思科交换机根据MAC/IP地址查找对应端口

网络工程师在做日常网络维护的时候可能经常会遇到这种情况:发现某个IP地址流量特别大,或者收发特别异常的时候,想找出该IP对应的用户出来。而在思科交换机搭建的环境中,是能做到通过对方MAC/IP地址来查找对端对应的交换机端口的,具体步骤如下:

  假设对端的MAC地址为:192.168.1.101
  在中心交换机(核心层交换机或汇聚层交换机)上输入:
switch-6509#show ip arp | in 192.168.1.101
Internet 192.168.50.47 2 0011.2233.4455 ARPA Vlan50

  在ARP表中我们找到了和192.168.1.101对应的MAC地址,如果要根据MAC地 Continue reading "思科交换机根据MAC/IP地址查找对应端口"

思科交换机密码恢复方法

1、用console线连接到交换机,通过超级终端或Secure CRT连接到交换机;

2、一直按住交换机前面板上的 MODE键,插上交换机电源;

3、约40秒后放开Mode键;

4、此时会出现如下界面:

swith: flash_init
load_helper
boot

运行flash_init命令,然后输入如下命令:
rename flash:\config.text flash:\config.old //更名含有password的配置文件;

然后输入boot;

5、此时再输入enable,就可以直接进入特权模式(因为此时的配置文件已经没有password了此时再输入:
#rename flash:\config.old flash:\config.text
#copy flash:\config.text system:running-config

6、修改新的口令:
#configure terminal
#enable secret 你的新口令

7、保存配置:wre键;

Connecting to the New Network through Clean Access 如何连接到思科网络通道之中

Connecting to the New Network through Clean Access:

The new campus network can provide high-speed --1Gpbs (1 Gigabit per second)-- connectivity to the Internet and Rice campus resources. In addition, the new network provides access to the Internet for campus visitors while retaining a secure environment for Rice University students, faculty, and staff members.

To prevent degradation of speed and stability, all computers that attempt to connect to the Rice network must successfully pass through the Clean Access application.

Clean Access does not review any of the data on your personal computer, it only scans your operating system for current patches and checks for the presence of anti-virus software and/or actual viruses hiding in your machine.

If your machine has not been compromised by malicious programs (worms and viruses) and is running the current security patches for your operating system, you will simply accept the Appropriate Use of Computing Resources policy and enter the Rice network.

If your machine has been compromised or is an easy target for hijacking by a malicious agent, you will be prompted to scrub and update your computer before you can enter the Rice network.

Links to other Clean Access Pages:

Setting Up Cisco Clean Access 设置思科路由器连接通道

Setting Up Clean Access

Information on connecting to the Rice University Network

Rice University uses Cisco Clean Access to help ensure users on our network receive appropriate access to networking resources and systems connecting to our network have appropriate levels of security enabled and installed.

More information about Rice University's implementation of Cisco Clean Access, follow the following link:http://www.rice.edu/security/clean.html


When you first connect your computer to the network, you need to open up an internet browser and visit an off-campus website (Google, Yahoo, etc.). The Clean Access page will come up after you visit an off-campus website. If you are a Visitor to Rice University simply click the 'Visitor' button.

  1. Clicking the 'Visitor' button will grant access for 2 days. After that you will be redirected to the site for re-authentication.TIP: The Visitor network has limited access to some Rice resources, and is designed solely to allow visitors of the University access to the Internet while on campus.

If you are a Faculty member, Student, or Staff member, follow these instructions to log onto the network (See question #3 on Clean Access FAQ):

     

  1. Enter your Rice NetID and Password, then click 'Continue'.

    TIP: If you receive an error message like this one: "OOB Error:MAC address of 10.16.48.37 not found", try the following steps:

    • If you are using a personal router or switch, disconnect your computer and connect directly into the wall. Currently, routers and switches are not entirely supported; more information on routers and switches will be available by calling the Help Desk (x4357).
    • If you are not using a personal router or switch, and you receive a similar error, you may simply need to unplug your network connection and re-insert it. Then, try again. if you still receive the error, please call the Help Desk (x4357).

    TIP: If you receive error "Invalid username or password", check to ensure your NetID and password are correct. If you are not familiar with your NetID, click this link to access the Rice Account system: https://apply.rice.edu.

    TIP: If you are new to Rice, and have not yet setup your NetID, visit this link to begin: https://apply.rice.edu/index.php?module=apply&page=register

    Previous Step Top Next Step


     

  2. Non-Windows: If your computer is a Macintosh running Mac OS X, or if your computer is running a non-Windows operating system, your computer will now move to the correct network. It takes about 30-40 seconds.

    Previous Step Top Next Step


  3. Windows: If you are running a version of Windows, you will need to download and install the Cisco Clean Access Agent.

    When the download box comes up, choose "Save", not run.

    Previous Step Top Next Step


     

  4. Find the download location and run the "CCAAgent_Setup.exe".

    Previous Step Top Next Step


     

  5. If you see a "Security Warning" dialog box, it is ok - click "Run".

    Previous Step Top Next Step


     

  6. Follow all of the defaults, clicking "Next" each time.

    Previous Step Top Next Step


     

  7. At the end, click "Finish".

    Previous Step Top Next Step


     

  8. When the installation is finished, you will see the Cisco Clean Access Agent Login Box.
    TIP: If the Cisco Clean Access Agent dialog box below does not come up, it may be because you have a personal Firewall, like ZoneAlarm, or an AntiVirus package, like McAfee Security Center, that is blocking the Clean Access Agent from the network. You may see a dialog box from the Firewall or AntiVirus application asking to allow Clean Access to access the network. Choose "Always allow". If this is not the case, and you still do not see 6/28/07 or log a problem here http://helpdesk.rice.edu/submit.html.

    Previous Step Top Next Step


    If your NetID is accepted and your system has an updated antivirus, you should see the "Successful" dialog box

    TIP: If you receive an error message like this one: "OOB Error:MAC address of 10.16.48.37 not found", try the following steps:

    • If you are using a personal router or switch, disconnect your computer and connect directly into the wall. Currently, routers and switches are not entirely supported; more information on routers and switches will be available by calling the Help Desk (x4357).
    • If you are not using a personal router or switch, and you receive a similar error, you may simply need to unplug your network connection and re-insert it. Then, try again. if you still receive the error, please call the Help Desk (x4357).

    TIP: If the agent states you need to install or update an Antivirus product, and you feel you have already done so, please call the Help Desk (x4357).