設備命名
system-view
sysname TEST
配置管理地址
interface LoopBack1
description For-Management
ip address 1.1.1.1 255.255.255.255
NTP和時區設置
clock timezone GMT add 08:00:00
clock protocol ntp mdc 1
ntp服務配置:
ntp-service enable
ntp-service source LoopBack1
ntp-service unicast-server 2.2.2.2 priority
配置SysLog-ng日志,及syslog服務器
info-center loghost source LoopBack1
info-center loghost 3.3.3.3
info-center source default logbuffer level warning
配置上聯互聯地址
reserve-vlan-interface 3000 to 3500 配置預留VLAN(端口要從交換口轉路由口必須先設置這項)
interface HundredGigE 2/0/1
port link-mode route
description uT:******
ip address 192.168.1.1 255.255.255.252
interface HundredGigE 3/0/1
port link-mode route
description uT:******
ip address 192.168.2.1 255.255.255.252
配置Telnet Snmp ACL
acl number 2577
description This acl is used telnet
rule 10 permit source 10.1.1.1 0
rule 3000 deny
acl number 2578
description This acl is used SNMP
rule 10 permit source 10.1.1.1 0
rule 3000 deny
SNMP代理設置:
snmp-agent
snmp-agent community read snmptest acl 2578
snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 3.3.3.3 params securityname snmptest v2c
snmp-agent trap enable arp
snmp-agent trap enable radius
snmp-agent trap source LoopBack1
配置Telnet遠程
undo ip http enable 關閉WEB管理
telnet server enable
telnet server acl 2577
local-user test class manage 配置test用戶密碼設置為:123456
password hash 123456
service-type telnet ssh
authorization-attribute user-role level-15
authorization-attribute user-role network-operator