D平台接入A10.30.0.47_2024.03.05

 

YDSJYC2-105-A-02-ASW-RGS6520-M2-01U26#show run
YDSJYC2-105-A-02-ASW-RGS6520-M2-01U26#show running-config

Building configuration...
Current configuration : 14428 bytes

version 11.0(5)B9P120
hostname YDSJYC2-105-A-02-ASW-RGS6520-M2-01U26
!
load-balance-profile default
ipv4 field src-ip dst-ip protocol l4-src-port l4-dst-port
ipv6 field src-ip dst-ip protocol l4-src-port l4-dst-port
hash-disturb 8
!
mac-address-table flapping-logging
lldp management-address-tlv 10.30.0.47
spanning-tree mst configuration
revision 255
name ctyun
instance 1 vlan 1-4094
!
spanning-tree mst 1 priority 4096
spanning-tree
mls qos scheduler sp
!
link state track 1 up-delay 10
!
ip access-list extended 2000
10 permit ip host 10.10.0.136 any
15 permit ip host 10.10.0.137 any
1000 deny ip any any
list-remark For_SNMP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.120.0 0.0.0.255 any
25 permit ip 10.254.181.0 0.0.0.255 any
30 permit ip 10.252.134.0 0.0.1.255 any
35 permit ip 10.10.0.0 0.0.0.255 any
40 permit ip 10.30.0.0 0.0.1.255 any
45 permit ip 10.243.72.0 0.0.0.255 any
list-remark For_Login
!
ip access-list extended test-down-in
10 permit icmp host 10.30.2.61 host 10.30.7.254
20 permit ip any any
!
ip access-list counter test-down-in
svi router-acls enable
!
vrf definition DMZ
rd 1:209
route-target both 1:209
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
!
vrf definition Internet
rd 1:200
!
vrf definition NET-manage
description NET-manage
rd 1:1
route-target both 1:1
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
!
vrf definition OS_Inside
rd 1:301
route-target both 1:301
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
!
vrf definition OS_Internet
rd 2:200
!
time-range clock
!
username COC_monitor privilege 15 password 7 157a1f01182e2f111751786a
username COC_operater privilege 15 password 7 10061a2e1d07442d7342797f
username admin privilege 15 password 7 1014162a0c1c6a5c7341
username openstackadmin privilege 15 password 7 037325380c3b003b4742765d
username sdnadmin privilege 15 password 7 06362c232510113357421b55
username shixun privilege 15 password 7 0059284a5b22162604202d11113e0f2d5b012b1e7a3e0d
username yundiao_read password 7 1217173240082206797c541d
!
no auto-provision
!
install 0 RG-S6250-48XS8CQ
!
sysmac 7042.d3a3.ef52
!
tcam-mode acl-max
!
nfpp
!
mtu forwarding 9216
netconf max-sessions 20
!
password policy min-size 1
service password-encryption
!
redundancy
!
ip ssh cipher-mode ctr
ip ssh version 2
no service timestamps debug
no service timestamps log
logging userinfo
logging buffered 1048576
logging file flash:LOG
logging flash interval 1
logging trap warnings
logging server 10.10.0.136 vrf NET-manage udp-port 5000 level warnings
logging server 10.10.0.137 vrf NET-manage udp-port 5000 level warnings
clock timezone beijing +8 0
!
enable service ssh-server
no enable service telnet-server
!
vlan 4094
name For_VAP
!
vlan range 1,130,150,4080,4093
!
interface TenGigabitEthernet 0/1
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U13.pci2port1.10GELAN
port-group 11 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/2
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U10.pci2port1.10GELAN
port-group 12 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/3
storm-control broadcast level 10
description dT:YDSJYC2-105-A-03-SEV-FHR2220-02U19.pci2port1.10GELAN
switchport mode trunk
switchport trunk allowed vlan only 301,309
lacp individual-port enable
spanning-tree portfast
!
interface TenGigabitEthernet 0/4
storm-control broadcast level 10
description dT:YDSJYC2-105-A-03-SEV-FHR2220-02U16.pci2port1.10GELAN
switchport mode trunk
switchport trunk allowed vlan only 301,309
spanning-tree bpduguard enable
spanning-tree portfast
!
interface TenGigabitEthernet 0/5
storm-control broadcast level 10
description dT:YDSJYC2-105-A-03-SEV-FHR2220-02U13.pci2port1.10GELAN
switchport mode trunk
switchport trunk allowed vlan only 301,309
spanning-tree bpduguard enable
spanning-tree portfast
!
interface TenGigabitEthernet 0/6
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U22.pci2port1.10GELAN
port-group 16 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/7
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U19.pci2port1.10GELAN
port-group 17 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/8
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U16.pci2port1.10GELAN
port-group 18 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/9
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/10
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/11
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/12
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/13
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/14
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/15
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/16
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/17
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/18
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/19
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/20
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/21
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/22
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/23
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U13.pci2port2.10GELAN
port-group 33 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/24
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U10.pci2port2.10GELAN
port-group 34 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/25
storm-control broadcast level 10
description dT:YDSJYC2-105-A-03-SEV-FHR2220-02U19.pci2port2.10GELAN
switchport mode trunk
switchport trunk allowed vlan only 200-209,300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface TenGigabitEthernet 0/26
storm-control broadcast level 10
description dT:YDSJYC2-105-A-03-SEV-FHR2220-02U16.pci2port2.10GELAN
switchport mode trunk
switchport trunk allowed vlan only 200-209,300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface TenGigabitEthernet 0/27
storm-control broadcast level 10
description dT:YDSJYC2-105-A-03-SEV-FHR2220-02U13.pci2port2.10GELAN
switchport mode trunk
switchport trunk allowed vlan only 200-209,300
spanning-tree bpduguard enable
spanning-tree portfast
!
interface TenGigabitEthernet 0/28
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U22.pci2port2.10GELAN
port-group 38 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/29
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U19.pci2port2.10GELAN
port-group 39 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/30
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U16.pci2port2.10GELAN
port-group 40 mode active
lacp short-timeout
lacp individual-port enable
!
interface TenGigabitEthernet 0/31
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/32
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/33
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/34
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/35
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/36
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/37
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/38
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/39
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/40
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/41
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/42
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/43
no switchport
description pT:YDSJYC2-105-A-01-CSW-H6900-M1-01U37.Ten0/43:10.30.0.48.MLAG_Keepalive
port-group 254 mode active
!
interface TenGigabitEthernet 0/44
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/45
description YDSJYC2-105-A-01_A-02-CSW-H6900-M1-01U37.Ten0/45.Hulian
port-group 1 mode active
lacp short-timeout
!
interface TenGigabitEthernet 0/46
description YDSJYC2-105-A-01_A-02-CSW-H6900-M2-01U37.Ten0/45.Hulian
port-group 1 mode active
lacp short-timeout
!
interface TenGigabitEthernet 0/47
description pT:YDSJYC2-105-A-01-CSW-H6900-M1-01U37.Ten0/47:10.30.0.48.MLAG_Peerlink
port-group 255 mode active
!
interface TenGigabitEthernet 0/48
description pT:YDSJYC2-105-A-01-CSW-H6900-M1-01U37.Ten0/48:10.30.0.48.MLAG_Peerlink
port-group 255 mode active
!
interface HundredGigabitEthernet 0/49
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/50
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/51
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/52
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/53
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/54
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/55
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/56
description NO-USE
shutdown
!
interface AggregatePort 1
description uT:YDSJYC2-105-A-01_A-02-CSW-H6900-M1_M2-01U37:10.30.0.50.BAG55
switchport mode trunk
switchport trunk allowed vlan only 200-209,300-309,500-3999
spanning-tree bpdufilter enable
vap 1
!
interface AggregatePort 11
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U13.bond1
switchport mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
vap 11
!
interface AggregatePort 12
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U10.bond1
switchport mode trunk
switchport trunk allowed vlan only 301
spanning-tree bpduguard enable
spanning-tree portfast
vap 12
!
interface AggregatePort 16
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U22.bond1
switchport mode trunk
switchport trunk allowed vlan only 302
spanning-tree bpduguard enable
spanning-tree portfast
vap 16
!
interface AggregatePort 17
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U19.bond1
switchport mode trunk
switchport trunk allowed vlan only 302
spanning-tree bpduguard enable
spanning-tree portfast
vap 17
!
interface AggregatePort 18
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U16.bond1
switchport mode trunk
switchport trunk allowed vlan only 302
spanning-tree bpduguard enable
spanning-tree portfast
vap 18
!
interface AggregatePort 33
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U13.bond2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
vap 33
!
interface AggregatePort 34
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-ZXR5300-02U10.bond2
switchport mode trunk
switchport trunk allowed vlan only 300
spanning-tree bpduguard enable
spanning-tree portfast
vap 34
!
interface AggregatePort 38
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U22.bond2
switchport mode trunk
switchport trunk allowed vlan only 200-209,300
spanning-tree bpduguard enable
spanning-tree portfast
vap 38
!
interface AggregatePort 39
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U19.bond2
switchport mode trunk
switchport trunk allowed vlan only 200-209,300
spanning-tree bpduguard enable
spanning-tree portfast
vap 39
!
interface AggregatePort 40
storm-control broadcast level 10
description dT:YDSJYC2-105-A-01-SEV-FHR2220-02U16.bond2
switchport mode trunk
switchport trunk allowed vlan only 200-209,300
spanning-tree bpduguard enable
spanning-tree portfast
vap 40
!
interface AggregatePort 254
no switchport
description For_mad
ip address 1.1.1.2 255.255.255.252
vap error-down except
!
interface AggregatePort 255
description M-lag_peer_link
no mac-address-learning
switchport mode trunk
peer-link
!
interface VLAN 4094
description M-lag_peer_link
ip address 1.1.1.6 255.255.255.252
!
interface Mgmt 0
description uT:Management
vrf forwarding NET-manage
ip address 10.30.0.47 255.255.254.0
!
aggregateport member linktrap
!
ntp server vrf NET-manage 10.30.0.47 source Mgmt 0 prefer
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 prefer
!
vap domain 1
no fast-convergence
recover up-delay 120 none-vap 60
data-sync local 1.1.1.6 peer 1.1.1.5
peer-keepalive local 1.1.1.2 peer 1.1.1.1
dual-active auto recovery
!
ip route vrf NET-manage 0.0.0.0 0.0.0.0 10.30.1.254
!
snmp-server user yundiao SNMPGROUP v3 encrypted auth sha 9672724022F694ADDB696B070FAA908BB3282C4C priv aes128 9672724022F694ADDB696B070FAA908B
snmp-server group SNMPGROUP v3 priv read default access 2000
snmp-server trap-source Mgmt 0
snmp-server system-shutdown
snmp-server host 10.10.0.136 traps version 3 priv yundiao
snmp-server host 10.10.0.137 traps version 3 priv yundiao
snmp-server host 10.10.0.136 vrf NET-manage traps version 2c yundiao
snmp-server host 10.10.0.137 vrf NET-manage traps version 2c yundiao
snmp-server enable traps
no snmp-server enable version v1
snmp-server community 7 123e101c4e04201d616a266a227b624659 ro 2000
!
line console 0
logging synchronous
session-timeout 10
privilege level 15
width 256
line vty 0 9
transport input ssh
access-class 2001 in
logging synchronous
session-timeout 10
privilege level 15
login local
width 254
!
end
YDSJYC2-105-A-02-ASW-RGS6520-M2-01U26#