# Cisco Cisco documentatie # Diversen # Diverse handige Cisco commando's Access Poort ``` interface range FastEthernet1/0/1-12 description Internet switchport access vlan 100 switchport mode access load-interval 30 no mdix auto no cdp enable spanning-tree portfast ! ``` Trunk Poort ``` interface GigabitEthernet1/0/1 switchport trunk encapsulation dot1q switchport trunk native vlan 2 switchport trunk allowed vlan 99,100 switchport mode trunk switchport nonegotiate ip arp inspection trust logging event trunk-status load-interval 30 ip dhcp snooping trust ! ``` Timezone ``` clock timezone CET 1 0 clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00 ``` NTP Servers ``` ntp server 145.68.237.7 ntp server 145.68.238.144 ``` Status van de interfaces ``` sh int status ``` Laat zien wanneer de interfaces voor het laatst actief zijn geweest ``` sh int | inc line protocol is|Last input ``` Laat informatie zien zoals temperatuur, fans, power ``` sh env all ``` Uptime van de switch ``` sh hard | i uptime ``` IP-adressen achterhalen die zijn toegekend aan de poorten ``` show ip dhcp snooping binding ``` PoE op poort uit- en inschakelen ``` int fa1/0/1 power inline never no power inline never ``` Uitlezen PoE status ``` show powerinline ``` Interface op default zetten ``` default int fa1/0/1 ``` err-disabled poorten uitlezen en weer actief zetten ``` show interfaces status err-disabled conf term interface FastEthernet1/0/1 shutdown no shutdown exit ``` Laat de "neighbours" zien ``` sh cdp nei ``` Laat details zien van een tranceiver (SFP) ``` sh int g2/1/1 transceiver detail ``` # Reset van de switch # Reset Cisco 3650 m.b.v. ROMMON mode Houd de "Mode" toets ingedrukt als je daarna de spanning op de switch aansluit. Wacht ca 30 seconden en laat de mode toets los. Er verschijnt nu de "switch:" prompt. Voer daarna het volgende uit: ``` flash_init load_helper (werkt niet altijd) set BYPASS_STARTUP_CONFIG 1 unset STACK_1_1 (wanneer de 3650 onderdeel van een stack was) boot ``` Hierna kom je weer in de initial config dialog Verwijder de vlan.dat, voer een write erase uit en daarna een reload: ``` del flash:vlan.dat write erase reload ``` Als laatste nog een keer naar de ROMMON mode met behulp van de "Mode" toets en zet de variabele BYPASS\_STARTUP\_CONFIG terug: ``` flash_init set BYPASS_STARTUP_CONFIG 0 ``` # Software upgrade # Upgrade Cisco 3650 Log in op de switch en voer de volgende commando's uit: ``` write erase delete flash:vlan.dat show interface status (kijk of switch in stack 1 zit). Zo niet dan: switch 4 renumber 1 ``` Op het moment van schrijven gebruik ik de software versie cat3k\_caa-universalk9.16.12.08.SPA.bin Zet de software op een USB-stick en koppel deze aan de Cisco 3650. Voer het volgende uit: ``` request platform software package clean switch all file flash: copy usbflash0:cat3k_caa-universalk9.16.12.08.SPA.bin flash: request platform software package install switch all file flash:cat3k_caa-universalk9.16.12.08.SPA.bin new auto-copy reload ``` De switch start opnieuw op. Voer daarna nog het laatste commando uit: ``` enable request platform software package clean switch all file flash: ``` # Vlans # Configure VLANs, Access Ports & Trunk Ports on Cisco Switches In this lesson, we will learn how to configure VLANs on Cisco switches and their assignments to interfaces. We will also learn about Access Ports & Trunk ports and how to configure them. Before diving into the configuration part, lets review a bit of theory related to it. Virtual LANs (VLANS) provide logical segmentation by creating multiple broadcast domains on the same network switch. VLANs provide higher utilization of switch ports because a port can be associated to the necessary broadcast domain, and multiple broadcast domains can reside on the same switch. VLANs are identified by IEEE 802.1Q statndard, which adds 32 bits in IP packet header with following details:
Tag Protocol ID (TPID)Priority Code Point (PCP)Drop Eligibal Indicator (DEI)VLAN ID
IEEE 802.1Q Header Fields
By default all interfaces are active & assigned to VLAN 1, which is default VLAN. Any information received on a trunk port without 802.1Q VLAN tag is associated to Native VLAN. Native VLAN must match on both trunk ports not doing so can cause traffic to change VLANs unintentionally. Note that VLAN information is not stored in configuration (running-config / startup-config) but in a separate file named as vlan.dat on router/switch flash memory. #### **Creating VLANs** VLANs are created in global configuration mode and are named in sub-global configuration mode. ``` switch#configure terminal switch(config)#vlan 10 switch(config-vlan)#name IT-Department switch(config-vlan)#vlan 20 switch(config-vlan)#name Finance ``` VLANs & their ports assignments can be verified with show vlan | show vlan brief & show vlan summary commands. #### **Access Ports** Now that we know how to configure VLANs now we will learn about Access port on Cisco switches. An access port carries traffic from specified VLAN to the device connected to it or from the device to other devices connected on same VLAN. An Access port can only be assigned to one VLAN & you can configure a switchport as an access port as follows: ``` switch(config)#interface fa0/1 switch(config-if)#switchport mode access switch(config-if)#switchport access vlan 10 switch(config-if)#interface fa0/2 switch(config-if)#switchport mode access switch(config-if)#switchport access vlan 20 ``` #### **Trunk Ports** A switchport configured as trunk port can carry multiple VLANs information and it typically used when multiple VLANs need connectivity between switch and other devices like router or firewall. To configure a switchport as trunk port. ``` switch#configure terminal switch(config)#interface fa0/10 switch(config-if)#switchport mode trunk switch(config-if)#interface fa0/11 switch(config-if)#switchport mode trunk ``` Trunk ports information can be seen by issuing show interfaces trunk command. This command output can be categorized into three parts. - First part of the output contains information regarding trunk ports, their status, their association to an Etherchannel & Native VLAN - Second part of the output displays list of allowed VLANs on trunk port - Third section displays VLANs that are in spanning tree forwarding state on that switch however ports that are in spanning tree blocking state are not displayed. #### **Access and Trunk ports** If you intend to use VLANs in your network, you will need to configure some ports on a switch as access ports and other as trunk ports. Here is a description each port type: - **access port** – a port that can be assigned to a single VLAN. This type of interface is configured on switch ports that are connected to end devices such as workstations, printers, or access points. - **trunk port** – a port that is connected to another switch. This type of interface can carry traffic of multiple VLANs, thus enabling you to extend VLANs across your entire network. Frames are tagged by assigning a VLAN ID to each frame as they traverse between switches. #### **Allowed VLANs** By default all VLANs are allowed on a trunk, however we can categorically allow specific VLANs over the trunk port. Traffic can be minimized on trunk ports to restrict broadcast traffic too. Sample configuration is appended. ``` switch#configure terminal switch(config)#interface fa0/10 switch(config-if)#switchport trunk allowed vlan 1, 10, 20 switch(config-if)#switchport mode trunk ``` #### **Addition and Removal of VLANs** If you want to add VLANs in running trunk port it must be added using “add” or “remove” command other wise it will replace all existing VLANs with newly added/removed VLAN. ``` switch(config-if)#switchport trunk allowed vlan add 100 switch(config-if)#switchport trunk allowed vlan remove 20 ``` That’s all for now, hopefully this is been informative for you and by now you know a lot more about configuring VLANs, Access Ports & Trunk Ports. **Bron:** [Configure VLANs, Access Ports & Trunk Ports on Cisco Switches](https://techacad.net/configure-vlans-access-trunk-ports-on-cisco-switches/)