各廠商交換、路由基本配置

1、商的基本配置版本v1.0密級開放回內(nèi)部機密類型討論版測試版回正式版修訂記錄修訂日期ikt人版本號審核人修訂說明2012-08-11js俊杰v1.0an derse n多廠商配置_、思科路由：a ip基本配置：router>e nrouter#conf trouter(config)#hostname sp0t0-dx-r1spoto-dx-rl(config)#spoto-dx-rl(config)#interfacefo/lspoto-dx-rl(config-if)#ip address 192.168.166.254 255.255.255.0spoto-dx-rl(config-

2、if)#no shutdownspoto-dx-rl(config-if)#exitb路由配置：spoto-dx-rl(config)#router ospf 100spoto-dx-rl(config-router)#router-id 21.25.97.5spoto-dx-rl(config-router)#network 192.168.166.0 0.0.0.255 area 0spoto-dx-rl(config-router)#network 21.25.97.5 0.0.0.0 area 0spoto-dx-rl(config-router)#exitc遠(yuǎn)程節(jié)里:spoto-dx

3、-rl(config)#enable password espotorlspotodxrl(config)#service password-encryptionspoto-dx-rl(config)#line vty 0 4spoto-dx-rl(config-line)#password tspotorlspoto-dx-rl(config-line)#logi nspoto dx-rl(config-line)#exitd查看信息:spoto-dx-rl#show versionspoto-dx-rl#show ip interface briefspoto-dx-rl#show int

4、erfacespoto-dx-rl#show ip route ospfspoto-dx-rl#show running-config交換:aaccess 配switch>enableswitch#confi tswitch(config)#hostname spoto-s1spoto-sl(config)#vlan 10spoto-sl(config-vlan)#name vlanlo spoto-sl(config-vlan)#exit% applying vlan changes may take few minutes. please wait. spoto-sl(config)

5、#interface vlan 10spoto-sl(config-if)#ip address 192.168.166.252 255.255.255.0 spoto-sl(config-if)#interface f0/3spoto-sl(config-if)#switchport mode accesspoto-sl(config-if)#switchport access vlan 10btrunk 配置：spoto-sl(config-if)#interface fo/24spoto-sl(config-if)#switchport trunk encapsulation dotlq

6、spoto-sl(config-if)#switchport mode trunk spoto-sl(config-if)#switchporttrunk allowed vlan x spoto-sl(config-if)#exit二華為路由：a ip基本配<quidway>system viewquidwaysysname sp0t0-yd-r2sp0t0-yd-r2super password espotor2spoto-yd-r2interface ethernet 0spoto-yd-r2-ethernetoip address 192.168.2.254 255.255

7、.255.0 spoto-yd-r2-ethernetoundo shutdownspoto-yd-r2-ethernetoquitb路由配置： spoto-yd-r2router id x.x.x.xspoto-yd-r2interface ethernaet 0spoto-yd-r2-ethernetoospf enable area 0.0.0.0spoto-yd-r2-ospfquitspoto-yd-r2ospf enablespoto-yd-r2-ospfimport-route direct spoto-yd-r2-ospfnetwork 192.168.2.0 0.0.0.25

8、5c遠(yuǎn)程wi里: spoto-yd-r2 user-interface vty 0 4 spoto-yd-r2-ui-vtyo-4authentication-mode password spotoydr2uivtyo4set authentication-mode password simpletspotor2 spoto-yd-r2-ui-vtyo-4user privilege level 3 spoto-yd-r2-ui-vtyo-4quitd查看信息:spoto-yd-r2display versionspoto-yd-r2display interfacespoto-yd-r2di

9、splay ip routespoto-yd-r2display currentconfigurationspoto-yd-r2display history交換：aaccess酉己置: spoto-s2vlan 10spoto-s2-vlanloquitsp0t0-s2interface ethernet 0/1 spoto-s2-etherneto/lport link-type access spoto-s2-etherneto/lport access vlan 10 spoto-s2-etherneto/lquitbtrunk 配置：spoto-s2interface etherne

10、t 0/2 spoto-s2-etherneto/2port link-type trunk spoto-s2-etherneto/2port trunk permit vlan 10 spoto-s2-etherneto/2port trunk pvid vlan x spoto-s2-etherneto/2quit三、華三路由：a ip基本配置：<h3c>system viewh3csysname spoto-rspoto-rinterface gigabitethernet 1/0/1spoto-r-gigabitethernetl/0/lip addressl92.168.

11、166.254 24spoto-r-gigabitethernetl/0/lundo shutdownspoto-r-gigabitethernetl/0/lquitb路由配置:spoto rospf 12spotorospf12area 0spoto-r-ospf-12-area-0.0.0.0network 192.168.166.0 0.0.0.255spoto-r-ospf-12-area-0.0.0.0silent-interface gi 0/0spoto-r-ospf-12import-routestatitc遠(yuǎn)程節(jié)里： spoto-rsuper password simple

12、espotor 明文密碼,密文可用 cipher 替代 simplespotoruserinterface vty 0 4spotorui-vty04authenticationmode passwordspoto-r-ui-vty04set authentication password tspotor spoto-r-ui-vtyo-4user privilege level 3 spoto-r-ui-vtyo-4quitspoto-rtelnet server enabled查看信息：dirdisplay versi ondisplay vlandisplay current-confi

13、gurationdisplay ip routedisplay usersdisplay interface交換：aaccess酉己置：spoto-svlan 10spoto-s-vlanloport e 0/1 spoto-s-vlanloquit spoto-sinterface ethernet 0/1 spoto-s-etherneto/lport link-type access spoto-s-etherneto/lport access vlan 10btrunk 酉己spoto-s-etherneto/lport link-type trunkspoto-s-etherneto

14、/lport trunk permit vlan 10spoto-s-etherneto/lport trunk pvid vlan 1四、銳捷路由：a ip基本配置：router >enablerouter#configure terminalrouter(config)#interface f0/lrouter(config-if)#ip address 192.168.166.253 255.255.255.0router(config-if)#no shutdownb路由配置：router(config)#router ospf 1router(config-router)#ne

15、twork 192.168.166.0 0.0.0.255 area 0router(c on fig-router)#e ndc遠(yuǎn)程ws :router(config)#enable password espotorlrouter(config)#service password-encryptionrouter(config)#line vty 0 4router(config-line)#password tspotorl router(config-line)#loginrouter(c on fig-li ne)#exitd查看信息:show versi onshow ip inte

16、rface briefshow in terface fa 0/1show running-configshow ip route交換：aaccess酉己置：switch >e nableswitch#confi tswitch(c onfig)# host name sisl(config)#sl(config)#vla n 10sl(config-vlan)#name vlanlosl(c on fig-vla n)#exitsl(config)#interface vlan 10sl(config-if)#ip address 192.168.166.252 255.255.255

17、.0sl(config-if)#interface f0/3sl(config-if)#switchpot mode accesssl(config-if)#switchport access vlan 10btrunk 酉己sl(config)#interface eo/2sl(config-if)#switchport mode trunk五、juniper路由：a ip基本配root%cliroot>editentering configuration modeeditroot#set system host-name spoto-junoseditroot#commitcommi

18、tcompleteeditrootspoto-junos#edit interfaceedit interfacerootspoto-junos#setemo unit 0 family inet address 192.168.166.252/24edit interfacerootspoto-junos#setloo unit 0 family inet address 21.99.67.55/32edit in terfacerootspoto-junos#exiteditrootspoto-junos#commit b路由配置:rootspoto-junos#set logical-r

19、outers rl protocols ospf area 0 in terface emoeditrootspoto-junos#c遠(yuǎn)程w® : editrootspoto-junos#edit system loginedit system loginrootspoto-junos#setuser kiss class super-user authentication plan-text-password newpassword:retype new password:edit system login rootspoto-junos#top editrootspoto-jun

20、os#edit system servicesedit system servicesrootspoto-junos#setssh protocol-version v2 edit system services rootspoto-junos#commit commitcompleteedit system services rootspoto-junos#settelnetd查看信息:rootspoto-ju no s>showversio n rootspoto-junos>showroute terse rootspoto-juno s>showc on figura

21、ti on rootspoto-junos #showlogical-routers rootspoto-junos #showinterfaces交換：aaccess 配editrootspoto-junos#set vlans vlanlo vlan id 10editrootspoto-junos#set interface fe-0/1 unit 0 family ethernet-switching port-mode access editrootspoto-junos#set interface fe0/l unit 0 family ethernet-switching vla

22、n members 10btrunk 酉己editrootspoto-junos#set interface feo/l unit 0 family ethernet-switching port-mode trunk editrootspoto-junos#set interface fe-0/1 unit 0 family ethernet-switching vlan members all六.邁普 路由：a ip基本配置:router>e nablerouter#configure terminalrouter(config)#hostname maipumaipu(config

23、)#interface fastethernetomaipu(config-if-fastetherneto)#ip add 192.168.2.252 255.255.255.0b路由配置：maipu(config)#router ospf 100maipu(config-router)#network 192.168.2.0 0.0.0.255 area 0c遠(yuǎn)程ws :maipu(config)#aaa new-modelmaipu(config)#aaa authentication login default local enable nonemaipu(config)#user s

24、poto password 0 espotomaipu(config)#line vty 0 4maipu(config-line)#login locald查看信息：maipu#show versionmaipu#show ip routemaipu#show interfacemaipu#show cpumaipu#show memorymaiou#show running-config交換：aaccess酉己置：maipu(config)#vlan 801maipu(config-vlan801)#exitmaipu(config)#port 0/0/2maipu(config-port

25、-0/0/2)#port access vlan 801maipu(config-port-0/0/2)#port-type nnibtrunk 酉己maipu(config)#interface ethernetl/o/lmaipu(config-if-ethernetl/0/l)#switchport mode trunk maipu(config-if-ethernetl/0/l)#exit七、redback路由：a ip基本配置:localse800>enablelocalse800#configurationlocalse800(config)#context localloc

26、alse800(config-ctx)#interface tospoto-rllocalse800(config-if)#ip add 21.98.65.21/30localse800(config-if)#commitlocalse800(config)#port ethernet 1/1localse800(config-port)#no auto-negotiatelocalse800(config-port)#no shutdownlocalse800(config-port)#bind interface tospoto-rl locallocalse800(config-port

27、)#commitb路由配置：localse800(config)#context locallocalse800(config-ctx)#router-id x.x.x.xlocalse800(config-ctx)#interface ipl loopbacklocalse800(config-if)#ip address x.x.x.x/32localse800(config-if)#ip source-address snmp sysloglocalse800(config-ctx)#router ospf 1localse800(config-ospf)#auto-cost refer

28、ence-bandwidth 80000 localse800(config-ospf)#log-neighbor-up-downlocalse800(config-ospf)#area 0.0.0.0localse800(config-ospf-area)#interface tospoto-rllocalse800(config-ospf-interface)#networktype point-to-point localse800(config-ospf)#redistribute connected metric 20metric-type 1c遠(yuǎn)程ws :localse800(co

29、nfig)#system hostname spoto-rlocalspoto-r(config)#context locallocalspoto-r(config-ctx)#enable password espotorlocalspoto-r(config-ctx)#service sshlocalspotor(configctx)#administrator spoto password se800pt localspoto-r(config-admin)privil start 10localspoto-r(config-admin)privil max 15ip accesslist admin-acldescription this is a sample