Cisco2950交换机安装配置

合集下载

2950交换机trunk-vlan配置实例

VLAN的划分与互通实验准备工作：按照下图所示，连接实验环境。

如果没有设备，可下载Boson NetSim局域网交换与路由模拟器。

拓扑图:配置过程：说明：本实验完全在Boson Netsim模拟器上完成，下面红色下划线文字均为配置过程输入的命令。

一、交换机2950B配置1、配置交换机主机名、管理ip、默认网关Switch>enSwitch#config tSwitch(config)#hostname 2950B2950B(config)#int vlan 12950B(config-if)#ip address 172.16.10.3 255.255.255.0 //设置管理IP地址2950B(config-if)#no shut2950B(config-if)#exit2950B(config)#ip default-gateway 172.16.10.1 //设置默认网关IP地址2、配置中继口（即trunk口）2950B(config)#int f0/12950B(config-if)#switchport mode trunk2950B(config-if)#exit2950B(config)#int f0/42950B(config-if)#switchport mode trunk2950B(config-if)#exit2950B(config)#int f0/52950B(config-if)#switchport mode trunk2950B(config-if)#exit2950B(config)#3、配置vtp，把2950B交换机设置成客户机模式，2950B从2950C接收vlan信息2950B#vlan database2950B(vlan)#vtp client2950B(vlan)#vtp domain cisco4、创建Vlan2950B(vlan)#vlan 2 name sales // 将vlan 2设置名称为sales2950B(vlan)#vlan 3 name marketing // 将vlan 2设置名称为marketing 2950B(vlan)#apply2950B(vlan)#exit5、将交换机端口分配到vlan中2950B#config t2950B(config)#int f0/22950B(conf-if)#switchport mode access // 设置二层交换端口2950B(config-if)#switchport access vlan 22950B(config-if)#exit2950B(config)#int f0/32950B(conf-if)#switchport mode access // 设置二层交换端口2950B(config-if)#switchport access vlan 32950B(config-if)#exit2950B(config)#exit2950B#6、保存配置2950B#copy run start二、交换机2950C配置1、配置交换机主机名、管理ip、默认网关Switch>enSwitch#config tSwitch(config)#hostname 2950C2950C(config)#int vlan 12950C(config-if)#ip address 172.16.10.2 255.255.255.02950C(config-if)#no shut2950C(config-if)#exit2950B(config)#ip default-gateway 172.16.10.12、配置中继口（即trunk口）2950C(config)#int f0/42950C(config-if)#switchport mode trunk2950C(config-if)#exit2950C(config)#int f0/52950C(config-if)#switchport mode trunk2950C(config-if)#exit2950C(config)#3、配置vtp，把2950C交换机设置成服务器模式，2950B从2950C接收vlan信息2950C#vlan database2950C(vlan)#vtp server2950C(vlan)#vtp domain cisco4、创建Vlan2950C(vlan)#vlan 2 name sales2950C(vlan)#vlan 3 name marketing2950C(vlan)#apply2950C(vlan)#exit5、将交换机端口分配到vlan中2950C#config t2950C(config)#int f0/22950C(conf-if)#switchport mode access // 设置二层交换端口2950C(config-if)#switchport access vlan 22950C(config-if)#exit2950C(config)#int f0/32950C(conf-if)#switchport mode access // 设置二层交换端口2950C(config-if)#switchport access vlan 32950C(config-if)#exit2950C(config)#exit2950C#6、保存配置2950C#copy run start三、vlan间路由器2600配置过程1、配置路由器主机名、清除f0/0端口ip地址、启动f0/0端口Router>enRouter#config tRouter(config)#hostname trunkrouterTrunkrouter(config)#int f0/0Trunkrouter(config-if)#no ip addressTrunkrouter(config-if)#no shut2、将路由器的快速以太网端口fa0/0划分为三个子接口fa0/0.1、fa0/0.2和fa0/0.3，对每个子接口配置，并采用802.1q的数据封装。

cisco 2950 交换机

half Force half-duplex operation
2950(config-if)#description to_router1 （设置端口描述）
2950#show interfaces fastethernet1 [status] （查看端口配置结果和状态）
2950(config)#mac-address-table restricted static 0000.0c02.bbcc f0/6 f0/7 (加入静态地址)
2950#show mac-address-table （查看整个MAC地址表）
2950#clear mac-address-table restricted static （清除限制性MAC址表）
password Set the password for the VTP administrative domain.
2950(vlan)#vtp domain server （设置本交换机为SEVER模式）
2950(vlan)#vtp domain wqs （设置域名）
2950(config-if)#int f0/8
2950(config-if)#switchport mode access
2950(config-if)#switchport access vlan 3、生成树协议的配置
生成树负载均衡实现方法（感谢黑客天使提醒）
2950(config)#ip name-server 192.168.1.1 （设置域名服务器）
2950(config)#ip domain-name （设置域名）
二、端口配置
2950(config)#int f0/1 (进入接口)

Cisco Catalyst 2950 配置-实现端口与IP的绑定

Cisco Catalyst 2950 配置-实现端口与IP的绑定在Cisco catalyst 2950交换机上，通过配置extended ACL来实现端口与IP的绑定。

配置如下：2950#show runCurrent configuration : 5396 bytes!version 12.1no service padservice timestamps debug uptimeservicetimestamps log uptimeno service password-encryption!hostname 2950!enable secret 5 $1$kJ.v$gF4osmkOwfvOy7vkwI3j/.!ip subnet-zero!no ip domain-lookup!!spanning-tree mode pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-idspanning-tree uplinkfast!interface FastEthernet0/1switchport access vlan 30switchport mode accessip access-group ip1 inspanning-tree portfast!interface FastEthernet0/2switchport access vlan 30switchport mode accessip access-group ip2 inspanning-tree portfast!interface FastEthernet0/3switchport access vlan 30 switchport mode accessip access-group ip3 in spanning-tree portfast!interface FastEthernet0/4 switchport access vlan 30 switchport mode accessip access-group ip4 in spanning-tree portfast!interface FastEthernet0/5 switchport access vlan 30 switchport mode accessip access-group ip5 in spanning-tree portfast!interface FastEthernet0/6 switchport access vlan 30 switchport mode accessip access-group ip6 in spanning-tree portfast!interface FastEthernet0/7 switchport access vlan 30 switchport mode accessip access-group ip7 in spanning-tree portfast interface FastEthernet0/8 switchport access vlan 30 switchport mode accessip access-group ip8 in spanning-tree portfast!interface FastEthernet0/9 switchport access vlan 30 switchport mode accessip access-group ip9 in spanning-tree portfast!interface FastEthernet0/10 switchport access vlan 30 switchport mode accessip access-group ip10 inspanning-tree portfast!interface FastEthernet0/11 switchport access vlan 30 switchport mode accessip access-group ip11 in spanning-tree portfast!interface FastEthernet0/12 switchport access vlan 30 switchport mode accessip access-group ip12 in spanning-tree portfast!interface FastEthernet0/13 switchport access vlan 30 switchport mode accessip access-group ip13 in spanning-tree portfast!interface FastEthernet0/14 switchport access vlan 30 switchport mode accessip access-group ip14 in spanning-tree portfast!interface FastEthernet0/15 switchport access vlan 30 switchport mode accessip access-group ip15 in spanning-tree portfast!interface FastEthernet0/16 switchport access vlan 30 switchport mode accessip access-group ip16 in spanning-tree portfast!interface FastEthernet0/17 switchport access vlan 30 switchport mode accessip access-group ip17 in spanning-tree portfast!interface FastEthernet0/18 switchport access vlan 30 switchport mode accessip access-group ip18 in spanning-tree portfast!interface FastEthernet0/19 switchport access vlan 30 switchport mode accessip access-group ip19 in spanning-tree portfast!interface FastEthernet0/20 switchport access vlan 30 switchport mode accessip access-group ip20 in spanning-tree portfast!interface FastEthernet0/21 switchport access vlan 30 switchport mode accessip access-group ip21 in spanning-tree portfast!interface FastEthernet0/22 switchport access vlan 30 switchport mode access[Page] ip access-group ip22 in spanning-tree portfast!interface FastEthernet0/23 switchport access vlan 30 switchport mode accessip access-group ip23 in spanning-tree portfast!interface FastEthernet0/24 switchport access vlan 30 switchport mode accessip access-group ip24 in spanning-tree portfast!interface GigabitEthernet0/1 switchport mode trunk!interface GigabitEthernet0/2spanning-tree stack-port!interface Vlan1no ip addressno ip route-cacheshutdown!interface Vlan100ip address 192.168.100.22 255.255.255.0 no ip route-cache!ip default-gateway 192.168.100.254ip http server!ip access-list extended ip1permit ip host 192.168.30.1 anyip access-list extended ip10permit ip host 192.168.30.10 anyip access-list extended ip11permit ip host 192.168.30.11 anyip access-list extended ip12permit ip host 192.168.30.12 anyip access-list extended ip13permit ip host 192.168.30.13 anyip access-list extended ip14permit ip host 192.168.30.14 anyip access-list extended ip15permit ip host 192.168.30.15 anyip access-list extended ip16permit ip host 192.168.30.16 anyip access-list extended ip17permit ip host 192.168.30.17 anyip access-list extended ip18permit ip host 192.168.30.18 anyip access-list extended ip19permit ip host 192.168.30.19 anyip access-list extended ip2permit ip host 192.168.30.2 anyip access-list extended ip20permit ip host 192.168.30.20 anyip access-list extended ip21permit ip host 192.168.30.21 anyip access-list extended ip22 permit ip host 192.168.30.22 anyip access-list extended ip23 permit ip host 192.168.30.23 anyip access-list extended ip24 permit ip host 192.168.30.24 anyip access-list extended ip3permit ip host 192.168.30.3 anyip access-list extended ip4permit ip host 192.168.30.4 anyip access-list extended ip5permit ip host 192.168.30.5 anyip access-list extended ip6ip access-list extended ip5permit ip host 192.168.30.5 anyip access-list extended ip6permit ip host 192.168.30.6 anyip access-list extended ip7permit ip host 192.168.30.7 anyip access-list extended ip8permit ip host 192.168.30.8 anyip access-list extended ip9permit ip host 192.168.30.9 any snmp-server community private RO !line con 0line vty 0 4password !@#$%loginline vty 5 15password !@#$%login!!end2950#。

Cisco 2950交换机简要使用说明

Cisco 2950交换机简要使用说明目录1 概述 (3)2 配置端口 (3)2.1 配置一个端口 (3)2.2 配置一组端口 (4)2.3 配置二层端口 (5)2.3.1 配置端口速率及双工模式 (5)2.4 监控及维护端口 (6)2.4.1 监控端口和控制器的状态 (6)2.4.2 刷新、重置端口及计数器 (6)2.4.3 关闭和打开端口 (7)3 配置VLAN (8)3.1 理解VLAN (8)3.2 可支持的VLAN (8)3.3 配置正常范围的VLAN (9)3.3.1 生成、修改以太网VLAN (9)3.3.2 删除VLAN (10)3.3.3 将端口分配给一个VLAN (11)3.4 配置VLAN Trunks (12)3.4.1 定义trunk允许的VLAN (13)3.4.2 配置Native VLAN（802.1q） (14)3.5 使用VTP (14)3.5.1 VTP管理域设置 (14)3.5.2 VTP中继设置 (15)3.5.3 创建VLAN和分配端口到VLAN (15)4 访问控制（ACL） (15)4.1 以数值命名的ACL (16)4.1.1 创建标准IP ACL (17)4.1.2 创建扩展IP ACL (17)4.2 以字符命名的ACL (18)4.2.1 创建标准IP ACL (19)4.2.2 创建扩展IP ACL (19)4.3 在接口上应用IP ACL (20)5 网络风暴控制 (20)5.1 网络风暴控制设置原则 (20)5.2 设置网络风暴控制参数 (21)5.3 取消网络风暴控制 (21)6 使用STP实现负载均衡 (21)6.1 使用STP端口权值的负载均衡 (22)6.2 配置STP路径值的负载均衡 (24)1 概述本使用说明只包括日常使用的有关命令及特性，其它未涉及的命令及特性请参考英文的详细配置手册。

cisco 2950是只支持二层特性的交换机。

2950交换机的详细配置

2950交换机的详细配置switch> 用户模式1：进入特权模式 enableswitch> enableswitch#2：进入全局配置模式 configure terminalswitch> enableswitch#configure terminalswitch(conf)#3：交换机命名 hostname aptech2950 以aptech2950为例switch> enableswitch#configure terminalswitch(conf)#hostname aptch-2950aptech2950(conf)#4：配置使能口令 enable password cisco 以cisco为例switch> enableswitch#configure terminalswitch(conf)#hostname aptch2950aptech2950(conf)# enable password cisco5：配置使能密码 enable secret ciscolab 以cicsolab为例switch> enableswitch#configure terminalswitch(conf)#hostname aptch2950aptech2950(conf)# enable secret ciscolab6：设置虚拟局域网vlan 1 inte***ce vlan 1switch> enableswitch#configure terminalswitch(conf)#hostname aptch2950aptech2950(conf)# inte***ce vlan 1aptech2950(conf-if)#ip address 192.168.1.1 255.255.255.0 配置交换机端口ip和子网掩码aptech2950(conf-if)#no shut 使配置处于运行中aptech2950(conf-if)#exitaptech2950(conf)#ip default-gateway 192.168.254 设置网关地址7：进入交换机某一端口 inte***ce fastehernet 0/17 以17端口为例switch> enableswitch#configure terminalswitch(conf)#hostname aptch2950aptech2950(conf)# inte***ce fastehernet 0/17aptech2950(conf-if)#8：查看命令 showswitch> enableswitch# show version 察看系统中的所有版本信息show inte***ce vlan 1 查看交换机有关ip 协议的配置信息show running-configure 查看交换机当前起作用的配置信息show inte***ce fastethernet 0/1 察看交换机1接口具体配置和统计信息show mac-address-table 查看mac地址表show mac-address-table aging-time 查看mac地址表自动老化时间9：交换机恢复出厂默认恢复命令switch> enableswitch# erase startup-configureswitch# reload10：双工模式设置switch> enableswitch#configure terminalswitch2950(conf)#hostname aptch-2950aptech2950(conf)# inte***ce fastehernet 0/17 以17端口为例aptech2950(conf-if)#duplex full/half/auto 有full , half, auto 三个可选项11：cdp相关命令switch> enableswitch# show cdp 查看设备的cdp全局配置信息show cdp inte***ce fastethernet 0/17 查看17端口的cdp配置信息show cdp traffic 查看有关cdp包的统计信息show cdp nerghbors 列出与设备相连的cisco设备12：csico2950的密码恢复拔下交换机电源线。

2950交换机简要配置手册(中文)

2950交换机简明配置维护手册目录说明 (3)产品特性 (3)配置端口 (4)配置一组端口 (4)配置二层端口 (6)配置端口速率及双工模式 (6)端口描述 (7)监控及维护端口 (8)监控端口和控制器的状态 (8)刷新、重置端口及计数器 (10)关闭和打开端口 (10)配置VLAN (11)理解VLAN (11)可支持的VLAN (12)配置正常范围的VLAN (12)生成、修改以太网VLAN (13)删除VLAN (14)将端口分配给一个VLAN (15)配置VLAN Trunks (16)使用STP实现负载均衡 (19)配置Cluster (23)说明本手册只包括日常使用的有关命令及特性，其它未涉及的命令及特性请参考英文的详细配置手册。

产品特性2950是只支持二层的交换机支持VLAN•到250 个VLAN•支持VLAN ID从1到4094（IEEE 802.1Q 标准）•支持ISL及IEEE 802.1Q封装安全•支持IOS标准的密码保护•支持标准及扩展的访问列表来定义安全策略•支持基于VLAN的访问列表监视•交换机LED指示端口状态•SPAN及远端SPAN (RSPAN) 可以监视任何端口或VLAN的流量•内置支持四组的RMON监控功能（历史、统计、告警及事件）配置端口配置一组端口当使用interface range命令时有如下的规则:•有效的组范围:o vlan从1 到4094o fastethernet槽位/{first port} - {last port}, 槽位为0o gigabitethernet槽位/{first port} - {last port},槽位为0o port-channel port-channel-number - port-channel-number, port-channel号从1到64•端口号之间需要加入空格，如：interface range fastethernet 0/1 – 5是有效的，而interface range fastethernet 0/1-5是无效的.•interface range命令只能配置已经存在的interface vlan•所有在同一组的端口必须是相同类别的。

思科2950交换机配置说明

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
1 packets output, 64 bytes, 0 underruns
2，从配置模式下创建VLAN，如图：
我们可以看到，从配置模式创建VLAN时只要直接输入vlan命令加VLAN号就可以创建VLAN
上图为成功创建VLAN后的下一个界面，用“？”号同样可以查询到在此VLAN配置模式下可以使用的所有命令。
2.2.3
不同交换机相同VLAN间如需要互访，需要将交换机相连端口设置为中继模式，并且各接口封装模式要相同（在2950上只支持802.1q封装，端口配置为中继后自动开启802.1q协议），否则中继将不起作用。
在配置模式下可以给交换机命名、配置VLAN、STP、VTP、VLAN中继、访问控制列表、以太通道（端口绑定）、SNMP、AAA认证等高级特性，从而达到满足不同用户不同需求的目的。
举例如下：
1，给交换机命名
使用命令“hostname“加欲命名的名字，就能够修改交换机的名字。
如图：
输入“hostname2950_test”命令回车后，交换机的名字立刻由原来的“cisco2950”变为“2950_test”。
1 default active
2 VLAN2 active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5
3 VLAN3 active Fa0/6, Fa0/7, Fa0/8, Fa0/9
Fa0/10

1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。

Cisco2950交换机安装配置、故障排除手册网络配置 2008-09-12 16:45 阅读121 评论0字号：大大中中小小目录第一部分交换机安装. 21.1 安装前相关考虑. 21.2 在机架上固定交换机. 21.3 安装GBIC模块. 41.4 安装连接线缆. 5第二部分交换机基本配置. 82.1 加电后首次配置. 82.2 通过浏览器配置交换机. 92.3 通过CONSOLE口进入命令行配置. 11第三部分高级配置. 20第四部分安全配置. 22第五部分故障排除. 275.1 检查设备状态指示灯. 275.2 检查配置及相关信息. 295.3 已知的问题及解决方式. 33第六部分常见问题. 35第一部分交换机安装1.1 安装前相关考虑Warning ：To prevent the switch from overheating, do not operate it in anarea that exceeds the maximum recommended ambient temperature of 113\xb0 F (45\xb0 C). To prevent airflow restriction, allow at least 3 inches (7.6 cm) of clearance around the ventilation openings。

Warning：When installing the unit, the ground connection must always bemade first And disconnected last.1.2 在机架上固定交换机l Attaching Brackets (Front Panel Forward)l Attaching Brackets (Rear Panel Forward)l Mounting the Switch in a Rackl Attaching the Optional Cable Guide1.3 安装GBIC模块l Installing a 1000BASE-X GBIC Module in the Switchl Installing a 1000BASE-T GBIC Module in the Switchl Installing a GigaStack GBIC Module in the Switch1.4 安装连接线缆注意：交换机端口速率、双工的设置Ø Let the ports autonegotiate both speed and duplex.Ø Set the port speed and duplex parameters on both ends of the connection.When connecting to workstations, servers, routers, and Cisco IP Phones, connect a straight-through Category 5 cable to an RJ-45 connector on the front panel.When connecting to switches or repeaters, use a crossover Category 5 cable。

l Connecting to a 10/100/1000 Switch PortThe port LED is amber while Spanning Tree Protocol (STP) discovers the topology and searches for loops. This takes about 30 seconds, and then the port LED turns green.If the port LED does not come on, the device at the other end might not be turned on, or there might be a cable problem or a problem with the adapter installed in the attached device.l Connecting to a 1000BASE-X PortCaution ： Do not remove the rubber plugs from the fiber-optic port or the rubber caps from the fiber-optic cable until you are ready to connect the cable. The plugs and caps protect the fiber-optic port and cable from contamination and ambient light.l Connecting to a 1000BASE-T Portl Connecting to a GigaStack Portl Connecting to the Console PortAttach the supplied RJ-45-to-DB-9 female DTE adapter to a PC, or attach an appropriate adapter to the terminal.Insert the other end of the supplied rollover cable in the attached adapter.Boot the terminal-emulation program if you are using a PC or terminal.第二部分交换机基本配置CISCO2950-24/48 EI 交换机配置涉及到加电后首次配置、通过浏览器进行配置以及通常的基于CLI命令行配置等方面。

2.1 加电后首次配置Use the supplied rollover cable and DB-9 adapter to connect a PC to the switch console port. If you want to connect the switch console port to a terminal, you need to provide a RJ-45-to-DB-25 female DTE adapter.The PC or terminal must support VT100 terminal emulation. The terminal-emulation software—frequently a PC application such as Hyperterminal or Procomm Plus—makes communication between the switch and your PC or terminal possible during the setup program.Configure the baud rate and character format of the PC or terminal to match these console port default characteristics:Ø 9600 baudØ 8 data bitsØ 1 stop bitØ No parityUsing the supplied rollover cable, insert the RJ-45 connector into the console port。

Note：If the switch will be a cluster member managed through the IP address of the command switch, it is not necessary to assign IP information or a password. If you are configuring the switch as a standalone switch or as a command switch, you must assign IP information.Would you like to enter the initial configuration dialog? [yes/no]: yesWould you like to enter basic management setup? [yes/no]: yesEnter host name [Switch]: xxxxOn a command switch, the host name is limited to 28 characters; on a member switch to 31 characters. Do not use -n, where n is a number, as the last character in a host name for any switch. Enter enable secret: xxxxThe password can be from 1 to 25 alphanumeric characters, can start with a number, is case sensitive, allows spaces, but ignores leading spacesEnter enable secret: xxxxEnter virtual terminal password: xxxxEnter interface name used to connect to the management network from the above interface summary: vlan 1Configuring interface vlan 1:Configure IP on this interface? [yes]: yesIP address for this interface: xxxxSubnet mask for this interface [255.0.0.0]: xxxxWould you like to enable as a cluster command switch? [yes/no]: 视具体情况定，一般，一个堆叠中仅有一台交换机需要配置为命令交换机Enter cluster name: xxxxThe cluster name can be 1 to 31 alphanumeric characters, dashes, or underscores.2.2 通过浏览器配置交换机例如，通过CMS可以方便的配置集群，方便全网连入集群的交换机的管理。