锐捷设备常用配置命令

1、锐捷交换机常用配置命令设备配置可通过远程Tehiet命令或用配置线通过Console I I进行配置创建VLAN100,将它命名为test的例子Switch# configure terminalSwitch(config)# vlan 10()Switch(config-vlan)# name testSwitch(config-vlan)# end把 ethernet 0/10 口加入 VLAN100Switch# configure terminalSwitch(config)# interface fastethernet 0/10Switch(config-if)# switchpo

2、rt access vlan 100Switch(config-if)# end把 Fa 0/1 配成 Trunk 口Switch# configure terminalSwitch(config)# interface fastethernetO/1Switch(config-if)# switchport mode trunkSwitch(config-if)# end给Fa0/l端口绑定IP和MAC地址Switch# configure terminalSwitch(config)# interface fastethernetO/1Switch(config-if)# switchpo

3、rt port-securitySwitch(config-if)#switchport port-security mac-address 00f0.4c87.191e ip-address 192J68.0.1全局绑定IP和MAC地址Switch# configure terminalSwitch(config)#address-bin(l 192.168.0.1 0016.3606.92f2Switch(config)# address-bind installRG-S7610设备配置LLJGY_S7610#sh runBuildmg configuration.Current conf

4、iguration : 7378 bytes iversion RGNOS 10.2.00(3bll), Release(40622)(Wed Jun25 15:31:28 CST 2008 -ngcf32) install 1 24sfp/8gt install 2 48t vlan 1ivlan 2name jiaoxuelouivlan 3name baiigonglouivlan 4name jiashulouivlan 5name wangluozhongxmivlan 100name guanliiiservice password-encryption / 使设备的密码加密显示

5、Switch# configure terminalSwitch(config)# service password -encryptionip access-list extended 101/ 配置扩展访问控制列表Switch# configure terminal10 deny udp any any eq 136Switch(config)# ip access-list extended 列表序号20 deny udp any any eq netbios-ns30 deny udp any any eq netbios-dgm40 deny udp any any eq netbi

6、os-ss50 deny udp any any eq 44560 deny udp any any eq 59370 deny udp any any eq 143480 deny tcp any any eq 13590 deny tcp any any eq 136100 deny tcp any any eq 137110 deny tcp any any eq 138120 deny tcp any any eq 445130 deny tcp any any eq 593140 deny tcp any any eq 4444150 deny tcp any any eq 5800

7、160 deny tcp any any eq 5900170 deny tcp any any eq 6667180 deny tcp any any eq 5554190 deny tcp any any eq 9996200 permit ip any anyenable secret 5 SlSsddFSvlArxyyB33qq99A4/在端I I下应用访问控制列Switch(config-if)# ip access-group 101 inhostname LLJGY_S7610 mteiiace FastEthernet 2/1 switchport access vlan 5

8、ip access-gioup 101 indescription TO-502mteiiace FastEthernet 2/2 switchport access vlan 5 ip access-gioup 101 in description TO-503mteiiace FastEthernet 2/3switchport access vlan 5 ip access-group 101 in description TO-503-1mteiiace FastEthernet 2/4 switchport access vlan 5 ip access-group 101 in d

9、escription TO-501mteiiace FastEthernet 2/5 switchport access vlan 5 ip access-group 101 iniiiteiiace FastEthernet 2/6 switchport access vlan 5 ip access-group 101 iniiiteiiace FastEthernet 2/7 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/8 switchport access vlan 5 ip access

10、-group 101 inmteiiace FastEthernet 2/9 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/10 switchport access vlan 5 ip access-group 101 iniiiteiiace FastEthernet 2/11 switchport mode trunk ip access-group 101 in description TO-bangong21ouiiiteiiace FastEthernet 2/12 switchport

11、mode trunk ip access-group 101 in description TO-bangong31ou mteiiace FastEthernet 2/13 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/14 switchport mode trunk ip access-group 101 in description TO-bangong41oumteiiace FastEthernet 2/15 switchport access vlan 5 ip access-group

12、 101 inmteiiace FastEthernet 2/16 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/17 switchport access vlan 5 ip access-group 101 iniiiteiiace FastEthernet 2/18 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/19 switchport access vlan 5 ip access-group 1

13、01 inmteiiace FastEthernet 2/20 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/21 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/22 switchport access vlan 5 ip access-group 101 inmteiiace FastEthernet 2/23 switchport access vlan 5ip access-gioup 101 in

14、!mteiiace FastEthernet 2/24 switchport access vlan 5 ip access-gioup 101 inmteiiace FastEthernet 2/25 switchport access vlan 100 ip access-gioup 101 inmteiiace FastEthernet 2/26 switchport access vlan 100 ip access-gioup 101 in description TO-FIREWALLmteiiace FastEthernet 2/27 switchport access vlan

15、 5 ip access-gioup 101 inmteiiace FastEthernet 2/28 switchport access vlan 5 ip access-gioup 101 inmteiiace FastEthernet 2/29 switchport access vlan 5 ip access-gioup 101 inmteiiace FastEthernet 2/30 switchport access vlan 5 ip access-gioup 101 inmteiiace FastEthernet 2/31 switchport access vlan 5 i

16、p access-gioup 101 inmteiiace FastEthernet 2/32 switchport access vlan 5 ip access-gioup 101 inmteiiace FastEthernet 2/33 switchport access vlan 5 ip access-gioup 101 inswitchport access vlan 5 ip access-gioup 101 inmteiiace FastEthernet 2/35 switchport access vlan 100 ip access-gioup 101 inmteiiace

17、 FastEthernet 2/36 switchport access vlan 5 ip access-gioup 101 iniiiteiiace FastEthernet 2/37 switchport access vlan 5 ip access-gioup 101 in description T O -wanglu ozliongxmmteiiace FastEthernet 2/38 switchport access vlan 5 ip access-gioup 101 in description T O -wanglu ozliongxmiiiteiiace FastE

18、thernet 2/39 switchport access vlan 5 ip access-gioup 101 in description T O -wanglu ozliongxmmteiiace FastEthernet 2/40 switchport access vlan 5 ip access-gioup 101 in description T O -wanglu ozliongxmmteiiace FastEthernet 2/41 switchport access vlan 5 ip access-gioup 101 in description T O -wanglu

19、 ozliongxmmteiiace FastEthernet 2/42 switchport access vlan 5 ip access-gioup 101 in description T O -wanglu ozliongxmmteiiace FastEthernet 2/43 switchport access vlan 5 ip access-gioup 101 indescription T O -wanglu ozliongxmmteiiace FastEthernet 2/44 switchport access vlan 5 ip access-group 101 in

20、description T O -wanglu ozliongxmmteiiace FastEthernet 2/45 switchport access vlan 5 ip access-group 101 in description T O -wanglu ozliongxmiiiteiiace FastEthernet 2/46 switchport access vlan 5 ip access-group 101 in description T O -wanglu ozliongxmiiiteiiace FastEthernet 2/47 switchport access vl

21、an 5 ip access-group 101 in description T O -wanglu ozliongxmmteiiace FastEthernet 2/48 switchport access vlan 5 ip access-group 101 in description T O -wanglu ozliongxm !mteiiace GigabitEthernet 1/1!mteiiace GigabitEthernet 1/2 switchport mode trunk ip access-group 101 in description TOjiaowulou!mt

22、eiiace GigabitEthernet 1/3 !mteiiace GigabitEthernet 1/4 !mteiiace GigabitEthernet 1/5 !mteiiace GigabitEthernet 1/6 !mteiiace GigabitEthernet 1/7iiiteiiace GigabitEthernet 1/8iiiiteiiace GigabitEthernet 1/9iiiiteiiace GigabitEthernet 1/10iiiiteiiace GigabitEthernet 1/11iiiiteiiace GigabitEthernet 1

23、/12iiiiteiiace GigabitEthernet 1/13iiiiteiiace GigabitEthernet 1/14iiiiteiiace GigabitEthernet 1/15iiiiteiiace GigabitEthernet 1/16iiiiteiiace GigabitEthernet 1/17iiiiteiiace GigabitEthernet 1/18iiiiteiiace GigabitEthernet 1/19iiiiteiiace GigabitEthernet 1/20iiiiteiiace GigabitEthernet 1/21iiiiteiia

24、ce GigabitEthernet 1/22iiiiteiiace GigabitEthernet 1/23iiiiteiiace GigabitEthernet 1/24switchport mode trunkmedium-type fiber / 将接 I I 模式转换为光 I I 模式 Switch(coiifig-if)# medium-type fiber ip access-group 101 indescription TOjiashulouiinterface VLAN 1no ip proxy-aipinterface VLAN 2/配置各用户网段VLAN信息Switch

25、# configure terminalSwitch(config)# VLAN XXXXno ip proxy-aipip address 192.192.2.1 255.255.255.0255.255.0配置VLAN网关地址Switch(config)# interface VLAN XXSwitch(config-vlan)# ip address xxx.xxx.xxx.xxx xxx.xxx.xxx.xxxinterface VLAN 3no ip proxy-aipip address 192.192.3.1 255.255.255.0 !interface VLAN 4no i

26、p proxy-aipip address 192.192.4.1 255.255.255.0 !interface VLAN 5no ip proxy-aipip address 192.192.5.1 255.255.255.0 !interface VLAN 100no ip proxy-aipip address 192.192.1.1 255.255.255.0 !iiiteiiace Mgmt 0duplex autospeed autoip route 0.0.0.0 0.0.0.0 192.192.1.2配置默认路由，路由的卜一跳为防火墙内网I I地址Switch# confi

27、gure terminal Switch(config)# ip route 0.0.0.0 O.O.O.O 192.192J.2 ! !sump-server conunumty star rwline vty 0 4Ime vty 0 4配置10.2版本交换机远程登陆密码loginpassword 7 043bll0b370d28Switch# configure terminalSwitch(config)# line vty 0 4Ime con 0Switch(config-luie)#loginSwitch(config-lme)# password XXXXendRG-S2126

28、G系列配置 bangonglou3-l#sh mnSystem software version : 1.7 Build Nov 12 2007 ReleaseBuildmg configuration. Current configuration : 3508 bytes i version 1.0 i hostname bangonglou3-l/ 配置设备名称 Switch# configure terminalSwitch(coiifig)# hostname XXXX vlan 1 i vlan 3 i vlan 100设备上启用 VLAN Switch# configure ter

29、minalname guanliSwitch(coiifig)# vlan XX!/ VLAN 命名 Switch(config-vlan)#i】ame XXXXenable secret level 1 5 $28cgkE,3mdlil&-4Paein,.Qbfjo+/配置远程登陆密码以密文显示 Switch# configure terminalSwitch(config)# enable secret level 1 0 XXXX enable secret level 15 5 S29=GlX)3R:HY*4_;C,tZQ0D+S( /配置设备管理密码 Switch# configur

30、e terminalSwitch(config)# enable secret level 15 0 XXXXmteiiace fastEthernet 0/1switchport mode trunk/ 配置接 I 1 trunk 模式 Switch# configure terminalSwitch(config)# interface fastethernet 0/1 Switch(config-if)?r switchport mode trunk如要将接I I模式改回普通交换I I模式需配置 Switch(config-if)# switchport mode access desc

31、riptionTO-bangonglou3-2 / 配置接I I描述信息 Switch(coiifig-if)# description XXXinterface fastEthernet 0/2/ 配置接 I I VLAN Switch# configure terminalswitchport access vlan 3Switch(config-if)# switchport access vlan XXAnti-ARP-Spoofiiig ip 192.192.3.1,7绑定接I网关地址，该网关地址为接I I VLAN相应网关Switch(coiifig-if)# Anti-ARP-S

32、poofing ip X.X.X.Xrldp pon loop-detect shutdown-port 开启端I I环路检测功能，该功能只能用在接用 户的端I I上。Switch(coiifig-if)# rldp port loop-detect shutdown-portiiiteiiace fastEthernet 0/3Anti-ARP-Spoofiiig ip 192.192.3.1switchport access vlan 3rldp port loop-detect shutdown.port iiiiteiiace fastEthernet 0/4Anti-ARP-Spoo

33、fiiig ip 192.192.3.1switchport access vlan 3rldp port loop-detect shutdown.port iiiiteiiace fastEthernet 0/5Anti-ARP-Spoofiiig ip 192.192.3.1switchport access vlan 3rldp port loop-detect shutdown.portiiiteiiace fastEthernet 0/6Anti-ARP-Spoofiiig ip 192.192.3.1switchport access vlan 3rldp port loop-d

34、etect shutdown.portiiiteiiace fastEthernet 0/7Anti-ARP-Spoofiiig ip 192.192.3.1switchport access vlan 3rldp port loop-detect shutdown.portiiiteiiace fastEthernet 0/8Anti-ARP-Spoofiiig ip 192.192.3.1switchport access vlan 3rldp port loop-detect shutdown.portiiiteiiace fastEthernet 0/9Anti-ARP-Spoofii

35、ig ip 192.192.3.1switchport access vlan 3rldp port loop-detect shutdown.portmteiiace fastEthernet 0/10Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access vlan 3rldp port loop-detect shutdown-portmteiiace fastEthernet 0/11Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access vlan 3rldp port loop-detect

36、 shutdown-portmteiiace fastEthernet 0/12Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access vlan 3rldp port loop-detect shutdown-portmteiiace fastEthernet 0/13Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access vlan 3rldp port loop-detect shutdown-portmteiiace fastEthernet 0/14Anti-ARP-Spoofiiig ip

37、192.192.3.1 switchport access vlan 3rldp port loop-detect shutdown-portmteiiace fastEthernet 0/15Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access vlan 3rldp port loop-detect shutdown-portmteiiace fastEthernet 0/16Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access vlan 3rldp port loop-detect shutdown-portmteiiace fastEthernet 0/17Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access vlan 3rldp port loop-detect shutdown-portmteiiace fastEthernet 0/18Anti-ARP-Spoofiiig ip 192.192.3.1 switchport access