H3C设备组网详细配置步骤.doc

H3C MSR 30-201台带冗余电源H3C S7502C 1台H3C S5100 1台H3C S3100 2台多模模块 N个多模光纤 N个跳线 N根电脑 3台（2台1笔）配置步骤:1.端口设置及端口捆绑1.1在3L和2L上设置以下命令:interface Ethernet 0/2 to Ethernet 0/3speed 100duplex fullport link-type trunkport trunk permit vlan all#link-aggregation Ethernet 0/2 to Ethernet 0/3 both2.GVRP配置2.1在3L上和2L上设置system-view#gvrp /设备开启gvrp功能#interface ethernet 0/2 to ethernet 0/3gvrp /在trunk端口上开启gvrp3.VLAN设置3.1在3L上设置Vlan 2市场部#Vlan 3工程部#Vlan 4服务器3.2在2L上设置interface Ethernet 0/8Port access vlan 3#interface Ethernet 0/9Port access vlan 2#interface ethernet 0/4 to ethernet 0/5 /3L上设置端口加服务器vlanPort access vlan 44.三层交换实现Vlan互通4.1在3L上设置interface vlan-interface 1 /网管Vlanip address undo shutdown#interface vlan-interface 2 /市场Vlanip address undo shutdown#interface vlan-interface 3 /工程vlanip address undo shutdown#interface vlan-interface 4 /服务器vlanip address undo shutdown5.三层交换机和路由器互通5.1在3L上设置Interface vlan-interface 100Ip address Undo shutdown#Ip route-static /指向路由器的默认路由5.2在路由器上设置Interface Ethernet 0/0Ip address Undo shutdown#Ip route-static /超网路由,指向所有vlan的回程路由#Ip route-static /指向ISP的默认路由器6.ACL限制vlan2和vlan3互访6.1在三层交换机上设置acl number 3000rule 0 denyip source 55 destination 55rule 1 permitip6.2在vlan2的三层接口上设置Interface vlan-interface 2packet-filterinbound ip-group 30007.三层交换机做DHCP服务器7.1在3L上设置dhcp server ip-pool vlan2network mask gateway-list domain-name dns-list dhcp server forbidden-ip #dhcp server ip-pool vlan3network mask gateway-list domain-name dns-list dhcp server forbidden-ip 7.2在3L的vlan2和vlan3三层接口上设置interface vlan-interface 2dhcp select global#interface vlan-interface 3dhcp select global8.STP设置8.1在3L上设置stp root primaryinterface ethernet 0/10 to ethernet 0/24set root-protenction /在指定端口启用根保护功能(根网桥上所有端口都是指定端口)8.2在2L上设置stp enableinterface ethernet 0/1 to Ethernet 0/24stp disable /在交换机连PC端口关闭stp功能9.路由器做NAT9.1在路由器上设置acl number 2000 /配置允许进行NAT转换的内网地址段/rule 0 permit source 55rule 1 deny#interface Ethernet0/1 /外网接口/ip address 48nat outbound 2000interface Ethernet0/0ip address /内网网关/10.发布内网服务器10.1在路由器上设置nat server protocol tcp global inside nat server protocol tcp global inside 11.网络设置telnet设置11.1在三层交换机和路由器上设置telnetuser-interface vty 0authentication-mode passwordset authentication password simple ly-benetuser privilege level 3protocol inbound telnetidle-timeout 611.2在2L上设置telnet和管理ip地址Interface vlan-interface 1Ip address Undo shutdown#user-interface vty 0authentication-mode passwordset authentication password simple ly-benetuser privilege level 3protocol inbound telnetidle-timeout 612.网络设备安全设置12.1关闭没有使用的端口Interface Ethernet 0/10 to Ethernet 0/24Undo shutdwon12.2设置console口令user-interface aux 0authentication-mode passwordset authentication password simple ly-benetuser privilege level 3idle-timeout 512.3设置服务器IP,MA