Re: Архитекттура VLAN соединений. Хитро...
Добавлено: 2008-07-30 17:53:40
поставьте себе IOS если найдёте....а вообще, стоит глянуть все конфиги
и будем колдовать....
Код: Выделить всё
sh run
Если вы ударите по лицу европейца, он заплачет. Если вы ударите по лицу американца, он подаст на вас в суд. Если вы ударите по лицу русского, знайте, ваши проблемы только начались
https://forum.lissyara.su/
Код: Выделить всё
sh run
Код: Выделить всё
8-hostel> (enable) show run
Ambiguous command "show run". Use 'show help' for more info.
8-hostel> (enable) show ?
accounting Show accounting information
alias Show aliases for commands
arp Show ARP table
authentication Show authentication information
authorization Show authorization information
banner Show system banner
boot Show booting environment variables
cam Show CAM table
cdp Show Cisco Discovery Protocol Information
cgmp Show CGMP info
channel Show channel information
channelprotocol Show channel protocol by module
config Show system configuration
counters Show port counters
dot1q-all-tagged Show dot1q tag status
dot1x Show dot1x port capability & version
dvlan Show dynamic vlan statistics
environment Show environment information
errdisable-timeout Show err-disable timeout config
errordetection Show errordetection settings
file Show contents of file
flash Show file information on flash device
garp Show GARP information
gmrp Show GMRP information
gmttime Show GMT time
gvrp Show GVRP information
igmp Show IGMP filter information
imagemib Show image mib information
inlinepower Show inlinepower information
interface Show network interfaces
ip Show IP Information
kerberos Show kerberos configuration information
lacp-channel Show LACP channel information
localuser Show localusers
log Show log information
logging Show system logging information
mac Show MAC information
mls Show multilayer switching information
module Show module info
multicast Show multicast information
netstat Show network statistics
ntp Show ntp statistics
port Show port information
proc Show cpu and processes utilization
protocolfilter Show protocolfilter information
pvlan Show Private Vlan Information
qos Show QOS information
radius Show RADIUS information
rcp Show rcp information
reset Show schedule reset information
rspan Show remote switch port analyzer information
running-config Show system runtime configuration
runtimediagnostics Show runtime diagnostics status
snmp Show SNMP information
span Show switch port analyzer information
spantree Show spantree information
startup-config Show system startup configuration
summertime Show state of summertime information
switchacceleration Show switch acceleration status
system Show system information
tacacs Show TACACS information
tech-support Show system information for Tech-Support
test Show results of diagnostic tests
time Show time of day
timezone Show the current timezone offset
top Show TopN report
traffic Show Traffic information
trunk Show trunk ports
udld Show Uni-directional Link Detection information
users Show active Admin sessions
version Show version information
vlan Show Virtual LAN information
vmps Show VMPS information
vtp Show VTP Information
Вы прикалываетесь чтоли? IOS- тру, у меня только под 2970 есть....12.2Inzevision писал(а):хм, а что это даст? и чем отличается ИОС от того, что у меня?
и ещё, может если есть для 2980G -- поделитесь?
Код: Выделить всё
sh running-config all
Код: Выделить всё
8-hostel> (enable) sh running-config all
.................
............................
.............................
.............................
..
begin
!
# ***** ALL (DEFAULT and NON-DEFAULT) CONFIGURATION *****
!
!
#time: Wed Jul 30 2008, 18:11:25
!
#version 8.4(11)GLX
!
!
#system web interface version(s)
set password ===
set enablepass ===
set prompt Console>
set length 24 default
set logout 20
set config mode binary
set banner motd ^C^C
!
#test
set test diaglevel complete
!
#dot1x
set dot1x system-auth-control enable
set dot1x quiet-period 60
set dot1x tx-period 30
set dot1x shutdown-timeout 300
set dot1x supp-timeout 30
set dot1x server-timeout 30
set dot1x max-req 2
set dot1x re-authperiod 3600
set feature dot1x-radius-keepalive disable
!
#errordetection
set errordetection inband disable
set errordetection memory disable
!
#system
set system baud 9600
set system modem disable
set system name 8-hostel
set system location
set system contact
set system countrycode
set traffic monitor 100
set feature log-command enable
set feature loop-detect enable
!
#power
set power budget 1
!
#Inlinepower
set inlinepower defaultallocation 6000
!
#frame distribution method
set port channel all distribution mac both
!
#mac address reduction
set spantree macreduction disable
!
#default portcost mode
set spantree defaultcostmode short
!
#snmp
set snmp community read-only public
set snmp community read-write private
set snmp community read-write-all secret
set snmp rmon disable
set snmp rmonmemory 85
set snmp enable
set snmp trap disable module
set snmp trap disable chassis
set snmp trap disable bridge
set snmp trap disable vtp
set snmp trap disable vlancreate
set snmp trap disable vlandelete
set snmp trap disable auth
set snmp trap disable entityfru
set snmp trap disable ippermit
set snmp chassis-alias
set snmp buffer 40
set snmp trap disable vmps
set snmp trap disable entity
set snmp trap disable config
set snmp trap disable stpx
set snmp trap disable syslog
set snmp trap disable system
set snmp trap disable envfan
set snmp trap disable envpower
set snmp trap disable envtemp
set snmp trap disable envstate
set snmp trap disable macnotification
!
#tacacs+
set tacacs attempts 3
set tacacs directedrequest disable
set tacacs timeout 5
!
#radius
set radius deadtime 0
set radius timeout 5
set radius retransmit 2
set radius attribute framed-ip-address include-in-access-req disable
!
#kerberos
!
#authentication
set authentication login tacacs disable console
set authentication login tacacs disable telnet
set authentication login tacacs disable http
set authentication enable tacacs disable console
set authentication enable tacacs disable telnet
set authentication enable tacacs disable http
set authentication login radius disable console
set authentication login radius disable telnet
set authentication login radius disable http
set authentication enable radius disable console
set authentication enable radius disable telnet
set authentication enable radius disable http
set authentication login local enable console
set authentication login local enable telnet
set authentication login local enable http
set authentication enable local enable console
set authentication enable local enable telnet
set authentication enable local enable http
set authentication login kerberos disable console
set authentication login kerberos disable telnet
set authentication login kerberos disable http
set authentication enable kerberos disable console
set authentication enable kerberos disable telnet
set authentication enable kerberos disable http
set authentication login attempt 3 console
set authentication login attempt 3 telnet
set authentication login lockout 0 console
set authentication login lockout 0 telnet
set authentication enable attempt 3 console
set authentication enable attempt 3 telnet
set authentication enable lockout 0 console
set authentication enable lockout 0 telnet
!
#Local User
set localuser authentication disable
!
#stp mode
set spantree mode pvst+
!
#vtp
set vtp domain 8-hostel
set vtp mode transparent unknown
set vtp mode server vlan
set vtp version 2
set vtp pruning disable
set vtp pruneeligible 2-1000
clear vtp pruneeligible 1001-1005
set vlan 100 name VirusUsers type ethernet mtu 1500 said 100100 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active bridge 0x0 stp ieee
set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bridge 0xf stp ibm
set vlan 1
set vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active parent 1005 ring 0xccc mode srb aremaxhop 7 stemaxhop 7 backupcrf off
!
#dot1q-all-tagged
set dot1q-all-tagged disable
!
#ip
set feature mdg enable
set feature psync-recovery no-powerdown
set interface sc0 1 192.168.0.8/255.255.255.0 192.168.0.255
set interface sc0 up
set interface trap sc0 disable
set interface sl0 0.0.0.0 0.0.0.0
set interface sl0 down
set interface trap sl0 disable
set interface me1 0.0.0.0 0.0.0.0 0.0.0.0
set interface me1 down
set interface trap me1 disable
set arp agingtime 1200
set ip redirect enable
set ip unreachable enable
set ip fragmentation enable
set ip route 0.0.0.0/0.0.0.0 192.168.0.1
set ip alias default 0.0.0.0
!
#command alias
!
#vmps
set vmps server retry 3
set vmps server reconfirminterval 60
set vmps downloadmethod tftp
set vmps downloadserver 0.0.0.0 vmps-config-database.1
set vmps state disable
!
#rcp
set rcp username
!
#dns
set ip dns disable
!
#spantree
#spantree global defaults
set spantree global-default portfast disable
set spantree global-default loop-guard disable
#portfast
set spantree global-default bpdu-guard disable
set spantree global-default bpdu-filter disable
#bpdu-skewing
set spantree bpdu-skewing disable
#MST (IEEE 802.1s)
set spantree fwddelay 15 mst
set spantree hello 2 mst
set spantree maxage 20 mst
set spantree mst maxhops 20
set spantree priority 32768 mst
set spantree priority 32768 mst 1
set spantree priority 32768 mst 2
set spantree priority 32768 mst 3
set spantree priority 32768 mst 4
set spantree priority 32768 mst 5
set spantree priority 32768 mst 6
set spantree priority 32768 mst 7
set spantree priority 32768 mst 8
set spantree priority 32768 mst 9
set spantree priority 32768 mst 10
set spantree priority 32768 mst 11
set spantree priority 32768 mst 12
set spantree priority 32768 mst 13
set spantree priority 32768 mst 14
set spantree priority 32768 mst 15
#MST Configuration
set spantree mst config rollback force
set spantree mst config name revision 0
set spantree mst 0 vlan 1-4094
set spantree mst config commit
#uplinkfast groups
set spantree uplinkfast disable
#backbonefast
set spantree backbonefast disable
#vlan <VlanId>
set spantree priority 8192 1
set spantree priority 8192 100
#vlan(defaults)
set spantree enable 1,100
set spantree fwddelay 15 1,100
set spantree hello 2 1,100
set spantree maxage 20 1,100
!
#cgmp
set cgmp disable
set cgmp leave disable
set cgmp fastleave disable
!
#syslog
set logging console enable
set logging telnet enable
set logging server disable
set logging level cdp 4 default
set logging level mcast 2 default
set logging level dtp 5 default
set logging level dvlan 2 default
set logging level earl 2 default
set logging level ip 3 default
set logging level pruning 2 default
set logging level snmp 2 default
set logging level spantree 2 default
set logging level sys 5 default
set logging level tac 2 default
set logging level tcp 2 default
set logging level telnet 2 default
set logging level tftp 2 default
set logging level vtp 2 default
set logging level vmps 2 default
set logging level kernel 2 default
set logging level filesys 2 default
set logging level mgmt 5 default
set logging level mls 5 default
set logging level protfilt 2 default
set logging level security 2 default
set logging level radius 2 default
set logging level udld 4 default
set logging level gvrp 2 default
set logging level qos 3 default
set logging level ethc 2 default
set logging level inlinepower 2 default
set logging server facility LOCAL7
set logging server severity 4
set logging timestamp enable
set logging buffer 500
set logging history 1
set logging history severity 4
!
#ntp
set ntp broadcastclient disable
set ntp broadcastdelay 3000
set ntp client disable
set ntp authentication disable
clear timezone
set summertime disable
set summertime recurring
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat4000-k8.8-4-11-GLX.bin
!
#permit list
set ip permit disable telnet
set ip permit disable ssh
set ip permit disable snmp
!
#permanent arp entries
!
#protocolfilter
set protocolfilter disable
!
#standby ports
set standbyports disable
!
#vlan mapping
!
#gmrp
set gmrp disable
!
#garp
set garp timer all 200 600 10000
!
#cdp
set cdp interval 60
set cdp holdtime 180
set cdp enable
set cdp version v2
set cdp format device-id other
!
#qos
set qos disable
set qos defaultcos 0
set qos map 2q1t 1 1 cos 0-1
set qos map 2q1t 1 1 cos 2-3
set qos map 2q1t 1 1 cos 4-5
set qos map 2q1t 1 1 cos 6-7
!
#udld
set udld disable
set udld interval 15
!
#LACP channel
set lacp-channel system-priority 32768
!
#channelprotocol
set channelprotocol pagp 2
set channelprotocol pagp 3
!
#port channel
set port channel 2/1-4 64
set port channel 2/5-8 65
set port channel 2/9-12 66
set port channel 2/13-16 67
set port channel 2/17-20 68
set port channel 2/21-24 69
set port channel 2/25-28 70
set port channel 2/29-32 71
set port channel 2/33-36 72
set port channel 2/37-40 73
set port channel 2/41-44 74
set port channel 2/45-48 75
set port channel 3/1-4 76
set port channel 3/5-8 77
set port channel 3/9-12 78
set port channel 3/13-16 79
set port channel 3/17-20 80
set port channel 3/21-24 81
set port channel 3/25-28 82
set port channel 3/29-32 83
set port channel 3/33-34 84
!
#accounting
set accounting exec disable
set accounting connect disable
set accounting system disable
set accounting commands disable
set accounting suppress null-username disable
set accounting update new-info
!
#errdisable timeout
set errdisable-timeout disable other
set errdisable-timeout disable udld
set errdisable-timeout disable bpdu-guard
set errdisable-timeout disable channel-misconfig
set errdisable-timeout disable nostatic-power
set errdisable-timeout interval 300
!
#http configuration
set ip http server disable
set ip http port 80
!
#private vlans
!
#crypto key
!
#multicast filter
set igmp filter disable
!
#module 1 : 0-port Switching Supervisor
set module name 1
!
#module 2 : 48-port 10/100BaseTx Ethernet
set module name 2
set module enable 2
set vlan 1 2/1-48
set port auxiliaryvlan 2/1-48 none
set port enable 2/1-48
set port level 2/1-48 normal
set port speed 2/1-48 auto
set port trap 2/1-48 disable
set port name 2/47 link_out
set port name 2/48 link_in
set port name 2/1-46
set port security 2/1-48 disable age 0 maximum 1 shutdown 0 unicast-flood enable violation shutdown
set port dot1x 2/1-48 port-control force-authorized
set port dot1x 2/1-48 multiple-host disable
set port dot1x 2/1-48 shutdown-timeout disable
set port dot1x 2/1-48 re-authentication disable
set port dot1x 2/1-48 guest-vlan none
set port membership 2/1-48 static
set port protocol 2/1-48 ip on
set port protocol 2/1-48 ipx auto
set port protocol 2/1-48 group auto
set port vtp enable 2/1-48
set cdp enable 2/1-48
set udld disable 2/1-48
set udld aggressive-mode disable 2/1-48
set trunk 2/1 auto dot1q 1-1005,1025-4094
set trunk 2/2 auto dot1q 1-1005,1025-4094
set trunk 2/3 auto dot1q 1-1005,1025-4094
set trunk 2/4 auto dot1q 1-1005,1025-4094
set trunk 2/5 auto dot1q 1-1005,1025-4094
set trunk 2/6 auto dot1q 1-1005,1025-4094
set trunk 2/7 auto dot1q 1-1005,1025-4094
set trunk 2/8 auto dot1q 1-1005,1025-4094
set trunk 2/9 auto dot1q 1-1005,1025-4094
set trunk 2/10 auto dot1q 1-1005,1025-4094
set trunk 2/11 auto dot1q 1-1005,1025-4094
set trunk 2/12 auto dot1q 1-1005,1025-4094
set trunk 2/13 auto dot1q 1-1005,1025-4094
set trunk 2/14 auto dot1q 1-1005,1025-4094
set trunk 2/15 auto dot1q 1-1005,1025-4094
set trunk 2/16 auto dot1q 1-1005,1025-4094
set trunk 2/17 auto dot1q 1-1005,1025-4094
set trunk 2/18 auto dot1q 1-1005,1025-4094
set trunk 2/19 auto dot1q 1-1005,1025-4094
set trunk 2/20 auto dot1q 1-1005,1025-4094
set trunk 2/21 auto dot1q 1-1005,1025-4094
set trunk 2/22 auto dot1q 1-1005,1025-4094
set trunk 2/23 auto dot1q 1-1005,1025-4094
set trunk 2/24 auto dot1q 1-1005,1025-4094
set trunk 2/25 auto dot1q 1-1005,1025-4094
set trunk 2/26 auto dot1q 1-1005,1025-4094
set trunk 2/27 auto dot1q 1-1005,1025-4094
set trunk 2/28 auto dot1q 1-1005,1025-4094
set trunk 2/29 auto dot1q 1-1005,1025-4094
set trunk 2/30 auto dot1q 1-1005,1025-4094
set trunk 2/31 auto dot1q 1-1005,1025-4094
set trunk 2/32 auto dot1q 1-1005,1025-4094
set trunk 2/33 auto dot1q 1-1005,1025-4094
set trunk 2/34 auto dot1q 1-1005,1025-4094
set trunk 2/35 auto dot1q 1-1005,1025-4094
set trunk 2/36 auto dot1q 1-1005,1025-4094
set trunk 2/37 auto dot1q 1-1005,1025-4094
set trunk 2/38 auto dot1q 1-1005,1025-4094
set trunk 2/39 auto dot1q 1-1005,1025-4094
set trunk 2/40 auto dot1q 1-1005,1025-4094
set trunk 2/41 auto dot1q 1-1005,1025-4094
set trunk 2/42 auto dot1q 1-1005,1025-4094
set trunk 2/43 auto dot1q 1-1005,1025-4094
set trunk 2/44 auto dot1q 1-1005,1025-4094
set trunk 2/45 auto dot1q 1-1005,1025-4094
set trunk 2/46 auto dot1q 1-1005,1025-4094
set trunk 2/47 on dot1q 1-1005,1025-4094
set trunk 2/48 on dot1q 1-1005,1025-4094
set spantree portfast 2/1-48 enable
set spantree bpdu-filter 2/1-48 default
set spantree bpdu-guard 2/1-48 default
set spantree mst link-type 2/1-48 auto
set spantree portpri 2/1-48 32 mst
set spantree portinstancepri 2/1 0 mst
set spantree portinstancepri 2/2 0 mst
set spantree portinstancepri 2/3 0 mst
set spantree portinstancepri 2/4 0 mst
set spantree portinstancepri 2/5 0 mst
set spantree portinstancepri 2/6 0 mst
set spantree portinstancepri 2/7 0 mst
set spantree portinstancepri 2/8 0 mst
set spantree portinstancepri 2/9 0 mst
set spantree portinstancepri 2/10 0 mst
set spantree portinstancepri 2/11 0 mst
set spantree portinstancepri 2/12 0 mst
set spantree portinstancepri 2/13 0 mst
set spantree portinstancepri 2/14 0 mst
set spantree portinstancepri 2/15 0 mst
set spantree portinstancepri 2/16 0 mst
set spantree portinstancepri 2/17 0 mst
set spantree portinstancepri 2/18 0 mst
set spantree portinstancepri 2/19 0 mst
set spantree portinstancepri 2/20 0 mst
set spantree portinstancepri 2/21 0 mst
set spantree portinstancepri 2/22 0 mst
set spantree portinstancepri 2/23 0 mst
set spantree portinstancepri 2/24 0 mst
set spantree portinstancepri 2/25 0 mst
set spantree portinstancepri 2/26 0 mst
set spantree portinstancepri 2/27 0 mst
set spantree portinstancepri 2/28 0 mst
set spantree portinstancepri 2/29 0 mst
set spantree portinstancepri 2/30 0 mst
set spantree portinstancepri 2/31 0 mst
set spantree portinstancepri 2/32 0 mst
set spantree portinstancepri 2/33 0 mst
set spantree portinstancepri 2/34 0 mst
set spantree portinstancepri 2/35 0 mst
set spantree portinstancepri 2/36 0 mst
set spantree portinstancepri 2/37 0 mst
set spantree portinstancepri 2/38 0 mst
set spantree portinstancepri 2/39 0 mst
set spantree portinstancepri 2/40 0 mst
set spantree portinstancepri 2/41 0 mst
set spantree portinstancepri 2/42 0 mst
set spantree portinstancepri 2/43 0 mst
set spantree portinstancepri 2/44 0 mst
set spantree portinstancepri 2/45 0 mst
set spantree portinstancepri 2/46 0 mst
set spantree portinstancepri 2/47 0 mst
set spantree portinstancepri 2/48 0 mst
set spantree portcost 2/1,2/4-5,2/10,2/34,2/36-37,2/39,2/47-48 200000 mst
set spantree portcost 2/2-3,2/6-9,2/11-33,2/35,2/38,2/40-46 2000000 mst
set spantree portinstancecost 2/1 cost 199999 mst
set spantree portinstancecost 2/2 cost 1999999 mst
set spantree portinstancecost 2/3 cost 1999999 mst
set spantree portinstancecost 2/4 cost 199999 mst
set spantree portinstancecost 2/5 cost 199999 mst
set spantree portinstancecost 2/6 cost 1999999 mst
set spantree portinstancecost 2/7 cost 1999999 mst
set spantree portinstancecost 2/8 cost 1999999 mst
set spantree portinstancecost 2/9 cost 1999999 mst
set spantree portinstancecost 2/10 cost 199999 mst
set spantree portinstancecost 2/11 cost 1999999 mst
set spantree portinstancecost 2/12 cost 1999999 mst
set spantree portinstancecost 2/13 cost 1999999 mst
set spantree portinstancecost 2/14 cost 1999999 mst
set spantree portinstancecost 2/15 cost 1999999 mst
set spantree portinstancecost 2/16 cost 1999999 mst
set spantree portinstancecost 2/17 cost 1999999 mst
set spantree portinstancecost 2/18 cost 1999999 mst
set spantree portinstancecost 2/19 cost 1999999 mst
set spantree portinstancecost 2/20 cost 1999999 mst
set spantree portinstancecost 2/21 cost 1999999 mst
set spantree portinstancecost 2/22 cost 1999999 mst
set spantree portinstancecost 2/23 cost 1999999 mst
set spantree portinstancecost 2/24 cost 1999999 mst
set spantree portinstancecost 2/25 cost 1999999 mst
set spantree portinstancecost 2/26 cost 1999999 mst
set spantree portinstancecost 2/27 cost 1999999 mst
set spantree portinstancecost 2/28 cost 1999999 mst
set spantree portinstancecost 2/29 cost 1999999 mst
set spantree portinstancecost 2/30 cost 1999999 mst
set spantree portinstancecost 2/31 cost 1999999 mst
set spantree portinstancecost 2/32 cost 1999999 mst
set spantree portinstancecost 2/33 cost 1999999 mst
set spantree portinstancecost 2/34 cost 199999 mst
set spantree portinstancecost 2/35 cost 1999999 mst
set spantree portinstancecost 2/36 cost 199999 mst
set spantree portinstancecost 2/37 cost 199999 mst
set spantree portinstancecost 2/38 cost 1999999 mst
set spantree portinstancecost 2/39 cost 199999 mst
set spantree portinstancecost 2/40 cost 1999999 mst
set spantree portinstancecost 2/41 cost 1999999 mst
set spantree portinstancecost 2/42 cost 1999999 mst
set spantree portinstancecost 2/43 cost 1999999 mst
set spantree portinstancecost 2/44 cost 1999999 mst
set spantree portinstancecost 2/45 cost 1999999 mst
set spantree portinstancecost 2/46 cost 1999999 mst
set spantree portinstancecost 2/47 cost 199999 mst
set spantree portinstancecost 2/48 cost 199999 mst
set spantree portcost 2/1,2/4-5,2/10,2/34,2/36-37,2/39 19
set spantree portcost 2/2-3,2/6-9,2/11-33,2/35,2/38,2/40-46 100
set spantree portcost 2/47-48 12
set spantree portpri 2/1-46 32
set spantree portpri 2/47-48 16
set spantree portvlanpri 2/1 0
set spantree portvlanpri 2/2 0
set spantree portvlanpri 2/3 0
set spantree portvlanpri 2/4 0
set spantree portvlanpri 2/5 0
set spantree portvlanpri 2/6 0
set spantree portvlanpri 2/7 0
set spantree portvlanpri 2/8 0
set spantree portvlanpri 2/9 0
set spantree portvlanpri 2/10 0
set spantree portvlanpri 2/11 0
set spantree portvlanpri 2/12 0
set spantree portvlanpri 2/13 0
set spantree portvlanpri 2/14 0
set spantree portvlanpri 2/15 0
set spantree portvlanpri 2/16 0
set spantree portvlanpri 2/17 0
set spantree portvlanpri 2/18 0
set spantree portvlanpri 2/19 0
set spantree portvlanpri 2/20 0
set spantree portvlanpri 2/21 0
set spantree portvlanpri 2/22 0
set spantree portvlanpri 2/23 0
set spantree portvlanpri 2/24 0
set spantree portvlanpri 2/25 0
set spantree portvlanpri 2/26 0
set spantree portvlanpri 2/27 0
set spantree portvlanpri 2/28 0
set spantree portvlanpri 2/29 0
set spantree portvlanpri 2/30 0
set spantree portvlanpri 2/31 0
set spantree portvlanpri 2/32 0
set spantree portvlanpri 2/33 0
set spantree portvlanpri 2/34 0
set spantree portvlanpri 2/35 0
set spantree portvlanpri 2/36 0
set spantree portvlanpri 2/37 0
set spantree portvlanpri 2/38 0
set spantree portvlanpri 2/39 0
set spantree portvlanpri 2/40 0
set spantree portvlanpri 2/41 0
set spantree portvlanpri 2/42 0
set spantree portvlanpri 2/43 0
set spantree portvlanpri 2/44 0
set spantree portvlanpri 2/45 0
set spantree portvlanpri 2/46 0
set spantree portvlanpri 2/47 0
set spantree portvlanpri 2/48 0
set spantree portvlancost 2/1 cost 18
set spantree portvlancost 2/2 cost 99
set spantree portvlancost 2/3 cost 99
set spantree portvlancost 2/4 cost 18
set spantree portvlancost 2/5 cost 18
set spantree portvlancost 2/6 cost 99
set spantree portvlancost 2/7 cost 99
set spantree portvlancost 2/8 cost 99
set spantree portvlancost 2/9 cost 99
set spantree portvlancost 2/10 cost 18
set spantree portvlancost 2/11 cost 99
set spantree portvlancost 2/12 cost 99
set spantree portvlancost 2/13 cost 99
set spantree portvlancost 2/14 cost 99
set spantree portvlancost 2/15 cost 99
set spantree portvlancost 2/16 cost 99
set spantree portvlancost 2/17 cost 99
set spantree portvlancost 2/18 cost 99
set spantree portvlancost 2/19 cost 99
set spantree portvlancost 2/20 cost 99
set spantree portvlancost 2/21 cost 99
set spantree portvlancost 2/22 cost 99
set spantree portvlancost 2/23 cost 99
set spantree portvlancost 2/24 cost 99
set spantree portvlancost 2/25 cost 99
set spantree portvlancost 2/26 cost 99
set spantree portvlancost 2/27 cost 99
set spantree portvlancost 2/28 cost 99
set spantree portvlancost 2/29 cost 99
set spantree portvlancost 2/30 cost 99
set spantree portvlancost 2/31 cost 99
set spantree portvlancost 2/32 cost 99
set spantree portvlancost 2/33 cost 99
set spantree portvlancost 2/34 cost 18
set spantree portvlancost 2/35 cost 99
set spantree portvlancost 2/36 cost 18
set spantree portvlancost 2/37 cost 18
set spantree portvlancost 2/38 cost 99
set spantree portvlancost 2/39 cost 18
set spantree portvlancost 2/40 cost 99
set spantree portvlancost 2/41 cost 99
set spantree portvlancost 2/42 cost 99
set spantree portvlancost 2/43 cost 99
set spantree portvlancost 2/44 cost 99
set spantree portvlancost 2/45 cost 99
set spantree portvlancost 2/46 cost 99
set spantree portvlancost 2/47 cost 11
set spantree portvlancost 2/48 cost 11
set spantree guard none 2/1-48
set port gvrp 2/1-48 disable
set gvrp registration normal 2/1-48
set gvrp applicant normal 2/1-48
set port gmrp 2/1-48 enable
set gmrp registration normal 2/1-48
set gmrp fwdall disable 2/1-48
set port debounce 2/1 disable
set port debounce 2/2 disable
set port debounce 2/3 disable
set port debounce 2/4 disable
set port debounce 2/5 disable
set port debounce 2/6 disable
set port debounce 2/7 disable
set port debounce 2/8 disable
set port debounce 2/9 disable
set port debounce 2/10 disable
set port debounce 2/11 disable
set port debounce 2/12 disable
set port debounce 2/13 disable
set port debounce 2/14 disable
set port debounce 2/15 disable
set port debounce 2/16 disable
set port debounce 2/17 disable
set port debounce 2/18 disable
set port debounce 2/19 disable
set port debounce 2/20 disable
set port debounce 2/21 disable
set port debounce 2/22 disable
set port debounce 2/23 disable
set port debounce 2/24 disable
set port debounce 2/25 disable
set port debounce 2/26 disable
set port debounce 2/27 disable
set port debounce 2/28 disable
set port debounce 2/29 disable
set port debounce 2/30 disable
set port debounce 2/31 disable
set port debounce 2/32 disable
set port debounce 2/33 disable
set port debounce 2/34 disable
set port debounce 2/35 disable
set port debounce 2/36 disable
set port debounce 2/37 disable
set port debounce 2/38 disable
set port debounce 2/39 disable
set port debounce 2/40 disable
set port debounce 2/41 disable
set port debounce 2/42 disable
set port debounce 2/43 disable
set port debounce 2/44 disable
set port debounce 2/45 disable
set port debounce 2/46 disable
set port debounce 2/47 disable
set port debounce 2/48 disable
set port unicast-flood 2/1-48 enable
set port errdisable-timeout 2/1-48 enable
set port idledetect 2/1 disable
set port idledetect 2/2 disable
set port idledetect 2/3 disable
set port idledetect 2/4 disable
set port idledetect 2/5 disable
set port idledetect 2/6 disable
set port idledetect 2/7 disable
set port idledetect 2/8 disable
set port idledetect 2/9 disable
set port idledetect 2/10 disable
set port idledetect 2/11 disable
set port idledetect 2/12 disable
set port idledetect 2/13 disable
set port idledetect 2/14 disable
set port idledetect 2/15 disable
set port idledetect 2/16 disable
set port idledetect 2/17 disable
set port idledetect 2/18 disable
set port idledetect 2/19 disable
set port idledetect 2/20 disable
set port idledetect 2/21 disable
set port idledetect 2/22 disable
set port idledetect 2/23 disable
set port idledetect 2/24 disable
set port idledetect 2/25 disable
set port idledetect 2/26 disable
set port idledetect 2/27 disable
set port idledetect 2/28 disable
set port idledetect 2/29 disable
set port idledetect 2/30 disable
set port idledetect 2/31 disable
set port idledetect 2/32 disable
set port idledetect 2/33 disable
set port idledetect 2/34 disable
set port idledetect 2/35 disable
set port idledetect 2/36 disable
set port idledetect 2/37 disable
set port idledetect 2/38 disable
set port idledetect 2/39 disable
set port idledetect 2/40 disable
set port idledetect 2/41 disable
set port idledetect 2/42 disable
set port idledetect 2/43 disable
set port idledetect 2/44 disable
set port idledetect 2/45 disable
set port idledetect 2/46 disable
set port idledetect 2/47 disable
set port idledetect 2/48 disable
set cam notification added disable 2/1-48
set cam notification removed disable 2/1-48
set port channel 2/1-48 mode auto silent
!
#module 3 : 34-port 10/100/1000 Ethernet
set module name 3
set module enable 3
set vlan 1 3/1-34
set port auxiliaryvlan 3/1-34 none
set port enable 3/1-34
set port level 3/1-34 normal
set port speed 3/1-32 auto
set port trap 3/1-34 disable
set port name 3/1-34
set port security 3/1-34 disable age 0 maximum 1 shutdown 0 unicast-flood enable violation shutdown
set port dot1x 3/1-34 port-control force-authorized
set port dot1x 3/1-34 multiple-host disable
set port dot1x 3/1-34 shutdown-timeout disable
set port dot1x 3/1-34 re-authentication disable
set port dot1x 3/1-34 guest-vlan none
set port membership 3/1-34 static
set port protocol 3/1-34 ip on
set port protocol 3/1-34 ipx auto
set port protocol 3/1-34 group auto
set port negotiation 3/33-34 enable
set port flowcontrol 3/33-34 send desired
set port flowcontrol 3/33-34 receive off
set port vtp enable 3/1-34
set cdp enable 3/1-34
set udld disable 3/1-32
set udld aggressive-mode disable 3/1-34
set trunk 3/1 auto dot1q 1-1005,1025-4094
set trunk 3/2 auto dot1q 1-1005,1025-4094
set trunk 3/3 auto dot1q 1-1005,1025-4094
set trunk 3/4 auto dot1q 1-1005,1025-4094
set trunk 3/5 auto dot1q 1-1005,1025-4094
set trunk 3/6 auto dot1q 1-1005,1025-4094
set trunk 3/7 auto dot1q 1-1005,1025-4094
set trunk 3/8 auto dot1q 1-1005,1025-4094
set trunk 3/9 auto dot1q 1-1005,1025-4094
set trunk 3/10 auto dot1q 1-1005,1025-4094
set trunk 3/11 auto dot1q 1-1005,1025-4094
set trunk 3/12 auto dot1q 1-1005,1025-4094
set trunk 3/13 auto dot1q 1-1005,1025-4094
set trunk 3/14 auto dot1q 1-1005,1025-4094
set trunk 3/15 auto dot1q 1-1005,1025-4094
set trunk 3/16 auto dot1q 1-1005,1025-4094
set trunk 3/17 auto dot1q 1-1005,1025-4094
set trunk 3/18 auto dot1q 1-1005,1025-4094
set trunk 3/19 auto dot1q 1-1005,1025-4094
set trunk 3/20 auto dot1q 1-1005,1025-4094
set trunk 3/21 auto dot1q 1-1005,1025-4094
set trunk 3/22 auto dot1q 1-1005,1025-4094
set trunk 3/23 auto dot1q 1-1005,1025-4094
set trunk 3/24 auto dot1q 1-1005,1025-4094
set trunk 3/25 auto dot1q 1-1005,1025-4094
set trunk 3/26 auto dot1q 1-1005,1025-4094
set trunk 3/27 auto dot1q 1-1005,1025-4094
set trunk 3/28 auto dot1q 1-1005,1025-4094
set trunk 3/29 auto dot1q 1-1005,1025-4094
set trunk 3/30 auto dot1q 1-1005,1025-4094
set trunk 3/31 auto dot1q 1-1005,1025-4094
set trunk 3/32 auto dot1q 1-1005,1025-4094
set trunk 3/33 auto dot1q 1-1005,1025-4094
set trunk 3/34 auto dot1q 1-1005,1025-4094
set spantree portfast 3/1-34 enable
set spantree bpdu-filter 3/1-34 default
set spantree bpdu-guard 3/1-34 default
set spantree mst link-type 3/1-34 auto
set spantree portpri 3/1-34 32 mst
set spantree portinstancepri 3/1 0 mst
set spantree portinstancepri 3/2 0 mst
set spantree portinstancepri 3/3 0 mst
set spantree portinstancepri 3/4 0 mst
set spantree portinstancepri 3/5 0 mst
set spantree portinstancepri 3/6 0 mst
set spantree portinstancepri 3/7 0 mst
set spantree portinstancepri 3/8 0 mst
set spantree portinstancepri 3/9 0 mst
set spantree portinstancepri 3/10 0 mst
set spantree portinstancepri 3/11 0 mst
set spantree portinstancepri 3/12 0 mst
set spantree portinstancepri 3/13 0 mst
set spantree portinstancepri 3/14 0 mst
set spantree portinstancepri 3/15 0 mst
set spantree portinstancepri 3/16 0 mst
set spantree portinstancepri 3/17 0 mst
set spantree portinstancepri 3/18 0 mst
set spantree portinstancepri 3/19 0 mst
set spantree portinstancepri 3/20 0 mst
set spantree portinstancepri 3/21 0 mst
set spantree portinstancepri 3/22 0 mst
set spantree portinstancepri 3/23 0 mst
set spantree portinstancepri 3/24 0 mst
set spantree portinstancepri 3/25 0 mst
set spantree portinstancepri 3/26 0 mst
set spantree portinstancepri 3/27 0 mst
set spantree portinstancepri 3/28 0 mst
set spantree portinstancepri 3/29 0 mst
set spantree portinstancepri 3/30 0 mst
set spantree portinstancepri 3/31 0 mst
set spantree portinstancepri 3/32 0 mst
set spantree portinstancepri 3/33 0 mst
set spantree portinstancepri 3/34 0 mst
set spantree portcost 3/33-34 20000 mst
set spantree portcost 3/1-3,3/5,3/8-9,3/11-22,3/24-32 2000000 mst
set spantree portcost 3/4,3/6-7,3/10,3/23 200000 mst
set spantree portinstancecost 3/1 cost 1999999 mst
set spantree portinstancecost 3/2 cost 1999999 mst
set spantree portinstancecost 3/3 cost 1999999 mst
set spantree portinstancecost 3/4 cost 199999 mst
set spantree portinstancecost 3/5 cost 1999999 mst
set spantree portinstancecost 3/6 cost 199999 mst
set spantree portinstancecost 3/7 cost 199999 mst
set spantree portinstancecost 3/8 cost 1999999 mst
set spantree portinstancecost 3/9 cost 1999999 mst
set spantree portinstancecost 3/10 cost 199999 mst
set spantree portinstancecost 3/11 cost 1999999 mst
set spantree portinstancecost 3/12 cost 1999999 mst
set spantree portinstancecost 3/13 cost 1999999 mst
set spantree portinstancecost 3/14 cost 1999999 mst
set spantree portinstancecost 3/15 cost 1999999 mst
set spantree portinstancecost 3/16 cost 1999999 mst
set spantree portinstancecost 3/17 cost 1999999 mst
set spantree portinstancecost 3/18 cost 1999999 mst
set spantree portinstancecost 3/19 cost 1999999 mst
set spantree portinstancecost 3/20 cost 1999999 mst
set spantree portinstancecost 3/21 cost 1999999 mst
set spantree portinstancecost 3/22 cost 1999999 mst
set spantree portinstancecost 3/23 cost 199999 mst
set spantree portinstancecost 3/24 cost 1999999 mst
set spantree portinstancecost 3/25 cost 1999999 mst
set spantree portinstancecost 3/26 cost 1999999 mst
set spantree portinstancecost 3/27 cost 1999999 mst
set spantree portinstancecost 3/28 cost 1999999 mst
set spantree portinstancecost 3/29 cost 1999999 mst
set spantree portinstancecost 3/30 cost 1999999 mst
set spantree portinstancecost 3/31 cost 1999999 mst
set spantree portinstancecost 3/32 cost 1999999 mst
set spantree portinstancecost 3/33 cost 19999 mst
set spantree portinstancecost 3/34 cost 19999 mst
set spantree portcost 3/4,3/6-7,3/10,3/23 19
set spantree portcost 3/1-3,3/5,3/8-9,3/11-22,3/24-32 100
set spantree portcost 3/33-34 4
set spantree portpri 3/1-34 32
set spantree portvlanpri 3/1 0
set spantree portvlanpri 3/2 0
set spantree portvlanpri 3/3 0
set spantree portvlanpri 3/4 0
set spantree portvlanpri 3/5 0
set spantree portvlanpri 3/6 0
set spantree portvlanpri 3/7 0
set spantree portvlanpri 3/8 0
set spantree portvlanpri 3/9 0
set spantree portvlanpri 3/10 0
set spantree portvlanpri 3/11 0
set spantree portvlanpri 3/12 0
set spantree portvlanpri 3/13 0
set spantree portvlanpri 3/14 0
set spantree portvlanpri 3/15 0
set spantree portvlanpri 3/16 0
set spantree portvlanpri 3/17 0
set spantree portvlanpri 3/18 0
set spantree portvlanpri 3/19 0
set spantree portvlanpri 3/20 0
set spantree portvlanpri 3/21 0
set spantree portvlanpri 3/22 0
set spantree portvlanpri 3/23 0
set spantree portvlanpri 3/24 0
set spantree portvlanpri 3/25 0
set spantree portvlanpri 3/26 0
set spantree portvlanpri 3/27 0
set spantree portvlanpri 3/28 0
set spantree portvlanpri 3/29 0
set spantree portvlanpri 3/30 0
set spantree portvlanpri 3/31 0
set spantree portvlanpri 3/32 0
set spantree portvlanpri 3/33 0
set spantree portvlanpri 3/34 0
set spantree portvlancost 3/1 cost 99
set spantree portvlancost 3/2 cost 99
set spantree portvlancost 3/3 cost 99
set spantree portvlancost 3/4 cost 18
set spantree portvlancost 3/5 cost 99
set spantree portvlancost 3/6 cost 18
set spantree portvlancost 3/7 cost 18
set spantree portvlancost 3/8 cost 99
set spantree portvlancost 3/9 cost 99
set spantree portvlancost 3/10 cost 18
set spantree portvlancost 3/11 cost 99
set spantree portvlancost 3/12 cost 99
set spantree portvlancost 3/13 cost 99
set spantree portvlancost 3/14 cost 99
set spantree portvlancost 3/15 cost 99
set spantree portvlancost 3/16 cost 99
set spantree portvlancost 3/17 cost 99
set spantree portvlancost 3/18 cost 99
set spantree portvlancost 3/19 cost 99
set spantree portvlancost 3/20 cost 99
set spantree portvlancost 3/21 cost 99
set spantree portvlancost 3/22 cost 99
set spantree portvlancost 3/23 cost 18
set spantree portvlancost 3/24 cost 99
set spantree portvlancost 3/25 cost 99
set spantree portvlancost 3/26 cost 99
set spantree portvlancost 3/27 cost 99
set spantree portvlancost 3/28 cost 99
set spantree portvlancost 3/29 cost 99
set spantree portvlancost 3/30 cost 99
set spantree portvlancost 3/31 cost 99
set spantree portvlancost 3/32 cost 99
set spantree portvlancost 3/33 cost 3
set spantree portvlancost 3/34 cost 3
set spantree guard default 3/1-34
set port gvrp 3/1-34 disable
set gvrp registration normal 3/1-34
set gvrp applicant normal 3/1-34
set port gmrp 3/1-34 enable
set gmrp registration normal 3/1-34
set gmrp fwdall disable 3/1-34
set port debounce 3/1 disable
set port debounce 3/2 disable
set port debounce 3/3 disable
set port debounce 3/4 disable
set port debounce 3/5 disable
set port debounce 3/6 disable
set port debounce 3/7 disable
set port debounce 3/8 disable
set port debounce 3/9 disable
set port debounce 3/10 disable
set port debounce 3/11 disable
set port debounce 3/12 disable
set port debounce 3/13 disable
set port debounce 3/14 disable
set port debounce 3/15 disable
set port debounce 3/16 disable
set port debounce 3/17 disable
set port debounce 3/18 disable
set port debounce 3/19 disable
set port debounce 3/20 disable
set port debounce 3/21 disable
set port debounce 3/22 disable
set port debounce 3/23 disable
set port debounce 3/24 disable
set port debounce 3/25 disable
set port debounce 3/26 disable
set port debounce 3/27 disable
set port debounce 3/28 disable
set port debounce 3/29 disable
set port debounce 3/30 disable
set port debounce 3/31 disable
set port debounce 3/32 disable
set port debounce 3/33 disable
set port debounce 3/33 delay 0
set port debounce 3/34 disable
set port debounce 3/34 delay 0
set port unicast-flood 3/1-34 enable
set port errdisable-timeout 3/1-34 enable
set port idledetect 3/1 disable
set port idledetect 3/2 disable
set port idledetect 3/3 disable
set port idledetect 3/4 disable
set port idledetect 3/5 disable
set port idledetect 3/6 disable
set port idledetect 3/7 disable
set port idledetect 3/8 disable
set port idledetect 3/9 disable
set port idledetect 3/10 disable
set port idledetect 3/11 disable
set port idledetect 3/12 disable
set port idledetect 3/13 disable
set port idledetect 3/14 disable
set port idledetect 3/15 disable
set port idledetect 3/16 disable
set port idledetect 3/17 disable
set port idledetect 3/18 disable
set port idledetect 3/19 disable
set port idledetect 3/20 disable
set port idledetect 3/21 disable
set port idledetect 3/22 disable
set port idledetect 3/23 disable
set port idledetect 3/24 disable
set port idledetect 3/25 disable
set port idledetect 3/26 disable
set port idledetect 3/27 disable
set port idledetect 3/28 disable
set port idledetect 3/29 disable
set port idledetect 3/30 disable
set port idledetect 3/31 disable
set port idledetect 3/32 disable
set cam notification added disable 3/1-34
set cam notification removed disable 3/1-34
set port channel 3/1-34 mode auto silent
!
#switch port analyzer
!
#cam
set cam agingtime 1,100 300
set cam notification disable
set cam notification interval 1
set cam notification historysize 1
!
#gvrp
set gvrp dynamic-vlan-creation disable
set gvrp disable
!
#authorization
set authorization exec disable console
set authorization exec disable telnet
set authorization enable disable console
set authorization enable disable telnet
set authorization commands disable console
set authorization commands disable telnet
end
8-hostel> (enable)
а что есть самобальные IOS ?)))
есть китайские IOSы например, сгореть вся не сгорит, но порт-два - можетparadox писал(а):а что есть самобальные IOS ?)))
никада не слышал...
а насчет попасть
тоже непомю что бы из за кривого иоса циска сгорела))
а насчет дыр...а что есть самобальные IOS ?)))
через sh mem dead можно увидеть их...кстати довольно частое явление - непонятные ребуты, особенно у c296*когда на определенных пиках нагрузки каталист падал
с сообщением которое находилось токо один раз в гугле)) (уже не помню)
Код: Выделить всё
set vlan 100 name VirusUsers type ethernet mtu 1500 said 100100 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active bridge 0x0 stp ieee
set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bridge 0xf stp ibm
set vlan 1
set vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active parent 1005 ring 0xccc mode srb aremaxhop 7 stemaxhop 7 backupcrf off
!
#dot1q-all-tagged
set dot1q-all-tagged disable
!
#ip
set feature mdg enable
set feature psync-recovery no-powerdown
set interface sc0 1 192.168.0.8/255.255.255.0 192.168.0.255
set interface sc0 up
set interface trap sc0 disable
set interface sl0 0.0.0.0 0.0.0.0
set interface sl0 down
set interface trap sl0 disable
set interface me1 0.0.0.0 0.0.0.0 0.0.0.0
set interface me1 down
set interface trap me1 disable
set arp agingtime 1200
set ip redirect enable
set ip unreachable enable
set ip fragmentation enable
set ip route 0.0.0.0/0.0.0.0 192.168.0.1
set ip alias default 0.0.0.0
!
#command alias
!
#vmps
set vmps server retry 3
set vmps server reconfirminterval 60
set vmps downloadmethod tftp
set vmps downloadserver 0.0.0.0 vmps-config-database.1
set vmps state disable
!
#rcp
set rcp username
!
#dns
set ip dns disabl
Код: Выделить всё
set vlan
Код: Выделить всё
set vlan 100 2/46 2/47
Код: Выделить всё
no switchport mode access
Код: Выделить всё
no switchport access vlan 100
Код: Выделить всё
show ip interface brief
Код: Выделить всё
set ip dns enable
Код: Выделить всё
set logging level all
Код: Выделить всё
begin
!
# ***** NON-DEFAULT CONFIGURATION *****
!
!
#time: Thu Jul 31 2008, 11:56:55
!
#version 8.4(1)GLX
!
!
#system web interface version(s)
!
#dot1x
set feature dot1x-radius-keepalive disable
!
#frame distribution method
set port channel all distribution mac both
!
#vtp
set vtp domain test
set vtp mode client vlan
clear vtp pruneeligible 101-500,1001-1005
!
#ip
set interface sc0 1 192.168.0.6/255.255.255.0 192.168.0.255
set interface sl0 down
set interface me1 down
set ip alias default 0.0.0.0
!
#spantree
#vlan <VlanId>
set spantree priority 30000 1
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat4000-promupgrade.6-1-5.bin
set boot system flash bootflash:cat4000-k8.8-4-1-GLX.bin
set boot system flash bootflash:cat4000.6-3-5.bin
set boot system flash bootflash:
!
#port channel
set port channel 2/1-4 1
set port channel 2/5-8 2
set port channel 2/9-12 3
set port channel 2/13-16 4
set port channel 2/17-20 5
set port channel 2/21-24 6
!
#multicast filter
set igmp filter disable
!
#module 1 : 0-port Switching Supervisor
!
#module 2 : 50-port 10/100/1000 Ethernet
set vlan 100 2/10
set trunk 2/1 on dot1q 1-1005,1025-4094
set spantree portfast 2/2-24 enable
set port channel 2/2-24 mode off
end
Код: Выделить всё
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 00:02:b3:5d:74:48
inet 192.168.0.11 netmask 0xffffff00 broadcast 192.168.0.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=b<RXCSUM,TXCSUM,VLAN_MTU>
ether 00:03:47:42:8a:83
media: Ethernet autoselect (none)
status: no carrier
rl0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 00:e0:4c:8a:53:8c
media: Ethernet autoselect
status: no carrier
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
vlan100: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 00:02:b3:5d:74:48
inet 192.168.1.11 netmask 0xffffff00 broadcast 192.168.1.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vlan: 100 parent interface: fxp0
Код: Выделить всё
ipfw add 301 pass all from any to me via vlan100
ipfw add 301 pass all from me to any via vlan100
Эта ИОС хочет минимум 128Мб DRAMparadox писал(а):хе
то что можно утянуть с рапиды
щас есть токо http://rapidshare.com/files/130707508/c ... 44.SE2.tar
выше пока ничего нет
Код: Выделить всё
> ifconfig
rl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 00:e0:4c:27:60:27
inet 10.24.0.1 netmask 0xffffff00 broadcast 10.24.0.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 00:30:05:38:8e:db
inet xxx.xxx.xxx.xxx netmask 0xfffffffc broadcast 195.177.107.115
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
vlan100: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 00:e0:4c:27:60:27
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vlan: 100 parent interface: rl0
vlan200: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 00:e0:4c:27:60:27
inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vlan: 200 parent interface: rl0
bridge0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 8a:ca:17:fb:1e:67
id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
maxage 20 holdcnt 6 proto rstp maxaddr 100 timeout 1200
root id 00:00:00:00:00:00 priority 0 ifcost 0 port 0
member: vlan200 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
member: vlan100 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
Код: Выделить всё
interface FastEthernet0/1
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,100,200
switchport mode trunk
no ip address
no cdp enable
!
interface FastEthernet0/2
switchport access vlan 100
switchport mode access
no ip address
no cdp enable
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 200
switchport mode access
no ip address
no cdp enable
spanning-tree portfast
!
Код: Выделить всё
tcpdump -npe rl0
Код: Выделить всё
16:44:11.728024 00:00:e2:58:a8:90 > 00:e0:4c:27:60:27, ethertype 802.1Q (0x8100), length 78: vlan 100, p 0, ethertype IPv4, 192.168.0.2 > 192.168.0.1: ICMP echo request, id 512, seq 30209, length 40
16:44:11.728052 00:e0:4c:27:60:27 > 00:00:e2:58:a8:90, ethertype 802.1Q (0x8100), length 78: vlan 200, p 0, ethertype IPv4, 192.168.0.1 > 192.168.0.2: ICMP echo reply, id 512, seq 30209, length 40
Код: Выделить всё
01:00:54: %SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 100 on FastEthernet0/1 VLAN200.
01:00:54: %SPANTREE-2-BLOCK_PVID_PEER: Blocking FastEthernet0/1 on VLAN0100. Inconsistent peer vlan.
01:00:54: %SPANTREE-2-BLOCK_PVID_LOCAL: Blocking FastEthernet0/1 on VLAN0200. Inconsistent local vlan.
мега принципиально, нужно в кольцо брать.(или гирлянда цисок -- это не принципиально).
Код: Выделить всё
mac access-list extended
Код: Выделить всё
mac-address-table static xx.xx.xx.xx.xx.xx vlan 100 1001 permit