Dlink 1520-52

dlink 1520

Подключение к коммутатору

console : логин - admin , пароль - admin по умолчанию.
web : логин - admin , пароль - admin , ip address switch- 10.90.90.90/8 по умолчанию.
telnet : логин - admin , пароль - admin , ip address switch - 10.90.90.90/8 по умолчанию.

Настройка по console

Подключаем console кабель
Включаем программу Putty :
- выбираем Serial
- COM port
- Speed 115200
Включаем коммутатор
переходим в конфигурационный режим:
- ```
 conf t 
```

Настройка локального пользователя

 username admin password 0 admindlink
 username admin privilege 15

Настройка AAA и RADIUS

 aaa new-model
 radius-server host 10.0.200.160 key keydlink
 radius-server host 10.1.200.160 key keydlink
 aaa authentication login RADIUS group radius local 
 aaa accounting exec RADIUS start-stop group radius 
 aaa accounting commands 15 RADIUS none 
 aaa accounting network default start-stop group radius 
 aaa accounting system default start-stop group radius 
 ip http accounting exec RADIUS

Настройка ACL

ip access-list HTTPS-ACL 5
 10 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
 20 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 30 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 40 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
 50 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0
 60 permit any any
ip access-list HTTP-ACL 4
 60 permit 10.0.10.0 0.0.0.255 any
 80 permit 10.0.200.0 0.0.0.255 any
 90 permit 10.1.200.0 0.0.0.255 any
 100 permit 10.1.10.0 0.0.0.127 any
 110 permit 192.168.10.161 0.0.0.0 any
 120 permit 10.0.13.0 0.0.0.127 any
ip access-list ICMP 3
 10 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 20 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 30 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
 40 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0
 60 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
ip access-list SSH-ACL 2
 10 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
 20 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 30 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 40 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
 50 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0
ip access-list Telnet-ACL 1
 70 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
 80 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 90 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
 100 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
 110 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0

Настройка подключения к коммутатору

ip http timeout-policy idle 600
ip http access-class HTTP-ACL 
ip https access-class HTTPS-ACL 
line telnet
 access-class Telnet-ACL
 accounting exec RADIUS
 login authentication RADIUS
line ssh
 access-class SSH-ACL
 login authentication RADIUS

Вводим пароль для enable режима
- ```
enable password level 15 0 radius
```

Настраеваем время

clock timezone + 5 0
sntp enable
sntp server 10.0.200.160
sntp server 10.1.200.160

DHCP Relay

ip dhcp relay information option
ip dhcp relay information trust-all
ip dhcp smart-relay
ip dhcp relay information policy keep
ip dhcp pool clients
 relay source 10.0.13.253 255.255.255.128
 relay destination 192.168.10.161

Создаём vlan'ы

vlan 16
 name clients
vlan 100
 name video
vlan 200
 name hw

Создаём интерфейсы

interface Vlan1
no ip address 10.90.90.90 255.0.0.0
interface Vlan16
 ip address 10.0.13.253 255.255.255.128
 ip dhcp relay information trusted
 ip dhcp relay information policy-action keep
interface Vlan100
interface Vlan200
 ip address 10.0.200.26 255.255.255.0

Создаём агрегацию канала

interface port-channel 26
 switchport mode trunk
 switchport trunk allowed vlan 1,16,100,200
interface ethernet 1/0/51
 channel-group 26 mode active
 switchport mode trunk
 switchport trunk allowed vlan 1,16,100,200
interface ethernet 1/0/52
 channel-group 26 mode active
 switchport mode trunk
 switchport trunk allowed vlan 1,16,100,200

Добавляем Vlan'ы на интерфейсы

interface ethernet 1/0/1
 switchport mode access
 switchport access vlan 100
interface range ethernet 1/0/2-48
 switchport mode access
 switchport access vlan 16
interface ethernet 1/0/49
 switchport mode trunk
interface ethernet 1/0/50
 switchport mode trunk

Backup

copy running-config tftp