cisco 路器配置实例.docVIP

配置1： Building configuration... Current configuration : 3069 bytes ! version 12.2 service tcp-keepalives-in service tcp-keepalives-out service timestamps debug uptime service timestamps log datetime msec service password-encryption service udp-small-servers service tcp-small-servers service disable-ip-fast-frag ! hostname router ! logging buffered 8192 debugging logging console notifications enable secret 5 $1$rpa6$T8xgLGmNpv0h1EOExo4At. enable password 7 10681D300B161E5900 ! memory-size iomem 10 ip subnet-zero no ip source-route ip cef ip cef accounting per-prefix ! ! no ip domain-lookup ip domain-name ip name-server 9 ip name-server 0 ip name-server ! ip audit notify log ip audit po max-events 100 ip ssh time-out 15 ip ssh authentication-retries 1 ! class-map match-any http-hacks match protocol http url *cmd.exe* match protocol http url *root.exe* match protocol http url *.ida* match protocol http url *readme.eml* class-map match-any arp match protocol arp ! ! policy-map ratelimitarp class arp police 8000 1500 1500 conform-action transmit exceed-action drop violate-ac tion drop policy-map mark-inbound-http-hacks class http-hacks set ip dscp 1 ! ! call rsvp-sync ! ! ! ! ! ! ! ! interface Loopback0 no ip address ! interface FastEthernet1/0 interface FastEthernet1/0 mac-address 0010.4b68.194c ip address dhcp hostname router ip access-group no_icmp in no ip redirects no ip proxy-arp ip nat outside speed 10 half-duplex ! interface Serial1/0 no ip address shutdown ! interface FastEthernet1/1 ip address 32 no ip redirects no ip proxy-arp ip nat inside speed 100 full-duplex timeout absolute 5 0 fair-queue ! interface Serial1/1 no ip address shutdown ! ip nat translation timeout 30 ip nat translation udp-timeout 5 ip nat translation finrst-timeout 5 ip nat translation syn-timeout 5 ip nat translation dns-timeout 5 ip nat translation icmp-timeout 5 ip nat translation max-entries 1000000 ip nat pool bellsouth 5 5 netmask ip n