huawei ar3200系列企业路由器配置指南v200r001c011-网络管理v200r001c

1、2011-08-2011-08-。您。您：客户服务邮箱：ill斜命令行参数（命令中必须由实际值进行替代的部分）斜体表示 表示用“ x |y |. x |y |. x |斜命令行参数（命令中必须由实际值进行替代的部分）斜体表示 表示用“ x |y |. x |y |. x |y |. x |y |. &displaysnmp-agentcommunityread Community name:Storagetype:nonVolatile View name: ViewDefault口1SNMPAcl: Total number is displaysnmp-agentsys-infoSNMP

2、display snmp-agent sys-info SNMP verhe displayaclacl-numberdisplayacl2000 Basic ACL 2000, 1 ruleAcls s rule 5 permit source displaysnmp-agentmib-viewMIBdisplaysnmp-agentmib-view View name:ViewDefaultMIB Subtree:Subtree mask:Storagetype:nonVolatile View Type:includedView View name:ViewDefault MIBSubt

3、ree:snmpUsmMIB Subtree mask:1SNMPAcl: Total number is displaysnmp-agentsys-infoSNMP display snmp-agent sys-info SNMP verhe displayaclacl-numberdisplayacl2000 Basic ACL 2000, 1 ruleAcls s rule 5 permit source displaysnmp-agentmib-viewMIBdisplaysnmp-agentmib-view View name:ViewDefaultMIB Subtree:Subtr

4、ee mask:Storagetype:nonVolatile View Type:includedView View name:ViewDefault MIBSubtree:snmpUsmMIB Subtree mask:Storagetype:nonVolatile View Type:excludedView View name:ViewDefault MIBSubtree:snmpVacmMIB Subtree mask:Storagetype:nonVolatile View Type:excludedView View MIBSubtree:snmpModules.18 Subtr

5、ee mask:Storagetype:nonVolatile View Type:excludedView Total number is displaysnmp-agentsys-infocontact display snmp-agent sys-info The for this managed R&D Technologies .displaysnmp-agentsys-infolocationdisplaysnmp-agentsys-infolocation The physical location of this node:Beijing displaycurrent-conf

6、iguration |includetraptrap display current-configuration configuration | include snmp-agent displaysnmp-agentextenderror-codeusSNMP display snmp-agent extend error-code Extend error-code 1SNMP1.3 SNMPv2cSNMPv2c和设备之间将使用SNMPv2c进行通信。为了保侧和Agent侧，本节只介绍Agent侧的配置SetRequest 操作，获取需要的数据并进行相应设置。ll1.3.1 使用1SNMP

7、1.3 SNMPv2cSNMPv2c和设备之间将使用SNMPv2c进行通信。为了保侧和Agent侧，本节只介绍Agent侧的配置SetRequest 操作，获取需要的数据并进行相应设置。ll1.3.1 使用SNMPv2c管理设备功能前了解它的应用环境、配置此特性的前置任务安全（网络），SNMPv2c保和设备间的通信在完成配使用SNMPv2c管理设备功能之前，需完成以下任务lSNMPv2c12（可选控制列表号站的IP地址、MIB 的节3（可选）发送告警的模块名称、Trap报文的源地址、TrapTrap4（可选）1SNMP1.3.2 SNMPv2c GETSET1 system-view2（可选）

8、snmp-agentSNMPAgentSNMPAgentsnmp-agent参数SNMP Agent 服务启动，故该步骤可选。snmp-agentsys-infov2cSNMP 1SNMP1.3.2 SNMPv2c GETSET1 system-view2（可选）snmp-agentSNMPAgentSNMPAgentsnmp-agent参数SNMP Agent 服务启动，故该步骤可选。snmp-agentsys-infov2cSNMP snmp-agentcommunityread|writecommunity-name，配置设备的读写团体MIBViewdefault视图（）l在指定视图下具

9、有只读权限时（比如级别比较低的管理员），readl -host trap-paramsname paramsname v2csecurityname binding-private-valuetrap-Traprofilenameudp-portidpublic-net-hosttrap-hostnamehostname addressipv4-addr udpinstance-name trap-paramsname,lUDP162，如果有特殊需求（配置l时，选择参-instance-name7（可选）snmp-agentsys-infocontactcontact|locationloca

10、tion，配置设备管当1SNMPl需要使用该团体名中的指（比如指定IP 地址）节点，请参考权限ll的设备，可以选择SNMPl1.3.3 （可选）MIB和SNMPlViewdefault视图（）l5 可以省略。1SNMPl需要使用该团体名中的指（比如指定IP 地址）节点，请参考权限ll的设备，可以选择SNMPl1.3.3 （可选）MIB和SNMPlViewdefault视图（）l5 可以省略。Viewdefault视图（）l2、3、4 laclacl-numberrulerule-iddeny|permitsourcesource-ip-addresssource-wildcardanyACL

11、snmp-agentmib-viewview-nameinclude|excludesubtree-namemaskMIBMIB1SNMPlMIBMIBexcludeMIBl需管理设备上的一少部分MIB节点，绝大部分节点不允MIB视图中添加MIBsnmp-agentcommunityread|writecommunity-namemib-viewview-nameacl acl-number *l在指定视图下具有只读权限时（比如级别比较低的管理员），read参l1SNMPlMIBMIBexcludeMIBl需管理设备上的一少部分MIB节点，绝大部分节点不允MIB视图中添加MIBsnmp-age

12、ntcommunityread|writecommunity-namemib-viewview-nameacl acl-number *l在指定视图下具有只读权限时（比如级别比较低的管理员），read参lmib-view view-namelaclacl-numberlIPIP。1.3.4 （可选）SNMP和被管理设备设备时，通过配置SNMP扩展错误码，可以扩展标准错当1 system-view2 snmp-agentextenderror-codeenableSNMP1.3.5 （可选）1 system-view2 snmp-agentnableTrap1SNMP-host trap-rof

13、ilename rofilename includeexcludefiltersubtreesubtree-namemaskmasksnmp-agenttraperface-erface-number，指定发送TrapackTrap否则会引站无法接收Trap报文的情况1SNMP-host trap-rofilename rofilename includeexcludefiltersubtreesubtree-namemaskmasksnmp-agenttraperface-erface-number，指定发送TrapackTrap否则会引站无法接收Trap报文的情况 Trap信息比较频繁时，

14、可以适当的把队列长度加长，减少告警丢失snmp-agenttraplifesecondsTrapTrapTrapTrap信息比较频繁时，可以使用此命令配置增加报文的保存时间，减少1.3.6 （可选）1 system-view2 ifindex constantsave 命令，保存接口的配置信息，否则接口的索引值在系1.3.7 SNMPv2cSNMPv2cSNMPv2cldisplaysnmp-agentcommunityread|write口1SNMPldisplaysnmp-agentsys-infoSNMPdisplayaclacl-numberdisplaysnmp-agentmib-v

15、iewMIB视图信息。display snmp-agent sys-info contact 命令查看管理员的displaysnmp-agentsys-infolocation。displaycurrent-configuration|includetrap,Trapdisplaysnmp-host displaysnmp-agent1SNMPldisplaysnmp-agentsys-infoSNMPdisplayaclacl-numberdisplaysnmp-agentmib-viewMIB视图信息。display snmp-agent sys-info contact 命令查看管理员的

16、displaysnmp-agentsys-infolocation。displaycurrent-configuration|includetrap,Trapdisplaysnmp-host displaysnmp-agentextenderror-codeusSNMPdisplaysnmp-agentcommunitydisplaysnmp-agentcommunityread Community name:Storagetype:nonVolatile View name: ViewDefault Acl: 2001Total number is displaysnmp-agentsys-

17、info命令，查看当中运行的SNMP版本号 display snmp-agent sys-info SNMP verhe displayaclacl-numberdisplayacl2000 Basic ACL 2000, 1 ruleAcls s rule 5 permit source displaysnmp-agentmib-viewMIBdisplaysnmp-agentmib-view View name:ViewDefaultMIB Subtree:Subtree mask:Storagetype:nonVolatile View Type:includedView View na

18、me:ViewDefault MIBSubtree:snmpUsmMIB Subtree mask:Storagetype:nonVolatile View Type:excludedView View name:ViewDefault MIBSubtree:snmpVacmMIB Subtree mask:Storagetype:nonVolatile View Type:excludedView View MIBSubtree:snmpModules.18 Subtree mask:Storagetype:nonVolatile View Type:excludedView Total n

19、umber is 1SNMPdisplaysnmp-agentsys-infocontact display snmp-agent sys-info The for this managed R&D Technologies .displaysnmp-agentsys-infolocationdisplaysnmp-agentsys-infolocation The physical location of this node:Beijing displaycurrent-configuration |includetraptrap display current-configuration

20、configuration | include snmp-agent displaysnmp-agentextenderror-codeusSNMP display snmp-agent extend error-code Extend error-code displaysnmp-1SNMPdisplaysnmp-agentsys-infocontact display snmp-agent sys-info The for this managed R&D Technologies .displaysnmp-agentsys-infolocationdisplaysnmp-agentsys

21、-infolocation The physical location of this node:Beijing displaycurrent-configuration |includetraptrap display current-configuration configuration | include snmp-agent displaysnmp-agentextenderror-codeusSNMP display snmp-agent extend error-code Extend error-code displaysnmp-displaysnmp-agent Traphos

22、t list:host name: nsm2 Traphost address: Traphost portnumber: 162 host parameter: -host -Total number is Parameter list trap Parameternameofthe Message mode of thehost: tr host:SNMPV2C host: v2cTrap of Securitynameofthe rofile host: Total number is Trap rofile Total number is 1.4 SNMPv3SNMPv3SNMPv3侧

23、侧和Agent侧，本节只介绍Agent侧的配置SetRequest 操作，获取需要的数据并进行相应设置。ll1.4.1 1SNMP 在完成配使用SNMPv3管理设备功能之前，需完成以下任务lSNMPv31.4.2 SNMPv3 GETSET1SNMP 在完成配使用SNMPv3管理设备功能之前，需完成以下任务lSNMPv31.4.2 SNMPv3 GETSET1 system-view2（可选）snmp-agentSNMPAgentSNMPAgentsnmp-agent参数SNMP Agent 服务启动，故该步骤可选。3（可选）snmp-agentsys-infov3SNMP12（可选控制列表号

24、站的IP地址、MIB 的节3（可选）发送告警的模块名称、Trap报文的源地址、TrapTrap4（可选）1SNMP snmp-agentgroupv3group-nameauthentication|noauth|privacy，配置 SNMP 用户组。当authenticationprivacylauthentication l l。snmp-agentusm-userv3user-namegroup-nameauthentication-mode1SNMP snmp-agentgroupv3group-nameauthentication|noauth|privacy，配置 SNMP 用户

25、组。当authenticationprivacylauthentication l l。snmp-agentusm-userv3user-namegroup-nameauthentication-modemd5shapasswordprivacy-modeaes128|des56passwordSNMPv3Viewdefault视图（）l认证方MD5（MessageDigest5）：MD5128bit的消息SHA-1（SecureHashAlgorithm）：SHA-1264次方比特的160bit 的消息摘要。MD5SHA-1SHA-1MD5lAES128bit 128bit DES56bit

26、 64bit -host trap-paramsname paramsname v3 securityname binding-private-valuetrap-Traprofilenameudp-portidpublic-net-hosttrap-hostnamehostname addressipv4-addr udpinstance-name trap-paramsname,lUDP162，如果有特殊需求（配置l-instance-name1SNMP8（可选）snmp-agentsys-infocontactcontact|locationlocation，配置设备管当l（IP ）节点

27、，请参考权限ll的设备，可以选择SNMPl1.4.3 （可选）SNMPv3MIB1SNMP8（可选）snmp-agentsys-infocontactcontact|locationlocation，配置设备管当l（IP ）节点，请参考权限ll的设备，可以选择SNMPl1.4.3 （可选）SNMPv3MIBl拥有Viewdefault视图（即）的权限时，下面的步骤可以l5 可以省略。Viewdefault视图（）l2、3、4 laclacl-numberrulerule-iddeny|permitsourcesource-ip-addresssource-wildcardanyACL 1SNM

28、Psnmp-agentmib-viewview-nameinclude|excludesubtree-namemaskMIBMIBviewdefault（）l需MIBMIBexcludeMIBl需MIBMIB视图中添加MIBsnmp-agent group v3 group-name authentication | noauth | privacy 1SNMPsnmp-agentmib-viewview-nameinclude|excludesubtree-namemaskMIBMIBviewdefault（）l需MIBMIBexcludeMIBl需MIBMIB视图中添加MIBsnmp-ag

29、ent group v3 group-name authentication | noauth | privacy read- viewread-view|write-viewwrite-view|notify-viewnotify-view|aclacl-number*，配置用l在指定视图下具有只读权限时（比如级别比较低的管理员），view 在指定视图下具有读写权限时（比如级别比较高的管理员write-view lMIBnotify-viewMIB。l为了加强安全性，用户可以选择配置 authentication 或 privacy 参数，authentication对用户只认证不加密，pr

30、ivacy对用户既认证又加密，具体请参考认证和加密选取原lviewdefault（）read-viewread-view|write-viewwrite-view|notify-viewnotify-viewlaclacl-numberl管理设备上的某些节点，ACLMIBIP IP 。1.4.4 （可选）SNMP和被管理设备设备时，通过配置SNMP扩展错误码，可以扩展标准错当1 system-view2 snmp-agentextenderror-codeenableSNMP扩展错误码功能。缺省情况下，SNMP 发送标准错误码，只有使能了扩展错误码功能后，才能向1SNMP1.4.5 （可选）s

31、nmp-agentnableTrap-host trap-rofilename rofilename includeexcludefiltersubtreesubtree-namemaskmasksnmp-agenttraperface-erface-number，指定发送TrapackTrap1SNMP1.4.5 （可选）snmp-agentnableTrap-host trap-rofilename rofilename includeexcludefiltersubtreesubtree-namemaskmasksnmp-agenttraperface-erface-number，指定发

32、送TrapackTrap否则会引站无法接收Trap报文的情况 Trap信息比较频繁时，可以适当的把队列长度加长，减少告警丢失snmp-agenttraplifesecondsTrapTrapTrapTrap信息比较频繁时，可以使用此命令配置增加报文的保存时间，减少1.4.6 （可选）1 system-view2 ifindex constantsave 命令，保存接口的配置信息，否则接口的索引值在系口1SNMP1.4.7 SNMPv3SNMPv3SNMPv3ldisplaysnmp-agentusm-useruser-namedisplaysnmp-agentsys-infoSNMPdispl

33、ayaclacl-numberdisplaysnmp-agentmib-viewMIB视图信息。display snmp-agent sys-info contact 命令查看管理员的displaysnmp-agentsys-infolocation1SNMP1.4.7 SNMPv3SNMPv3SNMPv3ldisplaysnmp-agentusm-useruser-namedisplaysnmp-agentsys-infoSNMPdisplayaclacl-numberdisplaysnmp-agentmib-viewMIB视图信息。display snmp-agent sys-info c

34、ontact 命令查看管理员的displaysnmp-agentsys-infolocation。displaycurrent-configuration |includetrapTrapdisplaysnmp-agentextenderror-codeusSNMPldisplayconstant-ifindexconfiguration命令查看接口索引固定的状态和配置信displaysnmp-agentusm-userSNMPdisplaysnmp-agentusm-user User name: testuserEngine ID: Group name: Authenticationmo

35、de:md5,Privacymode:des56 Storage type: nonVolatileUser us:Total number is displaysnmp-agentsys-infoSNMP display snmp-agent sys-info SNMP verhe displayaclacl-numberdisplayacl2000 Basic ACL 2000, 1 ruleAcls s rule 5 permit source displaysnmp-agentmib-viewMIBdisplaysnmp-agentmib-view View name:ViewDefa

36、ultMIB Subtree:Subtree mask:Storagetype:nonVolatile View Type:includedView View name:ViewDefault MIB 1SNMPSubtree Storagetype:nonVolatile View Type:excludedView View name:ViewDefault MIBSubtree:snmpVacmMIB Subtree mask:Storagetype:nonVolatile View Type:excludedView View MIBSubtree:snmpModules.18 Sub

37、tree mask:Storagetype:nonVolatile View Type:excludedView Total number is displaysnmp-agentsys-infocontact display snmp-agent sys-info The for this managed R&D Technologies .displaysnmp-agentsys-info1SNMPSubtree Storagetype:nonVolatile View Type:excludedView View name:ViewDefault MIBSubtree:snmpVacmM

38、IB Subtree mask:Storagetype:nonVolatile View Type:excludedView View MIBSubtree:snmpModules.18 Subtree mask:Storagetype:nonVolatile View Type:excludedView Total number is displaysnmp-agentsys-infocontact display snmp-agent sys-info The for this managed R&D Technologies .displaysnmp-agentsys-infolocat

39、iondisplaysnmp-agentsys-infolocation The physical location of this node:Beijing displaycurrent-configuration |includetraptrap display current-configuration configuration | include snmp-agent displaysnmp-agentextenderror-codeusSNMP display snmp-agent extend error-code Extend error-code display consta

40、nt-ifindex ifindex constant : Enable ifindexmax-number:131070current ifindex suberfacemode:dense-mode next ifindex suberface mode : dense-mode current ifindex allocation : multi-chassis1.5SNMP1.5.1 SNMPv1MIB 节点。如1-4 NMS2仅可以管理该设备上的DNS节点，NMS11SNMPNMS。1-4 SNMPv1NMS/24GE1/0/0 /241SNMPNMS。1-4 SNMPv1NMS/2

41、4GE1/0/0 /24IP NetworkRouterNMS/24SNMPAgentSNMPSNMPv1NMS2DNSTrapNMSllSNMP版本ACL 号NMS站之间路由可达（略SNMP system- snmp-SNMP1SNMP snmp-agent sys-info SNMP display snmp-agent sys-info SNMP he ACLNMS2可以管理设备，NMS1 acl -acl-basic-2001 rule 5 permit source -acl-basic-2001 rule 6 deny source -acl-basic-2001 MIBNMS2D

42、NS snmp-agent mib-view dnsmib include # 配置团体ACL和MIB视图 snmp-agent community write adminnms2 mib-view dnsmib acl snmp- snmp-host trap-paramsname trapnms2 v1 securityname -host trap-hostname nms2 address trap-paramsname snmp-agent trap queue-size snmp-agent trap life 1SNMP snmp-agent sys-info SNMP disp

43、lay snmp-agent sys-info SNMP he ACLNMS2可以管理设备，NMS1 acl -acl-basic-2001 rule 5 permit source -acl-basic-2001 rule 6 deny source -acl-basic-2001 MIBNMS2DNS snmp-agent mib-view dnsmib include # 配置团体ACL和MIB视图 snmp-agent community write adminnms2 mib-view dnsmib acl snmp- snmp-host trap-paramsname trapnm

44、s2 v1 securityname -host trap-hostname nms2 address trap-paramsname snmp-agent trap queue-size snmp-agent trap life snmp-agent snmp-agent sys-info contact call Operator 的配置请根据采用产品参考对应# displaysnmp-agentcommunitywrite Community name:adminnms2Storagetype:nonVolatile View name: dnsmib Total number is A

45、CL displayacl2001 Basic ACL 2001, 2 rulesAcls s rule 5 permit source rule 6 deny source MIB displaysnmp-agentmib-viewdnsmib View name:dnsmibMIBSubtree:hwDnsMIB Subtree mask:Storage type: 1SNMPView View u# displaysnmp-agent Traphost list:host name: nms2 Traphost address: Traphost portnumber: host par

46、ameter: -Total number is Parameter list trap Parameternameofthe Message mode of thehost:trapnms2 host: SNMPV1 host: v1host: Trap of Securitynameofthe rofile Total number is Trap rofile Total number is 1SNMPView View u# displaysnmp-agent Traphost list:host name: nms2 Traphost address: Traphost portnu

47、mber: host parameter: -Total number is Parameter list trap Parameternameofthe Message mode of thehost:trapnms2 host: SNMPV1 host: v1host: Trap of Securitynameofthe rofile Total number is Trap rofile Total number is displaytrapbufferdisplay bufferconfigurationandcontents:enabled Allowed max buffer si

48、ze : 1024Actual buffer size : Channelnumber:3,Channelname:trapbuffer Dropped messages : 0Overwrittenmessages:0 Current messages : 98#Oct 11 2010 18:57:59 RouterA DS/4/DATASYNC_CFGCHANGE:OID .1 configurations have been changed. The current change number is the change loop count is 0, and um number of

49、 records is # display snmp-agent sys-info The for this managed call Operator #acl number rule 5 permit source rule 6 deny source #erface ip address #ospf area network network #snmp-agent local-engineid snmp-agent community write adminnms2 mib-view dnsmib acl 1SNMPsnmp-agent sys-info contact call Ope

50、rator snmp-agent sys-info snmp-host trap-hostname nms2 address udp-port 162 trap-paramsname -host trap-paramsname trapnms2 v1 securityname snmp-agentmib-viewdnsmibincludehwDnsMIB snmp-agent trsnmp-agenttrapqueue-size200 snmp-agent trap life 60snmp-#1.5.2 SNMPv2cSNMPv2c版本保证互通，在互通的过程中限制指定的MIB 节点。如1-5

51、NMS21SNMPsnmp-agent sys-info contact call Operator snmp-agent sys-info snmp-host trap-hostname nms2 address udp-port 162 trap-paramsname -host trap-paramsname trapnms2 v1 securityname snmp-agentmib-viewdnsmibincludehwDnsMIB snmp-agent trsnmp-agenttrapqueue-size200 snmp-agent trap life 60snmp-#1.5.2

52、SNMPv2cSNMPv2c版本保证互通，在互通的过程中限制指定的MIB 节点。如1-5 NMS2DNSNMS1NMS。1-5 SNMPv2cNMS/24GE1/0/0 /24IP NetworkRouterNMS/24SNMPAgentSNMPSNMPv2cNMS2DNS1SNMPllSNMP版本ACL 号NMS站之间路由可达（略SNMP system- snmp-SNMP snmp-agent sys-info SNMP display snmp-agent sys-info SNMP he ACLNMS2可以管理设备，NMS1 acl -acl-basic-2001 rule 5 per

53、mit source -acl-basic-2001 rule 6 deny source -acl-basic-2001 MIB snmp-agent mib-view dnsmib include # 配置团体ACL1SNMPllSNMP版本ACL 号NMS站之间路由可达（略SNMP system- snmp-SNMP snmp-agent sys-info SNMP display snmp-agent sys-info SNMP he ACLNMS2可以管理设备，NMS1 acl -acl-basic-2001 rule 5 permit source -acl-basic-2001

54、rule 6 deny source -acl-basic-2001 MIB snmp-agent mib-view dnsmib include # 配置团体ACL和MIB视图 snmp-agent community write adminnms2 mib-view dnsmib acl snmp- snmp-host trap-paramsname trapnms2 v2c securityname -host trap-hostname nms2 address trap-paramsname snmp-agent trap queue-size snmp-agent trap lif

55、e snmp-agent snmp-agent sys-info contact call Operator 的配置请根据采用产品参考对应1SNMP# displaysnmp-agentcommunitywrite Community name:adminnms2Storagetype:nonVolatile View name: dnsmib Total number is ACLdisplayacl2001 Basic ACL 2001, 2 rulesAcls s rule 5 permit source rule 6 deny source MIB displaysnmp-agentm

56、ib-viewdnsmib View name:dnsmibMIBSubtree:hwDnsMib Subtree mask:Storage1SNMP# displaysnmp-agentcommunitywrite Community name:adminnms2Storagetype:nonVolatile View name: dnsmib Total number is ACLdisplayacl2001 Basic ACL 2001, 2 rulesAcls s rule 5 permit source rule 6 deny source MIB displaysnmp-agent

57、mib-viewdnsmib View name:dnsmibMIBSubtree:hwDnsMib Subtree mask:Storagetype:nonVolatile View Type:includedView u# displaysnmp-agent Traphost list:host name: nms2 Traphost address: Traphost portnumber: host parameter: -Total number is Parameter list trap Parameternameofthe Message mode of thehost:tra

58、pnms2 host: SNMPV2C host: v2chost: Trap of Securitynameofthe rofile Total number is Trap rofile Total number is displaytrapbufferdisplay bufferconfigurationandcontents:enabled Allowed max buffer size : 1024Actual buffer size : Channelnumber:3,Channelname:trapbuffer Dropped messages : 0Overwrittenmes

59、sages:0 Current messages : 98#Oct 11 2010 18:57:59 RouterA DS/4/DATASYNC_CFGCHANGE:OID .1 configurations have been changed. The current change number is the change loop count is 0, and um number of records is # 1SNMP display snmp-agent sys-info The for this managed call Operator #acl number rule 5 p

60、ermit source rule 6 deny source 0 #erface ip address #ospf area network #local-engineid communitywriteadminnms2mib-viewdnsmibacl1SNMP display snmp-agent sys-info The for this managed call Operator #acl number rule 5 permit source rule 6 deny source 0 #erface ip address #ospf area network #local-engi