中兴路由器T1200配置

sho run
Building configuration...
!
!
ip vrf vpn
description shengbeibaosong
rd 100:1
route-target import 100:1
route-target export 100:1
!
!
urpf log off
!
eoam disable
no eoam authentication-key
!
!
protect
protect cpu-protect config disable
protect slot 1 token 200
protect slot 2 token 200
protect slot 3 token 200
protect slot 4 token 200
protect slot 5 token 200
--More--         protect slot 6 token 200
protect slot 7 token 200
protect slot 8 token 200
protect slot 9 token 200
protect slot 10 token 200
protect slot 11 token 200
protect slot 12 token 200
protect slot 13 token 200
protect slot 14 token 200
protect slot 15 token 200
protect slot 16 token 200
!
!
interface loopback1
ip address 223.72.44.2 255.255.255.255
out_index 26
!
interface null1
out_index 1
!
interface smartgroup1
ip address 223.72.16.10 255.255.255.252
description TO-HL-CN-RET-001
--More--          out_index 25
smartgroup mode 802.3ad
mpls ip
!
interface gei_1/1
physical-layer mode npch
out_index 3
negotiation auto
protect interface token 50
!
interface gei_1/1.1
encapsulation dot1Q 10
ip address 223.72.16.5 255.255.255.252
description TO-HL-CN-SWH-002
out_index 23
!
interface gei_1/1.2
encapsulation dot1Q 1000
ip vrf forwarding vpn
ip address 222.72.16.1 255.255.255.240
description TO-HL-SWH-002-VPN
out_index 27
!
--More--         interface gei_1/2
physical-layer mode npch
out_index 4
negotiation auto
protect interface token 50
!
interface gei_1/2.1
encapsulation dot1Q 20
ip address 223.72.16.69 255.255.255.252
description TO-HL-CN-SWH-001
out_index 24
!
interface gei_1/3
physical-layer mode npch
out_index 5
negotiation auto
smartgroup 1 mode active
protect interface token 50
!
interface gei_1/4
physical-layer mode npch
out_index 6
negotiation auto
--More--          smartgroup 1 mode active
protect interface token 50
!
interface fei_2/1
physical-layer mode npch
out_index 7
negotiation auto
protect interface token 12
!
interface fei_2/2
physical-layer mode npch
out_index 8
negotiation auto
protect interface token 12
!
interface fei_2/3
physical-layer mode npch
out_index 9
negotiation auto
protect interface token 12
!
interface fei_2/4
physical-layer mode npch
--More--          out_index 10
negotiation auto
protect interface token 12
!
interface fei_2/5
physical-layer mode npch
out_index 11
negotiation auto
protect interface token 12
!
interface fei_2/6
physical-layer mode npch
out_index 12
negotiation auto
protect interface token 12
!
interface fei_2/7
physical-layer mode npch
out_index 13
negotiation auto
protect interface token 12
!
interface fei_2/8
--More--          physical-layer

mode npch
out_index 14
negotiation auto
protect interface token 12
!
interface fei_2/9
physical-layer mode npch
out_index 15
negotiation auto
protect interface token 12
!
interface fei_2/10
physical-layer mode npch
out_index 16
negotiation auto
protect interface token 12
!
interface fei_2/11
physical-layer mode npch
out_index 17
negotiation auto
protect interface token 12
!
--More--         interface fei_2/12
physical-layer mode npch
out_index 18
negotiation auto
protect interface token 12
!
interface fei_2/13
physical-layer mode npch
out_index 19
negotiation auto
protect interface token 12
!
interface fei_2/14
physical-layer mode npch
out_index 20
negotiation auto
protect interface token 12
!
interface fei_2/15
physical-layer mode npch
out_index 21
negotiation auto
protect interface token 12
--More--         !
interface fei_2/16
physical-layer mode npch
out_index 22
negotiation auto
protect interface token 12
!
!
ip nat stop
ip nat translation timeout class a 20
ip nat translation timeout class b 60
ip nat translation timeout class c 150
ip nat translation timeout class d 300
ip nat translation timeout class e 1200
ip nat translation timeout protocol icmp a
ip nat translation timeout protocol ip d
ip nat translation timeout protocol tcp d
ip nat translation timeout protocol tcp port 80 a
ip nat translation timeout protocol udp c
ip nat translation timeout protocol udp port 4000 d
ip nat translation timeout protocol udp port 4001 d
ip nat translation timeout protocol udp port 4002 d
ip nat translation timeout protocol udp port 4003 d
--More--         ip nat translation timeout protocol udp port 8000 d
ip nat translation timeout protocol udp port 8001 d
ip nat translation maximal default 65535
!
router bgp 65335
no bgp default route-target filter
no synchronization
neighbor 223.72.44.1 remote-as 65335
neighbor 223.72.44.1 activate
neighbor 223.72.44.1 update-source loopback1
neighbor 223.72.44.3 remote-as 65335
neighbor 223.72.44.3 activate
neighbor 223.72.44.3 update-source loopback1
neighbor 223.72.44.4 remote-as 65335
neighbor 223.72.44.4 activate
neighbor 223.72.44.4 update-source loopback1
neighbor 223.72.44.19 remote-as 65335
neighbor 223.72.44.19 activate
neighbor 223.72.44.19 update-source loopback1
neighbor 223.72.44.7 remote-as 65335
neighbor 223.72.44.7 activate
neighbor 223.72.44.7 update-source loopback1
neighbor 223.72.44.9 remote-as 65335
--More--          neighbor 223.72.44.9 activate
neighbor 223.72.44.9 update-source loopback1
neighbor 223.72.44.11 remote-as 65335
neighbor 223.72.44.11 activate
neighbor 223.72.44.11 update-source loopback1
neighbor 223.72.44.13 remote-as 65335
neighbor 223.72.44.13 activate
neighbor 223.72.44.13 update-so

urce loopback1
neighbor 223.72.44.15 remote-as 65335
neighbor 223.72.44.15 activate
neighbor 223.72.44.15 update-source loopback1
neighbor 223.72.44.17 remote-as 65335
neighbor 223.72.44.17 activate
neighbor 223.72.44.17 update-source loopback1
neighbor 223.72.44.21 remote-as 65335
neighbor 223.72.44.21 activate
neighbor 223.72.44.21 update-source loopback1
neighbor 223.72.44.23 remote-as 65335
neighbor 223.72.44.23 activate
neighbor 223.72.44.23 update-source loopback1
neighbor 223.72.44.25 remote-as 65335
neighbor 223.72.44.25 activate
neighbor 223.72.44.25 update-source loopback1
--More--          neighbor 223.72.44.27 remote-as 65335
neighbor 223.72.44.27 activate
neighbor 223.72.44.27 update-source loopback1
neighbor 223.72.44.29 remote-as 65335
neighbor 223.72.44.29 activate
neighbor 223.72.44.29 update-source loopback1

address-family ipv4 vrf vpn
redistribute connected
$

address-family vpnv4
neighbor 223.72.44.1 activate
neighbor 223.72.44.19 activate
neighbor 223.72.44.7 activate
neighbor 223.72.44.9 activate
neighbor 223.72.44.11 activate
neighbor 223.72.44.13 activate
neighbor 223.72.44.15 activate
neighbor 223.72.44.17 activate
neighbor 223.72.44.21 activate
neighbor 223.72.44.23 activate
neighbor 223.72.44.25 activate
--More--          neighbor 223.72.44.27 activate
neighbor 223.72.44.29 activate
$
!
mpls ip
!
!
router ospf 1
router-id 223.72.44.2
network 223.72.16.4 0.0.0.3 area 0.0.0.0
network 223.72.16.8 0.0.0.3 area 0.0.0.0
network 223.72.16.68 0.0.0.3 area 0.0.0.0
network 223.72.44.2 0.0.0.0 area 0.0.0.0
redistribute connected
!
no ipv6 nat enable
!
!
time-range disable
!

!
!
--More--         bfd-version 1
!
version V4.08.21
!
nvram mng-ip-address 10.40.88.173 255.255.0.0
!
nvram boot-username target
!
nvram boot-password target
!
nvram boot-server 10.40.88.199
!
nvram imgfile-location local
!
hostname HL-CN-RTE-002
!
enable secret level 15 5 RcMLuUKvnFZX9kNAV6A/UA==
!
username zxr10 password zxr10
!
user-authentication-type local
user-authorization-type local
!
--More--         line console 0
no login authentication
!
banner incoming @
*****************************************************************
Welcome to ZXR10 Carrier-Class High-end Router of ZTE Corporation
*****************************************************************
@
!
!
!
!
snmp-server location No.68 Zijinghua Rd. Yuhuatai District, Nanjing, China
snmp-server contact +86-25-52870000
snmp-server packetsize 1400
snmp-server engine-id 830900020300010289d64401
snmp-server view AllView internet included
snmp-server view DefaultView system included
!
!
!
protect
tcp synflood-protect disable
--More--         tcp synflood-protect defence 0 waittime 30 nu

m 1
tcp synflood-protect max-connect high 90 low 60
tcp synflood-protect one-minute high 80 low 50
!
no ftp-server enable listen 21
ftp-server top-directory /flash/
!
ntp poll-interval 6
!
logging on
logging buffer 200
logging mode fullcycle
logging console notifications
logging level notifications
logging timestamps datetime localtime
syslog-server facility local0
!
environ
alarm cpuload on
alarm temper on
alarm fan on
alarm power on
alarm memory on
--More--          check cpuload interval 3
check temper interval 3
check fan interval 3
check power interval 3
check memory interval 3
cpuload-threshold high-grade 95 middle-grade 85 low-grade 75
memory-threshold 60
!
line console idle-timeout 120
line console absolute-timeout 1440
line telnet idle-timeout 120
line telnet absolute-timeout 1440
!
ssh server authentication ispgroup 1
ssh server authentication mode local
ssh server authentication type chap
no ssh server only
ssh server version 2
!
!
radius auto-change off
!
!
--More--         tacacs disable
tacacs-server timeout 5
tacacs-server packet 1024
!
!
!
end
HL-CN-RTE-002#