一、基本配置
1、進入全局配置模式
enable configure terminal
2、配置主機名
hostname MAP-Switch
3、設置啟用密碼
enable password 123456
4、設置登錄密碼
username admin password 123456
5、配置管理口IP地址
interface vlan 1 ip address 192.168.1.1 255.255.255.0 no shutdown
二、VLAN配置
1、創建VLAN
vlan 10 name test-vlan
2、配置埠加入VLAN
interface GigabitEthernet1/0/1 switchport access vlan 10
3、配置埠為Trunk口
interface GigabitEthernet1/0/20 switchport mode trunk switchport trunk allowed vlan all
4、刪除VLAN
no vlan 10
三、交換機間互聯
1、配置交換機間互聯
interface GigabitEthernet1/0/24 description to MAP-Switch2 switchport mode trunk switchport trunk allowed vlan all
2、查看交換機之間的鄰居關係
show cdp neighbors
3、查看埠的狀態
show interface status
四、Spanning Tree協議配置
1、啟用Spanning Tree協議
spanning-tree mode stp
2、查看Spanning Tree狀態
show spanning-tree
3、配置Spanning Tree根橋
spanning-tree vlan 1 root primary
4、配置埠優先順序
interface GigabitEthernet1/0/1 spanning-tree port-priority 32
五、訪問控制列表(ACL)配置
1、創建ACL
ip access-list extended test-ACL
2、配置ACL規則
ip access-list extended test-ACL permit ip 192.168.1.0 0.0.0.255 any deny ip any any
3、應用ACL到介面
interface GigabitEthernet1/0/1 ip access-group test-ACL in
六、SNMP配置
1、啟用SNMP
snmp-server community public RO
2、配置SNMP Trap
snmp-server enable traps snmp-server host 192.168.1.10 public
3、查看SNMP配置
show snmp
七、埠鏡像配置
1、配置鏡像埠
interface GigabitEthernet1/0/24 port mirror enable
2、配置目標埠
interface GigabitEthernet1/0/10 port mirror monitor GigabitEthernet1/0/24
3、查看埠鏡像狀態
show port-mirroring
八、QoS配置
1、啟用QoS
mls qos
2、配置埠的服務類型
interface GigabitEthernet1/0/1 mls qos trust dscp
3、配置QoS策略
policy-map QoS_Policy class VoIP priority percent 80 class Data bandwidth percent 20
4、應用QoS策略到介面
interface GigabitEthernet1/0/1 service-policy input QoS_Policy
九、埠安全配置
1、啟用埠安全特性
switchport port-security
2、配置允許的MAC地址數量
switchport port-security maximum 2
3、配置違規行為
switchport port-security violation restrict
4、查看埠安全統計
show port-security interface GigabitEthernet1/0/1
原創文章,作者:MZOZP,如若轉載,請註明出處:https://www.506064.com/zh-tw/n/332101.html