Настройка Cisco 2960¶
Дано:
Свитч Cisco 2960, который необходимо настроить для работы с Livewire сетью.
Есть мануал от Axia (configuring-the-cisco-2960-switch-for-livewire.pdf) в котором описана настройка. Он подойдет если нужно настроить 1 свитч, е если нужно настроить 10 свитчей, то проще поступить следующим образом - собрать все команды подряд и через copy-paste, через Putty послать их свитчу.
ИТАК:
распакуйте свитч, подайте питание, дождитесь окончания загрузки (это занимает около 3-4 минут).
подключитесь через Putty или Hyperterminal к свитчу используя синий консольный кабель и переходник USB-COM.
Внимание! Некоторые переходники USB-COM работают некорректно - это проявляется в том, что при ручном вводе
команд через консоль команды передаются корректно, а при копировании и вставке слетает кодировка, причем каждый раз по разному.
Ненастроенный свитч из коробки предложит запустить мастер настройки. Отвечайте "N"
"Would you like to enter the initial configuration dialog? [yes/no]: n"
Затем скопируйте указанные ниже команды, все разом, начиная с "en" и заканчивая "write mem" (это аналог соманды copy running-config startup config)
en
conf t
interface Vlan1
ip address 172.22.0.1 255.255.0.0
no shutdown
ip igmp snooping querier
ip igmp snooping querier max-response-time 25
ip igmp snooping vlan 1 immediate-leave
ip igmp snooping querier timer expiry 205
mls qos srr-queue input buffers 50 50
mls qos srr-queue input cos-map queue 1 threshold 1 5
mls qos srr-queue input cos-map queue 2 threshold 1 6 7
mls qos srr-queue output cos-map queue 1 threshold 1 6 7
mls qos srr-queue output cos-map queue 3 threshold 1 5
mls qos
interface range fa0/1-24
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
interface range gi0/1-2
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
enable password cisco
end
write mem
Дождитесь сообщения
"Building configuration...
[OK]Минимальная настройка, которую требует Axia в документе "configuring-the-cisco-2960-switch-for-livewire.pdf" выполнена.
Также в конфигурацию добавлена строка "enable password cisco", которая устранавливает пароль "cisco" для доступа к web-интерфейсу свитча. Это не обязательно, но полезно при эксплуатации. Без пароля доступ к web-интерфейсу невозможен.
Если зайти с помощью браузера на 172.22.0.1, то логин указывать не нужно, а в поле пароль - написать "cisco"
Перезагрузите свитч по питанию, дождитесь завершения загрузки, выполните команду
en
_пароль_
show runи убедитесь в том, что загрузилась правильная конфигурация.
{{cut_start(Пример правильно загрузившейся конфигурации:)}}
Switch>en
Password:
Switch#show run
Building configuration...
Current configuration : 10429 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
system mtu routing 1500
!
!
ip igmp snooping querier max-response-time 25
ip igmp snooping querier timer expiry 205
ip igmp snooping querier
ip igmp snooping vlan 1 immediate-leave
!
mls qos srr-queue input buffers 50 50
mls qos srr-queue input cos-map queue 1 threshold 1 5
mls qos srr-queue input cos-map queue 2 threshold 1 6 7
mls qos srr-queue output cos-map queue 1 threshold 1 6 7
mls qos srr-queue output cos-map queue 3 threshold 1 5
mls qos
!
crypto pki trustpoint TP-self-signed-3799612032
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3799612032
revocation-check none
rsakeypair TP-self-signed-3799612032
!
!
crypto pki certificate chain TP-self-signed-3799612032
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33373939 36313230 3332301E 170D3933 30333031 30303031
30335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 37393936
31323033 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BC5F 4DE46929 764DAB8D 5F23D464 F277CC1D 56D0A78F 68C74C39 7C17BBE7
ECCAF055 A69B7225 65B30934 67C17929 3C2625F0 23EDF3A3 418F24DB 35396832
69EB8AD6 9C5AE092 BBF65712 769A2CF6 0398BB10 4D4C98A6 4D43E722 9967958A
4EEDDC50 9F491F3D 959D808A 9F2F707C 1C9BD3D7 E4409343 25D22EF3 33BCFB4B
B2290203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14593CAC B17140A6 B04748D0 E0054662 AC7CE72E 52301D06
03551D0E 04160414 593CACB1 7140A6B0 4748D0E0 054662AC 7CE72E52 300D0609
2A864886 F70D0101 05050003 81810014 1BC87176 949843BC E1B3BA8B A74F14FC
23BD7383 79766E1A 1229150F 19A75A97 644007A1 395C7945 5046B927 2D1F0B99
323134FE 1889624A 1A6E4DC2 B84C3275 9D0617E8 6814120F 5AE26A49 2A5D1237
464DBDE3 38ECDC03 C4BD468E 6AC0F201 0E5A2535 7ED5E898 2AFE5B5C 8376F6F9
D38B2E7E A5729A34 B76F9993 4E0E2D
quit
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface FastEthernet0/1
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/2
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/3
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/4
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/5
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/6
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/7
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/8
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/9
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/10
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/11
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/12
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/13
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/14
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/15
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/16
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/17
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/18
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/19
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/20
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/21
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/22
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/23
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface FastEthernet0/24
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface GigabitEthernet0/1
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface GigabitEthernet0/2
switchport mode access
switchport nonegotiate
switchport block multicast
switchport voice vlan dot1p
srr-queue bandwidth share 30 20 25 25
srr-queue bandwidth shape 0 0 0 0
priority-queue out
mls qos trust cos
spanning-tree portfast
no ip igmp snooping tcn flood
!
interface Vlan1
ip address 172.22.0.1 255.255.0.0
!
ip http server
ip http secure-server
!
!
line con 0
line vty 0 4
login
line vty 5 15
login
!
end
{{cut_end}}
