[attach]25473[/attach]
<HDJYJ_S6506>dis cur
#
sysname HDJYJ_S6506
#
super password level 3 simple hdjyj
#
local-server nas-ip 127.0.0.1 key huawei
#
domain default enable system
#
temperature-limit 0 10 80
temperature-limit 1 10 80
temperature-limit 3 10 80
#
poe power max-value 2400
#
radius scheme system
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
vlan-assignment-mode integer
access-limit disable
state active
idle-cut disable
self-service-url disable
messenger time disable
#
stp mode stp
stp TC-protection enable
stp enable
#
acl number 3001
rule 0 deny tcp destination-port eq 4444
rule 1 deny tcp destination-port eq 135
rule 2 deny udp destination-port eq 135
rule 3 deny tcp destination-port eq 445
rule 4 deny udp destination-port eq 445
rule 5 deny tcp destination-port eq 593
rule 6 deny udp destination-port eq 593
rule 7 deny udp destination-port eq 1434
rule 8 deny tcp destination-port eq 5444
rule 9 deny tcp destination-port eq 9996
#
vlan 1
description Server&Admin_Vlan
#
vlan 2
description Jujiguan_Vlan
#
vlan 3
description Dianjiaozhan_Vlan
#
vlan 4
description Jiaoyanshi&Qgjxz_Vlan
#
vlan 5
description Hengdongyizhong_Vlan
#
interface Vlan-interface1
ip address 192.168.1.254 255.255.255.0
#
interface Vlan-interface2
ip address 192.168.20.254 255.255.255.0
#
interface Vlan-interface3
ip address 192.168.30.254 255.255.255.0
#
interface Vlan-interface4
ip address 192.168.40.254 255.255.255.0
#
interface Aux0/0/0
#
interface M-Ethernet0/0/0
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk permit vlan 1 3 to 5
qos
packet-filter inbound ip-group 3001 rule 0 system-index 1
packet-filter inbound ip-group 3001 rule 1 system-index 2
packet-filter inbound ip-group 3001 rule 2 system-index 3
packet-filter inbound ip-group 3001 rule 3 system-index 4
packet-filter inbound ip-group 3001 rule 4 system-index 5
packet-filter inbound ip-group 3001 rule 5 system-index 6
packet-filter inbound ip-grou
packet-filter inbound ip-group 3001 rule 7 system-index 8
packet-filter inbound ip-group 3001 rule 8 system-index 9
packet-filter inbound ip-group 3001 rule 9 system-index 10
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet1/0/1
#
interface GigabitEthernet1/0/2
#
interface GigabitEthernet1/0/3
#
interface GigabitEthernet1/0/4
#
interface GigabitEthernet1/0/5
#
interface GigabitEthernet1/0/6
#
interface GigabitEthernet1/0/7
#
interface GigabitEthernet1/0/8
#
interface GigabitEthernet1/0/9
#
interface GigabitEthernet1/0/10
#
interface GigabitEthernet1/0/11
#
interface GigabitEthernet1/0/12
#
interface GigabitEthernet1/0/13
#
interface GigabitEthernet1/0/14
#
interface GigabitEthernet1/0/15
#
interface GigabitEthernet1/0/16
#
interface GigabitEthernet1/0/17
#
interface GigabitEthernet1/0/18
#
interface GigabitEthernet1/0/19
#
interface GigabitEthernet1/0/20
#
interface GigabitEthernet3/0/1
#
interface GigabitEthernet3/0/2
#
interface GigabitEthe
#
interface GigabitEthernet3/0/4
#
interface GigabitEthernet3/0/5
#
interface GigabitEthernet3/0/6
#
interface GigabitEthernet3/0/7
#
interface GigabitEthernet3/0/8
#
interface GigabitEthernet3/0/9
#
interface GigabitEthernet3/0/10
#
interface GigabitEthernet3/0/11
port access vlan 2
#
interface GigabitEthernet3/0/12
port access vlan 2
#
interface GigabitEthernet3/0/13
port access vlan 88
#
interface GigabitEthernet3/0/14
port access vlan 88
#
interface GigabitEthernet3/0/15
#
interface GigabitEthernet3/0/16
#
interface GigabitEthernet3/0/17
#
interface GigabitEthernet3/0/18
qos
packet-filter inbound ip-group 3001 rule 0 system-index 21
packet-filter inbound ip-group 3001 rule 1 system-index 22
packet-filter inbound ip-group 3001 rule 2 system-index 23
packet-filter inbound ip-group 3001 rule 3 system-index 24
packet-filter inbound ip-group 3001 rule 4 system-index 25
packet-filter inbound ip-group 3001 rule 5 system-index 26
packet-filter inbound ip-group 3001 rule 6 system-index 27
packet-filter inbound ip-group 3001 rule 7 system-index 28
packet-filter inbound ip-group 3001 rule 8 system-index 29
packet-filter inbound ip-group 3001 rule 9 system-index 30
#
interface GigabitEthernet3/0/19
port access vlan 2
#
interface GigabitEthernet3/0/20
port access vlan 2
qos
packet-filter inbound ip-group 3001 rule 0 system-index 11
packet-filter inbound ip-group 3001 rule 1 system-index 12
packet-filter inbound ip-group 3001 rule 2 system-index 13
packet-filter inbound ip-group 3001 rule 3 system-index 14
packet-filter inbound ip-group 3001 rule 4 system-index 15
packet-filter inbound ip-group 3001 rule 5 system-index 16
packet-filter inbound ip-group 3001 rule 6 system-index 17
packet-filter inbound ip-group 3001 rule 7 system-index 18
packet-filter inbound ip-group 3001 rule 8 system-index 19
packet-filter inbound ip-group 3001 rule 9 system-index 20
#
interface NULL0
#
ip route-static
#
user-interface aux 0
user-interface vty 0 4
set authentication password simple hdjyj
#
return
<HDJYJ_S6506>
在4000+上做静态路由 192.168.20.0 255.255.255.0 192.168.88.254 也不行
欢迎光临 千家论坛_智能建筑与智能家居技术交流社区 (http://bbs.qianjia.com:8020/) | Powered by Discuz! X3.2 |