居民小区网络管理手册

居民院小区网络维护手册

版本修定:

作者时间修改内容

1居民院小区网络总体情况介绍.....................................................3

1.1小区网络拓扑图（如图1）.......................................3

1.2小区网络设备使用.......................................................4

1.3小区ip地址使用规划....................................................5

1.4小区出口路由器和核心交换机配置管理....................................5

1.4.1小区核心交换机配置.................................................5

1.4.1小区出口路由器配置................................................II

1.5小区internet出口链路管理..............................................15

1.6小区计费系统管理......................................................15

1.7小区dns服务器管理....................................................15

1.8小区常见问题及维护....................................................15

1居民院小区网络总体情况介绍

居民院小区网络共有300多个以太网节点,部署在107,108,109,110,111,

112,113共7栋居民楼。其中还包括大兰楼的若干用户。现在共有宽带使用用户

52个。居民楼之间，居民楼和核心316机房之间均为光缆连接。使用2M网通出口

作为小区internet出口。

1.1小区网络拓扑图（如图1）

图1

（网通2M出口

53

52

54

112113

1.2小区网络设备使用

设备名称使用地点设备型号备注

出口路由器316机房Haha3745内网地址172.17.1.253

计费316机房城市热点地址172.17.1.252

核心交换机316机房Haha3550172.17.1.254

107楼107楼2900管理ip172.17.254.107

108楼108楼2950管理ip172.17.254.108

109楼A109楼E500管理ip172.17.254.1

109楼B109楼E500管理ip172.17.254.109

110楼A110楼E500管理ip172.17.254.2

110楼B110楼E500管理ip172.17.254.110

111楼A111楼E500管理ip172.17.254.3

111楼B111楼E500管理ip172.17.254.Ill

112楼112楼E500管理ip172.17.254.112

113楼113楼E500管理ip172.17.254.113

1.3小区ip地址使用规划

小区核心交换机现在配置了3个vlan,使用6个C类地址段。

Vian地址段使用备注

Vlanl172.17.1.*路由，计费管理地址四楼用户也使用这个

管理员使用地址段的地址。

Vian10172.17.254.*管理网段

Vlan2172.17.2.*

172.17.3.*

172.17.4.*

172.17.5.*

1.4小区出口路由器和核心交换机配置管理

141小区核心交换机配置

haha-3550#shrun

haha-3550#shrunning-config

Buildingconfiguration...

Currentconfiguration:5505bytes

i

version12.1

noservicepad

servicetimestampsdebuguptime

servicetimestampsloguptime

noservicepassword-encryption

i

hostnamehaha-3550

!

enablesecret5$1$xGBw2a3pU0vdPSDM04J61

i

ipsubnet-zero

iprouting

class-mapmatch-allInc-up

matchaccess-group101

class-mapmatch-allInc-down

matchaccess-group100

i

!

policy-mapInc-up

classInc-up

police512000512000exceed-actiondrop

trustdscp

policy-mapInc-down

classInc-down

police512000512000exceed-actiondrop

i

!

spanning-treeextendsystem-id

interfaceFastEthernetO/1

descriptionconnectDrcom

noipaddress

ipaccess-groupvirousin

service-policyinputInc-down

spanning-treeportfast

I

interfaceFastEthernetO/2

noipaddress

spanning-trccportfast

!

interfaceFastEthernetO/3

noipaddress

spanning-treeportfast

i

interfaceFastEthcrnct0/4

noipaddress

spanning-trppportfast

l

interfaceFastEthernetO/5

switchportaccessvlan2

noipaddress

spanning-treeportfast

interfaceFastEthernetO/6

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernetO/7

swilchportaccessvlan2

noipaddress

spanning-treeportfast

I

interfaceFastEthernetO/8

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernetO/9

descriptionConnect110A

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernet0/10

descriptionConnect109A

switchportaccessvlan2

noipaddress

spanning-treeportfast

!

interfaceFastEthernetO/11

descriptionConnect107

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernetO/12

descriptionConnect111

switchportaccessvlan2

noipaddress

spanning-trppportfast

I

interfaceFastEthernetO/13

switchportaccessvlan2

noipaddress

spanning-treeportfast

interfaceFastEthernetO/14

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernetO/15

swilchportaccessvlan2

noipaddress

spanning-treeportfast

I

interfaceFastEthernetO/16

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernetO/17

switchportaccessvlan2

noipaddress

sspciiiiiiiig-tit?t?puitfabt

i

interfaceFastEthernetO/18

switchportaccessvlan2

noipaddress

spanning-treeportfast

I

interfaceFastEthernetO/19

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernet0/20

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthcrnctO/21

switchportaccessvlan2

noipaddress

spanning-treeportfast

i

interfaceFastEthernetO/22

noipaddress

spanning-treeportfast

interfaceFastEthernetO/23

descriptionconnect1.1.1.1DNS

noipaddress

spanning-treeportfast

interfaceFastEthernetO/24

noipaddress

service-policyinputInc-up

spanning-treeportfast

I

interfaceGigabitEthernetO/1

noipaddress

I

interfaceGigabitEthernetO/2

noipaddress

I

interfaceVlanl

ipaddress172.17.1.254255.255.255.0

ipuupvirousin

ipaccess-groupvirousout

i

interfaceVlan2

ipaddress172.17.3.254255.255.255.0secondary

ipaddress172.17.4.254255.255.255.0secondary

ipaddress172.17.5.254secondary

ipaddress172.17.2.254255.255.255.0

ipaccess-groupvirousin

ipaccess-groupvirousout

interfaceVlan3

noipaddress

i

interfaceVlan4

noipaddress

shutdown

!

interfaceVlan5

ipaddress:172.17.15.254255,255.255.0

i

interfaceVlan6

noipaddress

shutdown

ipclassless

iproute0.0.0.00.0.0.0172.17.1.253

iphttpserver

ipaccess-listextendedvirous

permittcpanyanyeqtelnet

denyudpanyanyeq135

denyudpanyanyeq1434

denyudpanyanyeqtftp

denytcpanyanyeq135

denytcpanyanyeq1025

denytcpanyanyeq3127

denytcpanyanyeq2745

denytcpanyanyeq6129

denytcpanyanyeq4444

denytcpanyanyeq593

denytcpanyanyeq5554

denytcpanyanyeq1022

denytcpanyanyeq1023

denytcpanyanyeq445

denytcpanyanyeq6881

denytcpanyanyeq6882

denytcpanyanyeq6883

denytcpanyanyeq6884

denytcpanyanyeq6885

denytcpanyanyeq6886

denytcpanyanyeq6887

denytcpanyanyeq6888

denytcpanyanyeq6890

permiticmphost172.7.1.254any

denytcpanyanycq139

denytcpanyanyeq2967

denytcpanyanyeq5100

denytcpanyanycq3077

denyudpanyanyeq3076

denytcpanyanyeq18077

denytcpanyanycq10716

denytcpanyanyeq39622

denytcpanyanypq2678

denytcpanyanyeq24696

permitipeinycxny

I

1

access-list100permitipanyhost1.1.1.19

access-list100permitipanyhost1.1.1.17

access-list101permitiphost1.1.1.19any

access-list101permitiphost1.1.1.17any

arp1.1.1.1OOeO.183a.869fARPA

snmp-serverenginelDlocal800000090300000B460DB281

snmp-servercommunityroRO

snmp-servercommunityhahaxaRO

snmp-serverlocationchina

snmp-servercontacthahaxa

snmp-serverenabletrapssnmpauthenticationwarmstartlinkdownlinkup

coldstart

snmp-serverenabletrapsconfig

snmp-serverenabletrapsentity

snmp-serverenabletrapsrtr

snmp-serverenabletrapsvlan-membership

snmp-serverenabletrapsvtp

snmp-serverenabletrapsMAC-Notification

snmp-serverenabletrapshsrp

snmp-serverenabletrapscluster

5iiinp-beiveieiicibletrapshcihci

linecon0

passwordhaha

linevty04

password1111

login

linevty515

login

monitorsession1sourceinterfaceFaO/1

end

L4.l小区出口路由器配置

Home#shrunning-config

Buildingconfiguration...

Currentconfiguration:3147bytes

i

version12.2

servicetimestampsdebuguptime

servicetimestampsloguptime

noservicepassword-encryption

i

hostnameHome

i

enablesecret5$l$fLNl$qsDDt3Tkbl5Ln2WflSVv7.

i

ipsubnet-zero

ipcef

class-mapmatch-allhttp

matchprotocolhttp

i

!

policy-maphttp

classhttp

bandwidth50

interfaceFastEthernetO/O

ipaddress110.1.1.206255.255.255.252

ipaccess-groupwebin

ipnatoutside

duplexauto

speedauto

i

interfaceFastEthernetO/1

ipaddress172.17.1.253255.255.255.0

ipaccountingoutput-packets

ipnatinside

duplexauto

speedauto

!

ipnattranslationtcp-timeout3600

ipnat.poolxqIIO.1.1.209110.1.1.213netmask255.255.255.248

ipnatinsidesource1ist1poolxqoverload

ipclassless

iproute0.0.0.00.0.0.0110.1.1.205

iproute172.17.0.0255.255.0.0172.17.1.254

iphttpserver

ippimbidir-enable

i

!

ipaccess-listextendedbingdu

denyudpanyanyeq3076

denyudpanyanyeq3077

denytcpanyanyeq3077

permitipanyany

ipaccess-listextendedtest

ipaccess-listextendedvirous

denyudpanyanyeq135

denyudpanyanyeq1434

denyudpanyanyeqtftp

denytcpanyanyeq135

denytcpanyanyeq1025

denytcpanyanyeq3127

denytcpanyanyeq2745

denytcpanyanyeq6129

denytcpanyanyeq4444

denytcpcinyanyeq593

denytcpanyanyeq5554

denytcpanyanyeq1022

denytcpanyanyeq1023

denytcpanyanyeq445

denytcpanyanyeq6881

denytcpanyanyeq6882

denytcpanyanyeq6883

denytcpanyanyeq6884

denytcpanyanyeq6885

denytcpanyanyeq6886

denytcpanyanyeq6887

denytcpanyanyeq6888

denytcpanyanyeq6890

permiticmphost172.17.1.254

denytcpanyanyeq139

denytcpanyanyeq2967

denytcpanyanycq5100

permitipanyany

paccRss-listpxtpndpdweb

denytcpanyanyeqwww

denyudpanyanyeq135

denyudpanyanyeq1434

denyudpanyanyeqtftp

denytcpanyanyeq135

denytcpanyanyeq1025

denytcpanyanyeq3127

denytcpanyanyeq2745

denytcpanyanyeq6129

denytcpanyanyeq4444

denytcpanyanyeq593

denytcpanyanyeq5554

denytcpanyanyeq1022

denytcpanyanyeq1023

denytcpanyanyea445

denytcpanyanyeq6881

denytcpanyanyeq6882

denytcpanyanyeq6883

denytcpanyanyeq6884

denytcpanyanyeq6885

denytcpanyanyeq6886

denytcpanyanyeq6887

denytcpanyanyeq6888

denytcpanyanyeq6890

denytcpcinyanyeq139

denytcpanyanyeq2967

denytcpanyanyeq5100

permitipanyany

access-list1permit172.17.1.00.0.0.255

access-list1permit172.17.2.00.0.0.255

access-list1permit172.17.3.00.0.0.255

access-list1permit172.17.4.00.0.0.255

access-list1permit172.17.5.00.0.0.255

access-list101permittcpanyanyIt1024

access-list102permitudpanyanygt10000

priority-list1protocoliphighlist101