华为s5700vlan划分和acl配置命令.docx

华为s5700vlan划分和acl配置命令#!Software Version V100R005C01SPC100sysname Quidway#FTP server enable#vlan batch 2 to 6#undo http server enable#drop illegal-mac alarm#acl number 3001 rule 5 permit ip source 00 0 destination 55 acl number 3002 rule 5 deny ip source 55 destination 55 acl number 3003 rule 5 deny ip source 55 destination 55 #traffic classifier c2 operator andif-match acl 3002traffic classifier c3 operator andif-match acl 3003traffic classifier c1 operator andif-match acl 3001#traffic behavior b2denytraffic behavior b3denytraffic behavior b1permit#traffic policy testclassifier c1 behavior b1classifier c2 behavior b2classifier c3 behavior b3#aaa authentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultdomain default domain default_admin local-user admin password simple adminlocal-user admin service-type httplocal-user huawei password simple huaweilocal-user huawei privilege level 15local-user huawei ftp-directory flash:local-user huawei service-type ftp#interface Vlanif1ip address 54 #interface Vlanif2ip address 54 #interface Vlanif3ip address 54 #interface Vlanif4ip address 54 #interface MEth0/0/1#interface GigabitEthernet0/0/1port link-type accessport default vlan 2traffic-policy test outbound#interface GigabitEthernet0/0/2port link-type accessport default vlan 2#interface GigabitEthernet0/0/3port link-type accessport default vlan 3#interface GigabitEthernet0/0/4port link-type accessport default vlan 3#interface GigabitEthernet0/0/5port link-type accessport default vlan 4#interface GigabitEthernet0/0/6port link-type accessport default vlan 4#interface GigabitEthernet0/0/7port link-type accessport default vlan 5#interface GigabitEthernet0/0/8port link-type accessport default vlan 5#interface GigabitEthernet0/0/9port link-type access#interface GigabitEthernet0/0/10port link-type access#interface GigabitEthernet0/0/11port link-type access#interface GigabitEthernet0/0/12port link-type access#interface GigabitEthernet0/0/13port link-type access#interface GigabitEthernet0/0/14port link-type access#interface GigabitEthernet0/0/15port link-type access#interface GigabitEthernet0/0/16port link-type access#interface GigabitEthernet0/0/17port link-type access#interface GigabitEthernet0/0/18port link-type access#interface GigabitEthernet0/0/19port link-type access#interface GigabitEthernet0/0/20port link-type access#interface GigabitEthernet0/0/21port link-type access#interface GigabitEthernet0/0/22port link-type access#interface GigabitEthernet0/0/23port link-type access#interface GigabitEthernet0/0/24port link-type access#interface NULL0#ip route-static #snmp-agentsnmp-agent local-engineid 000007DB7F00000100000821snmp-agent sys-info version v3#user-interface con 0idle-timeout 0 0user-interface vty 0 4user privilege level 5set authentication password simple cisco#port-group vlan2group-member GigabitEthernet0/0/3group-member GigabitEthernet0/0/4group-member GigabitEthernet0/0/5group-member GigabitEthernet0/0/6group-member GigabitEthernet0/0/7group-member GigabitEthernet0/0/8group-member GigabitEthernet0/0/9group-member GigabitEthernet0/0/10group-member GigabitEthernet0/0/11group-member GigabitEthernet0/0/12group-member GigabitEthernet0/0/13group-member GigabitEthernet0/0/14group-member GigabitEthernet0/0/15group-member GigabitEthernet0/0/16group-member GigabitEthernet0/0/17group-member GigabitEthernet0/0/18group-member GigabitE