Extreme設(shè)備常用配置手冊

1、extreme3808交換機(jī)和6808交換機(jī)對多業(yè)務(wù)的支持很好，但是穩(wěn)定性稍差，隔段時間需要升級ios 在電信級的骨干交換機(jī)上很多是用extreme用戶名和密碼配置create account admin | user encrypted configure account adminport配置config ports auto off speed 10 | 100 | 1000 duplex half | full auto offVlan配置無論是核心還是接入層，都要先創(chuàng)建三個Vlan，并且將所有歸于Default Vlan的端口刪除：config vlan default del po

2、rt allcreate vlan Servercreate vlan Usercreate vlan Manger定義802.1q標(biāo)記config vlan Server tag 10config vlan User tag 20config vlan Manger tag 30設(shè)定Vlan網(wǎng)關(guān)地址：config vlan Server ipa 192.168.41.1/24config vlan User ipa 192.168.40.1/24config vlan Manger ipa 192.168.*.*/24Enable ipforwarding啟用ip路由轉(zhuǎn)發(fā)，即vlan間路由T

3、runk配置config vlan Server add port 1-3 tconfig vlan User add port 1-3 tconfig vlan manger add port 1-3 tVRRP配置enable vrrpconfigure vrrp add vlan UserVlanconfigure vrrp vlan UserVlan add master vrid 10 192.168.6.254configure vrrp vlan UserVlan authentication simple-password extremeconfigure vrrp vlan

4、UserVlan vrid 10 priority 200configure vrrp vlan UserVlan vrid 10 advertisement-interval 15configure vrrp vlan UserVlan vrid 10 preempt端口鏡像配置enable mirroring to port 3 #選擇 3 作為鏡像口config mirroring add port 1 #把端口 1 的流量發(fā)送到 3config mirroring add port 1 vlan default #把 1 和 vlan default 的流量都發(fā)送到 3port-cha

5、nnel 配置enable sharing grouping port-based | address-based | round-robinstp配置enable stpdcreate stpd *configure stpd add vlan ports dotld | emistp | pvst-plusconfigure stpd stpd1 priority 16384configure vlan marketing add ports 2-3 stpd stpd1 emistpDHCP中繼配置enable bootprelayconfig bootprelay add NAT配置E

6、nable nat #啟用 natStatic NAT Rule Exampleconfig nat add out_vlan_1 map source 192.168.1.12/32 to 216.52.8.32/32Dynamic NAT Rule Exampleconfig nat add out_vlan_1 map source 192.168.1.0/24 to 216.52.8.1 - 216.52.8.31 Portmap NAT Rule Exampleconfig nat add out_vlan_2 map source 192.168.2.0/25 to 216.52.

7、8.32 /28 both portmap Portmap Min-Max Exampleconfig nat add out_vlan_2 map source 192.168.2.128/25 to 216.52.8.64/28 tcp portmap 1024 - 819210.OSPF 配置enable ospf 啟用 OSPF 進(jìn)程create ospf area 倉0建 OSPF 區(qū)域configure ospf routerid automatic | 配置 Routeridconfigure ospf add vlan | all area passive把某個 vlan 加

8、到某個Area中去，相當(dāng)于Cisco中的network的作用configure ospf area add range advertise | noadvertise type-3 | type-7把某個網(wǎng)段加到某個Area中去，相當(dāng)于Cisco中的network的作 用configure ospf vlan neighbor add OSPF中路由重發(fā)布配置enable ospf export direct cost ase-type-1 | ase-type-2 tag | enable ospf export static cost ase-type-1 | ase-type-2 tag

9、 | enable ospf originate-default always cost ase-type-1 | ase-type-2 tag enable ospf originate-router-id11.SNMP 配置enable snmp accessenable snmp trapscreate access-profile type ipaddress | vlanconfig snmp access-profile readonly | nonejE置 snmp 的只讀訪問歹。表,none是去除config snmp access-profile readwrite | no

10、ne這是控制讀寫控制config snmp add trapreceiver port community from 配置 snmp 接收 host 和團(tuán)體字符串安全配置disable ip-option loose-source-routedisable ip-option strict-source-routedisable ip-option record-routedisable ip-option record-timestampdisable ipforwarding broadcastdisable udp-echo-serverdisable irdp vlan disable

11、 icmp redirectdisable web關(guān)閉web方式訪問交換機(jī)enable cpu-dos-protectAccessLists 配置create access-list icmp destination sourcecreate access-list ip destination source portscreate access-list tcp destination source portscreate access-list udp destination source ports默認(rèn)路由配置config iproute add default 恢復(fù)出廠值，但不包括用戶

12、改的時間和用戶帳號信息unconfig switch all檢查配置show versionshow configshow sessionshow management查看管理信息，以及snmp信息show bannershow ports configurationshow ospfshow access-list | port show access-list-monitorshow ospf area show ospf area detailshow ospf ase-summaryshow ospf interfaces vlan | area unconfigure ospf vl

13、an | area 17.備份和升級軟件download image | primary | secondary upload image | primary | secondary use image primary | secondary小知識點：DHCP中繼。bootp relay /dhcp relay用于主機(jī)獲取它的IP地址，但是在一個高度需要安全的網(wǎng)絡(luò)中需要以更安全的方法配置它，比如通過udp-forwarding的方法來配置 dhcp relay。disablebootprelay 以下是一個用 udp-forwarding 代替 enable bootrelay 的配置例子。create udp-profile backbonedhcpconfig backbonedhcp add 67 ipaddress *confi