set qos policed-dscp-map 3:3
set qos policed-dscp-map 4:4
set qos policed-dscp-map 5:5
set qos policed-dscp-map 6:6
set qos policed-dscp-map 7:7
set qos policed-dscp-map 8:8
set qos policed-dscp-map 9:9
set qos policed-dscp-map 10:10
set qos policed-dscp-map 11:11
set qos policed-dscp-map 12:12
set qos policed-dscp-map 13:13
set qos policed-dscp-map 14:14
set qos policed-dscp-map 15:15
set qos policed-dscp-map 16:16
set qos policed-dscp-map 17:17
set qos policed-dscp-map 18:18
set qos policed-dscp-map 19:19
set qos policed-dscp-map 20:20
set qos policed-dscp-map 21:21
set qos policed-dscp-map 22:22
set qos policed-dscp-map 23:23
set qos policed-dscp-map 24:24
set qos policed-dscp-map 25:25
set qos policed-dscp-map 26:26
set qos policed-dscp-map 27:27
set qos policed-dscp-map 28:28
set qos policed-dscp-map 29:29
set qos policed-dscp-map 30:30
set qos policed-dscp-map 31:31
set qos policed-dscp-map 32:32
set qos policed-dscp-map 33:33
set qos policed-dscp-map 34:34
set qos policed-dscp-map 35:35
set qos policed-dscp-map 36:36
set qos policed-dscp-map 37:37
set qos policed-dscp-map 38:38
set qos policed-dscp-map 39:39
set qos policed-dscp-map 40:40
set qos policed-dscp-map 41:41
set qos policed-dscp-map 42:42
set qos policed-dscp-map 43:43
set qos policed-dscp-map 44:44
set qos policed-dscp-map 45:45
set qos policed-dscp-map 46:46
set qos policed-dscp-map 47:47
set qos policed-dscp-map 48:48
set qos policed-dscp-map 49:49
set qos policed-dscp-map 50:50
set qos policed-dscp-map 51:51
set qos policed-dscp-map 52:52
set qos policed-dscp-map 53:53
set qos policed-dscp-map 54:54
set qos policed-dscp-map 55:55
set qos policed-dscp-map 56:56
set qos policed-dscp-map 57:57
set qos policed-dscp-map 58:58
set qos policed-dscp-map 59:59
set qos policed-dscp-map 60:60
set qos policed-dscp-map 61:61
set qos policed-dscp-map 62:62
set qos policed-dscp-map 63:63
set qos acl default-action ip dscp 0
set qos acl default-action ipx dscp 0
set qos acl default-action mac dscp 0
set qos policy-source local
set qos rsvp disable
set qos rsvp policy-timeout 30
set qos rsvp local-policy forward
!
#cops
set cops retry-interval 30 30 300
!
#udld
set udld disable
set udld interval 15
!
#port channel
set port channel 1/1-2 25
set port channel 2/1-4 26
set port chan nel 2/5-8 27
set port channel 3/1-4 28
set port channel 3/5-8 29
!
#security ACLs
!
#accounting
set accounting exec disable
set accounting connect disable
set accounting system disable
set accounting commands disable
set accounting suppress null-username disable
set accounting update new-info
!
#errdisable timeout
set errdisable-timeout disable other
set errdisable-timeout disable udld
set errdisable-timeout disable duplex-mismatch
set errdisable-timeout disable bpdu-guard
set errdisable-timeout disable channel-misconfig
set errdisable-timeout interval 300
!
#http configuration
set ip http server disable
set ip http port 80
!
#private vlans
!
#crypto key
!
#qos statistics data export
set qos statistics export disable
set qos statistics export interval 300
set qos statistics export destination 0.0.0.0 0
!
# default port status is enable
!
!
#module 1 : 2-port 1000BaseX Supervisor
set module name 1
set vlan 101 1/2
set vlan 102 1/1
set port enable 1/1-2
set port trap 1/1-2 disable
set port name 1/1 laozhongxin
set port name 1/2 xinzhongxin
set port dot1x 1/1-2 port-control force-authorized
set port dot1x 1/1-2 multiple-host disable
set port security 1/1-2 disable age 0 maximum 1 shutdown 0 violation shutdown
set port broadcast 1/1-2 100.00% multicast disable unicast disable
set port membership 1/1-2 static
set port protocol 1/1-2 ip on
set port protocol 1/1-2 ipx auto
set port protocol 1/1-2 group auto
set port negotiation 1/1-2 enable
set port flowcontrol 1/1-2 send desired
set port flowcontrol 1/1-2 receive off
set cdp enable 1/1-2
set udld enable 1/1-2
set udld aggressive-mode disable 1/1-2
set trunk 1/1 auto negotiate 1-1005,1025-4094
set trunk 1/2 auto negotiate 1-1005,1025-4094
set spantree portfast 1/1-2 disable
set spantree portcost 1/1-2 4
set spantree portpri 1/1-2 32
set spantree portvlanpri 1/1 0
set spantree portvlanpri 1/2 0
set spantree portvlancost 1/1 cost 3
set spantree portvlancost 1/2 cost 3
set spantree guard none 1/1-2
set port qos 1/1-2 cos 0
set port qos 1/1-2 trust untrusted
set port qos 1/1-2 port-based
set port qos 1/1-2 policy-source cops
set port rsvp 1/1-2 dsbm-election disable 128
set port gvrp 1/1-2 disable
set gvrp registration normal 1/1-2
set gvrp applicant normal 1/1-2
set port gmrp 1/1-2 enable
set gmrp registratio n normal 1/1-2
set gmrp fwdall disable 1/1-2
set port channel 1/1-2 mode auto silent
set port jumbo 1/1-2 disable
set port dot1qtunnel 1/1-2 disable
set qos statistics export port 1/1 disable
set qos statistics export port 1/2 disable
!
#module 2 : 8-port 1000BaseX Ethernet
set module name 2
set module enable 2
set vlan 1 2/4
set vlan 510 2/1
set vlan 511 2/2
set vlan 512 2/3
set vlan 513 2/5
set vlan 514 2/6
set vlan 515 2/7
set vlan 516 2/8
set port enable 2/1-8
set port trap 2/1-8 disable
set port name 2/1 02x
set port name 2/2 02d
set port name 2/3 04x
set port name 2/5 06x
set port name 2/6 06d
set port name 2/7 09x
set port name 2/8 09d
set port name 2/4
set port dot1x 2/1-8 port-control force-authorized
set port dot1x 2/1-8 multiple-host disable
set port security 2/1-8 disable age 0 maximum 1 shutdown 0 violation shutdown
set port broadcast 2/1-8 100.00% multicast disable unicast disable
set port membership 2/1-8 static
set port protocol 2/1-8 ip on
set port protocol 2/1-8 ipx auto
set port protocol 2/1-8 group auto
set port negotiation 2/1-8 enable
set port flowcontrol 2/1-8 send desired
set port flowcontrol 2/1-8 receive off
set cdp enable 2/1-8
set udld enable 2/1-8
set udld aggressive-mode disable 2/1-8
set trunk 2/1 auto negotiate 1-1005,1025-4094
set trunk 2/2 auto negotiate 1-1005,1025-4094
set trunk 2/3 off dot1q 1-1005,1025-4094
set trunk 2/4 auto negotiate 1-1005,1025-4094
set trunk 2/5 auto negotiate 1-1005,1025-4094
set trunk 2/6 auto negotiate 1-1005,1025-4094
set trunk 2/7 auto dot1q 1-1005,1025-4094
set trunk 2/8 auto negotiate 1-1005,1025-4094
set spantree portfast 2/1-8 disable
set spantree portcost 2/1-8 4
set spantree portpri 2/1-8 32
set spantree portvlanpri 2/1 0
set spantree portvlanpri 2/2 0
set spantree portvlanpri 2/3 0
set spantree portvlanpri 2/4 0
set spantree portvlanpri 2/5 0
set spantree portvlanpri 2/6 0
set spantree portvlanpri 2/7 0
set spantree portvlanpri 2/8 0
set spantree portvlancost 2/1 cost 3
set spantree portvlancost 2/2 cost 3
set spantree portvlancost 2/3 cost 3
set spantree portvlancost 2/4 cost 3
set spantree portvlancost 2/5 cost 3
set spantree portvlancost 2/6 cost 3
set spantree portvlancost 2/7 cost 3
set spantree portvlancost 2/8 cost 3
set spantree guard none 2/1-8
set port qos 2/1-8 cos 0
set port qos 2/1-8 trust untrusted
set port qos 2/1-8 p ort-based
set port qos 2/1-8 policy-source cops
set port rsvp 2/1-8 dsbm-election disable 128
set port gvrp 2/1-8 disable
set gvrp registration normal 2/1-8
set gvrp applicant normal 2/1-8
set port gmrp 2/1-8 enable
set gmrp registration normal 2/1-8
set gmrp fwdall disable 2/1-8
set port channel 2/1-8 mode auto silent
set port jumbo 2/1-8 disable
set port dot1qtunnel 2/1-8 disable
set qos statistics export port 2/1 disable
set qos statistics export port 2/2 disable
set qos statistics export port 2/3 disable
set qos statistics export port 2/4 disable
set qos statistics export port 2/5 disable
set qos statistics export port 2/6 disable
set qos statistics export port 2/7 disable
set qos statistics export port 2/8 disable
!
#module 3 : 8-port 1000BaseX Ethernet
set module name 3
set module enable 3
set vlan 1 3/3-6
set vlan 101 3/7-8
set vlan 517 3/1
set vlan 518 3/2
set port enable 3/1-8
set port trap 3/1-8 disable
set port name 3/1 12x
set port name 3/2 12d
set port name 3/7 fuwu1
set port name 3/8 fuwu2
set port name 3/3-6
set port dot1x 3/1-8 port-control force-authorized
set port dot1x 3/1-8 multiple-host disable
set port security 3/1-8 disable age 0 maximum 1 shutdown 0 violation shutdown
set port broadcast 3/1-8 100.00% multicast disable unicast disable
set port membership 3/1-8 static
set port protocol 3/1-8 ip on
set port protocol 3/1-8 ipx auto
set port protocol 3/1-8 group auto
set port negotiation 3/1-8 enable
set port flowcontrol 3/1-8 send desired
set port flowcontrol 3/1-8 receive off
set cdp enable 3/1-8
set udld enable 3/1-2
set udld aggressive-mode disable 3/1-8
set trunk 3/1 auto negotiate 1-1005,1025-4094
set trunk 3/2 auto negotiate 1-1005,1025-4094
set trunk 3/3 auto negotiate 1-1005,1025-4094
set trunk 3/4 auto negotiate 1-1005,1025-4094
set trunk 3/5 auto negotiate 1-1005,1025-4094
set trunk 3/6 auto negotiate 1-1005,1025-4094
set trunk 3/7 auto negotiate 1-1005,1025-4094
set trunk 3/8 auto negotiate 1-1005,1025-4094
set spantree portfast 3/1-8 disable
set spantree portcost 3/1-8 4
set spantree portpri 3/1-8 32
set spantree portvlanpri 3/1 0
set spantree portvlanpri 3/2 0
set spantree portvlanpri 3/3 0
set spantree portvlanpri 3/4 0
set spantree portvlanpri 3/5 0
set spantree portvlanpri 3/6 0
set spantree portvlanpri 3/7 0
set spantree portvlanpri 3/8 0
set spantree portvlancost 3/1 cost 3
set spantree portvlancost 3/2 cost 3
set spantree portvlancost 3/3 cost 3
set spantree portvlancost 3/4 cost 3
set spantree portvlancost 3/5 cost 3
set spantree portvlancost 3/6 cost 3
set spantree portvlancost 3/7 cost 3
set spantree portvlancost 3/8 cost 3
set spantree guard none 3/1-8
set port qos 3/1-8 cos 0
set port qos 3/1-8 trust untrusted
set port qos 3/1-8 port-based
set port qos 3/1-8 policy-source cops
set port rsvp 3/1-8 dsbm-election disable 128
set port gvrp 3/1-8 disable
set gvrp registration normal 3/1-8
set gvrp applicant normal 3/1-8
set port gmrp 3/1-8 enable
set gmrp registration normal 3/1-8
set gmrp fwdall disable 3/1-8
set port channel 3/1-8 mode auto silent
set port jumbo 3/1-8 disable
set port dot1qtunnel 3/1-8 disable
set qos statistics export port 3/1 disable
set qos statistics export port 3/2 disable
set qos statistics export port 3/3 disable
set qos statistics export port 3/4 disable
set qos statistics export port 3/5 disable
set qos statistics export port 3/6 disable
set qos statistics export port 3/7 disable
set qos statistics export port 3/8 disable
!
#module 4 empty
!
#module 5 empty
!
#module 6 empty
!
#module 15 : 1-port Multilayer Switch Feature Card
set module name 15
set module enable 15
set vlan 1 15/1
set port trap 15/1 disable
set port name 15/1
set cdp enable 15/1
set udld disable 15/1
set udld aggressive-mode disable 15/1
set trunk 15/1 nonegotiate isl 1-1005,1025-4094
set spantree portcost 15/1 4
set spantree portpri 15/1 32
set spantree portvlanpri 15/1 0
set spantree portvlancost 15/1 cost 3
set spantree guard none 15/1
set port gmrp 15/1 enable
set gmrp registration normal 15/1
set gmrp fwdall disable 15/1
!
#module 16 empty
!
#switch port analyzer
!
#cam
set cam agingtime 1,99,101-103,510-518,1003,1005 300
!
#gvrp
set gvrp dynamic-vlan-creation disable
set gvrp disable
!
#local director acceleration
set lda disable
!
#authorization
set authorization exec disable console
set authorization exec disable telnet
set authorization enable disable console
set authorization enable disable telnet
set authorization commands disable console
set authorization commands disable telnet
end
三层的例子： 网址163164.cn 微信1631640 QQ3149886
R6500#show run
Building configuration...
Current configuration : 1557 bytes
!
version 12.1
service times tamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R6500
!
boot system flash bootflash:c6msfc-psv-mz.121-7a.E1
enable password ××××
!
ip subnet-zero
!
!
no ip finger
!
ip multicast-routing
!
!
!
interface Vlan101
ip address ×××。×××。×××。××× 255.255.255.0 secondary
ip address ×××。×××。××××。××× 255.255.255.0
ip pim sparse-dense-mode
!
interface Vlan102
ip address 10.1.1.1 255.255.255.252 secondary
ip address 10.186.240.253 255.255.255.0
ip pim sparse-dense-mode
!
interface Vlan510
ip address 10.186.128.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan511
ip address 10.186.192.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan512
ip address 10.186.136.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan513
ip address 10.186.144.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan514
ip address 10.186.152.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan515
ip address 10.186.160.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan516
ip address 10.186.204.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan517
ip address 10.186.168.254 255.255.252.0
ip pim sparse-dense-mode
!
interface Vlan518
ip address 10.186.176.254 255.255.252.0
ip pim sparse-dense-mode
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.186.240.252
ip route ×××.×××.0.0 255.255.128.0 10.1.1.2
ip route ×××。×××。×××。××× 255.255.255.0 10.1.1.2
ip http server
!
!
!
line con 0
transport input none
line vty 0 4
password ××××××
login
!
end