{"id":529,"date":"2025-10-22T10:16:06","date_gmt":"2025-10-22T02:16:06","guid":{"rendered":"https:\/\/www.youvii.site\/?p=529"},"modified":"2025-10-22T10:16:06","modified_gmt":"2025-10-22T02:16:06","slug":"shenzhoushumapeizhiminglinghuizong","status":"publish","type":"post","link":"https:\/\/www.youvii.site\/index.php\/archives\/shenzhoushumapeizhiminglinghuizong","title":{"rendered":"\u795e\u5dde\u6570\u7801\u914d\u7f6e\u547d\u4ee4\u6c47\u603b"},"content":{"rendered":"

\u795e\u5dde\u6570\u7801\u914d\u7f6e\u547d\u4ee4\u6c47\u603b<\/h1>\n

\u4e00\u3001\u4ea4\u6362\u673a\u914d\u7f6e<\/p>\n

1.\u6a21\u5f0f\u8fdb\u5165<\/p>\n

Switch><\/font>
\nSwitch>en<\/font>
\nSwitch#config<\/font>
\nSwitch(Config)#interface ethernet 0\/2<\/font><\/p>\n

2.\u914d\u7f6e\u673a\u5668\u540d\u79f0<\/font><\/p>\n

Switch(Config)#hostname <\u4e3b\u673a\u540d><\/font><\/p>\n

3.\u914d\u7f6e\u4ea4\u6362\u673aIP\u5730\u5740<\/font><\/p>\n

Switch(Config)#interface vlan 1<\/font>
\nSwitch(Config-If-Vlan1)#ip address 10.1.128.251 255.255.255.0<\/font>
\nSwitch(Config-If-Vlan1)#no shut<\/font><\/p>\n

4.\u4e3a\u4ea4\u6362\u673a\u8bbe\u7f6eTelnet\u6388\u6743\u7528\u6237\u548c\u53e3\u4ee4<\/font><\/p>\n

\u5728\u5141\u8bb8Telnet\u65b9\u5f0f\u914d\u7f6e\u7ba1\u7406\u4ea4\u6362\u673a\u65f6\uff0c\u5fc5\u987b\u5728Console\u7684\u5168\u5c40\u914d\u7f6e\u6a21\u5f0f\u4e0b\u4f7f\u7528\u547d\u4ee4username privilege [password (0 | 7) ] \u4e3a\u4ea4\u6362\u673a\u8bbe\u7f6eTelnet\u6388\u6743\u7528\u6237\u548c\u53e3\u4ee4\u5e76\u4f7f\u7528\u547d\u4ee4authentication line vty login local\u6253\u5f00\u672c\u5730\u9a8c\u8bc1\u65b9\u5f0f\uff0c\u5176\u4e2dprivilege\u9009\u9879\u5fc5\u987b\u5b58\u5728\u4e14\u4e3a15\u3002<\/p>\n

Switch>enable<\/p>\n

Switch#config<\/p>\n

Switch(config)#username test privilege 15 password 0 test<\/p>\n

Switch(config)#authentication line vty login local<\/p>\n

Switch(Config)#telnet-user test password 0 test<\/p>\n

Switch (Config)#telnet-server enable\uff1a\/\/\u542f\u52a8\u8fdc\u7a0b\u670d\u52a1\u529f\u80fd<\/p>\n

5\u3001\u914d\u7f6e\u5141\u8bb8Telnet\u7ba1\u7406\u4ea4\u6362\u673a\u7684\u5730\u5740\u9650\u5236\uff08\u5355\u72ecIP\u6216IP\u5730\u5740\u6bb5\uff09<\/p>\n

\uff081\uff09\u9650\u5236\u5355\u4e2aIP\u5141\u8bb8Telnet\u767b\u5f55\u4ea4\u6362\u673a<\/p>\n

switch(config)#authentication security ip 192.168.1.2<\/p>\n

\uff082\uff09\u9650\u5236\u5141\u8bb8IP\u5730\u5740\u6bb5Telnet\u767b\u5f55\u4ea4\u6362\u673a<\/p>\n

switch(config)#access-list 1 permit 192.168.1.0 0.0.0.255<\/p>\n

switch(config)#authentication ip access-class 1 in<\/p>\n

5\u3001\u4e3a\u4ea4\u6362\u673a\u8bbe\u7f6eWeb\u6388\u6743\u7528\u6237\u548c\u53e3\u4ee4\uff1aweb-user <\u7528\u6237\u540d>password {0|7} <\u5bc6\u7801><\/p>\n

\u4f8b\uff1aSwitch(Config)#web-user admin password 0 digital<\/p>\n

6\u3001\u8bbe\u7f6e\u7cfb\u7edf\u65e5\u671f\u548c\u65f6\u949f\uff1aclock set HH:MM:SS <YYYY\/MM\/DD><\/p>\n

7\u3001\u8bbe\u7f6e\u9000\u51fa\u7279\u6743\u7528\u6237\u914d\u7f6e\u6a21\u5f0f\u8d85\u65f6\u65f6\u95f4<\/p>\n

exec timeout \/\/\u5355\u4f4d\u4e3a\u5206\u949f\uff0c\u53d6\u503c\u8303\u56f4\u4e3a0~300<\/p>\n

8\u3001\u4fdd\u5b58\u914d\u7f6e\uff1awrite<\/p>\n

9\u3001\u663e\u793a\u7cfb\u7edf\u5f53\u524d\u7684\u65f6\u949f\uff1aSwitch#show clock<\/p>\n

10\u3001\u6307\u5b9a\u767b\u5f55\u7528\u6237\u7684\u8eab\u4efd\u662f\u7ba1\u7406\u7ea7\u8fd8\u662f\u8bbf\u95ee\u7ea7<\/p>\n

Enable [level {visitor|admin} [<\u5bc6\u7801>]]<\/p>\n

11\u3001\u6307\u5b9a\u767b\u5f55\u914d\u7f6e\u6a21\u5f0f\u7684\u5bc6\u7801\uff1aEnable password level {visitor|admin}<\/p>\n

12\u3001\u914d\u7f6e\u4ea4\u6362\u673a\u7684\u7528\u6237\u540d\u5bc6\u7801\uff1ausername admin privilege 15 password 0 admin000<\/p>\n

13\u3001\u914d\u7f6eenable\u5bc6\u7801\u4e3addd\uff1aenable password 0 ddd level 15<\/p>\n

14\u3001\u914d\u7f6e\u767b\u5f55\u65f6\u8ba4\u8bc1\uff1aauthentication line vty login local<\/p>\n

15\u3001\u8bbe\u7f6e\u7aef\u53e3\u7684\u901f\u7387\u548c\u53cc\u5de5\u6a21\u5f0f\uff08\u63a5\u53e3\u914d\u7f6e\u6a21\u5f0f\u4e0b\uff09<\/p>\n

\u547d\u4ee4\uff1aspeed-duplex {auto | force10-half | force10-full | force100-half | force100-full |<\/p>\n

{{force1g-half | force1g-full} [nonegotiate [master | slave]] } }<\/p>\n

no speed-duplex<\/p>\n

\u4e8c\u3001\u5355\u4ea4\u6362\u673aVLAN\u5212\u5206<\/p>\n

1\u3001VLAN\u57fa\u672c\u914d\u7f6e<\/p>\n

\uff081\uff09\u65b0\u5efaVLAN\uff1avlan<\/p>\n

\uff082\uff09\u547d\u540dVLAN\uff1aname<\/p>\n

\uff083\uff09\u4e3aVLAN \u5206\u914d\u4ea4\u6362\u673a\u7aef\u53e3<\/p>\n

Switch(Config-If-Vlan1)#switchport interface Ethernet 0\/2<\/p>\n

\uff084\uff09\u8bbe\u7f6eTrunk \u7aef\u53e3\u5141\u8bb8\u901a\u8fc7VLAN\uff1a<\/p>\n

Switch(Config-ethernet0\/0\/5)#switchport trunk allowed vlan 1;3;5-20<\/p>\n

2\u3001\u5212\u5206VLAN\uff1a<\/p>\n

\uff081\uff09\u8fdb\u5165\u76f8\u5e94\u7aef\u53e3\uff1aSwitch(config)#interface Ethernet 0\/2<\/p>\n

\uff082\uff09\u4fee\u6539\u6a21\u5f0f\uff1aSwitch(Config-ethernet0\/0\/5)switchport mode access<\/p>\n

\uff083\uff09\u5212\u5206VLAN\uff1aSwitch(Config-ethernet0\/0\/5)#switchport access vlan 4<\/p>\n

\u4e09\u3001\u8de8\u4ea4\u6362\u673aVLAN\u5212\u5206\uff08\u4e24\u53f0\u4ea4\u6362\u673a\u4f5c\u76f8\u540c\u64cd\u4f5c\uff09<\/p>\n

1\u3001\u65b0\u5efaVLAN<\/p>\n

2\u3001\u5212\u5206VLAN<\/p>\n

3\u3001\u4fee\u6539\u94fe\u8def\u6a21\u5f0f<\/p>\n

\uff081\uff09\u8fdb\u5165\u76f8\u5e94\u7aef\u53e3\uff1aSwitch(config)#interface Ethernet 0\/1<\/p>\n

\uff082\uff09\u4fee\u6539\u6a21\u5f0f\uff1aSwitch(config-if)#switchport mode trunk<\/p>\n

\u56db\u3001VLAN\u95f4\u4e3b\u673a\u7684\u901a\u4fe1<\/p>\n

1\u3001\u65b0\u5efaVLAN<\/p>\n

2\u3001\u5212\u5206VLAN<\/p>\n

3\u3001\u4fee\u6539\u94fe\u8def\u6a21\u5f0f<\/p>\n

\uff081\uff09\u8fdb\u5165\u76f8\u5e94\u7aef\u53e3\uff1aSwitch(config)#interface Ethernet 0\/1<\/p>\n

\uff082\uff09\u4fee\u6539\u6a21\u5f0f\uff1aSwitch(config-if)#switchport mode trunk<\/p>\n

\u6ce8\u610f\uff1a\u5982\u679c\u662f\u4e09\u5c42\u4ea4\u6362\u673a\uff0c\u5728\u4fee\u6539\u6a21\u5f0f\u5148\u5c01\u88c5802.1\u534f\u8bae\uff1a<\/p>\n

Switch(config-if)#switchport trunk encapsulation dot1q<\/p>\n

4\u3001\u5efa\u7acbVLAN\u5b50\u63a5\u53e3<\/p>\n

\uff081\uff09\u3001\u8fdb\u5165VLAN\u63a5\u53e3\u6a21\u5f0f\uff1aSwitch(config)#interface vlan 2<\/p>\n

\uff082\uff09\u3001\u8bbe\u7f6eVLAN\u5b50\u63a5\u53e3\u5730\u5740\uff1aSwitch(config-if)#ip address 192.168.0.1 255.255.255.0<\/p>\n

\uff083\uff09\u3001\u6253\u5f00\u7aef\u53e3\uff1aSwitch(config-if)#no shutdown<\/p>\n

5\u3001\u8bbe\u7f6e\u5404\u4e3b\u673aIP\u5730\u5740\u3001\u5b50\u7f51\u63a9\u7801\u3001\u7f51\u5173<\/p>\n

\u6ce8\u610f\uff1a\uff081\uff09\u5404\u4e3b\u673aIP\u5730\u5740\u5e94\u4e0e\u5176\u6240\u5728\u7684VLAN\u5728\u540c\u4e00\u7f51\u6bb5\u3002<\/p>\n

\uff082\uff09192.168.0.1\/24\u4e2d\u7684\u201c24\u201d\u8868\u793a\u5b50\u7f51\u63a9\u7801\u4e3a3\u4e2a255\u3002<\/p>\n

\uff083\uff09\u4e3b\u673a\u6240\u5728\u7684VLAN\u7684\u5b50\u63a5\u53e3\u5730\u5740\u5c31\u662f\u4e3b\u673a\u7684\u7f51\u5173\u3002<\/p>\n

\u4e94\u3001\u7aef\u53e3\u5b89\u5168\u914d\u7f6e<\/p>\n

1\u3001\u542f\u7528\u548c\u7981\u7528\u7aef\u53e3\u5b89\u5168\u529f\u80fd\uff1a<\/p>\n

\u542f\u7528\uff1aSwitch(config-if)# switchport port-security<\/p>\n

\u7981\u7528\uff1aSwitch(config-if)# no switchport port-security<\/p>\n

2\u3001\u8bbe\u7f6e\u63a5\u53e3\u4e0a\u5b89\u5168\u5730\u5740\u7684\u6700\u5927\u4e2a\u6570\uff081~128\uff09<\/p>\n

Switch(config-if)#switchport port-security maximum 1<\/p>\n

3\u3001\u8bbe\u7f6e\u5904\u7406\u8fdd\u4f8b\u7684\u65b9\u5f0f<\/p>\n

Switch(config-if)#switchport port-security violation shutdown<\/p>\n

4\u3001\u624b\u5de5\u914d\u7f6e\u63a5\u53e3\u4e0a\u7684\u5b89\u5168\u5730\u5740<\/p>\n

Switch(config-if)#switchport port-security mac-address 00d0.d373.B060<\/p>\n

5\u3001\u67e5\u770b\u5b89\u5168\u914d\u7f6e\uff1a<\/p>\n

Switch#show port-security<\/p>\n

\u516d\u3001\u8bbe\u7f6e\u5e7f\u64ad\u98ce\u66b4\u6291\u5236\u529f\u80fd<\/p>\n

Switch(Config)#broadcast-suppression<\/p>\n

\u53c2\u6570\uff1a\u4ee3\u8868\u6bcf\u79d2\u949f\u5141\u8bb8\u901a\u8fc7\u7684\u5e7f\u64ad\u6570\u636e\u62a5\u7684\u4e2a\u6570\uff0c\u53d6\u503c\u8303\u56f4\u4e3a1~262143\u3002<\/p>\n

\u4e03\u3001\u7aef\u53e3\u805a\u5408<\/p>\n

1\u3001\u521b\u5efaport group\uff1aSwitch(Config)#port-group 1 \/\/\u6570\u5b57\u8303\u56f41-16<\/p>\n

2\u3001\u628a\u7269\u7406\u7aef\u53e3\u52a0\u5165\u7ec4\uff1aSwitch(Config-Ethernet0\/0\/1)#port-group 1 mode on<\/p>\n

3\u3001\u8fdb\u5165port-channel \u914d\u7f6e\u6a21\u5f0f\uff1aSwitch(Config)#interface port-channel 1<\/p>\n

4\u3001\u4fee\u6539\u94fe\u8def\u6a21\u5f0f\uff1aswitchport mode trunk<\/p>\n

\u7b2c\u4e8c\u90e8\u5206 \u8def\u7531\u5668\u914d\u7f6e<\/p>\n

\u4e00\u3001\u8def\u7531\u5668\u57fa\u672c\u914d\u7f6e<\/p>\n

1\u3001\u8fdb\u5165\u7279\u6743\u6a21\u5f0f\uff1aRouter>en<\/p>\n

2\u3001\u8fdb\u5165\u5168\u5c40\u914d\u7f6e\u6a21\u5f0f\uff1aRouter#config<\/p>\n

3\u3001\u5b9a\u4e49\u8def\u7531\u5668\u7684\u540d\u5b57\u4e3aDCR \uff1aRouter(Config)#hostname DCR<\/p>\n

4\u3001\u7279\u6743\u7528\u6237\u7684\u53e3\u4ee4\uff1aDCR (Config)#enable password 123456<\/p>\n

5\u3001\u542f\u52a8\u8fdc\u7a0b\u670d\u52a1\u529f\u80fd\uff1aDCR (Config)#telnet-server enable<\/p>\n

6\u3001\u914d\u7f6e\u8fdc\u7a0b\u7528\u6237\u7684\u53e3\u4ee4\uff1aDCR (Config)#telnet admin password 7 admin<\/p>\n

7\u3001\u914d\u7f6e\u65f6\u949f\u9891\u7387\uff1aRouter(Config-Serial2\/0)#physical-layer speed 64000<\/p>\n

8\u3001\u914d\u7f6e\u7528\u6237\u767b\u5f55\u8def\u7531\u5668\u65f6\u8ba4\u8bc1\uff1aaaa authentication login default local line enable<\/p>\n

9\u3001\u914d\u7f6e\u8fdb\u5165\u7279\u6743\u6a21\u5f0f\u65f6\u8ba4\u8bc1\uff1aaaa authentication enable default enable<\/p>\n

10\u3001\u914d\u7f6e\u8def\u7531\u5668\u7684\u7528\u6237\u540d\u5bc6\u7801\uff1ausername admin password 0 admin000<\/p>\n

11\u3001\u914d\u7f6e\u8fdb\u5165\u7279\u6743\u6a21\u5f0f\u5bc6\u7801\uff1aenable password 0 admin000 level 15<\/p>\n

\u4e8c\u3001\u9759\u6001\u8def\u7531\u914d\u7f6e<\/p>\n

1\u3001\u547d\u4ee4\uff1aip route <\u76ee\u7684IP> <\u5b50\u7f51\u63a9\u7801> {<\u63a5\u53e3\u540d\u79f0>|<\u4e0b\u4e00\u8df3IP\u5730\u5740>} [<\u8def\u7531\u4f18\u5148\u7ea7>]<\/p>\n

\u4e3a\u8def\u7531\u4f18\u5148\u7ea7\uff0c\u53d6\u503c\u8303\u56f4\u4e3a1\uff5e255\uff0cpreference\u7684\u503c\u8d8a\u5c0f\u4f18\u5148\u7ea7\u8d8a\u9ad8\u3002<\/p>\n

Router(config)#ip route 1.1.1.0 255.255.255.0 2.1.1.1<\/p>\n

2\u3001\u9ed8\u8ba4\u8def\u7531<\/p>\n

ip route 0.0.0.0 0.0.0.0{<\u63a5\u53e3\u540d\u79f0>|<\u4e0b\u4e00\u8df3IP\u5730\u5740>} [<\u8def\u7531\u4f18\u5148\u7ea7>]<\/p>\n

\u4e09\u3001\u5355\u81c2\u8def\u7531<\/p>\n

1\u3001\u6253\u5f00\u7aef\u53e3\uff1a<\/p>\n

2\u3001\u8fdb\u5165\u5b50\u63a5\u53e3\u914d\u7f6eIP\u5730\u5740\uff0c\u5e76\u5c01\u88c5dot1q\u534f\u8bae\u5230\u5bf9\u5e94\u7684VLAN\u3002<\/p>\n

Router_config#interface f0\/0.1<\/p>\n

Router\uff08config_f0\/0.1\uff09#ip address 192.168.100.1 255.255.255.0<\/p>\n

Router\uff08config_f0\/0.1\uff09#encapsulation dot1Q 100 \/\/\u5c01\u88c5dot1Q\u5230VLAN 100<\/p>\n

Route\uff08config_f0\/0.1\uff09#exit<\/p>\n

Router_config#interface f0\/0.2<\/p>\n

Router\uff08config_f0\/0.2\uff09#ip address 192.168.200.1 255.255.255.0<\/p>\n

Router\uff08config_f0\/0.2\uff09#encapsulation dot1Q 200 \/\/\u5c01\u88c5dot1Q\u5230VLAN 200<\/p>\n

Router\uff08config_f0\/0.2\uff09#exit<\/p>\n

\u56db\u3001\u52a8\u6001\u8def\u7531\u534f\u4e49\u914d\u7f6e<\/p>\n

1\u3001RIP\u534f\u8bae<\/p>\n

\u5728DCR\u8def\u7531\u5668\u4e0a\u8fd0\u884cRIP\u8def\u7531\u534f\u8bae\u7684\u57fa\u672c\u914d\u7f6e\u5f88\u7b80\u5355\uff0c\u901a\u5e38\u53ea\u9700\u6253\u5f00RIP\u5f00\u5173\u3001\u4f7f\u80fd\u53d1\u9001\u548c\u63a5\u6536RIP\u6570\u636e\u62a5\uff0c\u5373\u6309RIP\u7f3a\u7701\u914d\u7f6e\u53d1\u9001\u548c\u63a5\u6536RIP\u6570\u636e\u62a5\uff08DCR\u8def\u7531\u5668\u7f3a\u7701\u53d1\u9001RIP-II\u63a5\u6536RIP-I\u548cRIP-II\uff09<\/p>\n

\uff081\uff09\u542f\u52a8RIP\u534f\u8bae\uff1aRouter(config)#router rip<\/p>\n

\uff082\uff09\u914d\u7f6eRIP\u534f\u4e49\u7248\u672c\uff1aRouter(config-router-rip)#version 2<\/p>\n

\uff083\uff09\u914d\u7f6e\u63a5\u53e3\u4f7f\u80fd\u53d1\u9001\/\u63a5\u6536RIP\u6570\u636e\u62a5<\/p>\n

Router(config-serial2\/0)#ip rip work<\/p>\n

\uff084\uff09\u914d\u7f6e\u5f15\u5165\u8def\u7531\uff08\u7f3a\u7701\u8def\u7531\u6743\u503c\u3001\u914d\u7f6eRIP\u4e2d\u5f15\u5165\u5176\u5b83\u534f\u8bae\u7684\u8def\u7531\uff09<\/p>\n

\u2776\u7f3a\u7701\u8def\u7531\u6743\u503c\uff1aRouter(config-router-rip)#default-metric 3 \/\/\u6743\u503c\u53ef\u8bbe1-16<\/p>\n

\u2777\u8def\u7531\u91cd\u5206\u53d1\uff1aredistribute { static | ospf } [ metric ]<\/p>\n

\u7f3a\u7701\u60c5\u51b5\u4e0b\uff0c\u8def\u7531\u5668\u4e0d\u5f15\u5165\u5176\u5b83\u8def\u7531\u3002\u503c\u6307\u5b9a\u4ee5\u591a\u5927\u7684\u8def\u7531\u6743\u503c\u5f15\u5165\u8def\u7531\uff0c\u4e0d\u6307\u5b9a\u5219\u6309\u7f3a\u7701\u8def\u7531\u6743\u503c\uff08default-metric\uff09\u5f15\u5165\uff0c\u53d6\u503c\u8303\u56f41~16\u3002<\/p>\n

Router(config-router-rip)#redistribute ospf metric 5<\/p>\n

2\u3001OSPF\u534f\u8bae<\/p>\n

\uff081\uff09\u542f\u52a8OSPF\u534f\u8bae\uff08\u5fc5\u987b\uff09<\/p>\n

Router(Config)#router ospf<\/p>\n

\uff082\uff09\u914d\u7f6e\u8fd0\u884cOSPF\u8def\u7531\u5668\u7684ID\u53f7\uff08\u53ef\u9009\uff09<\/p>\n

router id <\/p>\n

\u4e3a\u8def\u7531\u5668ID\u53f7\uff0c\u4ee5IP\u5730\u5740\u8868\u793a\uff0c\u70b9\u5206\u5341\u8fdb\u5236\u683c\u5f0f\u3002\u7f3a\u7701\u60c5\u51b5\u4e0b\uff0c\u4e0d\u914d\u7f6e\u8def\u7531\u5668ID\u53f7\uff0cOSPF\u8fd0\u884c\u65f6\u4ece\u5404\u63a5\u53e3\u7684IP\u5730\u5740\u4e2d\u9009\u4e00\u4e2a\u4f5c\u4e3a\u8def\u7531\u5668ID\u53f7\u3002<\/p>\n

Router(config)#router id 1.1.1.1<\/p>\n

\uff083\uff09\u914d\u7f6e\u8fd0\u884cOSPF\u7684\u7f51\u7edc\u8303\u56f4\uff08\u53ef\u9009\uff09<\/p>\n

network <\u76f4\u8fde\u7f51\u7edc> <\u53cd\u63a9\u7801> area <\u533a\u57df\u53f7><\/p>\n

Router(Config-Router-Ospf)#network 10.0.0.0 0.0.0.255 area 1<\/p>\n

\uff084\uff09\u914d\u7f6e\u63a5\u53e3\u6240\u5c5e\u7684\u57df\uff08\u5fc5\u987b\uff09<\/p>\n

ip ospf enable area \n

\u8981\u5728\u67d0\u4e00\u4e2a\u63a5\u53e3\u4e0a\u8fd0\u884cOSPF\u534f\u8bae\uff0c\u5fc5\u987b\u9996\u5148\u6307\u5b9a\u8be5\u63a5\u53e3\u5c5e\u4e8e\u4e00\u4e2a\u533a\u57df\u3002\u6b64\u547d\u4ee4\u7528\u6765\u5728\u63a5\u53e3\u914d\u7f6e\u6240\u5c5e\u57df\u3002\u4e3a\u8be5\u63a5\u53e3\u6240\u5c5e\u533a\u57df\u7684\u533a\u57df\u53f7\u3002\u7f3a\u7701\u60c5\u51b5\u4e0b\uff0c\u63a5\u53e3\u4e0d\u914d\u7f6e\u6210\u5c5e\u4e8e\u67d0\u4e2a\u533a\u57df\u3002<\/p>\n

Router(Config-Serial2\/0)#ip ospf enable area 1<\/p>\n

\uff085\uff09\u914d\u7f6eOSPF\u5f15\u5165\u8def\u7531\u53c2\u6570<\/p>\n

\u2776\u914d\u7f6e\u5f15\u5165\u5916\u90e8\u8def\u7531\u7684\u7f3a\u7701\u53c2\u6570\uff08\u7f3a\u7701\u7c7b\u578b\u3001\u7f3a\u7701\u6807\u8bb0\u503c\u3001\u7f3a\u7701\u4ee3\u4ef7\u503c\u3001\u7f3a\u7701\u65f6\u95f4\u95f4\u9694\u548c\u7f3a\u7701\u6570\u91cf\u4e0a\u9650\uff09<\/p>\n

\u7f3a\u7701\u7c7b\u578b\uff1adefault redistribute type { 1 | 2 }<\/p>\n

Router(Config-Router-Ospf)# default redistribute type 1<\/p>\n

\u7f3a\u7701\u6807\u8bb0\u503c\uff1adefault redistribute tag \/\/\u8303\u56f41~2147483647<\/p>\n

Router(Config-Router-Ospf)# default redistribute tag 0x80000001<\/p>\n

\u7f3a\u7701\u4ee3\u4ef7\u503c\uff1adefault redistribute cost \/\/\u8303\u56f41~65535<\/p>\n

Router(Config-Router-Ospf)# default redistribute cost 10<\/p>\n

\u7f3a\u7701\u65f6\u95f4\u95f4\u9694\uff1adefault redistribute interval \/\/\u8303\u56f41~65535<\/p>\n

Router(Config-Router-Ospf)# default redistribute interval 3<\/p>\n

\u7f3a\u7701\u6570\u91cf\u4e0a\u9650\uff1adefault redistribute limit \/\/\u8303\u56f41~65535<\/p>\n

Router(Config-Router-Ospf)# default redistribute limit 100<\/p>\n

\u2777\u914d\u7f6e\u5728OSPF\u4e2d\u5f15\u5165\u5176\u5b83\u534f\u8bae\u7684\u8def\u7531\uff08\u8def\u7531\u91cd\u5206\u53d1\uff09<\/p>\n

redistribute ospfase { connected | static | rip } [ type { 1 | 2 } ] [ tag ] [ metric ]<\/p>\n

connected\u8868\u793a\u5f15\u5165\u76f4\u8fde\u8def\u7531\u4f5c\u4e3a\u5916\u90e8\u8def\u7531\u4fe1\u606f\uff0cstatic\u8868\u793a\u5f15\u5165\u9759\u6001\u8def\u7531\u4f5c\u4e3a\u5916\u90e8\u8def\u7531\u4fe1\u606f\uff0crip\u8868\u793a\u5f15\u5165RIP\u534f\u8bae\u53d1\u73b0\u8def\u7531\u4f5c\u4e3a\u5916\u90e8\u8def\u7531\u4fe1\u606f\uff1btype\u6307\u5b9a\u8def\u7531\u7684\u4ee3\u4ef7\u7c7b\u578b\uff0c1\u548c2\u5206\u522b\u8868\u793a\u7b2c\u4e00\u7c7b\u5916\u90e8\u8def\u7531\u548c\u7b2c\u4e8c\u7c7b\u5916\u90e8\u8def\u7531\uff1btag\u6307\u5b9a\u8def\u7531\u7684\u6807\u8bb0\uff0c\u4e3a\u8def\u7531\u7684\u6807\u8bb0\u503c\uff0c\u53d6\u503c\u8303\u56f412147483648\uff1bmetric\u6307\u5b9a\u8def\u7531\u7684\u4ee3\u4ef7\uff0c\u4e3a\u8def\u7531\u7684\u4ee3\u4ef7\u503c\uff0c\u53d6\u503c\u8303\u56f4116777215\u3002\u7f3a\u7701\u60c5\u51b5\u4e0b\uff0cOSPF\u4e0d\u5f15\u5165\u5916\u90e8\u8def\u7531\u3002<\/p>\n

Router(Config-Router-Ospf)#redistribute ospfase rip type 1 tag 3 metric 20<\/p>\n

3\u3001\u7b56\u7565\u8def\u7531<\/p>\n

\u2776 \u65b0\u5efa\u6e90\u7f51\u7edc\u8bbf\u95ee\u63a7\u5236\u5217\u8868<\/p>\n

Router(config)#ip access-list net1<\/p>\n

Router(config)# permit 10.1.1.0 0.0.0.255<\/p>\n

\u2777\u8bbe\u7f6e\u8def\u7531\u8868<\/p>\n

Router(config)#route-map pbr \/\/\u5efa\u7acb\u8def\u7531\u8868\uff0c\u540d\u5b57\u4e3aPBR<\/p>\n

Router(config-route-map)#Match ip address net1 \/\/\u914d\u7f6e\u5339\u914d\u8be5\u8def\u7531\u8868\u7684\u7f51\u7edc<\/p>\n

Router(config-route-map)#Match length 150 1500 \/\/\u8bbe\u7f6e\u62a5\u6587\u7684\u957f\u5ea6\u8303\u56f4<\/p>\n

Router(config-route-map)#Set ip next-hop 192.168.50.1 \/\/\u4e0b\u4e00\u8df3\u5730\u5740<\/p>\n

\u2778\u5e94\u7528\u5230\u63a5\u53e3<\/p>\n

Router(config)#int g0\/4<\/p>\n

Router(config)#ip policy route-map pbr<\/p>\n

\u4e94\u3001\u7f51\u7edc\u5730\u5740\u8f6c\u6362<\/p>\n

\u8bbe\u7f6e\u6307\u5b9a\u63a5\u53e3\u4f5c\u4e3a\u7f51\u7edc\u5730\u5740\u8f6c\u6362\u7684\u9650\u5b9a\u63a5\u53e3\uff1aip nat {inside|outside}<\/p>\n

Router#config<\/p>\n

Router(config)#interface ethernet 0<\/p>\n

Router(config-ethernet0)#ip nat inside<\/p>\n

\u914d\u7f6e\u9759\u6001NAT\/NAPT\u6620\u5c04<\/p>\n

NAT\uff1aip nat inside source static <\u5185\u90e8\u672c\u5730\u5730\u5740 > <\u5185\u90e8\u5168\u5c40\u5730\u5740><\/p>\n

Router(config)#ip nat inside static source 10.1.1.1 1.1.1.1<\/p>\n

NAPT: Router(config)#ip nat inside source static tcp 192.168.1.7 1024 200.8.7.3 1024<\/p>\n

Router(config)#ip nat inside source static udp 192.168.1.7 1024 200.8.7.3 1024<\/p>\n

\u914d\u7f6e\u52a8\u6001NAT\/NAPT\u6620\u5c04<\/p>\n

\uff081\uff09\u914d\u7f6e\u5141\u8bb8\u8fdb\u884c\u5730\u5740\u8f6c\u6362\u7684\u5185\u90e8\u79c1\u6709\u5730\u5740\uff1b<\/p>\n

Router(config)#access-list 1 permit 10.1.1.0 0.0.0.255<\/p>\n

\uff082\uff09\u914d\u7f6e\u52a8\u6001NAT\u5730\u5740\u8f6c\u6362\u4f7f\u7528\u7684\u5916\u90e8\u516c\u6709\u5730\u5740\u7684\u5730\u5740\u6c60\uff1b<\/p>\n

Router(config)#ip nat pool pool-1 1.1.1.1 1.1.1.10 netmask 255.255.255.0<\/p>\n

\uff083\uff09\u5efa\u7acb\u5185\u90e8\u79c1\u6709\u5730\u5740\u4e0e\u5730\u5740\u6c60\u6216NAT\u5916\u90e8\u63a5\u53e3\u7684\u6620\u5c04\u5173\u7cfb<\/p>\n

Router(config)#ip nat inside source list 1 pool pool-1 overload<\/p>\n

\u516d\u3001PPP\u534f\u8bae\u914d\u7f6e<\/p>\n

PPP\uff08Point-to-Point Protocol\uff09\u534f\u8bae\u662f\u4e3a\u5728\u70b9\u5230\u70b9\u94fe\u8def\u4e0a\u4f20\u8f93\u6570\u636e\u5305\u800c\u8bbe\u8ba1\u7684\uff0c\u5b83\u662f\u5728\u70b9\u5230\u70b9\u94fe\u8def\u4e0a\u627f\u8f7d\u7f51\u7edc\u5c42\u6570\u636e\u5305\u7684\u4e00\u79cd\u94fe\u8def\u5c42\u534f\u8bae\u3002PPP\u534f\u8bae\u53ef\u4ee5\u627f\u8f7d\u591a\u79cd\u7f51\u7edc\u5c42\u534f\u8bae\u6570\u636e\u5305\uff0c\u5982IP\u548cIPX\uff0c\u5e76\u63d0\u4f9bPAP\u3001CHAP\u3001MS-CHAP\u4e09\u79cd\u5b89\u5168\u8ba4\u8bc1\u65b9\u5f0f\uff0c\u4ee5\u9632\u6b62\u672a\u7ecf\u8bb8\u53ef\u7684\u975e\u6cd5\u7528\u6237\u8bbf\u95ee\u3002PPP\u652f\u6301\u4e32\u53e3\u540c\u6b65\u548c\u5f02\u6b65\u4e24\u79cd\u6a21\u5f0f\u3002PPP\u914d\u7f6e,\u9700\u5148\u5728\u63a5\u53e3\u505a\u597d\u57fa\u7840\u914d\u7f6e\uff08\u63a5\u53e3IP\uff0c\u65f6\u949f\u9891\u7387\u7b49\u3002\uff09<\/p>\n

1\u3001PAP\uff1a\u9a8c\u8bc1\u65b9\u5efa\u7acb\u6570\u636e\u5e93\uff0c\u88ab\u9a8c\u8bc1\u65b9\u53d1\u9001\u76f8\u540c\u7528\u6237\u540d\u5bc6\u7801\u3002<\/p>\n

\uff081\uff09\u9a8c\u8bc1\u65b9\uff1a<\/p>\n

\u5efa\u7acb\u7528\u6237\u540d\u3001\u5bc6\u7801\uff1aRouter(config)#user dcr password 0 aa<\/p>\n

\u8fdb\u5165\u63a5\u53e3\uff0c\u5c01\u88c5PPP\uff1aRouter(config-serial2\/0)#encapsulation ppp<\/p>\n

\u9009\u62e9\u9a8c\u8bc1\u65b9\u5f0fPAP\uff1aRouter(config-serial2\/0)#ppp authentication pap<\/p>\n

\uff082\uff09\u88ab\u9a8c\u8bc1\u65b9\uff1a<\/p>\n

\u8fdb\u5165\u63a5\u53e3\uff0c\u5c01\u88c5PPP\uff1aRouter(config-serial2\/0)#encapsulation ppp<\/p>\n

\u53d1\u9001\u5bf9\u65b9\u7684\u7528\u6237\u540d\u5bc6\u7801\uff1aRouter(config-serial2\/0)#ppp pap sent-username dcr password 0 aa<\/p>\n

2\u3001CHAP\uff1a\u53d1\u9001\u7684\u7528\u6237\u540d\u5fc5\u987b\u662f\u5bf9\u65b9\u4e3b\u673a\u540d\uff0c\u53cc\u65b9\u53d1\u9001\u7684\u5bc6\u7801\u8981\u4e00\u81f4\u3002<\/p>\n

\uff081\uff09\u9a8c\u8bc1\u65b9\uff1a<\/p>\n

\u5efa\u7acb\u7528\u6237\u540d\u3001\u5bc6\u7801\uff1aRouter(config)#user RB password aa<\/p>\n

\u8fdb\u5165\u63a5\u53e3\uff0c\u5c01\u88c5PPP\uff1aRouter(config-serial2\/0)#encapsulation ppp<\/p>\n

\u9009\u62e9\u9a8c\u8bc1\u65b9\u5f0fCHAP\uff1aRouter(config-serial2\/0)#ppp authentication chap<\/p>\n

\uff082\uff09\u88ab\u9a8c\u8bc1\u65b9\uff1a<\/p>\n

\u5efa\u7acb\u7528\u6237\u540d\u5bc6\u7801\uff1aRouter(config)#user RA password aa<\/p>\n

\u8fdb\u5165\u63a5\u53e3\uff0c\u5c01\u88c5PPP\uff1aRouter(config-serial2\/0)#encapsulation ppp<\/p>\n

\u6ce8\u610f\uff1a\u795e\u5dde\u6570\u7801\u8bbe\u5907\u914d\u7f6e\u5fc5\u987b\u5f00\u542fAAA\u672c\u5730\u8ba4\u8bc1\u3002<\/p>\n

Router(config)# aaa authentication ppp default local<\/p>\n

\u7b2c\u4e09\u90e8\u5206 \u5176\u5b83\u914d\u7f6e<\/p>\n

\u4e00\u3001MSTP\u914d\u7f6e\uff08MSTP\u662f\u57fa\u4e8eSTP\u6216RSTP\u7684\uff0c\u56e0\u6b64\u5728\u914d\u7f6e\u524d\u5e94\u5f00\u542f\u4efb\u4e00\u6a21\u5f0f\uff09<\/p>\n

1\u3001\u5f00\u542f\u751f\u6210\u6811<\/p>\n

\u547d\u4ee4\uff1aspanning-tree<\/p>\n

2\u3001\u8bbe\u7f6e\u4ea4\u6362\u673a\u8fd0\u884c\u751f\u6210\u6811\u7684\u6a21\u5f0f<\/p>\n

\u547d\u4ee4\uff1aspanning-tree mode {mstp|stp}<\/p>\n

3\u3001\u8fdb\u5165MSTP\u57df\u914d\u7f6e\u6a21\u5f0f<\/p>\n

\u547d\u4ee4\uff1aspanning-tree mst configuration<\/p>\n

4\u3001\u4e3a\u57df\u547d\u540d\uff08\u57df\u914d\u7f6e\u6a21\u5f0f\uff09<\/p>\n

\u547d\u4ee4\uff1aname<\/p>\n

5\u3001\u5c06\u5b9e\u4f8b\u5e94\u7528\u5230VLAN\uff08\u57df\u914d\u7f6e\u6a21\u5f0f\uff09<\/p>\n

\u547d\u4ee4\uff1ainstance vlan<\/p>\n

6\u3001\u8bbe\u7f6e\u5b9e\u4f8b\u7684\u4f18\u5148\u7ea7\uff08\u5728\u5168\u5c40\u6a21\u5f0f\u914d\u7f6e\uff09<\/p>\n

\u547d\u4ee4\uff1aspanning-tree mst priority<\/p>\n

7\u3001\u8bbe\u7f6e\u5f53\u524d\u7aef\u53e3\u6307\u5b9a\u5b9e\u4f8b\u7684\u4f18\u5148\u7ea7\u503c\uff08\u7aef\u53e3\u914d\u7f6e\u6a21\u5f0f\u4e0b\uff09<\/p>\n

\u547d\u4ee4\uff1aspanning-tree mst port-priority<\/p>\n

\u4e8c\u3001ACL\u914d\u7f6e<\/p>\n

\uff08\u4e00\uff09\u3001\u6807\u51c6\u7684ACL<\/p>\n

access-list 10 {deny | permit} {{<\u6e90\u7f51\u7edc> <\u53cd\u63a9\u7801>} | any-source | {host-source <\u6e90\u5730\u5740>}}<\/p>\n

\uff08\u4e8c\uff09\u3001\u547d\u540d\u6807\u51c6ACL<\/p>\n

1\u3001\u547d\u540d<\/p>\n

ip access-list standard acb<\/p>\n

2\u3001\u5236\u5b9a\u89c4\u5219<\/p>\n

{deny | permit} {{<\u6e90\u7f51\u7edc> <\u53cd\u63a9\u7801>} | any-source | {host-source <\u6e90\u5730\u5740>}}<\/p>\n

3\u3001\u5e94\u7528\u5230\u63a5\u53e3<\/p>\n

ip access-group \u540d\u79f0 in\/out<\/p>\n

\uff08\u4e09\uff09\u3001\u6269\u5c55\u7684ACL<\/p>\n

access-list 102 {deny | permit} \u534f\u8bae\u7c7b\u578b {{<\u6e90\u7f51\u7edc> <\u53cd\u63a9\u7801>} | any-source | {host-source<\u6e90\u5730\u5740>}} {{<\u76ee\u6807\u7f51\u7edc> <\u53cd\u63a9\u7801>} | any-destination | {host-destination <\u76ee\u6807\u4e3b\u673a\u5730\u5740>}} [precedence <\u4f18\u5148\u7ea7\u503c\uff080-7\uff09>] [tos<\u670d\u52a1\u7ea7\u7c7b\u578b\uff081-15\uff09>][time-range<\u65f6\u95f4\u8303\u56f4\u540d\u79f0>]<\/p>\n

\uff08\u56db\uff09\u3001\u547d\u540d\u6269\u5c55ACL<\/p>\n

1\u3001\u547d\u540d<\/p>\n

ip access-list extended acb<\/p>\n

2\u3001\u5236\u5b9a\u89c4\u5219<\/p>\n

[no] {deny | permit} \u534f\u8bae\u7c7b\u578b {{<\u6e90\u7f51\u7edc> <\u53cd\u63a9\u7801>} | any-source | {host-source<\/p>\n

<\u6e90\u5730\u5740>}} {{<\u76ee\u6807\u7f51\u7edc> <\u53cd\u63a9\u7801>} | any-destination | {host-destination <\u76ee\u6807\u4e3b\u673a\u5730\u5740>}} [precedence <\u4f18\u5148\u7ea7\u503c\uff080-7\uff09>] [tos<\u670d\u52a1\u7ea7\u7c7b\u578b\uff081-15\uff09>][time-range<\u65f6\u95f4\u8303\u56f4\u540d\u79f0>]<\/p>\n

3\u3001\u5e94\u7528\u5230\u63a5\u53e3<\/p>\n

(\u4e94)\u3001MAC\u547d\u540d\u6269\u5c55ACL<\/p>\n

1\u3001\u547d\u540d\uff1amac-ip-access-list extended<\/p>\n

2\u3001\u5236\u5b9a\u89c4\u5219<\/p>\n

{deny|permit}{any-source-mac|{host-source-mac}|{}}<\/p>\n

{any-destination-mac|{host-destination-mac}|{}}<\/p>\n

\u4f8b\uff1a\u5728SW3\u76843\u53f7\u63a5\u53e3\u4e0a,\u8981\u6c42mac\u4e3a 00-FF-51-FD-AE-15\u7684\u4e3b\u673a\u4e0d\u80fd\u8bbf\u95ee\u884c\u653f\u90e8\u7684\u4e3b\u673aMAC\u5730\u5740\u4e3a\uff1aE0-94-67-05-5D-84\uff0c\u5176\u4f59\u4e3b\u673a\u6b63\u5e38\u8bbf\u95ee\u3002<\/p>\n

mac-ip-access-list extended aaa<\/p>\n

deny host-source-mac 00-FF-51-FD-AE-15 host-destination-mac E0-94-67-05-5D-84<\/p>\n

3\u3001\u5e94\u7528\u5230\u63a5\u53e3<\/p>\n

ip access-group \u540d\u79f0 in\/out<\/p>\n

\uff08\u516d\uff09\u3001\u5236\u5b9a\u65f6\u95f4\u8303\u56f4<\/p>\n

1\u3001\u547d\u540d<\/p>\n

[no] time-range <\/p>\n

2\u3001\u4e00\u5468\u4e4b\u5185\u7684\u5faa\u73af\u65f6\u95f4<\/p>\n

[no] absolute-periodic{Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|<\/p>\n

Sunday}<\u5f00\u59cb\u65f6\u95f4>to{Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|<\/p>\n

Sunday} <\u7ed3\u675f\u65f6\u95f4><\/p>\n

\u6216<\/p>\n

[no]periodic{{Monday+Tuesday+Wednesday+Thursday+Friday+Saturday+Sunday}|<\/p>\n

daily| weekdays | weekend} <\u5f00\u59cb\u65f6\u95f4> to <\u7ed3\u675f\u65f6\u95f4><\/p>\n

3\u3001\u7edd\u5bf9\u65f6\u95f4\u8303\u56f4<\/p>\n

[no]absolute start <\u5f00\u59cb\u65f6\u95f4> <\u5f00\u59cb\u65e5\u671f> [end <\u7ed3\u675f\u65f6\u95f4> <\u7ed3\u675f\u65e5\u671f>]<\/p>\n

\u4e09\u3001DHCP \u914d\u7f6e<\/p>\n

1\u3001\u521b\u5efa\u5730\u5740\u6c60<\/p>\n

\u547d\u4ee4\uff1aip dhcp pool<\/p>\n

2\u3001\u914d\u7f6e\u5730\u5740\u53ef\u5206\u914d\u7684\u8303\u56f4\u53ca\u5176\u5b83\u53c2\u6570<\/p>\n

\uff081\uff09\u914d\u7f6e\u5730\u5740\u53ef\u5206\u914d\u8303\u56f4<\/p>\n

\u547d\u4ee4\uff1anetwork-address [ | ]<\/p>\n

\uff082\uff09\u914d\u7f6e\u5730\u5740\u6c60\u79df\u7528\u671f\u9650<\/p>\n

\u547d\u4ee4\uff1alease { [] [][] | infinite }<\/p>\n

\uff083\uff09\u914d\u7f6eDHCP\u5ba2\u6237\u673a\u7684\u7f3a\u7701\u7f51\u5173<\/p>\n

\u547d\u4ee4\uff1adefault-router [[\u2026]]<\/p>\n

\uff084\uff09\u914d\u7f6eDHCP\u5ba2\u6237\u673a\u7684DNS\u670d\u52a1\u5668\u5730\u5740<\/p>\n

\u547d\u4ee4\uff1adns-server [[\u2026]]<\/p>\n

\uff085\uff09\u914d\u7f6eWINS\u670d\u52a1\u5668\u7684\u5730\u5740<\/p>\n

\u547d\u4ee4\uff1anetbios-name-server [[\u2026]]<\/p>\n

\uff086\uff09\u914d\u7f6eDHCP\u5ba2\u6237\u673a\u7684\u8282\u70b9\u7c7b\u578b<\/p>\n

\u547d\u4ee4\uff1anetbios-node-type \uff5bb-node|h-node|m-node|p-node|\uff5d<\/p>\n

\uff087\uff09\u914d\u7f6eWWW\u670d\u52a1\u5668\u7684\u5730\u5740<\/p>\n

\u547d\u4ee4\uff1aoption {ascii | hex | ipaddress }<\/p>\n

\uff088\uff09\u6392\u9664\u67d0\u4e2a\u5730\u5740\u6216\u5730\u5740\u8303\u56f4\u4e0d\u7528\u4e8e\u52a8\u6001\u5206\u914d<\/p>\n

\u547d\u4ee4\uff1aip dhcp excluded-address []<\/p>\n

\uff089\uff09\u914d\u7f6eDHCP\u5ba2\u6237\u673a\u7684\u57df\u540d<\/p>\n

\u547d\u4ee4\uff1adomain-name<\/p>\n

(10) \u6253\u5f00DHCP\u670d\u52a1\u5668Ping\u65b9\u5f0f\u68c0\u6d4b\u5730\u5740\u51b2\u7a81\u7684\u529f\u80fd<\/p>\n

\u547d\u4ee4\uff1aip dhcp conflict ping-detection enable<\/p>\n

3\u3001\u542f\u7528DHCP\u670d\u52a1<\/p>\n

\u547d\u4ee4\uff1aservice dhcp<\/p>\n

4\u3001DHCP\u624b\u5de5\u5206\u914d<\/p>\n

\uff081\uff09\u3001\u521b\u5efa\u5730\u5740\u6c60 \u547d\u4ee4\uff1aip dhcp pool<\/p>\n

\uff082\uff09\u3001\u7ed1\u5b9aIP\u4e0eMAC A.\u547d\u4ee4\uff1ahost [ | ]<\/p>\n

B.\u547d\u4ee4\uff1ahardware-address [{Ethernet | IEEE802|}]<\/p>\n

\uff083\uff09\u3001client-name<\/p>\n

5\u3001DHCP Snooping<\/p>\n

\uff081\uff09\u3001\u5f00\u542f DHCP Snooping<\/p>\n

\u547d\u4ee4\uff1aip dhcp snooping enable<\/p>\n

\uff082\uff09\u3001\u8bbe\u7f6e\u4fe1\u4efb\u7aef\u53e3<\/p>\n

\uff081\uff09\u8fdb\u5165\u7aef\u53e3<\/p>\n

\uff082\uff09\u8bbe\u7f6e\u4fe1\u4efb\u7aef\u53e3<\/p>\n

\u547d\u4ee4\uff1aip dhcp snooping trust<\/p>\n

\uff083\uff09\u3001\u8bbe\u7f6e\u81ea\u52a8\u9632\u5fa1\u52a8\u4f5c<\/p>\n

\u547d\u4ee4\uff1aip dhcp snooping action {shutdown|blackhole} [recovery ]<\/p>\n

\u56db\u3001ARP\u914d\u7f6e<\/p>\n

1\u3001\u914d\u7f6e\u9759\u6001ARP \u8868\u9879<\/p>\n

Switch(Config-Vlan1)#arp 1.1.1.1 00-03-0f-f0-12-34<\/p>\n

2\u3001ARP GUARD<\/p>\n

\u6dfb\u52a0 ARP GUARD \u5730\u5740: arp-guard ip <\/p>\n

3\u3001\u9632ARP \u626b\u63cf<\/p>\n

1)\u542f\u52a8\u9632ARP \u626b\u63cf\u529f\u80fd<\/p>\n

SwitchA(config)#anti-arpscan enable<\/p>\n

2\uff09\u914d\u7f6e\u4fe1\u4efb\/\u8d85\u7ea7\u4fe1\u4efb\u7aef\u53e3<\/p>\n

SwitchA (Config-If-Ethernet0\/0\/2)#anti-arpscan trust port \/\/\u4fe1\u4efb\u7aef\u53e3<\/p>\n

SwitchA (Config-If-Ethernet0\/0\/19)#anti-arpscan trust supertrust-port \/\/\u8d85\u7ea7\u4fe1\u4efb<\/p>\n

3\uff09\u914d\u7f6e\u4fe1\u4efbIP<\/p>\n

SwitchA(config)#anti-arpscan trust ip 192.168.1.100 255.255.255.0<\/p>\n

4) \u914d\u7f6e\u81ea\u52a8\u6062\u590d\u65f6\u95f4<\/p>\n

Switch(Config)#anti-arpscan recovery enable \/\/\u5148\u5728\u4ea4\u6362\u673a\u4e0a\u542f\u52a8\u81ea\u52a8\u6062\u590d\u529f\u80fd<\/p>\n

SwitchA(config)#anti-arpscan recovery time 3600<\/p>\n

4\u3001\u8bbe\u7f6e\u57fa\u4e8e\u7aef\u53e3\u7684\u9632ARP \u626b\u63cf\u7684\u63a5\u6536ARP \u62a5\u6587\u7684\u9608\u503c<\/p>\n

Switch(Config)#anti-arpscan port-based threshold 20<\/p>\n

5\u3001\u8bbe\u7f6e\u57fa\u4e8eIP \u7684\u9632ARP \u626b\u63cf\u7684\u63a5\u6536ARP \u62a5\u6587\u7684\u9608\u503c<\/p>\n

Switch(Config)#anti-arpscan port-based threshold 6<\/p>\n

6\u3001\u663e\u793aARP \u6620\u5c04\u8868\uff1aSwitch#sh arp<\/p>\n

\u4e94VRRP\u914d\u7f6e<\/p>\n

(\u4e00)\u5728\u4e09\u5c42\u4ea4\u6362\u673a\u4e0a\u914d\u7f6eVRRP<\/p>\n

1\u3001\u8fdb\u5165\u8981\u914d\u7f6e\u7684\u63a5\u53e3\uff08\u7aef\u53e3\u6216\u865a\u62df\u5b50\u63a5\u53e3\uff09<\/p>\n

2\u3001\u8fdb\u5165VRRP\u534f\u4e49\u914d\u7f6e\u6a21\u5f0f\uff08\u4e24\u4e2a\u8bbe\u5907\u7684\u7f16\u53f7\u8981\u4e00\u81f4\uff09<\/p>\n

DG5950(config)# router vrrp 1<\/p>\n

3\u3001\u914d\u7f6e\u865a\u62df\u7f51\u5173<\/p>\n

DG5950(config-router)#virtual-ip 192.168.100.254 \/\/\u865a\u62df\u7f51\u5173,\u4e24\u8fb9\u5fc5\u987b\u4e00\u81f4<\/p>\n

4\u3001\u8bbe\u7f6e\u4f18\u5148\u7ea7<\/p>\n

DG5950 (config-router)#priority 200<\/p>\n

5\u3001\u914d\u7f6e\u62a2\u5360\u6a21\u5f0f(\u53ef\u9009)<\/p>\n

DG5950(config-router)# preempt-mode true<\/p>\n

6\u3001\u542f\u52a8VRRP<\/p>\n

DG5950(config-router)#enable<\/p>\n

7\u3001\u67e5\u770bVRRP<\/p>\n

Ruijie# show vrrp brief<\/p>\n

\uff08\u4e8c\uff09\u5728\u8def\u7531\u5668\u4e0a\u914d\u7f6eVRRP<\/p>\n

1\u3001\u8fdb\u5165\u8981\u914d\u7f6e\u7684\u5b50\u63a5\u53e3\u5e76\u914d\u7f6e\u865a\u62df\u5b50\u63a5\u53e3IP\uff0c\u5c01\u88c5\u5230\u6307\u5b9aVLAN\u3002\uff08\u5355\u81c2\uff09<\/p>\n

RB_config#interface GigaEthernet0\/3.10<\/p>\n

RB_config-if#ip address 192.168.10.254 255.255.255.0<\/p>\n

RB_config-if#encapsulation dot1Q 10<\/p>\n

2\u3001\u914d\u7f6e\u7f6e\u865a\u62df\u7f51\u5173<\/p>\n

RB_config-if#vrrp 10 associate 192.168.10.250 255.255.255.0<\/p>\n

3\u3001\u914d\u7f6e\u4f18\u5148\u7ea7<\/p>\n

RB_config-if#vrrp 10 priority 150<\/p>\n

4\u3001\u914d\u7f6e\u62a2\u5360\u6a21\u5f0f(\u53ef\u9009)<\/p>\n

RB_config-if#vrrp 10 preempt<\/p>\n

5\u3001\u914d\u7f6e\u8981\u76d1\u542c\u7684\u4e0a\u884c\u7aef\u53e3<\/p>\n

RB_config-if#vrrp 10 track interface GigaEthernet0\/4 30<\/p>\n

\u516d 802.1X<\/p>\n

Switch(Config)#interface vlan 1\u21b5 \/\/\u521b\u5efaVLAN<\/p>\n

Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0\u21b5 \/\/\u914d\u7f6eIP\u5730\u5740<\/p>\n

Switch(Config-if-vlan1)#exit\u21b5<\/p>\n

Switch(Config)#radius-server authentication host 10.1.1.3\/\/\u914d\u7f6e\u8ba4\u8bc1\u670d\u52a1\u5668\u5730\u5740<\/p>\n

Switch(Config)#radius-server accounting host 10.1.1.3\u21b5 \/\/\u914d\u7f6e\u8ba1\u8d39\u670d\u52a1\u5668\u5730\u5740<\/p>\n

Switch(Config)#radius-server key test\u21b5 \/\/\u914d\u7f6eRADIUS \u8ba4\u8bc1\u5bc6\u94a5<\/p>\n

Switch(Config)#aaa enable\u21b5 \/\/\u5f00\u542f\u4ea4\u6362\u673a\u7684aaa\u8ba4\u8bc1\u529f\u80fd<\/p>\n

Switch(Config)#aaa-accounting enable\u21b5 \/\/\u5f00\u542f\u4ea4\u6362\u673a\u7684\u8ba1\u8d39\u529f\u80fd<\/p>\n

Switch(Config)#dot1x enable\u21b5 \/\/\u6253\u5f00\u4ea4\u6362\u673a\u5168\u5c40\u7684802.1x \u529f\u80fd<\/p>\n

Switch(Config)#interface ethernet 0\/0\/2\u21b5 \/\/\u8fdb\u5165\u7aef\u53e3<\/p>\n

Switch(Config-Ethernet0\/0\/1)#dot1x enable\u21b5 \/\/\u6253\u5f00\u4ea4\u6362\u673a\u7aef\u53e3\u7684802.1x \u529f\u80fd<\/p>\n

Switch(Config-Ethernet0\/0\/1)#dot1x port-method macbased\u21b5 \/\/\u63a5\u53e3\u7684\u63a5\u5165\u65b9\u5f0f\u4e3amacbased<\/p>\n

Switch(Config-Ethernet0\/0\/1)#dot1x port-control auto\u21b5 \/\/\u63a5\u53e3\u7684\u63a7\u5236\u65b9\u5f0f\u4e3aauto<\/p>\n

Switch(Config-Ethernet0\/0\/1)#exit<\/p>\n

\u4e03NTP\u914d\u7f6e<\/p>\n

\u4f8b\uff1a\u5ba2\u670d\u7aef<\/p>\n

Switch(config)#ntp enable \/\/\u5f00\u542fNTP\u529f\u80fd<\/p>\n

Switch(config)#ntp server 192.168.1.11 \/\/\u914d\u7f6e\u65f6\u95f4\u670d\u52a1\u5668\u5730\u5740<\/p>\n

Switch(config)#ntp server 192.168.2.11 \/\/\u914d\u7f6e\u65f6\u95f4\u670d\u52a1\u5668\u5730\u5740<\/p>\n

\u516b\u7aef\u53e3\u955c\u50cf\u8bbe\u7f6e<\/p>\n

1\u3001\u6307\u5b9a\u955c\u50cf\u6e90\u7aef\u53e3\uff1a<\/p>\n

Switch(Config)#monitor session\u3000 source interface e \u7aef\u53e3\u5217\u8868\u3000\uff5btx,rx,both\uff5d\u3000rx\u4e3a\u955c\u50cf\u6e90 \u7aef\u53e3\u63a5\u6536\u7684\u6d41\u91cf\uff1btx\u4e3a\u955c\u50cf\u4ece\u6e90\u7aef\u53e3\u53d1\u51fa\u7684\u6d41\u91cf\uff1bboth\u4e3a\u6e90\u7aef\u53e3\u5165\u548c\u51fa\u7684\u6d41\u91cf\u3002<\/p>\n

2\u3001\u6307\u5b9a\u955c\u50cf\u76ee\u7684\u7aef\u53e3\uff1b<\/p>\n

Switch(Config)#monitor session destination interface<\/p>\n

\u4f8b\uff1a<\/p>\n

S4600-28P-SI(config)#monitor session 1 source interface e1\/0\/1<\/p>\n

S4600-28P-SI(config)#monitor session 1 destination interface e1\/0\/3<\/p>\n

\u4e5dQos<\/p>\n

(\u4e00)\u8def\u7531\u5668\u7684Qos<\/p>\n

\u7f51\u7edc\u7ec4\u4ef6\u5904\u7406\u63a5\u6536\u901a\u4fe1\u91cf\u6ea2\u51fa\u7684\u4e00\u4e2a\u65b9\u6cd5\u662f\uff1a\u4f7f\u7528\u961f\u5217\u7b97\u6cd5\u5bf9\u901a\u4fe1\u6309\u7167\u4f18\u5148\u6b21\u5e8f\u6392\u5728\u8f93\u51fa\u94fe\u63a5\u4e0a\u3002\u4e00\u822c\u6709\uff1aFIFO\uff0cPQ\uff08Priority Queuing\uff09\uff0cCQ\uff08Custom Queuing\uff09\uff0cSFQ\uff08Fair Queuing\uff09\u4ee5\u53caWFQ\uff08Weighted Fair Queuing\uff09\u3002<\/p>\n

1.PQ\uff08Priority Queuing\uff09\u914d\u7f6e\u4efb\u52a1\u5e8f\u5217<\/p>\n

1)\u5b9a\u4e49\u7279\u5b9a\u7684\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff08\u5982\u679c\u8981\u7528\u5230\u5b83\u4eec\u7684\u8bdd\uff09<\/p>\n

2)\u521b\u5efa\u4f18\u5148\u7ea7\u5217\u8868<\/p>\n

priority-list protocol {high | medium | normal | low}<\/p>\n

\u6216\uff1apriority-list interface {high | medium | normal | low}<\/p>\n

*\u4efb\u4f55\u4e0d\u5339\u914d\u4f18\u5148\u7ea7\u961f\u5217\u4e2d\u4efb\u4f55\u4e00\u884c\u7684\u6d41\u91cf\u5c06\u88ab\u653e\u5165\u5230\u7f3a\u7701\u961f\u5217\u4e2d\u3002\u5bf9\u4e8e\u4f18\u5148\u7ea7\u961f\u5217\uff0c\u5982\u679c\u6ca1\u6709\u5b9a\u4e49\uff0c\u7f3a\u7701\u961f\u5217\u662fnormal\u3002\u4e0b\u9762\u7684\u547d\u4ee4\u7528\u4e8e\u5b89\u6392\u4e00\u4e2a\u7f3a\u7701\u961f\u5217\uff1a<\/p>\n

priority-list default {high | medium |normal |low}<\/p>\n

*\u4e3a\u4e86\u7ed9\u6bcf\u4e00\u4e2a\u4f18\u5148\u7ea7\u961f\u5217\u6307\u5b9a\u6240\u80fd\u591f\u5bb9\u7eb3\u7684\u6700\u5927\u6570\u636e\u5305\u4e2a\u6570\uff0c\u53ef\u4ee5\u5728\u5168\u5c40\u914d\u7f6e\u6a21\u5f0f\u4e0b\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\uff1a<\/p>\n

priority-list queue-limit [ ]<\/p>\n

3)\u628a\u4f18\u5148\u7ea7\u5217\u8868\u5e94\u7528\u5230\u63a5\u53e3\u4e0a<\/p>\n

priority-group<\/p>\n

4)\u914d\u7f6e\u63a5\u53e3\u4e0a\u7684\u9a71\u52a8\u961f\u5217\u957f\u5ea6 \uff08\u53ef\u9009\u9879\uff09<\/p>\n

serial queue \u53d6\u503c\u53ef\u4e3a2\u30014\u30018\u548c16<\/p>\n

\u914d\u7f6e\u793a\u8303\uff1a\u914d\u7f6e\u4e32\u53e31\u7684\u9a71\u52a8\u961f\u5217\u957f\u5ea6\u4e3a4\u3002<\/p>\n

Router(config)#interface serial 2\/0<\/p>\n

Router(config-serial2\/0)#serial queue 4<\/p>\n

5)\u9a8c\u8bc1\u961f\u5217\u8fc7\u7a0b\uff08\u53ef\u9009\u9879\uff09<\/p>\n

show queuing priority<\/p>\n

\u4f8b\uff1a<\/p>\n

Router(config)#queue-list 1 protocol ip 1 tcp 23 \u653e\u5165\u5230\u9ad8\u4f18\u5148\u7ea7\u961f\u5217<\/p>\n

Router(config)#priority-list 1 interface ethernet 0 high \/\/\u63a5\u53e30\u7684\u6d41\u91cf\u90fd\u88ab\u653e\u5165\u5230\u9ad8\u4f18\u5148\u7ea7<\/p>\n

Router(config)#priority-list 1 protocol ip middle \/\/IP\u6d41\u91cf\u88ab\u653e\u5165\u5230medium\u961f\u5217\u4e2d<\/p>\n

Router(config)#priority-list 1 protocol ipx middle \/\/IPX\u6d41\u91cf\u88ab\u653e\u5165\u5230medium\u961f\u5217\u4e2d<\/p>\n

Router(config)#priority-list 1 default low \/\/\u7f3a\u7701\u961f\u5217\u662fLOW<\/p>\n

Router(config)#priority-list 1 queue-limit 10 40 60 90 \/\/high\uff0cmiddle\uff0cnormal\uff0clow\u768410\uff0c40\uff0c60\uff0c90<\/p>\n

2.CQ\uff08Custom Queuing\uff09\u914d\u7f6e\u4efb\u52a1\u5e8f\u5217<\/p>\n

1)\u5b9a\u4e49\u7279\u5b9a\u7684\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff08\u5982\u679c\u8981\u7528\u5230\u5b83\u4eec\u7684\u8bdd\uff09<\/p>\n

2)\u521b\u5efa\u81ea\u5b9a\u4e49\u961f\u5217<\/p>\n

queue-list protocol < keyword-value><\/p>\n

*\u4f7f\u7528\u5982\u4e0b\u547d\u4ee4\uff0c\u53ef\u4ee5\u6307\u5b9a\u4efb\u4f55\u7ecf\u8fc7\u4e00\u7279\u5b9a\u63a5\u53e3\u8fdb\u5165\u8def\u7531\u5668\u7684\u6570\u636e\u6d41\u5230\u4e00\u7279\u5b9a\u961f\u5217\uff1a<\/p>\n

queue-list interface<\/p>\n

3)\u6307\u5b9a\u81ea\u5b9a\u4e49\u961f\u5217\u7684\u6700\u5927\u5bb9\u91cf<\/p>\n

queue-list queue limit<\/p>\n

\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u80fd\u6539\u53d8\u5b57\u8282\u603b\u6570\u9608\u503c\uff1a<\/p>\n

queue-list queue byte-count<\/p>\n

4)\u628a\u81ea\u5b9a\u4e49\u961f\u5217\u5e94\u7528\u5230\u63a5\u53e3\u4e0a<\/p>\n

custom-queue-list<\/p>\n

5)\u9a8c\u8bc1\u961f\u5217\u8fc7\u7a0b\uff08\u53ef\u9009\u9879\uff09<\/p>\n

show queuing custom<\/p>\n

\u4f8b\uff1a<\/p>\n

Router(config)#queue-list 1 interface ethernet 0 6 \/\/\u63a5\u53e30\u7684\u6570\u636e\u6d41\u653e\u5165\u5230\u961f\u52176\u4e2d<\/p>\n

Router(config)#queue-list 1 protocol ip 1 tcp 21<\/p>\n

Router(config)#queue-list 1 protocol ip 2 \/\/IP\u6d41\u91cf\u5747\u653e\u5165\u5230\u961f\u52172\u4e2d<\/p>\n

Router(config)#queue-list 1 protocol ipx 3 IPX\u6d41\u91cf\u653e\u5165\u5230\u961f\u52173\u4e2d<\/p>\n

Router(config)#queue-list 1 default 5 \/\/\u4e0d\u5339\u914d\u4ee5\u4e0a\u89c4\u5219\u7684\u6d41\u91cf\u653e\u5230\u961f\u52175\u4e2d<\/p>\n

Router(config)#queue-list 1 queue 1 limit 60 \/\/\u961f\u52171\u8981\u5904\u740660\u4e2a\u8bb0\u5f55\uff08\u6570\u636e\u5305\uff09<\/p>\n

Router(config)#queue-list 1 queue 1 byte-count 4500 \/\/\u961f\u52171\u8981\u5904\u74064500\u4e2a\u5b57\u8282<\/p>\n

(\u4e8c)\u4ea4\u6362\u673aQoS<\/p>\n

1\uff0e \u542f\u52a8QoS \u529f\u80fd<\/p>\n

mls qos<\/p>\n

2\uff0e \u914d\u7f6e\u5206\u7c7b\u8868\uff08classmap\uff09<\/p>\n

\u5efa\u7acb\u4e00\u4e2a\u5206\u7c7b\u89c4\u5219\uff0c\u53ef\u4ee5\u6309\u7167ACL\uff0cVLAN ID\uff0cIP Precedence\uff0cDSCP\uff08\u5dee\u5206\u670d\u52a1\u4ee3\u7801\u70b9\uff09\u6765\u5206\u7c7b\u3002<\/p>\n

\u5efa\u7acb\u4e00\u4e2aclass-map\uff08\u5206\u7c7b\u8868\uff09\uff0c\u5e76\u8fdb\u5165class-map \u6a21\u5f0f<\/p>\n

class-map<\/p>\n

\u8bbe\u7f6e\u5206\u7c7b\u8868\u4e2d\u7684\u5339\u914d\u6807\u51c6\uff1b\u672c\u547d\u4ee4\u7684no\u64cd\u4f5c\u4e3a\u5220\u9664\u6307\u5b9a\u7684\u5339\u914d\u6807\u51c6\u3002<\/p>\n

match {access-group | ip dscp | ip precedence| vlan }<\/p>\n

3\uff0e \u914d\u7f6e\u7b56\u7565\u8868\uff08policymap\uff09<\/p>\n

\u5efa\u7acb\u4e00\u4e2a\u7b56\u7565\u8868\uff0c\u53ef\u4ee5\u5bf9\u76f8\u5e94\u7684\u5206\u7c7b\u89c4\u5219\u8fdb\u884c\u5e26\u5bbd\u9650\u5236\uff0c\u4f18\u5148\u7ea7\u964d\u4f4e\u7b49\u64cd\u4f5c\u3002<\/p>\n

(1)\u5efa\u7acb\u4e00\u4e2apolicy-map\uff08\u7b56\u7565\u8868\uff09\uff0c\u5e76\u8fdb\u5165policy-map\uff08\u7b56\u7565\u8868\uff09\u6a21\u5f0f\uff1b<\/p>\n

policy-map<\/p>\n

(2)\u5efa\u7acb\u4e00\u4e2a class\uff08\u7b56\u7565\u5206\u7c7b\u8868\uff09\uff0c\u5e76\u8fdb\u5165<\/p>\n

class<\/p>\n

(3)\u4e3a\u5206\u7c7b\u540e\u7684\u6d41\u91cf\u5206\u914d\u4e00\u4e2a\u65b0\u7684DSCP\u548cIP Precedence \u503c\uff1b<\/p>\n

set {ip dscp | ip precedence}<\/p>\n

(4)\u4e3a\u5206\u7c7b\u540e\u7684\u6d41\u91cf\u914d\u7f6e\u4e00\u4e2a\u7b56\u7565\uff1b<\/p>\n

police [exceed-action {drop |policed-dscp-transmit}]<\/p>\n

(5)\u5b9a\u4e49\u4e00\u4e2a\u96c6\u5408\u7b56\u7565\uff0c\u8fd9\u4e2a\u7b56\u7565\u53ef\u4ee5\u5728\u540c\u4e00\u4e2a\u7b56\u7565\u8868\u5185\u90e8\u88ab\u591a\u4e2a\u7b56\u7565\u5206\u7c7b\u8868\u4f7f\u7528\uff1b<\/p>\n

mls qos aggregate-policer exceed-action {drop|policed-dscp-transmit}<\/p>\n

(6)\u4e3a\u5206\u7c7b\u540e\u7684\u6d41\u91cf\u5e94\u7528\u4e00\u4e2a\u96c6\u5408\u7b56\u7565\uff1b<\/p>\n

police aggregate<\/p>\n

4\uff0e \u5c06QoS \u5e94\u7528\u5230\u7aef\u53e3<\/p>\n

\u914d\u7f6e\u7aef\u53e3\u7684\u4fe1\u4efb\u6a21\u5f0f\uff0c\u6216\u8005\u7ed1\u5b9a\u7b56\u7565\u3002\u7b56\u7565\u53ea\u6709\u7ed1\u5b9a\u5230\u5177\u4f53\u7684\u7aef\u53e3\uff0c\u624d\u5728\u6b64\u7aef\u53e3\u751f\u6548\u3002<\/p>\n

(1)\u914d\u7f6e\u4ea4\u6362\u673a\u7aef\u53e3\u4fe1\u4efb\u72b6\u6001<\/p>\n

mls qos trust [cos [pass-through dscp]|dscp[pass-through cos]|ip-precedence [pass-throughcos]|port priority ]<\/p>\n

(2)\u914d\u7f6e\u4ea4\u6362\u673a\u7aef\u53e3\u7684\u7f3a\u7701CoS\u503c\uff1b<\/p>\n

mls qos cos { }<\/p>\n

(3)\u5728\u7aef\u53e3\u4e0a\u5e94\u7528\u4e00\u4e2a\u7b56\u7565\u8868<\/p>\n

service-policy {input | output}<\/p>\n

(4)\u5728\u7aef\u53e3\u4e0a\u5e94\u7528 DSCP \u8f6c\u6362\u6620\u5c04\uff0c\u672c\u547d\u4ee4\u7684no \u64cd\u4f5c\u4e3a\u6062\u590dDSCP \u8f6c\u6362\u6620\u5c04\u7684\u7f3a\u7701\u503c\u3002<\/p>\n

mls qos dscp-mutation<\/p>\n

5\uff0e \u914d\u7f6e\u51fa\u961f\u961f\u5217\u5de5\u4f5c\u65b9\u5f0f\u548c\u6743\u91cd<\/p>\n

\u5c06\u51fa\u961f\u5de5\u4f5c\u65b9\u5f0f\u914d\u7f6e\u4e3aPQ \u65b9\u5f0f\u6216\u8005WRR \u65b9\u5f0f\uff0c\u8bbe\u7f6e4 \u4e2a\u51fa\u53e3\u961f\u5217\u5e26\u5bbd\u7684\u6bd4\u4f8b\uff0c\u4ee5\u53ca<\/p>\n

\u5185\u90e8\u4f18\u5148\u7ea7\u5230\u51fa\u53e3\u961f\u5217\u7684\u6620\u5c04\u5173\u7cfb\uff0c\u90fd\u662f\u5168\u5c40\u547d\u4ee4\uff0c\u5bf9\u6240\u6709\u7aef\u53e3\u751f\u6548\u3002<\/p>\n

(1)\u8bbe\u7f6e\u4ea4\u6362\u673a\u6240\u6709\u7aef\u53e3\u51fa\u961f\u5217\u7684WRR \u6743\u91cd<\/p>\n

wrr-queue bandwidth<\/p>\n

(2)\u914d\u7f6e\u961f\u5217\u51fa\u961f\u5de5\u4f5c\u65b9\u5f0f\uff0c\u5c06\u961f\u5217\u914d\u7f6e\u6210pq\u51fa\u961f\u5de5\u4f5c\u65b9\u5f0f<\/p>\n

priority-queue out<\/p>\n

(3)\u8bbe\u7f6eCoS \u503c\u5bf9\u5e94\u4ea4\u6362\u673a\u7aef\u53e3\u51fa\u961f\u5217\u7684\u6620\u5c04<\/p>\n

wrr-queue cos-map <\/p>\n

6\uff0e \u914d\u7f6eQoS \u6620\u5c04\u5173\u7cfb<\/p>\n

\u914d\u7f6ecos \u5230dscp\uff0cdscp \u5230cos\uff0cdscp mutation\uff0cip precedent \u5230dscp\uff0cpoliced-dscp<\/p>\n

\u7684\u6620\u5c04\u5173\u7cfb\u3002<\/p>\n

\uf06c\u8bbe\u7f6eCoS-to-DSCP \u6620\u5c04\uff0cDSCP-to-CoS \u6620\u5c04\uff0cDSCP-to-DSCP-mutation\u6620\u5c04\uff0cIP-precedence-to-DSCP\u6620\u5c04\u548cpoliced-DSCP \u6620\u5c04\uff1b<\/p>\n

mls qos map {cos-dscp | dscp-cos to | dscp-mutation to |ip-prec-dscp | policed-dscp to }<\/p>\n

7.\u663e\u793aQoS \u7684\u96c6\u5408\u7b56\u7565\u914d\u7f6e\u4fe1\u606f\u3002<\/p>\n

\u547d\u4ee4\uff1ashow mls qos aggregate-policer []<\/p>\n

Switch #show mls qos aggregate-policer policer1<\/p>\n

8.\u663e\u793aQoS \u7684\u5168\u5c40\u914d\u7f6e\u4fe1\u606f\u3002<\/p>\n

\u547d\u4ee4\uff1ashow mls-qos<\/p>\n

\u4f8b\uff1a\u5728SWB\u4e0a\u8bbe\u7f6ePCA\u7684\u6d41\u91cf\u4e0d\u80fd\u8d85\u8fc75M<\/p>\n

\u7b2c\u56db\u90e8\u5206 DCFW-1800\u7cfb\u5217\u9632\u706b\u5899\u914d\u7f6e<\/p>\n

\u7ba1\u7406\u5458\u9996\u6b21\u767b\u5f55<\/p>\n

\u9ed8\u8ba4\u7ba1\u7406\u5458\u5e10\u53f7\u4e3a admin\uff0c\u5bc6\u7801\u4e3a admin\u3002<\/p>\n

\u9ed8\u8ba4\u7ba1\u7406\u53e3\uff1a\u9632\u706b\u5899\u7b2c\u4e00\u4e2a\u7f51\u53e3 E1 \u53e3\uff0c \uff08\u6ca1\u6709 E1 \u53e3\u7684\uff0c\u4e3a GE1 \u6216 S1G1 \u53e3\uff0c \u4ee5<\/p>\n

\u4e0b\u7528 E1 \u4ee3\u66ff\uff09\u53ef\u767b\u5f55\u8d85\u7ea7\u7ec8\u7aef\u3002<\/p>\n

\u53ef\u7ba1\u7406 IP\uff1aE1 \u53e3\u4e0a\u7684\u9ed8\u8ba4 IP \u5730\u5740\u4e3a 192.168.1.1\/255.255.255.0\u3002<\/p>\n

\u5e94\u5c06\u7ba1\u7406\u4e3b\u673aIP\u4e0eE1\u53f7\u8bbe\u5728\u540c\u4e00\u7f51\u6bb5\u3002<\/p>\n

\u7b2c\u4e94\u90e8\u5206 \u65e0\u7ebf\u914d\u7f6e<\/p>\n

\u4e09\u5c42\u53d1\u73b0\uff1a<\/p>\n

\u4e00\u3001AC\u4e0a\u7684\u914d\u7f6e<\/p>\n

1\u3001\u57fa\u7840\u914d\u7f6e<\/p>\n

1\uff09\u65b0\u5efaVLAN 10\u3001VLAN 20\uff0cVLAN 10\u7528\u4e8eAP\uff0cVLAN 20\u7528\u4e8e\u65e0\u7ebf\u7528\u6237;\u8bbe\u7f6eVLAN 10\u5730\u5740\uff1a192.168.10.253\u3002<\/p>\n

2\uff09AC\u4e0e\u6838\u5fc3\u4ea4\u6362\u673a\u8fde\u63a5\u7684\u7aef\u53e3\u6539\u4e3aTRUNK\u6a21\u5f0f;<\/p>\n

3\uff09Ip route 0.0.0.0\/0 192.168.10.254<\/p>\n

2\u3001AC\u4e0a\u65b0\u5efa\u4e00\u4e2aDHCP\u5730\u5740\u6c60\uff0c\u8be5\u5730\u5740\u6c60\u7528\u4e8e\u5206\u914dAP\u5730\u5740\u3002<\/p>\n

DCWS-6028(config)#service dhcp<\/p>\n

DCWS-6028(config)#ip dhcp excluded-address 192.168.20.254<\/p>\n

DCWS-6028(config)#ip dhcp pool ap<\/p>\n

DCWS-6028(dhcp-ap-config)#network-address 192.168.10.0 255.255.255.0<\/p>\n

DCWS-6028(dhcp-ap-config)#lease 0 1 0<\/p>\n

DCWS-6028(dhcp-ap-config)#default-router 192.168.10.253<\/p>\n

DCWS-6028(dhcp-ap-config)#dns-server 202.106.0.20 8.8.8.8<\/p>\n

DCWS-6028(dhcp-ap-config)#option 43 hex 010C0A8010A \/\/\u914d\u7f6e option43\u643a\u5e26AC\u5730\u5740\uff0chex 01040A0A0A0A\u4e3a\u56fa\u5b9a\u683c\u5f0f\uff1a0104\u56fa\u5b9a\u5b57\u7b26\uff0cC0A8010A\u4ee3\u8868AC\u7684IP\u5730\u5740\uff0c16\u8fdb\u5236<\/p>\n

DCWS-6028(dhcp-ap-config)#option 60 ascii udhcp 1.18.2 \/\/\u914d\u7f6eoption60\u5bf9\u5e94\u7248\u672c\u5c5e\u6027\u53f7<\/p>\n

3\u3001DCWS-6028\uff08config\uff09#wireless<\/p>\n

DCWS-6028(config-wireless)#enable \/\/\u6253\u5f00\u65e0\u7ebf\u529f\u80fd<\/p>\n

DCWS-6028(config-wireless)#discovery vlan-list 10 \/\/\u6307\u5b9aVLAN\u53d1\u73b0\u5217\u8868<\/p>\n

4\u3001DCWS-6028(config-wireless)#no auto-ip-assign \/\/\u5173\u95ed\u65e0\u7ebfIP\u5730\u5740\u7684\u81ea\u52a8\u9009\u53d6\u529f\u80fd<\/p>\n

DCWS-6028(config-wireless)#static-ip 192.168.10.253 \/\/\u6307\u5b9a\u9759\u6001\u65e0\u7ebfIP<\/p>\n

DCWS-6028(config-wireless)#network 1\/\/\u8fdb\u5165network1<\/p>\n

DCWS-6028(config-network)#vap0 \/\/ \u6bcf\u4e2anetwork\u552f\u4e00\u5bf9\u5e94\u4e00\u4e2aVAP\uff0c\u8fd9\u91ccnetwork1\u5bf9\u5e94VAP0<\/p>\n

DCWS-6028(config-network)#ssid dcn_wlan \/\/\u914d\u7f6e\u65e0\u7ebfID\u540d\u79f0\u4e3adcn_wlan<\/p>\n

DCWS-6028(config-network)#hide ssid \/\/\u9690\u85cfID<\/p>\n

DCWS-6028(config-network)#vlan 20 \/\/\u8be5 vlan \u4e3a\u7528\u6237vlan<\/p>\n

DCWS-6028#wireless ap lan port configuration apply profile 1 \/\/\u5899\u9762AP\u9762\u677fLAN\u53e3vlan\u914d\u7f6e\u4e0b\u53d1<\/p>\n

DCWS-6028(config-wireless)#ap database 00-03-0f-19-71-e0 \/\/\u6dfb\u52a0AP\u7684MAC\u5730\u5740<\/p>\n

DCWS-6028(config-ap)#profile 1 \/\/AP \u52a0\u5165profile<\/p>\n

DCWS-6028(config-ap)#radio 1 channel 1 \/\/\u56fa\u5b9a\u4fe1\u9053<\/p>\n

DCWS-6028(config-wireless)#ap authentication none \/\/AP \u4e0a\u7ebf\u8ba4\u8bc1\u4e3a\u4e0d\u8ba4\u8bc1<\/p>\n

DCWS-6028(config-wireless)#ap authentication mac \/\/\u6839\u636eAP\u7684MAC\u5730\u5740\u8ba4\u8bc1<\/p>\n

DCWS-6028(config-wireless)#ap profile 1 \u8fdb\u5165AP \u914d\u7f6e\u6587\u4ef6<\/p>\n

DCWS-6028(config-ap-profile)#hwtype 29 \/\/AP\u7684\u786c\u4ef6\u7c7b\u578b\uff0c\u7528SHOW vendor\u547d\u4ee4\u53ef\u67e5\u770bAP\u7c7b\u578b<\/p>\n

DCWS-6028(config-ap-profile)#lan port vlan 20 \/\/\u8be5vlan\u4e3a\u7528\u6237vlan<\/p>\n

DCWS-6028(config-ap-profile)#radio 1<\/p>\n

5\u3001\u914d\u7f6enative vlan<\/p>\n

DCWS-6028(config)#interface Ethernet 1\/0\/1-2 \/\/AP\u4e0ePOE(SW3)\u6240\u8fde\u63a5\u7684\u7aef\u53e3<\/p>\n

DCWS-6028(config-if-port-range)#switchport mode trunk<\/p>\n

DCWS-6028(config-if-port-range)#switchport trunk native vlan 10 \/\/AP\u6240\u5728vlan\u4e0b\u53d1\u914d\u7f6e<\/p>\n

DCWS-6028#wireless ap profile apply 1 \/\/AP \u6240\u5728 profile<\/p>\n

DCWS-6028#wireless ap reset \/\/\u91cd\u542fAP<\/p>\n

6\u3001WEP\u52a0\u5bc6\u65b9\u5f0f<\/p>\n

DCWS-6028(config-wireless)#network 1\/\/\u8fdb\u5165\u7f51\u7edc1<\/p>\n

DCWS-6028(config-network)#security mode static-wep \/\/\u914d\u7f6e\u5b89\u5168\u7b56\u7565\u4e3a\u9759\u6001WEP<\/p>\n

DCWS-6028(config-network)#wep authentication share-key \/\/\u914d\u7f6eWEP\u4e3a\u5171\u4eab\u5bc6\u94a5\u8ba4\u8bc1\u65b9\u5f0f<\/p>\n

DCWS-6028(config-netwrok)#wep key type ascii \/\/wep\u52a0\u5bc6\u7c7b\u578b\u4e3aascii<\/p>\n

DCWS-6028(config-network)#wep key length 64\/\/wep\u5bc6\u94a5\u957f\u5ea664\u4f4d<\/p>\n

DCWS-6028(config-network)#wep key 1 12345 \/\/\u5bc6\u94a512345<\/p>\n

DCWS-6028(config-network)#wep tx-key 1 \/\/\u914d\u7f6e\u52a0\u5bc6\u4f7f\u7528\u54ea\u4e00\u4e2a share-key<\/p>\n

7\u3001\u53ea\u5141\u8bb8\u5df2\u6dfb\u52a0MAC\u7684\u7ec8\u7aef\u8fde\u63a5AP<\/p>\n

DCWS-6028(config-wireless)#mac-authentication-mode white-list<\/p>\n

DCWS-6028(config-wireless)#known-client 00-11-11-11-11-11 action global-action<\/p>\n

DCWS-6028(config-wireless)#network 1<\/p>\n

DCWS-6028(config-network)#mac authentication local<\/p>\n

\u963b\u6b62\u5df2\u6dfb\u52a0MAC\u7684\u7ec8\u7aef\u8fde\u63a5AP<\/p>\n

DCWS-6028(config-wireless)#mac-authentication-mode black-list<\/p>\n

DCWS-6028(config-wireless)#known-client 00-22-22-22-22-22 action global-action<\/p>\n

DCWS-6028(config-wireless)#network 1<\/p>\n

DCWS-6028(config-network)#mac authentication local<\/p>\n

\u914d\u7f6e\u5b8c\u6210\u540e\u9700\u4e0b\u53d1AP\u751f\u6548<\/p>\n

DCWS-6028#wireless ap profile apply 1<\/p>\n

\u4e8c\u3001\u6838\u5fc3\u4ea4\u6362\u673a\uff08SW1\uff09\u914d\u7f6e<\/p>\n

1\u3001\u57fa\u7840\u914d\u7f6e<\/p>\n

1\uff09\u3001\u6838\u5fc3\u4ea4\u6362\u673a\u4e0eAC\u8fde\u63a5\u7684\u7aef\u53e3e1\/0\/1\uff0c\u4e0ePOE\u8fde\u63a5\u7684\u7aef\u53e3\u4e3ae1\/0\/1\uff0ce1\/0\/1\u548ce1\/0\/1\u7aef\u53e3\u6539\u4e3aTRUNK\u6a21\u5f0f<\/p>\n

2\uff09\u3001\u65b0\u5efaVLAN 10\u548cVLAN 20\uff0c\u5e76\u8bbe\u7f6eIP\u5730\u5740\u5206\u522b\u4e3a192.168.10.254\u548c192.168.20.254<\/p>\n

2\u3001\u6838\u5fc3\u4ea4\u6362\u673aSW1\u4e0a\u65b0\u5efa\u4e00\u4e2aDHCP\u5730\u5740\u6c60\uff0c\u8be5\u5730\u5740\u6c60\u7528\u4e8e\u5206\u914d\u65e0\u7ebf\u7528\u6237\u5730\u5740<\/p>\n

DCWS-6028(config)#ip dhcp pool sta<\/p>\n

DCWS-6028(dhcp-ap-config)#network-address 192.168.20.0 255.255.255.0<\/p>\n

DCWS-6028(dhcp-ap-config)#lease 0 0 20<\/p>\n

DCWS-6028(dhcp-ap-config)#default-router 192.168.20.254<\/p>\n

DCWS-6028(dhcp-ap-config)#dns-server 202.106.0.20 8.8.8.8<\/p>\n

DCWS-6028(config)#service dhcp<\/p>\n

\u4e09\u3001POE\uff08SW3\uff09\u914d\u7f6e<\/p>\n

1\u3001\u65b0\u5efaVLAN 10\u548cVLAN 20<\/p>\n

2\u3001POE\u4e0e\u6838\u5fc3\u4ea4\u6362\u673a\u8fde\u63a5\u7684\u7aef\u53e3e1\/0\/24\uff0c\u4e0eAP\u8fde\u63a5\u7684\u7aef\u53e3\u4e3ae1\/0\/7\uff0ce1\/0\/24\u548ce1\/0\/7\u7aef\u53e3\u6539\u4e3aTRUNK<\/p>\n

3\u3001\u8bbe\u7f6e\u4e0eAP\u8fde\u63a5\u7aef\u53e3<\/p>\n

DCWS-6028(config)#interface Ethernet 1\/0\/7<\/p>\n

DCWS-6028(config-if-port)#switchport mode trunk<\/p>\n

DCWS-6028(config-if-port)# switchport trunk native vlan 10 \/\/ \u8bbe\u7f6e\u9ed8\u8ba4VLAN<\/p>\n

[https:\/\/wenku.baidu.com\/view\/a5e392eaa900b52acfc789eb172ded630b1c980b.html](https:\/\/wenku.baidu.com\/view\/a5e392eaa900b52acfc789eb172ded630b1c980b.html)<\/p>\n

[
\n](https:\/\/blog.csdn.net\/ldgjzjmzknbn\/article\/details\/108689419)<\/p>\n

> \u66f4\u65b0: 2022-06-04 08:49:50
\n> \u539f\u6587: <\/p>\n","protected":false},"excerpt":{"rendered":"

\u795e\u5dde\u6570\u7801\u914d\u7f6e\u547d\u4ee4\u6c47\u603b \u4e00\u3001\u4ea4\u6362\u673a\u914d\u7f6e 1.\u6a21\u5f0f\u8fdb\u5165 Switch> Switch>en Switch#config Switch(Config)#interface ethernet 0\/2 2.\u914d\u7f6e\u673a\u5668\u540d\u79f0 Switch(Config)#hostname <\u4e3b\u673a\u540d> 3.\u914d\u7f6e\u4ea4\u6362\u673aIP\u5730\u5740 Switch(Config)#interface vlan 1 Switch(Co […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,65,1],"tags":[86],"class_list":["post-529","post","type-post","status-publish","format-standard","hentry","category-interface","category-shujutongxinjichu","category-anything","tag-shutongpeizhimingling"],"_links":{"self":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts\/529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/comments?post=529"}],"version-history":[{"count":0,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts\/529\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/media?parent=529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/categories?post=529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/tags?post=529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}