【正文】 orever starttime nowaccesslist 105 permit ip host host accesslist 105 permit ip host host accesslist 106 permit ip host host !!!!!tacacsserver host tacacsserver host tacacsserver key s9y8!controlplane!!!!!!!!!!line con 0 exectimeout 0 0 logging synchronousline aux 0line vty 0 4 exectimeout 0 0 password cisco accounting mands 0 spdbacs accounting mands 1 spdbacs accounting mands 2 spdbacs accounting mands 3 spdbacs accounting mands 4 spdbacs accounting mands 5 spdbacs accounting mands 6 spdbacs accounting mands 7 spdbacs accounting mands 8 spdbacs accounting mands 9 spdbacs accounting mands 10 spdbacs accounting mands 11 spdbacs accounting mands 12 spdbacs accounting mands 13 spdbacs accounting mands 14 spdbacs accounting mands 15 spdbacs accounting exec spdbacs logging synchronous login authentication spdbacs!scheduler allocate 20000 1000ntp source Loopback0ntp server endR1  R2sh runBuilding configuration...Current configuration : 4533 bytes!version service timestamps debug datetime msecservice timestamps log datetime msecno service passwordencryption!hostname R2!bootstartmarkerbootendmarker!logging messagecounter syslogenable password cisco!aaa newmodel!!aaa authentication login spdbacs group tacacs+ enableaaa accounting exec spdbacs actiontype startstop group tacacs+!aaa accounting mands 0 spdbacs actiontype startstop group tacacs+!aaa accounting mands 1 spdbacs actiontype startstop group tacacs+!aaa accounting mands 2 spdbacs actiontype startstop group tacacs+!aaa accounting mands 3 spdbacs actiontype startstop group tacacs+!aaa accounting mands 4 spdbacs actiontype startstop group tacacs+!aaa accounting mands 5 spdbacs actiontype startstop group tacacs+!aaa accounting mands 6 spdbacs actiontype startstop group tacacs+!aaa accounting mands 7 spdbacs actiontype startstop group tacacs+!aaa accounting mands 8 spdbacs actiontype startstop group tacacs+!aaa accounting mands 9 spdbacs actiontype startstop group tacacs+!aaa accounting mands 10 spdbacs actiontype startstop group tacacs+!aaa accounting mands 11 spdbacs actiontype startstop group tacacs+!aaa accounting mands 12 spdbacs actiontype startstop group tacacs+!aaa accounting mands 13 spdbacs actiontype startstop group tacacs+!aaa accounting mands 14 spdbacs actiontype startstop group tacacs+!aaa accounting mands 15 spdbacs actiontype startstop group tacacs+!!!aaa sessionid monclock timezone BJT 8dot11 syslogip sourceroute!!!!ip cefno ip domain lookupno ipv6 cef!multilink bundlename authenticated!!!!!!!!!!!!!!!!!!!!!!voicecard 0!!!!!archive log config hidekeys! !!!!!!!!interface Loopback0 ip address !interface FastEthernet0/0 no ip address duplex auto speed auto!interface FastEthernet0/1 no ip address shutdown duplex auto speed auto!interface FastEthernet0/3/0!interface FastEthernet0/3/1!interface FastEthernet0/3/2!interface FastEthernet0/3/3!interface Serial0/1/0 ip address ip nat inside ip virtualreassembly encapsulation ppp no fairqueue clock rate 2000000!interface Serial0/1/1 no ip address shutdown clock rate 2000000!interface Vlan1 ip address secondary ip address ip nat outside ip virtualreassembly standby 184 ip standby 184 preempt!ip forwardprotocol ndip route ip route ip route ip route ip route ip route no ip serverno ip secureserver!!ip nat pool pospool netmask ip nat pool yinlianpool netmask ip nat outside source list 105 pool yinlianpoolip nat outside source list 106 pool pospool!accesslist 105 permit ip host host accesslist 105 permit ip host host accesslist 106 permit ip host host !!!!!tacacsserver host tacacsserver host tacacsserver key s9y8!controlplane!!!!!!!!!!line con 0line aux 0line vty 0 4 exectimeout 0 0 accounting mands 0 spdbacs accounting mands 1 spdbacs accounting mands 2 spdbacs accounting mands 3 spdbacs accounting mands 4 spdbacs accounting mands 5 spdbacs accounting mands 6 spdbacs accounting mands 7 spdbacs accounting mands 8 spdbacs accounting mands 9 spdbacs accounting mands 10 spdbacs accounting mands 11 spdbacs accounting mands 12 spdbacs accounting mands 13 spdbacs accounting mands 14 spdbacs accounting mands 15 spdbacs accounting exec spdbacs login authentication spdbacsline vty 5 15 exectimeout 0 0 password 7 0518160B235F575041 accounting mands 0 spdbacs accounting mands 1 spdbacs accounting mands 2 spdbacs accounting mands 3 spdbacs accounting mands 4 spdbacs accounting exec spdbacs login authentication spdbacs!scheduler allocate 20000 1000ntp source Loopback0ntp server endR2實施步驟：因為設(shè)備型號都是和原有設(shè)備完全一致，所以直接將備機按照原樣接上即可。2. 其它第三方業(yè)務(wù)區(qū)網(wǎng)絡(luò)應(yīng)急其它第三方業(yè)務(wù)設(shè)備都是單體設(shè)備，沒有熱備，如果設(shè)備出現(xiàn)故障，采用配置型號完全一致的備機進行替換PIX防火墻配置：pix515E show run: Saved:PIX Version (2)nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 intf2 security10enable password passwd hostname pix515Eclock timezone BJT 8fixup protocol ftp 21fixup protocol 80fixup protocol h323 h225 1720fixup protocol h323 ras 17181719fixup protocol ils 389fixup protocol rsh 514fixup protocol rtsp 554fixup protocol smtp 25fixup protocol sqlnet 1521fixup protocol sip 5060fixup protocol skinny 2000namesaccesslist permit_all permit ip any any acces