在Cisco catalyst 2950交换机上,通过配置extended ACL来实现端口与IP的绑定。
配置如下:
2950#show run
Current configuration : 5396 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 2950
!
enable secret 5 $1$kJ.v$gF4osmkOwfvOy7vkwI3j/.
!
ip subnet-zero
!
no ip domain-lookup
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
spanning-tree uplinkfast
!
interface FastEthernet0/1
switchport access vlan 30
switchport mode access
ip access-group ip1 in
spanning-tree portfast
!
interface FastEthernet0/2
switchport access vlan 30
switchport mode access
ip access-group ip2 in
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 30
switchport mode access
ip access-group ip3 in
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 30
switchport mode access
ip access-group ip4 in
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 30
switchport mode access
ip access-group ip5 in
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 30
switchport mode access
ip access-group ip6 in
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 30
switchport mode access
ip access-group ip7 in
spanning-tree portfast
interface FastEthernet0/8
switchport access vlan 30
switchport mode access
ip access-group ip8 in
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 30
switchport mode access
ip access-group ip9 in
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 30
switchport mode access
ip access-group ip10 in
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 30
switchport mode access
ip access-group ip11 in
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 30
switchport mode access
ip access-group ip12 in
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 30
switchport mode access
ip access-group ip13 in
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 30
switchport mode access
ip access-group ip14 in
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 30
switchport mode access
ip access-group ip15 in
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 30
switchport mode access
ip access-group ip16 in
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 30
switchport mode access
ip access-group ip17 in
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 30
switchport mode access
ip access-group ip18 in
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 30
switchport mode access
ip access-group ip19 in
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 30
switchport mode access
ip access-group ip20 in
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 30
switchport mode access
ip access-group ip21 in
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 30
switchport mode access
ip access-group ip22 in
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 30
switchport mode access
ip access-group ip23 in
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 30
switchport mode access
ip access-group ip24 in
spanning-tree portfast
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
spanning-tree stack-port
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.22 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.100.254
ip http server
!
ip access-list extended ip1
permit ip host 192.168.30.1 any
ip access-list extended ip10
permit ip host 192.168.30.10 any
ip access-list extended ip11
permit ip host 192.168.30.11 any
ip access-list extended ip12
permit ip host 192.168.30.12 any
ip access-list extended ip13
permit ip host 192.168.30.13 any
ip access-list extended ip14
permit ip host 192.168.30.14 any
ip access-list extended ip15
permit ip host 192.168.30.15 any
ip access-list extended ip16
permit ip host 192.168.30.16 any
ip access-list extended ip17
permit ip host 192.168.30.17 any
ip access-list extended ip18
permit ip host 192.168.30.18 any
ip access-list extended ip19
permit ip host 192.168.30.19 any
ip access-list extended ip2
permit ip host 192.168.30.2 any
ip access-list extended ip20
permit ip host 192.168.30.20 any
ip access-list extended ip21
permit ip host 192.168.30.21 any
ip access-list extended ip22
permit ip host 192.168.30.22 any
ip access-list extended ip23
permit ip host 192.168.30.23 any
ip access-list extended ip24
permit ip host 192.168.30.24 any
ip access-list extended ip3
permit ip host 192.168.30.3 any
ip access-list extended ip4
permit ip host 192.168.30.4 any
ip access-list extended ip5
permit ip host 192.168.30.5 any
ip access-list extended ip6
ip access-list extended ip5
permit ip host 192.168.30.5 any
ip access-list extended ip6
permit ip host 192.168.30.6 any
ip access-list extended ip7
permit ip host 192.168.30.7 any
ip access-list extended ip8
permit ip host 192.168.30.8 any
ip access-list extended ip9
permit ip host 192.168.30.9 any
snmp-server community private RO
!
line con 0
line vty 0 4
password !@#$%
login
line vty 5 15
password !@#$%
login
!
!
end
2950#
发表评论
-
cisco router完美删除单条ACL
2010-03-12 09:41 1183路由器上创建了多条访问控制列表,检查时发现有一条不妥,想将它删 ... -
S3026E、S3526E、S3050、S5012、S5024系列交换机端口限速配置流程
2010-01-12 11:23 1637使用以太网物理端口下面的line-rate命令,对该端口的出方 ... -
华为中低端交换机mac+ip+端口绑定的配置总结
2009-12-24 14:15 2184好多时候,往往是出于安全性考虑,客户要求把交换机下挂pc的m ... -
cisco ios 升级方法和TFTP的用法
2009-08-14 10:21 8283升级方法: 现总结归纳出CISCO路由器IOS映像升级的几种方 ... -
CISCO 路由器做VPN Server详细设置
2009-08-13 22:50 4357NAT(config)#username velino pa ... -
cisco路由器上四种封BT的方法
2009-08-04 17:32 1471方法1:封锁BT端口 大家都知道如果要限制某项服务,就要在路 ... -
CISCO交换机配置命令大全
2009-07-16 10:18 3523switch> ... -
CISCO 2950交换机配置命令
2009-07-15 09:57 1523CISCO 2950交换机配置命令 ... -
Cisco 2950端口镜像设置
2009-07-15 09:57 1857先解释一下端口镜像:端口镜像简单的说,就是把交换机一个(数个) ... -
Cisco 2950密码破解
2009-07-14 11:45 1200Cisco 2950密码破解 ⒈连接交换机的con ... -
网络故障预防及解决办法
2009-07-14 11:37 872引起网络故障主要有以 ... -
不能用公网地址访问内网服务器的详解
2009-07-14 11:36 1388... -
思科交换机的常用配置
2009-07-14 11:02 2344思科交换机的常用配置1、 交换机的端口2、端口:以太网端口( ... -
Cisco3550配置作为DHCP服务器工程实例
2009-07-13 10:23 1081一台3550EMI交换机,划分三个VLAN,valn2为服务器 ... -
交换机做DHCP服务器
2009-07-07 10:29 962什么是DHCP服务器呢?为 ... -
开启Cisco交换机DHCP Snooping功能
2009-07-07 10:26 1367一、采用DHCP服务的常见问题 架设DHCP服务器可以为 ... -
HUAWEI&CISCO交换机端口镜像配置指导
2009-07-06 15:11 10461. Quidway 3026端口镜像配置方法: 以下例子中 ... -
CISCO交换机端口镜像配置
2009-07-06 15:10 2291先解释一下端口镜像:端口镜像简单的说,就是把交换机一个(数个) ...
相关推荐
思科Catalyst2950-IOS文件
思科 Catalyst 3750-X 和 3560-X 系列交换机zip,思科 Catalyst 3750-X 和 3560-X 系列交换机Cisco...Cisco Catalyst 3750-X 和 3560-X 为实现无边界网络体验,启用了 IP 电话、无线和视频等 应用程序,提高了生产效率。
最新技术文档,选型、堆叠、电源、模块、模组、兼容性等有很大帮忙,不可或缺!建议技术人员网络人员收藏保存
Cisco® Catalyst® 3750-X 和 3560-X 系列交换机分别是堆叠式交换机和独立式交换机的企业级产品。...Cisco Catalyst 3750-X 和 3560-X 为实现无边界网络体验,启用了 IP 电话、无线和视频等应用程序,提高了生产效率。
网络拓扑结构为:中心交换机采用Cisco Catalyst 4006-S3,Supervisor Engine III G引擎位于第1插槽,用于实现三层交换;1块24口1000Base-T模块位于第2插槽,用于连接网络服务器;1块6端口1000Base-X模块位于第3插槽,...
此高级汇聚平台可通过领先的 Cisco Catalyst 6500 功能集实现同类最佳的可扩展性和灵活 性。该平台支持 40G/100G,是在中小型园区主干网交付 10G 高级服务的理想之选。同时,该独特平台还可以提供 10G 端口高密度、...
思科 Cisco Catalyst 2960-X 系列交换机pdf,思科 Cisco Catalyst 2960-X 系列交换机,Cisco? Catalyst? 2960-X 系列交换机是可堆叠的固定配置千兆以太网交换机, 能为园 区和分支机构应用提供企业级接入。该系列产品...
思科 Cisco Catalyst 6500和6500-E系列交换机产品简介pdf,思科 Cisco Catalyst 6500和6500-E系列交换机产品简介
思科通过 Cisco Catalyst 2960-X 和 2960-XR 系列交换机实现安全统一接入pdf,思科通过 Cisco Catalyst 2960-X 和 2960-XR 系列交换机实现安全的统一接入
资源分类:Python库 所属语言:Python 使用前提:需要解压 资源全名:catalyst-22.4-py2.py3-none-any.whl 资源来源:官方 安装方法:https://lanzao.blog.csdn.net/article/details/101784059
本书通过体系结构概述、配置的示例、现实环境中的案例研究和常见缺陷的总结,让读者理解qos如何运行、成功实施qos所涉及到的不同组件,以及qos如何在各种cisco catalyst平台上实现来确保真正成功的端对端qos应用。...
Cisco Catalyst 3850 系列交换机 实现更加快速的接入和汇聚 支持堆叠,部分型号支持多千兆和 10-Gbps,可实现有线网络和无线网络的融合,集成的无线控制器提供智能、简单且高度安全的融合接入。每个交换实体(交换机...
Cisco Catalyst 2955系列交换机采用了工业级部件,紧凑机型、对流冷却机制和继电器输出信号,以便将增强安全、高可用性和高级服务质量(QoS)扩展到传统商务级以太网交换机所无法提供服务的领域。
Catalyst 2950 交换机详细配置
珍贵的老显卡最后一版经典鸡血驱动 这是AMD老显卡的最后福利 amd-catalyst-omega-1412-with-dotnet45-win8.1-32bit.exe
Cisco_Catalyst_2960-X_系列交换机产品手册
思科3层交换,带路由功能IOS,此为思科有版权保护的IOS,带L3路由功能! 支持Cisco 3750 serial 12s. Catalyst 3750G-12S Switch。 另外有思科全系列交换机IOS文件,以及支持购买时仅有L2功能,可以通过升级IOS支持...
Cisco Catalyst 2950 交换机IOS固件。 版本:c2950-i6q4l2-mz.121-22.EA6。
思科 利用Cisco Catalyst 4500系列交换机实现IP电话解决方案pdf,思科 利用Cisco Catalyst 4500系列交换机实现IP电话解决方案