华为S8505配置脚本实例(共9页)

1、# sysname SY-SFJ-BS.MAN.S8505-1# super password level 3 cipher %#EGO)&GUKZY_G5DK+1!# local-server nas-ip key huawei# info-center loghost # Xbar load-single# router route-limit 128K router VRF-limit 256# ip http directory# link-aggregation group 1 mode manual link-aggregation group 1 description uT:Y

2、CSY-232-BAS.MAN.ME60-2 link-aggregation group 2 mode manual link-aggregation group 2 description uT:YCSY-235-BAS.MAN.ME60-2 link-aggregation group 3 mode manual link-aggregation group 3 description uT:YCSY-232-BAS.MAN.ME60-1:() link-aggregation group 4 mode manual link-aggregation group 4 descriptio

3、n uT:YCSY-235-BAS.MAN.ME60-1:() link-aggregation group 17 mode manual link-aggregation group 17 description dT:YCSY-FNCW-OLT.MAN.C300-1 link-aggregation group 18 mode manual link-aggregation group 18 description dT:YCSY-ZTCW-OLT.MAN.C300-1:() link-aggregation group 19 mode manual link-aggregation gr

4、oup 19 description dT:YCSY-SFJ-OLT.MAN.C300-2 link-aggregation group 20 mode manual link-aggregation group 20 description dT:YCSY-TXCW-OLT.MAN.C300-1 link-aggregation group 21 mode manual link-aggregation group 21 description dT:YCSY-HWCW-OLT.MAN.C300-1:()# vbas deviceid_type bridge_mac#radius schem

5、e system server-type huawei primary authentication 1645 primary accounting 1646 user-name-format without-domain#domain system vlan-assignment-mode integer access-limit disable state active idle-cut disable self-service-url disable domain default enable system#local-user sydata service-type telnet le

6、vel 1 service-type ftplocal-user weihu service-type telnet level 1#acl number 2000 /telnet ACL rule 0 permit source 55 rule 1 permit source 27 rule 2 permit source 95 0 rule 3 permit source 8 0 rule 5 permit source 4 1 rule 4 permit source 40 rule 6 permit source 55 rule 7 permit source 55#acl numbe

7、r 4000 /qinq rule 10 permit ingress 2 to 42 egress any rule 20 permit ingress 44 egress any rule 30 permit ingress 46 to 481 egress any rule 40 permit ingress 802 to 1057 egress any rule 50 permit ingress 307 to 498 egress anyacl number 4001 /qinq rule 10 permit ingress 45 egress any rule 20 permit

8、ingress 43 egress any#vlan batch 1 7 45 47 to 50 101 to105 111 to 3070 3101 3201 4001 4003 4005 4006 #interface Vlan-interface3101 ip address 00 28#interface Aux4/0/1 flowcontrol normal async mode interactive link-protocol ppp#interface M-Ethernet4/0/0#interface GigabitEthernet3/1/1#interface Gigabi

9、tEthernet3/1/2 description uT:YCSY-235-BAS.MAN.ME60-2:()GE2/1/0 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 1701 to 1705 1711 to 2270 2511 to 3070 port link-aggregation group 2#interface GigabitEthernet3/1/3#interface GigabitEthernet3/1/4 description uT:YCSY-235-BAS.MAN

10、.ME60-1:()GE9/0/0 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 7 45 47 to 50 101 to 105 111 to 670 901 to 905 911 to 1470 2006 2022 2024 port trunk permit vlan 2032 to 2034 2043 2501 3002 to 3003 3101 3201 4001 4003 4005 to 4006 port link-aggregation group 4#interface Gi

11、gabitEthernet3/1/5 description dT:YCSY-SFJ-BS.MAN.S8505-1:()GE2/1/1 speed 1000 duplex full port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 49#interface GigabitEthernet3/1/6#interface GigabitEthernet3/1/7#interface GigabitEthernet3/1/8#interface GigabitEthernet3/1/9 descript

12、ion dT:YCSY-SFJ-AS.MAN.S3552F-1:()GE7/1 speed 1000 duplex full port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 101 to 102 3201#interface GigabitEthernet3/1/10#interface GigabitEthernet3/1/11 description dT:YCSY-XKFQ-DS.MAN.ZTE9210-1 speed 1000 duplex full port link-type hyb

13、rid port hybrid vlan 3003 tagged port hybrid vlan 103 903 1703 untagged vlan filter disable traffic-redirect inbound link-group 4001 rule 10 system-index 1001 nested-vlan 903 traffic-redirect inbound link-group 4001 rule 20 system-index 1008 nested-vlan 1703 traffic-redirect inbound link-group 4000

14、rule 10 system-index 1011 nested-vlan 103 traffic-redirect inbound link-group 4000 rule 20 system-index 1012 nested-vlan 103 traffic-redirect inbound link-group 4000 rule 30 system-index 1013 nested-vlan 103 #interface GigabitEthernet3/1/12#interface GigabitEthernet3/1/13 description dT:YCSY-ZT-DS.M

15、AN.ZTE9210-1:() speed 1000 duplex full port link-type hybrid port hybrid vlan 3002 tagged port hybrid vlan 104 904 1704 untagged vlan filter disable traffic-redirect inbound link-group 4001 rule 10 system-index 1007 nested-vlan 904 traffic-redirect inbound link-group 4001 rule 20 system-index 1009 n

16、ested-vlan 1704 traffic-redirect inbound link-group 4000 rule 40 system-index 1021 nested-vlan 104 traffic-redirect inbound link-group 4000 rule 50 system-index 1022 nested-vlan 104 interface GigabitEthernet3/1/17 description dT:YCSY-FNCW-OLT.MAN.C300-1:()GE1/20/1 speed 1000 duplex full port link-ty

17、pe trunk undo port trunk permit vlan 1 port trunk permit vlan 48 111 to 222 911 to 1022 1711 to 1822 2511 to 2622 port link-aggregation group 17#interface GigabitEthernet3/1/18#interface GigabitEthernet3/1/19 description dT:YCSY-SFJ-OLT.MAN.C300-2:()GE1/19/1 port link-type trunk undo port trunk perm

18、it vlan 1 port trunk permit vlan 48 335 to 446 1135 to 1246 1935 to 2046 2735 to 2846 port link-aggregation group 19#interface GigabitEthernet3/1/20 description dT:YCSY-TXCW-OLT.MAN.C300-1:()GE1/19/1 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 447 to 558 1247 to 1358

19、 2047 to 2158 2847 to 2958 port link-aggregation group 20#interface GigabitEthernet3/1/21 description dT:YCSY-HWCW-OLT.MAN.C300-1:() port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 559 to 670 1359 to 1470 2159 to 2270 2959 to 3070 port link-aggregation group 21#interface

20、 GigabitEthernet3/1/22 description dT:YCSY-SFJ-OLT.MAN.C300-2:()GE1/19/2 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 335 to 446 1135 to 1246 1935 to 2046 2735 to 2846 port link-aggregation group 19#interface GigabitEthernet3/1/33 description dT:YCSY-ZTCW-OLT.MAN.C300

21、-1:()GE1/19/1 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 223 to 334 1023 to 1134 1823 to 1934 2623 to 2734 port link-aggregation group 18#interface GigabitEthernet3/1/39#interface GigabitEthernet3/1/47 description uT:YCSY-232-BAS.MAN.ME60-2:()GE3/0/4 port link-type

22、trunk undo port trunk permit vlan 1 port trunk permit vlan 101 to 105 111 to 670 901 to 905 911 to 1470 port link-aggregation group 1#interface GigabitEthernet3/1/48 description uT:YCSY-232-BAS.MAN.ME60-1:()GE2/0/8 speed 1000 duplex full port link-type trunk undo port trunk permit vlan 1 port trunk

23、permit vlan 1701 to 1705 1711 to 2270 2501 2511 to 3070 port link-aggregation group 3#interface GigabitEthernet6/1/1#interface GigabitEthernet6/1/2 description uT:YCSY-235-BAS.MAN.ME60-2:()GE2/1/1 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 1701 to 1705 1711 to 2270 251

24、1 to 3070 port link-aggregation group 2#interface GigabitEthernet6/1/3 description uT:YCSY-235-BAS.MAN.ME60-2:()GE2/1/9 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 1701 to 1705 1711 to 2270 2511 to 3070 port link-aggregation group 2#interface GigabitEthernet6/1/4 descri

25、ption uT:YCSY-235-BAS.MAN.ME60-1:()GE9/0/1 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 7 45 47 to 50 101 to 105 111 to 670 901 to 905 911 to 1470 2006 2022 2024 port trunk permit vlan 2032 to 2034 2043 2501 3002 to 3003 3101 3201 4001 4003 4005 to 4006 port link-aggrega

26、tion group 4# #interface GigabitEthernet6/1/17 description dT:YCSY-FNCW-OLT.MAN.C300-1:()GE1/19/1 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 111 to 222 911 to 1022 1711 to 1822 2511 to 2622 port link-aggregation group 17#interface GigabitEthernet6/1/19 description d

27、T:YCSY-SFJ-OLT.MAN.C300-2:()GE1/20/1 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 335 to 446 1135 to 1246 1935 to 2046 2735 to 2846 port link-aggregation group 19#interface GigabitEthernet6/1/20 description dT:YCSY-TXCW-OLT.MAN.C300-1:()GE1/20/1 port link-type trunk u

28、ndo port trunk permit vlan 1 port trunk permit vlan 48 447 to 558 1247 to 1358 2047 to 2158 2847 to 2958 port link-aggregation group 20#interface GigabitEthernet6/1/21 description dT:YCSY-HWCW-OLT.MAN.C300-1:() port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 559 to 670 1

29、359 to 1470 2159 to 2270 2959 to 3070 port link-aggregation group 21#interface GigabitEthernet6/1/22 description dT:YCSY-SFJ-OLT.MAN.C300-2:()GE1/20/2 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 335 to 446 1135 to 1246 1935 to 2046 2735 to 2846 port link-aggregation

30、group 19#interface GigabitEthernet6/1/33 description dT:YCSY-ZTCW-OLT.MAN.C300-1:()GE1/20/1 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 48 223 to 334 1023 to 1134 1823 to 1934 2623 to 2734 port link-aggregation group 18#interface GigabitEthernet6/1/45 #interface Gigabit

31、Ethernet6/1/46 description uT:YCSY-232-BAS.MAN.ME60-1:()GE1/0/9 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 1701 to 1705 1711 to 2270 2501 2511 to 3070 port link-aggregation group 3#interface GigabitEthernet6/1/47 description uT:YCSY-232-BAS.MAN.ME60-2:()GE3/0/5 port li

32、nk-type trunk undo port trunk permit vlan 1 port trunk permit vlan 101 to 105 111 to 670 901 to 905 911 to 1470 port link-aggregation group 1#interface GigabitEthernet6/1/48 description uT:YCSY-232-BAS.MAN.ME60-1:()GE2/0/9 speed 1000 duplex full port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 1