华为上网行为管理器操作手册Word格式文档下载.docx

1、192.168.30.88255.255.255.0ZY002副总经理192.168.30.12ZY003项目部项目经理192.168.30.13ZY004192.168.30.14ZY005192.168.30.15ZY006192.168.30.16ZY007192.168.30.17ZY008咨询部总监192.168.30.18ZY009咨询顾问192.168.30.19ZY010192.168.30.20ZY011192.168.30.21ZY012192.168.30.22ZY013192.168.30.23ZY014研发部经理192.168.10.11192.168.10.254Z

2、Y015副经理192.168.10.12ZY016总工192.168.10.13ZY017JAVA工程师192.168.10.14ZY018192.168.10.15ZY019192.168.10.16ZY020192.168.10.17ZY021192.168.10.18ZY022192.168.10.19ZY023192.168.10.20ZY024192.168.10.21ZY025192.168.10.22ZY026192.168.10.23ZY027192.168.10.24ZY028192.168.10.25ZY029192.168.10.26ZY030Web工程师192.168.

3、10.27ZY031Android工程师192.168.10.28ZY032GIS工程师192.168.10.29ZY033192.168.10.30ZY034主管192.168.10.31ZY035192.168.10.32ZY036测试部部门主管192.168.10.33ZY037测试工程师192.168.10.34ZY038192.168.10.35ZY039192.168.10.36ZY040实施部192.168.30.24ZY041192.168.30.25ZY042工程师192.168.30.26ZY043192.168.30.27ZY044192.168.30.28ZY04519

4、2.168.30.29ZY046192.168.30.30ZY047192.168.30.31ZY048软件实施工程师192.168.30.32ZY049192.168.30.33ZY050192.168.30.34ZY051192.168.30.35ZY052运营保障中心192.168.30.36ZY053192.168.30.37ZY054192.168.30.38ZY055人事专员192.168.30.39ZY056后勤专员192.168.30.40ZY057192.168.30.41ZY058采购专员192.168.30.42ZY059192.168.30.43ZY060投标专员192

5、.168.30.44ZY061司机ZY062保洁ZY063财务部会计192.168.20.13ZY064192.168.20.14四、账号分配表登录名所属部门用户描述所属组2009000999/管理层20090504012009081701/项目部20090713012010110101201503180120170401012010081601/咨询部201207160120170308012017022001201705160120170330012012060401/研发部20110321012009100901数采工程师201510260120151201012016061601201

6、60617022016070401201610170120150724012016072701201608030120160815012016090501201611210120161017022016061703201607040220161212012017021501201511020120151201022016062001/质量部质量部2013030401201509170120151026022011060701/实施部2012060402201603070120160328012016112801201305270120160510012016083001201612120220

7、16092701201705040120170216012010070101/人事行政部人事行政部201308070120160623012016082201201602150120150902012015110202201608180120160601012011081601/财务部2017051501五、主要设备账户及密码1、上网行为管理路由器IP地址：2、核心交换机3、研发交换机4、综合交换机5、硬盘录像机6、无线AP六、主要配置1、上网行为管理器配置1、创建部门2、给每个部门创建用户1）创建账号及密码2）加入所属部门3）加入所属用户组3、创建用户组4、给用户组添加部门5、新建上网认证策

8、略1）填写局域网的所有网段2）使用用户名密码认证6、配置认证选项1）启用radius单点登录2）配置密码有效期3）注销无流量的已认证用户时间7、配置外网接口网络8、配置网接口网络9、配置管理接口网络10、配置静态路由11、配置策略路由1）网口允许所有用户通过2）外网口允许所有用户通过3）管理口允许所有用户通过12、配置带宽策略1）WAN-LAN允许所有用户通过并且不限流2）LAN-WAN允许所有用户通过并且不限流13、配置源NAT1）WAN-LAN2）LAN-WAN14、配置虚拟服务器（端口映射）15、配置域间规则WAN-LAN,LAN-WAN,DMZ-DMZ,WAN-DMZ,DMZ-WAN

9、所有动作都是放行（permit）16、配置本地策略1）源安全域LAN口所有原地址动作都放行（permit）2）源安全域WAN口所有原地址动作都放行（permit）3）源安全域DMZ口所有原地址动作都放行（permit）2、交换机核心交换机#!Software Version V100R005C01SPC100 sysname HeXin vlan batch 30 40 50 100 to 102 dhcp enable user-bind static ip-address 192.168.1.88 mac-address 0022-681c-eacf vlan 30 user-bind s

10、tatic ip-address 192.168.1.88 mac-address 0022-681c-eacf interface GigabitEthernet0/0/10 undo http server enable drop illegal-mac alarm ip pool vlan30 ip pool vlan40 ip pool vlan50acl number 2000 rule 5 deny source 192.168.30.0 0.0.0.255 rule 10 permitacl number 2001# acl number 2002acl number 2003i

11、p pool vlan30 gateway-list 192.168.1.254 network 192.168.1.0 mask 255.255.255.0 dns-list 221.228.255.1 114.114.114.114ip pool vlan40 gateway-list 192.168.30.254 network 192.168.30.0 mask 255.255.255.0 static-bind ip-address 192.168.30.27 mac-address 0022-681c-eacfip pool vlan50 gateway-list 192.168.

12、40.254 network 192.168.40.0 mask 255.255.255.0aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher 6）BYE（;F31%AOH#34Q! local-user admin privilege level 3interface Vlanif1interface Vlanif30 ip add

13、ress 192.168.1.1 255.255.255.0 dhcp select globalinterface Vlanif40 ip address 192.168.30.254 255.255.255.0interface Vlanif50 ip address 192.168.40.254 255.255.255.0interface Vlanif100 ip address 192.168.100.1 255.255.255.0interface Vlanif101 ip address 1.1.1.2 255.255.255.0interface Vlanif102interf

14、ace MEth0/0/1interface GigabitEthernet0/0/1 port link-type access port default vlan 30interface GigabitEthernet0/0/2interface GigabitEthernet0/0/3interface GigabitEthernet0/0/4interface GigabitEthernet0/0/5 interface GigabitEthernet0/0/6interface GigabitEthernet0/0/7interface GigabitEthernet0/0/8int

15、erface GigabitEthernet0/0/9interface GigabitEthernet0/0/10interface GigabitEthernet0/0/11 port default vlan 40interface GigabitEthernet0/0/12interface GigabitEthernet0/0/13interface GigabitEthernet0/0/14interface GigabitEthernet0/0/15interface GigabitEthernet0/0/16 port default vlan 40 interface GigabitEthernet0/0/17interface GigabitEthernet0/0/18 port default