寫寫筆記

Router(config)# config-register 0x2100 可以帶的參數為16進位值 0x2100 進入Rom Monitor 0x2101 進入MiniIOS 0x2102~210F 正常進入IOS 0x2142 忽略Starup-config Show version可以查目前的Register值 ================================================================== Router# show version  Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(15)T1, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2007 by Cisco Systems, Inc. Compiled Wed 18-Jul-07 06:21 by pt_rel_team ROM: System Bootstrap, Version 12.1(3r)T2, RELEASE SOFTWARE (fc1) Copyright (c) 2000 by cisco Systems, Inc. System returned to ROM by power-on System image file is "c2800nm-advipservicesk9-mz.124-15.T1.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or u...

Port 設定Protected，將有類似 Port-isolation 的功能(類似切Portbase VLAN)，原本想用Packet Tracer試的，但模擬的2950裡沒有這個功能，所以在實體的Switch上設定 Port 1~23 互相都不通，但Port 1~23與Port 24通 ====設定方法==== 進到CLI模式下: Switch# configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Switch(config)# interface range fa 0/1 - 23 Switch(config-if-range)# switchport protected 參考文件 其實我還想實作每個Port限制流量，不過這個就留在下次，有興趣的人可以 參考這篇

Port 1,2，設定上傳與下載為1024Kbps ====設定方法==== 進到CLI模式下: Zyxel ES-2# configure Zyxel ES-2(config)# bandwidth-control Zyxel ES-2(config)# interface port-channel 1-2 Zyxel ES-2(config-interface)# bandwidth-limit egress Zyxel ES-2(config-interface)# bandwidth-limit egress 1024 Zyxel ES-2(config-interface)# bandwidth-limit ingress Zyxel ES-2(config-interface)# bandwidth-limit ingress 1024

Port-isolation 可以讓Port獨立出來,有設Port-isolation的將不能互通 例如我要把1-24Port切開，但1-24 Port可以連到25 Port , 26Port ====設定方法==== 進到CLI模式下: Zyxel ES-2# configure Zyxel ES-2(config)# interface port-channel 1-24 Zyxel ES-2(config-interface)# vlan1q port-isolation 若要取消Port-isolation , 只要下 no vlan1q port-isolation 即可取消!! *註:修改後記得要儲存,否則重開Switch後,設定會復原!

Switch(config-if)#switchport port-security Command rejected: FastEthernet0/2 is a dynamic port. Switch(config-if)#switchport mode access Switch(config-if)#switchport port-security Switch(config-if)#switchport port-security maximum 1 Switch(config-if)#switchport port-security mac-address sticky Switch(config-if)#switchport port-security violation restrict Switch(config-if)#switchport port-security violation ?   protect   Security violation protect mode   restrict  Security violation restrict mode   shutdown  Security violation shutdown mode Switch#show port-security Secure Port  MaxSecureAddr  CurrentAddr  SecurityViolation  Security Action                 (Count)       (Count)          (Count) ---------------------------------------------------------------------------       Fa0/2             ...

Switch> enable Switch# configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Switch(config)# line console 0 Switch(config-line)# password cisco Switch(config-line)# login 設定Privileged Mode的密碼 switch(config)# enable password cisco (未加密) switch(config)# enable secret sanjose  (加密) 加密的密碼會蓋過未加密的，所以進入Privileged Mode的密碼要打sanjose　

                      enable                          configure terminal User Mode --------------> Privileged Mode ----------------------> Global Configuration Mode                       Disable                                       exit                      User Mode <-------------- Privileged Mode <---------------------- Global Configuration Mode 大致上有這幾種mode，不過還是有其他Mode ex: Line Configure Mode  ,  Interface Configure Mode...... 官方介紹 Cisco IOS 的檔案格式:IFS(Cisco IOS File System)

查詢在IEEE中註冊的OUI，藉此知道製造廠商 http://standards.ieee.org/develop/regauth/oui/public.html

TCP/IP --------------------------------------------------------------------------------------- Application                              [DATA]      (Data) --------------------------------------------------------------------------------------- Transport                                [TCP][DATA]     (Segment)    (若使用TCP傳輸) --------------------------------------------------------------------------------------- Internet                                   [IP][TCP][DATA]      (Packet) --------------------------------------------------------------------------------------- Network Access                     [Eth.][IP][DATA][Eth.]     (Fr...