AR 28-13 一些配置案例

yunfengh

[BZ-BZQ-BZXYSYYB]dis cu
#
sysname BZ-BZQ-BZXYSYYB
#
super password level 3 simple huawei
#
cpu-usage cycle 1min
#
router id 64.1.1.115
#
firewall enable
#
dialer-rule 1 acl 2001
#
radius scheme system
#
domain system
#
local-user bzxh
password simple bzxh
service-type ppp
local-user huawei
password simple huawei
service-type telnet terminal
#
acl number 2001
rule 0 permit source 10.80.0.0 0.0.255.255
rule 1 deny
#
acl number 3000
rule 0 deny ip source 10.80.0.0 0.0.255.255 destination 10.81.0.0 0.0.255.255
rule 1 deny ip source 10.81.0.0 0.0.255.255 destination 10.80.0.0 0.0.255.255
rule 2 deny ip source 10.80.0.0 0.0.255.255 destination 10.82.0.0 0.0.255.255
rule 3 deny ip source 10.82.0.0 0.0.255.255 destination 10.80.0.0 0.0.255.255
rule 4 deny ip source 10.81.0.0 0.0.255.255 destination 10.82.0.0 0.0.255.255
rule 5 deny ip source 10.82.0.0 0.0.255.255 destination 10.81.0.0 0.0.255.255
#
controller E1 0/0
using e1
#
interface Analogmodem3/0
async mode protocol
link-protocol ppp
ppp authentication-mode chap
ppp chap user test
ppp chap password simple bzxh
ip address 10.254.158.74 255.255.255.0
dialer enable-circular
dialer-group 1
dialer route ip 10.254.158.1 5266355
#
interface Aux0
async mode flow
#
interface Ethernet0/0
description to_pd
ip address 10.80.69.65 255.255.255.192
firewall packet-filter 3000 inbound
firewall packet-filter 3000 outbound
#
interface Ethernet0/1
description to_oa_jk
ip address 10.81.69.65 255.255.255.192
ip address 10.82.69.65 255.255.255.192 sub
firewall packet-filter 3000 inbound
firewall packet-filter 3000 outbound
#
interface Serial0/0:0
link-protocol ppp
description to_MP7208
ip address 10.250.158.74 255.255.255.252
standby interface Analogmodem3/0
#
interface NULL0
#
interface LoopBack0
ip address 64.1.1.115 255.255.255.255
#
ospf 1
area 0.0.0.80
  network 10.80.69.64 0.0.0.63
  network 10.81.69.64 0.0.0.63
  network 10.82.69.64 0.0.0.63
  network 10.250.158.72 0.0.0.3
  network 64.1.1.115 0.0.0.0
#
ip route-static 0.0.0.0 0.0.0.0 10.254.158.1 preference 80
#
user-interface con 0
authentication-mode scheme
user-interface tty 49
modem both
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
[BZ-BZQ-BZXYSYYB]





















本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/16554/showart_279419.html