Cisco Switch Commands Cheat Sheet (CLI) шпаргалка
материал

Verification Commands:

TestSwitch#show version [Displays software and hardware information] TestSwitch#show running-config [Displays currently running configuration in DRAM] TestSwitch#show start [Displays configuration in NVRAM which will be loaded after reboot] TestSwitch#show flash: [Displays Flash memory information] TestSwitch#show boot [Displays boot path and image] TestSwitch#show clock [Displays the system clock] TestSwitch#show interfaces [Displays all interfaces configuration and status of line] TestSwitch#show vlan [Displays vlan number, name, status and ports associated with it] TestSwitch#show vtp status [Displays VTP mode, Number of existing vlans and config revision] TestSwitch#show interface status [Displays interface status, vlan, Duplex, Speed and type] TestSwitch#show etherchannel [Displays etherchannel information] TestSwitch#show cdp neighbors [Displays information of connected devices] TestSwitch#show cdp neighbors detail [Displays detailed information of connected devices] TestSwitch#show mac address-table [Displays current MAC address forwarding table and which MAC is learned on each switch port] TestSwitch#show spanning-tree [Displays spanning-tree state information, which interfaces are in active or blocking state etc]

Resetting the Switch

TestSwitch#delete flash:vlan.dat [Deletes vlan database from flash memory so you can start adding
new VLANs from scratch] TestSwitch#erase startup-config [Delete start-up file from NVRAM] TestSwitch#reload [Reboot the Switch]

Setting Host Names

TestSwitch#config t [Entering into Global Configuration Mode] TestSwitch(config)#hostname MySwitch [Enter the hostmane]

Setting login credentials:

MySwitch(config)#username admin password csico1234 [enable username and password for login to the switch] MySwitch(config)#enable secret test1 [Sets encrypted secret password using MD5 algorithm. This
is the enable password that you will be asked to enter when trying to enter into “enable” mode] MySwitch(config)#service password-encryption [Encrypt all the passwords using MD5]

Console Access:

MySwitch(config)#line con 0 [Enter into line console mode] MySwitch(config-line)#password test3 [Set password on console] MySwitch(config-line)#login [Enable password checking]

SSH/Telnet Access to the switch:

MySwitch(config)#line vty 0 4 [Enters line vty mode for all five virtual ports] MySwitch(config-line)#transport input ssh [Enable SSH] MySwitch(config-line)#transport input telnet [Enable telnet] MySwitch(configiline)#password test3 [Set password]

Setting IP Address (To allow remote access to the switch):

MySwitch(config)#interface vlan1 [Enters vlan1, the native vlan] MySwitch(config-if)#ip address 192.168.1.2 255.255.255.0 [Set IP address which is the management IP of device] MySwitch(config-if)#exit
MySwitch(config)#ip default-gateway 192.168.1.1 [Exit path for the switch – gateway IP]

Interface description

MySwitch(config)#interface g0/1
MySwitch(config-if)#description TO SERVER

Duplex and Speed Settings

MySwitch(config)#interface g0/1
MySwitch(config-if)#speed 10 [Force 10Mbps Speed] MySwitch(config-if)#speed 100 [Force 100Mbps Speed] MySwitch(config-if)#speed auto [Enable auto speed configuration] MySwitch(config-if)#duplex auto [Enable auto duplex configuration on switch port] MySwitch(config-if)#duplex full [Enable full duplex configuration on switch port] MySwitch(config-if)#duplex half [Enable half duplex configuration on switch port]

Setting Web-based interface for configuration (GUI):

MySwitch(config)#ip http server [Enable HTTP server] MySwitch(config)#ip http port 80 [Set port number for HTTP]

Port-Security

MySwitch(config)#interface g0/1 [Enter the interface to set port-security] MySwitch(config-if)#switchport port-security [Enable port security on the interface] MySwitch(config-if)#switchport port-security mac-address sticky [Interface converts all MAC addresses to sticky
secure addresses] MySwitch(config-if)#switchport port-security maximum 1 [Only one MAC address will be allowed for this port] MySwitch(config-if)#switchport port-security violation shutdown [Port will shut down if violation occurs] MySwitch(config-if)#exit
MySwitch(config)#exit
MySwitch#show port-security [Verifying Port security]

Save current configuration

MySwitch(config)# copy running-config startup-config

PortFast

«Portfast» обходит состояния Spanning Tree и поднимает порт как можно быстрее. Используйте ее, только если вы подключаете к порту обычный хост (например, компьютер). Не используйте эту команду, если порт является магистральным или если вы подключаете другие коммутаторы к определенному порту.

MySwitch(config)# interface FastEthernet 0/1
MySwitch(config-if)# spanning-tree portfast

Configuring VLANs

MySwitch(config)#vlan 20 [Create a Layer2 VLAN with id 20] MySwitch(config-vlan)# name testvlan [Enter a name for the vlan] MySwitch(config-vlan)#exit
MySwitch(config)#exit
MySwitch#show vlan brief [Verify the vlan database]

Assigning access ports to a vlan

MySwitch(config)#interface g0/1
MySwitch(config-if)#switchport mode access [Set the interface in access mode] MySwitch(config-if)#switchport access vlan 20 [Assign the port to vlan 20] MySwitch(config-if)#exit

Следующие команды выберут ряд интерфейсов (от 1 до 24) и добавят их все в vlan20

MySwitch(config)#interface range gigabitEthernet 0/1-24
MySwitch(config-if)#switchport mode access
MySwitch(config-if)#switchport access vlan 20
MySwitch(config-if)#exit

Configuring trunk port

MySwitch(config)#interface g0/2
MySwitch(config-if)#switchport trunk encapsulation dot1q [Configure the port to support 802.1Q
Encapsulation (default is negotiate)] MySwitch(config-if)#switchport mode trunk [Set the interface in permanent trunking mode] MySwitch(config-if)#switchport trunk native vlan 20 [Specify native vlan for 802.1q trunk — OPTIONAL] MySwitch(config-if)#switchport trunk allowed vlan 2-5 [vlans 2 to 5 are allowed to pass through the trunk] MySwitch(config-if)#switchport trunk allowed vlan add 7 [add also vlan 7 in the allowed vlans] MySwitch(config-if)#switchport trunk allowed vlan remove 3 [remove vlan 3 from the allowed vlans in the trunk] MySwitch#show interface g0/2 trunk [Verify the trunk ports and associated vlans on the specific interface]