S7506E三层交换机配置Word文件下载.docx

1、switch-mode standardacl number 3010 description to UTM200 rule 0 permit ip source 192.168.128.0 0.0.15.255 rule 1 permit ip source 192.168.160.0 0.0.31.255acl number 3011 rule 0 permit ip source 192.168.34.0 0.0.0.255 rule 1 permit ip source 192.168.37.0 0.0.0.255 rule 2 permit ip source 192.168.31.

2、0 0.0.0.255 rule 3 permit ip source 192.168.39.0 0.0.0.255 rule 4 permit ip source 192.168.254.0 0.0.0.255acl number 3500 # vlan 1 vlan 2 to 2221 vlan 2222 description wireless_guestvlan 2223 to 2500vlan 3000 description testvlan 3901 description dianxin apvlan 3902 vlan 3985 description dhcp for te

3、mp guest meeting supervlan subvlan 36 vlan 3986 description dianxin wireless subvlan 3901 vlan 3987 description huisuo vlan 33 subvlan 33 vlan 3988 description wireless subvlan 2222 vlan 3989 subvlan 3 to 29vlan 3990 subvlan 1226 to 1250vlan 3991 subvlan 1200 to 1225vlan 3992 subvlan 100 to 111vlan

4、3993 subvlan 1032 to 1150vlan 3994 subvlan 911 to 1031vlan 3995 subvlan 791 to 910vlan 3996 subvlan 351 to 421 747 to 790vlan 3997 subvlan 231 to 350vlan 3998 subvlan 112 to 230vlan 3999 vlan 4000 to 4001ftth domain system access-limit disable state active idle-cut disable self-service-url disabletr

5、affic classifier kefang operator and if-match acl 3010traffic classifier denyvlanclass operator and if-match acl 3500traffic behavior kefang redirect next-hop 192.168.145.2traffic behavior dengvlan filter deny qos policy kefang classifier kefang behavior kefangqos policy denyvlan classifier denyvlan

6、class behavior dengvlandhcp server ip-pool 3985 network 192.168.36.0 mask 255.255.255.0 gateway-list 192.168.36.254 dns-list 202.96.128.86 202.96.128.166 8.8.8.8 expired day 0 hour 8dhcp server ip-pool 3986 network 192.168.160.0 mask 255.255.224.0 gateway-list 192.168.160.1 dns-list 202.96.128.86 8.

7、8.8.8 202.96.128.166 expired day 0 hour 2dhcp server ip-pool 3987 network 192.168.33.0 mask 255.255.255.0 gateway-list 192.168.33.254dhcp server ip-pool 3988 network 192.168.142.0 mask 255.255.254.0 gateway-list 192.168.142.1 expired day 0 hour 4dhcp server ip-pool 3989 network 192.168.140.0 mask 25

8、5.255.254.0 gateway-list 192.168.140.1dhcp server ip-pool 3990 network 192.168.138.0 mask 255.255.254.0 gateway-list 192.168.138.1dhcp server ip-pool 3991 network 192.168.136.0 mask 255.255.254.0 gateway-list 192.168.136.1dhcp server ip-pool 3992 network 192.168.134.0 mask 255.255.254.0 gateway-list

9、 192.168.134.1dhcp server ip-pool 3993 network 192.168.132.128 mask 255.255.255.128 gateway-list 192.168.132.129dhcp server ip-pool 3994 network 192.168.132.0 mask 255.255.255.128 gateway-list 192.168.132.1dhcp server ip-pool 3995 network 192.168.131.128 mask 255.255.255.128 gateway-list 192.168.131

10、.129dhcp server ip-pool 3996 network 192.168.131.0 mask 255.255.255.128 gateway-list 192.168.131.1dhcp server ip-pool 3997 network 192.168.130.128 mask 255.255.255.128 gateway-list 192.168.130.129dhcp server ip-pool 3998 network 192.168.130.0 mask 255.255.255.128 gateway-list 192.168.130.1dhcp serve

11、r ip-pool 3999local-user admin password cipher _PWRO8;4.DN#U3;6Q! service-type telnet level 3 stp instance 0 root primary stp enable monitor-link group 1interface NULL0 interface Vlan-interface1 ip address 192.168.39.2 255.255.255.0interface Vlan-interface2 ip address 192.168.31.227 255.255.255.0int

12、erface Vlan-interface30 ip address 192.168.30.254 255.255.255.0interface Vlan-interface32 ip address 192.168.32.254 255.255.255.0interface Vlan-interface34 ip address 192.168.34.254 255.255.255.0interface Vlan-interface35 ip address 192.168.35.254 255.255.255.0interface Vlan-interface37 ip address 1

13、92.168.37.254 255.255.255.0interface Vlan-interface38 ip address 192.168.38.254 255.255.255.0interface Vlan-interface3985 ip address 192.168.36.254 255.255.255.0interface Vlan-interface3986 （分配网关） ip address 192.168.160.1 255.255.224.0 local-proxy-arp enableinterface Vlan-interface3987 ip address 19

14、2.168.33.254 255.255.255.0interface Vlan-interface3988 ip address 192.168.142.1 255.255.254.0interface Vlan-interface3989 ip address 192.168.140.1 255.255.254.0interface Vlan-interface3990 ip address 192.168.138.1 255.255.254.0interface Vlan-interface3991 ip address 192.168.136.1 255.255.254.0interf

15、ace Vlan-interface3992 ip address 192.168.134.1 255.255.254.0interface Vlan-interface3993 ip address 192.168.132.129 255.255.255.128interface Vlan-interface3994 ip address 192.168.132.1 255.255.255.128interface Vlan-interface3995 ip address 192.168.131.129 255.255.255.128interface Vlan-interface3996

16、 ip address 192.168.131.1 255.255.255.128interface Vlan-interface3997 ip address 192.168.130.129 255.255.255.128interface Vlan-interface3998 ip address 192.168.130.1 255.255.255.128interface Vlan-interface3999 ip address 192.168.145.1 255.255.255.0interface Vlan-interface4000 description to f1000-s

17、ip address 192.168.254.1 255.255.255.0interface Vlan-interface4001 ip address 192.168.254.101 255.255.255.252interface GigabitEthernet2/0/1 port link-type trunk port trunk permit vlan 1 to 3984 3999 to 4094 qos apply policy kefang inboundinterface GigabitEthernet2/0/2 port trunk permit vlan 1 to 398

18、4 4000 to 4094interface GigabitEthernet2/0/3interface GigabitEthernet2/0/4interface GigabitEthernet2/0/5interface GigabitEthernet2/0/6interface GigabitEthernet2/0/7interface GigabitEthernet2/0/8interface GigabitEthernet2/0/9interface GigabitEthernet2/0/10interface GigabitEthernet2/0/11interface Giga

19、bitEthernet2/0/12interface GigabitEthernet3/0/1 port access vlan 4000interface GigabitEthernet3/0/2 undo port trunk permit vlan 1 port trunk permit vlan 3 to 29 39 50 to 99 101 to 3984 4001 to 4094 port trunk pvid vlan 39 mirroring-group 1 mirroring-port bothinterface GigabitEthernet3/0/3 port access vlan 2interface GigabitEthernet3/0/4 port access vlan 1227 mirroring-group 2 monitor-portinterface GigabitEthernet3/0/5 port access vlan 3901interface GigabitEther