en
config t
hostname C4506_1
!
enable secret cisco
vtp domain ''
vtp mode transparent
ip subnet-zero
no ip domain-lookup
ip dhcp excluded-address 192.168.10.2 192.168.10.20
ip dhcp pool WirelessDHCP
network 192.168.9.0 255.255.255.0
default-router 192.168.9.1
dns-server 192.168.1.33 192.168.1.36
lease 7
!
ip dhcp pool TestDHCP
network 192.168.6.0 255.255.255.0
default-router 192.168.6.1
dns-server 192.168.1.33 192.168.1.36
!
ip dhcp pool OfficeDHCP
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
netbios-name-server 192.168.1.33
dns-server 192.168.1.33 192.168.1.36
lease 7
!
ip dhcp pool SCC3-DHCP
network 192.168.7.0 255.255.255.0
default-router 192.168.7.1
dns-server 192.168.1.33 192.168.1.36
!
ip dhcp pool SCC4-DHCP
network 192.168.8.0 255.255.255.0
default-router 192.168.8.1
dns-server 192.168.1.33 192.168.1.36
!
ip dhcp pool Access-Internet
network 192.168.12.0 255.255.255.0
default-router 192.168.12.1
dns-server 192.168.1.33 192.168.1.36
netbios-name-server 192.168.1.33
lease 7
!
ip dhcp pool restricted-internet
network 192.168.13.0 255.255.255.0
default-router 192.168.13.1
dns-server 192.168.1.36
!
ip dhcp pool MIS-DHCP
network 192.168.19.0 255.255.255.0
default-router 192.168.19.1
dns-server 192.168.1.33
netbios-name-server 192.168.1.33
!
ip dhcp pool CustDHCP
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 192.168.1.33 192.168.1.36
netbios-name-server 192.168.1.33
!
ip dhcp pool Access-BATAM
network 192.168.15.0 255.255.255.0
default-router 192.168.15.1
netbios-name-server 192.168.1.33
dns-server 192.168.1.33 192.168.1.36
!
ip dhcp pool Office-DHCP
dns-server 192.168.1.33 192.168.1.36
!
ip arp inspection validate dst-mac ip
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
power redundancy-mode redundant
spanning-tree mode pvst vlan 1 -100 pr
设置生成树协议,实现负载均衡和备份
interface Vlan1
description Office-VLAN
ip address 192.168.10.1 255.255.255.0
ip access-group OfficeIN in
!
interface Vlan10
description Servers-VLAN
ip address 192.168.1.1 255.255.255.0
!
interface Vlan20
description Wafermap-VLAN
ip address 192.168.2.1 255.255.255.0
ip access-group Wafermap in
!
interface Vlan30
description Stripmap-VLAN
ip address 192.168.50.254 255.255.255.0
ip access-group Stripmap out
!
interface Vlan40
description Knet-VLAN
ip address 192.168.99.1 255.255.255.0
ip access-group Knet in
!
interface Vlan41
description ESEC WB
ip address 192.168.98.1 255.255.255.0
ip access-group ESEC in
!
interface Vlan42
description For KNS WB
ip address 192.168.30.1 255.255.255.0
ip access-group KNS in
!
interface Vlan43
ip address 192.168.23.1 255.255.255.0
ip access-group ESEC1 in
!
interface Vlan50
description Testcim-VLAN
ip address 192.168.5.1 255.255.255.0
ip access-group Testcim in
!
interface Vlan51
description TEST-Handler Vlan
ip address 192.168.25.1 255.255.255.0
ip access-group TEST-Handler in
!
interface Vlan60
description Test-VLAN
ip address 192.168.6.1 255.255.255.0
ip access-group Test in
!
interface Vlan70
description SCC3-VLAN
ip address 192.168.7.1 255.255.255.0
ip access-group SCC3 in
!
interface Vlan80
description SCC4-VLAN
ip address 192.168.8.1 255.255.255.0
ip access-group SCC4 in
!
interface Vlan90
description Wireless-VLAN
ip address 192.168.9.1 255.255.255.0
!
interface Vlan100
ip address 192.168.100.1 255.255.255.0
ip access-group KNS-HOST in
!
interface Vlan110
description Access-Internet
ip address 192.168.12.1 255.255.255.0
!
interface Vlan120
ip address 192.168.13.1 255.255.255.0
!
interface Vlan130
description Cust-VLAN
ip address 192.168.20.1 255.255.255.0
ip access-group Cust in
!
interface Vlan150
description Access-BATAM
ip address 192.168.15.1 255.255.255.0
!
interface Vlan160
description Bumping-Vlan
ip address 192.168.16.1 255.255.255.0
ip access-group Bumping in
!
interface Vlan180
description MEMS-VLAN
ip address 192.168.80.1 255.255.255.0
ip access-group MEMS in
!
interface Vlan190
description MIS Switch Manangement Vlan
ip address 192.168.19.1 255.255.255.0
ip access-group MIS-Switch in
!
interface Vlan1500
no ip address
shutdown
!
ip default-gateway 192.168.1.3
ip route 0.0.0.0 0.0.0.0 192.168.1.3
ip route 0.0.0.0 0.0.0.0 192.168.11.3 10
//浮动静态路由,当 192.168.1.3 这条线路瘫痪,自动切换到 192.168.11.3 上
ip route 192.168.11.0 255.255.255.0 192.168.1.3
ip router 192.168.11.0 255.255.255.0 192.168.11.3 10
//浮动静态路由,当 192.168.1.3 这条线路瘫痪,自动切换到 192.168.11.3 上
ip http server
!
!
!
ip access-list extended Access-BATAM
permit igmp any any
permit icmp any any
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.2.0 0.0.0.255
permit ip any 192.168.3.0 0.0.0.255
permit ip any 192.168.4.0 0.0.0.255
permit ip any 192.168.5.0 0.0.0.255
permit ip any 192.168.6.0 0.0.0.255
permit ip any 192.168.7.0 0.0.0.255
permit ip any 192.168.9.0 0.0.0.255
permit ip any 192.168.10.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
permit ip any 192.168.12.0 0.0.0.255
permit ip any 192.168.19.0 0.0.0.255
permit ip any 192.168.13.0 0.0.0.255
permit udp any 192.168.1.0 0.0.0.255
permit udp any 192.168.2.0 0.0.0.255
permit udp any 192.168.3.0 0.0.0.255
permit udp any 192.168.4.0 0.0.0.255
permit udp any 192.168.5.0 0.0.0.255
permit udp any 192.168.6.0 0.0.0.255
permit udp any 192.168.7.0 0.0.0.255
permit udp any 192.168.8.0 0.0.0.255
permit udp any 192.168.9.0 0.0.0.255
permit udp any 192.168.10.0 0.0.0.255
permit udp any 192.168.11.0 0.0.0.255
permit udp any 192.168.12.0 0.0.0.255
permit udp any 192.168.13.0 0.0.0.255
permit udp any 192.168.19.0 0.0.0.255
permit ip any host 222.209.223.155
permit ip any host 222.209.208.99
permit udp any host 222.209.223.155
permit udp any host 222.209.208.99
permit ip any host 222.209.223.199
permit udp any host 222.209.223.199
permit ip any 192.168.15.0 0.0.0.255
permit udp any 192.168.15.0 0.0.0.255
permit ip any 192.168.8.0 0.0.0.255
ip access-list extended Bumping
permit igmp any any
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
ip access-list extended Cust
permit igmp any any
permit icmp any any
permit ip any 192.168.20.0 0.0.0.255
permit ip host 192.168.1.10 any
permit ip any host 192.168.1.10
ip any 192.168.0.0 0.0.255.255
deny
permit ip host 192.168.20.5 any
permit ip any host 192.168.20.5
permit ip host 192.168.20.6 any
permit ip any host 192.168.20.6
permit ip host 192.168.1.33 any
permit ip any host 192.168.1.33
permit ip host 192.168.20.7 any
permit udp any 192.168.20.0 0.0.0.255
permit udp 192.168.20.0 0.0.0.255 any
permit ip 192.168.20.0 0.0.0.255 any
ip access-list extended ESEC
permit igmp any any
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
ip access-list extended ESEC1
permit igmp any any
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
ip access-list extended KNS
permit igmp any any
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
ip access-list extended KNS-HOST
permit igmp any any
permit ip any host 192.168.12.71
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
permit ip any host 192.168.12.77
permit ip any host 192.168.13.78
ip access-list extended Knet
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
permit ip any host 222.209.223.155
permit icmp any any
permit udp any any
ip access-list extended MEMS
permit igmp any any
permit udp any any
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
permit udp any 192.168.1.0 0.0.0.255
permit udp any 192.168.11.0 0.0.0.255
permit udp any host 222.209.208.99
permit ip any 192.168.80.0 0.0.0.255
permit udp any 192.168.80.0 0.0.0.255
permit ip any host 222.209.208.99
permit icmp any any
permit ip any host 192.168.12.71
ip access-list extended MIS
permit igmp any any
permit icmp any any
permit ip any 192.168.1.0 0.0.0.255
permit udp any any eq bootps
permit ip any 192.168.10.0 0.0.0.255
ip access-list extended MIS-Switch
permit igmp any any
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
permit ip any 192.168.12.0 0.0.0.255
permit ip any 192.168.13.0 0.0.0.255
ip access-list extended Office
permit ip any 192.168.1.0 0.0.0.255
permit ip any 192.168.2.0 0.0.0.255
permit ip any 192.168.3.0 0.0.0.255
permit ip any 192.168.4.0 0.0.0.255
permit ip any 192.168.5.0 0.0.0.255
permit ip any 192.168.6.0 0.0.0.255
permit ip any 192.168.7.0 0.0.0.255
permit ip any 192.168.9.0 0.0.0.255
permit ip any 192.168.10.0 0.0.0.255
permit ip any 192.168.11.0 0.0.0.255
permit ip any 192.168.12.0 0.0.0.255
permit ip any 192.168.19.0 0.0.0.255
permit ip any 192.168.13.0 0.0.0.255
permit udp any 192.168.1.0 0.0.0.255
permit udp any 192.168.2.0 0.0.0.255