forum.lissyara.su

Добавлено: **2008-07-30 17:53:40**

поставьте себе IOS

если найдёте....а вообще, стоит глянуть все конфиги

sh run

и будем колдовать....

Добавлено: **2008-07-30 18:00:07**

хм, а что это даст? и чем отличается ИОС от того, что у меня?
и ещё, может если есть для 2980G -- поделитесь?

Добавлено: **2008-07-30 18:02:22**

Код: Выделить всё

8-hostel> (enable) show run
Ambiguous command "show run".  Use 'show help' for more info.
8-hostel> (enable) show ?
  accounting                 Show accounting information
  alias                      Show aliases for commands
  arp                        Show ARP table
  authentication             Show authentication information
  authorization              Show authorization information
  banner                     Show system banner
  boot                       Show booting environment variables
  cam                        Show CAM table
  cdp                        Show Cisco Discovery Protocol Information
  cgmp                       Show CGMP info
  channel                    Show channel information
  channelprotocol            Show channel protocol by module
  config                     Show system configuration
  counters                   Show port counters
  dot1q-all-tagged           Show dot1q tag status
  dot1x                      Show dot1x port capability & version
  dvlan                      Show dynamic vlan statistics
  environment                Show environment information
  errdisable-timeout         Show err-disable timeout config
  errordetection             Show errordetection settings
  file                       Show contents of file
  flash                      Show file information on flash device
  garp                       Show GARP information
  gmrp                       Show GMRP information
  gmttime                    Show GMT time
  gvrp                       Show GVRP information
  igmp                       Show IGMP filter information
  imagemib                   Show image mib information
  inlinepower                Show inlinepower information
  interface                  Show network interfaces
  ip                         Show IP Information
  kerberos                   Show kerberos configuration information
  lacp-channel               Show LACP channel information
  localuser                  Show localusers
  log                        Show log information
  logging                    Show system logging information
  mac                        Show MAC information
  mls                        Show multilayer switching information
  module                     Show module info
  multicast                  Show multicast information
  netstat                    Show network statistics
  ntp                        Show ntp statistics
  port                       Show port information
  proc                       Show cpu and processes utilization
  protocolfilter             Show protocolfilter information
  pvlan                      Show Private Vlan Information
  qos                        Show QOS information
  radius                     Show RADIUS information
  rcp                        Show rcp information
  reset                      Show schedule reset information
  rspan                      Show remote switch port analyzer information
  running-config             Show system runtime configuration
  runtimediagnostics         Show runtime diagnostics status
  snmp                       Show SNMP information
  span                       Show switch port analyzer information
  spantree                   Show spantree information
  startup-config             Show system startup configuration
  summertime                 Show state of summertime information
  switchacceleration         Show switch acceleration status
  system                     Show system information
  tacacs                     Show TACACS information
  tech-support               Show system information for Tech-Support
  test                       Show results of diagnostic tests
  time                       Show time of day
  timezone                   Show the current timezone offset
  top                        Show TopN report
  traffic                    Show Traffic information
  trunk                      Show trunk ports
  udld                       Show Uni-directional Link Detection information
  users                      Show active Admin sessions
  version                    Show version information
  vlan                       Show Virtual LAN information
  vmps                       Show VMPS information
  vtp                        Show VTP Information

Добавлено: **2008-07-30 18:06:39**

Inzevision писал(а):хм, а что это даст? и чем отличается ИОС от того, что у меня?
и ещё, может если есть для 2980G -- поделитесь?

Вы прикалываетесь чтоли?

IOS- тру, у меня только под 2970 есть....12.2

Давайте сюда скорей

Код: Выделить всё

sh running-config all

p.s. У Вас CCNA есть? Если нет, то где Вы добыли 4 таких модных кошки?

Добавлено: **2008-07-30 18:18:33**

Ну у меня их больше, стоит пока 4. Купил на e-bay. Прошивку подогнали на opennet.ru. Инфы очень много ->

Код: Выделить всё

8-hostel> (enable) sh running-config all
.................
............................
.............................
.............................
..

begin
!
# ***** ALL (DEFAULT and NON-DEFAULT) CONFIGURATION *****
!
!
#time: Wed Jul 30 2008, 18:11:25
!
#version 8.4(11)GLX
!
!
#system web interface version(s)
set password ===
set enablepass ===
set prompt Console>
set length 24 default
set logout 20
set config mode binary
set banner motd ^C^C
!
#test
set test diaglevel complete
!
#dot1x
set dot1x system-auth-control enable
set dot1x quiet-period 60
set dot1x tx-period 30
set dot1x shutdown-timeout 300
set dot1x supp-timeout 30
set dot1x server-timeout 30
set dot1x max-req 2
set dot1x re-authperiod 3600
set feature dot1x-radius-keepalive disable
!
#errordetection
set errordetection inband disable
set errordetection memory disable
!
#system
set system baud  9600
set system modem disable
set system name  8-hostel
set system location
set system contact
set system countrycode
set traffic monitor 100
set feature log-command enable
set feature loop-detect enable
!
#power
set power budget 1
!
#Inlinepower
set inlinepower defaultallocation 6000
!
#frame distribution method
set port channel all distribution mac both
!
#mac address reduction
set spantree macreduction disable
!
#default portcost mode
set spantree defaultcostmode short
!
#snmp
set snmp community read-only      public
set snmp community read-write     private
set snmp community read-write-all secret
set snmp rmon disable
set snmp rmonmemory 85
set snmp enable
set snmp trap disable module
set snmp trap disable chassis
set snmp trap disable bridge
set snmp trap disable vtp
set snmp trap disable vlancreate
set snmp trap disable vlandelete
set snmp trap disable auth
set snmp trap disable entityfru
set snmp trap disable ippermit
set snmp chassis-alias
set snmp buffer 40
set snmp trap disable vmps
set snmp trap disable entity
set snmp trap disable config
set snmp trap disable stpx
set snmp trap disable syslog
set snmp trap disable system
set snmp trap disable envfan
set snmp trap disable envpower
set snmp trap disable envtemp
set snmp trap disable envstate
set snmp trap disable macnotification
!
#tacacs+
set tacacs attempts 3
set tacacs directedrequest disable
set tacacs timeout 5
!
#radius
set radius deadtime 0
set radius timeout 5
set radius retransmit 2
set radius attribute framed-ip-address include-in-access-req disable
!
#kerberos
!
#authentication
set authentication login tacacs disable console
set authentication login tacacs disable telnet
set authentication login tacacs disable http
set authentication enable tacacs disable console
set authentication enable tacacs disable telnet
set authentication enable tacacs disable http
set authentication login radius disable console
set authentication login radius disable telnet
set authentication login radius disable http
set authentication enable radius disable console
set authentication enable radius disable telnet
set authentication enable radius disable http
set authentication login local enable console
set authentication login local enable telnet
set authentication login local enable http
set authentication enable local enable console
set authentication enable local enable telnet
set authentication enable local enable http
set authentication login kerberos disable console
set authentication login kerberos disable telnet
set authentication login kerberos disable http
set authentication enable kerberos disable console
set authentication enable kerberos disable telnet
set authentication enable kerberos disable http
set authentication login attempt 3 console
set authentication login attempt 3 telnet
set authentication login lockout 0 console
set authentication login lockout 0 telnet
set authentication enable attempt 3 console
set authentication enable attempt 3 telnet
set authentication enable lockout 0 console
set authentication enable lockout 0 telnet
!
#Local User
set localuser authentication disable
!
#stp mode
set spantree mode pvst+
!
#vtp
set vtp domain 8-hostel
set vtp mode transparent unknown
set vtp mode server vlan
set vtp version 2
set vtp pruning disable
set vtp pruneeligible 2-1000
clear vtp pruneeligible 1001-1005
set vlan 100 name VirusUsers type ethernet mtu 1500 said 100100 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active bridge 0x0 stp ieee
set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bridge 0xf stp ibm
set vlan 1
set vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active parent 1005 ring 0xccc mode srb aremaxhop 7 stemaxhop 7 backupcrf off
!
#dot1q-all-tagged
set dot1q-all-tagged disable
!
#ip
set feature mdg enable
set feature psync-recovery no-powerdown
set interface sc0 1 192.168.0.8/255.255.255.0 192.168.0.255

set interface sc0 up
set interface trap sc0 disable
set interface sl0 0.0.0.0 0.0.0.0
set interface sl0 down
set interface trap sl0 disable
set interface me1 0.0.0.0 0.0.0.0 0.0.0.0

set interface me1 down
set interface trap me1 disable
set arp agingtime 1200
set ip redirect   enable
set ip unreachable   enable
set ip fragmentation enable
set ip route 0.0.0.0/0.0.0.0         192.168.0.1
set ip alias default         0.0.0.0
!
#command alias
!
#vmps
set vmps server retry 3
set vmps server reconfirminterval 60
set vmps downloadmethod tftp
set vmps downloadserver 0.0.0.0 vmps-config-database.1
set vmps state disable

!
#rcp
set rcp username
!
#dns
set ip dns disable
!
#spantree
#spantree global defaults
set spantree global-default portfast disable
set spantree global-default loop-guard disable
#portfast
set spantree global-default bpdu-guard disable
set spantree global-default bpdu-filter disable
#bpdu-skewing
set spantree bpdu-skewing disable

#MST (IEEE 802.1s)
set spantree fwddelay 15 mst
set spantree hello 2  mst
set spantree maxage 20 mst
set spantree mst maxhops 20
set spantree priority 32768 mst
set spantree priority 32768 mst 1
set spantree priority 32768 mst 2
set spantree priority 32768 mst 3
set spantree priority 32768 mst 4
set spantree priority 32768 mst 5
set spantree priority 32768 mst 6
set spantree priority 32768 mst 7
set spantree priority 32768 mst 8
set spantree priority 32768 mst 9
set spantree priority 32768 mst 10
set spantree priority 32768 mst 11
set spantree priority 32768 mst 12
set spantree priority 32768 mst 13
set spantree priority 32768 mst 14
set spantree priority 32768 mst 15

#MST Configuration
set spantree mst config rollback force
set spantree mst config name  revision 0
set spantree mst 0 vlan 1-4094
set spantree mst config commit

#uplinkfast groups
set spantree uplinkfast disable
#backbonefast
set spantree backbonefast disable
#vlan                         <VlanId>
set spantree priority 8192   1
set spantree priority 8192   100
#vlan(defaults)
set spantree enable  1,100
set spantree fwddelay 15     1,100
set spantree hello    2      1,100
set spantree maxage   20     1,100
!
#cgmp
set cgmp disable
set cgmp leave disable
set cgmp fastleave disable
!
#syslog
set logging console enable
set logging telnet enable
set logging server disable
set logging level cdp 4 default
set logging level mcast 2 default
set logging level dtp 5 default
set logging level dvlan 2 default
set logging level earl 2 default
set logging level ip 3 default
set logging level pruning 2 default
set logging level snmp 2 default
set logging level spantree 2 default
set logging level sys 5 default
set logging level tac 2 default
set logging level tcp 2 default
set logging level telnet 2 default
set logging level tftp 2 default
set logging level vtp 2 default
set logging level vmps 2 default
set logging level kernel 2 default
set logging level filesys 2 default
set logging level mgmt 5 default
set logging level mls 5 default
set logging level protfilt 2 default
set logging level security 2 default
set logging level radius 2 default
set logging level udld 4 default
set logging level gvrp 2 default
set logging level qos 3 default
set logging level ethc 2 default
set logging level inlinepower 2 default
set logging server facility LOCAL7
set logging server severity 4
set logging timestamp enable
set logging buffer 500
set logging history 1
set logging history severity 4
!
#ntp
set ntp broadcastclient disable
set ntp broadcastdelay 3000
set ntp client disable
set ntp authentication disable
clear timezone
set summertime disable
set summertime recurring
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat4000-k8.8-4-11-GLX.bin
!
#permit list
set ip permit disable telnet
set ip permit disable ssh
set ip permit disable snmp
!
#permanent arp entries
!
#protocolfilter
set protocolfilter disable
!
#standby ports
set standbyports disable
!
#vlan mapping
!
#gmrp
set gmrp disable
!
#garp
set garp timer all 200 600 10000
!
#cdp
set cdp interval 60
set cdp holdtime 180
set cdp enable
set cdp version v2
set cdp format device-id other
!
#qos
set qos disable
set qos defaultcos 0
set qos map 2q1t 1 1 cos 0-1
set qos map 2q1t 1 1 cos 2-3
set qos map 2q1t 1 1 cos 4-5
set qos map 2q1t 1 1 cos 6-7
!
#udld
set udld disable
set udld interval 15
!
#LACP channel
set lacp-channel system-priority 32768
!
#channelprotocol
set channelprotocol pagp 2
set channelprotocol pagp 3
!
#port channel
set port channel 2/1-4 64
set port channel 2/5-8 65
set port channel 2/9-12 66
set port channel 2/13-16 67
set port channel 2/17-20 68
set port channel 2/21-24 69
set port channel 2/25-28 70
set port channel 2/29-32 71
set port channel 2/33-36 72
set port channel 2/37-40 73
set port channel 2/41-44 74
set port channel 2/45-48 75
set port channel 3/1-4 76
set port channel 3/5-8 77
set port channel 3/9-12 78
set port channel 3/13-16 79
set port channel 3/17-20 80
set port channel 3/21-24 81
set port channel 3/25-28 82
set port channel 3/29-32 83
set port channel 3/33-34 84
!
#accounting
set accounting exec disable
set accounting connect disable
set accounting system disable
set accounting commands disable
set accounting suppress null-username disable
set accounting update new-info
!
#errdisable timeout
set errdisable-timeout disable other
set errdisable-timeout disable udld
set errdisable-timeout disable bpdu-guard
set errdisable-timeout disable channel-misconfig
set errdisable-timeout disable nostatic-power
set errdisable-timeout interval 300
!
#http configuration
set ip http server disable
set ip http port 80
!
#private vlans
!
#crypto key
!
#multicast filter
set igmp filter disable
!
#module 1 : 0-port Switching Supervisor
set module name    1
!
#module 2 : 48-port 10/100BaseTx Ethernet
set module name    2
set module enable  2
set vlan 1    2/1-48
set port auxiliaryvlan 2/1-48 none
set port enable     2/1-48
set port level      2/1-48  normal
set port speed      2/1-48  auto
set port trap       2/1-48  disable
set port name       2/47 link_out
set port name       2/48 link_in
set port name       2/1-46
set port security 2/1-48 disable age 0 maximum 1 shutdown 0 unicast-flood enable violation shutdown
set port dot1x 2/1-48 port-control force-authorized
set port dot1x 2/1-48 multiple-host disable
set port dot1x 2/1-48 shutdown-timeout disable
set port dot1x 2/1-48 re-authentication disable
set port dot1x 2/1-48 guest-vlan none
set port membership 2/1-48  static
set port protocol 2/1-48 ip on
set port protocol 2/1-48 ipx auto
set port protocol 2/1-48 group auto
set port vtp enable   2/1-48
set cdp enable   2/1-48
set udld disable 2/1-48
set udld aggressive-mode disable 2/1-48
set trunk 2/1  auto dot1q 1-1005,1025-4094
set trunk 2/2  auto dot1q 1-1005,1025-4094
set trunk 2/3  auto dot1q 1-1005,1025-4094
set trunk 2/4  auto dot1q 1-1005,1025-4094
set trunk 2/5  auto dot1q 1-1005,1025-4094
set trunk 2/6  auto dot1q 1-1005,1025-4094
set trunk 2/7  auto dot1q 1-1005,1025-4094
set trunk 2/8  auto dot1q 1-1005,1025-4094
set trunk 2/9  auto dot1q 1-1005,1025-4094
set trunk 2/10 auto dot1q 1-1005,1025-4094
set trunk 2/11 auto dot1q 1-1005,1025-4094
set trunk 2/12 auto dot1q 1-1005,1025-4094
set trunk 2/13 auto dot1q 1-1005,1025-4094
set trunk 2/14 auto dot1q 1-1005,1025-4094
set trunk 2/15 auto dot1q 1-1005,1025-4094
set trunk 2/16 auto dot1q 1-1005,1025-4094
set trunk 2/17 auto dot1q 1-1005,1025-4094
set trunk 2/18 auto dot1q 1-1005,1025-4094
set trunk 2/19 auto dot1q 1-1005,1025-4094
set trunk 2/20 auto dot1q 1-1005,1025-4094
set trunk 2/21 auto dot1q 1-1005,1025-4094
set trunk 2/22 auto dot1q 1-1005,1025-4094
set trunk 2/23 auto dot1q 1-1005,1025-4094
set trunk 2/24 auto dot1q 1-1005,1025-4094
set trunk 2/25 auto dot1q 1-1005,1025-4094
set trunk 2/26 auto dot1q 1-1005,1025-4094
set trunk 2/27 auto dot1q 1-1005,1025-4094
set trunk 2/28 auto dot1q 1-1005,1025-4094
set trunk 2/29 auto dot1q 1-1005,1025-4094
set trunk 2/30 auto dot1q 1-1005,1025-4094
set trunk 2/31 auto dot1q 1-1005,1025-4094
set trunk 2/32 auto dot1q 1-1005,1025-4094
set trunk 2/33 auto dot1q 1-1005,1025-4094
set trunk 2/34 auto dot1q 1-1005,1025-4094
set trunk 2/35 auto dot1q 1-1005,1025-4094
set trunk 2/36 auto dot1q 1-1005,1025-4094
set trunk 2/37 auto dot1q 1-1005,1025-4094
set trunk 2/38 auto dot1q 1-1005,1025-4094
set trunk 2/39 auto dot1q 1-1005,1025-4094
set trunk 2/40 auto dot1q 1-1005,1025-4094
set trunk 2/41 auto dot1q 1-1005,1025-4094
set trunk 2/42 auto dot1q 1-1005,1025-4094
set trunk 2/43 auto dot1q 1-1005,1025-4094
set trunk 2/44 auto dot1q 1-1005,1025-4094
set trunk 2/45 auto dot1q 1-1005,1025-4094
set trunk 2/46 auto dot1q 1-1005,1025-4094
set trunk 2/47 on dot1q 1-1005,1025-4094
set trunk 2/48 on dot1q 1-1005,1025-4094
set spantree portfast    2/1-48 enable
set spantree bpdu-filter 2/1-48 default
set spantree bpdu-guard 2/1-48 default
set spantree mst link-type 2/1-48 auto
set spantree portpri     2/1-48  32 mst
set spantree portinstancepri 2/1  0 mst
set spantree portinstancepri 2/2  0 mst
set spantree portinstancepri 2/3  0 mst
set spantree portinstancepri 2/4  0 mst
set spantree portinstancepri 2/5  0 mst
set spantree portinstancepri 2/6  0 mst
set spantree portinstancepri 2/7  0 mst
set spantree portinstancepri 2/8  0 mst
set spantree portinstancepri 2/9  0 mst
set spantree portinstancepri 2/10 0 mst
set spantree portinstancepri 2/11 0 mst
set spantree portinstancepri 2/12 0 mst
set spantree portinstancepri 2/13 0 mst
set spantree portinstancepri 2/14 0 mst
set spantree portinstancepri 2/15 0 mst
set spantree portinstancepri 2/16 0 mst
set spantree portinstancepri 2/17 0 mst
set spantree portinstancepri 2/18 0 mst
set spantree portinstancepri 2/19 0 mst
set spantree portinstancepri 2/20 0 mst
set spantree portinstancepri 2/21 0 mst
set spantree portinstancepri 2/22 0 mst
set spantree portinstancepri 2/23 0 mst
set spantree portinstancepri 2/24 0 mst
set spantree portinstancepri 2/25 0 mst
set spantree portinstancepri 2/26 0 mst
set spantree portinstancepri 2/27 0 mst
set spantree portinstancepri 2/28 0 mst
set spantree portinstancepri 2/29 0 mst
set spantree portinstancepri 2/30 0 mst
set spantree portinstancepri 2/31 0 mst
set spantree portinstancepri 2/32 0 mst
set spantree portinstancepri 2/33 0 mst
set spantree portinstancepri 2/34 0 mst
set spantree portinstancepri 2/35 0 mst
set spantree portinstancepri 2/36 0 mst
set spantree portinstancepri 2/37 0 mst
set spantree portinstancepri 2/38 0 mst
set spantree portinstancepri 2/39 0 mst
set spantree portinstancepri 2/40 0 mst
set spantree portinstancepri 2/41 0 mst
set spantree portinstancepri 2/42 0 mst
set spantree portinstancepri 2/43 0 mst
set spantree portinstancepri 2/44 0 mst
set spantree portinstancepri 2/45 0 mst
set spantree portinstancepri 2/46 0 mst
set spantree portinstancepri 2/47 0 mst
set spantree portinstancepri 2/48 0 mst
set spantree portcost    2/1,2/4-5,2/10,2/34,2/36-37,2/39,2/47-48  200000 mst
set spantree portcost    2/2-3,2/6-9,2/11-33,2/35,2/38,2/40-46  2000000 mst
set spantree portinstancecost 2/1  cost 199999 mst
set spantree portinstancecost 2/2  cost 1999999 mst
set spantree portinstancecost 2/3  cost 1999999 mst
set spantree portinstancecost 2/4  cost 199999 mst
set spantree portinstancecost 2/5  cost 199999 mst
set spantree portinstancecost 2/6  cost 1999999 mst
set spantree portinstancecost 2/7  cost 1999999 mst
set spantree portinstancecost 2/8  cost 1999999 mst
set spantree portinstancecost 2/9  cost 1999999 mst
set spantree portinstancecost 2/10 cost 199999 mst
set spantree portinstancecost 2/11 cost 1999999 mst
set spantree portinstancecost 2/12 cost 1999999 mst
set spantree portinstancecost 2/13 cost 1999999 mst
set spantree portinstancecost 2/14 cost 1999999 mst
set spantree portinstancecost 2/15 cost 1999999 mst
set spantree portinstancecost 2/16 cost 1999999 mst
set spantree portinstancecost 2/17 cost 1999999 mst
set spantree portinstancecost 2/18 cost 1999999 mst
set spantree portinstancecost 2/19 cost 1999999 mst
set spantree portinstancecost 2/20 cost 1999999 mst
set spantree portinstancecost 2/21 cost 1999999 mst
set spantree portinstancecost 2/22 cost 1999999 mst
set spantree portinstancecost 2/23 cost 1999999 mst
set spantree portinstancecost 2/24 cost 1999999 mst
set spantree portinstancecost 2/25 cost 1999999 mst
set spantree portinstancecost 2/26 cost 1999999 mst
set spantree portinstancecost 2/27 cost 1999999 mst
set spantree portinstancecost 2/28 cost 1999999 mst
set spantree portinstancecost 2/29 cost 1999999 mst
set spantree portinstancecost 2/30 cost 1999999 mst
set spantree portinstancecost 2/31 cost 1999999 mst
set spantree portinstancecost 2/32 cost 1999999 mst
set spantree portinstancecost 2/33 cost 1999999 mst
set spantree portinstancecost 2/34 cost 199999 mst
set spantree portinstancecost 2/35 cost 1999999 mst
set spantree portinstancecost 2/36 cost 199999 mst
set spantree portinstancecost 2/37 cost 199999 mst
set spantree portinstancecost 2/38 cost 1999999 mst
set spantree portinstancecost 2/39 cost 199999 mst
set spantree portinstancecost 2/40 cost 1999999 mst
set spantree portinstancecost 2/41 cost 1999999 mst
set spantree portinstancecost 2/42 cost 1999999 mst
set spantree portinstancecost 2/43 cost 1999999 mst
set spantree portinstancecost 2/44 cost 1999999 mst
set spantree portinstancecost 2/45 cost 1999999 mst
set spantree portinstancecost 2/46 cost 1999999 mst
set spantree portinstancecost 2/47 cost 199999 mst
set spantree portinstancecost 2/48 cost 199999 mst
set spantree portcost    2/1,2/4-5,2/10,2/34,2/36-37,2/39  19
set spantree portcost    2/2-3,2/6-9,2/11-33,2/35,2/38,2/40-46  100
set spantree portcost    2/47-48  12
set spantree portpri     2/1-46  32
set spantree portpri     2/47-48  16
set spantree portvlanpri 2/1  0
set spantree portvlanpri 2/2  0
set spantree portvlanpri 2/3  0
set spantree portvlanpri 2/4  0
set spantree portvlanpri 2/5  0
set spantree portvlanpri 2/6  0
set spantree portvlanpri 2/7  0
set spantree portvlanpri 2/8  0
set spantree portvlanpri 2/9  0
set spantree portvlanpri 2/10 0
set spantree portvlanpri 2/11 0
set spantree portvlanpri 2/12 0
set spantree portvlanpri 2/13 0
set spantree portvlanpri 2/14 0
set spantree portvlanpri 2/15 0
set spantree portvlanpri 2/16 0
set spantree portvlanpri 2/17 0
set spantree portvlanpri 2/18 0
set spantree portvlanpri 2/19 0
set spantree portvlanpri 2/20 0
set spantree portvlanpri 2/21 0
set spantree portvlanpri 2/22 0
set spantree portvlanpri 2/23 0
set spantree portvlanpri 2/24 0
set spantree portvlanpri 2/25 0
set spantree portvlanpri 2/26 0
set spantree portvlanpri 2/27 0
set spantree portvlanpri 2/28 0
set spantree portvlanpri 2/29 0
set spantree portvlanpri 2/30 0
set spantree portvlanpri 2/31 0
set spantree portvlanpri 2/32 0
set spantree portvlanpri 2/33 0
set spantree portvlanpri 2/34 0
set spantree portvlanpri 2/35 0
set spantree portvlanpri 2/36 0
set spantree portvlanpri 2/37 0
set spantree portvlanpri 2/38 0
set spantree portvlanpri 2/39 0
set spantree portvlanpri 2/40 0
set spantree portvlanpri 2/41 0
set spantree portvlanpri 2/42 0
set spantree portvlanpri 2/43 0
set spantree portvlanpri 2/44 0
set spantree portvlanpri 2/45 0
set spantree portvlanpri 2/46 0
set spantree portvlanpri 2/47 0
set spantree portvlanpri 2/48 0
set spantree portvlancost 2/1  cost 18
set spantree portvlancost 2/2  cost 99
set spantree portvlancost 2/3  cost 99
set spantree portvlancost 2/4  cost 18
set spantree portvlancost 2/5  cost 18
set spantree portvlancost 2/6  cost 99
set spantree portvlancost 2/7  cost 99
set spantree portvlancost 2/8  cost 99
set spantree portvlancost 2/9  cost 99
set spantree portvlancost 2/10 cost 18
set spantree portvlancost 2/11 cost 99
set spantree portvlancost 2/12 cost 99
set spantree portvlancost 2/13 cost 99
set spantree portvlancost 2/14 cost 99
set spantree portvlancost 2/15 cost 99
set spantree portvlancost 2/16 cost 99
set spantree portvlancost 2/17 cost 99
set spantree portvlancost 2/18 cost 99
set spantree portvlancost 2/19 cost 99
set spantree portvlancost 2/20 cost 99
set spantree portvlancost 2/21 cost 99
set spantree portvlancost 2/22 cost 99
set spantree portvlancost 2/23 cost 99
set spantree portvlancost 2/24 cost 99
set spantree portvlancost 2/25 cost 99
set spantree portvlancost 2/26 cost 99
set spantree portvlancost 2/27 cost 99
set spantree portvlancost 2/28 cost 99
set spantree portvlancost 2/29 cost 99
set spantree portvlancost 2/30 cost 99
set spantree portvlancost 2/31 cost 99
set spantree portvlancost 2/32 cost 99
set spantree portvlancost 2/33 cost 99
set spantree portvlancost 2/34 cost 18
set spantree portvlancost 2/35 cost 99
set spantree portvlancost 2/36 cost 18
set spantree portvlancost 2/37 cost 18
set spantree portvlancost 2/38 cost 99
set spantree portvlancost 2/39 cost 18
set spantree portvlancost 2/40 cost 99
set spantree portvlancost 2/41 cost 99
set spantree portvlancost 2/42 cost 99
set spantree portvlancost 2/43 cost 99
set spantree portvlancost 2/44 cost 99
set spantree portvlancost 2/45 cost 99
set spantree portvlancost 2/46 cost 99
set spantree portvlancost 2/47 cost 11
set spantree portvlancost 2/48 cost 11
set spantree guard none 2/1-48
set port gvrp     2/1-48  disable
set gvrp registration normal   2/1-48
set gvrp applicant normal   2/1-48
set port gmrp   2/1-48  enable
set gmrp registration normal   2/1-48
set gmrp fwdall disable    2/1-48
set port debounce 2/1 disable
set port debounce 2/2 disable
set port debounce 2/3 disable
set port debounce 2/4 disable
set port debounce 2/5 disable
set port debounce 2/6 disable
set port debounce 2/7 disable
set port debounce 2/8 disable
set port debounce 2/9 disable
set port debounce 2/10 disable
set port debounce 2/11 disable
set port debounce 2/12 disable
set port debounce 2/13 disable
set port debounce 2/14 disable
set port debounce 2/15 disable
set port debounce 2/16 disable
set port debounce 2/17 disable
set port debounce 2/18 disable
set port debounce 2/19 disable
set port debounce 2/20 disable
set port debounce 2/21 disable
set port debounce 2/22 disable
set port debounce 2/23 disable
set port debounce 2/24 disable
set port debounce 2/25 disable
set port debounce 2/26 disable
set port debounce 2/27 disable
set port debounce 2/28 disable
set port debounce 2/29 disable
set port debounce 2/30 disable
set port debounce 2/31 disable
set port debounce 2/32 disable
set port debounce 2/33 disable
set port debounce 2/34 disable
set port debounce 2/35 disable
set port debounce 2/36 disable
set port debounce 2/37 disable
set port debounce 2/38 disable
set port debounce 2/39 disable
set port debounce 2/40 disable
set port debounce 2/41 disable
set port debounce 2/42 disable
set port debounce 2/43 disable
set port debounce 2/44 disable
set port debounce 2/45 disable
set port debounce 2/46 disable
set port debounce 2/47 disable
set port debounce 2/48 disable
set port unicast-flood 2/1-48 enable
set port errdisable-timeout 2/1-48 enable
set port idledetect 2/1 disable
set port idledetect 2/2 disable
set port idledetect 2/3 disable
set port idledetect 2/4 disable
set port idledetect 2/5 disable
set port idledetect 2/6 disable
set port idledetect 2/7 disable
set port idledetect 2/8 disable
set port idledetect 2/9 disable
set port idledetect 2/10 disable
set port idledetect 2/11 disable
set port idledetect 2/12 disable
set port idledetect 2/13 disable
set port idledetect 2/14 disable
set port idledetect 2/15 disable
set port idledetect 2/16 disable
set port idledetect 2/17 disable
set port idledetect 2/18 disable
set port idledetect 2/19 disable
set port idledetect 2/20 disable
set port idledetect 2/21 disable
set port idledetect 2/22 disable
set port idledetect 2/23 disable
set port idledetect 2/24 disable
set port idledetect 2/25 disable
set port idledetect 2/26 disable
set port idledetect 2/27 disable
set port idledetect 2/28 disable
set port idledetect 2/29 disable
set port idledetect 2/30 disable
set port idledetect 2/31 disable
set port idledetect 2/32 disable
set port idledetect 2/33 disable
set port idledetect 2/34 disable
set port idledetect 2/35 disable
set port idledetect 2/36 disable
set port idledetect 2/37 disable
set port idledetect 2/38 disable
set port idledetect 2/39 disable
set port idledetect 2/40 disable
set port idledetect 2/41 disable
set port idledetect 2/42 disable
set port idledetect 2/43 disable
set port idledetect 2/44 disable
set port idledetect 2/45 disable
set port idledetect 2/46 disable
set port idledetect 2/47 disable
set port idledetect 2/48 disable
set cam notification added disable 2/1-48
set cam notification removed disable 2/1-48
set port channel 2/1-48 mode auto silent
!
#module 3 : 34-port 10/100/1000 Ethernet
set module name    3
set module enable  3
set vlan 1    3/1-34
set port auxiliaryvlan 3/1-34 none
set port enable     3/1-34
set port level      3/1-34  normal
set port speed      3/1-32  auto
set port trap       3/1-34  disable
set port name       3/1-34
set port security 3/1-34 disable age 0 maximum 1 shutdown 0 unicast-flood enable violation shutdown
set port dot1x 3/1-34 port-control force-authorized
set port dot1x 3/1-34 multiple-host disable
set port dot1x 3/1-34 shutdown-timeout disable
set port dot1x 3/1-34 re-authentication disable
set port dot1x 3/1-34 guest-vlan none
set port membership 3/1-34  static
set port protocol 3/1-34 ip on
set port protocol 3/1-34 ipx auto
set port protocol 3/1-34 group auto
set port negotiation 3/33-34 enable
set port flowcontrol    3/33-34 send desired
set port flowcontrol    3/33-34 receive off
set port vtp enable   3/1-34
set cdp enable   3/1-34
set udld disable 3/1-32
set udld aggressive-mode disable 3/1-34
set trunk 3/1  auto dot1q 1-1005,1025-4094
set trunk 3/2  auto dot1q 1-1005,1025-4094
set trunk 3/3  auto dot1q 1-1005,1025-4094
set trunk 3/4  auto dot1q 1-1005,1025-4094
set trunk 3/5  auto dot1q 1-1005,1025-4094
set trunk 3/6  auto dot1q 1-1005,1025-4094
set trunk 3/7  auto dot1q 1-1005,1025-4094
set trunk 3/8  auto dot1q 1-1005,1025-4094
set trunk 3/9  auto dot1q 1-1005,1025-4094
set trunk 3/10 auto dot1q 1-1005,1025-4094
set trunk 3/11 auto dot1q 1-1005,1025-4094
set trunk 3/12 auto dot1q 1-1005,1025-4094
set trunk 3/13 auto dot1q 1-1005,1025-4094
set trunk 3/14 auto dot1q 1-1005,1025-4094
set trunk 3/15 auto dot1q 1-1005,1025-4094
set trunk 3/16 auto dot1q 1-1005,1025-4094
set trunk 3/17 auto dot1q 1-1005,1025-4094
set trunk 3/18 auto dot1q 1-1005,1025-4094
set trunk 3/19 auto dot1q 1-1005,1025-4094
set trunk 3/20 auto dot1q 1-1005,1025-4094
set trunk 3/21 auto dot1q 1-1005,1025-4094
set trunk 3/22 auto dot1q 1-1005,1025-4094
set trunk 3/23 auto dot1q 1-1005,1025-4094
set trunk 3/24 auto dot1q 1-1005,1025-4094
set trunk 3/25 auto dot1q 1-1005,1025-4094
set trunk 3/26 auto dot1q 1-1005,1025-4094
set trunk 3/27 auto dot1q 1-1005,1025-4094
set trunk 3/28 auto dot1q 1-1005,1025-4094
set trunk 3/29 auto dot1q 1-1005,1025-4094
set trunk 3/30 auto dot1q 1-1005,1025-4094
set trunk 3/31 auto dot1q 1-1005,1025-4094
set trunk 3/32 auto dot1q 1-1005,1025-4094
set trunk 3/33 auto dot1q 1-1005,1025-4094
set trunk 3/34 auto dot1q 1-1005,1025-4094
set spantree portfast    3/1-34 enable
set spantree bpdu-filter 3/1-34 default
set spantree bpdu-guard 3/1-34 default
set spantree mst link-type 3/1-34 auto
set spantree portpri     3/1-34  32 mst
set spantree portinstancepri 3/1  0 mst
set spantree portinstancepri 3/2  0 mst
set spantree portinstancepri 3/3  0 mst
set spantree portinstancepri 3/4  0 mst
set spantree portinstancepri 3/5  0 mst
set spantree portinstancepri 3/6  0 mst
set spantree portinstancepri 3/7  0 mst
set spantree portinstancepri 3/8  0 mst
set spantree portinstancepri 3/9  0 mst
set spantree portinstancepri 3/10 0 mst
set spantree portinstancepri 3/11 0 mst
set spantree portinstancepri 3/12 0 mst
set spantree portinstancepri 3/13 0 mst
set spantree portinstancepri 3/14 0 mst
set spantree portinstancepri 3/15 0 mst
set spantree portinstancepri 3/16 0 mst
set spantree portinstancepri 3/17 0 mst
set spantree portinstancepri 3/18 0 mst
set spantree portinstancepri 3/19 0 mst
set spantree portinstancepri 3/20 0 mst
set spantree portinstancepri 3/21 0 mst
set spantree portinstancepri 3/22 0 mst
set spantree portinstancepri 3/23 0 mst
set spantree portinstancepri 3/24 0 mst
set spantree portinstancepri 3/25 0 mst
set spantree portinstancepri 3/26 0 mst
set spantree portinstancepri 3/27 0 mst
set spantree portinstancepri 3/28 0 mst
set spantree portinstancepri 3/29 0 mst
set spantree portinstancepri 3/30 0 mst
set spantree portinstancepri 3/31 0 mst
set spantree portinstancepri 3/32 0 mst
set spantree portinstancepri 3/33 0 mst
set spantree portinstancepri 3/34 0 mst
set spantree portcost    3/33-34  20000 mst
set spantree portcost    3/1-3,3/5,3/8-9,3/11-22,3/24-32  2000000 mst
set spantree portcost    3/4,3/6-7,3/10,3/23  200000 mst
set spantree portinstancecost 3/1  cost 1999999 mst
set spantree portinstancecost 3/2  cost 1999999 mst
set spantree portinstancecost 3/3  cost 1999999 mst
set spantree portinstancecost 3/4  cost 199999 mst
set spantree portinstancecost 3/5  cost 1999999 mst
set spantree portinstancecost 3/6  cost 199999 mst
set spantree portinstancecost 3/7  cost 199999 mst
set spantree portinstancecost 3/8  cost 1999999 mst
set spantree portinstancecost 3/9  cost 1999999 mst
set spantree portinstancecost 3/10 cost 199999 mst
set spantree portinstancecost 3/11 cost 1999999 mst
set spantree portinstancecost 3/12 cost 1999999 mst
set spantree portinstancecost 3/13 cost 1999999 mst
set spantree portinstancecost 3/14 cost 1999999 mst
set spantree portinstancecost 3/15 cost 1999999 mst
set spantree portinstancecost 3/16 cost 1999999 mst
set spantree portinstancecost 3/17 cost 1999999 mst
set spantree portinstancecost 3/18 cost 1999999 mst
set spantree portinstancecost 3/19 cost 1999999 mst
set spantree portinstancecost 3/20 cost 1999999 mst
set spantree portinstancecost 3/21 cost 1999999 mst
set spantree portinstancecost 3/22 cost 1999999 mst
set spantree portinstancecost 3/23 cost 199999 mst
set spantree portinstancecost 3/24 cost 1999999 mst
set spantree portinstancecost 3/25 cost 1999999 mst
set spantree portinstancecost 3/26 cost 1999999 mst
set spantree portinstancecost 3/27 cost 1999999 mst
set spantree portinstancecost 3/28 cost 1999999 mst
set spantree portinstancecost 3/29 cost 1999999 mst
set spantree portinstancecost 3/30 cost 1999999 mst
set spantree portinstancecost 3/31 cost 1999999 mst
set spantree portinstancecost 3/32 cost 1999999 mst
set spantree portinstancecost 3/33 cost 19999 mst
set spantree portinstancecost 3/34 cost 19999 mst
set spantree portcost    3/4,3/6-7,3/10,3/23  19
set spantree portcost    3/1-3,3/5,3/8-9,3/11-22,3/24-32  100
set spantree portcost    3/33-34  4
set spantree portpri     3/1-34  32
set spantree portvlanpri 3/1  0
set spantree portvlanpri 3/2  0
set spantree portvlanpri 3/3  0
set spantree portvlanpri 3/4  0
set spantree portvlanpri 3/5  0
set spantree portvlanpri 3/6  0
set spantree portvlanpri 3/7  0
set spantree portvlanpri 3/8  0
set spantree portvlanpri 3/9  0
set spantree portvlanpri 3/10 0
set spantree portvlanpri 3/11 0
set spantree portvlanpri 3/12 0
set spantree portvlanpri 3/13 0
set spantree portvlanpri 3/14 0
set spantree portvlanpri 3/15 0
set spantree portvlanpri 3/16 0
set spantree portvlanpri 3/17 0
set spantree portvlanpri 3/18 0
set spantree portvlanpri 3/19 0
set spantree portvlanpri 3/20 0
set spantree portvlanpri 3/21 0
set spantree portvlanpri 3/22 0
set spantree portvlanpri 3/23 0
set spantree portvlanpri 3/24 0
set spantree portvlanpri 3/25 0
set spantree portvlanpri 3/26 0
set spantree portvlanpri 3/27 0
set spantree portvlanpri 3/28 0
set spantree portvlanpri 3/29 0
set spantree portvlanpri 3/30 0
set spantree portvlanpri 3/31 0
set spantree portvlanpri 3/32 0
set spantree portvlanpri 3/33 0
set spantree portvlanpri 3/34 0
set spantree portvlancost 3/1  cost 99
set spantree portvlancost 3/2  cost 99
set spantree portvlancost 3/3  cost 99
set spantree portvlancost 3/4  cost 18
set spantree portvlancost 3/5  cost 99
set spantree portvlancost 3/6  cost 18
set spantree portvlancost 3/7  cost 18
set spantree portvlancost 3/8  cost 99
set spantree portvlancost 3/9  cost 99
set spantree portvlancost 3/10 cost 18
set spantree portvlancost 3/11 cost 99
set spantree portvlancost 3/12 cost 99
set spantree portvlancost 3/13 cost 99
set spantree portvlancost 3/14 cost 99
set spantree portvlancost 3/15 cost 99
set spantree portvlancost 3/16 cost 99
set spantree portvlancost 3/17 cost 99
set spantree portvlancost 3/18 cost 99
set spantree portvlancost 3/19 cost 99
set spantree portvlancost 3/20 cost 99
set spantree portvlancost 3/21 cost 99
set spantree portvlancost 3/22 cost 99
set spantree portvlancost 3/23 cost 18
set spantree portvlancost 3/24 cost 99
set spantree portvlancost 3/25 cost 99
set spantree portvlancost 3/26 cost 99
set spantree portvlancost 3/27 cost 99
set spantree portvlancost 3/28 cost 99
set spantree portvlancost 3/29 cost 99
set spantree portvlancost 3/30 cost 99
set spantree portvlancost 3/31 cost 99
set spantree portvlancost 3/32 cost 99
set spantree portvlancost 3/33 cost 3
set spantree portvlancost 3/34 cost 3
set spantree guard default 3/1-34
set port gvrp     3/1-34  disable
set gvrp registration normal   3/1-34
set gvrp applicant normal   3/1-34
set port gmrp   3/1-34  enable
set gmrp registration normal   3/1-34
set gmrp fwdall disable    3/1-34
set port debounce 3/1 disable
set port debounce 3/2 disable
set port debounce 3/3 disable
set port debounce 3/4 disable
set port debounce 3/5 disable
set port debounce 3/6 disable
set port debounce 3/7 disable
set port debounce 3/8 disable
set port debounce 3/9 disable
set port debounce 3/10 disable
set port debounce 3/11 disable
set port debounce 3/12 disable
set port debounce 3/13 disable
set port debounce 3/14 disable
set port debounce 3/15 disable
set port debounce 3/16 disable
set port debounce 3/17 disable
set port debounce 3/18 disable
set port debounce 3/19 disable
set port debounce 3/20 disable
set port debounce 3/21 disable
set port debounce 3/22 disable
set port debounce 3/23 disable
set port debounce 3/24 disable
set port debounce 3/25 disable
set port debounce 3/26 disable
set port debounce 3/27 disable
set port debounce 3/28 disable
set port debounce 3/29 disable
set port debounce 3/30 disable
set port debounce 3/31 disable
set port debounce 3/32 disable
set port debounce 3/33 disable
set port debounce 3/33 delay 0
set port debounce 3/34 disable
set port debounce 3/34 delay 0
set port unicast-flood 3/1-34 enable
set port errdisable-timeout 3/1-34 enable
set port idledetect 3/1 disable
set port idledetect 3/2 disable
set port idledetect 3/3 disable
set port idledetect 3/4 disable
set port idledetect 3/5 disable
set port idledetect 3/6 disable
set port idledetect 3/7 disable
set port idledetect 3/8 disable
set port idledetect 3/9 disable
set port idledetect 3/10 disable
set port idledetect 3/11 disable
set port idledetect 3/12 disable
set port idledetect 3/13 disable
set port idledetect 3/14 disable
set port idledetect 3/15 disable
set port idledetect 3/16 disable
set port idledetect 3/17 disable
set port idledetect 3/18 disable
set port idledetect 3/19 disable
set port idledetect 3/20 disable
set port idledetect 3/21 disable
set port idledetect 3/22 disable
set port idledetect 3/23 disable
set port idledetect 3/24 disable
set port idledetect 3/25 disable
set port idledetect 3/26 disable
set port idledetect 3/27 disable
set port idledetect 3/28 disable
set port idledetect 3/29 disable
set port idledetect 3/30 disable
set port idledetect 3/31 disable
set port idledetect 3/32 disable
set cam notification added disable 3/1-34
set cam notification removed disable 3/1-34
set port channel 3/1-34 mode auto silent
!
#switch port analyzer
!
#cam
set cam agingtime 1,100 300
set cam notification disable
set cam notification interval 1
set cam notification historysize 1
!
#gvrp
set gvrp dynamic-vlan-creation disable
set gvrp disable
!
#authorization
set authorization exec disable console
set authorization exec disable telnet
set authorization enable disable console
set authorization enable disable telnet
set authorization commands disable console
set authorization commands disable telnet
end
8-hostel> (enable)

Добавлено: **2008-07-30 18:23:32**

фигасе на ебей....а на опеннете туфту Вам подогнали.....подождите тогда, я до работы добирусь и прочекаю этот конфиг....

Добавлено: **2008-07-30 19:14:41**

ну достать любой IOS не проблема
даже если нет входа на киско ком)

Добавлено: **2008-07-30 19:33:42**

не, этот сложно найти, потому как G, только если где покрасть...

Добавлено: **2008-07-30 19:37:33**

говорите точное название погляжу если надо

Добавлено: **2008-07-30 20:03:41**

https://tools.cisco.com/support/downloa ... D268438064

Добавлено: **2008-07-30 20:15:12**

хе
то что можно утянуть с рапиды
щас есть токо http://rapidshare.com/files/130707508/c ... 44.SE2.tar

выше пока ничего нет

Добавлено: **2008-07-30 20:26:48**

ну это и у меня есть......просто мне не хочется попасть лишний раз на 5 000 $$

http://zingel.dubki.ru/text/unix/CISCO/ ... 25.SEE.bin

вообще, запороть не запорет, но может криво работать, хотя я тоже ничего выше не нашел.....

Добавлено: **2008-07-30 20:29:51**

а что есть самобальные IOS ?)))
никада не слышал...

а насчет попасть
тоже непомю что бы из за кривого иоса циска сгорела))
а насчет дыр...

а что есть самобальные IOS ?)))

Добавлено: **2008-07-30 20:31:04**

paradox писал(а):а что есть самобальные IOS ?)))
никада не слышал...

а насчет попасть
тоже непомю что бы из за кривого иоса циска сгорела))
а насчет дыр...
а что есть самобальные IOS ?)))

есть китайские IOSы например, сгореть вся не сгорит, но порт-два - может

Добавлено: **2008-07-30 20:35:04**

никада не слышал

---------------------------------------------------------
самые большие траблы которые были
это память битая
причем так битая
что поняли токо после месяца пляски с бубном
когда на определенных пиках нагрузки каталист падал
с сообщением которое находилось токо один раз в гугле)) (уже не помню)

Добавлено: **2008-07-30 20:37:52**

есть еще куча траблов, например убитая флешка или припаянные-криво микросхемы (заводской брак), задристанные пальцы (они же GBICи), порты на кошках горят, но редко....

когда на определенных пиках нагрузки каталист падал
с сообщением которое находилось токо один раз в гугле)) (уже не помню)

через sh mem dead можно увидеть их...кстати довольно частое явление - непонятные ребуты, особенно у c296*

Добавлено: **2008-07-30 22:37:41**

короче, тут даже без IOSа понятно:

Код: Выделить всё

set vlan 100 name VirusUsers type ethernet mtu 1500 said 100100 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active bridge 0x0 stp ieee
set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bridge 0xf stp ibm
set vlan 1
set vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active parent 1005 ring 0xccc mode srb aremaxhop 7 stemaxhop 7 backupcrf off
!
#dot1q-all-tagged
set dot1q-all-tagged disable
!
#ip
set feature mdg enable
set feature psync-recovery no-powerdown
set interface sc0 1 192.168.0.8/255.255.255.0 192.168.0.255

set interface sc0 up
set interface trap sc0 disable
set interface sl0 0.0.0.0 0.0.0.0
set interface sl0 down
set interface trap sl0 disable
set interface me1 0.0.0.0 0.0.0.0 0.0.0.0

set interface me1 down
set interface trap me1 disable
set arp agingtime 1200
set ip redirect   enable
set ip unreachable   enable
set ip fragmentation enable
set ip route 0.0.0.0/0.0.0.0         192.168.0.1
set ip alias default         0.0.0.0
!
#command alias
!
#vmps
set vmps server retry 3
set vmps server reconfirminterval 60
set vmps downloadmethod tftp
set vmps downloadserver 0.0.0.0 vmps-config-database.1
set vmps state disable

!
#rcp
set rcp username
!
#dns
set ip dns disabl

Вобщем тебе нужно засунуть нужные транковые порты в оба влана, это делается командой

Код: Выделить всё

set vlan

к примеру:

Код: Выделить всё

set vlan 100 2/46 2/47

где 2/46 и 2/47 просто тупо порты по-очереди, аналогично и для второго влана, потом, тебе нужно сделать

Код: Выделить всё

no switchport mode access

и

Код: Выделить всё

no switchport access vlan 100

после чего, проверяешь:

Код: Выделить всё

show ip interface brief

после чего:

Код: Выделить всё

set ip dns enable

это нужно для того, что бы с этой кошки резольвилась сетка как и 192.168.0.0/16 так и 10.10.0.0/8

вот после этого

Код: Выделить всё

set logging level all

это нужно, чтобы мне было понятно в каком месте у тебя флапаются по-bpdu порты на остальных от рутовой кошки кошках (потому. что STP-у тебя не настроен), а вот после этого мы с тобой будем прописывать маршруты....

Добавлено: **2008-07-31 9:53:44**

мда это не IOS и не CatOS, сложно разобраться

Добавлено: **2008-07-31 14:22:48**

Значит собрал я тестовый стенд.
Cisco Catalisr 2948G + server FreeBSD 7 + несколько компов.
Щас поставлю ИОС и отпишусь.

ЗЫ Решил ИОС не ставить.
Имею следующую конфигурацию.
на циске:

Код: Выделить всё

begin
!
# ***** NON-DEFAULT CONFIGURATION *****
!
!
#time: Thu Jul 31 2008, 11:56:55
!
#version 8.4(1)GLX
!
!
#system web interface version(s)
!
#dot1x
set feature dot1x-radius-keepalive disable
!
#frame distribution method
set port channel all distribution mac both
!
#vtp
set vtp domain test
set vtp mode client vlan
clear vtp pruneeligible 101-500,1001-1005
!
#ip
set interface sc0 1 192.168.0.6/255.255.255.0 192.168.0.255

set interface sl0 down
set interface me1 down
set ip alias default         0.0.0.0
!
#spantree
#vlan                         <VlanId>
set spantree priority 30000  1
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat4000-promupgrade.6-1-5.bin
set boot system flash bootflash:cat4000-k8.8-4-1-GLX.bin
set boot system flash bootflash:cat4000.6-3-5.bin
set boot system flash bootflash:
!
#port channel
set port channel 2/1-4 1
set port channel 2/5-8 2
set port channel 2/9-12 3
set port channel 2/13-16 4
set port channel 2/17-20 5
set port channel 2/21-24 6
!
#multicast filter
set igmp filter disable
!
#module 1 : 0-port Switching Supervisor
!
#module 2 : 50-port 10/100/1000 Ethernet
set vlan 100  2/10
set trunk 2/1  on dot1q 1-1005,1025-4094
set spantree portfast    2/2-24 enable
set port channel 2/2-24 mode off
end

на FreeBSD

Код: Выделить всё

fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 00:02:b3:5d:74:48
        inet 192.168.0.11 netmask 0xffffff00 broadcast 192.168.0.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=b<RXCSUM,TXCSUM,VLAN_MTU>
        ether 00:03:47:42:8a:83
        media: Ethernet autoselect (none)
        status: no carrier
rl0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 00:e0:4c:8a:53:8c
        media: Ethernet autoselect
        status: no carrier
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
vlan100: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 00:02:b3:5d:74:48
        inet 192.168.1.11 netmask 0xffffff00 broadcast 192.168.1.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
        vlan: 100 parent interface: fxp0

Клиентская машина имеет IP 192.168.1.3 и с неё пингается 192.168.1.11 (тоесть VLAN100 на FreeBSD)
Но по умолчанию клиентская машина имеет IP с диапазона 192.168.0.х и он прописан у неё статически. Вот как прикрутить это всё к одному и тому-же диапазону...

Добавлено: **2008-07-31 15:55:02**

А если прописать в ipfw

Код: Выделить всё

ipfw add 301 pass all from any to me via vlan100
ipfw add 301 pass all from me to any via vlan100

то будет пингаться и 192.168.0.11
Всё вроди хорошо, но клиент изначально в подсети 192.168.0.х а не в 192.168.1.х
Чёта меня уже плющит

Добавлено: **2008-07-31 16:06:14**

paradox писал(а):хе
то что можно утянуть с рапиды
щас есть токо http://rapidshare.com/files/130707508/c ... 44.SE2.tar

выше пока ничего нет

Эта ИОС хочет минимум 128Мб DRAM
а у меня только 65536K

Добавлено: **2008-07-31 16:47:47**

хорошая мысля приходит опосля

собрал тестовый стенд из сиськи каталиста 3550 и сервака

Код: Выделить всё

> ifconfig
rl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 00:e0:4c:27:60:27
        inet 10.24.0.1 netmask 0xffffff00 broadcast 10.24.0.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 00:30:05:38:8e:db
        inet xxx.xxx.xxx.xxx netmask 0xfffffffc broadcast 195.177.107.115
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
vlan100: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 00:e0:4c:27:60:27
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
        vlan: 100 parent interface: rl0
vlan200: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 00:e0:4c:27:60:27
        inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
        vlan: 200 parent interface: rl0
bridge0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 8a:ca:17:fb:1e:67
        id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
        maxage 20 holdcnt 6 proto rstp maxaddr 100 timeout 1200
        root id 00:00:00:00:00:00 priority 0 ifcost 0 port 0
        member: vlan200 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
        member: vlan100 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

на сиське

Код: Выделить всё

interface FastEthernet0/1
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1,100,200
 switchport mode trunk
 no ip address
 no cdp enable
!
interface FastEthernet0/2
 switchport access vlan 100
 switchport mode access
 no ip address
 no cdp enable
 spanning-tree portfast
!
interface FastEthernet0/3
 switchport access vlan 200
 switchport mode access
 no ip address
 no cdp enable
 spanning-tree portfast
!

смотрим

Код: Выделить всё

tcpdump -npe rl0

пынг приходит из одного влана, а ужодит с вланом на котором собственно пипишнег прибит
соответственно если пипишниг прибить га bridge0 вобще нигде работать не будет

Код: Выделить всё

16:44:11.728024 00:00:e2:58:a8:90 > 00:e0:4c:27:60:27, ethertype 802.1Q (0x8100), length 78: vlan 100, p 0, ethertype IPv4, 192.168.0.2 > 192.168.0.1: ICMP echo request, id 512, seq 30209, length 40
16:44:11.728052 00:e0:4c:27:60:27 > 00:00:e2:58:a8:90, ethertype 802.1Q (0x8100), length 78: vlan 200, p 0, ethertype IPv4, 192.168.0.1 > 192.168.0.2: ICMP echo reply, id 512, seq 30209, length 40

Добавлено: **2008-07-31 16:59:59**

ага нет
поднимаю 192.168.0.1 на bridge0 сиська ругается

Код: Выделить всё

01:00:54: %SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 100 on FastEthernet0/1 VLAN200.
01:00:54: %SPANTREE-2-BLOCK_PVID_PEER: Blocking FastEthernet0/1 on VLAN0100. Inconsistent peer vlan.
01:00:54: %SPANTREE-2-BLOCK_PVID_LOCAL: Blocking FastEthernet0/1 on VLAN0200. Inconsistent local vlan.

надо с stp разбраться

Добавлено: **2008-07-31 17:04:29**

не-не-не... это понятно. У меня другая задача.
Пусть бдет 2 клиента (или 2000 это не принциписально). У одного ИП 192.168.0.10 а у другого 192.168.0.11
ИП сервера 192.168.0.1
Между клиентами и сервером стоит циска (или гирлянда цисок -- это не принципиально).
Задача: не меняя ИП у клиентов определить их в разные VLAN (чтобы друг-друга не видели), но что бы они имели полноценный доступ ко всем сервисам сервера.

Добавлено: **2008-07-31 17:24:07**

(или гирлянда цисок -- это не принципиально).

мега принципиально, нужно в кольцо брать.

Потом нужно настраивать маршрутизацию статичные маршруты, я бы посоветовал сделать темплейты для каждого влана через ACL

Код: Выделить всё

mac access-list extended

если хочется без ИП

Код: Выделить всё

mac-address-table static xx.xx.xx.xx.xx.xx  vlan 100 1001 permit

Тоесть фильтровать машины в разные вланы по-макам, при этом как ни крути нужно будет настраивать port security && bpdu guard

forum.lissyara.su

Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...

Re: Архитекттура VLAN соединений. Хитро...