CCIE LAB K2配置总结.docx

1、CCIE LAB K2配置总结Section . Layer 2 Technologies1.1 Troubleshooting Layer 2 Switching Networka. R1的vlan 11的子接口上多了一个native参数，去掉即可b. Sw3 fa0/10被做了monitor session,直接no monitor session all即可c. Loopback 口要求是/32，但预配是/24，R4、R5要手工改成/32switch(config)#control planswitch(config-plan)#service-police *去掉1.2 Tmpleme

2、nt the Access-Switch PortsSw1(config)#vlan 10 Sw1(config-vlan)#name MarketingSw1(config-vlan)#exitSw1(config)#vlan 11Sw1(config-vlan)#name SalesSw1(config-vlan)#exitSw1(config)#vlan 20 Sw1(config-vlan)#name EngineeringSw1(config-vlan)#exitSw1(config)#vlan 30 Sw1(config-vlan)#name HRSw1(config-vlan)#

3、exitSw1(config)#vlan 33 Sw1(config-vlan)#name BB3Sw1(config-vlan)#exitSw1(config)#vlan 42 Sw1(config-vlan)#name ISP42Sw1(config-vlan)#exitSw1(config)#vlan 51 Sw1(config-vlan)#name ISP51Sw1(config-vlan)#exitSw1(config)#vlan 54 Sw1(config-vlan)#name ISPBBSw1(config-vlan)#exitSw1(config)#vlan 234 Sw1(c

4、onfig-vlan)#name SupportSw1(config-vlan)#exitSw1(config)#vlan 243 Sw1(config-vlan)#name QASw1(config-vlan)#exitSw1(config)#vlan 300 Sw1(config-vlan)#name AdminSw1(config-vlan)#exit*SW1、SW2、SW3、SW4都需要创建以上vlan，可以采用将sw1设置为server，其他交换机设置为client方式来进行vlan同步，然后再修改回去。Sw1(config)#vtp mode transparentSw2(conf

5、ig)#vtp mode transparentSw3(config)#vtp mode transparentSw4(config)#vtp mode transparentSwitch#show vlan brief* 11005 vtp 10064094 non vtp Vtp transparent: 11005 : vlan.dat(vlan database) & configuration 10064094 : configurationSwitch#show flashSwitch#show vtp statusSw1#show spanning-tree vlan 1Sw1(

6、config)#spanning-tree mode rapid-pvstSw2(config)#spanning-tree mode rapid-pvstSw3(config)#spanning-tree mode rapid-pvstSw4(config)#spanning-tree mode rapid-pvstSw2(config)#interface fa0/1Sw2(config-if)#switchport trunk encapsulation dot1qSw2(config-if)#switchport mode trunkSw1(config)#interface fa0/

7、2Sw1(config-if)#switchport mode accessSw1(config-if)#switchport access vlan 20Sw1(config-if)#interface fa0/3Sw1(config-if)#switchport mode accessSw1(config-if)#switchport access vlan 30Sw3(config)#interface fa0/10Sw3(config-if)#switchport mode accessSw3(config-if)#switchport access vlan 33Sw1(config

8、)#interface fa0/4Sw1(config-if)#switchport mode accessSw1(config-if)#switchport access vlan 42Sw2(config)#interface fa0/5Sw2(config-if)#switchport mode accessSw2(config-if)#switchport access vlan 51Sw2(config-if)#interface fa0/4Sw2(config-if)#switchport mode accessSw2(config-if)#switchport access vl

9、an 54Sw1(config)#interface fa0/5Sw1(config-if)#switchport mode access Sw1(config-if)#switchport access vlan 54Sw2(config)#interface fa0/2Sw2(config-if)#switchport mode accessSw2(config-if)#switchport access vlan 234Sw2(config-if)#interface fa0/3Sw2(config-if)#switchport mode accessSw2(config-if)#swi

10、tchport access vlan 300Switch#show vlan briefSw2#show interface trunkSw1(config)#interface range fa0/2 5Sw1(config-if-range)#spanning-tree portfastSw2(config)#interface range fa0/2 5Sw2(config-if-range)#spanning-tree portfastSw2#show panning-tree interface fa0/2 portfastSw1(config)#spanning-tree por

11、tfast bpduguard defaultSw2(config)#spanning-tree portfast bpduguard defaultSw3(config)#spanning-tree portfast bpduguard defaultSw4(config)#spanning-tree portfast bpduguard defaultSw1(config)#interface range fa0/19 24Sw1(config-if-range)#udld port aggressive *aggressive是主动udld，如不输入此项，代表是被动协商udldSw2(c

12、onfig)#interface range fa0/19 24Sw2(config-if-range)#udld port aggressiveSw3(config)#interface range fa0/19 24Sw3(config-if-range)#udld port aggressiveSw4(config)#interface range fa0/19 24Sw4(config-if-range)#udld port aggressiveSwitch#show spanning-tree inconsistentports1.3 Trunking , EtherChannel

13、and STP ManipulationsSw1(config)#interface range fa0/19 24Sw1(config-if-range)#switchport trunk encapsulation dot1qSw1(config-if-range)#switchport mode trunkSw1(config-if-range)#switchport nonegotiate *关闭trunk的自动协商功能Sw2(config)#interface range fa0/19 24Sw2(config-if-range)#switchport trunk encapsula

14、tion dot1qSw2(config-if-range)#switchport mode trunkSw2(config-if-range)#switchport nonegotiateSw3(config)#interface range fa0/19 24Sw3(config-if-range)#switchport trunk encapsulation dot1qSw3(config-if-range)#switchport mode trunkSw3(config-if-range)#switchport nonegotiateSw4(config)#interface rang

15、e fa0/19 24Sw4(config-if-range)#switchport trunk encapsulation dot1qSw4(config-if-range)#switchport mode trunkSw4(config-if-range)#switchport nonegotiateSw1(config)#port-channel load-balance dst-ipSw1(config)#do show etherchannel load-balanceSw1(config)#interface range fa0/19 20Sw1(config-if-range)#

16、channel-group 13 mode activeSw1(config-if-range)#interface range fa0/21 22Sw1(config-if-range)#channel-group 14 mode activeSw1(config-if-range)#interface range fa0/23 24Sw1(config-if-range)#channel-group 12 mode activeSw1(config-if-range)#do show etherchannel summarySw2(config)#port-channel load-bal

17、ance dst-ipSw2(config)#do show etherchannel load-balanceSw2(config)#interface range fa0/19 20Sw2(config-if-range)#channel-group 24 mode activeSw2(config-if-range)#interface range fa0/21 22Sw2(config-if-range)#channel-group 23 mode activeSw2(config-if-range)#interface range fa0/23 24Sw2(config-if-ran

18、ge)#channel-group 12 mode activeSw2(config-if-range)#do show etherchannel summarySw3(config)#port-channel load-balance dst-ipSw3(config)#do show etherchannel load-balanceSw3(config)#interface range fa0/19 20Sw3(config-if-range)#channel-group 13 mode activeSw3(config-if-range)#interface range fa0/21

19、22Sw3(config-if-range)#channel-group 23 mode activeSw3(config-if-range)#interface range fa0/23 24Sw3(config-if-range)#channel-group 34 mode activeSw3(config-if-range)#do show etherchannel summarySw4(config)#port-channel load-balance dst-ipSw4(config)#do show etherchannel load-balanceSw4(config)#inte

20、rface range fa0/19 20Sw4(config-if-range)#channel-group 24 mode activeSw4(config-if-range)#interface range fa0/21 22Sw4(config-if-range)#channel-group 14 mode activeSw4(config-if-range)#interface range fa0/23 24Sw4(config-if-range)#channel-group 34 mode activeSw4(config-if-range)#do show etherchanne

21、l summarySwitch#show spanning-tree vlan 1Sw2(config)#interface fa0/1Sw2(config-if)#switchport trunk allowed vlan 10,11Sw2(config-if)#switchport nonegotiate1.4 Spanning Tree Root SwitchSw1(config)#spanning-tree vlan 1-4094 priority 0Sw1(config)#do show spanning-tree vlan 10Sw1(config)#interfafce port

22、channel 14Sw1(config-if)#spanning-tree guard rootSw2(config)#interfafce portchannel 24Sw2(config-if)#spanning-tree guard rootSw3(config)#interfafce portchannel 34Sw3(config-if)#spanning-tree guard rootSwitch#show spanning-tree inconsistentports *查看是否出现根不一致Switch#show spanning-tree inconsistentports

23、*查看是否出现根不一致，因为sw4的mac地址比sw2的好，所以会发现sw2出现根不一致，需解决Sw2#show spanning-tree interface portchannel 24 detailSw2#show spanning-tree bridgeSw2(config)#spanning-tree vlan 1-4094 priority 81921.5 Mac address aging timeSw1(config)#mac address-table aging-time 150 vlan 20Sw2(config)#mac address-table aging-time

24、 150 vlan 20Sw3(config)#mac address-table aging-time 150 vlan 20Sw4(config)#mac address-table aging-time 150 vlan 201.6 Port Mirroring (SPAN)Sw3(config)#do show monitor session 1Sw3(config)#no monitor session allSw3(config)#monitor session 1 source interface fa0/1 8 , port13 bothSw3(config)#monitor

25、session 1 destination interface fa0/11Sw3(config)#do show monitor session 11.7 Implement the Frame Relay*此题需与后面的4.1 feature相结合配置，否则单按此题要求配置是错误的R5(config)#no ip domain-loopupR5(config)#frame-relay switchingR5(config)#do show controllers s0/0R5(config-if)#no ip addressR5(config-if)#encapsulation frame

26、-relayR5(config-if)#frame-relay intf-type dceR5(config-if)#clock rate 64000R5(config-if)#frame-relay lmi-type ciscoR5(config-if)#frame-relay route 231 interface s0/1 233R5(config-if)#no shutdownR5(config-if)#interface s0/1R5(config-if)#no ip addressR5(config-if)#encapsulation frame-relayR5(config-if

27、)#frame-relay intf-type dceR5(config-if)#frame-relay lmi-type ciscoR5(config-if)#clock rate 64000R5(config-if)#frame-relay route 233 interface s0/0 231R5(config-if)#no shutdownR5(config-if)#do show frame-relay routeR1(config)#interface loopback 0R1(config-if)#ip address 1.1.1.1 255.255.255.0R1(confi

28、g-if)#interface multilink 1R1(config-if)#ip unnumbered loopback 0 *地址借用loopback口R1(config-if)#do show runn multilink 1R1(config-if)#interface virtual-template 1R1(config-if)#no ip addressR1(config-if)#ppp multilink group 1R1(config-if)#do show runn interface virtuali-template 1R1(config-if)#interfac

29、e s0/1R1(config-if)#no ip addressR1(config-if)#encapsulation frame-relayR1(config-if)#no frame-relay inverse-arpR1(config-if)#no arp frame-relayR1(config-if)#do show frame-relay mapR1(config-if)#interface s0/1.231 point-to-pointR1(config-subif)#frame-relay interface-dlci 231 ppp virtual-template 1R1

30、(config-subif)#exitR1(config-if)#no shutdownR3(config)#interface loopback 0R3(config-if)#ip address 1.1.3.3 255.255.255.0R3(config-if)#interface multilink 1R3(config-if)#ip unnumbered loopback 0 *地址借用loopback口R3(config-if)#do show runn multilink 1R3(config-if)#interface virtual-template 1R3(config-i

31、f)#no ip addressR3(config-if)#ppp multilink group 1R3(config-if)#do show runn interface virtuali-template 1R3(config-if)#interface s0/0R3(config-if)#no ip addressR3(config-if)#encapsulation frame-relayR3(config-if)#no frame-relay inverse-arpR3(config-if)#no arp frame-relayR3(config-if)#do show frame-relay mapR3(config-if)#interface s0/1.233 point-to-pointR3(config-subif)#frame-relay interface-dlci 233 ppp virtual-template 1R3(config-subif)#e