路由配置 (2)

//配置VLAN和接口

vlan 10

name XXXX

vlan 20

name XXXX

vlan 30

name XXXX

interface Gigabitetherent 0/x(配置城域网上行口)

ip address 61.X.X.X 255.255.255.252

description XXXX

interface Gigabitetherent 0/x(配置CN2网上行口)

ip address X.X.X.X X.X.X.X

description XXXX

ip nat outside

interface Gigabitetherent 0/x(配置DCN网上行口)

ip address 134.132.10.X 255.255.255.248

description XXXX

ip nat outside

interface range Gigabitetherent 0/x – y

switchport mode trunk

switchport trunk encapsulation dot1q(这是用来打掉由二层上来的tag头的，这样从这个端口出去的包就不带tag头了，ip包)

switchport trunk allowed vlan 10,20

interface range Gigabitetherent 0/x – y

switchport mode access(access（普通模式）?只能加到某个vlan中)

switchport aceess vlan 30

interface Vlan 10(配置城域网下行子接口)

ip address 218.85.154.X X.X.X.X

description XXXX

interface Vlan 20(配置CN2/DCN网下行子接口)

ip address 192.168.1.X X.X.X.X

description XXXX

ip nat inside

interface Vlan 30(配置子系统下行口)

ip address 218.85.154.X 255.255.255.240

description XXXX

interface Loopback 0(配置环回口)

ip address X.X.X.X X.X.X.X

description XXXX

interface Gigabitetherent 0/x(配置与备路由器间接口)

switchport mode trunk

switchport trunk encapsulation dot1q

//配置生成树

spanning-tree mode rstp

spanning-tree vlan 10 priority 0

spanning-tree vlan 20 priority 0

spanning-tree vlan 30 priority 0

//配置静态路由：

ip route X.X.X.X X.X.X.X next-hop 134.132.10.X（配置到DCN网的静态路由）

ip route X.X.X.X X.X.X.X next-hop X.X.X.X(配置到备路由器环回口的静态路由)

//配置BGP路由协议：（与CN2、城域网之间运行BGP）

router bgp XX

no auto-summary

no synchronization

bgp router-id X.X.X.X

neighbor X.X.X.X remote-as YY（配置EBGP邻居）

neighbor X.X.X.X update-source Loopback0

neighbor X.X.X.X ebgp-multihop 255

neighbor X.X.X.X remote-as XX（配置IBGP邻居）

neighbor X.X.X.X update-source Loopback0

network X.X.X.X mask X.X.X.X（通告本AS内部城域网部分网络）

//配置NAT转换

ip nat pool XX X.X.X.X X.X.X.X netmask X.X.X.X（配置CN2网地址池）

ip access-list extend XX

permit ip X.X.X.X X.X.X.X X.X.X.X X.X.X.X

ip nat inside source list XX pool XX overload

ip nat inside source static X.X.X.X X.X.X.X（根据实际情况逐条配置CN2网静态地址映射）

ip nat pool YY X.X.X.X X.X.X.X netmask X.X.X.X（配置DCN网地址池）

ip access-list extend YY

permit ip X.X.X.X X.X.X.X X.X.X.X X.X.X.X

ip nat inside source list YY pool YY overload

ip nat inside source static X.X.X.X X.X.X.X（根据实际情况逐条配置DCN网静态地址映射）

//配置VRRP

interface Vlan 10(配置城域网下行子接口)

vrrp 10 ip 218.85.154.X

vrrp 10 priority 15

0

vrrp 10 preempt

interface Vlan 20(配置CN2/DCN网下行子接口)

vrrp 20 ip 192.168.1.X

vrrp 20 priority 150

vrrp 20 preempt

interface Vlan 30(配置子系统下行口)

vrrp 30 ip 218.85.154.X

vrrp 30 priority 150

vrrp 30 preempt

//配置Syslog

logging on

logging ip-address-server X.X.X.X(地址更改为soc采集地址)

logging facility local7（事件级别根据soc平台要求定义）

logging trap warning

logging source-interface loopback0

service timestamps log datetime