双机热备核心交换机1实例配置.docx

enconfig thostname C4506_1!enable secret ciscovtp domain vtp mode transparentip subnet-zerono ip domain-lookup ip dhcp excluded-address 0ip dhcp pool WirelessDHCP network default-router dns-server 3 6 lease 7!ip dhcp pool TestDHCP network default-router dns-server 3 6!ip dhcp pool OfficeDHCP network default-router netbios-name-server 3 dns-server 3 6 lease 7!ip dhcp pool SCC3-DHCP network default-router dns-server 3 6!ip dhcp pool SCC4-DHCP network default-router dns-server 3 6!ip dhcp pool Access-Internet network default-router dns-server 3 6 netbios-name-server 3 lease 7!ip dhcp pool restricted-internet network default-router dns-server 6!ip dhcp pool MIS-DHCP network default-router dns-server 3 netbios-name-server 3!ip dhcp pool CustDHCP network default-router dns-server 3 6 netbios-name-server 3!ip dhcp pool Access-BATAM network default-router netbios-name-server 3 dns-server 3 6!ip dhcp pool Office-DHCP dns-server 3 6!ip arp inspection validate dst-mac ip!no file verify autospanning-tree mode pvstspanning-tree extend system-idpower redundancy-mode redundantspanning-tree mode pvst vlan 1 -100 pr 设置生成树协议，实现负载均衡和备份interface Vlan1 description Office-VLAN ip address ip access-group OfficeIN in!interface Vlan10 description Servers-VLAN ip address !interface Vlan20 description Wafermap-VLAN ip address ip access-group Wafermap in!interface Vlan30 description Stripmap-VLAN ip address 54 ip access-group Stripmap out!interface Vlan40 description Knet-VLAN ip address ip access-group Knet in!interface Vlan41 description ESEC WB ip address ip access-group ESEC in!interface Vlan42 description For KNS WB ip address ip access-group KNS in!interface Vlan43 ip address ip access-group ESEC1 in!interface Vlan50 description Testcim-VLAN ip address ip access-group Testcim in!interface Vlan51 description TEST-Handler Vlan ip address ip access-group TEST-Handler in!interface Vlan60 description Test-VLAN ip address ip access-group Test in!interface Vlan70 description SCC3-VLAN ip address ip access-group SCC3 in!interface Vlan80 description SCC4-VLAN ip address ip access-group SCC4 in!interface Vlan90 description Wireless-VLAN ip address !interface Vlan100 ip address ip access-group KNS-HOST in!interface Vlan110 description Access-Internet ip address !interface Vlan120 ip address !interface Vlan130 description Cust-VLAN ip address ip access-group Cust in!interface Vlan150 description Access-BATAM ip address !interface Vlan160 description Bumping-Vlan ip address ip access-group Bumping in!interface Vlan180 description MEMS-VLAN ip address ip access-group MEMS in!interface Vlan190 description MIS Switch Manangement Vlan ip address ip access-group MIS-Switch in!interface Vlan1500 no ip address shutdown!ip default-gateway ip route ip route 10 /浮动静态路由，当这条线路瘫痪，自动切换到上ip route ip router 10 /浮动静态路由，当这条线路瘫痪，自动切换到上ip http server!ip access-list extended Access-BATAM permit igmp any any permit icmp any any permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit ip any host 55 permit ip any host 9 permit udp any host 55 permit udp any host 9 permit ip any host 99 permit udp any host 99 permit ip any 55 permit udp any 55 permit ip any 55ip access-list extended Bumping permit igmp any any permit ip any 55permit ip any 55ip access-list extended Cust permit igmp any any permit icmp any any permit ip any 55 permit ip host 0 any permit ip any host 0 deny ip any 55 permit ip host any permit ip any host permit ip host any permit ip any host permit ip host 3 any permit ip any host 3 permit ip host any permit udp any 55 permit udp 55 any permit ip 55 anyip access-list extended ESEC permit igmp any any permit ip any 55permit ip any 55ip access-list extended ESEC1 permit igmp any any permit ip any 55permit ip any 55ip access-list extended KNS permit igmp any any permit ip any 55permit ip any 55ip access-list extended KNS-HOST permit igmp any any permit ip any host 1 permit ip any 55permit ip any 55 permit ip any host 7 permit ip any host 8ip access-list extended Knet permit ip any 55permit ip any 55 permit ip any host 55 permit icmp any any permit udp any anyip access-list extended MEMS permit igmp any any permit udp any any permit ip any 55permit ip any 55 permit udp any 55permit udp any 55permit udp any host 9 permit ip any 55 permit udp any 55 permit ip any host 9 permit icmp any any permit ip any host 1ip access-list extended MIS permit igmp any any permit icmp any any permit ip any 55 permit udp any any eq bootps permit ip any 55ip access-list extended MIS-Switch permit igmp any any permit ip any 55 permit ip any 55permit ip any 55permit ip any 55ip access-list extended Office permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit ip any host 55 permit ip any host 9 permit udp any host 55 permit udp any host 9 permit igmp any any permit udp any any deny ip any any permit ip any host 99 permit udp any host 99 permit igmp any host 99 permit ip any 55 permit udp any 55 permit tcp any 55 deny ip 49 any deny ip host 49 anyip access-list extended OfficeIN permit igmp any any permit icmp any any permit udp any any eq bootps permit ip any 55 permit ip any host 55 permit ip any host 9ip access-list extended Restricted 注意 这个在原配置上存在疑问 deny ip any host 03 deny ip any host 45 deny ip any host 46 deny ip any host 49 deny ip any host 55 deny ip any host 35 deny ip any host 53 deny ip any host 64 deny ip any host 51 deny ip any host 51 deny ip any host 52 deny ip any host 53 deny ip any host 54 deny ip any host 8 deny ip any host 3 deny ip any host 4 deny ip any host 06 deny ip any host 53 deny ip any host 65 deny ip any 55 deny ip any host 20 deny ip any host 52 deny ip any host 2 deny ip any host 1 deny udp any any eq 8000 deny udp any any eq 4000ip access-list extended SCC3 permit igmp any any permit icmp any any permit udp any any eq bootps permit ip any 55 permit ip any host 55 permit ip any host 9 deny ip any anyip access-list extended SCC4 permit igmp any any permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any host 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any host 55 permit udp any any deny ip any any permit ip any 55 permit ip any 55 permit udp any 55ip access-list extended Stripmap permit ip any 55permit ip any 55 permit ip 55 anypermit ip 55 any permit ip any host permit udp any any permit ip any host 9 permit ip host 9 any permit igmp any any permit udp any host 9 permit tcp any host 9 permit icmp any any permit udp any any eq bootpsip access-list extended TEST-Handler permit igmp any any permit ip any 55permit ip any 55ip access-list extended Test permit igmp any any permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any 55 permit ip any host 55 permit ip any 55 logpermit ip any 55 log permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any 55 permit udp any host 55 permit udp any any deny ip any any permit ip any host permit ip host any permit udp any host permit tcp any host ip access-list extended Testcim permit igmp any any permit ip any 55 permit ip any 55permit ip any host permit ip any host 55 permit icmp any any permit ip any host 9 permit udp any host 9 permit udp any any permit ip any host 99 permit udp any host 8 permit ip any host 8 permit ip any host 41ip access-list extended Wafermap permit ip any 55permit ip any 55 per