clear ip permit 172.100.101.102

Ví dụ:

Console> (enable) clear ip permit 172.100.101.102

172.100.101.102 cleared from IP permit list.

Console> (enable) clear ip permit 172.160.161.0 255.255.192.0 snmp

172.160.128.0 with mask 255.255.192.0 cleared from snmp permit list.

Console> (enable) clear ip permit 172.100.101.102 telnet

172.100.101.102 cleared from telnet permit list.

Console> (enable) clear ip permit all

IP permit list cleared.

Console> (enable)

 

3.7           Quản trị switch.

Quản trị switch bao gồm các công việc chủ yếu sau:

3.7.1            Kiểm tra Port Status và tình trạng kết nối.

·       Kiểm tra System Status: Hiển thị thông tin chung về tồn bộ hệ thống.

·       Kiểm tra Port Status: Hiển thị thông tin về port.

·       Kiểm tra Port Capabilities: Hiển thi thơng tin về cc tính năng của port.

·       Kiểm tra Network Connectivity: Kiểm tra kết nối bằng lệnh ping và traceroute.

·       Hiển thị thông tin về Spanning-Tree: Hiển thị thông tin về spaning tree và cac thông tin về port và VLAN

·       Xem thơng tin về các thiết bị xung quanh: Hiển thị thông tin về các thiết bị Cisco được kết nối trực tiếp.

·       Xem Forwarding Table: Hiển thị nội dung của Layer 2 forwarding table.

·       Xem User Session: Hiển thị thông tin về các phiên làm việc của user trên switch: console, telnet…

·       Xem thông tin về Version: Hiển thị thông tin về hardware, firmware, software version

·       Kiểm tra System Status

Ví dụ:

4003-ER-F1> (enable) show system

PS1-Status PS2-Status Fan-Status Temp-Alarm Sys-Status Uptime d,h:m:s Logout

---------- ---------- ---------- ---------- ---------- -------------- ---------

ok         none       ok         off        ok         1,19:43:11     20 min

PS1-Type   PS2-Type   Modem   Baud  Traffic Peak Peak-Time

WS-C4008   none       disable  9600   0%      0% Fri Apr 9 1999, 18:54:17

System Name              System Location          System Contact

4003-ER-F1               Bldg 1 Equip Room        sysadmin@bigcorp.com    

4003-ER-F1> (enable)

·       Kiểm tra Module Status

Ví dụ:

Console> (enable) show module

Mod  Slot  Ports   Module-Type                Model               Status

---      ----    -----    -------------------------      -------------------  --------

1        1       0       Switching Supervisor    WS-X4012        ok

2        2       6       1000BaseX Ethernet    WS-X4306         ok

3        3       6       1000BaseX Ethernet     WS-X4306        ok

Mod Module-Name         Serial-Num

1                                      JAB023806JR        

2                                      JAB0240004D        

3                                      JAB024000YY        

Mod   MAC-Address(es)                           Hw        Fw         Sw

1      00-10-7b-f8-03-00 to 00-10-7b-f8-06-ff 0.1   4.4(1)    5.1(1)

2      00-10-7b-f6-b1-a8 to 00-10-7b-f6-b1-ad 0.2  

3      00-10-7b-f6-b2-1a to 00-10-7b-f6-b2-1f 0.2  

Console> (enable)

Mod Slot Ports Module-Type               Model               Status

---      ---- -----  -------------------------      ------------------- --------

2        2    6     1000BaseX Ethernet     WS-X4306            ok

Mod Module-Name      Serial-Num

2                                  JAB0240004D        

Mod MAC-Address(es)                        Hw     Fw         Sw

2   00-10-7b-f6-b1-a8 to 00-10-7b-f6-b1-ad   0.2  

Console> (enable)

·       Kiểm tra Port Status

Ví dụ:

Console> (enable) show port 3

Port  Name         Status         Vlan      Level   Duplex  Speed Type

----- ---------------  --------          --------   ------    ------     -----      ------------

 3/1                     connected   10         normal   full      1000   1000BaseSX

 3/2                     connected   10         normal   full      1000   1000BaseSX

 3/3                     connected   20         normal   full      1000   1000BaseSX

 3/4                     connected   40         normal   full      1000   1000BaseSX

 3/5                     notconnect  1           normal   full      1000   No GBIC

 3/6                     notconnect  1           normal   full      1000   No GBIC

Port  Security Secure-Src-Addr   Last-Src-Addr     Shutdown   Trap     IfIndex

 3/1  disabled                                                               No       disabled 15    

 3/2  disabled                                                               No       disabled 16    

 3/3  disabled                                                               No       disabled 17    

 3/4  disabled                                                               No       disabled 18    

 3/5  disabled                                                               No       disabled 19    

 3/6  disabled                                                               No       disabled 20    

Port   Send     FlowControl    Receive  FlowControl    RxPause  TxPause  Unsupported

-----  --------      --------              --------     --------            -------         -------       -----------

 3/1   desired  on                    desired   on                      0                 0          0

 3/2   desired  on                    desired   on                      0                 0          0

 3/3   desired  on                    desired   on                      0                 0          0

 3/4   desired  on                    desired   on                      0                 0          0

 3/5   desired  off                    off           off                      0                 0          0

 3/6   desired  off                    off           off                      0                 0          0

Port  Status     Channel   Channel     Neighbor               Neighbor

-----  ----------    ---------     -----------     ---------------------- ----------

 3/1  connected  off           not channel

 3/2  connected  off           not channel

 3/3  connected  off           not channel

 3/4  connected  off           not channel

 3/5  notconnect off           not channel

 3/6  notconnect off           not channel

Port  Align-Err  FCS-Err    Xmit-Err   Rcv-Err    UnderSize

 3/1        -             0               0               0              0

 3/2        -             0               0               0              0

 3/3        -             0               0               0              0

 3/4        -             0               0               0              0

 3/5        -             0               0               0              0

 3/6        -             0               0               0              0

Port  Single-Col Multi-Coll Late-Coll  Excess-Col Carri-Sen Runts     Giants

 3/1       0             0             0               0                    0             0            0

 3/2       0             0             0               0                    0             0            0

 3/3       0             0             0               0                    0             0            0

 3/4       0             0             0               0                    0             0            0

 3/5       0             0             0               0                    0             0            0

 3/6       0             0             0               0                    0             0            0

Last-Time-Cleared

Fri Apr 30 1999, 18:54:17

Console> (enable)

·       Kiển tra Port Capabilities

Ví dụ:

Console> (enable) show port capabilities 3/1

Model                    WS-X4306

Port                     3/1

Type                     1000BaseSX

Speed                    1000

Duplex                   full

Trunk encap type         802.1Q

Trunk mode               on,off,desirable,auto,nonegotiate

Channel                  3/1-2

Flow control             receive-(off,on,desired),send-(off,on,desired)

Security                 yes

Membership               static,dynamic

Fast start               yes

QOS                      n/a

Rewrite                  no

UDLD                     Capable

Console> (enable)

·       Kiểm tra Network Connectivity

Ví dụ:

Console> (enable) ping 10.10.1.10

10.10.1.10 is alive

Console> (enable) ping -s 5509-ER-F1 1200 4

PING 10.10.1.10: 1200 data bytes

1208 bytes from 10.10.1.10: icmp_seq=0. time=9 ms

1208 bytes from 10.10.1.10: icmp_seq=1. time=11 ms

1208 bytes from 10.10.1.10: icmp_seq=2. time=16 ms

1208 bytes from 10.10.1.10: icmp_seq=3. time=10 ms

----10.10.1.10 PING Statistics----

round-trip (ms)  min/avg/max = 9/11/16

Console> (enable) traceroute 10.10.10.100

traceroute to dns-server-1.bigcorp.com (10.10.10.100), 30 hops max, 40 byte packets

 1 rsm-vlan1-if.bigcorp.com (10.10.1.1)  2 ms  2 ms  1 ms 

 2 dns-server-1.bigcorp.com (10.10.10.100)  2 ms  2 ms  1 ms 

Console> (enable) traceroute dns-server-1 1400

traceroute to dns-server-1.bigcorp.com (10.10.10.100), 30 hops max, 1440 byte packets

 1 rsm-vlan1-if.bigcorp.com (10.10.1.1)  1 ms  2 ms  1 ms 

 2 dns-server-1.bigcorp.com (10.10.10.100)  2 ms  2 ms  2 ms 

Console> (enable)

·       Hiển thị thông tin về Spanning-Tree

 

Task	Command
Hiển thị thông tin về spaning tree	show spantree [vlan | mod_num/port_num] [active]

 

Ví dụ:

Console> (enable) show spantree 10

VLAN 10

Spanning tree enabled

Designated Root             00-10-7b-f8-03-09

Designated Root Cost        0

Designated Root Port        1/0

Root Max Age   20 sec    Hello Time 2  sec   Forward Delay 15 sec

Bridge ID MAC ADDR          00-10-7b-f8-03-09

Bridge Max Age 20 sec    Hello Time 2  sec   Forward Delay 15 sec

Port      Vlan  Port-State     Cost   Priority   Fast-Start  Group-Method

 2/1-2    10    forwarding         3        32       disabled     channel

 3/1       10    forwarding         4        32       enabled             

 3/2       10    forwarding         4        32       enabled             

Console> (enable)

·       Xem thông tin về các thiết bị xung quanh

Ví dụ:

Console> (enable) show cdp neighbor

* - indicates vlan mismatch.

# - indicates duplex mismatch.

Port     Device-ID                       Port-ID                   Platform

-------- ------------------------------- ------------------------- ------------

 2/1     003812064                       1/1                       WS-C5509

 2/2     003812064                       1/2                       WS-C5509

Console> (enable)

Port (Our Port): 2/1    

Device-ID: 003812064

Device Addresses:

  IP Address: 10.10.1.10

Holdtime: 129 sec

Capabilities: TRANSPARENT_BRIDGE SR_BRIDGE SWITCH

Version:

  WS-C5509 Software, Version McpSW: 5.1(1) NmpSW: 5.1(1)

  Copyright (c) 1995-1999 by Cisco Systems

Platform: WS-C5509

Port-ID (Port on Neighbors's Device): 1/1

VTP Management Domain: BigCorp

Native VLAN: 1

Duplex: full

Console> (enable)

·       Xem Forwarding Table

 

Task	Command
Hiển thị forwarding table	show cam [count]{dynamic | static | permanent | system} [vlan] show cam {dynamic | static | permanent | system} mod_num/port_num show cam mac_addr [vlan]

 

Ví dụ:

Console> (enable) show cam dynamic 10

* = Static Entry. + = Permanent Entry. # = System Entry. R = Router Entry.

X = Port Security Entry

VLAN  Dest MAC/Route Des    [CoS]     Destination Ports or VCs / [Protocol Type]

10    00-10-0d-3e-8c-00                          2/1 [ALL]

10    00-01-70-2C-75-80                         3/1 [ALL]

10    00-01-70-3D-60-10                         3/2 [ALL]

Total Matching CAM Entries Displayed = 3

Console> (enable)

·       Xem User Sessions

Ví dụ:

Console> (enable) show users

  Session  User             Location

  -------- ---------------- -------------------------

  console 

  telnet                    sam-pc.bigcorp.com

* telnet                    jake-nt.bigcorp.com

Console> (enable)

Console> (enable) show users noalias

  -------- ---------------- -------------------------

  console 

  telnet                    10.10.10.12

* telnet                    10.10.20.46

Console> (enable)

·       Xem thông tin về version

Ví dụ:

Console> (enable) show version

WS-C4003 Software, Version NmpSW: 5.1(1)

Copyright (c) 1995-1999 by Cisco Systems, Inc.

NMP S/W compiled on May 1 1999, 05:20:04

GSP S/W compiled on May 1 1999, 23:59:01

System Bootstrap Version: 4.4(1)

Hardware Version: 0.1  Model: WS-C4003  Serial #: JAB023806JR

Mod Port   Model       Serial #              Versions

1   0    WS-X4012   JAB023806JR          Hw : 0.1

                                                                         Gsp: 5.1(1)

                                                                      Nmp: 5.1(1)

2   48  WS-X4148   JAB023402QH         Hw : 1.0

3   6    WS-X4306   JAB024000YY         Hw : 0.2

                          DRAM                                  FLASH                       NVRAM

------      -------     -------       ------- -   ------        -------    -------    -----      -----    -----

1           32768K  17886K  14882K  12288K   6873K  5415K  480K   128K    352K

Uptime is 1 day, 20 hours, 2 minutes

3.7.2            Cấu hình các thông số chung của hệ thống.

Phần này giúp bạn có thể cấu hình các thông số chung quan trọng của switch như thông tin hệ thống, thời gian, dấu nhắc hệ thống  và password.

 

Task	Command
Step 1 Gán tên cho hệ thống, dấu nhắc sẽ chuyển thành tên vừa mới gán.	set system name name_string
Step 2 Gán vị trí của hệ thống.	set system location location_string
Step 3 Gán ngày, giờ cho hệ thống	set time mm/dd/yy hh:mm:ss
Step 5 Gán tên cho module	set module name mod_num [name_string]
Step 6 Gán dấu nhắc cho hệ thống.	set prompt prompt_string
Step 7 Gán console password	set password
Step 8 Gán enable password.	set enablepass