PKS系统Cisco交换机的安装与配置.doc

PKS系统Cisco交换机的安装与配置
准备工作：
1、确认用于连接电脑和交换机的通讯线。
2、确认计算机上已装有HyperTerminal通讯工具
3、确认交换机配置文件是否存在，
A、如果已经安装了FTE驱动包则文件存在于如下目录：
C:\Program Files\Honeywell\FTE_Driver\Switch Configuration

B、如果没有安装FTE驱动包，则可在Honeywell提供的软件中Common Components光盘中查找如下目录：
光驱:\Packages\FTE_Driver\Switch_Configuration_Files

连接交换机：
注：先不要打开交换机电源
1、将通讯电缆连接于交换机的通讯配置接口和计算机的串口。
2、点击Start > Programs > Accessories > Communications > HyperTerminal，运行HyperTerminal。
3、在Connection Description对话框中，为这一连接输入一个名称（自己识别方便即可），点击“ok”。
4、在Icon对话框，点击相应的图标并确认。
5、在Connect To对话框，选择正在被使用的串口，并确认。
6、在Properties对话框配置端口如下：
Bits per second: 9600
Data Bits: 8
Parity: NONE
Stop bits: 1
Flow control: Xon/Xoff
通讯端口默认为COM1不变；点击“ok”。
7、打开交换机电源。
配置交换机：
1、在如下部分输入相应的值（粗体部分），并回车。
Would you like to enter the initial configuration dialog? [yes/no]: y
At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Basic management setup configures only enough connectivity
for management of the system, extended setup will ask you
to configure each interface on the system
Would you like to enter basic management setup? [yes/no]: y
Configuring global parameters:
2、 为交换机输入一个“host name”，同意网络中每台交换机的“host name”都必须是不同的。在如下部分输入相应的值（粗体部分），并回车。
Enter host name [Switch]: Cisco_FTE4
The enable secret is a password used to protect access to
privileged EXEC and configuration modes. This password, after
entered, becomes encrypted in the configuration.
Enter enable secret: Cisco_FTE1
The enable password is used when you do not specify an
enable secret password, with some older software versions, and
some boot images.
Enter enable password: FTE4
The virtual terminal password is used to protect
access to the router over a network interface.
Enter virtual terminal password: FTE4
Configure SNMP Network Management? [no]: N
3、下面是显示信息的一部分，太长没有完全抄录，无需操作，可压空格键完成显示。
Current interface summary
Any interface listed with OK? value "NO" does not have a valid configuration
Interface IP-Address OK? Method Status Protocol
Vlan1 unassigned NO unset up down
FastEthernet0/1 unassigned YES unset down down
FastEthernet0/2 unassigned YES unset down down
FastEthernet0/3 unassigned YES unset down down
FastEthernet0/48 unassigned YES unset down down
GigabitEthernet0 unassigned YES unset down down
GigabitEthernet0/2 unassigned YES unset down down
4、完成以上组态显示后，自动进入交换机对话框，在如下部分输入相应的值（粗体部分），并回车。
Enter interface name used to connect to the
management network from the above interface summary: vlan1
Configuring interface Vlan1:
Configure IP on this interface? [yes/no]: N
Would you like to enable as a cluster command switch? [yes/no]: N
5、下面是显示信息的一部分，太长没有完全抄录，无需操作，可压空格键完成显示。
The following configuration command script was created:
hostname Cisco_FTE4
enable secret 5 $1$qF.3$3AIkt0lNtdjMLAdknUnht.
enable password FTE4
line vty 0 15
password FTE4
no snmp-server
!
!
interface Vlan1
shutdown
no ip address
!
interface FastEthernet0/1
no shutdown
no ip address
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
interface FastEthernet0/48
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
end
6、组态信息显示完后，出现如下对话栏，输入2并回车保存交换机配置信息。
[0] Go to the IOS command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration to nvram and exit.
Enter your selection [2]: 2
7、交换机参数配置已完成，具体显示如下：
Building configuration...
[OK]
00:02:36: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
00:02:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
00:02:38: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
Use the enabled mode 'configure' command to modify this configuration.
接下来需要为交换机设定IP地址、SNMP、NTP等。使用enable命令和前面设定的enable密码记入下一步操作，具体操作如下：
Press RETURN to get started!<ENTER>
Cisco_FTE4>enable
Password:Cisco_FTE1
8、如果使用了VLAN101，则需通过如下命令来初始化VLAN 101，否则竟如下一步。
输入vlan101回车
输入exit回车
输入exit回车
9、为了能使用Telnet和FTP必须输入int vlan1或int vlan101，输入相应的值（粗体部分），并回车，具体操作如下。
Cisco_FTE4#config t
Enter configuration commands, one per line. End with CNTL/Z.
Cisco_FTE4(config)#int vlan1
10、设定IP地址和子网掩码（更具情况确定），黑体部分为输入，具体操作如下：
Cisco_FTE4(config-if)#ip address 10.1.4.253 255.255.255.0
Cisco_FTE4(config-if)#no shutdown
Cisco_FTE4(config-if)#exit
11、在网络中必须有一台FTP服务器，用来存储配置文件，黑体部分为输入，具体操作如下：
Cisco_FTE4(config)#ip ftp username ps_user
Cisco_FTE4(config)#ip ftp password ps_user local
ps_user –用户名
ps_user local –用户密码
FTE4 – 虚拟终端密码
12、设置SNMP，交换机必须有一目标IP地址给SNMP，这一地址是运行EPKS系统的服务器的IP地址。有冗余的服务器的系统需要人为设定SNMP在交换机里形成两台服务器的IP地址。 每个交换机也应该有一个群名。
10.1.4.15 –服务器IP地址
FTE – 交换机群名（Community Name）
Cisco_FTE4(config)#snmp-server enable traps snmp warmstart linkdown linkup coldstart
Cisco_FTE4(config)#snmp-server host 10.1.4.15 FTE snmp
如果是冗余服务器则需要继续输入
#snmp-server host 10.1.4.16 FTE snmp
其中10.1.4.16为冗余服务器IP地址
13、接下来是设置NTP。如果时间服务器在FTE子网内则直接进入下一步。
10.1.4.1-默认的网关地址
192.168.100.1 – NTP时间服务器IP地址
具体操作如下：
Cisco_FTE4(config)#ip default-gateway 10.1.4.1
Cisco_FTE4(config)#ntp server 192.168.100.1
Cisco_FTE4(config)#exit
Cisco_FTE4#
00:06:03: %SYS-5-CONFIG_I: Configured from console by console <ENTER>
交换机全部配置完成，接下来将下装合适的配置文件。
下装相应的交换机配置文件：
1、选择适合于系统要求的交换机配置文件，具体类型如下：
Switch configuration file
Level
Switch Type
No. of uplinks
No. of 10 MB FTEBs
No. of FD 100 MBs
VLAN101 configured
L1_1u_2310_24
1
2950-24
1
23
0
No
L1_2u_2210_24
1
2950-24
2
22
0
No
v101_L1_1u_2310_24
1
2950-24
1
23
0
Yes
v101_L1_2u_2210_24
1
2950-24
2
22
0
Yes
L1_1u_4710
1
2950-48
1
47
0
No
v101_L1_1u_4710
1
2950-48
1
47
0
Yes
L1_1u_2955
1
2955C-12
1
11
0
No
L1_2u_2955
1
2955C-12
2
10
0
No
v101_L1_1u_2955
1
2955C-12
1
11
0
Yes
v101_L1_2u_2955
1
2955C-12
2
10
0
Yes
12u_24
2
2950-24
12
0
12
No
2u_24
2
2950-24
2
0
22
No
4u_24
2
2950-24
4
0
20
No
v101_12u_24
2
2950-24
12
0
12
Yes
v101_2u_24
2
2950-24
2
0
22
Yes
v101_4u_24
2
2950-24
4
0
20
Yes
2u
2
2950-48
2
0
46
No
4u
2
2950-48
4
0
44
No
v101_2u
2
2950-48
2
0
46
Yes
v101_4u
2
2950-48
4
0
44
Yes
fte_3550_cnfg
2
3550-12
12
0
0
No
v101_fte_3550_cnfg
2
3550-12
12
0
0
Yes
24u_3550fx
2
3550-24FX
24
0
0
No
v101_24u_3550fx
2
3550-24FX
24
0
0
Yes
4u_1610_24
1 & 2
2950-24
4
16
4
No
4u_410_24
1 & 2
2950-24
4
4
16
No
4u_810_24
1 & 2
2950-24
4
8
12
No
v101_4u_1610_24
1 & 2
2950-24
4
16
4
Yes
v101_4u_410_24
1 & 2
2950-24
4
4
20
Yes
v101_4u_810_24
1 & 2
2950-24
4
8
12
Yes
4u_1610
1 & 2
2950-48
4
16
28
No
4u_410
1 & 2
2950-48
4
4
40
No
4u_810
1 & 2
2950-48
4
8
36
No
v101_4u_1610
1 & 2
2950-48
4
16
28
Yes
v101_4u_410
1 & 2
2950-48
4
4
40
Yes
v101_4u_810
1 & 2
2950-48
4
8
36
Yes
1u_710_2955
1 & 2
2955C-12
1
7
4
No
v101_1u_710_2955
1 & 2
2955C-12
1
7
4
Yes
2、使用Copy命令在交换机中初始化传送
Cisco_FTE4#copy xmodem: system:running-config
Destination filename [running-config]?<ENTER>
3、在Hyperterm中初始化传送，并选择合适的交换机配置文件导入
在Hyperterm菜单栏中选择Transfer > Send File
点击Browse，并在如下目录中找到Switch Configuration ：
C:\Program Files\Honeywell\FTE_Driver\,
或 光盘:\Packages\FTE_Driver\Switch_Configuration_Files
选择正确的交换机配置文件，点击“OPEN”。
在“Protocol”下选择“Xmodem”，点击“Send”开始传输。
4、如果有同名文件则选择覆盖
%Warning:There is a file already existing with this name
Do you want to over write? [confirm]y
Begin the Xmodem or Xmodem-1K transfer now...
CCCCCCCCCC
如果在传输过程中出现错误，则输入如下命令并回车：
Cisco_FTE4#copy xmodem: system:running-config
传输完成显示如下信息：
16256 bytes copied in 46.396 secs (353 bytes/sec)
5、将交换机配置文件写入交换机内存
Cisco_FTE4#write
6、查看新配置的交换机信息，命令如下：
Cisco_FTE4#sho run
下面是显示信息，空格键翻页
Building configuration...
Current configuration : 15560 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service sequence-numbers
!
hostname Cisco_FTE4
!
enable secret 5 $1$JIQ6$IJ3nKv2oS2zCJZihoHEKl/
enable password Cisco_FTE1
!
wrr-queue bandwidth 1 2 3 4
!
class-map match-all cda_medium
match access-group 104
class-map match-all cda_urgent
match access-group 102
class-map match-all cda_high
match access-group 103
class-map match-all cda_low
match access-group 105
!
!
policy-map cda_policy
class cda_urgent
set ip dscp 56
class cda_high
set ip dscp 46
!
ip subnet-zero
ip ftp username ps_user
ip ftp password ps_user local
no ip igmp snooping
!
spanning-tree extend system-id
!
!
interface FastEthernet0/1
no ip address
duplex full
speed 100
service-policy input cda_policy
storm-control broadcast level 20.00 18.00
storm-control multicast level 20.00 18.00
storm-control unicast level 20.00 18.00
storm-control action trap
!
interface FastEthernet0/48
switchport trunk allowed vlan 1,1001-1005
no ip address
duplex full
speed 100
service-policy input cda_policy
storm-control broadcast level 20.00 18.00
storm-control multicast level 20.00 18.00
storm-control unicast level 20.00 18.00
storm-control action trap
spanning-tree portfast
!
interface GigabitEthernet0/1
no ip address
service-policy input cda_policy
storm-control broadcast level 5.00 4.50
storm-control multicast level 5.00 4.50
storm-control unicast level 5.00 4.50
storm-control action trap
!
interface GigabitEthernet0/2
no ip address
service-policy input cda_policy
storm-control broadcast level 5.00 4.50
storm-control multicast level 5.00 4.50
storm-control unicast level 5.00 4.50
storm-control action trap
!
interface Vlan1
ip address 10.1.4.254 255.255.255.0
no ip route-cache
shutdown
!
ip http server
!
access-list 102 permit tcp any any eq 55554
access-list 102 permit tcp any any eq 55555
access-list 103 permit tcp any any eq 55550
access-list 103 permit tcp any any eq 55551
access-list 103 permit tcp any any eq 55553
access-list 103 permit tcp any any eq 55552
access-list 103 permit tcp any any eq 55556
access-list 104 permit tcp any any eq 55557
access-list 104 permit tcp any any eq 55558
access-list 104 permit tcp any any eq 55559
access-list 104 permit udp any any eq 12321
access-list 104 permit tcp any any eq 55560
access-list 105 permit tcp any any eq 55560
access-list 105 permit udp any any eq 55560
access-list 105 permit tcp any any eq 55559
access-list 105 permit udp any any eq 12321
access-list 105 permit tcp any any eq 55556
access-list 105 permit tcp any any eq 55557
access-list 105 permit tcp any any eq 55558
!
line con 0
exec-timeout 0 0
line vty 0 4
password FTE1
login
line vty 5 15
password FTE1
login
!
end
Cisco_FTE4#
在这个例子中：有4个Uplink口（用于冗余互联或上联）；4个用于FTE的自适应口；余下为100M口
至此，交换机配置全部完成。