配置管理IP

console口登錄配置

sys

vlan 100

sys

interface Vlanif 100

ip address 192.168.100.20 255.255.248.0

配置telnet 登陸

[quidway]user-interface vty 0 4
[quidway-aux0]authentication-mode {none|password|scheme}    //設(shè)置登錄的驗(yàn)證方法。none是不要驗(yàn)證，password是密碼驗(yàn)證，scheme是服務(wù)器驗(yàn)證。
[quidway-aux0]set authentication password {cipher|simple} 123456     //當(dāng)上面的模式為 paaword時(shí)，設(shè)置驗(yàn)證的密碼。simple是明文密碼。
[quidway-aux0]user privilege level 2                        //設(shè)置從AUX登錄后可以訪問的命令級(jí)別為2級(jí)，默認(rèn)是1級(jí)。
[quidway-aux0]protocol inbund {all |ssh|telnet}             //設(shè)置交換機(jī)支持的協(xié)議
[quidway-aux0]screen-length 30                              //設(shè)置一屏顯示30行命令
[quidway-aux0]history-command max-size 20                   //設(shè)置歷史命令緩沖區(qū)最多存放20條命令
[quidway-aux0]idle-timeout 6                                //設(shè)置超時(shí)時(shí)間為6分鐘

<quidway>super 3                                            //將普通用戶通過TELNET登錄到交換機(jī)，將用戶級(jí)別切換到3級(jí)。

（3)超級(jí)用戶密碼（用戶級(jí)別）

[quidway]super password level 3 {cipher|simper} 123456      //設(shè)置低級(jí)別用戶到高級(jí)別用戶切換的密碼

<quidway>super 3  

注意：命令行級(jí)別分為：0，1，2，3 共四級(jí)。
訪問級(jí)（0級(jí)）：用于網(wǎng)絡(luò)診斷等功能的命令。包括ping ,tracert,telnet等。
監(jiān)控級(jí)（1級(jí)）：用于系統(tǒng)維護(hù)、業(yè)務(wù)故障診斷等功能命令。包括debugging\terminal等命令。執(zhí)和地該級(jí)別的命令結(jié)果不能被保存到配置文件中。
系統(tǒng)級(jí)（2級(jí)）：用于業(yè)務(wù)配置的命令。包括路由等網(wǎng)絡(luò)層次的命令，用于向用戶提供網(wǎng)絡(luò)服務(wù)。
管理級(jí)（3級(jí)）：關(guān)系到系統(tǒng)的基本運(yùn)行、系統(tǒng)支撐模塊功能的命令，這些命令對(duì)業(yè)務(wù)的支持，最后級(jí)別。
默認(rèn)：console口的命令登錄級(jí)別為3， telnet 方式的級(jí)別為0。

配置端口為access模式

interface GigabitEthernet 0/0/1

port link-type access

quit

interface GigabitEthernet 0/0/2

port link-type access

quit

interface GigabitEthernet 0/0/3

port link-type access

quit

interface GigabitEthernet 0/0/4

port link-type access

quit

interface GigabitEthernet 0/0/5

port link-type access

quit

interface GigabitEthernet 0/0/6

port link-type access

quit

interface GigabitEthernet 0/0/7

port link-type access

quit

interface GigabitEthernet 0/0/8

port link-type access

quit

interface GigabitEthernet 0/0/9

port link-type access

quit

interface GigabitEthernet 0/0/10

port link-type access

quit

interface GigabitEthernet 0/0/11

port link-type access

quit

interface GigabitEthernet 0/0/12

port link-type access

quit

interface GigabitEthernet 0/0/13

port link-type access

quit

interface GigabitEthernet 0/0/14

port link-type access

quit

interface GigabitEthernet 0/0/15

port link-type access

quit

interface GigabitEthernet 0/0/16

port link-type access

quit

interface GigabitEthernet 0/0/17

port link-type access

quit

interface GigabitEthernet 0/0/18

port link-type access

quit

interface GigabitEthernet 0/0/19

port link-type access

quit

interface GigabitEthernet 0/0/20

port link-type access

quit

interface GigabitEthernet 0/0/21

port link-type access

quit

interface GigabitEthernet 0/0/22

port link-type access

quit

interface GigabitEthernet 0/0/23

port link-type access

quit

interface GigabitEthernet 0/0/24

port link-type access

quit

將端口加入到vlan中

vlan 1

port GigabitEthernet 0/0/1

quit

vlan 1

port GigabitEthernet 0/0/2

quit

vlan 1

port GigabitEthernet 0/0/3

quit

vlan 1

port GigabitEthernet 0/0/4

quit

vlan 2

port GigabitEthernet 0/0/5

quit

vlan 3

port GigabitEthernet 0/0/6

quit

vlan 4

port GigabitEthernet 0/0/7

quit

vlan 5

port GigabitEthernet 0/0/8

quit

vlan 6

port GigabitEthernet 0/0/9

quit

vlan 7

port GigabitEthernet 0/0/10

quit

vlan 8

port GigabitEthernet 0/0/11

quit

vlan 9

port GigabitEthernet 0/0/12

quit

vlan 10

port GigabitEthernet 0/0/13

quit

vlan 11

port GigabitEthernet 0/0/14

quit

vlan 12

port GigabitEthernet 0/0/15

quit

vlan 13

port GigabitEthernet 0/0/16

quit

vlan 14

port GigabitEthernet 0/0/17

quit

vlan 15

port GigabitEthernet 0/0/18

quit

vlan 16

port GigabitEthernet 0/0/19

port GigabitEthernet 0/0/20

port GigabitEthernet 0/0/21

port GigabitEthernet 0/0/22

port GigabitEthernet 0/0/23

port GigabitEthernet 0/0/24

quit

mux-vlan

啟用SUB－VLNA

system-view

vlan 100

aggregate-vlan

access-vlan 1 to 16

使能super-VLAN的接口VLANIF100上的VLAN間Proxy ARP功能。(這條不配不能互訪)

system-view

interface vlanif100

arp-proxy inter-sub-vlan-proxy enable

配置單播靜態(tài)路由(這條配完后才能上外網(wǎng))

system-view

ip route-static 183.62.196.0 255.255.255.224 192.168.100.100

ip route-static 0.0.0.0 0.0.0.0 10.10.10.1

配置接口的環(huán)路檢測(cè)功能,并且在環(huán)路消失后5秒鐘內(nèi)恢復(fù)網(wǎng)絡(luò)

示例：

stp loop-protection             啟動(dòng)當(dāng)前接口的環(huán)路保護(hù)功能  

loopback-detect enable       用來使能接口的環(huán)路檢測(cè)功能

loopback-detect action shutdown      用來配置接口的環(huán)路檢測(cè)處理動(dòng)作

loopback-detect recovery-time 5 用來配置環(huán)路消失后接口的恢復(fù)時(shí)間

sy

int g0/0/1

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/2

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/3

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/4

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/5

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/6

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/7

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

qui

int g0/0/8

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/9

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/5

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/11

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/12

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/13

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/14

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/15

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/16

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/17

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/18

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/19

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/20

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/21

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/22

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/23

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

int g0/0/24

stp loop-protection

loopback-detect enable

loopback-detect action shutdown

loopback-detect recovery-time 5

quit

配置所有接口環(huán)路檢測(cè)周期為2秒

sy

loopback-detect packet-interval 2       

quit

配置三層的SNMP讓深信服跨VLAN識(shí)別MAC地址。

snmp-agent sys-info version all

snmp-agent community read comaccess  設(shè)置外部設(shè)備取SNMP為只讀權(quán)限

保存配置

save