讓指定IP mac 可通過 switch

Switch#sh run
Building configuration...

Current configuration : 4261 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
!
!
no aaa new-model
system mtu routing 1500
!
!
ip dhcp snooping vlan 10
ip dhcp snooping
!        
!
crypto pki trustpoint TP-self-signed-3926136960
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3926136960
 revocation-check none
 rsakeypair TP-self-signed-3926136960
!
!
crypto pki certificate chain TP-self-signed-3926136960
 certificate self-signed 01
  3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
 
  71073AB3 72A162DC 8CE8934D 696236D1 BCBA528B 3083F7BF B651115C 73278385 951A12
  quit
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
vlan internal allocation policy ascending
!
!
!
!
interface FastEthernet0
 no ip address
 shutdown
!
interface GigabitEthernet0/1
 ip verify source port-security
!
interface GigabitEthernet0/2
 ip verify source port-security
!
interface GigabitEthernet0/3
 spanning-tree portfast
 ip verify source port-security
!
interface GigabitEthernet0/4
 ip verify source port-security
!
interface GigabitEthernet0/5
 switchport access vlan 10
 spanning-tree portfast
 ip verify source port-security
!
interface GigabitEthernet0/6
 ip verify source port-security
!
interface GigabitEthernet0/7
 switchport access vlan 10
 ip arp inspection trust
 spanning-tree portfast
 ip verify source port-security
!
interface Vlan1
 no ip address
!
interface Vlan10
 ip address 192.168.1.1 255.255.255.0
!
ip classless
!
ip http server
ip http secure-server
!
ip source binding A820.6600.5AE1 vlan 10 192.168.1.2 interface Gi0/7
!
!
!
line con 0
 logging synchronous
line vty 0 4
 login
line vty 5 15
 login
!
end

Switch#

CiscoAP 新增SSID & 認證 & 設定

建立SSID名稱

config t
dot11 ssid xxxx
authentication (認證方式 open 或key-management)
guest-mode(有這指令就會廣播ssid,不廣播就不用輸入)



int Dot11radio0
ssid xxxx ?


int bvi1    <設定IP在這邊設定>
ip add



如果AP 或Switch 在開機時都要需要輸入boot才能開機,
輸入下面這行就能搞定
set MANUAL_BOOT no

參考設定
教學
cisco認證設定



 =======

ap#config t 
ap(config)#dot11 ssid   name123  
ap(config-ssid)#authentication open 
ap(config-ssid)#guest-mode


ap(config)#inter dot11Radio 0
ap(config-if)#encryption mode ciphers tkip 
ap(config-if)#ssid name123
ap(config)#dot11 ssid name123
ap(config-ssid)#authentication open
ap(config-ssid)#authentication key-management wpa
ap(config-ssid)#wpa-psk ascii pwd123
ap(config-if)#no shutdown


動指定IP:
ap(config-if)#int bvi 1 
ap(config-if)#ip addr 192.168.1.2 255.255.255.0



 ====

Current configuration : 1449 bytes
!
! Last configuration change at 23:21:51 UTC Fri Mar 1 2002
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
enable secret 5 $1$7euO$b7eCua8awdOZ1X4Ehb9ov0
!
no aaa new-model
no ip routing
no ip cef
!
!
!
!
dot11 syslog
!
dot11 ssid ffff
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 ssshtht
!
!
dot11 guest
!
!
!
username Cisco password 7 fasdf
!
!
bridge irb
!
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption mode ciphers tkip
 !
 ssid ffff
 !
 antenna gain 0
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 bridge-group 1 spanning-disabled
 no bridge-group 1 source-learning
!
interface BVI1
 ip address 192.168.1.10 255.255.255.0
 no ip route-cache
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
!
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 login local
 transport input all
!
end

ap#                    

Cisco AP 從Lightweight 轉到 Autonomous 模式

搞好久= =

debug capwap con cli
conf t
boot manual
 

reload



set IP_ADDR 192.168.0.2
set NETMASK 255.255.255.0
set DEFAULT_ROUTER 192.168.0.1
tftp_init
ether_init
flash_init
tar -xtract tftp://<TFTP_svr>/<Path_to_tar> flash:
set BOOT flash:/<image_directory>/<image_name>
set MANUAL_BOOT = no
set
boot


設定好後,把網路線插進G0,設定固定IP,等BVI1抓到IP 後,
就可以用網頁打開進去設定.



 reference
http://networkengineering.stackexchange.com/questions/1550/converting-ap-from-capwap-to-autonomous-bvi1-interface-gets-reverted-back-to-d


https://supportforums.cisco.com/docs/DOC-18268#Set_up_the_TFTP_Server

6500 module test

Router#hw-MODule module 1 reset
sh diagnostic result module 1 test all
sh diagnostic events    
sh hw-module subslot all 

port channel , channel group

------------------
基本上只要這樣設定
config t
int g1/0/1
channel-group 1 mode active

int g1/0/2
channel-group 1 mode active

int port-channel 1
設定/功能如一般port



--------------------
L3 switch

config t
int g1/0/1
switch mode access
channel-group 2 mode active

int g1/0/2
switch mode access
channel-group 2 mode active
------
interface GigabitEthernet1/0/17,20
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1,17
 switchport mode trunk
 channel-group 3 mode active

-----------------------

Switch(config-if)#channel-group 1 mode ?

  active         Enable LACP unconditionally
  auto           Enable PAgP only if a PAgP device is detected
  desirable    Enable PAgP unconditionally
  on              Enable Etherchannel only
  passive      Enable LACP only if a LACP device is detected
-----------------------

switch(config)# lacp system-priority 32768

Configures the system priority for use with LACP. Valid values are 1 through 65535, and higher numbers have lower priority. The default value is 32768.

------------------------
switch(config-if)# lacp port-priority priority

Configures the port priority for use with LACP. Valid values are 1 through 65535, and higher numbers have lower priority. The default value is 32768.

------------------------

switch router 故障 密碼 忘記 回復

switch  改密碼

按住mode再插入電源線

然後輸入?

flash_init

load_helper

dir flash:

rename flash: config.text   flash:old.text

boot

------------------------------------

1841 刪掉 config

write erase
reload

n5k ios upgrade 升級

正常是要看cisco的 n5k_upgrade_downgrade_503這份文件,有完整說明和注意事項,

如果懶的看,或是看不懂,或是google也找不到簡單明瞭的方式,就看看下面簡潔說明

#前置動作&安全規定

1.switch# show configuration session summary

   確認沒使用者連線進行設定

2.此動作可能會導致 topology 變動,應先避免
   (STP or FC fabric changes that affect zoning)

3.應確定網路的穩定性,和避免電力中斷的可能

4.至少200MB的空間,足以上傳新的ios

以上

----------------------------------------------

好的,以上都ok後,那就來更新ios吧,找個 utp port 來上傳ios吧

.

.

.

.

.

.

只有mgmt0可以插,沒得選所以就把網路線插近這個port......

1.設定 mgmt0 ip

    int mgmt0   ( ex: 192.168.1.1/24 )

    *自己電腦tftp server ip(192.168.1.2/24)

    互聘(ping)

    *在n5k上輸入: ping 192.168.1.2 vrf management 才可以聘
     (透過mgmt0)

2.上傳ios到 bootflash:

應該知道有(吧?!)有kickstart 和 system(ios) 這兩種東西,需具備這兩樣才能完整更新n5k ios
N5K-1# copy tftp://192.168.1.2/n5000-uk9-kickstart.4.2.1.N2.1.bin bootflash:
Enter vrf (If no input, current vrf 'default' is considered): management

把這2個上傳到bootflash:後

先驗證ios:  show install all impact kickstart <image> system<image> 

switch# show install all impact kickstart bootflash:n5000-uk9-kickstart.4.2.1.N1.1a.bin system bootflash:n5000-uk9.4.2.1.N1.1a.bin 

都跑到100% success 就沒事,進行下一動.

3. 安裝ios install all kickstart <image> system<image> 

switch# install all kickstart bootflash:n5000-uk9-kickstart.4.2.1.N1.1.bin system bootflash:n5000-uk9.4.2.1.N1.1.bin

*但是我這樣輸入也是可以?!

switch# install all kickstart n5000-uk9-kickstart.5.2.1.N1.5.bin system n5000

 uk9.5.2.1.N1.5.bin 

讓他跑跑跑...會出現下面這選項,預設是N,但是要輸入Y,然後確定.

Switch will be reloaded for disruptive upgrade.

Do you want to continue with the installation (y/n)?  [n] Y

然後繼續跑跑跑,跑完後重開機.

show version 看版本正確否, 收工!