Cisco 4503 核心交换配置实例

最新推荐文章于 2025-06-12 22:44:31 发布

CIAS

最新推荐文章于 2025-06-12 22:44:31 发布

阅读量2.6k

点赞数 1

CC 4.0 BY-SA版权

分类专栏： Cisco

本文链接：https://blog.youkuaiyun.com/hanzheng260561728/article/details/50894513

Cisco 专栏收录该内容

3 篇文章

订阅专栏

本文详细介绍了如何配置和管理网络设备，包括 VLAN 分区、路由设置、接口描述、DHCP 服务、SSH 安全配置及 AAA 认证机制等关键步骤。

en

vla dat

vlan 2
name JH

vlan 3
name LL

vlan 4
name A

vlan 5
name HO

vlan 6
name QQ

hostname heixin

conf t

interface Vlan 1
description to guanli
ip address 1.1.1.1 255.255.255.0

interface Vlan 2
description to FW
ip address 192.168.2.1 255.255.255.0

interface Vlan 3
description to XC
ip address 192.168.3.1 255.255.255.0

interface Vlan 4
description to XV
ip address 192.168.4.1 255.255.255.0

interface Vlan 6
description to Xw
ip address 192.168.6.1 255.255.255.0

ip routing 开启路由模式

ip route 0.0.0.0 0.0.0.0 192.168.6.1
ip route 192.168.2.0 255.255.255.0 192.168.6.2
ip route 192.168.3.0 255.255.255.0 192.168.6.2
ip route 192.168.4.0 255.255.255.0 192.168.6.2

interface range fastEthernet 0/2-5
switchport trunk encapsulation dot1q
switchport trunk native vlan 2                  归属vlan
switchport trunk allowed vlan 2,3,4,5,6         允许2,3,4 vlan之间通信
switchport mode trunk
spanning-tree portfast trunk

interface range fastEthernet 0/6-10
switchport trunk encapsulation dot1q
switchport trunk native vlan 3                   归属vlan
switchport trunk allowed vlan 2,3,4,5,6          允许2,3,4 vlan之间通信
switchport mode trunk
spanning-tree portfast trunk

interface range fastEthernet 0/11-16
switchport trunk encapsulation dot1q
switchport trunk native vlan 4                   归属vlan
switchport trunk allowed vlan 2,3,4,5,6          允许2,3,4 vlan之间通信
switchport mode trunk
spanning-tree portfast trunk

iinterface fastEthernet 0/1
description FW
switchport mode access
switchport access vlan 6

interface range fastEthernet 0/17-21
switchport access vlan 2
switchport mode access

interface range fastEthernet 0/21-22
switchport access vlan 3
switchport mode access

interface range fastEthernet 0/23-24
switchport access vlan 4
switchport mode access

DHCP 配置

ip dhcp pool vlan2
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1
   dns-server 202.99.224.68 202.99.224.8

ip dhcp pool vlan3
   network 192.168.3.0 255.255.255.0
   default-router 192.168.3.1
   dns-server 202.99.224.68 202.99.224.8

ip dhcp pool vlan4
   network 192.168.4.0 255.255.255.0
   default-router 192.168.4.1
   dns-server 202.99.224.68 202.99.224.8

ip dhcp excluded-address 192.168.4.241 192.168.4.244 不分配的地址

show int des 查看接口

ssh 配置

ip domain-name cisco.com

crypto key generate rsa （1024）

line vty 0 4
login local
transport input Telnet ssh

line console 0
no exec-t
logg syn

enable secret cisco 特权模式密码

aaa new-model 全局配置AAA

aaa authentication login admin

aaa authentication login default local

username admin password cisco

username nousername secret nopassword

ip ssh time-out 180

ip ssh authentication-retries

wr