Cisco 4503 核心交换配置实例
envla dat
vlan 2
name JH
vlan 3
name LL
vlan 4
name A
vlan 5
name HO
vlan 6
name QQ
hostname heixin
conf t
interface Vlan 1
description to guanli
ip address 1.1.1.1 255.255.255.0
interface Vlan 2
description to FW
ip address 192.168.2.1 255.255.255.0
interface Vlan 3
description to XC
ip address 192.168.3.1 255.255.255.0
interface Vlan 4
description to XV
ip address 192.168.4.1 255.255.255.0
interface Vlan 6
description to Xw
ip address 192.168.6.1 255.255.255.0
ip routing 开启路由模式
ip route 0.0.0.0 0.0.0.0 192.168.6.1
ip route 192.168.2.0 255.255.255.0 192.168.6.2
ip route 192.168.3.0 255.255.255.0 192.168.6.2
ip route 192.168.4.0 255.255.255.0 192.168.6.2
interface range fastEthernet 0/2-5
switchport trunk encapsulation dot1q
switchport trunk native vlan 2 归属vlan
switchport trunk allowed vlan 2,3,4,5,6 允许2,3,4 vlan之间通信
switchport mode trunk
spanning-tree portfast trunk
interface range fastEthernet 0/6-10
switchport trunk encapsulation dot1q
switchport trunk native vlan 3 归属vlan
switchport trunk allowed vlan 2,3,4,5,6 允许2,3,4 vlan之间通信
switchport mode trunk
spanning-tree portfast trunk
interface range fastEthernet 0/11-16
switchport trunk encapsulation dot1q
switchport trunk native vlan 4 归属vlan
switchport trunk allowed vlan 2,3,4,5,6 允许2,3,4 vlan之间通信
switchport mode trunk
spanning-tree portfast trunk
iinterface fastEthernet 0/1
description FW
switchport mode access
switchport access vlan 6
interface range fastEthernet 0/17-21
switchport access vlan 2
switchport mode access
interface range fastEthernet 0/21-22
switchport access vlan 3
switchport mode access
interface range fastEthernet 0/23-24
switchport access vlan 4
switchport mode access
DHCP 配置
ip dhcp pool vlan2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 202.99.224.68 202.99.224.8
ip dhcp pool vlan3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 202.99.224.68 202.99.224.8
ip dhcp pool vlan4
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 202.99.224.68 202.99.224.8
ip dhcp excluded-address 192.168.4.241 192.168.4.244 不分配的地址
show int des 查看接口
ssh 配置
ip domain-name cisco.com
crypto key generate rsa（1024）
line vty 0 4
login local
transport input Telnet ssh
line console 0
no exec-t
logg syn
enable secret cisco特权模式密码
aaa new-model 全局配置AAA
aaa authentication login admin
aaa authentication login default local
username admin password cisco
username nousername secret nopassword
ip ssh time-out 180
ip ssh authentication-retries
wr
页:
[1]