华为交换机VRRP AAA VLAN配置

一、网络规划及拓扑结构

image.png

二、配置命令

sysname HJA

vlan batch 10 20

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1
ip address 172.16.101.2 255.255.255.0

interface Vlanif10
ip address 172.16.10.251 255.255.255.0
vrrp vrid 10 virtual-ip 172.16.10.254
vrrp vrid 10 priority 120
vrrp vrid 10 track interface Eth-Trunk0 reduced 15
vrrp vrid 10 track interface GigabitEthernet0/0/4 reduced 15

interface Vlanif20
ip address 172.16.20.251 255.255.255.0
vrrp vrid 20 virtual-ip 172.16.20.254

interface MEth0/0/1

interface Eth-Trunk0
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 2 to 4094

sysname HJB

vlan batch 10 20

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

diffserv domain default

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1
ip address 172.16.101.3 255.255.255.0

interface Vlanif10
ip address 172.16.10.252 255.255.255.0
vrrp vrid 10 virtual-ip 172.16.10.254

interface Vlanif20
ip address 172.16.20.252 255.255.255.0
vrrp vrid 20 virtual-ip 172.16.20.254
vrrp vrid 20 priority 120
vrrp vrid 20 track interface GigabitEthernet0/0/4 reduced 15
vrrp vrid 20 track interface Eth-Trunk0 reduced 15

interface MEth0/0/1

interface Eth-Trunk0

interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 2 to 4094

你可能感兴趣的:(华为交换机VRRP AAA VLAN配置)