分类: 系统运维
2008-05-22 16:20:57
catalyst4506#show run
刚给用户做的catalyst 4506双机热备配置,经测试ACL、standby均工作正常。。该配置是主交换机配置,从交换机各VLAN的IP配置不同外(应与主交换机各VLAN的IP在同一网段),其它均相同。。
Current configuration : 4307 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname 4506-1
!
enable secret 5 $1$f6uA$uOeBnswuinoLFBNsxSP561
!
ip subnet-zero
no ip domain-lookup
!
!
no file verify auto
!
spanning-tree mode pvst
spanning-tree extend system-id
spanning-tree vlan 1-1005 priority 24576
power redundancy-mode redundant
!
!
vlan access-map vlan_map 10
action forward
match ip address server_acl
vlan access-map vlan_map 20
action drop
match ip address vlan_acl
vlan access-map vlan_map 30
action forward
vlan filter vlan_map vlan-list 30-31,33-34,37,39,100-101,200,311
vlan internal allocation policy ascending
!
interface Port-channel1
switchport
switchport trunk encapsulation dot1q
!
interface GigabitEthernet1/1
switchport trunk encapsulation dot1q
channel-group 1 mode on
!
interface GigabitEthernet1/2
switchport trunk encapsulation dot1q
channel-group 1 mode on
!
interface GigabitEthernet2/1
switchport trunk encapsulation dot1q
!
interface GigabitEthernet2/2
switchport access vlan 37
spanning-tree portfast
!
interface GigabitEthernet2/3
switchport trunk encapsulation dot1q
!
interface GigabitEthernet2/4
switchport access vlan 33
spanning-tree portfast
!
interface GigabitEthernet2/5
switchport trunk encapsulation dot1q
!
interface GigabitEthernet2/6
switchport access vlan 34
spanning-tree portfast
!
interface GigabitEthernet3/1
switchport trunk encapsulation dot1q
!
interface GigabitEthernet3/2
switchport trunk encapsulation dot1q
interface GigabitEthernet3/3
switchport access vlan 311
spanning-tree portfast
!
interface GigabitEthernet3/4
switchport trunk encapsulation dot1q
!
interface GigabitEthernet3/5
switchport access vlan 31
spanning-tree portfast
!
interface GigabitEthernet3/6
switchport access vlan 101
spanning-tree portfast
!
interface GigabitEthernet4/1
switchport trunk encapsulation dot1q
!
interface GigabitEthernet4/2
switchport access vlan 39
spanning-tree portfast
!
interface GigabitEthernet4/3
switchport trunk encapsulation dot1q
!
interface GigabitEthernet4/4
switchport access vlan 101
spanning-tree portfast
!
interface GigabitEthernet4/5
switchport trunk encapsulation dot1q
!
interface GigabitEthernet4/6
switchport access vlan 30
spanning-tree portfast
!
interface GigabitEthernet6/1
!
interface GigabitEthernet6/2
!
interface GigabitEthernet6/3
!
interface GigabitEthernet6/4
!
interface GigabitEthernet6/5
interface GigabitEthernet6/6
!
interface GigabitEthernet6/7
!
interface GigabitEthernet6/8
!
interface GigabitEthernet6/9
!
interface GigabitEthernet6/10
!
interface GigabitEthernet6/11
!
interface GigabitEthernet6/12
!
interface GigabitEthernet6/13
!
interface GigabitEthernet6/14
!
interface GigabitEthernet6/15
!
interface GigabitEthernet6/16
!
interface GigabitEthernet6/17
!
interface GigabitEthernet6/18
!
interface GigabitEthernet6/19
!
interface GigabitEthernet6/20
!
interface GigabitEthernet6/21
!
interface GigabitEthernet6/22
!
interface GigabitEthernet6/23
!
interface GigabitEthernet6/24
!
interface Vlan1
no ip address
!
interface Vlan30
ip address 192.168.30.252 255.255.255.0
standby ip 192.168.30.254
standby priority 110
standby preempt
!
interface Vlan31
ip address 192.168.31.252 255.255.255.0
standby ip 192.168.31.254
standby priority 110
standby preempt
!
interface Vlan33
ip address 192.168.33.252 255.255.255.0
standby ip 192.168.33.254
standby priority 110
standby preempt
!
interface Vlan34
ip address 192.168.34.252 255.255.255.0
standby ip 192.168.34.254
standby priority 110
standby preempt
!
interface Vlan37
ip address 192.168.37.252 255.255.255.0
standby ip 192.168.37.254
standby priority 110
standby preempt
!
interface Vlan39
ip address 192.168.39.252 255.255.255.0
standby ip 192.168.39.254
standby priority 110
standby preempt
!
interface Vlan100
ip address 192.168.100.252 255.255.255.0
standby ip 192.168.100.254
standby priority 110
standby preempt
!
interface Vlan101
ip address 192.168.101.252 255.255.255.0
standby ip 192.168.101.254
standby priority 110
standby preempt
!
interface Vlan200
ip address 192.168.200.252 255.255.255.0
standby ip 192.168.200.254
standby priority 110
standby preempt
!
interface Vlan311
ip address 192.168.11.252 255.255.255.0
standby ip 192.168.11.254
standby priority 110
standby preempt
!
no ip http server
!
!
ip access-list extended server_acl
permit ip 192.168.0.0 0.0.255.255 host 192.168.101.250
ip access-list extended vlan_acl
permit ip 192.168.30.0 0.0.0.255 192.168.33.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.31.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.34.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.37.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.39.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.11.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.100.0 0.0.0.255
permit ip 192.168.30.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.33.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.34.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.37.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.39.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.11.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.100.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.31.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 192.168.34.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 192.168.37.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 192.168.39.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 192.168.11.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 192.168.100.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.34.0 0.0.0.255 192.168.37.0 0.0.0.255
permit ip 192.168.34.0 0.0.0.255 192.168.39.0 0.0.0.255
permit ip 192.168.34.0 0.0.0.255 192.168.11.0 0.0.0.255
permit ip 192.168.34.0 0.0.0.255 192.168.100.0 0.0.0.255
permit ip 192.168.34.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.34.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.37.0 0.0.0.255 192.168.39.0 0.0.0.255
permit ip 192.168.37.0 0.0.0.255 192.168.11.0 0.0.0.255
permit ip 192.168.37.0 0.0.0.255 192.168.100.0 0.0.0.255
permit ip 192.168.37.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.37.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.39.0 0.0.0.255 192.168.11.0 0.0.0.255
permit ip 192.168.39.0 0.0.0.255 192.168.100.0 0.0.0.255
permit ip 192.168.39.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.39.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.11.0 0.0.0.255 192.168.100.0 0.0.0.255
permit ip 192.168.11.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.11.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.100.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.100.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.101.0 0.0.0.255 192.168.200.0 0.0.0.255
!
!
!
line con 0
stopbits 1
line vty 0 4
password %$&&&*(&(
login
line vty 5 15
password %$&&&*(&(
login
!
end