3560 sh run

Building configuration...

Current configuration : 16334 bytes

!

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname hexin-3560x

扫描二维码关注公众号,回复: 631751 查看本文章

!

boot-start-marker

boot-end-marker

!

enable secret level 14 5 $1$gVG5$VOVN1a/JvY8GPWyZ7VHLs.

enable secret 5 $1$wZck$YBmO1G1QdAIwbOGvLFEGT0

enable password 7 044C1C1141781B42081B4B141D06

!

!

!

no aaa new-model

system mtu routing 1500

authentication mac-move permit

ip subnet-zero

ip routing

!

!

!

!

crypto pki trustpoint TP-self-signed-4054247296

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-4054247296

 revocation-check none

 rsakeypair TP-self-signed-4054247296

!

!

crypto pki certificate chain TP-self-signed-4054247296

 certificate self-signed 01

  30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030 

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 

  69666963 6174652D 34303534 32343732 3936301E 170D3933 30333031 30303031 

  32365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30353432 

  34373239 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 

  8100DD44 04D2C89D A5DB1672 E908A6EB 756B6818 CB91D793 E0846400 17082381 

  B5D1FF66 C073CC74 D40EE848 BBD298F2 BE689263 3D567E60 AFDBBEA5 8C404B2F 

  29FC33FE BE338C08 84DA5812 87FBDC13 08F5BE9C F8DC4BA6 DBDB58B6 D1DB82DC 

  BC5D723E 6D74592E 7D44D76B BE496DDE 09E5F2B0 5BD640B4 462D2443 42D5F2E5 

  EF770203 010001A3 6C306A30 0F060355 1D130101 FF040530 030101FF 30170603 

  551D1104 10300E82 0C686578 696E2D33 35363078 2E301F06 03551D23 04183016 

  80149E6B 5E464BA4 CE05FD96 5337F5D2 6EDDA2A3 63BF301D 0603551D 0E041604 

  149E6B5E 464BA4CE 05FD9653 37F5D26E DDA2A363 BF300D06 092A8648 86F70D01 

  01040500 03818100 17845CD5 0C0A9F58 90D066A7 A4F2D6B5 A222069D 9168ABCA 

  DFFBF7E9 6720B0E5 2D6B7882 810C543E E22AD958 74745750 873DDA29 DA15CBF1 

  396DAE61 027556CA 7AC2876D 1120D364 D5E8EAEE 3E7D592D D07B28A3 AB049187 

  1EF993D2 C0042173 A7CDF9E9 53793330 B1D6C1C4 1D8C9373 31E05BC8 5D07E37E 

  1EDA533B C031DF7C

  quit

spanning-tree mode pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

!

!

!

!

vlan internal allocation policy ascending

!

!

class-map match-all zys

!

!

!

interface FastEthernet0

 no ip address

 no ip route-cache cef

 no ip route-cache

 no ip mroute-cache

 shutdown

!

interface GigabitEthernet0/1

 no switchport

 ip address 172.16.100.1 255.255.255.0

 ip access-group zys out

!

interface GigabitEthernet0/2

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/3

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/4

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/5

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/6

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/7

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/8

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/9

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/10

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/11

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/12

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/13

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/14

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/15

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/16

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/17

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/18

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/19

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/20

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/21

 switchport trunk encapsulation dot1q

 switchport mode trunk

!

interface GigabitEthernet0/22

 switchport access vlan 60

 switchport trunk encapsulation dot1q

 switchport mode access

!

interface GigabitEthernet0/23

 switchport access vlan 50

 switchport trunk encapsulation dot1q

 switchport mode access

!

interface GigabitEthernet0/24

 description link to DHCP-SERVER

 switchport access vlan 50

!

interface GigabitEthernet1/1

!

interface GigabitEthernet1/2

!

interface GigabitEthernet1/3

!

interface GigabitEthernet1/4

!

interface TenGigabitEthernet1/1

!

interface TenGigabitEthernet1/2

!

interface Vlan1

 no ip address

 shutdown

!

interface Vlan10

 ip address 172.16.5.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan20

 ip address 172.16.2.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan30

 ip address 172.16.3.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan40

 ip address 172.16.4.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan50

 ip address 172.16.1.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan60

 ip address 172.16.6.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan70

 ip address 172.16.7.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan80

 ip address 172.16.8.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan90

 ip address 172.16.9.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan100

 ip address 172.16.10.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan110

 ip address 172.16.11.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan120

 ip address 172.16.12.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan130

 ip address 172.16.13.1 255.255.255.0

 ip helper-address 172.16.1.8

!

interface Vlan200

 ip address 172.16.20.1 255.255.255.0

!

ip classless

ip route 0.0.0.0 0.0.0.0 172.16.100.2

ip route 192.168.0.0 255.255.248.0 172.16.6.2

ip http server

ip http secure-server

!

ip access-list extended zys

 deny   icmp any host 58.255.253.179

 deny   icmp any host 203.166.160.139

 deny   icmp any host 203.166.160.140

 deny   icmp any host 121.9.210.218

 deny   icmp any 211.152.35.0 0.0.0.255

 deny   icmp any host 121.9.210.207

 deny   icmp any host 211.100.99.36

 deny   icmp any host 211.100.99.35

 permit icmp any any

 permit tcp any any eq domain

 permit udp any any eq domain

 permit tcp host 123.124.198.111 any

 permit ip host 123.124.198.111 any

 permit tcp host 123.124.198.112 any

 permit ip host 123.124.198.112 any

 permit tcp any host 59.151.52.23 eq www

 permit ip any host 59.151.52.23

 permit tcp any host 219.232.254.121 eq www

 permit tcp any host 220.181.86.133 eq 7745

 permit tcp any host 220.181.86.133 eq 7746

 permit tcp any host 203.81.21.15 eq www

 permit tcp any host 203.81.21.34 eq www

 permit tcp any host 59.151.43.24 eq www

 permit tcp any host 121.198.77.100 eq www

 permit tcp any 211.157.29.0 0.0.0.255 eq www

 permit tcp any host 221.238.196.87 eq 1755

 permit tcp any 211.157.28.0 0.0.0.255 eq www

 permit tcp any 211.157.7.0 0.0.0.63 eq www

 permit ip any host 219.232.255.19

 permit tcp any 211.157.52.0 0.0.0.63 eq www

 permit tcp any 211.157.53.0 0.0.0.255 eq www

 permit tcp any 61.135.155.128 0.0.0.31 eq www

 permit tcp any 121.15.210.96 0.0.0.31 eq www

 permit tcp any 210.73.192.0 0.0.0.127 eq www

 permit tcp any 222.73.58.0 0.0.0.255 eq www

 permit tcp any 61.152.199.0 0.0.0.255 eq www

 permit tcp any 61.152.189.0 0.0.0.255 eq www

 permit tcp any 202.109.106.0 0.0.0.127 eq www

 permit tcp any 202.109.107.0 0.0.0.255 eq www

 permit tcp any 222.66.168.0 0.0.0.255 eq www

 permit tcp any 202.105.115.0 0.0.0.255 eq www

 permit tcp any 121.35.254.0 0.0.0.255 eq www

 permit tcp any 60.28.160.0 0.0.0.255 eq www

 permit tcp any 211.144.192.0 0.0.0.255 eq www

 permit tcp any 121.9.220.64 0.0.0.63 eq www

 permit tcp any host 210.51.2.112 eq www

 permit tcp any host 123.183.210.183 eq www

 permit tcp any host 210.73.192.79 eq www

 permit tcp any host 218.30.64.24 eq www

 permit tcp any host 207.46.48.140 eq www

 permit tcp any host 207.46.107.69 eq www

 permit tcp any host 121.0.19.134 eq www

 permit tcp any host 211.157.29.50 eq www

 permit tcp any 211.157.28.192 0.0.0.31 eq www

 permit ip any host 121.198.77.100

 permit ip any 211.157.29.0 0.0.0.255

 permit ip any 211.157.28.0 0.0.0.255

 permit ip any 211.157.7.0 0.0.0.63

 permit ip any 211.157.52.0 0.0.0.63

 permit ip any 211.157.53.0 0.0.0.255

 permit ip any 61.135.155.128 0.0.0.31

 permit ip any 121.15.210.96 0.0.0.31

 permit ip any 210.73.192.0 0.0.0.127

 permit ip any 222.73.58.0 0.0.0.255

 permit ip any 61.152.199.0 0.0.0.255

 permit ip any 61.152.189.0 0.0.0.255

 permit ip any 202.109.106.0 0.0.0.127

 permit ip any 202.109.107.0 0.0.0.255

 permit ip any 222.66.168.0 0.0.0.255

 permit ip any 202.105.115.0 0.0.0.255

 permit ip any 121.35.254.0 0.0.0.255

 permit ip any 60.28.160.0 0.0.0.255

 permit ip any 211.144.192.0 0.0.0.255

 permit ip any 121.9.220.64 0.0.0.63

 permit ip any host 210.73.192.79

 permit ip any host 218.30.64.24

 permit ip any host 207.46.48.140

 permit ip any host 207.46.107.69

 permit ip any host 121.0.19.134

 permit ip any host 211.157.29.50

 permit ip any 211.157.28.192 0.0.0.31

 permit ip any host 221.238.196.87

 permit ip any 59.151.52.0 0.0.0.63

 permit ip any 59.151.53.0 0.0.0.255

 permit tcp any 59.151.52.0 0.0.0.63 eq www

 permit tcp any 59.151.53.0 0.0.0.255 eq www

 permit tcp any host 59.151.7.59

 permit tcp any host 119.167.247.125 eq www

 permit tcp any host 219.232.255.3 eq www

 permit tcp any host 219.232.255.5 eq www

 permit tcp any host 219.232.255.6 eq www

 permit tcp any host 219.232.255.13 eq www

 permit tcp any host 219.232.255.35 eq www

 permit tcp any host 219.232.255.36 eq www

 permit tcp any 59.151.114.0 0.0.0.255 eq www

 permit tcp any 125.39.96.32 0.0.0.31 eq www

 permit tcp any 25.76.233.0 0.0.0.255 eq www

 permit tcp any host 119.167.247.126 eq www

 permit tcp any host 119.167.247.124 eq www

 permit tcp any host 219.232.255.10 eq www

 permit tcp any host 219.232.255.12 eq www

 permit tcp any host 219.237.16.47 eq www

 permit tcp any host 59.175.238.39 eq www

 permit tcp any host 59.151.7.18 eq www

 permit tcp any host 219.232.255.43 eq www

 permit tcp any host 219.232.255.22 eq www

 permit tcp any host 219.232.255.30 eq www

 permit tcp any host 219.232.255.31 eq www

 permit tcp any host 219.232.255.32 eq www

 permit tcp any host 219.232.255.44 eq www

 permit tcp any host 202.99.30.209 eq www

 permit tcp any host 209.99.10.132 eq www

 permit tcp any host 210.73.90.9 eq www

 permit tcp any host 202.108.88.50 eq www

 permit tcp any host 202.108.88.8 eq 443

 permit tcp any host 114.255.11.194 eq 443

 permit tcp any host 219.142.79.192 eq 443

 permit tcp any host 210.83.224.215 eq 443

 permit tcp any host 202.99.10.132 eq 443

 permit tcp any host 220.248.79.41 eq 443

 permit tcp any 219.232.255.0 0.0.0.255 eq www

 permit tcp any host 123.125.163.54 eq www

 permit tcp any host 123.125.163.53 eq www

 permit tcp any host 60.28.183.201 eq www

 permit tcp any host 60.28.183.202 eq www

 permit tcp any host 211.157.29.120 eq www

 permit tcp any host 202.106.199.37 eq www

 permit tcp any host 202.106.199.39 eq www

 permit tcp any host 202.106.199.36 eq www

 permit tcp any host 60.210.16.40 eq www

 permit tcp any host 60.210.16.46 eq www

 permit tcp any host 61.158.128.169 eq www

 permit tcp any host 123.125.163.39 eq www

 permit tcp any host 125.39.42.46 eq www

 permit tcp any host 125.39.42.47 eq www

 permit tcp any host 125.39.42.114 eq www

 permit tcp any host 125.39.42.115 eq www

 permit tcp any host 59.151.52.20 eq www

 permit tcp any host 59.151.52.20 eq 1433

 permit tcp any host 59.151.53.130 eq www

 permit tcp any host 61.152.199.29 eq www

 permit tcp any host 59.151.114.210 eq 443

 permit tcp any host 59.151.114.211 eq 443

 permit tcp any host 59.151.114.211 eq www

 permit tcp any host 59.151.114.210 eq www

 permit tcp any host 59.151.114.63 eq 443

 permit tcp any host 59.151.7.20 eq www

 permit tcp any host 123.125.163.59 eq www

 permit tcp any host 59.151.114.49 eq 443

 permit tcp any host 123.125.163.22 eq www

 permit tcp any host 123.125.163.23 eq www

 permit tcp any host 123.125.163.45 eq www

 permit tcp any 123.125.163.0 0.0.0.255 eq www

 permit tcp any host 202.106.199.36 eq 443

 permit tcp any host 202.106.199.37 eq 443

 permit tcp any host 202.106.199.39 eq 443

 permit tcp any host 123.103.97.207 eq www

 permit tcp any host 211.144.223.207 eq www

 permit tcp any host 211.144.223.207 eq 443

 permit tcp any host 123.103.97.197 eq www

 permit tcp any host 123.103.97.197 eq 443

 permit tcp any host 123.103.97.207 eq 443

 permit tcp any host 222.73.58.34 eq www

 permit tcp any host 222.77.181.151 eq www

 permit tcp any host 1.202.235.250 eq smtp

 permit tcp any host 1.202.235.250 eq pop3

 permit tcp any host 1.202.235.250 eq www

 permit tcp any host 221.204.223.24 eq www

 permit tcp any host 221.204.223.29 eq www

 permit tcp any host 203.171.227.208 eq www

 permit tcp any host 122.70.185.188 eq www

 permit tcp any host 201.106.199.34 eq www

 permit tcp any host 123.132.254.15 eq www

 permit tcp any host 124.131.239.55 eq www

 permit tcp any host 222.80.93.137 eq www

 permit tcp any host 222.80.93.169 eq www

 permit tcp any host 210.192.120.228 eq www

 permit tcp any host 222.88.93.137 eq www

 permit tcp any host 222.88.93.169 eq www

 permit tcp any host 203.171.235.84 eq www

 permit tcp any host 59.173.14.40 eq www

 permit tcp any host 59.173.14.41 eq www

 permit tcp any host 124.248.39.229 eq www

 permit ip any host 10.20.91.241

 permit ip any host 10.20.80.36

 permit ip any host 10.20.90.240

 permit tcp any host 124.248.39.226

 permit tcp any host 10.20.80.36

 permit tcp any host 10.20.90.240

 permit tcp any host 10.20.91.241

 permit tcp any host 10.20.90.254

 permit ip any host 59.151.114.128

 permit ip any host 115.238.239.33

 permit ip any host 115.238.230.162

 permit ip any host 210.14.70.236

 permit ip any host 210.14.71.124

 permit tcp any host 124.248.39.228

 permit ip any host 115.238.239.22

 permit ip any host 115.238.230.154

 permit ip any host 115.238.230.158

 permit ip any host 220.181.112.34

 permit ip any host 59.151.114.57

 permit ip any host 59.151.114.212

 permit ip any host 59.151.114.63

 permit ip any host 213.248.117.56

 permit tcp any host 124.248.39.229

 permit ip any host 157.56.51.122

 permit ip any host 211.157.29.148

 permit ip any host 202.109.107.73

 permit tcp any host 121.9.210.212 eq www

 permit tcp any host 121.9.210.215 eq www

 permit tcp any host 123.183.210.171 eq www

 permit tcp any host 123.183.210.174 eq www

 permit ip any host 117.27.137.17

 permit ip any host 222.76.126.50

 permit tcp any host 123.183.210.178 eq www

 permit tcp any host 123.183.210.179 eq www

 permit tcp any host 123.183.210.188 eq www

 permit tcp any host 123.183.210.189 eq www

 permit tcp any host 121.9.210.220 eq www

 permit tcp any host 220.181.86.132 eq 7712

 permit tcp any host 220.181.86.132 eq 7715

 permit tcp any 125.39.0.0 0.0.255.255 eq www

 permit tcp any host 202.108.251.68 eq www

 permit tcp any host 205.204.70.252 eq www

 permit tcp any 210.14.141.0 0.0.0.255 eq www

 permit tcp any 211.152.35.0 0.0.0.255 eq 7715

 permit tcp any host 211.154.163.33 eq www

 permit tcp any host 123.150.197.201 eq www

 permit tcp any host 123.150.202.167 eq www

 permit tcp any host 123.150.197.159 eq www

 permit tcp any 220.181.0.0 0.0.255.255 eq www

 permit tcp any 110.75.187.0 0.0.0.255 eq www

 permit tcp any 60.28.0.0 0.0.255.255 eq www

 permit tcp any host 119.42.227.250 eq www

 permit tcp any host 59.151.6.132 eq www

 deny   ip 172.16.8.0 0.0.0.255 any

 deny   ip 172.16.10.0 0.0.0.255 any

 deny   ip 172.16.9.0 0.0.0.255 any

 permit ip any any

!

ip sla enable reaction-alerts

access-list 10 permit 172.16.4.44

access-list 10 permit 172.16.4.23

arp 172.16.4.54 1234.5678.7890 ARPA

snmp-server community !@QWASZX RO

!

!

line con 0

line vty 0 4

 access-class 10 in

 password 7 015226356C2A3535191F1A0C0B0111111D

 login

line vty 5 15

 login

!

end

猜你喜欢

转载自leovlys.iteye.com/blog/1826327
.sh
SH
今日推荐