extreme 交换机常用维护命令

extreme 交换机 配置

最近有个项目用extreme的网络设备,根据extreme官方资料,整理了一些常用的配置!

1.用户名和密码配置

create account [admin | user] {encrypted} {}

configure account admin

2.port配置

config ports auto off {speed [10 | 100 | 1000]} duplex [half | full] auto off

3.Vlan配置

无论是核心还是接入层，都要先创建三个Vlan，并且将所有归于Default Vlan的端口删除：

config vlan default del port all

create vlan Server

create vlan User

create vlan Manger

定义802.1q标记

config vlan Server tag 10

config vlan User tag 20

config vlan Manger tag 30

设定Vlan网关地址：

config vlan Server ipa 192.168.41.1/24

config vlan User ipa 192.168.40.1/24

config vlan Manger ipa 192.168.*.*/24

Enable ipforwarding 启用ip路由转发，即vlan间路由

Trunk 配置

config vlan Server add port 1-3 t

config vlan User add port 1-3 t

config vlan manger add port 1-3 t

4.VRRP配置

enable vrrp

configure vrrp add vlan UserVlan

configure vrrp vlan UserVlan add master vrid 10 192.168.6.254

configure vrrp vlan UserVlan authentication simple-password extreme

configure vrrp vlan UserVlan vrid 10 priority 200

configure vrrp vlan UserVlan vrid 10 advertisement-interval 15

configure vrrp vlan UserVlan vrid 10 preempt



5.端口镜像配置

enable mirroring to port 3 ＃选择3作为镜像口

config mirroring add port 1 ＃把端口1的流量发送到3

config mirroring add port 1 vlan default ＃把1和vlan default的流量都发送到3

6.port-channel配置

enable sharing grouping {port-based | address-based | round-robin}



7.stp配置

enable stpd

create stpd *

configure stpd add vlan {ports [dot1d | emistp | pvst-plus]}

configure stpd stpd1 priority 16384

configure vlan marketing add ports 2-3 stpd stpd1 emistp



8.DHCP 中继配置

enable bootprelay

config bootprelay add

9.NAT配置

Enable nat ＃启用nat

Static NAT Rule Example

config nat add out_vlan_1 map source 192.168.1.12/32 to 216.52.8.32/32

Dynamic NAT Rule Example

config nat add out_vlan_1 map source 192.168.1.0/24 to 216.52.8.1 - 216.52.8.31

Portmap NAT Rule Example

config nat add out_vlan_2 map source 192.168.2.0/25 to 216.52.8.32 /28 both portmap

Portmap Min-Max Example

config nat add out_vlan_2 map source 192.168.2.128/25 to 216.52.8.64/28 tcp portmap 1024 - 8192





10.OSPF配置

enable ospf 启用OSPF进程

create ospf area 创建OSPF区域

configure ospf routerid [automatic | ] 配置Routerid

configure ospf add vlan [ | all] area {passive} 把某个vlan加到某个Area中去，相当于Cisco中的network的作用

configure ospf area add range [advertise | noadvertis
e] {type-3 | type-7} 把某个网段加到某个Area中去，相当于Cisco中的network的作用

configure ospf vlan neighbor add



OSPF中路由重发布配置

enable ospf export direct

extreme 交换机 配置

[cost [ase-type-1 | ase-type-2] {tag } | ]

enable ospf export static [cost [ase-type-1 | ase-type-2] {tag } | ]

enable ospf originate-default {always} cost [ase-type-1 | ase-type-2] {tag }

enable ospf originate-router-id



11.SNMP配置

enable snmp access

enable snmp traps

create access-profile type [ipaddress | vlan]

config snmp access-profile readonly [ | none]配置snmp的只读访问列表，none是去除

config snmp access-profile readwrite [ | none] 这是控制读写控制

config snmp add trapreceiver {port } community {from } 配置snmp接收host和团体字符串



12.安全配置

disable ip-option loose-source-route

disable ip-option strict-source-route

disable ip-option record-route

disable ip-option record-timestamp

disable ipforwarding broadcast

disable udp-echo-server

disable irdp vlan

disable icmp redirect

disable web 关闭web方式访问交换机

enable cpu-dos-protect



13.Access－Lists配置

create access-list icmp destination source

create access-list ip destination source ports

create access-list tcp destination source ports

create access-list udp destination source ports







14.默认路由配置

config iproute add default



15.恢复出厂值，但不包括用户改的时间和用户帐号信息

unconfig switch {all}





16.检查配置

show version

show config

show session

show management 查看管理信息，以及snmp信息

show banner

show ports configuration

show ospf

show access-list { | port }

show access-list-monitor

show ospf area

show ospf area detail

show ospf ase-summary

show ospf interfaces {vlan | area }

unconfigure ospf {vlan | area }



17.备份和升级软件

download image [ | ] {primary | secondary}

upload image [ | ] {pr …… 此处隐藏：2407字，全部文档内容请下载后查看。喜欢就下载吧 ……