该楼层疑似违规已被系统折叠 隐藏此楼查看此楼
我在ensp里,测试通过,valn 10,20之间不能访问,vlan 10,20可以访问vlan 20,
都自动获取IP地址,交换机LSW!是S5700,其他是S3700
#
sysname Huawei
#
vlan batch 10 20 30
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
dhcp enable
#
diffserv domain default
#
acl number 3000
rule 5 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.255
rule 10 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.30.0 0.0.0.
255
rule 15 permit ip source 192.168.20.0 0.0.0.255 destination 192.168.30.0 0.0.0.
255
#
traffic classifier k1 operator and
if-match acl 3000
#
traffic behavior k2
permit
#
traffic policy k3
classifier k1 behavior k2
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface Vlanif10
ip address 192.168.10.1 255.255.255.0
dhcp select interface
dhcp server dns-list 61.139.2.9
#
interface Vlanif20
ip address 192.168.20.1 255.255.255.0
dhcp select interface
dhcp server dns-list 61.139.2.69
#
interface Vlanif30
ip address 192.168.30.1 255.255.255.0
dhcp select interface
dhcp server dns-list 61.139.2.69
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 30
traffic-policy k3 inbound
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 10
traffic-policy k3 inbound
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 20
#