案朝陽驗收配置手冊

1、文檔編號：CY1-PZ-NET-1朝陽區(qū)現(xiàn)代教育技術(shù)信息網(wǎng)（一期）系統(tǒng)配置文檔北京北辰東軟二零零一年九月項目名稱：朝陽教育信息系統(tǒng)子系統(tǒng)（項目）名稱：子系統(tǒng)本文檔系朝陽教育信息系統(tǒng)一期工程的系統(tǒng)集成的技術(shù)總結(jié)報告，目的是對工程實施過提交用戶運(yùn)行管理提供依據(jù)和參考。采用和選擇的進(jìn)行總結(jié)，在一期工程實施接近尾聲之際，向參與朝陽教育實施及朝陽教育信息系統(tǒng)前期準(zhǔn)備論證工作的，和技術(shù)表示誠摯的感謝。編寫人：、編寫日期：2001/9/2審核人：德審核日期：2001/9/發(fā)布人：德發(fā)布日期：北京北辰東軟2/167FY_6509Worksheet北京北辰東軟3/167FY_6509AC PS2AC PS13/

2、13/23/33/42/12/22/32/42/52/61/1Site Preparation ChecklistInstallation Site: FY Installation Date (month/day/year)/ Main Contact: Telephone Number:Pager Number: Site Contact: Telephone Number:Pager Number: Site Voice Telephone Number: Chassis Serial No.: Device Name: FY-6509IP: 0Mask: 255.2

3、55.255.0Site Planning Checklist北京北辰東軟4/167Planning TaskVerifiedByDateSpace evaluation:Space and layout Floor covering Impact and vibration Lighting Maintenance accessOkEnvironmental evaluation: Ambient temperature HumidityAltitudeAtmospheric contamination AirflowInstallation Prepareation Checklist北京

4、北辰東軟5/167Power evaluation: Input power typePower receptacles (20A for the Catalyst 6000 switch)Receptacle proximity to the equipment Dedicated(separate)circuitsforredundant power suppliesUPS for power failuresGrounding evaluation:Circuit breaker sizeCable and interface equipment evaluation:Cable typ

5、e Connector typeCable distance limitationsInterface equipment (transceivers)EMI evaluation:Distance limitations for signaling Site wiringRFI levelsCable Preparation Checklist:1)RJ-45-to-RJ-45 cable and one RJ-45-to-DB-9 or RJ-45-to-DB-25 female DTEadapter.2)SC-type fiber-optic connectors to connect

6、to the Fast Ethernetfiber-optic portsSC-type fiber-optic connectors to connect to the Gigabit Ethernet fiber-optic portsmultimode3)multimodeHardware Installation and Test GuideInstalling the Rack-Mount KitStep 1: Check the Rack Rack-Mount Kit Checklist北京北辰東軟6/167Part DescriptionReceivedInstallation

7、Prepareation TaskVerifiedByDateCheck the packing slip to ensure that all the proper components are presentOKEnsure the site is set up properly:Prepare equipment racksEnsure the environment is within specification Prepare network connectionsObtain the following equipment:ESD grounding strap and antis

8、tatic matNumbers 1 and 2 Phillips screwdrivers and 3/16-inch flat blade screwdriverTape measure and levelEnsure your safety when installing the Catalyst 6509 switch: Lift the chassis safelyCooperate with the natural laws of electricityEnsure that the power service at your site is suitable for the ch

9、assis you are connectingTake steps to prevent ESD damage to electronic components:Use an ESD wrist strap when handling modules or coming into contact with internal components (seefigure)Handle modules by the edges onlyPlace modules in a static shielding bag when not installedStep 2: The two shelf br

10、ackets support the weight of the chassis in the rack. Install theshelfbrackets asfollows:(a) Position the shelf brackets in the rack (see Figure 4-11).(b) Secure the shelf brackets by using six (three per side) 12-24 x 3/4-inch or 10-32 x 3/4-inch screws.(c) Attach the cross-bar bracket to the back

11、of the shelf brackets using two M3 screws.Step 3 The L brackets connect the chassis to the rack. Install the L brackets by attaching the left and right L brackets using the eight M4 Phillips countersunk-head screws provided in the rack-mount kit (see Figure 4-12).北京北辰東軟7/1672 L bracketsM3 Phillips c

12、ountersunk-head screwsM4 Phillips countersunk-head screws12-24 x 3/4-inch Phillips binder-head screws10-32 x 3/4-inch Phillips binder-head screws2 Shelf brackets1 Crossbar bracketM3 Phillips pan-head screwsStep 4 Install the chassis in the rack as follows:Step 5: Check the ejector levers to ensure t

13、hat the supervisor engine and all switching modulesare Installed securely.Step 6: Tighten any loose captive installation screws on the supervisor engine and switchingmodules.Step 7: Connect the power supplies to the site power.北京北辰東軟8/167Installing an AC-Input Power SupplyStep 1 Turn OFF the power s

14、witch on the power supply you are installing.Step 2 Grasp the power supply handle with one hand. Place your other hand underneath to support the bottom of the supply.Step 3 Slide the power supply all the way into the power supply bay.Step 4 Use a flat-blade screwdriver to tighten the captive install

15、ation screw(s)Step 6 Plug the power cord into the power supply.Step 7 Connect the other end of the power cord to an AC-power input source.Step 8 Turn the power switch to the ON position on the power supply.Step 9 Verify power supply operation.1. Verify the power supply front panel LEDs are in the fo

16、llowing states: AC OK LED is greenFAN OK LED is green OUTPUT FAIL LED is not lit2. Verify that the appropriate supervisorengine module PS1 and PS2 LEDs are green.3. Enter the show system command to display the power supply and system status.Connect the Switch to the Network1 Connect a terminal to th

17、e console portTo connect a terminal to the Supervisor Engine III console port, plug an RJ-45-to-RJ-45 straight-through cable into the console port jack. Use an RJ-45-to-DB-25 or RJ-45-to-DB-9 adapter to connect to the terminal.北京北辰東軟9/1672 Connect the switch ports to the networkSC-Type Fiber Optic：T

18、o connect to modules with SC-type fiber-optic interfaces, use single-mode or multimode fiber-optic cable with male SC-type connectors.3Connect the Power1. Verify that each power supply is properly installed in its bay. Make sure the power supplies are OFF (0).2. Connect an AC power cableto each powe

19、r supply. Use theretainingcliptosecurethecordtoeachpowersupplyconnection.3. Attach eachpower cable toa grounded outlet. If possible,北京北辰東軟10/167connect each cable to an outlet on a separate circuit. Make surethat the source power is within range.4InsertingandRemoving Modules1. Align the edges of the

20、 module with the card guides on each side of the slot (see figure).2. Ensure that the ejector levers are in the out position. Keeping the module horizontal, slide the module into the slot until the ejector levers contact the chassis.3. Push both ejector levers in simultaneously to seat the connector

21、.4. Tighten the captive screws with a flat-blade screwdriver.moduleinthebackplane北京北辰東軟11/167Hardware and Software Configuration GuideModular Description北京北辰東軟12/167SlotModuleSerial No.MACAdd.HWVersionFWVersionSWVersion11000BaseX Supervisor(WS-X6K-SUP2-2G E)WS-F6K-PFC2SAD051301 7RSAD051702 BA00-02-7

22、e-27-b5-66 to 00-02-7e-27-b5-67 00-02-7e-27-b5-64 to 00-02-7e-27-b5-65 00-d0-04-cd-34-00to 00-d0-04-cd-37-ff2.26.1(3)6.2(2)Multilayer Switch Feature(WS-F6K-MSFC2)SAD05090B BL00-05-5e-69-a6-00 to00-05-5e-69-a6-3f1.212.1(7a) E112.1(7a) E121000BaseX Ethernet(WS-X6408A-GBIC)SAL05157L GY00-05-31-30-36-d0

23、 to00-05-31-30-36-d72.05.4(2)6.2(2)31000BaseX Ethernet(WS-X6408A-GBIC)SAL05157L GJ00-05-31-30-36-28 to00-05-31-30-36-2f2.05.4(2)6.2(2)4Empty5EmptySlot DescriptionSoftware Configuration Discription1. System Information6.2(2)SW Software Version: RSM Software Version: System Name:System Location: Syste

24、m Contact:System Clock Time:12.1(7a)E1FY_6509北京北辰東軟13/167Slot/PortNo.VLAN No.RSM InterfaceDuplex(Full/Half)Speed(100/1000M)RSM InterfaceDES Address1/1VLAN900Full1000M2/1VLAN90Full1000M2/2VLAN90478Full1000M2/3VLAN13Full1000M2/4VLAN14Full100

25、0M2/5VLAN12Full1000M2/6VLAN9052Full1000M3/1trunkFull1000M3/2VLAN908Full1000M3/3VLAN909Full1000M3/4VLAN802-VLAN805Full1000M6Empty7Empty8Empty9EmptyUnpriviledged Password: Priviledged Password: Login Banner:Sc0 IP Address: Subnetmask: Default Gateway: Vlan ID:IP DNS Server:10.128.

26、5.1092.RSM Configuration Information北京北辰東軟14/167RSMInterfaceVLANNameIP SubnetworkingRouter Address999Default/24012VLAN1/2413VLAN13/2414VLAN14/2420VLAN20/24802I

27、nternet/24803MMedu/24804Netmanage/24805Countfee/24806Mis/24900FY_6509-HJD_4006/30901FY_6509-GBJ_6506/30904FY_6509-JW_65066/307905F

28、Y_6509-FY_CJLM_40030/301908FY_6509-LC5503/303909FY_6509-120081/291Routing Protocol Configuration Information:RSM1 Loopback0 Interface IP Address: 54/ 55 Network: 55Area: 2Configuration fileFY_6509&g

29、t; (enable) sh con allbegin!# * ALL (DEFAULT and NON-DEFAULT) CONFIGURATION *!#time: Fri Nov 2 2001, 12:48:39!#version 6.2(2)!set password $2$yquj$sR/0LTVLiy6PA1ekiJ8Q10set enablepass $2$neM5$5ZHFjfU4KE3s/1WBUdkQW0 set prompt Console>set length 24 default set logout 20set config mode binary set b

30、anner motd CC set banner lcd CC!#testset test diaglevel minimal!#errordetectionset errordetection inband disable set errordetection memory disableset errordetection portcounter enable!#systemset system baud9600 set system modem disableset system nameFY_6509 set system locationset system contact北京北辰東

31、軟15/167set system countrycode set traffic monitor 100set system highavailability disableset system highavailability versioning disable set system crossbar-fallback bus-modeset system switchmode allow truncated set system switchmode threshold 2set system core-dump disableset system core-fileslot0:cra

32、shinfo set feature log-command enableset feature supmon enable!#powerset power redundancy enable!#frame distribution methodset port channel all distribution ip both!#mac address reductionset spantree macreduction disable!#default portcost modeset spantree defaultcostmode short!#snmpset snmp commu se

33、t snmp commuset snmp commuread-onlyread-writepublicprivateread-write-all secretset snmp rmon disableset snmp rmonmemory 85set set set set set set set set set set set set!#tacacs+disable module disable chassis disable bridge disable repeater disable vtp disable auth disable ippermit disable vmps disa

34、ble entity disable config disable stpxdisable syslog北京北辰東軟16/167set tacacs attempts 3set tacacs directedrequest disable set tacacs timeout 5!#radiusset radius deadtime 0 set radius timeout 5 set radius retransmit 2!#kerberos!#authenticationset authentication login tacacs disable console set authenti

35、cation login tacacs disable telnet set authentication login tacacs disable httpset authentication enable tacacs disable console set authentication enable tacacs disable telnet set authentication enable tacacs disable httpset authentication login radius disable console set authentication login radius

36、 disable telnet set authentication login radius disable httpset authentication enable radius disable console set authentication enable radius disable telnet set authentication enable radius disable httpset authentication login local enable console set authentication login local enable telnet set aut

37、hentication login local enable httpset authentication enable local enable console set authentication enable local enable telnet set authentication enable local enable httpset authentication login kerberos disable console set authentication login kerberos disable telnet set authentication login kerbe

38、ros disable httpset authentication enable kerberos disable console set authentication enable kerberos disable telnet set authentication enable kerberos disable httpset authentication login attempt 3 console set authentication login attempt 3 telnet set authentication login lockout 0 console set auth

39、entication login lockout 0 telnetset authentication enable attempt 3 console set authentication enable attempt 3 telnet set authentication enable lockout 0 consoleset authentication enable lockout 0 telnet北京北辰東軟17/167!#stp modeset spantree mode pvst+!#vtpset vtp domain FY set vtp mode server set vtp

40、 v2 disableset vtp pruning disableset vtp pruneeligible 2-1000 clear vtp pruning 1001-1005set vlan 1 name default type ethernet mtu 1500 said 100001 state active set vlan 20 name cyfy type ethernet mtu 1500 said 100020 state activeset vlan 802 name Internet type ethernet mtu 1500 said 100802 state a

41、ctive set vlan 803 name MMedu type ethernet mtu 1500 said 100803 state activeset vlan 804 name netmanager type ethernet mtu 1500 said 100804 state active set vlan 805 name Countfee type ethernet mtu 1500 said 100805 state active set vlan 806 name mis type ethernet mtu 1500 said 100806 state activese

42、t vlan 900 name FY_6509-HJD_4006 type ethernet mtu 1500 said 100900 state active set vlan 901 name FY_6509_1-GBJ_6506 type ethernet mtu 1500 said 100901 state active set vlan 904 name FY_6509-JW_6596 type ethernet mtu 1500 said 100904 state activeset vlan 905 name fy_6509-fy_cjlm_4003 type ethernet

43、mtu 1500 said 100905 state active set vlan 908 name FY_6509-LC550 type ethernet mtu 1500 said 100908 state activeset vlan 909 name FY_6509-12008 type ethernet mtu 1500 said 100909 state active set vlan 999 name device type ethernet mtu 1500 said 100999 state activeset vlan 1002 name fddi-default typ

44、e fddi mtu 1500 said 101002 state activeset vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active stp ieee set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active stp ibmset vlan 11-14,801,1000set vlan 1003 name token-ring-default type trcrf mtu 1500 sai

45、d 101003 state active mode srb aremaxhop 0 stemaxhop 0 backupcrf offset dot1q-all-tagged disable!#ipset feature mdg enableset feature psync-recovery no-powerdownset interface sc0 999 0/ 55set interface sc0 upset interface sl0 set interface sl0 downset

46、 arp agingtime 1200set ip redirectenableset ip unreachableenable北京北辰東軟18/167set ip fragmentation enable set ip route / set ip alias default!#command alias!#vmpsset vmps server retry 3set vmps server reconfirminterval 60 set vmps downloadmethod tftpset vmps downloadserv

47、er vmps-config-database.1set vmps state disable!#rcpset rcp username!#dnsset ip dns disable!#spantree #uplinkfast groupsset spantree uplinkfast disable #backbonefastset spantree backbonefast disable #portfastset spantree portfast bpdu-guard disable set spantree portfast bpdu-filter disable #

48、bpdu-skewingset spantree bpdu-skewing disable#vlan 1003set spantree enable1003set spantree fwddelay 4 set spantree hello2set spantree maxage100310031003100310set spantree priority 32768#vlan 1005set spantree enable1005set spantree fwddelay 4 set spantree hello2set spantree maxage100510051005100510se

49、t spantree priority 32768#vlan(defaults)set spantree enable1,11-14,20,801-806,900-901,904-905,908-909,999-1000北京北辰東軟19/167set spantree fwddelay 15set spantree hello21,11-14,20,801-806,900-901,904-905,908-909,999-10001,11-14,20,801-806,900-901,904-905,908-909,999-10001,11-14,20,801-806,900-901,904-90

50、5,908-909,999-10001,11-14,20,801-806,900-901,904-905,908-909,999-1000set spantree maxage20set spantree priority 32768!#syslogset logging console enable set logging telnet enable set logging server disableset logging level cdp 4 default set logging level mcast 2 default set logging level dtp 5 defaul

51、t set logging level earl 2 default set logging level ip 2 defaultset logging level pruning 2 default set logging level snmp 2 default set logging level spantree 2 default set logging level sys 5 defaultset logging level tac 2 default set logging level tcp 2 default set logging level telnet 2 default

52、 set logging level tftp 2 default set logging level vtp 2 default set logging level vmps 2 default set logging level kernel 2 defaultset logging level filesys 2 default set logging level pagp 5 default set logging level mgmt 5 default set logging level mls 5 default set logging level protfilt 2 defa

53、ultset logging level security 2 default set logging level radius 2 default set logging level udld 4 defaultset logging level gvrp 2 default set logging level cops 3 default set logging level qos 3 default set logging level acl 5 default set logging level rsvp 3 default set logging level ld 3 default

54、set logging level privatevlan 3 default set logging server facility LOCAL7 set logging server severity 4set logging timestamp enableset logging buffer 500北京北辰東軟20/167set logging history 1!#ntpse se sesep broadcastclient disable p broadcastdelay 3000p client disablep authentication disableclear timezoneset summertime disable set summertime recurring!#set boot commandset boot config-register 0x2set bo