[計(jì)算機(jī)]9508配置文檔

1、.T2商業(yè)網(wǎng)改造H3C 9508配置模板一、全局配置命令21.1 配置系統(tǒng)名稱21.2 配置HEADER21.3 配置super密碼21.4 定義網(wǎng)管ACL21.5 telnet服務(wù)功能21.5.1 9508都要手工開啟telnet服務(wù)21.5.2 創(chuàng)建telnet用戶21.5.3 開啟telnet本地認(rèn)證31.6 日志服務(wù)31.7 開啟TTL超時(shí)31.8 DLDP全局設(shè)置31.9 LLDP全局配置31.10 時(shí)鐘配置31.11 CONSOLE密碼認(rèn)證配置31.12 全局開啟DHCP4二、接口配置命令42.1 橋接組端口配置42.2 三層互連接口配置42.4 三層SVI口配置42.5 未進(jìn)行連

2、接的端口42.6 創(chuàng)建VLAN5三、OSPF協(xié)議配置53.1 OSPF進(jìn)程配置53.2 連ER1的互連接口53.3 連7506的互連接口53.3 連CR2北電8600的互連接口5四、SNMP配置6五、關(guān)閉不必要的服務(wù)6一、全局配置命令1.1 配置系統(tǒng)名稱設(shè)備所有的系統(tǒng)名稱都按此標(biāo)準(zhǔn)配置sysname T2-O-CR2-1-9508-1 1.2 配置HEADER所有9508的HEADER都按以下標(biāo)準(zhǔn)配置header login % * BCIA T2 Multi-service NETWORK * ONLY FOR AUTHORIZED PERSON * ANY ILLEGAL ACCESS I

3、S PROHIBITED *%1.3 配置super密碼所有9508的super密碼都是這個(gè)配置super password level 3 cipher Nms2010BRw 1.4 定義網(wǎng)管ACLacl number 2000 description NMS rule 0 permit source 10.1.6.0 0.0.0.255 rule 1 permit source 10.26.0.0 0.0.0.255 rule 2 permit source 10.20.0.250 0 rule 3 permit source 10.26.2.250 0 rule 4 deny sourc

4、e any1.5 telnet服務(wù)功能1.5.1 9508都要手工開啟telnet服務(wù)telnet server enable 1.5.2 創(chuàng)建telnet用戶local-user admin password cipher Nms2010BRo authorization-attribute level 1 service-type telnet ssh1.5.3 開啟telnet本地認(rèn)證user-interface vty 0 4 authentication-mode schemeidle-timeout 1 0user privilege level 1 set authenticat

5、ion password cipher Nms2010BRoacl 2000 inbound1.6 日志服務(wù)開啟日志同步、定義日志服務(wù)器并指定發(fā)送日志的源IP。info-centerinfo-center synchronousinfo-center loghost 10.20.0.250 channel loghost facility local7info-center loghost 10.26.2.250 channel loghost facility local7info-center loghost 10.1.6.55 channel loghost facility local

6、7info-center loghost source loopback 01.7 開啟TTL超時(shí)ip ttl-expires enable1.8 DLDP全局設(shè)置dldp enabledldp work-mode enhance1.9 LLDP全局配置lldp enable1.10 時(shí)鐘配置clock timezone beijing add 00:00:00ntp-service refclock-master增加時(shí)鐘級(jí)別為3 31.11 CONSOLE密碼認(rèn)證配置user-interface con 0authentication-mode password user privilege

7、 level 1 set authentication password simple Nms2010BRo idle-timeout 1 01.12 全局開啟DHCPDhcp enable二、接口配置命令2.1 橋接組端口配置interface Bridge-Aggregation1 description To_xxxxx port link-type access port access vlan 5002.2 三層互連接口配置interface GigabitEthernet 0/0/16 description To xxx( 對(duì)端設(shè)備名稱和接口名稱)port link-type a

8、ccess port access vlan 500speed 1000 duplex fulldldp enable port link-aggregation group 12.4 三層SVI口配置interface Vlan-interface 500 description To ER1 ip address 10.26.250.252 255.255.255.2522.5 未進(jìn)行連接的端口這些端口要關(guān)閉LLDP，并且將該端口關(guān)閉interface GigabitEthernet7/0/20undo lldp enableshutdown2.6 創(chuàng)建VLAN所有的VLAN都用name描

9、述，不用description描述vlan 500 name Manage三、OSPF協(xié)議配置3.1 OSPF進(jìn)程配置9508 ospf 的 router-id都設(shè)置為自己的環(huán)回口IP地址，自己的環(huán)回口要NETWORK進(jìn)OSPF進(jìn)程，互連VLAN接口要NETWORK到OSPF進(jìn)程。ospf 1 router-id 10.26.254.2area 0.0.0.0 network 10.26.250.252 0.0.0.0 network 10.26.254.2 0.0.0.0 network 10.26.250.21 0.0.0.0 network 10.26.250.13 0.0.0.0 ne

10、twork 10.26.250.5 0.0.0.0 network 10.26.250.41 0.0.0.0 network 10.26.250.34 0.0.0.0 network 10.26.250.25 0.0.0.0 network 10.26.3.5 0.0.0.03.2 連ER1的互連接口Ospf網(wǎng)絡(luò)類型為P2P，COST值為80,設(shè)置認(rèn)證方式為MD5。interface Vlan-interface50 description To_ER1_9508E ip address 10.26.250.252 255.255.255.252 ospf authentication-mod

11、e MD5 cipher BCIAbcia ospf cost 80 ospf network-type p2p3.3 連7506的互連接口Ospf網(wǎng)絡(luò)類型為P2P，COST值為10，設(shè)置認(rèn)證方式為MD5。interface Vlan-interface562 description To xxxx(對(duì)端設(shè)備及名稱) ip address 10.26.250.13 255.255.255.252 ospf authentication-mode MD5 cipher BCIAbcia ospf cost 10 ospf network-type p2p3.3 連CR2北電8600的互連接口Os

12、pf網(wǎng)絡(luò)類型為P2P，COST值為10，設(shè)置認(rèn)證方式為simple password。interface Vlan-interface562 description To xxxx(對(duì)端設(shè)備及名稱) ip address 10.26.3.5 255.255.255.252 ospf authentication-mode simple BCIAbcia ospf network-type p2p四、SNMP配置snmp-agentsnmp-agent sys-info contact BCIA-T2-Multi-service snmp-agent sys-info location T2BCI