Extreme设备常用配置手册

1、extreme3808交换机和6808交换机对多业务的支持很好，但是稳定性稍差，隔段时间需要升级ios 在电信级的骨干交换机上很多是用extreme用户名和密码配置create account admin | user encrypted configure account adminport配置config ports auto off speed 10 | 100 | 1000 duplex half | full auto offVlan配置无论是核心还是接入层，都要先创建三个Vlan，并且将所有归于Default Vlan的端口删除：config vlan default del po

2、rt allcreate vlan Servercreate vlan Usercreate vlan Manger定义802.1q标记config vlan Server tag 10config vlan User tag 20config vlan Manger tag 30设定Vlan网关地址：config vlan Server ipa 192.168.41.1/24config vlan User ipa 192.168.40.1/24config vlan Manger ipa 192.168.*.*/24Enable ipforwarding启用ip路由转发，即vlan间路由T

3、runk配置config vlan Server add port 1-3 tconfig vlan User add port 1-3 tconfig vlan manger add port 1-3 tVRRP配置enable vrrpconfigure vrrp add vlan UserVlanconfigure vrrp vlan UserVlan add master vrid 10 192.168.6.254configure vrrp vlan UserVlan authentication simple-password extremeconfigure vrrp vlan

4、UserVlan vrid 10 priority 200configure vrrp vlan UserVlan vrid 10 advertisement-interval 15configure vrrp vlan UserVlan vrid 10 preempt端口镜像配置enable mirroring to port 3 #选择 3 作为镜像口config mirroring add port 1 #把端口 1 的流量发送到 3config mirroring add port 1 vlan default #把 1 和 vlan default 的流量都发送到 3port-cha

5、nnel 配置enable sharing grouping port-based | address-based | round-robinstp配置enable stpdcreate stpd *configure stpd add vlan ports dotld | emistp | pvst-plusconfigure stpd stpd1 priority 16384configure vlan marketing add ports 2-3 stpd stpd1 emistpDHCP中继配置enable bootprelayconfig bootprelay add NAT配置E

6、nable nat #启用 natStatic NAT Rule Exampleconfig nat add out_vlan_1 map source 192.168.1.12/32 to 216.52.8.32/32Dynamic NAT Rule Exampleconfig nat add out_vlan_1 map source 192.168.1.0/24 to 216.52.8.1 - 216.52.8.31 Portmap NAT Rule Exampleconfig nat add out_vlan_2 map source 192.168.2.0/25 to 216.52.

7、8.32 /28 both portmap Portmap Min-Max Exampleconfig nat add out_vlan_2 map source 192.168.2.128/25 to 216.52.8.64/28 tcp portmap 1024 - 819210.OSPF 配置enable ospf 启用 OSPF 进程create ospf area 仓0建 OSPF 区域configure ospf routerid automatic | 配置 Routeridconfigure ospf add vlan | all area passive把某个 vlan 加

8、到某个Area中去，相当于Cisco中的network的作用configure ospf area add range advertise | noadvertise type-3 | type-7把某个网段加到某个Area中去，相当于Cisco中的network的作 用configure ospf vlan neighbor add OSPF中路由重发布配置enable ospf export direct cost ase-type-1 | ase-type-2 tag | enable ospf export static cost ase-type-1 | ase-type-2 tag

9、 | enable ospf originate-default always cost ase-type-1 | ase-type-2 tag enable ospf originate-router-id11.SNMP 配置enable snmp accessenable snmp trapscreate access-profile type ipaddress | vlanconfig snmp access-profile readonly | nonejE置 snmp 的只读访问歹。表,none是去除config snmp access-profile readwrite | no

10、ne这是控制读写控制config snmp add trapreceiver port community from 配置 snmp 接收 host 和团体字符串安全配置disable ip-option loose-source-routedisable ip-option strict-source-routedisable ip-option record-routedisable ip-option record-timestampdisable ipforwarding broadcastdisable udp-echo-serverdisable irdp vlan disable

11、 icmp redirectdisable web关闭web方式访问交换机enable cpu-dos-protectAccessLists 配置create access-list icmp destination sourcecreate access-list ip destination source portscreate access-list tcp destination source portscreate access-list udp destination source ports默认路由配置config iproute add default 恢复出厂值，但不包括用户

12、改的时间和用户帐号信息unconfig switch all检查配置show versionshow configshow sessionshow management查看管理信息，以及snmp信息show bannershow ports configurationshow ospfshow access-list | port show access-list-monitorshow ospf area show ospf area detailshow ospf ase-summaryshow ospf interfaces vlan | area unconfigure ospf vl

13、an | area 17.备份和升级软件download image | primary | secondary upload image | primary | secondary use image primary | secondary小知识点：DHCP中继。bootp relay /dhcp relay用于主机获取它的IP地址，但是在一个高度需要安全的网络中需要以更安全的方法配置它，比如通过udp-forwarding的方法来配置 dhcp relay。disablebootprelay 以下是一个用 udp-forwarding 代替 enable bootrelay 的配置例子。create udp-profile backbonedhcpconfig backbonedhcp add 67 ipaddress *confi