XX市高中网络拓扑整体规划配置

XX市高中网络拓扑整体规划配置_第1张图片

2台核心交换机irf配置:

dis cu
dis current-configuration

version 7.1.075, Alpha 7571

sysname HX_A

irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 32
irf member 2 priority 1

dhcp enable

lldp global enable

system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series

vlan 1

vlan 10 to 15

irf-port 1/1
port group interface Ten-GigabitEthernet1/0/50
port group interface Ten-GigabitEthernet1/0/51

irf-port 2/2
port group interface Ten-GigabitEthernet2/0/50
port group interface Ten-GigabitEthernet2/0/51

dhcp server ip-pool vlan10
gateway-list 192.168.10.1
network 192.168.10.0 mask 255.255.255.0
dns-list 8.8.8.8 1.1.1.1

dhcp server ip-pool vlan11
gateway-list 192.168.11.1
network 192.168.11.0 mask 255.255.255.0
dns-list 1.1.1.1 2.2.2.2

interface Bridge-Aggregation1

interface Bridge-Aggregation2
port link-type trunk
port trunk permit vlan all
link-aggregation mode dynamic
mad enable

interface Route-Aggregation22
ip address 192.168.1.2 255.255.255.0
link-aggregation mode dynamic

interface NULL0

interface Vlan-interface10
ip address 192.168.10.1 255.255.255.0
dhcp server apply ip-pool vlan10

interface Vlan-interface11
ip address 192.168.11.1 255.255.255.0
dhcp server apply ip-pool vlan11

interface Vlan-interface15
ip address 192.168.100.254 255.255.255.0

interface FortyGigE1/0/53
port link-mode bridge

interface FortyGigE1/0/54
port link-mode bridge

interface FortyGigE2/0/53
port link-mode bridge

interface FortyGigE2/0/54
port link-mode bridge

interface GigabitEthernet1/0/1
port link-mode route
combo enable copper
port link-aggregation group 22

interface GigabitEthernet2/0/1
port link-mode route
combo enable copper
port link-aggregation group 22

interface GigabitEthernet1/0/2
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/3
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/4
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/5
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/6
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/7
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/8
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/9
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 2

interface GigabitEthernet1/0/10
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/11
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/12
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/13
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/14
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/15
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/16
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/17
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/18
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/19
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/20
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/21
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/22
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/23
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/24
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/25
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/26
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/27
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/28
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/29
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/30
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/31
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/32
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/33
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/34
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/35
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/36
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/37
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/38
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/39
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/40
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/41
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/42
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/43
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/44
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/45
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/46
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/47
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/48
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/2
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/3
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/4
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/5
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/6
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/7
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/8
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 2

interface GigabitEthernet2/0/9
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/10
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/11
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/12
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/13
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/14
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/15
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/16
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/17
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/18
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/19
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/20
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/21
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/22
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/23
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/24
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/25
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/26
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/27
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/28
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/29
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/30
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/31
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/32
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/33
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/34
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/35
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/36
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/37
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/38
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/39
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/40
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/41
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/42
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/43
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/44
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/45
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/46
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/47
port link-mode bridge
combo enable copper

interface GigabitEthernet2/0/48
port link-mode bridge
combo enable copper

interface M-GigabitEthernet0/0/0

interface Ten-GigabitEthernet1/0/49
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/52
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet2/0/49
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet2/0/52
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/50
combo enable fiber

interface Ten-GigabitEthernet1/0/51
combo enable fiber

interface Ten-GigabitEthernet2/0/50
combo enable fiber

interface Ten-GigabitEthernet2/0/51
combo enable fiber

scheduler logfile size 16

line class aux
user-role network-operator

line class console
user-role network-admin

line class tty
user-role network-operator

line class vty
user-role network-operator

line aux 0 1
user-role network-operator

line con 0 1
user-role network-admin

line vty 0 63
user-role network-operator

ip route-static 0.0.0.0 0 192.168.1.1

undo info-center enable

radius scheme system
user-name-format without-domain

domain system

domain default enable system

role name level-0
description Predefined level-0 role

role name level-1
description Predefined level-1 role

role name level-2
description Predefined level-2 role

role name level-3
description Predefined level-3 role

role name level-4
description Predefined level-4 role

role name level-5
description Predefined level-5 role

role name level-6
description Predefined level-6 role

role name level-7
description Predefined level-7 role

role name level-8
description Predefined level-8 role

role name level-9
description Predefined level-9 role

role name level-10
description Predefined level-10 role

role name level-11
description Predefined level-11 role

role name level-12
description Predefined level-12 role

role name level-13
description Predefined level-13 role

role name level-14
description Predefined level-14 role

user-group system

return

汇聚交换机配置:

HX>dis current-configuration

version 7.1.075, Alpha 7571

sysname HX

telnet server enable

irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1

dhcp enable

lldp global enable

system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series

vlan 1

vlan 10 to 15

interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan all

interface Bridge-Aggregation2
port link-type trunk
port trunk permit vlan all
link-aggregation mode dynamic
mad enable

interface NULL0

interface Vlan-interface10

interface Vlan-interface11

interface Vlan-interface15
ip address 192.168.100.250 255.255.255.0

interface FortyGigE1/0/53
port link-mode bridge

interface FortyGigE1/0/54
port link-mode bridge

interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper

interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper

interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 1

interface GigabitEthernet1/0/4
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 1

interface GigabitEthernet1/0/5
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/6
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/7
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/8
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 2

interface GigabitEthernet1/0/9
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 2

interface GigabitEthernet1/0/10
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/11
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/12
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/13
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/14
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/15
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/16
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/17
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/18
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/19
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/20
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/21
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/22
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/23
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/24
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/25
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/26
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/27
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/28
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/29
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/30
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/31
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/32
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/33
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/34
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/35
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/36
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/37
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/38
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/39
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/40
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/41
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/42
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/43
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/44
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/45
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/46
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/47
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/48
port link-mode bridge
combo enable copper

interface M-GigabitEthernet0/0/0

interface Ten-GigabitEthernet1/0/49
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/50
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/51
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/52
port link-mode bridge
combo enable fiber

scheduler logfile size 16

line class aux
user-role network-operator

line class console
user-role network-admin

line class tty
user-role network-operator

line class vty
user-role network-operator

line aux 0
user-role network-operator

line con 0
authentication-mode scheme
user-role network-admin

line vty 0 4
authentication-mode scheme
user-role network-operator

line vty 5 63
user-role network-operator

ip route-static 0.0.0.0 0 192.168.100.254

super password role network-admin hash $h 6 6 6XrPB98YGf4dC0HII$DaXZnU2cKUcg4kHXhd4Ofb3ZNl6CAjGjf7QdfAsPxrEGOI7IRKrz/jZecP4aAKM750oso8LJmWCmfJcv30LrjA==

radius scheme system
user-name-format without-domain

domain system

domain default enable system

role name level-0
description Predefined level-0 role

role name level-1
description Predefined level-1 role

role name level-2
description Predefined level-2 role

role name level-3
description Predefined level-3 role

role name level-4
description Predefined level-4 role

role name level-5
description Predefined level-5 role

role name level-6
description Predefined level-6 role

role name level-7
description Predefined level-7 role

role name level-8
description Predefined level-8 role

role name level-9
description Predefined level-9 role

role name level-10
description Predefined level-10 role

role name level-11
description Predefined level-11 role

role name level-12
description Predefined level-12 role

role name level-13
description Predefined level-13 role

role name level-14
description Predefined level-14 role

user-group system

local-user admin class manage
password hash $h 6 6 6EGwUpwmojx1MmOP/$0J7cZNnxGXT3+AEhCPAowKh+bOoK1wdpFe+xmLGLZH83uvzKinuSbNhJcA3vGvvUjKg15JjPMYw1u3XC+bxq0Q==
service-type ssh telnet terminal
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator

return

接入交换机配置:

jxl_1#_1>dis cu
dis current-configuration

version 7.1.075, Alpha 7571

sysname jxl_1#_1

telnet server enable

irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1

lldp global enable

system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series

vlan 1

vlan 10 to 15

interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan all

interface NULL0

interface Vlan-interface15
ip address 192.168.100.2 255.255.255.0

interface FortyGigE1/0/53
port link-mode bridge

interface FortyGigE1/0/54
port link-mode bridge

interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper

interface GigabitEthernet1/0/2
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 1

interface GigabitEthernet1/0/4
port link-mode bridge
port link-type trunk
port trunk permit vlan all
combo enable copper
port link-aggregation group 1

interface GigabitEthernet1/0/5
port link-mode bridge
port access vlan 11
combo enable copper

interface GigabitEthernet1/0/6
port link-mode bridge
port access vlan 11
combo enable copper

interface GigabitEthernet1/0/7
port link-mode bridge
port access vlan 11
combo enable copper

interface GigabitEthernet1/0/8
port link-mode bridge
port access vlan 11
combo enable copper

interface GigabitEthernet1/0/9
port link-mode bridge
port access vlan 10
combo enable copper

interface GigabitEthernet1/0/10
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/11
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/12
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/13
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/14
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/15
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/16
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/17
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/18
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/19
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/20
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/21
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/22
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/23
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/24
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/25
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/26
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/27
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/28
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/29
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/30
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/31
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/32
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/33
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/34
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/35
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/36
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/37
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/38
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/39
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/40
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/41
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/42
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/43
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/44
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/45
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/46
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/47
port link-mode bridge
combo enable copper

interface GigabitEthernet1/0/48
port link-mode bridge
combo enable copper

interface M-GigabitEthernet0/0/0

interface Ten-GigabitEthernet1/0/49
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/50
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/51
port link-mode bridge
combo enable fiber

interface Ten-GigabitEthernet1/0/52
port link-mode bridge
combo enable fiber

scheduler logfile size 16

line class aux
user-role network-operator

line class console
user-role network-admin

line class tty
user-role network-operator

line class vty
user-role network-operator

line aux 0
user-role network-operator

line con 0
authentication-mode scheme
user-role network-admin

line vty 0 4
authentication-mode scheme
user-role network-operator

line vty 5 63
user-role network-operator

ip route-static 0.0.0.0 0 192.168.100.254

super password role network-admin hash $h 6 6 6zuCJZx74qDk4t4Oz$MeCsuhoE1Dvwa0JmDrzkW9eqeWZoqJjxZPfb9xcLIyjSwuIFReGSwKtUfcrxbKdbED7RrPmSwrun6kLI2iEQkQ==

radius scheme system
user-name-format without-domain

domain system

domain default enable system

role name level-0
description Predefined level-0 role

role name level-1
description Predefined level-1 role

role name level-2
description Predefined level-2 role

role name level-3
description Predefined level-3 role

role name level-4
description Predefined level-4 role

role name level-5
description Predefined level-5 role

role name level-6
description Predefined level-6 role

role name level-7
description Predefined level-7 role

role name level-8
description Predefined level-8 role

role name level-9
description Predefined level-9 role

role name level-10
description Predefined level-10 role

role name level-11
description Predefined level-11 role

role name level-12
description Predefined level-12 role

role name level-13
description Predefined level-13 role

role name level-14
description Predefined level-14 role

user-group system

local-user admin class manage
password hash $h 6 6 6U2UhaYcaMnXLa/OT$IZpO2eZuCVrqdgE0HZswjiMUygRKwbXolVlYQS5MKh4wkReRcQYYIqWo/nJJnWzjhpcwTT57RW6F/CGONg7tDw==
service-type ssh telnet terminal
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator

return

防火墙配置:

XX市高中网络拓扑整体规划配置_第2张图片
XX市高中网络拓扑整体规划配置_第3张图片
XX市高中网络拓扑整体规划配置_第4张图片
XX市高中网络拓扑整体规划配置_第5张图片
XX市高中网络拓扑整体规划配置_第6张图片

防火墙 命令行

version 7.1.064, Alpha 7164

sysname H3C

context Admin id 1

telnet server enable

irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1

nat address-group 1 name 1
address 192.18.11.2 192.18.11.253
address 192.168.10.2 192.168.10.253

xbar load-single
password-recovery enable
lpu-type f-series

vlan 1

interface Route-Aggregation22
ip address 192.168.1.1 255.255.255.0
link-aggregation mode dynamic

interface NULL0

interface GigabitEthernet1/0/0
port link-mode route
combo enable copper
ip address 192.168.56.99 255.255.255.0

interface GigabitEthernet1/0/1
port link-mode route
combo enable copper

interface GigabitEthernet1/0/2
port link-mode route
combo enable copper
port link-aggregation group 22

interface GigabitEthernet1/0/3
port link-mode route
combo enable copper
port link-aggregation group 22

interface GigabitEthernet1/0/4
port link-mode route
combo enable copper
ip address 1.1.1.2 255.255.255.0
nat outbound 2000

interface GigabitEthernet1/0/5
port link-mode route
combo enable copper

interface GigabitEthernet1/0/6
port link-mode route
combo enable copper

interface GigabitEthernet1/0/7
port link-mode route
combo enable copper

interface GigabitEthernet1/0/8
port link-mode route
combo enable copper

interface GigabitEthernet1/0/9
port link-mode route
combo enable copper

interface GigabitEthernet1/0/10
port link-mode route
combo enable copper

interface GigabitEthernet1/0/11
port link-mode route
combo enable copper

interface GigabitEthernet1/0/12
port link-mode route
combo enable copper

interface GigabitEthernet1/0/13
port link-mode route
combo enable copper

interface GigabitEthernet1/0/14
port link-mode route
combo enable copper

interface GigabitEthernet1/0/15
port link-mode route
combo enable copper

interface GigabitEthernet1/0/16
port link-mode route
combo enable copper

interface GigabitEthernet1/0/17
port link-mode route
combo enable copper

interface GigabitEthernet1/0/18
port link-mode route
combo enable copper

interface GigabitEthernet1/0/19
port link-mode route
combo enable copper

interface GigabitEthernet1/0/20
port link-mode route
combo enable copper

interface GigabitEthernet1/0/21
port link-mode route
combo enable copper

interface GigabitEthernet1/0/22
port link-mode route
combo enable copper

interface GigabitEthernet1/0/23
port link-mode route
combo enable copper

object-policy ip Local-Trust
rule 0 pass

object-policy ip Trust-Untrust
rule 0 pass

object-policy ip manage
rule 0 pass

security-zone name Local

security-zone name Trust
import interface GigabitEthernet1/0/0
import interface Route-Aggregation22

security-zone name DMZ

security-zone name Untrust
import interface GigabitEthernet1/0/4

security-zone name Management

zone-pair security source Local destination Trust
object-policy apply ip Local-Trust

zone-pair security source Trust destination Local
object-policy apply ip manage

zone-pair security source Trust destination Untrust
object-policy apply ip Trust-Untrust

scheduler logfile size 16

line class aux
user-role network-operator

line class console
user-role network-admin

line class tty
user-role network-operator

line class vty
user-role network-operator

line aux 0
user-role network-admin

line con 0
authentication-mode scheme
user-role network-admin

line vty 0 4
authentication-mode scheme
user-role network-admin

line vty 5 63
user-role network-operator

ip route-static 0.0.0.0 0 1.1.1.1
ip route-static 192.168.0.0 16 192.168.1.2

acl basic 2000
rule 0 permit
rule 0 comment 2000_nat

domain system

aaa session-limit ftp 16
aaa session-limit telnet 16
aaa session-limit ssh 16
domain default enable system

role name level-0
description Predefined level-0 role

role name level-1
description Predefined level-1 role

role name level-2
description Predefined level-2 role

role name level-3
description Predefined level-3 role

role name level-4
description Predefined level-4 role

role name level-5
description Predefined level-5 role

role name level-6
description Predefined level-6 role

role name level-7
description Predefined level-7 role

role name level-8
description Predefined level-8 role

role name level-9
description Predefined level-9 role

role name level-10
description Predefined level-10 role

role name level-11
description Predefined level-11 role

role name level-12
description Predefined level-12 role

role name level-13
description Predefined level-13 role

role name level-14
description Predefined level-14 role

user-group system

local-user admin class manage
password hash $h 6 6 6ImiztxrvB+H7b0sw$Bn5Et2ypy7xTbcNA0XwGheh4DYSz4kmaz0f4bPbxoA44XOlo1CNuz3QxHbvkbj56/tATLt53z9H+6XD9erFK1Q==
service-type telnet terminal http https
authorization-attribute user-role level-3
authorization-attribute user-role network-
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator

ip http enable
ip https enable

return

你可能感兴趣的:(网络工程,网络)