Extreme设备常用配置手册

1.用户名和密码配置createaccount[admin|user]<username>{encrypted}{<password>}configureaccountadminport配置configports<portlist>autooff{speed[10|100|1000]}duplex[half|full]autooffVlan配置无论是核心还是接入层，都要先创建三个Vian,并且将所有归于DefaultVian的端口删除：configvlandefaultdelportallcreatevianServercreatevianUsercreatevianManger定义802.1q标记configvianServertag10configvianUsertag20configvianMangertag30设定Vian网关地址：configvianServeripa192.168.41.1/24configvianUseripa192.168.40.1/24configvianMangeripa192.168.*.*/24Enabieipforwarding启用ip路由转发，即vian间路由Trunk配置configvianServeraddport1-3tconfigvianUseraddport1-3tconfigvianmangeraddport1-3tVRRP配置enabievrrpconfigurevrrpaddvianUserVianconfigurevrrpvianUserVianaddmastervrid10192.168.6.254configurevrrpvianUserVianauthenticationsimpie-passwordextremeconfigurevrrpvianUserVianvrid10priority200configurevrrpvianUserVianvrid10advertisement-intervai15configurevrrpvianUserVianvrid10preempt端口镜像配置enabiemirroringtoport3＃选择3作为镜像口configmirroringaddport1＃把端口1的流量发送到3configmirroringaddport1vlandefault#把1和vlandefault的流量都发送到3port-channei配置enablesharing<port>grouping<portlist>{port-based|address-based|round-robin}stp配置enablestpdcreatestpd*configurestpd<spanningtreename>addvlan<vlanname>{ports<portlist>[dot1d|emistp|pvst-plus]}configurestpdstpd1priority16384configurevlanmarketingaddports2-3stpdstpd1emistp8.DHCP中继配置enablebootprelayconfigbootprelayadd<dhcpserverip>9.NAT配置Enablenat＃启用natStaticNATRuleExampleconfignataddout_vlan_1mapsource192.168.1.12/32to216.52.8.32/32DynamicNATRuleExampleconfignataddout_vlan_1mapsource192.168.1.0/24to216.52.8.1-216.52.8.31PortmapNATRuleExampleconfignataddout_vlan_2mapsource192.168.2.0/25to216.52.8.32/28bothportmapPortmapMin-MaxExampleconfignataddout_vlan_2mapsource192.168.2.128/25to216.52.8.64/28tcpportmap1024-819210.OSPF配置enableospf启用OSPF进程createospfarea<areaidentifier>创建OSPF区域configureospfrouterid[automatic|<routerid>]配置Routeridconfigureospfaddvlan[<vlanname>|all]area<areaidentifier>{passive}把某个vlan加到某个Area中去，相当于Cisco中的network的作用configureospfarea<areaidentifier>addrange<ipaddress><mask>[advertise|noadvertise]{type-3|type-7}把某个网段加到某个Area中去，相当于Cisco中的network的作用configureospfvlan<vlanname>neighboradd<ipaddress>OSPF中路由重发布配置enableospfexportdirect[cost<metric>[ase-type-1|ase-type-2]{tag<number>}|<routemap>]enableospfexportstatic[cost<metric>[ase-type-1|ase-type-2]{tag<number>}|<routemap>]enableospforiginate-default{always}cost<metric>[ase-type-1|ase-type-2]{tag<number>}enableospforiginate-router-id11.SNMP配置enablesnmpaccessenablesnmptrapscreateaccess-profile<accessprofile>type[ipaddress|vlan]configsnmpaccess-profilereadonly[<access_profile>|none配置snmp的只读访问歹U表，none是去除configsnmpaccess-profilereadwrite[<access_profile>|none]这是控制读写控制configsnmpaddtrapreceiver<ipaddress>{port<udp_port>}communityvcommunitystring〉{from<sourceipaddress>}配置snmp接收host和团体字符串安全配置disableip-optionloose-source-routedisableip-optionstrict-source-routedisableip-optionrecord-routedisableip-optionrecord-timestampdisableipforwardingbroadcastdisableudp-echo-serverdisableirdpvlan<vlanname>disableicmpredirectdisableweb关闭web方式访问交换机enablecpu-dos-protectAccess－Lists配置createaccess-listicmpdestinationsourcecreateaccess-listipdestinationsourceportscreateaccess-listtcpdestinationsourceportscreateaccess-listudpdestinationsourceports默认路由配置configiprouteadddefault<gateway>恢复出厂值，但不包括用户改的时间和用户帐号信息unconfigswitch{all}检查配置showversionshowconfigshowsessionshowmanagement查看管理信息，以及snmp信息showbannershowportsconfigurationshowospfshowaccess-list{<name>|port<portlist>}showaccess-list-monitorshowospfarea<areaidentifier>showospfareadetailshowospfase-summaryshowospfinterfaces{vlan<vlanname>|area<areaidentifier>}unconfigureospf{vlan<vlanname>|area<areaidentifier>}17.备份和升级软件downloadimage[<hostname>|<ipaddress>]<filename>{primary|secondary}uploadimage[<hostname>|<ipaddress>]<filename>{primary|secondary}useimage[primary|secondary]小知识点：DHCP中继。bootprelay/dhcprelay用于主机获取它的IP地址，但是在一个高度需要安全的网络中需要以更安全的方法配置它，比如通过udp-forwarding的方法来配置dhcprelay。disablebootprelay以下是一个用udp-forwarding代替enablebootrelay的配置例子。createudp-profilebackbonedhcpconfigbackbonedhcpadd67