Shulou(Shulou.com)06/01 Report--

Basic commands for new switch configuration

Switch

Switch# configure terminal

Switch (config) # hostname 9F-4 sets the switch name to 9F-4

9F-4 (config) # username test secret 1234.com sets the ciphertext password with the username test

9F-4 (config) # enable secret 1234.com sets the ciphertext password for enable

9F-4 (config) # vlan 800New vlan

9F-4 (config-vlan) # name Mgmt sets the vlan name

9F-4 (config) # vlan 200

9F-4 (config-vlan) # name User

9F-4 (config-vlan) # ip address 172.16.112.5 255.255.255.0 set IP for vlan 800s (manage IP)

9F-4 (config-vlan) # exit exits vlan editing

9F-4 (config) # interface gigabitEthernet 1-0-23

9F-4 (config-if) # switchport mode access configuration vlan

9F-4 (config-if) # switchport access vlan 200

9F-4 (config-if) # spanning-tree portfast setting Port Quick start

9F-4 (config-if) # description menjin port configuration name is menjin

9F-4 (config-if) # speed 10 sets the speed to 10m

9F-4 (config-if) # duplex full sets the port to full duplex

9F-4 (config-if) # switchport trunk native vlan 200 sets the port to native

9F-4 (config) # interface Port-channel11 sets the port channel11

9F-4 (config-if) # switchport mode trunk

9F-4 (config) # interface gigabitEthernet 1-0-28

9F-4 (config-if) # switchport mode trunk configure the port to be trunk

9F-4 (config-if) # channel-group 11 mode active application channel on the port, usually in a group of two

Core switch configuration

Configure the DHCP service

Ip dhcp pool User

Network 172.16.200.0255.255.255.0 DHCP address pool

Default-router 172.16.200.1 Gateway

Dns-server 202.96.209.133 8.8.8.8 DNS

Lease 8 lease (4 hours if 0 4)

Ip dhcp excluded-address 172.16.200.2 172.16.200.10 reserved address

Ip route 0.0.0.0 0.0.0.0 172.16.10.3 default route

Ip route 0.0.0.0 0.0.0.0 172.16.11.3 20 default route

This routing configuration means that 172.16.10.3 will automatically switch to 172.16.11.3 when it is cut off.

ACL configuration (reject policy, which needs to be applied in the in direction of vlan Guest)

Ip access-list extended Guest

Deny ip 10.112.250.0 0.0.0.255 10.112.10.0 0.0.0.255

IP anti-mask of deny ip Guest segment IP anti-mask of access segment

Deny ip 10.112.250.0 0.0.0.255 10.112.12.0 0.0.0.255

Deny ip 10.112.250.0 0.0.0.255 10.112.100.0 0.0.0.255

Deny ip 10.112.250.0 0.0.0.255 10.112.50.0 0.0.0.255

Deny ip 10.112.250.0 0.0.0.255 192.168.11.0 0.0.0.255

Deny ip 10.112.250.0 0.0.0.255 10.112.1.0 0.0.0.255

Permit ip any any

!

Interface Vlan600

Description Guest

Ip address 10.112.250.1 255.255.255.0

Ip access-group Guest in

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.