шаблон cisco

шаблон cisco

Кое-что из моего общего шаблона:

no service tcp-small-servers
no service udp-small-servers
service tcp-keepalives-in
service tcp-keepalives-out
no ip finger
no service finger
no ip http server
no ip http secure-server
no ip bootp server
no boot host
no boot network
no service config
no ip redirects
no ip directed-broadcast
no ip proxy-arp
no ip source-route
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
service sequence-numbers
no logging console
clock timezone MSK 3
clock summer-time MSD recurring last Sun Mar 2:00 last Sun Oct 3:00
ip subnet-zero
no ip domain-lookup
ip icmp rate-limit unreachable 1000
ip icmp rate-limit unreachable DF 1000

Для Catalyst'ов:
errdisable recovery cause bpduguard
errdisable recovery interval 400

На типичном «клиентском» порту коммутатора:
interface range FastEthernet 0/1 — 24
desc HOST
switchport access vlan XXX
switchport mode access
switchport nonegotiate
flowcontrol receive off
spanning-tree bpduguard enable
storm-control broadcast level 1.00
storm-control multicast level 1.00
storm-control unicast level 90.10
storm-control action trap
spanning-tree portfast
no snmp trap link-status