項目三交換機基本配置1.教學情境2.教學導航3.預備知識4.操作實踐3.1教學情境 為保證網絡能滿足公司的需求，小王根據各種需求來設置交換機，實現交換機的各種功能。3.2教學導航1知識技能目標（1）了解交換機的分類及性能指標（2）了解交換機的工作原理（3）掌握交換機常用配置命令的使用（4）掌握交換機的初始化配置（5）掌握交換機中系統文件處理方法（6）掌握交換機中幾種密碼的設置（7）熟練掌握交換機中口令修復（8）熟練掌握交換機接口配置（9）熟練掌握交換機管理接口配置（10）熟練掌握三層交換機配置3.2教學導航2.態度目標

（1）培養學生勤于思考、認真做事的良好作風（2）培養學生勤做總結，把實驗成果歸納文檔以保存自己成果的良好習慣（3）培養學生自主學習能力和知識應用能力（4）培養學生具有良好的職業道德和較強的工作責任心（5）培養學生理論聯系實際的獨立工作和團隊協作能力3.3交換機概述3.3.1交換機的組成（1）交換機的CPU（2）交換機的端口ethernet、Fastethernet、Gigabitethernet、console（3）存儲介質主要有只讀存儲器ROMBIOS開機自檢COMS閃存FLASH存放IOS文件非易失性隨機存儲器NVRAM存放配置文件startup-config動態隨機存儲器DRAMCPU處理系統數據和文件

3.3交換機概述3.3.2交換機的交換原理

交換機是一種基于MAC地址識別，能完成封裝轉發數據幀功能的網絡設備。交換機可以學習MAC地址，并把其存放在內部地址表中，通過在數據幀的始發者和目標接收者之間建立零時的交換路徑，使數據幀直接從源地址到達目的地址132224PC3PC1PC2PC4switch1.PC1向交換機發送廣播尋找PC2PC1和PC2通信2.交換機向連接的所有PC發送廣播3.PC2響應交換機廣播請求4.交換機把PC2的回復轉發給PC13.3交換機概述3.3.3交換機的分類1.按網絡覆蓋范圍分廣域網交換機、局域網交換機2、按網絡傳輸介質和傳輸速度分以太網交換機、快速以太網交換機、千兆以太網交換機、10千兆以太網交換機、FDDI、ATM令牌交換機3、按接口結構分固定接口交換機、模塊化交換機4、按應用層次分接入層交換機、匯聚層交換機、核心層交換機5、按網絡管理功能分網絡管理員型交換機非網絡管理員型交換機3.3交換機概述3.3.4交換機的性能指標1、接口支持10Mb/s、100Mb/s、1000Mb/s、10GMb/s。4口、8口、24口、48口2、背板帶寬背板帶寬的最小值為交換機所有接口的帶寬之和3、吞吐量沒有丟幀的情況下發送和接收數據幀所能達到最大速率4、延遲收到第一幀和發出第一幀的時間間隔

5、緩存緩存暫時存儲等待轉發的數據6、MAC地址數量MAC地址表的維護能力

3.3交換機概述3.3.5沖突域與廣播域沖突域：是指若干在同一物理介質相連接的設備，其中任意兩臺設備同時訪問該介質會導致沖突的區域。廣播域：是指網絡中若干在同一條物理介質相連接的設備，可以相互接收廣播消息3.4操作實踐3.4.1交換機的初始化3.4.2交換機的主機名、密碼配置3.4.3遠程登錄交換機的配置3.4.4交換機接口配置3.4.5交換機配置文件操作3.4.6交換機MAC地址表配置3.4.7交換機的口令修復3.4.8三層交換機接口配置3.4操作實踐3.4.1交換機的初始化SystemBootstrap,Version12.1(3r)T2,RELEASESOFTWARE(fc1)Copyright(c)2000byciscoSystems,Inc.cisco2811(MPC860)processor(revision0x200)with60416K/5120KbytesofmemorySelfdecompressingtheimage:##########################################################################[OK]RestrictedRightsLegendUse,duplication,ordisclosurebytheGovernmentissubjecttorestrictionsassetforthinsubparagraph(c)oftheCommercialComputerSoftware-RestrictedRightsclauseatFARsec.52.227-19andsubparagraph(c)(1)(ii)oftheRightsinTechnicalDataandComputerSoftwareclauseatDFARSsec.252.227-7013.ciscoSystems,Inc.170WestTasmanDriveSanJose,California95134-1706CiscoIOSSoftware,2800Software(C2800NM-ADVIPSERVICESK9-M),Version12.4(15)T1,RELEASESOFTWARE(fc2)TechnicalSupport:/techsupportCopyright(c)1986-2007byCiscoSystems,Inc.CompiledWed18-Jul-0706:21bypt_rel_teamImagetext-base:0x400A925C,data-base:0x4372CE20ThisproductcontainscryptographicfeaturesandissubjecttoUnitedStatesandlocalcountrylawsgoverningimport,export,transferanduse.DeliveryofCiscocryptographicproductsdoesnotimplythird-partyauthoritytoimport,export,distributeoruseencryption.Importers,exporters,distributorsandusersareresponsibleforcompliancewithU.S.andlocalcountrylaws.Byusingthisproductyouagreetocomplywithapplicablelawsandregulations.IfyouareunabletocomplywithU.S.andlocallaws,returnthisproductimmediately.AsummaryofU.S.lawsgoverningCiscocryptographicproductsmaybefoundat:/wwl/export/crypto/tool/stqrg.htmlIfyourequirefurtherassistancepleasecontactusbysendingemailtoexport@.cisco2811(MPC860)processor(revision0x200)with60416K/5120KbytesofmemoryProcessorboardIDJAD05190MTZ(4292891495)M860processor:partnumber0,mask492FastEthernet/IEEE802.3interface(s)239Kbytesofnon-volatileconfigurationmemory.62720KbytesofATACompactFlash(Read/Write)CiscoIOSSoftware,2800Software(C2800NM-ADVIPSERVICESK9-M),Version12.4(15)T1,RELEASESOFTWARE(fc2)TechnicalSupport:/techsupportCopyright(c)1986-2007byCiscoSystems,Inc.CompiledWed18-Jul-0706:21bypt_rel_team---SystemConfigurationDialog---Continuewithconfigurationdialog?[yes/no]:yesAtanypointyoumayenteraquestionmark'?'forhelp.Usectrl-ctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Basicmanagementsetupconfiguresonlyenoughconnectivityformanagementofthesystem,extendedsetupwillaskyoutoconfigureeachinterfaceonthesystemWouldyouliketoenterbasicmanagementsetup?[yes/no]:yesConfiguringglobalparameters:Enterhostname[Router]:e109TheenablesecretisapasswordusedtoprotectaccesstoprivilegedEXECandconfigurationmodes.Thispassword,afterentered,becomesencryptedintheconfiguration.Enterenablesecret:123Theenablepasswordisusedwhenyoudonotspecifyanenablesecretpassword,withsomeoldersoftwareversions,andsomebootimages.Enterenablepassword:456Thevirtualterminalpasswordisusedtoprotectaccesstotherouteroveranetworkinterface.Entervirtualterminalpassword:789ConfigureSNMPNetworkManagement?[no]:noCurrentinterfacesummaryInterfaceIP-AddressOK?MethodStatusProtocolFastEthernet0/0unassignedYESmanualadministrativelydowndownFastEthernet0/1unassignedYESmanualadministrativelydowndownVlan1unassignedYESmanualadministrativelydowndownEnterinterfacenameusedtoconnecttothemanagementnetworkfromtheaboveinterfacesummary:fastethernet0/0ConfiguringinterfaceFastEthernet0/0:ConfigureIPonthisinterface?[yes]:%Pleaseanswer'yes'or'no'.ConfigureIPonthisinterface?[yes]:yesIPaddressforthisinterface:Subnetmaskforthisinterface[]:Thefollowingconfigurationcommandscriptwascreated:!hostnamee109enablesecret5$1$mERr$3HhIgMGBA/9qNmgzccuxv0enablepassword456linevty04password789!interfaceVlan1shutdownnoipaddress!interfaceFastEthernet0/0noshutdownipaddress!interfaceFastEthernet0/1shutdownnoipaddress!end[0]GototheIOScommandpromptwithoutsavingthisconfig.[1]Returnbacktothesetupwithoutsavingthisconfig.[2]Savethisconfigurationtonvramandexit.Enteryourselection[2]:2Buildingconfiguration...%LINK-5-CHANGED:InterfaceVlan1,changedstatetoup%LINK-5-CHANGED:InterfaceFastEthernet0/0,changedstatetoup%LINK-5-CHANGED:InterfaceFastEthernet0/1,changedstatetoup%LINK-5-CHANGED:InterfaceVlan1,changedstatetoadministrativelydown%LINK-5-CHANGED:InterfaceFastEthernet0/1,changedstatetoadministrativelydown%SYS-5-CONFIG_I:Configuredfromconsolebyconsole[OK]Usetheenabledmode'configure'commandtomodifythisconfiguration.PressRETURNtogetstarted!3.4操作實踐3.4.2交換機的主機名、密碼配置1配置主機名2配置密碼Switch>Switch>enSwitch#conftSwitch(config)#hostSwitch(config)#hostnameSW1SW1(config)#SW1(config)#enablepasswordciscoShowrunning-configSW1#shrunBuildingconfiguration...Currentconfiguration:1030bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameSW1!enablepasswordcisco!!!interfaceFastEthernet0/1!interfaceFastEthernet0/2!interfaceFastEthernet0/3!interfaceFastEthernet0/4!interfaceFastEthernet0/5!interfaceFastEthernet0/6!interfaceFastEthernet0/7!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!interfaceFastEthernet0/13!interfaceFastEthernet0/14!interfaceFastEthernet0/15!interfaceFastEthernet0/16!interfaceFastEthernet0/17!interfaceFastEthernet0/18!interfaceFastEthernet0/19!interfaceFastEthernet0/20!interfaceFastEthernet0/21!interfaceFastEthernet0/22!interfaceFastEthernet0/23!interfaceFastEthernet0/24!interfaceGigabitEthernet1/1!interfaceGigabitEthernet1/2!interfaceVlan1noipaddressshutdown!!linecon0!linevty04loginlinevty515login!!endhostnameenablepasswordSwitch>enSwitch#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Switch(config)#hostSwitch(config)#hostnameSW1SW1(config)#enSW1(config)#enaSW1(config)#enableseSW1(config)#enablesecretciscoSW1(config)#exit%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleSW1#shrunBuildingconfiguration...Currentconfiguration:1055bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameSW1!enablesecret5$1$mERr$hx5rVt7rPNoS4wqbXKX7m0!!!interfaceFastEthernet0/1!interfaceFastEthernet0/2!interfaceFastEthernet0/3!interfaceFastEthernet0/4--More--配置VTY密碼Switch>enSwitch#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Switch(config)#hostSwitch(config)#hostnameSW1SW1(config)#enaSW1(config)#enablepassSW1(config)#enablepassword123SW1(config)#lineSW1(config)#linevty015SW1(config-line)#passSW1(config-line)#password456SW1(config-line)#loginSW1(config-line)#exitSW1(config)#exitSW1#%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleSW1#wrBuildingconfiguration...[OK]Showrunning-confighostnameSW1!enablepassword123!!!interfaceFastEthernet0/1!interfaceFastEthernet0/2!interfaceFastEthernet0/3!interfaceFastEthernet0/4!interfaceFastEthernet0/5!interfaceFastEthernet0/6!interfaceFastEthernet0/7!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!interfaceFastEthernet0/13!interfaceFastEthernet0/14!interfaceFastEthernet0/15!interfaceFastEthernet0/16!interfaceFastEthernet0/17!interfaceFastEthernet0/18!interfaceFastEthernet0/19!interfaceFastEthernet0/20!interfaceFastEthernet0/21!interfaceFastEthernet0/22!interfaceFastEthernet0/23!interfaceFastEthernet0/24!interfaceGigabitEthernet1/1!interfaceGigabitEthernet1/2!interfaceVlan1ipaddress!!linecon0!linevty04password456loginlinevty515password456login!!end配置console口Switch(config)#hostnameSW1SW1(config)#lineconSW1(config)#lineconsole?<0-0>FirstLinenumberSW1(config)#lineconsole0SW1(config-line)#passSW1(config-line)#password123SW1(config-line)#loginSW1(config-line)#exitSW1(config)#exitShowrunning-configSW1#shrunBuildingconfiguration...Currentconfiguration:1027bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameSW1!!!interfaceFastEthernet0/1!interfaceFastEthernet0/2!interfaceFastEthernet0/3!interfaceFastEthernet0/4!interfaceFastEthernet0/5!interfaceFastEthernet0/6!interfaceFastEthernet0/7!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!interfaceFastEthernet0/13!interfaceFastEthernet0/14!interfaceFastEthernet0/15!interfaceFastEthernet0/16!interfaceFastEthernet0/17!interfaceFastEthernet0/18!interfaceFastEthernet0/19!interfaceFastEthernet0/20!interfaceFastEthernet0/21!interfaceFastEthernet0/22!interfaceFastEthernet0/23!interfaceFastEthernet0/24!interfaceGigabitEthernet1/1!interfaceGigabitEthernet1/2!interfaceVlan1noipaddressshutdown!!linecon0password123login!linevty04loginlinevty515login!!end配置管理地址SW1(config)#intvlan1SW1(config-if)#ipaddSW1(config-if)#ipaddressSW1(config-if)#noshutdSW1(config-if)#noshutdown配置接口描述Switch(config)#intf0/1Switch(config-if)#description?LINEUpto240charactersdescribingthisinterfaceSwitch(config-if)#descriptiontoe109Switch(config-if)#exitSwitch(config)#exitShowrunning-configSwitch#shrunBuildingconfiguration...Currentconfiguration:1030bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameSwitch!!!interfaceFastEthernet0/1descriptiontoe109!interfaceFastEthernet0/2!interfaceFastEthernet0/3!interfaceFastEthernet0/4配置接口帶寬Switch(config)#intf0/1Switch(config-if)#spSwitch(config-if)#speeSwitch(config-if)#speed?10Force10Mbpsoperation100Force100MbpsoperationautoEnableAUTOspeedconfigurationSwitch(config-if)#speed10Switch(config-if)#exitSwitch(config)#exitShowrunning-configSwitch#shrunBuildingconfiguration...Currentconfiguration:1040bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameSwitch!!!interfaceFastEthernet0/1descriptiontoe109

speed10!Showrunning-configSwitch#shintf0/1FastEthernet0/1isdown,lineprotocolisdown(disabled)HardwareisLance,addressis0002.4ad9.0701(bia0002.4ad9.0701)Description:toe109

BW10000Kbit,DLY1000usec,reliability255/255,txload1/255,rxload1/255EncapsulationARPA,loopbacknotsetKeepaliveset(10sec)Half-duplex,10Mb/sinputflow-controlisoff,outputflow-controlisoffARPtype:ARPA,ARPTimeout04:00:00Lastinput00:00:08,output00:00:05,outputhangneverLastclearingof"showinterface"countersneverInputqueue:0/75/0/0(size/max/drops/flushes);Totaloutputdrops:0Queueingstrategy:fifoOutputqueue:0/40(size/max)5minuteinputrate0bits/sec,0packets/sec5minuteoutputrate0bits/sec,0packets/sec956packetsinput,193351bytes,0nobufferReceived956broadcasts,0runts,0giants,0throttles0inputerrors,0CRC,0frame,0overrun,0ignored,0abort0watchdog,0multicast,0pauseinput0inputpacketswithdribbleconditiondetected--More--配置接口雙工模式Switch(config)#intf0/1Switch(config-if)#duplex?autoEnableAUTOduplexconfigurationfullForcefullduplexoperationhalfForcehalf-duplexoperationSwitch(config-if)#duplexhalSwitch(config-if)#duplexhalfSwitch(config-if)#exitShowrunning-configwitch#shrunBuildingconfiguration...Currentconfiguration:1022bytes!version12.2noservicetimestampslogdatetimemsecnos