创建VLAN |
vlan XX |
vlan XX |
vlan XX |
vlan XX |
查看VLAN |
display vlan XX |
display vlan XX |
show vlan XX |
show vlan XX |
删除VLAN |
undo vlan |
undo vlan |
no vlan |
no vlan |
进入VLAN接口视图 |
interface vlan XX |
interface vlan XX |
interface vlan XX |
interface vlan XX |
配置IP地址 |
ip add X.X.X.X Y.Y.Y.Y |
ip add X.X.X.X Y.Y.Y.Y |
ip add X.X.X.X Y.Y.Y.Y |
ip add X.X.X.X Y.Y.Y.Y |
配置接口为access |
port link-type access |
port link-type access |
switchport mode access |
switchport mode access |
批量配置接口 |
port-group group-member G0/0/1 to G0/0/5 |
int range G1/0/1 to G1/0/5 |
int range fastEthernet0/x-x |
int range fastEthernet0/x-x |
接口加入VLAN |
port default vlan XX |
port access vlan XX |
switchport access vlan XX |
switchport access vlan XX |
配置接口为trunk |
port link-type trunk |
port link-type trunk |
switchport mode trunk |
switchport mode trunk |
允许xx vlan通过 |
port trunk allow-pass vlan xx |
port trunk permit vlan xx |
switchport trunk allowed vlan xx |
switchport trunk allowed vlan xx |
配置接口双工 |
duplex(half|full lauto) |
duplex(half|full lauto) |
duplex(half|full lauto) |
duplex(half|full lauto) |
配置接口速率 |
speed (100|1000) |
speed (100|1000) |
speed (100|1000) |
speed (100|1000) |
转为二层口 |
portswitch |
port link-mode bridge |
switchport |
switchport |
开启接口三层功能 |
undo portswitch |
port link-mode route |
no switchport |
no switchport |
开启STP |
stp enable |
stp global enable |
默认开启 |
spanning-tree |
改为快速生成树 |
stp mode rstp |
stp mode rstp |
spanning-tree mode rapid-pvst |
spanning-tree mode rstp |
配置STP优先级 |
stp priority (0|4096|xxxx) |
stp priority (0|4096|xxxx) |
spanning-tree vlan XX priority (0|4096|xxxx) |
spanning-tree priority(0|4096|xxxx) |
配置边缘端口 |
stp edged-port enable |
stp edged-port |
spanning-tree portfast |
spanning-tree portfast |
查看生成树状态 |
display stp brief |
display stp brief |
show spanning-tree summary |
show spanning-tree summary |
创建端口聚合组 |
interface eth-trunk 1 |
int Bridge-Aggregation 1 |
interface port-channel 1 |
int aggregateport 1 |
配置为lacp模式 |
mode lacp |
link-aggregation mode dynamic |
接口下channel-group 1 mode active |
接口下port-group 1 mode active |
接口下加入聚合组 |
eth-trunk 1 |
port link-aggregation group 1 |
channel-group 1 mode active |
port-group 1 mode active |
配置聚合口为acc或trunk |
参考普通接口配置 |
参考普通接口配置 |
参考普通接口配置 |
参考普通接口配置 |
查看聚合组 |
display eth-trunk |
display link-aggregation verbose Bridge-Aggregation |
show etherchannel summary |
show aggregatePort summary |
创建高级ACL |
acl 3000 (3000-3999) |
acl advanced 3000 (3000-3999) |
不需要先创建(100-199) |
不需要先创建(100-199) |
配置规则 |
rule 5 permit tcp source 192.168.1.0 0.0.0.255 destination 192.168.2.2 0.0.0.0 destination-port eq 80 |
rule 5 permit tcp source 192.168.1.0 0.0.0.255 destination 192.168.2.2 0.0.0.0 destination-port eq 80 |
access-list 100 permit tcp 192.168.1.0 0.0.0.255 192.168.2.2 0.0.0.0 eq 80 |
access-list 100 permit tcp 192.168.1.0 0.0.0.255 192.168.2.2 0.0.0.0 eq 80 |
接口应用ACL |
traffic-filter inbound acl 3000 |
packet-filter 3000 inbound |
ip access-group 100 in |
ip access-group 100 in |
查看ACL |
display acl all |
display acl all |
show access-lists |
show access-lists |
最新评论
刚好需要参考一下如何写,感谢分享
555
我按照这样设置了,但还是不能登录后台
感谢分享!
感谢分享,我说怎么总是登录出问题。默认那个都缓存挺坑的。
k看看看
可以的 可以的
666666