20CN网络安全小组论坛 - 系统集成

论坛: 系统集成标题: 配置Vlan

作者: zcl [zcl]

论坛用户

经典配置 Vlan篇

--------------------------------------------------------------------------------

Catalyst 5000 参数

源码:

实验命令

clear ip permit

clear ip route

clear vlan

clear vtp

debug ip packet

ping

set interface sc0

set ip permit

set ip route

set vlan

set vtp

show cam

show config

show flash

show interface

show ip permit

show ip route

show log

show mac

show module

show port

show system

show users

show version

show vlan

show vtp

telnet

配置说明

1.R1

2.R2

3.R3

4.R4

5.R5

6.R6

7.CAT5K

R1

Current configuration:

!

version 11.2

no service password-encryption

!

hostname r1

!

enable password cisco

!

!

!

interface Ethernet0

ip address 130.10.7.1 255.255.255.0

no ip directed-broadcast

no ip mroute-cache

!

interface Serial0

ip address 130.10.1.1 255.255.255.0

encapsulation frame-relay

ip ospf network point-to-multipoint

!

interface Serial1

ip address 130.10.4.1 255.255.255.0

clockrate 2000000

!

interface BRI0

no ip address

no ip directed-broadcast

no ip mroute-cache

shutdown

!

router ospf 10

redistribute connected subnets

network 130.10.1.0 0.0.0.255 area 0

network 130.10.4.0 0.0.0.255 area 1

network 130.10.7.0 0.0.0.255 area 2

!

no ip classless

!

!

line con 0

line aux 0

line vty 0 4

password cisco

login

!

end

R2

Current configuration:

!

version 11.2

no service password-encryption

no service udp-small-servers

no service tcp-small-servers

!

hostname R2

!

enable password cisco

!

!

!

interface Serial0

ip address 130.10.4.2 255.255.255.0

no fair-queue

!

interface Serial1

no ip address

shutdown

!

interface TokenRing0

ip address 130.10.5.2 255.255.255.0

ring-speed 16

!

router ospf 20

network 130.10.5.0 0.0.0.255 area 1

network 130.10.4.0 0.0.0.255 area 1

!

no ip classless

!

!

line con 0

line aux 0

line vty 0 4

password cisco

login

!

end

R3

Current configuration:

!

version 11.2

no service password-encryption

no service udp-small-servers

no service tcp-small-servers

!

hostname R3

!

enable password cisco

!

!

!

interface Serial0

no ip address

shutdown

no fair-queue

!

interface Serial1

no ip address

shutdown

!

interface TokenRing0

ip address 130.10.5.3 255.255.255.0

ring-speed 16

!

interface TokenRing1

ip address 130.10.6.3 255.255.255.0

ring-speed 16

!

router ospf 30

redistribute connected subnets

network 130.10.5.0 0.0.0.255 area 1

!

no ip classless

!

!

line con 0

line aux 0

line vty 0 4

password cisco

login

!

end

R5

Current configuration:

!

version 11.2

no service password-encryption

no service udp-small-servers

no service tcp-small-servers

!

hostname R5

!

enable password cisco

!

!

!

interface Ethernet0

ip address 130.10.3.5 255.255.255.0

no ip directed-broadcast

no ip route-cache

no ip mroute-cache

no mop enabled

!

interface Serial0

ip address 130.10.1.5 255.255.255.0

encapsulation frame-relay

ip ospf network point-to-multipoint

frame-relay map ip 130.10.1.1 100 broadcast

frame-relay map ip 130.10.1.6 100 broadcast

!

interface Serial1

no ip address

shutdown

!

router ospf 50

redistribute connected subnets

network 130.10.1.0 0.0.0.255 area 0

network 130.10.3.0 0.0.0.255 area 2

!

no ip classless

!

!

line con 0

line aux 0

line vty 0 4

password cisco

login

!

end

R6

Current configuration:

!

version 11.2

no service password-encryption

!

hostname R6

!

enable password cisco

!

!

!

interface Serial0

ip address 130.10.1.6 255.255.255.0

encapsulation frame-relay

ip ospf network point-to-multipoint

frame-relay map ip 130.10.1.1 110 broadcast

frame-relay map ip 130.10.1.5 110 broadcast

!

interface Serial1

no ip address

no ip mroute-cache

shutdown

!

interface TokenRing0

ip address 130.10.2.6 255.255.255.0

ring-speed 16

!

interface BRI0

no ip address

shutdown

!

router ospf 60

redistribute connected subnets

network 130.10.1.0 0.0.0.255 area 0

!

no ip classless

!

!

line con 0

line aux 0

line vty 0 4

password cisco

login

!

end

CAT5K

begin

set password $1$0o8Z$GDCVUXu2Kn3mgBDKwF00h1

set enablepass $1$0o8Z$GDCVUXu2Kn3mgBDKwF00h1

set prompt Cat5k>

set length 24 default

set logout 20

set banner motd ^C^C

!

#system

set system baud 9600

set system modem disable

set system name

set system location

set system contact

!

#snmp

set snmp community read-only public

set snmp community read-write private

set snmp community read-write-all secret

set snmp rmon disable

set snmp trap disable module

set snmp trap disable chassis

set snmp trap disable bridge

set snmp trap disable repeater

set snmp trap disable vtp

set snmp trap disable auth

set snmp trap disable ippermit

set snmp trap disable vmps

set snmp trap disable entity

set snmp trap disable config

set snmp trap disable stpx

!

#ip

set interface sc0 2 130.10.7.100 255.255.255.0 130.10.7.255

set interface sc0 up

set interface sl0 0.0.0.0 0.0.0.0

set interface sl0 up

set arp agingtime 1200

set ip redirect enable

set ip unreachable enable

set ip fragmentation enable

set ip route 0.0.0.0 130.10.7.1 1

set ip alias default 0.0.0.0

!

#Command alias

!

#vmps

set vmps server retry 3

set vmps server reconfirminterval 60

set vmps tftpserver 0.0.0.0 vmps-config-database.1

set vmps state disable

!

#dns

set ip dns disable

!

#tacacs+

set tacacs attempts 3

set tacacs directedrequest disable

set tacacs timeout 5

set authentication login tacacs disable

set authentication login local enable

set authentication enable tacacs disable

set authentication enable local enable

!

#bridge

set bridge ipx snaptoether 8023raw

set bridge ipx 8022toether 8023

set bridge ipx 8023rawtofddi snap

!

#vtp

set vtp domain cisco

set vtp mode server

set vtp passwd cisco

set vtp v2 disable

set vtp pruning disable

set vtp pruneeligible 2-1000

clear vtp pruneeligible 1001-1005

set vlan 1 name default type ethernet mtu 1500 said 100001 state active

set vlan 2 name VLAN2 type ethernet mtu 1500 said 100002 state active

set vlan 3 name VLAN3 type ethernet mtu 1500 said 100003 state active

set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active

set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active

set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active

set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state active

!

#spantree

#uplinkfast groups

set spantree uplinkfast disable

#backbonefast

set spantree backbonefast disable

#vlan 1

set spantree enable 1

set spantree fwddelay 15 1

set spantree hello 2 1

set spantree maxage 20 1

set spantree priority 32768 1

#vlan 2

set spantree enable 2

set spantree fwddelay 15 2

set spantree hello 2 2

set spantree maxage 20 2

set spantree priority 32768 2

#vlan 3

set spantree enable 3

set spantree fwddelay 15 3

set spantree hello 2 3

set spantree maxage 20 3

set spantree priority 32768 3

#vlan 1003

set spantree enable 1003

set spantree fwddelay 4 1003

set spantree hello 2 1003

set spantree maxage 10 1003

set spantree priority 32768 1003

set spantree portstate 1003 auto 0

set spantree portcost 1003 62

set spantree portpri 1003 4

set spantree portfast 1003 disable

#vlan 1005

set spantree disable 1005

set spantree fwddelay 4 1005

set spantree hello 2 1005

set spantree maxage 10 1005

set spantree priority 32768 1005

set spantree multicast-address 1005 ieee

!

#cgmp

set cgmp disable

set cgmp leave disable

!

#syslog

set logging console enable

set logging server disable

set logging level cdp 2 default

set logging level mcast 2 default

set logging level disl 5 default

set logging level dvlan 2 default

set logging level earl 2 default

set logging level fddi 2 default

set logging level ip 2 default

set logging level pruning 2 default

set logging level snmp 2 default

set logging level spantree 2 default

set logging level sys 5 default

set logging level tac 2 default

set logging level tcp 2 default

set logging level telnet 2 default

set logging level tftp 2 default

set logging level vtp 2 default

set logging level vmps 2 default

set logging level kernel 2 default

set logging level filesys 2 default

set logging level drip 2 default

set logging level pagp 5 default

set logging level mgmt 5 default

set logging level mls 5 default

set logging level protfilt 2 default

!

#ntp

set ntp broadcastclient disable

set ntp broadcastdelay 3000

set ntp client disable

clear timezone

set summertime disable

!

#permit list

set ip permit enable

set ip permit 130.10.1.6 255.255.255.255

set ip permit 130.10.2.6 255.255.255.255

!

#drip

set tokenring reduction enable

set tokenring distrib-crf disable

!

#igmp

set igmp disable

!

#module 1 : 2-port 100BaseTX Supervisor

set module name 1

set vlan 1 1/1-2

set port enable 1/1-2

set port level 1/1-2 normal

set port duplex 1/1-2 half

set port trap 1/1-2 disable

set port name 1/1-2

set port security 1/1-2 disable

set port membership 1/1-2 static

set cdp enable 1/1-2

set cdp interval 1/1-2 60

set trunk 1/1 on isl 1-1005

set trunk 1/2 auto isl 1-1005

set spantree portfast 1/1-2 disable

set spantree portcost 1/1-2 19

set spantree portpri 1/1-2 32

set spantree portvlanpri 1/1 0

set spantree portvlanpri 1/2 0

set spantree portvlancost 1/1 cost 18

set spantree portvlancost 1/2 cost 18

!

#module 2 : 12-port 10/100BaseTX Ethernet

set module name 2

set module enable 2

set vlan 1 2/1-4

set vlan 2 2/5-8

set vlan 3 2/9-12

set port enable 2/1-12

set port level 2/1-12 normal

set port speed 2/1-12 auto

set port trap 2/1-12 disable

set port name 2/1-12

set port security 2/1-12 disable

set port broadcast 2/1-12 0

set port membership 2/1-12 static

set cdp enable 2/1-12

set cdp interval 2/1-12 60

set trunk 2/1 auto isl 1-1005

set trunk 2/2 auto isl 1-1005

set trunk 2/3 auto isl 1-1005

set trunk 2/4 auto isl 1-1005

set trunk 2/5 auto isl 1-1005

set trunk 2/6 auto isl 1-1005

set trunk 2/7 auto isl 1-1005

set trunk 2/8 auto isl 1-1005

set trunk 2/9 auto isl 1-1005

set trunk 2/10 auto isl 1-1005

set trunk 2/11 auto isl 1-1005

set trunk 2/12 auto isl 1-1005

set spantree portfast 2/1-12 disable

set spantree portcost 2/1-12 100

set spantree portpri 2/1-12 32

set spantree portvlanpri 2/1 0

set spantree portvlanpri 2/2 0

set spantree portvlanpri 2/3 0

set spantree portvlanpri 2/4 0

set spantree portvlanpri 2/5 0

set spantree portvlanpri 2/6 0

set spantree portvlanpri 2/7 0

set spantree portvlanpri 2/8 0

set spantree portvlanpri 2/9 0

set spantree portvlanpri 2/10 0

set spantree portvlanpri 2/11 0

set spantree portvlanpri 2/12 0

set spantree portvlancost 2/1 cost 99

set spantree portvlancost 2/2 cost 99

set spantree portvlancost 2/3 cost 99

set spantree portvlancost 2/4 cost 99

set spantree portvlancost 2/5 cost 99

set spantree portvlancost 2/6 cost 99

set spantree portvlancost 2/7 cost 99

set spantree portvlancost 2/8 cost 99

set spantree portvlancost 2/9 cost 99

set spantree portvlancost 2/10 cost 99

set spantree portvlancost 2/11 cost 99

set spantree portvlancost 2/12 cost 99

!

#module 3 empty

!

#module 4 empty

!

#module 5 empty

!

#switch port analyzer

set span disable

!

#cam

set cam agingtime 1-3,1003,1005 300

end

地主发表时间: 03/16 12:17

回复: zcl [zcl]

论坛用户

很用的噢!

B1层发表时间: 03/21 16:28

论坛: 系统集成