Brocade ip   配置             与CISCO 比较

Foundry Cisco


common commands that are different between vendors:


**access configuration**

Access-list 10 permit 172.16.0.0 0.0.0.255 Access-list 10 permit 172.16.0.0 0.0.0.255
telnet access-group 10 line vty 0 4
ip access-class 10 in

ip ssh-client 192.168.1.1

snmp-client 192.168.1.1

web-client 192.168.1.1

all-client 192.168.1.1

enable telnet password letmein line vty 0 4
password letmein

enable super-user-password enable enable password enable
enable secret enable

**************** dns ****************

Ip dns domain-name foundry.net ip domain-name foundry.net
Ip dns name-server 4.2.2.2 ip name-server 4.2.2.2


****************interface naming****************

Interface ether 1 interface e 1
Port-name test description test

****************speed-duplex****************

Interface ether 1 interface ether 1
Speed-duplex 100 full speed 100
Duplex full

**************** disabling a port ****************

Int e 1 int e 1
Disable shutdown

**************** range of interfaces ****************

Int Ethernet 1/1 to 1/24 interface range Ethernet 1/1 -24

**************** POE ****************

Int Ethernet 1/1 interface Ethernet 1/1
Inline power power inline

**************** ntp server ****************

Sntp server 3.3.3.3 ntp-server x.x.x.x

****************adding layer-3 interface****************

Interface ve 1 Interface vlan
Ip address x.x.x.x x.x.x.x Ip address x.x.x.x x.x.x.x

vlan 200 name test
tagged ethe 3/22
router-interface ve 1

**Protocol based VLAN**

Ip-subnet 3.3.3.3 255.255.255.0 name subnet-a
No dynamic
Static Ethernet 1 to 9 ethernet 20

****************port based vlans****************

vlan 222 name Test
Vlan 222 name Test

****************adding port to vlan****************

Vlan 222 interface e 1/1
untagged ether 1/1 switchport access vlan 222
Untagged ether 1/1

vlan 222 interface e1/24
taggedd e 1/24 switch mode trunk
****************stp root****************

Spanning-tree priority 0 spanning-tree vlan 100 root primary/secondary

**************** portfast-fastport ****************

Int e 1/3 int e 1/3
Fast port-span spanning-tree portfast
Stp-protect spanning-tree portfast bpduguard

****************802.1q trunk****************

int e 2/2
switchport encapsulation dot1q
Switchport mode trunk
Vlan 222
Tagged ether 2/2
Tagged ether 2/2

****************802.3ad link aggregation****************

inte e1 to e2

link-aggregate

Trunk Ethernet 1 to 4 interface range gigabitethernet2/0/1 -2
channel-group 2 mode active

(trunk specific parameters need to be done from master port, first port)

****************Port Mirroring****************

Mirror-port ether 1 (sniffer port) monitor session 1 source int fast 2
Int ether 2 monitor session 1 destination int fast 1
Monitor port ether 1

**************** Routing protocols *****************

Router rip router rip
Ethernet 1/1 network 172.16.0.0
Ip rip v1-only

Router rip
Permit redistribute 1 static address 172.16.0.0 255.255.255.0 router rip
Redistribution redistribute static

Router ospf router ospf 1
Area 0.0.0.0 network 10.0.0.0 0.0.0.255 area 0.0.0.0
Interface e 1/1
Ip ospf area 0.0.0.0

Router ospf router ospf 1
Redistribution rip redistribute static
Redistribution static redistribute rip

Router bgp router bgp 40
Local-as 40
(neighbor commands identical)

**************** VRRP-HSRP config *****************

VRRP HSRP

Router 1 Router 1

Router vrrp interface e 1/6
Inter e 1/6 ip address 192.168.5.2
Ip address 192.168.5.1 255.255.255.0 standby 1 ip 192.168.5.1
Ip vrrp vrid 1 standby 1 priority 110
Owner standby 1 preempt
Ip address 192.168.53.1
Activate

Router 2 Router 2

Router vrrp interface e 1/5
Inter e 1/5 ip address 192.168.5.3 255.255.255.0
Ip address 192.168.5.3 standy 1 ip 192.168.5.1
Ip vrrp vrid 1
backup
Ip address 192.168.53.1
Activate

**VRRPE**
(highest priority is the master)

Router vrrp-extended
Inter e 1/5
Ip address 192.168.5.2
Ip vrrp-extended vrid 1
Backup
Ip address 192.168.5.1
activate

Router vrrp-extended
Inter e 1/3
Ip address 192.168.5.3
Ip vrrp-extended vrid 1
Backup
Backup priority 50 track-priority 10 (track priority decrements priority upon failure of interface being tracked)
Ip address 192.168.5.1
activate

**********************Other commands*************************

**sflow**

-Sflow
Sflow destination x.x.x.x
Sflow enable
Int e 1/1
Sflow forwarding

**dot1x**

Aaa authentication dot1x default radius
radius-server host 10.10.10.10 auth-port 1812 acct-port 1813 default key mykey dot1x

dot1x-enable
enable all
enable ether 2/1

inter ether 2/1
dot1x port-control auto

re-authentication (global default 3600 seconds)

Dot1x initialize e 3/1 (from # prompt (not config)
dot1x multiple-hosts
auth-fail-vlanid 300 (unsuccessful auth places client in vlan 300)

**rate limiting**

---fixed rate---

int e 1/1
rate limit fixed 500000 payload-only

show rate-limit fixed

traffic-policy tpd rate-limit fixed 100 exceed-action drop
access-list 101 permit ip any any traffic-policy tpd

int e 1/1
ip access-group 101 in

---Adaptive rate---

Cir: committed info rate (rate bps)
Cbs: commited burst size (packets)
Pir: peek information rate (rate bps)
Pbs: peer burst size (packets)
traffic-policy tpdadapt rate-limit adaptive cir 10000 cbs 16000 pir 20000 pbs 40000 exceed-action drop
access-list 101 permit ip any any traffic-policy tpdadapt

int e 1/1
ip access-group 101 in

***UDLD***

Link-keepalive Ethernet 1/1
Link-keepalive Ethernet 1/1 to ¼

Link-keepalive retries (default 5)
Link-keepalive interval (default 5)

***Radius***

Username tborst password mypassword (optional local database user)

Radius-server host 3.3.3.3
Radius-server key mykey
Radius-server retransmit 5 (default 3)
Radius-server timeout 5 (default 3 sec)

Enable telnet authentication
Aaa authentication login default radius local
Aaa authentication enable default radius local

Aaa authentication login privilege-mode (goes to enable mode after successful logon)
Aaa authentication enable implicit-user (when entering enable mode, prompts for just password –no userid)

***Security commands***

---RPF---

Int e 1/1
Ip verify unicast reverse-path external

---DHCP snooping---

Ip dhcp snooping vlan x

Interface Ethernet 1/1 (trusted ports..router, switches, dhcp server)
Dhcp snooping trust

---ip source guard---

Enable acl-per-port-per-vlan (global config)

Interface e 1/1
Source-guard enable

---arp inspection---

Ip arp inspection vlan 2 (globa)

Interface ether 1/1
Arp inspection trust

***source interface admin***

Ip telnet source-interface loop 0

Ip tftp source-interface loop 0

***mdi/mdx***

Interface e 1/1
mdi-mdx mdi (connects to end device)
mdi-mdx mdx (connects to switch-hub xover)

***VSRP***
(enabled by default, to run vrrp/vrrpe disable vsrp first)
No router vsrp

Vlan 200
Tag Ethernet 1/1 to 1/8
Vsrp vid 1
Backup
Activate
Scale-timer 2 (divides times by 2)
Ip vsrp auth-type simple-text-auth passwd (hello packets)
No include-port ether 1/1
Backup priority 75
Backup track-priority 1
Track-port e 1/1
Non-preempt-mode

Vlan 200 (vsrp-aware device)
Vsrp-aware vrid 1 auth simple-text-auth passwd

____________________________Software Naming conventions FastIron________________________________

SxSxxxxxx.bin (layer 2)
SxLxxxxxx.bin (Base Layer 3)
SxRxxxxxx.bin (Full Layer 3)

菊來香帽饰 http://jajamaozi.taobao.com