汇聚与交换机如何配置,求大神给份完整命令配置表
一、VLAN与IP设置
VLAN |
IP |
说明 |
91 |
172.16.91.x/24/172.16.91.1 |
AP管理 |
92 |
172.168.92.x/24/172.168.92.1 |
网络数据 |
116 |
172.16.161.x/24/172.16.161.1 |
馆监控 |
二、交换机设置:
1、IP(VLAN 2000)
汇聚交换机 |
10.10.10.105/24/10.10.10.254 |
网络交换机-1 |
10.10.10.106 |
监控交换机-1 |
10.10.10.107 |
监控交换机-2 |
10.10.10.108 |
网络交换机-2 |
10.10.10.109 |
监控交换机-3 |
10.10.10.110 |
2、交换机端口:
汇聚交换机:
光口1 → 网络交换机1 光口28
光口2 → 监控交换机1 光口28
光口3 → 监控交换机2 光口28
光口4 → 网络交换机2 光口28
光口5 → 监控交换机3 光口28
3、其他
添加静态路由: 目标:0.0.0.0 ,下一跳:10.10.10.1
密码:设置vty验证纯密码:lxyz123
开启telnet服务
汇聚交换机:
#telnet密码是lxyz123
#console密码是lxyz123
#
#
sys
sys xxx(实际名称)
#
lldp global enable
#
vlan 91 92 116 2000
#
int vlan 2000
ip add 10.10.10.105 24
#
telnet server enable
#
shutdown-interval 0
stp bpdu-protection
stp tc-protection threshold 1
stp global enable
#
local-user admin
password simple lxyz123
service-type telnet
authorization-attribute user-role level-15
authorization-attribute user-role network-admin
#
user-interface vty 0 4
authentication-mode scheme
protocol inbound all
#
user-interface class console
user-interface class aux
authentication-mode password
user-role network-admin
set authentication password simple lxyz123
#
clock timezone utc+0800 add 08:00:00
ntp-service enable
ntp-service unicast-server 10.10.10.1
ntp-service source Vlan-interface 2000
#
un interface Vlan-interface1
#
dhcp snooping enable
#
#汇聚上联端口
interface xxx
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 91 92 116 2000
dhcp snooping trust
# 下联端口
interface ra xge1/0/1 to xge1/0/5
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 91 92 116 2000
stp root-protection
#
ip route-s 0.0.0.0 0 10.10.10.1
#
save force
#
接入交换机:
sys
sys xxx(实际名称)
#
lldp global enable
#
#
vlan 91 92 116 2000
#
int vlan 2000
ip add 10.10.10.106 24
#
telnet server enable
#
shutdown-interval 0
stp bpdu-protection
stp tc-protection threshold 1
stp global enable
#
local-user admin
password simple lxyz123
service-type telnet
authorization-attribute user-role level-15
authorization-attribute user-role network-admin
qu
#
user-interface vty 0 4
authentication-mode scheme
protocol inbound all
#
user-interface class console
user-interface class aux
authentication-mode password
user-role network-admin
set authentication password simple lxyz123
#
clock timezone utc+0800 add 08:00:00
ntp-service enable
ntp-service unicast-server 10.10.10.1
ntp-service source Vlan-interface 2000
#
un interface Vlan-interface1
#
dhcp snooping enable
#
#上联汇聚端口
interface xge1/0/28
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 91 92 116 2000
dhcp snooping trust
# 下联端口
interface ra ge1/0/1 to ge1/0/24
port access vlan xx(实际接入设备的vlan,如是AP管理vlan,还要考虑是集中转发,还是本地转发,再来修改接口类型)
poe enable
stp edged-port
#
ip route-s 0.0.0.0 0 10.10.10.1
#
save force
#
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
那就建议找下购买渠道协调工程师远程呗