#adsense(728x90)
タイプ | 説明 | 特徴 | その他 |
ストア アンド フォワード | FCSまですべてチェック | エラー チェックも行うが遅い | ほとんどの Catalyst で採用 |
フラグメント フリー | 64byte だけチェック | ちょうどいい | Catalyst 1900 でデフォルト |
カット スルー | 6byte (宛先 MAC アドレス) だけチェック | 何もしないので早い |
sw(config)# mac-address-table static mac-addr vlan vlan-id interface type mod/num![]()
rt# show mac-address-table Mac Address Table ------------------------------------------- Vlan Mac Address Type Ports ---- ----------- -------- ----- All 0000.0000.0001 STATIC CPU All 0000.0000.0002 STATIC CPU All 0000.0000.0003 STATIC CPU All 0000.0000.0004 STATIC CPU 1 0000.0000.0005 DYNAMIC Fa0/22 1 0000.0000.0006 DYNAMIC Fa0/1 1 0000.0000.0007 DYNAMIC Fa0/23 1 0000.0000.0008 DYNAMIC Fa0/5 1 0000.0000.0009 DYNAMIC Fa0/2 1 0000.0000.000a DYNAMIC Fa0/22 1 0000.0000.000b DYNAMIC Fa0/23 Total Mac Addresses for this criterion: 11
sw# show mac-address-table count Total Mac Address Space Available: 5446
sw# show sdm prefer The current template is "desktop default" template. The selected template optimizes the resources in the switch to support this level of features for 8 routed interfaces and 1024 VLANs. number of unicast mac addresses: 6K number of IPv4 IGMP groups + multicast routes: 1K number of IPv4 unicast routes: 8K number of directly-connected IPv4 hosts: 6K number of indirect IPv4 routes: 2K number of IPv4 policy based routing aces: 0 number of IPv4/MAC qos aces: 512 number of IPv4/MAC security aces: 1K
sw(config)# errdisable detect cause cause
sw(config)# errdisable recovery cause cause
sw(config)# errdisable recovery interval time
sw# show interface status Port Name Status Vlan Duplex Speed Type Fa0/1 ### aaaa ### connected 10 a-full a-100 10/100BaseTX Fa0/2 ### bbbb ### disabled 10 auto auto 10/100BaseTX Fa0/3 ### cccc ### disabled 10 auto auto 10/100BaseTX Fa0/4 ### dddd ### disabled 10 auto auto 10/100BaseTX
sw# show interface status err-disabled
[Host1]───[Switch1]===[Switch2]───[Host2]
sw1(config)# interface type mod/num![]()
sw1(config-if)# channel-group num mode modeCreating a port-channel interface Port-channel 1
sw(config)# port-channel load-balance method![]()
method | ハッシュ演算 | 説明 |
src-ip | bits | |
dst-ip | bits | |
src-dst-ip | XOR | |
src-mac | XOR | デフォルト |
dst-mac | bits | |
src-dst-mac | bits | |
src-port | XOR | Cat. 4500 以上 |
dst-port | bits | Cat. 4500 以上 |
src-dst-port | bits | Cat. 4500 以上 |
sw(config)# interface port-channel num sw(config-if)# channel-protocol protocol![]()
sw00# show etherchannel
Channel-group listing:
----------------------
Group: 1 チャンネル番号
----------
Group state = L2
Ports: 2 Maxports = 8
Port-channels: 1 Max Port-channels = 1
Protocol: PAgP
sw00# show etherchannel summary Flags: D - down P - in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use f - failed to allocate aggregator u - unsuitable for bundling w - waiting to be aggregated d - default port Number of channel-groups in use: 1 Number of aggregators: 1 Group Port-channel Protocol Ports ------+-------------+-----------+----------------------------------------------- 1 Po1(SU) PAgP Gi0/1(P) Gi0/2(P)
sw00# show etherchannel port-channel Channel-group listing: ---------------------- Group: 1 チャンネル番号 ---------- Port-channels in the group: --------------------------- Port-channel: Po1 インターフェース名 ------------ Age of the Port-channel = 49d:17h:02m:47s Logical slot/port = 2/1 Number of ports = 2 GC = 0x00010001 HotStandBy port = null Port state = Port-channel Ag-Inuse Protocol = PAgP プロトコル Ports in the Port-channel: バンドルされたインターフェース Index Load Port EC state No of bits ------+------+------+------------------+----------- 0 00 Gi0/1 Desirable-Sl 0 0 00 Gi0/2 Desirable-Sl 0 Time since last port bundled: 49d:17h:02m:47s Gi0/2
sw00# show etherchannel load-balance EtherChannel Load-Balancing Operational State (src-mac): Non-IP: Source MAC address IPv4: Source MAC address IPv6: Source IP address
sw00# show interfaces type mod/num etherchannel Port state = Up Mstr In-Bndl チャンネル番号 ネゴシエーション モード Channel group = 1 Mode = Desirable-Sl Gcchange = 0 Port-channel = Po1 GC = 0x00010001 Pseudo port-channel = Po1 Port index = 0 Load = 0x00 Protocol = PAgP プロトコル Flags: S - Device is sending Slow hello. C - Device is in Consistent state. A - Device is in Auto mode. P - Device learns on physical port. d - PAgP is down. Timers: H - Hello timer is running. Q - Quit timer is running. S - Switching timer is running. I - Interface timer is running. Local information: 自スイッチの情報 Hello Partner PAgP Learning Group Port Flags State Timers Interval Count Priority Method Ifindex Gi0/1 SC U6/S7 H 30s 1 128 Any 5001 Partner's information: 対向スイッチの情報 Partner Partner Partner Partner Group Port Name Device ID Port Age Flags Cap. Gi0/1 sw01 001c.b000.0000 Gi0/1 15s SC 10001 Age of the port in the current state: 49d:17h:02m:47s
sw(config)# monitor session session_id source interface type mod/num sw(config)# monitor session session_id destination interface type mod/num
sw(config)# interface type mod/num sw(config-if)# switchport mode access|trunk
sw(config-if)# switchport port-security
sw(config-if)# switchport port-security maximum max
sw(config-if)# switchport port-security mac-address mac-addr
sw(config-if)# switchport port-security violation type
sw(config-if)# switchport port-security mac-address sticky
sw# show running-config | i stickyswitchport port-security mac-address sticky switchport port-security mac-address sticky 0000.0000.0001 switchport port-security mac-address sticky 0000.0000.0002 switchport port-security mac-address sticky 0000.0000.0003
sw(config-if)# switchport port-security aging time time
sw(config-if)# switchport port-security aging type type
sw(config-if)# switchport port-security aging static
sw# show port-security
ポート番号 最大MACアド 認識済みMACアド 違反カウンタ 違反動作
Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action
(Count) (Count) (Count)
---------------------------------------------------------------------------
Fa0/1 1 1 0 Restrict
---------------------------------------------------------------------------
Total Addresses in System (excluding one mac per port) : 0
Max Addresses limit in System (excluding one mac per port) : 8320
sw# show port-security interface type mod/num Port Security : Enabled ポートセキュリティ設定(Enabled,Disabled) Port Status : Secure-up ステータス (up,down) Violation Mode : Shutdown 違反動作 Aging Time : 0 mins エージング時間 Aging Type : Absolute エージング タイプ SecureStatic Address Aging : Disabled エージング設定 (Enabled,Disabled) Maximum MAC Addresses : 1 最大MACアドレス数 Total MAC Addresses : 0 現在のMACアドレス数 Configured MAC Addresses : 0 スタティック設定されたMACアドレス数 Sticky MAC Addresses : 0 Sticky MACアドレス数 Last Source Address:Vlan : 0000.0000.0000:0 最後に通信したMACアドレス Security Violation Count : 0 違反カウンタ
sw# show port-security address Secure Mac Address Table ------------------------------------------------------------------------ Vlan Mac Address Type Ports Remaining Age (mins) ---- ----------- ---- ----- ------------- ------------------------------------------------------------------------ Total Addresses in System (excluding one mac per port) : 0 Max Addresses limit in System (excluding one mac per port) : 8320
sw(config)# aaa new-model
sw(config)# aaa authentication dot1x default group radius
sw(config)# dot1x system-auth-control
sw(config)# radius-server host ip-addr
sw(config)# radius-server key key
sw(config)# interface type mod/num sw(config-if)# switchport mode access
sw(config-if)# do1x port-control mode
sw(config-if)# dot1x host-mode multi-host
sw(config-if)# dot1x reauthentication
sw(config-if)# dot1x timeout reauth-period time
sw# dot1x re-authenticate interface type mod/num
sw(config-if)# dot1x guest-vlan vlan-id
sw(config-if)# dot1x auth-fail vlan vlan-id
sw(config-if)# dot1x critical vlan vlan-id
sw(config-if)# dot1x critical recovery action reinitialize
sw(config)# interface type mod/num sw(config-if)# power inline mode
┏━━━━━━━━━━━━━━┓ ─[0/ 1]┐ ┌[0/ 4]─ ─[0/ 2]┼─[Switch]─┼[0/ 5]─ ─[0/ 3]┘ │ └[0/ 6]─ ─[0/14]──[Router]──[0/15]─ ─[0/ 7]┐ │ ┌[0/10]─ ─[0/ 8]┼─[Switch]─┼[0/11]─ ─[0/ 9]┘ └[0/13]─ ┗━━━━━━━━━━━━━━┛
sw(config)# ip routing
sw(config)# interface type mod/numsw(config-if)# switchport
![]()
sw(config)# interface type mod/numsw(config-if)# no switchport
sw(config-if)# ip address ip_addr netmask
sw(config)# interface vlan id sw(config-if)# ip address ip_addr netmask
sw(config)# ip slb serverfarm name
sw(config-slb-sfarm)# predictor mode
sw(config-slb-sfarm)# real ip-addr
sw(config-slb-real)# weight weight
sw(config-slb-real)# inservice
sw(config-slb-real)# no inservice
sw(config)# ip slb vserver name
sw(config-slb-vserver)# serverfarm name
sw(config-slb-vserver)# virtual ip-addr
sw(config-slb-vserver)# client ip-addr netmask
sw(config-slb-vserver)# inservice
#adsense(728x90)