信息通信网络运行管理员（四级 / 中级工）实操题库全解析系统

1. VLAN 与端口链路类型配置

vlan 10
 quit
interface GigabitEthernet 1/0/1
 port link-mode bridge
 port link-type access
 port access vlan 10
 quit
interface GigabitEthernet 1/0/3
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 10 20

2. 三层 SVI 网关与物理路由口

# SVI 方式（跨VLAN路由网关）
interface Vlan-interface 10
 ip address 192.168.1.254 255.255.255.0
 quit

# 物理路由口方式（交换机端口切纯三层口）
interface GigabitEthernet 1/0/2
 port link-mode route
 ip address 10.0.0.1 255.255.255.0

3. DHCP 服务器与地址池配置

dhcp enable
dhcp server ip-pool POOLA
 network 192.168.1.0 mask 255.255.255.0
 gateway-list 192.168.1.254
 dns-list 8.8.8.8
 expired minute 30               # 或 expired day 0 hour 1
 forbidden-ip 192.168.1.1 192.168.1.149
 forbidden-ip 192.168.1.251 192.168.1.253

4. 静态路由与默认路由

# 静态明细路由：目标网络 掩码 下一跳
ip route-static 192.168.2.0 24 10.0.0.2

# 默认缺省路由：0.0.0.0 0 下一跳
ip route-static 0.0.0.0 0 192.168.100.1

5. OSPF 动态路由协议宣告

ospf 1 router-id 1.1.1.1
 area 0
  network 10.10.10.0 0.0.0.255    # 注意：反掩码！
  network 192.168.1.0 0.0.0.255

6. 远程登录管理：Telnet 与 SSH (AAA Scheme)

# Telnet Password 认证
telnet server enable
line vty 0 4
 authentication-mode password
 set authentication password simple Xsjs@123
 user-role network-admin

# SSH AAA Scheme 认证
ssh server enable
public-key local create rsa
local-user admin class manage
 password simple Xsjs@123456
 service-type ssh
 authorization-attribute user-role network-admin
line vty 0 63
 authentication-mode scheme
 protocol inbound ssh
 user-role network-admin

7. 链路聚合、端口隔离、STP边缘口与Hybrid

# 静态二层聚合
interface Bridge-Aggregation 1
interface GigabitEthernet 1/0/4
 port link-aggregation group 1

# 端口隔离
interface GigabitEthernet 1/0/1
 port-isolate enable group 1

# STP 边缘端口
interface GigabitEthernet 1/0/1
 stp edged-port enable

# Hybrid 端口
interface GigabitEthernet 1/0/1
 port link-type hybrid
 port hybrid pvid vlan 10
 port hybrid vlan 10 20 untagged

⚠️ 考场必做保存与防刷屏指令

# 关闭烦人的日志刷屏干扰
undo info-center enable

# 保存当前所有配置至存储介质（极关键！防断电与考官阅卷）
save force