4.2 related configuration of access switches
# # In this example, we are connecting to an access switch where the GI0/1 port is allied to the core switch. It also means that we need to configure GI0/1 as trunk port. The specific configuration is as follows:
D-2960-3 (config) #int GI0/1
D-2960-3 (config-if) #sw
D-2960-3 (config-if) #switchport mo
D-2960-3 (config-if) #switchport mode?
Access Set trunking mode to ACCESS unconditionally
Dynamic Set trunking mode to dynamically negotiate access or trunk mode
Trunk Set trunking mode to TRUNK unconditionally
D-2960-3 (config-if) #switchport mode trunk
# # Configuration This interface mode is trunk, in the cisoc2960 switch, after configuring the interface mode trunk is available, do not need to further configure the package state of this trunk port, because its default is also the only package type is dot1q, And this series of switches does not have a dedicated package configuration command.
D-2960-3 (config-if) #exit
D-2960-3 (config) #exit
D-2960-3#sh int Tru # Fallback to privileged configuration mode verify the configuration you just made.
Port Mode encapsulation Status Native VLAN
GI0/1 Auto 802.1q trunking 1
# This port is already configured in trunk mode and is packaged in 802.1q
Port Vlans allowed on trunk
GI0/1 1-4094
Port Vlans allowed and active in management domain
GI0/1 1-2,10,20,30,40,50,60,70,80,100,110,120,150,160
Port Vlans in Spanning tree forwarding state and not pruned
GI0/1 1-2,10,20,30,40,50,60,70,80,100,110,120,150,160
d-2960-3#conf T # goes to global configuration mode
D-2960-3 (config) #vtp mode client
# Configure the VTP mode to client, echoing the server mode of the core switch.
D-2960-3 (config) #vtp domain Pjoe
# Configure the VTP domain to be pjoe, only switches in one domain can transmit VLAN information to each other.
D-2960-3 (config) #vtp password pjoeserver # Configuring the VTP password
D-2960-3 (config) #end
D-2960-3#sh VTP Status # Exit to privileged mode verify the configuration for VTP just now
VTP Version:2
Configuration revision:23
Maximum VLANs Supported locally:255
Number of existing vlans:19
VTP Operating mode:client # mode has been set to Client
VTP domain Name:pjoe # Domains have been set to Pjoe
VTP Pruning mode:disabled
VTP V2 mode:disabled
VTP Traps generation:disabled
MD5 digest:0xec 0x30 0xEF 0x6F 0xa5 0x9a 0x39 0x7B
# The password has been configured, but it is encrypted to show
Configuration last modified by 192.168.113.254 at 12-3-07 22:58:54
# #稍等一会后, verify that you have learned the VLAN information of the core switch, and that it learns a small part of the process for 30 seconds.
D-2960-3#sh VLAN # Verify that the VLAN information is all learned.
VLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 defaultActive fa0/1, fa0/2, fa0/3, fa0/4, fa0/5, fa0/6, fa0/7, fa0/8, fa0/9, fa0/Ten, fa0/ One, fa0/ A, fa0/ -, fa0/ -, fa0/ the, fa0/ -, fa0/ -, fa0/ -, fa0/ +, fa0/ -, fa0/ +, fa0/ A, fa0/ at, fa0/ -, fa0/ -, fa0/ -, fa0/ -, fa0/ -, fa0/ in, fa0/ -, fa0/ to, fa0/ +, fa0/ -, fa0/ the, fa0/ *, fa0/ $, fa0/Panax Notoginseng, fa0/ -, fa0/ the, fa0/ +, fa0/ A, a0/ the, fa0/ +, fa0/ -, fa0/ $, fa0/ $, fa0/ -, fa0/ -, gi0/22Firewall Active # OK, the VLAN information configured on the core switch has been learned by this switch, and the rest of the work only needs to add the appropriate port to the corresponding VLAN to Here, we don't repeat them here. TenEngineering Active -Procurement Active -QAQC Active +Operation Active -Yard Active -BM Active -Hrad Active theFacility Active -Finance Active theGO Active -Wlan Active MaxServer Active theClient Active1002fddi-defaultact/Unsup1003token-ring-defaultact/Unsup1004fddinet-defaultact/Unsup1005trnet-defaultact/unsup VLAN Type said MTU Parent ringno Bridgeno Stp brdgmode Trans1 Trans2---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------1Enet100001 the- - - - -0 0 2Enet100002 the- - - - -0 0 TenEnet100010 the- - - - -0 0 -Enet100020 the- - - - -0 0 -Enet100030 the- - - - -0 0 +Enet100040 the- - - - -0 0 -Enet100050 the- - - - -0 0 -Enet100060 the- - - - -0 0 -Enet100070 the- - - - -0 0 theEnet100080 the- - - - -0 0 -Enet100100 the- - - - -0 0 theEnet100110 the- - - - -0 0 -Enet100120 the- - - - -0 0 MaxEnet100150 the- - - - -0 0 theEnet100160 the- - - - -0 0 1002Fddi101002 the- - - - -0 0
d-2960-3#
# Configure the management IP for this switch
D-2960-3 (config) #int vlan 1 # Manage IP address we configured on Vlan1
D-2960-3 (config-if) #IP address 192.168.113.222 255.255.255.0 # Set the actual IP addresses
D-2960-3 (config-if) #Exit
D-2960-3 (config) #IP default-gateway 192.168.113.254
# Set the gateway for this switch, which is the address of the core switch vlan1.
D-2960-3 (config) #end
D-2960-3#sh Run # Verify the full configuration.
Building configuration ... Current configuration:2087bytes!version12.2No service padservice timestamps debug uptimeservice timestamps log uptimeservice password-Encryption!hostname D-2960-3!Enable password712090f18170805172924!No AAANew-Modelsystem MTU Routing theIP Subnet-Zero!no file verify autospanning-Tree Mode pvstspanning-tree Extend system-ID!VLANInternalAllocation Policy Ascending!Interfacefastethernet0/1!Interfacefastethernet0/2!Interfacefastethernet0/3!(Omit ...)Interfacefastethernet0/ $!Interfacefastethernet0/ $!Interfacefastethernet0/ -!Interfacefastethernet0/ -!Interfacegigabitethernet0/1!Interfacegigabitethernet0/2!InterfaceVlan1 IP Address192.168.113.222 255.255.255.0no IP route-Cache!IPdefault-gateway192.168.113.254IP http Server!Control-plane!!Line Con0Password712090f18170805172924line vty0 4Password712090f18170805172924 loginline vty5 theLogin!End
d-2960-3#
Cisco's basic configuration example of four----VLAN planning and configuration (access switch)