谁可以详细解释一下这些配置..................

◆◇if......

#

sysname  R1

#super password level 3 cipher @@@@@

#

12tp enable

#

cpu-usage cycle 1min

#

radius scheme system

radius scheme hhh

authentication primary ip 10.10.10.10 key simple vpdn

accounting primary ip 10.10.10.10

accounting optional

#

domain hhh.zg

scheme radius-scheme hhh

authentication radius-scheme hhh

accounting radius-scheme hhh

zccounting optional

ip pool 1 192.168.100.2 192.168.100.72

domain system

#local-user admin

password cipher  ....

service-type telnet

level 3

#

dhcp server ip-pool 1

network 192.168.100.0 mask 255.255.255.0

gateway-list 192.168.100.1

dns-list xx.xx.xx.xx

#

dhcp server ip-pool 2

static-bind ip-address 192.168.100.252 mask 255.255.255.0

static-bind mac-address aaaa-bbbb-cccc

expired unlimited

#

acl number 3001

rule 0 permit ip source 192.168.100.0 0.0.0.255

rule 1 deny ip

rule 2 deny tcp source-port eq 3127

rule 3 deny tcp source-port eq1025

rule 4 deny tcp source-port eq 5554

rule 5 deny tcp source-port eq 9996

rule 6 deny tcp source-port eq 1068

rule 7 deny tcp source-port eq 135

rule 8 deny tcp source-port eq 137

rule 9 deny udp source-port eq netbios-ns

rule 10 deny udp source-port eq 135

rule 11 deny udp source-port eq netbios-dgm

rule 12 deny tcp source-port eq 138

rule 13 deny tcp source-port eq 139

rule 14 deny udp source-port eq netbios-ssn

rule 15 deny tcp source-port eq 593

rule 16 deny tcp source-port eq 4444

rule 17 deny tcp source-port eq 5800

rule 18 deny tcp source-port eq 8900

rule 19 deny tcp source-port eq 445

rule 20 deny udp source-port eq 445

rule 21 deny udp source-port eq 1434

acl number 3002

#

interface virtual-Template1

ppp authentication-mode pap domain hhh.zg

mut 1300

ip address unnumbered int e0/1

remote address pool 1

#

interface Aux0

async mode flow

#

int e0/0

description internet

ip add 3.3.3.3 255.255.255.252

nat outbound 3001

net server protocol tcp global 3.3.3.3 8055 inside 192.168.100.252 8055

net server protocol tcp global 3.3.3.3 8057 inside 192.168.100.252 8057

net server protocol tcp global 3.3.3.3 pptp inside 192.168.100.252 pptp

net server protocol tcp global 3.3.3.3 1433 inside 192.168.100.252 1433

net server protocol tcp global 3.3.3.3 6129 inside 192.168.100.252 6129

#

int e0/1

description intranet

ip add 192.168.100.1 255.255.255.0

arp-proxy enable

#int s0/0

clock DTECLK1

link-protocol ppp

ip address dhcp-alloc

#

interface NULL0

#

mandatory-lcp

allow 12tp virtual-template 1 remote hhh

tunnel password cipher *****

tunnerl name hhh

#

FTP server enable

#

dhcp server forbidden-ip 192.168.100.1 192.168.100.72

dhcp server forbidden-ip 192.168.100.101 192.168.100.254

#

ip route-static 0.0.0.0 0.0.0.0 3.3.3.2  preference 60

#

user-interface con 0

user-interface aux 0

user-interface vty 0 4

authentication-mode scheme

set authentication password simple aaa

#

return

peng19940915

思科的把= =

jsbxd

你是那几句不懂还是大部分不懂？

◆◇if......

基本上能懂一点，但是我想知道这样配置的逻辑