[计算机]9508配置文档

1、.T2商业网改造H3C 9508配置模板一、全局配置命令21.1 配置系统名称21.2 配置HEADER21.3 配置super密码21.4 定义网管ACL21.5 telnet服务功能21.5.1 9508都要手工开启telnet服务21.5.2 创建telnet用户21.5.3 开启telnet本地认证31.6 日志服务31.7 开启TTL超时31.8 DLDP全局设置31.9 LLDP全局配置31.10 时钟配置31.11 CONSOLE密码认证配置31.12 全局开启DHCP4二、接口配置命令42.1 桥接组端口配置42.2 三层互连接口配置42.4 三层SVI口配置42.5 未进行连

2、接的端口42.6 创建VLAN5三、OSPF协议配置53.1 OSPF进程配置53.2 连ER1的互连接口53.3 连7506的互连接口53.3 连CR2北电8600的互连接口5四、SNMP配置6五、关闭不必要的服务6一、全局配置命令1.1 配置系统名称设备所有的系统名称都按此标准配置sysname T2-O-CR2-1-9508-1 1.2 配置HEADER所有9508的HEADER都按以下标准配置header login % * BCIA T2 Multi-service NETWORK * ONLY FOR AUTHORIZED PERSON * ANY ILLEGAL ACCESS I

3、S PROHIBITED *%1.3 配置super密码所有9508的super密码都是这个配置super password level 3 cipher Nms2010BRw 1.4 定义网管ACLacl number 2000 description NMS rule 0 permit source 10.1.6.0 0.0.0.255 rule 1 permit source 10.26.0.0 0.0.0.255 rule 2 permit source 10.20.0.250 0 rule 3 permit source 10.26.2.250 0 rule 4 deny sourc

4、e any1.5 telnet服务功能1.5.1 9508都要手工开启telnet服务telnet server enable 1.5.2 创建telnet用户local-user admin password cipher Nms2010BRo authorization-attribute level 1 service-type telnet ssh1.5.3 开启telnet本地认证user-interface vty 0 4 authentication-mode schemeidle-timeout 1 0user privilege level 1 set authenticat

5、ion password cipher Nms2010BRoacl 2000 inbound1.6 日志服务开启日志同步、定义日志服务器并指定发送日志的源IP。info-centerinfo-center synchronousinfo-center loghost 10.20.0.250 channel loghost facility local7info-center loghost 10.26.2.250 channel loghost facility local7info-center loghost 10.1.6.55 channel loghost facility local

6、7info-center loghost source loopback 01.7 开启TTL超时ip ttl-expires enable1.8 DLDP全局设置dldp enabledldp work-mode enhance1.9 LLDP全局配置lldp enable1.10 时钟配置clock timezone beijing add 00:00:00ntp-service refclock-master增加时钟级别为3 31.11 CONSOLE密码认证配置user-interface con 0authentication-mode password user privilege

7、 level 1 set authentication password simple Nms2010BRo idle-timeout 1 01.12 全局开启DHCPDhcp enable二、接口配置命令2.1 桥接组端口配置interface Bridge-Aggregation1 description To_xxxxx port link-type access port access vlan 5002.2 三层互连接口配置interface GigabitEthernet 0/0/16 description To xxx( 对端设备名称和接口名称)port link-type a

8、ccess port access vlan 500speed 1000 duplex fulldldp enable port link-aggregation group 12.4 三层SVI口配置interface Vlan-interface 500 description To ER1 ip address 10.26.250.252 255.255.255.2522.5 未进行连接的端口这些端口要关闭LLDP，并且将该端口关闭interface GigabitEthernet7/0/20undo lldp enableshutdown2.6 创建VLAN所有的VLAN都用name描

9、述，不用description描述vlan 500 name Manage三、OSPF协议配置3.1 OSPF进程配置9508 ospf 的 router-id都设置为自己的环回口IP地址，自己的环回口要NETWORK进OSPF进程，互连VLAN接口要NETWORK到OSPF进程。ospf 1 router-id 10.26.254.2area 0.0.0.0 network 10.26.250.252 0.0.0.0 network 10.26.254.2 0.0.0.0 network 10.26.250.21 0.0.0.0 network 10.26.250.13 0.0.0.0 ne

10、twork 10.26.250.5 0.0.0.0 network 10.26.250.41 0.0.0.0 network 10.26.250.34 0.0.0.0 network 10.26.250.25 0.0.0.0 network 10.26.3.5 0.0.0.03.2 连ER1的互连接口Ospf网络类型为P2P，COST值为80,设置认证方式为MD5。interface Vlan-interface50 description To_ER1_9508E ip address 10.26.250.252 255.255.255.252 ospf authentication-mod

11、e MD5 cipher BCIAbcia ospf cost 80 ospf network-type p2p3.3 连7506的互连接口Ospf网络类型为P2P，COST值为10，设置认证方式为MD5。interface Vlan-interface562 description To xxxx(对端设备及名称) ip address 10.26.250.13 255.255.255.252 ospf authentication-mode MD5 cipher BCIAbcia ospf cost 10 ospf network-type p2p3.3 连CR2北电8600的互连接口Os

12、pf网络类型为P2P，COST值为10，设置认证方式为simple password。interface Vlan-interface562 description To xxxx(对端设备及名称) ip address 10.26.3.5 255.255.255.252 ospf authentication-mode simple BCIAbcia ospf network-type p2p四、SNMP配置snmp-agentsnmp-agent sys-info contact BCIA-T2-Multi-service snmp-agent sys-info location T2BCI