交换机M1：
con ter
hostname SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M1-01U37
DAD检测:
interface TenGigabitEthernet 0/47
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Te0/47_M-LAG_keepalive
no switchport
port-group 254 mode active
exit
interface TenGigabitEthernet 0/48
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Te0/48_M-LAG_keepalive
no switchport
port-group 254 mode active
!
interface AggregatePort 254
description For_DAD
no switchport
ip add 1.1.1.1 255.255.255.252
vap error-down except
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Te0/48_M-LAG_keepalive
Peerlink:
interface HundredGigabitEthernet 0/55
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Hu0/55_Peerlink
!
interface HundredGigabitEthernet 0/56
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Hu0/56_Peerlink
!
interface AggregatePort 255
description For_peerlink
no mac-address-learning
switchport mode trunk
peer-link
!
vlan 4094
name vap
interface vlan 4094
description For_VAP
ip add 1.1.1.5 255.255.255.252
VAP:
vap domain 1
no fast-convergence
recover up-delay 120 none-vap 60
priority 7
data-sync local 1.1.1.5 peer 1.1.1.6
peer-keepalive local 1.1.1.1 peer 1.1.1.2
dual-active auto recovery
下行端口配置
创建聚合组
interface AggregatePort 1
exit
interface AggregatePort 11
exit
interface AggregatePort 16
exit
interface AggregatePort 33
exit
interface AggregatePort 38
exit
配置端口数据 ten01口
interface ten 0/1
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-1
port-group 11 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 11
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond1 端口描述
switchport mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
vap 11
exit
管理服务器
interface ten 0/3
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-1
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
sw mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
exit
管理服务器
interface ten 0/4
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
管理服务器
interface ten 0/5
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
存储服务器
interface ten 0/6
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-1 端口描述
port-group 16 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 16
storm-control broadcast level 10
storm-control unicast level 10
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond1
switchport mode trunk
switchport trunk allowed vlan only 302
spanning-tree bpduguard enable
spanning-tree portfast
vap 16
exit
interface ten 0/23
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-2
port-group 33 mode active
lacp short-timeout
lacp individual-port enable
exit
interface AggregatePort 33
storm-control broadcast level 10
storm-control unicast level 10
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond2
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 33
exit
管理服务器
interface ten 0/25
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/26
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/27
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/28
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-2
port-group 38 mode active
lacp short-timeout
lacp individual-port enable
!
interface AggregatePort 38
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond2
storm-control broadcast level 10
storm-control unicast level 10
description dT:
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 38
exit
interface HundredGigabitEthernet 0/49
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.3.Hu0/49
port-group 1 mode active
!
interface AggregatePort 1
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.3.Agg11
switchport mode trunk
switchport trunk allowed vlan only 200-209,300-309,500-3999
spanning-tree bpdufilter enable
vap 1
!
snmp-server user yundiao SNMPGROUP v3 auth sha yundiao*&COC2016 priv aes128 yundiao*&COC2016
snmp-server group SNMPGROUP v3 priv read default write default access 2000
snmp-server trap-source Mgmt 0
snmp-server location SNMPGROUP
snmp-server host 10.100.1.136 vrf NET-manage traps version 2c yundiao*&COC2016
snmp-server host 30.116.198.136 vrf NET-manage traps version 2c yundiao
snmp-server host 30.116.198.137 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.136 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.137 vrf NET-manage traps version 2c yundiao
snmp-server enable traps
snmp-server community 7 yundiao*&COC2016 ro 2000
show runn | inc snmp
配置ACL：
ip access-list extended 2000
10 permit ip host 10.100.1.136 any
15 permit ip host 10.100.1.137 any
20 permit ip host 172.16.20.254 any
25 permit ip host 10.10.0.136 any
30 permit ip host 10.10.0.137 any
35 permit ip host 10.30.1.254 any
1000 deny ip any any
list-remark For_SNMP_NTP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.201.0 0.0.0.255 any
25 permit ip 10.252.134.0 0.0.1.255 any
30 permit ip 10.254.181.0 0.0.0.255 any
35 permit ip 10.100.1.128 0.0.0.127 any
40 permit ip 172.16.20.0 0.0.0.255 any
45 permit ip 10.30.0.0 0.0.1.255 any
50 permit ip 10.243.72.0 0.0.0.255 any
1000 deny ip any any
list-remark For_Login
!
show access-lists
NTP配置
ntp update-calendar
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 prefer
!
时区配置：
clock timezone beijingUTC +8 0
HASH配置
load-balance-profile default
y
ipv4 field src-ip dst-ip protocol l4-src-port l4-dst-port
ipv6 field src-ip dst-ip protocol l4-src-port l4-dst-port
hash-disturb 8
aggregateport load-balance enhanced profile default
SVI配置：
svi router-acls enable
设置MTU(巨帧模式)：
mtu forwarding 9126
使能SSH功能，关闭telnet功能，关闭web
enable service ssh-server
no enable service telnet-server
no enable service web-server all
!
开启netconf并且最大会话次数为10：
netconf max-sessions 10
密文配置
service password-encryption
创建账号密码：
username COC_monitor password 0 shixun@2023
username COC_operator privilege 15 password 0 shixun@2023
username openstackadmin privilege 15 password 0 shixun@2023
username sdnadmin privilege 15 password 0 shixun@2023
username yundiao_read password 0 shixun@2023
lldp配置：
lldp enable
lldp management-address-tlv 172.16.20.3
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
登录配置：
line console 0
session-timeout 10
privilege level 15
width 256
line vty 0 9
transport input ssh
access-class 2001 in
logging synchronous
session-timeout 10
privilege level 15
login local
width 256
日志相关配置
service timestamps debug datetime msec
service timestamps log datetime msec
logging userinfo command-log
logging buffered 1048576
logging file flash:syslog
logging flash interval 1
logging trap warnings
logging source interface Mgmt 0
logging facility local4
logging server 10.10.0.136 vrf NET-manage udp-port 5000
logging server 10.10.0.137 vrf NET-manage udp-port 5000
logging server 10.100.1.136 vrf NET-manage udp-port 5000
logging server 10.100.1.137 vrf NET-manage udp-port 5000
show interface description
write
核心：：
con ter
hostname SHDXYQB4-108-C-06_C-06-CSW-RGS6250-01U37
interface HundredGigabitEthernet 0/49
description dT:SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M1-01U37.Hu0/49
port-group 59 mode active
lacp short-timeout
lacp individual-port enable
interface HundredGigabitEthernet 0/50
description dT:SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M2-01U34.Hu0/50
port-group 59 mode active
lacp short-timeout
lacp individual-port enable
interface AggregatePort 59
description dT:SHDXYQB4-108-C-06-ASW-RGS6250-M-01U37_34/172.16.20.3/172.16.20.5.AGG1
switchport mode trunk
switchport trunk allowed vlan only 200-209,300-309,500-3999
interface TenGigabitEthernet 0/20
description uT:SHDXYQB4-108-C-09-BSW-RGS6250-01U31.Te0/20
switchport mode trunk
switchport trunk allowed vlan only 200
配置ACL：
ip access-list extended 2000
10 permit ip host 10.100.1.136 any
15 permit ip host 10.100.1.137 any
20 permit ip host 172.16.20.254 any
25 permit ip host 10.10.0.136 any
30 permit ip host 10.10.0.137 any
35 permit ip host 10.30.1.254 any
1000 deny ip any any
list-remark For_SNMP_NTP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.201.0 0.0.0.255 any
25 permit ip 10.252.134.0 0.0.1.255 any
30 permit ip 10.254.181.0 0.0.0.255 any
35 permit ip 10.100.1.128 0.0.0.127 any
40 permit ip 172.16.20.0 0.0.0.255 any
45 permit ip 10.30.0.0 0.0.1.255 any
50 permit ip 10.243.72.0 0.0.0.255 any
1000 deny ip any any
list-remark For_Login
!
show access-lists
NTP配置
ntp update-calendar
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 prefer
时区配置：
clock timezone beijingUTc +8 0
HASH配置
load-balance-profile default
y
ipv4 field src-ip dst-ip protocol l4-src-port l4-dst-port
ipv6 field src-ip dst-ip protocol l4-src-port l4-dst-port
hash-disturb 16
SVI配置：
svi router-acls enable
设置MTU(巨帧模式)：
mtu forwarding 9126
使能SSH功能，关闭telnet功能，关闭web
enable service ssh-server
no enable service telnet-server
no enable service web-server all
!
开启netconf并且最大会话次数为10：
netconf max-sessions 10
密文配置
service password-encryption
创建账号密码：
username COC_monitor password 0 shixun@2023
username COC_operator privilege 15 password 0 shixun@2023
username openstackadmin privilege 15 password 0 shixun@2023
username sdnadmin privilege 15 password 0 shixun@2023
username yundiao_read password 0 shixun@2023
lldp配置：
lldp enable
lldp management-address-tlv 172.16.20.1
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
登录配置：
line console 0
session-timeout 10
privilege level 15
width 256
line vty 0 9
transport input ssh
access-class 2001 in
logging synchronous
session-timeout 10
privilege level 15
login local
width 256
日志相关配置
service timestamps debug datetime msec
service timestamps log datetime msec
logging userinfo command-log
logging buffered 1048576
logging file flash:syslog
logging flash interval 1
logging trap warnings
logging source interface Mgmt 0
logging facility local4
logging server 10.10.0.136 vrf NET-manage udp-port 5000
logging server 10.10.0.137 vrf NET-manage udp-port 5000
logging server 10.100.1.136 vrf NET-manage udp-port 5000
logging server 10.100.1.137 vrf NET-manage udp-port 5000
show interface description
write
交换机M2：：：
con ter
hostname SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M2-01U34
DAD检测:
interface TenGigabitEthernet 0/47
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Te0/47_M-LAG_keepalive
no switchport
port-group 254 mode active
exit
interface TenGigabitEthernet 0/48
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Te0/48_M-LAG_keepalive
no switchport
port-group 254 mode active
!
interface AggregatePort 254
description For_DAD
no switchport
ip add 1.1.1.1 255.255.255.252
vap error-down except
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Te0/48_M-LAG_keepalive
Peerlink:
interface HundredGigabitEthernet 0/55
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Hu0/55_Peerlink
!
interface HundredGigabitEthernet 0/56
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Hu0/56_Peerlink
!
interface AggregatePort 255
description For_peerlink
no mac-address-learning
switchport mode trunk
peer-link
!
vlan 4094
name vap
interface vlan 4094
description For_VAP
ip add 1.1.1.5 255.255.255.252
VAP:
vap domain 1
no fast-convergence
recover up-delay 120 none-vap 60
priority 7
data-sync local 1.1.1.5 peer 1.1.1.6
peer-keepalive local 1.1.1.1 peer 1.1.1.2
dual-active auto recovery
下行端口配置
创建聚合组
interface AggregatePort 1
exit
interface AggregatePort 11
exit
interface AggregatePort 16
exit
interface AggregatePort 33
exit
interface AggregatePort 38
exit
配置端口数据 ten01口
interface ten 0/1
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-1
port-group 11 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 11
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond1 端口描述
switchport mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
vap 11
exit
管理服务器
interface ten 0/3
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-1
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
sw mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
exit
管理服务器
interface ten 0/4
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
管理服务器
interface ten 0/5
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
存储服务器
interface ten 0/6
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-1 端口描述
port-group 16 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 16
storm-control broadcast level 10
storm-control unicast level 10
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond1
switchport mode trunk
switchport trunk allowed vlan only 302
spanning-tree bpduguard enable
spanning-tree portfast
vap 16
exit
interface ten 0/23
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-2
port-group 33 mode active
lacp short-timeout
lacp individual-port enable
exit
interface AggregatePort 33
storm-control broadcast level 10
storm-control unicast level 10
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond2
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 33
exit
管理服务器
interface ten 0/25
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/26
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/27
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/28
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-2
port-group 38 mode active
lacp short-timeout
lacp individual-port enable
!
interface AggregatePort 38
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond2
storm-control broadcast level 10
storm-control unicast level 10
description dT:
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 38
exit
interface HundredGigabitEthernet 0/49
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.5.Hu0/49
port-group 1 mode active
!
interface AggregatePort 1
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.5.Agg11
switchport mode trunk
switchport trunk allowed vlan only 200-209,300-309,500-3999
spanning-tree bpdufilter enable
vap 1
!
snmp-server user yundiao SNMPGROUP v3 auth sha yundiao*&COC2016 priv aes128 yundiao*&COC2016
snmp-server group SNMPGROUP v3 priv read default write default access 2000
snmp-server trap-source Mgmt 0
snmp-server location SNMPGROUP
snmp-server host 10.100.1.136 vrf NET-manage traps version 2c yundiao*&COC2016
snmp-server host 30.116.198.136 vrf NET-manage traps version 2c yundiao
snmp-server host 30.116.198.137 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.136 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.137 vrf NET-manage traps version 2c yundiao
snmp-server enable traps
snmp-server community 7 yundiao*&COC2016 ro 2000
show runn | inc snmp
配置ACL：
ip access-list extended 2000
10 permit ip host 10.100.1.136 any
15 permit ip host 10.100.1.137 any
20 permit ip host 172.16.20.254 any
25 permit ip host 10.10.0.136 any
30 permit ip host 10.10.0.137 any
35 permit ip host 10.30.1.254 any
1000 deny ip any any
list-remark For_SNMP_NTP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.201.0 0.0.0.255 any
25 permit ip 10.252.134.0 0.0.1.255 any
30 permit ip 10.254.181.0 0.0.0.255 any
35 permit ip 10.100.1.128 0.0.0.127 any
40 permit ip 172.16.20.0 0.0.0.255 any
45 permit ip 10.30.0.0 0.0.1.255 any
50 permit ip 10.243.72.0 0.0.0.255 any
1000 deny ip any any
list-remark For_Login
!
show access-lists
NTP配置
ntp update-calendar
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 prefer
!
时区配置：
clock timezone beijingUTC +8 0
HASH配置
load-balance-profile default
y
ipv4 field src-ip dst-ip protocol l4-src-port l4-dst-port
ipv6 field src-ip dst-ip protocol l4-src-port l4-dst-port
hash-disturb 8
aggregateport load-balance enhanced profile default
SVI配置：
svi router-acls enable
设置MTU(巨帧模式)：
mtu forwarding 9126
使能SSH功能，关闭telnet功能，关闭web
enable service ssh-server
no enable service telnet-server
no enable service web-server all
!
开启netconf并且最大会话次数为10：
netconf max-sessions 10
密文配置
service password-encryption
创建账号密码：
username COC_monitor password 0 shixun@2023
username COC_operator privilege 15 password 0 shixun@2023
username openstackadmin privilege 15 password 0 shixun@2023
username sdnadmin privilege 15 password 0 shixun@2023
username yundiao_read password 0 shixun@2023
lldp配置：
lldp enable
lldp management-address-tlv 172.16.20.5
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
登录配置：
line console 0
session-timeout 10
privilege level 15
width 256
line vty 0 9
transport input ssh
access-class 2001 in
logging synchronous
session-timeout 10
privilege level 15
login local
width 256
日志相关配置
service timestamps debug datetime msec
service timestamps log datetime msec
logging userinfo command-log
logging buffered 1048576
logging file flash:syslog
logging flash interval 1
logging trap warnings
logging source interface Mgmt 0
logging facility local4
logging server 10.10.0.136 vrf NET-manage udp-port 5000
logging server 10.10.0.137 vrf NET-manage udp-port 5000
logging server 10.100.1.136 vrf NET-manage udp-port 5000
logging server 10.100.1.137 vrf NET-manage udp-port 5000
show interface description
write
con ter
hostname SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M1-01U37
DAD检测:
interface TenGigabitEthernet 0/47
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Te0/47_M-LAG_keepalive
no switchport
port-group 254 mode active
exit
interface TenGigabitEthernet 0/48
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Te0/48_M-LAG_keepalive
no switchport
port-group 254 mode active
!
interface AggregatePort 254
description For_DAD
no switchport
ip add 1.1.1.1 255.255.255.252
vap error-down except
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Te0/48_M-LAG_keepalive
Peerlink:
interface HundredGigabitEthernet 0/55
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Hu0/55_Peerlink
!
interface HundredGigabitEthernet 0/56
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U34:172.16.20.3.Hu0/56_Peerlink
!
interface AggregatePort 255
description For_peerlink
no mac-address-learning
switchport mode trunk
peer-link
!
vlan 4094
name vap
interface vlan 4094
description For_VAP
ip add 1.1.1.5 255.255.255.252
VAP:
vap domain 1
no fast-convergence
recover up-delay 120 none-vap 60
priority 7
data-sync local 1.1.1.5 peer 1.1.1.6
peer-keepalive local 1.1.1.1 peer 1.1.1.2
dual-active auto recovery
下行端口配置
创建聚合组
interface AggregatePort 1
exit
interface AggregatePort 11
exit
interface AggregatePort 16
exit
interface AggregatePort 33
exit
interface AggregatePort 38
exit
配置端口数据 ten01口
interface ten 0/1
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-1
port-group 11 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 11
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond1 端口描述
switchport mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
vap 11
exit
管理服务器
interface ten 0/3
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-1
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
sw mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
exit
管理服务器
interface ten 0/4
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
管理服务器
interface ten 0/5
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
存储服务器
interface ten 0/6
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-1 端口描述
port-group 16 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 16
storm-control broadcast level 10
storm-control unicast level 10
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond1
switchport mode trunk
switchport trunk allowed vlan only 302
spanning-tree bpduguard enable
spanning-tree portfast
vap 16
exit
interface ten 0/23
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-2
port-group 33 mode active
lacp short-timeout
lacp individual-port enable
exit
interface AggregatePort 33
storm-control broadcast level 10
storm-control unicast level 10
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond2
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 33
exit
管理服务器
interface ten 0/25
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/26
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/27
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/28
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-2
port-group 38 mode active
lacp short-timeout
lacp individual-port enable
!
interface AggregatePort 38
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond2
storm-control broadcast level 10
storm-control unicast level 10
description dT:
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 38
exit
interface HundredGigabitEthernet 0/49
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.3.Hu0/49
port-group 1 mode active
!
interface AggregatePort 1
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.3.Agg11
switchport mode trunk
switchport trunk allowed vlan only 200-209,300-309,500-3999
spanning-tree bpdufilter enable
vap 1
!
snmp-server user yundiao SNMPGROUP v3 auth sha yundiao*&COC2016 priv aes128 yundiao*&COC2016
snmp-server group SNMPGROUP v3 priv read default write default access 2000
snmp-server trap-source Mgmt 0
snmp-server location SNMPGROUP
snmp-server host 10.100.1.136 vrf NET-manage traps version 2c yundiao*&COC2016
snmp-server host 30.116.198.136 vrf NET-manage traps version 2c yundiao
snmp-server host 30.116.198.137 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.136 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.137 vrf NET-manage traps version 2c yundiao
snmp-server enable traps
snmp-server community 7 yundiao*&COC2016 ro 2000
show runn | inc snmp
配置ACL：
ip access-list extended 2000
10 permit ip host 10.100.1.136 any
15 permit ip host 10.100.1.137 any
20 permit ip host 172.16.20.254 any
25 permit ip host 10.10.0.136 any
30 permit ip host 10.10.0.137 any
35 permit ip host 10.30.1.254 any
1000 deny ip any any
list-remark For_SNMP_NTP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.201.0 0.0.0.255 any
25 permit ip 10.252.134.0 0.0.1.255 any
30 permit ip 10.254.181.0 0.0.0.255 any
35 permit ip 10.100.1.128 0.0.0.127 any
40 permit ip 172.16.20.0 0.0.0.255 any
45 permit ip 10.30.0.0 0.0.1.255 any
50 permit ip 10.243.72.0 0.0.0.255 any
1000 deny ip any any
list-remark For_Login
!
show access-lists
NTP配置
ntp update-calendar
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 prefer
!
时区配置：
clock timezone beijingUTC +8 0
HASH配置
load-balance-profile default
y
ipv4 field src-ip dst-ip protocol l4-src-port l4-dst-port
ipv6 field src-ip dst-ip protocol l4-src-port l4-dst-port
hash-disturb 8
aggregateport load-balance enhanced profile default
SVI配置：
svi router-acls enable
设置MTU(巨帧模式)：
mtu forwarding 9126
使能SSH功能，关闭telnet功能，关闭web
enable service ssh-server
no enable service telnet-server
no enable service web-server all
!
开启netconf并且最大会话次数为10：
netconf max-sessions 10
密文配置
service password-encryption
创建账号密码：
username COC_monitor password 0 shixun@2023
username COC_operator privilege 15 password 0 shixun@2023
username openstackadmin privilege 15 password 0 shixun@2023
username sdnadmin privilege 15 password 0 shixun@2023
username yundiao_read password 0 shixun@2023
lldp配置：
lldp enable
lldp management-address-tlv 172.16.20.3
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
登录配置：
line console 0
session-timeout 10
privilege level 15
width 256
line vty 0 9
transport input ssh
access-class 2001 in
logging synchronous
session-timeout 10
privilege level 15
login local
width 256
日志相关配置
service timestamps debug datetime msec
service timestamps log datetime msec
logging userinfo command-log
logging buffered 1048576
logging file flash:syslog
logging flash interval 1
logging trap warnings
logging source interface Mgmt 0
logging facility local4
logging server 10.10.0.136 vrf NET-manage udp-port 5000
logging server 10.10.0.137 vrf NET-manage udp-port 5000
logging server 10.100.1.136 vrf NET-manage udp-port 5000
logging server 10.100.1.137 vrf NET-manage udp-port 5000
show interface description
write
核心：：
con ter
hostname SHDXYQB4-108-C-06_C-06-CSW-RGS6250-01U37
interface HundredGigabitEthernet 0/49
description dT:SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M1-01U37.Hu0/49
port-group 59 mode active
lacp short-timeout
lacp individual-port enable
interface HundredGigabitEthernet 0/50
description dT:SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M2-01U34.Hu0/50
port-group 59 mode active
lacp short-timeout
lacp individual-port enable
interface AggregatePort 59
description dT:SHDXYQB4-108-C-06-ASW-RGS6250-M-01U37_34/172.16.20.3/172.16.20.5.AGG1
switchport mode trunk
switchport trunk allowed vlan only 200-209,300-309,500-3999
interface TenGigabitEthernet 0/20
description uT:SHDXYQB4-108-C-09-BSW-RGS6250-01U31.Te0/20
switchport mode trunk
switchport trunk allowed vlan only 200
配置ACL：
ip access-list extended 2000
10 permit ip host 10.100.1.136 any
15 permit ip host 10.100.1.137 any
20 permit ip host 172.16.20.254 any
25 permit ip host 10.10.0.136 any
30 permit ip host 10.10.0.137 any
35 permit ip host 10.30.1.254 any
1000 deny ip any any
list-remark For_SNMP_NTP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.201.0 0.0.0.255 any
25 permit ip 10.252.134.0 0.0.1.255 any
30 permit ip 10.254.181.0 0.0.0.255 any
35 permit ip 10.100.1.128 0.0.0.127 any
40 permit ip 172.16.20.0 0.0.0.255 any
45 permit ip 10.30.0.0 0.0.1.255 any
50 permit ip 10.243.72.0 0.0.0.255 any
1000 deny ip any any
list-remark For_Login
!
show access-lists
NTP配置
ntp update-calendar
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 prefer
时区配置：
clock timezone beijingUTc +8 0
HASH配置
load-balance-profile default
y
ipv4 field src-ip dst-ip protocol l4-src-port l4-dst-port
ipv6 field src-ip dst-ip protocol l4-src-port l4-dst-port
hash-disturb 16
SVI配置：
svi router-acls enable
设置MTU(巨帧模式)：
mtu forwarding 9126
使能SSH功能，关闭telnet功能，关闭web
enable service ssh-server
no enable service telnet-server
no enable service web-server all
!
开启netconf并且最大会话次数为10：
netconf max-sessions 10
密文配置
service password-encryption
创建账号密码：
username COC_monitor password 0 shixun@2023
username COC_operator privilege 15 password 0 shixun@2023
username openstackadmin privilege 15 password 0 shixun@2023
username sdnadmin privilege 15 password 0 shixun@2023
username yundiao_read password 0 shixun@2023
lldp配置：
lldp enable
lldp management-address-tlv 172.16.20.1
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
登录配置：
line console 0
session-timeout 10
privilege level 15
width 256
line vty 0 9
transport input ssh
access-class 2001 in
logging synchronous
session-timeout 10
privilege level 15
login local
width 256
日志相关配置
service timestamps debug datetime msec
service timestamps log datetime msec
logging userinfo command-log
logging buffered 1048576
logging file flash:syslog
logging flash interval 1
logging trap warnings
logging source interface Mgmt 0
logging facility local4
logging server 10.10.0.136 vrf NET-manage udp-port 5000
logging server 10.10.0.137 vrf NET-manage udp-port 5000
logging server 10.100.1.136 vrf NET-manage udp-port 5000
logging server 10.100.1.137 vrf NET-manage udp-port 5000
show interface description
write
交换机M2：：：
con ter
hostname SHDXYQB4-108-C-06_C-06-ASW-RGS6250-M2-01U34
DAD检测:
interface TenGigabitEthernet 0/47
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Te0/47_M-LAG_keepalive
no switchport
port-group 254 mode active
exit
interface TenGigabitEthernet 0/48
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Te0/48_M-LAG_keepalive
no switchport
port-group 254 mode active
!
interface AggregatePort 254
description For_DAD
no switchport
ip add 1.1.1.1 255.255.255.252
vap error-down except
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Te0/48_M-LAG_keepalive
Peerlink:
interface HundredGigabitEthernet 0/55
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Hu0/55_Peerlink
!
interface HundredGigabitEthernet 0/56
carrier-delay up 2 down 0
port-group 255 mode active
description pT:SHDXYQB4-108-C-06-ASW-RGS6250-01U37:172.16.20.5.Hu0/56_Peerlink
!
interface AggregatePort 255
description For_peerlink
no mac-address-learning
switchport mode trunk
peer-link
!
vlan 4094
name vap
interface vlan 4094
description For_VAP
ip add 1.1.1.5 255.255.255.252
VAP:
vap domain 1
no fast-convergence
recover up-delay 120 none-vap 60
priority 7
data-sync local 1.1.1.5 peer 1.1.1.6
peer-keepalive local 1.1.1.1 peer 1.1.1.2
dual-active auto recovery
下行端口配置
创建聚合组
interface AggregatePort 1
exit
interface AggregatePort 11
exit
interface AggregatePort 16
exit
interface AggregatePort 33
exit
interface AggregatePort 38
exit
配置端口数据 ten01口
interface ten 0/1
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-1
port-group 11 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 11
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond1 端口描述
switchport mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
vap 11
exit
管理服务器
interface ten 0/3
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-1
storm-control broadcast level 10 启用广播风暴控制，端口带宽的1%
storm-control unicast level 10 启用未知名单播风暴控制，端口带宽的1%
sw mode trunk 配置端口模式
switchport trunk allowed vlan only 301 配置端口vlan
spanning-tree bpduguard enable 开启接口BPDU保护功能
spanning-tree portfast 配置接口为边缘端口
exit
管理服务器
interface ten 0/4
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
管理服务器
interface ten 0/5
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-1
storm-control broadcast level 10
storm-control unicast level 10
sw mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
exit
存储服务器
interface ten 0/6
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-1 端口描述
port-group 16 mode active 加入聚合组
lacp short-timeout 开启LACP短超时
lacp individual-port enable 配置单端口强制选中
exit
interface AggregatePort 16
storm-control broadcast level 10
storm-control unicast level 10
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond1
switchport mode trunk
switchport trunk allowed vlan only 302
spanning-tree bpduguard enable
spanning-tree portfast
vap 16
exit
interface ten 0/23
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.slot4-2
port-group 33 mode active
lacp short-timeout
lacp individual-port enable
exit
interface AggregatePort 33
storm-control broadcast level 10
storm-control unicast level 10
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.bond2
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 33
exit
管理服务器
interface ten 0/25
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/26
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/27
storm-control broadcast level 10
storm-control unicast level 10
description dT:Guanli:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.slot4-2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface ten 0/28
description dT:Cnchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.slot4-2
port-group 38 mode active
lacp short-timeout
lacp individual-port enable
!
interface AggregatePort 38
description dT:Cunchu:SHDXYQB4-108-C-06-SEV-ZXR5300-02U21.bond2
storm-control broadcast level 10
storm-control unicast level 10
description dT:
switchport mode trunk
switchport trunk allowed vlan only 300
storm-control broadcast level 10
spanning-tree bpduguard enable
spanning-tree portfast
vap 38
exit
interface HundredGigabitEthernet 0/49
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.5.Hu0/49
port-group 1 mode active
!
interface AggregatePort 1
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40:172.16.20.5.Agg11
switchport mode trunk
switchport trunk allowed vlan only 200-209,300-309,500-3999
spanning-tree bpdufilter enable
vap 1
!
snmp-server user yundiao SNMPGROUP v3 auth sha yundiao*&COC2016 priv aes128 yundiao*&COC2016
snmp-server group SNMPGROUP v3 priv read default write default access 2000
snmp-server trap-source Mgmt 0
snmp-server location SNMPGROUP
snmp-server host 10.100.1.136 vrf NET-manage traps version 2c yundiao*&COC2016
snmp-server host 30.116.198.136 vrf NET-manage traps version 2c yundiao
snmp-server host 30.116.198.137 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.136 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.137 vrf NET-manage traps version 2c yundiao
snmp-server enable traps
snmp-server community 7 yundiao*&COC2016 ro 2000
show runn | inc snmp
配置ACL：
ip access-list extended 2000
10 permit ip host 10.100.1.136 any
15 permit ip host 10.100.1.137 any
20 permit ip host 172.16.20.254 any
25 permit ip host 10.10.0.136 any
30 permit ip host 10.10.0.137 any
35 permit ip host 10.30.1.254 any
1000 deny ip any any
list-remark For_SNMP_NTP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.201.0 0.0.0.255 any
25 permit ip 10.252.134.0 0.0.1.255 any
30 permit ip 10.254.181.0 0.0.0.255 any
35 permit ip 10.100.1.128 0.0.0.127 any
40 permit ip 172.16.20.0 0.0.0.255 any
45 permit ip 10.30.0.0 0.0.1.255 any
50 permit ip 10.243.72.0 0.0.0.255 any
1000 deny ip any any
list-remark For_Login
!
show access-lists
NTP配置
ntp update-calendar
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 prefer
!
时区配置：
clock timezone beijingUTC +8 0
HASH配置
load-balance-profile default
y
ipv4 field src-ip dst-ip protocol l4-src-port l4-dst-port
ipv6 field src-ip dst-ip protocol l4-src-port l4-dst-port
hash-disturb 8
aggregateport load-balance enhanced profile default
SVI配置：
svi router-acls enable
设置MTU(巨帧模式)：
mtu forwarding 9126
使能SSH功能，关闭telnet功能，关闭web
enable service ssh-server
no enable service telnet-server
no enable service web-server all
!
开启netconf并且最大会话次数为10：
netconf max-sessions 10
密文配置
service password-encryption
创建账号密码：
username COC_monitor password 0 shixun@2023
username COC_operator privilege 15 password 0 shixun@2023
username openstackadmin privilege 15 password 0 shixun@2023
username sdnadmin privilege 15 password 0 shixun@2023
username yundiao_read password 0 shixun@2023
lldp配置：
lldp enable
lldp management-address-tlv 172.16.20.5
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
登录配置：
line console 0
session-timeout 10
privilege level 15
width 256
line vty 0 9
transport input ssh
access-class 2001 in
logging synchronous
session-timeout 10
privilege level 15
login local
width 256
日志相关配置
service timestamps debug datetime msec
service timestamps log datetime msec
logging userinfo command-log
logging buffered 1048576
logging file flash:syslog
logging flash interval 1
logging trap warnings
logging source interface Mgmt 0
logging facility local4
logging server 10.10.0.136 vrf NET-manage udp-port 5000
logging server 10.10.0.137 vrf NET-manage udp-port 5000
logging server 10.100.1.136 vrf NET-manage udp-port 5000
logging server 10.100.1.137 vrf NET-manage udp-port 5000
show interface description
write
