User Access Verification
Password:
Router>en
Password:
Router#sh run
Building configuration...
Current configuration:
!
version 12.0
service config
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
enable secret 5 $1$EquO$SRkNp.arQ30KRRWkl8xVV1
!
ip subnet-zero
no ip finger
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.100.1 255.255.255.0
ip helper-address 110.111.112.3
no ip directed-broadcast
no ip mroute-cache
full-duplex
no cdp enable
no mop enabled
!
interface ATM1/0
ip address 10.130.22.2 255.255.255.0
ip access-group 101 in
ip access-group 101 out
no ip redirects
no ip unreachables
no ip directed-broadcast
no atm ilmi-keepalive
pvc 15/50
protocol ip 10.130.22.1 broadcast
!
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.130.22.1
ip route 110.111.112.0 255.255.255.0 192.168.100.3
ip route 110.111.46.0 255.255.255.0 192.168.100.3
ip route 110.111.47.0 255.255.255.0 192.168.100.3 需要指定小范围
ip route 172.16.0.0 255.255.0.0 192.168.100.3 针对三层交换，路由需要回指
ip route 192.168.0.0 255.255.0.0 192.168.100.3 不起作用
no ip http server
!
access-list 100 permit ip any any
snmp-server engineID local 000000090200000628D632C0
snmp-server community szz RO
!
line con 0
exec-timeout 0 0
transport input none
line aux 0
line vty 0 4
access-class 50 in
password 719szzsjz
login
!
end
Router#
主4503交换
11203每次启动都进rom，需要boot才能进IOS，config-register是0x2102 正确的是0x2101
路由追踪命令 ： tracert 目的地址
User Access Verification
Password:
zhl>en
Password:
zhl#sh run
Building configuration...
Current configuration : 4855 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname zhl
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$ulmR$faZIdRpZ7Ln4AtdPelgds.
!
no aaa new-model
ip subnet-zero
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
power redundancy-mode redundant
!
!
!
vlan internal allocation policy ascending
!
interface FastEthernet1
ip address 10.1.8.41 255.255.0.0
speed auto
duplex auto
!
interface GigabitEthernet1/1
switchport access vlan 47
switchport mode access
!
interface GigabitEthernet1/2
switchport access vlan 47
switchport mode access
!
interface GigabitEthernet1/3
switchport access vlan 47
switchport mode access
!
interface GigabitEthernet1/4
switchport access vlan 47
switchport mode access
!
interface GigabitEthernet1/5
switchport access vlan 47
switchport mode access
!
interface GigabitEthernet1/6
switchport access vlan 47
switchport mode access
!
interface GigabitEthernet1/7
switchport access vlan 47
switchport mode access
!
interface GigabitEthernet1/8
switchport access vlan 112
switchport mode access
!
interface GigabitEthernet1/9
switchport access vlan 112
switchport mode access
!
interface GigabitEthernet1/10
switchport access vlan 46
switchport mode access
!
interface GigabitEthernet1/11
description to kjl
switchport trunk encapsulation dot1q trunk口封装
switchport mode trunk
!
interface GigabitEthernet1/12
no switchport
ip address 192.168.100.3 255.255.255.0 三层口
!
interface GigabitEthernet1/13
!
interface GigabitEthernet1/14
!
interface GigabitEthernet1/15
!
interface GigabitEthernet1/16
!
interface GigabitEthernet1/17
!
interface GigabitEthernet1/18
!
interface GigabitEthernet1/19
!
interface GigabitEthernet1/20
!
interface Vlan1
ip address 192.168.101.1 255.255.255.0 vlan建立
!
interface Vlan112
ip address 110.111.112.1 255.255.255.0
ip helper-address 110.111.112.7 指定dhcp服务器
!
interface Vlan4
ip address 110.111.46.1 255.255.255.0
ip helper-address 110.111.112.7
!
interface Vlan47
ip address 110.111.47.1 255.255.255.0
ip helper-address 110.111.112.7
!
interface Vlan48
no ip address
!
interface Vlan100
ip address 172.16.100.1 255.255.255.0
ip access-group 100 in 访问控制列表绑定到vlan接口
!
interface Vlan121
ip address 172.16.121.1 255.255.255.0
ip access-group 100 in
!
interface Vlan122
ip address 172.16.122.1 255.255.255.0
ip access-group 100 in
!
interface Vlan123
ip address 172.16.123.1 255.255.255.0
ip access-group 100 in
!
interface Vlan131
ip address 172.16.131.1 255.255.255.0
ip access-group 100 in
!
interface Vlan132
ip address 172.16.132.1 255.255.255.0
ip access-group 100 in
!
interface Vlan133
ip address 172.16.133.1 255.255.255.0
ip access-group 100 in
!
interface Vlan141
ip address 172.16.141.1 255.255.255.0
ip access-group 100 in
!
interface Vlan142
ip address 172.16.142.1 255.255.255.0
!
interface Vlan143
ip address 172.16.143.1 255.255.255.0
ip access-group 100 in
!
interface Vlan151
ip address 172.16.151.1 255.255
ip access-group 100 in
!
interface Vlan152
ip address 172.16.152.1 255.255.255.0
ip access-group 100 in
!
interface Vlan161
ip address 172.16.161.1 255.255.255.0
ip access-group 100 in
!
interface Vlan162
ip address 172.16.162.1 255.255.255.0
ip access-group 100 in
!
interface Vlan163
ip address 172.16.163.1 255.255.255.0
ip access-group 100 in
!
interface Vlan171
ip address 172.16.171.1 255.255.255.0
ip access-group 100 in
!
interface Vlan172
ip address 172.16.172.1 255.255.255.0
ip access-group 100 in
!
interface Vlan173
ip address 172.16.173.1 255.255.255.0
ip access-group 100 in
!
interface Vlan200
ip address 172.16.200.1 255.255.255.0
ip access-group 100 in
!
ip route 0.0.0.0 0.0.0.0 192.168.100.1 启动ip routing
ip route 110.111.0.0 255.255.0.0 192.168.100.1
ip http server 浏览器访问交换机
!
!
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.2
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.3
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.4
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.5
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.6
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.7
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.8
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.9
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.10
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.11
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.12
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.13
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.14
access-list 100 permit ip 172.16.0.0 0.0.255.255 host 110.111.112.15
access-list 100 deny ip 172.16.0.0 0.0.255.255 any
!
!
!
line con 0
stopbits 1
line vty 0 4
password letmein
login
!
!
end
zhl#sh vtp sta
zhl#sh vtp status
VTP Version : 2
Configuration Revision : 22
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Server
VTP Domain Name : szz
VTP Pruning Mode : Disabled
VTP V2 Mode : Enabled
VTP Traps Generation : Disabled
MD5 digest : 0xB1 0x 0x0A 0xC7 0xB8 0xBA 0xFB 0xCE
Configuration last modified by 192.168.101.1 at 10-30-08 22:12:09
Local updater ID is 192.168.101.1 on interface Vl1 (lowest numbered VLAN interfa
ce found)
zhl#
从4503交换
User Access Verification
Password:
kjl>en
Password:
kjl#sh run
Building configuration...
Current configuration : 1983 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname kjl
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$v6nr$bg4ZpI6IczFufJekU2LB70
!
no aaa new-model
ip subnet-zero
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
power redundancy-mode redundant
!
!
!
! vlan internal allocation policy ascending
interface GigabitEthernet1/1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/2
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/3
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/4
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/7
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/8
switchport access vlan 112
switchport mode access
!
interface GigabitEthernet1/9
switchport access vlan 112
switchport mode access
!
interface GigabitEthernet1/10
switchport access vlan 112
switchport mode access
!
interface GigabitEthernet1/11
switchport access vlan 112
switchport mode access
!
interface GigabitEthernet1/12
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/13
!
interface GigabitEthernet1/14
!
interface GigabitEthernet1/15
!
interface GigabitEthernet1/16
!
interface GigabitEthernet1/17
!
interface GigabitEthernet1/18
!
interface GigabitEthernet1/19
!
interface GigabitEthernet1/20
!
interface Vlan1
ip address 192.168.101.2 255.255.255.0 管理地址
no ip redirects
!
ip route 110.111.0.0 255.255.0.0 192.168.101.1 两个11203的话需要回指
no ip http server
!
!
!
!
!
line con 0
stopbits 1
line vty 0 4
password letmein
login
!
!
end
kjl#下载本文
