[計算機]9508配置文檔

1、.T2商業(yè)網(wǎng)改造H3C 9508配置模板一、全局配置命令21.1 配置系統(tǒng)名稱21.2 配置HEADER21.3 配置super密碼21.4 定義網(wǎng)管ACL21.5 telnet服務功能21.5.1 9508都要手工開啟telnet服務21.5.2 創(chuàng)建telnet用戶21.5.3 開啟telnet本地認證31.6 日志服務31.7 開啟TTL超時31.8 DLDP全局設置31.9 LLDP全局配置31.10 時鐘配置31.11 CONSOLE密碼認證配置31.12 全局開啟DHCP4二、接口配置命令42.1 橋接組端口配置42.2 三層互連接口配置42.4 三層SVI口配置42.5 未進行連

2、接的端口42.6 創(chuàng)建VLAN5三、OSPF協(xié)議配置53.1 OSPF進程配置53.2 連ER1的互連接口53.3 連7506的互連接口53.3 連CR2北電8600的互連接口5四、SNMP配置6五、關閉不必要的服務6一、全局配置命令1.1 配置系統(tǒng)名稱設備所有的系統(tǒng)名稱都按此標準配置sysname T2-O-CR2-1-9508-1 1.2 配置HEADER所有9508的HEADER都按以下標準配置header login % * BCIA T2 Multi-service NETWORK * ONLY FOR AUTHORIZED PERSON * ANY ILLEGAL ACCESS I

3、S PROHIBITED *%1.3 配置super密碼所有9508的super密碼都是這個配置super password level 3 cipher Nms2010BRw 1.4 定義網(wǎng)管ACLacl number 2000 description NMS rule 0 permit source 10.1.6.0 0.0.0.255 rule 1 permit source 10.26.0.0 0.0.0.255 rule 2 permit source 10.20.0.250 0 rule 3 permit source 10.26.2.250 0 rule 4 deny sourc

4、e any1.5 telnet服務功能1.5.1 9508都要手工開啟telnet服務telnet server enable 1.5.2 創(chuàng)建telnet用戶local-user admin password cipher Nms2010BRo authorization-attribute level 1 service-type telnet ssh1.5.3 開啟telnet本地認證user-interface vty 0 4 authentication-mode schemeidle-timeout 1 0user privilege level 1 set authenticat

5、ion password cipher Nms2010BRoacl 2000 inbound1.6 日志服務開啟日志同步、定義日志服務器并指定發(fā)送日志的源IP。info-centerinfo-center synchronousinfo-center loghost 10.20.0.250 channel loghost facility local7info-center loghost 10.26.2.250 channel loghost facility local7info-center loghost 10.1.6.55 channel loghost facility local

6、7info-center loghost source loopback 01.7 開啟TTL超時ip ttl-expires enable1.8 DLDP全局設置dldp enabledldp work-mode enhance1.9 LLDP全局配置lldp enable1.10 時鐘配置clock timezone beijing add 00:00:00ntp-service refclock-master增加時鐘級別為3 31.11 CONSOLE密碼認證配置user-interface con 0authentication-mode password user privilege

7、 level 1 set authentication password simple Nms2010BRo idle-timeout 1 01.12 全局開啟DHCPDhcp enable二、接口配置命令2.1 橋接組端口配置interface Bridge-Aggregation1 description To_xxxxx port link-type access port access vlan 5002.2 三層互連接口配置interface GigabitEthernet 0/0/16 description To xxx( 對端設備名稱和接口名稱)port link-type a

8、ccess port access vlan 500speed 1000 duplex fulldldp enable port link-aggregation group 12.4 三層SVI口配置interface Vlan-interface 500 description To ER1 ip address 10.26.250.252 255.255.255.2522.5 未進行連接的端口這些端口要關閉LLDP，并且將該端口關閉interface GigabitEthernet7/0/20undo lldp enableshutdown2.6 創(chuàng)建VLAN所有的VLAN都用name描

9、述，不用description描述vlan 500 name Manage三、OSPF協(xié)議配置3.1 OSPF進程配置9508 ospf 的 router-id都設置為自己的環(huán)回口IP地址，自己的環(huán)回口要NETWORK進OSPF進程，互連VLAN接口要NETWORK到OSPF進程。ospf 1 router-id 10.26.254.2area 0.0.0.0 network 10.26.250.252 0.0.0.0 network 10.26.254.2 0.0.0.0 network 10.26.250.21 0.0.0.0 network 10.26.250.13 0.0.0.0 ne

10、twork 10.26.250.5 0.0.0.0 network 10.26.250.41 0.0.0.0 network 10.26.250.34 0.0.0.0 network 10.26.250.25 0.0.0.0 network 10.26.3.5 0.0.0.03.2 連ER1的互連接口Ospf網(wǎng)絡類型為P2P，COST值為80,設置認證方式為MD5。interface Vlan-interface50 description To_ER1_9508E ip address 10.26.250.252 255.255.255.252 ospf authentication-mod

11、e MD5 cipher BCIAbcia ospf cost 80 ospf network-type p2p3.3 連7506的互連接口Ospf網(wǎng)絡類型為P2P，COST值為10，設置認證方式為MD5。interface Vlan-interface562 description To xxxx(對端設備及名稱) ip address 10.26.250.13 255.255.255.252 ospf authentication-mode MD5 cipher BCIAbcia ospf cost 10 ospf network-type p2p3.3 連CR2北電8600的互連接口Os

12、pf網(wǎng)絡類型為P2P，COST值為10，設置認證方式為simple password。interface Vlan-interface562 description To xxxx(對端設備及名稱) ip address 10.26.3.5 255.255.255.252 ospf authentication-mode simple BCIAbcia ospf network-type p2p四、SNMP配置snmp-agentsnmp-agent sys-info contact BCIA-T2-Multi-service snmp-agent sys-info location T2BCI