2024年2月6日发(作者:)

it外包 it外包

关于因业务须求,定时关闭交换机的端口的做法

关于因业务须求,定时关闭交换机的端口的做法,

通过对各种资料的查询与对比,我现在知道了两种可以实现在某一特定时间内关闭交换机端口,并在另一时间段打开端口的做法。现我将其做法与大家分享一下。希望大家提出好的意见。(以S8500设备为例)

一。通过做ACL规则开限开关端口(其时也不叫开开关端口,只是通过规则禁止端口数据的访问)

time ShiJian 00:00 to 08:00 dai (指定时间段为00:00到08:00)

再做一个ACL规则。再在ACL下面引用上面的时间,

最后在端口上,引用这个ACL规则

(这一方法的优点:做法简单,无须人为干予,不会关闭用户端口)

(这一方法的缺点:步骤太多,必须确定到端口的用户IP,且要单个引用,否则会引起某些端口无法限制。)

二。通过在电脑里运行BAT文件。直接关闭用户端口或开启用户端口

其方法如下

1.关闭交换机端口.BAT

==========================================================

echo set sh=Object("") >>telnet_

echo 1000 >>telnet_ (生成临时文件telnet_并打开TELNET窗口)

echo ys "open 111.111.111.123" >>telnet_ (telnet 到

111.111.111.123 交换机)

echo ys "{ENTER}" >>telnet_

echo 1000 >>telnet_ (单步延时1秒)

echo ys "XXXXX-XXXX{ENTER}" >>telnet_ (输入登录用户名:XXXXX-XXXX)

echo 1000 >>telnet_

echo ys "XXXXX-XXXX{ENTER}">>telnet_ (输入登录密码:XXXXX-XXXX)

echo 1000 >>telnet_

echo ys "sys{ENTER}">>telnet_ (进入交换机配置模式)

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/1 {ENTER}">>telnet_ (进入交换机端口)

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_ (shutdown这个交换端口)

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/2 {ENTER}">>telnet_

echo 1000 >>telnet_

it外包 it外包

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/3 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/5 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/6 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/7 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/8 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/10 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/13 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

start telnet

cscript //nologo telnet_

del telnet_

==========================================================

it外包 it外包

2.开启交换机端口.BAT

==========================================================

echo set sh=Object("") >>telnet_

echo 1000 >>telnet_

echo ys "open 111.111.111.123" >>telnet_

echo ys "{ENTER}" >>telnet_

echo 1000 >>telnet_

echo ys "XXXXX-XXXX{ENTER}" >>telnet_

echo 1000 >>telnet_

echo ys "XXXXX-XXXX{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "sys{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/1 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/2 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/3 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/5 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/6 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/7 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/8 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/10 {ENTER}">>telnet_

echo 1000 >>telnet_

it外包 it外包

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "interface ethernet 2/1/13 {ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "undo shutdown{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "{ENTER}">>telnet_

echo 1000 >>telnet_

echo ys "quit{ENTER}">>telnet_

start telnet

cscript //nologo telnet_

del telnet_

==========================================================

将这两个文件放在一台可以直接TELNET交换机的电脑上,然后在运行这台电脑的任务计划,将这两个文件引入,并指定相关的时间段。(这样就OK了)

(此方法的优点:可以一次性解决关闭端口的问题,设置完成后,无须人为干预,定时准确,关闭端口彻底。100%阻断用户上网)

(此方法的缺点:对管理员编程要求高。特别是会BAT编程,其次,必须要有一台可直接TELNET交换机的电脑,且必须开机。)