S7506E三层交换机配置

1、精品文档* Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed.*Login authenticationUsername:adminPassword:<7506E>di cur#version 5.20, Release 6305#sysname 7506E#domain def

2、ault enable system#telnet server enable#ip ttl-expires enableip unreachables enable#port-security enable#loopback-detection enable#mirroring-group 1 localmirroring-group 2 local# switch-mode standard acl number 3010description to UTM200rule 0 permit ip source 192.168.128.0 0.0.15.255 rule 1 permit i

3、p source 192.168.160.0 0.0.31.255 acl number 3011rule 0 permit ip source 192.168.34.0 0.0.0.255rule 1 permit ip source 192.168.37.0 0.0.0.255rule 2 permit ip source 192.168.31.0 0.0.0.255 rule 3 permit ip source 192.168.39.0 0.0.0.255 rule 4 permit ip source 192.168.254.0 0.0.0.255 acl number 3500#v

4、lan 1#vlan 2 to 2221#vlan 2222description wireless_guest#vlan 2223 to 2500#vlan 3000description test#vlan 3901description dianxin ap#vlan 3902 description test vlan 3985description dhcp for temp guest meeting supervlansubvlan 36#vlan 3986description dianxin wirelesssupervlansubvlan 3901#vlan 3987des

5、cription huisuo vlan 33supervlansubvlan 33#vlan 3988description wirelesssupervlansubvlan 2222#vlan 3989supervlansubvlan 3 to 29#vlan 3990supervlansubvlan 1226 to 1250#vlan 3991supervlan subvlan 1200 to 1225#vlan 3992supervlansubvlan 100 to 111#vlan 3993supervlansubvlan 1032 to 1150#vlan 3994supervla

6、nsubvlan 911 to 1031#vlan 3995supervlansubvlan 791 to 910#vlan 3996supervlansubvlan 351 to 421 747 to 790#vlan 3997supervlansubvlan 231 to 350#vlan 3998supervlansubvlan 112 to 2304欢迎。下载精品文档vlan 3999description to UTM200#vlan 4000 to 4001#ftth#domain systemaccess-limit disablestate activeidle-cut dis

7、ableself-service-url disable#traffic classifier kefang operator andif-match acl 3010traffic classifier denyvlanclass operator andif-match acl 3500#traffic behavior kefangredirect next-hop 192.168.145.2traffic behavior dengvlanfilter deny#qos policy kefangclassifier kefang behavior kefangqos policy d

8、enyvlanclassifier denyvlanclass behavior dengvlan#dhcp server ip-pool 39855欢迎。下载精品文档network 192.168.36.0 mask 255.255.255.0 gateway-list 192.168.36.254dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 8#dhcp server ip-pool 3986network 192.168.160.0 mask 255.255.224.0 gateway-list 192.1

9、68.160.1dns-list 202.96.128.86 8.8.8.8 202.96.128.166expired day 0 hour 2#dhcp server ip-pool 3987network 192.168.33.0 mask 255.255.255.0gateway-list 192.168.33.254dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 8#dhcp server ip-pool 3988network 192.168.142.0 mask 255.255.254.0 gatew

10、ay-list 192.168.142.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 4#dhcp server ip-pool 3989network 192.168.140.0 mask 255.255.254.0gateway-list 192.168.140.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 4#network 192.168.138.0 mask 255.255.254.0 gateway-list 192

11、.168.138.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 4#dhcp server ip-pool 3991network 192.168.136.0 mask 255.255.254.0 gateway-list 192.168.136.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 4#dhcp server ip-pool 3992network 192.168.134.0 mask 255.255.254.0 ga

12、teway-list 192.168.134.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 4#dhcp server ip-pool 3993network 192.168.132.128 mask 255.255.255.128 gateway-list 192.168.132.129dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 4#dhcp server ip-pool 3994network 192.168.132.0 m

13、ask 255.255.255.128gateway-list 192.168.132.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8expired day 0 hour 4#dhcp server ip-pool 39957欢迎。下载精品文档network 192.168.131.128 mask 255.255.255.128 gateway-list 192.168.131.129dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4#dhcp server ip-

14、pool 3996network 192.168.131.0 mask 255.255.255.128 gateway-list 192.168.131.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4#dhcp server ip-pool 3997network 192.168.130.128 mask 255.255.255.128 gateway-list 192.168.130.129dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day

15、0 hour 4#dhcp server ip-pool 3998network 192.168.130.0 mask 255.255.255.128 gateway-list 192.168.130.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4#dhcp server ip-pool 3999#local-user adminpassword cipher _PWRO>8'4.DN#U3;6Q! service-type telnetlevel 3#8欢迎。下载精品文档stp instan

16、ce 0 root primary stp enable#monitor-link group 1#interface NULL0#interface Vlan-interface1ip address 192.168.39.2 255.255.255.0#interface Vlan-interface2ip address 192.168.31.227 255.255.255.0#interface Vlan-interface30ip address 192.168.30.254 255.255.255.0#interface Vlan-interface32ip address 192

17、.168.32.254 255.255.255.0#interface Vlan-interface34ip address 192.168.34.254 255.255.255.0#interface Vlan-interface35ip address 192.168.35.254 255.255.255.0#interface Vlan-interface37ip address 192.168.37.254 255.255.255.0#interface Vlan-interface38 ip address 192.168.38.254 255.255.255.0 interface

18、 Vlan-interface3985ip address 192.168.36.254 255.255.255.0#interface Vlan-interface3986 （分配网关 ）ip address 192.168.160.1 255.255.224.0 local-proxy-arp enable#interface Vlan-interface3987ip address 192.168.33.254 255.255.255.0#interface Vlan-interface3988ip address 192.168.142.1 255.255.254.0#interfac

19、e Vlan-interface3989ip address 192.168.140.1 255.255.254.0local-proxy-arp enable#interface Vlan-interface3990ip address 192.168.138.1 255.255.254.0 local-proxy-arp enable#interface Vlan-interface3991ip address 192.168.136.1 255.255.254.0local-proxy-arp enable#interface Vlan-interface3992ip address 1

20、92.168.134.1 255.255.254.0 local-proxy-arp enable#10欢。迎下载精品文档interface Vlan-interface3993 ip address 192.168.132.129 255.255.255.128local-proxy-arp enable#interface Vlan-interface3994ip address 192.168.132.1 255.255.255.128local-proxy-arp enable#interface Vlan-interface3995ip address 192.168.131.129

21、 255.255.255.128local-proxy-arp enable#interface Vlan-interface3996ip address 192.168.131.1 255.255.255.128local-proxy-arp enable#interface Vlan-interface3997ip address 192.168.130.129 255.255.255.128local-proxy-arp enable#interface Vlan-interface3998ip address 192.168.130.1 255.255.255.128local-pro

22、xy-arp enable#interface Vlan-interface3999description to UTM200ip address 192.168.145.1 255.255.255.0#interface Vlan-interface4000 description to f1000-s11欢。迎下载精品文档ip address 192.168.254.1 255.255.255.0 #interface Vlan-interface4001ip address 192.168.254.101 255.255.255.252#interface GigabitEthernet

23、2/0/1port link-type trunkport trunk permit vlan 1 to 3984 3999 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/2port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/3port link-type trunkport trunk permit vla

24、n 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/4port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/6 port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094 qos apply policy kef

25、ang inbound#interface GigabitEthernet2/0/7port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/8port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/9port

26、 link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/10port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet2/0/11port link-type trunkport trunk permit vlan 1 to

27、3984 4000 to 4094qos apply policy kefang inbound#13欢。迎下载精品文档interface GigabitEthernet2/0/12 port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet3/0/1port access vlan 4000qos apply policy kefang inbound#interface GigabitEthernet3/0

28、/2port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 3 to 29 39 50 to 99 101 to 3984 4001 to 4094 port trunk pvid vlan 39qos apply policy kefang inboundmirroring-group 1 mirroring-port both#interface GigabitEthernet3/0/3port access vlan 2qos apply policy kefang inbound#interface

29、 GigabitEthernet3/0/4port access vlan 1227qos apply policy kefang inboundmirroring-group 2 monitor-port#interface GigabitEthernet3/0/5port access vlan 3901qos apply policy kefang inbound#14欢。迎下载精品文档interface GigabitEthernet3/0/6 port access vlan 8#interface GigabitEthernet3/0/7 port access vlan 3999

30、 description to UTM-200_G 0/0 qos apply policy kefang inbound #interface GigabitEthernet3/0/8 port access vlan 8 qos apply policy kefang inbound #interface GigabitEthernet3/0/9 port access vlan 2 stp edged-port enable qos apply policy kefang inbound #interface GigabitEthernet3/0/10 port access vlan

31、2 stp edged-port enable qos apply policy kefang inbound #interface GigabitEthernet3/0/11 port access vlan 2 stp edged-port enable qos apply policy kefang inbound #interface GigabitEthernet3/0/12 port access vlan 2qos apply policy kefang inbound # interface GigabitEthernet3/0/13 port access vlan 2 st

32、p edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/14 port access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/15 port access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/16

33、port access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/17 port access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/18 port access vlan 2qos apply policy kefang inbound # interface GigabitEthernet3/0/19 po

34、rt access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/20 port access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/21 port access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface Gig

35、abitEthernet3/0/22 port access vlan 2 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/23 port access vlan 35 stp edged-port enable qos apply policy kefang inbound # interface GigabitEthernet3/0/24 port access vlan 34stp edged-port enable15欢。迎下载精品文档qos apply polic

36、y kefang inbound #interface GigabitEthernet3/0/25port access vlan 2stp edged-port enableqos apply policy kefang inbound#interface GigabitEthernet3/0/26port access vlan 2stp edged-port enableqos apply policy kefang inbound#interface GigabitEthernet3/0/27port link-type trunkport trunk permit vlan 1 to

37、 3984 4000 to 4094 qos apply policy kefang inbound mirroring-group 1 monitor-port#interface GigabitEthernet3/0/28port access vlan 2qos apply policy kefang inbound#interface GigabitEthernet3/0/29port access vlan 29qos apply policy kefang inbound#interface GigabitEthernet3/0/30port link-type trunkport

38、 trunk permit vlan 1 to 3984 4000 to 4094 qos apply policy kefang inbound interface GigabitEthernet3/0/31 port access vlan 4000 qos apply policy kefang inbound #interface GigabitEthernet3/0/32 port access vlan 2 qos apply policy kefang inbound #interface GigabitEthernet3/0/33 port access vlan 2 qos

39、apply policy kefang inbound #interface GigabitEthernet3/0/34 port access vlan 2 qos apply policy kefang inbound #interface GigabitEthernet3/0/35 port access vlan 2 qos apply policy kefang inbound #interface GigabitEthernet3/0/36 port access vlan 2 qos apply policy kefang inbound #interface GigabitEt

40、hernet3/0/37 port access vlan 37 qos apply policy kefang inbound # interface GigabitEthernet3/0/38 port access vlan 2 qos apply policy kefang inbound #interface GigabitEthernet3/0/39 port access vlan 37 qos apply policy kefang inbound #interface GigabitEthernet3/0/40 port access vlan 2 qos apply pol

41、icy kefang inbound #interface GigabitEthernet3/0/41 port access vlan 2 stp disable stp loop-protectionqos apply policy kefang inbound #interface GigabitEthernet3/0/42 port access vlan 2 qos apply policy kefang inbound #interface GigabitEthernet3/0/43 port access vlan 2 qos apply policy kefang inboun

42、d #interface GigabitEthernet3/0/44 port access vlan 34qos apply policy kefang inbound # interface GigabitEthernet3/0/4517欢。迎下载精品文档port access vlan 2 qos apply policy kefang inbound#interface GigabitEthernet3/0/46port access vlan 35qos apply policy kefang inbound#interface GigabitEthernet3/0/47port l

43、ink-type trunkport trunk permit vlan 1 30qos apply policy kefang inbound#interface GigabitEthernet3/0/48port access vlan 34qos apply policy kefang inbound#interface GigabitEthernet4/0/1port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitE

44、thernet4/0/2port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/3port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound18欢。迎下载精品文档#interface GigabitEthernet4/0/10port link-type trunkpo

45、rt trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/5port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/6port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos

46、 apply policy kefang inbound#interface GigabitEthernet4/0/7port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/8port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface Gigabit

47、Ethernet4/0/11port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/12port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/13port link-type trunkport trunk

48、 permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/14port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/15port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply

49、 policy kefang inbound20欢。迎下载精品文档#interface GigabitEthernet4/0/22port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/17port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface

50、GigabitEthernet4/0/18port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/19port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/20port link-type trunkpor

51、t trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/23port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/24port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qo

52、s apply policy kefang inbound#interface GigabitEthernet4/0/25port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/26port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface Giga

53、bitEthernet4/0/27port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound22欢。迎下载精品文档#interface GigabitEthernet4/0/34port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/29port link-type t

54、runkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/30port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/31port link-type trunkport trunk permit vlan 1 to 3984 4000 to

55、 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/32port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/35port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/36port link-type trunkport trunk permit vlan 1 to 3984 4000 to 4094qos apply policy kefang inbound#interface GigabitEthernet4/0/37port link-type trunkport trunk permit vlan 1 to 3984 4000 t