SE三层交换机配置.docx

1、SE三层交换机配置* Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * Without the owners prior written consent, * no decompiling or reverse-engineering shall be allowed. *Login authenticationUsername:adminPassword:di cur# version 5.20, Release 6305#sysname 7506E# domain default enab

2、le system# telnet server enable#ipttl-expires enableipunreachables enable# port-security enable# loopback-detection enable# mirroring-group 1 local mirroring-group 2 local#switch-mode standard#acl number 3010 description to UTM200rule 0 permit ip source 192.168.128.0 0.0.15.255 rule 1 permit ip sour

3、ce 192.168.160.0 0.0.31.255acl number 3011 rule 0 permit ip source 192.168.34.0 0.0.0.255 rule 1 permit ip source 192.168.37.0 0.0.0.255 rule 2 permit ip source 192.168.31.0 0.0.0.255 rule 3 permit ip source 192.168.39.0 0.0.0.255 rule 4 permit ip source 192.168.254.0 0.0.0.255acl number 3500 # vlan

4、 1 # vlan 2 to 2221 # vlan 2222 description wireless_guest# vlan 2223 to 2500# vlan 3000 description test# vlan 3901 description dianxinap# vlan 3902 description test# vlan 3985 description dhcp for temp guest meetingsupervlansubvlan 36 # vlan 3986 description dianxin wirelesssupervlansubvlan 3901 #

5、 vlan 3987 description huisuovlan 33supervlansubvlan 33 # vlan 3988 description wirelesssupervlansubvlan 2222 # vlan 3989 supervlansubvlan 3 to 29# vlan 3990 supervlansubvlan 1226 to 1250# vlan 3991 supervlansubvlan 1200 to 1225# vlan 3992 supervlansubvlan 100 to 111# vlan 3993 supervlansubvlan 1032

6、 to 1150# vlan 3994 supervlansubvlan 911 to 1031# vlan 3995 supervlansubvlan 791 to 910# vlan 3996 supervlansubvlan 351 to 421 747 to 790# vlan 3997 supervlansubvlan 231 to 350# vlan 3998 supervlansubvlan 112 to 230# vlan 3999 description to UTM200# vlan 4000 to 4001# ftth# domain system access-limi

7、t disable state active idle-cut disable self-service-url disable# traffic classifier kefang operator and if-match acl 3010traffic classifier denyvlanclass operator and if-match acl 3500# traffic behavior kefang redirect next-hop 192.168.145.2traffic behavior dengvlan filter deny # qos policy kefang

8、classifier kefang behavior kefangqos policy denyvlan classifier denyvlanclass behavior dengvlan# dhcp server ip-pool 3985 network 192.168.36.0 mask 255.255.255.0 gateway-list 192.168.36.254dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 8# dhcp server ip-pool 3986 network 192.168.16

9、0.0 mask 255.255.224.0 gateway-list 192.168.160.1dns-list 202.96.128.86 8.8.8.8 202.96.128.166 expired day 0 hour 2# dhcp server ip-pool 3987 network 192.168.33.0 mask 255.255.255.0 gateway-list 192.168.33.254dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 8# dhcp server ip-pool 398

10、8 network 192.168.142.0 mask 255.255.254.0 gateway-list 192.168.142.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3989 network 192.168.140.0 mask 255.255.254.0 gateway-list 192.168.140.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhc

11、p server ip-pool 3990 network 192.168.138.0 mask 255.255.254.0 gateway-list 192.168.138.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3991 network 192.168.136.0 mask 255.255.254.0 gateway-list 192.168.136.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expir

12、ed day 0 hour 4# dhcp server ip-pool 3992 network 192.168.134.0 mask 255.255.254.0 gateway-list 192.168.134.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3993 network 192.168.132.128 mask 255.255.255.128 gateway-list 192.168.132.129dns-list 202.96.128.86 20

13、2.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3994 network 192.168.132.0 mask 255.255.255.128 gateway-list 192.168.132.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3995 network 192.168.131.128 mask 255.255.255.128 gateway-list 192.168.131.

14、129dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3996 network 192.168.131.0 mask 255.255.255.128 gateway-list 192.168.131.1dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3997 network 192.168.130.128 mask 255.255.255.128 gateway-list 192.168.130.129dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 4# dhcp server ip-pool 3998 network 192.168.130.0 mask 255.255.255.128