更换路由器注意事项 一般思科接入设备设置配置命令..
更换路由器注意事项
1. 路由器不保存配置问题
2. 路由器重启才能打开浏览器网页，不然只能上QQ
3. 配置一份防火墙的路由模式配置命令清单
4. 整体优化一下网络配置，包括上网行为管理配置
5. 向专业人士请教学习网络管理，网络配置方面的经验。
6. 其它可能想到的遇见的网络问题
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 5
conf t
no ssh 0.0.0.0 0.0.0.0 outside
no ssh timeout 5
***************************
User Access Verification
Username: 8
Password: ******
Type help or '?' for a list of available commands.
ciscoasa> en
Password: ******
ciscoasa# show run
: Saved
:
ASA Version 8.0(4)
!
hostname ciscoasa
enable password GYXZIPGXIpqkhvbr encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address 22.19.73.18 255.255.255.248
!
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 192.178.10.1 255.255.255.252
!
interface GigabitEthernet0/2
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/3
no nameif
no security-level
no ip address
!
interface Management0/0
shutdown
no nameif
no security-level
no ip address
management-only
!
ftp mode passive
access-list out extended permit icmp any any
access-list out extended permit tcp any host 221.1.73.19 eq 9080
access-list out extended permit tcp any host 221.1.73.19 eq 9999
access-list out extended permit tcp any host 221.1.73.18 eq telnet
access-list out extended permit tcp any host 221.1.73.19 eq 9082
access-list out extended permit tcp any host 221.1.73.20 eq 9080
access-list NAT extended permit ip any any
pager lines 24
mtu outside 1500
mtu inside 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 access-list NAT
static (inside,outside) tcp 22.19.73.20 9080 192.168.0.77 www netmask 255.255.255.255
access-group out in interface outside
route outside 0.0.0.0 0.0.0.0 22.19.73.17 1
route inside 10.10.2.0 255.255.255.0 192.178.10.2 2
route inside 192.168.0.0 255.255.0.0 192.178.10.2 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
aaa authentication telnet console LOCAL
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
username 8 password KTgDX8iR83mrRqex encrypted
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:14d7b5a5f4e711ffd24c3c632d0dd376
: end
ciscoasa# show ver
Cisco Adaptive Security Appliance Software Version 8.0(4)
Compiled on Thu 07-Aug-08 20:53 by builders
System image file is "disk0:/asa804-k8.bin"
Config file at boot was "startup-config"
ciscoasa up 270 days 13 hours
Hardware: ASA5540, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: GigabitEthernet0/0 : address is 0023.33bb.9486, irq 9
1: Ext: GigabitEthernet0/1 : address is 0023.33bb.9487, irq 9
2: Ext: GigabitEthernet0/2 : address is 0023.33bb.9488, irq 9
3: Ext: GigabitEthernet0/3 : address is 0023.33bb.9489, irq 9
4: Ext: Management0/0 : address is 0023.33bb.948a, irq 11
5: Int: Not used : irq 11
6: Int: Not used : irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 200
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Disabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : 5000
WebVPN Peers : 2
AnyConnect for Mobile : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
UC Proxy Sessions : 2
This platform has an ASA 5540 VPN Premium license.
Serial Number: JMX1307L05W
Running Activation Key: 0xe019655b 0x0424a2b4 0xd052a9d0 0xac50a048 0xc03e0fa5
Configuration register is 0x2001
Configuration last modified by enable_15 at 01:32:26.817 UTC Tue Jan 17 2017
*************************************
User Access Verification
Username: 8
Password:
HTHL_7206_Router#show run
Building configuration...
Current configuration : 1640 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname HTHL_7206_Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
ip source-route
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
call rsvp-sync
!
!
!
interface GigabitEthernet0/1
no ip address
media-type rj45
speed auto
duplex auto
negotiation auto
!
interface GigabitEthernet0/2
description *CNC1*
ip address 192.178.10.2 255.255.255.252
media-type rj45
speed auto
duplex auto
negotiation auto
!
interface GigabitEthernet0/3
ip address 10.10.20.1 255.255.255.0
media-type rj45
speed auto
duplex auto
negotiation auto
!
ip nat translation timeout 900
ip nat translation tcp-timeout 900
ip nat translation udp-timeout 900
ip nat translation syn-timeout 900
ip nat inside source list nat interface GigabitEthernet0/2 overload
ip nat inside source static tcp 192.168.20.104 9080 22.19.73.19 9080 extendable
ip nat inside source static tcp 192.168.0.10 80 22.19.73.19 9999 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 192.178.10.1
ip route 192.168.0.0 255.255.0.0 10.10.20.254
!
!
no ip http server
no ip http secure-server
!
ip access-list extended nat
permit ip any any
!
!
!
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
logging synchronous
login local
line vty 5 15
logging synchronous
login local
!
end
HTHL_7206_Router# show ver
Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 12.2(33)SRD2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Wed 20-May-09 20:57 by prod_rel_team
ROM: System Bootstrap, Version 12.3(4r)T3, RELEASE SOFTWARE (fc1)
HTHL_7206_Router uptime is 20 weeks, 5 days, 15 hours, 29 minutes
System returned to ROM by reload at 06:24:04 UTC Fri May 5 2000
System image file is "disk2:c7200-adventerprisek9-mz.122-33.SRD2.bin"
Last reload type: Normal Reload
Last reload reason: Reload command
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco 7206VXR (NPE-G1) processor (revision C) with 229376K/32768K bytes of memory.
Processor board ID 36044624
SB-1 CPU at 700Mhz, Implementation 0x401, Rev 0.2, 512KB L2 Cache
6 slot VXR midplane, Version 2.11
Last reset from power-on
PCI bus mb1 (Slots 1, 3 and 5) has a capacity of 600 bandwidth points.
Current configuration on bus mb1 has a total of 0 bandwidth points.
This configuration is within the PCI bus capacity and is supported.
PCI bus mb2 (Slots 2, 4 and 6) has a capacity of 600 bandwidth points.
Current configuration on bus mb2 has a total of 0 bandwidth points.
This configuration is within the PCI bus capacity and is supported.
Please refer to the following document "Cisco 7200 Series Port Adaptor
Hardware Configuration Guidelines" on Cisco.com <http://www.cisco.com>
for c7200 bandwidth points oversubscription and usage guidelines.
3 Gigabit Ethernet interfaces
509K bytes of NVRAM.
500472K bytes of ATA PCMCIA card at slot 2 (Sector size 512 bytes).
16384K bytes of Flash internal SIMM (Sector size 256K).
Configuration register is 0x2102
HTHL_7206_Router#
---------------
ASA防火墙配置SSH
以前pix上的ssh配置很简单，现在照样在asa上配置，结果不行，琢磨了一下，终于ok了，分享给大家
关键语句主要以下几条
access-list 102 extended permit tcp any interface outside eq ssh放开外口ssh登陆
access-group 102 in interface outside外口启用ssh
aaa authentication ssh console LOCAL
aaa authentication enable console LOCAL 开放aaa本地数据验证，这两句很重要，不能省略
ssh 0.0.0.0 0.0.0.0 outside开放允许ssh的端口iu
ssh timeout 45设置ssh超时时间
ssh version 1 设置ssh版本，3des才支持v2
设置用户 username admin password <removed> privilege 15
以上几句就可以在asa上实现ssh了
ASA5500系列命令,我发现的软件版本7.0以上的正确配置方法如下:
//配置服务器端
ciscoasa(config)#crypto key generate rsa modulus 1024 //指定rsa系数的大小,这个值越大,产生rsa的时间越长,cisco推荐使用1024.
ciscoasa(config)#write mem //保存刚刚产生的密钥
ciscoasa(config)#ssh 0.0.0.0 0.0.0.0 outside //0.0.0.0 0.0.0.0表示任何外部主机都能通过SSH访问outside接口,当然你可以指定具体的主机或网络来进行访问,outside也可 以改为inside即表示内部通过SSH访问防火墙ciscoasa(config)#ssh timeout 30 //设置超时时间,单位为分钟
ciscoasa(config)#ssh version 1 //指定SSH版本,可以选择版本2
//配置客户端ciscoasa(config)#passwd 密码 //passwd命令所指定的密码为远程访问密码,同样适用于telnet 所有7.0版本以上的用户名默认为pix,其它的版本我不知道。这里可以看出ASA还有PIX的影子的，呵呵,网上说的ASA防火墙配置SSH通过命令"username 用户名 password密码"来创建账号,我测试了n次都说账号错误.由此看出软件版本7.0上的用户名都是pix.不信大家可以试试.
//相关命令 show ssh
//参看SSH配置信息 show crypto key mypubkey rsa //查看产生的rsa密钥值 crypto key zeroize
//清空所有产生的密钥 以上命令资料都是来自ASA5500系列防火墙官方配置指南和实际测试通过
1.设置用户名：
hostname yliang
2.设置域名，在生成加密密码时要用到用户名和域名
ip domain-name yliang.com
3.为加密会话产生加密密钥：
crypto key generate rsa general-keys modulus 1024
4.为SSH会话设置最大空闲定时器：
ip ssh time-out 60
5.为SSH连接设置最大失败尝试值：
ip ssh authentication-retries 2
line vty 0 1180
6.连接到路由器的vty线路上
transport input ssh telnet
ssh 0.0.0.0 0.0.0.0
7.配置SSH并将Telnet作为访问协议
************************
交换机：192.168.0.254
User Access Verification
Username: 8
Password:
HXSwitch-1#show run
Building configuration...
Current configuration : 13515 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
!
hostname HXSwitch-1
!
boot-start-marker
boot-end-marker
!
!
username hailong privilege 15 password 7 141F1302000B242C
username 8 privilege 15 password 7 130D121E04025C
no aaa new-model
ip subnet-zero
!
ip dhcp pool binguan
network 192.168.12.0 255.255.255.0
default-router 192.168.12.254
dns-server 202.102.134.68 202.102.154.3
!
ip vrf mgmtVrf
!
!
power redundancy-mode redundant
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
redundancy
mode sso
main-cpu
auto-sync startup-config
auto-sync config-register
!
vlan internal allocation policy ascending
!
!
!
interface Port-channel1
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Port-channel2
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet1
ip vrf forwarding mgmtVrf
no ip address
speed auto
duplex auto
!
interface TenGigabitEthernet1/1
!
interface TenGigabitEthernet1/2
!
interface GigabitEthernet1/3
!
interface GigabitEthernet1/4
!
interface GigabitEthernet1/5
!
interface GigabitEthernet1/6
!
interface TenGigabitEthernet2/1
!
interface TenGigabitEthernet2/2
!
interface GigabitEthernet2/3
!
interface GigabitEthernet2/4
!
interface GigabitEthernet2/5
!
interface GigabitEthernet2/6
!
interface GigabitEthernet4/1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/2
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/3
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/4
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/7
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/8
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/9
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/10
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/11
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/12
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/13
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/14
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/15
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/16
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/17
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/18
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/19
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/20
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/21
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/22
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/25
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/26
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/27
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/28
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/29
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/30
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/31
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/32
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/33
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/34
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/35
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/36
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/37
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/38
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/39
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/40
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/41
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/42
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/43
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/44
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet4/45
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet4/46
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet4/47
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet4/48
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet6/1
no switchport
ip address 10.10.20.252 255.255.255.0
standby 88 ip 10.10.20.254
standby 88 priority 120
standby 88 preempt
!
interface GigabitEthernet6/2
switchport access vlan 2
switchport mode access
speed 1000
duplex full
!
interface GigabitEthernet6/3
!
interface GigabitEthernet6/4
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/5
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/6
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/7
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/8
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/9
switchport access vlan 2
switchport mode access
interface GigabitEthernet6/9
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/10
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/11
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/12
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/13
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/14
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/15
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/16
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/17
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/18
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/19
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/20
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/21
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/22
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/23
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/24
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/25
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/26
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/27
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/28
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/29
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/30
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/31
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet6/32
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/33
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/34
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/35
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/36
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/37
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/38
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet6/39
switchport access vlan 3
switchport mode access
!
interface GigabitEthernet6/40
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet6/41
switchport access vlan 3
switchport mode access
!
interface GigabitEthernet6/42
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet6/43
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet6/44
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet6/45
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet6/46
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet6/47
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet6/48
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 2 mode on
!
interface Vlan1
ip address 172.16.1.1 255.255.255.0
!
interface Vlan2
description *Server*
ip address 192.168.0.252 255.255.255.0
vrrp 2 ip 192.168.0.254
vrrp 2 priority 120
!
interface Vlan3
description *xinxizhongxin*
ip address 192.168.1.252 255.255.255.0
vrrp 3 ip 192.168.1.254
!
interface Vlan4
description *zonghelou*
ip address 192.168.2.252 255.255.255.0
vrrp 4 ip 192.168.2.254
!
interface Vlan5
description *changsifenchang*
ip address 192.168.3.252 255.255.255.0
vrrp 5 ip 192.168.3.254
vrrp 5 priority 120
!
interface Vlan6
description *duanyifenchang*
ip address 192.168.4.252 255.255.255.0
vrrp 6 ip 192.168.4.254
!
interface Vlan7
description *duanerfenchang*
ip address 192.168.5.252 255.255.255.0
vrrp 7 ip 192.168.5.254
!
interface Vlan8
description *donglifenchang*
ip address 192.168.6.252 255.255.255.0
vrrp 8 ip 192.168.6.254
!
interface Vlan9
description *jiangfengongchang*
ip address 192.168.7.252 255.255.255.0
vrrp 9 ip 192.168.7.254
!
interface Vlan10
description *xinduansier*
ip address 192.168.8.252 255.255.255.0
vrrp 10 ip 192.168.8.254
!
interface Vlan12
description *changsifenchang*
ip address 192.168.10.252 255.255.255.0
vrrp 12 ip 192.168.10.254
vrrp 12 priority 120
!
interface Vlan13
description *jiyuan&gongxiaogongsi*
ip address 192.168.11.252 255.255.255.0
vrrp 13 ip 192.168.11.254
!
interface Vlan14
description *binguan*
ip address 192.168.12.252 255.255.255.0
vrrp 14 ip 192.168.12.254
!
interface Vlan15
description *changchuchubei*
ip address 192.168.13.252 255.255.255.0
vrrp 15 ip 192.168.13.254
!
interface Vlan17
description *wushuichejian*
ip address 192.168.15.252 255.255.255.0
vrrp 17 ip 192.168.15.254
!
interface Vlan18
description *duansanfenchang*
ip address 192.168.16.252 255.255.255.0
vrrp 18 ip 192.168.16.254
vrrp 18 priority 120
!
interface Vlan20
description *jishuzhongxin*
ip address 192.168.18.252 255.255.255.0
vrrp 20 ip 192.168.18.254
!
interface Vlan24
description *xinzongcaiwu*
ip address 192.168.22.252 255.255.255.0
vrrp 24 ip 192.168.22.254
vrrp 24 priority 120
!
interface Vlan25
description *xinzongcaiwu*
ip address 192.168.23.252 255.255.255.0
vrrp 25 ip 192.168.23.254
vrrp 25 priority 120
!
interface Vlan26
description *xinzongcaiwu*
ip address 192.168.24.252 255.255.255.0
vrrp 26 ip 192.168.24.254
vrrp 26 priority 120
!
interface Vlan30
description *jianyanchu*
ip address 192.168.28.252 255.255.255.0
vrrp 30 ip 192.168.28.254
vrrp 30 priority 120
!
interface Vlan31
description *cangchulingdaou*
ip address 192.168.29.252 255.255.255.0
vrrp 31 ip 192.168.29.254
vrrp 31 priority 120
!
interface Vlan42
description *xinzongcaiwu2*
ip address 192.168.40.252 255.255.255.0
vrrp 42 ip 192.168.40.254
vrrp 42 priority 120
!
interface Vlan172
ip address 172.16.8.1 255.255.255.0
vrrp 172 ip 172.16.8.254
vrrp 172 priority 120
!
router rip
version 2
network 192.168.8.0
network 192.168.10.0
network 192.168.24.0
network 192.168.28.0
network 192.168.30.0
network 192.168.31.0
network 192.168.40.0
!
ip route 0.0.0.0 0.0.0.0 10.10.20.1
ip http server
!
control-plane
!
!
line con 0
stopbits 1
line vty 0 4
login local
!
!
monitor session 1 source interface Gi4/1 - 32
monitor session 1 source interface Gi6/1
monitor session 1 destination interface Gi6/3
end