Cisco 2911 Router 配置范例

 

 

2911#show run
Building configuration...

Current configuration : 5167 bytes
!
! Last configuration change at 08:22:41 UTC Wed May 2 2012 by cisco
! NVRAM config last updated at 05:49:51 UTC Wed May 2 2012 by cisco
! NVRAM config last updated at 05:49:51 UTC Wed May 2 2012 by cisco
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 2911
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
enable secret 5 $1$6CYn$PRxXJhbBSFS65Q/8HfIJu.
!
no aaa new-model
!
!
no ipv6 cef
ip source-route
ip cef
!
!
!
ip dhcp excluded-address 192.168.40.250 192.168.40.254
ip dhcp excluded-address 192.168.50.250 192.168.50.254
!
ip dhcp pool Song
 network 192.168.40.240 255.255.255.240
 default-router 192.168.40.254
 dns-server 208.67.222.222 208.67.220.220
 lease 7
!
ip dhcp pool Sheng
 network 192.168.50.128 255.255.255.128
 default-router 192.168.50.254
 dns-server 208.67.222.222 208.67.220.220
 lease 7
!
!
no ip domain lookup
ip domain name cisco.com
!
multilink bundle-name authenticated
!
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-433792230
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-433792230
 revocation-check none
 rsakeypair TP-self-signed-433792230
!
!
crypto pki certificate chain TP-self-signed-433792230
 certificate self-signed 01
  30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 34333337 39323233 30301E17 0D313230 32313630 32303430
  335A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3433 33373932
  32333030 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
  E227E899 E664CFEA 3E43A483 DD44A491 1B3C6C44 1D3C61B4 BC0F5E20 E6C19746
  A4558A00 4FBEB2D9 CC13A63C C97581DA 3F84AFFA 8FF22356 08E48D25 AFC42034
  B1690136 2871D7B9 69C69F78 6F6E766A 7DB95B73 E99B3613 AAF708C5 182BE89C
  798E02C8 BB016A10 81C5AE6A 4A2D38E2 D866D5E9 070C87AF 7D323594 EE8A2883
  02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
  23041830 168014FB 5B2A0956 C7F0A82B 3AFC39E5 7B3E270D 17129F30 1D060355
  1D0E0416 0414FB5B 2A0956C7 F0A82B3A FC39E57B 3E270D17 129F300D 06092A86
  4886F70D 01010505 00038181 00B10707 EEF7114E 68A39A24 D7365669 F9D8FE81
  ED70AD0C BDAEF025 87FD4757 9F9CBD56 9D5EF743 CDD8F84C 2AD8682C B347D84C
  C514A4BD E4FD17CB 93C02A68 E8BF35C7 2690CBDF D798EFC0 D68EF7CF A8FD94F8
  4EBDA7E7 06E4BD80 6A427477 33D9250D E98CBECD D8A0EA15 87997D69 24813DE6
  CF0935FF B09CD7AB 78DF8902 12
    quit
license udi pid CISCO2911/K9 sn FGL1607125L
!
!
username cisco privilege 15 secret 5 $1$JrAE$HttKboGTO2saXiStVoO1
username mgmt secret 5 $1$Z.np$KplCwsSkQox8zQV8NqR6/
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
 ip address 10.10.10.1 255.255.255.248
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 description Song
 ip address 192.168.40.254 255.255.255.240
 ip nat inside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface GigabitEthernet0/2
 description Sheng
 ip address 192.168.50.254 255.255.255.128
 ip nat inside
 ip virtual-reassembly in
 duplex full
 speed auto
!
interface FastEthernet0/0/0
 description Default-Shenzhen-IPLC-Hongkong-WAN
 ip address 202.134.11.134 255.255.255.252
 ip flow ingress
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface FastEthernet0/0/1
 description Shenzhen-IPLC-Hongkong-IDC
 ip address 172.16.0.254 255.255.255.0
 ip virtual-reassembly in
 duplex auto
 speed auto
!
router ospf 1
 network 172.16.0.0 0.0.0.255 area 1
 network 192.168.40.240 0.0.0.15 area 1
 network 192.168.50.128 0.0.0.127 area 1
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip flow-export source FastEthernet0/0/0
ip flow-export version 9
ip flow-export destination 192.168.2.5 2055
!
ip nat inside source list nat interface FastEthernet0/0/0 overload
ip nat inside source static tcp 192.168.2.1 3690 202.134.11.134 3690 extendable
ip route 0.0.0.0 0.0.0.0 202.134.11.133
!
ip access-list standard login
 permit 192.168.50.0 0.0.0.128
 permit 172.16.0.0 0.0.0.255
 permit 192.168.40.0 0.0.0.255
 permit 192.168.0.0 0.0.255.255
!
ip access-list extended nat
 permit ip any any
!
!
!
!
!
!
snmp-server community public RO
snmp-server location Shenzhen
snmp-server contact [email protected]
snmp-server host 192.168.2.5 ro
!
control-plane
!
!
!
line con 0
 login local
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport input all
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line vty 0 4
 access-class login in
 privilege level 15
 login local
 transport input telnet ssh
line vty 5 15
 access-class 23 in
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler allocate 20000 1000
end