某银行网络应急方案

精品文档精心整理精品文档可编辑的精品文档银行网络应急方案XX股份有限公司网络与安全服务部2012年2月目录一、 银行网络结构拓扑 3二、 骨干网通信故障 31. 故障处理人员 32. 电信、联通网络通信故障 33. 通信故障恢复 34. 到总行路由器故障 45. 路由器故障处理 4三、 核心交换机故障应急 51. 一台4506交换机故障应急 52. 当核心交换同时瘫痪在20分钟内保证业务正常运作 7四、 第三方外联区网络应急 191. 第三方业务银联区网络应急 192. 其它第三方业务区网络应急 46五、 联系方式： 56银行网络结构拓扑骨干网通信故障故障处理人员参与人：XX、XX、XX电信、联通网络通信故障根据到总行的两台cisco7206路由器的日志以及实际登陆设备使用showintATM4/0.1、ping对端地址、showiproute、showlog，查看上述相关设备和线路是否有反复重起、误码率高、异常路由、错误连接等情况即可确认故障。通信故障恢复恢复步骤：1）重启故障新路相连路由器，看是否能够自动恢复2)断电重起无法解决故障的，停止使用故障设备和线路，防止其影响网络其他部分。3)如系线路故障通知各有关方面（逐项对照处理）：●如为中国电信线路故障，向31000000报修，并通知分行办公室相关人员。●如为中国联通线路故障，向XXXX报修，并通知分行办公室相关人员。到总行路由器故障查看日志，检查设备故障前的异常日志信息；登陆路由器使用showlog，showipintbrie,showprocesscpuhis,showiproute,ping对端地址等命令来确认故障。路由器故障处理一旦发现到总行7206路由器故障可按以下步骤来处理：●联系XX公司，并启动原厂商保修服务备件更换程序。●因为两台7206路由器是互为备份的，一台发生故障不影响实际业务，不调用库房备件和集成商备件更换，等待原厂商备件到达。●对于能够在线插拔的接口模块、有standby的引擎和电源，优先使用在线更换方式。在线更换的具体操作流程如下：a)用笔记本电脑连接在网络设备的Console上，启动Console监控和记录；b)准备好存档的系统配置，备用。如有可能，同时保存当前系统配置；c)对故障模块上连接的线缆做好标记，小心拔下；d)做好安全接地，拔下故障模块；e)检查设备和模块状态，确认是否影响整个设备或其他模块正常运行，standby模块是否正常接管；f)做好安全接地，插上更换的备件模块；g)检查设备和模块状态，确认是否能够正常识别新模块，是否影响其他模块运行；h)按原样插上线缆；i)检查线缆连接状态正常；j)确认备件更换成功。l对于机箱、不能在线插拔的接口模块、或者没有standby的引擎和电源，采用下电更换方式。下电更换的具体操作流程如下：a)准备好存档的系统配置，备用。如有可能，同时保存当前系统配置；b)准备好原先使用的系统软件，备用；c)故障设备下电；d)对需要拔除的线缆做好标记，小心拔下。如果机箱或引擎更换，需拔除所有连接线缆；e)更换备件；f)用笔记本电脑连接在网络设备的Console上，启动Console监控和记录；g)设备上电；h)检查系统自检情况，确认无硬件故障；i)安装系统软件；j)恢复系统配置；k)冷启动，确认软硬件正常工作；l)按原样插上其他线缆；m)检查线缆连接状态正常；n)确认备件更换成功。核心交换机故障应急一台4506交换机故障应急查看日志，检查设备故障前的异常日志信息；登陆交换机使用showlog，showipintbrie,showprocesscpuhis,showiproute,ping对端地址，showvlanbrie,showvtpstat,showprocessmem,showmodul,showdiag,showipeigrpnei,showcdpnei等一系列命令来查找、确认故障。因为两台4506核心交换机完全是热备的双机，所以一台发生故障并不影响业务运行。对于配置问题要制定正确的更改配置脚本，备份当前配置以后实施更改；对于线路问题的要制作新网线，替换故障的网线；对于硬件问题要练习XX公司，申请硬件故障维修。对于能够在线插拔的接口模块、有standby的引擎和电源，优先使用在线更换方式。在线更换的具体操作流程如下：a)用笔记本电脑连接在网络设备的Console上，启动Console监控和记录；b)准备好存档的系统配置，备用。如有可能，同时保存当前系统配置；c)对故障模块上连接的线缆做好标记，小心拔下；d)做好安全接地，拔下故障模块；e)检查设备和模块状态，确认是否影响整个设备或其他模块正常运行，standby模块是否正常接管；f)做好安全接地，插上更换的备件模块；g)检查设备和模块状态，确认是否能够正常识别新模块，是否影响其他模块运行；h)按原样插上线缆；i)检查线缆连接状态正常；j)确认备件更换成功。l对于机箱、不能在线插拔的接口模块、或者没有standby的引擎和电源，采用下电更换方式。下电更换的具体操作流程如下：a)准备好存档的系统配置，备用。如有可能，同时保存当前系统配置；b)准备好原先使用的系统软件，备用；c)故障设备下电；d)对需要拔除的线缆做好标记，小心拔下。如果机箱或引擎更换，需拔除所有连接线缆；e)更换备件；f)用笔记本电脑连接在网络设备的Console上，启动Console监控和记录；g)设备上电；h)检查系统自检情况，确认无硬件故障；i)安装系统软件；j)恢复系统配置；k)冷启动，确认软硬件正常工作；l)对于交换机要将VTP设置为Client模式，首先连接上行线缆，确认VTP复制正确；m)按原样插上其他线缆；n)检查线缆连接状态正常；o)确认备件更换成功。当核心交换同时瘫痪在20分钟内保证业务正常运作现有2台备用的cisco3550，在两台核心cisco4506同事瘫痪后，将其作为核心交换来保证业务的正常运作，同时保持原有的网络拓扑及网络核心的安全策略和qos。3550核心交换配置定义设备命名hostnameproduction设备软件版本使用支持动态路由协议的IOS：c3550-i5k2l2q3-mz.121-13.EA1a.binVlan定义1defaultactiveFa0/1,Fa0/2,Fa0/35,Fa0/36Fa0/37,Fa0/38,Fa0/39,Fa0/40Fa0/41,Fa0/42,Fa0/43,Fa0/44Fa0/45,Fa0/46,Fa0/47,Fa0/482vlan0002activeFa0/10,Fa0/21,Fa0/25,Fa0/34Gi0/1,Gi0/23vlan0003activeFa0/5,Fa0/8,Fa0/11,Fa0/12Fa0/17,Fa0/19,Fa0/20,Fa0/22Fa0/28,Fa0/29,Fa0/30,Fa0/324vlan0004activeFa0/13,Fa0/18,Fa0/275vlan0005activeFa0/76vlan0006active10vlan0010activeFa0/4,Fa0/6,Fa0/1420vlan0020active30vlan0030active40vlan0040active50VLAN0050active60VLAN0060active63vlan0063active128vlan0128activeFa0/3,Fa0/24,Fa0/26,Fa0/31Fa0/33195vlan195activeFa0/16,Fa0/23196vlan196active255VLAN0255activeFa0/9,Fa0/15Ip地址分配及hsrpinterfaceVlan1noipaddressnoipredirectsshutdownstandby10priority100standby10preempt!interfaceVlan2ipaddressipaccess-group101innoipredirectsstandby20ipstandby20priority150standby20preempt!interfaceVlan3ipaddressipaccess-group101innoipredirectsstandby30ipstandby30priority150standby30preempt!interfaceVlan4ipaddress692noipredirectsstandby40ip5standby40priority150standby40preempt!interfaceVlan5ipaddress92noipredirectsstandby50ipstandby50priority150standby50preempt!interfaceVlan6noipaddressnoipredirectsshutdownstandby60ipstandby60priority150standby60preempt!interfaceVlan10ipaddressipaccess-group103innoipredirectsstandby100ipstandby100timers515standby100priority200standby100preemptstandby100trackVlan1050!interfaceVlan20noipaddressnoipredirectsstandby110timers515standby110priority150standby110preemptstandby110trackVlan2050!interfaceVlan30noipaddressipaccess-group101innoipredirectsshutdownstandby120ip00standby120timers515standby120priority200standby120preemptstandby120trackVlan3050!interfaceVlan40noipaddressipaccess-group101innoipredirectsshutdownstandby130ip00standby130timers515standby130priority150standby130preemptstandby130trackVlan4050!interfaceVlan50ipaddressiphelper-address0noipredirectsstandby150ipstandby150timers515standby150priority150standby150preemptstandby150trackVlan150!interfaceVlan63noipaddressnoipredirects!interfaceVlan128ipaddressipaccess-group101innoipredirectsstandby160ipstandby160timers515standby160priority150standby160preemptstandby160trackVlan12850!interfaceVlan150noipaddressshutdown!interfaceVlan195ipaddressnoipredirectsstandby195ipstandby195priority150standby195preempt!interfaceVlan196noipaddressnoipredirectsshutdownstandby196ipstandby196priority100standby196preempt!interfaceVlan255ipaddressnoipredirectsstandby255ipstandby255priority200standby255preempt路由策略routereigrp20redistributestaticnetwork55noauto-summarynoeigrplog-neighbor-changesiproute8iproute558iproute11558iproute8iproute8iproute45558iproute555iproute556iproute557iproute1558iproute2558iproute3558iproute4558interfaceVlan2ipaddressipaccess-group101ininterfaceVlan3ipaddressipaccess-group101ininterfaceVlan30noipaddressipaccess-group101ininterfaceVlan40noipaddressipaccess-group101ininterfaceVlan128ipaddressipaccess-group101inaccess-list101permitiphost40host46access-list101permitiphost40host45access-list101denyip5555access-list101denyip5555access-list101denyip5555access-list101denyip5555access-list101denyip5555access-list101denyip5555access-list101permitipanyanyinterfaceVlan10ipaddressipaccess-group103inaccess-list103permitiphost45host0access-list103permitiphost40host0access-list103permitiphost40host46access-list103permitiphost40host45access-list103permitiphost45host8access-list103permitiphost40host8access-list103permitiphost45host2access-list103permitiphost40hostaccess-list103permitiphost1host0access-list103permitip55hostaccess-list103permitip55hostaccess-list103permitip55hostaccess-list103permitip55host0access-list103permitip55host3access-list103permitip55host5access-list103permitip55host6access-list103permitip55host0access-list103permitip55host3access-list103permitip55host3access-list103permitip55host7access-list103permitiphost45host9access-list103permitiphost40host9access-list103denyip5555access-list103denyip5555access-list103denyip5555access-list103denyip5555access-list103denyip5555access-list103denyip5555access-list103permitipanyanyQos作为核心交换机无需在此配置qos安全策略aaanew-modelaaaauthenticationloginspdb-acsgrouptacacs+enableaaaaccountingexecspdb-acsstart-stopgrouptacacs+aaaaccountingcommands0spdb-acsstart-stopgrouptacacs+aaaaccountingcommands1spdb-acsstart-stopgrouptacacs+aaaaccountingcommands2spdb-acsstart-stopgrouptacacs+aaaaccountingcommands3spdb-acsstart-stopgrouptacacs+aaaaccountingcommands4spdb-acsstart-stopgrouptacacs+aaaaccountingcommands5spdb-acsstart-stopgrouptacacs+aaaaccountingcommands6spdb-acsstart-stopgrouptacacs+aaaaccountingcommands7spdb-acsstart-stopgrouptacacs+aaaaccountingcommands8spdb-acsstart-stopgrouptacacs+aaaaccountingcommands9spdb-acsstart-stopgrouptacacs+aaaaccountingcommands10spdb-acsstart-stopgrouptacacs+aaaaccountingcommands11spdb-acsstart-stopgrouptacacs+aaaaccountingcommands12spdb-acsstart-stopgrouptacacs+aaaaccountingcommands13spdb-acsstart-stopgrouptacacs+aaaaccountingcommands14spdb-acsstart-stopgrouptacacs+aaaaccountingcommands15spdb-acsstart-stopgrouptacacs+iptacacssource-interfaceLoopback0tacacs-serverhost7tacacs-serverhost4tacacs-serverkeys9y8loggingtrapdebuggingloggingsource-interfaceLoopback0logging4logging5linevty04exec-timeout50accountingcommands0spdb-acsaccountingcommands1spdb-acsaccountingcommands2spdb-acsaccountingcommands3spdb-acsaccountingcommands4spdb-acsaccountingcommands5spdb-acsaccountingcommands6spdb-acsaccountingcommands7spdb-acsaccountingcommands8spdb-acsaccountingcommands9spdb-acsaccountingcommands10spdb-acsaccountingcommands11spdb-acsaccountingcommands12spdb-acsaccountingcommands13spdb-acsaccountingcommands14spdb-acsaccountingcommands15spdb-acsaccountingexecspdb-acsloginauthenticationspdb-acs网管配置access-list10permit8access-list10permit9access-list10permit6access-list10permit7access-list10permit5snmp-servercommunitypublicROsnmp-servercommunityreadRO10snmp-servertrap-sourceLoopback0snmp-serverenabletrapssnmpauthenticationwarmstartsnmp-serverenabletrapsconfigsnmp-serverenabletrapsentitysnmp-serverenabletrapsrtrsnmp-serverenabletrapsvtpsnmp-serverhost4publicsnmp-serverhost5read其他配置servicetimestampsdebugdatetimelocaltimeshow-timezoneservicetimestampslogdatetimelocaltimeshow-timezoneservicepassword-encryptionnoipdomain-lookupipcefload-sharingalgorithmoriginalclocktimezoneBJT8ntpsourceLoopback0ntpserver0monitorsession1sourcevlan1,10,192rxmonitorsession1destinationinterfaceFa0/5网络实施前期准备一、8条交叉线（2条做trunk，6条连向楼层交换机）二、将楼层交换机的fa0/47和48口空出来，并做好相应的配置实施步骤第一步：两台3550上架并加电启用（预计3分钟）第二步：将连接hp小机的光纤接口连到3550上（预计1分钟）cisco4506主的gigabit1/1对应3550主的gigabit0/1cisco4506主的gigabit2/2对应3550主的gigabit0/2cisco4506备的gigabit1/1对应3550主的gigabit0/1cisco4506备的gigabit2/2对应3550主的gigabit0/2第三步：将现成的交叉线在3550主备之间互连做ether－channel(预计1分钟)3550主的fa0/47对应3550备的fa0/473550主的fa0/48对应3550备的fa0/48第四步：将连在cisco4506上所有的电口都挪向3550上（预计5分钟）cisco4506主的fa2/3对应3550主的fa0/3cisco4506主的fa2/4对应3550主的fa0/4以此类推cisco4506主的fa2/34对应3550主的fa0/34cisco4506备的fa2/3对应3550备的fa0/3cisco4506备的fa2/4对应3550备的fa0/4以此类推cisco4506备的fa2/34对应3550备的fa0/34第五步：3台楼层交换机与3550之间的互连（预计3分钟）3550主的fa0/41对应255.15的fa0/473550主的fa0/43对应255.16的fa0/473550主的fa0/45对应255.17的fa0/473550备的fa0/41对应255.15的fa0/483550备的fa0/43对应255.16的fa0/483550备的fa0/45对应255.17的fa0/48第三方外联区网络应急第三方业务银联区网络应急线路故障：发生故障时，登陆ASA防火墙、交换机、路由器通过showlog,showipintbrie,showinterface,ping,showiproute,showroute等命令来确认相关接口在故障发生前和发生时的状态，找出问题线路。如果是内部网络线路，在线更换的具体操作流程如下：a)用笔记本电脑连接在网络设备的Console上，启动Console监控和记录；b)准备好存档的系统配置，备用。如有可能，同时保存当前系统配置；c)对故障模块上连接的线缆做好标记，小心拔下；d)做好安全接地，插上更换的新网线e)检查线缆连接状态正常；f)确认线缆更换成功。如果是外部线缆，则确认故障后，由XX打保修电话，联系联通、移动公司人员前来维修。设备故障：由于银联区所有的设备都是双机热备，所以一台发生故障并不影响业务运行。对于配置问题要制定正确的更改配置脚本，备份当前配置以后实施更改；对于硬件问题要练习XX公司，申请硬件故障维修。两台设备故障：使用1台ASA5540防火墙备份ASA防火墙的配置、使用1台cisco1841路由器备份连接银联方路由器的配置，任意1台交换机无需配置用来备份银联区交换机。ASA防火墙配置：

spdbsyasa#shrun:Saved:ASAVersion8.2(1)!hostnamespdbsyasaenablepassword2KFQnbNIdI.2KYOUencryptedpasswd2KFQnbNIdI.2KYOUencryptednames!interfaceGigabitEthernet0/0speed100duplexfullnameifoutsidesecurity-level0ipaddress8!interfaceGigabitEthernet0/1nameifinsidesecurity-level100ipaddress8!interfaceGigabitEthernet0/2nameifdmzsecurity-level50ipaddress!interfaceGigabitEthernet0/3descriptionLANFailoverInterface!interfaceManagement0/0shutdownnonameifnosecurity-levelnoipaddress!ftpmodepassiveaccess-listIPP_PATextendedpermitiphost1host5access-listIPP_PATextendedpermitiphost2host5access-listIPP_PATextendedpermitiphost3host5access-listIPP_PATextendedpermitiphost1host8access-listIPP_PATextendedpermitiphost2host8access-listIPP_PATextendedpermitiphost3host8access-listOUTSIDE_INextendedpermiticmpanyanyaccess-listOUTSIDE_INextendedpermittcphost1hosteq21428access-listOUTSIDE_INextendedpermittcphost1eq21428hostaccess-listOUTSIDE_INextendedpermittcphost1hosteq23428access-listOUTSIDE_INextendedpermittcphost1eq23428hostaccess-listOUTSIDE_INextendedpermittcphost3hosteq21428access-listOUTSIDE_INextendedpermittcphost3eq21428hostaccess-listOUTSIDE_INextendedpermittcphost3hosteq23428access-listOUTSIDE_INextendedpermittcphost3eq23428hostaccess-listOUTSIDE_INextendedpermittcphost31eq6060host2access-listOUTSIDE_INextendedpermitudp448eqsnmptrapaccess-listOUTSIDE_INextendedpermitudp448eqsyslogaccess-listOUTSIDE_INextendedpermitudphost4eqradiusaccess-listOUTSIDE_INextendedpermitudphost4eqradius-acctaccess-listOUTSIDE_INextendedpermitudphost4eq1812access-listOUTSIDE_INextendedpermitudphost4eq1813access-listOUTSIDE_INextendedpermittcphost4eqtacacsaccess-listOUTSIDE_INextendedpermitudphost7eqradiusaccess-listOUTSIDE_INextendedpermitudphost7eqradius-acctaccess-listOUTSIDE_INextendedpermitudphost7eq1812access-listOUTSIDE_INextendedpermitudphost7eq1813access-listOUTSIDE_INextendedpermittcphost7eqtacacsaccess-listOUTSIDE_INextendedpermitudphost0access-listOUTSIDE_INextendedpermittcphost0access-listINSIDE_OUTextendedpermiticmpanyanyaccess-listINSIDE_OUTextendedpermittcphost1host5eq21428access-listINSIDE_OUTextendedpermittcphost1eq21428host5access-listINSIDE_OUTextendedpermittcphost1host5eq23428access-listINSIDE_OUTextendedpermittcphost1eq23428host5access-listINSIDE_OUTextendedpermittcphost1host8eq21428access-listINSIDE_OUTextendedpermittcphost1eq21428host8access-listINSIDE_OUTextendedpermittcphost1host8eq23428access-listINSIDE_OUTextendedpermittcphost1eq23428host8access-listINSIDE_OUTextendedpermittcphost2host5eq21428access-listINSIDE_OUTextendedpermittcphost2eq21428host5access-listINSIDE_OUTextendedpermittcphost2host5eq23428access-listINSIDE_OUTextendedpermittcphost2eq23428host5access-listINSIDE_OUTextendedpermittcphost2host8eq21428access-listINSIDE_OUTextendedpermittcphost2eq21428host8access-listINSIDE_OUTextendedpermittcphost2host8eq23428access-listINSIDE_OUTextendedpermittcphost2eq23428host8access-listINSIDE_OUTextendedpermittcphost3host5eq21428access-listINSIDE_OUTextendedpermittcphost3eq21428host5access-listINSIDE_OUTextendedpermittcphost3host5eq23428access-listINSIDE_OUTextendedpermittcphost3eq23428host5access-listINSIDE_OUTextendedpermittcphost3host8eq21428access-listINSIDE_OUTextendedpermittcphost3eq21428host8access-listINSIDE_OUTextendedpermittcphost3host8eq23428access-listINSIDE_OUTextendedpermittcphost3eq23428host8access-listINSIDE_OUTextendedpermittcphost45host2eq6060access-listINSIDE_OUTextendedpermitip448anyaccess-listINSIDE_OUTextendedpermitiphost4anyaccess-listINSIDE_OUTextendedpermitiphost7anyaccess-listINSIDE_OUTextendedpermitudphost0anyeqntpaccess-listINSIDE_OUTextendedpermitudphost2anyeqntppagerlines24mtuoutside1500mtuinside1500mtudmz1500failoverfailoverlanunitprimaryfailoverlaninterfacefailoverlanGigabitEthernet0/3failoverpolltimeunitmsec500holdtime5failoverinterfaceipfailoverlanstandbyicmpunreachablerate-limit1burst-size1noasdmhistoryenablearptimeout14400global(outside)2nat(inside)2access-listIPP_PATstatic(inside,outside)tcp21428321428netmask55static(inside,outside)tcp23428323428netmask55static(inside,outside)tcptelnet3telnetnetmask55static(outside,inside)51netmask55static(outside,inside)83netmask55static(inside,outside)245netmask55static(outside,inside)231netmask55static(inside,outside)00netmask55static(inside,outside)22netmask55static(inside,outside)55netmask55static(inside,outside)66netmask55static(inside,outside)77netmask55static(inside,outside)88netmask55static(inside,outside)99netmask55static(inside,outside)44netmask55static(inside,outside)77netmask55access-groupOUTSIDE_INininterfaceoutsideaccess-groupINSIDE_OUTininterfaceinsiderouteoutside15551routeoutside35551routeinside01routeoutside51routeinside44801routeoutside315551timeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00icmp0:00:02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00timeoutsip0:30:00sip_media0:02:00sip-invite0:03:00sip-disconnect0:02:00timeoutsip-provisional-media0:02:00uauth0:05:00absolutetimeouttcp-proxy-reassembly0:01:00dynamic-access-policy-recordDfltAccessPolicyaaa-serverTACACS+protocoltacacs+aaa-serverRADIUSprotocolradiusaaa-serverspdb-acsprotocoltacacs+aaa-serverspdb-acs(inside)host7keys9y8aaa-serverspdb-acs(inside)host4keys9y9aaaauthenticationsshconsolespdb-acssnmp-serverhostinside5communityreadsnmp-serverhostinside6pollcommunityreadsnmp-serverhostinside7pollcommunityreadsnmp-serverhostinside8pollcommunityreadsnmp-serverhostinside9pollcommunityreadnosnmp-serverlocationnosnmp-servercontactsnmp-servercommunity*****snmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstartsnmp-serverenabletrapssyslogcryptoipsecsecurity-associationlifetimeseconds28800cryptoipsecsecurity-associationlifetimekilobytes4608000telnetinsidetelnetinsidetelnettimeout5sshtimeout5consoletimeout0threat-detectionbasic-threatthreat-detectionstatisticsaccess-listnothreat-detectionstatisticstcp-intercept!class-mapinspection_defaultmatchdefault-inspection-traffic!!policy-maptypeinspectdnspreset_dns_mapparametersmessage-lengthmaximum512policy-mapglobal_policyclassinspection_defaultinspectdnspreset_dns_mapinspectftpinspecth323h225inspecth323rasinspectnetbiosinspectrshinspectrtspinspectskinnyinspectesmtpinspectsqlnetinspectsunrpcinspecttftpinspectsipinspectxdmcp!service-policyglobal_policyglobalprompthostnamecontextCryptochecksum:b0171b7af7453023bce0c7ebfafb273e:end

spdbsyasa#路由器配置：R1#shrunBuildingconfiguration...Currentconfiguration:4554bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameR1!boot-start-markerboot-end-marker!loggingmessage-countersyslogenablepasswordcisco!aaanew-model!!aaaauthenticationloginspdb-acsgrouptacacs+enableaaaaccountingexecspdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands0spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands1spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands2spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands3spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands4spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands5spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands6spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands7spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands8spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands9spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands10spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands11spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands12spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands13spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands14spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands15spdb-acsaction-typestart-stopgrouptacacs+!!!aaasession-idcommondot11syslogipsource-route!!!!ipcefnoipdomainlookupnoipv6cef!multilinkbundle-nameauthenticated!!!!!!!!!!!!!!!!!!!!!!voice-card0!!!!!archivelogconfighidekeys!!!!!!track1ipsla1reachability!!!!interfaceLoopback0ipaddress5155!interfaceFastEthernet0/0noipaddressshutdownduplexautospeedauto!interfaceFastEthernet0/1noipaddressshutdownduplexautospeedauto!interfaceFastEthernet0/3/0!interfaceFastEthernet0/3/1!interfaceFastEthernet0/3/2!interfaceFastEthernet0/3/3!interfaceSerial0/1/0descriptiontoYinlianipaddress0652ipnatinsideipvirtual-reassemblyencapsulationpppnoshutdownclockrate2000000!interfaceSerial0/1/1noipaddressshutdownclockrate2000000!interfaceVlan1ipaddress0940secondaryipaddress51ipnatoutsideipvirtual-reassemblystandby184ip5standby184priority105standby184preemptstandby184track1decrement10!ipforward-protocolndiproute15505iproute35505iproute8iproute558iproute2558iproute315505noipservernoipsecure-server!!ipnatpoolyinlianpool1010netmaskipnatpoolpospool1313netmaskipnatoutsidesourcelist105poolyinlianpoolipnatoutsidesourcelist106poolpospool!ipsla1icmp-echo05source-interfaceSerial0/1/0frequency5ipslaschedule1lifeforeverstart-timenowaccess-list105permitiphosthost1access-list105permitiphosthost3access-list106permitiphost2host31!!!!!tacacs-serverhost4tacacs-serverhost7tacacs-serverkeys9y8!control-plane!!!!!!!!!!linecon0exec-timeout00loggingsynchronouslineaux0linevty04exec-timeout00passwordciscoaccountingcommands0spdb-acsaccountingcommands1spdb-acsaccountingcommands2spdb-acsaccountingcommands3spdb-acsaccountingcommands4spdb-acsaccountingcommands5spdb-acsaccountingcommands6spdb-acsaccountingcommands7spdb-acsaccountingcommands8spdb-acsaccountingcommands9spdb-acsaccountingcommands10spdb-acsaccountingcommands11spdb-acsaccountingcommands12spdb-acsaccountingcommands13spdb-acsaccountingcommands14spdb-acsaccountingcommands15spdb-acsaccountingexecspdb-acsloggingsynchronousloginauthenticationspdb-acs!schedulerallocate200001000ntpsourceLoopback0ntpserver0endR1#R2#shrunBuildingconfiguration...Currentconfiguration:4533bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameR2!boot-start-markerboot-end-marker!loggingmessage-countersyslogenablepasswordcisco!aaanew-model!!aaaauthenticationloginspdb-acsgrouptacacs+enableaaaaccountingexecspdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands0spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands1spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands2spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands3spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands4spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands5spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands6spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands7spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands8spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands9spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands10spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands11spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands12spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands13spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands14spdb-acsaction-typestart-stopgrouptacacs+!aaaaccountingcommands15spdb-acsaction-typestart-stopgrouptacacs+!!!aaasession-idcommonclocktimezoneBJT8dot11syslogipsource-route!!!!ipcefnoipdomainlookupnoipv6cef!multilinkbundle-nameauthenticated!!!!!!!!!!!!!!!!!!!!!!voice-card0!!!!!archivelogconfighidekeys!!!!!!!!!interfaceLoopback0ipaddress5255!interfaceFastEthernet0/0noipaddressduplexautospeedauto!interfaceFastEthernet0/1noipaddressshutdownduplexautospeedauto!interfaceFastEthernet0/3/0!interfaceFastEthernet0/3/1!interfaceFastEthernet0/3/2!interfaceFastEthernet0/3/3!interfaceSerial0/1/0ipaddress1052ipnatinsideipvirtual-reassemblyencapsulationpppnofair-queueclockrate2000000!interfaceSerial0/1/1noipaddressshutdownclockrate2000000!interfaceVlan1ipaddress11secondaryipaddress52ipnatoutsideipvirtual-reassemblystandby184ip5standby184preempt!ipforward-protocolndiproute15509iproute35509iproute8iproute558iproute2558iproute315509noipservernoipsecure-server!!ipnatpoolpospool1313netmaskipnatpoolyinlianpool1010netmaskipnatoutsidesourcelist105poolyinlianpoolipnatoutsidesourcelist106poolpospool!access-list105permitiphosthost1access-list105permitiphosthost3access-list106permitiphost2host31!!!!!tacacs-serverhost7tacacs-serverhost4tacacs-serverkeys9y8!control-plane!!!!!!!!!!linecon0lineaux0linevty04exec-timeout00accountingcommands0spdb-acsaccountingcommands1spdb-acsaccountingcommands2spdb-acsaccountingcommands3spdb-a