H3C三层网络设备组网实例

H3C三层网络设备组网实例自己新手实验。1. 设备名称：7506，30-20，1000，5800，51202. 拓扑图：7506设备：assword:su Password:User privilege level is 3, and only those commands can be usedwhose level is equal or less than this.Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGEsysSystem View: return to User View with Ctrl+Z.7506Edis cu# version 5.20, Release 6616P05# sysname 7506E# super password level 3 cipher Q:YST8.1SQ=QMAF41!# domain default enable system# telnet server enable#switch-mode standardswitch-mode normal slot 2#vlan 1#vlan 2 to 100#domain system access-limit disable state active idle-cut disable self-service-url disable#user-group system#local-user admin password cipher 7-CZB#/YXKQ=QMAF41!#interface NULL0#interface Vlan-interface1 ip address #interface Vlan-interface50 description cunchu ip address 00 #interface Vlan-interface51 description fuwuqi-1 ip address 00 #interface Vlan-interface52 description fuwuqi-2 ip address 00 #interface Vlan-interface53 description fuwuqi-3 ip address 00 #interface Vlan-interface54 description fuwuqi-4 ip address 00 #interface Vlan-interface60 description link-F1000 ip address #interface Vlan-interface61 description link-3020 ip address #interface Vlan-interface100 ip address #interface GigabitEthernet2/0/1 port link-mode bridge description link-cuncu-AS112 port access vlan 50#interface GigabitEthernet2/0/2 port link-mode bridge#interface GigabitEthernet2/0/3 port link-mode bridge description link5800 port link-type trunk port trunk permit vlan all#interface GigabitEthernet2/0/4 port link-mode bridge#interface GigabitEthernet2/0/5 port link-mode bridge description link-F1000 port access vlan 60#interface GigabitEthernet2/0/6 port link-mode bridge#interface GigabitEthernet2/0/7 port link-mode bridge description link-hujiao251 port access vlan 100#interface GigabitEthernet2/0/8 port link-mode bridge description link-hujiao252 port access vlan 100#interface GigabitEthernet2/0/9 port link-mode bridge description link-hujiao-switch port access vlan 100#interface GigabitEthernet2/0/10 port link-mode bridge#interface GigabitEthernet2/0/11 port link-mode bridge description link-fuwu-2 port access vlan 52#interface GigabitEthernet2/0/12 port link-mode bridge#interface GigabitEthernet2/0/13 port link-mode bridge description link-fuwu-4 port access vlan 54#interface GigabitEthernet2/0/14 port link-mode bridge#interface GigabitEthernet2/0/15 port link-mode bridge description link-fuwu-1 port access vlan 51#interface GigabitEthernet2/0/16 port link-mode bridge#interface GigabitEthernet2/0/17 port link-mode bridge description link-fuwu-3 port access vlan 53#interface GigabitEthernet2/0/18 port link-mode bridge#interface GigabitEthernet2/0/19 port link-mode bridge description link-Router-3020 port access vlan 61#interface GigabitEthernet2/0/20 port link-mode bridge#interface GigabitEthernet2/0/21 port link-mode bridge#interface GigabitEthernet2/0/22 port link-mode bridge#interface GigabitEthernet2/0/23 port link-mode bridge#interface GigabitEthernet2/0/24 port link-mode bridge#interface M-Ethernet0/0/0# ip route-static ip route-static # load xml-configuration#user-interface aux 0user-interface vty 0 4 set authentication password cipher 7-CZB#/YXKQ=QMAF41!user-interface vty 5 15#return7506E路由器30-2030-20dis cu# version 5.20, Release 2311, Basic# sysname 30-20# super password level 3 cipher $c$3$apM+A/lCx636wxYJ0rlpXolz4RRPAw=# domain default enable system# telnet server enable# dar p2p signature-file cfa0:/p2p_default.mtd# port-security enable# undo ip http enable#vlan 1#domain system access-limit disable state active idle-cut disable self-service-url disable#user-group system group-attribute allow-guest#local-user admin password cipher $c$3$ZhkT3JGOKb/CIzZtOUajo6+gUE1BHA= authorization-attribute level 3 service-type telnet#interface Aux0 async mode flow link-protocol ppp#interface Cellular0/0 async mode protocol link-protocol ppp#interface NULL0#interface GigabitEthernet0/0 port link-mode route description link-1000 speed 1000 ip address #interface GigabitEthernet0/1 port link-mode route description link-7506 ip address # ip route-static ip route-static # load xml-configuration#user-interface con 0user-interface tty 13user-interface aux 0user-interface vty 0 4 authentication-mode scheme set authentication password cipher $c$3$Ble0bHzUESE3MET33Y2jGYDh0zt3sg=#return30-20防火墙1000F1000F1000dis cu# sysname F1000# firewall packet-filter enable firewall packet-filter default permit# firewall statistic system enable#radius scheme system server-type extended#domain system#local-user admin password cipher 7-CZB#/YXKQ=QMAF41!#interface Aux0 async mode flow#interface GigabitEthernet0/0#interface GigabitEthernet0/1 speed 1000 description link-3020 ip address #interface GigabitEthernet1/0#interface GigabitEthernet1/1 description link-7506-5 ip address #interface Encrypt2/0#interface NULL0#firewall zone local set priority 100#firewall zone trust add interface GigabitEthernet0/1 add interface GigabitEthernet1/1 set priority 85#firewall zone untrust add interface GigabitEthernet0/0 add interface Giga