[ 실습 ] 스위치장비초기화 1. NVRAM 에저장되어있는 'startup-config' 파일이있다면, 삭제를실시한다. SWx>enable SWx#erase startup-config Erasing the nvram filesystem will remove all configuration files Continue? [confirm] ( 엔터 ) [OK] Erase of nvram: complete %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram 2. Flash 메모리에 'vlan.dat' 파일이있다면, 삭제를실시한다. ( 만약, 없다면 '4' 번과정을실시한다.) SWx#show flash System flash directory: File Length Name/status 3 8662192 c3560-advipservicesk9-mz.122-37.se1.bin 2 28282 sigdef-category.xml 1 227537 sigdef-default.xml 4 616 vlan.dat [8918627 bytes used, 55097757 available, 64016384 total] 63488K bytes of processor board System flash (Read/Write) SWx#delete flash:vlan.dat Delete filename [vlan.dat]? ( 엔터 ) Delete flash:/vlan.dat? [confirm] ( 엔터 ) 3. 'vlan.dat' 파일만삭제되었는지확인하도록한다. ( 만약, flash 메모리전체가삭제되었다면, '4' 번과정을실시하지않고강사에게꼭얘기한다.) SWx#show flash System flash directory: File Length Name/status 3 8662192 c3560-advipservicesk9-mz.122-37.se1.bin 2 28282 sigdef-category.xml 1 227537 sigdef-default.xml [8918011 bytes used, 55098373 available, 64016384 total] 63488K bytes of processor board System flash (Read/Write) 블로그 : net123.tistory.com - 1 - 저자김정우
4. 스위치재부팅을실시한다. ( 만약, Save 질문이나오면 'no' 를실시한다.) SWx#reload System configuration has been modified. Save? [yes/no]: no Proceed with reload? [confirm] ( 엔터 ) ~~ 스위치재부팅 ~~ --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: no % Please answer 'yes' or 'no'. Press RETURN to get started ( 엔터 ) Switch>enable Switch# 5. 라우터초기화및재부팅 Rx#erase startup-config Erasing the nvram filesystem will remove all configuration files Continue? [confirm] ( 엔터 ) [OK] Erase of nvram: complete %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram Rx#reload System configuration has been modified. Save? [yes/no]: no Proceed with reload? [confirm] ( 엔터 ) 블로그 : net123.tistory.com - 2 - 저자김정우
[ 실습 ] Inter-VLAN( 스타토폴로지 ) 1. SW1~SW3, R1 에서기본설정을실시한다. ( 모든실습진행시설정하는것을권장함 ) @ SW1, SW2, SW3(y 는장비번호 ) @ R1 en conf t hostname SWy no ip domain-lookup line con 0 exec-timeout 0 0 logg syn line vty 0 15 no login privilege level 15 int vlan 1 ip address 192.168.100.y 255.255.255.0 no shutdown ip default-gateway 192.168.100.254 en conf t hostname R1 no ip domain-lookup line con 0 exec-timeout 0 0 logg syn line vty 0 4 no login privilege level 15 블로그 : net123.tistory.com - 3 - 저자김정우
2. SW1~SW3 연결구간에트렁크를구성하여라. @ SW1 int fa0/24 @ SW3 int range fa0/22, fa0/24 SW1,SW2,SW3#show int trunk int fa0/22 3. VTP를이용하여 VLAN 정보를공유하여라. (SW2 VTP 서버, SW1 & SW3 VTP 클라이언트 ) @ SW1, SW3 SW1,SW2,SW3#show vtp status vtp mode server vtp domain CISCO vtp password cisco vtp mode client vtp domain CISCO vtp password cisco 4. SW2 에서 VLAN 11~14 를생성하고, SW1 & SW3 에서공유받았는지확인하도록한다. SW1,SW2,SW3#show vlan brief vlan 11 name VLAN_A vlan 12 name VLAN_B vlan 13 name VLAN_C vlan 14 name VLAN_D 5. SW1 과 SW3 에서각각의스위치포트를 VLAN 에엑세스한다. @ SW1 @ SW3 SW1,SW3#show vlan brief int fa0/1 switchport access vlan 11 int fa0/2 switchport access vlan 13 int fa0/1 switchport access vlan 12 int fa0/2 switchport access vlan 14 블로그 : net123.tistory.com - 4 - 저자김정우
6. SW2 과 R1 에서 Inter-VLAN 을구성하도록한다. @ R1 int fa0/0 no shutdown int fa0/0.1 encapsulation dot1q 1 ip address 192.168.100.254 255.255.255.0 int fa0/0.11 encapsulation dot1q 11 ip address 10.1.11.254 255.255.255.0 int fa0/0.12 encapsulation dot1q 12 ip address 10.1.12.254 255.255.255.0 int fa0/0.13 encapsulation dot1q 13 ip address 10.1.13.254 255.255.255.0 int fa0/0.14 encapsulation dot1q 14 ip address 10.1.14.254 255.255.255.0 int fa0/10 R1#show ip route R1#show int fa0/0.1 R1#show int fa0/0.11 R1#show int fa0/0.12 R1#show int fa0/0.13 R1#show int fa0/0.14 SW2#show int trunk 7. PC에 IP 주소정보를설정한다. PC IP 주소 서브넷마스크 기본게이트웨이 DNS 서버 A 10.1.11.1 255.255.255.0 10.1.11.254 168.126.63.1 B 10.1.13.1 255.255.255.0 10.1.13.254 168.126.63.1 C 10.1.12.1 255.255.255.0 10.1.12.254 168.126.63.1 D 10.1.14.1 255.255.255.0 10.1.14.254 168.126.63.1 8. 각각의 PC에서기본게이트웨이및다른 VLAN PC로 Ping 테스트를실시한다. A_PC>ping 10.1.11.254 A_PC>ping 10.1.12.1 A_PC>ping 10.1.13.1 A_PC>ping 10.1.14.1 B_PC>ping 10.1.13.254 B_PC>ping 10.1.12.1 B_PC>ping 10.1.13.1 B_PC>ping 10.1.11.1 C_PC>ping 10.1.12.254 C_PC>ping 10.1.11.1 C_PC>ping 10.1.13.1 C_PC>ping 10.1.14.1 D_PC>ping 10.1.14.254 D_PC>ping 10.1.11.1 D_PC>ping 10.1.12.1 D_PC>ping 10.1.13.1 블로그 : net123.tistory.com - 5 - 저자김정우
영리목적으로사용할경우저작권법제30조항에의거법적처벌을받을수있습니다. 9. R1에서인터넷연결을위한 NAT 설정및정적기본경로를실시한다. @ R1 (X는조번호 ) access-list 10 permit 10.0.0.0 0.255.255.255 access-list 10 permit 192.168.100.0 0.0.0.255 source list 10 interface fa0/1 int fa0/1 ip address 192.168.1.X 255.255.255.0 ip nat outside no shutdown int fa0/0.1 int fa0/0.1 int fa0/0.11 int fa0/0.12 int fa0/0.13 int fa0/0.14 ip route 0.0.0.0 0.0.0.0 192.168.1.1 R1#show ip route R1#ping 168.126.63.1 10. A~D PC 에서 'ping 168.126.63.1' 및인터넷이가능한지확인하도록한다. 블로그 : net123.tistory.com - 6 - 저자김정우