Command Line type, CLI ACLI VLAN 1 default ERS 8600 User Interface back,box ou top para mover-se na hierarquia User EXEC priviledge EXEC enable - priviledge EXEC disable - return to USer EXEC from enable mode by default CLI, ACLI =NNCLI ERS-8610:5# save config mode nncli (nncli flag refers to the ACLI mode) ERS-8610:5# config bootconfig flags nncli true ERS-8610:5# save bootconfig ERS-8610:5# reset !Ver config mesmo estando num mode diferente show running-config mode cli show running-config mode nncli ERS-8606:5#save config mode ? acli Save configurations in acli mode cli Save configurations in cli format ERS-8606:5#save config mode c ERS-8606:5#save config mode cli ? ERS-8606:5#save config mode cli Save config to file /flash/config.cfg successful. ERS-8606:5#save bo ERS-8606:5#save bootconfig ? backup Backup filename file Filename mode Select cli/acli mode -- option is applicable only if is config standby Standby filename verbose Save current and default configuration ERS-8606:5#save bootconfig mode cli ERS-8606:5#save bootconfig mode cli Save bootconfig to file /flash/boot.cfg successful. ERS-8606:5(config)#no boot config flags acli Save bootconfig to file /flash/boot.cfg successful. SW INFO : The ACLI flag has changed WARNING : Save the config file in CLI mode before reboot to restore the configurations. You need to reset the switch for the change to take effect !! Do You Want To Boot The Switch (y/n) ? y ! Ativar o ACLI, n necessita de reboot 5510-24T#cmd-interface cli 5510-24T#copy config nvram 5510-24T(config)#vlan create 10 name mgmt type port 1 5510-24T(config)#interface vlan 10 5510-24T(config-if)#ip add 172.16.10.51 255.255.255.0 5510-24T(config)#ip default-gateway 172.16.10.1 !Remove VLAN 1 das portas 5510-24T(config)#vlan members remove 1 1-24 automatic AutoPVID and automatic change to membership of port-based VLANs • autopvid Automatic change to PVID • flexible No restricts or automatic changes • strict AutoPVID and restrictions imposed on adding port to VLAN and changing tagging 5510-24T(config)#vlan configcontrol automatic vlan create 3999 name IST type port 1 interface vlan 3999 ip address 192.168.2.6 255.255.255.252 vlan create 3 name SMLT3 type port 1 interface vlan 3 ip address 192.168.3.4 255.255.255.248 vlan create 4 name SMLT4 type port 1 Inter-Switch Trunk (IST) mlt 1 mlt 1 name IST mlt 1 member 1/3,1/4 mlt 1 vlan 3999 interface mlt 1 ist peer-ip 192.168.2.6 vlan 3999 interface gigabitEthernet 1/3,1/4 untagged-frames-discard SW2:5(config)#show mlt ================================================================================ Mlt Info ================================================================================ PORT SVLAN MLT MLT PORT VLAN MLTID IFINDEX NAME TYPE TYPE ADMIN CURRENT MEMBERS IDS -------------------------------------------------------------------------------- 1 6144 IST trunk normal ist norm 1/3-1/4 3999 Caso o MLT Current seja norm, verificar os peers pois o MLT não está a funcionar corretamente !Criando SMLT mlt 11 mlt 11 name smlt11 mlt 11 member 1/1 mlt 11 encapsulation dot1q interface mlt 11 smlt 11 vlan create 1111 name vlan_1111 type port 1 int vlan 1111 ip add 172.16.11.2 255.255.255.0 !Associar VLAN ao MLT vlan mlt 1111 11 !Criando SLT interface gigabitEthernet 4/11 encapsulation dot1q smlt 129 !CP-Limit numa SMLT port member SW1:5(config)#interface g1/1 SW1:5(config-if)#cp-limit multicast 1000 broadcast 1000 !Ext-CP-Limit SW1:5(config)#interface g1/1 SW1:5(config-if)#cp-limit multicast 1000 broadcast 1000 SW1:5(config)# sys ext-cp-limit max-ports-to-check 5 SW1:5(config)# sys ext-cp-limit trap-level Normal !(do not select the IST ports!) SW1:5(config)# interface gigabitEthernet 1/1 SW1:5(config-if)# ext-cp-limit softDown threshold-util-rate 10 ACLI ERS 5500 5520-24T-PWR(config)# mlt 1 name SMLT11 member 1,2,19,20 learning disable 5520-24T-PWR(config)# show spanning-tree port 1,2,19,20 5520-24T-PWR(config)# interface FastEthernet ALL 5520-24T-PWR(config-if)# spanning-tree port 1,2,19,20 learning disable 5520-24T-PWR(config-if)# mlt 1 enable !Adicionar a VLAN ao MLT 5520-24T-PWR(config)# vlan members add 10 FastStart, BPDU Filtering, Rate Limiting FastStart interface f3 spanning-tree learning fast spanning-tree bpdu-filtering timeout 0 spanning-tree bpdu-filtering enable !Limitar o Broadcast e Multicast a 10% 4548GT-PWR(config-if)#rate-limit port 3-18 both 10 Configurar Simple Loop Prevention Protocol (SLPP Não deve ser configurado nos links de IST !SLPP one will be primary with an rx of 5 (first to be shutdown) and !the other secondary with an rx of 50 SW1:5(cnfig)#slpp vid 3,10,1111 SW1:8606:5(config)# slpp enable SW1:8606:5(config)# interface gigabitEthernet SW1:8606:5(config-if)# slpp packet-rx packet-rx-threshold 50 SW2:5(cnfig)#slpp vid 3,10,1111 SW2:5(config)# slpp enable SW2:5(config)# interface gigabitEthernet SW2:5(config-if)# slpp packet-rx-threshold 5 SW2:5(config-if)#sho slpp int gig Config VLACP O VLACP é ativado no Chassis e interfaces SW1:5(config)#inter g 1/3,1/4 SW1:5(config-if)#untagged-frames-discard SW1:5(config-if)#vlacp slow-periodic-time 10000 SW1:5(config-if)#vlacp timeout long SW1:5(config-if)#vlacp funcmac-addr 01:80:c2:00:00:0f SW1:5(config-if)#vlacp enable SW1:5(config)#vlacp enable Config OSPF com RSMLT interface vlan 10 ip ospf network passive ip os enable int vl 1111 ip ospf network passive ip ospf enable int loopback1 ip ospf 1 router ospf router-id 172.17.0.1 interface vlan 3 ip ospf enable ip rsmlt router ospf enable Config VRRP interface Vlan 10 ip address 172.16.10.2 255.255.255.0 0 ip vrrp address 1 172.16.10.1 ip vrrp 1 priority 200 ip vrrp 1 enable ip vrrp 1 backup-master enable DHCP-Relay Agent interface vlan 10 ip dhcp-relay fwd-path 10.10.10.10 ip dhcp-relay fwd-path 10.10.10.10 enable Campus Verification sho mlt info sho ports info vlans port < ports> sho mlt ist info sho smlt info sho vlacp info sho slpp sho ports info slpp port ports> sho ip vrrp info vrid 1 sho ip route info sho ip ospf neighbors **************CLI MODE**************** # # LACP CONFIGURATION # vlacp enable # # MLT CONFIGURATION # mlt 1 create mlt 1 add ports 1/3-1/4 mlt 1 name "IST" mlt 1 perform-tagging enable mlt 1 ist create ip 192.168.2.2 vlan-id 3999 mlt 1 ist enable mlt 3 create mlt 3 add ports 1/2 mlt 3 name "SMLT3" mlt 3 perform-tagging enable mlt 3 smlt create smlt-id 3 mlt 11 create mlt 11 add ports 1/1 mlt 11 name "smlt11" mlt 11 perform-tagging enable mlt 11 smlt create smlt-id 11 # # STG CONFIGURATION # stg 1 add ports 1/1-1/4 # # VLAN CONFIGURATION # vlan 1 ports remove 1/1-1/8 member portmember vlan 3 create byport 1 name "SMLT3" vlan 3 add-mlt 1 vlan 3 add-mlt 3 vlan 3 ports remove 1/1,1/5-1/8 member portmember vlan 3 ports add 1/2-1/4 member portmember vlan 3 ip create 192.168.3.1/255.255.255.248 mac_offset 2 vlan 3 ip ospf enable vlan 3 ip rsmlt enable vlan 10 create byport 1 name "mgmt" vlan 10 add-mlt 1 vlan 10 add-mlt 11 vlan 10 ports remove 1/2,1/5-1/7 member portmember vlan 10 ports add 1/1,1/3-1/4,1/8 member portmember vlan 10 ip create 172.16.10.1/255.255.255.0 mac_offset 0 vlan 10 ip ospf interface-type passive vlan 10 ip ospf enable vlan 10 ip vrrp 1 address 172.16.10.1 vlan 10 ip vrrp 1 priority 255 vlan 10 ip vrrp 1 enable vlan 1111 create byport 1 name "VLAN_1111" vlan 1111 add-mlt 1 vlan 1111 add-mlt 11 vlan 1111 ports remove 1/2,1/5-1/8 member portmember vlan 1111 ports add 1/1,1/3-1/4 member portmember vlan 1111 ip create 172.16.11.1/255.255.255.0 mac_offset 3 vlan 1111 ip ospf interface-type passive vlan 1111 ip ospf enable vlan 3999 create byport 1 name "IST" vlan 3999 add-mlt 1 vlan 3999 ports remove 1/1-1/2,1/5-1/8 member portmember vlan 3999 ports add 1/3-1/4 member portmember vlan 3999 ip create 192.168.2.1/255.255.255.252 mac_offset 1 # # PORT CONFIGURATION - PHASE II # ethernet 1/1 untagged-frames-discard enable ethernet 1/1 default-vlan-id 1111 ethernet 1/1 cp-limit enable multicast-limit 1000 broadcast-limit 1000 ethernet 1/1 slpp packet-rx enable ethernet 1/1 slpp packet-rx-threshold 12 ethernet 1/1 stg 1 stp disable ethernet 1/1 vlacp macaddress 01:80:c2:00:00:0f ethernet 1/1 vlacp enable ethernet 1/1 vlacp slow-periodic-time 10000 ethernet 1/2 untagged-frames-discard enable ethernet 1/2 default-vlan-id 3 ethernet 1/2 slpp packet-rx enable ethernet 1/2 slpp packet-rx-threshold 12 ethernet 1/2 stg 1 stp disable ethernet 1/2 vlacp macaddress 01:80:c2:00:00:0f ethernet 1/2 vlacp slow-periodic-time 10000 ethernet 1/3 untagged-frames-discard enable ethernet 1/3 default-vlan-id 3999 ethernet 1/3 stg 1 stp disable ethernet 1/3 vlacp macaddress 01:80:c2:00:00:0f ethernet 1/3 vlacp enable ethernet 1/3 vlacp slow-periodic-time 10000 ethernet 1/4 untagged-frames-discard enable ethernet 1/4 default-vlan-id 3999 ethernet 1/4 stg 1 stp disable ethernet 1/4 vlacp macaddress 01:80:c2:00:00:0f ethernet 1/4 vlacp enable ethernet 1/4 vlacp slow-periodic-time 10000 ethernet 1/7 state disable # # CIRCUITLESS IP INTERFACE CONFIGURATION - GlobalRouter # ip circuitless-ip-int 1 create 172.16.0.1/255.255.255.255 ip circuitless-ip-int 1 ospf enable # # OSPF CONFIGURATION - GlobalRouter # ip ospf router-id 172.16.0.1 ip ospf admin-state enable ip ospf enable # SLPP CONFIGURATION # slpp operation enable slpp add 3 slpp add 10 slpp add 1111 **************///CLI MODE///****************