GB Network Switch Port Configuration piav qhia

 

Yog vim li cas Port Speed ​​Negotiations Fail (Thiab Koj Ua Tau Li Cas)

 

Nov yog qhov uas tsis muaj leej twg qhia koj thaum koj tab tom pib: pib-kev sib tham ntawm Gigabit ports ua haujlwm txawv dua li nws tau ua ntawm 10/100 interfaces. IEEE 802.3ab specification xav kom 1000BASE-T kev sib txuas ua haujlwm nkaus xwb nyob rau hauv tag nrho -duplex hom. Tsis muaj ib nrab - kev xaiv duplex ntawm gigabit ceev. Lub sijhawm.

Yog li thaum koj pom qhov chaw nres nkoj daig ntawm 100 Mbps thiab xav tsis thoob li cas, tus neeg ua txhaum feem ntau yog ib qho ntawm peb yam:

Cov kab. Cat5 tuaj yeem txhawb nqa gigabit dhau sijhawm luv luv, tab sis kuv tau saib cov kws tsim khoom pov tseg cov sij hawm daws teeb meem ua ntej ib tus neeg thaum kawg tau hloov pauv hauv Cat5e lossis Cat6. Tag nrho plaub khub yuav tsum raug txiav kom raug- tsis yog ob qho tib si li koj tuaj yeem khiav ntawm Fast Ethernet ceev.

Ib qho yuam kev ntawm ib kawg. Yog tias ib tus neeg tau teeb tsa qhov nrawm mus rau 100 ntawm qhov hloov pauv uplink thaum koj qhov chaw nres nkoj zaum ntawm nws pib, koj yuav muaj hnub tsis zoo. Tus pib-sab sib sab laj poob rov qab mus rau qhov sib npaug, thiab lub tshuab ntawd tsis zoo txheeb xyuas qhov tsis zoo li qhov koj xav tau.

Tsis zoo SFP modules. Tshwj xeeb nrog fiber ntau uplinks. Tsis yog txhua tus transceivers ua si zoo nrog txhua tus neeg muag khoom- qee qhov hloov pauv tau txais txiaj ntsig tiag tiag txog qhov lawv yuav lees txais hauv cov qhov no.

 

Nkag mus rau Interface Configuration

 

Txoj kev mus rau hauv interface config hom yog yooj yim txaus ntawm Cisco IOS. Koj pib los ntawm kev ntaus ntawv pab ntawm qhov pib tam sim, ces nkag mus rau configure davhlau ya nyob twg kom ncav cuag hom kev teeb tsa thoob ntiaj teb. Los ntawm qhov ntawd, qhia meej interface GigabitEthernet0/1 tee koj mus rau hauv lub ntsiab lus interface configuration rau qhov chaw nres nkoj tshwj xeeb.

Thaum koj nyob ntawd, teeb tsa ceev thiab duplex yog ncaj nraim. Qhov ceev 1000 hais kom kaw qhov chaw nres nkoj rau kev ua haujlwm gigabit, thaum duplex tag nrho ua kom muaj kev sib kis ntawm bidirectional ib txhij. Feem ntau cov thawj coj tawm ob qho kev tsis sib xws ntawm nws pib, uas ua haujlwm zoo rau kev nkag mus rau cov chaw nres nkoj txuas mus rau qhov kawg - cov neeg siv chaw ua haujlwm. Niaj hnub nimno NICs tswj kev sib tham tsis muaj kev ua yeeb yam. Tab sis inter- hloov cov kev sib txuas tsim nyog tau txais kev xav ntau ntxiv- qee pawg network hardcode cov uas tshem tawm ib qho kev hloov pauv ntxiv thaum daws teeb meem teeb meem.

Tsim nyog sau cia: ib zaug koj xauv hauv qhov nrawm 1000, qhov chaw nres nkoj tsis kam ua dab tsi qeeb. Lub laptop nrog lub flaky NIC yuav tsis poob rov qab rau 100 Mbps; nws tsuas yuav tsis txuas rau txhua. Qhov ntawd yog qee zaus tus cwj pwm koj xav tau. Feem ntau nws tsis yog.

 

 

VLAN Kev Ua Haujlwm: Nkag mus rau cov chaw nres nkoj thiab pob tw

 

Qhov no yog qhov chaw configuration tau nthuav dav -thiab qhov twg yuam kev tuaj sai tshaj plaws.

Ib qho chaw nkag nkag yog nyob ntawm ib qho VLAN. Cov ncej tuaj txog tsis muaj tagged; qhov hloov pauv koom nrog lawv nrog txhua yam VLAN koj tau teev tseg. Koj ua tiav qhov no los ntawm kev nkag mus rau hauv lub interface, muab qhov hloov pauv nkag mus rau hom chaw nres nkoj, tom qab ntawd hloov chaw nkag vlan 10 (lossis VLAN tus lej twg siv) los ua txoj haujlwm.

Cov chaw nres nkoj lub cev nqa tsheb mus rau ntau VLANs ib txhij. Txhua tus ncej tau txais 802.1Q header txheeb xyuas qhov twg VLAN nws nyob. Qhov kev zam yog haiv neeg VLAN- nws cov thav duab hla lub cev tsis muaj tagged. Kev teeb tsa suav nrog kev teeb tsa lub cev hloov pauv lub cev, tom qab ntawd txhais cov haiv neeg VLAN nrog lub cev hloov pauv ib txwm nyob vlan 99, thiab thaum kawg txwv qhov twg VLANs hla qhov txuas uas siv lub pob tw hloov pauv tau tso cai vlan ua raws li koj tus lej cim - cais cov npe ntawm VLAN IDs.

Qhov ntawd tso cai rau VLAN specification tseem ceeb tshaj li tib neeg paub. Trunks tso cai rau tag nrho VLANs los ntawm lub neej ntawd -txhua tus ntawm 1 txog 4094. Qhov ntawd tsis tshua muaj qhov koj xav tau. Prune aggressively.

 

Native VLAN Mismatches

Thaum Hloov A lub cev siv haiv neeg VLAN 1 thaum Hloov B siv haiv neeg VLAN 99, untagged thav duab hauv av sib txawv VLANs ntawm txhua sab. Spanning ntoo xam tau tsis meej pem. Devices poob kev sib txuas hauv txoj kev uas zoo li yuav luag random.

CDP ntes qhov no thiab sau ntawv ceeb toom, tab sis koj yuav tsum tau saib xyuas cov cav. Thiab CDP yuav tsum tau qhib, uas qee cov cai tswjfwm txwv tsis pub. Yog li qhov tsis sib haum xeeb zaum ntawd, ua rau muaj kev sib txawv txawv, txog thaum ib tus neeg thaum kawg xav sib piv cov teeb tsa.

 

Port Security Fundamentals

 

Chaw nres nkoj kev ruaj ntseg txwv qhov twg MAC chaw nyob tuaj yeem xa tsheb khiav los ntawm kev sib tshuam. Cov xwm txheej classic: tiv thaiv ib tus neeg los ntawm kev tshem tawm lawv lub desktop thiab txuas lub cuab yeej ntawm tus kheej.

Kev teeb tsa pib nrog ua kom muaj lub luag haujlwm ntawm qhov chaw nres nkoj switchport- kev nyab xeeb ntawm lub interface. Tom qab ntawd koj txhais tau tias muaj pes tsawg MAC chaw nyob qhov chaw nres nkoj yuav tsum zam rau - hloov chaw nres nkoj - kev nyab xeeb siab tshaj 2 tso cai rau ob lub cuab yeej. Cov lus teb ua txhaum cai tau teev tseg tom ntej; switchport chaw nres nkoj-kev ruaj ntseg ua txhaum cai kaw qhia qhov hloov mus rau qhov chaw nres nkoj nkaus thaum tsis tau tso cai MACs tshwm sim. Thaum kawg, switchport chaw nres nkoj-kev ruaj ntseg mac-chaw nyob nplaum qhia qhov hloov mus rau qhov chaw nyob dynamically kawm thiab sau lawv rau hauv kev khiav haujlwm.

Qhov kev xaiv nplaum nplaum yog qhov ua tau tiag tiag. Qhov hloov pauv kawm MAC chaw nyob dynamically thiab sau lawv rau hauv kev khiav haujlwm. Tom qab txuag, cov chaw nyob muaj sia nyob reboots yam tsis muaj phau ntawv nkag.

Hom kev ua txhaum cai txiav txim seb yuav ua li cas thaum MAC tsis tso cai tshwm sim:

Kev kaw cia ua rau qhov chaw nres nkoj yuam kev -lub xeev tsis taus. Tsheb nres kiag li. Ib tug neeg yuav tsum rov qab tau manually, lossis koj xav tau EEM tsab ntawv tuav rov qab tsis siv neeg.

Txwv tsis pub nres tsheb los ntawm MAC ua txhaum cai tab sis ua kom lub chaw nres nkoj ua haujlwm. Cov lus syslog sau cov xwm txheej. Cov cuab yeej raug cai tseem ua haujlwm.

Tiv thaiv ua hauj lwm zoo li txwv tab sis generates tsis muaj cav. Ua tsis taus pa. Kuv tsis yog tus kiv cua-koj yuav tsis paub dab tsi tshwm sim txog thaum muaj neeg yws.

Kev mob taub hau: IP xov tooj nrog PCs daisy- chained qab lawv. Qhov ntawd yog ob qhov chaw nyob MAC los ntawm ib qho chaw nres nkoj. Yog tias koj tau teeb tsa qhov siab tshaj plaws rau 1, qhov chaw nres nkoj kaw lub sijhawm lub PC xa cov ncej. Tus account rau lub suab VLAN cov xwm txheej thaum teeb tsa cov kev txwv no.

 

 

Duplex Mismatches: Quiet Performance Killer

 

Tag nrho -duplex piv rau ib nrab-duplex misconfigurations tsis ua txhaum kev sib txuas ncaj qha. Lawv maj mam degrade. Cov pob khoom sib tsoo thaum lawv tsis tsim nyog. Late collision counters nce. Retransmissions nce. Cov neeg siv qhia tias "lub network qeeb," tab sis ping ua haujlwm zoo thiab tsis muaj dab tsi pom tseeb tshwm tawg.

Tshawb xyuas cov txee interface siv cov qhia interface hais kom ua raws li cov chaw nres nkoj tshwj xeeb. Saib rau kev sib tsoo lig, kev tawm tswv yim yuam kev, CRC yuam kev, runts. Qhov chaw nres nkoj gigabit noj qab nyob zoo uas khiav puv -duplex qhia xoom hla cov teb no. Lwm yam xav tau kev tshawb nrhiav.

Cov xwm txheej tsis sib haum xeeb: ib sab hardcoded kom puv -duplex, sab laug sab laug ntawm nws pib. Lub sab pib tsis tuaj yeem txiav txim siab hom duplex kom zoo vim tias qhov kawg ntawm cov chaw taws teeb tsis koom nrog kev sib tham. Nws hloov mus rau ib nrab -duplex raws li kev nyab xeeb poob rov qab. Tam sim no koj tau txais ib sab kis thiab tau txais ib txhij thaum lwm sab xav tias nws yuav tsum tau tos kom ntsiag to ua ntej xa. Kev sib tsoo tshwm sim tas li.

Qhov kev txhim kho yog ncaj nraim: kev teeb tsa ntawm ob qho kawg. Ob qho tib si nws pib, lossis ob qho tib si qhia meej meej rau tib qhov nqi.

 

Tshaj tawm cua daj cua dub tswj

 

Ib qho cua daj cua dub tshaj tawm yuav ua rau lub network loj. Ib qho khoom siv misconfigured los yog ib lub voj hloov nrog spanning ntoo neeg tsis taus dej nyab cov ntaub nrog kev tshaj tawm xov xwm. Txhua qhov hloov pauv hloov nws. Txhua qhov chaw nres nkoj xa mus rau nws. CPU siv spikes thoob plaws tag nrho cov infrastructure.

Cua daj cua dub tswj muab throttling. Nyob rau hauv hom kev teeb tsa interface, koj teev cov cua daj cua dub- tswj kev tshaj tawm theem ua raws li feem pua ​​-hais 20.00- txhawm rau txhawm rau tshaj tawm cov tsheb khiav ntawm qhov pib. Cov lus txib zoo sib xws muaj nyob rau hauv multicast thiab unicast tsheb. Txoj cai tswj kev tswj hwm kev tswj hwm kev kaw lus qhia txog kev hloov mus rau qhov chaw nres nkoj thaum muaj qhov pib tshaj; Hloov chaw, ntxiab tsim ib qho kev ceeb toom SNMP thaum ua kom lub chaw nres nkoj ciaj sia.

Qib nruab nrab yog ib feem ntawm qhov chaw nres nkoj bandwidth. Thaum tshaj tawm xov xwm tshaj 20% ntawm qhov txuas gigabit - yog 200 Mbps ntawm kev tshaj tawm - qhov chaw nres nkoj yuav ua. Kev kaw yog nruj tab sis siv tau.

Kuv tsis configure cua daj cua dub tswj ntawm txhua qhov chaw nres nkoj. Nws ntxiv kev ua haujlwm nyuaj. Tab sis rau kev nkag mus rau cov khaubncaws sab nraud povtseg hauv ib puag ncig uas tsis tuaj yeem xav txog- tsim cov plag tsev, tsev kawm ntawv cov tsev nyob, chav sib tham- nws tau ua pov thawj tias nws muaj nqis ntau dua ib zaug.

 

PortFast thiab BPDU Guard

 

Spanning ntoo siv sijhawm 30 mus rau 50 vib nas this hloov chaw nres nkoj los ntawm kev thaiv mus rau kev xa mus. Qhov kev ncua ntawd tiv thaiv cov voj voog hauv kev hloov pauv - mus rau - hloov kev sib txuas qhov twg topology hloov tseem ceeb. Rau qhov kawg - cov neeg siv cov chaw nres nkoj uas ib tus neeg tsuas yog xav ntsaws thiab tau txais qhov chaw nyob IP, nws ntxhov siab heev.

PortFast hla lub xeev kev mloog thiab kev kawm. Koj tso cai rau nws ntawm ib qho kev sib txuas nrog spanning -ntoo portfast, thiab qhov chaw nres nkoj pib xa mus tam sim ntawd thaum txuas txuas.

Qhov kev pheej hmoo: yog tias ib tug neeg ntsaws qhov hloov pauv tsis tau tswj rau hauv qhov chaw nres nkoj, koj tuaj yeem tsim lub voj. PortFast tsis lov tes taw spanning ntoo- qhov chaw nres nkoj tseem ua BPDUs. Tab sis nws forwards tsheb tam sim ntawd es tsis txhob tos.

BPDU Guard ntxiv kev tiv thaiv. Enabling nws ntawm spanning - tsob ntoo bpduguard pab rau ntawm lub interface txhais tau hais tias ib qho uas tau txais BPDU ua rau yuam kev tam sim ntawd -disable. Yog tias BPDU tuaj txog ntawm qhov chaw nres nkoj no, ib yam dab tsi tsis ncaj ncees lawm - yuav tsum tsis txhob muaj lwm qhov hloov mus rau ntawd. Koj yuav tau txais kev ceeb toom, tab sis lub network nyob twj ywm.

Ntiaj teb no defaults siv cov yam ntxwv no hla txhua qhov chaw nkag tau txais. Nyob rau hauv lub ntiaj teb no configuration hom, spanning - tsob ntoo portfast default enables PortFast universally, thaum spanning -ntoo portfast bpduguard default activates BPDU Guard ntawm cov tib ports. Cov chaw nres nkoj lub cev raug cais tawm ntawm cov qauv no. Nws yog lub hauv paus tsim nyog rau cov lag luam nkag mus rau cov khaubncaws sab nraud povtseg.

 

 

EtherChannel: Aggregating Links

 

Thaum ib qho kev sib txuas gigabit tsis muab cov bandwidth txaus ntawm cov keyboards, EtherChannel bundles ntau lub cev chaw nres nkoj rau hauv ib qho kev sib txuas lus. Ob, plaub, lossis yim qhov chaw nres nkoj sib sau ua ke, tshwm sim raws li ib qho txuas rau kev suav ntoo.

LACP tswj kev sib tham siv tus qauv 802.3ad. Koj xaiv lub cev interfaces-siv interface ntau GigabitEthernet0/1 - 4 los teeb tsa ntau qhov chaw nres nkoj ib txhij-ces muab lawv rau ib pawg channel nrog channel- pab pawg 1 hom nquag. Tom qab tawm hauv ntau qhov kev teeb tsa, koj teeb tsa qhov kev sib txuas lus sib txuas lus nws tus kheej los ntawm kev nkag mus rau interface Chaw nres nkoj-channel1 thiab siv koj qhov kev xav tau, feem ntau hloov pauv hom pob tw rau inter- hloov txuas.

Cov chaw taws teeb kawg xav tau kev teeb tsa zoo sib xws. Active- ua haujlwm. Active-passive ua haujlwm. Passive-passive tsis yog- ob tog tos mus ib txhis rau lwm tus pib.

Kev faib tawm thoob plaws cov tswv cuab sib txuas siv cov hash algorithm, feem ntau yog raws li qhov chaw -m chaw nyob MAC lossis IP chaw nyob. Tus kheej ntws tseem hla ib qho kev sib txuas ntawm lub cev; qhov hloov pauv tsis faib TCP ntu hla ntau txoj hauv kev. Kev hloov cov ntaub ntawv loj ntawm ob lub servers siv ib tus tswvcuab txuas txawm hais tias koj tau ntim ntau npaum li cas.

 

Suab VLAN Configuration

 

IP xov tooj ntxiv complexity. Lub xov tooj xav tau kev tso rau ntawm lub suab VLAN rau QoS kev kho mob, thaum lub PC txuas nrog nws qhov chaw nres nkoj hla yuav tsum tsaws ntawm cov ntaub ntawv VLAN. Ob lub cuab yeej sib koom ib lub cev hloov chaw nres nkoj.

Kev teeb tsa suav nrog kev teeb tsa chaw nres nkoj raws li qhov chaw nkag mus nrog switchport hom nkag, muab cov ntaub ntawv VLAN ntawm switchport access vlan 10, thiab tom qab ntawd qhia lub suab VLAN cais siv switchport suab vlan 50. Lub xov tooj tau txais nws txoj haujlwm VLAN ntawm CDP lossis LLDP-MED thiab cim nws cov tsheb raws li. Lub PC xa cov thav ntawv uas tsis muaj npe uas tsaws hauv cov ntaub ntawv VLAN. Txhua yam ua haujlwm los ntawm ib qho kev khiav cable.

Qhov no txhais tau tias ob qhov chaw nyob MAC ntawm ib qhov chaw nres nkoj. Chaw nres nkoj kev ruaj ntseg teeb tsa yuav tsum haum rau ob qho tib si, lossis koj yuav siv sijhawm rov qab ua yuam kev - cuam tshuam cuam tshuam txhua lub sijhawm cov chaw txav lub rooj.

 

Auto-MDIX

 

Hla cables piv rau ncaj-los ntawm kev siv teeb meem. Txuas mus rau hloov nrog ib tug ncaj- los ntawm cable ntawm cov khoom qub thiab qhov txuas yuav tsis tuaj txog -koj xav tau kev hla.

Niaj hnub nimno Gigabit Ethernet interfaces nrog nws pib-MDIX kuaj pom qhov yuav tsum tau txuas thiab them nyiaj rau sab hauv. Lub feature yog tswj los ntawm mdix nws pib nyob rau hauv interface configuration hom, thiab nws tau enabled los ntawm lub neej ntawd rau feem ntau tam sim no Cisco hardware. Qee cov cuab yeej qub txeeg qub teg thiab qee yam tsis yog -Cisco cov cuab yeej tsis muaj qhov tshwj xeeb. Yog tias qhov txuas tsis kam tsim thiab koj tau txiav txim siab txog kev puas tsuaj cable, sim hloov mus rau qhov kev sib tw ua ntej xav tias qhov chaw nres nkoj tsis ua haujlwm.

 

Siv tau cov lus qhia tseeb

 

Cov lus txib kuv khiav tas li:

Cov lus qhia cuam tshuam txog cov xwm txheej hais kom muab cov lus qhia ceev ceev- txuas nrog tsis txuas, VLAN txoj haujlwm, nrawm, duplex hla txhua qhov chaw nres nkoj hauv ib qho kev pom.

Khiav qhia interfaces ua raws li cov chaw nres nkoj tshwj xeeb muab cov ncauj lus kom ntxaws: cov khoom siv nkag / tso tawm, qhov yuam kev, kab poob, lub sijhawm tshem tawm kawg.

Qhov qhia mac chaw nyob - rooj interface hais kom ua raws li qhov chaw nres nkoj qhia qhov chaw nyob MAC tau kawm ntawm qhov interface ntawd.

Rau kev ncua ntoo hauv xeev, qhia spanning -ntoo interface qhia qhov chaw nres nkoj lub luag haujlwm STP thiab tus nqi ntawm txoj kev.

Cov yeeb yam cuam tshuam lub cev lus txib teev tag nrho cov kab mob nquag nrog lawv cov VLANs tso cai thiab nquag.

Chaw nres nkoj kev ruaj ntseg xwm txheej los ntawm qhov chaw nres nkoj qhia - kev nyab xeeb interface, uas qhia txog kev ua txhaum cai suav thiab chaw nyob tam sim no tau kawm.

Koj tuaj yeem tso tawm cov yeeb nkab los ntawm suav nrog rau kev lim dej. Khiav cov xwm txheej hais kom ua nrog cov yeeb nkab kom suav nrog kev sib txuas qhia tsuas yog cov chaw nres nkoj nrog cov txuas txuas. Txuag scrolling los ntawm nplooj ntawv ntawm cov neeg xiam oob qhab interfaces.

 

Rov qab ua yuam kev -Disabled Ports

 

Ib qhov chaw nres nkoj qhia yuam kev -disabled. Ua ntej bouncing nws, to taub yog vim li cas. Cov yeeb yam interfaces raws li txoj cai hais kom qhia qhia lub xeev tam sim no, thaum qhia errdisable rov qab qhia uas rov qab mechanisms yog configured thiab lawv timers.

Cov teeb meem tshwm sim suav nrog kev ua txhaum cai ntawm chaw nres nkoj, BPDU Guard ua kom muaj kev sib txuas ntau dhau, thiab UDLD tsis ua tiav pom qhov teeb meem ntawm unidirectional fiber ntau.

Tsis siv neeg rov qab yog configurable nyob rau hauv lub ntiaj teb no configuration hom. Lub errdisable rov qab ua rau tag nrho cov lus txib enables tsis siv neeg rov qab rau tag nrho cov trigger hom, thaum errdisable rov qab lub sij hawm 300 teem lub sij hawm rov qab mus rau 300 vib nas this.

Yog tias tsis siv lub tshuab rov qab teeb tsa, yuav tsum muaj kev cuam tshuam los ntawm phau ntawv. Nkag mus rau lub ntsiab lus interface configuration, teeb meem kaw rau kev tswj hwm lov tes taw qhov chaw nres nkoj, ces tsis muaj kev kaw kom coj nws rov qab.

Qhov muag tsis pom kev rov-ua kom tsis muaj kev tshawb nrhiav tau lees tias koj yuav rov ua dua sai sai. Yog tias BPDU Tus Saib Xyuas tshwm sim, ib tus neeg ntsaws rau hauv qhov hloov pauv. Yog tias qhov chaw nres nkoj ruaj ntseg raug rho tawm haujlwm, ib qho khoom siv tsis tau tso cai tshwm sim. Lub hauv paus ntsiab lus xav tau kev daws teeb meem.

 

Kev soj ntsuam kaw

 

GB chaw nres nkoj configuration tsis yog conceptually complex, tab sis cov ntsiab lus sib sau. Lub luag haujlwm VLAN uas ploj lawm, kev teeb tsa lub cev tsis raug, qhov chaw nres nkoj kev nyab xeeb txwv tsis suav nrog tus xov tooj IP- kev saib xyuas me me ua rau muaj kev cuam tshuam loj heev.

Document koj configurations. Sau cov chaw nres nkoj lub cev kom meej. Tsim cov qauv rau cov xwm txheej zoo sib xws thiab siv lawv tsis tu ncua.

Ntsuam xyuas kev hloov pauv thaum lub qhov rais kho thaum twg los tau. Qhov ntawd yog cov lus qhia pom tseeb. Nws tseem yog cov lus qhia uas kuv tau tsis quav ntsej thaum 3 teev tsaus ntuj ntawm hnub Tuesday, nrog cov txiaj ntsig xav tau tag nrho.