sys
inter g 0/0/0
ip add 60.6.202.7 24
quit
vlan 10
vlan 20
vlan 30
quit
inter vlan 10
ip add 192.168.1.1 24
inter vlan 20
ip add 192.168.2.1 24
inter vlan 30
ip add 192.168.3.1 24
quit
inter e 0/0/0
port link-type access
port default vlan 30
quit
inter e 0/0/1
port link-type access
port default vlan 30
quit
inter e 0/0/2
port link-type access
port default vlan 30
quit
inter e 0/0/3
port link-type access
port default vlan 30
quit
inter e 0/0/4
port link-type access
port default vlan 30
quit
inter e 0/0/5
port link-type access
port default vlan 30
quit
inter e 0/0/6
port link-type access
port default vlan 30
quit
inter e 0/0/7
port link-type access
port default vlan 20
quit
ip route-static 0.0.0.0 0.0.0.0 60.6.202.1
acl number 2000
rule 5 permit source 192.168.0.0 0.0.255.255
inter g 0/0/0
nat outbound 2000
nat static global current-interface inside 192.168.3.254
quit
dhcp enable
ip pool vlan30
network 192.168.3.0 mask 255.255.255.0
gateway-list 192.168.3.1
dns-list 202.99.160.68 202.99.166.4
excluded-ip-address 192.168.3.2 192.168.3.9
excluded-ip-address 192.168.3.250 192.168.3.254
lease day 90
quit
inter vlan 30
dhcp select global
quit
重新生成RSA密钥对
rsa local-key-pair create
y
1024
#配置VTY上允许SSH协议
user-interface vty 0 4
authentication-mode aaa
protocol inbound ssh
开启SSH服务并创建账号
aaa
local-user admin password cipher [email protected]
local-user admin privilege level 15
local-user admin service-type http
local-user admin service-type ssh
quit
stelnet server enable
开启HTTP服务
http secure-server enable
http server enable