Cisco-3750交换机增加VLAN
Cisco-3750交换机增加VLAN
User Access Verification
Password:
jlshanghai>enable
Password:
jlshanghai#conf t
Enter configuration commands, one per line. End with CNTL/Z.
jlshanghai(config)#int gi
jlshanghai(config)#int gigabitEthernet 1/0/4
jlshanghai(config-if)#sw
jlshanghai(config-if)#switchport ?
access Set access mode characteristics of the interface
backup Set backup for the interface
block Disable forwarding of unknown uni/multi cast addresses
host Set port host
mode Set trunking mode of the interface
nonegotiate Device will not engage in negotiation protocol on this interface
port-security Security related command
priority Set appliance 802.1p priority
private-vlan Set the private VLAN configuration
protected Configure an interface to be a protected port
trunk Set trunking characteristics of the interface
voice Voice appliance attributes
<cr>
jlshanghai(config-if)#switchport access
jlshanghai(config-if)#switchport access ?
vlan Set VLAN when interface is in access mode
jlshanghai(config-if)#switchport access vlan 112
% Access VLAN does not exist. Creating vlan 112
jlshanghai(config-if)#do show run
Building configuration...
Current configuration : 4418 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname jlshanghai
!
logging buffered 8192 debugging
enable secret 5 $1$8TH6$4Or42tURcVm2xBDCn/77n.
!
no aaa new-model
clock timezone UTC 8
switch 1 provision ws-c3750g-24t
system mtu routing 1500
ip subnet-zero
ip routing
ip dhcp excluded-address 192.168.38.1 192.168.38.149
ip dhcp excluded-address 192.168.38.254 255.255.255.0
ip dhcp excluded-address 192.168.48.1 192.168.48.99
!
ip dhcp pool OfficeWifi
network 192.168.48.0 255.255.255.0
default-router 192.168.48.1
dns-server 192.168.18.1 192.168.18.6
!
ip dhcp snooping
!
mls qos
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
class-map match-all part2
match access-group 111
!
!
policy-map download
class part2
police 5000000 100000 exceed-action drop
!
!
interface GigabitEthernet1/0/1
switchport access vlan 200
!
interface GigabitEthernet1/0/2
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 100,105-112,300,305-312
switchport mode trunk
!
interface GigabitEthernet1/0/3
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/0/4
switchport access vlan 112
spanning-tree portfast
!
interface GigabitEthernet1/0/5
switchport trunk encapsulation dot1q
switchport trunk native vlan 50
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/6
switchport access vlan 50
!
interface GigabitEthernet1/0/7
switchport trunk encapsulation dot1q
switchport trunk native vlan 50
switchport trunk allowed vlan 100,500
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/8
switchport access vlan 200
switchport mode access
!
interface GigabitEthernet1/0/9
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/0/10
switchport access vlan 23
spanning-tree portfast
!
interface GigabitEthernet1/0/11
switchport access vlan 200
spanning-tree portfast
!
interface GigabitEthernet1/0/12
switchport access vlan 200
!
interface GigabitEthernet1/0/13
switchport access vlan 200
spanning-tree portfast
!
interface GigabitEthernet1/0/14
switchport access vlan 200
!
interface GigabitEthernet1/0/15
switchport access vlan 200
!
interface GigabitEthernet1/0/16
switchport access vlan 200
!
interface GigabitEthernet1/0/17
switchport access vlan 200
!
interface GigabitEthernet1/0/18
switchport access vlan 200
!
interface GigabitEthernet1/0/19
switchport access vlan 200
!
interface GigabitEthernet1/0/20
switchport access vlan 200
!
interface GigabitEthernet1/0/21
switchport access vlan 200
!
interface GigabitEthernet1/0/22
switchport access vlan 200
!
interface GigabitEthernet1/0/23
switchport access vlan 23
switchport mode access
!
interface GigabitEthernet1/0/24
no switchport
ip address 10.10.10.10 255.255.255.0
!
interface Vlan1
no ip address
!
interface Vlan23
ip address 192.168.28.100 255.255.255.0
!
interface Vlan50
ip address 192.168.38.254 255.255.255.0
!
interface Vlan100
ip address 172.168.19.100 255.255.248.0
ip access-group 101 in
ip access-group 103 out
!
interface Vlan200
ip address 192.168.18.100 255.255.255.0
!
interface Vlan400
ip address 192.168.48.1 255.255.255.0
!
ip default-gateway 10.10.10.200
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.10.200
ip http server
!
logging 192.168.18.231
access-list 23 deny 192.168.18.0 0.0.0.255
access-list 23 permit any
access-list 101 deny tcp any host 172.168.19.100 eq www
access-list 101 deny tcp any host 172.168.19.100 eq telnet
access-list 101 deny udp any host 172.168.19.100 eq 80
access-list 101 deny udp any host 172.168.19.100 eq 443
access-list 101 deny tcp any host 172.168.19.100 eq 443
access-list 101 deny ip any 192.168.18.0 0.0.0.255
access-list 101 deny ip any 192.168.48.0 0.0.0.255
access-list 102 deny ip any 192.168.28.0 0.0.0.255
access-list 102 permit ip any any
access-list 103 deny icmp any any
!
control-plane
!
!
line con 0
line vty 0 4
password 7 15382A28217B7D747D636C
login
length 0
line vty 5 15
password 7 15382A28217B7D747D636C
login
!
!
monitor session 1 source interface Gi1/0/24
monitor session 1 destination interface Gi1/0/7
monitor session 2 source interface Gi1/0/2
monitor session 2 destination interface Gi1/0/3 encapsulation replicate
end
jlshanghai(config-if)#do show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi1/0/3, Gi1/0/7
23 VLAN0023 active Gi1/0/10, Gi1/0/23
50 VLAN0050 active Gi1/0/6
100 kefang active
101 wifi_1F active
102 VLAN0102 active
105 5floor_wifi active
108 wifi_8f active
110 VLAN0110 active
112 VLAN0112 active Gi1/0/4
200 office active Gi1/0/1, Gi1/0/8, Gi1/0/11, Gi1/0/12, Gi1/0/13, Gi1/0/14, Gi1/0/15, Gi1/0/16
Gi1/0/17, Gi1/0/18, Gi1/0/19, Gi1/0/20, Gi1/0/21, Gi1/0/22
300 VLAN0300 active
305 VLAN0305 active
400 officewifi active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
23 enet 100023 1500 - - - - - 0 0
50 enet 100050 1500 - - - - - 0 0
100 enet 100100 1500 - - - - - 0 0
101 enet 100101 1500 - - - - - 0 0
102 enet 100102 1500 - - - - - 0 0
105 enet 100105 1500 - - - - - 0 0
108 enet 100108 1500 - - - - - 0 0
110 enet 100110 1500 - - - - - 0 0
112 enet 100112 1500 - - - - - 0 0
200 enet 100200 1500 - - - - - 0 0
300 enet 100300 1500 - - - - - 0 0
305 enet 100305 1500 - - - - - 0 0
400 enet 100400 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0
Remote SPAN VLANs
------------------------------------------------------------------------------
Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------
jlshanghai(config-if)#vlan 106
jlshanghai(config-vlan)#name 6FWIFI
jlshanghai(config)#vlan 107
jlshanghai(config-vlan)#name 7fwifi
jlshanghai(config-vlan)#vlan 108
jlshanghai(config-vlan)#name 8FWIFI
jlshanghai(config-vlan)#name 109
jlshanghai(config-vlan)#name 8FWIFI
jlshanghai(config-vlan)#vlan 109
jlshanghai(config-vlan)#name 9FWIFI
jlshanghai(config-vlan)#vlan 110
jlshanghai(config-vlan)#NAME 10FWIFI
jlshanghai(config-vlan)#VLAN 111
jlshanghai(config-vlan)#NAME 11FWIFI
jlshanghai(config-vlan)#VLAN 112
jlshanghai(config-vlan)#NAME 12FWIFI
jlshanghai(config-vlan)#VLAN 305
jlshanghai(config-vlan)#NAME 5FLAN
jlshanghai(config-vlan)#VLAN 306
jlshanghai(config-vlan)#NAME 6FLAN
jlshanghai(config-vlan)#VLAN 307
jlshanghai(config-vlan)#NAME 7FLAN
jlshanghai(config-vlan)#VLAN 308
jlshanghai(config-vlan)#NAME 8FLAN
jlshanghai(config-vlan)#VLAN 309
jlshanghai(config-vlan)#NAME 9FLAN
jlshanghai(config-vlan)#VLAN 310
jlshanghai(config-vlan)#NAME 10FLAN
jlshanghai(config-vlan)#VLAN 311
jlshanghai(config-vlan)#NAME 11FLAN
jlshanghai(config-vlan)#VLAN 312
jlshanghai(config-vlan)#NAME 12FLAN
jlshanghai(config-vlan)#vlan 312
jlshanghai(config-vlan)#exit
jlshanghai(config)#do show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi1/0/3, Gi1/0/7
23 VLAN0023 active Gi1/0/10, Gi1/0/23
50 VLAN0050 active Gi1/0/6
100 kefang active
101 wifi_1F active
102 VLAN0102 active
105 5floor_wifi active
106 6FWIFI active
107 7fwifi active
108 8FWIFI active
109 9FWIFI active
110 10FWIFI active
111 11FWIFI active
112 12FWIFI active Gi1/0/4
200 office active Gi1/0/1, Gi1/0/8, Gi1/0/11, Gi1/0/12, Gi1/0/13, Gi1/0/14, Gi1/0/15, Gi1/0/16
Gi1/0/17, Gi1/0/18, Gi1/0/19, Gi1/0/20, Gi1/0/21, Gi1/0/22
300 VLAN0300 active
305 5FLAN active
306 6FLAN active
307 7FLAN active
308 8FLAN active
309 9FLAN active
310 10FLAN active
311 11FLAN active
312 12FLAN active
400 officewifi active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
23 enet 100023 1500 - - - - - 0 0
50 enet 100050 1500 - - - - - 0 0
100 enet 100100 1500 - - - - - 0 0
101 enet 100101 1500 - - - - - 0 0
102 enet 100102 1500 - - - - - 0 0
105 enet 100105 1500 - - - - - 0 0
106 enet 100106 1500 - - - - - 0 0
107 enet 100107 1500 - - - - - 0 0
108 enet 100108 1500 - - - - - 0 0
109 enet 100109 1500 - - - - - 0 0
110 enet 100110 1500 - - - - - 0 0
111 enet 100111 1500 - - - - - 0 0
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
112 enet 100112 1500 - - - - - 0 0
200 enet 100200 1500 - - - - - 0 0
300 enet 100300 1500 - - - - - 0 0
305 enet 100305 1500 - - - - - 0 0
306 enet 100306 1500 - - - - - 0 0
307 enet 100307 1500 - - - - - 0 0
308 enet 100308 1500 - - - - - 0 0
309 enet 100309 1500 - - - - - 0 0
310 enet 100310 1500 - - - - - 0 0
311 enet 100311 1500 - - - - - 0 0
312 enet 100312 1500 - - - - - 0 0
400 enet 100400 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0
Remote SPAN VLANs
------------------------------------------------------------------------------
Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------
jlshanghai(config)#exit
jlshanghai#write mem
Building configuration...
[OK]
