第1段：配置端口屬性及MAC地址表 SW1912#conf t Enter configuration commands, one per line. End with CNTL/Z SW1912(config)#mterface ethernet 0/1 SW1912(config-if)#? Interface configuration commands: cdp Cdp interface subcommands description Interface specific description duplex Con-figureduplexOperation exit Exit from interface configuration mode help Description of the interactive help system no Negate a conanaand or set its defaults port Perform switch port configuration shutdown Shutdown the selected interface spantree Spanning tree subsystem vlan-membership VLAN membership configuration SW1912(config-if)#description PC_1 SW1912(config-if)#duplex ? auto Enable auto duplex-configuration full Force full duplex operation full-flow-control Force full duplex with flow contro1 half Forcehalfduplexoperation SW 1912(config-if)#duplex full SW1912(config-if)#port secure ? max-mac-count Maxirnum number of addresses allowed on the port SW1912(config-if)#port secure max-mac-couist 1 SW1912(config-if)#end SW1912#sh mac-address-table ? address MAC address aging-time Show aging time of dynamic entries dynamic Show 802.1 d dynamic address interface Interface name permanent Show 802.1 d permanent address restricted Show 802. 1 d restricted static addresses security Show addressing security information SW1912#sh mac-address-table security Action upon address violation : Suspend Interface Addressing Security Address Table Size Clear Address Ethernet 0/1 Enabled 1 No Ethernet 0/2 Disabled N/A No Ethernet 0/3 Disabled N/A No Ethernet 0/4 Disabled N/A No Ethernet 0/5 Disabled N/A No Ethernet 0/6 Disabled N/A No Ethernet 0/7 Disabled N/A No Ethernet 0/8 Disabled N/A No Ethernet 0/9 Disabled N/A No Ethernet 0/10 Disabled N/A No Ethernet 0/11 Disabled N/A No Ethernet 0/12 Disabled N/A No Ethernet 0/25 Disabled N/A No FastEthernet 0/26 Disabled N/A No FastEthernet 0/27 Disabled N/A No SW1912# 第2段：配置和查看MAC地址表 SW1912(config)#mac-address-table ? aging-time Aging time of dynamic addresses permanent Configure a permanent address restricted Configure a restricted static address SW1912(config)#mac-address-table aging-time ? SW1912(config)#mac-address-table permanent ? H.H.H 48 bit hardware address SW1912(config)#mac"address-tabae permanent 0000.0c10.aabb ? Ethernet IEEE 802.3 FastEthernet FastEthernet IEEE 802.3 SW1912(config)#mac-address-table permanent 0000.0cl0.aabb e0/3
SW1912(config)#end SW1912#sh mac-address-table Number of permanent addresses : 1 Number of restricted static addresses : 1 Number of dynamic addresses : 2 Address Dest Interface Type Source Interface List --------------------------------------- 0000.0C10.AABB Ethernet0/3 Permanent All 0000.0C11.AACC Ethernet0/6 Static Et0/7 0000.0C8E.CDD2 Ethernet0/11 Dynamic All 0000.0C76.F737 Ethernet0/9 Dynamic All SW1912#clear mac-addr restric static SW1912#sh mac-addr Number of permanent addresses:1 Number of restricted static add resses:0 Number of dynamic addresses:2 Address Dest Interface Type Source Interface List --------------------------------------------------------------------- 0000.0C10.AABB Ethernet0/3 Permanent All 0000.0C8E.CDD2 Ethernet0/11 Dynamic All 0000.0C76.F737 Ethernet0/9 Dynamic All (1)進(jìn)入接口配置模式。鍵入問號(hào)，列出所有此接口下可以進(jìn)行的設(shè)置命令和簡(jiǎn)短的說明。 (2)使用description PC_1命令設(shè)置了EO/1接口的描述為"PC_1"，這樣在交換機(jī)上就可以方便地查到與對(duì)應(yīng)端口相連的設(shè)備是什么。 (3)一個(gè)端口的雙工模式可以分為由duplex?命令所列出的幾種: auto:自動(dòng)匹配雙工模式; full:強(qiáng)制為全雙工模式; full-flow-control:帶流量控制的全雙工模式; half:強(qiáng)制為半雙工模式。 (4)端口安全性命令ponsecufe啟動(dòng)了端口安全特性。缺省情況下，可最多有132個(gè)目的MAC地址與設(shè)置了port secure命令的端口相對(duì)應(yīng)。該端口所對(duì)應(yīng)的MAC地址在MAC地址中(MAC Address Table)不會(huì)以動(dòng)態(tài)類型出現(xiàn)，而是自動(dòng)轉(zhuǎn)換成為靜態(tài)類型，直到達(dá)到所設(shè)定的最大值(缺省為132)時(shí)為止。到達(dá)最大值之后，新的MAC地址不再被接收。 (5)在接口配置模式下發(fā)出的port sccure max-mac-count命令限定對(duì)應(yīng)本端口的MAC地址的最大數(shù)量，實(shí)驗(yàn)中設(shè)置為1，即只答應(yīng)1個(gè)MAC地址通過此端口連入網(wǎng)絡(luò)。 (6)使用show mac-address-table security命令可以查看被設(shè)置了安全性的端口的狀態(tài)，可以看到端口EO/1己經(jīng)被設(shè)置為安全端口，其地址表大小為1。 (7)在第2段中，演示了對(duì)MAC地址表的有關(guān)配置。
