局域網配置案例
coreSW01是5500-28C-SI開啓DHCP server，向不一樣網段的PC分配靜態或動態IP。web
接入層交換機使用S5024PV2-EI。sql
A、B和C區三個的接入層交換機用GE1/0/1與coreSW01相連服務器
SerSW01劃分兩個vlan,vlan 98 (服務器羣使用)，vlan 91(語音網關使用)session
除FW01之外其餘全部設備的GE1/0/1從屬於vlan 1,並在vlan 1 接口上配置192.168.199.0網段的IP，以便遠程訪問設備。dom
在接入層交換機上爲防止仿冒用戶、仿冒網關，開啓ARPDetection功能；爲防止用戶私自更改ip，開啓dhcp-snooping功能，在GE1/0/1上dhcp-snooping trust。tcp
具體配置以下：ide
--------------------FW01---------------------------------oop
#ui
version 5.20, Release 5140url
#
sysname FW01
#
clock timezone Beijing add 08:00:00
#
undo voice vlan mac-address 00e0-bb00-0000
#
domain default enable system
#
dns resolve
dns proxy enable
dns server 105.21.16.35
#
telnet server enable
#
port-security enable
#
web idle-timeout 30
#
undo alg dns
undo alg rtsp
undo alg h323
undo alg sip
undo alg sqlnet
undo alg pptp
undo alg ils
undo alg nbt
undo alg msn
undo alg qq
undo alg tftp
undo alg sccp
undo alg gtp
#
session synchronization enable
#
password-recovery enable
#
time-range worktime from 07:00 4/23/2014 to 07:00 4/23/2015
#
acl number 2000
rule 1001 permit
#
acl number 3000
rule 0 permit ip
#
vlan 1
#
vlan 95
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
pki domain default
crl check disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet
service-type web
#
cwmp
undo cwmp enable
#
interface NULL0
#
interface Vlan-interface95
ip address 192.168.95.1 255.255.255.252
#
interface GigabitEthernet0/0
port link-mode route
nat outbound 2000
nat server 3000 protocol tcp global 110.121.11.54 www inside 192.168.95.1 www
nat server protocol udp global 110.121.11.54 3555 inside 192.168.98.1 3553
nat server 3000 protocol tcp global 110.121.11.54 3555 inside 192.168.98.1 3553
ip address 110.121.11.54 255.255.255.252
dns server 105.21.16.35
#
interface GigabitEthernet0/1
port link-mode route
#
interface GigabitEthernet0/3
port link-mode route
#
interface GigabitEthernet0/4
port link-mode route
#
interface GigabitEthernet0/2
port link-mode bridge
port access vlan 95
#
vd Root id 1
#
zone name Management id 0
priority 100
zone name Local id 1
priority 100
zone name Trust id 2
priority 85
import interface GigabitEthernet0/1
import interface GigabitEthernet0/3
import interface Vlan-interface95
zone name DMZ id 3
priority 50
zone name Untrust id 4
priority 5
import interface GigabitEthernet0/0
switchto vd Root
zone name Management id 0
ip virtual-reassembly
zone name Local id 1
ip virtual-reassembly
zone name Trust id 2
ip virtual-reassembly
zone name DMZ id 3
ip virtual-reassembly
zone name Untrust id 4
ip virtual-reassembly
#
ip route-static 0.0.0.0 0.0.0.0 110.121.11.53
ip route-static 192.168.11.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.20.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.21.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.22.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.23.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.24.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.25.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.26.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.27.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.28.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.29.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.31.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.32.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.33.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.34.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.86.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.91.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.98.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.199.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.186.86.0 255.255.255.0 Vlan-interface95 192.186.95.2
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
--------------------coreSW01-----------------------------
#
version 5.20, Release 2220P02
#
sysname coreSW01
#
clock timezone beijing add 08:00:00
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
dns resolve
dns proxy enable
#
telnet server enable
#
mac-address timer aging 10
#
mirroring-group 1 local
#
password-recovery enable
#
vlan 1
#
vlan 11
#
vlan 16
#
vlan 20 to 29
#
vlan 31 to 34
#
vlan 86
#
vlan 91
description to Keygoe3003
#
vlan 95
#
vlan 98
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan11
network 192.168.11.0 mask 255.255.255.0
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan11.1
static-bind ip-address 192.168.11.1 mask 255.255.255.0
static-bind mac-address 0011-1111-0000
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan11.2.wifirouter
static-bind ip-address 192.168.11.2 mask 255.255.255.0
static-bind mac-address 14cf-925b-ea6f
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan11.5.taishiji
static-bind ip-address 192.168.11.5 mask 255.255.255.0
static-bind mac-address 94de-8091-81bd
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan20
network 192.168.20.0 mask 255.255.255.0
gateway-list 192.168.20.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan20.1
static-bind ip-address 192.168.20.1 mask 255.255.255.0
static-bind mac-address 0020-1111-0001
gateway-list 192.168.20.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan21
network 192.168.21.0 mask 255.255.255.0
gateway-list 192.168.21.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan21.1
static-bind ip-address 192.168.21.1 mask 255.255.255.0
static-bind mac-address 0021-1111-0001
gateway-list 192.168.21.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan22
network 192.168.22.0 mask 255.255.255.0
gateway-list 192.168.22.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan22.1
static-bind ip-address 192.168.22.1 mask 255.255.255.0
static-bind mac-address 0022-1111-0001
gateway-list 192.168.22.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan23
network 192.168.23.0 mask 255.255.255.0
gateway-list 192.168.23.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan23.1
static-bind ip-address 192.168.23.1 mask 255.255.255.0
static-bind mac-address 0023-1111-0001
gateway-list 192.168.23.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan24
network 192.168.24.0 mask 255.255.255.0
gateway-list 192.168.24.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan24.1
static-bind ip-address 192.168.24.1 mask 255.255.255.0
static-bind mac-address 0024-1111-0001
gateway-list 192.168.24.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan25
network 192.168.25.0 mask 255.255.255.0
gateway-list 192.168.25.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan25.1
static-bind ip-address 192.168.25.1 mask 255.255.255.0
static-bind mac-address 0025-1111-0001
gateway-list 192.168.25.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan26
network 192.168.26.0 mask 255.255.255.0
gateway-list 192.168.26.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan26.1
static-bind ip-address 192.168.26.1 mask 255.255.255.0
static-bind mac-address 0026-1111-0001
gateway-list 192.168.26.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan27
network 192.168.27.0 mask 255.255.255.0
gateway-list 192.168.27.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan27.1
static-bind ip-address 192.168.27.1 mask 255.255.255.0
static-bind mac-address 0027-1111-0001
gateway-list 192.168.27.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan28
network 192.168.28.0 mask 255.255.255.0
gateway-list 192.168.28.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan28.1
static-bind ip-address 192.168.28.1 mask 255.255.255.0
static-bind mac-address 0028-1111-0001
gateway-list 192.168.28.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan29
network 192.168.29.0 mask 255.255.255.0
gateway-list 192.168.29.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan29.1
static-bind ip-address 192.168.29.1 mask 255.255.255.0
static-bind mac-address 0029-1111-0001
gateway-list 192.168.29.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan31
network 192.168.31.0 mask 255.255.255.0
gateway-list 192.168.31.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan31.1
static-bind ip-address 192.168.31.1 mask 255.255.255.0
static-bind mac-address 0031-1111-0001
gateway-list 192.168.31.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan32
network 192.168.32.0 mask 255.255.255.0
gateway-list 192.168.32.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan32.1
static-bind ip-address 192.168.32.1 mask 255.255.255.0
static-bind mac-address 0032-1111-0001
gateway-list 192.168.32.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan33
network 192.168.33.0 mask 255.255.255.0
gateway-list 192.168.33.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan33.1
static-bind ip-address 192.168.33.1 mask 255.255.255.0
static-bind mac-address 0033-1111-0001
gateway-list 192.168.33.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan33.2.wifirouter
static-bind ip-address 192.168.33.2 mask 255.255.255.0
static-bind mac-address 9c21-6a2c-3ef3
gateway-list 192.168.33.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan34
network 192.168.34.0 mask 255.255.255.0
gateway-list 192.168.34.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan34.1
static-bind ip-address 192.168.34.1 mask 255.255.255.0
static-bind mac-address 0034-1111-0001
gateway-list 192.168.34.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan68
network 192.168.68.0 mask 255.255.255.0
#
dhcp server ip-pool vlan86
network 192.186.21.0 mask 255.255.255.0
gateway-list 192.168.86.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan91
network 192.168.91.0 mask 255.255.255.0
gateway-list 192.168.91.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98
network 192.168.98.0 mask 255.255.255.0
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.1.ser01
static-bind ip-address 192.168.98.1 mask 255.255.255.0
static-bind mac-address 00e0-4c06-a214
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.2.ser02
static-bind ip-address 192.168.98.2 mask 255.255.255.0
static-bind mac-address 8ce7-4844-a1d5
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.3.ser03
static-bind ip-address 192.168.98.3 mask 255.255.255.0
static-bind mac-address 000c-29f8-d3dd
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.4.ser04
static-bind ip-address 192.168.98.4 mask 255.255.255.0
static-bind mac-address 0011-1111-0004
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.5.ser05
static-bind ip-address 192.168.98.5 mask 255.255.255.0
static-bind mac-address 0011-1111-0005
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.6.ser06
static-bind ip-address 192.168.98.6 mask 255.255.255.0
static-bind mac-address 0011-1111-0006
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.7.ser07
static-bind ip-address 192.168.98.7 mask 255.255.255.0
static-bind mac-address 0011-1111-0007
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet terminal
service-type web
local-user adminer
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type web
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.199.1 255.255.255.0
#
interface Vlan-interface11
ip address 192.168.11.254 255.255.255.0
#
interface Vlan-interface16
#
interface Vlan-interface20
ip address 192.168.20.254 255.255.255.0
#
interface Vlan-interface21
ip address 192.168.21.254 255.255.255.0
#
interface Vlan-interface22
ip address 192.168.22.254 255.255.255.0
#
interface Vlan-interface23
ip address 192.168.23.254 255.255.255.0
#
interface Vlan-interface24
ip address 192.168.24.254 255.255.255.0
#
interface Vlan-interface25
ip address 192.168.25.254 255.255.255.0
#
interface Vlan-interface26
ip address 192.168.26.254 255.255.255.0
#
interface Vlan-interface27
ip address 192.168.27.254 255.255.255.0
#
interface Vlan-interface28
ip address 192.168.28.254 255.255.255.0
#
interface Vlan-interface29
ip address 192.168.29.254 255.255.255.0
#
interface Vlan-interface31
ip address 192.168.31.254 255.255.255.0
#
interface Vlan-interface32
ip address 192.168.32.254 255.255.255.0
#
interface Vlan-interface33
ip address 192.168.33.254 255.255.255.0
#
interface Vlan-interface34
ip address 192.168.34.254 255.255.255.0
#
interface Vlan-interface86
ip address 192.168.86.254 255.255.255.0
#
interface Vlan-interface91
ip address 192.168.91.254 255.255.255.0
#
interface Vlan-interface95
ip address 192.168.95.2 255.255.255.252
#
interface Vlan-interface98
ip address 192.168.98.254 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/3
description to A_SW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/4
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/5
description to B_SW07
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/6
description to B_SW10
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/7
description to B_SW02
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/8
description to B_SW05
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/9
description to B_SW06
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/10
description to C_SW03
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/11
description to C_SW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/12
description to B_SW08
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/13
description to C_SW04
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/14
description to C_SW02
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/15
description to B_SW03
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/16
description to B_SW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/17
description to B_SW04
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/18
description to B_SW09
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/19
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/20
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/21
description to serSW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/22
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/23
port access vlan 20
mirroring-group 1 monitor-port
#
interface GigabitEthernet1/0/24
description to FW01
port access vlan 95
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/25
shutdown
#
interface GigabitEthernet1/0/26
shutdown
#
interface GigabitEthernet1/0/27
shutdown
#
interface GigabitEthernet1/0/28
shutdown
#
ip route-static 0.0.0.0 0.0.0.0 Vlan-interface95 192.168.95.1
#
dhcp server forbidden-ip 192.168.11.110 192.168.11.254
dhcp server forbidden-ip 192.168.20.25 192.168.20.254
dhcp server forbidden-ip 192.168.21.25 192.168.21.254
dhcp server forbidden-ip 192.168.22.25 192.168.22.254
dhcp server forbidden-ip 192.168.23.25 192.168.23.254
dhcp server forbidden-ip 192.168.24.25 192.168.24.254
dhcp server forbidden-ip 192.168.25.25 192.168.25.254
dhcp server forbidden-ip 192.168.26.25 192.168.26.254
dhcp server forbidden-ip 192.168.27.25 192.168.27.254
dhcp server forbidden-ip 192.168.28.25 192.168.28.254
dhcp server forbidden-ip 192.168.29.25 192.168.29.254
dhcp server forbidden-ip 192.168.31.25 192.168.31.254
dhcp server forbidden-ip 192.168.32.25 192.168.32.254
dhcp server forbidden-ip 192.168.33.25 192.168.33.254
dhcp server forbidden-ip 192.168.34.25 192.168.34.254
dhcp server forbidden-ip 192.168.98.25 192.168.98.254
dhcp server forbidden-ip 192.168.20.24 192.168.20.254
dhcp server forbidden-ip 192.168.21.24 192.168.21.254
dhcp server forbidden-ip 192.168.22.24 192.168.22.254
dhcp server forbidden-ip 192.168.23.24 192.168.23.254
dhcp server forbidden-ip 192.168.24.24 192.168.24.254
dhcp server forbidden-ip 192.168.25.24 192.168.25.254
dhcp server forbidden-ip 192.168.26.24 192.168.26.254
dhcp server forbidden-ip 192.168.27.24 192.168.27.254
dhcp server forbidden-ip 192.168.28.24 192.168.28.254
dhcp server forbidden-ip 192.168.29.24 192.168.29.254
dhcp server forbidden-ip 192.168.31.24 192.168.31.254
dhcp server forbidden-ip 192.168.32.24 192.168.32.254
dhcp server forbidden-ip 192.168.33.24 192.168.33.254
dhcp server forbidden-ip 192.168.34.24 192.168.34.254
dhcp server forbidden-ip 192.168.98.30 192.168.98.254
dhcp server forbidden-ip 192.168.11.40 192.168.11.254
dhcp server forbidden-ip 192.168.91.22 192.168.91.254
#
dhcp enable
#
arp timer aging 10
#
ip https enable
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 4
user privilege level 3
set authentication password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
user-interface vty 5 15
#
return
--------------------A_SW01-------------------------------
#
version 5.20.99, Release 1103
#
sysname A_SW01
#
clock timezone Beijing add 08:00:00
#
domain default enable system
#
ipv6
#
telnet server enable
#
mirroring-group 1 local
#
password-recovery enable
#
vlan 1
arp detection enable
#
vlan 11
arp detection enable
#
vlan 86
arp detection enable
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet
service-type web
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.199.101 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
dhcp-snooping trust
arp detection trust
#
interface GigabitEthernet1/0/2
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/3
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/4
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/5
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/6
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/7
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/8
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/9
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/10
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/11
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/12
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/13
description to financialroomA23
port access vlan 86
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/14
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/15
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/16
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/17
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/18
description to financialroomA24
port access vlan 86
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/19
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/20
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/21
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/22
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/23
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/24
port access vlan 11
mirroring-group 1 monitor-port
#
interface GigabitEthernet1/0/25
#
interface GigabitEthernet1/0/26
#
interface GigabitEthernet1/0/27
#
interface GigabitEthernet1/0/28
#
dhcp-snooping
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 15
authentication-mode scheme
#
return
--------------------serSW01------------------------------
#
version 5.20.99, Release 1103
#
sysname serSW01
#
domain default enable system
#
ipv6
#
telnet server enable
#
password-recovery enable
#
vlan 1
arp detection enable
#
vlan 91
#
vlan 98
arp detection enable
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet
service-type web
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.199.2 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
dhcp-snooping trust
arp detection trust
#
interface GigabitEthernet1/0/2
port access vlan 98
#
interface GigabitEthernet1/0/3
port access vlan 98
#
interface GigabitEthernet1/0/4
port access vlan 98
#
interface GigabitEthernet1/0/5
port access vlan 98
#
interface GigabitEthernet1/0/6
port access vlan 98
#
interface GigabitEthernet1/0/7
port access vlan 98
#
interface GigabitEthernet1/0/8
port access vlan 98
#
interface GigabitEthernet1/0/9
port access vlan 98
#
interface GigabitEthernet1/0/10
port access vlan 98
#
interface GigabitEthernet1/0/11
port access vlan 91
#
interface GigabitEthernet1/0/12
port access vlan 91
#
interface GigabitEthernet1/0/13
port access vlan 91
#
interface GigabitEthernet1/0/14
port access vlan 91
#
interface GigabitEthernet1/0/15
port access vlan 91
#
interface GigabitEthernet1/0/16
port access vlan 91
#
interface GigabitEthernet1/0/17
port access vlan 91
#
interface GigabitEthernet1/0/18
port access vlan 91
#
interface GigabitEthernet1/0/19
port access vlan 91
#
interface GigabitEthernet1/0/20
port access vlan 98
#
interface GigabitEthernet1/0/21
port access vlan 98
#
interface GigabitEthernet1/0/22
port access vlan 98
#
interface GigabitEthernet1/0/23
port access vlan 98
#
interface GigabitEthernet1/0/24
port access vlan 98
#
interface GigabitEthernet1/0/25
#
interface GigabitEthernet1/0/26
#
interface GigabitEthernet1/0/27
#
interface GigabitEthernet1/0/28
#
dhcp-snooping
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 15
authentication-mode scheme
#
return
- 1. 局域網實現VLAN配置實例
- 2. 配置虛擬局域網
- 3. 配置局域網yum源
- 4. 配置局域網yum
- 5. vlan局域網trunk配置
- 6. 如何配置局域網
- 7. UDP-局域網搜索案例
- 8. 局域網DNS域名解析配置
- 9. centos6.4_kvm 雙網卡(adsl+局域網)配置
- 10. xampp配置局域網訪問
- 更多相關文章...
- • 網站 域名 - 網站主機教程
- • Eclipse Debug 配置 - Eclipse 教程
- • PHP Ajax 跨域問題最佳解決方案
- • IntelliJ IDEA 代碼格式化配置和快捷鍵
-
每一个你不满意的现在，都有一个你没有努力的曾经。
- 1. 「插件」Runner更新Pro版，幫助設計師遠離996
- 2. 錯誤 707 Could not load file or assembly ‘Newtonsoft.Json, Version=12.0.0.0, Culture=neutral, PublicKe
- 3. Jenkins 2018 報告速覽，Kubernetes使用率躍升235%！
- 4. TVI-Android技術篇之註解Annotation
- 5. android studio啓動項目
- 6. Android的ADIL
- 7. Android卡頓的檢測及優化方法彙總（線下+線上）
- 8. 登錄註冊的業務邏輯流程梳理
- 9. NDK(1)創建自己的C/C++文件
- 10. 小菜的系統框架界面設計-你的評估是我的決策
- 1. 局域網實現VLAN配置實例
- 2. 配置虛擬局域網
- 3. 配置局域網yum源
- 4. 配置局域網yum
- 5. vlan局域網trunk配置
- 6. 如何配置局域網
- 7. UDP-局域網搜索案例
- 8. 局域網DNS域名解析配置
- 9. centos6.4_kvm 雙網卡(adsl+局域網)配置
- 10. xampp配置局域網訪問