TOLLIFi CopyPaste - удаленная настройка сетевого оборудования

[globals]
log_in=name:

[device1]
название=Huawei 3Com
команда=display
результат=% Incomplete
комментарии=# 

[device2]
название=Cisco Systems
команда=show
результат=% Type
enable=enable
комментарии=!

_ipv4 ipv4; 
str hostname;
int num;
int vl_pppoe;
str vl_pppoe_name;
int vl_iptv;
str vl_iptv_name;
str vl_multicast;
str speed;
str stp_name;
str stp_revision;

[default]
num = 1-1000;
vl_pppoe = 2001-3000;
vl_pppoe_name = PPPoE-Access-vl;
vl_iptv = 3001-4000;
vl_iptv_name = vrf_IPTV-Access-vl;
vl_multicast = 606;
speed = 100;
stp_revision = 1;

#пример оформления комментариев...

#[АТС15]
# hostname = ats15-masw;
# vl_pppoe = 2050,2002-2003,2106,2005-2049;
# vl_iptv = 3050,2002-3003,3106,3005-3049;
# ipv4 = 10.191.20.1-10.191.20.25,10.191.1.65-10.191.1.68,10.191.20.30-10.191.23.253; 
# vl_multicast = 607;

[АТС50]
hostname = ats50-masw;
vl_pppoe = 3301-3450;
vl_iptv = 3101-3250;
ipv4 = 10.191.44.1-10.191.44.253; 
vl_multicast = 607;
stp_name = ASW-ATC50;

[АТС32]
hostname = ats32-masw;
vl_pppoe = 3001-3120;
vl_iptv = 2001-2120;
ipv4 = 10.191.34.129-10.191.34.253; 
vl_multicast = 607;
stp_name = ASW-ATC32;

[АТС28]
hostname = ats28-masw;
vl_pppoe = 2101-2150,3501-3650,1113-1162,4001-4040;
vl_iptv = 3101-3150,3701-3850,3213-3262,3301-3340;
ipv4 = 10.191.36.1-10.191.36.255,10.191.37.1-10.191.37.253;
vl_multicast = 607; 
stp_name = ASW-ATC28;

[!]
!
[/!]

[Режим конфигурации]
configure terminal
!
[/Режим конфигурации]

[Создать MVR VLAN]
mvr vlan ${VLAN CUSTOM, [№]}
!
[/Создать MVR VLAN]

[Настроить глобально Multicast]
ip igmp profile 1
permit
range 239.50.1.1 239.50.3.255
mvr mode dynamic
mvr group 239.50.1.1 200
mvr group 239.50.2.1 200
mvr group 239.50.3.1 100
mvr
!
[/Настроить глобально Multicast]

[Режим конфигурации VLAN PPPoE]
vlan ${vl_pppoe}
!
[/Режим конфигурации VLAN PPPoE]

[Режим конфигурации VLAN vrf IPTV]
vlan ${vl_iptv}
!
[/Режим конфигурации VLAN vrf IPTV]

[Режим конфигурации Access-порта]
interface FastEthernet 0/${Абонентский порт, [№]}
[/Режим конфигурации Access-порта]

[Конфигурация Access-порта для PPPoE]
switchport access vlan ${vl_pppoe}
!
[/Конфигурация Access-порта для PPPoE]

[Конфигурация Access-порта для IPTV]
switchport access vlan ${vl_iptv}
mvr type receiver
mvr immediate
ip igmp filter 1
!
[/Конфигурация Access-порта для IPTV]

[Генерировать ключи шифрования RSA]
crypto key generate rsa
yes
1024
$[sleep(30000)]
!
[/Генерировать ключи шифрования RSA]

configure terminal
!
table-map TABLE-COS-COS
map from 4 to 4
default 0
!
class-map match-all CLASS-COS4
match cos 4
!
policy-map POLICY-UPLINK-IN
class class-default
set cos cos table TABLE-COS-COS
policy-map POLICY-ACCESS-IN-IPTV
class class-default
set dscp af41
set cos 4
policy-map POLICY-UPLINK-OUT
class CLASS-COS4
priority
class class-default
queue-limit 256
bandwidth remaining percent 50
policy-map POLICY-ACCESS-IN-PPPOE
class class-default
set dscp default
set cos 0
!
interface range FastEthernet 0/1-24
no service-policy input POLICY-ACCESS-IN-IPTV
service-policy input POLICY-ACCESS-IN-PPPOE
!
interface range GigabitEthernet 0/1-2
service-policy output POLICY-UPLINK-OUT
!
service-policy input POLICY-UPLINK-IN
!
end
!
copy running-config startup-config

!
end
!
exit

undo terminal logging
undo terminal trapping
#
system-view
#
undo unknown-multicast drop enable
igmp-snooping group-policy 2607
#
igmp-snooping nonflooding-enable
#
priority trust
#
qos cos-local-precedence-map 0 0 0 0 3 0 0 0
#
acl number 2600
rule 0 deny
#
acl number 2607
rule 0 permit source 239.50.1.0 0.0.0.255
rule 1 permit source 239.50.2.0 0.0.0.255
rule 2 permit source 239.50.3.0 0.0.0.127
rule 3 deny
#
acl number 3607
rule 0 deny 2
#
acl number 3000
rule 100 permit ip
#
interface Ethernet 1/0/1
undo port-group 1
#
undo storm-constrain broadcast
undo storm-constrain multicast
undo storm-constrain control
storm-constrain enable log
storm-constrain enable trap
broadcast-suppression 1
multicast-suppression bps 1024
#
traffic-priority inbound ip-group 3000 rule 100 dscp be cos best-effort local-precedence 0
#
. . .
#
interface Ethernet 1/0/24
undo port-group 1
#
undo storm-constrain broadcast
undo storm-constrain multicast
undo storm-constrain control
storm-constrain enable log
storm-constrain enable trap
broadcast-suppression 1
multicast-suppression bps 1024
#
traffic-priority inbound ip-group 3000 rule 100 dscp be cos best-effort local-precedence 0
#
return
#
save
Y

#
return
#
quit

configure terminal
!
ip dhcp snooping vlan 3001
ip arp inspection vlan 3001
!
ip igmp profile 1
permit
range 239.50.1.1 239.98.3.255
mvr mode dynamic
mvr group 239.50.1.1 200
mvr group 239.50.2.1 200
mvr group 239.50.3.1 100
mvr
!
mvr vlan 606
!
vlan 606
!
vlan 3001
!
table-map TABLE-COS-COS
map from 4 to 4
default 0
!
class-map match-all CLASS-COS4
match cos 4
!
policy-map POLICY-UPLINK-IN
class class-default
set cos cos table TABLE-COS-COS
policy-map POLICY-ACCESS-IN-IPTV
class class-default
set dscp af41
set cos 4
policy-map POLICY-UPLINK-OUT
class CLASS-COS4
priority
class class-default
queue-limit 256
bandwidth remaining percent 50
policy-map POLICY-ACCESS-IN-PPPOE
class class-default
set dscp default
set cos 0
!
default interface FastEthernet 0/1
interface FastEthernet 0/1
switchport access vlan 3001
mvr type receiver
mvr immediate
ip igmp filter 1
!
switchport block multicast
switchport block unicast
!
storm-control broadcast level 1.00 0.10
storm-control multicast level 1.00
no storm-control action trap
!
switchport port-security
switchport port-security aging time 5
switchport port-security aging type inactivity
ip arp inspection limit rate 10
ip verify source
ip dhcp snooping limit rate 10 
!
no logging event link-status 
no snmp trap link-status
!
no service-policy input POLICY-ACCESS-IN-PPPOE
service-policy input POLICY-ACCESS-IN-IPTV
!
speed 100
!
no shutdown
!
interface GigabitEthernet 0/1
switchport trunk allowed vlan add 606
switchport trunk allowed vlan add 3001
mvr type source
!
interface GigabitEthernet 0/2
switchport trunk allowed vlan add 606
switchport trunk allowed vlan add 3001
mvr type source
!
end
!
copy running-config startup-config

!
end
!
exit

undo terminal logging
undo terminal trapping
#
system-view
#
undo unknown-multicast drop enable
igmp-snooping group-policy 2607
#
igmp-snooping nonflooding-enable
#
priority trust
#
qos cos-local-precedence-map 0 0 0 0 3 0 0 0
#
acl number 2607
rule 0 permit source 239.50.1.0 0.0.0.255
rule 1 permit source 239.50.2.0 0.0.0.255
rule 2 permit source 239.50.3.0 0.0.0.127
rule 3 deny
#
acl number 3000
rule 100 permit ip
#
vlan 606
#
service-type multicast
igmp-snooping enable
#
vlan 3001
#
arp detection enable
arp restricted-forwarding enable
#
interface Ethernet 1/0/1
stp disable
port isolate
loopback-detection enable
bpdu-drop any
#
undo port-group 1
#
undo storm-constrain broadcast
undo storm-constrain multicast
undo storm-constrain control
storm-constrain enable log
storm-constrain enable trap
broadcast-suppression 1
multicast-suppression bps 1024
#
undo port link-type
undo port access vlan
port link-type hybrid
port hybrid vlan 606 3001 untagged
undo port hybrid vlan 1
port hybrid pvid vlan 3001
#
multicast-source-deny
#
traffic-priority inbound ip-group 3000 rule 100 dscp af41 cos controlled-load local-precedence 3
#
port-security max-mac-count 1
port-security intrusion-mode disableport-temporarily
ip check source ip-address mac-address
arp rate-limit enable
arp rate-limit 10
dhcp rate-limit enable
dhcp rate-limit 10
#
undo igmp-snooping group-policy
#
undo packet-filter inbound ip-group 3607
#
speed 100
#
undo shutdown
#
interface GigabitEthernet 1/1/2
undo multicast-source-deny
#
port trunk permit vlan 606
port trunk permit vlan 3001
interface GigabitEthernet 1/2/2
undo multicast-source-deny
#
port trunk permit vlan 606
port trunk permit vlan 3001
return
#
save
Y

#
return
#
quit