华为交换机5720S-52P-SI-AC配置文件

该博客介绍了能满足90%企业网络架构需求的华为交换机配置。包括vlan、vlan interface、route、dhcp、trunk、access、eth - trunk等配置要点,还给出了可满足1000信息点需求的华为交换机具体配置示例。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

项目介绍

学习以下配置,能满足90%企业网络架构需求


项目背景:

企业网络核心交换机配置参考

vlan  :不同部门,不同vlan

vlan interface : 每个vlan配置接口ip

route  :90%企业配置静态路由就可以了

dhcp :配置DHCP中继,DHCP服务器通常配置到AD域控制器

trunk :指交换机端口的类型,通常级联用到

access:指交换机端口的类型,通常连接终端和电脑设备
eth-trunk:上行线路,多个端口绑定,提高上行带宽

策略路由: 略,多出口IP配置网关

一个华为交换机配置参考,可以满足1000信息点需求:

!Software Version V200R010C00SPC600
#
sysname HUAWEI
#
dns server 127.0.0.1
#
vlan batch 10 20 30 40 50 60 70 80 90 100
vlan batch 120
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name portal_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name multi_authen_profile
#
dhcp enable
#
radius-server template default
#
pki realm default
 certificate-check none
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
dhcp server group 1 
 dhcp-server 172.26.0.10 0
#
dhcp server group 2 
 dhcp-server 172.26.1.1 0
#
dhcp server group 3 
 dhcp-server 172.26.2.20 0
#
aaa
 authentication-scheme default
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
 accounting-scheme default
 local-aaa-user password policy administrator 
  password expire 0
 domain default
  authentication-scheme radius
  radius-server default
 domain default_admin
  authentication-scheme default
 local-user admin password irreversible-cipher $1a$3sT>VB3[a2$5L0*;r"}H1.@N{)`vbn95kY>=AGDj4j,SWIxZk-"$
 local-user admin privilege level 15
 local-user admin service-type terminal http
#
interface Vlanif1
 ip address 172.26.1.2 255.255.254.0
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif10
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif20
 ip address 172.26.2.2 255.255.254.0
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif30
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif40
 ip address 172.26.4.2 255.255.254.0
#
interface Vlanif50
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif60
 ip address 172.26.6.2 255.255.254.0
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif80
 ip address 172.26.8.2 255.255.254.0
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif100
 ip address 172.26.10.2 255.255.254.0
 dhcp select relay
 dhcp relay server-select 1
#
interface Vlanif120
 ip address 172.26.12.2 255.255.254.0
#
interface MEth0/0/1
#
interface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/4
 port link-type access
 port default vlan 40
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
 port link-type access
 port default vlan 60
#
interface GigabitEthernet0/0/7
 port link-type access
 port default vlan 80
#
interface GigabitEthernet0/0/8
 port link-type access
 port default vlan 80
#
interface GigabitEthernet0/0/9
 port link-type access
 port default vlan 80
#
interface GigabitEthernet0/0/10
 port link-type access
 port default vlan 80
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
 port link-type access
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
 port link-type access
#
interface GigabitEthernet0/0/25
#
interface GigabitEthernet0/0/26
#
interface GigabitEthernet0/0/27
#
interface GigabitEthernet0/0/28
#
interface GigabitEthernet0/0/29
#
interface GigabitEthernet0/0/30
#
interface GigabitEthernet0/0/31
#
interface GigabitEthernet0/0/32
#
interface GigabitEthernet0/0/33
#
interface GigabitEthernet0/0/34
#
interface GigabitEthernet0/0/35
#
interface GigabitEthernet0/0/36
#
interface GigabitEthernet0/0/37
 port link-type access
#
interface GigabitEthernet0/0/38
#
interface GigabitEthernet0/0/39
#
interface GigabitEthernet0/0/40
#
interface GigabitEthernet0/0/41
#
interface GigabitEthernet0/0/42
#
interface GigabitEthernet0/0/43
#
interface GigabitEthernet0/0/44
#
interface GigabitEthernet0/0/45
#
interface GigabitEthernet0/0/46
#
interface GigabitEthernet0/0/47
 eth-trunk 1
#
interface GigabitEthernet0/0/48
 eth-trunk 1
#
interface GigabitEthernet0/0/49
#
interface GigabitEthernet0/0/50
#
interface GigabitEthernet0/0/51
#
interface GigabitEthernet0/0/52
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 172.26.1.1
#
user-interface con 0
 authentication-mode aaa
user-interface vty 0 4
 user privilege level 15
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
return  

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

jekc868

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值