More

    [명령어 모음] 다산네트웍스 L3 Switch

    기본적으로 다산네트웍스 장비의 경우 많은 부분 시스코와 비슷합니다.

    자주 사용되는 명령어를 알려드리니 참고 하시기 바랍니다.

    실행장비 : 다산네트웍스 V6424

    NOS 버전 : 5.03 #3215

    Privileged mode 사용 가능 명령어

    Exec commands:
      clear         Reset functions
      clock         Manually set the system clock
      configure     Enter configuration mode
      copy          Copy from one file to another
      debug         Debugging functions
      default-os    Select default OS
      delete        delete
      disconnect    Disconnect user connection
      enable        Turn on privileged mode command
      erase         Erase saved configuration
      exit          End current mode and down to previous mode
      halt          Halt process
      help          Description of the interactive help system
      no            Negate a command or set its defaults
      ping          Send echo messages
      quote         Execute external command
      rcommand      Management stacking node
      release       Release the acquired address of the interface
      reload        Reload the system
      renew         Re-acquire an address for the interface
      restart       Restart routing protocol
      restore       Restore configurations
      show          Show running system information
      ssh           Configure secure shell
      tech-support  Technical Supporting Function for Diagnosis System
      telnet        Open a telnet connection
      terminal      Set terminal line parameters
      traceroute    Trace route to destination
      where         List active user connections
      write         Write running configuration to memory, network, or terminal

    Global mode 사용 가능 명령어

    Configure commands:
      access-list        Add an access list entry
      access-list-range  Add and Access list range entry
      arp                Address Resolution Protocol (ARP)
      banner             Set login banner
      bgp                Border Gateway Protocol (BGP)
      bridge             Enable a switching process
      class              Class
      clear              Reset functions
      clns               Connectionless Network Service filter
      cpu                CPU information
      debug              Debugging functions
      dns                Domain Name Server
      do                 To run exec commands in config mode
      dot1x              IEEE 802.1X subsystem
      end                End current mode and change to EXEC mode
      erase              Erase saved configuration
      exec-timeout       Set timeout value
      exit               End current mode and down to previous mode
      fan                Fan control
      fib                FIB information
      flow               Flow profile list
      ftp                FTP configuration
      help               Description of the interactive help system
      hostname           Set system's network name
      interface          Select an interface to configure
      ip                 Internet Protocol (IP)
      ipv6               Internet Protocol version 6 (IPv6)
      isis               Intermediate System - Intermediate System (IS-IS)
      key                Authentication key management
      login              Configure login Authentication & Authorization
      module             Module
      mvr                Multicast VLAN Registration
      no                 Negate a command or set its defaults
      ntp                Configure Network Time Protocols
      oam                OAM protocol
      ospf               Open Shortest Path First (OSPF)
      passwd             Password change
      policer            Policer profile list
      policy             Policy map list
      pps-control        PPS Control
      privilege          Privilege Level Configuration
      protocol           Protocol configuration
      qos                QoS
      rip                Routing Information Protocol (RIP)
      rmon-alarm         Configure rmon alarm
      rmon-event         Configure rmon event
      rmon-history       Configure rmon history
      route-map          Create route-map or enter route-map command mode
      router             Enable a routing process
      service            Service Protocol
      sflow              Configure sFlow
      sflow-receiver     Configure sFlow receiver
      show               Show running system information
      snmp               SNMP configuration
      sntp               Configure Simple Network Time Protocols
      ssh                Configure secure shell
      stack              Stacking configuration
      syslog             System logger
      threshold          Threshold Management
      time-zone          Set time zone
      user               User management
      write              Write running configuration to memory or terminal

    일반 명령어

    Itgoit(config)# hostname ITGOIT                                        // 호스트 네임을 ITGOIT으로 변경
    ITGOIT(config)#
    
    ITGOIT(config)# user add user1 level 15 admin                          // ID: user1, LEVEL: 15, DESCRIPTION: admin 으로 계정 생성
    
    ITGOIT(config)# password enable itgoit!0!0                             // enable password itgoit!0!0 설정
    ITGOIT(config)#
    
    ITGOIT(config)# password user1 혹은 password                            // 생성된 ID에 password 혹은 현재 사용자 암호 변경
    Enter the new password (maximum of 8 characters)
    Please use a combination of upper and lower case letters and numbers.
    Enter new password: itgoit!0!0
    Re-enter new password: itgoit!0!0
    Password changed.
    ITGOIT(config)#
    
    ITGOIT(config)# interface br10
    ITGOIT(config-if[10])# shutdown                                         // 인터페이스 비활성화
    ITGOIT(config-if[10])# no shutdown                                      // 인터페이스 활성화
    ITGOIT(config-if[10]# exit
    ITGOIT(config-if)#
    
    ITGOIT(config-if)# ntp server "NTP 서버 IP"                             // NTP 서버 설정
    ITGOIT(config-if)#
    
    ITGOIT(config)# login connect 4                                         // 접속자 수 설정 1~8 가능 (default : 8)
    
    ITGOIT# no service telnet                                               // 원격접속 비활성화
    
    ITGOIT# access-list 10 permit 10.10.10.20                               // ACL 설정
    
    ITGOIT(config)# ip route 1.1.1.1 255.255.255.240 10.10.10.1             // 1.1.1.1 28비트 대역의 데이터를 10.10.10.1로 보냄
    ITGOIT(config)# no ip route 1.1.1.1 255.255.255.240 10.10.10.1          // 해당 라우팅 삭제
    
    시스템 재부팅:
    ITGOIT# reload                                  // 시스템 재부팅

    WR. 잊지 말자 저장

    ITGOIT# write memory                                                    // 설정 저장
    [OK]
    ITGOIT#

    정기점검 명령어

    Itgoit# show running-config                                                              // 전체 설정 정보
    Itgoit# show ip interface brief                                                          // 전체 인터페이스의 설정 정보
    Interface  Status                 Protocol  Primary IP       Secondary IP
    --------------------------------------------------------------------------
    lo         up                     up        unassigned       unassigned
    mgmt       administratively down  down      unassigned       unassigned
    br2        up                     up        1.1.1.2          unassigned
    br10       up                     up        101.115.210.1    103.115.210.1
    br20       up                     up        101.115.210.126  unassigned
    
    Itgoit# show ip route                                                                     // Static 라우팅 설정 정보
    Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
           O - OSPF, IA - OSPF inter area
           N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
           E1 - OSPF external type 1, E2 - OSPF external type 2
           i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
           * - candidate default
    
    Gateway of last resort is 1.1.1.1 to network 0.0.0.0
    
    S*      0.0.0.0/0 [1/0] via 1.1.1.1, br2
    C       1.1.1.0/30 is directly connected, br2
    C       101.115.210.0/26 is directly connected, br10
    C       101.115.210.64/26 is directly connected, br20
    C       103.115.210.0/26 is directly connected, br10
    
    Itgoit# show vlan                                                                            // Vlan 설정 정보
                                u: untagged port, t: tagged port
            ---------------------------------------------------------------
                                |         1         2         3         4
                Name( VID| FID) |123456789012345678901234567890123456789012
            ---------------------------------------------------------------
             default(   1|   1) |........................uuu.uuuuuuuuuuuuuu
                 br2(   2|   2) |...........................u..............
                br10(  10|  10) |uuuuuuuu..................................
                br20(  20|  20) |........uuuuuuuuuuuuuuuu..................
    
    Itgoit# show arp                                                                             // ARP 테이블 정보
    Itgoit# show ver                                                                             // 시스템 버전 확인
    Itgoit# show system                                                                          // 시스템 정보 확인
    
              SysInfo(System Information)
         Model Name          : V6424
         Main Memory Size    : 512 MB
         Flash Memory Size   : 8 MB(SPANSION 29GL064N), 32 MB(SPANSION 29GL256N)
         H/W Revision        : DS-U6-208-A1
         H/W Address         : 00:00:00:00:00:00
         RTC Information     : M41T11
         Serial Number       : 000000000000000
         S/W Compatibility   : 3, 7
         NOS Version         : 5.03
         B/L Version         : 6.46
         PLD Version         : 0xf9
    
    Itgoit# show log                                                                                // 시스템 로그 확인
    [AUTHEN]
    Local login  : host
    Remote login : host
    Accounting mode : both
    ------------------------------------
    [HOST]
    maximum_login_counts : 8
    
    
    ------------------------------------
    [RADIUS]
    <Radius Servers & Key>
    
    Radius Retries : 3
    Radius Timeout : 3
    Radius Interface : default
    ------------------------------------
    [TACACS]
    <Tacacs Servers & Key>
    
    Tacacs Timeout : 3
    Tacacs Socket Port : 49
    Tacacs Interface : default
    Tacacs PPP Id : 1
    Tacacs Authen Type : ASCII
    Tacacs Priority Level : MIN
    
    

    Subscribe

    댓글 남기기