aruba交换机配置-实战篇

一，忘记密码按以下操作 超级账号密码 password forgetme! !

Admin 密码修改

ArubaS2500-24P) (config) #mgmt-user admin root Password:******** //admin123! Re-Type password:******** //admin123! (ArubaS2500-24P) (config) #end Enable 密码重新设置

(ArubaS2500-24P) (config) #enable secret?

secret Enter the enable password

(ArubaS2500-24P) (config) #enable secret

Password:****** 、直接输入新密码、 Re-Type password:****** 再次输入

这个账号只能用于需改密码，需要配置的话要退出用admin账号进入才能操作

二，交换机初始化

<<<<< Welcome to Aruba Networks - Aruba S2500-24P >>>>>

User: admin

Password: ******** ///admin123//默认密码 (ArubaS2500-24P) >enable

Password:****** //enable

Quick-setup helps in setting the basic configuration of the system

Autoconfiguration of system will be stopped, if Quick-setup is launched by user

Invoke Quick-setup (y|n)??? [y]:y

***************** Welcome to the ArubaS2500-24P setup dialog ***************** This dialog will help you to set the basic configuration for the switch.

These settings, except for the Country Code, can later be changed from the Command Line Interface or Graphical User Interface.

Commands: Submit input or use [default value], Help Back, Forward, Line begin, Line end Delete, Delete back, Delete to end of line Previous question , Restart beginning, to exit

Enter System name [ArubaS2500-24P]: aruba2500-xmu-2f

Configure inband management VLAN [yes|no]: yes 是否开启管理VLAN Inband management vlan id [1]: 711 管理VLAN段

Enter the member interfaces for management VLAN (Example 0/0/0,0/0/1): 0/0/23,0/1/1 添加需要trunk的端口

Enter management VLAN IP address [172.16.0.254]: 172.31.11.2 管理ip Enter mgmt VLAN interface subnet mask [255.255.255.0]: 回车 Enter Out of band management interface IP address [none]: Enter IP Default gateway [none]: 172.31.11.1 Enter Country code (ISO-3166), for supported list: CN You have chosen Country code CN for China (yes|no)?: yes Enter Time Zone [PST-8:0]: CST+8:0 Enter Time in UTC [03:48:15]:

Enter Date (MM/DD/YYYY) [7/4/2013]:

Enter Password for admin login (up to 32 chars): ********* Re-type Password for admin login: ********* Enter Password for enable mode (up to 15 chars): ****** Re-type Password for enable mode: ******

Current choices are:

System name: aruba2500-xmu-2f

Configure inband management VLAN: yes vlan id for inband management [1-4094]: 711

Members interfaces of management VLAN: 0/0/23,0/1/1 IP address of management VLAN: 172.31.11.2

Management VLAN interface subnet mask: 255.255.255.0 IP Default gateway: 172.31.11.1 Country code: CN Time Zone: CST+8:0

Type to go back and change answer for any question Do you wish to accept the changes (yes|no|abort): yes Creating configuration... Done.

Configuring...

Saving Configuration...

网关 中国 //admin123! //admin123! //enablle //enable 回车 Configuration Saved.

(aruba2500-xmu-2f) #configure ter

Enter Configuration commands, one per line. End with CNTL/Z

(aruba2500-xmu-2f) (config) #telnet cli //开启telnet功能 (aruba2500-xmu-2f) (config) #end

(aruba2500-xmu-2f) #show ip interface brief

Interface IP Address / IP Netmask Admin Protocol vlan 711 172.31.11.2 / 255.255.255.0 Up Up mgmt unassigned / unassigned Up Down

(aruba2500-xmu-2f) #ping 172.31.11.1 Press 'q' to abort.

Sending 5, 100-byte ICMP Echos to 172.31.11.1, timeout is 2 seconds: .....

Success rate is 0 percent (0/5)

(aruba2500-xmu-2f) #ping 172.31.11.1 (aruba2500-xmu-2f) #configure ter

(aruba2500-xmu-2f) (config) #interface-group gigabitethernet ap 创建端口组

(aruba2500-xmu-2f) (gigabitethernet \ 把0/0/0-0/0/23加入组中 (aruba2500-xmu-2f) (gigabitethernet \

(aruba2500-xmu-2f) (switching profile \ 创建 vlan712（我给AP用的） (aruba2500-xmu-2f) (VLAN \

(aruba2500-xmu-2f) (config) #interface-profile switching-profile ap (aruba2500-xmu-2f) (switching profile \ 712 关联 (aruba2500-xmu-2f) (switching profile \

(aruba2500-xmu-2f) (config) #interface-profile poe-profile ap

(aruba2500-xmhu-2f) (Power over Ethernet profile \ 开启POE供电功能 (aruba2500-xmu-2f) (Power over Ethernet profile \(aruba2500-xmu-2f) (config) #interface-group gigabitethernet ap

(aruba2500-xmu-2f) (gigabitethernet \ 应用到端口 (aruba2500-xmu-2f) (gigabitethernet \ 应用到端口 (aruba2500-xmu-2f) (gigabitethernet \如果想把那个端口trunk，可以这样

(aruba2500-xmu-2f) (config) #interface g 0/0/2

(aruba2500-xmu-2f) #switching-profile Upstream-profile 删除的话就加no

(aruba2500-xmu-2f) #no switching-profile Upstream-profile

如果要把那个端口加入vlan20 (aruba2500-xmu-2f) #vlan 20

(aruba2500-xmu-2f) (VLAN \

(aruba2500-xmu-2f) (config) #interface-profile switching-profile 20 (aruba2500-xmu-2f) (switching profile \

(aruba2500-xmu-2f) (config) #interface g 0/0/2

(aruba2500-xmu-2f) #switching-profile 20 删除就加no

(aruba2500-xmu-2f) #no switching-profile 20或者 (aruba2500-xmu-2f) #no switching-profile

三，升级配置把网线接到23口，电脑开启tftp服务器软件

ArubaS2500-24P) (config) #interface-profile switching-profile ftp //--创建模板FTP (ArubaS2500-24P) (switching profile \ 关联vlan1 (ArubaS2500-24P) (switching profile \

(ArubaS2500-24P) (config) #interface gigabitethernet 0/0/23

(ArubaS2500-24P) (gigabitethernet \ //启用ftp (ArubaS2500-24P) (gigabitethernet \(ArubaS2500-24P) (config) #interface vlan 1

(ArubaS2500-24P) (vlan \ (ArubaS2500-24P) (vlan \(ArubaS2500-24P) (config) #end (ArubaS2500-24P) #ping 10.0.0.5

(ArubaS2500-24P) # (ArubaS2500-24P) #

(ArubaS2500-24P) #copy ftp: 10.0.0.5 admin ArubaOS_MAS_7.2.2.1_38712 system: partition 0 Password:****** //---admin和密码是ftp的用户名和没密码，10.0.0.5是电脑的ip Press 'q' to abort.

Copying file:............................................................ File copied successfully. Saving file to flash:...

Member-0:The system will boot from partition 0 during the next reboot.

(ArubaS2500-24P) #re?

reload Coldstart the switch rename rename a file

restore restore file or configuration

(ArubaS2500-24P) #reload

Do you want to save the configuration(y/n): n Do you really want to restart the system(y/n): y System will now restart!

Shutdown processing started

(aruba2500-xmu-2f) #write memory

Saving Configuration...

Configuration Saved.

(aruba2500-xmu-2f) #show running-config Building Configuration... #

# Configuration file for ArubaOS version 7.2

enable secret \telnet cli

hostname \clock timezone CST 8

location \ controller config 3

ip access-list eth validuserethacl permit any ! ! !

ip access-list stateless dns-acl-stateless any any svc-dns permit !

ip access-list stateless http-acl-stateless any any svc-http permit !

ip access-list stateless https-acl-stateless any any svc-https permit

! ip access-list stateless icmp-acl-stateless any any svc-icmp permit

保存