Настройка Cisco оборудования - [2490] :: В помощь системному администратору

Last configuration change at 00:14:27 PCTime Fri Jan 16 2015 by xxxxxxx
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname al-rt
!
boot-start-marker
boot system flash c2900-universalk9-mz.SPA.155-1.T.bin
boot-end-marker
!
!
logging buffered 3200000
enable secret 5 xxxxxxxxxxxxxxxxxxx
enable password 7 xxxxxxxxxxxxxxxx
!
aaa new-model
!
aaa authentication login default local
aaa authorization exec default local
!
aaa session-id common
bsd-client server url https://cloudsso.cisco.com/as/token.oauth2
clock timezone PCTime 3 0
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
!
ip dhcp excluded-address 192.168.7.201 192.168.7.254
ip dhcp excluded-address 192.168.9.1 192.168.9.49
ip dhcp excluded-address 192.168.9.201 192.168.9.254
ip dhcp excluded-address 192.168.7.1 192.168.7.99
!
ip dhcp pool Data
import all
network 192.168.7.0 255.255.255.0
default-router 192.168.7.254
dns-server 192.168.7.254 80.76.224.2
lease 7
!
ip dhcp pool VoIP
import all
network 192.168.9.0 255.255.255.0
default-router 192.168.9.254
dns-server 192.168.9.254 83.242.139.10
lease infinite
!
!
!
ip domain name xxxxxxxxxxx.ru
ip name-server 80.76.224.2
ip name-server 80.76.224.18
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
cts logging verbose
!
crypto pki trustpoint xxxxxxxxxxxxxxx
!
!
crypto pki certificate chain xxxxxxxxxxxxxxxxx
quit
license udi pid CISCO2901/K9 sn xxxxxxxxxxxxx
license boot module c2900 technology-package securityk9
license boot module c2900 technology-package datak9
!
username xxxxxxxxxx privilege 15 xxxxxxxxxxxxxxx
!
redundancy
!
track 123 ip sla 1 reachability
!
track 124 ip sla 2 reachability
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description RAD-WAN
ip address 80x.7x.2xx.2x2 255.255.255.252
ip access-group 111 in
ip nbar protocol-discovery
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
description $ETH-WAN$
ip address 2xx.2xx.7x.1xx 255.255.255.252
ip access-group 121 in
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
no mop enabled
!
interface GigabitEthernet0/1/0
description VoIP
switchport access vlan 9
no ip address
!
interface GigabitEthernet0/1/1
description alportal
switchport access vlan 10
no ip address
!
interface GigabitEthernet0/1/2
description Int_WiFi
switchport access vlan 7
no ip address
!
interface GigabitEthernet0/1/3
description al-fs2
switchport access vlan 7
no ip address
!
interface Vlan1
no ip address
shutdown
!
interface Vlan7
ip address 192.168.7.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan9
description VoIP
ip address 192.168.9.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan10
description alportal
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip flow-top-talkers
top 20
sort-by bytes
cache-timeout 360000
!
no ip nat service sip udp port 5060
ip nat pool ETH-WAN-ACL 192.168.9.1 192.168.9.254 netmask 255.255.255.0
ip nat pool RAD-WAN-ACL 192.168.7.1 192.168.7.254 netmask 255.255.255.0
ip nat inside source static tcp 192.168.7.5 xxxx interface GigabitEthernet0/0 xxx
ip nat inside source static tcp 10.10.10.10 xxxx interface GigabitEthernet0/0 xxxx
ip nat inside source static tcp 10.10.10.10 xxxx interface GigabitEthernet0/0 xxxx
ip nat inside source static tcp 192.168.7.119 xxxx interface GigabitEthernet0/0 xxxx
ip nat inside source route-map ETH-WAN interface GigabitEthernet0/1 overload
ip nat inside source route-map RAD-WAN interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 8x.7x.2xx.2x1
ip route 192.168.9.0 255.255.255.0 2xx.2xx.7x.1x1
!
ip sla 1
icmp-echo 8.8.8.8 source-interface GigabitEthernet0/0
request-data-size 32
frequency 5
history hours-of-statistics-kept 24
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 8.8.4.4 source-interface GigabitEthernet0/1
request-data-size 32
frequency 5
history hours-of-statistics-kept 24
ip sla schedule 2 life forever start-time now
logging host 192.168.7.5
!
route-map tracking permit 10
set ip next-hop verify-availability 8x.7x.2x.2x1 10 track 123
set ip next-hop 8x.7x.2xx.2x1
!
route-map tracking permit 20
set ip next-hop verify-availability 2xx.2xx.7x.1x1 20 track 124
set ip next-hop 2xx.2xx.7x.1x1
!
route-map RAD-WAN permit 10
match ip address RAD-WAN-ACL
match interface GigabitEthernet0/0
set ip next-hop 8x.7x.2xx.2x1
!
route-map ETH-WAN permit 10
match ip address ETH-WAN-ACL
match interface GigabitEthernet0/1
set ip next-hop 2xx.2xx.7x.1x1
!
access-list 111 permit ip any 192.168.7.0 0.0.0.255 log
access-list 121 remark inside_ETH-WAN
access-list 121 permit ip any 192.168.9.0 0.0.0.255
!
control-plane
!...........
end

Модерирует : lynx, Crash_Master, dg, emx, ShriEkeR
Версия для печати • Подписаться • Добавить в закладки
На первую страницу • к этому сообщению • к последнему сообщению