构建大型企业网络命令

辅助地址（一个接口可以配置多个辅助地址）Router(config-if)#ip address ip-address mask （secondary辅助地址参数）VLANVLAN数据库配置模式Switch#vlan databaseSwitch(vlan)#vlan vlan-id [name vlan-name]Switch(vlan)#exit全局配置模式Switch(config)#vlan vlan-idSwitch(config-vlan)#name vlan-name删除VLAN使用no vlan vlan-id命令删除VLAN将端口加入VLANSwitch(config)# interface interface-id 进入要配置的端口Switch(config-if)# switchport mode access 定义二层端口模式Switch(config-if)# switchport access vlan vlan-id 将端口添加到VLAN中Switch(config-if)# no switchport access vlan vlan-id 将端口从某个VLAN中删除也可以同时将多个端口添加到某个VLAN中：Switch(config)# interface range f0/1 –10Switch(config-if-range)# switchport access vlan vlan-id查看所有VLAN的摘要信息Switch# show vlan brief查看指定VLAN信息Switch# show vlan id vlan-idTrunk的配置进入接口配置模式Switch(config)#interface interface-id选择封装类型Switch(config-if)#switchport trunk encapsulation { isl | dot1q | negotiate } 将接口配置为TrunkSwitch(config-if)#switchport mode {dynamic {desirable | auto} | trunk | access}指定Native VLAN（可选）Switch(config-if)#switchport trunk native vlan vlan-id禁止Trunk传送某个VLAN的数据，删除这个VLAN：Switch(config-if)#switchport trunk allowed vlan remove vlan-id允许Trunk传送某个VLAN的数据，添加这个VLAN：Switch(config-if)#switchport trunk allowed vlan add vlan-id 默认允许全部VLAN的数据通过查看接口模式、状态：Switch#show interface interface-id switchportTrunk链路上移除VLANSW(config-if)#switchport trunk allowed vlan remove vlanID配置PAgP以太网通道Switch(config-if)#interface internet-idSwitch(config-if)#channel-protocol pagpSwitch(config-if)#channel-group number mode { on | auto | desirable } 配置LACP以太网通道Switch(config-if)#interface internet-idSwitch(config-if)#channel-protocol lacpSwitch(config-if)#channel-group number mode { on | passive | active } 第三章在三层交换机启用路由功能Switch(config)# ip routing配置VLAN的IPSwitch(config)# interface vlan vlan-idSwitch(config-if)# ip address ip_address netmaskSwitch(config-if)# no shutdown配置路由接口Switch(config-if)# no switchport创建VTP域Switch(config)# vtp domain domain_name配置交换机的VTP模式Switch(config)# vtp mode {server | client | transparent}配置VTP口令Switch(config)# vtp password password配置VTP修剪Switch(config)# vtp pruning配置VTP版本Switch(config)# vtp version 2查看VTP配置信息Switch# show vtp status第四章PVST+的配置命令启用生成树命令Switch（config）#spanning-tree vlan vlan-list指定根网桥Switch（config）#spanning-tree vlan vlan-list priority Bridge-prioritySwitch（config）#spanning-tree vlan vlan-list root { primary | secondary } 修改端口成本Switch（config-if）#spanning-tree vlan vlan-list cost cost修改端口优先级Switch（config-if）#spanning-tree vlan vlan-list port-priority priority配置速端口Switch（config-if）#spanning-tree portfast查看生成树的配置Switch#show spanning-tree查看某个VLAN的生成树详细信息Switch#show spanning-tree vlan vlan-id detail第五章多生成树配置启用MST模式Switch(config)#spanning-tree mode mst进入MST配置模式Switch(config)#spanning-tree mst configuration配置MST区域名Switch(config-mst)#name name配置区域配置修订号Switch(config-mst)#revision version将VLAN映射到MST实例Switch(config-mst)#instance instance-id vlan vlan-list配置HSRP配置为HSRP的成员Switch（config-if）#standby group-number（HSRP备份组号）ip virtual-ip-address 配置HSRP的优先级Switch(config-if)#standby group-number priority priority-valu e（范围0～255，默认100）HSRP占先权优先级高的路由器重新获得转发权，成为活跃路由器HSRP占先权配置Switch(config-if）#standby group-number preemptHSRP计时器配置配置Hello间隔和保持时间Switch(config-if)#standby group-number times hellotime holdtime查看HSRP摘要信息Switch#show standby [type mod/num] [group-number] brief查看HSRP详细信息Switch#show standby第六章ACL标准ACL创建ACLRouter(config)#access-list access-list-number{ permit | deny } source [ source-wildcard ] 删除ACLRouter(config)# no access-list access-list-number将ACL应用于接口Router(config-if)# ip access-group access-list-number {in |out}在接口上取消ACL的应用Router(config-if)# no ip access-group access-list-number {in |out}扩展ACL创建ACLRouter(config)# access-list access-list-number { permit | deny }protocol {source source-wildcard destination destination-wildcard } [ operator operan ]删除ACLRouter(config)# no access-list access-list-number将ACL应用于接口Router(config-if)# ip access-group access-list-number {in |out}在接口上取消ACL的应用Router(config-if)# no ip access-group access-list-number {in |out}命名ACLRouter(config)# ip access-list { standard | extended } access-list-name配置标准命名ACLRouter(config-std-nacl)# [ Sequence-Number ] { permit | deny } source [ source-wildcard ] 配置扩展命名ACLRouter(config-ext-nacl)# [ Sequence-Number] { permit | deny } protocol { source source-wildcard destination destination-wildcard } [ operator operan ]注：Sequence-Number决定ACL语句在ACL列表中的位置定时ACLRouter(config)# access-list access-list-number{ permit | deny } protocol{ source source-wildcard destination destination-wildcard } [ operator operan ] time-range time-range-name将ACL应用于接口Router(config-if)# ip access-group access-list-number { in |out }第八章NATNAT映射同一内部局部地址映射到多个内部全局地址Router(config)#ip nat inside source static local-ip global-ip [extendable]NAT端口映射Router(config)#ip nat inside source static protocol local-ip UDP/TCP-port global-ip UDP/TCP-port [extendable]清除NAT转换表中的所有条目Router#clear ip nat translation *清除包含内部转换的转换条目Router#clear ip nat translation inside local-ip global-ip清除包含外部转换的转换条目Router#clear ip nat translation outside local-ip global-ip第九章启动RIP进程Router(config)# router rip宣告主网络号Router(config-router)# network network-number查看路由表Router# show ip route查看路由协议的配置Router# show ip protocol启用RIPv2Router(config)# router ripRouter(config-router)# version 2关闭路由汇总功能Router(config-router)# no auto-summaryOSPF的基本配置（需要配置Loopback地址）启动OSPF路由进程Router(config)# router ospf process-id指定OSPF协议运行的接口和所在的区域：Router(config-router)# network address inverse-mask area area-id修改接口的Cost值Router(config-if)#ip ospf cost cost查看路由表Router#show ip route查看OSPF的配置Router#show ip ospf查看OSPF接口数据结构Router#show ip ospf interface type number第十章OSPF多区域OSPF计时器配置Router(config-if)#ip ospf hello-interval hello-timeRouter(config-if)#ip ospf dead-interval dead-time注：这些值是一些典型值，一般不需要改动OSPF接口优先级配置Router(config-if)#ip ospf priority priority查看邻居列表及其状态Router#show ip ospf neighbor注：hello-time默认为10s，范围1～65535s；dead-time默认为40s，访问是1～65535s。