您好,登錄后才能下訂單哦!
這是以前工作總結(jié)出來的配置代碼,當(dāng)時是為了方便所帶的人容易上手。
代碼以交換為主,架構(gòu)上分為核心層、分布層、接入層三層,部分相同的代碼有簡略。
簡單的幾條指令,你即可快速上手,在工作中即可應(yīng)用。
#-----------虛擬接口--------------------------- #1)管理地址 interface Vlanif1 description Management ip address 192.168.250.197 255.255.255.0 dhcp select relay dhcp relay server-select dhcpgroup1 # #2)核心交換虛擬網(wǎng)關(guān)接口 interface Vlanif2 description Server ip address 192.168.1.2 255.255.255.0 # interface Vlanif3 description office ip address 192.168.0.2 255.255.255.0 dhcp select relay dhcp relay server-select dhcpgroup1 #-----------Trunk------------------------------------ interface GigabitEthernet0/0/24 port link-type trunk port trunk allow-pass vlan 2 to 100 ntdp enable ndp enable bpdu enable #-----------Eth Trunk------------------------------- interface Eth-Trunk1 port link-type trunk port trunk allow-pass vlan 2 to 4094 interface GigabitEthernet0/0/1 eth-trunk 1 interface GigabitEthernet0/0/2 eth-trunk 1 #-----------IP ROUTE--------------------- 1)核心交換靜態(tài)路由 ip route-static 0.0.0.0 0.0.0.0 10.16.0.1 ip route-static 1.1.1.0 255.255.255.0 192.168.9.101 ip route-static 10.0.0.0 255.255.0.0 192.168.9.100 1)分布層接入層 ip route-static 0.0.0.0 0.0.0.0 192.168.250.1 #-----------VLAN----------------------------- vlan 1 description Management vlan 2 description Server vlan 3 description office interface GigabitEthernet 0/0/11 #-----------DHCP服務(wù)器聲明----------------------------- dhcp server group dhcpgroup1 dhcp-server 192.168.1.250 0 #-----------Access Port------------------------------ #1)defaule interface GigabitEthernet0/0/1 port link-type access port default vlan 3 stp disable stp edged-port enable ntdp enable ndp enable #2)POE config interface GigabitEthernet0/0/1 port hybrid pvid vlan 2 port hybrid tagged vlan 9 92 port hybrid untagged vlan 2 stp edged-port enable undo poe enable #-----------認證--------------------------------------------------- #1)全局配置 super password level 1 cipher *** super password level 2 cipher *** super password level 3 cipher *** #2)Console配置 user-interface con 0 authentication-mode password set authentication password cipher a:FL2/KX#^;Q=^Q`MAF4<1!! idle-timeout 5 0 #3)VTY配置 user-interface vty 0 4 authentication-mode password idle-timeout 15 0 user privilege level 3 #-----------STP--------------------------------------------------- #1)公共配置 stp mode rstp stp enable stp pathcost-standard legacy #2)核心層交換 stp instance 0 root primary stp enable #3)分布層交換 stp instance 0 priority 8192 stp enable #4)接入層交換 stp instance 0 priority 16384 stp enable stp mode mstp #5)接入端口配置 stp edged-port enable #-----------LLDP-------------------------------------------------- lldp enable #-----------VRRP-------------------------------------------------- #1)Master交換機: interface Vlanif1 description Management ip address 192.168.250.250 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.250.1 vrrp vrid 1 priority 120 vrrp vrid 1 preempt-mode timer delay 20 #2)Slave交換機: interface Vlanif1 description Management ip address 192.168.250.251 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.250.1 #-----------SystemName------------------------------------------------------ systemname XXXX 192.168.2.X #--------------------------------------------------------------- storm-control broadcast min-rate 1000 max-rate 2000 storm-control multicast min-rate 1000 max-rate 2000 storm-control unicast min-rate 1000 max-rate 2000 storm-control interval 90 storm-control action block storm-control enable log
免責(zé)聲明:本站發(fā)布的內(nèi)容(圖片、視頻和文字)以原創(chuàng)、轉(zhuǎn)載和分享為主,文章觀點不代表本網(wǎng)站立場,如果涉及侵權(quán)請聯(lián)系站長郵箱:is@yisu.com進行舉報,并提供相關(guān)證據(jù),一經(jīng)查實,將立刻刪除涉嫌侵權(quán)內(nèi)容。