aruba交换机配置实战篇.docx

1、aruba交换机配置实战篇一，忘记密码按以下操作超级账号密码passwordforgetme!Admin 密码修改ArubaS2500-24P) (config) #mgmt-user admin rootPassword:* /admin123!Re-Type password:* /admin123!(ArubaS2500-24P) (config) #endEnable 密码重新设置(ArubaS2500-24P) (config) #enable secret?secret Enter the enable password (ArubaS2500-24P) (config) #ena

2、ble secretPassword:* 、直接输入新密码、Re-Type password:* 再次输入这个账号只能用于需改密码，需要配置的话要退出用admin账号进入才能操作二，交换机初始化User: adminPassword: * /admin123/默认密码(ArubaS2500-24P) enablePassword:* /enableQuick-setup helps in setting the basic configuration of the systemAutoconfiguration of system will be stopped, if Quick-setup

3、 is launched by userInvoke Quick-setup (y|n) y:y* Welcome to the ArubaS2500-24P setup dialog *This dialog will help you to set the basic configuration for the switch.These settings, except for the Country Code, can later be changed from theCommand Line Interface or Graphical User Interface.Commands:

4、 Submit input or use default value, Help Back, Forward, Line begin, Line end Delete, Delete back, Delete to end of line Previous question , Restart beginning, to exitEnter System name ArubaS2500-24P: aruba2500-xmu-2fConfigure inband management VLAN yes|no: yes 是否开启管理VLANInband management vlan id 1:

5、711 管理VLAN段Enter the member interfaces for management VLAN (Example 0/0/0,0/0/1): 0/0/23,0/1/1 添加需要trunk的端口Enter management VLAN IP address 172.16.0.254: 172.31.11.2 管理ipEnter mgmt VLAN interface subnet mask 255.255.255.0: 回车Enter Out of band management interface IP address none: 回车Enter IP Default

6、gateway none: 172.31.11.1 网关Enter Country code (ISO-3166), for supported list: CN 中国You have chosen Country code CN for China (yes|no)?: yesEnter Time Zone PST-8:0: CST+8:0Enter Time in UTC 03:48:15: Enter Date (MM/DD/YYYY) 7/4/2013: Enter Password for admin login (up to 32 chars): * /admin123!Re-ty

7、pe Password for admin login: * /admin123! Enter Password for enable mode (up to 15 chars): * /enablleRe-type Password for enable mode: * /enable Current choices are:System name: aruba2500-xmu-2fConfigure inband management VLAN: yesvlan id for inband management 1-4094: 711Members interfaces of manage

8、ment VLAN: 0/0/23,0/1/1IP address of management VLAN: 172.31.11.2Management VLAN interface subnet mask: 255.255.255.0IP Default gateway: 172.31.11.1Country code: CNTime Zone: CST+8:0Type to go back and change answer for any questionDo you wish to accept the changes (yes|no|abort): yesCreating config

9、uration. Done.Configuring.Saving Configuration.Configuration Saved.(aruba2500-xmu-2f) #configure terEnter Configuration commands, one per line. End with CNTL/Z (aruba2500-xmu-2f) (config) #telnet cli /开启telnet功能(aruba2500-xmu-2f) (config) #end(aruba2500-xmu-2f) #show ip interface brief Interface IP

10、Address / IP Netmask Admin Protocolvlan 711 172.31.11.2 / 255.255.255.0 Up Up mgmt unassigned / unassigned Up Down(aruba2500-xmu-2f) #ping 172.31.11.1 Press q to abort.Sending 5, 100-byte ICMP Echos to 172.31.11.1, timeout is 2 seconds:.Success rate is 0 percent (0/5)(aruba2500-xmu-2f) #ping 172.31.

11、11.1 (aruba2500-xmu-2f) #configure ter(aruba2500-xmu-2f) (config) #interface-group gigabitethernet ap 创建端口组(aruba2500-xmu-2f) (gigabitethernet ap) #apply-to 0/0/0-0/0/23 把0/0/0-0/0/23加入组中(aruba2500-xmu-2f) (gigabitethernet ap) #exit(aruba2500-xmu-2f) (switching profile ap) #vlan 712 创建 vlan712（我给AP用

12、的）(aruba2500-xmu-2f) (VLAN 712) #exit (aruba2500-xmu-2f) (config) #interface-profile switching-profile ap (aruba2500-xmu-2f) (switching profile ap) #access-vlan 712 关联(aruba2500-xmu-2f) (switching profile ap) #exit(aruba2500-xmu-2f) (config) #interface-profile poe-profile ap(aruba2500-xmhu-2f) (Powe

13、r over Ethernet profile ap) #enable 开启POE供电功能(aruba2500-xmu-2f) (Power over Ethernet profile ap) #exit(aruba2500-xmu-2f) (config) #interface-group gigabitethernet ap(aruba2500-xmu-2f) (gigabitethernet ap) #switching-profile ap 应用到端口(aruba2500-xmu-2f) (gigabitethernet ap) #poe-profile ap 应用到端口(aruba2

14、500-xmu-2f) (gigabitethernet ap) #end如果想把那个端口trunk，可以这样(aruba2500-xmu-2f) (config) #interface g 0/0/2 (aruba2500-xmu-2f) #switching-profile Upstream-profile删除的话就加no (aruba2500-xmu-2f) #no switching-profile Upstream-profile如果要把那个端口加入vlan20(aruba2500-xmu-2f) #vlan 20(aruba2500-xmu-2f) (VLAN 20) #exit

15、(aruba2500-xmu-2f) (config) #interface-profile switching-profile 20 (aruba2500-xmu-2f) (switching profile ap) #access-vlan 20(aruba2500-xmu-2f) (config) #interface g 0/0/2 (aruba2500-xmu-2f) #switching-profile 20 删除就加no (aruba2500-xmu-2f) #no switching-profile 20或者(aruba2500-xmu-2f) #no switching-pr

16、ofile 三，升级配置把网线接到23口，电脑开启tftp服务器软件ArubaS2500-24P) (config) #interface-profile switching-profile ftp /-创建模板FTP(ArubaS2500-24P) (switching profile ftp) #access-vlan 1 关联vlan1 (ArubaS2500-24P) (switching profile ftp) #exit(ArubaS2500-24P) (config) #interface gigabitethernet 0/0/23(ArubaS2500-24P) (giga

17、bitethernet 0/0/23) #switching-profile ftp /启用ftp(ArubaS2500-24P) (gigabitethernet 0/0/23) #exit(ArubaS2500-24P) (config) #interface vlan 1(ArubaS2500-24P) (vlan 1) #ip address 10.0.0.1 255.0.0.0 (ArubaS2500-24P) (vlan 1) #exit(ArubaS2500-24P) (config) #end(ArubaS2500-24P) #ping 10.0.0.5(ArubaS2500-

18、24P) #(ArubaS2500-24P) #(ArubaS2500-24P) #copy ftp: 10.0.0.5 admin ArubaOS_MAS_7.2.2.1_38712 system: partition 0Password:* /-admin和密码是ftp的用户名和没密码，10.0.0.5是电脑的ipPress q to abort.Copying file:.File copied successfully.Saving file to flash:.Member-0:The system will boot from partition 0 during the next

19、 reboot.(ArubaS2500-24P) #re? reload Coldstart the switchrename rename a filerestore restore file or configuration(ArubaS2500-24P) #reload Do you want to save the configuration(y/n): nDo you really want to restart the system(y/n): ySystem will now restart!Shutdown processing started(aruba2500-xmu-2f

20、) #write memory 保存Saving Configuration.Configuration Saved.(aruba2500-xmu-2f) #show running-config Building Configuration.# Configuration file for ArubaOSversion 7.2enable secret *telnet clihostname aruba2500-xmu-2fclock timezone CST 8location Building1.floor1 controller config 3ip access-list eth v

21、aliduserethacl permit any !ip access-list stateless dns-acl-stateless any any svc-dns permit !ip access-list stateless http-acl-stateless any any svc-http permit !ip access-list stateless https-acl-stateless any any svc-https permit ! ip access-list stateless icmp-acl-stateless any any svc-icmp perm

22、it !ip access-list stateless logon-control-stateless any any svc-icmp permit any any svc-dns permit any any svc-dhcp permit any any svc-natt permit !ip access-list session validuser network 169.254.0.0 255.255.0.0 any any deny any any any permit ipv6 alias any6 alias any6 any permit !user-role authe

23、nticated access-list stateless allowall-stateless!user-role denyall!user-role guest access-list stateless http-acl-stateless access-list stateless https-acl-stateless access-list stateless dhcp-acl-stateless access-list stateless icmp-acl-stateless access-list stateless dns-acl-stateless!user-role l

24、ogon access-list stateless logon-control-stateless!crypto ipsec transform-set default-boc-bm-transform esp-3des esp-sha-hmaccrypto ipsec transform-set default-rap-transform esp-aes256 esp-sha-hmaccrypto isakmp eap-passthrough eap-tlscrypto isakmp eap-passthrough eap-peapcrypto isakmp eap-passthrough

25、 eap-mschapv2mgmt-user admin root 9a05893a01941ea9fadbe8f7f92075bc5b5c8189ef96622520no firewall attack-rate cp 1024ipv6 firewall ext-hdr-parse-len 100! firewall cppacket-capture-defaults tcp disable udp disable sysmsg disable other disable!ip domain lookup!country CNaaa authentication mac default!aa

26、a authentication dot1x default!aaa server-group default auth-server Internal set role condition role value-of!aaa profile default!aaa authentication captive-portal default!aaa authentication vpn default!aaa authentication mgmt!aaa authentication wired! web-server!aaa password-policy mgmt!traceoption

27、s!qos-profile default!policer-profile default!ip-profile default-gateway 172.31.11.1!lcd-menu!interface-profile ospf-profile default area 0.0.0.0!interface-profile pim-profile default!interface-profile igmp-profile default!stack-profile! ipv6-profile!interface-profile switching-profile ap access-vla

28、n 712!interface-profile switching-profile default!interface-profile switching-profile Upstream-profile switchport-mode trunk!interface-profile poe-profile ap enable!interface-profile poe-profile default!interface-profile poe-profile poe-factory-initial enable!interface-profile enet-link-profile defa

29、ult!interface-profile lldp-profile default!interface-profile lldp-profile lldp-factory-initial lldp transmit lldp receive med enable!interface-profile mstp-profile default!interface-profile pvst-port-profile default!vlan-profile mld-snooping-profile default!vlan-profile igmp-snooping-profile default!vlan-profile igmp-snooping-profile igmp-snooping-factory-initial!spanning-tree mode mstp!gvrp!mstp!lacp!vlan 1 igmp-snooping-profile igmp-snooping-factory-i