機(jī)房網(wǎng)絡(luò)工程改造項(xiàng)目實(shí)施方案(編輯修改稿)
2025-05-31 05:47 本頁(yè)面
【文章內(nèi)容簡(jiǎn)介】 outbound firewall packetfilter default permit interzone trust vzone direction inbound firewall packetfilter default permit interzone trust vzone direction outbound firewall packetfilter default permit interzone dmz untrust direction inbound firewall packetfilter default permit interzone dmz untrust direction outbound firewall packetfilter default permit interzone untrust vzone direction inbound firewall packetfilter default permit interzone untrust vzone direction outbound firewall packetfilter default permit interzone dmz vzone direction inbound firewall packetfilter default permit interzone dmz vzone direction outbound nat addressgroup 1 dhcp enable firewall statistic system enable firewall carclass 1 1000000 firewall carclass 2 1000000interface Cellular0/1/0 linkprotocol pppinterface GigabitEthernet0/0/0 //連接光線(xiàn)通道 ip address //公網(wǎng)IPinterface GigabitEthernet0/0/1 //連接核心交換 ip address //私網(wǎng)IPinterface GigabitEthernet0/0/2interface GigabitEthernet0/0/3interface NULL0firewall zone local set priority 100firewall zone trust set priority 85 add interface GigabitEthernet0/0/1 statistic enable ip inzone statistic enable ip outzone statistic car ip outbound 1 aclnumber 3003 statistic car ip inbound 2 aclnumber 3004 // 做流控的訪(fǎng)問(wèn)規(guī)則firewall zone untrust set priority 5 add interface GigabitEthernet0/0/0firewall zone dmz set priority 50firewall zone vzone set priority 0firewall interzone trust untrust nat outbound 3001 addressgroup 1aaa localuser admin password cipher ]MQ。4\]B+4Z,YWX*NZ55OA!! localuser admin servicetype web terminal telnet localuser admin level 3 authenticationscheme default authenticationscheme system authorizationscheme default accountingscheme default domain default domain systemrightmanager servergroup slb ip routestatic //默認(rèn)路由 ip routestatic userinterface con 0userinterface tty 9 authenticationmode none modem bothuserinterface vty 0 4 authenticationmode aaa user privilege level 3 set authentication password simple telnet888return[USG5120BSR] USG5120BSR（路由器）Web登錄 S5328CSI（核心交換）調(diào)試配置手冊(cè)[Quidway]dis curr!Software Version V100R005C01SPC100 sysname Quidway dns resolve dns server dns server dns domain domain dns domain vlan batch 2 to 3 cluster enable ntdp enable ntdp hop 16 ndp enable dhcp enable undo server enable ip pool 1 ip pool 2 ip pool 3ip pool 1 gatewaylist 大廳工作人IP網(wǎng)關(guān) network mask excludedipaddress dnslist ip pool 2 gatewaylist 領(lǐng)導(dǎo)辦公室IP網(wǎng)關(guān) network mask excludedipaddress dnslist ip pool 3 gatewaylist 機(jī)房IP 網(wǎng)關(guān) network mask dnslist aaa authenticationscheme default authorizationscheme default accountingscheme default domain default domain default_admin localuser admin password simple admin localuser admin servicetype interface Vlanif1 ip address dhcp select globalinterface Vlanif2 ip address dhcp select globalinterface Vlanif3 ip address dhcp select globalinterface MEth0/0/1interface GigabitEthernet0/0/1 port linktype access port default vlan 3 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/2 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/3 port linktype access port default vlan 3 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/4 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/5 port linktype access port default vlan 3 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/6 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/7 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/8 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/9 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/10 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/11 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/12 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/13 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/14 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/15 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/16 port linktype access port default vlan 3 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/17 port linktype trunk port trunk allowpass vlan 2 to 4094 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/18 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/19 port linktype access port default vlan 3 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/20 port linktype access port default vlan 3 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/21 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/22 port linktype access port default vlan 3 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/23 port linktype trunk port trunk allowpass vlan 2 to 4094 ntdp enable ndp enable bpdu enableinterface GigabitEthernet0/0/24 port linktype trunk port trunk allowpass vlan 2 to 4094 ntdp enable ndp enable bpdu enableinterface NULL0 ip routestatic ip routestatic snmpagent snmpagent localengineid 000007DB7F00000100007C0F snmpagent sysinfo version v3userinterface con 0 idletimeout 0 0userinterface vty 0 4 authenticationmode none user privilege level 4return[Quidway] S2352PEI（接入交換）調(diào)試配置手冊(cè)[Quidway]dis curr!Software Version V100R005C01SPC10
公司管理相關(guān)推薦
鄂ICP備17016276號(hào)-1