enable 华为交换机ntdp_华为交换机如何实现功能

该楼层疑似违规已被系统折叠 隐藏此楼查看此楼

我在ensp里，测试通过，valn 10,20之间不能访问，vlan 10,20可以访问vlan 20,

都自动获取IP地址，交换机LSW!是S5700,其他是S3700

#

sysname Huawei

#

vlan batch 10 20 30

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

dhcp enable

#

diffserv domain default

#

acl number 3000

rule 5 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.255

rule 10 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.30.0 0.0.0.

255

rule 15 permit ip source 192.168.20.0 0.0.0.255 destination 192.168.30.0 0.0.0.

255

#

traffic classifier k1 operator and

if-match acl 3000

#

traffic behavior k2

permit

#

traffic policy k3

classifier k1 behavior k2

#

drop-profile default

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password simple admin

local-user admin service-type http

#

interface Vlanif1

#

interface Vlanif10

ip address 192.168.10.1 255.255.255.0

dhcp select interface

dhcp server dns-list 61.139.2.9

#

interface Vlanif20

ip address 192.168.20.1 255.255.255.0

dhcp select interface

dhcp server dns-list 61.139.2.69

#

interface Vlanif30

ip address 192.168.30.1 255.255.255.0

dhcp select interface

dhcp server dns-list 61.139.2.69

#

interface MEth0/0/1

#

interface GigabitEthernet0/0/1

port link-type access

port default vlan 30

traffic-policy k3 inbound

#

interface GigabitEthernet0/0/2

port link-type access

port default vlan 10

traffic-policy k3 inbound

#

interface GigabitEthernet0/0/3

port link-type access

port default vlan 20

#