二层网络设备标准化配置.docVIP

目 录 1 网络设备标准化配置 1 1.1 交换机配置 1 网络设备标准化配置 目的： 标准化网络设备配置； 提高网络设备管理安全； 提高网络设备监管能力，并清晰记录相关日志信息，提高网络问题可查性； 交换机配置 网络设备配置模板： ---------------------基础服务及生成树配置（无需更改）---------------------- ip domain-name no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption clock timezone BJT 8 ! no ip http server no ip source-route no ip domain-lookup errdisable recovery cause bpduguard errdisable recovery cause link-flap errdisable recovery cause loop errdisable recovery inter 300 errdisable recovery cause psecure-violation ! spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree extend system-id no ip http secure-server no ip http server ----------------------日志配置（无需更改）----------------------------- logging trap notifications logging 02 logging console critical logging buffered 32768 notifications ------------------VTP及SNMP、banner登录及访问控制（无需更改）---------------- access-list 99 permit 02 access-list 199 remark /********************************************* access-list 199 remark Remote Access authorized servers access-list 199 remark *********************************************/ access-list 199 permit tcp 55 any log access-list 199 deny tcp any any range 0 65535 log access-list 199 deny ip any any log line vty 0 15 access-class 199 in transport input telnet exi snmp-server community EnnNWmo$ RO 99 snmp-server trap link ietf snmp-server enable traps config snmp-server enable traps cpu threshold snmp-server ifindex persist snmp-server enable traps errdisable snmp-server enable traps syslog snmp-server host 02 xinaoranqi snmp-server ifindex persist banner motd ^ ************************************************************************* This is a private property facility to be accessed and used for ENN internal systems. Unauthorized Access Prohibited! ************************************************