Catalyst 4006交换机的配置实例( 二 )


!
#module 5 empty
!
#module 6 empty
!
#switch port analyzer
set span 2/1-6,3/1-34,4/1-34 1/2 both inpkts disable learning enable create
end
CAT4006> (enable)
二、WS-X4232-L3三层路由模块的配置清单
(其中包括:VLAN路由、访问控制列表、三层模块与交换机背板通道的配置等等)
WS-X4232-L3#
Using 4055 out of 126968 bytes
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname WS-X4232-L3
!
enable secret 5 *****************
enable password **********
!
ip subnet-zero
!
!
!
interface Port-channel1
no ip address
no ip directed-broadcast
hold-queue 300 in
!
interface Port-channel1.1
encapsulation dot1Q 1 native
ip address 10.10.1.254 255.255.255.0
ip Access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.16
encapsulation dot1Q 16
ip address 21x.xxx.16.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.17
encapsulation dot1Q 17
ip address 21x.xxx.17.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.18
encapsulation dot1Q 18
ip address 21x.xxx.18.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.19
encapsulation dot1Q 19
ip address 21x.xxx.19.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.20
encapsulation dot1Q 20
ip address 21x.xxx.21.254 255.255.254.0 secondary
ip address 21x.xxx.20.254 255.255.254.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.22
encapsulation dot1Q 22
ip address 21x.xxx.22.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface Port-channel1.23
encapsulation dot1Q 23
ip address 21x.xxx.23.254 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip redirects
no ip directed-broadcast
!
interface FastEthernet1
no ip address
no ip directed-broadcast
shutdown
!
interface GigabitEthernet1
ip address 21x.xxx.xxx.xxx 255.255.255.240
ip access-group 110 in
ip access-group 110 out
no ip directed-broadcast
!
interface GigabitEthernet2
no ip address
no ip directed-broadcast
!
interface GigabitEthernet3
no ip address
no ip directed-broadcast
no negotiation auto
channel-group 1
!
interface GigabitEthernet4
no ip address
no ip directed-broadcast
no negotiation auto
channel-group 1
!
ip classless
ip route 0.0.0.0 0.0.0.0 2xx.xxx.xxx.xxx
!
access-list 110 deny tcp any any eq echo
access-list 110 deny tcp any any eq chargen
access-list 110 deny tcp any any eq 135
access-list 110 deny tcp any any eq 136
access-list 110 deny tcp any any eq 137
access-list 110 deny tcp any any eq 138
access-list 110 deny tcp any any eq 139
access-list 110 deny tcp any any eq 389
access-list 110 deny tcp any any eq 445
access-list 110 deny tcp any any eq 4444
access-list 110 deny udp any any eq tFTP

推荐阅读