Antonio Perez

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
===== IRF Configuration SCRIPT =====


Next we will present an example of IRPF of the 5500 - script



  #
  version 5.20, Release 2208
  #
   sysname PISO2-SI
  #
   super password level 1 simple 1234567890
   super password level 2 simple 1234567890
   super password level 3 simple 1234567890
  #
   irf mac-address persistent timer
   irf auto-update enable
   undo irf link-delay
  #
   domain default enable system
  #
   telnet server enable
  #
  acl number 2000
  description CONTROL_ADMON_SISTEMAS
   rule 0 permit source 10.57.12.0 0.0.0.255
  #
  igmp-snooping
  #
  vlan 1
  description Default
  name Default
  igmp-snooping enable
  #
  vlan 500
   description DMZ
   name DMZ
  #
  vlan 501
   description INTERNET1
   name INTERNET1
  #
  vlan 502
   description INTERNET2
   name INTERNET2
  #
  vlan 503
  description INTERNET3
  name INTERNET3
  #
  vlan 504
   description INTERNET4
   name INTERNET4
  #
  vlan 505
   description ITRADIUS
   name ITRADIUS
  #
  vlan 506
   description VOIP
   name VOIP
   igmp-snooping enable
  #
  vlan 507
   description CA
   name CA
   igmp-snooping enable
  #
  vlan 508
   description VVIP
   name VVIP
   igmp-snooping enable
  #
  vlan 509
   description WIFIC
   name WIFIC
   igmp-snooping enable
  #
  vlan 510
   description SISTEMAS
   name SISTEMAS
   igmp-snooping enable
  #
  vlan 511
   description FINANCIERA
   name FINANCIERA
   igmp-snooping enable
  #
  vlan 512
   description ADMON
   name ADMON
  igmp-snooping enable
  #
  vlan 513
   description DOCENTES
   name DOCENTES
   igmp-snooping enable
  #
  vlan 514
   description SCA
   name SCA
   igmp-snooping enable
  #
  vlan 515
   description SCB
   name SCB
   igmp-snooping enable
  #
  vlan 516
   description SCC
   name SCC
   igmp-snooping enable
  #
  vlan 517
   description SCD
   name SCD
   igmp-snooping enable
  #
  vlan 518
   description SCE
   name SCE
   igmp-snooping enable
  #
  vlan 519
   description SCF
   name SCF
   igmp-snooping enable
  #
  vlan 520
   description SCG
   name SCG
   igmp-snooping enable
  #
  vlan 521
   description SCEL
   name SCEL
   igmp-snooping enable
  #
  vlan 522
   description VMWARE
   name VMWARE
   igmp-snooping enable
  #
  radius scheme system
   primary authentication 127.0.0.1 1645
   primary accounting 127.0.0.1 1646
   user-name-format without-domain
  #
  domain system
   access-limit disable
   state active
   idle-cut disable
   self-service-url disable
  #
  user-group system
  #
  local-user admin
   password simple 1234567890
   authorization-attribute level 3
   service-type lan-access
   service-type ssh telnet terminal
  local-user manager
   password simple 1234567890
   authorization-attribute level 2
   service-type lan-access
   service-type ssh telnet terminal
  local-user monitor
   password simple 1234567890
   authorization-attribute level 1
   service-type lan-access
   service-type ssh telnet terminal
  #
  interface Bridge-Aggregation1
   description conexion switch 10.57.0.1
   port link-type trunk
   port trunk permit vlan all
   link-aggregation mode dynamic
  #
  interface NULL0
  #
  interface Vlan-interface1
   description SWITCH 4500G PISO 2 SALAS DE COMPUTO
   ip address 10.57.0.8 255.255.254.0
  #
  interface GigabitEthernet1/0/1
   description CONEXION AP AUTONOMO MARCA TRENDNET
   port access vlan 505
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/2
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/3
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/4
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/5
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/6
   port access vlan 507
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/7
   port access vlan 507
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/8
   port access vlan 507
   broadcast-suppression pps 3000
   poe enable
  #
    interface GigabitEthernet1/0/9
   port access vlan 507
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/10
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/11
   port access vlan 507
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/12
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/13
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/14
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/15
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/16
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/17
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/18
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/19
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/20
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/21
   description CONEXION PLANET DUAL SPEED HUB
   port access vlan 517
   broadcast-suppression pps 300
   poe enable
  #
  interface GigabitEthernet1/0/22
   description CONEXION SWITCH 3COM BASELINE
   port access vlan 516
   broadcast-suppression pps 300
   poe enable
  #
  interface GigabitEthernet1/0/23
   description conexion switch IP 10.57.0.1
   port link-type trunk
   port trunk permit vlan all
   broadcast-suppression pps 300
   poe enable
  #
  interface GigabitEthernet1/0/24
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet1/0/25
   shutdown
  #
  interface GigabitEthernet1/0/26
   shutdown
  #
  interface GigabitEthernet1/0/27
   shutdown
  #
  interface GigabitEthernet1/0/28
   shutdown
  #
  interface GigabitEthernet2/0/1
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/2
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/3
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/4
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/5
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/6
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/7
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/8
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/9
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/10
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/11
   description CONEXION AP 2750 CONTROLADO POR UN WS1200
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/12
   description CONEXION AP DLINK AUTONOMO
   port access vlan 509
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/13
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/14
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/15
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/16
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/17
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/18
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/19
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/20
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/21
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/22
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/23
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/24
   port access vlan 514
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet2/0/25
   shutdown
  #
  interface GigabitEthernet2/0/26
   shutdown
  #
  interface GigabitEthernet2/0/27
   shutdown
  #
  interface GigabitEthernet2/0/28
   shutdown
  #
  interface GigabitEthernet3/0/1
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
   #
  interface GigabitEthernet3/0/2
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/3
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/4
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/5
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/6
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/7
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/8
   Port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/9
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/10
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/11
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/12
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/13
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/14
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/15
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/16
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/17
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/18
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/19
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/20
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/21
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/22
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/23
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/24
   port access vlan 515
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet3/0/25
   shutdown
  #
  interface GigabitEthernet3/0/26
   shutdown
  #
  interface GigabitEthernet3/0/27
   shutdown
  #
  interface GigabitEthernet3/0/28
   shutdown
  #
  interface GigabitEthernet4/0/1
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/2
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/3
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/4
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/5
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/6
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/7
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/8
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/9
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/10
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/11
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/12
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/13
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/14
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/15
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/16
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/17
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/18
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/19
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/20
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/21
    port access vlan 512
    broadcast-suppression pps 3000
    poe enable
  #
  interface GigabitEthernet4/0/22
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/23
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/24
   port access vlan 512
   broadcast-suppression pps 3000
   poe enable
  #
  interface GigabitEthernet4/0/25
   shutdown
  #
  interface GigabitEthernet4/0/26
   shutdown
  #
  interface GigabitEthernet4/0/27
   shutdown
  #
  interface GigabitEthernet4/0/28
   shutdown
  #
  interface Ten-GigabitEthernet1/2/1
   description conexion switch IP 10.57.0.1
   port link-type trunk
   port trunk permit vlan all
   broadcast-suppression pps 3000
   port link-aggregation group 1
  #
  interface Ten-GigabitEthernet1/2/2
   description conexion switch IP 10.57.0.1
   port link-type trunk
   port trunk permit vlan all
   broadcast-suppression pps 3000
   port link-aggregation group 1
  #
  interface Ten-GigabitEthernet4/2/1
   description conexion switch IP 10.57.0.1
   port link-type trunk
   port trunk permit vlan all
   broadcast-suppression pps 3000
   port link-aggregation group 1
  #
  interface Ten-GigabitEthernet4/2/2
   description conexion switch IP 10.57.0.1
   port link-type trunk
   port trunk permit vlan all
   broadcast-suppression pps 3000
   port link-aggregation group 1
  #
  interface Ten-GigabitEthernet1/1/1
  #
  interface Ten-GigabitEthernet1/1/2
  #
  interface Ten-GigabitEthernet2/1/1
  # 
  interface Ten-GigabitEthernet2/1/2
  #
  interface Ten-GigabitEthernet3/1/1
  #
  interface Ten-GigabitEthernet3/1/2
  #
  interface Ten-GigabitEthernet4/1/1
  #
  interface Ten-GigabitEthernet4/1/2
  #
   ip route-static 0.0.0.0 0.0.0.0 10.57.0.1
  #
  snmp-agent
  snmp-agent local-engineid 8000002B03001EC1E7F6C1
   snmp-agent community read public
   snmp-agent community write private
   snmp-agent sys-info version all
  #
   header login %
  ************************************ATENCION************************************
  Computing unit supported by  I.T.Corporation.
  this is a computing resource for the exclusive use of Enterprise name
  if you are not an authorized user to access this device
  refrain from doing so, as all activities can be monitored
  or recorded. And if evidence of unauthorized access is discovered,
  modifications to the information, attacks against the integrity of the
  information such as the entity, among others, will be reported according to the
  competent authorities.
  ********************************************************************************
  %
  #
   load xml-configuration
  #
  user-interface aux 0 3
   authentication-mode scheme
   set authentication password simple 1234567890
   user-interface vty 0 15
   authentication-mode scheme
   user privilege level 3
   set authentication password simple 1234567890
   protocol inbound telnet
  #
  irf-port 1/1
   port group interface Ten-GigabitEthernet1/1/1 mode normal
  #
  irf-port 1/2
   port group interface Ten-GigabitEthernet1/1/2 mode normal
  #
  irf-port 2/1
   port group interface Ten-GigabitEthernet2/1/1 mode normal
  #
  irf-port 2/2
   port group interface Ten-GigabitEthernet2/1/2 mode normal
  #
  irf-port 3/1
   port group interface Ten-GigabitEthernet3/1/1 mode normal
  #
  irf-port 3/2
   port group interface Ten-GigabitEthernet3/1/2 mode normal
  #
  irf-port 4/1
   port group interface Ten-GigabitEthernet4/1/1 mode normal
  #
  irf-port 4/2
   port group interface Ten-GigabitEthernet4/1/2 mode normal
  #
  return