【文章內(nèi)容簡介】 分鐘) 3550主的fa0/47對應3550備的fa0/47 3550主的fa0/48對應3550備的fa0/48第四步：將連在cisco4506上所有的電口都挪向3550上（預計5分鐘） cisco4506主的fa2/3對應3550主的fa0/3 cisco4506主的fa2/4對應3550主的fa0/4 以此類推 cisco4506主的fa2/34對應3550主的fa0/34 cisco4506備的fa2/3對應3550備的fa0/3 cisco4506備的fa2/4對應3550備的fa0/4 以此類推 cisco4506備的fa2/34對應3550備的fa0/34第五步：3臺樓層交換機與3550之間的互連（預計3分鐘） 3550主的fa0/ 3550主的fa0/ 3550主的fa0/ 3550備的fa0/ 3550備的fa0/ 3550備的fa0/四、 第三方外聯(lián)區(qū)網(wǎng)絡應急1. 第三方業(yè)務銀聯(lián)區(qū)網(wǎng)絡應急線路故障：發(fā)生故障時，登陸ASA防火墻、交換機、路由器通過show log , show ip int brie , show interface , ping , show ip route , show route等命令來確認相關接口在故障發(fā)生前和發(fā)生時的狀態(tài)，找出問題線路。如果是內(nèi)部網(wǎng)絡線路，在線更換的具體操作流程如下：a) 用筆記本電腦連接在網(wǎng)絡設備的Console 上，啟動Console 監(jiān)控和記錄；b) 準備好存檔的系統(tǒng)配置，備用。如有可能，同時保存當前系統(tǒng)配置；c) 對故障模塊上連接的線纜做好標記，小心拔下；d) 做好安全接地，插上更換的新網(wǎng)線 e) 檢查線纜連接狀態(tài)正常；f) 確認線纜更換成功。如果是外部線纜，則確認故障后，由XX打保修電話，聯(lián)系聯(lián)通、移動公司人員前來維修。設備故障：由于銀聯(lián)區(qū)所有的設備都是雙機熱備，所以一臺發(fā)生故障并不影響業(yè)務運行。對于配置問題要制定正確的更改配置腳本，備份當前配置以后實施更改；對于硬件問題要練習XX公司，申請硬件故障維修。 兩臺設備故障：使用1臺ASA 5540防火墻備份ASA防火墻的配置、使用1臺cisco 1841路由器備份連接銀聯(lián)方路由器的配置，任意1臺交換機無需配置用來備份銀聯(lián)區(qū)交換機。ASA防火墻配置：
spdbsyasa sh run: Saved:ASA Version (1) !hostname spdbsyasaenable password encryptedpasswd encryptednames!interface GigabitEthernet0/0 speed 100 duplex full nameif outside securitylevel 0 ip address !interface GigabitEthernet0/1 nameif inside securitylevel 100 ip address !interface GigabitEthernet0/2 nameif dmz securitylevel 50 ip address !interface GigabitEthernet0/3 description LAN Failover Interface!interface Management0/0 shutdown no nameif no securitylevel no ip address!ftp mode passiveaccesslist IPP_PAT extended permit ip host host accesslist IPP_PAT extended permit ip host host accesslist IPP_PAT extended permit ip host host accesslist IPP_PAT extended permit ip host host accesslist IPP_PAT extended permit ip host host accesslist IPP_PAT extended permit ip host host accesslist OUTSIDE_IN extended permit icmp any any accesslist OUTSIDE_IN extended permit tcp host host eq 21428 accesslist OUTSIDE_IN extended permit tcp host eq 21428 host accesslist OUTSIDE_IN extended permit tcp host host eq 23428 accesslist OUTSIDE_IN extended permit tcp host eq 23428 host accesslist OUTSIDE_IN extended permit tcp host host eq 21428 accesslist OUTSIDE_IN extended permit tcp host eq 21428 host accesslist OUTSIDE_IN extended permit tcp host host eq 23428 accesslist OUTSIDE_IN extended permit tcp host eq 23428 host accesslist OUTSIDE_IN extended permit tcp host eq 6060 host accesslist OUTSIDE_IN extended permit udp eq snmptrap accesslist OUTSIDE_IN extended permit udp eq syslog accesslist OUTSIDE_IN extended permit udp host eq radius accesslist OUTSIDE_IN extended permit udp host eq radiusacct accesslist OUTSIDE_IN extended permit udp host eq 1812 accesslist OUTSIDE_IN extended permit udp host eq 1813 accesslist OUTSIDE_IN extended permit tcp host eq tacacs accesslist OUTSIDE_IN extended permit udp host eq radius accesslist OUTSIDE_IN extended permit udp host eq radiusacct accesslist OUTSIDE_IN extended permit udp host eq 1812 accesslist OUTSIDE_IN extended permit udp host eq 1813 accesslist OUTSIDE_IN extended permit tcp host eq tacacs accesslist OUTSIDE_IN extended permit udp host accesslist OUTSIDE_IN extended permit tcp host accesslist INSIDE_OUT extended permit icmp any any accesslist INSIDE_OUT extended permit tcp host host eq 21428 accesslist INSIDE_OUT extended permit tcp host eq 21428 host accesslist INSIDE_OUT extended permit tcp host host eq 23428 accesslist INSIDE_OUT extended permit tcp host eq 23428 host accesslist INSIDE_OUT extended permit tcp host host eq 21428 accesslist INSIDE_OUT extended permit tcp host eq 21428 host accesslist INSIDE_OUT extended permit tcp host host eq 23428 accesslist INSIDE_OUT extended permit tcp host eq 23428 host accesslist INSIDE_OUT extended permit tcp host host eq 21428 accesslist INSIDE_OUT extended permit tcp host eq 21428 host accesslist INSIDE_OUT extended permit tcp host host eq 23428 accesslist INSIDE_OUT extended permit tcp host eq 23428 host accesslist INSIDE_OUT extended permit tcp host host eq 21428 accesslist INSIDE_OUT extended permit tcp host eq 21428 host accesslist INSIDE_OUT extended permit tcp host host eq 23428 accesslist INSIDE_OUT extended permit tcp host eq 23428 host accesslist INSIDE_OUT extended permit tcp host host eq 21428 accesslist INSIDE_OUT extended permit tcp host eq 21428 host accesslist INSIDE_OUT extended permit tcp host host eq 23428 accesslist INSIDE_OUT extended permit tcp host eq 23428 host accesslist INSIDE_OUT extended permit tcp host host eq 21428 accesslist INSIDE_OUT extended permit tcp host eq 21428 host accesslist INSIDE_OUT extended permit tcp host host eq 23428 accesslist INSIDE_OUT extended permit tcp host eq 23428 host accesslist INSIDE_OUT extended permit tcp host host eq 6060 accesslist INSIDE_OUT extended permit ip any accesslist INSIDE_OUT extended permit ip host any accesslist INSIDE_OUT extended permit ip host any accesslist INSIDE_OUT extended permit udp host any eq ntp accesslist INSIDE_OUT extended permit udp host any eq ntp pager lines 24mtu outside 1500mtu inside 1500mtu dmz 1500failoverfailover lan unit primaryfailover lan interface failoverlan GigabitEthernet0/3failover polltime unit msec 500 holdtime 5failover interface ip failoverlan standby icmp unreachable ratelimit 1 burstsize 1no asdm history enablearp timeout 14400global (outside) 2 nat (inside) 2 accesslist IPP_PATstatic (inside,outside) tcp 21428 21428 netmask static (ins