中兴ZXR10 6905核心交换机配置案例

Connecting to 192.168.0.254:23...
Connection established.
To escape to local shell, press 'Ctrl+Alt+]'.
    *************************************************************************
    Welcome to ZXR10 Carrier-class High-end Routing Switch of ZTE Corporation
    *************************************************************************

Username:admin
Password:
internet_6905>en
internet_6905>enable
Password:

internet_6905#show version
ZXR10 6905 Software, Version ZXR10 G-Series&8900&6900 V2.8.01.C.24.P03, RELEASE SOFTWARE
Copyright (c) 2001-2008 by ZTE Corporation
Compiled Nov 30 2008, 12:44:43
ZXR10 Router Operating System Software, ZTE Corporation
ZXR10 ROS Version V4.8.11.01
System image files are flash:<//flash/img/zxr10.zar>
System uptime is 212 days, 20 hours, 35 minutes

[MEC, panel 1, master]
Main Processor: PowerPC MPC8541 Processor
System Memory : 512M bytes  ,    System Flash      : 64M bytes
System Serial : 15114       ,    System BaudRate   : 9600
System Nvram  : 8192 bytes  ,    Temperature       : 25¡
CPLD Version  : V2.0        ,    FPGA Version      : V1.2
Board Name    : RS-6905-MCS

[NPCI, panel 3]
Main Processor: PowerPC MPC8347EAT Processor
System Memory : 256M bytes  ,    System Flash      : 16M bytes
Board Type    : UMTF        ,    Network Processor : NO
Port Number   : 12          ,    CPLD Version      : V1.2
Temperature   : 25¡
Board Name    : RS-69S2-12GE-SFP4RJ   
Network Processor Status : DISABLE
         
[NPCI, panel 4]
Main Processor: PowerPC MPC8347EAT Processor
System Memory : 256M bytes  ,    System Flash      : 16M bytes
Board Type    : UGSE        ,    Network Processor : NO
Port Number   : 24          ,    CPLD Version      : V1.2
Temperature   : 24¡
Board Name    : RS-69S2-24GE-RJ   
Network Processor Status : DISABLE

internet_6905#show running-config
Building configuration...
!
!
ip dhcp enable
ip dhcp server dns 202.102.224.68 202.102.227.68
ip dhcp server leasetime 18000
!
urpf log off
!
vlan 10
name workstation
ip arp inspection
ip dhcp snooping
!
vlan 20
name to_m5100-ac
!
vlan list 1
!        
         
!        
!        
ip local pool workstation_ip 192.168.0.1 192.168.0.200 255.255.255.0
!        
iptv view-profile name DEFVAL id 0
iptv view-profile name DEFVAL count 3
iptv view-profile name DEFVAL duration 120
iptv view-profile name DEFVAL blackout 60
!        
!        
!        
interface vlan 10
  ip address 192.168.0.254 255.255.255.0
  peer default ip pool workstation_ip
  ip dhcp mode server
  ip dhcp server gateway 192.168.0.254
!        
interface vlan 20
  ip address 192.168.100.1 255.255.255.248
!        
interface null1
!        
interface gei_3/1
  negotiation auto
  ip access-group 120 in
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/2
  negotiation auto
  ip access-group 120 in
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/3
  negotiation auto
  ip access-group 120 in
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/4
  negotiation auto
  ip access-group 120 in
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/5
  negotiation auto
  ip access-group 120 in
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/6
  negotiation auto
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/7
  negotiation auto
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/8
  negotiation auto
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk vlan 1
  switchport trunk vlan 10
  switchport qinq normal
!        
interface gei_3/9
  hybrid-attribute copper
  negotiation auto
  switchport access vlan 1
  switchport qinq normal
  monitor session 1 destination
!        
interface gei_3/10
  hybrid-attribute copper
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_3/11
  hybrid-attribute copper
  negotiation auto
  switchport access vlan 20
  switchport qinq normal
  monitor session 1 source direction rx
!        
interface gei_3/12
  hybrid-attribute copper
  negotiation auto
  switchport access vlan 20
  switchport qinq normal
  monitor session 1 source direction rx
!        
interface gei_4/1
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/2
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/3
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/4
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/5
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/6
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/7
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/8
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/9
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/10
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/11
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/12
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/13
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/14
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/15
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/16
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/17
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/18
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/19
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/20
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/21
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/22
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/23
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
interface gei_4/24
  negotiation auto
  switchport access vlan 10
  switchport qinq normal
!        
!        
ip route 0.0.0.0 0.0.0.0 192.168.100.2
!        
multicast-limit 1024
ip igmp snooping
ip igmp snooping proxy
no ip igmp snooping querier
!        
ipv6 mld snooping
!        
!        
!        
acl extended number 120
  rule 1 deny tcp any any eq 135
  rule 2 deny tcp any any eq 136
  rule 3 deny tcp any any eq 137
  rule 4 deny tcp any any eq 138
  rule 5 deny tcp any any eq 139
  rule 6 deny tcp any any eq 389
  rule 7 deny tcp any any eq 445
  rule 8 deny tcp any any eq 4444
  rule 9 deny tcp any any eq 69
  rule 10 deny udp any any eq 135
  rule 11 deny udp any any eq 136
  rule 12 deny udp any any eq 389
  rule 13 deny udp any any eq 445
  rule 14 permit ip any any
!        
nas      
!        
udld message time 15
udld mac  0100.0ccc.cccc
udld recovery disable
udld recovery interval 180
!        
bfd-version 1
!        
!        
!        
!        
version V4.8.11.01
!        
nvram mng-ip-address 10.40.88.173 255.255.0.0
!        
nvram boot-username target
!        
nvram boot-password TARGET
!        
nvram boot-server 10.40.88.170
!        
nvram default-gateway 1.1.1.1
!        
nvram imgfile-location local
!        
hostname internet_6905
!        
enable secret level 15 5 R1dTRQ+EDF8W896h0tXkjQ==
!        
username lyrf password lyrf
username admin password lyrf
!        
user-authentication-type local
user-authorization-type local
!        
line console 0
  no login authentication
!        
banner incoming @
    *************************************************************************
    Welcome to ZXR10 Carrier-class High-end Routing Switch of ZTE Corporation
    *************************************************************************
@        
!        
!        
!        
!        
snmp-server location No.68 Zijinghua Rd. Yuhuatai District, Nanjing, China
snmp-server contact +86-25-52870000
snmp-server packetsize 1400
snmp-server engine-id 830900020300010289d64401
snmp-server user sw-user sw-grp v3 encrypted auth md5 137abd2b4b82f47a70846f952dbcb0b0 priv des56 137abd2b4b82f47a70846f952dbcb
0b0      
snmp-server group sw-grp v3 auth read AllView notify Allview
snmp-server community private view DefaultView rw
snmp-server community public view DefaultView ro
snmp-server view view iso included
snmp-server view AllView internet included
snmp-server view DefaultView system included
snmp-server host 192.168.0.198 trap version 2c public udp-port 161
snmp-server enable inform SNMP
snmp-server enable inform VPN
snmp-server enable inform BGP
snmp-server enable inform OSPF
snmp-server enable inform RMON
snmp-server enable inform STALARM
snmp-server enable trap SNMP
snmp-server enable trap VPN
snmp-server enable trap BGP
snmp-server enable trap OSPF
snmp-server enable trap RMON
snmp-server enable trap STALARM
!        
!        
logging on
logging buffer 200
logging mode fullcycle
logging console notifications
logging level notifications
logging cmdlog-interval 2880
logging timestamps datetime localtime
alarm cpuload-on
alarm cpuload-interval 30
alarm cpuload-threshold high-grade 95 middle-grade 85 low-grade 75
syslog-server facility local0
!        
line console idle-timeout 120
line console absolute-timeout 1440
line telnet idle-timeout 120
line telnet absolute-timeout 1440
!        
ssh server authentication ispgroup 1
ssh server authentication mode local
ssh server authentication type chap
no ssh server only
ssh server version 2
!        
!        
radius auto-change off
!        
!        
tacacs disable
tacacs-server timeout 5
tacacs-server packet 1024
!        
!        
port-status check off
!        
!        
end