- 论坛徽章:
- 0
|
catalyst4506#show run\r\n\r\n刚给用户做的catalyst 4506双机热备配置,经测试ACL、standby均工作正常。。该配置是主交换机配置,从交换机各VLAN的IP配置不同外(应与主交换机各VLAN的IP在同一网段),其它均相同。\r\n\r\nCurrent configuration : 4307 bytes!version 12.2no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryptionservice compress-config!hostname 4506-1!enable secret 5 $1$f6uA$uOeBnswuinoLFBNsxSP561\r\n!\r\n\r\nip subnet-zero\r\n\r\nno ip domain-lookup\r\n\r\n!\r\n\r\n!\r\n\r\nno file verify auto\r\n\r\n!\r\n\r\nspanning-tree mode pvst\r\n\r\nspanning-tree extend system-id\r\n\r\nspanning-tree vlan 1-1005 priority 24576\r\n\r\npower redundancy-mode redundant\r\n\r\n!\r\n\r\n!\r\n\r\nvlan access-map vlan_map 10\r\n\r\naction forward\r\n\r\nmatch ip address server_acl\r\n\r\nvlan access-map vlan_map 20\r\n\r\naction drop\r\n\r\nmatch ip address vlan_acl\r\n\r\nvlan access-map vlan_map 30\r\n\r\naction forward\r\n\r\nvlan filter vlan_map vlan-list 30-31,33-34,37,39,100-101,200,311\r\n\r\nvlan internal allocation policy ascending\r\n\r\n!\r\n\r\ninterface Port-channel1\r\n\r\nswitchport\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet1/1\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\nchannel-group 1 mode on\r\n\r\n!\r\n\r\ninterface GigabitEthernet1/2\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\nchannel-group 1 mode on\r\n\r\n!\r\n\r\ninterface GigabitEthernet2/1\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet2/2\r\n\r\nswitchport access vlan 37\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet2/3\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet2/4\r\n\r\nswitchport access vlan 33\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet2/5\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet2/6\r\n\r\nswitchport access vlan 34\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet3/1\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet3/2\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n\r\ninterface GigabitEthernet3/3\r\n\r\nswitchport access vlan 311\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet3/4\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet3/5\r\n\r\nswitchport access vlan 31\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet3/6\r\n\r\nswitchport access vlan 101\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet4/1\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet4/2\r\n\r\nswitchport access vlan 39\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet4/3\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet4/4\r\n\r\nswitchport access vlan 101\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet4/5\r\n\r\nswitchport trunk encapsulation dot1q\r\n\r\n!\r\n\r\ninterface GigabitEthernet4/6\r\n\r\nswitchport access vlan 30\r\n\r\nspanning-tree portfast\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/1\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/2\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/3\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/4\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/5\r\n\r\ninterface GigabitEthernet6/6\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/7\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/8\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/9\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/10\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/11\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/12\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/13\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/14\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/15\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/16\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/17\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/18\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/19\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/20\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/21\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/22\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/23\r\n\r\n!\r\n\r\ninterface GigabitEthernet6/24\r\n\r\n!\r\n\r\ninterface Vlan1\r\n\r\nno ip address\r\n\r\n!\r\n\r\ninterface Vlan30\r\n\r\nip address 192.168.30.252 255.255.255.0\r\n\r\nstandby ip 192.168.30.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan31\r\n\r\nip address 192.168.31.252 255.255.255.0\r\n\r\nstandby ip 192.168.31.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan33\r\n\r\nip address 192.168.33.252 255.255.255.0\r\n\r\nstandby ip 192.168.33.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan34\r\n\r\nip address 192.168.34.252 255.255.255.0\r\n\r\nstandby ip 192.168.34.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan37\r\n\r\nip address 192.168.37.252 255.255.255.0\r\n\r\nstandby ip 192.168.37.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan39\r\n\r\nip address 192.168.39.252 255.255.255.0\r\n\r\nstandby ip 192.168.39.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan100\r\n\r\nip address 192.168.100.252 255.255.255.0\r\n\r\nstandby ip 192.168.100.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan101\r\n\r\nip address 192.168.101.252 255.255.255.0\r\n\r\nstandby ip 192.168.101.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan200\r\n\r\nip address 192.168.200.252 255.255.255.0\r\n\r\nstandby ip 192.168.200.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\ninterface Vlan311\r\n\r\nip address 192.168.11.252 255.255.255.0\r\n\r\nstandby ip 192.168.11.254\r\n\r\nstandby priority 110\r\n\r\nstandby preempt\r\n\r\n!\r\n\r\nno ip http server\r\n\r\n!\r\n\r\n!\r\n\r\nip access-list extended server_acl\r\n\r\npermit ip 192.168.0.0 0.0.255.255 host 192.168.101.250\r\n\r\nip access-list extended vlan_acl\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.33.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.31.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.34.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.37.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.39.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.11.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.100.0 0.0.0.255\r\n\r\npermit ip 192.168.30.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.33.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.34.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.37.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.39.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.11.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.100.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.31.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.33.0 0.0.0.255 192.168.34.0 0.0.0.255\r\n\r\npermit ip 192.168.33.0 0.0.0.255 192.168.37.0 0.0.0.255\r\n\r\npermit ip 192.168.33.0 0.0.0.255 192.168.39.0 0.0.0.255\r\n\r\npermit ip 192.168.33.0 0.0.0.255 192.168.11.0 0.0.0.255\r\n\r\npermit ip 192.168.33.0 0.0.0.255 192.168.100.0 0.0.0.255\r\n\r\npermit ip 192.168.33.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.33.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.34.0 0.0.0.255 192.168.37.0 0.0.0.255\r\n\r\npermit ip 192.168.34.0 0.0.0.255 192.168.39.0 0.0.0.255\r\n\r\npermit ip 192.168.34.0 0.0.0.255 192.168.11.0 0.0.0.255\r\n\r\npermit ip 192.168.34.0 0.0.0.255 192.168.100.0 0.0.0.255\r\n\r\npermit ip 192.168.34.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.34.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.37.0 0.0.0.255 192.168.39.0 0.0.0.255\r\n\r\npermit ip 192.168.37.0 0.0.0.255 192.168.11.0 0.0.0.255\r\n\r\npermit ip 192.168.37.0 0.0.0.255 192.168.100.0 0.0.0.255\r\n\r\npermit ip 192.168.37.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.37.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.39.0 0.0.0.255 192.168.11.0 0.0.0.255\r\n\r\npermit ip 192.168.39.0 0.0.0.255 192.168.100.0 0.0.0.255\r\n\r\npermit ip 192.168.39.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.39.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.11.0 0.0.0.255 192.168.100.0 0.0.0.255\r\n\r\npermit ip 192.168.11.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.11.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.100.0 0.0.0.255 192.168.101.0 0.0.0.255\r\n\r\npermit ip 192.168.100.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\npermit ip 192.168.101.0 0.0.0.255 192.168.200.0 0.0.0.255\r\n\r\n\r\n!\r\n\r\n!\r\n\r\n!\r\n\r\nline con 0\r\n\r\nstopbits 1\r\n\r\nline vty 0 4\r\n\r\npassword %$&&&*(&(\r\n\r\nlogin\r\n\r\nline vty 5 15\r\n\r\npassword %$&&&*(&(\r\n\r\nlogin\r\n\r\n!\r\n\r\nend\r\n\r\n\r\n4506-1#show standby brief\r\n\r\nP indicates configured to preempt.\r\n\r\n|\r\n\r\nInterface Grp Prio P State Active addr Standby addr Group addr\r\n\r\nVl30 0 110 P Active local unknown 192.168.30.254\r\n\r\nVl31 0 110 P Active local unknown 192.168.31.254\r\n\r\nVl33 0 110 P Active local unknown 192.168.33.254\r\n\r\nVl34 0 110 P Active local unknown 192.168.34.254\r\n\r\nVl37 0 110 P Active local unknown 192.168.37.254\r\n\r\nVl39 0 110 P Active local unknown 192.168.39.254\r\n\r\nVl100 0 110 P Active local unknown 192.168.100.254\r\n\r\nVl101 0 110 P Active local unknown 192.168.101.254\r\n\r\nVl200 0 110 P Active local unknown 192.168.200.254\r\n\r\nVl311 0 110 P Active local unknown 192.168.11.254\r\n\r\n4506-1#\r\n\r\n\r\n\r\n4506-1#show vtp status\r\n\r\nVTP Version : 2\r\n\r\nConfiguration Revision : 10\r\n\r\nMaximum VLANs supported locally : 1005\r\n\r\nNumber of existing VLANs : 15\r\n\r\nVTP Operating Mode : Server\r\n\r\nVTP Domain Name : domainnet\r\n\r\nVTP Pruning Mode : Enable\r\n\r\nVTP V2 Mode : Enable\r\n\r\nVTP Traps Generation : Disabled\r\n\r\nMD5 digest : 0x46 0xDB 0x03 0x38 0x8D 0xBC 0x92 0x8F\r\n\r\nConfiguration last modified by 0.0.0.0 at 12-13-05 20:53:52\r\n\r\nLocal updater ID is 192.168.30.252 on interface Vl30 (lowest numbered VLAN inter\r\n\r\nface found)\r\n\r\n4506-1# |
|