ccesslist22permit192168022RouterCo
figaccesslistde
ya
yRouterCo
figuser
amela
starprivilege10la
star设置SSH的超时间隔和尝试登录次数RouterCo
figipsshtimeout90RouterCo
figipssha
the
ticatio
retries2RouterCo
figli
evty04
811
fRouterCo
figli
eaccessclass22i
RouterCo
figli
etra
sporti
putsshRouterCo
figli
elogi
localRouterCo
figli
eexit！启用SSH服务，生成RSA密钥对。RouterCo
figcryptokeyge
eratersaThe
ameforthekeyswillberouterla
starorgChoosethesizeofthekeymodulusi
thera
geof360to2048foryourGe
eralPurposeKeysChoosi
gakeymodulusgreatertha
512maytakeafewmi
utesHowma
ybitsi
themodulus5122048Ge
erati
gRSAKeysOK
911
f三、交换机配置
host
amexxdqwzsw
oservicepassworde
cryptio
udlde
able
oerrdisabledetectcausepagpflap
oerrdisabledetectcausedtpflap
oerrdisabledetectcausel2ptguard
oerrdisabledetectcausegbici
valid
oerrdisabledetectcausedhcpratelimit
oerrdisabledetectcausearpi
spectio
oerrdisabledetectcauseloopbackerrdisablerecoverycausepsecureviolatio
errdisablerecoverycausearpi
spectio
errdisablerecoverycauseudlderrdisablerecoverycausebpduguarderrdisablerecoveryi
terval30
i
terfaceFastEther
et01switchportmodeaccessswitchportvoicevla
X按需求配置switchportportsecuritymaximum1按需求配置switchportportsecurity按需求配置switchportportsecurityagi
gtime2按需求配置switchportportsecurityviolatio
restrict按需求配置spa
i
gtreeportfastspa
i
gtreebpduguarde
able
i
terfaceGigabitEther
et01switchporttru
ke
capsulatio
dot1qswitchportmodedy
amicdesirable
ipaccesslistexte
dedVIRUSFILTERde
yiphost127001a
yde
yudpa
ya
yeq1434de
yipa
yhost1255255254permitipa
ya
y
exit
i
terfacevla
1ipaccesslistexte
dedVIRUSFILTERout
exit
ipaccesslistexte
dedVIRUSFILTER
1011
fde
yiphost127001a
yde
yudpa
ya
yeq1434de
yipa
yhost1255255254permitipa
ya
y
1111
fr