华三S5500三层交换机配置实例

原创 2018年04月17日 08:50:33
******************************************************************************
* Copyright (c) 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved.  *
* Without the owner's prior written consent,                                 *
* no decompiling or reverse-engineering shall be allowed.                    *
******************************************************************************


Login authentication


Password:
<cluster1_0.S5500_BGL>dis cur
#
 version 5.20, Release 2202
#
 sysname S5500_BGL
#
 super password level 3 cipher ,E_DF/Z7TX/Q=^Q`MAF4<1!!
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
#
 domain default enable system
#
 telnet server enable
#
 undo ip ttl-expires
#
acl number 3100 name wb
 rule 0 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.6.0 0.0.0.255
 rule 5 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.7.0 0.0.0.255
 rule 10 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
 rule 15 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
acl number 3110 name sxf
 rule 0 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.6.0 0.0.0.255
 rule 5 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
 rule 18 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.18.0 0.0.0.255
 rule 28 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.28.0 0.0.0.255
 rule 38 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.38.0 0.0.0.255
 rule 48 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.48.0 0.0.0.255
 rule 58 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.58.0 0.0.0.255
 rule 68 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.68.0 0.0.0.255
rule 78 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.78.0 0.0.0.255
 rule 88 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.88.0 0.0.0.255
 rule 98 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.98.0 0.0.0.255
acl number 3120 name server
 rule 0 permit ip source 192.168.6.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
 rule 5 permit ip source 192.168.6.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
acl number 3140 name lan
 rule 0 permit ip source 192.168.8.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
 rule 5 permit ip source 192.168.8.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
 rule 10 permit ip source 192.168.18.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
 rule 15 permit ip source 192.168.18.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
 rule 20 permit ip source 192.168.28.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
 rule 25 permit ip source 192.168.28.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
 rule 30 permit ip source 192.168.38.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
 rule 35 permit ip source 192.168.38.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
 rule 40 permit ip source 192.168.48.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
 rule 45 permit ip source 192.168.48.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
 rule 50 permit ip source 192.168.58.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
 rule 55 permit ip source 192.168.58.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
acl number 3150 name sales
 rule 60 permit ip source 192.168.68.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
 rule 65 permit ip source 192.168.68.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
#               
vlan 1          
#               
vlan 2          
 description wb
#               
vlan 4          
 description sxf
#               
vlan 5          
 description ex_in_server
#               
vlan 6          
 description server
#               
vlan 7          
 description JK
#               
vlan 8          
 description lan
#               
vlan 9          
 description outer
#               
vlan 10         
 description print_server
#               
vlan 18         
 description lan_1fac_18
#               
vlan 19         
 description outer_1fac_19
#               
vlan 28         
 description lan_2fac_28
#               
vlan 29         
 description outer_2fac_29
#               
vlan 38         
 description lan_3fac_38
#               
vlan 39         
 description outer_3fac_39
#               
vlan 48         
 description yikatong
#               
vlan 58         
 description lan_LED_58
#               
vlan 59         
 description outer_LED_59
#               
vlan 68         
 description lan68
#               
vlan 69         
 description outer_lan69
#               
vlan 78         
 description lan78
#               
vlan 88         
 description lan88
#               
vlan 98         
 description lan98
#               
vlan 100        
 description wan
#               
vlan 254        
 description Net-Device
#               
radius scheme system
 server-type extended
 primary authentication 127.0.0.1 1645
 primary accounting 127.0.0.1 1646
 user-name-format without-domain
#               
domain system   
 access-limit disable
 state active   
 idle-cut disable
 self-service-url disable
#               
traffic classifier classifier_wb operator and
 if-match acl 3100
traffic classifier classifier_lan operator and
 if-match acl 3140
traffic classifier classifier_server operator and
 if-match acl 3120
traffic classifier classifier_sxf operator and
 if-match acl 3110
#               
traffic behavior behavior_wb
 filter deny    
traffic behavior behavior_server
 filter deny    
traffic behavior behavior_lan
 filter deny    

traffic behavior behavior_sxf

filter deny    
#               
qos policy policy_lan
 classifier classifier_lan behavior behavior_lan
qos policy policy_server
 classifier classifier_server behavior behavior_server
qos policy policy_sxf
 classifier classifier_sxf behavior behavior_sxf
qos policy policy_wb
 classifier classifier_wb behavior behavior_wb
#               
user-group system
#               
local-user admin
 password simple guxin@22881
 service-type telnet
local-user lyc  
#               
 stp pathcost-standard dot1t
 stp enable     
#               
interface NULL0
#               
interface Vlan-interface1
 ip address 192.168.99.241 255.255.255.0
#               
interface Vlan-interface2
 ip address 192.168.2.241 255.255.255.0
#               
interface Vlan-interface4
 ip address 192.168.4.241 255.255.255.0
#               
interface Vlan-interface5
 ip address 192.168.5.241 255.255.255.0
#               
interface Vlan-interface6
 ip address 192.168.6.241 255.255.255.0
#               
interface Vlan-interface7
 ip address 192.168.7.241 255.255.255.0
#               
interface Vlan-interface8
 ip address 192.168.8.241 255.255.255.0
#               
interface Vlan-interface9
 ip address 192.168.9.241 255.255.255.0
#               
interface Vlan-interface10
 ip address 192.168.10.241 255.255.255.0
#               
interface Vlan-interface18
 ip address 192.168.18.241 255.255.255.0
#               
interface Vlan-interface19
 ip address 192.168.19.241 255.255.255.0
#               
interface Vlan-interface28
 ip address 192.168.28.241 255.255.255.0
#               
interface Vlan-interface29
 ip address 192.168.29.241 255.255.255.0
#               
interface Vlan-interface38
 ip address 192.168.38.241 255.255.255.0
#               
interface Vlan-interface39
 ip address 192.168.39.241 255.255.255.0
#               
interface Vlan-interface48
 ip address 192.168.48.241 255.255.255.0
#               
interface Vlan-interface58
 ip address 192.168.58.241 255.255.255.0
#               
interface Vlan-interface59
 ip address 192.168.59.241 255.255.255.0
#               
interface Vlan-interface68
 ip address 192.168.68.241 255.255.255.0
#               
interface Vlan-interface69
 ip address 192.168.69.241 255.255.255.0
#               
interface Vlan-interface78
 ip address 192.168.78.241 255.255.255.0
#               
interface Vlan-interface88
 ip address 192.168.88.241 255.255.255.0
#               
interface Vlan-interface98
 ip address 192.168.98.241 255.255.255.0
#               
interface Vlan-interface100
 ip address 192.168.1.241 255.255.255.0
#               
interface Vlan-interface254
 ip address 192.168.254.241 255.255.255.0
#               
interface GigabitEthernet1/0/1
 port access vlan 8
#               
interface GigabitEthernet1/0/2
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/3
 port access vlan 8
#               
interface GigabitEthernet1/0/4
 port access vlan 8
#               
interface GigabitEthernet1/0/5
 port access vlan 8
#               
interface GigabitEthernet1/0/6
 port access vlan 8
#               
interface GigabitEthernet1/0/7
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/8
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/9
 port access vlan 8
#               
interface GigabitEthernet1/0/10
 port access vlan 8
#               
interface GigabitEthernet1/0/11
 port access vlan 8
#               
interface GigabitEthernet1/0/12
 port access vlan 8
#               
interface GigabitEthernet1/0/13
 port access vlan 5
#               
interface GigabitEthernet1/0/14
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/15
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/16
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/17
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/18
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/19
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/20
 port link-type trunk
port trunk permit vlan all
#               
interface GigabitEthernet1/0/21
 port link-type trunk
 port trunk permit vlan all
 shutdown       
#               
interface GigabitEthernet1/0/22
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/23
 port link-type trunk
 port trunk permit vlan all
 shutdown       
#               
interface GigabitEthernet1/0/24
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/25
 shutdown       
#               
interface GigabitEthernet1/0/26
 shutdown       
#               
interface GigabitEthernet1/0/27
 port link-type trunk
 port trunk permit vlan all
#               
interface GigabitEthernet1/0/28
 port link-type trunk
 port trunk permit vlan all
#               
cluster         
 ip-pool 172.16.0.1 255.255.255.248
 build cluster1
 ftp-server 192.168.9.44
 tftp-server 192.168.9.44
#               
 ip route-static 0.0.0.0 0.0.0.0 192.168.5.254
#               
#               
 snmp-agent     
 snmp-agent local-engineid 800063A2033CE5A6A8CAD2
 snmp-agent community read public
 snmp-agent community write private
 snmp-agent sys-info version all
#               
 qos vlan-policy policy_wb vlan 2 inbound
 qos vlan-policy policy_server vlan 6 inbound
 qos vlan-policy policy_lan vlan 8 inbound
 qos vlan-policy policy_lan vlan 18 inbound
 qos vlan-policy policy_lan vlan 28 inbound
 qos vlan-policy policy_lan vlan 38 inbound
 qos vlan-policy policy_lan vlan 48 inbound
 qos vlan-policy policy_lan vlan 58 inbound
 qos vlan-policy policy_sxf vlan 4 inbound
 qos vlan-policy policy_lan vlan 68 inbound
#               
user-interface aux 0
 authentication-mode password
 set authentication password cipher ,E_DF/Z7TX/Q=^Q`MAF4<1!!
 history-command max-size 20
 idle-timeout 6 0
 screen-length 30
user-interface aux 1 8
user-interface vty 0
 user privilege level 3
 set authentication password cipher ,E_DF/Z7TX/Q=^Q`MAF4<1!!
 history-command max-size 20
 idle-timeout 6 0
 screen-length 30
 protocol inbound telnet
user-interface vty 1 4
#               
return          




举例讲解H3C配置三层交换机4个步骤详细用法

举例讲解H3C配置三层交换机4个步骤详细用法,配置三层交换机通用的四个步骤就是:划分VLAN,并描述;给VLAN划网关;给VLAN指定端口;配置路由协议;学会这几个步骤之后就能解决所有的配置三层交换机...
  • a602411570
  • a602411570
  • 2014-01-26 11:05:21
  • 3203

H3C配置三层交换机配置实例

举例讲解H3C配置三层交换机4个步骤详细用法,配置三层交换机通用的四个步骤就是:划分VLAN,并描述;给VLAN划网关;给VLAN指定端口;配置路由协议;学会这几个步骤之后就能解决所有的配置三层交换机...
  • redline2005
  • redline2005
  • 2014-04-18 20:04:13
  • 13435

H3C S5500-24P-SI 基本配置过程,有说明

  • 2012年04月19日 11:41
  • 21KB
  • 下载

华三的三层交换机配置资料和命令大全

  • 2015年04月20日 05:44
  • 2.05MB
  • 下载

H3c S5500-EI交换机利用ACL实现TCP单向访问的配置

S5500-EI交换机利用ACL实现TCP单向访问的配置   一、 组网需求: 2个网段通过一台S5500-EI互联,要求网段A可以访问网段B,网段B不能访问网段A。 二、 组网图: S...
  • tollys
  • tollys
  • 2015-03-13 09:54:10
  • 1919

H3C三层交换机划分VLAN示例

很久很久之前搞Linux端口转发时,借了一台三层交换机,我拿到手还没拆包装箱。不知道是不是因为工作上的这个原因而买的。不过后来实现的端口转发和三层交换机完全不搭边,就不了了之了。现在领导安排我查查...
  • subfate
  • subfate
  • 2015-04-12 00:31:57
  • 8140

H3C 5500 ssh登录配置

  • 2013年07月09日 09:22
  • 54KB
  • 下载

H3C交换机忘记密码的解决办法

一、.拔掉电源再插上重新启动交换机,在超级终端中可以看到交换机启动画面,当出现提示按CTRL+B时,此时按住CTRL+B,我们会看到有9个选项,依次为 1.download application ...
  • yjpyt
  • yjpyt
  • 2014-07-22 10:01:44
  • 607

H3C交换机的简单配置

XX H3C交换机配置指南? 设备型号:H3C S2126-EI? IP 地址设定:(两部,以下以XX_H3C1为例)? XX_H3C1:  201.2.1.1  ? XX_H3C2:  201.2....
  • leader_ww
  • leader_ww
  • 2008-02-20 15:25:00
  • 3348

H3C S5500 操作手册

  • 2012年06月06日 11:32
  • 383KB
  • 下载
收藏助手
不良信息举报
您举报文章:华三S5500三层交换机配置实例
举报原因:
原因补充:

(最多只允许输入30个字)