数据中心防火墙部署

红塔烟草（集团）万兆以太网建设项目数据中心防火墙部署改造方案（V1.4）北京联信永益信息技术有限公司2010年2月目录概述.................................错误!未指定书签。人员及时间...........................错误!未指定书签。参与人员...........................错误!未指定书签。操作时间...........................错误!未指定书签。业务影响.............................错误!未指定书签。前期准备工作.........................错误!未指定书签。网络拓扑图...........................错误!未指定书签。数据中心设备配置.....................错误!未指定书签。1.数据中心两台6509E设备VSS部署及设备配置错误!未指定书签。2.数据中心两台6509E防火墙FWSM透明模式配置错误!未指定书签。防火墙失效切换测试...................错误!未指定书签。应急方案.............................错误!未指定书签。一、概述数据中心网络现状：一台部署在商务楼4楼机房数据中心汇聚交换机6509E与一台部署在技术中心机房数据中心汇聚交换机6509E分别通过1条10GE上联到核心6509E交换机，两台汇聚交换机之间通过一条10GE链路Trunk互联；放置在商务楼的数据中心服务器和放置在技术中心的数据中心服务器通过单链路，分别连接到对应区域的数据中心交换机上，所有服务器网关指向部署在商务楼4楼数据中心交换机上对应的vlan实地址。两台数据中心交换机上分别部署一块FWSM防火墙模块，通过Failover技术实现对数据中心网络安全保护。本次工程将部署在技术中心的数据汇聚6509E交换机搬迁到商务楼1楼新机房，在两台数据中心6509E设备上部署VSS，采用VirtualSwitchingSupervisor72010GE引擎板卡上的万兆以太网上行链路端口进行互联，同时使用两条万兆链路进行捆绑，保证VSS系统的可靠性。采用两条10GE链路捆绑与核心设备互联，同时对防火墙模块部署透明模式。二、人员及时间1、参与人员序号序号姓名职责手机1卢立杰项目经理（整体协调）2何沿平割接操作（设备调试）3扎西割接操作（配合设备调试）4朱洺奇监督协调5代宁厂商技术支持2、操作时间2010年2月9日－2010年2月9日三、业务影响本次割接操作将对数据中心6509E设备部署VSS，同时，防火墙FWSM模块部署透明模式，对数据中心网络进行规划和调试。因此会影响数据中心服务器与集团网络间的互相访问。四、前期准备工作以下为联信永益需要准备的工作软件版本测试通过；核对设备配置、端口类型、端口状态；文件序号序号文件名称数量1割接方案3份2测试报告3份工具序号序号物品名称数量1静电带12十字、一字螺丝刀2以下为红塔集团信息网络科需要准备的工作配合割接人员进入机房；提供console配置权限登陆口令；五、网络拓扑图现状：数据中心FWSM路由模式拓扑图备注：HT_SWLDA_4F_6509E_01、HT_SWLDA_1F_6509E_01 设备上的InterfaceVlan411接口为OSPF路由协议报文传递使用。Vlan402为服务器业务使用（inside接口）；Vlan413、Vlan414为两台6509E设备上防火墙模块的Failover协议使用，HT_SWLDA_4F_6509E_01上的防火墙模块为Primary，HT_SWLDA_1F_6509E_01上的防火墙模块为Secondary；Vlan412为两台6509E与其防火墙模块的Outside接口连接使用，两台6509E的InterfaceVlan412接口启用HSRP协议，HT_SWLDA_4F_6509E_01 为Active，心F式拓扑图备注：Gi1/3/48、Gi2/3/48接口为BFD使用。vlan402为服务器业务使用；vlan402为inside接口；Vlan413、Vlan414为两台6509E设备上防火墙模块的Failover协议使用，商务楼4楼6509E设备上的防火墙模块为Primary，商务楼1楼6509E上的防火墙模块为Secondary；Vlan412为两台6509E与其防火墙模块的Outside接口连接使用，vlan402服务器的网关指向vlan412的接口ip地址。六、数据中心设备配置1.数据中心两台6509E设备VSS部署及设备配置割接内容：两台数据中心割接内容：两台数据中心6509E设备调试割接时间：2010.02.07割接地点：商务楼4楼、商务楼1楼操作人：配置：联信永益：卢立杰电话：联信永益：何沿平联信永益：扎西配合人：信息科：朱洺奇电话：1、备份设备配置copyrunningbootflash:wr2、两台数据中心6509E设备间互联链路及VSS调试!switchvirtualdomain100?switch1?!interfaceport-channel110switchvirtuallink1noshut!interfacerangeTen5/4-5channel-group110modeonnoshut!platformhardwarevslpfcmodepfc3cswitchconvertmodevirtual!switchvirtualdomain100switchvirtualdomain100switch2!interfaceport-channel120switchvirtuallink2noshut!interfacerangeTen5/4-5channel-group120modeonnoshut!platformhardwarevslpfcmodepfc3cswitchconvertmodevirtual!switchacceptmodevirtual!interfacegigabitethernet1/3/48descriptionVSS_FOR_BFDnoswitchportipaddress77252bfdinterval100min_rx100multiplier3noshutinterfacegigabitethernet2/3/48descriptionVSS_FOR_BFDnoswitchportipaddress81.252bfdinterval100min_rx100multiplier3noshut!switchvirtualdomain100dual-activedetectionbfddual-activepairinterfaceg1/3/48interfaceg2/3/48bfd!3、核心6509E设备基础信息配置调试!hostnameHT_SWLDA_4F_6509E_01!servicetimestampsdebugdatetimelocaltimeservicetimestampslogdatetimelocaltime!clocktimezoneGMT8!noipdomain-lookup!interfaceLoopback1interfaceLoopback1ipaddress2noshut!loggingfacilitylocal6loggingsource-interfaceLoopback1logginglogging!snmp-servercommunityhongtpublicROsnmp-servercommunityhongtprivateRW!linecon0exec-timeout50loggingsynchronouspassword0admin@htloginlinevty04exec-timeout50password0admin@htlogin！ntpserver！4、设备接口及路由调试HT_BONE_4F_6509E_01：!interfacePort-channel6noswitchportdescriptionconnecttoHT_SWLDA_4F_6509E_01ipaddressnoshut!interfaceTenGigabitEthernet1/4/1noswitchportnoipaddressdescriptionconnecttoHT_SWLDA_4F_6509E_01channel-group6modeonnoshut!interfaceTenGigabitEthernet2/4/1noswitchportnoipaddressdescriptionconnecttoHT_SWLDA_4F_6509E_01channel-group6modeonchannel-group6modeonnoshut!routerospf877nopassive-interfacePort-channel6nonetwork0.0.0.3area0！HT_SWLDA_4F_6509E_01：!interfacePort-channel6noswitchportdescriptionconnecttoHT_BONE_4F_6509E_01ipaddressnoshut!interfaceTenGigabitEthernet1/1/1noswitchportdescriptionconnecttoHT_BONE_4F_6509E_01channel-group6modeonnoshut!interfaceTenGigabitEthernet2/1/1noswitchportdescriptionconnecttoHT_BONE_4F_6509E_01channel-group6modeonnoshut！Vlan402Vlan403Vlan404Vlan405Vlan406Vlan411Vlan412Vlan413Vlan414Vlan500namesniffer!interfaceVlan403ipaddressipflowingressipflowegressnoshut!!interfaceVlan404ipaddressipflowingressipflowegressnoshut!interfaceVlan405ipaddressipflowingressipflowegressnoshut!interfaceVlan406ipaddressipflowingressipflowegressnoshut!interfaceVlan412ipaddress10.96.0.10ipflowingressipflowegressnoshut!routerospf877router-idlog-adjacency-changespassive-interfacedefaultnopassive-interfaceTenGigabitEthernet1/1/1nopassive-interfaceTenGigabitEthernet2/1/1nopassive-interfaceport-channel6network0.0.0.63area0network0.0.0.63area0network0.0.0.63area0network0.0.0.63area0network0.0.0.0area0network0.0.0.3area0network10.96.0.00.0.0.255area0!interfaceGigabitEthernet1/3/1switchportswitchportaccessvlan402switchportmodeaccessload-interval30load-interval30noshut!interfaceGigabitEthernet1/3/2descriptionconnecttoHT_SWLDA_1F_3750_01switchportswitchporttrunkencapsulationdot1qswitchportmodetrunkspanning-treeportfastnoshut!interfaceGigabitEthernet1/3/3descriptionconnecttoHT_JSZXDA_2F_3750_01switchportswitchporttrunkencapsulationdot1qswitchportmodetrunkspanning-treeportfastnoshut!interfaceGigabitEthernet1/7/1switchportswitchportaccessvlan403switchportmodeaccessnoshut!interfaceGigabitEthernet1/7/2switchportswitchportaccessvlan403switchportmodeaccessnoshut!interfacerangegi1/7/3–10noshut!interfaceGigabitEthernet1/7/11switchportswitchportaccessvlan403switchportmodeaccessnoshut!interfaceGigabitEthernet1/7/12switchportswitchportaccessvlan402switchportmodeaccessload-interval30load-interval30noshut!interfaceGigabitEthernet1/7/13switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/14switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/15switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/16switchportswitchportaccessvlan402switchportmodeaccessload-interval30noshut!interfaceGigabitEthernet1/7/17switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/18switchportswitchportaccessvlan402switchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/19switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/20switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/21switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/22switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/23switchportswitchportaccessvlan402switchportmodeaccessload-interval30storm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/24switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/25switchportswitchportaccessvlan406switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/26switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/27switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/28switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/29switchportswitchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/30switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/31switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/32switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/33switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/34switchportswitchportaccessvlan402switchportmodeaccessload-interval30switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!switchportmodeaccessswitchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!storm-controlbroadcastlevel0.10storm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/35switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/36switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/37switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/38switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/39interfaceGigabitEthernet1/7/40interfaceGigabitEthernet1/7/40switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/41switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/42switchportswitchportaccessvlan406switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/43switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/44switchportswitchportaccessvlan403switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/45switchportswitchportaccessvlan403storm-controlbroadcastlevel0.10storm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/46switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/47switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/7/48switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/1switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/2switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!switchportswitchportaccessvlan402switchportmodeaccessswitchportswitchportaccessvlan402switchportmodeaccessinterfaceGigabitEthernet1/8/3interfaceGigabitEthernet1/8/3switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/4switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/5switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/6switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/7switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/8storm-controlbroadcastlevel0.10storm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/9switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/10switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/11switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/12switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/13interfaceGigabitEthernet1/8/14interfaceGigabitEthernet1/8/14switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/15switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/16switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/17switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/18switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/19storm-controlbroadcastlevel0.10storm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/20switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/21switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/22switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/23switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/24interfaceGigabitEthernet1/8/25interfaceGigabitEthernet1/8/25switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/26switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/27switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/28switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/29switchportswitchportaccessvlan406switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/30storm-controlbroadcastlevel0.10storm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/31switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/32switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/33switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/34switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/35switchportswitchportaccessvlan402switchportmodeaccessnoshu!interfaceGigabitEthernet1/8/36switchportswitchportaccessvlan402switchportaccessvlan402switchportmodeaccessnoshut!interfaceGigabitEthernet1/8/37switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/38switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/39switchportswitchportaccessvlan402switchportmodeaccessnoshut!interfaceGigabitEthernet1/8/40switchportswitchportaccessvlan406switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/41switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/42switchportswitchportaccessvlan402switchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/43noipaddressnoshut!interfaceGigabitEthernet1/8/44switchportswitchportaccessvlan403switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/45noipaddressnoshut!interfaceGigabitEthernet1/8/46descriptionhongta_0_testswitchportswitchportaccessvlan402switchportmodeaccessnoshut!interfaceGigabitEthernet1/8/47switchportswitchportaccessvlan405switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!interfaceGigabitEthernet1/8/48switchportswitchportaccessvlan405switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10noshut!!interfacerangeGigabitEthernet2/7/1-48switchportswitchportaccessvlan402switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10spanning-treeportfastnoshut!interfacerangeGigabitEthernet2/8/1-12switchportswitchportaccessvlan403switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10spanning-treeportfastnoshut!interfacerangeGigabitEthernet2/8/13-24switchportswitchportaccessvlan404switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10spanning-treeportfastnoshut!interfacerangeGigabitEthernet2/8/25-36switchportswitchportaccessvlan405switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10spanning-treeportfastnoshut!interfacerangeGigabitEthernet2/8/37-48switchportswitchportaccessvlan406switchportmodeaccessstorm-controlbroadcastlevel0.10storm-controlmulticastlevel0.10spanning-treeportfastnoshutnoshut!ipflow-exportdestination9996!monitorsession20sourceinterfaceGi1/7/16,Gi1/7/24,Gi1/7/34monitorsession20destinationinterfaceGi1/7/12monitorsession20destinationinterfaceGi1/8/48!2.数据中心两台6509E防火墙FWSM透明模式配置HT_SWLDA_4F_6509E_01HT_SWLDA_4F_6509E_01：！firewallvlan-group1402,412-414firewallmodule4vlan-group1!HT