20201230 cisco STP

課堂資料

STP 生成樹協定 - Jan Ho 的網絡世界Jan Ho 的網絡世界

EtherChannel PAgP LACP 以太通道 - Jan Ho 的網絡世界Jan Ho 的網絡世界

AAA 認證授權與計費 - Jan Ho 的網絡世界Jan Ho 的網絡世界

https://www.twblogs.net/a/5c220b1bbd9eee16b4a769cewww.twblogs.net

527KB

SpanningTree.pdf

PDF

Open

FDB

Spanning Tree Steps

• Find the Root Bridge

  • 最小：priority ( 可手動設定，預設值為32768 + Vlan ID) + MAC address

• Find the Root Port

• Find the Designated Port ( D Port )

AAA Tacacs

課堂練習

STP

sw1

do sh spanning-tree

sw2

sw3

VPC4

VPC5

Ether Channel

sw6

int range e0/0 - 1

channel-group 1 mode on

do sh etherchannel summary

do sh spanning-tree

sw7

AAA Tacacs

Part 01.

Linux

wget ftp://ftp.shrubbery.net/pub/tac_plus/tacacs-F4.0.4.28.tar.gz

tar zxvf tacacs-F4.0.4.28.tar.gz

cd tacacs-F4.0.4.28

./configure

apt install bison

apt install bison --fix-missing

apt install libwrap0-dev

./configure

make install 

gedit /etc/ld.so.conf

ld.so.conf

include /etc/ld.so.conf.d/*.conf
/usr/lib

Part 02.

Linux

ip addr add 192.168.1.2/24 brd + dev eth0

ping 192.168.1.1

新增 user

useradd anida

passwd anida

安裝 tac plus

./tac_pwd

gedit tac_plus.conf

tac_plus.conf

key = ccie

accounting file = /var/log/tac.acct

user = user {
    member = user5
    login = des aerYSwBGbhIlo
}
group = user5 {
    service = exec {
        priv-lvl = 5
    }
}

執行 tacacs+ server

./tac_plus -C ./tac_plus.conf -G

R2

R3