channel 1.2

7500(config-subif)#encapsulation isl 2

7500(config-subif)#ip address 10.10.11.1 255.255.255.0

7500(config-subif)#exit

! -- If using 802.1q trunking, configure two port-channel sub-interfaces, enable 802.1q trunking

! -- by issuing the encapsulation dot1Q native command and configure the IP addresses for

! -- InterVLAN routing.

Note: The encapsulation dot1Q 1 native command was added in Cisco IOS version 12.1(3)T. If you are using an earlier version of Cisco IOS, refer to the 802.1Q Configuration for Cisco IOS Versions Earlier than 12.1(3)T section of this document to configure 802.1Q trunking on the router.

! -- Make sure the native VLAN(default is VLAN 1) matches across the link.

! -- For more information on the native VLAN and 802.1q trunking, refer to

! -- Trunking Between Catalyst 4000, 5000, and 6000 Family Switches Using 802.1q Encapsulation. 7500(config)#int port-channel 1.1

7500(config-subif)#encapsulation dot1Q 1 native

7500(config-subif)#ip address 10.10.10.1 255.255.255.0

7500(config-subif)#exit

7500(config)#int port-channel 1.2

7500(config-subif)#encapsulation dot1Q 2

7500(config-subif)#ip address 10.10.11.1 255.255.255.0

7500(config-subif)#exit

! -- Configure the FastEthernet interfaces for speed 100 depending on the port adapter.

! -- Some FastEthernet port adapters can autonegotiate speed(10 or 100) and duplex(half or full).

! -- Others are only capable of 100 (half or full).

7500(config)#int fa5/1/0

7500(config-if)#speed 100

! -- Configure the FastEthernet interfaces to be members of port-channel 1 by issuing the channel-group command.

7500(config-if)#channel-group 1

%Interface MTU set to channel-group MTU 1500.

7500(config-if)#no shut

7500(config-if)#

%Interface MTU set to channel-group MTU 1500.

FastEthernet5/1/0 added as member-1 to port-channel1

01:46:09: %LINK-3-UPDOWN: Interface FastEthernet5/1/0, changed state to up

01:46:10: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet5/1/0,

changed state to up

01:46:12: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel1,

changed state to up

Router(config-if)#exit

Router(config)#int fa 5/1/1

Router(config-if)#speed 100

Router(config-if)#channel-group 1

%Interface MTU set to channel-group MTU 1500.

Router(config-if)#no shut

Router(config-if)#

%Interface MTU set to channel-group MTU 1500.

FastEthernet5/1/1 added as member-2 to port-channel1

01:54:52: %LINK-3-UPDOWN: Interface FastEthernet5/1/1, changed state to up

01:54:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet5/1/1,

changed state to up

Router(config-if)#exit

! -- Remember to save the configuration.

7500#write memory

Building configuration...

[OK]

7500#

Note: In order to make this setup work, and to successfully ping between Workstation 1 and Workstation 2, you need to make sure that the default gateways on the workstations are setup properly. For Workstation 1, the default gateway should be 10.10.10.1 and for Workstation 2, the default gateway should be 10.10.11.1.

7500#show running-config

Building configuration...

Current configuration : 1593 bytes

!

version 12.2

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

no service single-slot-reload-enable

!

hostname 7500

!

boot system disk1:rsp-jsv-mz.122-7b.bin

!

ip subnet-zero

!

ip cef

call rsvp-sync

!

!

!

interface Port-channel1

no ip address

full-duplex

hold-queue 300 in

!

interface Port-channel1.1

encapsulation isl 1

ip address 10.10.10.1 255.255.255.0

!

interface Port-channel1.2

encapsulation isl 2

ip address 10.10.11.1 255.255.255.0

! -- If 802.1q trunking is configured,

! -- you will see the following output instead:

interface Port-channel1.1

encapsulation dot1Q 1 native

ip address 10.10.10.1 255.255.255.0

!

interface Port-channel1.2

encapsulation dot1Q 2

ip address 10.10.11.1 255.255.255.0

!

interface FastEthernet5/1/0

no ip address

no ip mroute-cache

speed 100

full-duplex

channel-group 1

!

interface FastEthernet5/1/1

no ip address

no ip mroute-cache

speed 100

full-duplex

channel-group 1

!

!

ip classless

no ip http server

ip pim bidir-enable

!

!

!

!

line con 0

line aux 0

line vty 0 4

login

!

end

7500#

802.1Q Configuration on the Cisco 7500 for Cisco IOS Versions Earlier than 12.1(3)T

In Cisco IOS versions earlier than 12.1(3)T, the encapsulation dot1Q 1 native command under the subinterface was not available. However, it is still necessary to match the native VLAN across the link as described previously.

To configure 802.1q trunking in software versions earlier than 12.1(3)T, the IP address for VLAN 1 is configured on the main port-channel 1 interface as oppossed to a port-channel subinterface.

! -- Configure a port-channel interface to enable FEC.

7500#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

7500(config)#int port-channel 1

01:34:10: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel1, changed

state to down

! -- Configure full-duplex to match the duplex setting on the Catalyst switch side.

7500(config-if)#full-duplex 7500(config-if)#exit

! -- Do not configure an interface port-channel 1.1

!-- Instead, create a port-channel 1 main interface and configure the IP address for VLAN 1 here.

7500(config)#int port-channel 1

7500(config-if)#full-duplex

7500(config-if)#ip address 10.10.10.1 255.255.255.0

7500(config-if)#exit

7500(config)#

! -- It is still necessary to create a subinterface for VLAN 2.

7500(config)#int port-channel 1.2

7500(config-subif)#encapsulation dot1Q 2

7500(config-subif)#ip address 10.10.11.1 255.255.255.0

7500(config-subif)#exit

! -- Configure the FastEthernet interfaces for speed 100 depending on the port adapter.

! -- Some FastEthernet port adapters can autonegotiate speed(10 or 100) and duplex(half or full).

! -- Others are only capable of 100 (half or full).

7500(config)#int fa5/1/0

7500(config-if)#speed 100

! -- Configure the FastEthernet interfaces to be members of port-channel 1 by issuing the channel-group command.

7500(config-if)#channel-group 1

%Interface MTU set to channel-group MTU 1500.

7500(config-if)#no shut

7500(config-if)#

%Interface MTU set to channel-group MTU 1500.

FastEthernet5/1/0 added as member-1 to port-channel1

01:46:09: %LINK-3-UPDOWN: Interface FastEthernet5/1/0, changed state to up

01:46:10: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet5/1/0,

changed state to up

01:46:12: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel1,

changed state to up

Router(config-if)#exit

Router(config)#int fa 5/1/1

Router(config-if)#speed 100

Router(config-if)#channel-group 1

%Interface MTU set to channel-group MTU 1500.

Router(config-if)#no shut

Router(config-if)#

%Interface MTU set to channel-group MTU 1500.

FastEthernet5/1/1 added as member-2 to port-channel1

01:54:52: %LINK-3-UPDOWN: Interface FastEthernet5/1/1, changed state to up

01:54:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet5/1/1,

changed state to up

Router(config-if)#exit

! -- Remember to save the configuration.

7500#write memory

Building configuration...

[OK]

7500#

Note: Remember also that in any version of software previous to 12.2 or 12.2T for the 7000/7500 series, you will have to issue the no ip cef command globally before configuring 802.1q trunking on a subinterface. Otherwise, you will see the following error message: 802.1q encapsulation not supported with CEF configured on the interface. Refer to the Hardware and Software Requirements section of this document for more information.

7500#show running-config

Building configuration...

Current configuration : 1593 bytes

!

version 12.1

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname 7500

!

!

ip subnet-zero

!

no ip cef

!

!

!

interface Port-channel1

ip address 10.10.10.1 255.255.255.0

full-duplex

hold-queue 300 in

!

interface Port-channel1.2

encapsulation dot1Q 2

ip address 10.10.11.1 255.255.255.0

!

interface FastEthernet5/1/0

no ip address

no ip mroute-cache

speed 100

full-duplex

channel-group 1

!

interface FastEthernet5/1/1

no ip address

no ip mroute-cache

speed 100

full-duplex

channel-group 1

!

!

ip classless

no ip http server

!

!

!

line con 0

line aux 0

line vty 0 4

login

!

end

7500#