思科2811配置实际分析

       大家好，为了这篇博客，我已经编辑四次了，这是第四次。每次快要到完稿时，浏览器卡死，导致我心灰意冷，但为了将这篇博文发出去，给大家以实际配置为例讲一讲，我觉得还是很有必要的，还是耐着性子百战不怠了！

0：! Last configuration change at 22:42:50 GMT Sat Mar 28 2015
      ! NVRAM config last updated at 22:42:51 GMT Sat Mar 28 2015
      !

      //这两句话的意思是配置最后更改具体日期时间及NVRAM中配置更新具体日期时间，我们可以清楚地看到最后一次修改或操作配置是在什么时候//
version 12.4
1：service timestamps debug datetime msec
      service timestamps log datetime localtime
      service password-encryption
      !

      //这三句话的意思是为debug和log设置时间戳，这样有利于我们在排查故障时根据日志记录时间方便找到原因，其中debug 时间戳精确到了毫秒级别，log时间戳采用了和本地一致，从后面我们知道本地与时间NTP服务器作了同步。
hostname SIG-L-SH-RT-C-2811-1
!
2：boot-start-marker
      boot-end-marker
      !

      //这两句话其实没什么意思，举一个例子，就像大家输入cmd时，前文会有一些提示一样，对你没有任何帮助，它是IOS在后期版本中加上去的，
card type e1 0 0
card type e1 0 2
logging buffered 65536
enable secret 5 $1$lHoN$VecPvwjHM9edYj1Br4T1W/
!
no aaa new-model
clock timezone GMT 8
no network-clock-participate wic 0
no network-clock-participate wic 2
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.88.6.1 10.88.6.30
ip dhcp excluded-address 10.88.5.1 10.88.5.30
ip dhcp excluded-address 10.88.5.240 10.88.5.254
ip dhcp excluded-address 10.88.6.240 10.88.6.254
!
ip dhcp pool 10.88.5.0/24-vlan5
   network 10.88.5.0 255.255.255.0
   default-router 10.88.5.254
   dns-server 10.10.2.2 10.10.2.4 219.141.136.10
!
ip dhcp pool 10.88.6.0/24-vlan6
   network 10.88.6.0 255.255.255.0
   default-router 10.88.6.254
   dns-server 10.10.2.2 10.10.2.4 219.141.136.10
!        
!
no ip domain lookup
multilink bundle-name authenticated
!
!
!
archive
 log config
  hidekeys
!
!
controller E1 0/0/0
 channel-group 0 unframed
 description To-P-Shanghai
!
controller E1 0/0/1
 channel-group 0 unframed
!
controller E1 0/2/0
 channel-group 0 unframed
 description To-ZGS-Video
!
controller E1 0/2/1
 channel-group 0 unframed
!
!
!
!
interface Loopback0
 ip address 10.88.255.1 255.255.255.255
!
interface FastEthernet0/0
 description To-Lan
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet0/0.1
 description To-MGT-Vlan1
 encapsulation dot1Q 1 native
 ip address 10.88.252.254 255.255.255.0
!        
interface FastEthernet0/0.5
 description To-Neiqin-Special-Vlan5
 encapsulation dot1Q 5
 ip address 10.88.5.254 255.255.255.0
 ip nat inside
 no ip virtual-reassembly
!
interface FastEthernet0/0.6
 description To-NeiQin-Vlan6
 encapsulation dot1Q 6
 ip address 10.88.6.254 255.255.255.0
 ip nat inside
 no ip virtual-reassembly
!
interface FastEthernet0/1
 description To-Firewall
 ip address 10.65.253.94 255.255.255.252
 duplex auto
 speed auto
!
interface FastEthernet0/1/0
 description To-TongYeXieHui-Telecom
 switchport mode trunk
!
interface FastEthernet0/1/1
!
interface FastEthernet0/1/2
!
interface FastEthernet0/1/3
!
interface Serial0/0/0:0
 description To-ZGS-Video-Mobile
 ip address 10.254.26.210 255.255.255.252
!
interface Serial0/0/1:0
 no ip address
!
interface Serial0/2/0:0
 description To-P-Shanghai
 ip address 10.65.254.94 255.255.255.252
 ip access-group forbid out
 ip nat inside
 no ip virtual-reassembly
!
interface Serial0/2/1:0
 no ip address
!
interface Vlan1
 no ip address
!
interface Vlan907
 description To-TongYeXieHui
 ip address 10.10.120.10 255.255.255.248
 ip nat outside
 no ip virtual-reassembly
!
router ospf 100
 router-id 10.88.255.1
 log-adjacency-changes
 redistribute static subnets tag 26 route-map StaticRoute
 network 10.65.253.92 0.0.0.3 area 26
 network 10.65.254.92 0.0.0.3 area 26
 network 10.88.0.0 0.0.7.255 area 26
 network 10.88.252.0 0.0.0.255 area 26
 network 10.88.255.1 0.0.0.0 area 26
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.65.253.93
ip route 10.10.50.0 255.255.255.0 10.254.26.209 name video-mobile
ip route 10.10.208.19 255.255.255.255 10.10.120.9 name TongYeXieHui-renshenxian
ip route 10.10.208.35 255.255.255.255 10.10.120.9 name TongYeXieHui-geyixian
ip route 10.88.13.1 255.255.255.255 10.10.120.9 name TongYeXieHui
ip route 10.88.13.2 255.255.255.255 10.10.120.9 name TongYeXieHui
!
!
no ip http server
ip nat pool tongye 192.168.120.22 192.168.120.22 netmask 255.255.255.252
ip nat inside source list tongye pool tongye overload
ip nat outside source static 10.192.0.39 10.10.208.35
ip nat outside source static 10.192.0.40 10.10.208.19
ip nat outside source static 10.192.32.128 10.88.13.1
ip nat outside source static 192.168.164.240 10.88.13.2
!
ip access-list standard StaticRoute
 permit 10.88.13.2
 permit 10.88.13.1
 permit 10.10.208.19
 permit 10.10.208.35
!
ip access-list extended forbid
 permit ip 10.88.0.0 0.0.255.255 10.0.0.0 0.255.255.255
 permit ip 10.88.0.0 0.0.255.255 172.16.0.0 0.15.255.255
 permit ip host 10.10.208.19 10.0.0.0 0.255.255.255
 permit ip 10.88.252.0 0.0.0.255 any
 permit ip 10.65.253.92 0.0.0.3 any
 permit ip 10.65.254.92 0.0.0.3 any
 permit ip host 10.88.255.1 any
 permit ip host 10.10.208.35 10.0.0.0 0.255.255.255
ip access-list extended tongye
 permit ip any host 10.10.208.19
 permit ip any host 10.10.208.35
 permit ip any host 10.88.13.1
 permit ip any host 10.88.13.2
!
logging trap critical
logging source-interface Serial0/0/0:0
logging 10.10.174.250
snmp-server community ygbx RO
snmp-server location L-ShangHai
route-map StaticRoute permit 10
 match ip address StaticRoute
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
 password 7 030848035457701D
 login
 transport input telnet
!
scheduler allocate 20000 1000
ntp clock-period 17180178
ntp update-calendar
ntp server 10.10.163.63
!
end

 

本文出自 “茶余饭后，静思量” 博客，谢绝转载！