{"id":34970,"date":"2019-10-31T22:01:34","date_gmt":"2019-10-31T19:01:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/trening-cisco-200-125-ccna-v3-0-den-8-nastrojka-svitcha\/"},"modified":"2019-10-31T22:01:34","modified_gmt":"2019-10-31T19:01:34","slug":"trening-cisco-200-125-ccna-v3-0-den-8-nastrojka-svitcha","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-8-nastrojka-svitcha","title":{"rendered":"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V\u00edtejte ve sv\u011bt\u011b switch\u016f! Dnes si promluv\u00edme o p\u0159ep\u00edna\u010d\u00edch. P\u0159edstavte si, \u017ee jste s\u00ed\u0165ov\u00fd administr\u00e1tor a jste v kancel\u00e1\u0159i nov\u00e9 firmy. P\u0159ich\u00e1z\u00ed k v\u00e1m mana\u017eer s p\u0159ep\u00edna\u010dem \"z krabice\" a \u017e\u00e1d\u00e1 v\u00e1s o jeho nastaven\u00ed. Mo\u017en\u00e1 jste si pomysleli, \u017ee mluv\u00ed o b\u011b\u017en\u00e9m elektrick\u00e9m vyp\u00edna\u010di (v angli\u010dtin\u011b slovo switch ozna\u010duje jak s\u00ed\u0165ov\u00fd p\u0159ep\u00edna\u010d, tak elektrick\u00fd vyp\u00edna\u010d - pozn. p\u0159ekladatele), ale to nen\u00ed tak - je \u0159e\u010d o s\u00ed\u0165ov\u00e9m p\u0159ep\u00edna\u010di, tedy Cisco switchi.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/1c31c1d8ae1250bd161497fb1514c300.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak\u017ee v\u00e1m mana\u017eer p\u0159ed\u00e1v\u00e1 nov\u00fd p\u0159ep\u00edna\u010d Cisco, kter\u00fd m\u00e1 mnoho rozhran\u00ed. M\u016f\u017ee to b\u00fdt 8, 16 nebo 24 portov\u00fd p\u0159ep\u00edna\u010d. V tomto p\u0159\u00edpad\u011b je na sn\u00edmku p\u0159ep\u00edna\u010d, kter\u00fd m\u00e1 vp\u0159edu 48 port\u016f, rozd\u011blen\u00fdch do 4 sekc\u00ed po 12 portech. Jak v\u00edme z p\u0159edchoz\u00edch lekc\u00ed, vzadu p\u0159ep\u00edna\u010de jsou dal\u0161\u00ed rozhran\u00ed, jedn\u00edm z nich je konzolov\u00fd port. Konzolov\u00fd port se pou\u017e\u00edv\u00e1 pro extern\u00ed p\u0159\u00edstup k za\u0159\u00edzen\u00ed a umo\u017e\u0148uje vid\u011bt, jak prob\u00edh\u00e1 spu\u0161t\u011bn\u00ed opera\u010dn\u00edho syst\u00e9mu p\u0159ep\u00edna\u010de. <\/p>\n<p>U\u017e jsme diskutovali o p\u0159\u00edpadu, kdy chcete pomoci sv\u00e9mu kolegovi a pou\u017e\u00edv\u00e1te vzd\u00e1lenou plochu. P\u0159ipoj\u00edte se k jeho po\u010d\u00edta\u010di, provedete zm\u011bny, ale pokud budete cht\u00edt, aby v\u00e1\u0161 p\u0159\u00edtel restartoval po\u010d\u00edta\u010d, ztrat\u00edte p\u0159\u00edstup a nebudete moci sledovat, co se d\u011bje na obrazovce v okam\u017eiku spu\u0161t\u011bn\u00ed. Tento probl\u00e9m nast\u00e1v\u00e1, pokud nem\u00e1te extern\u00ed p\u0159\u00edstup k tomuto za\u0159\u00edzen\u00ed a jste s n\u00edm spojeni pouze prost\u0159ednictv\u00edm s\u00edt\u011b.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex> <\/p>\n<p>Pokud ale m\u00e1te extern\u00ed p\u0159\u00edstup, m\u016f\u017eete vid\u011bt spou\u0161t\u011bc\u00ed obrazovku, rozbalen\u00ed IOS a dal\u0161\u00ed procesy. Dal\u0161\u00ed zp\u016fsob, jak z\u00edskat p\u0159\u00edstup k tomuto za\u0159\u00edzen\u00ed, je p\u0159ipojit se k libovoln\u00e9mu z p\u0159edn\u00edch port\u016f. Pokud jste na tomto za\u0159\u00edzen\u00ed nastavili spr\u00e1vu IP adres, jak bude uk\u00e1z\u00e1no v tomto videu, budete se k n\u011bmu moci p\u0159ipojit p\u0159es Telnet. Probl\u00e9m spo\u010d\u00edv\u00e1 v tom, \u017ee ztrat\u00edte tento p\u0159\u00edstup, jakmile se za\u0159\u00edzen\u00ed vypne. <\/p>\n<p>Pod\u00edvejme se, jak prov\u00e9st po\u010d\u00e1te\u010dn\u00ed nastaven\u00ed nov\u00e9ho p\u0159ep\u00edna\u010de. Ne\u017e p\u0159ejdeme p\u0159\u00edmo k nastaven\u00ed konfigurace, mus\u00edme zadat n\u011bkolik z\u00e1kladn\u00edch pravidel. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/0ff11be291aa55a670c7ca6617b62ee3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPro v\u011bt\u0161inu video lekc\u00ed jsem pou\u017e\u00edval GNS3 \u2014 emul\u00e1tor, kter\u00fd umo\u017e\u0148uje emulovat opera\u010dn\u00ed syst\u00e9m Cisco IOS. V mnoha p\u0159\u00edpadech pot\u0159ebuji v\u00edce ne\u017e jedno za\u0159\u00edzen\u00ed, nap\u0159\u00edklad kdy\u017e ukazuji, jak se prov\u00e1d\u00ed sm\u011brov\u00e1n\u00ed. V takov\u00e9m p\u0159\u00edpad\u011b mohu pot\u0159ebovat nap\u0159\u00edklad \u010dty\u0159i za\u0159\u00edzen\u00ed. M\u00edsto toho, abych kupoval fyzick\u00e1 za\u0159\u00edzen\u00ed, mohu vyu\u017e\u00edt opera\u010dn\u00ed syst\u00e9m jednoho ze sv\u00fdch za\u0159\u00edzen\u00ed, p\u0159ipojit ho k GNS3 a emulovat tento IOS na n\u011bkolika instanc\u00edch virtu\u00e1ln\u00edch za\u0159\u00edzen\u00ed. <\/p>\n<p>Proto nepot\u0159ebuji fyzicky m\u00edt p\u011bt sm\u011brova\u010d\u016f, mohu m\u00edt jen jeden router. Mohu pou\u017e\u00edt opera\u010dn\u00ed syst\u00e9m na sv\u00e9m po\u010d\u00edta\u010di, nainstalovat emul\u00e1tor a z\u00edskat 5 instanc\u00ed za\u0159\u00edzen\u00ed. V n\u00e1sleduj\u00edc\u00edch video lekc\u00edch se pod\u00edv\u00e1me, jak to ud\u011blat, ale dnes je probl\u00e9m p\u0159i pou\u017e\u00edv\u00e1n\u00ed emul\u00e1toru GNS3 v tom, \u017ee pomoc\u00ed n\u011bj nen\u00ed mo\u017en\u00e9 emulovat switch, proto\u017ee switch Cisco m\u00e1 hardwarov\u00e9 \u010dipy ASIC. Tento speci\u00e1ln\u00ed integrovan\u00fd obvod, kter\u00fd vlastn\u011b d\u011bl\u00e1 switch switchem, nelze jednodu\u0161e emulovat.<\/p>\n<p>Celkov\u011b emul\u00e1tor GNS3 pom\u00e1h\u00e1 pracovat se switchem, ale jsou n\u011bkter\u00e9 funkce, kter\u00e9 nelze prov\u00e9st. Proto pro tuto lekci a n\u011bkter\u00e9 dal\u0161\u00ed videa jsem pou\u017eil jin\u00fd software Cisco s n\u00e1zvem Cisco Packet Tracer. Nept\u00e1te se m\u011b, jak z\u00edskat p\u0159\u00edstup k Cisco Packet Tracer, m\u016f\u017eete to zjistit pomoc\u00ed Google, jen \u0159eknu, \u017ee pro z\u00edsk\u00e1n\u00ed takov\u00e9ho p\u0159\u00edstupu mus\u00edte b\u00fdt \u010dlenem Network Academy.<br \/>\nM\u016f\u017eete m\u00edt p\u0159\u00edstup k Cisco Packet Tracer, m\u016f\u017eete m\u00edt p\u0159\u00edstup k fyzick\u00e9mu za\u0159\u00edzen\u00ed nebo k GNS3, m\u016f\u017eete pou\u017e\u00edvat libovoln\u00fd z t\u011bchto n\u00e1stroj\u016f p\u0159i studiu kurzu Cisco ICND. M\u016f\u017eete pou\u017e\u00edvat GNS3, pokud m\u00e1te router, opera\u010dn\u00ed syst\u00e9m a switch, a funguje to bez probl\u00e9m\u016f, m\u016f\u017eete pou\u017e\u00edvat fyzick\u00e9 za\u0159\u00edzen\u00ed, nebo Packet Tracer \u2013 jen se rozhodn\u011bte, co v\u00e1m vyhovuje nejv\u00edc. <\/p>\n<p>Ve sv\u00fdch video lekc\u00edch v\u0161ak hodl\u00e1m pou\u017e\u00edvat pr\u00e1v\u011b Packet Tracer, tak\u017ee budu m\u00edt n\u011bkolik vide\u00ed, jedno v\u00fdhradn\u011b pro Packet Tracer a jedno v\u00fdhradn\u011b pro GNS3, brzy je zve\u0159ejn\u00edm, zat\u00edm budeme pou\u017e\u00edvat Packet Tracer. Takhle vypad\u00e1. Pokud m\u00e1te tak\u00e9 p\u0159\u00edstup k Network Academy, budete moci z\u00edskat p\u0159\u00edstup k tomuto programu, a pokud ne, m\u016f\u017eete pou\u017e\u00edt jin\u00e9 n\u00e1stroje.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/cea587d65cf083fba883201926ff7001.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak\u017ee, jeliko\u017e dnes mluv\u00edme o switchech, vyberu polo\u017eku Switches, zvol\u00edm model switche s\u00e9rie 2960 a jeho ikonu p\u0159et\u00e1hnu do okna programu. Pokud na tuto ikonu dvakr\u00e1t kliknu, p\u0159ejdu do rozhran\u00ed p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/7ed8d2f9f21cf709c2195b79b2ae3fc1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nD\u00e1le vid\u00edm, jak se na\u010d\u00edt\u00e1 opera\u010dn\u00ed syst\u00e9m switche. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/a33a88e3807e872ea0af183b39f5902b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPokud vezmete fyzick\u00e9 za\u0159\u00edzen\u00ed a p\u0159ipoj\u00edte ho k po\u010d\u00edta\u010di, uvid\u00edte p\u0159esn\u011b stejn\u00fd obrazec na\u010d\u00edt\u00e1n\u00ed Cisco IOS. Vid\u00edte, \u017ee se opera\u010dn\u00ed syst\u00e9m rozbalil, a m\u016f\u017eete si p\u0159e\u010d\u00edst n\u011bkter\u00e1 omezen\u00ed pou\u017eit\u00ed softwaru a licen\u010dn\u00ed smlouvu, informace o autorsk\u00fdch pr\u00e1vech\u2026 to v\u0161e se zobrazuje v tomto okn\u011b. <\/p>\n<p>D\u00e1le bude zobrazena platforma, na kter\u00e9 je OS spu\u0161t\u011bn, v tomto p\u0159\u00edpad\u011b je to switch WS-C2690-24TT, a budou zobrazeny v\u0161echny funkce hardwaru. Zde je tak\u00e9 uvedena verze programu. Pot\u00e9 p\u0159ejdeme p\u0159\u00edmo k p\u0159\u00edkazov\u00e9mu \u0159\u00e1dku, pokud si pamatujete, m\u00e1me zde n\u00e1pov\u011bdu pro u\u017eivatele. Nap\u0159\u00edklad symbol (&gt;) vyz\u00fdv\u00e1 k zad\u00e1n\u00ed p\u0159\u00edkazu. Z videa 'Den 5' v\u00edte, \u017ee to je v\u00fdchoz\u00ed, nejni\u017e\u0161\u00ed \u00farove\u0148 p\u0159\u00edstupu k nastaven\u00ed za\u0159\u00edzen\u00ed, tzv. u\u017eivatelsk\u00fd re\u017eim EXEC. Tento p\u0159\u00edstup lze z\u00edskat na jak\u00e9mkoli za\u0159\u00edzen\u00ed Cisco.<\/p>\n<p>Pokud pou\u017e\u00edv\u00e1te Packet Tracer, z\u00edsk\u00e1v\u00e1te mimo s\u00ed\u0165 OOB p\u0159\u00edstup k za\u0159\u00edzen\u00ed a m\u016f\u017eete sledovat spu\u0161t\u011bn\u00ed za\u0159\u00edzen\u00ed. Tento program imituje p\u0159\u00edstup ke switchi p\u0159es s\u00e9riov\u00fd port. Jak se dostanete z u\u017eivatelsk\u00e9ho re\u017eimu EXEC do privilegovan\u00e9ho re\u017eimu EXEC? Zad\u00e1te p\u0159\u00edkaz \u201eenable\u201c a stisknete \u201eEnter\u201c, m\u016f\u017eete tak\u00e9 pou\u017e\u00edt primer, kdy\u017e zad\u00e1te \u201een\u201c a z\u00edsk\u00e1te mo\u017en\u00e9 varianty p\u0159\u00edkaz\u016f za\u010d\u00ednaj\u00edc\u00edch na tyto p\u00edsmena. Pokud jednodu\u0161e zad\u00e1te p\u00edsmeno \u201ee\u201c, za\u0159\u00edzen\u00ed nebude v\u011bd\u011bt, na co mysl\u00edte, proto\u017ee existuj\u00ed t\u0159i p\u0159\u00edkazy za\u010d\u00ednaj\u00edc\u00ed \u201ee\u201c, ale pokud zad\u00e1m \u201een\u201c, syst\u00e9m pochop\u00ed, \u017ee jedin\u00e9 slovo, kter\u00e9 za\u010d\u00edn\u00e1 na tyto dv\u011b p\u00edsmena, je enable. T\u00edmto zp\u016fsobem, zad\u00e1n\u00edm tohoto p\u0159\u00edkazu, z\u00edsk\u00e1te p\u0159\u00edstup k privilegovan\u00e9mu re\u017eimu Exec.<\/p>\n<p>V tomto re\u017eimu m\u016f\u017eeme ud\u011blat v\u0161e, co bylo uk\u00e1z\u00e1no na druh\u00e9m sn\u00edmku \u2013 zm\u011bnit n\u00e1zev hostitele, nastavit banner p\u0159ihl\u00e1\u0161en\u00ed, heslo Telnet, povolit zad\u00e1v\u00e1n\u00ed hesla, nastavit IP adresu, nastavit v\u00fdchoz\u00ed br\u00e1nu, d\u00e1t p\u0159\u00edkaz na vypnut\u00ed za\u0159\u00edzen\u00ed, zru\u0161it d\u0159\u00edve zadan\u00e9 p\u0159\u00edkazy a ulo\u017eit proveden\u00e9 zm\u011bny konfigurace. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/c11222e264099961672d3372ed194e5d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nToto je 10 z\u00e1kladn\u00edch p\u0159\u00edkaz\u016f, kter\u00e9 pou\u017e\u00edv\u00e1te p\u0159i inicializaci za\u0159\u00edzen\u00ed. K zad\u00e1n\u00ed t\u011bchto parametr\u016f je nutn\u00e9 pou\u017e\u00edt re\u017eim glob\u00e1ln\u00ed konfigurace, do kter\u00e9ho nyn\u00ed p\u0159ejdeme.<\/p>\n<p>Tak\u017ee prvn\u00edm parametrem je n\u00e1zev hostitele, ten se vztahuje na cel\u00e9 za\u0159\u00edzen\u00ed, tak\u017ee jeho zm\u011bna se prov\u00e1d\u00ed v re\u017eimu glob\u00e1ln\u00ed konfigurace. Pro to zad\u00e1me do p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku parametr Switch (config)#. Pokud chci zm\u011bnit n\u00e1zev hostitele, zad\u00e1v\u00e1m v tomto \u0159\u00e1dku hostname NetworKing, stisknu \u201eEnter\u201c a vid\u00edm, \u017ee n\u00e1zev za\u0159\u00edzen\u00ed Switch se zm\u011bnil na NetworKing. Pokud p\u0159ipojujete tento switch k s\u00edti, kde u\u017e je mnoho dal\u0161\u00edch za\u0159\u00edzen\u00ed, toto jm\u00e9no mu bude slou\u017eit jako identifik\u00e1tor mezi ostatn\u00edmi s\u00ed\u0165ov\u00fdmi za\u0159\u00edzen\u00edmi, proto se sna\u017ete vymyslet pro sv\u016fj switch jedine\u010dn\u00fd n\u00e1zev se smyslem. Pokud bude tento switch nap\u0159\u00edklad um\u00edst\u011bn v kancel\u00e1\u0159i \u0159editele, m\u016f\u017eete jej nazvat AdminFloor1Room2. Pokud d\u00e1te za\u0159\u00edzen\u00ed logick\u00e9 jm\u00e9no, bude pro v\u00e1s velmi snadn\u00e9 ur\u010dit, ke kter\u00e9mu switchi se p\u0159ipojujete. To je d\u016fle\u017eit\u00e9, proto\u017ee to pom\u016f\u017ee vyhnout se zmatku mezi za\u0159\u00edzen\u00edmi, jak se s\u00ed\u0165 roz\u0161i\u0159uje.<\/p>\n<p>N\u00e1sleduje parametr Logon Banner. To je prvn\u00ed v\u011bc, kterou uvid\u00ed ka\u017ed\u00fd, kdo se k tomuto za\u0159\u00edzen\u00ed p\u0159ihla\u0161uje pomoc\u00ed p\u0159ihla\u0161ovac\u00edho jm\u00e9na. Tento parametr se nastavuje pomoc\u00ed p\u0159\u00edkazu #banner. D\u00e1le m\u016f\u017eete zadat zkratku motd, Message of The Day, nebo \"zpr\u00e1va dne\". Pokud do \u0159\u00e1dku vlo\u017e\u00edm otazn\u00edk, obdr\u017e\u00edm zpr\u00e1vu ve form\u00e1tu: LINE s banner-textem.<\/p>\n<p>To vypad\u00e1 zmaten\u011b, ale znamen\u00e1 to, \u017ee m\u016f\u017eete zad\u00e1vat text od jak\u00e9hokoli symbolu krom\u011b \"s\", kter\u00fd v tomto p\u0159\u00edpad\u011b funguje jako odd\u011blova\u010d. Tak\u017ee za\u010dneme se ampersandem (&amp;). Stisknu \"Enter\" a syst\u00e9m nap\u00ed\u0161e, \u017ee nyn\u00ed m\u016f\u017eete zadat jak\u00fdkoli text pro banner a ukon\u010dit ho stejn\u00fdm symbolem (&amp;), s kter\u00fdm \u0159et\u011bzec za\u010d\u00edn\u00e1. Tak\u017ee jsem za\u010dal s ampersandem a m\u011bl bych zakon\u010dit svou zpr\u00e1vu ampersandem. <\/p>\n<p>Za\u010dnu sv\u016fj banner \u0159\u00e1dkem hv\u011bzdi\u010dek (*), a v dal\u0161\u00edm \u0159\u00e1dku nap\u00ed\u0161u \"Nejnebezpe\u010dn\u011bj\u0161\u00ed switch! Nevstupovat\"! Mysl\u00edm, \u017ee je to skv\u011bl\u00e9, kdokoli se vyd\u011bs\u00ed, kdy\u017e uvid\u00ed takov\u00fd uv\u00edtac\u00ed banner.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/0a9cd3555926156e43174f132cad85fa.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTo je moje \u201ezpr\u00e1va dne\u201c. Abych zkontroloval, jak to vypad\u00e1 na obrazovce, stisknu CTRL+Z, abych p\u0159e\u0161el z glob\u00e1ln\u00edho re\u017eimu do privilegovan\u00e9ho re\u017eimu EXEC, odkud mohu opustit re\u017eim nastaven\u00ed. Takto vypad\u00e1 moje zpr\u00e1va na obrazovce a tak ji uvid\u00ed ka\u017ed\u00fd, kdo se p\u0159ihl\u00e1s\u00ed na tomto switchi. Toto se naz\u00fdv\u00e1 p\u0159ihla\u0161ovac\u00ed banner. M\u016f\u017eete b\u00fdt kreativn\u00ed a napsat cokoliv, ale doporu\u010duji k tomu p\u0159istupovat s ve\u0161kerou v\u00e1\u017enost\u00ed. M\u00e1m na mysli, \u017ee n\u011bkte\u0159\u00ed lid\u00e9 m\u00edsto rozumn\u00e9ho textu um\u00eds\u0165ovali jako uv\u00edtac\u00ed banner obr\u00e1zky z symbol\u016f, kter\u00e9 nem\u011bly \u017e\u00e1dnou smyslovou hodnotu. Nic v\u00e1m nebr\u00e1n\u00ed v\u011bnovat se takov\u00e9mu \u201eum\u011bn\u00ed\u201c, jen si pamatujte, \u017ee nadbyte\u010dn\u00e9 symboly p\u0159et\u011b\u017euj\u00ed pam\u011b\u0165 za\u0159\u00edzen\u00ed (RAM) a konfigura\u010dn\u00ed soubor, kter\u00fd se pou\u017e\u00edv\u00e1 p\u0159i spu\u0161t\u011bn\u00ed syst\u00e9mu. \u010c\u00edm v\u00edce symbol\u016f je v tomto souboru, t\u00edm pomaleji se switch spou\u0161t\u00ed, tak\u017ee se sna\u017ete minimalizovat konfigura\u010dn\u00ed soubor, aby byl obsah banneru jasn\u00fd a v\u00fdsti\u017en\u00fd.<\/p>\n<p>D\u00e1le se pod\u00edv\u00e1me na heslo pro konzoli Console Password. To br\u00e1n\u00ed vstupu n\u00e1hodn\u00fdch lid\u00ed do za\u0159\u00edzen\u00ed. P\u0159edstavte si, \u017ee jste za\u0159\u00edzen\u00ed ponechali otev\u0159en\u00e9. Pokud jsem hacker, p\u0159ipoj\u00edm sv\u016fj notebook pomoc\u00ed konzolov\u00e9ho kabelu k switche, pou\u017eiji konzoli pro p\u0159ihl\u00e1\u0161en\u00ed do switche a zm\u011bn\u00edm heslo nebo ud\u011bl\u00e1m n\u011bco \u0161kodliv\u00e9ho. Ale pokud pou\u017e\u00edv\u00e1te heslo pro konzolov\u00fd port, mohu se do syst\u00e9mu dostat jen s t\u00edmto heslem. Nechcete p\u0159ece, aby se n\u011bkdo jen tak dostal do konzole a zm\u011bnil n\u011bco v nastaven\u00ed va\u0161eho switche. Tak\u017ee poj\u010fme nejprve prozkoumat aktu\u00e1ln\u00ed konfiguraci. <\/p>\n<p>Jeliko\u017e jsem v re\u017eimu config, mohu zadat p\u0159\u00edkaz do sh run. P\u0159\u00edkaz show run je p\u0159\u00edkaz privilegovan\u00e9ho re\u017eimu EXEC. Pokud se chci dostat z tohoto re\u017eimu do glob\u00e1ln\u00edho re\u017eimu, mus\u00edm pou\u017e\u00edt p\u0159\u00edkaz \"do\". Pokud se pod\u00edv\u00e1me na \u0159\u00e1dek konzole, uvid\u00edme, \u017ee ve v\u00fdchoz\u00edm nastaven\u00ed tam \u017e\u00e1dn\u00e9 heslo nen\u00ed a zobrazuje se line con 0. Tento \u0159\u00e1dek je um\u00edst\u011bn v jedn\u00e9 \u010d\u00e1sti a n\u00ed\u017ee je ji\u017e jin\u00e1 \u010d\u00e1st konfigura\u010dn\u00edho souboru. <\/p>\n<p>Proto\u017ee v sekci \"line console\" nic nen\u00ed, to znamen\u00e1, \u017ee p\u0159i p\u0159ipojen\u00ed k switche p\u0159es konzolov\u00fd port z\u00edsk\u00e1m p\u0159\u00edm\u00fd p\u0159\u00edstup k konzoli. Nyn\u00ed, pokud zad\u00e1m \"end\", mohu se vr\u00e1tit zp\u011bt do privilegovan\u00e9ho re\u017eimu a z n\u011bj p\u0159ej\u00edt do u\u017eivatelsk\u00e9ho re\u017eimu. Pokud te\u010f stisknu \"Enter\", dostanu se p\u0159\u00edmo do re\u017eimu p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku, proto\u017ee zde nen\u00ed heslo, jinak by m\u011b program po\u017e\u00e1dal o jeho zad\u00e1n\u00ed pro vstup do nastaven\u00ed konfigurace. <br \/>\nTak stiskn\u011bme \"Enter\" a napi\u0161me do \u0159\u00e1dku line con 0, proto\u017ee u za\u0159\u00edzen\u00ed Cisco v\u0161e za\u010d\u00edn\u00e1 z nuly. Proto\u017ee m\u00e1me pouze jednu konzoli, je ozna\u010dena zkratkou \"con\". Nyn\u00ed, abychom p\u0159i\u0159adili heslo, nap\u0159\u00edklad slovo \"Cisco\", mus\u00edme napsat do \u0159\u00e1dku NetworKing (config-line)# p\u0159\u00edkaz password cisco a stisknout \"Enter\". <\/p>\n<p>Nyn\u00ed jsme nastavili heslo, ale st\u00e1le n\u00e1m n\u011bco chyb\u00ed. Poj\u010fme to zkusit v\u0161echno znovu a vyjdeme z nastaven\u00ed. I kdy\u017e jsme heslo nastavili, syst\u00e9m ho nevy\u017eaduje. Pro\u010d?<\/p>\n<p>Nepo\u017eaduje heslo, proto\u017ee ji nevyt\u011b\u017eujeme. Heslo jsme nastavili, ale neuvedli jsme \u0159\u00e1dek, kter\u00fd prov\u00e1d\u00ed jeho kontrolu, kdy\u017e za\u010dne p\u0159ich\u00e1zet provoz na za\u0159\u00edzen\u00ed. Co bychom tedy m\u011bli ud\u011blat? Mus\u00edme se vr\u00e1tit k \u0159\u00e1dku, kde m\u00e1me line con 0, a zadat slovo \u201elogin\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/9e44c8a4dd0dd9fdd4c3863ffca322ba.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTo znamen\u00e1, \u017ee mus\u00edte zkontrolovat heslo, tedy k p\u0159ihl\u00e1\u0161en\u00ed do syst\u00e9mu je nutn\u00fd login. Poj\u010fme zkontrolovat, co jsme dos\u00e1hli. K tomu se odhl\u00e1s\u00edme z nastaven\u00ed a vr\u00e1t\u00edme se k oknu s bannerem. Vid\u00edte, \u017ee t\u011bsn\u011b pod n\u00edm se n\u00e1m objevila \u0159\u00e1dka, kter\u00e1 vy\u017eaduje zad\u00e1n\u00ed hesla. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/6fbd204cdc2b06f8b68ab97297041aa5.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPokud sem zad\u00e1m heslo, budu schopen vstoupit do nastaven\u00ed za\u0159\u00edzen\u00ed. T\u00edmto zp\u016fsobem jsme efektivn\u011b zabr\u00e1nili p\u0159\u00edstupu k za\u0159\u00edzen\u00ed bez va\u0161eho povolen\u00ed a nyn\u00ed se do syst\u00e9mu mohou p\u0159ihl\u00e1sit pouze ti, kdo znaj\u00ed heslo. <\/p>\n<p>Nyn\u00ed vid\u00edte, \u017ee m\u00e1me mal\u00fd probl\u00e9m. Pokud n\u011bco nap\u00ed\u0161ete, \u010demu syst\u00e9m nerozum\u00ed, mysl\u00ed si, \u017ee jde o dom\u00e9nov\u00e9 jm\u00e9no a sna\u017e\u00ed se naj\u00edt dom\u00e9nov\u00e9 jm\u00e9no serveru, \u010d\u00edm\u017e se pokou\u0161\u00ed p\u0159ipojit k IP adrese 255.255.255.255.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/d45a0ce72697164cb6d594cbabd23584.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTo se m\u016f\u017ee st\u00e1t, a j\u00e1 v\u00e1m uk\u00e1\u017eu, jak zak\u00e1zat zobrazen\u00ed t\u00e9to zpr\u00e1vy. M\u016f\u017eete si po\u010dkat, a\u017e vypr\u0161\u00ed \u010dasov\u00fd limit dotazu, nebo pou\u017e\u00edt kl\u00e1vesovou zkratku Control+Shift+6, n\u011bkdy to funguje dokonce i na fyzick\u00fdch za\u0159\u00edzen\u00edch. <\/p>\n<p>Pak mus\u00edme ud\u011blat tak, aby syst\u00e9m nehledal dom\u00e9nov\u00e9 jm\u00e9no, a proto zad\u00e1me p\u0159\u00edkaz \u201eno IP-domain lookup\u201c a zkontrolujeme, jak to fungovalo. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/3c22f3f98793fdcc48c6ac4cfe266f04.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJak vid\u00edte, nyn\u00ed bez probl\u00e9m\u016f m\u016f\u017eeme pracovat s nastaven\u00edm switche. Pokud se znovu odhl\u00e1s\u00edme z nastaven\u00ed na \u00favodn\u00ed obrazovku a ud\u011bl\u00e1me stejnou chybu, tedy zad\u00e1me pr\u00e1zdn\u00fd \u0159\u00e1dek, za\u0159\u00edzen\u00ed nebude ztr\u00e1cet \u010das hled\u00e1n\u00edm dom\u00e9nov\u00e9ho jm\u00e9na, ale jednodu\u0161e zobraz\u00ed zpr\u00e1vu \u201enezn\u00e1m\u00fd p\u0159\u00edkaz\u201c. Tak\u017ee nastaven\u00ed hesla pro p\u0159ihl\u00e1\u0161en\u00ed do syst\u00e9mu je jedna z hlavn\u00edch v\u011bc\u00ed, kterou budete muset ud\u011blat na nov\u00e9m za\u0159\u00edzen\u00ed Cisco.<\/p>\n<p>Nyn\u00ed se pod\u00edv\u00e1me na heslo pro protokol Telnet. Pokud pro heslo k konzoli m\u00e1me v \u0159\u00e1dku uvedeno \u201econ 0\u201c, pro heslo Telnet je v\u00fdchoz\u00edm parametrem \u201eline vty\u201c, co\u017e znamen\u00e1, \u017ee nastaven\u00ed hesla prob\u00edh\u00e1 v re\u017eimu virtu\u00e1ln\u00edho termin\u00e1lu, proto\u017ee Telnet je virtu\u00e1ln\u00ed linie, nikoli fyzick\u00e1. Prvn\u00edm parametrem line vty je 0 a posledn\u00edm 15. Pokud nastav\u00edme parametr 15, bude to znamenat, \u017ee m\u016f\u017eete vytvo\u0159it 16 \u0159\u00e1dk\u016f pro p\u0159\u00edstup k tomuto za\u0159\u00edzen\u00ed. To znamen\u00e1, \u017ee pokud m\u00e1me v s\u00edti n\u011bkolik za\u0159\u00edzen\u00ed, p\u0159i p\u0159ipojen\u00ed ke switchi prost\u0159ednictv\u00edm protokolu Telnet prvn\u00ed za\u0159\u00edzen\u00ed pou\u017eije \u0159\u00e1dek 0, druh\u00e9 \u0159\u00e1dek 1 a tak d\u00e1le a\u017e do \u0159\u00e1dku 15. T\u00edmto zp\u016fsobem se k switchi m\u016f\u017ee najednou p\u0159ipojit 16 lid\u00ed a sedmn\u00e1ct\u00fd \u010dlov\u011bk, kdy\u017e se pokus\u00ed p\u0159ipojit, bude informov\u00e1n, \u017ee limit p\u0159ipojen\u00ed byl vy\u010derp\u00e1n. <\/p>\n<p>M\u016f\u017eeme nastavit spole\u010dn\u00e9 heslo pro v\u0161ech 16 virtu\u00e1ln\u00edch \u0159\u00e1dk\u016f od 0 do 15, a to podle stejn\u00e9 koncepce jako p\u0159i nastavov\u00e1n\u00ed hesla pro konzoli, tedy zad\u00e1me do \u0159\u00e1dku p\u0159\u00edkaz password a nastav\u00edme heslo, nap\u0159\u00edklad slovo \u201etelnet\u201c, a pot\u00e9 zad\u00e1me p\u0159\u00edkaz \u201elogin\u201c. To znamen\u00e1, \u017ee nechceme, aby se lid\u00e9 dost\u00e1vali k za\u0159\u00edzen\u00ed prost\u0159ednictv\u00edm protokolu Telnet bez hesla. Proto d\u00e1v\u00e1me pokyn zkontrolovat p\u0159ihl\u00e1\u0161en\u00ed a teprve pot\u00e9 poskytnout p\u0159\u00edstup k syst\u00e9mu. <br \/>\nV tuto chv\u00edli nem\u016f\u017eeme pou\u017e\u00edvat Telnet, proto\u017ee p\u0159\u00edstup k za\u0159\u00edzen\u00ed prost\u0159ednictv\u00edm tohoto protokolu m\u016f\u017ee b\u00fdt proveden pouze po nastaven\u00ed n\u011bjak\u00e9 IP adresy na switchi. Proto, abychom zkontrolovali nastaven\u00ed Telnet, p\u0159ejd\u011bme nejprve k spr\u00e1v\u011b IP adres. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/f4080d1e387d2f26b616cc567bff3348.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJak v\u00edte, switch pracuje na 2. \u00farovni modelu OSI, m\u00e1 24 port\u016f, a proto nem\u016f\u017ee m\u00edt \u017e\u00e1dnou konkr\u00e9tn\u00ed IP adresu. Mus\u00edme v\u0161ak p\u0159i\u0159adit tomuto switchi IP adresu, pokud se chceme p\u0159ipojit z jin\u00e9ho za\u0159\u00edzen\u00ed pro spr\u00e1vu IP adres. <br \/>\nTak\u017ee pot\u0159ebujeme p\u0159i\u0159adit switchi jednu IP adresu, kter\u00e1 bude pou\u017eita pro IP spr\u00e1vu. K tomu zad\u00e1me jeden z m\u00fdch obl\u00edben\u00fdch p\u0159\u00edkaz\u016f \u201eshow ip interface brief\u201c a uvid\u00edme v\u0161echny rozhran\u00ed p\u0159\u00edtomn\u00e9 v tomto za\u0159\u00edzen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/0be49763529a6fc1efb8477e3239870b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak\u017ee vid\u00edm, \u017ee m\u00e1m dvacet \u010dty\u0159i port\u016f FastEthernet, dva porty GigabitEthernet a jedno rozhran\u00ed VLAN. VLAN je virtu\u00e1ln\u00ed s\u00ed\u0165, o kter\u00e9 se pozd\u011bji podrobn\u011bji pod\u00edv\u00e1me, zat\u00edm jen zm\u00edn\u00edm, \u017ee ka\u017ed\u00fd switch je dod\u00e1v\u00e1n s jedn\u00edm virtu\u00e1ln\u00edm rozhran\u00edm, naz\u00fdvan\u00fdm VLAN rozhran\u00ed. To pou\u017e\u00edv\u00e1me k spr\u00e1v\u011b switche. <\/p>\n<p>Proto se pokus\u00edme p\u0159ipojit k tomuto rozhran\u00ed a do p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku zad\u00e1me parametr vlan 1. Nyn\u00ed vid\u00edte, \u017ee p\u0159\u00edkazov\u00fd \u0159\u00e1dek m\u00e1 podobu NetworKing (config-if) #, co\u017e znamen\u00e1, \u017ee jsme v konfigura\u010dn\u00edm rozhran\u00ed VLAN switche. Nyn\u00ed zad\u00e1me p\u0159\u00edkaz pro nastaven\u00ed IP adresy ve form\u00e1tu: Ip add 10.1.1.1 255.255.255.0 a stiskneme \u201eEnter\u201c. <\/p>\n<p>Vid\u00edme, \u017ee toto rozhran\u00ed se objevilo v seznamu rozhran\u00ed s ozna\u010den\u00edm \u201eadministratively down\u201c. Pokud vid\u00edte tento n\u00e1pis, znamen\u00e1 to, \u017ee pro toto rozhran\u00ed existuje p\u0159\u00edkaz \u201eshutdown\u201c, kter\u00fd port vyp\u00edn\u00e1, a v tomto p\u0159\u00edpad\u011b je tento port vypnut\u00fd. Tento p\u0159\u00edkaz m\u016f\u017eete vykonat pro jak\u00e9koliv rozhran\u00ed, jeho\u017e specifikace obsahuje ozna\u010den\u00ed \u201edown\u201c. Nap\u0159\u00edklad se m\u016f\u017eete p\u0159epnout na rozhran\u00ed FastEthernet0\/23 nebo FastEthernet0\/24, zadat p\u0159\u00edkaz \u201eshutdown\u201c, po \u010dem\u017e bude v seznamu rozhran\u00ed tento port ozna\u010den jako \u201eadministratively down\u201c, tedy vypnut\u00fd. <\/p>\n<p>Tak\u017ee jsme si uk\u00e1zali, jak funguje p\u0159\u00edkaz pro vypnut\u00ed portu \u201eshutdown\u201c. K tomu, abychom port zapnuli nebo obecn\u011b zapnuli n\u011bco ve switchi, se pou\u017e\u00edv\u00e1 Negating Command, neboli \u201enegace p\u0159\u00edkazu\u201c. Nap\u0159\u00edklad v na\u0161em p\u0159\u00edpad\u011b pou\u017eit\u00ed tohoto p\u0159\u00edkazu znamen\u00e1 \u201ene vypnout\u201c. Je to velmi jednoduch\u00fd p\u0159\u00edkaz z jednoho slova \u201eno\u201c \u2014 pokud p\u0159\u00edkaz \u201eshutdown\u201c znamen\u00e1 \u201evypnout za\u0159\u00edzen\u00ed\u201c, pak p\u0159\u00edkaz \u201eno shutdown\u201c znamen\u00e1 \u201ezapnout za\u0159\u00edzen\u00ed\u201c. Tak\u017ee pop\u0159en\u00edm jak\u00e9hokoli p\u0159\u00edkazu pomoc\u00ed \u010d\u00e1stice \u201eno\u201c d\u00e1v\u00e1me za\u0159\u00edzen\u00ed Cisco pokyn k vykon\u00e1n\u00ed p\u0159esn\u011b opa\u010dn\u00e9 akce. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/b5d64559ba235c59cb465f94a59a26ee.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTe\u010f znovu zad\u00e1m p\u0159\u00edkaz \u201eshow ip interface brief\u201c a uvid\u00edte, \u017ee stav na\u0161eho portu VLAN, kter\u00fd nyn\u00ed m\u00e1 IP adresu 10.1.1.1, se zm\u011bnil z \u201edown\u201c \u2014 \u201evypnut\u00fd\u201c na \u201eup\u201c \u2014 \u201ezapnut\u00fd\u201c, av\u0161ak v \u0159\u00e1dku protokolu st\u00e1le figuruje \u201edown\u201c.<\/p>\n<p>Pro\u010d protokol VLAN nefunguje? Proto\u017ee moment\u00e1ln\u011b nevid\u00ed \u017e\u00e1dn\u00fd provoz proch\u00e1zej\u00edc\u00ed t\u00edmto portem, proto\u017ee, jak si pamatujete, v na\u0161\u00ed virtu\u00e1ln\u00ed s\u00edti m\u00e1me pouze jedno za\u0159\u00edzen\u00ed \u2013 switch, a v tomto p\u0159\u00edpad\u011b nem\u016f\u017ee b\u00fdt \u017e\u00e1dn\u00fd provoz. Proto p\u0159id\u00e1me do s\u00edt\u011b dal\u0161\u00ed za\u0159\u00edzen\u00ed, osobn\u00ed po\u010d\u00edta\u010d PC-PT(PC0).<br \/>\nNemus\u00edte se ob\u00e1vat o Cisco Packet Tracer, v jednom z n\u00e1sleduj\u00edc\u00edch vide\u00ed uk\u00e1\u017eu podrobn\u011bji, jak tato aplikace funguje, prozat\u00edm si ud\u011bl\u00e1me pouze obecn\u00fd p\u0159ehled jej\u00edch mo\u017enost\u00ed. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/20f08b12820039af9e4ea6dd5e6fdfa6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak\u017ee nyn\u00ed aktivuji simulaci PC, kliknu na ikonu po\u010d\u00edta\u010de a p\u0159ipoj\u00edm kabel k na\u0161emu switche. V konzoli se objevila zpr\u00e1va, \u017ee line\u00e1rn\u00ed protokol rozhran\u00ed VLAN1 zm\u011bnil stav na UP, proto\u017ee jsme m\u011bli provoz z PC. Jakmile protokol zaznamenal p\u0159\u00edtomnost provozu, okam\u017eit\u011b p\u0159e\u0161el do stavu p\u0159ipravenosti. <\/p>\n<p>Pokud znovu pou\u017eijete p\u0159\u00edkaz \u201eshow ip interface brief\u201c, m\u016f\u017eete vid\u011bt, \u017ee rozhran\u00ed FastEthernet0\/1 zm\u011bnilo sv\u016fj stav a stav sv\u00e9ho protokolu na UP, proto\u017ee k n\u011bmu byl p\u0159ipojen kabel od po\u010d\u00edta\u010de, kter\u00fdm za\u010dal p\u0159ich\u00e1zet provoz. Rozhran\u00ed VLAN tak\u00e9 p\u0159e\u0161lo do aktivn\u00edho stavu, proto\u017ee \u201evid\u011blo\u201c provoz na tomto portu. <\/p>\n<p>Nyn\u00ed klikneme na ikonu po\u010d\u00edta\u010de, abychom se pod\u00edvali, co p\u0159edstavuje. Je to pouze simulace PC s opera\u010dn\u00edm syst\u00e9mem Windows, tak\u017ee p\u0159ejdeme k nastaven\u00ed s\u00ed\u0165ov\u00e9 konfigurace a p\u0159i\u0159ad\u00edme po\u010d\u00edta\u010di IP adresu 10.1.1.2 a nastav\u00edme masku pods\u00edt\u011b 255.255.255.0.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/14125dcbc2ef04f0cd5e3762ef4a9044.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNepot\u0159ebujeme v\u00fdchoz\u00ed br\u00e1nu, proto\u017ee jsme ve stejn\u00e9 s\u00edti se switchem. Te\u010f se pokus\u00edm pingnout switch p\u0159\u00edkazem \u201eping 10.1.1.1\u201c, a jak vid\u00edte, pingov\u00e1n\u00ed bylo \u00fasp\u011b\u0161n\u00e9. To znamen\u00e1, \u017ee nyn\u00ed m\u016f\u017ee po\u010d\u00edta\u010d p\u0159istupovat k switchi a m\u00e1me IP adresu 10.1.1.1, p\u0159es kterou se switch \u0159\u00edd\u00ed. <\/p>\n<p>M\u016f\u017eete se pt\u00e1t, pro\u010d prvn\u00ed po\u017eadavek po\u010d\u00edta\u010de dostal odpov\u011b\u010f \u201etimeout\u201c. Stalo se to proto, \u017ee po\u010d\u00edta\u010d neznal MAC adresu switche a musel nejd\u0159\u00edve neposlat ARP dotaz, tak\u017ee prvn\u00ed pokus o p\u0159\u00edstup na IP adresu 10.1.1.1 skon\u010dil ne\u00fasp\u011bchem.<\/p>\n<p>Poj\u010fme zkusit pou\u017e\u00edt protokol Telnet t\u00edm, \u017ee v konzoli zad\u00e1me \u201etelnet 10.1.1.1\u201c. Tento po\u010d\u00edta\u010d se spojuje pomoc\u00ed protokolu Telnet na adrese 10.1.1.1, co\u017e je nic jin\u00e9ho ne\u017e virtu\u00e1ln\u00ed rozhran\u00ed switche. Pot\u00e9 v okn\u011b termin\u00e1lu p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku okam\u017eit\u011b vid\u00edm uv\u00edtac\u00ed banner switche, kter\u00fd jsme nastavili d\u0159\u00edve.<\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/9808cbd7801fb212e838888f58e53fa7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nFyzicky m\u016f\u017ee b\u00fdt tento switch um\u00edst\u011bn kdekoli \u2013 na \u010dtvrt\u00e9m nebo prvn\u00edm pat\u0159e kancel\u00e1\u0159e, ale v ka\u017ed\u00e9m p\u0159\u00edpad\u011b ho najdeme pomoc\u00ed Telnetu. Vid\u00edte, \u017ee switch \u017e\u00e1d\u00e1 o heslo. Jak\u00e9 heslo to je? Nastavili jsme dv\u011b hesla \u2013 jedno na konzoli, druh\u00e9 na VTY. Zkus\u00edme nejprve zadat heslo na konzoli \u201ecisco\u201c, a vid\u00edte, \u017ee syst\u00e9m ho nep\u0159ij\u00edm\u00e1. Pot\u00e9 zkou\u0161\u00edm heslo \u201etelnet\u201c na VTY a to fungovalo. Switch p\u0159ijmul heslo VTY, proto\u017ee line vty password \u2014 to je to, co funguje podle pou\u017eit\u00e9ho protokolu Telnet.<\/p>\n<p>Nyn\u00ed se pokou\u0161\u00edm zadat p\u0159\u00edkaz \u00abenable\u00bb, na co\u017e syst\u00e9m odpov\u00edd\u00e1 \u00abno password set\u00bb \u2014 \u00abheslo nen\u00ed nastaveno\u00bb. To znamen\u00e1, \u017ee p\u0159ep\u00edna\u010d mi povolil p\u0159\u00edstup do u\u017eivatelsk\u00e9ho re\u017eimu nastaven\u00ed, ale nedal mi privilegovan\u00fd p\u0159\u00edstup. Abych p\u0159e\u0161el do privilegovan\u00e9ho re\u017eimu EXEC, mus\u00edm vytvo\u0159it to, \u010demu se \u0159\u00edk\u00e1 \u00abenable password\u00bb, tedy povolit heslo. K tomu se op\u011bt vrac\u00edme do nastaven\u00ed p\u0159ep\u00edna\u010de, abychom povolili syst\u00e9mu pou\u017e\u00edvat heslo. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/2851fb1cd8c0ae861548f8772ad8c385.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nK tomu pomoc\u00ed p\u0159\u00edkazu \u201eenable\u201c p\u0159ech\u00e1z\u00edme z u\u017eivatelsk\u00e9ho re\u017eimu EXEC do privilegovan\u00e9ho re\u017eimu EXEC. Jakmile zad\u00e1me \u201eenable\u201c, syst\u00e9m tak\u00e9 vy\u017eaduje zad\u00e1n\u00ed hesla, proto\u017ee tato funkce nebude fungovat bez hesla. Proto se znovu vrac\u00edme k simulaci z\u00edsk\u00e1n\u00ed konzolov\u00e9ho p\u0159\u00edstupu. Ji\u017e m\u00e1m p\u0159\u00edstup k tomuto switchi, tak\u017ee v okn\u011b rozhran\u00ed p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku IOS na \u0159\u00e1dku NetworKing (config) # enable mus\u00edm p\u0159idat \u201epassword enable\u201c, tedy aktivovat funkci pou\u017e\u00edv\u00e1n\u00ed hesla. <br \/>\nNyn\u00ed mi dovolte znovu se pokusit zadat \u00abenable\u00bb v p\u0159\u00edkazov\u00e9m \u0159\u00e1dku po\u010d\u00edta\u010de a stisknout \u00abEnter\u00bb, po \u010dem\u017e syst\u00e9m po\u017eaduje heslo. Jak\u00e9 heslo? Pot\u00e9, co jsem zadal a odeslal p\u0159\u00edkaz \u00abenable\u00bb, z\u00edskal jsem p\u0159\u00edstup k privilegovan\u00e9mu re\u017eimu EXEC. Nyn\u00ed m\u00e1m p\u0159\u00edstup k tomuto za\u0159\u00edzen\u00ed p\u0159es po\u010d\u00edta\u010d a mohu s n\u00edm d\u011blat, co chci. Mohu p\u0159ej\u00edt do \u00abconf t\u00bb, mohu zm\u011bnit heslo nebo n\u00e1zev hostitele. Nyn\u00ed zm\u011bn\u00edm n\u00e1zev hostitele na SwitchF1R10, co\u017e znamen\u00e1 \u00abprvn\u00ed patro, m\u00edstnost 10\u00bb. Takto jsem zm\u011bnil n\u00e1zev p\u0159ep\u00edna\u010de a nyn\u00ed mi ukazuje na polohu tohoto za\u0159\u00edzen\u00ed v kancel\u00e1\u0159i. <\/p>\n<p>Pokud se vr\u00e1t\u00edme k oknu p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku switche, m\u016f\u017eeme vid\u011bt, \u017ee jeho n\u00e1zev byl zm\u011bn\u011bn, a j\u00e1 jsem to provedl vzd\u00e1len\u011b b\u011bhem sezen\u00ed Telnetu. <\/p>\n<p>Takto z\u00edsk\u00e1v\u00e1me p\u0159\u00edstup k switche p\u0159es Telnet: p\u0159i\u0159adili jsme n\u00e1zev hostitele, vytvo\u0159ili jsme banner p\u0159ihl\u00e1\u0161en\u00ed, nastavili heslo na konzoli a heslo pro Telnet. Pot\u00e9 jsme dovolili vstup hesla, vytvo\u0159ili mo\u017enost spr\u00e1vy IP, aktivovali funkci \u201eshutdown\u201c a mo\u017enost odm\u00edtnut\u00ed p\u0159\u00edkazu.<\/p>\n<p>D\u00e1le mus\u00edme nastavit v\u00fdchoz\u00ed br\u00e1nu. K tomu se op\u011bt vrac\u00edme do re\u017eimu glob\u00e1ln\u00ed konfigurace p\u0159ep\u00edna\u010de, zad\u00e1me p\u0159\u00edkaz \u00abip default-gateway 10.1.1.10\u00bb a stiskneme \u00abEnter\u00bb. M\u016f\u017eete se zeptat, pro\u010d je pot\u0159eba v\u00fdchoz\u00ed br\u00e1na, kdy\u017e je n\u00e1\u0161 p\u0159ep\u00edna\u010d za\u0159\u00edzen\u00edm 2. \u00farovn\u011b modelu OSI. <\/p>\n<p>V tomto p\u0159\u00edpad\u011b jsme p\u0159ipojili PC p\u0159\u00edmo k switche, ale p\u0159edpokl\u00e1dejme, \u017ee m\u00e1me v\u00edce za\u0159\u00edzen\u00ed. P\u0159edstavte si, \u017ee za\u0159\u00edzen\u00ed, ze kter\u00e9ho jsem inicioval Telnet, tedy po\u010d\u00edta\u010d, se nach\u00e1z\u00ed v jedn\u00e9 s\u00edti, zat\u00edmco switch s IP adresou 10.1.1.1 je ve druh\u00e9 s\u00edti. V takov\u00e9m p\u0159\u00edpad\u011b poch\u00e1z\u00ed traffic Telnet z jin\u00e9 s\u00edt\u011b, switch by m\u011bl poslat jeho zp\u011bt, ale nev\u00ed, jak se tam dostat. Switch ur\u010duje, \u017ee IP adresa po\u010d\u00edta\u010de pat\u0159\u00ed do jin\u00e9 s\u00edt\u011b, proto pro komunikaci s n\u00edm je t\u0159eba pou\u017e\u00edt v\u00fdchoz\u00ed br\u00e1nu. <\/p>\n<p><img decoding=\"async\" alt=\"\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Nastaven\u00ed p\u0159ep\u00edna\u010de\" src=\"\/wp-content\/uploads\/2019\/06\/b2827d7f043e10e1ed4e3fe1351fcb27.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nT\u00edmto zp\u016fsobem nastavujeme v\u00fdchoz\u00ed br\u00e1nu pro toto za\u0159\u00edzen\u00ed, aby p\u0159i p\u0159\u00edjmu trafficu z jin\u00e9 s\u00edt\u011b mohl switch poslat odpov\u00eddaj\u00edc\u00ed paket v\u00fdchoz\u00ed br\u00e1n\u011b, kter\u00e1 ho p\u0159esm\u011bruje do c\u00edlov\u00e9ho m\u00edsta. <\/p>\n<p>Nyn\u00ed se kone\u010dn\u011b pod\u00edv\u00e1me na to, jak ulo\u017eit tuto konfiguraci. Ud\u011blali jsme tolik zm\u011bn v nastaven\u00ed tohoto za\u0159\u00edzen\u00ed, \u017ee je \u010das je ulo\u017eit. Existuj\u00ed dva zp\u016fsoby, jak to prov\u00e9st. <\/p>\n<p>Jedn\u00edm z nich je zad\u00e1n\u00ed p\u0159\u00edkazu \u201ewrite\u201c v privilegovan\u00e9m re\u017eimu EXEC. Zad\u00e1m tento p\u0159\u00edkaz, stisknu \u201eEnter\u201c a syst\u00e9m odpov\u00ed zpr\u00e1vou \u201eBuilding configuration \u2014 OK\u201c, tedy aktu\u00e1ln\u00ed konfigurace za\u0159\u00edzen\u00ed byla \u00fasp\u011b\u0161n\u011b ulo\u017eena. To, co jsme ud\u011blali p\u0159ed ulo\u017een\u00edm, se naz\u00fdv\u00e1 \u201epracovn\u00ed konfigurace za\u0159\u00edzen\u00ed\u201c. Ta je uchov\u00e1v\u00e1na v pam\u011bti za\u0159\u00edzen\u00ed a po jeho vypnut\u00ed bude ztracena. Proto mus\u00edme zapsat v\u0161e, co je v pracovn\u00ed konfiguraci, do spou\u0161t\u011bc\u00ed konfigurace. <\/p>\n<p>Bez ohledu na to, co je v pracovn\u00ed konfiguraci, p\u0159\u00edkaz \u201ewrite\u201c zkop\u00edruje tyto informace a zap\u00ed\u0161e je do souboru spou\u0161t\u011bc\u00ed konfigurace, kter\u00e1 nen\u00ed z\u00e1visl\u00e1 na pam\u011bti a nach\u00e1z\u00ed se v neodvolateln\u00e9 pam\u011bti za\u0159\u00edzen\u00ed NVRAM. P\u0159i startu za\u0159\u00edzen\u00ed syst\u00e9m kontroluje, zda je v NVRAM spou\u0161t\u011bc\u00ed konfigurace, a p\u0159evede ji na pracovn\u00ed konfiguraci t\u00edm, \u017ee na\u010dte parametry do opera\u010dn\u00ed pam\u011bti RAM. Ka\u017ed\u00fdkr\u00e1t, kdy\u017e pou\u017eijeme p\u0159\u00edkaz \u201ewrite\u201c, jsou parametry pracovn\u00ed konfigurace zkop\u00edrov\u00e1ny a ulo\u017eeny do NVRAM. <\/p>\n<p>Druh\u00fdm zp\u016fsobem, jak ulo\u017eit nastaven\u00ed konfigurace, je pou\u017eit\u00ed star\u00e9ho p\u0159\u00edkazu \u201edo write\u201c. Pokud tento p\u0159\u00edkaz pou\u017eijeme, mus\u00edme nejprve zadat slovo \u201ecopy\u201c. Pot\u00e9 se opera\u010dn\u00ed syst\u00e9m Cisco zept\u00e1, odkud m\u00e1 zkop\u00edrovat parametry nastaven\u00ed: z po\u010d\u00edta\u010dov\u00e9ho syst\u00e9mu p\u0159es ftp nebo flash, z pracovn\u00ed konfigurace nebo ze spou\u0161t\u011bc\u00ed konfigurace. Chceme vytvo\u0159it kopii parametr\u016f pracovn\u00ed konfigurace running-configuration, a tak tuto fr\u00e1zi zad\u00e1me do p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku. Pot\u00e9 se syst\u00e9m znovu zept\u00e1, kam maj\u00ed b\u00fdt parametry zkop\u00edrov\u00e1ny, a te\u010f uv\u00e1d\u00edme startup-configuration. T\u00edmto zp\u016fsobem jsme zkop\u00edrovali pracovn\u00ed konfiguraci do souboru spou\u0161t\u011bc\u00ed konfigurace.<\/p>\n<p>S t\u011bmito p\u0159\u00edkazy je t\u0159eba b\u00fdt velmi opatrn\u00fd, proto\u017ee pokud zkop\u00edrujete spou\u0161t\u011bc\u00ed konfiguraci do pracovn\u00ed konfigurace, co\u017e se n\u011bkdy d\u011bl\u00e1 p\u0159i nastavov\u00e1n\u00ed nov\u00e9ho switche, zma\u017eete v\u0161echny proveden\u00e9 zm\u011bny a z\u00edsk\u00e1te zaveden\u00ed s nulov\u00fdmi parametry. Je tedy nutn\u00e9 pozorn\u011b p\u0159istupovat k tomu, co a kde pl\u00e1nujete ulo\u017eit pot\u00e9, co provedete nastaven\u00ed parametr\u016f konfigurace switche. Takto ulo\u017e\u00edte konfiguraci a nyn\u00ed, pokud restartujete switch, vr\u00e1t\u00ed se do stavu, kter\u00fd m\u011bl p\u0159ed restartov\u00e1n\u00edm. <\/p>\n<p>Tak\u017ee jsme se pod\u00edvali na to, jak se nastavuj\u00ed z\u00e1kladn\u00ed parametry nov\u00e9ho switche. V\u00edm, \u017ee mnoz\u00ed z v\u00e1s poprv\u00e9 vid\u011bli rozhran\u00ed p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku za\u0159\u00edzen\u00ed, tak\u017ee m\u016f\u017ee chv\u00edli trvat, ne\u017e si osvoj\u00edte v\u0161e, co bylo uk\u00e1z\u00e1no v tomto videon\u00e1vodu. Doporu\u010duji sledovat toto video n\u011bkolikr\u00e1t, dokud nepochop\u00edte, jak pou\u017e\u00edvat r\u016fzn\u00e9 m\u00f3dy nastaven\u00ed konfigurace, u\u017eivatelsk\u00fd re\u017eim EXEC, privilegovan\u00fd re\u017eim EXEC, glob\u00e1ln\u00ed re\u017eim konfigurace, jak pou\u017e\u00edvat p\u0159\u00edkazov\u00fd \u0159\u00e1dek pro zad\u00e1v\u00e1n\u00ed podp\u0159\u00edkaz\u016f, m\u011bnit n\u00e1zev hostitele, vytv\u00e1\u0159et banner a tak d\u00e1le. <\/p>\n<p>Probrali jsme z\u00e1kladn\u00ed p\u0159\u00edkazy, kter\u00e9 byste m\u011bli zn\u00e1t a kter\u00e9 se pou\u017e\u00edvaj\u00ed p\u0159i po\u010d\u00e1te\u010dn\u00ed konfiguraci jak za\u0159\u00edzen\u00ed Cisco. Pokud zn\u00e1te p\u0159\u00edkazy pro switch, zn\u00e1te i p\u0159\u00edkazy pro router. <\/p>\n<p>Jednodu\u0161e si zapamatujte, z jak\u00e9ho re\u017eimu se ka\u017ed\u00fd z t\u011bchto z\u00e1kladn\u00edch p\u0159\u00edkaz\u016f vyd\u00e1v\u00e1. Nap\u0159\u00edklad n\u00e1zev hostitele a banner pro p\u0159ihl\u00e1\u0161en\u00ed jsou sou\u010d\u00e1st\u00ed glob\u00e1ln\u00ed konfigurace, pro p\u0159i\u0159azen\u00ed hesla na konzoli je t\u0159eba pou\u017e\u00edt konzoli, heslo Telnet se p\u0159i\u0159azuje v \u0159\u00e1dku VTY od nuly do 15. Pro spr\u00e1vu IP adresy je t\u0159eba pou\u017e\u00edt rozhran\u00ed VLAN. M\u011bli byste m\u00edt na pam\u011bti, \u017ee funkce \u201eenable\u201c je ve v\u00fdchoz\u00edm nastaven\u00ed zak\u00e1z\u00e1na, a proto ji mo\u017en\u00e1 budete muset povolit zad\u00e1n\u00edm p\u0159\u00edkazu \u201eno shutdown\u201c. <\/p>\n<p>Pokud pot\u0159ebujete p\u0159i\u0159adit v\u00fdchoz\u00ed br\u00e1nu, vstoup\u00edte do re\u017eimu glob\u00e1ln\u00ed konfigurace, pou\u017eijete p\u0159\u00edkaz \u201eip default-gateway\u201c a p\u0159i\u0159ad\u00edte br\u00e1n\u011b IP adresu. Nakonec ulo\u017e\u00edte proveden\u00e9 zm\u011bny pomoc\u00ed p\u0159\u00edkazu \u201ewrite\u201c nebo procedury kop\u00edrov\u00e1n\u00ed pracovn\u00ed konfigurace do souboru spou\u0161t\u011bc\u00ed konfigurace. Douf\u00e1m, \u017ee toto video bylo velmi informativn\u00ed a pomohlo v\u00e1m v osvojen\u00ed na\u0161eho s\u00ed\u0165ov\u00e9ho kurzu. <\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"v3IDxvEouFI\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/v3IDxvEouFI\/hqdefault.jpg\" alt=\"P\u0159ehr\u00e1t video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\nD\u011bkujeme, \u017ee s n\u00e1mi z\u016fst\u00e1v\u00e1te. L\u00edb\u00ed se v\u00e1m na\u0161e \u010dl\u00e1nky? Chcete vid\u011bt v\u00edce zaj\u00edmav\u00fdch materi\u00e1l\u016f? Podpo\u0159te n\u00e1s objedn\u00e1vkou nebo doporu\u010den\u00edm zn\u00e1m\u00fdm, <b>30 % sleva pro u\u017eivatele Habra na jedine\u010dn\u00fd analog entry-level server\u016f, kter\u00fd jsme pro v\u00e1s vymysleli:<\/b> <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/ua-hosting\/blog\/347386\/\">Ve\u0161ker\u00e1 pravda o VPS (KVM) E5-2650 v4 (6 jader) 10GB DDR4 240GB SSD 1Gbps od 20 $ nebo jak spr\u00e1vn\u011b rozd\u011blit server?<\/a><\/noindex> (k dispozici varianty s RAID1 a RAID10, a\u017e 24 jader a a\u017e 40GB DDR4).<\/p>\n<p><b>VPS (KVM) E5-2650 v4 (6 jader) 10GB DDR4 240GB SSD 1Gbps do l\u00e9ta zdarma<\/b> p\u0159i platb\u011b na obdob\u00ed del\u0161\u00ed ne\u017e \u0161est m\u011bs\u00edc\u016f, je mo\u017en\u00e9 objednat <noindex><a rel=\"nofollow\" href=\"https:\/\/ua-hosting.company\/vpsnl\">tady<\/a><\/noindex>.<\/p>\n<p><b>Dell R730xd za polovinu ceny?<\/b> Jen u n\u00e1s <b><noindex><a rel=\"nofollow\" href=\"https:\/\/ua-hosting.company\/serversnl\">2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TB od 199 $<\/a><\/noindex> v Nizozemsku! <b>Dell R420 \u2014 2x E5-2430 2.2GHz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 od 99 $!<\/b><\/b> \u010ct\u011bte o tom <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/ua-hosting\/blog\/329618\/\">Jak postavit infrastrukturu podnikov\u00e9 t\u0159\u00eddy s pou\u017eit\u00edm server\u016f Dell R730xd E5-2650 v4 v hodnot\u011b 9000 eur za pakatel?<\/a><\/noindex><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ua-hosting\/blog\/454644\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u0432 \u043c\u0438\u0440 \u0441\u0432\u0438\u0442\u0447\u0435\u0439! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043c, \u0447\u0442\u043e \u0432\u044b \u2013 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0435\u0441\u044c \u0432 \u043e\u0444\u0438\u0441\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041a \u0432\u0430\u043c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0441\u043e \u0441\u0432\u0438\u0442\u0447\u0435\u043c \u00ab\u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438\u00bb \u0438 \u043f\u0440\u043e\u0441\u0438\u0442 \u0435\u0433\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432\u044b \u043f\u043e\u0434\u0443\u043c\u0430\u043b\u0438, \u0447\u0442\u043e \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u043e\u0431\u044b\u0447\u043d\u043e\u043c \u044d\u043b\u0435\u043a\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u0435\u043b\u0435 (\u0432 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u043c \u044f\u0437\u044b\u043a\u0435 \u0441\u043b\u043e\u0432\u043e switch \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440, \u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26316,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34970","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u0432 \u043c\u0438\u0440 \u0441\u0432\u0438\u0442\u0447\u0435\u0439! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043c, \u0447\u0442\u043e \u0432\u044b \u2013 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0435\u0441\u044c \u0432 \u043e\u0444\u0438\u0441\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-8-nastrojka-svitcha\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0422\u0440\u0435\u043d\u0438\u043d\u0433 Cisco 200-125 CCNA v3.0. \u0414\u0435\u043d\u044c 8. \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0441\u0432\u0438\u0442\u0447\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u0432 \u043c\u0438\u0440 \u0441\u0432\u0438\u0442\u0447\u0435\u0439! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043c, \u0447\u0442\u043e \u0432\u044b \u2013 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0435\u0441\u044c \u0432 \u043e\u0444\u0438\u0441\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-8-nastrojka-svitcha\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:01:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:01:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u0160kolen\u00ed Cisco 200-125 CCNA v3.0. Den 8. Konfigurace switch\u016f | ProHoster","description":"V\u00edtejte ve sv\u011bt\u011b switch\u016f! Dnes si promluv\u00edme o s\u00ed\u0165ov\u00fdch p\u0159ep\u00edna\u010d\u00edch. P\u0159edpokl\u00e1d\u00e1me, \u017ee jste s\u00ed\u0165ov\u00fd administr\u00e1tor a nach\u00e1z\u00edte se v kancel\u00e1\u0159i nov\u00e9 spole\u010dnosti.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-8-nastrojka-svitcha","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0440\u0435\u043d\u0438\u043d\u0433 Cisco 200-125 CCNA v3.0. \u0414\u0435\u043d\u044c 8. \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0441\u0432\u0438\u0442\u0447\u0430 | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u0432 \u043c\u0438\u0440 \u0441\u0432\u0438\u0442\u0447\u0435\u0439! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043c, \u0447\u0442\u043e \u0432\u044b \u2013 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0435\u0441\u044c \u0432 \u043e\u0444\u0438\u0441\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-8-nastrojka-svitcha","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:01:34+00:00","article:modified_time":"2019-10-31T19:01:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34970","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 21:20:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:12:27","updated":"2026-01-21 21:20:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/34970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=34970"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/34970\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/26316"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=34970"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=34970"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=34970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}