1、双机热备核心交换机2实例配置enconfig thostname C4506_2!enable secret ciscovtp domain vtp mode transparentip subnet-zerono ip domain-lookup ip dhcp excluded-address 192.168.10.2 192.168.10.20ip dhcp pool WirelessDHCP network 192.168.9.0 255.255.255.0 default-router 192.168.9.1 dns-server 192.168.1.33 192.168.1.36
2、lease 7!ip dhcp pool TestDHCP network 192.168.6.0 255.255.255.0 default-router 192.168.6.1 dns-server 192.168.1.33 192.168.1.36!ip dhcp pool OfficeDHCP network 192.168.10.0 255.255.255.0 default-router 192.168.10.1 netbios-name-server 192.168.1.33 dns-server 192.168.1.33 192.168.1.36 lease 7!ip dhcp
3、 pool SCC3-DHCP network 192.168.7.0 255.255.255.0 default-router 192.168.7.1 dns-server 192.168.1.33 192.168.1.36!ip dhcp pool SCC4-DHCP network 192.168.8.0 255.255.255.0 default-router 192.168.8.1 dns-server 192.168.1.33 192.168.1.36!ip dhcp pool Access-Internet network 192.168.12.0 255.255.255.0 d
4、efault-router 192.168.12.1dns-server 192.168.1.33 192.168.1.36 netbios-name-server 192.168.1.33 lease 7!ip dhcp pool restricted-internet network 192.168.13.0 255.255.255.0 default-router 192.168.13.1 dns-server 192.168.1.36!ip dhcp pool MIS-DHCP network 192.168.19.0 255.255.255.0 default-router 192.
5、168.19.1 dns-server 192.168.1.33 netbios-name-server 192.168.1.33!ip dhcp pool CustDHCP network 192.168.20.0 255.255.255.0 default-router 192.168.20.1 dns-server 192.168.1.33 192.168.1.36 netbios-name-server 192.168.1.33!ip dhcp pool Access-BATAM network 192.168.15.0 255.255.255.0 default-router 192
6、.168.15.1 netbios-name-server 192.168.1.33 dns-server 192.168.1.33 192.168.1.36!ip dhcp pool Office-DHCP dns-server 192.168.1.33 192.168.1.36!ip arp inspection validate dst-mac ip!no file verify autospanning-tree mode pvstspanning-tree extend system-idpower redundancy-mode redundantspanning-tree mod
7、e pvst vlan 110 -200 root pr 设置生成树协议，实现负载均衡和备份spanning-tree mode pvst vlan 1 -100 sec root pr 设置一厂vlan为辅根桥interface Vlan1 description Office-VLAN ip address 192.168.10.1 255.255.255.0 ip access-group OfficeIN in!interface Vlan10 description Servers-VLAN ip address 192.168.1.1 255.255.255.0!interface
8、 vlan 101 descerption Servers-vlan_2 ip address 192.16811.1 255.255.255.0!interface Vlan20 description Wafermap-VLAN ip address 192.168.2.1 255.255.255.0 ip access-group Wafermap in!interface Vlan30 description Stripmap-VLAN ip address 192.168.50.254 255.255.255.0 ip access-group Stripmap out!interf
9、ace Vlan40 description Knet-VLAN ip address 192.168.99.1 255.255.255.0 ip access-group Knet in!interface Vlan41 description ESEC WB ip address 192.168.98.1 255.255.255.0 ip access-group ESEC in!interface Vlan42 description For KNS WB ip address 192.168.30.1 255.255.255.0 ip access-group KNS in!inter
10、face Vlan43 ip address 192.168.23.1 255.255.255.0 ip access-group ESEC1 in!interface Vlan50 description Testcim-VLAN ip address 192.168.5.1 255.255.255.0 ip access-group Testcim in!interface Vlan51 description TEST-Handler Vlan ip address 192.168.25.1 255.255.255.0 ip access-group TEST-Handler in!in
11、terface Vlan60 description Test-VLAN ip address 192.168.6.1 255.255.255.0 ip access-group Test in!interface Vlan70 description SCC3-VLAN ip address 192.168.7.1 255.255.255.0 ip access-group SCC3 in!interface Vlan80 description SCC4-VLAN ip address 192.168.8.1 255.255.255.0 ip access-group SCC4 in!in
12、terface Vlan90 description Wireless-VLAN ip address 192.168.9.1 255.255.255.0!interface Vlan100 ip address 192.168.100.1 255.255.255.0 ip access-group KNS-HOST in!interface Vlan110 description Access-Internet ip address 192.168.12.1 255.255.255.0!interface Vlan120 ip address 192.168.13.1 255.255.255
13、.0!interface Vlan130 description Cust-VLAN ip address 192.168.20.1 255.255.255.0 ip access-group Cust in!interface Vlan150 description Access-BATAM ip address 192.168.15.1 255.255.255.0!interface Vlan160 description Bumping-Vlan ip address 192.168.16.1 255.255.255.0 ip access-group Bumping in!interf
14、ace Vlan180 description MEMS-VLAN ip address 192.168.80.1 255.255.255.0 ip access-group MEMS in!interface Vlan190 description MIS Switch Manangement Vlan ip address 192.168.19.1 255.255.255.0 ip access-group MIS-Switch in!interface Vlan1500 no ip address shutdown!ip default-gateway 192.168.11.3ip ro
15、ute 0.0.0.0 0.0.0.0 192.168.11.3ip route 0.0.0.0 0.0.0.0 192.168.1.3 10 /浮动静态路由，当192.168.11.3这条线路瘫痪，自动切换到192.168.1.3上ip route 192.168.11.0 255.255.255.0 192.168.11.3ip router 192.168.11.0 255.255.255.0 192.168.1.3 10 /浮动静态路由，当192.168.11.3这条线路瘫痪，自动切换到192.168.1.3上ip http server!ip access-list extended
16、 Access-BATAM permit igmp any any permit icmp any any permit ip any 192.168.1.0 0.0.0.255 permit ip any 192.168.2.0 0.0.0.255 permit ip any 192.168.3.0 0.0.0.255 permit ip any 192.168.4.0 0.0.0.255 permit ip any 192.168.5.0 0.0.0.255 permit ip any 192.168.6.0 0.0.0.255 permit ip any 192.168.7.0 0.0.
17、0.255 permit ip any 192.168.9.0 0.0.0.255 permit ip any 192.168.10.0 0.0.0.255 permit ip any 192.168.11.0 0.0.0.255 permit ip any 192.168.12.0 0.0.0.255 permit ip any 192.168.19.0 0.0.0.255 permit ip any 192.168.13.0 0.0.0.255 permit udp any 192.168.1.0 0.0.0.255 permit udp any 192.168.2.0 0.0.0.255
18、 permit udp any 192.168.3.0 0.0.0.255 permit udp any 192.168.4.0 0.0.0.255 permit udp any 192.168.5.0 0.0.0.255 permit udp any 192.168.6.0 0.0.0.255 permit udp any 192.168.7.0 0.0.0.255 permit udp any 192.168.8.0 0.0.0.255 permit udp any 192.168.9.0 0.0.0.255 permit udp any 192.168.10.0 0.0.0.255 pe
19、rmit udp any 192.168.11.0 0.0.0.255 permit udp any 192.168.12.0 0.0.0.255 permit udp any 192.168.13.0 0.0.0.255 permit udp any 192.168.19.0 0.0.0.255 permit ip any host 222.209.223.155 permit ip any host 222.209.208.99 permit udp any host 222.209.223.155 permit udp any host 222.209.208.99 permit ip
20、any host 222.209.223.199 permit udp any host 222.209.223.199 permit ip any 192.168.15.0 0.0.0.255 permit udp any 192.168.15.0 0.0.0.255 permit ip any 192.168.8.0 0.0.0.255ip access-list extended Bumping permit igmp any any permit ip any 192.168.1.0 0.0.0.255permit ip any 192.168.11.0 0.0.0.255ip acc
21、ess-list extended Cust permit igmp any any permit icmp any any permit ip any 192.168.20.0 0.0.0.255 permit ip host 192.168.1.10 any permit ip any host 192.168.1.10 deny ip any 192.168.0.0 0.0.255.255 permit ip host 192.168.20.5 any permit ip any host 192.168.20.5 permit ip host 192.168.20.6 any perm
22、it ip any host 192.168.20.6 permit ip host 192.168.1.33 any permit ip any host 192.168.1.33 permit ip host 192.168.20.7 any permit udp any 192.168.20.0 0.0.0.255 permit udp 192.168.20.0 0.0.0.255 any permit ip 192.168.20.0 0.0.0.255 anyip access-list extended ESEC permit igmp any any permit ip any 1
23、92.168.1.0 0.0.0.255permit ip any 192.168.11.0 0.0.0.255ip access-list extended ESEC1 permit igmp any any permit ip any 192.168.1.0 0.0.0.255permit ip any 192.168.11.0 0.0.0.255ip access-list extended KNS permit igmp any any permit ip any 192.168.1.0 0.0.0.255permit ip any 192.168.11.0 0.0.0.255ip a
24、ccess-list extended KNS-HOST permit igmp any any permit ip any host 192.168.12.71 permit ip any 192.168.1.0 0.0.0.255permit ip any 192.168.11.0 0.0.0.255 permit ip any host 192.168.12.77 permit ip any host 192.168.13.78ip access-list extended Knet permit ip any 192.168.1.0 0.0.0.255permit ip any 192
25、.168.11.0 0.0.0.255 permit ip any host 222.209.223.155 permit icmp any any permit udp any anyip access-list extended MEMS permit igmp any any permit udp any any permit ip any 192.168.1.0 0.0.0.255permit ip any 192.168.11.0 0.0.0.255 permit udp any 192.168.1.0 0.0.0.255permit udp any 192.168.11.0 0.0
26、.0.255permit udp any host 222.209.208.99 permit ip any 192.168.80.0 0.0.0.255 permit udp any 192.168.80.0 0.0.0.255 permit ip any host 222.209.208.99 permit icmp any any permit ip any host 192.168.12.71ip access-list extended MIS permit igmp any any permit icmp any any permit ip any 192.168.1.0 0.0.
27、0.255 permit udp any any eq bootps permit ip any 192.168.10.0 0.0.0.255ip access-list extended MIS-Switch permit igmp any any permit ip any 192.168.1.0 0.0.0.255 permit ip any 192.168.11.0 0.0.0.255permit ip any 192.168.12.0 0.0.0.255permit ip any 192.168.13.0 0.0.0.255ip access-list extended Office
28、 permit ip any 192.168.1.0 0.0.0.255 permit ip any 192.168.2.0 0.0.0.255 permit ip any 192.168.3.0 0.0.0.255 permit ip any 192.168.4.0 0.0.0.255 permit ip any 192.168.5.0 0.0.0.255 permit ip any 192.168.6.0 0.0.0.255 permit ip any 192.168.7.0 0.0.0.255 permit ip any 192.168.9.0 0.0.0.255 permit ip a
29、ny 192.168.10.0 0.0.0.255 permit ip any 192.168.11.0 0.0.0.255 permit ip any 192.168.12.0 0.0.0.255 permit ip any 192.168.19.0 0.0.0.255 permit ip any 192.168.13.0 0.0.0.255 permit udp any 192.168.1.0 0.0.0.255 permit udp any 192.168.2.0 0.0.0.255 permit udp any 192.168.3.0 0.0.0.255 permit udp any
30、192.168.4.0 0.0.0.255 permit udp any 192.168.5.0 0.0.0.255 permit udp any 192.168.6.0 0.0.0.255 permit udp any 192.168.7.0 0.0.0.255 permit udp any 192.168.8.0 0.0.0.255 permit udp any 192.168.9.0 0.0.0.255 permit udp any 192.168.10.0 0.0.0.255 permit udp any 192.168.11.0 0.0.0.255 permit udp any 19
31、2.168.12.0 0.0.0.255 permit udp any 192.168.13.0 0.0.0.255 permit udp any 192.168.19.0 0.0.0.255 permit ip any host 222.209.223.155 permit ip any host 222.209.208.99 permit udp any host 222.209.223.155 permit udp any host 222.209.208.99 permit igmp any any permit udp any any deny ip any any permit i
