需求:从数字电视机房核心交换机引出复用器IP组播信号,将前端节目信号传输至七厂交换机中兴5950,因带宽不够用,需做链路聚合,并通过NSG重新调制输出。中兴5950交换机配置如下:


Building configuration...

!

!

vlan list 1-3

!


interface vlan 1                     // 创建vlan1,将其加入smartgroup1

  ip address 172.30.101.251 255.255.255.0   

  out_index 28

  ip pim dm 

!

interface vlan 2                     //默认端口加入该vlan2

  ip address 192.168.100.251 255.255.255.0

  out_index 29

  ip pim dm 

!

interface vlan 3                     //未使用,用于测试

  ip address 172.30.102.251 255.255.255.0

  out_index 31

  ip pim dm 

!

interface null1

  out_index 1

!

interface smartgroup1       //建立链路聚合组

  out_index 27

  switchport access vlan 1

  smartgroup load-balance src-ip          //负载均衡

  smartgroup mode on

!

interface smartgroup2      //建立链路聚合组,本例中未使用

  out_index 30

  switchport access vlan 3

  smartgroup load-balance src-ip

  smartgroup mode on

!

interface gei_1/1

  out_index 3

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!        

interface gei_1/2

  out_index 4

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/3

  out_index 5

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/4

  out_index 6

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/5

  out_index 7

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/6

  out_index 8

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/7

  out_index 9

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/8

  out_index 10

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/9

  out_index 11

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/10

  out_index 12

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/11

  out_index 13

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/12

  out_index 14

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/13

  out_index 15

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/14

  out_index 16

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/15

  out_index 17

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/16

  out_index 18

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/17

  out_index 19

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/18

  out_index 20

  negotiation auto

  switchport access vlan 3

  switchport qinq normal

  smartgroup 2 mode on

!

interface gei_1/19

  out_index 21

  negotiation auto

  switchport access vlan 3

  switchport qinq normal

  smartgroup 2 mode on

!

interface gei_1/20

  out_index 22

  negotiation auto

  switchport access vlan 3

  switchport qinq normal

  smartgroup 2 mode on

!

interface gei_1/21

  out_index 23

  hybrid-attribute copper

  negotiation auto

  switchport access vlan 2

  switchport qinq normal

!

interface gei_1/22                  //该端口加入vlan1,并开启smartgroup模式

  out_index 24

  hybrid-attribute copper

  negotiation auto

  switchport access vlan 1

  switchport qinq normal

  smartgroup 1 mode on

!

interface gei_1/23                   //该端口加入vlan1,并开启smartgroup模式

  out_index 25

  hybrid-attribute copper

  negotiation auto

  switchport access vlan 1

  switchport qinq normal

  smartgroup 1 mode on

!

interface gei_1/24                   //该端口加入vlan1,并开启smartgroup模式

  out_index 26

  hybrid-attribute copper

  negotiation auto

  switchport access vlan 1

  switchport qinq normal

  smartgroup 1 mode on

!

!

ip multicast-routing

!

!

router pimdm

!

ip route 0.0.0.0 0.0.0.0 172.30.101.252       //设置路由,指向链路聚合对端核心交换机

!

ztp vlan 1

!

multicast-limit 1024

ip igmp snooping

no ip igmp snooping ssm-mapping

!

ip pim snooping

!

no ipv6 mld snooping

!

vlan 1

  mld snooping

!

!

time-range disable

!

acl extended number 110                               //没用

  rule 1 permit ip 172.21.0.0 0.0.255.255 any 

  rule 2 deny ip any any 

!

protocol-packet-protect enable

!

!

nas 

!

bfd-version 1

!

!        

!

!

version V4.08.23

!

nvram mng-ip-address 10.40.89.80 255.255.255.0 

!

nvram boot-username 5900

!

nvram boot-password 5900

!

nvram boot-server 10.40.89.78

!

nvram default-gateway 10.40.89.78

!

nvram imgfile-location local flash img/zxr10.zar

!

hostname ZXR10

!

enable secret level 15 5 RcMLuUKvnFZX9kNAV6A/UA==

!

!

user-authentication-type local

user-authorization-type local

!

line console 0

  no login authentication

!

banner incoming @

          ************************************************

          Welcome to ZXR10 5950-28TM Switch of ZTE Corporation

          ************************************************

@

!

!

!

!

snmp-server location No.68 Zijinghua Rd. Yuhuatai District, Nanjing, China

snmp-server contact +86-25-52870000

snmp-server packetsize 1400

snmp-server engine-id 830900020300010289d64401

snmp-server view AllView internet included 

snmp-server view DefaultView system included 

!

!

!

protect  

tcp synflood-protect disable

tcp synflood-protect defence 0 waittime 30 num 1

tcp synflood-protect max-connect high 90 low 60 

tcp synflood-protect one-minute high 80 low 50 

!

no ftp-server enable listen 21 

ftp-server top-directory  /flash/ 

!

logging on

logging buffer 200

logging mode fullcycle

logging console notifications

logging level notifications

logging timestamps datetime localtime

alarm cpuload-on

alarm cpuload-interval 30

alarm cpuload-threshold high-grade 95 middle-grade 85 low-grade 75

syslog-server facility local0

!

line console idle-timeout 120 

line console absolute-timeout 1440 

line telnet idle-timeout 120 

line telnet absolute-timeout 1440 

line telnet max-link 16 

!

ssh server authentication ispgroup 1

ssh server authentication mode local

ssh server authentication type chap

no ssh server only

ssh server version 2

!

!

radius auto-change off

!

!

!

!

!

tacacs disable 

tacacs-server timeout 5

tacacs-server packet 1024

!

!

!

!

control-plane-security enable

!

!

end