三层网络设备标准化配置

《三层网络设备标准化配置》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、目录1网络设备标准化配置1.1交换机配置网络设备标准化配置目的：1.标准化网络设备配置；2.提高网络设备管理安全；3.提高网络设备监管能力，并清晰记录相关口志信息，提高网络问题可查性;1.1交换机配置网络设备配置模板:基础服务及生成树配置（无需更改）ipdomain-namexinaogroup.comnoservicepadservicetcp-keepalives-inservicetcp-keepalives-outservicetimestampsdebugdatetimemseclocaltimeshow

2、-timezoneservicetimestampslogdatetimemseclocaltimeshow-timezoneservicepassword-encryptionclocktimezoneBJT8boot-start-markerboot-end-markernoipbootpservernoiphttpservernoipsource-routenoipdomain-lookuperrdisablerecoverycausebpduguarderrdisablerecoverycauselink-

3、flaperrdisablerecoverycauselooperrdisablerecoveryinter300errdisablerecoverycausepsecure-violationspanning-treemoderapid-pvstspanning-treeloopguarddefaultsparming-treeextendsystem-idspanning-treevlan10-300priority24576厂视iff况定*/noiphttpsecure-servernoiphttpserve

4、riprouting日志配置（无需更改）loggingtrapnotificationslogging10.37.4.102loggingconsolecriticalloggingbuffered32768notificationsVTP及SNMP、banner登录及访问控制（无需更改）access-list99permit10.37.4.102access-list199remark/**************************^access-list199remarkRemoteAccessautho

5、rizedserversaccess-list199remark*********************************************access-list199permittcp10.0.0.00.255.255.255anylogaccess-list199denytcpanyanyrange065535logaccess-list199denyipanyanyloglinevty015access-class199intransportinputtelnetssh厂若ios不支持ssh可只

6、开启telnet*/exisnmp-servercommunityEnnNWmo$RO99snmp-servertraplinkietfsnmp-serverenabletrapsconfigsnmp-serverenabletrapscputhresholdsnmp-serverifindexpersistsnmp-serverenabletrapserrdisablesnmp-serverenabletrapssyslogsnmp-serverhost10.37.4.102xinaoranqisnmp-serv

7、erifindexpersistbannermotd八*******ThisisaprivatepropertyfacilitytobeaccessedandusedforENNinternalsystems.UnauthorizedAccessProhibited!*******iNTP配置（无需更改）ntpauthentication-key123md51qazxsw2ntpauthenticatentptrusted-key123ntpserver10.37.254.250prentpserver10.37.

8、254.249AAA认证（密码需要更改，其他无需更改）usernameadminprivilege15secretEnNnwp@s0bWanaaanew-modelradius-serverhost10.37.8.103auth-port1812acct-port1813key1qazxsw2radius-serverhost10.37.8.101auth-