4006三层交换的实例

王朝other·作者佚名 2008-05-19

宽屏版字体: 小|中|大|超大

begin

# ***** ALL (DEFAULT and NON-DEFAULT) CONFIGURATION *****

#time: Wed Nov 14 2001, 20:44:55

#version 6.2(1)

#system web interface version(s)

set password $2$tss5$Pnjd5Y/IOkhxMpJgUWk.j1

set enablepass $2$JHQF$v8BeanMxtj1.qVjcXrAW60

set prompt 4006-1

--More-- set length 24 default

set logout 20

set banner motd ^C^C

#test

set test diaglevel complete

#errordetection

set errordetection inband disable

set errordetection memory disable

#system

set system baud 9600

set system modem disable

set system name

set system location

set system contact

set system countrycode

set traffic monitor 100

set feature log-command enable

#frame distribution method

set port channel all distribution mac both

--More-- !

#mac address reduction

set spantree macreduction disable

#default portcost mode

set spantree defaultcostmode short

#snmp

set snmp community read-only public

set snmp community read-write private

set snmp community read-write-all secret

set snmp rmon disable

set snmp rmonmemory 85

set snmp trap disable module

set snmp trap disable chassis

set snmp trap disable bridge

set snmp trap disable repeater

set snmp trap disable vtp

set snmp trap disable auth

set snmp trap disable ippermit

set snmp trap disable vmps

set snmp trap disable entity

set snmp trap disable config

--More-- set snmp trap disable stpx

set snmp trap disable syslog

#tacacs+

set tacacs attempts 3

set tacacs directedrequest disable

set tacacs timeout 5

#radius

set radius deadtime 0

set radius timeout 5

set radius retransmit 2

#kerberos

#authentication

set authentication login tacacs disable console

set authentication login tacacs disable telnet

set authentication login tacacs disable http

set authentication enable tacacs disable console

set authentication enable tacacs disable telnet

set authentication enable tacacs disable http

set authentication login radius disable console

--More-- set authentication login radius disable telnet

set authentication login radius disable http

set authentication enable radius disable console

set authentication enable radius disable telnet

set authentication enable radius disable http

set authentication login local enable console

set authentication login local enable telnet

set authentication login local enable http

set authentication enable local enable console

set authentication enable local enable telnet

set authentication enable local enable http

set authentication login kerberos disable console

set authentication login kerberos disable telnet

set authentication login kerberos disable http

set authentication enable kerberos disable console

set authentication enable kerberos disable telnet

set authentication enable kerberos disable http

set authentication login attempt 3 console

set authentication login attempt 3 telnet

set authentication login lockout 0 console

set authentication login lockout 0 telnet

set authentication enable attempt 3 console

set authentication enable attempt 3 telnet

--More-- set authentication enable lockout 0 console

set authentication enable lockout 0 telnet

#stp mode

set spantree mode pvst+

#vtp

set vtp domain shejiyuan

set vtp mode server

set vtp v2 enable

set vtp pruning disable

set vtp pruneeligible 2-1000

clear vtp pruning 1001-1005

set vlan 1 name default type ethernet mtu 1500 said 100001 state active

set vlan 2 name yibu type ethernet mtu 1500 said 100002 state active

set vlan 3 name erbu type ethernet mtu 1500 said 100003 state active

set vlan 4 name sanbu type ethernet mtu 1500 said 100004 state active

set vlan 5 name sibu type ethernet mtu 1500 said 100005 state active

set vlan 6 name wubu type ethernet mtu 1500 said 100006 state active

set vlan 7 name yuanban type ethernet mtu 1500 said 100007 state active

set vlan 8 name jingying type ethernet mtu 1500 said 100008 state active

set vlan 9 name jicai type ethernet mtu 1500 said 100009 state active

set vlan 10 name jizhi type ethernet mtu 1500 said 100010 state active

--More-- set vlan 11 name renshi type ethernet mtu 1500 said 100011 state active

set vlan 12 name itban type ethernet mtu 1500 said 100012 state active

set vlan 13 name xindang type ethernet mtu 1500 said 100013 state active

set vlan 14 name touzi type ethernet mtu 1500 said 100014 state active

set vlan 15 name service type ethernet mtu 1500 said 100015 state active

set vlan 16 name out type ethernet mtu 1500 said 100016 state active

set vlan 17 name zixun type ethernet mtu 1500 said 100017 state active

set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active

set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active bridge 0x0 stp ieee

set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bridge 0xf stp ibm

set vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active parent 1005 ring 0xccc mode srb aremaxhop 7 stemaxhop 7 backupcrf off

set dot1q-all-tagged disable

#ip

set feature mdg enable

set interface sc0 1 172.16.1.1/255.255.255.0 172.16.1.255

set interface sc0 up

set interface sl0 0.0.0.0 0.0.0.0

set interface sl0 down

set interface me1 0.0.0.0 0.0.0.0 0.0.0.0

set interface me1 down

--More-- set arp agingtime 1200

set ip redirect enable

set ip unreachable enable

set ip fragmentation enable

set ip route 0.0.0.0/0.0.0.0 172.16.1.254

set ip alias default 0.0.0.0

#command alias

#vmps

set vmps server retry 3

set vmps server reconfirminterval 60

#rcp

set rcp username

#dns

set ip dns disable

#spantree

#uplinkfast groups

set spantree uplinkfast disable

#backbonefast

--More-- set spantree backbonefast disable

#portfast

set spantree portfast bpdu-guard disable

set spantree portfast bpdu-filter disable

#bpdu-skewing

set spantree bpdu-skewing disable

#vlan 1003

set spantree enable 1003

set spantree fwddelay 4 1003

set spantree hello 2 1003

set spantree maxage 10 1003

set spantree priority 32768 1003

#vlan 1005

set spantree enable 1005

set spantree fwddelay 4 1005

set spantree hello 2 1005

set spantree maxage 10 1005

set spantree priority 32768 1005

#vlan(defaults)

set spantree enable 1-17

set spantree fwddelay 15 1-17

set spantree hello 2 1-17

set spantree maxage 20 1-17

--More-- set spantree priority 32768 1-17