CCNA3 v3.1 Module 6

transcript

8/14/2019 CCNA3 v3.1 Module 6

http://slidepdf.com/reader/full/ccna3-v31-module-6 1/79

CCNA 3 v3.1 Module 6Switch Configuration

LOCAL CISCO ACADEMY ELSYS TU

INSTRUCTOR: STELA STEFANOVA

8/14/2019 CCNA3 v3.1 Module 6

Objectives

8/14/2019 CCNA3 v3.1 Module 6

Catalyst 2950 series Switches Features

• Fixed configuration symmetrical switches withall ports being FastEthernetor 10/100;

• Asymmetrical switcheswith two fixed fiber or copper Gigabit Ethernet ports;

• Asymmetrical switcheswith modular GigabitInterface Converter (GBIC)slots

8/14/2019 CCNA3 v3.1 Module 6

Light-emitting diodes (LEDs)

• help monitor system activity and performance;

• on the front of a switch:- System LED

- Remote Power Supply (RPS) LED

- Port Mode LEDs- Port Status LEDs

8/14/2019 CCNA3 v3.1 Module 6

System LED

• shows whether the system is receiving power and functioningcorrectly;

RPS LED

• indicates whether or not the remote power supply is in use;

Mode LEDs

• indicate the current state of the Mode button;

• are used to determine how the Port Status LEDs are interpreted;

• to select or change the port mode, press the Mode button repeatedlyuntil the Mode LEDs indicate the desired mode.

Port Status LEDs

• have different meanings, depending on the current value of theMode LED.

8/14/2019 CCNA3 v3.1 Module 6

Switch Mode LED Indicators

8/14/2019 CCNA3 v3.1 Module 6

Mode LED

8/14/2019 CCNA3 v3.1 Module 6

Mode LED

8/14/2019 CCNA3 v3.1 Module 6

Mode LED

8/14/2019 CCNA3 v3.1 Module 6

Verifying Port LEDs During Switch POST

Power-On Self Test (POST)

• runs automatically to verify that the switch

functions correctly;

• POST failure is considered to be a fatal error ;

• should not expect a reliable operation of the

switch if POST fails.

8/14/2019 CCNA3 v3.1 Module 6

Verifying Port LEDs During Switch POST

Port Status LEDs during POST:

turn amber - for about 30 seconds

• the switch discovers the network topology and

searches for loops;

turn green

• the switch has established a link between the

port and a target, such as a computer;turn off

• the switch has determined that nothing is plugged into the port.

8/14/2019 CCNA3 v3.1 Module 6

Connecting Switch to PC

8/14/2019 CCNA3 v3.1 Module 6

Console Connection

8/14/2019 CCNA3 v3.1 Module 6

Console Connection

8/14/2019 CCNA3 v3.1 Module 6

Console Connection

Shows information about the switch:

• details about POST status;

• data about the switch hardware.

8/14/2019 CCNA3 v3.1 Module 6

Switch CLI

8/14/2019 CCNA3 v3.1 Module 6

Command-Line Interface (CLI)

Command-line interface (CLI) for Ciscoswitches:

• is very similar to the CLI for Cisco routers.

8/14/2019 CCNA3 v3.1 Module 6

“Help” command

8/14/2019 CCNA3 v3.1 Module 6

“help” command

“Help” commandWord help

• to obtain a list of commands that begin with a particular character sequence, enter those characters followedimmediately by the question mark (?);

• do not enter a space before the question mark;

• it completes a word.

Command syntax help

• to list keywords or arguments that are associated with aparticular command, enter one or more words associatedwith the command, followed by a space and then a question mark (?);

• provides applicable keywords or arguments based on a

partial command.

8/14/2019 CCNA3 v3.1 Module 6

Command Modes

• User EXEC

• Privileged EXEC

8/14/2019 CCNA3 v3.1 Module 6

User EXEC mode

• default mode;

• is recognized by its prompt, whichends in a greater-than character (>);

• available commands are limited:

- to change terminal settings;- to perform basic tests;

- to display system information.

8/14/2019 CCNA3 v3.1 Module 6

“show” command

Show commands that are available in User EXEC mode

8/14/2019 CCNA3 v3.1 Module 6

Privileged EXEC mode

• to enter enable command is used from User EXECmode;

• is recognized by its prompt, which ends in a pound-sign character (#);

• the command set includes the configure command:

- allows other command modes to be accessed;

• should be password protected to preventunauthorized use;

• the password does not appear on the screen, and iscase sensitive.

8/14/2019 CCNA3 v3.1 Module 6

Default Running Configuration

8/14/2019 CCNA3 v3.1 Module 6

• when powered up for the first time, a switchhas default data in the running configuration

file;• default hostname - Switch;

• no passwords are set on the console or

virtual terminal (vty) lines;• the switch has no IP address (IP address for

management purposes is configured on the virtual interface VLAN 1)

8/14/2019 CCNA3 v3.1 Module 6

Verifying the Catalyst Switch DefaultConfiguration

• show running-config

• show interface• show vlan

• show flash

• show version

8/14/2019 CCNA3 v3.1 Module 6

Default Port Settings

• the switch ports or interfaces are set toauto mode;

• all switch ports are in VLAN 1;

• VLAN 1 is known as the default management VLAN.

8/14/2019 CCNA3 v3.1 Module 6

Default Flash Directory Content

• by default flash directory contains:

- IOS image;- file env_vars;

- sub-directory html.

• flash directory does not contain:

- config.text – switch configuration file;

- vlan.dat - VLAN database file.

8/14/2019 CCNA3 v3.1 Module 6

IOS Version and Config. Register

show version command – used to verify:

• IOS version;

• configuration register settings.

8/14/2019 CCNA3 v3.1 Module 6

Reset Switch Configuration

8/14/2019 CCNA3 v3.1 Module 6

Steps to overwrite any existing configuration:

• Remove the current VLAN information:

- delete the VLAN database file vlan.dat from the flash directory

• Erase the back up configuration file:

- delete file startup-config

• Restart the switch:

- use reload command.

8/14/2019 CCNA3 v3.1 Module 6

Configuring the Switch

8/14/2019 CCNA3 v3.1 Module 6

Hostname and Passwords Configuration

8/14/2019 CCNA3 v3.1 Module 6

IP address and Default Gateway Configuration

IP address Configuration:

• allows the switch to be accessible by Telnet and other TCP/IP applications

8/14/2019 CCNA3 v3.1 Module 6

Management VLAN:

• by default, VLAN 1 is the management

VLAN;• all internetworking devices should be in

the management VLAN;

• allows a single management workstationto access, configure, and manage all theinternetworking devices.

8/14/2019 CCNA3 v3.1 Module 6

Port Speed and Duplex Settings Configuration

8/14/2019 CCNA3 v3.1 Module 6

Port Speed and Duplex Settings Configuration

Fast Ethernet switch ports:

•by default set to auto-speed and auto-

duplex (allows the interfaces tonegotiate these settings);

•Network administrators can manually

configure the interface speed andduplex values

8/14/2019 CCNA3 v3.1 Module 6

HTTP Service and Port Configuration

8/14/2019 CCNA3 v3.1 Module 6

Configuring the Catalyst Switch

Web Management Interface

8/14/2019 CCNA3 v3.1 Module 6

MAC Address Table

Switches

• examine the source address of frames that

are received on the ports;• learn the MAC addresses of PCs or

workstations that are connected to their

switch ports;• record learned MAC addresses in a MAC

address table.

8/14/2019 CCNA3 v3.1 Module 6

Check Learned MAC Addresses

show mac-address-table command - Privileged EXEC mode

• examines the addresses that a switch has learned

8/14/2019 CCNA3 v3.1 Module 6

MAC Address Table

Switches:

• dynamically learn and maintain thousandsof MAC addresses;

• learned entries may be discarded from theMAC address table (to preserve memory and for optimal operation) ;

• the MAC address entry is automaticallydiscarded or aged out after 300 seconds (if no frames are seen with a previously learned address).

8/14/2019 CCNA3 v3.1 Module 6

Check Learned MAC Addresses

Clear mac-address-table command - Privileged EXEC mode

• used to remove dynamically learned MAC addresses;

• used to remove static MAC address entries.

8/14/2019 CCNA3 v3.1 Module 6

Managing the MAC Address Table

8/14/2019 CCNA3 v3.1 Module 6

Static MAC Addresses

Static MAC address:

• permanently assigned to an interface;

Reasons for use a Static MAC address:

• will not be aged out automatically by the switch;

• a specific server or user workstation must be attached to the port and the MAC address isknown;

• Security is enhanced.

8/14/2019 CCNA3 v3.1 Module 6

Configuring Static MAC Addresses

8/14/2019 CCNA3 v3.1 Module 6

Configuring Static MAC Addresses

8/14/2019 CCNA3 v3.1 Module 6

Static MAC Addresses

To configure:

Switch(config)# mac-address-table static <mac-

address of host > interface FastEthernet <Ethernet

number > vlan <vlan name >

To remove:

Switch(config)# no mac-address-table static <mac-

address of host > interface FastEthernet <Ethernet

number > vlan <vlan name >

8/14/2019 CCNA3 v3.1 Module 6

Port Security

8/14/2019 CCNA3 v3.1 Module 6

Port Security

• It is possible to limit the number of

addresses that can be learned on an interface;

• the number of MAC addresses per portcan be limited to 1;

• the first address dynamically learned bythe switch becomes the secure address.

8/14/2019 CCNA3 v3.1 Module 6

Port Security Configuration

8/14/2019 CCNA3 v3.1 Module 6

Port Security

To configure port security :

Switch(config-if)#switchport port-security

To reverse port security:

Switch(config-if)# no switchport port-

security

To verify port security status:

Switch(config)#show port security

8/14/2019 CCNA3 v3.1 Module 6

Adding and Moving Switchesto the Network

8/14/2019 CCNA3 v3.1 Module 6

Adding New Switch

Must be configured:

• Switch name;

• IP address for the switch in themanagement VLAN;

• a default gateway;

• Line passwords.

8/14/2019 CCNA3 v3.1 Module 6

Adding New Switch

8/14/2019 CCNA3 v3.1 Module 6

Moving a Switch

Host is moved:

• from one port or switch to another;

• configurations that can cause unexpectedbehavior should be removed;

• configuration that is required can then be added.

8/14/2019 CCNA3 v3.1 Module 6

Add, Remove and Change MAC Addresses

8/14/2019 CCNA3 v3.1 Module 6

Managing Switch Operation

8/14/2019 CCNA3 v3.1 Module 6

• An administrator should document andmaintain the operational configurationfiles for networking devices;

• The most recent running-configuration file should be backed up on a server or disk;

• The Cisco IOS Software should also be

backed up to a local server . The Cisco IOSSoftware can then be reloaded to Flashmemory if needed.

8/14/2019 CCNA3 v3.1 Module 6

Password Recovery

8/14/2019 CCNA3 v3.1 Module 6

Enable Security

8/14/2019 CCNA3 v3.1 Module 6

Password Recovery (2950)

• Make sure that a PC is connected to theconsole port and a HyperTerminalwindow is open.

• Turn the switch off . Turn it back on whileholding down the “MODE” button on thefront of the switch at the same time that

the switch is powered on. Release the“MODE” button after the STAT LED goesout.

8/14/2019 CCNA3 v3.1 Module 6

• Type flash_init

• Type load_helper

• Type dir flash:

• rename flash:config.text flash:config.old

• Type boot

• N at the following prompt to start theSetup program.

8/14/2019 CCNA3 v3.1 Module 6

• Type rename flash:config.old

flash:config.text

2. copy flash:config.text system:running-config

8/14/2019 CCNA3 v3.1 Module 6

Firmware and IOS Images

To upgrade the IOS, download a copy of the new image to a local server

from the Cisco Connection Online (CCO) Software Center

8/14/2019 CCNA3 v3.1 Module 6

Summary

8/14/2019 CCNA3 v3.1 Module 6

Exercises

E-Labs6.2.1. e-Lab Activity – Basic Switch Operation

6.2.2. e-Lab Activity – Basic Switch Configuration

6.2.3. e-Lab Activity – Managing the MAC Address Table

6.2.4. e-Lab Activity – Configuring Static MAC Addresses6.2.5. e-Lab Activity – Configuring Port Security

6.2.6. e-Lab Activity – Add, Move, Change MAC Addresses

6.2.7. e-Lab Activity – Managing Switch Operating System Files

6.2.7. e-Lab Activity – Managing Switch Startup Configuration Files6.2.8. e-Lab Activity – Password Recovery Procedure on a Catalyst

2900 Series Switch

6.2.9. e-Lab Activity – Firmware Upgrade on a Catalyst 2900 SeriesSwitch

8/14/2019 CCNA3 v3.1 Module 6

Exercises

Lab Activity6.2.1. Lab Activity – Verifying Default Switch Configuration

6.2.2. Lab Activity – Basic Switch Configuration

6.2.3. Lab Activity – Managing the MAC Address Table

6.2.4. Lab Activity – Configuring Static MAC Addresses

6.2.5. Lab Activity – Configuring Port Security

6.2.6. Lab Activity – Add, Move, Change MAC Addresses

6.2.7. Lab Activity – Managing Switch Operating System Files

6.2.7. Lab Activity – Managing Switch Startup Configuration Files

6.2.8. Lab Activity – Password Recovery Procedure on a Catalyst 2900Series Switch

CCNA3 v3.1 Module 6

Documents