新设备建一个VLAN Ruijie>en 用户模式 Ruijie#config 特权模式
Enter configuration commands, one per line. End with CNTL/Z. Ruijie(config)#hostname shiyan 更改设备用户名 shiyan(config)#en secret xtlt 加密密码
shiyan(config)#line vty 0 4 设置虚拟终端的个数 shiyan(config-line)#password xtlt 登陆密码 shiyan(config-line)#vlan 50 设VLAN 50 shiyan(config-vlan)#name ceshi 设名子 shiyan(config-vlan)#exit
shiyan(config)#interface fastethernet0/22 进入22口
shiyan(config-if)#switchport access vlan 50 将22口加入VLAN 50 shiyan(config)#interface fastethernet0/23 进入23口
shiyan(config-if)#switchport access vlan 50 将22口加入VLAN 50 Ruijie(config-if)#no switchport access vlan 将22口删除VLAN 50 shiyan(config-if)#interface vlan 50 进入VLAN 50端口 shiyan(config-if)#*Feb 18 08:29:52: %LINEPROTO-5-UPDOWN: Line protocol on Interf
ace VLAN 50, changed state to up
shiyan(config-if)#ip add 192.168.1.1 255.255.255.0 设VLAN 50 IP Ruijie#write 写入
设置系统时间 shiyan>en Password:
shiyan#clock set 12:40:40 2 18 2009 设置系统时间 shiyan#sh clock 显示系统时间 Clock: 2009-2-18 12:40:59 shiyan#
系统重启设置
shiyan#reload in 2 test 2分钟后重启 System will reload in 120 seconds.
Ruijie#reload at 13:8 2 18 2009 newyear 在2008 2 18 13:8分重启 System will reload in 181 seconds. Ruijie#reload cancel 取消重启计划 配置信息 Ruijie>en
Ruijie#sh version 查看系统版本信息
System description : Ruijie Gigabit Routing Switch(S3750-24)
By Ruijie Netw ork
System start time : 2009-2-18 13:8:50 System hardware version : 1.50
System software version : RGNOS 10.2.00(3), Release(39231) System boot version : 10.2.34077 System CTRL version : 10.2.38550 System serial number : 1234942570126 Module information: Device-1
Hardware version : 1.5
Software version : RGNOS 10.2.00(3), Release(39231) BOOT version : 10.2.34077 CTRL version : 10.2.38550 Serial Number : 1234942570126
Ruijie#sh version devices 当前的设备信息 Device Slots Description ------ ----- ------------
1 1 RG-S3750-24
向VLAN 分配ACCESS口
Ruijie(config)#interface fastethernet0/22 进入22口配置
Ruijie(config-if)#switchport mode access 将口配成二层ACCESS口 Ruijie(config-if)#switchport access vlan 2 将口分配给vlan 2 Ruijie(config-if)#sh interface fastethernet0/22 switchport显示壮态 向TRUNK分配口
Ruijie(config-if)#switchport mode trunk 将口配成二层TRUNK口 Ruijie(config-if)#sh interface fastethernet0/19 switchport 显示壮态 Ruijie(config-if)#switchport trunk allowed vlan remove 1移出vlan口
Ruijie#del config.text 除去配置文件 Ruijie#reload 重启交换机
启二层交换例
Ruijie(config)#vlan 2
Ruijie(config-vlan)#name shiyan1 Ruijie(config-vlan)#exit Ruijie(config)#vlan 3
Ruijie(config-vlan)#name shiyan2
Ruijie(config-vlan)#interface fastethernet0/6 Ruijie(config-if)#switchport access vlan 2
Ruijie(config-if)#interface fastethernet0/12 Ruijie(config-if)#switchport access vlan 3 Ruijie(config-if)#interface fastethernet0/22 Ruijie(config-if)#switchport mode trunk
Ruijie(config-if)#switchport trunk allowed vlan remove 1
会聚例
Ruijie(config)#vlan 2
Ruijie(config-vlan)#vlan 3
Ruijie(config-vlan)#interface fastethernet0/6 Ruijie(config-if)#switchport access vlan 2 Ruijie(config-if)#interface fastethernet0/12 Ruijie(config-if)#switchport access vlan 3 Ruijie(config-if)#exit
Ruijie(config)#interface range fastethernet0/21-22 Ruijie(config-if-range)#port-group 1 Ruijie(config-if-range)#*Feb 19 15:46:28: %LINEPROTO-5-UPDOWN: Line protocol on Interface AggregatePort 1, changed state to up
*Feb 19 15:46:30: %LINK-5-CHANGED: Interface FastEthernet 0/21, changed state to
administratively down
*Feb 19 15:46:30: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet 0 /21, changed state to down
*Feb 19 15:46:30: %LINK-5-CHANGED: Interface FastEthernet 0/22, changed state to
administratively down
*Feb 19 15:46:30: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet 0 /22, changed state to down
*Feb 19 15:47:26: %LINEPROTO-5-UPDOWN: Line protocol on Interface AggregatePort 1, changed state to down
*Feb 19 15:47:28: %LINEPROTO-5-UPDOWN: Line protocol on Interface AggregatePort 1, changed state to up
Ruijie(config)#interface aggregateport 1 Ruijie(config-if)#switchport mode trunk
将端口成批加入到一个vlan
Ruijie(config)#interface range fastethernet0/1-10 Ruijie(config-if-range)#*Feb 19
15:47:58: %LINEPROTO-5-UPDOWN: Line protocol on Interface AggregatePort 1, changed state to down Ruijie(config-if-range)#switchport access vlan 2
启三层交换例
Ruijie#en Ruijie#config
Enter configuration commands, one per line. End with CNTL/Z. Ruijie(config-vlan)#vlan 2 Ruijie(config-vlan)#vlan 3 Ruijie(config-vlan)#vlan 4
Ruijie(config-vlan)#interface fastethernet0/22 Ruijie(config-if)#switchport mode trunk Ruijie(config-if)#interface fastethernet0/24 Ruijie(config-if)#switchport mode trunk Ruijie(config-vlan)#interface vlan 3
Ruijie(config-if)#ip add 192.168.3.10 255.255.255.0e vlan 4 Ruijie(config-if)#interfac
Ruijie(config-if)#ip add 192.168.4.10 255.255.255.0 Ruijie(config-if)#interface vlan 2
Ruijie(config-if)#ip add 192.168.2.10 255.255.255.0 Ruijie(config-if)#interface vlan 1
Ruijie(config-if)#ip add 192.168.1.10 255.255.255.0
复合口hybrid
Ruijie(config)vlan 2 Ruijie(config)vlan 3
Ruijie(config)interface fastethernet0/1
Ruijie(config-if)swichport access vlan 3
Ruijie(config)interface fastethernet0/2
Ruijie(config-if)swichport access vlan 2 Ruijie(config-if)#inter fasteth0/23
Ruijie(config-if)#swichport mode hybrid
Ruijie(config-if)#switchport hybrid all vlan tag 1,2
Ruijie(config-if)#switchport hybrid all vlan untagged 3,4
路由的设置
交换机1
Ruijie(config-if)#vlan 2 Ruijie(config-if)#vlan 100
Ruijie(config)#ip rout 192.168.2.0 255.255.255.0 192.168.1.10
Ruijie(config-vlan)#ip add 192.168.100.10 Ruijie(config-if)#switchport access vlan 2 Ruijie(config-if)#switchport access vlan 100
交换机2
255.255.255.0
Ruijie(config-if)#vlan 3 Ruijie(config-if)#vlan 100
Ruijie(config-vlan)#ip add 192.168.3.10 255.255.255.0 Ruijie(config-vlan)#ip add 192.168.100 .11 255.255.255.0 Ruijie(config-if)#switchport access vlan 2 Ruijie(config-if)#switchport access vlan 100 分别给两个交换机添加路由表
Ruijie(config)#ip route 192.168.3.0 255.255.255.0 192.168.100.10 Ruijie(config)# ip route 192.168.2.0 255.255.255.0 192.168.100.11 或者
Ruijie(config)# ip route 0.0.0.0 0.0.0.0 192.168.100.10 Ruijie(config)# ip route 0.0.0.0 0.0.0.0 192.168.100.11
端口的介质设置
Ruijie(config-if)#medium-type fiber 将端口设为光口 Ruijie(config-if)#medium-type copper 将端口设为电口 接口速度/双工配置
Switch(config-if)#speed {10 | 100 | 1000 | auto } 设置接口的速率参数Switch(config-if)#duplex {auto | full | half} 设置接口的双工模式
端口安全
Switch (config)#interface range f 0/1
Switch(config-if)# switchport port-security //开启端口安全 Switch(config-if)# switchport port-security //关闭端口安全
Switch(config-if)# switchport port-security maximum 8 //设置端口能包含的最大安全地址数为8
Switch(config-if)# switchport port-security violation protect //设置处理违例的方式为protect
Switch(config-if)#switchport port-security mac-address 00d0.f800.073c ip-address 192.168.1.1
在接口fastethernet0/1配置一个安全地址00d0.f800.073c,并为其绑定一个IP地址:192.168.1.1 Switch(config-if)#no switchport port-security mac-address 00d0.f800.073c ip-address 192.168.1.1 删除接口上配置的安全地址
protect:保护端口,当安全地址个数满后,安全端口将丢弃未知名地址(不是该端口的安全地址。
restrict:当违例产生时,将发送一个Trap通知。
shutdown:当违例产生时,将关闭端口并发送一个Trap通知
Switch# show port-security interface fastethernet 0/3 //查看接口f0/3的端口安全配置信息。
Switch# show port-security address //查看安全地址信息
访问列表的应用