interface VLAN 4094 |
ip address 1.1.1.5 255.255.255.252 |
! |
interface AggregatePort 255 |
! |
interface xxx |
port-group 255 mode active |
lacp short-timeout |
interface xxx |
port-group 255 mode active |
lacp short-timeout |
! |
interface AggregatePort 255 |
no mac-address-learning |
switchport mode trunk |
switchport trunk allowed vlan only 2-4094 |
peer-link |
! |
interface AggregatePort 254 |
no switchport |
! |
interface xxx |
no switchport |
port-group 254 mode active |
lacp short-timeout |
! |
interface xxx |
no switchport |
port-group 254 mode active |
lacp short-timeout |
! |
interface AggregatePort 254 |
no switchport |
ip address 1.1.1.1 255.255.255.252 |
vap error-down except |
! |
vap domain 1 |
no fast-convergence |
recover up-delay 120 none-vap 60 |
priority 5 |
data-sync local 1.1.1.5 peer 1.1.1.6 |
peer-keepalive local 1.1.1.1 peer 1.1.1.2 |
dual-active auto recovery |
log日志配置
service sequence-numbers |
service timestamps debug datetime msec |
service timestamps log datetime msec |
logging userinfo command-log |
logging source interface Mgmt 0 |
logging facility local4 |
logging server xxx udp-port xxx level warnings |
logging server xxx udp-port xxx level warnings |
snmp配置
snmp-server host xxx traps version 2c xxx |
snmp-server host xxx traps version 2c xxx |
snmp-server user yundiao SNMPGROUP v3 auth sha xxx priv aes128 xxx |
snmp-server group SNMPGROUP v3 priv read default write default access 2000 |
snmp-server community xxx RO 2000 |
snmp-server trap-source mgmt 0 |
snmp-server enable traps |
no snmp-server enable version v1 |
生成树配置
spanning-tree mst configuration | |
revision 255 | |
name ctyun | |
instance 1 vlan 1-4094 | |
! | |
spanning-tree |
spanning-tree bpdufilter enable
远程端口配置
line vty 0 9 |
transport input ssh |
session-timeout 10 |
access-class xxx in |
login local |
width 256 |
logging synchronous |
privilege level 15 |
! |
svi router-acls enable