復(fù)擦大學(xué)校嗭網(wǎng)主干網(wǎng)緜勊配置

1、復(fù)旦大學(xué)校園網(wǎng)主干網(wǎng)絡(luò)復(fù)旦大學(xué)校園網(wǎng)是一個綜合高效的教學(xué)和科研的校園計算環(huán)境。它不僅是一個大型的網(wǎng)絡(luò)通訊平臺，而且是一個基于寬帶網(wǎng)絡(luò)，集成多種應(yīng)用，并具有強大的資源管理和安全防范機制的綜合服務(wù)體系。其主干網(wǎng)絡(luò)采用光纖通訊介質(zhì)，以622M ATM技術(shù)為基礎(chǔ)，融合155M ATM和光纖快速以太網(wǎng)等多種通訊技術(shù)基本覆蓋了整個校園。在高層網(wǎng)絡(luò)協(xié)議方面以Intranet模型為基本架構(gòu)，多數(shù)上層應(yīng)用完全基于TCP/IP協(xié)議族實現(xiàn)。一 網(wǎng)絡(luò)結(jié)構(gòu)1物理層:校園網(wǎng)物理拓撲采用分級網(wǎng)絡(luò)構(gòu)，即將校園骨干網(wǎng)分為核心網(wǎng)和分支網(wǎng)兩部分。核心網(wǎng)絡(luò)層是整個系統(tǒng)的中心，它提供一個高速ATM的網(wǎng)絡(luò)通信平臺以及網(wǎng)絡(luò)核心管理服務(wù)，由

2、三個核心節(jié)點及一組12芯多模光纖、一組4芯單模光纖組成環(huán)型網(wǎng)絡(luò)。分支網(wǎng)絡(luò)由核心節(jié)點向外輻射到各院系大樓的4芯光纜和上行的節(jié)點設(shè)備組成。院系大樓的局域網(wǎng)則通過上行節(jié)點設(shè)備連入校園骨干網(wǎng)?，F(xiàn)有分支網(wǎng)節(jié)點45個。分級網(wǎng)絡(luò)的拓撲結(jié)構(gòu)如下圖所示。校園網(wǎng)分級網(wǎng)絡(luò)拓撲結(jié)構(gòu)示意圖2與ATM相關(guān)層次校園網(wǎng)絡(luò)以622M和155M ATM為基礎(chǔ)通訊平臺，采用LANE和MPOA技術(shù)實現(xiàn)與傳統(tǒng)以太網(wǎng)和TCP/IP協(xié)議的融合，支持UNI 3.0/3.1UNI 4.0 IISP PNNI1.0等接口協(xié)議，支持SVC 、PVC和線路冗余，支持LANE 1.0和MPOA 1.0，可實現(xiàn)QoS（服務(wù)質(zhì)量）控制。ATM網(wǎng)絡(luò)拓撲結(jié)構(gòu)

3、示意圖如下。 校園網(wǎng)ATM網(wǎng)絡(luò)物理拓撲結(jié)構(gòu)示意圖3Ethernet 和TCP/IP層提供符合IEEE 802.X標準的10M、100M雙絞線和光纖以太網(wǎng)接口，并且具備千兆以太網(wǎng)的升級能力，系統(tǒng)支持基于MAC、Port、應(yīng)用等多種VLAN的劃分功能，虛網(wǎng)間通訊通過三層交換實現(xiàn)，虛網(wǎng)間有基于地址和應(yīng)用的安全控制策略。作為支持路徑選擇和廣播等功能的重要設(shè)備如MPOA(LANE) Server支持冗余，發(fā)生故障時可實現(xiàn)透明替換。二 網(wǎng)絡(luò)設(shè)備1 核心交換機：校園網(wǎng)的核心交換機為Cisco Catalyst 5500，模塊配置如下：¨ WS-X5530-E1Catalyst 5000系列的主控模

4、塊（2/3寬）¨ WS-U5533-FEFX-MMF雙口千兆以太網(wǎng)模塊（1/3寬）¨ WS-X5304-15路由交換模塊（占兩個插槽）¨ WS-X5161雙多模SC口，622M的 LANE模塊（全寬）¨ WS-X5225R24個RJ45口10/100M自適應(yīng)的以太網(wǎng)模塊（全寬）¨ WAI-OC12-1SS622M的ATM模塊，單口，單模SC接口（半寬）¨ WAI-OC12-1MM622M的ATM模塊，單口，多模SC接口（半寬）¨ WAI-OC3-4MM155M的ATM模塊，4口，多模SC接口（半寬）¨ WAI-AT

5、M25-12P25M的ATM模塊，12口（半寬）¨ WATM-CAM-2PLightStream 1100，ATM控制模塊（全寬）其中，各交換機配置略有不同，基本都具有以上模塊，但只有綜合樓的Catalyst 5500配置有路由交換模塊。各交換機內(nèi)部，都有一對多模光纖將一塊WAI-OC12-1MM與WS-X5161相連，解決ATM網(wǎng)絡(luò)與LANE SERVER之間的連接問題；有一根雙絞線將WS-X5225R的1號端口與WATM-CAM-2P相連，便于通過Telnet方式訪問LightStream 1100。各核心交換機的軟件主要配置如下：:beginset p

6、assword $1$zAMC$2LOVfCNiXBGB8SirgVHeD0set enablepass $1$6IJa$u1GuPffajYwdanxTypoeQ0set prompt 228.2>set length 24 defaultset logout 0set banner motd CC!#systemset system baud 9600set system modem disableset system name 5500-2set system location Synthetics Buildingset system contact Ye Jiawei!#snm

7、pset snmp community read-only publicset snmp community read-write fudanset snmp community read-write-all rootset snmp rmon enableset snmp trap enable moduleset snmp trap enable chassisset snmp trap enable bridgeset snmp trap enable repeaterset snmp trap enable vtpset snmp trap enable authset snmp tr

8、ap enable ippermitset snmp trap enable vmpsset snmp trap disable entityset snmp trap enable configset snmp trap enable stpxset snmp trap 28 fudan!#ipset interface sc0 1 55set interface sc0 upset interface sl0 set interface sl0 upse

9、t arp agingtime 1200set ip redirect enableset ip unreachable enableset ip fragmentation enableset ip route 1set ip alias default !#Command alias!#vmpsset vmps server 8 primaryset vmps server retry 3set vmps server reconfirminterval 60set vmps tftpserver 202.

10、120.228.18 vmps-config-database.1set vmps state disable!#dnsset ip dns disable!#tacacs+set tacacs attempts 3set tacacs directedrequest disableset tacacs timeout 5set authentication login tacacs disableset authentication login local enableset authentication enable tacacs disableset authentication ena

11、ble local enable!#bridgeset bridge ipx snaptoether 8023rawset bridge ipx 8022toether 8023set bridge ipx 8023rawtofddi snap!#vtpset vtp domain fdunetset vtp mode serverset vtp v2 enableset vtp pruning disableset vtp pruneeligible 2-1000clear vtp pruneeligible 1001-1005set vlan 1 name default type eth

12、ernet mtu 1500 said 100001 state activeset vlan 2 name vlan2 type ethernet mtu 1500 said 100002 state activeset vlan 79 name vlan79 type ethernet mtu 1500 said 100079 state activeset vlan 80 name vlan80 type ethernet mtu 1500 said 100080 state activeset vlan 1002 name fddi-default type fddi mtu 1500

13、 said 101002 state activeset vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state actiset vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bset vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active p!#spantree#uplinkfast groupsset spantr

14、ee uplinkfast disable#backbonefastset spantree backbonefast disableset spantree enable all#vlan 1set spantree fwddelay 15 1set spantree hello 2 1set spantree maxage 20 1set spantree priority 32768 1#vlan 2set spantree fwddelay 15 2set spantree hello 2 2set spantree maxage 20 2set spantree priority 3

15、2768 2#vlan 79set spantree fwddelay 15 79set spantree hello 2 79set spantree maxage 20 79set spantree priority 32768 79#vlan 80set spantree fwddelay 15 80set spantree hello 2 80set spantree maxage 20 80set spantree priority 32768 80#vlan 1003set spantree fwddelay 4 1003set spantree hello 2 1003set s

16、pantree maxage 10 1003set spantree priority 32768 1003set spantree portstate 1003 auto 1005set spantree portcost 1003 62set spantree portpri 1003 4set spantree portfast 1003 disable#vlan 1005set spantree fwddelay 4 1005set spantree hello 2 1005set spantree maxage 10 1005set spantree priority 32768 1

17、005set spantree multicast-address 1005 ieee!#cgmpset cgmp disableset cgmp leave disable!#syslogset logging console enableset logging server disableset logging level cdp 2 defaultset logging level mcast 2 defaultset logging level dtp 5 defaultset logging level dvlan 2 defaultset logging level earl 2

18、defaultset logging level fddi 2 defaultset logging level ip 2 defaultset logging level pruning 2 defaultset logging level snmp 2 defaultset logging level spantree 2 defaultset logging level sys 5 defaultset logging level tac 2 defaultset logging level tcp 2 defaultset logging level telnet 2 defaults

19、et logging level tftp 2 defaultset logging level vtp 2 defaultset logging level vmps 2 defaultset logging level kernel 2 defaultset logging level filesys 2 defaultset logging level drip 2 defaultset logging level pagp 5 defaultset logging level mgmt 5 defaultset logging level mls 5 defaultset loggin

20、g level protfilt 2 defaultset logging level security 2 default!#ntpset ntp broadcastclient disableset ntp broadcastdelay 3000set ntp client disableclear timezoneset summertime disable!#set boot commandset boot config-register 0x102set boot system flash bootflash:cat5000-sup3.4-2-1.bin!#permit listse

21、t ip permit disable!#dripset tokenring reduction enableset tokenring distrib-crf disable!#igmpset igmp disable!#protocolfilterset protocolfilter disable!#mlsset mls enableset mls flow destinationset mls agingtime 256set mls agingtime fast 0 0set mls nde disable!#module 1 : 2-port 1000BaseSX Supervis

22、orset module name 1set vlan 1 1/1-2set port enable 1/1-2set port level 1/1-2 normalset port duplex 1/1-2 fullset port trap 1/1-2 enableset port name 1/1-2set port security 1/1-2 disableset port broadcast 1/1-2 100%set port membership 1/1-2 staticset port protocol 1/1-2 ip onset port protocol 1/1-2 i

23、px autoset port negotiation 1/1-2 enableset port flowcontrol send 1/1-2 desiredset port flowcontrol receive 1/1-2 offset cdp enable 1/1-2set cdp interval 1/1-2 60set trunk 1/1 auto negotiate 1-1005set trunk 1/2 auto negotiate 1-1005set spantree portfast 1/1-2 disableset spantree portcost 1/1-2 4set

24、spantree portpri 1/1-2 32set spantree portvlanpri 1/1 0set spantree portvlanpri 1/2 0set spantree portvlancost 1/1 cost 3set spantree portvlancost 1/2 cost 3!#module 2 : 12-port 100BaseFX MM Ethernetset module name 2set module enable 2set vlan 16 2/1set vlan 29 2/2set vlan 53 2/3set vlan 55 2/4set v

25、lan 57 2/5set vlan 59 2/6set vlan 60 2/7set vlan 62 2/8set vlan 64 2/9set vlan 68 2/10set vlan 70 2/11set vlan 73 2/12set port channel 2/1-4 offset port channel 2/5-8 offset port channel 2/9-12 offset port channel 2/1-4 autoset port channel 2/5-8 autoset port channel 2/9-12 autoset port enable 2/1-1

26、2set port level 2/1-12 normalset port duplex 2/1-12 halfset port trap 2/1-12 enableset port name 2/1-12set port security 2/1-12 disableset port broadcast 2/1-12 100%set port membership 2/1-12 staticset port protocol 2/1-12 ip onset port protocol 2/1-12 ipx autoset port negotiation 2/1-12 enableset p

27、ort flowcontrol send 2/1-12 offset port flowcontrol receive 2/1-12 onset cdp enable 2/1-12set cdp interval 2/1-12 60set trunk 2/1 off isl 1-1005set trunk 2/2 off negotiate 1-1005set trunk 2/12 off negotiate 1-1005set spantree portfast 2/1-12 disableset spantree portcost 2/1-12 19set spantree portpri

28、 2/1-12 32set spantree portvlanpri 2/1 0set spantree portvlanpri 2/2 0set spantree portvlanpri 2/12 0set spantree portvlancost 2/1 cost 18set spantree portvlancost 2/2 cost 18set spantree portvlancost 2/12 cost 18!#module 3 : 24-port 10/100BaseTX Ethernetset module name 3set module enable 3set vlan

29、1 3/1,3/22set vlan 2 3/2-4,3/6-13,3/18-19set vlan 3 3/20set vlan 4 3/16-17set vlan 7 3/21set vlan 8 3/15set vlan 9 3/23-24set vlan 10 3/14set port channel 3/1-4 offset port channel 3/5-8 offset port channel 3/9-12 offset port channel 3/13-16 offset port channel 3/17-20 offset port channel 3/21-24 of

30、fset port channel 3/1-4 autoset port channel 3/5-8 autoset port channel 3/9-12 autoset port channel 3/13-16 autoset port channel 3/17-20 autoset port channel 3/21-24 autoset port enable 3/1-24set port level 3/1-24 normalset port speed 3/1-24 autoset port trap 3/1-24 enableset port name 3/1-24set por

31、t security 3/1-24 disableset port broadcast 3/1-24 100%set port membership 3/1-24 staticset port protocol 3/1-24 ip onset port protocol 3/1-24 ipx autoset port negotiation 3/1-24 enableset port flowcontrol send 3/1-24 offset port flowcontrol receive 3/1-24 onset cdp enable 3/1-24set cdp interval 3/1

32、-24 60set trunk 3/1 auto negotiate 1-1005set trunk 3/2 auto negotiate 1-1005set trunk 3/15 auto negotiate 1-1005set trunk 3/16 off negotiate 1-1005set trunk 3/17 auto negotiate 1-1005set trunk 3/21 auto negotiate 1-1005set trunk 3/22 on isl 1-1005set trunk 3/23 off negotiate 1-1005set trunk 3/24 aut

33、o negotiate 1-1005set spantree portfast 3/1-24 disableset spantree portcost 3/2,3/7-9,3/15,3/21 19set spantree portcost 3/1,3/3-6,3/10-14,3/16-20,3/22-24 100set spantree portpri 3/1-24 32set spantree portvlanpri 3/1 0set spantree portvlanpri 3/2 0set spantree portvlanpri 3/23 0set spantree portvlanp

34、ri 3/24 0set spantree portvlancost 3/1 cost 99set spantree portvlancost 3/2 cost 18set spantree portvlancost 3/3 cost 99set spantree portvlancost 3/6 cost 99set spantree portvlancost 3/7 cost 18set spantree portvlancost 3/8 cost 18set spantree portvlancost 3/9 cost 18set spantree portvlancost 3/10 c

35、ost 99set spantree portvlancost 3/14 cost 99set spantree portvlancost 3/15 cost 18set spantree portvlancost 3/16 cost 99set spantree portvlancost 3/20 cost 99set spantree portvlancost 3/21 cost 18set spantree portvlancost 3/22 cost 99set spantree portvlancost 3/23 cost 99set spantree portvlancost 3/

36、24 cost 99!#module 4 empty!#module 5 : 1-port Route Switchset module name 5set port level 5/1 normalset port trap 5/1 enableset port name 5/1set cdp enable 5/1set cdp interval 5/1 60set trunk 5/1 on isl 1-1005set spantree portcost 5/1 5set spantree portpri 5/1 32set spantree portvlanpri 5/1 0set spa

37、ntree portvlancost 5/1 cost 4!#module 6 empty!#module 7 empty!#module 8 : 2-port OC12 Dual PHY MMFset module name 8set port level 8/1 normalset port name 8/1-2set cdp enable 8/1set cdp interval 8/1 60set trunk 8/1 on LANE 1-1005set spantree portcost 8/1 6set spantree portpri 8/1 32set spantree portv

38、lanpri 8/1 0set spantree portvlancost 8/1 cost 5!#module 9 empty!#module 10 empty!#module 11 empty!#module 12 empty!#module 13 empty!#switch port analyzerset span 2 3/5 both inpkts enable!set span enable!#camset cam agingtime 1-80,1003,1005 300endLANE模塊：Using 20151 out of 523258 bytes!version 11.3no

39、 service password-encryption!hostname ATM!vtp enable!LANE database fdunet name vlan2 server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.02 name vlan2 server-atm-address 47.0091810000000050508FE801.0050508FE471.02 name vlan3 server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.03 name

40、 vlan3 server-atm-address 47.0091810000000050508FE801.0050508FE471.03 name vlan79 server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.4F name vlan79 server-atm-address 47.0091810000000050508FE801.0050508FE471.4F name vlan80 server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.50 name

41、vlan80 server-atm-address 47.0091810000000050508FE801.0050508FE471.50 name default server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.00 name default server-atm-address 47.0091810000000050508FE801.0050508FE471.00!interface ATM0 atm preferred phy A atm pvc 1 0 5 qsaal atm pvc 2 0 16 ilmi LAN

42、E config auto-config-atm-address LANE config database fdunet LANE server-bus ethernet default LANE client ethernet 1 default!interface ATM0.2 multipoint LANE server-bus ethernet vlan2 LANE client ethernet 2 vlan2!interface ATM0.3 multipoint LANE server-bus ethernet vlan3 LANE client ethernet 3 vlan3

43、!interface ATM0.78 multipoint LANE server-bus ethernet vlan78 LANE client ethernet 78 vlan78!interface ATM0.79 multipoint LANE server-bus ethernet vlan79!interface ATM0.80 multipoint LANE server-bus ethernet vlan80!line con 0line vty 0 4 no login!end（LightStream on ）:Using

44、1835 out of 126968 bytes!version 11.2no service padno service password-encryptionno service udp-small-serversno service tcp-small-servers!hostname atm-228.5!enable secret 5 $1$kA9e$s6KpEBSZIaFf9IgSEukfa.!atm lecs-address-default 47.0091.8100.0000.0090.6fbb.1c01.0090.6fbb.1873.00 1atm lecs-address-de

45、fault 47.0091.8100.0000.0050.508f.e801.0050.508f.e473.00 2atm address 47.0091.8100.0000.0050.508f.e801.0050.508f.e801.00atm router pnni node 1 level 56 lowest redistribute atm-static!interface ATM9/0/0!interface ATM9/0/1 atm maxvp-number 0 atm maxvc-number 1024!interface ATM9/0/2!interface ATM9/0/3!

46、interface ATM9/1/0!interface ATM9/1/1 atm maxvp-number 0 atm maxvc-number 1024!interface ATM9/1/2!interface ATM9/1/3 atm maxvp-number 0 atm maxvc-number 1024!interface ATM10/0/0!interface ATM10/0/1 此插槽上為一塊12-96pin的25M ATM模塊! 所以有12個interfaceinterface ATM10/1/11!interface ATM11/0/0 atm maxvp-number 4

47、atm maxvc-number 4096!interface ATM11/1/0!interface ATM11/1/1!interface ATM11/1/2!interface ATM11/1/3!interface ATM12/0/0!interface ATM12/1/0!interface ATM13/0/0ip address !no ip classlesssnmp-server community public ROsnmp-server community fudan RWsnmp-server trap-authent

48、icationsnmp-server system-shutdownsnmp-server enable traps configsnmp-server enable traps chassis-failsnmp-server enable traps chassis-changesnmp-server enable traps atm-accountingsnmp-server host 8 fudan!line con 0line aux 0line vty 0 4 no login!end:beginset password $1$as

49、tB$sKT.tdR1GCM5a4wryf0Q/.set enablepass $1$wJ/B$yhPcHHLBiv167f48DlIZP/set prompt 228.3>set length 24 defaultset logout 0set banner motd CC!#systemset system baud 9600set system modem disableset system name 5500-3set system location Synthetics Buildingset system contact Ye Jiawei!&&&&a

50、mp;&&&（與上配置完全相同的內(nèi)容）#ipset interface sc0 1 55set interface sc0 upset interface sl0 set interface sl0 upset arp agingtime 1200set ip redirect enableset ip unreachable enableset ip fragmentation enableset ip route

51、 1set ip alias default !#Command alias!#vmpsset vmps server retry 3set vmps server reconfirminterval 60set vmps tftpserver vmps-config-database.1set vmps state disable!*（內(nèi)容與上的配置雷同，不再詳細列出）LANE模塊：Using 201 out of 523258 bytes!version 11.3no service password-enc

52、ryption!hostname ATM!vtp enable!interface ATM0 atm preferred phy A atm pvc 1 0 5 qsaal atm pvc 2 0 16 ilmi!line con 0line vty 0 4 no login!end（LightStream on ）：Using 2001 out of 126968 bytes!version 11.2no service padno service password-encryptionno service udp-small-server

53、sno service tcp-small-servers!hostname atm-228.6!enable secret 5 $1$Yxs5$LN2rdlfchbsgyiHarp9lu0!atm lecs-address-default 47.0091.8100.0000.0090.6fbb.1c01.0090.6fbb.1873.00 1atm lecs-address-default 47.0091.8100.0000.0050.508f.e801.0050.508f.e473.00 2atm address 47.0091.8100.0000.0090.6fba.c401.0090.6fba.c401.00atm router pnni node 1 level 56 lowest redistribute atm-static!interface ATM9/0/0 atm maxvp-number 0atm maxvc-number 1024!interface ATM9/0/1 atm maxvp-number 0 atm m