居民小区网络管理手册.docx
居民院小区网络维护手册版本修定:作者时间修改内容1居民院小区网络总体情况介绍31.1小区网络拓扑图（如图1）31.2 小区网络设备使用41.3 小区ip地址使用规划51.4 小区出口路由器和核心交换机配置管理51.4.1 小区核心交换机配置51.4 .1小区出口路由器配置Il1.5 小区internet出口链路管理151.6 小区计费系统管理151.7 小区dns服务器管理151.8 小区常见问题及维护151居民院小区网络总体情况介绍居民院小区网络共有300多个以太网节点，部署在107,108,109,110,111,112,113共7栋居民楼。其中还包括大兰楼的若干用户。现在共有宽带使用用户52个。居民楼之间，居民楼和核心316机房之间均为光缆连接。使用2M网通出口作为小区internet出口。1.1 小区网络拓扑图（如图1）图1172.17.1.253172.17.1.252172.17.1.2541.2 小区网络设备使用设备名称使用地点设备型号备注出口路由器316机房Haha3745内网地址172.17.1.253计费316机房城市热点地址172.17.1.252核心交换机316机房Haha3550172.17.1.254107楼107楼2900管理ip172.17.254.107108楼108楼2950管理ip172.17.254.108109楼A109楼E500管理ip172.17.254.1109楼B109楼E500管理ip172.17.254.109110楼A110楼E500管理ip172.17.254.2110楼B110楼E500管理ip172.17.254.110Ill楼AIll楼E500管理ip172.17.254.3111楼B111楼E500管理ip172.17.254.Ill112楼112楼E500管理ip172.17.254.112113楼113楼E500管理ip172.17.254.1131.3 小区ip地址使用规划小区核心交换机现在配置了3个vlan,使用6个C类地址段。VIan地址段使用备注VlanlI72.17.1.*路由，计费管理地址管理员使用四楼用户也使用这个地址段的地址。VlanlO172.17.254.*管理网段Vlan2172.17.2.*172.17.3.*172.17.4.*172.17.5.*1.4小区出口路由器和核心交换机配置管理1.4.1小区核心交换机配置haha-3550#Shrunhaha-3550#Shrunning-configBuildingconfiguration.Currentconfiguration:5505bytesIversion12.1noservicepadservicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryptionIhostnamehaha_3550Ienablesecret5$1JxGBw2a3pU0vdPSDM04J61Iipsubnet-zeroiproutingclass-mapmatch-allInc-upmatchaccess-group101class-mapmatch-allInc-downmatchaccess-group100IIpolicy-mapInc-upclassInc-uppolice512000512000exceed-actiondroptrustdscppolicy-mapInc-downclassInc-downpolice512000512000exceed-actiondropIIspanning-treeextendsystem-idinterfaceFastEthernetO/1descriptionconnectDrcomnoipaddressipaccess-groupvirousinservice-policyinputInc-downspanning-treeportfastIinterfaceFastEthernetO/2noipaddressspanning-treeportfastIinterfaceFastEthernetO/3noipaddressspanning-treeportfastIinterfaceFastEthernetO/4noipaddressspanning-treeportfastIinterfaceFastEthernetO/5switchportaccessvlan2noipaddressspanning-treeportfastinterfaceFastEthernetO/6switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/7switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/8switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/9descriptionConnectIlOAswitchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetOZlOdescriptionConnect109Aswitchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/11descriptionConnect107switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/12descriptionConnect111switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/13switchportaccessvlan2noipaddressspanning-treeportfastinterfaceFastEthernetO/14switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/15switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/16switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/17switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/18switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/19switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernet020switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/21switchportaccessvlan2noipaddressspanning-treeportfastIinterfaceFastEthernetO/22noipaddressspanning-treeportfastinterfaceFastEthernetO/23descriptionconnect1.1.1.1DNSnoipaddressspanning-treeportfastIinterfaceFastEthernetO/24noipaddressservice-policyinputInc-upspanning-treeportfastIinterfaceGigabitEthernetO/1noipaddressIinterfaceGigabitEthernetO/2noipaddressIinterfaceVlanlipaddress172.17.1.254255.255.255.0ipipIaccess-groupvirousinaccess-groupvirousoutinterfaceVlan2ipaddress172.17.3.254255.255.255.0secondaryipaddress172.17.4.254255.255.255.0secondaryipaddress172.17.5.254255.255.255.0secondaryipaddress172.17.2.254255.255.255.0ipaccess-groupvirousinipaccess-groupvirousoutinterfaceVlan3noipaddressIinterfaceVlan4noipaddressshutdownIinterfaceVlan5ipaddress172.17.15.254255.255.255.0IinterfaceVlan6noipaddressshutdownipclasslessiproute0.0.0.00.0.0.0172.17.1.253iphttpserverIipaccess-listextendedvirouspermittcpanyanyqtelnetdenyudpanyanyq135denyudpanyanyq1434denyudpanyanyqtftpdenytcpanyanyq135denytcpanyanyq1025denytcpanyanyq3127denytcpanyanyq2745denytcpanyanyq6129denytcpanyanyq4444denytcpanyanyq593denytcpanyanyq5554denytcpanyanyq1022denytcpanyanyq1023denytcpanyanyq4
