华为路由器4E1口开局调试案例

yunvn

NE16的配置　　hostname SD_TA-NE16A
　　enable password level 15 7 NUaPUFS<;Y)(`_\_0/*Z(Q!!
　　user tacrc service-type exec password 7 $TYJ2T!W-5_:C:"-501K]!!!
　　user taian_crc service-type exec password 7 $TYJ2T!W-5_:C:"-501K]!!!
　　user xintai service-type ppp password 0 xintai
　　user taiancrc service-type ppp password 0 taiancrc
　　user xinwen service-type ppp password 0 xinwen

　　router>　　access-list 1 permit 10.0.0.0 0.255.255.255
　　access-list 1 permit 168.10.0.0 0.0.255.255
　　access-list 1 deny any
　　access-list 2 deny 10.0.0.0 0.255.255.255
　　access-list 2 deny 168.10.0.0 0.0.255.255
　　access-list 2 permit any
　　access-list 101 deny icmp any any
　　access-list 101 deny tcp any any eq 69
　　access-list 101 deny tcp any any eq 135
　　access-list 101 deny tcp any any eq 139
　　access-list 101 deny tcp any any eq 445
　　access-list 101 deny udp any any eq tftp
　　access-list 101 permit ip any any
　　access-list 101 deny tcp any any eq 4444
　　firewall enable slot 0
　　firewall enable slot 1
　　firewall enable slot 2
　　firewall enable slot 7
　　enable vlan mode L3
　　multilink-user xintai bind Virtual-Template 1
　　multilink-user taiancrc bind Virtual-Template 3
　　multilink-user xinwen bind Virtual-Template 2
　　controller E1 2/1/0
　　using e1
　　controller E1 2/1/1
　　using e1
　　controller E1 2/1/2
　　using e1
　　controller E1 2/1/3
　　using e1
　　controller E1 2/1/4
　　using e1
　　controller E1 2/1/5
　　using e1
　　controller E1 2/1/6
　　using e1
　　controller E1 2/1/7
　　using e1
　　interface Ethernet0/2/0
　　speed 100
　　duplex full
　　description to-ZhongXinJu-MA5100,100M FE
　　ip access-group 101 in
　　ip access-group 101 out
　　interface Ethernet0/2/0.10
　　ip address 10.0.2.254 255.255.254.0
　　ip access-group 101 in
　　ip access-group 101 out
　　encap dot1q 10
　　interface Ethernet0/2/0.20
　　ip address 61.233.145.5 255.255.255.252
　　ip access-group 101 in
　　ip access-group 101 out
　　encap dot1q 20
　　interface Ethernet1/0/0
　　description To-LeYuan-MA5100,100M FE
　　interface Ethernet1/0/0.10
　　ip address 61.233.145.1 255.255.255.252
　　ip access-group 101 in
　　ip access-group 101 out
　　encap dot1q 10
　　interface Ethernet1/0/0.30
　　ip address 10.0.0.254 255.255.254.0
　　ip access-group 101 in
　　ip access-group 101 out
　　encap dot1q 30
　　interface Ethernet1/1/0
　　description To-ShiSiJu-MA5100,100M FE
　　interface Ethernet1/1/0.10
　　ip address 61.233.145.9 255.255.255.252
　　encap dot1q 10
　　interface Ethernet1/1/0.20
　　ip address 10.0.4.254 255.255.254.0
　　ip access-group 101 in
　　ip access-group 101 out
　　encap dot1q 20
　　interface Ethernet1/2/0
　　description to 3025m
　　ip address 10.10.0.1 255.255.0.0
　　interface Ethernet1/2/0.2
　　ip address 10.11.0.1 255.255.0.0
　　ip access-group 101 in
　　ip access-group 101 out
　　encap dot1q 2
　　interface Ethernet1/2/0.3
　　ip address 168.10.24.1 255.255.252.0
　　interface Ethernet1/2/0.4
　　ip address 168.10.32.1 255.255.255.0
　　interface Ethernet1/2/0.5
　　ip address 61.232.43.49 255.255.255.252
　　encap dot1q 5
　　interface Ethernet1/2/0.6
　　ip address 168.10.0.1 255.255.240.0
　　encap dot1q 6
　　interface Ethernet1/2/0.7
　　encap dot1q 7
　　interface Ethernet1/2/0.8
　　encap dot1q 8
　　interface Ethernet1/2/0.9
　　ip access-group 101 in
　　ip access-group 101 out
　　encap dot1q 9
　　interface Ethernet2/0/0
　　description to zhongxinyiyan line
　　interface Ethernet2/2/0
　　duplex full
　　description to rs3000
　　ip address 61.233.145.33 255.255.255.240
　　ip address 61.233.145.17 255.255.255.240 secondary
　　ip access-group 101 in
　　ip access-group 101 out
　　interface Serial2/1/0:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username taian-crc password 0 taian-crc
　　ppp multilink
　　interface Serial2/1/1:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username taian-crc password 0 taian-crc
　　ppp multilink
　　interface Serial2/1/2:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username taian-crc password 0 taian-crc
　　ppp multilink
　　interface Serial2/1/3:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username taian-crc password 0 taian-crc
　　ppp multilink
　　interface Serial2/1/4:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username xinwen password 0 xinwen
　　ppp multilink
　　interface Serial2/1/5:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username xinwen password 0 xinwen
　　ppp multilink
　　interface Serial2/1/6:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username xinwen password 0 xinwen
　　ppp multilink
　　interface Serial2/1/7:0
　　encapsulation ppp
　　ppp authentication pap
　　ppp pap sent-username xinwen password 0 xinwen
　　ppp multilink
　　interface Virtual-Template0
　　ppp multilink
　　description loopback
　　ip address 61.233.144.2 255.255.255.252
　　ip ospf network point-to-multipoint
　　interface Virtual-Template1
　　ip address 10.255.254.1 255.255.255.252
　　interface Virtual-Template2
　　ip address 61.233.145.53 255.255.255.252
　　interface Virtual-Template3
　　multilink max-bind 8
　　ip address 61.233.145.49 255.255.255.252
　　interface Pos0/0/0
　　encapsulation ppp
　　ip address 61.233.144.22 255.255.255.252
　　ip access-group 101 in
　　ip access-group 101 out
　　nat inside list 1
　　ip ospf cost 65
　　interface NULL0
　　router ospf
　　network 61.233.144.2  0.0.0.0  area 0.0.0.0
　　network 61.233.144.22  0.0.0.0  area 0.0.0.0
　　redistribute static
　　redistribute connected route-map deny
　　route-map deny permit 10
　　match ip address 2