二台S3928P堆叠的配置文档,大家可以参考

发表于:2007-5-17 22:19   标题:二台S3928P堆叠的配置文档,大家可以参考下!
刚配置的二台S3928,通过27,28堆叠。划发11个vlan。vlan1----vlan11   vlan11是防火墙和服务器。

实现:所有vlan通过vlan11上网和访问服务器,vlan1,vlan2,vlan3,vlan4.vlan5.vlan6.vlan8,vlan9,vlan10不能访问vlan7,但vlan7可以访问所有vlan.(也就是单项访问)vlan1,vlan2,vlan3,vlan4.vlan5.vlan6.vlan8,vlan9,vlan10之间互相不能访问。下面是配置,,大家可以参考研究下,如果有哪配置不合理的地方,请高手指点,谢谢!!

dis cu
#
sysname Quidway
#
radius scheme system
#
domain system
#
local-user admin
password simple admin
service-type telnet
level 3
#
acl number 3002
rule 0 deny tcp established source 192.168.2.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
rule 1 deny icmp source 192.168.2.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
rule 2 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.3.0 0.0.0.255
rule 3 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
rule 4 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.5.0 0.0.0.255
rule 5 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.6.0 0.0.0.255
rule 6 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
rule 7 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.9.0 0.0.0.255
rule 8 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
acl number 3003
rule 0 deny tcp established source 192.168.3.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
   rule 1 deny icmp source 192.168.3.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
rule 3 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
rule 4 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.5.0 0.0.0.255
rule 5 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.6.0 0.0.0.255
rule 6 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
rule 7 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.9.0 0.0.0.255
rule 8 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
acl number 3004
rule 0 deny tcp established source 192.168.4.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
rule 1 deny icmp source 192.168.4.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
rule 2 deny ip source 192.168.4.0 0.0.0.255 destination 192.168.5.0 0.0.0.255
rule 3 deny ip source 192.168.4.0 0.0.0.255 destination 192.168.6.0 0.0.0.255
rule 4 deny ip source 192.168.4.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
rule 5 deny ip source 192.168.4.0 0.0.0.255 destination 192.168.9.0 0.0.0.255
rule 6 deny ip source 192.168.4.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
acl number 3005
rule 0 deny tcp established source 192.168.5.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
rule 1 deny icmp source 192.168.5.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
rule 2 deny ip source 192.168.5.0 0.0.0.255 destination 192.168.6.0 0.0.0.255
rule 3 deny ip source 192.168.5.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
rule 4 deny ip source 192.168.5.0 0.0.0.255 destination 192.168.9.0 0.0.0.255
rule 5 deny ip source 192.168.5.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
acl number 3006
rule 0 deny tcp established source 192.168.6.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
   rule 1 deny icmp source 192.168.6.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
rule 2 deny ip source 192.168.6.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
rule 3 deny ip source 192.168.6.0 0.0.0.255 destination 192.168.9.0 0.0.0.255
rule 4 deny ip source 192.168.6.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
acl number 3008
rule 0 deny tcp established source 192.168.8.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
rule 1 deny icmp source 192.168.8.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
rule 2 deny ip source 192.168.8.0 0.0.0.255 destination 192.168.9.0 0.0.0.255
rule 3 deny ip source 192.168.8.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
acl number 3009
rule 0 deny tcp established source 192.168.9.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
rule 1 deny icmp source 192.168.9.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
rule 2 deny ip source 192.168.9.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
acl number 3010
rule 0 deny tcp established source 192.168.10.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
rule 1 deny icmp source 192.168.10.0 0.0.0.255 destination 192.168.7.0 0.0.0.255 icmp-type echo
#
vlan 1
#
vlan 2
description ss
#
vlan 3
#
  vlan 4
#
vlan 5
#
vlan 6
#
vlan 7
#
vlan 8
#
vlan 9
#
vlan 10
#
vlan 11
#
vlan 20
#
interface Vlan-interface1
ip address 192.168.1.11 255.255.255.0
#
interface Vlan-interface2
ip address 192.168.2.254 255.255.255.0
#
  interface Vlan-interface3
ip address 192.168.3.254 255.255.255.0
#
interface Vlan-interface4
ip address 192.168.4.254 255.255.255.0
#
interface Vlan-interface5
ip address 192.168.5.254 255.255.255.0
#
interface Vlan-interface6
ip address 192.168.6.254 255.255.255.0
#
interface Vlan-interface7
ip address 192.168.7.254 255.255.255.0
#
interface Vlan-interface8
ip address 192.168.8.254 255.255.255.0
#
interface Vlan-interface9
ip address 192.168.9.254 255.255.255.0
#
interface Vlan-interface10
ip address 192.168.10.254 255.255.255.0
#
  interface Vlan-interface11
ip address 192.168.11.254 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/2
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
   packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/3
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/4
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
   packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/5
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/6
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
   packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/7
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/8
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
   packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/9
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/10
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
   packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/11
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/12
port access vlan 2
packet-filter inbound ip-group 3002 rule 0
packet-filter inbound ip-group 3002 rule 1
packet-filter inbound ip-group 3002 rule 2
packet-filter inbound ip-group 3002 rule 3
packet-filter inbound ip-group 3002 rule 4
   packet-filter inbound ip-group 3002 rule 5
packet-filter inbound ip-group 3002 rule 6
packet-filter inbound ip-group 3002 rule 7
packet-filter inbound ip-group 3002 rule 8
#
interface Ethernet1/0/13
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/14
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
   packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/15
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/16
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
  #
interface Ethernet1/0/17
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/18
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/19
   port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/20
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/21
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
   packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/22
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/23
port access vlan 3
packet-filter inbound ip-group 3003 rule 0
packet-filter inbound ip-group 3003 rule 1
packet-filter inbound ip-group 3003 rule 3
   packet-filter inbound ip-group 3003 rule 4
packet-filter inbound ip-group 3003 rule 5
packet-filter inbound ip-group 3003 rule 6
packet-filter inbound ip-group 3003 rule 7
packet-filter inbound ip-group 3003 rule 8
#
interface Ethernet1/0/24
port access vlan 10
packet-filter inbound ip-group 3010 rule 0
packet-filter inbound ip-group 3010 rule 1
#
interface GigabitEthernet1/1/1
#
interface GigabitEthernet1/1/2
#
interface GigabitEthernet1/1/3
priority trust
#
interface GigabitEthernet1/1/4
priority trust
#
fabric-port GigabitEthernet1/1/4 enable
fabric-port GigabitEthernet1/1/3 enable
undo irf-fabric authentication-mode
  #
interface Aux2/0/0
#
interface Ethernet2/0/1
port access vlan 10
packet-filter inbound ip-group 3010 rule 0
packet-filter inbound ip-group 3010 rule 1
#
interface Ethernet2/0/2
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/3
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
   packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/4
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/5
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
  interface Ethernet2/0/6
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/7
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/8
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
   packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/9
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/10
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
   packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/11
port access vlan 11
#
interface Ethernet2/0/12
port access vlan 4
packet-filter inbound ip-group 3004 rule 0
packet-filter inbound ip-group 3004 rule 1
packet-filter inbound ip-group 3004 rule 2
packet-filter inbound ip-group 3004 rule 3
packet-filter inbound ip-group 3004 rule 4
packet-filter inbound ip-group 3004 rule 5
packet-filter inbound ip-group 3004 rule 6
#
interface Ethernet2/0/13
port access vlan 7
#
interface Ethernet2/0/14
port access vlan 5
packet-filter inbound ip-group 3005 rule 0
packet-filter inbound ip-group 3005 rule 1
packet-filter inbound ip-group 3005 rule 2
packet-filter inbound ip-group 3005 rule 3
   packet-filter inbound ip-group 3005 rule 4
packet-filter inbound ip-group 3005 rule 5
#
interface Ethernet2/0/15
port access vlan 5
packet-filter inbound ip-group 3005 rule 0
packet-filter inbound ip-group 3005 rule 1
packet-filter inbound ip-group 3005 rule 2
packet-filter inbound ip-group 3005 rule 3
packet-filter inbound ip-group 3005 rule 4
packet-filter inbound ip-group 3005 rule 5
#
interface Ethernet2/0/16
port access vlan 5
packet-filter inbound ip-group 3005 rule 0
packet-filter inbound ip-group 3005 rule 1
packet-filter inbound ip-group 3005 rule 2
packet-filter inbound ip-group 3005 rule 3
packet-filter inbound ip-group 3005 rule 4
packet-filter inbound ip-group 3005 rule 5
#
interface Ethernet2/0/17
port access vlan 7
#
  interface Ethernet2/0/18
port access vlan 8
packet-filter inbound ip-group 3008 rule 0
packet-filter inbound ip-group 3008 rule 1
packet-filter inbound ip-group 3008 rule 2
packet-filter inbound ip-group 3008 rule 3
#
interface Ethernet2/0/19
port access vlan 9
packet-filter inbound ip-group 3009 rule 0
packet-filter inbound ip-group 3009 rule 1
packet-filter inbound ip-group 3009 rule 2
#
interface Ethernet2/0/20
port access vlan 6
packet-filter inbound ip-group 3006 rule 0
packet-filter inbound ip-group 3006 rule 1
packet-filter inbound ip-group 3006 rule 2
packet-filter inbound ip-group 3006 rule 3
packet-filter inbound ip-group 3006 rule 4
#
interface Ethernet2/0/21
port access vlan 6
packet-filter inbound ip-group 3006 rule 0
   packet-filter inbound ip-group 3006 rule 1
packet-filter inbound ip-group 3006 rule 2
packet-filter inbound ip-group 3006 rule 3
packet-filter inbound ip-group 3006 rule 4
#
interface Ethernet2/0/22
port access vlan 10
packet-filter inbound ip-group 3010 rule 0
packet-filter inbound ip-group 3010 rule 1
#
interface Ethernet2/0/23
port access vlan 10
packet-filter inbound ip-group 3010 rule 0
packet-filter inbound ip-group 3010 rule 1
#
interface Ethernet2/0/24
port access vlan 10
packet-filter inbound ip-group 3010 rule 0
packet-filter inbound ip-group 3010 rule 1
#
interface GigabitEthernet2/1/1
#
interface GigabitEthernet2/1/2
#
  interface GigabitEthernet2/1/3
priority trust
#
interface GigabitEthernet2/1/4
priority trust
#
fabric-port GigabitEthernet2/1/3 enable
fabric-port GigabitEthernet2/1/4 enable
undo irf-fabric authentication-mode
#
interface NULL0
#
voice vlan mac-address 0001-e300-0000 mask ffff-ff00-0000
#
ip route-static 0.0.0.0 0.0.0.0 192.168.11.1 preference 60
#
user-interface aux 0 7
user-interface vty 0 4
user privilege level 3
set authentication password simple admin
#
return

你可能感兴趣的:(职场,堆叠,休闲,S3928P)