Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 158 views

    Switch Configuration

    Uploaded by

    Ega Sykes
    This document provides configuration instructions and summaries for switch configuration including system operation, port technologies, VLAN, Q-in-Q, DHCP, STP, security features, and multi-cast. It discusses commands for basic switch operation, user management, software upgrade, and various layer 2 and layer 3 features.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd

    Switch Configuration

    Uploaded by

    Ega Sykes
    158 views50 pages
    This document provides configuration instructions and summaries for switch configuration including system operation, port technologies, VLAN, Q-in-Q, DHCP, STP, security features, and multi-cast. It discusses commands for basic switch operation, user management, software upgrade, and various layer 2 and layer 3 features.

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PPT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides configuration instructions and summaries for switch configuration including system operation, port technologies, VLAN, Q-in-Q, DHCP, STP, security features, and multi-cast. It discusses commands for basic switch operation, user management, software upgrade, and various layer 2 and layer 3 features.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    158 views50 pages

    Switch Configuration

    Uploaded by

    Ega Sykes
    This document provides configuration instructions and summaries for switch configuration including system operation, port technologies, VLAN, Q-in-Q, DHCP, STP, security features, and multi-cast. It discusses commands for basic switch operation, user management, software upgrade, and various layer 2 and layer 3 features.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    of 50

    Swtich Configuration

    system operation
    Port technologies VLAN Q-in-Q DHCP STP Secure Multi-cast

    Command mode
    Raisecom> Raisecom# Raisecom(config)# Raisecom(config-port)# Raisecom(config-range)# Raisecom(config-ip)# Raisecom(config-vlan)#

    Basic operation command


    Raisecom# Raisecom# Raisecom# Raisecom# Raisecom# write erase reboot show running-config show version

    Raisecom#

    User management
    Default userraisecompasswordraisecom Add a new user user name USERNAME password PASSWORD

    Show user information: show user Set password for enable mode Raisecom#enable password Please input password:PASSWORD Please input again:PASSWORD

    Upload and download


    download {system-boot|startup-config} {tftp | ftp}

    system-boot startup-config tftp ftp

    Upgrade software
    ISCOM2826 port24 FTP SERVER

    IP: 10.0.0.2

    IP: 10.0.0.1

    Raisecom#config Raisecom(config)#interface ip 0 Raisecom(config-ip)#ip address 10.0.0.2 1

    Raisecom(config-ip)#end
    Raisecom#download system-boot ftp Please input server IP Address:10.0.0.1 Please input FTP User name:test

    Please input FTP Password:test


    Please input FTP Server File Name:system_boot.Z

    system operation
    Ethernet Port technology VLAN Q-in-Q DHCP STP Secure Multi-cast

    Port Technologies
    Auto Negotiation MDI/MDIX

    Flow Control
    Backpressure 802.3x

    Trunk
    Port Mirror Storm Control

    Flow Control
    IEEE802.3X
    PAUSE Frame
    flowcontrol {receive|send}{ on | off } send receive on off The flow control function is disabled in default
    Example: Raisecom#config Raisecom(config)# interface port 10 Raisecom(config-port)#flowcontrol receive on Raisecom(config-port)#exit

    Trunk
    ISCOM2826-1

    Example
    port 3 PC-1

    port24 port23

    port24 port23

    ISCOM2826-2

    port 5 PC-2

    192.168.1.5

    192.168.1.6

    ISCOM2826-1#config ISCOM2826-1(config)#trunk enable ISCOM2826-1(config)#trunk-group 3 2324

    ISCOM2826-1(config)#trunk loading-sharing mode sxordmac

    Port Mirror
    ISCOM2826
    3 4 8

    port24

    Monitor

    PC-1

    PC-2

    PC-3

    iscom2826#config

    iscom2826(config)#mirror enable
    iscom2826(config)#mirror monitor-port 24 iscom2826(config)#mirror source-port-list ingress 3,8 egress 4,8

    Storm-control

    iscom2826#config iscom2826(config)#storm-control all enable


    iscom2826(config)#storm-control pps 1024

    system operation
    Port technologies VLAN Q-in-Q DHCP STP Secure Multi-cast

    VLAN
    DA SA Type Data CRC

    Standard Ethernet Frame

    DA

    SA

    tag

    Type

    Data TCI

    CRC

    TPID

    Priority CFI VLAN ID

    IEEE802.1Q tagged Ethernet frame

    Receiving Packet

    Access
    tag tag

    Trunk
    tag tag

    Hybrid
    tag

    yes
    tag untag tag

    no
    untag

    yes
    tag

    no
    untag

    Packet sending

    Access
    tag

    Trunk
    tag tag

    Hybrid
    tag

    VLAN=PVID
    untag untag

    VLANPVID
    tag untag

    VLAN=PVID
    untag

    VLANPV ID
    tag

    Shared Vlan

    192.168.1.7
    VLAN10

    PC-3

    Port24

    ISCOM2826
    Port1 Port 2

    PC-1 192.168.1. 5VLAN20

    PC-2 192.168.1.6 VLAN30

    Shared VLAN
    ISCOM2826#config

    ISCOM2826(config)#create vlan 10,20,30 active


    ISCOM2826(config)#svl enable ISCOM2826(config)#interface port 2 ISCOM2826(config-port)#switchport access vlan 30

    ISCOM2826(config-port)# switchport svl vlanlist 10


    ISCOM2826(config-port)#exit ISCOM2826(config)#interface port 1 ISCOM2826(config-port)#switchport access vlan 20

    ISCOM2826(config-port)# switchport svl vlanlist 10


    ISCOM2826(config-port)#exit ISCOM2826(config)#interface port 24 ISCOM2826(config-port)# switchport access vlan 10

    ISCOM2826(config-port)#switchport svl vlanlist 20,30

    Port Protection (isolated)

    192.168.1. 7 PC-3

    Port2 4 Port1 Port 2

    PC-1 Port isolated 192.168.1 .5

    PC-2 192.168.1. 6

    VLAN 100

    Port isolated
    ISCOM2826-1#config

    ISCOM2826-1(config)#create vlan 100 active


    ISCOM2826-1(config)#interface range 1-2 ISCOM2826-1(config-port)#switchport access vlan 100 ISCOM2826-1(config-port)#switchport protect

    ISCOM2826-1(config-port)#exit
    ISCOM2826-1(config)#int port 24 ISCOM2826-1(config-port)#switchport mode trunk ISCOM2826-1(config-port)#switchport trunk allowed vlan 100

    ISCOM2826-1(config-port)#exit

    Trunk mode

    ISCOM2826-1

    Port24 Trunk

    Port24 Trunk

    ISCOM2826-2

    Port1

    Port 2

    Port 1
    PC-3 192.168.1.7 VLAN20

    Port 2

    PC-1 192.168.1. 5VLAN20

    PC-2
    192.168.1.6 VLAN30

    PC-4
    192.168.1.8 VLAN30

    Trunk port configuration


    ISCOM2826-1#config ISCOM2826-1(config)#create vlan 20,30 active ISCOM2826-1(config)#interface port 1 ISCOM2826-1(config-port)#switchport access vlan 20 ISCOM2826-1(config-port)#exit ISCOM2826-1(config)#interface port 2 ISCOM2826-1(config-port)#switchport access vlan 30 ISCOM2826-1(config-port)#exit ISCOM2826-1(config)#int port 24 ISCOM2826-1(config-port)#switchport mode trunk ISCOM2826-1(config-port)#switchport trunk allowed vlan all ISCOM2826-1(config-port)#exit

    ISCOM2826-2 configuration same to above

    Hybrid port

    ISCOM2826-1

    Port24

    Port24

    ISCOM2826-2

    Port1 PC-1 192.168.1. 5VLAN20

    Port 2 PC-2 192.168.1.6 VLAN30

    Port1 PC-3 192.168.1.7 VLAN20

    Port 2 PC-4 192.168.1.8 VLAN30

    Hybrid mode configuration


    ISCOM2826-1 # config

    ISCOM2826-1(config)#create vlan 20,30 active


    ISCOM2826-1(config)#interface port 24 ISCOM2826-1(config-port)# switchport mode hybrid ISCOM2826-1(config-port)# switchport hybrid allowed vlan 20

    ISCOM2826-1(config-port)# switchport hybrid untagged vlan 30


    ISCOM2826-1(config-port)# switchport native vlan 30 ISCOM2826-1(config-port)#exit ISCOM2826-1(config)#interface port 1

    ISCOM2826-1(config-port)# switchport access vlan 20


    ISCOM2826-1(config)#interface port 2 ISCOM2826-1(config-port)# switchport access vlan 30

    ISCOM2826-2 is same

    system operation

    Port technologies VLAN Q-in-Q DHCP STP Secure Multi-cast

    Q-in-Q

    MAC DA MAC SA
    P-ETHER TYPE
    P-Vlan Cos

    P-VLAN TAG C-VLAN TAG


    ETHER TYPE DATA CRC

    P-CFI=0
    P-Vlan ID

    Q-in-Q
    C-Mac DA C-Mac SA C-Vlan Tag (C-Vlan ID 60 61 62) C-Ether Type C-Data C-CRC C-Mac DA C-Mac SA P-Vlan Tag (P-Vlan ID 100) C-Vlan Tag C-Ether Type C-Data C-CRC
    C-Vlan ID 60 C-Vlan ID 61 C-Vlan ID 62

    UNI

    P-Vlan ID 100

    Standard Q-in-Q

    ISP
    switchA
    Port1 Port27

    ISP 1

    Port28 Port28

    ISP 2

    Port27 Port1

    switchB

    Port2

    Port3

    P-VLAN Tag 100

    Port2

    Port3

    C-VLAN Tag 10 C-VLAN Tag 20

    C-VLAN Tag 10 C-VLAN Tag 20

    Standard Q-in-Q
    SwitchA(config)#create vlan 10,20 active SwitchA(config)# interface port 1 SwitchA(config-port)#switchport mode trunk SwitchA(config-port)#switchport trunk allowed vlan all SwitchA(config)# interface port 2 SwitchA(config-port)# switchport access vlan 10 SwitchA(config)# interface port 3 SwitchA(config-port)# switchport access vlan 20

    Switch B configuration similar to A

    Standard Q-in-Q
    ISP1(config)# create vlan 100 active ISP1(config)# interface port 27 ISP1(config-port)# switchport mode dot1q-tunnel ISP1(config-port)# switchport access vlan 100 ISP1(config)# interface port 28 ISP1(config-port)# switchport mode trunk doubletagging ISP1(config-port)#switchport trunk allowed vlan all

    ISP2 config similar to ISP1

    system operation
    Port technologies VLAN Q-in-Q DHCP STP Secure Multi-cast

    DHCP Server config

    DHCP Server config


    ISCOM3026(config)#create vlan 10,20,30 active ISCOM3026(config)#interface port 1 ISCOM3026(config-port)#switchport access vlan 10 ISCOM3026(config)#interface port 2 ISCOM3026(config-port)#switchport access vlan 20 ISCOM3026(config)#interface port 3 ISCOM3026(config-port)#switchport access vlan 30 ISCOM3026(config)#interface ip 1 ISCOM3026(config-ip)#ip address 192.168.1.1 255.255.255.0 10 ISCOM3026(config)#interface ip 2 ISCOM3026(config-ip)#ip address 192.168.2.1 255.255.255.0 20 ISCOM3026(config)#interface ip 3 ISCOM3026(config-ip)#ip address 192.168.3.1 255.255.255.0 30 ISCOM3026(config)#ip routing ISCOM3026(config)#dhcp-server ip-pool raise001 192.168.1.2 192.168.1.254 255.255.255.0 vlan-list 10 gateway 192.168.1.1 dns 202.102.192.68 ISCOM3026(config)#dhcp-server ip-pool riase002 192.168.2.2 192.168.2.254 255.255.255.0 vlan-list 20 gateway 192.168.2.1 dns 202.102.192.68 ISCOM3026(config)#dhcp-server enable

    system operation
    Port technologies VLAN Q-in-Q DHCP STP Secure Multi-cast

    Why STP
    Server X

    router Y

    STP configuration Raisecom(config)#spanning-tree enable Raisecom(config)#spanning-tree mode stp

    system operation
    Port technologies VLAN Q-in-Q DHCP STP Secure Multi-cast

    Loopback detection
    Port 1

    Loopback detection Hub


    iscom2826#config loopback

    iscom2826(config)#loopback-detection enable port-list all

    iscom2826(config)#loopback-detection hello-time 3

    iscom2826(config)#int range all iscom2826(config-range)#loopback-detection down-time 600

    ACL

    Combination of six elements

    ACL based on MAC


    ISCOM2826-1
    raisecom# config
    Port3 port1 port2

    raisecom(config)# mac-access-list 0 permit ip any any


    raisecom(config)# mac-access-list 1 deny 1234.1234.1234 5678.5678.5678 ip

    raisecom(config)# filter mac-access-list all


    PC-1 PC-2 PC-3

    raisecom(config)# filter enable raisecom(config)# exit

    Mac:1234.1234.1234

    Mac5678.5678.5678

    ACL based on IP address


    ISCOM2826-1
    raisecom#config
    port3 port1 port2

    raisecom(config)# IP-access-list 0 permit ip any any raisecom(config)# IP-access-list 1 deny ip 192.168.1.4 255.255.255.255 192.168.1.5 255.255.255.255

    PC-1 192.168.1. 3

    PC-2 192.168.1.4

    PC-3 192.168.1. 5

    raisecom(config)# filter ip-access-list all raisecom(config)# filter enable raisecom(config)# exit

    ACL based on VLAN


    ISCOM2826-1
    raisecom# config raisecom(config)# ip-access-list 0 deny ip any 192.168.1.4 255.255.255.255

    port1

    port2

    port3

    raisecom(config)# ip-access-list 1 permit ip 192.168.1.3 255.255.255.255 192.168.1.4 255.255.255.255


    PC-3

    PC-1

    PC-2

    raisecom(config)# filter ip-access-list all vlan 10

    192.168.1.3

    VLAN 10

    192.168.1.4 192.168.1. 5

    raisecom(config)# filter enable


    raisecom(config)# exit

    ACL based on protocol


    ISCOM2826-1
    raisecom# config
    port3 port1 port2

    raisecom(config)# ip-access-list 0 deny TCP any 192.168.1.3 255.255.255.255 21

    raisecom(config)# ip-access-list 1 permit TCP 192.168.1.4 255.255.255.255 192.168.1.3 255.255.255.255 21


    PC-3 192.168.1.5

    raisecom(config)# filter ip-access-list all raisecom(config)# filter enable raisecom(config)# exit

    PC-1 192.168.1. 3 FTP

    PC-2 192.168.1.4

    system operation
    Port technologies VLAN Q-in-Q DHCP STP Secure Multi-cast

    Unicast and Multicast

    IGMP Snooping

    MVR

    IGMP Snooping
    default
    IGMP Snooping is disabled

    IGMP Snooping enable


    Raisecom(config) #ip igmp snooping Raisecom(config) #ip igmp snooping vlan vlan-id

    Router port configuration


    Raisecom(config)#ip igmp snooping mrouter vlan

    vlan-id port port-id

    You might also like