Catalyst 3500 Series 사용자 매뉴얼

Catalyst 3500 Series 사용자 매뉴얼

 

[Catalyst 3500Series의 P/W Recovery방법]
 
1 PC의 하이퍼터미널을 아래설정으로 셋팅한다:
 
9600 baud rate
No parity
8 data bits
1 stop bit
No flow control   전원을 넣는다.
 
모드버튼을 누른 상태에서 전원을 넣고, 1번 포트가 점멸이 끝날 때 까지 모드버튼을 누른다.
Type flash_init. ß 이 명령이 있어야 Dir Flash:명령으로 플레쉬 메모리가 보인다.
Type load_helper.
Type dir flash:.
!--- Make sure to type a colon ":" after the dir flash
The switch file system is displayed:
Directory of flash:
2 -rwx 843947 Mar 01 1993 00:02:18 C2900XL-h-mz-112.8-SA
4 drwx   3776 Mar 01 1993 01:23:24 html
66 -rwx    130 Jan 01 1970 00:01:19 env_vars
68 -rwx 1296   Mar 01 1993 06:55:51 config.text
1728000 bytes total (456704 bytes free)
 
스위치에 많은 설정이 없을 경우엔 Delete Config.text로 초기화한 다음 다시 설정하면 편리할 때가 많다
 
아래 설명부터는 config.text에 설정을 보존하면서 복구 하는 방법이다.
 
rename flash:config.text flash:config.old 명령으로 원래 설정 파일명을 바꿔준다.
Type boot 로 시스템 재부팅
Enter N at the prompt to start the Setup program, Continue with the configuration dialog? [yes/no] : N
 en 명령으로 enable mode로 진입.
Type rename flash:config.old flash:config.text 명령으로 원래 설정 파일명을 바꿔준다.
기존의 설정을 메모리로 올린다:
 
Switch# copy flash:config.text system:running-config
Source filename [config.text]? (press Return)
Destination filename [running-config]? (press Return)    
 
패스워드를 바꿔준다.:
switch#configure terminal
switch(config)#no enable secret
!-- This step is necessary if the switch had an enable secret password
switch(config)#enable password Cisco
switch#(config)#^Z
!--Control/Z
 
새로운 시스템 설정을 저장한다.:
switch#write memory
 
 
[네트워크 연결상태 확인]
 
네트워크의 연결상태는 ping, traceroute 명령을 사용하여 확인 할 수 있다.
Step1. Ping으로 네트워크 연결상태 확인  Ping [-s] host [packet_size] [packet_count]
Step2. Trace명령으로 라우터 경로 추적 확인 Traceroute [-q nqueries] host [data_size]
Step3. 스위칭 interface 정보확인
       (IP,Subnet,Broad) Show interface
Step4. 기본 게이트웨를 통한 라우트 정보 확인 Show ip route

Console> (enable) ping -s 203.238.149.2 1200 4
ING 203.238.149.2: 56 data bytes
time=32 ms4 bytes from 203.238.149.2: icmp_seq time=32 ms
time=32 ms4 bytes from 203.238.149.2: icmp_seq time=32 ms
time=32 ms4 bytes from 203.238.149.2: icmp_seq time=32 ms
 
-----203.238.149.2 PING Statistics -----
4 packets transmitted, 4 packets recevied, 0% packet loss
 
round-trip (ms)   min/avg/max = 32/32/34
 
 
 
Console> (enable) traceroute 203.238.149.2
traceroute to www.koreasuncom.co.kr (203.238.149.2), 30 hops max, 40 byte packets
 1 210.114.174.4 (210.114.174.4)  1 ms  1 ms  1 ms
 2 202.30.241.57 (202.30.241.57)  8 ms  8 ms  8 ms
 3 203.238.128.212 (203.238.128.212)  11 ms  11 ms  10 ms
 4 203.238.145.98 (203.238.145.98)  13 ms  13 ms  13 ms
 5 203.238.145.114 (203.238.145.114)  18 ms  18 ms  18 ms
 6 203.238.149.2 (203.238.149.
Console> (enable)
 
[IOS 설치/ 업그레이드 방법]
 
TestSwitch1# show ver  > 기본적인 확인
Cisco Internetwork Operating System Software
IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)XU, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2000 by cisco Systems, Inc.
Compiled Mon 03-Apr-00 17:31 by swati
Image text-base: 0x00003000, data-base: 0x00301398
 
ROM: Bootstrap program is C3500XL boot loader
 
TestSwitch1 uptime is 33 minutes
System returned to ROM by power-on
System image file is "flash:c3500XL-c3h2s-mz-120.5-XU.bin"
 
cisco WS-C3524-XL (PowerPC403) processor (revision 0x01) with 8192K/1024K bytes of memory.
Processor board ID 0x12, with hardware revision 0x00
Last reset from power-on
 
Processor is running Enterprise Edition Software
Cluster command switch capable
Cluster member switch capable
15 FastEthernet/IEEE 802.3 interface(s)
2 Gigabit Ethernet/IEEE 802.3 interface(s)
 
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:02:FD:69:BD:40
Motherboard assembly number: 73-3904-10
 
 
Power supply part number: 34-0851-02
Motherboard serial number: FAA04319CVJ
Power supply serial number: NONE
Model revision number: A0
Motherboard revision number: A0
Model number: WS-C3524-XL-EN
System serial number: FAA0431W0VK
Configuration register is 0xF
 
TestSwitch1# erase flash: > 정상적인 부팅을 하기 위해서 .bin 파일만 존재하는 flash를 초기화
Erasing the flash filesystem will remove all files! Continue? [confirm]
flashfs[1]: 0 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 3612672
flashfs[1]: Bytes used: 1024
flashfs[1]: Bytes available: 3611648
flashfs[1]: flashfs fsck took 3 seconds.
Erase of flash: complete
TestSwitch1#
00:33:51: %LINK-3-UPDOWN: Interface FastEthernet0/11, changed state to up
00:33:52: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/11, changed state to up
TestSwitch1#ping xxx.xxx.xxx.xxx > 대상 tftp 서버와 통신이 되는 지 테스트
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to xxx.xxx.xxx.xxx, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/201/1001 ms
 
TestSwitch1#tar /x tftp://xxx.xxx.xxx.xxx/c3500XL-c3h2s-mz.120-5.4.WC.1.tar flash:
           > .tar로 압축되어 있는 파일을 tftp를 통해 flash 로 압축을 풀면서 카피
Loading c3500XL-c3h2s-mz.120-5.4.WC.1.tar from 210.96.226.154 (via VLAN1): !
extracting info (111 bytes)
extracting c3500XL-c3h2s-mz.120-5.4.WC.1.bin (1751538 bytes)!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 
 
 
html/ (directory)
extracting html/ClusterBuilder.html.gz (670 bytes)
중간생력…
extracting html/baudrate.htm.gz (476 bytes)
이하생략…
[OK - 3112960 bytes]
 
TestSwitch1#sh flash: > 플래쉬에 이미지가 올라간 상태
Directory of flash:/
 
  2  -rwx         111   Mar 01 1993 00:37:12  info
  3  -rwx     1751538   Mar 01 1993 00:38:02  c3500XL-c3h2s-mz.120-5.4.WC.1.bin
  4  drwx       10176   Mar 01 1993 00:38:40  html
164  -rwx         111   Mar 01 1993 00:38:40  info.ver
 
3612672 bytes total (574976 bytes free)
TestSwitch1#
 
지금까지 보면 상당히 간단하게 IOS 이미지를 업그레이드 할 수 있었습니다.
주의할 점은 erase flash: 하고서 전원이 나가면 다시 xmodem을 사용 해야만 한다는 위험이 있지만 그런 경우는 거의 없을 것이라 생각이 됩니다.
 
[Catalyst 3500에서 VLAN 설정하는 방법]

 

1.우선은 Cat 3500에서 VLAN 설정이 가능한지를 체크해야 합니다.

 

3524XL#show vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 254
Number of existing VLANs : 5
VTP Operating Mode : Server
#### 이 부분이 반드시 Server(Transparent)로 설정되어 있어야 함

 

VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled

 

 

 

2.각각의 포트가 어떤 VLAN에 설정되어 있는지를 체크한다.

 

3524XL#show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4,
Fa0/5, Fa0/6, Fa0/7, Fa0/8,
Fa0/9, Fa0/10, Fa0/11, Fa0/12,
Fa0/13, Fa0/14, Fa0/15, Fa0/16,
Fa0/17, Fa0/18, Fa0/19, Fa0/20,
Fa0/21, Fa0/22, Fa0/23, Fa0/24,
Gi0/1, Gi0/2

 

1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active

 

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 1002 1003
1002 fddi 101002 1500 - - - - - 1 1003
1003 tr 101003 1500 1005 0 - - srb 1 1002
1004 fdnet 101004 1500 - - 1 IBM - 0 0
1005 trnet 101005 1500 - - 1 IBM - 0 0

 

3. 위의 설정에는 오직 VLAN 1만 있는데 VLAN 2를 추가할 경우는 ......

 

1) 3524XL#vlan database
###### Cat3500/2900은 특이하게도 VLAN database로 들어가서 VLAN을 설정해야 함

 

2) VLAN 2를 추가한다.
3524XL(vlan)#vlan 2 name cisco_vlan_2

 

3) VLAN database mode에서 빠져 나온다.
3524XL(vlan)#exit

 

 
 

 

4) VLAN이 추가되었는지 확인한다.
3524XL#show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4,
Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/10, Fa0/11, Fa0/12,
Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19, Fa0/20,
Fa0/21, Fa0/22, Fa0/23, Fa0/24, Gi0/1, Gi0/2

 

2 cisco_vlan_2 active
위의 상태를 보면 VLAN 2가 설정되었다는 것을 확인할 수 있음.

 

4. 마지막 단계로 원하는 포트를 VLAN 2에 mapping을 시켜야 함.
(Fastethernet 0/2를 VLAN 2에 설정하도록 한다)

 

Switch #configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch (config)#interface fastEthernet 0/2
Switch (config-if)#switchport access ?
vlan Set VLAN when interface is in access mode

 

Switch (config-if) # switchport access vlan 2
Switch (config-if)#end
Switch #wr mem (반드시 저장을 하셔야 합니다.)

 

5. VLAN 2에 fastethernet 0/2가 mapping 되어 있는지를 확인한다.

 

3524XL#show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/4, Fa0/5, Fa0/6,
Fa0/7, Fa0/8, Fa0/9, Fa0/10,
Fa0/11, Fa0/12, Fa0/13, Fa0/14,
Fa0/15, Fa0/16, Fa0/17, Fa0/18,
Fa0/19, Fa0/20, Fa0/21, Fa0/22,
Fa0/23, Fa0/24, Gi0/1, Gi0/2

 

2 cisco_vlan_2 active Fa0/2

 

 
[스위치에 IP Address 할당하기]
 
1. Enter global configuration mode by typing configure terminal:
3524XL #configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config) #
2. Enter interface configuration mode, and enter the VLAN to which the IP information is assigned. VLAN 1 is the management VLAN in this case. Type interface vlan 1:
3524XL(config)#interface vlan 1
3524XL(config-if)#
3. Enter the IP address and subnet mask by typing ip address ip_address subnet_mask:
 3524XL(config-if)#ip address 172.16.84.26 255.255.255.0 (Use the IP address and mask accordingly)
4. Run no shutdown command to make sure that VLAN 1 is up administratively:
 3524XL(config-if)#no shutdown
5. Exit from the interface configuration mode by typing exit, this will take you back to the Global Configuration Mode:
 3524XL(config-if)#exit
 3524XL(config)#
6. Enter the IP address of the default router by using ip default-gateway ip_address command. This is needed to access the Management IP of the switch if you are trying to reach it across the network:
 3524XL(config)#ip default-gateway 172.16.84.1 (Use the IP Address accordingly)
7. Exit out to the privileged EXEC mode by typing end:
 3524XL(config)#end
 3524XL#
8. Save the configuration by using the write memory command:
 3524XL#write memory
 Building configuration...
 3524XL#
9. Use the show running command to verify your configuration:
 3524XL#show running             설정 값 확인
 Building configuration...
 Current configuration:
 !
 version 12.0
 ...(output suppressed)
 !
 
 
 hostname Switch
 !
...(output suppressed)
 !
 interface VLAN1
 ip address 172.16.84.26 255.255.255.0
 no ip directed-broadcast
 no ip route-cache
 !
 ip default-gateway 172.16.84.1
 !
 line con 0
 transport input none
 stopbits 1
 line vty 0 4
 login
 line vty 5 15
 login
 !
 end
 Switch#
 
 
[Trunk Port 설정하기]
 
Switch# configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)# interface fa0/1

 

Switch(config-if)# switchport mode trunk            트렁크의 VLAN 방식으로 포트를 구성

 

Switch(config-if)# switchport trunk encapsulation isl            ISL을 지원하는 포트 구성
Switch(config-if)# end

 

Switch# show interface fa0/1 switchport             Configuration 확인
Name: Fa0/1
 
Switchport: Enabled
  Administrative mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: isl

 

Operational Trunking Encapsulation: isl
Negotiation of Trunking: Disabled
Access Mode VLAN: 0 ((Inactive))
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: 1-3,1002-1005
Trunking VLANs Active: 1-3
Pruning VLANs Enabled: NONE
 

 

Switch# copy running-config startup-config            Configuration 저장
Building configuration...
[OK]
Switch#
 
[SNMP 설정하기]
 
Switch (enable) #conf t
Switch (config) # snmp-server host 172.2.128.252 traps1 snmp vlan 2    지정된 호스트에 트렙 설정
Switch (config) # end
Switch # show running-config               Configuration 확인
 
[Spanning-Tree 설정하기]
 
Switch # configure terminal
Enter configuration commands, one per line.  End with CNTL/Z
Switch (config)# interface fastethernet 5/8
Switch (config-if)# spanning-tree port-priority 100       인터페이스에 포트 우선 순위 설정
Switch (config-if)# end
Switch (config)# interface fastethernet 5/8
Switch (config-if)# spanning-tree vlan 200 port-priority      인터페이스에 VLAN포트 우선 순위 설정
Switch (config-if)# end
Switch# show spanning-tree interface fastethernet 5/8            Configuration 확인
Port 264 (FastEthernet5/8) of VLAN200 is forwarding
   Port path cost 19, Port priority 100, Port Identifier 129.8.
   Designated root has priority 32768, address 0010.0d40.34c7
   Designated bridge has priority 32768, address 0010.0d40.34c7
   Designated port id is 128.1, designated path cost 0
   Timers: message age 2, forward delay 0, hold 0
 
 
 
 Number of transitions to forwarding state: 1
   BPDU: sent 0, received 13513
Switch#
Switch# show spanning-tree vlan 200           Configuration 확인
<...output truncated...>
 
Port 264 (FastEthernet5/8) of VLAN200 is forwarding
Port path cost 19, Port priority 64, Port Identifier 129.8.
   Designated root has priority 32768, address 0010.0d40.34c7
   Designated bridge has priority 32768, address 0010.0d40.34c7
   Designated port id is 128.1, designated path cost 0
   Timers: message age 2, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 0, received 13513
 
<...output truncated...>
Switch#
 
[SPAN 설정하기]
 
Switch # configure terminal
Switch (config)# int fa0/1
Switch (config-if)# port monitor fastEthernet 0/2
Switch (config-if)# port monitor fastEthernet 0/5                     모니터링 할 포트 설정
Switch (config-if)# port monitor fastEthernet 0/3
 
Switch (config-if)# port monitor VLAN 1
만일 한두개의 포트가 아니고 하나의 vlan인 경우는 해당 인터페이스로 들어가서 같은 vlan으로 설정한 후 port monitor 라고만 쳐주면 된다. 그럼, 스위치가 알아서 같은 vlan의 모든 포트를 잡아줍니다
 
Switch#show port monitor      ß------ Configuration 확인
Monitor Port Port Being Monitored
--------------------- ---------------------
FastEthernet0/1 FastEthernet0/2
FastEthernet0/1 FastEthernet0/5
FastEthernet0/4 FastEthernet0/