华为s6502及多台s3026交换机配置实例.doc

运用的DHCP中继,TRUNK,VLAN,ACL,端口绑定等技术:dis cuBSD爱好者乐园K4$cU+eE# c*SY (r)MC#fsysname Quidway S6502BSD爱好者乐园zyQW$IQR(#q)EJlocal-server nas-ip key huaweiBSD爱好者乐园,V5C$iEC#BSD爱好者乐园 wN3|K uOdomain default enable system4f(oF w3Kz3M#8M!(QQ C6O(y:ndhcp-server 1 ip 54lH4/o1hU0g#BSD爱好者乐园9X,ho!b!qtemperature-limit 0 10 80BSD爱好者乐园$ii:U,W*V;d.G#.H-e*V4|6Et+hpoe power max-value 2400ay TO9?D(0v y#BSD爱好者乐园(RL O+L5S)|Jradius scheme systemBSD爱好者乐园/h2G A|primary authentication 1645)ybv T!KCl6x5aprimary accounting 1646BSD爱好者乐园XxM w)tuser-name-format without-domaintHP%sc9r#N+O;nVIDdB-qdomain systemBSD爱好者乐园|JAxkvlan-assignment-mode integerBSD爱好者乐园z9yN6a-?oaccess-limit disableBSD爱好者乐园5fX)x:Bstate activeBSD爱好者乐园U/c _*W*G midle-cut disableBSD爱好者乐园LYEh9rb:BV wself-service-url disableBSD爱好者乐园4rs.j -Bn#Omessenger time disable:aim#h|k#u|stp TC-protection enables ;GD r$U s#BSD爱好者乐园BKY.aF,gUacl number 3000BSD爱好者乐园z d/y Xrule 0 deny ipsKC m TPrule 1 permit ip destination 55BSD爱好者乐园4l)WUe*;irule 2 permit tcp destination 0 destination-port eq wwwBSD爱好者乐园Z0fY;i5|rule 3 permit ip destination 0Tcc J3c*|+rule 4 permit ip destination 0FHgl3A.N8r(Nrule 5 permit ip destination 0BSD爱好者乐园$HHRC.dvKk Arule 6 permit ip destination 0BSD爱好者乐园q(Rwd1n sU;Wt0Wrule 7 permit ip destination 0&SA$RlU4Xjrule 8 permit ip destination 53 0BSD爱好者乐园i*GPf.Mx1Pbacl number 3002BSD爱好者乐园u1k&AC -Horule 0 deny ipBSD爱好者乐园 s2f0N0ekA4H8b1jzUrule 1 permit ip source 55 destination 555YTzdRrule 2 deny ip source 55 destination 55BSD爱好者乐园N9n+tDSMkrule 3 permit tcp source 55 destination 0 destination-port eq wwwBSD爱好者乐园 X2.GI*H4pu)Kn2p|rule 4 permit ip source 55 destination 0F vZ#I$q Q7drule 5 permit ip source 0BSD爱好者乐园7t$ y3W7s9uXrule 6 permit ip source 0BSD爱好者乐园 IK;4n3|,Vrule 7 permit ip source 0BSD爱好者乐园d-pX9 f vrule 8 permit ip source 0BSD爱好者乐园 WmxEf;vacl number 3003$7bf vwZrule 0 deny ipBSD爱好者乐园#z7H.kO_Nvrule 1 permit ip source 55 destination 55BSD爱好者乐园,z;E8lJMgrule 2 deny ip source 55 destination 55BSD爱好者乐园IFq)lN lirule 3 permit tcp source 55 destination 0 destination-port eq www%Bm+rGkn!orule 4 permit ip source 55 destination 0u zL.M!o2 U%Rd,a Arule 5 permit ip source 55 destination 0tf%5Sa6?|+ITrule 6 permit ip source 55 destination 0&n0L9x+KPJBu arule 7 permit ip source 55 destination 0Qj%v)l|cx+Xrule 8 permit ip source 55 destination 00I/M G+,JP:Wdrule 9 permit ip source 55 destination 53 0OG%y.W8BI+F$?y)H3yd Urule 10 permit ip source 08C/g ctJj PBrule 11 permit ip source 04wK(g:Y2G,IW*Trule 12 permit ip source 0BSD爱好者乐园8 R/Z plrule 13 permit ip source 0P2NsP&u8S!hacl number 3004BSD爱好者乐园+Ik3B b8?SW8M5rule 0 deny ip& K R#Mc_Brule 1 permit ip source 55 destination 55BSD爱好者乐园Cjk KGMfDrule 2 permit tcp source 55 destination 0 destination-port eq www)J:#F Mh*I8#Frule 3 permit ip source 55 destination 0f3X6V.m2mxBjrule 4 permit ip source 55 destination 0EE)M )REX: wrule 5 permit ip source 55 destination 0i/MU$dF$hIrule 6 permit ip source 55 destination 0_7e$S.hWS#|8rule 7 permit ip source 55 destination 0BSD爱好者乐园l.jo;O5D0j g$C(L*Brule 8 permit ip source 55 destination 53 0BSD爱好者乐园!f Va6y!Trule 9 permit ip source 51 0J#i w y|!MU&MCrule 10 permit ip source 52 0/|o17LErule 11 permit ip source 53 0d f9T,R brule 12 permit ip source 55 destination 55BSD爱好者乐园 z3A kvjzi7Jdtacl number 3010$Uj*XTRnyrule 0 deny udp destination-port eq tftp+Wq;b7z3Orule 1 deny tcp destination-port eq 135mG!VU2n8%K&crule 2 deny udp destination-port eq 135a%Rf1ar ZYrule 3 deny udp destination-port eq netbios-nsG.l(m.N8c7cV)J$%Crule 4 deny udp destination-port eq netbios-dgmBSD爱好者乐园j7W_M7VM%vrule 5 deny tcp destination-port eq 139BSD爱好者乐园9Da;K3j.qdot%rule 6 deny udp destination-port eq netbios-ssnBSD爱好者乐园z&/O;L,wK8w,A*y3C|rule 7 deny tcp destination-port eq 445$G!g5n0A&Yt.bDrule 8 deny udp destination-port eq 445-VZD*j-F_up#BSD爱好者乐园7lMGv!lK8y Z qvlan 1z2l4S&F4te6v5#|hN:qM3Smr-avlan 2BSD爱好者乐园p(w6A4F A7E6Ch#BSD爱好者乐园+YaI(rQuWUQvlan 3Lq2u*wm0s# _2m&UTMW7Zvlan 4BSD爱好者乐园3h1ar)U T#(TT T/kvlan 5P&Tf8k8N&G _&q%w7o#BSD爱好者乐园$him#ZeBvlan 10,S Z8I3Y#aEvw#BSD爱好者乐园tuNe3U$|vlan 20m6g K4U+Ddescription XINGZHENG&DANGQUN/x.E O|NO:#A:UR|%?!bevYvlan 30BSD爱好者乐园Jkh udescription YINGXIAOBSD爱好者乐园,Sc#.ig#|0J.v.H5v*&x,fvlan 40BSD爱好者乐园(t+f j p,Nnz*ydescription SHENGCHANGBSD爱好者乐园$oeaS(s&aJD#l X#j.finterface Vlan-interface1i 9PHB8cN ogdescription NETWORK DEVICE MANAGE DOMAINBSD爱好者乐园3y$ IrMip address 9 40sL:$# i.x#,Tz A%eo5w Pminterface Vlan-interface2BSD爱好者乐园:tO6L:I$ie M8Ledescription jienenJeE MyI1ip address 54 V2op _$_,y5k?s#yof#?;wn(blAinterface Vlan-interface30uO%Q|description kefuBSD爱好者乐园5;l1x#z#e#vip address 54 p9k7jNZ0w+F ?#)peQ,k;U2nvM;binterface Vlan-interface4BSD爱好者乐园&v KY)j#L m0BBdescription gongdiansou?mTl9e k0lOdZip address 54 BSD爱好者乐园,w3k)bD0aLVdhcp-server 1BSD爱好者乐园i m#SvX&u#BSD爱好者乐园XX A4k.hVinterface Vlan-interface5BSD爱好者乐园 f9Q|hdwa .Hdescription caiwu and xunxingongqutx_4?ip address 54 N0z/X6TAip address 54 subBSD爱好者乐园)W|lDJ9f#BSD爱好者乐园s;l m VTOkinterface Vlan-interface10BSD爱好者乐园O iP/B4aodescription SERVER DOMAINBSD爱好者乐园h(lr,t gip address 4 40BSD爱好者乐园iyE&X8nsCT#fE2S8J y-Jetinterface Vlan-interface20X TYgEBdescription XIANGZHENG&DANGQUNBSD爱好者乐园#bFaJa%rJ%Pip address 2 24BSD爱好者乐园8E:D$Uc$hu0r#&pDOBQ!Vyointerface Vlan-interface30BSD爱好者乐园J&JHP.i3lLdescription YINGXIAOBSD爱好者乐园 Rs,rjUV:n_-.Y Zip address 26 92%h9A CF+o7NI l E#BSD爱好者乐园Z/sl!i%|interface Vlan-interface407KM!C+Hdescription SHENGCHANGBSD爱好者乐园0q4Xo7x1r4grip address 54 28,x;Ug!t%5LhF2t#j4Hg GPeo?interface Aux0/0/0BSD爱好者乐园-P+sS4M+P#3Ws;|u,XFinterface M-Ethernet0/0/0STTj:JBgE qE#.P+sB*sxinterface GigabitEthernet0/0/1BSD爱好者乐园Fo8d |Bport link-type trunk,l-B)P)Bzw$j;a%Q9gkport trunk permit vlan allBSD爱好者乐园:-r1J8QW4E#S(Gc8M9pOKinterface GigabitEthernet0/0/2!rK4o?dDFX3A#BSD爱好者乐园!U1f&vcIWVV2interface GigabitEthernet0/0/3+c%e%Aport link-type trunkM2BK(C Yport trunk permit vlan allBSD爱好者乐园z2y)v?.dXzqosBSD爱好者乐园8pK r EKpacket-filter inbound ip-group 3003 rule 0 system-index 233Qx#CU$W*spacket-filter inbound ip-group 3003 rule 1 system-index 24BSD爱好者乐园.M9mdpacket-filter inbound ip-group 3003 rule 2 system-index 25+dO i3 r$Npacket-filter inbound ip-group 3003 rule 3 system-index 26+_ O9;o)g.i.(apacket-filter inbound ip-group 3003 rule 4 system-index 27,C3YG(s#tC9packet-filter inbound ip-group 3003 rule 5 system-index 28;K!G3iyQ!t1fpacket-filter inbound ip-group 3003 rule 6 system-index 29BSD爱好者乐园DA+LV;Vl5sy9Zpacket-filter inbound ip-group 3003 rule 7 system-index 30BSD爱好者乐园4_ F4FHw_&Txpacket-filter inbound ip-group 3003 rule 8 system-index 31y,NR%u2I8XEpacket-filter inbound ip-group 3003 rule 9 system-index 32BSD爱好者乐园)ANY!C5|#$X-5C SUpacket-filter inbound ip-group 3003 rule 10 system-index 33:n)R!z.?3yH i*fpacket-filter inbound ip-group 3003 rule 11 system-index 34BSD爱好者乐园(T#C&|4!_t.gpacket-filter inbound ip-group 3003 rule 12 system-index 35ay+4H1MPpacket-filter inbound ip-group 3003 rule 13 system-index 36eX|f/Q22U#QC7I0t*zinterface GigabitEthernet0/0/44z_Zd|%tfz3rport access vlan 5BSD爱好者乐园4|o4PU#HR-T$#BSD爱好者乐园.gQ4wP7h tR Yodinterface GigabitEthernet0/0/5T1t8kxc0_.N5oD#pP)w#g&zinterface GigabitEthernet0/0/6BSD爱好者乐园m+V zA1Mk r)hgport link-type trunkBSD爱好者乐园 K/G;HCPzL-YosXport trunk permit vlan allBSD爱好者乐园$7Jnn*d1vB+B:Q(e%qos#FSd,vG#cypacket-filter inbound ip-group 3000 rule 0 system-index 55cp4V/?packet-filter inbound ip-group 3000 rule 1 system-index 56BSD爱好者乐园RgD/D7_);Zzpacket-filter inbound ip-group 3000 rule 2 system-index 57BSD爱好者乐园R2SYyZ%_ r;hpacket-filter inbound ip-group 3000 rule 3 system-index 58SEU!m$Mq Vx3opacket-filter inbound ip-group 3000 rule 4 system-index 59&wt(E*Ir lpacket-filter inbound ip-group 3000 rule 5 system-index 60f e4pr yd/tfpacket-filter inbound ip-group 3000 rule 6 system-index 61BSD爱好者乐园? V,IA packet-filter inbound ip-group 3000 rule 7 system-index 62B pp(xC4_(O7aqpacket-filter inbound ip-group 3000 rule 8 system-index 63!(N ob-V#qK|Sg0.e V+AEinterface GigabitEthernet0/0/7k %Cj O-lport link-type trunkBSD爱好者乐园TN, znSXport trunk permit vlan allKxD*dFqosBSD爱好者乐园 iX/T2qpacket-filter inbound ip-group 3000 rule 0 system-index 64V$l8Q&t4d*packet-filter inbound ip-group 3000 rule 1 system-index 65v2Xe_7Cd: Kpacket-filter inbound ip-group 3000 rule 2 system-index 66J6E)QGzpacket-filter inbound ip-group 3000 rule 3 system-index 67BSD爱好者乐园ky5Iz:O9w:DATzvjpacket-filter inbound ip-group 3000 rule 4 system-index 682A1Asw|2|packet-filter inbound ip-group 3000 rule 5 system-index 69BSD爱好者乐园/Xhzd$M+s(Xspacket-filter inbound ip-group 3000 rule 6 system-index 70BSD爱好者乐园H1qDa5Gpacket-filter inbound ip-group 3000 rule 7 system-index 71BSD爱好者乐园!js1!lyGe;ipacket-filter inbound ip-group 3000 rule 8 system-index 72G gY/g6V P p#BSD爱好者乐园o6|9D Sd8x_interface GigabitEthernet0/0/8BSD爱好者乐园!F0K Lf#Q#o-PI+r#BSD爱好者乐园nRwh3_f L.r#?Binterface GigabitEthernet0/0/9BSD爱好者乐园wO.z9M!TP)k(I6uport link-type trunk5H2P$YRf9Z&hport trunk permit vlan allBSD爱好者乐园R+N-b9y:5in?qosBSD爱好者乐园y5V:C-a Epacket-filter inbound ip-group 3000 rule 0 system-index 73BSD爱好者乐园;l!Mj)5w;fq3_packet-filter inbound ip-group 3000 rule 1 system-index 74BSD爱好者乐园7i#J0N/a2l packet-filter inbound ip-group 3000 rule 2 system-index 75BSD爱好者乐园;kS8|!OT v,#T/k$hpacket-filter inbound ip-group 3000 rule 3 system-index 76w lC w S gpacket-filter inbound ip-group 3000 rule 4 system-index 771uxg _/h(lSqpacket-filter inbound ip-group 3000 rule 5 system-index 78BSD爱好者乐园;k ?z6pb-udpacket-filter inbound ip-group 3000 rule 6 system-index 79Rn7j%r2packet-filter inbound ip-group 3000 rule 7 system-index 80#w%N9mKy&YV4f#Epacket-filter inbound ip-group 3000 rule 8 system-index 81BSD爱好者乐园.r-n&pB O#BSD爱好者乐园|vC)F(Cb iinterface GigabitEthernet0/0/10BSD爱好者乐园Y:w6Z,m_port link-type trunkBSD爱好者乐园9i3i/_Gedport trunk permit vlan allBSD爱好者乐园&p!shRrqosBSD爱好者乐园C$w8s/ippacket-filter inbound ip-group 3000 rule 0 system-index 82;k$Mu(UYpacket-filter inbound ip-group 3000 rule 1 system-index 83BSD爱好者乐园Z3R#Kwn+bo r:d+packet-filter inbound ip-group 3000 rule 2 system-index 84BSD爱好者乐园 w Y-ah+spacket-filter inbound ip-group 3000 rule 3 system-index 85BSD爱好者乐园fw)U1w+rB y yNpacket-filter inbound ip-group 3000 rule 4 system-index 86tNZ+x3a$Jpacket-filter inbound ip-group 3000 rule 5 system-index 87BSD爱好者乐园k bzC-P$f t? Vpacket-filter inbound ip-group 3000 rule 6 system-index 88jxUXipacket-filter inbound ip-group 3000 rule 7 system-index 89BSD爱好者乐园D7V1c$I&Y/R2X*r)cpacket-filter inbound ip-group 3000 rule 8 system-index 90BSD爱好者乐园;g0q cG,Xw2PyC#F mlc2vf*,einterface GigabitEthernet0/0/11BSD爱好者乐园Q6tvT1n(X0Bport link-type trunkBSD爱好者乐园d7hA|nport trunk permit vlan allBSD爱好者乐园)eXQ2m T tqosW2d8sCz#packet-filter inbound ip-group 3000 rule 0 system-index 91MkC$EZV.xpacket-filter inbound ip-group 3000 rule 1 system-index 92n9ayWu(Y5s7k(Upacket-filter inbound ip-group 3000 rule 2 system-index 93BSD爱好者乐园I4U4km)|j packet-filter inbound ip-group 3000 rule 3 system-index 94DO+Nq5I3v;Wpacket-filter inbound ip-group 3000 rule 4 system-index 95BSD爱好者乐园taFeJ)Y6Fpacket-filter inbound ip-group 3000 rule 5 system-index 96BSD爱好者乐园 l R80 Wpacket-filter inbound ip-group 3000 rule 6 system-index 97;2V Q|2Pb$kpacket-filter inbound ip-group 3000 rule 7 system-index 98BSD爱好者乐园1BI9C4y H r(0Spacket-filter inbound ip-group 3000 rule 8 system-index 995VDakF DA%bOL_#c8e uJ8X Ninterface GigabitEthernet0/0/12BSD爱好者乐园Y8H u fOe-vport access vlan 2BSD爱好者乐园sxUg!c1s f-v.YqosBSD爱好者乐园/lr%a1Ea3tpacket-filter inbound ip-group 3002 rule 0 system-index 1*W b1uI3Ga0N.Rpacket-filter inbound ip-group 3002 rule 1 system-index 2d pkH xlpacket-filter inbound ip-group 3002 rule 2 system-index 3BSD爱好者乐园i+i6vA9Kpacket-filter inbound ip-group 3002 rule 3 system-index 4Ygao6g3q&*_packet-filter inbound ip-group 3002 rule 4 system-index 52m,Ml$p2a#R7m:x$O)H*packet-filter inbound ip-group 3002 rule 5 system-index 66O:sdwtpacket-filter inbound ip-group 3002 rule 6 system-index 77L#_4ohxjKSpacket-filter inbound ip-group 3002 rule 7 system-index 8BSD爱好者乐园1mG#ix ae(Kwpacket-filter inbound ip-group 3002 rule 8 system-index 9Q u0IE#BSD爱好者乐园3s4 sHFDinterface GigabitEthernet0/0/13$jsrsport link-type trunkp U%Q;iZq3e8Tport trunk permit vlan allBSD爱好者乐园 M H(I$?F&e#BSD爱好者乐园GJcx6XGm8linterface GigabitEthernet0/0/14BSD爱好者乐园4Y1p8t Ru6V6vEilFport link-type trunkBSD爱好者乐园mnHf u/uULmport trunk permit vlan all(P%v0MB#|qosBSD爱好者乐园 k6t3m3A Irpacket-filter inbound ip-group 3004 rule 0 system-index 10E Y hU!HNxpacket-filter inbound ip-group 3004 rule 1 system-index 11D dQZ5QscSpacket-filter inbound ip-group 3004 rule 2 system-index 12)3oov iV%Ewtpacket-filter inbound ip-group 3004 rule 3 system-index 13 Izu h6Qpacket-filter inbound ip-group 3004 rule 4 system-index 14BSD爱好者乐园xE6P4hJpacket-filter inbound ip-group 3004 rule 5 system-index 15BSD爱好者乐园 Zar (GM!H7?packet-filter inbound ip-group 3004 rule 6 system-index 16BSD爱好者乐园uN +L$r(tpacket-filter inbound ip-group 3004 rule 7 system-index 17BSD爱好者乐园$ lWi v vpacket-filter inbound ip-group 3004 rule 8 system-index 18BSD爱好者乐园9x0i_,_y%Ppacket-filter inbound ip-group 3004 rule 9 system-index 19%oN*?R-1packet-filter inbound ip-group 3004 rule 10 system-index 20h5RW%R SApacket-filter inbound ip-group 3004 rule 11 system-index 21BSD爱好者乐园5iJQsd6/vpacket-filter inbound ip-group 3004 rule 12 system-index 227No5P#v,;Q6T6KC0pinterface GigabitEthernet0/0/15# Al Sh9I0d8S1Qd6Oport link-type trunkBSD爱好者乐园4D9pn!i7_0wport trunk permit vlan allhBP!Q&?(tjWqos:h$A;zQczpacket-filter inbound ip-group 3000 rule 0 system-index 46S0VR EE(iDpacket-filter inbound ip-group 3000 rule 1 system-index 47BSD爱好者乐园i/HQ56pj#Y npacket-filter inbound ip-group 3000 rule 2 system-index 48BSD爱好者乐园7pW69Ha Ivpacket-filter inbound ip-group 3000 rule 3 system-index 49%o+ O|Mlpacket-filter inbound ip-group 3000 rule 4 system-index 50BSD爱好者乐园M)Lxy73_Apacket-filter inbound ip-group 3000 rule 5 system-index 51JZ?.cZNpacket-filter inbound ip-group 3000 rule 6 system-index 525N%R:o p:gwKpacket-filter inbound ip-group 3000 rule 7 system-index 53Aas*a.M&d Apacket-filter inbound ip-group 3000 rule 8 system-index 54BSD爱好者乐园Cx f+u!Z!mYX#;b%tpu#BI-y zinterface GigabitEthernet0/0/16)mK9Si0Zport link-type trunkBSD爱好者乐园,A I PPE ij*port trunk permit vlan allBSD爱好者乐园!cM2ew| Z*s$uqos1n8HE5w GYpacket-filter inbound ip-group 3010 rule 0 system-index 37VI:BqJ$k9fRpacket-filter inbound ip-group 3010 rule 1 system-index 381?-iiL