【正文】 絡設備以維護網絡時必須確認已向正確的設備進行了連接如果設備都使用其默認的而名稱我們就無法確定連接的是不是正確的設備故通過交換機名稱提示符提示自己當前配置交換機的位置是很有必要的為樓棟接入層交換機 AS0 命名命令如下 Switchconfighostname AS AS0configenable seceret cisco2950 AS0configline console 0 ASconfiglinepassword cisco ASconfiglinelogin AS0configbanner motd Authorized Personnel Only AS0configline vty 0 15 ASconfiglinepassword class ASconfiglinelogin AS0configline console 0 ASconfiglinelogging synchronous AS0configservice passwordencryption AS0configline vty 0 15 ASconfiglineexectimeout 10 30 ASconfiglineexit ASconfigline console 0 ASconfiglineexectimeout 10 30 AS0configinterface range fastether0124 AS0configifrangeduplex full AS0configinterface range fastether0124 AS0configifrangespeed 100AS0configinterface vlan 1 ASconfigifip address 100 240 AS0configifno shutdownAS0configip defaultgateway 1001 2 樓棟接入層交換機 AS0 的 VTP 配置 VLAN中繼協(xié)議 VTP允許網絡管理員對作為 VTP服務器的交換機進行更改 VTP服務器會像整個交換網絡中啟用 VTP 的交換機分發(fā)和同步 VLAN 信息從而最大限度減少由錯誤配置和配置不一 致而導致的問題因此為便于管理維護本樓棟網絡采用 VTP 技術同時將核心匯聚層換機 CoreS0 設置成為 VTP 服務器其它交換機設置為 VTP 客戶機 AS0 的 VTP 相關配置如下 首先配置 VTP模式樓棟接入層交換機 AS0將通過 VTP獲得核心匯聚層交換機CoreS0中定義的所有 VLAN信息設置樓棟接入層交換機 AS0成為客戶機的命令如下 AS0configvtp mode client AS0configvtp domain ecit AS0configvtp password adminAS0configinterface range fastether024 AS0configifrangeswitchport mode access AS0configifrangeswitchport access vlan 10 AS0configifrangeexit AS0configinterface range fastether024 AS0configifrangespanningtree portfast AS0configinterface range fastether010configifrangeswitchport trunk encapsulation dot1qAS0configifrangeswitchport mode trunk AS0configinterface AS0configifno shutdownAS0configifexitAS0configint range fastEther 012AS0configifrangechannelgroup 5 mode onAS0configifrangeno shutdownCoreS0configaaa newmodel CoreS0configtacacsserver host 100 key CoreS0 AAA認證命令如下其中 group關鍵字后面的參數為驗證順序當一個環(huán)節(jié)無法驗證不是驗證失敗會執(zhí)行下一個環(huán)節(jié)的驗證這里是先查看 tacacs 服務器如果tacacs 服務器無法連接或驗證失敗則 SSH 登錄失敗 CoreS0configaaa authentication login default group tacacs none CoreS0configaaa authentication login ssh_lines group tacacs CoreS0configip domainname 再次生成 RSA非對稱密鑰因為需要創(chuàng)建一個供路由器加密其 SSH管理數據流為此其配置命令如下 CoreS0configcrypto key generate rsa CoreS0configline vty 0 15 CoreS0configlineno transport inputCoreS0configliransport input ssh CoreS0configlinepassword class CoreS0configlinelogin authentication ssh_lines CoreS0 configlineexitCoreS0configint vlan 1 CoreS0configifip address 100 240 CoreS0configifno shutdown CoreS0configifexit CoreS0configip defaultgateway S0configvtp mode server CoreS0configvtp pruning CoreS0vlan database CoreS0vlanvlan 10 name CoreS0vlanvlan 20 name CoreS0configinterface CoreS0configifno shutdownCoreS0configifexit CoreS0config int range fastEther 012 CoreS0configifrangechannelgroup 5 mode onCoreS0configifrangeno shutdownCoreS0configifrangeCoreS0configinterface CoreS0configifno shutdownCoreS0configifexit CoreS0configint range fastEther 04 CoreS0configifrangechannelgroup mode on CoreS0configifrangeno shutdownCoreS0configip routing CoreS0configinterface vlan 10 CoreS0configifip address 1 0 CoreS0configifno shutdown CoreS0configifexit CoreS0configinterface vlan 20 CoreS0configifip address 1 0 CoreS0configifno shutdown CoreS0configifexit CoreS0configrouter eigrp 10 CoreS0configrouterwork 1000 15 CoreS0configrouterwork 0 255 CoreS0configrouterwork 0 255 CoreS0configrouterno autosummary CoreS0configrouterexit CoreS2configip dhcp excludedaddress S2configip dhcp pool vlanCoreS2dhcpconfigwork 1000 0 CoreS2dhcpconfigdefaultrouter 1001 CoreS2dhcpconfigdnsserver S2dhcpconfigexit CoreS2configip dhcp excludedaddress 1001 10 CoreS2configip dhcp pool vlanCoreS2dhcpconfigwork 1000 0 CoreS2dhcpconfigdefaultrouter 1001 CoreS2dhcpconfigdnsserver 254 CoreS2dhcpconfigexit Router enable Routerconfigure terminal Routerconfighostname BuildingR BuildingRconfigenable seceret cisco2950service passwordencryption BuildingRconfigbanner motd Authorized Personnel Only BuildingRconfigno ip domainloopup BuildingRconfigline vty 0 4 BuildingRconfiglineexectimeout 10 30 BuildingRconfiglineexitBuildingRconfigline console 0 BuildingRconfiglineexectimeout 10 30 BuildingRconfigline logging synchronous BuildingRconfiglinepassword cisco BuildingRconfiglinelogin BuildingRconfiglineexitBuildingRconfiginterface fastether00 BuildingRconfigifip address 100 252 BuildingRconfigifno shutndown BuildingRconfigifexit BuildingRconfiginterface fastether01 BuildingRconfigifip address 252 BuildingRconfigifno shutdownBuildingRconfigifexit BuildingRconfiginterface fastether0 BuildingRconfigifip address 100 240 BuildingRconfigifno shutdownBuildingRconfigaaa newmodel BuildingRconfigtacacsserver host 254 key BuildingR BuildingRconfigaaa authentication login default group tacacs none BuildingRconfigaaa authentication login ssh_lines group tacacs BuildingRconfigip domainname cisco BuildingRconfigcrypto key generate rsa BuildingRconfigline vty 0 4 BuildingRconfiglineno transport input BuildingRconfigliransport input ssh BuildingRconfiglinepassword class BuildingRconfiglinelogin authentication ssh_lines BuildingRconfiglineexitBuildingRconfigrouter eigrp 10 BuildingRconfigrouterwork 0 BuildingRconfigrouterwork 1004 3 Build