devbox
Monodyee
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

多出口NAT策略路由案例_match ip address 10

作者：Monodyee | 2024-04-28 20:45:28

赞

踩

match ip address 10

配置思路:

  1. 基础拓扑搭建.
  2. 划分VLAN，配置access/trunk/SVI，IP 地址
  3. 配置内网路由(汇聚于核心跑OSPF)
  4. 规划外网路由与NAT

 

通过配置实现:

  1. 宿舍区访问互联网使用电信出口.教学区使用联通出口
  2. 任何一条链路故障,能够自动切换
  3. 宿舍区和教学区均使用路由器出口地址做PAT

目录

配置思路:

通过配置实现:

R1

liantong

dianxin

sw2

pc1

pc2

如何实现，让宿舍区192. 168.10.0走电信
如何实现，让教学区192. 168.20.0走联通
access-list 10 permit 192.1 68.10.0 0.0.0.255 //匹配宿舍区 VLAN10流量
route-map fenliu permit 10
match ip address 10//宿舍区流量
set ip default next-hop 50.1.1.2 60.1.1.2 //宿舍区流量优先走电信出口，电信down走联通.
access-list 20 permit 192.168.20.0 0.0.0.255 //匹配教学区 VLAN20流量
route- map fenliu permit 20
match ip address 20
//教学区流量
set set ip next-hop 60.1.1.2 50.1.1.2 //教学区 流量优先走联通出口，联通down走电信
interface FastEthernet0/0
ip policy route-map fenliu

！
interface FastEthernet0/1
ip policy route-map fenliu
 

如何让走电信出口的，利用电信的NAT地址池/电信接口地址做PAT(为何要这样?因为如果你使用了电信的NAT地址从联通出去了，数据包可以回来吗?如果你访问的电信的地址，网通ISP没有这条目的地的路由就无法通信)
access-list 10 permit 192. 168.1.0 0.0.0.255 (上面已经配置过，无需再次配置)
ip nat inside source list 10 interface s 1/0 overload
access-list 20 permit 192. 168.2.0 0.0.0.255 (上面已经配置过，无需再次配置)
ip nat inside source list 20 interface s1/1 overload
步骤

R1

  1. R1(config)#do sh run
  2. Building configuration...
  3.  
  4. Current configuration : 2712 bytes
  5. !
  6. version 12.4
  7. service timestamps debug datetime msec
  8. service timestamps log datetime msec
  9. no service password-encryption
  10. !
  11. hostname R1
  12. !
  13. boot-start-marker
  14. boot-end-marker
  15. !
  16. !
  17. no aaa new-model
  18. !
  19. resource policy
  20. !
  21. ip subnet-zero
  22. no ip icmp rate-limit unreachable
  23. !
  24. !
  25. ip tcp synwait-time 5
  26. ip cef
  27. no ip domain lookup
  28. !
  29. !
  30. !
  31. !
  32. !
  33. !
  34. !
  35. !
  36. !
  37. !
  38. !
  39. !
  40. !
  41. !
  42. !
  43. !
  44. !
  45. !
  46. !
  47. !
  48. !
  49. !
  50. !
  51. interface FastEthernet0/0
  52.  ip address 30.1.1.2 255.255.255.0
  53.  ip nat inside
  54.  ip virtual-reassembly
  55.  ip policy route-map cisco
  56.  duplex auto
  57.  speed auto
  58. !
  59. interface FastEthernet0/1
  60.  ip address 40.1.1.2 255.255.255.0
  61.  ip nat inside
  62.  ip virtual-reassembly
  63.  ip policy route-map cisco
  64.  duplex auto
  65.  speed auto
  66. !
  67. interface Serial1/0
  68.  ip address 50.1.1.1 255.255.255.0
  69.  ip nat outside
  70.  ip virtual-reassembly
  71.  serial restart-delay 0
  72. !
  73. interface Serial1/1
  74.  ip address 60.1.1.1 255.255.255.0
  75.  ip nat outside
  76.  ip virtual-reassembly
  77.  serial restart-delay 0
  78. !
  79. interface Serial1/2
  80.  no ip address
  81.  shutdown
  82.  serial restart-delay 0
  83. !
  84. interface Serial1/3
  85.  no ip address
  86.  shutdown
  87.  serial restart-delay 0
  88. !
  89. interface Serial2/0
  90.  no ip address
  91.  shutdown
  92.  serial restart-delay 0
  93. !
  94. interface Serial2/1
  95.  no ip address
  96.  shutdown
  97.  serial restart-delay 0
  98. !
  99. interface Serial2/2
  100.  no ip address
  101.  shutdown
  102.  serial restart-delay 0
  103. !
  104. interface Serial2/3
  105.  no ip address
  106.  shutdown
  107.  serial restart-delay 0
  108. !
  109. interface Serial3/0
  110.  no ip address
  111.  shutdown
  112.  serial restart-delay 0
  113. !
  114. interface Serial3/1
  115.  no ip address
  116.  shutdown
  117.  serial restart-delay 0
  118. !
  119. interface Serial3/2
  120.  no ip address
  121.  shutdown
  122.  serial restart-delay 0
  123. !
  124. interface Serial3/3
  125.  no ip address
  126.  shutdown
  127.  serial restart-delay 0
  128. !
  129. router ospf 1
  130.  router-id 1.1.1.1
  131.  log-adjacency-changes
  132.  network 30.1.1.0 0.0.0.255 area 0
  133.  network 40.1.1.0 0.0.0.255 area 0
  134.  default-information originate always
  135. !
  136. router rip
  137.  version 2
  138.  network 50.0.0.0
  139.  network 60.0.0.0
  140.  no auto-summary
  141. !
  142. ip classless
  143. !
  144. no ip http server
  145. no ip http secure-server
  146. !
  147. ip nat inside source route-map dianxin interface Serial1/0 overload
  148. ip nat inside source route-map liantong interface Serial1/1 overload
  149. !
  150. access-list 10 permit 192.168.10.0 0.0.0.255
  151. access-list 20 permit 192.168.20.0 0.0.0.255
  152. no cdp log mismatch duplex
  153. !
  154. route-map liantong permit 20
  155.  match interface Serial1/1
  156. !
  157. route-map cisco permit 10
  158.  match ip address 10
  159.  set ip next-hop 50.1.1.2 60.1.1.2
  160. !
  161. route-map cisco permit 20
  162.  match ip address 20
  163.  set ip next-hop 60.1.1.2 50.1.1.2
  164. !
  165. route-map dianxin permit 10
  166.  match interface Serial1/0
  167. !
  168. !
  169. !
  170. !
  171. control-plane
  172. !
  173. !
  174. !
  175. !
  176. !
  177. !
  178. gatekeeper
  179.  shutdown
  180. !
  181. !
  182. line con 0
  183.  exec-timeout 0 0
  184.  privilege level 15
  185.  logging synchronous
  186.  stopbits 1
  187. line aux 0
  188.  exec-timeout 0 0
  189.  privilege level 15
  190.  logging synchronous
  191.  stopbits 1
  192. line vty 0 4
  193.  login
  194. !
  195. !
  196. end
  197.  
  198. R1(config)#

liantong

  1. liantong#sh run
  2. Building configuration...
  3.  
  4. Current configuration : 1136 bytes
  5. !
  6. version 12.4
  7. service timestamps debug datetime msec
  8. service timestamps log datetime msec
  9. no service password-encryption
  10. !
  11. hostname liantong
  12. !
  13. boot-start-marker
  14. boot-end-marker
  15. !
  16. !
  17. no aaa new-model
  18. memory-size iomem 5
  19. no ip icmp rate-limit unreachable
  20. ip tcp synwait-time 5
  21. !
  22. !
  23. ip cef
  24. no ip domain lookup
  25. !
  26. !
  27. !
  28. !
  29. !
  30. !
  31. !
  32. !
  33. !
  34. !
  35. !
  36. !
  37. !
  38. !
  39. !
  40. !
  41. !
  42. !
  43. interface Loopback0
  44.  ip address 200.1.1.1 255.255.255.0
  45. !
  46. interface FastEthernet0/0
  47.  ip address 90.1.1.1 255.255.255.0
  48.  duplex auto
  49.  speed auto
  50. !
  51. interface Serial1/0
  52.  no ip address
  53.  shutdown
  54.  serial restart-delay 0
  55. !
  56. interface Serial1/1
  57.  ip address 60.1.1.2 255.255.255.0
  58.  serial restart-delay 0
  59. !
  60. interface Serial1/2
  61.  no ip address
  62.  shutdown
  63.  serial restart-delay 0
  64. !
  65. interface Serial1/3
  66.  no ip address
  67.  shutdown
  68.  serial restart-delay 0
  69. !
  70. router rip
  71.  version 2
  72.  network 60.0.0.0
  73.  network 90.0.0.0
  74.  network 200.1.1.0
  75.  no auto-summary
  76. !
  77. no ip http server
  78. !
  79. !
  80. !
  81. no cdp log mismatch duplex
  82. !
  83. !
  84. !
  85. control-plane
  86. !
  87. !
  88. !
  89. !
  90. !
  91. !
  92. !
  93. !
  94. !
  95. line con 0
  96.  exec-timeout 0 0
  97.  privilege level 15
  98.  logging synchronous
  99. line aux 0
  100.  exec-timeout 0 0
  101.  privilege level 15
  102.  logging synchronous
  103. line vty 0 4
  104.  login
  105. !
  106. !
  107. end
  108.  
  109. liantong#

dianxin

  1. dianxin(config-if)#do sh run
  2. Building configuration...
  3.  
  4. Current configuration : 1172 bytes
  5. !
  6. version 12.4
  7. service timestamps debug datetime msec
  8. service timestamps log datetime msec
  9. no service password-encryption
  10. !
  11. hostname dianxin
  12. !
  13. boot-start-marker
  14. boot-end-marker
  15. !
  16. !
  17. no aaa new-model
  18. memory-size iomem 5
  19. no ip icmp rate-limit unreachable
  20. ip tcp synwait-time 5
  21. !
  22. !
  23. ip cef
  24. no ip domain lookup
  25. !
  26. !
  27. !
  28. !
  29. !
  30. !
  31. !
  32. !
  33. !
  34. !
  35. !
  36. !
  37. !
  38. !
  39. !
  40. !
  41. !
  42. !
  43. interface Loopback0
  44.  ip address 100.1.1.1 255.255.255.0
  45. !
  46. interface Loopback1
  47.  no ip address
  48. !
  49. interface FastEthernet0/0
  50.  ip address 90.1.1.2 255.255.255.0
  51.  duplex auto
  52.  speed auto
  53. !
  54. interface Serial1/0
  55.  ip address 50.1.1.2 255.255.255.0
  56.  serial restart-delay 0
  57. !
  58. interface Serial1/1
  59.  no ip address
  60.  shutdown
  61.  serial restart-delay 0
  62. !
  63. interface Serial1/2
  64.  no ip address
  65.  shutdown
  66.  serial restart-delay 0
  67. !
  68. interface Serial1/3
  69.  no ip address
  70.  shutdown
  71.  serial restart-delay 0
  72. !
  73. router rip
  74.  version 2
  75.  network 50.0.0.0
  76.  network 90.0.0.0
  77.  network 100.0.0.0
  78.  no auto-summary
  79. !
  80. no ip http server
  81. !
  82. !
  83. !
  84. no cdp log mismatch duplex
  85. !
  86. !
  87. !
  88. control-plane
  89. !
  90. !
  91. !
  92. !
  93. !
  94. !
  95. !
  96. !
  97. !
  98. line con 0
  99.  exec-timeout 0 0
  100.  privilege level 15
  101.  logging synchronous
  102. line aux 0
  103.  exec-timeout 0 0
  104.  privilege level 15
  105.  logging synchronous
  106. line vty 0 4
  107.  login
  108. !
  109. !
  110. end
  111.  
  112. dianxin(config-if)#

sw1

  1. SW1(config-if)#do sh run
  2. Building configuration...
  3.  
  4. Current configuration : 2912 bytes
  5. !
  6. version 12.4
  7. service timestamps debug datetime msec
  8. service timestamps log datetime msec
  9. no service password-encryption
  10. no service dhcp
  11. !
  12. hostname SW1
  13. !
  14. boot-start-marker
  15. boot-end-marker
  16. !
  17. !
  18. no aaa new-model
  19. memory-size iomem 5
  20. no ip icmp rate-limit unreachable
  21. ip cef
  22. ip tcp synwait-time 5
  23. !
  24. !
  25. !
  26. !
  27. no ip domain lookup
  28. !
  29. multilink bundle-name authenticated
  30. !
  31. !
  32. !
  33. !
  34. macro name add_vlan
  35. end
  36. vlan database
  37. vlan $v
  38. exit
  39. @
  40. macro name del_vlan
  41. end
  42. vlan database
  43. no vlan $v
  44. exit
  45. @
  46. !
  47. vtp file nvram:vlan.dat
  48. !
  49. !
  50. !
  51. !
  52. !
  53. !
  54. interface FastEthernet0/0
  55.  description *** Unused for Layer2 EtherSwitch ***
  56.  ip address 30.1.1.1 255.255.255.0
  57.  duplex auto
  58.  speed auto
  59. !
  60. interface FastEthernet0/1
  61.  description *** Unused for Layer2 EtherSwitch ***
  62.  no ip address
  63.  shutdown
  64.  duplex auto
  65.  speed auto
  66. !
  67. interface FastEthernet1/0
  68.  switchport access vlan 10
  69.  duplex full
  70.  speed 100
  71. !
  72. interface FastEthernet1/1
  73.  duplex full
  74.  speed 100
  75. !
  76. interface FastEthernet1/2
  77.  duplex full
  78.  speed 100
  79. !
  80. interface FastEthernet1/3
  81.  duplex full
  82.  speed 100
  83. !
  84. interface FastEthernet1/4
  85.  duplex full
  86.  speed 100
  87. !
  88. interface FastEthernet1/5
  89.  duplex full
  90.  speed 100
  91. !
  92. interface FastEthernet1/6
  93.  duplex full
  94.  speed 100
  95. !
  96. interface FastEthernet1/7
  97.  duplex full
  98.  speed 100
  99. !
  100. interface FastEthernet1/8
  101.  duplex full
  102.  speed 100
  103. !
  104. interface FastEthernet1/9
  105.  duplex full
  106.  speed 100
  107. !
  108. interface FastEthernet1/10
  109.  duplex full
  110.  speed 100
  111. !
  112. interface FastEthernet1/11
  113.  duplex full
  114.  speed 100
  115. !
  116. interface FastEthernet1/12
  117.  duplex full
  118.  speed 100
  119. !
  120. interface FastEthernet1/13
  121.  duplex full
  122.  speed 100
  123. !
  124. interface FastEthernet1/14
  125.  duplex full
  126.  speed 100
  127. !
  128. interface FastEthernet1/15
  129.  duplex full
  130.  speed 100
  131. !
  132. interface Vlan1
  133.  no ip address
  134.  shutdown
  135. !
  136. interface Vlan10
  137.  ip address 192.168.10.254 255.255.255.0
  138. !
  139. router ospf 1
  140.  router-id 2.2.2.2
  141.  log-adjacency-changes
  142.  network 30.1.1.0 0.0.0.255 area 0
  143.  network 192.168.10.0 0.0.0.255 area 0
  144. !
  145. !
  146. !
  147. no ip http server
  148. no ip http secure-server
  149. !
  150. no cdp log mismatch duplex
  151. !
  152. !
  153. !
  154. !
  155. !
  156. control-plane
  157. !
  158. !
  159. banner exec ^C
  160.  
  161. ***************************************************************
  162. This is a normal Router with a Switch module inside (NM-16ESW)
  163. It has been pre-configured with hard-coded speed and duplex
  164.  
  165. To create vlans use the command "vlan database" in exec mode
  166. After creating all desired vlans use "exit" to apply the config
  167.  
  168. To view existing vlans use the command "show vlan-switch brief"
  169.  
  170. Alias(exec)     : vl   - "show vlan-switch brief" command
  171. Alias(configure): va X - macro to add vlan X
  172. Alias(configure): vd X - macro to delete vlan X
  173. ***************************************************************
  174.  
  175. ^C
  176. alias configure va macro global trace add_vlan $v
  177. alias configure vd macro global trace del_vlan $v
  178. alias exec vl show vlan-switch brief
  179. !
  180. line con 0
  181.  exec-timeout 0 0
  182.  privilege level 15
  183.  logging synchronous
  184. line aux 0
  185.  exec-timeout 0 0
  186.  privilege level 15
  187.  logging synchronous
  188. line vty 0 4
  189.  login
  190. !
  191. !
  192. end
  193.  
  194. SW1(config-if)#

sw2

  1. SW2(config-router)#do sh run
  2. Building configuration...
  3.  
  4. Current configuration : 2912 bytes
  5. !
  6. version 12.4
  7. service timestamps debug datetime msec
  8. service timestamps log datetime msec
  9. no service password-encryption
  10. no service dhcp
  11. !
  12. hostname SW2
  13. !
  14. boot-start-marker
  15. boot-end-marker
  16. !
  17. !
  18. no aaa new-model
  19. memory-size iomem 5
  20. no ip icmp rate-limit unreachable
  21. ip cef
  22. ip tcp synwait-time 5
  23. !
  24. !
  25. !
  26. !
  27. no ip domain lookup
  28. !
  29. multilink bundle-name authenticated
  30. !
  31. !
  32. !
  33. !
  34. macro name add_vlan
  35. end
  36. vlan database
  37. vlan $v
  38. exit
  39. @
  40. macro name del_vlan
  41. end
  42. vlan database
  43. no vlan $v
  44. exit
  45. @
  46. !
  47. vtp file nvram:vlan.dat
  48. !
  49. !
  50. !
  51. !
  52. !
  53. !
  54. interface FastEthernet0/0
  55.  description *** Unused for Layer2 EtherSwitch ***
  56.  no ip address
  57.  shutdown
  58.  duplex auto
  59.  speed auto
  60. !
  61. interface FastEthernet0/1
  62.  description *** Unused for Layer2 EtherSwitch ***
  63.  ip address 40.1.1.1 255.255.255.0
  64.  duplex auto
  65.  speed auto
  66. !
  67. interface FastEthernet1/0
  68.  switchport access vlan 20
  69.  duplex full
  70.  speed 100
  71. !
  72. interface FastEthernet1/1
  73.  duplex full
  74.  speed 100
  75. !
  76. interface FastEthernet1/2
  77.  duplex full
  78.  speed 100
  79. !
  80. interface FastEthernet1/3
  81.  duplex full
  82.  speed 100
  83. !
  84. interface FastEthernet1/4
  85.  duplex full
  86.  speed 100
  87. !
  88. interface FastEthernet1/5
  89.  duplex full
  90.  speed 100
  91. !
  92. interface FastEthernet1/6
  93.  duplex full
  94.  speed 100
  95. !
  96. interface FastEthernet1/7
  97.  duplex full
  98.  speed 100
  99. !
  100. interface FastEthernet1/8
  101.  duplex full
  102.  speed 100
  103. !
  104. interface FastEthernet1/9
  105.  duplex full
  106.  speed 100
  107. !
  108. interface FastEthernet1/10
  109.  duplex full
  110.  speed 100
  111. !
  112. interface FastEthernet1/11
  113.  duplex full
  114.  speed 100
  115. !
  116. interface FastEthernet1/12
  117.  duplex full
  118.  speed 100
  119. !
  120. interface FastEthernet1/13
  121.  duplex full
  122.  speed 100
  123. !
  124. interface FastEthernet1/14
  125.  duplex full
  126.  speed 100
  127. !
  128. interface FastEthernet1/15
  129.  duplex full
  130.  speed 100
  131. !
  132. interface Vlan1
  133.  no ip address
  134.  shutdown
  135. !
  136. interface Vlan20
  137.  ip address 192.168.20.254 255.255.255.0
  138. !
  139. router ospf 1
  140.  router-id 3.3.3.3
  141.  log-adjacency-changes
  142.  network 40.1.1.0 0.0.0.255 area 0
  143.  network 192.168.20.0 0.0.0.255 area 0
  144. !
  145. !
  146. !
  147. no ip http server
  148. no ip http secure-server
  149. !
  150. no cdp log mismatch duplex
  151. !
  152. !
  153. !
  154. !
  155. !
  156. control-plane
  157. !
  158. !
  159. banner exec ^C
  160.  
  161. ***************************************************************
  162. This is a normal Router with a Switch module inside (NM-16ESW)
  163. It has been pre-configured with hard-coded speed and duplex
  164.  
  165. To create vlans use the command "vlan database" in exec mode
  166. After creating all desired vlans use "exit" to apply the config
  167.  
  168. To view existing vlans use the command "show vlan-switch brief"
  169.  
  170. Alias(exec)     : vl   - "show vlan-switch brief" command
  171. Alias(configure): va X - macro to add vlan X
  172. Alias(configure): vd X - macro to delete vlan X
  173. ***************************************************************
  174.  
  175. ^C
  176. alias configure va macro global trace add_vlan $v
  177. alias configure vd macro global trace del_vlan $v
  178. alias exec vl show vlan-switch brief
  179. !
  180. line con 0
  181.  exec-timeout 0 0
  182.  privilege level 15
  183.  logging synchronous
  184. line aux 0
  185.  exec-timeout 0 0
  186.  privilege level 15
  187.  logging synchronous
  188. line vty 0 4
  189.  login
  190. !
  191. !
  192. end
  193.  
  194. SW2(config-router)#

pc1

  1. pc1#sh run
  2. Building configuration...
  3.  
  4. Current configuration : 1587 bytes
  5. !
  6. version 12.4
  7. service timestamps debug datetime msec
  8. service timestamps log datetime msec
  9. no service password-encryption
  10. !
  11. hostname pc1
  12. !
  13. boot-start-marker
  14. boot-end-marker
  15. !
  16. !
  17. no aaa new-model
  18. memory-size iomem 5
  19. no ip routing
  20. no ip icmp rate-limit unreachable
  21. ip tcp synwait-time 5
  22. !
  23. !
  24. no ip cef
  25. no ip domain lookup
  26. !
  27. !
  28. !
  29. !
  30. !
  31. !
  32. !
  33. !
  34. !
  35. !
  36. !
  37. !
  38. !
  39. !
  40. !
  41. !
  42. !
  43. !
  44. interface FastEthernet0/0
  45.  ip address 192.168.10.1 255.255.255.0
  46.  no ip route-cache
  47.  duplex auto
  48.  speed auto
  49. !
  50. interface Ethernet1/0
  51.  no ip address
  52.  no ip route-cache
  53.  shutdown
  54.  half-duplex
  55. !
  56. interface Ethernet1/1
  57.  no ip address
  58.  no ip route-cache
  59.  shutdown
  60.  half-duplex
  61. !
  62. interface Ethernet1/2
  63.  no ip address
  64.  no ip route-cache
  65.  shutdown
  66.  half-duplex
  67. !
  68. interface Ethernet1/3
  69.  no ip address
  70.  no ip route-cache
  71.  shutdown
  72.  half-duplex
  73. !
  74. interface FastEthernet2/0
  75. !
  76. interface FastEthernet2/1
  77. !
  78. interface FastEthernet2/2
  79. !
  80. interface FastEthernet2/3
  81. !
  82. interface FastEthernet2/4
  83. !
  84. interface FastEthernet2/5
  85. !
  86. interface FastEthernet2/6
  87. !
  88. interface FastEthernet2/7
  89. !
  90. interface FastEthernet2/8
  91. !
  92. interface FastEthernet2/9
  93. !
  94. interface FastEthernet2/10
  95. !
  96. interface FastEthernet2/11
  97. !
  98. interface FastEthernet2/12
  99. !
  100. interface FastEthernet2/13
  101. !
  102. interface FastEthernet2/14
  103. !
  104. interface FastEthernet2/15
  105. !
  106. interface Vlan1
  107.  no ip address
  108.  no ip route-cache
  109. !
  110. ip default-gateway 192.168.10.254
  111. no ip http server
  112. !
  113. !
  114. !
  115. no cdp log mismatch duplex
  116. !
  117. !
  118. !
  119. control-plane
  120. !
  121. !
  122. !
  123. !
  124. !
  125. !
  126. !
  127. !
  128. !
  129. line con 0
  130.  exec-timeout 0 0
  131.  privilege level 15
  132.  logging synchronous
  133. line aux 0
  134.  exec-timeout 0 0
  135.  privilege level 15
  136.  logging synchronous
  137. line vty 0 4
  138.  login
  139. !
  140. !
  141.  
  142. pc1#

pc2

  1. pc2#sh run
  2. Building configuration...
  3.  
  4. Current configuration : 1587 bytes
  5. !
  6. version 12.4
  7. service timestamps debug datetime msec
  8. service timestamps log datetime msec
  9. no service password-encryption
  10. !
  11. hostname pc2
  12. !
  13. boot-start-marker
  14. boot-end-marker
  15. !
  16. !
  17. no aaa new-model
  18. memory-size iomem 5
  19. no ip routing
  20. no ip icmp rate-limit unreachable
  21. ip tcp synwait-time 5
  22. !
  23. !
  24. no ip cef
  25. no ip domain lookup
  26. !
  27. !
  28. !
  29. !
  30. !
  31. !
  32. !
  33. !
  34. !
  35. !
  36. !
  37. !
  38. !
  39. !
  40. !
  41. !
  42. !
  43. !
  44. interface FastEthernet0/0
  45.  ip address 192.168.20.1 255.255.255.0
  46.  no ip route-cache
  47.  duplex auto
  48.  speed auto
  49. !
  50. interface Ethernet1/0
  51.  no ip address
  52.  no ip route-cache
  53.  shutdown
  54.  half-duplex
  55. !
  56. interface Ethernet1/1
  57.  no ip address
  58.  no ip route-cache
  59.  shutdown
  60.  half-duplex
  61. !
  62. interface Ethernet1/2
  63.  no ip address
  64.  no ip route-cache
  65.  shutdown
  66.  half-duplex
  67. !
  68. interface Ethernet1/3
  69.  no ip address
  70.  no ip route-cache
  71.  shutdown
  72.  half-duplex
  73. !
  74. interface FastEthernet2/0
  75. !
  76. interface FastEthernet2/1
  77. !
  78. interface FastEthernet2/2
  79. !
  80. interface FastEthernet2/3
  81. !
  82. interface FastEthernet2/4
  83. !
  84. interface FastEthernet2/5
  85. !
  86. interface FastEthernet2/6
  87. !
  88. interface FastEthernet2/7
  89. !
  90. interface FastEthernet2/8
  91. !
  92. interface FastEthernet2/9
  93. !
  94. interface FastEthernet2/10
  95. !
  96. interface FastEthernet2/11
  97. !
  98. interface FastEthernet2/12
  99. !
  100. interface FastEthernet2/13
  101. !
  102. interface FastEthernet2/14
  103. !
  104. interface FastEthernet2/15
  105. !
  106. interface Vlan1
  107.  no ip address
  108.  no ip route-cache
  109. !
  110. ip default-gateway 192.168.20.254
  111. no ip http server
  112. !
  113. !
  114. !
  115. no cdp log mismatch duplex
  116. !
  117. !
  118. !
  119. control-plane
  120. !
  121. !
  122. !
  123. !
  124. !
  125. !
  126. !
  127. !
  128. !
  129. line con 0
  130.  exec-timeout 0 0
  131.  privilege level 15
  132.  logging synchronous
  133. line aux 0
  134.  exec-timeout 0 0
  135.  privilege level 15
  136.  logging synchronous
  137. line vty 0 4
  138.  login
  139. !
  140. !
  141. end
  142.  
  143. pc2#

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/Monodyee/article/detail/504222
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号