Catalyst 4006交换机的配置实例WS-X4013引擎+ WS-X4232-L3路由模块

一、CAT4006引擎模块WS-X4013的配置清单
（其中包括：基本设置、VLAN的配置、通道配置、以及端口镜像口的1/2设置连接千兆IDS）

Cisco Systems, Inc. Console

Enter password:
CAT4006> enable

Enter password:
CAT40 06> (enable)
.......
..................
..................
....................
....................
..

begin
!
# ***** NON-DEFAULT CONFIGURATION *****
!
!
#time: Mon Apr 11 2005, 22:02:13
!
#version 6.1(1)
!
!
#system web interface version(s)
set password *********************
set enablepass *********************
!
#test
!
#system
set system name CAT4006
!
#frame distribution method
set port channel all distribution mac both
!
#vtp
set vtp domain hngazk
set vlan 1 name default type ethernet mtu 1500 said 100001 state active
set vlan 16 name Old_Bangong type ethernet mtu 1500 said 100016 state active
set vlan 17 name Server_Manage type ethernet mtu 1500 said 100017 state active
set vlan 18 name New_Bangong type ethernet mtu 1500 said 100018 state active
set vlan 19 name Library type ethernet mtu 1500 said 100019 state active
set vlan 20 name New_Shiyanzhongxin type ethernet mtu 1500 said 100020 state active
set vlan 22 name Old_Shiyanzhongxin type ethernet mtu 1500 said 100022 state active
set vlan 23 name CaiZhuan_Jiashuyuan type ethernet mtu 1500 said 100023 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active stp ieee
set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active stp ibm
set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state active mode srb aremaxhop 0 stemaxhop 0 backupcrf off
!
#ip
set interface sc0 17 21x.xxx.17.253/255.255.255.0 21x.xxx.xxx.255

set interface sl0 down
set interface me1 down
set ip route 0.0.0.0/0.0.0.0 21x.xxx.xxx.254
!
#dns
set ip dns server 21x.xxx.xxx.2 primary
set ip dns enable
!
#syslog
set logging level cops 2 default
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat4000.6-1-1.bin
!
#mls
set mls nde disable
!
#port channel
set port channel 3/1-4 636
!
#module 1 : 2-port 1000BaseX Supervisor
set udld enable 1/1
set trunk 1/1 nonegotiate dot1q 1-1005
set trunk 1/2 nonegotiate dot1q 1-1005
!
#module 2 : 6-port 1000BaseX Ethernet
set vlan 20 2/3
set port name 2/1 Old_Shiyanzhongxin
set port name 2/2 Library
set port name 2/3 New_Shiyanzhongxin
set port name 2/4 New_Bangong
set port name 2/5 CaiZhuan_Jiashuyuan
set port name 2/6 Old_Shiyanzhongxin
set udld enable 2/6
set udld disable 2/3
set trunk 2/1 nonegotiate dot1q 1-1005
set trunk 2/2 nonegotiate dot1q 1-1005
set trunk 2/3 nonegotiate dot1q 1-1005
set trunk 2/4 nonegotiate dot1q 1-1005
set trunk 2/5 nonegotiate dot1q 1-1005
set trunk 2/6 nonegotiate dot1q 1-1005
!
#module 3 : 34-port Router Switch Card
set vlan 16 3/3-9,3/11-19,3/26-34
set vlan 17 3/10,3/20
set vlan 18 3/21
set vlan 19 3/22
set vlan 20 3/23
set vlan 22 3/24
set vlan 23 3/25
set port name 3/1 Firewall_Talent
set trunk 3/1 nonegotiate dot1q 1-1005
set trunk 3/2 nonegotiate dot1q 1-1005
set port channel 3/1-2 mode on
!
#module 4 : 34-port 10/100/1000 Ethernet
set vlan 16 4/5-9,4/11,4/15-34
set vlan 17 4/3-4,4/10,4/12-14
set trunk 4/1 nonegotiate dot1q 1-1005
set trunk 4/2 nonegotiate dot1q 1-1005
!
#module 5 empty
!
#module 6 empty
!
#switch port analyzer
set span 2/1-6,3/1-34,4/1-34 1/2 both inpkts disable learning enable create
end
CAT4006> (enable)

二、WS-X4232-L3三层路由模块的配置清单
（其中包括：VLAN路由、访问控制列表、三层模块与交换机背板通道的配置等等）

WS-X4232-L3#
Using 4055 out of 126968 bytes
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname WS-X4232-L3
!
enable secret 5 *****************
enable password **********
!
ip subnet-zero
!
!
!
interface Port-channel1
no ip address
no ip directed-broadcast
hold-queue 300 in
!
interface Port-channel1.1
encapsulation dot1Q 1 native
ip address 10.10.1.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.16
encapsulation dot1Q 16
ip address 21x.xxx.16.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.17
encapsulation dot1Q 17
ip address 21x.xxx.17.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.18
encapsulation dot1Q 18
ip address 21x.xxx.18.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.19
encapsulation dot1Q 19
ip address 21x.xxx.19.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.20
encapsulation dot1Q 20
ip address 21x.xxx.21.254 255.255.254.0 secondary
ip address 21x.xxx.20.254 255.255.254.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.22
encapsulation dot1Q 22
ip address 21x.xxx.22.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.23
encapsulation dot1Q 23
ip address 21x.xxx.23.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface FastEthernet1
no ip address
no ip directed-broadcast
shutdown
!
interface GigabitEthernet1
ip address 21x.xxx.xxx.xxx 255.255.255.240
ip access-group 110 in
ip access-group 110 out
no ip directed-broadcast
!
interface GigabitEthernet2
no ip address
no ip directed-broadcast
!
interface GigabitEthernet3
no ip address
no ip directed-broadcast
no negotiation auto
channel-group 1
!
interface GigabitEthernet4
no ip address
no ip directed-broadcast
no negotiation auto
channel-group 1
!
ip classless
ip route 0.0.0.0 0.0.0.0 2xx.xxx.xxx.xxx
!
access-list 110 deny tcp any any eq echo
access-list 110 deny tcp any any eq chargen
access-list 110 deny tcp any any eq 135
access-list 110 deny tcp any any eq 136
access-list 110 deny tcp any any eq 137
access-list 110 deny tcp any any eq 138
access-list 110 deny tcp any any eq 139
access-list 110 deny tcp any any eq 389
access-list 110 deny tcp any any eq 445
access-list 110 deny tcp any any eq 4444
access-list 110 deny udp any any eq tftp
access-list 110 deny udp any any eq 135
access-list 110 deny udp any any eq 136
access-list 110 deny udp any any eq netbios-ns
access-list 110 deny udp any any eq netbios-dgm
access-list 110 deny udp any any eq netbios-ss
access-list 110 deny udp any any eq 389
access-list 110 deny udp any any eq 445
access-list 110 deny udp any any eq 1434
access-list 110 deny udp any any eq 1433
access-list 110 deny udp any any eq 1025
access-list 110 deny udp any any eq 455
access-list 110 deny udp any any eq 5554
access-list 110 deny udp any any eq 9996
access-list 110 deny udp any any eq 6129
access-list 110 deny udp any any eq 3127
access-list 110 deny udp any any eq 2745
access-list 110 deny tcp any any eq 6669
access-list 110 deny tcp any any eq 1023
access-list 110 deny tcp any any eq 1024
access-list 110 deny tcp any any eq 3332
access-list 110 deny tcp any any eq 69
access-list 110 deny udp any any eq 593
access-list 110 deny tcp any any eq 593
access-list 110 permit ip any any
arp 127.0.0.2 0005.5e73.9300 ARPA
!
line con 0
transport input none
line aux 0
line vty 0 4
password **********
login
!
end

[1] [2] 下一页  

文章录入：csh    责任编辑：csh 

WS-X4232-L3#

上一页  [1] [2] 

文章录入：csh    责任编辑：csh

赞 (0)

相关推荐

  • Catalyst 4006交换机的配置实例WS-X4013引擎+ WS-X4232-L3路由模块

    一.CAT4006引擎模块WS-X4013的配置清单(其中包括:基本设置.VLAN的配置.通道配置.以及端口镜像口的1/2设置连接千兆IDS) Cisco Systems, Inc. Console Enter password: CAT4006> enable Enter password: CAT40 06> (enable) ....... .................. .................. .................... ...............

  • spring boot application properties配置实例代码详解

    废话不多说了,直接给大家贴代码了,具体代码如下所示: # =================================================================== # COMMON SPRING BOOT PROPERTIES # # This sample file is provided as a guideline. Do NOT copy it in its # entirety to your own application. ^^^ # ========

  • ThinkPHP 在阿里云上的nginx.config配置实例详解

    具体代码如下所示: # For more information on configuration, see: # * Official English Documentation: http://nginx.org/en/docs/ # * Official Russian Documentation: http://nginx.org/ru/docs/ user nginx; worker_processes auto; error_log /var/log/nginx/error.log;

  • springmvc与mybatis集成配置实例详解

    简单之美,springmvc,mybatis就是一个很好的简单集成方案,能够满足一般的项目需求.闲暇时间把项目配置文件共享出来,供大家参看: 1.首先我们来看下依赖的pom: <!-- spring --> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-core</artifactId> <version>${spring.ve

  • log4j.properties 配置(实例讲解)

    1.需要的jar如下: !-- log4j --> <dependency> <groupId>log4j</groupId> <artifactId>log4j</artifactId> <version>1.2.17</version> </dependency> <dependency> <groupId>org.slf4j</groupId> <artif

  • Nginx 多站点配置实例详解

    Nginx 多站点配置实例详解 在一台 VPS 上,我们有时候需要同时跑几个 virtualenv.比如 virtualenv app1 跑的是 Django 的一个应用,而 virtualenv app2 跑的是 Tornado.那么如何配置 Nginx,让它同时支持这两个 virtualenv 的运行呢? 首先是 Nginx 的主配置,位于 etc/nginx/ngnix.conf,让它保持默认就行: user nginx; worker_processes 1; error_log /va

  • Trunk配置实例

    一台4506switch,通过trunk口和3550连接,在3550下再通过trunk接6台交换机!具体配置如下:4506:在int gi4/1上做trunk,encapsulation dot1q                vtp domain cisco              vtp mode server划分了10个vlan3550:做了6个trunk口和下面的6太交换机连接!                int range fa0/1-6              switch

  • 决战在边缘之思科Catalyst系列交换机

    看似普通的常识,却往往最易被人忽略.企业网络建设中,核心层的重要性不言而喻,但是边缘层更需要您的重视:没有牢不可破的边缘层,可靠的核心层又从何谈起? 第一部分 网络创造效益,同时,也需要全面保护. 现代企业游刃于智能网络系统中,享受着网络带来方便.快速.高效的业务环境,同时也在对网络提出更高的要求:无线网络环境的疆界越来越广,随时随地的接入环境:网络提供越来越多的应用功能,大量高速的数据传输,话音.多媒体信息交流:而且网络还要变得越来越聪明,变得越来越容易交流. 于是,建立基于功能强大的核心层的

  • Vue 中axios配置实例详解

    1.GET 请求 //向具有指定ID的用户发出请求 axios.get('/user?ID=12345') .then(function (response) { console.log(response); }) .catch(function (error) { console.log(error); }); // 也可以通过 params 对象传递参数 axios.get('/user', { params: { ID: 12345 } }) .then(function (respons

  • linux expect 自动登录交换机保存配置的方法

    telnet.exp 文件内容如下: #!/usr/bin/expect -f set ip [lindex $argv 0 ] set username [lindex $argv 1 ] set password [lindex $argv 2 ] set superpassword [lindex $argv 3 ] set timeout 10 spawn telnet $ip expect { "name" { send "$username\r";exp

随机推荐