extreme X450配置解析.docxVIP

clear account lockoutclear account [all | name] lockoutDescriptionRe-enables an account that has been locked out (disabled) for exceeding the permitted number failedlogin attempts, which was configured by using the configure account password-policy lockouton-login-failures command.Syntax DescriptionDefaultN/A.Usage GuidelinesThis command applies to sessions at the console port of the switch as well as all other sessions. You canre-enable both user and administrative accounts, once they have been disabled for exceeding the 3failed login attempts.NOTEThe failsafe accounts are never locked out.This command only clears the locked-out (or disabled) condition of the account. The action of lockingout accounts following the failed login attempts remains until you turn it off by issuing the configureaccount [all | name] password-policy lockout-on-login failures off command.ExampleThe following command re-enables the account finance, which had been locked out (disabled) forexceeding 3 consecutive failed login attempts:clear account finance lockout1.用户名和密码配置create account [admin | user] username {encrypted} {password}configure account admin2.port配置config ports portlist auto off {speed [10 | 100 | 1000]} duplex [half | full] auto off3.Vlan配置无论是核心还是接入层，都要先创建三个Vlan，并且将所有归于Default Vlan的端口删除：config vlan default del port allcreate vlan Servercreate vlan Usercreate vlan Manger定义802.1q标记config vlan Server tag 10config vlan User tag 20config vlan Manger tag 30设定Vlan网关地址：config vlan Server ipa 192.168.41.1/24config vlan User ipa 192.168.40.1/24config vlan Manger ipa 192.168.*.*/24Enable ipforwarding 启用ip路由转发，即vlan间路由Trunk 配置config vlan Server add port 1-3 tconfig vlan User add port 1-3 tconfig vlan manger add port 1-3 t4.VRRP配置enable vrrpconfigure vrrp add vlan UserVlanconfigure vrrp vlan UserVlan add master vrid 10 192.168.6.254configure vrrp vlan UserVlan authentication simple-password extremeconfigure vrrp vlan UserVlan vrid 10 priority 200configure vrrp vlan UserVlan vrid 10 adverti