router配置
R2811#show run
Building configuration...
Current configuration : 9996 bytes
!
! Last configuration change at 07:06:39 UTC Mon Aug 27 2012
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2811
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$X072$1NC/1yBFX1mK63CwRPQkw0
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
ip cef load-sharing algorithm universal F21F1F5A
no ip dhcp use vrf connected
no ip dhcp conflict logging
ip dhcp excluded-address 192.168.0.254
ip dhcp excluded-address 192.168.1.254
ip dhcp excluded-address 192.168.2.254
ip dhcp excluded-address 192.168.3.254
ip dhcp excluded-address 192.168.4.254
ip dhcp excluded-address 192.168.5.254
ip dhcp excluded-address 192.168.5.1
ip dhcp excluded-address 192.168.4.1
ip dhcp excluded-address 192.168.3.1
ip dhcp excluded-address 192.168.2.1
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.0.1
ip dhcp excluded-address 192.168.0.2 192.168.0.50
ip dhcp excluded-address 192.168.2.100
ip dhcp excluded-address 192.168.3.100
ip dhcp excluded-address 192.168.4.100
ip dhcp excluded-address 192.168.5.100
ip dhcp excluded-address 192.168.1.100
ip dhcp excluded-address 192.168.6.1
ip dhcp excluded-address 192.168.6.100
ip dhcp excluded-address 192.168.6.254
ip dhcp excluded-address 192.168.7.1
ip dhcp excluded-address 192.168.7.100
ip dhcp excluded-address 192.168.7.254
ip dhcp excluded-address 192.168.1.192
ip dhcp excluded-address 192.168.2.192
ip dhcp excluded-address 192.168.3.192
ip dhcp excluded-address 192.168.4.192
ip dhcp excluded-address 192.168.5.192
ip dhcp excluded-address 192.168.6.192
ip dhcp excluded-address 192.168.7.192
ip dhcp excluded-address 192.168.8.1
ip dhcp excluded-address 192.168.8.100
ip dhcp excluded-address 192.168.8.254
ip dhcp excluded-address 192.168.10.1
ip dhcp excluded-address 192.168.10.5
ip dhcp excluded-address 192.168.10.10
ip dhcp excluded-address 192.168.10.23
ip dhcp excluded-address 192.168.10.100
ip dhcp excluded-address 192.168.10.254
ip dhcp excluded-address 192.168.10.2 192.168.10.50
ip dhcp excluded-address 192.168.6.99
ip dhcp excluded-address 192.168.2.2 192.168.2.99
ip dhcp excluded-address 192.168.3.2 192.168.3.99
ip dhcp excluded-address 192.168.4.2 192.168.4.99
ip dhcp excluded-address 192.168.8.24
ip dhcp excluded-address 192.168.7.2 192.168.7.99
!
ip dhcp pool student1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool student2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool student3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool student4
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool student5
network 192.168.5.0 255.255.255.0
default-router 192.168.5.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool office1
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 218.85.157.99 218.85.152.99
!
ip dhcp pool student6
network 192.168.6.0 255.255.255.0
default-router 192.168.6.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool student7
network 192.168.7.0 255.255.255.0
default-router 192.168.7.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool student8
network 192.168.8.0 255.255.255.0
default-router 192.168.8.1
dns-server 192.168.0.22 218.85.157.99 218.85.152.99
!
ip dhcp pool office2
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 218.85.157.99 218.85.152.99 192.168.0.22
!
!
no ip domain lookup
ip domain name yourdomain.com
ip name-server 218.85.157.99
ip name-server 218.85.152.99
login on-success
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
vpdn enable
!
vpdn-group tarena
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
license udi pid CISCO2811C/K9 sn FGL1603108R
!
!
!
!
!
!
!
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$
no ip address
ip virtual-reassembly
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.1
encapsulation dot1Q 11
ip address 192.168.1.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.5
encapsulation dot1Q 5
ip address 192.168.5.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.6
encapsulation dot1Q 6
ip address 192.168.6.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.7
encapsulation dot1Q 7
ip address 192.168.7.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.8
encapsulation dot1Q 8
ip address 192.168.8.1 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.12
encapsulation dot1Q 12
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Dialer100
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 20
ppp authentication pap callin
ppp chap hostname 059190105262
ppp chap password 0 abc123
ppp pap sent-username 059190105262 password 0 abc123
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface Dialer100 overload
ip route 0.0.0.0 0.0.0.0 Dialer100
ip route 192.168.0.0 255.255.255.0 FastEthernet0/1.12
ip route 192.168.1.0 255.255.255.0 FastEthernet0/1.1
ip route 192.168.2.0 255.255.255.0 FastEthernet0/1.2
ip route 192.168.3.0 255.255.255.0 FastEthernet0/1.3
ip route 192.168.4.0 255.255.255.0 FastEthernet0/1.4
ip route 192.168.5.0 255.255.255.0 FastEthernet0/1.5
ip route 192.168.6.0 255.255.255.0 FastEthernet0/1.6
ip route 192.168.7.0 255.255.255.0 FastEthernet0/1.7
ip route 192.168.8.0 255.255.255.0 FastEthernet0/1.8
ip route 192.168.10.0 255.255.255.0 FastEthernet0/1.10
!
access-list 1 permit 192.168.0.0 0.0.255.255
access-list 6 permit 192.168.10.5
access-list 6 permit 192.168.0.5
access-list 110 permit icmp any any echo
access-list 110 permit icmp any any echo-reply
access-list 110 permit udp host 0.0.0.0 host 255.255.255.255 eq bootps
access-list 110 permit udp any any eq domain
access-list 110 permit tcp any host 192.168.0.23 eq telnet
access-list 110 permit tcp any host 192.168.0.23 eq ftp-data
access-list 110 permit tcp any host 192.168.0.23 eq ftp
access-list 110 permit tcp any host 192.168.0.23 eq 1521
access-list 110 permit tcp any host 192.168.0.23 eq 5560
access-list 110 permit tcp any host 218.247.142.218 eq www time-range open
access-list 110 permit tcp any host 192.168.0.23 eq 2401
access-list 110 permit tcp any host 192.168.0.25 eq telnet
access-list 110 permit tcp any host 192.168.0.25 eq ftp-data
access-list 110 permit tcp any host 218.247.142.211 eq 8088
access-list 110 permit tcp any host 192.168.0.27 eq 3389
access-list 110 permit tcp any host 192.168.0.28 eq 3389
access-list 110 permit tcp any host 192.168.0.23 eq 8082
access-list 110 permit tcp any host 192.168.0.25 eq 8082
access-list 110 permit tcp any host 219.143.247.54
access-list 110 permit tcp any host 219.143.247.53
access-list 110 permit ip host 192.168.1.100 any
access-list 110 permit ip host 192.168.2.100 any
access-list 110 permit ip host 192.168.3.100 any
access-list 110 permit ip host 192.168.4.100 any
access-list 110 permit ip host 192.168.5.100 any
access-list 110 permit ip host 192.168.6.100 any
access-list 110 permit ip host 192.168.7.100 any
access-list 110 permit ip host 192.168.8.100 any
access-list 110 permit tcp any host 192.168.10.23 eq telnet
access-list 110 permit tcp any host 192.168.10.23 eq ftp
access-list 110 permit tcp any host 192.168.10.23 eq ftp-data
access-list 110 permit tcp any host 192.168.10.23 eq 1521
access-list 110 permit tcp any host 192.168.10.23 eq 5560
access-list 110 permit tcp any host 192.168.10.23 eq 2401
access-list 110 permit tcp any host 192.168.10.23 eq 8082
access-list 110 permit tcp any host 192.168.10.23 eq www
access-list 110 permit tcp any host 192.168.10.23
access-list 110 permit ip any host 192.168.0.22
access-list 110 permit ip any host 118.145.21.208
access-list 110 permit ip any host 192.168.10.22
access-list 110 permit ip host 192.168.6.99 any
access-list 110 permit ip host 192.168.2.2 any
access-list 110 permit ip host 192.168.2.106 any
access-list 110 permit ip host 192.168.3.2 any
access-list 110 permit ip host 192.168.4.2 any
access-list 110 permit ip any host 192.168.10.33
access-list 110 permit ip host 192.168.6.98 any
access-list 110 permit ip any host 192.168.10.24
access-list 110 permit ip any host 192.168.8.24
access-list 110 permit ip host 192.168.7.2 any
access-list 110 permit ip host 192.168.7.99 any
dialer-list 20 protocol ip permit
!
!
!
control-plane
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
access-class 6 in
password ***********
login
!
scheduler allocate 20000 1000
time-range open
periodic daily 8:00 to 9:30
periodic daily 11:50 to 13:30
periodic daily 17:30 to 21:00
!
end