[计算机]9508配置文档.doc

T2商业网改造H3C 9508配置模板一、全局配置命令21.1 配置系统名称21.2 配置HEADER21.3 配置super密码21.4 定义网管ACL21.5 telnet服务功能21.5.1 9508都要手工开启telnet服务21.5.2 创建telnet用户21.5.3 开启telnet本地认证31.6 日志服务31.7 开启TTL超时31.8 DLDP全局设置31.9 LLDP全局配置31.10 时钟配置31.11 CONSOLE密码认证配置31.12 全局开启DHCP4二、接口配置命令42.1 桥接组端口配置42.2 三层互连接口配置42.4 三层SVI口配置42.5 未进行连接的端口42.6 创建VLAN5三、OSPF协议配置53.1 OSPF进程配置53.2 连ER1的互连接口53.3 连7506的互连接口53.3 连CR2北电8600的互连接口5四、SNMP配置6五、关闭不必要的服务6一、全局配置命令1.1 配置系统名称设备所有的系统名称都按此标准配置sysname T2-O-CR2-1-9508-1 1.2 配置HEADER所有9508的HEADER都按以下标准配置header login % * BCIA T2 Multi-service NETWORK * ONLY FOR AUTHORIZED PERSON * ANY ILLEGAL ACCESS IS PROHIBITED *%1.3 配置super密码所有9508的super密码都是这个配置super password level 3 cipher Nms2010BRw 1.4 定义网管ACLacl number 2000 description NMS rule 0 permit source 10.1.6.0 0.0.0.255 rule 1 permit source 10.26.0.0 0.0.0.255 rule 2 permit source 10.20.0.250 0 rule 3 permit source 10.26.2.250 0 rule 4 deny source any1.5 telnet服务功能1.5.1 9508都要手工开启telnet服务telnet server enable 1.5.2 创建telnet用户local-user admin password cipher Nms2010BRo authorization-attribute level 1 service-type telnet ssh1.5.3 开启telnet本地认证user-interface vty 0 4 authentication-mode schemeidle-timeout 1 0user privilege level 1 set authentication password cipher Nms2010BRoacl 2000 inbound1.6 日志服务开启日志同步、定义日志服务器并指定发送日志的源IP。info-centerinfo-center synchronousinfo-center loghost 10.20.0.250 channel loghost facility local7info-center loghost 10.26.2.250 channel loghost facility local7info-center loghost 10.1.6.55 channel loghost facility local7info-center loghost source loopback 01.7 开启TTL超时ip ttl-expires enable1.8 DLDP全局设置dldp enabledldp work-mode enhance1.9 LLDP全局配置lldp enable1.10 时钟配置clock timezone beijing add 00:00:00ntp-service refclock-master增加时钟级别为3 31.11 CONSOLE密码认证配置user-interface con 0authentication-mode password user privilege level 1 set authentication password simple Nms2010BRo idle-timeout 1 01.12 全局开启DHCPDhcp enable二、接口配置命令2.1 桥接组端口配置interface Bridge-Aggregation1 description To_xxxxx port link-type access port access vlan 5002.2 三层互连接口配置interface GigabitEthernet 0/0/16 description To xxx( 对端设备名称和接口名称)port link-type access port access vlan 500speed 1000 duplex fulldldp enable port link-aggregation group 12.4 三层SVI口配置interface Vlan-interface 500 description To ER1 ip address 10.26.250.252 255.255.255.2522.5 未进行连接的端口这些端口要关闭LLDP，并且将该端口关闭interface GigabitEthernet7/0/20undo lldp enableshutdown2.6 创建VLAN所有的VLAN都用name描述，不用description描述vlan 500 name Manage三、OSPF协议配置3.1 OSPF进程配置9508 ospf 的 router-id都设置为自己的环回口IP地址，自己的环回口要NETWORK进OSPF进程，互连VLAN接口要NETWORK到OSPF进程。ospf 1 router-id 10.26.254.2area 0.0.0.0 network 10.26.250.252 0.0.0.0 network 10.26.254.2 0.0.0.0 network 10.26.250.21 0.0.0.0 network 10.26.250.13 0.0.0.0 network 10.26.250.5 0.0.0.0 network 10.26.250.41 0.0.0.0 network 10.26.250.34 0.0.0.0 network 10.26.250.25 0.0.0.0 network 10.26.3.5 0.0.0.03.2 连ER1的互连接口Ospf网络类型为P2P，COST值为80,设置认证方式为MD5。interface Vlan-interface50 description To_ER1_9508E ip address 10.26.250.252 255.255.255.252 ospf authentication-mode MD5 cipher BCIAbcia ospf cost 80 ospf network-type p2p3.3 连7506的互连接口Ospf网络类型为P2P，COST值为10，设置认证方式为MD5。interface Vlan-interface562 description To xxxx(对端设备及名称) ip address 10.26.250.13 255.255.255.252 ospf authentication-mode MD5 cipher BCIAbcia ospf cost 10 ospf network-type p2p3.3 连CR2北电8600的互连接口Ospf网络类型为P2P，COST值为10，设置认证方式为simple password。interface Vlan-interface562 description To xxxx(对端设备及名称) ip address 10.26.3.5 255.255.255.252 ospf authentication-mode simple BCIAbcia ospf network-type p2p四、SNMP配置snmp-agentsnmp-agent sys-info contact BCIA-T2-Multi-service snmp-agent sys-info location T2B