red backbas配置说明书.docx
《red backbas配置说明书.docx》由会员分享，可在线阅读，更多相关《red backbas配置说明书.docx（19页珍藏版）》请在冰豆网上搜索。
redbackbas配置说明书
配置模版
aaaglobalrejectempty-username拒绝空用户名
aaalast-resortcontextpppoe设置最后默认响应域
!
!
servicemultiple-contexts启用多conetxt服务
!
serviceinter-contextrouting启用conetxt间路由
!
softwarelicense服务license
subscriberhigh-availabilityencrypted1$1$btnUa7He$m4HwvsBIBNgdzhTMAWMG./
subscriberactive32000encrypted1$1$kHWAs0n0$JyO.QFiSbKNAycNtPjGXy1
subscriberbandwidth250encrypted1$1$tN8G8DxK$rJNw4s2/1uid7SGyTAUIU.
!
contextlocal
!
noipdomain-lookup禁止域名查找
!
interfaceloopbackloopback建立loopback接口
ipaddress124.205.97.32/32设定接口使用的IP地址
ipsource-addresssnmp用loopback来作snmp的源地址
!
interfacemgmt建立管理接口
ipaddress192.168.1.1/24
!
interfaceto_9500建立连接9505的上行口
ipaddress124.205.98.129/30
!
interfaceto_cr建立连接NE40E的上行口
ipaddress124.205.98.14/30
loggingconsole日志输出到console台
!
ipaccess-listsecure-access
seq10permittcp211.103.228.00.0.0.255anyeqtelnet//允许登录的地址
seq20permittcp211.103.228.00.0.0.255anyeqssh//允许登录的地址
seq50permittcp124.42.97.1200.0.0.7anyeqtelnet//允许登录的地址
seq60permittcp124.42.99.1280.0.0.7anyeqtelnet//允许登录的地址
seq70permittcp192.168.1.00.0.0.255anyeqtelnet//xcrpmangementinterface
seq80permittcp192.168.1.00.0.0.255anyeqssh//xcrpmangementinterface
seq90permittcp192.168.1.00.0.0.255anyeqftp//xcrpmangementinterface
seq100permiticmpanyany//icmp
seq110permitospfanyany//ospf
seq120permittcphost124.205.98.130eqbgp//bgpneighbor
seq130permittcphost124.205.98.14eqbgp//bgpneighbor，所有neighborloopback
seq140permitiphost124.205.98.130//上联口地址
seq150permitiphost124.205.98.14//上联口地址
seq510permitiphost10.63.5.3//radius1
seq520permitiphost10.63.5.4//radius2
seq530permitudphostx.x.x.xanyeqsnmp//单点snmp
seq540permitudphostx.x.x.xanyeqsnmptrap//单点snmp
seq550permitudphost123.189.246.15eqntp//ntpserver1//允许NTP服务器
seq560permitudphostx.x.x.xeqntp//ntpserver2
!
routerbgp64527启用BGP路由协议
address-familyipv4unicast单播IPV4协议族
redistributestatic重发布静态路由
!
neighbor124.205.98.13internal建立IBGP邻居
update-sourceto_cr使用to_cr口建立邻居
address-familyipv4unicast
!
neighbor124.205.98.130internal
update-sourceto_9500
address-familyipv4unicast
!
routerisis1启用ISIS路由协议
net86.0010.1242.0597.0032.00添加网络号
istypelevel-2-only设定ISIS路由类型
address-familyipv4unicast启用IPV4协议族
!
interfaceto_9500添加接口到ISIS
!
bindtoethernet3/1
circuittypelevel-2-only
address-familyipv4unicast
!
interfaceloopback
circuittypelevel-2-only
address-familyipv4unicast
!
interfaceto_cr
!
bindtolink-group
circuittypelevel-2-only
address-familyipv4unicast
!
administratorgtiencrypted1$1$........$5.QLKoZoAP0zv0Jk0GZca.建立本地管理账号
privilegestart15
privilegemax15
administratorredbackencrypted1$1$........$Pe5LzZaHzYjB/iLRsjYvI0
privilegestart15
privilegemax15
!
!
iproute124.204.128.0/20contextpppoepermanent指静态路由到pppoecontext
iproute124.204.160.0/20contextpppoepermanent
iproute124.204.192.0/19contextpppoepermanent
iproute124.204.254.0/23contextpppoepermanent
iproute124.204.255.0/24contextpppoepermanent
iproute124.205.97.34/32contextpppoepermanent
!
!
contextpppoe建立名为pppoe的context
!
ipname-servers211.167.242.34设定DNS服务器
noipdomain-lookup关闭域名查找
!
interfacecs
ipaddress10.255.35.30/28
!
interfacedowei
ipaddress10.255.35.4/28
!
interfaceloopbackloopback指定本context下的loopback地址
ipaddress124.205.97.34/32
ipsource-addressradius用loopback地址与radius对接
!
interfacepool01multibind建立地址池接口
ipaddress124.204.128.1/20设定地址池网关
ippool124.204.128.0/20namechangcheng#0设定地址池范围并命名为changcheng#0
!
interfacepool02multibind设定其他地址池
ipaddress124.204.160.1/20
ippool124.204.160.0/20namegugong#0
!
interfacepool03multibind
ipaddress124.204.192.1/19
ippool124.204.192.0/19
!
interfacezhuanxianmultiband设定专线用户接口
ipaddress124.204.254.1/24设定专线用户网关，一个接口下
最多配16个子网
ipaddress1.1.1.1/30secondary
ipaddress1.1.1.5/30secondary
ipaddress1.1.1.9/30secondary
ipaddress1.1.1.13/30secondary
ipaddress1.1.1.17/30secondary
ipaddress1.1.1.21/30secondary
ipaddress1.1.1.25/30secondary
ipaddress1.1.1.29/30secondary
ipaddress1.1.1.33/30secondary
ipaddress1.1.1.37/30secondary
ipaddress1.1.1.41/30secondary
ipaddress1.1.1.45/30secondary
ipaddress1.1.1.49/30secondary
ipaddress1.1.1.53/30secondary
!
nologgingconsole
!
ipaccess-listanti-virus设定用户用防病毒控制列表
seq10denyudpanyanyeqnetbios-ss
seq20denyudpanyanyeqnetbios-dgm
seq30denyudpanyanyeq135
seq40denyudpanyanyeqnetbios-ns
seq50denyudpanyanyeq445
seq60denyudpanyanyeq1434
seq70denytcpanyanyeq139
seq80denytcpanyanyeq135
seq90denytcpanyanyeq137
seq100denytcpanyanyeq138
seq110denytcpanyanyeq445
seq130denytcpanyanyeq2745
seq140denytcpanyanyeq3127
seq150denytcpanyanyeq593
seq160denytcpanyanyeq6129
seq5000permitipanyany
!
policyaccess-listnwspeed配置二次限速中去内网的策略
seq30permitip220.113.16.00.0.15.255anyclassneiwang
seq40permitip211.161.0.00.0.15.255anyclassneiwang
seq50permitip211.162.228.00.0.0.255anyclassneiwang
seq60permitip220.113.10.00.0.1.255anyclassneiwang
seq70permitip220.113.12.00.0.3.255anyclassneiwang
seq80permitip220.113.8.00.0.0.255anyclassneiwang
seq90permitip124.14.224.00.0.31.255anyclassneiwang
seq100permitip124.254.0.00.0.63.255anyclassneiwang
seq110permitip211.162.224.00.0.3.255anyclassneiwang
seq120permitip220.113.0.00.0.7.255anyclassneiwang
seq130permitip124.14.64.00.0.63.255anyclassneiwang
seq140permitip220.113.32.00.0.15.255anyclassneiwang
seq150permitip211.161.32.00.0.15.255anyclassneiwang
seq160permitip60.253.128.00.0.127.255anyclassneiwang
seq170permitip115.183.0.00.0.255.255anyclassneiwang
seq180permitip113.46.0.00.0.255.255anyclassneiwang
seq190permitip113.45.0.00.0.255.255anyclassneiwang
seq200permitip125.39.134.00.0.1.255anyclassneiwang
seq210permitip113.44.0.00.0.255.255anyclassneiwang
seq220permitip125.39.108.00.0.1.255anyclassneiwang
seq230permitip117.79.72.00.0.3.255anyclassneiwang
seq240permitip117.79.68.00.0.3.255anyclassneiwang
seq250permitip211.152.192.00.0.31.255anyclassneiwang
seq260permitip211.100.192.00.0.15.255anyclassneiwang
seq270permitip210.76.96.00.0.31.255anyclassneiwang
seq280permitip202.108.125.00.0.0.255anyclassneiwang
seq290permitip202.106.160.00.0.7.255anyclassneiwang
seq300permitip125.39.34.00.0.1.255anyclassneiwang
seq310permitip123.196.0.00.1.255.255anyclassneiwang
seq320permitip118.204.0.00.3.255.255anyclassneiwang
seq330permitip123.151.96.00.0.15.255anyclassneiwang
seq340permitip218.247.128.00.0.127.255anyclassneiwang
seq350permitip210.75.96.00.0.31.255anyclassneiwang
seq360permitip211.103.128.00.0.127.255anyclassneiwang
seq370permitip118.196.0.00.3.255.255anyclassneiwang
seq380permitip202.108.19.00.0.0.255anyclassneiwang
seq390permitip211.147.0.00.0.31.255anyclassneiwang
seq400permitip125.39.68.00.0.1.255anyclassneiwang
seq410permitip219.238.0.00.1.255.255anyclassneiwang
seq420permitip124.192.0.00.1.255.255anyclassneiwang
seq430permitip218.241.128.00.0.127.255anyclassneiwang
seq440permitip116.216.0.00.3.255.255anyclassneiwang
seq450permitip123.151.48.00.0.15.255anyclassneiwang
seq460permitip218.247.0.00.0.31.255anyclassneiwang
seq470permitip202.4.252.00.0.3.255anyclassneiwang
seq480permitip117.75.0.00.0.255.255anyclassneiwang
seq490permitip116.242.0.00.1.255.255anyclassneiwang
seq500permitip211.155.240.00.0.15.255anyclassneiwang
seq510permitip219.234.80.00.0.15.255anyclassneiwang
seq520permitip125.39.66.00.0.1.255anyclassneiwang
seq530permitip219.234.128.00.0.127.255anyclassneiwang
seq540permitip124.200.0.00.7.255.255anyclassneiwang
seq550permitip118.144.0.00.7.255.255anyclassneiwang
seq560permitip118.224.0.00.3.255.255anyclassneiwang
seq570permitip123.151.128.00.0.7.255anyclassneiwang
seq580permitip218.244.224.00.0.31.255anyclassneiwang
seq590permitip60.29.151.1280.0.0.127anyclassneiwang
seq600permitip60.194.0.00.1.255.255anyclassneiwang
seq610permitip117.100.0.00.1.255.255anyclassneiwang
seq620permitip118.244.0.00.3.255.255anyclassneiwang
seq630permitip211.167.224.00.0.31.255anyclassneiwang
seq640permitip211.154.160.00.0.15.255anyclassneiwang
seq650permitip115.120.0.00.0.127.255anyclassneiwang
seq660permitip202.130.0.00.0.31.255anyclassneiwang
seq670permitip211.101.0.00.0.63.255anyclassneiwang
seq680permitip60.206.0.00.1.255.255anyclassneiwang
seq690permitip116.244.0.00.1.255.255anyclassneiwang
seq700permitip202.108.18.1280.0.0.127anyclassneiwang
seq710permitip211.100.224.00.0.31.255anyclassneiwang
seq720permitip123.151.32.320.0.0.31anyclassneiwang
seq730permitip123.151.32.640.0.0.63anyclassneiwang
seq740permitip123.151.32.1280.0.0.127anyclassneiwang
seq750permitip218.249.0.00.0.255.255anyclassneiwang
seq760permitip121.68.0.00.3.255.255anyclassneiwang
seq770permitip111.161.8.00.0.0.255anyclassneiwang
seq5000permitipanyanyclassdef
!
p
升级会员 