华为设备替换华三设备需变更配置;求大佬检查一遍;
(0)
配置呢
(0)
文件为什么上传不上去呢,好奇怪
<HEB-SDN-C2-A20-PE01>dis current-configuration sysname HEB-SDN-C2-A20-PE01 # undo ftp server source all-interface undo ftp ipv6 server source all-interface # info-center loghost source LoopBack0 //需要核实(命令支持) info-center loghost 10.33.2.158 port 5044 facility local5 info-center loghost 10.11.1.3 facility local3 info-center loghost 10.11.1.6 # system resource standard # device board 1 board-type CE6857-48S6CQ-EI # drop-profile default # dcb pfc # dcb ets-profile default # ntp server source-interface all disable ntp ipv6 server source-interface all disable # vlan reserved 4060 # vlan reserved for main-interface 4000 to 4050 # vlan batch 2 4091 to 4094 # stp disable # evpn-overlay enable # router id 10.2.0.46 # telnet server disable telnet ipv6 server disable undo telnet server-source all-interface undo telnet ipv6 server-source all-interface # diffserv domain default # ip vpn-instance HDM # bfd # mpls lsr-id 10.2.0.46 # mpls label advertise non-null mpls # traffic classifier test type or if-match any # traffic behavior test statistics enable car cir 10000 kbps # traffic policy test # aaa undo local-user policy security-enhance local-user ceni_heb password irreversible-cipher ceni_heb@2019 //重新添加 local-user ceni_heb service-type ssh local-user ceni_heb level 3 local-user ceni_sftp password irreversible-cipher $1c$}D7T;5(DMJ$;<!ASN$3@S.'cu*U6,9AbxJO*RJFm'xTYWSIpL'F$ local-user ceni_sftp service-type ssh local-user ceni_sftp level 3 local-user nms_admin password irreversible-cipher $1c$8N~nHYHbUA$F2ug!ftaR<D.qy3=1p#V}*2d>-RO\$qQA}W~rE#H$ local-user nms_admin service-type ssh local-user nms_admin level 3 # authentication-scheme default # authorization-scheme default # accounting-scheme default # domain default # domain default_admin # stack # license # isis 10 is-level level-2 cost-style wide timer lsp-generation 1 50 50 level-2 flash-flood level-2 bfd all-interfaces enable bfd all-interfaces min-tx-interval 100 min-rx-interval 100 frr-binding network-entity 49.0001.0100.0200.0045.00 is-name HEB-SDN-C2-A20-PE01 timer spf 1 50 50 set-overload on-startup send-sa-bit 120 allow external frr loop-free-alternate level-2 # interface Vlanif4091 description manager ip address 10.1.4.97 255.255.255.240 # interface Vlanif4092 description control ip address 10.2.1.97 255.255.255.240 # interface Vlanif4093 description data ip address 10.3.3.97 255.255.255.240 # interface Vlanif4094 description Internet ip address 10.4.1.97 255.255.255.240 # interface MEth0/0/0 # interface 10GE1/0/1 undo portswitch description to HEB-SDN-C2-A20-VXLAN.SW-S6860-10GE1/0/25 # interface 10GE1/0/1.4091 description to Manage ip address 10.1.8.161 255.255.255.224 isis enable 10 isis silent //需要核实(命令支持) # vlan-type dot1q vid 4091 //需要核实(不需要,删除) # interface 10GE1/0/1.4092 description to HDM ip binding vpn-instance HDM //需要核实(命令支持) ip address 10.2.5.161 255.255.255.224 # vlan-type dot1q vid 4092 //需要核实(不需要,删除) # interface 10GE1/0/2 description to HEB-SDN-C2-A20-SW01-Manager-10GE1/0/1 port link-type trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 4091 to 4094 device transceiver 10GBASE-FIBER # interface 10GE1/0/3 description to HEB-SDN-C2-A20-SW01-Manager-10GE1/0/2 shutdown device transceiver 10GBASE-FIBER # interface 10GE1/0/4 description to HEB-SDN-C2-A20-FW01-GE1/0/0 port link-type trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 4091 device transceiver 1000BASE-X # interface 10GE1/0/5 device transceiver 10GBASE-FIBER # interface 10GE1/0/6 device transceiver 10GBASE-FIBER # interface 10GE1/0/7 device transceiver 10GBASE-FIBER # interface 10GE1/0/8 device transceiver 10GBASE-FIBER # interface 10GE1/0/9 device transceiver 10GBASE-FIBER # interface 10GE1/0/10 device transceiver 10GBASE-FIBER # interface 10GE1/0/11 device transceiver 10GBASE-FIBER # interface 10GE1/0/12 device transceiver 10GBASE-FIBER # interface 10GE1/0/13 device transceiver 10GBASE-FIBER # interface 10GE1/0/14 device transceiver 10GBASE-FIBER # interface 10GE1/0/15 device transceiver 10GBASE-FIBER # interface 10GE1/0/16 device transceiver 10GBASE-FIBER # interface 10GE1/0/17 # interface 10GE1/0/18 device transceiver 10GBASE-FIBER # interface 10GE1/0/19 device transceiver 10GBASE-FIBER # interface 10GE1/0/20 # interface 10GE1/0/21 # interface 10GE1/0/22 # interface 10GE1/0/23 # interface 10GE1/0/24 # interface 10GE1/0/25 # interface 10GE1/0/26 # interface 10GE1/0/27 # interface 10GE1/0/28 # interface 10GE1/0/29 # interface 10GE1/0/30 # interface 10GE1/0/31 # interface 10GE1/0/32 # interface 10GE1/0/33 # interface 10GE1/0/34 # interface 10GE1/0/35 # interface 10GE1/0/36 # interface 10GE1/0/37 # interface 10GE1/0/38 # interface 10GE1/0/39 # interface 10GE1/0/40 # interface 10GE1/0/41 # interface 10GE1/0/42 loopback internal # interface 10GE1/0/43 undo portswitch statistics enable loopback internal # interface 10GE1/0/44 loopback internal # interface 10GE1/0/45 undo portswitch loopback internal # interface 10GE1/0/46 # interface 10GE1/0/47 # interface 10GE1/0/48 # interface 100GE1/0/1 undo portswitch mtu 9000 description TO HEB-SDN-C2-A20-P01_HGE1/0/1 ip address 10.5.0.114 255.255.255.252 isis enable 10 isis circuit-type p2p isis circuit-level level-2 isis authentication-mode md5 cipher //重新添加 isis small-hello device transceiver 100GBASE-FIBER isis bfd enable //需要核实(命令支持) mpls //需要核实(命令支持) # mpls te enable //需要核实(不支持,删除) # ip mtu 9000 //需要核实(删除,同mtu 9000) ipv6 mtu 9000 //需要核实(命令支持) # bfd min-transmit-interval 100 //需要核实(不支持,删除,ISIS进程内已经开启所有接口BFD功能) # bfd min-receive-interval 100 //需要核实(不支持,删除) # bfd detect-multiplier 3 //需要核实(不支持,删除) # interface 100GE1/0/2 # interface 100GE1/0/3 # interface 100GE1/0/4 # interface 100GE1/0/5 # interface 100GE1/0/6 # interface LoopBack0 description for_Management ip address 10.2.0.45 255.255.255.255 isis enable 10 # interface LoopBack1 description for_Service ip address 10.2.0.46 255.255.255.255 isis enable 10 # isis prefix-sid index 19942 no-php //需要核实(不支持,删除) # bgp 137749 # non-stop-routing //需要核实(不支持,删除) router-id 10.2.0.46 group RR internal peer RR connect-interface LoopBack1 peer RR password cipher //需要重配 peer 10.1.0.2 as-number 137749 peer 10.1.0.2 group RR peer 10.1.0.6 as-number 137749 peer 10.1.0.6 group RR # ipv4-family unicast peer RR enable peer 10.1.0.2 enable peer 10.1.0.2 group RR peer 10.1.0.6 enable peer 10.1.0.6 group RR # l2vpn-family evpn peer RR enable peer RR advertise-community peer RR next-hop-local //需要核实(命令支持) peer RR advertise encap-type mpls //需要核实(命令支持) peer 10.1.0.2 enable peer 10.1.0.2 group RR peer 10.1.0.6 enable peer 10.1.0.6 group RR # #segment-routing //需要核实(不支持,删除) # snmp-agent community read ceni_public snmp-agent sys-info version all snmp-agent group v3 admin_123 privacy snmp-agent group v3 ceni_public privacy snmp-agent group v3 snmpv3 write-view ViewDefault snmp-agent group v3 terra-monitor-group privacy snmp-agent target-host trap address udp-domain 10.11.1.6 params securityname admin_123 v3 privacy snmp-agent target-host trap address udp-domain 10.11.1.5 params securityname ceni_public snmp-agent target-host trap address udp-domain 192.168.11.253 params securityname ceni_public snmp-agent target-host trap address udp-domain 10.33.2.158 udp-port 60162 params securityname public v2c snmp-agent target-host trap address udp-domain 10.255.1.34 udp-port 9317 params securityname admin_123 v3 privacy snmp-agent usm-user v3 admin_123 admin_123 simple authentication-mode md5 cipher 123_admin snmp-agent usm-user v3 admin_123 privacy-mode des56 cipher 123_admin snmp-agent usm-user v3 ceni_public ceni_public authentication-mode md5 *** snmp-agent usm-user v3 terra-monitor terra-monitor authentication-mode sha *** privacy-mode des56 *** snmp-agent trap enable feature-name arp snmp-agent trap enable feature-name l2vpn snmp-agent trap enable feature-nam radius snmp-agent trap enable feature-name bfd snmp-agent trap enable feature-name bgp snmp-agent trap enable feature-name configuration snmp-agent trap enable feature-name isis snmp-agent trap enable feature-name l3vpn snmp-agent trap enable feature-name ldp snmp-agent trap enable feature-name system snmp-agent trap source LoopBack0 # undo snmp-agent proxy protocol source-status all-interface undo snmp-agent proxy protocol source-status ipv6 all-interface # lldp enable # ssh server enable stelnet server enable sftp server enable snetconf server enable ssh user ceni_sftp ssh user ceni_sftp authentication-type password ssh user ceni_sftp service-type sftp ssh user ceni_sftp sftp-directory flash:/ ssh user ceni_heb ssh user ceni_heb authentication-type password ssh user ceni_heb service-type snetconf stelnet ssh user nms_admin ssh user nms_admin authentication-type password ssh user nms_admin service-type all ssh user nms_admin sftp-directory flash:/ ssh server-source all-interface ssh ipv6 server-source all-interface ssh authorization-type default aaa # //ssh server cipher aes256_ctr aes128_ctr //ssh server hmac sha2_256_96 sha2_256 sha1_96 //ssh server key-exchange dh_group_exchange_sha256 dh_group_exchange_sha1 ecdh_sha2_nistp256 ecdh_sha2_nistp384 ecdh_sha2_nistp521 sm2_kep # //ssh server publickey dsa ecc rsa # //ssh server dh-exchange min-len 2048 # ssh client first-time enable ssh client peer 10.1.0.21 assign ecc-key 10.1.0.21 ssh client peer 172.5.0.41 assign ecc-key 172.5.0.41 # ssh client publickey dsa ecc rsa # ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc ssh client hmac sha2_512 sha2_256_96 sha2_256 sha1 sha1_96 md5 md5_96 ssh client key-exchange dh_group_exchange_sha256 dh_group_exchange_sha1 dh_group14_sha1 dh_group1_sha1 ecdh_sha2_nistp256 ecdh_sha2_nistp384 ecdh_sha2_nistp521 sm2_kep # ping mac enable # user-interface con 0 authentication-mode password set authentication password cipher $1c$K],M:7$/O"$[r(k3vImnHxJPh84'KR*WK.H,srvz%5NY|#>vAYS$ # user-interface vty 0 4 authentication-mode aaa protocol inbound ssh # vm-manager # http # return
<HEB-SDN-C2-A20-PE01>dis current-configuration | ||
sysname HEB-SDN-C2-A20-PE01 | ||
# | ||
undo ftp server source all-interface | ||
undo ftp ipv6 server source all-interface | ||
# | ||
info-center loghost source LoopBack0 | //需要核实(命令支持) | |
info-center loghost 10.33.2.158 port 5044 facility local5 | ||
info-center loghost 10.11.1.3 facility local3 | ||
info-center loghost 10.11.1.6 | ||
# | ||
system resource standard | ||
# | ||
device board 1 board-type CE6857-48S6CQ-EI | ||
# | ||
drop-profile default | ||
# | ||
dcb pfc | ||
# | ||
dcb ets-profile default | ||
# | ||
ntp server source-interface all disable | ||
ntp ipv6 server source-interface all disable | ||
# | ||
vlan reserved 4060 | ||
# | ||
vlan reserved for main-interface 4000 to 4050 | ||
# | ||
vlan batch 2 4091 to 4094 | ||
# | ||
stp disable | ||
# | ||
evpn-overlay enable | ||
# | ||
router id 10.2.0.46 | ||
# | ||
telnet server disable | ||
telnet ipv6 server disable | ||
undo telnet server-source all-interface | ||
undo telnet ipv6 server-source all-interface | ||
# | ||
diffserv domain default | ||
# | ||
ip vpn-instance HDM | ||
# | ||
bfd | ||
# | ||
mpls lsr-id 10.2.0.46 | ||
# | ||
mpls | ||
label advertise non-null | ||
mpls | ||
# | ||
traffic classifier test type or | ||
if-match any | ||
# | ||
traffic behavior test | ||
statistics enable | ||
car cir 10000 kbps | ||
# | ||
traffic policy test | ||
# | ||
aaa | ||
undo local-user policy security-enhance | ||
local-user ceni_heb password irreversible-cipher ceni_heb@2019 //重新添加 | ||
local-user ceni_heb service-type ssh | ||
local-user ceni_heb level 3 | ||
local-user ceni_sftp password irreversible-cipher $1c$}D7T;5(DMJ$;<!ASN$3@S.'cu*U6,9AbxJO*RJFm'xTYWSIpL'F$ | ||
local-user ceni_sftp service-type ssh | ||
local-user ceni_sftp level 3 | ||
local-user nms_admin password irreversible-cipher $1c$8N~nHYHbUA$F2ug!ftaR<D.qy3=1p#V}*2d>-RO\$qQA}W~rE#H$ | ||
local-user nms_admin service-type ssh | ||
local-user nms_admin level 3 | ||
# | ||
authentication-scheme default | ||
# | ||
authorization-scheme default | ||
# | ||
accounting-scheme default | ||
# | ||
domain default | ||
# | ||
domain default_admin | ||
# | ||
stack | ||
# | ||
license | ||
# | ||
isis 10 | ||
is-level level-2 | ||
cost-style wide | ||
timer lsp-generation 1 50 50 level-2 | ||
flash-flood level-2 | ||
bfd all-interfaces enable | ||
bfd all-interfaces min-tx-interval 100 min-rx-interval 100 frr-binding | ||
network-entity 49.0001.0100.0200.0045.00 | ||
is-name HEB-SDN-C2-A20-PE01 | ||
timer spf 1 50 50 | ||
set-overload on-startup send-sa-bit 120 allow external | ||
frr | ||
loop-free-alternate level-2 | ||
# | ||
interface Vlanif4091 | ||
description manager | ||
ip address 10.1.4.97 255.255.255.240 | ||
# | ||
interface Vlanif4092 | ||
description control | ||
ip address 10.2.1.97 255.255.255.240 | ||
# | ||
interface Vlanif4093 | ||
description data | ||
ip address 10.3.3.97 255.255.255.240 | ||
# | ||
interface Vlanif4094 | ||
description Internet | ||
ip address 10.4.1.97 255.255.255.240 | ||
# | ||
interface MEth0/0/0 | ||
# | ||
interface 10GE1/0/1 | ||
undo portswitch | ||
description to HEB-SDN-C2-A20-VXLAN.SW-S6860-10GE1/0/25 | ||
# | ||
interface 10GE1/0/1.4091 | ||
description to Manage | ||
ip address 10.1.8.161 255.255.255.224 | ||
isis enable 10 | ||
isis silent //需要核实(命令支持) | ||
# vlan-type dot1q vid 4091 //需要核实(不需要,删除) | ||
# | ||
interface 10GE1/0/1.4092 | ||
description to HDM | ||
ip binding vpn-instance HDM //需要核实(命令支持) | ||
ip address 10.2.5.161 255.255.255.224 | ||
# vlan-type dot1q vid 4092 //需要核实(不需要,删除) | ||
# | ||
interface 10GE1/0/2 | ||
description to HEB-SDN-C2-A20-SW01-Manager-10GE1/0/1 | ||
port link-type trunk | ||
undo port trunk allow-pass vlan 1 | ||
port trunk allow-pass vlan 4091 to 4094 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/3 | ||
description to HEB-SDN-C2-A20-SW01-Manager-10GE1/0/2 | ||
shutdown | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/4 | ||
description to HEB-SDN-C2-A20-FW01-GE1/0/0 | ||
port link-type trunk | ||
undo port trunk allow-pass vlan 1 | ||
port trunk allow-pass vlan 4091 | ||
device transceiver 1000BASE-X | ||
# | ||
interface 10GE1/0/5 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/6 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/7 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/8 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/9 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/10 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/11 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/12 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/13 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/14 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/15 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/16 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/17 | ||
# | ||
interface 10GE1/0/18 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/19 | ||
device transceiver 10GBASE-FIBER | ||
# | ||
interface 10GE1/0/20 | ||
# | ||
interface 10GE1/0/21 | ||
# | ||
interface 10GE1/0/22 | ||
# | ||
interface 10GE1/0/23 | ||
# | ||
interface 10GE1/0/24 | ||
# | ||
interface 10GE1/0/25 | ||
# | ||
interface 10GE1/0/26 | ||
# | ||
interface 10GE1/0/27 | ||
# | ||
interface 10GE1/0/28 | ||
# | ||
interface 10GE1/0/29 | ||
# | ||
interface 10GE1/0/30 | ||
# | ||
interface 10GE1/0/31 | ||
# | ||
interface 10GE1/0/32 | ||
# | ||
interface 10GE1/0/33 | ||
# | ||
interface 10GE1/0/34 | ||
# | ||
interface 10GE1/0/35 | ||
# | ||
interface 10GE1/0/36 | ||
# | ||
interface 10GE1/0/37 | ||
# | ||
interface 10GE1/0/38 | ||
# | ||
interface 10GE1/0/39 | ||
# | ||
interface 10GE1/0/40 | ||
# | ||
interface 10GE1/0/41 | ||
# | ||
interface 10GE1/0/42 | ||
loopback internal | ||
# | ||
interface 10GE1/0/43 | ||
undo portswitch | ||
statistics enable | ||
loopback internal | ||
# | ||
interface 10GE1/0/44 | ||
loopback internal | ||
# | ||
interface 10GE1/0/45 | ||
undo portswitch | ||
loopback internal | ||
# | ||
interface 10GE1/0/46 | ||
# | ||
interface 10GE1/0/47 | ||
# | ||
interface 10GE1/0/48 | ||
# | ||
interface 100GE1/0/1 | ||
undo portswitch | ||
mtu 9000 | ||
description TO HEB-SDN-C2-A20-P01_HGE1/0/1 | ||
ip address 10.5.0.114 255.255.255.252 | ||
isis enable 10 | ||
isis circuit-type p2p | ||
isis circuit-level level-2 | ||
isis authentication-mode md5 cipher //重新添加 | ||
isis small-hello | ||
device transceiver 100GBASE-FIBER | ||
isis bfd enable //需要核实(命令支持) | ||
mpls | //需要核实(命令支持) | |
# mpls te enable | //需要核实(不支持,删除) | |
# ip mtu 9000 | //需要核实(删除,同mtu 9000) | |
ipv6 mtu 9000 | //需要核实(命令支持) | |
# bfd min-transmit-interval 100 | //需要核实(不支持,删除,ISIS进程内已经开启所有接口BFD功能) | |
# bfd min-receive-interval 100 | //需要核实(不支持,删除) | |
# bfd detect-multiplier 3 | //需要核实(不支持,删除) | |
# | ||
interface 100GE1/0/2 | ||
# | ||
interface 100GE1/0/3 | ||
# | ||
interface 100GE1/0/4 | ||
# | ||
interface 100GE1/0/5 | ||
# | ||
interface 100GE1/0/6 | ||
# | ||
interface LoopBack0 | ||
description for_Management | ||
ip address 10.2.0.45 255.255.255.255 | ||
isis enable 10 | ||
# | ||
interface LoopBack1 | ||
description for_Service | ||
ip address 10.2.0.46 255.255.255.255 | ||
isis enable 10 | ||
# isis prefix-sid index 19942 no-php | //需要核实(不支持,删除) | |
# | ||
bgp 137749 | ||
# non-stop-routing | //需要核实(不支持,删除) | |
router-id 10.2.0.46 | ||
group RR internal | ||
peer RR connect-interface LoopBack1 | ||
peer RR password cipher | //需要重配 | |
peer 10.1.0.2 as-number 137749 | ||
peer 10.1.0.2 group RR | ||
peer 10.1.0.6 as-number 137749 | ||
peer 10.1.0.6 group RR | ||
# | ||
ipv4-family unicast | ||
peer RR enable | ||
peer 10.1.0.2 enable | ||
peer 10.1.0.2 group RR | ||
peer 10.1.0.6 enable | ||
peer 10.1.0.6 group RR | ||
# | ||
l2vpn-family evpn | ||
peer RR enable | ||
peer RR advertise-community | ||
peer RR next-hop-local | //需要核实(命令支持) | |
peer RR advertise encap-type mpls | //需要核实(命令支持) | |
peer 10.1.0.2 enable | ||
peer 10.1.0.2 group RR | ||
peer 10.1.0.6 enable | ||
peer 10.1.0.6 group RR | ||
# | ||
#segment-routing | //需要核实(不支持,删除) | |
# | ||
snmp-agent community read ceni_public | ||
snmp-agent sys-info version all | ||
snmp-agent group v3 admin_123 privacy | ||
snmp-agent group v3 ceni_public privacy | ||
snmp-agent group v3 snmpv3 write-view ViewDefault | ||
snmp-agent group v3 terra-monitor-group privacy | ||
snmp-agent target-host trap address udp-domain 10.11.1.6 params securityname admin_123 v3 privacy | ||
snmp-agent target-host trap address udp-domain 10.11.1.5 params securityname ceni_public | ||
snmp-agent target-host trap address udp-domain 192.168.11.253 params securityname ceni_public | ||
snmp-agent target-host trap address udp-domain 10.33.2.158 udp-port 60162 params securityname public v2c | ||
snmp-agent target-host trap address udp-domain 10.255.1.34 udp-port 9317 params securityname admin_123 v3 privacy | ||
snmp-agent usm-user v3 admin_123 admin_123 simple authentication-mode md5 cipher 123_admin | ||
snmp-agent usm-user v3 admin_123 privacy-mode des56 cipher 123_admin | ||
snmp-agent usm-user v3 ceni_public ceni_public authentication-mode md5 *** | ||
snmp-agent usm-user v3 terra-monitor terra-monitor authentication-mode sha *** privacy-mode des56 *** | ||
snmp-agent trap enable feature-name arp | ||
snmp-agent trap enable feature-name l2vpn | ||
snmp-agent trap enable feature-nam radius | ||
snmp-agent trap enable feature-name bfd | ||
snmp-agent trap enable feature-name bgp | ||
snmp-agent trap enable feature-name configuration | ||
snmp-agent trap enable feature-name isis | ||
snmp-agent trap enable feature-name l3vpn | ||
snmp-agent trap enable feature-name ldp | ||
snmp-agent trap enable feature-name system | ||
snmp-agent trap source LoopBack0 | ||
# | ||
undo snmp-agent proxy protocol source-status all-interface | ||
undo snmp-agent proxy protocol source-status ipv6 all-interface | ||
# | ||
lldp enable | ||
# | ||
ssh server enable | ||
stelnet server enable | ||
sftp server enable | ||
snetconf server enable | ||
ssh user ceni_sftp | ||
ssh user ceni_sftp authentication-type password | ||
ssh user ceni_sftp service-type sftp | ||
ssh user ceni_sftp sftp-directory flash:/ | ||
ssh user ceni_heb | ||
ssh user ceni_heb authentication-type password | ||
ssh user ceni_heb service-type snetconf stelnet | ||
ssh user nms_admin | ||
ssh user nms_admin authentication-type password | ||
ssh user nms_admin service-type all | ||
ssh user nms_admin sftp-directory flash:/ | ||
ssh server-source all-interface | ||
ssh ipv6 server-source all-interface | ||
ssh authorization-type default aaa | ||
# | ||
//ssh server cipher aes256_ctr aes128_ctr | ||
//ssh server hmac sha2_256_96 sha2_256 sha1_96 | ||
//ssh server key-exchange dh_group_exchange_sha256 dh_group_exchange_sha1 ecdh_sha2_nistp256 ecdh_sha2_nistp384 ecdh_sha2_nistp521 sm2_kep | ||
# | ||
//ssh server publickey dsa ecc rsa | ||
# | ||
//ssh server dh-exchange min-len 2048 | ||
# | ||
ssh client first-time enable | ||
ssh client peer 10.1.0.21 assign ecc-key 10.1.0.21 | ||
ssh client peer 172.5.0.41 assign ecc-key 172.5.0.41 | ||
# | ||
ssh client publickey dsa ecc rsa | ||
# | ||
ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc | ||
ssh client hmac sha2_512 sha2_256_96 sha2_256 sha1 sha1_96 md5 md5_96 | ||
ssh client key-exchange dh_group_exchange_sha256 dh_group_exchange_sha1 dh_group14_sha1 dh_group1_sha1 ecdh_sha2_nistp256 ecdh_sha2_nistp384 ecdh_sha2_nistp521 sm2_kep | ||
# | ||
ping mac enable | ||
# | ||
user-interface con 0 | ||
authentication-mode password | ||
set authentication password cipher $1c$K],M:7$/O"$[r(k3vImnHxJPh84'KR*WK.H,srvz%5NY|#>vAYS$ | ||
# | ||
user-interface vty 0 4 | ||
authentication-mode aaa | ||
protocol inbound ssh | ||
# | ||
vm-manager | ||
# | ||
http | ||
# | ||
return |
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
都支持的,没啥特别的