網(wǎng)絡(luò)設(shè)備操作手冊s5700

1、S5700-SI 操作手：2014-4-22為術(shù)務(wù)限公司Technologies Co.,.1)#配置設(shè)備名（例 CDCloud_N_S5700_1 命名）sysname CDCloud_F_S5700_12)#配置登陸方式(net,ssh,web,ppp,terminal) aaa (進入 AAA 模式)local-user user1 password cipher Admin123（配置用戶賬號及）local-user user1 service-type ppp terminalnet ssh（配置登陸方式）local-user user1 level 15 (配置用戶級別0-15)

2、user-erface vty 0 4 (進入VTY接口) authentication-mode aaa (認證模式AAA)protocol inbound all (VTY進站模式all,根據(jù)需求可設(shè)置進站方式)#SNMP 配置snmp-agent3)snmp-agent local-engineid 000007DB7 snmp-agent community read ciphersnmp-agent community write cipherF000068F4（設(shè)備編碼，無需配置）用戶根據(jù)規(guī)劃配置SNMP讀)XX用戶根據(jù)規(guī)劃配置SNMP寫）XX (snmp-agent sys-in

3、fo verall （SNMP的all全部版本）snmp-agent-host trap addredp-06 params securityname123 （告警至目標）NTP 時鐘同步ntp-service unicast-server 0配置設(shè)備管理地址erface Vlanif2description S5700_1 GuanLiDiZhiip address 5 路由配置ip route-sic 54建立 ETH-trunk 組erface Eth-Trunk1description to E10&E11_CE12808_Eth-Trunk2 port link-type trunk

4、4)5)6)7)undo port trunk alloss vlan 1port trunk allo#ss vlan 2添加接口至ETH-trunk1組erface GigabitEthernet0/0/1description to E10_CE12808_1_GE1/2/0/0 eth-trunk 1#erface GigabitEthernet0/0/2description to E11_CE12808_2_GE2/2/0/0 eth-trunk 1#8)dhcp：dhcp enablevlan 下行連接其它交換機VLAN dhcp select relaydhcp relay s

5、erver-ip 4dhcp relay server-ip 79)生成樹STP enablestp mode stp 設(shè)置為stpstp root primary 指定根交換機stp bpdu-protection 啟用BPDU保護10)dldp enable 鏈路檢測協(xié)議連接3700聚合口下DLDP enable11)Snet/SSH 登陸：rsa local-key-pair create 本地密鑰snet server enable 使能ssh user 用戶名 新建用戶ssh user 用戶名 service-type snet 指定類型為snet user-erface vty 0

6、 4usrivilege level 0 用戶權(quán)限最低ssh user 用戶名 authentication-type password認證方式為PASSWORDssh cnt-time enable 首次認證配置12)、登陸 5 分鐘無操作自動退出：erface con 0user-authentication-mode passwordset authentication password cipher idle-timeout 5 0supassword level 3 cipher設(shè)備超級aaa new-m啟用3A認證13)連接用戶 PC 端口設(shè)置為 AC端口SPort link-ty

7、pe acPort default vlans14)連接網(wǎng)絡(luò)設(shè)備之間為 trunk端口Port link-type trunkPort trunk alloss vlan15)連接網(wǎng)絡(luò)設(shè)備有用戶 PC 用 hybirddescription YunLingHuaYuanAG undo port hybrid vlan 1port hybrid tagged vlan 2port hybrid untagged vlan 2001port vlan-stacking vlan 800 to 943 stack-vlan 2001port vlan-stacking vlan 1301 to 13

8、96 stack-vlan 200116)所有光纖級連口開啟單相鏈路檢測udld enableudld port 光纖級聯(lián)接口udld message time 可以設(shè)置消息間隔，默認15S17)info-center loghost 1 發(fā)送日志到指定地址18)undo http server enableundo nap slave enable模板上是關(guān)閉的，請判斷設(shè)備各接口的從接口功能19）配置 HWTACACS 方案hwtacacs-server templatngan_oahwtacacs-server authentication 84hwtacacs-server authen

9、tication 85 secondary hwtacacs-server authorization 84hwtacacs-server authorization 85 secondary hwtacacs-server accounting 84hwtacacs-server accounting 85 secondaryhwtacacs-server shared-key cipher 密鑰與hwtacacs服務(wù)器一致undo hwtacacs-server user-name aaaauthentication-scheme default authorization-scheme default accounting-scheme defaultdefaultdefault_admi