熟练掌握cisco 3550的常用配置命令
- 设置设备的标示名,一般按设备型号+物理位置+管理IP地址
command:hostname machine_name
- 配置登录的用户名和密码
username Cisco password cisco
- 关闭错误命令查询:no ip domain-lookup
- SSH登录配置
在全局模式下:
line vty 0 15
password cisco
login
transport input {ssh|telnet|none|all}
access-class 1 in
no exec-timeout
enable 模式下:
enable password cisco
enable secret cisco1
- sh lacp sys-id
sh file system
sh hardware
dir or show flash
crypto key generate rsa
- AAA认证开启,aaa new-module
- 邻居发现协议
cdp run
cdp timer 10
cdp holdtime 30
cdp advertise-v2
int f0/1接口下开启cdp协议
cdp enable
7.line con 0 配置
password cisco
login local
8.spanning-tree
sh spanning-tree active
sh spanning-tree vlan XX active
9.NTP
ntp peer 192.168.1.1 ver 3 key 2 source f0/10 prefer
ntp authenticate
ntp broadcastdelay 3000
ntp trustkey 2
ntp authentication-key 2 md5 cisco
10.VTP
vtp mode {client |server|transparent}
vtp password cisco
vtp domain domain_name
vtp version 2
vtp pruning
sh vtp password
sh vtp status
11.端口安全port-security
int f0/1
swithport port-security ?
ip dhcp snooping(arp 防止攻击)
全局开启 ip dhcp snooping
int f0/1
ip dhcp snooping {limit rate |trust|vlan}
sh ip dhcp snooping
12.终端显示缓冲的大小
terminal length 100
terminal width 100
sh mac address-table dy int f0/1
sh int counters
errdisable recovery {internal|cause}