大家好，为了这篇博客，我已经编辑四次了，这是第四次。每次快要到完稿时，浏览器卡死，导致我心灰意冷，但为了将这篇博文发出去，给大家以实际配置为例讲一讲，我觉得还是很有必要的，还是耐着性子百战不怠了！0：
.
大家好，为了这篇博客，我已经编辑四次了，这是第四次。每次快要到完稿时，浏览器卡死，导致我心灰意冷，但为了将这篇博文发出去，给大家以实际配置为例讲一讲，我觉得还是很有必要的，还是耐着性子百战不怠了！
0：! Last configuration change at 22:42:50 GMT Sat Mar 28 2015
! NVRAM config last updated at 22:42:51 GMT Sat Mar 28 2015
!
//这两句话的意思是配置最后更改具体日期时间及NVRAM中配置更新具体日期时间，我们可以清楚地看到最后一次修改或操作配置是在什么时候//
version 12.4
1：service timestamps debug datetime msec
service timestamps log datetime localtime
service password-encryption
!
//这三句话的意思是为debug和log设置时间戳，这样有利于我们在排查故障时根据日志记录时间方便找到原因，其中debug 时间戳精确到了毫秒级别，log时间戳采用了和本地一致，从后面我们知道本地与时间NTP服务器作了同步。
hostname SIG-L-SH-RT-C-2811-1
!
2：boot-start-marker
boot-end-marker
!
//这两句话其实没什么意思，举一个例子，就像大家输入cmd时，前文会有一些提示一样，对你没有任何帮助，它是IOS在后期版本中加上去的，
card type e1 0 0
card type e1 0 2
logging buffered 65536
enable secret 5 $1$lHoN$VecPvwjHM9edYj1Br4T1W/
!
no aaa new-model
clock timezone GMT 8
no network-clock-participate wic 0
no network-clock-participate wic 2
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.88.6.1 10.88.6.30
ip dhcp excluded-address 10.88.5.1 10.88.5.30
ip dhcp excluded-address 10.88.5.240 10.88.5.254
ip dhcp excluded-address 10.88.6.240 10.88.6.254
!
ip dhcp pool 10.88.5.0/24-vlan5
network 10.88.5.0 255.255.255.0
default-router 10.88.5.254
dns-server 10.10.2.2 10.10.2.4 219.141.136.10
!
ip dhcp pool 10.88.6.0/24-vlan6
network 10.88.6.0 255.255.255.0
default-router 10.88.6.254
dns-server 10.10.2.2 10.10.2.4 219.141.136.10
!
!
no ip domain lookup
multilink bundle-name authenticated
!
!
!
archive
log config
hidekeys
!
!
controller E1 0/0/0
channel-group 0 unframed
description To-P-Shanghai
!
controller E1 0/0/1
channel-group 0 unframed
!
controller E1 0/2/0
channel-group 0 unframed
description To-ZGS-Video
!
controller E1 0/2/1
channel-group 0 unframed
!
!
!
!
interface Loopback0
ip address 10.88.255.1 255.255.255.255
!
interface FastEthernet0/0
description To-Lan
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
description To-MGT-Vlan1
encapsulation dot1Q 1 native
ip address 10.88.252.254 255.255.255.0
!
interface FastEthernet0/0.5
description To-Neiqin-Special-Vlan5
encapsulation dot1Q 5
ip address 10.88.5.254 255.255.255.0
ip nat inside
no ip virtual-reassembly
!
interface FastEthernet0/0.6
description To-NeiQin-Vlan6
encapsulation dot1Q 6
ip address 10.88.6.254 255.255.255.0
ip nat inside
no ip virtual-reassembly
!
interface FastEthernet0/1
description To-Firewall
ip address 10.65.253.94 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/1/0
description To-TongYeXieHui-Telecom
switchport mode trunk
!
interface FastEthernet0/1/1
!
interface FastEthernet0/1/2
!
interface FastEthernet0/1/3
!
interface Serial0/0/0:0
description To-ZGS-Video-Mobile
ip address 10.254.26.210 255.255.255.252
!
interface Serial0/0/1:0
no ip address
!
interface Serial0/2/0:0
description To-P-Shanghai
ip address 10.65.254.94 255.255.255.252
ip access-group forbid out
ip nat inside
no ip virtual-reassembly
!
interface Serial0/2/1:0
no ip address
!
interface Vlan1
no ip address
!
interface Vlan907
description To-TongYeXieHui
ip address 10.10.120.10 255.255.255.248
ip nat outside
no ip virtual-reassembly
!
router ospf 100
router-id 10.88.255.1
log-adjacency-changes
redistribute static subnets tag 26 route-map StaticRoute
network 10.65.253.92 0.0.0.3 area 26
network 10.65.254.92 0.0.0.3 area 26
network 10.88.0.0 0.0.7.255 area 26
network 10.88.252.0 0.0.0.255 area 26
network 10.88.255.1 0.0.0.0 area 26
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.65.253.93
ip route 10.10.50.0 255.255.255.0 10.254.26.209 name video-mobile
ip route 10.10.208.19 255.255.255.255 10.10.120.9 name TongYeXieHui-renshenxian
ip route 10.10.208.35 255.255.255.255 10.10.120.9 name TongYeXieHui-geyixian
ip route 10.88.13.1 255.255.255.255 10.10.120.9 name TongYeXieHui
ip route 10.88.13.2 255.255.255.255 10.10.120.9 name TongYeXieHui
!
!
no ip http server
ip nat pool tongye 192.168.120.22 192.168.120.22 netmask 255.255.255.252
ip nat inside source list tongye pool tongye overload
ip nat outside source static 10.192.0.39 10.10.208.35
ip nat outside source static 10.192.0.40 10.10.208.19
ip nat outside source static 10.192.32.128 10.88.13.1
ip nat outside source static 192.168.164.240 10.88.13.2
!
ip access-list standard StaticRoute
permit 10.88.13.2
permit 10.88.13.1
permit 10.10.208.19
permit 10.10.208.35
!
ip access-list extended forbid
permit ip 10.88.0.0 0.0.255.255 10.0.0.0 0.255.255.255
permit ip 10.88.0.0 0.0.255.255 172.16.0.0 0.15.255.255
permit ip host 10.10.208.19 10.0.0.0 0.255.255.255
permit ip 10.88.252.0 0.0.0.255 any
permit ip 10.65.253.92 0.0.0.3 any
permit ip 10.65.254.92 0.0.0.3 any
permit ip host 10.88.255.1 any
permit ip host 10.10.208.35 10.0.0.0 0.255.255.255
ip access-list extended tongye
permit ip any host 10.10.208.19
permit ip any host 10.10.208.35
permit ip any host 10.88.13.1
permit ip any host 10.88.13.2
!
logging trap critical
logging source-interface Serial0/0/0:0
logging 10.10.174.250
snmp-server community ygbx RO
snmp-server location L-ShangHai
route-map StaticRoute permit 10
match ip address StaticRoute
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password 7 030848035457701D
login
transport input telnet
!
scheduler allocate 20000 1000
ntp clock-period 17180178
ntp update-calendar
ntp server 10.10.163.63
!
end
.
