...
| Блок кода |
|---|
interface gigabitethernet 1/0/2
mode switchport
switchport mode trunk
switchport trunk allowed vlan add 3,2449
exit |
Создаем object-group для настройки Firewall:
...
| Блок кода |
|---|
crypto-sync
local-address 192.168.1.2
remote-address 192.168.1.3
vrrp-group 1
remote-delete
enable
exit |
Настраиваем Softgre-Controller для синхронизации туннелей SoftGRE:
...
| Блок кода |
|---|
security zone-pair trusted self
rule 11
action permit
match protocol vrrp
enable
exit
rule 12
action permit
match protocol tcp
match destination-port softgre_controller
enable
exit
rule 13
action permit
match protocol tcp
match destination-port sync
enable
exit
exit
security zone-pair users self
rule 11
action permit
match protocol vrrp
enable
exit
exit |
Настраиваем DHCP-сервер:
| Блок кода |
|---|
no ip dhcp-server pool users-pool
no ip dhcp-server pool ap-pool
ip dhcp-server pool ap-pool
network 192.168.1.0/24
address-range 192.168.1.4-192.168.1.254
default-router 192.168.1.1
dns-server 192.168.1.1
option 42 ip-address 192.168.1.1
vendor-specific
suboption 12 ascii-text "192.168.1.1"
suboption 15 ascii-text "https://192.168.1.1:8043"
exit
exit
ip dhcp-server pool users-pool
network 192.168.2.0/24
address-range 192.168.2.4-192.168.2.254
default-router 192.168.2.1
dns-server 192.168.2.1
exit |
...
| Блок кода |
|---|
softgre-controller
peer-address 192.168.1.2
vrrp-group 1
exit |
Настраиваем Softgre-туннель для синхронизации, в качестве local address указывается адрес vrrp-ip:
| Блок кода |
|---|
tunnel softgre 1
mode data
local address 192.168.1.1
default-profile
enable
exit |
...
