蘭庭論壇

標題: extreme 路由基本操作 [打印本頁]

作者: 李亮寬 時間: 2016-9-19 11:20
標題: extreme 路由基本操作
系統預設有VR-Default與VR-Mgmt兩個Virutal Router，
其中管理用的網路介面(網路孔上有標Management)屬於VR-Mgmt，
而一般網路介面屬於VR-Default。

telnet 120.101.***.***

#show dhcp-server  查看dhcp IP分配狀況

#show iparp  已用IP

#show vlan

變更密碼
#configure account <Account>

建立帳號時，需具備Admin權限。(Switch 能支援最多到 16 個管理帳號)
#create account [admin | user] <Account>  看要給建立的帳號admin或user權限

查看帳號
#show accounts

刪除帳號
#delete account <Account>

將特定MAC Address加入黑名單
#create fdbentry 00:80:91:52:52:54 lan blackhole
#create fdbentry b8:ae:ed:b0:be:28 lan blackhole

將特定MAC Address取消黑名單
#delete fdbentry 00:80:91:52:52:54 lan
#delete fdbentry b8:ae:ed:b0:be:28 lan

檢視指令如下。
show fdb

網路IP管理
設定IP Address
#configure vlan <Vlan-Name> ipaddress <IP>/<subnet_mask>
#configure vlan "lan" ipaddress 120.101.204.254 255.255.255.0#configure vlan "AP" ipaddress 10.228.200.254 255.255.255.0
#configure vlan "Default" ipaddress 10.100.4.129 255.255.255.240

刪除IP Address
#unconfigure vlan <Vlan-Name> ipaddress
#unconfigure vlan "Default" ipaddress

檢視IP Address
#show ipconfig

設定一般路由
#configure iproute add <Destination-network> <Destination-mask> <Gateway-IP>
#configure iproute add 192.168.10.0 255.255.255.0 192.168.20.1
#configure iproute add 192.168.10.0/24 192.168.20.1

設定default路由
#configure iproute add default <Gateway-IP>
#configure iproute add default 192.168.20.1

刪除路由
#configure iproute delete <Destination-network> <Destination-mask> <Gateway-IP>
#configure iproute delete 192.168.10.0 255.255.255.0 192.168.20.1
#configure iproute delete 192.168.10.0/24 192.168.20.1

檢視路由
#show iproute

建立VLAN
#create vlan <Vlan-Name>
#configure vlan <Vlan-Name> tag <Vlan-ID>

刪除VLAN
#delete vlan <vlan-Name>

將Port加到VLAN中
#configure vlan <Vlan-Name> add ports <

ort>
#configure vlan "default" add port 9

設定Port帶VLAN tag (Trunk Mode)
#configure vlan <Vlan-Name> add ports <

ort> tag
#configure vlan "default" add ports 9 tag

將Port自VLAN中刪除
#configure vlan <Vlan-Name> deletes port <

ort>
#configure vlan "default" deletes port 9

配置VLAN的L3 IP Address
#configure vlan "default" ipaddress 192.168.1.254/24

啟用L3路由功能
#enable ipforwarding

查看VLAN
#show vlan

要查看VLAN下有哪些Port成員，要用detail
#show vlan detail

系統管理
顯示Switch資訊
#show switch

顯示firmware資訊
#show version

變更Switch名稱
#configure snmp sysName <Host-Name>

查看執行過的指令
#history

查看log
#show log

條列Switch檔案
#ls

編輯檔案
#vi <File-Name>

複製檔案
#cp <Source File-Name> <Destination File-Name>

刪除檔案
#rm <File-Name>

透過tftp備份檔案
#tftp put <TFTP-Server-IP> vr "VR-Default" <File-Name>

透過tftp下載檔案
#tftp get <TFTP-Server-IP> vr "VR-Default" <File-Name>

儲存設定
#save

另存組態檔。
#save configuration {primary | secondary | <existing-config> | <new-config>}

若未輸入檔名，則會取代預設的primary.cfg設定檔；
若自行輸入檔名，系統會再詢問是否要將此檔案做為開機預設的組態檔。
儲存組態檔時，不用加副檔名，糸統會自行加上副檔名 cfg。

載入組態檔。
#use configruation <config-filename>

載入既有的組態檔會在重開機後生效，組態檔不用加副檔名 cfg。

查看運行中組態
#show configuration <Module>

重開機
#reboot

清空設定值
#unconfigure switch all

unconfigure switch all 這個指令會清空所有設定值，並重新開機，不過使用者密碼並不會隨著重設。

啟用web管理，請先設定好管理IP
#enable web http | https

以上節錄自Shunze學園
http://www.shunze.info/forum/thr ... &sid=lhwkjgqilhloiu
http://www.shunze.info/forum/thr ... wkjgqilhloiu&page=1

----------------------------------------------------------------------------

Enable SNMP protocol on Extreme Networks switches

To monitor your Extreme Networks switcheswith SmartReport, you must enable SNMP protocol on them. Indeed, the SNMP protocol allows to retrieve of statistics information on network equipments.

Connect you to the device shell to monitor:

To connect to the shell of Extreme Networks switches (here Extreme Summit), use Telnet or SSH protocols. Then for each following steps, run the command lines shown.

Enable SNMP :

summit # enable snmp access

Configure the community in read :

For security reasons it removes the “public” default community :

summit # configure snmp delete community readonly public

Then it create a new community:

summit # configure snmp add community readonly <nouvelle_communaut>

Add trap collectors:

summit # configure snmp add trapreceiver <IP> community <communauté>

<IP>: IP address of your SmartReport server

To view the configuration:

summit # sh managementCLI idle timeouts: disabledCLI Paging: enabledCLI Prompt Number: enabledCLI configuration logging: enabledTelnet access: enabled tcp port: 23Web HTTP access: enabled tcp port: 80Web HTTPS access: cert key pair valid, disabled tcp port: 443SSH Access: key valid, enabled tcp port: 22UDP Echo Server: disabled udp port: 7SNMP Access: enabledSNMP Read Only Communities: rykfcwcgTotal Read Only Communities:1SNMP Read Write Communities: r~`|kugTotal Read Write Communities:1SNMP dot1dTpFdbTable: disabledRMON polling: disabledSNMP Traps: enabledSNMP v1/v2c TrapReceivers: Destination Community Source IP Address Flags srvnagios /162 rykfcwcg 2EA srvsmartreport /162 rykfcwcg 2EAFlags: Version: 1=v1 2=v2c Mode: S=Standard E=Enhanced Trap Groups: s=STP b=BGP o=OSPF p=Ping/Traceroute v=VRRP y=System e=Extreme m=Smart Traps a=Auth l=Link Up/Down r=RMON c=Security A=AllSNMP MAC Security traps: disabledLink Up/Link Down traps enabled on ports: AllSNMP stats: inPkts 0 outPkts 0 errors 0 authErrors 0 Gets 0 GetNexts 0 Sets 0SNMP traps: sent 1 authTraps enabledExceedcommittedrate traps enabled on ports: NoneLogin stats: validLogins 1 badPasswords 0 unknownUsers 0 Telnet: total 1 valid 1 invalid 0 HTTPS: total 0 valid 0 invalid 0 HTTP: total 0 valid 0 invalid 0Management access stats: Protocol UDP/TCP Port Total packets Rejected packets Protocol Source IP Address UDP/TCP Port Time

To save the configuration:

summit #saveDo you want to save to the primary configuration database? y

歡迎光臨蘭庭論壇 (http://120.101.203.2/)