某学校核心交换机配置

cafc_xj_6509#show run
cafc_xj_6509#show running-config
Building configuration...

Current configuration : 12334 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
service counters max age 10
!
hostname cafc_xj_6509
!
boot system flash sup-bootflash:s72033-jk9sv-mz.122-18.SXD7.bin
boot bootldr sup-bootflash:
enable secret 5 $1$ThUf$lTreebKRwzGgLTcL97WBT/
!
username cisco password 7 15060401
no aaa new-model
ip subnet-zero
!
!
no ip domain-lookup
!
mls ip multicast flow-stat-timer 9
no mls flow ip
no mls flow ipv6
mls qos
mls cef error action freeze
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
diagnostic cns publish https://www.360docs.net/doc/337985811.html,s.device.diag_results
diagnostic cns subscribe https://www.360docs.net/doc/337985811.html,s.device.diag_commands
!
redundancy
mode sso
main-cpu
auto-sync startup-config
auto-sync running-config
auto-sync bootvar
auto-sync standard
!
vlan internal allocation policy ascending
vlan access-log ratelimit 2000
!
class-map match-all http
match protocol http
class-map match-all feixing
match access-group 101
!
!
policy-map http
class http
bandwidth percent 80
random-detect
police 8000000 8000 8000 conform-action transmit exceed-action drop
class feixing
police 2000000 2000 2000 conform-action transmit exceed-action drop
!
!
!
interface GigabitEthernet1/1
description to hwb_truk
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/2
description to wxk_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/3
description to xjsl_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/4
description to mnjf_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
!
interface GigabitEthernet1/5
description to jtjs_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
!
interface GigabitEthernet1/6
description to tsg_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
!
interface GigabitEthernet1/7
description to bgl_leader_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/8
description to bgl_acount_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/9
description to bgl_qita_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/10
description to gongyingke_trunk
no ip address
switchport
switchport trunk encapsulation dot1q
!
interface GigabitEthernet1/11
no ip address
!
interface GigabitEthernet1/12
no ip address
!
inter

face GigabitEthernet1/13
no ip address
!
interface GigabitEthernet1/14
no ip address
!
interface GigabitEthernet1/15
no ip address
!
interface GigabitEthernet1/16
no ip address
!
interface GigabitEthernet1/17
no ip address
shutdown
!
interface GigabitEthernet1/18
no ip address
shutdown
!
interface GigabitEthernet1/19
no ip address
shutdown
!
interface GigabitEthernet1/20
no ip address
shutdown
!
interface GigabitEthernet1/21
no ip address
shutdown
!
interface GigabitEthernet1/22
no ip address
shutdown
!
interface GigabitEthernet1/23
no ip address
shutdown
!
interface GigabitEthernet1/24
no ip address
shutdown
!
interface GigabitEthernet4/1
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/2
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/3
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/4
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/5
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/6
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/7
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/8
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/9
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/10
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/11
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/12
no ip address
switchport
switchport access vlan 110
switchport mode access
!
interface GigabitEthernet4/13
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/14
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/15
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/16
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/17
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/18
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/19
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet4/20
no ip address
switchport
switchport access vlan 5
switchport mode access
!
interface Gigab

itEthernet4/21
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/22
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/23
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/24
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/25
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/26
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/27
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/28
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/29
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/30
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet4/31
no ip address
shutdown
!
interface GigabitEthernet4/32
no ip address
shutdown
!
interface GigabitEthernet4/33
no ip address
shutdown
!
interface GigabitEthernet4/34
no ip address
shutdown
!
interface GigabitEthernet4/35
no ip address
shutdown
!
interface GigabitEthernet4/36
no ip address
shutdown
!
interface GigabitEthernet4/37
no ip address
shutdown
!
interface GigabitEthernet4/38
no ip address
shutdown
!
interface GigabitEthernet4/39
no ip address
shutdown
!
interface GigabitEthernet4/40
no ip address
shutdown
!
interface GigabitEthernet4/41
no ip address
shutdown
!
interface GigabitEthernet4/42
no ip address
shutdown
!
interface GigabitEthernet4/43
no ip address
shutdown
!
interface GigabitEthernet4/44
no ip address
shutdown
!
interface GigabitEthernet4/45
no ip address
shutdown
!
interface GigabitEthernet4/46
no ip address
shutdown
!
interface GigabitEthernet4/47
description to pix
ip address 172.16.96.49 255.255.255.248
service-policy input http
service-policy output http
!
interface GigabitEthernet4/48
description test
no ip address
switchport
switchport access vlan 8
switchport mode access
!
interface GigabitEthernet5/1
no ip address
shutdown
!
interface GigabitEthernet5/2
no ip address
shutdown
!
interface GigabitEthernet6/1
no ip address
shutdown
!
interface GigabitEthernet6/2
no ip address
shutdown
!
interface Group-Async1
physical-layer async
no ip address
encapsulation slip
!
interface Vlan1
description device_ip
ip address 172.16.98.1 255.255.255.0
!
interface Vlan5
description server_defaultgateway
ip address 172.16.97.126 255.255.255.128
!
interface Vlan8
description netman_defaultgateway
ip address 172.16.97.254 255.

255.255.128
ip policy route-map GW-2
!
interface Vlan22
description to hwb3560_3layer
ip address 172.16.96.1 255.255.255.252
!
interface Vlan23
description to jtjs3560_3layer
ip address 172.16.96.21 255.255.255.252
!
interface Vlan24
description to tsg3560_3layer
ip address 172.16.96.25 255.255.255.252
!
interface Vlan25
description to mnjf3560_3layer
ip address 172.16.96.17 255.255.255.252
!
interface Vlan26
description to wxk3560_3layer
ip address 172.16.96.9 255.255.255.252
!
interface Vlan27
description to xjsl3560_3layer
ip address 172.16.96.13 255.255.255.252
!
interface Vlan33
description to kongyike_3layer
ip address 172.16.96.41 255.255.255.252
!
interface Vlan52
description hwb_gateway
ip address 172.16.99.254 255.255.255.192
ip policy route-map GW-2
!
interface Vlan53
description BGL_LEADER
ip address 172.16.100.126 255.255.255.128
ip policy route-map GW-2
!
interface Vlan55
description defaultgateway
ip address 172.16.101.126 255.255.255.128
!
interface Vlan56
no ip address
ip access-group 101 in
ip access-group 101 out
rate-limit output access-group 101 10000000 16000 16000 conform-action transmit exceed-action drop
!
interface Vlan57
no ip address
ip access-group 101 in
ip access-group 101 out
rate-limit output access-group 101 10000000 16000 16000 conform-action transmit exceed-action drop
!
interface Vlan58
no ip address
ip access-group 101 in
ip access-group 101 out
rate-limit output access-group 101 10000000 16000 16000 conform-action transmit exceed-action drop
!
interface Vlan66
description BGL_COUNNT
ip address 172.16.106.254 255.255.255.128
ip policy route-map GW-2
!
interface Vlan67
description BGL_QITA
ip address 172.16.107.126 255.255.255.128
!
interface Vlan69
description jiwubu_gateway
ip address 172.16.108.254 255.255.255.0
ip policy route-map GW-2
!
interface Vlan70
description to daduizhuli
no ip address
!
interface Vlan100
no ip address
shutdown
!
interface Vlan110
ip address 172.16.110.254 255.255.255.0
ip policy route-map GW-2
!
router ospf 99
log-adjacency-changes
redistribute connected subnets
redistribute static subnets
network 172.16.96.8 0.0.0.3 area 10
network 172.16.96.16 0.0.0.3 area 0
network 172.16.96.20 0.0.0.3 area 4
network 172.16.96.24 0.0.0.3 area 5
network 172.16.96.40 0.0.0.3 area 6
default-information originate always
!
ip classless
no ip route static inter-vrf
ip route 0.0.0.0 0.0.0.0 172.16.96.51
ip route 172.16.0.0 255.255.224.0 172.16.96.50
ip route 192.168.0.0 255.255.255.0 172.16.96.50
ip route 211.83.128.0 255.255.248.0 172.16.96.50
ip route 222.18.64.0 255.255.240.0 172.16.96.50
ip http server
!
!
!
access-list 101 permit ip 172.16.101.0 0.0.0.255 any time-range sparetime
access-list 101 permit ip 172.16.102.0 0.0.0.255 any time-range sparetime
access-list 101 deny ip 172.16.102.0 0.0.0.255 any time-range worktime
acc

ess-list 101 deny ip 172.16.101.0 0.0.0.255 any time-range worktime
access-list 104 permit ip 172.16.97.0 0.0.0.255 any
access-list 105 permit ip any host 172.16.97.1
access-list 105 permit ip any host 172.16.98.1
access-list 106 permit ip 172.16.106.0 0.0.0.255 any
access-list 107 permit ip 172.16.99.0 0.0.0.255 any
access-list 108 permit ip 172.16.108.0 0.0.0.255 any
access-list 109 permit ip 172.16.100.0 0.0.0.255 any
!
route-map GW-2 deny 5
match ip address 105
!
route-map GW-2 permit 10
match ip address 106 107 108 109 104 105
set ip next-hop 172.16.96.50
!
snmp-server community lliao RO
!
!
control-plane
!
!
!
dial-peer cor custom
!
!
!
banner motd ^CC Here is private network equipment.No entry but for authorized administrators.^C
!
line con 0
password 7 0110070558
login
line vty 0 4
password 7 06050E204F
login
!
time-range sparetime
periodic weekdays 18:00 to 23:45
periodic weekend 8:00 to 23:45
!
time-range test
periodic weekdays 8:00 to 18:00
periodic weekdays 0:00 to 23:59
!
time-range worktime
periodic weekdays 8:00 to 17:30
!
end

cafc_xj_6509#