【文章內(nèi)容簡介】 nside smtp udp [R01serial0/0]qui 配置高級 acl [R01]firewall enable [R01]firewall default permit [R01]acl number 3000 matchorder auto [R01acladv3000]rule deny ip source any destination any [R01acladv3000]rule permit ip source destination any [R01acladv3000]rule permit ip source destination any [R01acladv3000]rule permit ip source destination any [R01acladv3000]rule permit ip source destination any [R01acladv3000]rule permit ip source destination any [R01acladv3000]rule permit ip source destination any [R01acladv3000]rule permit ip source destination any [R01acladv3000]rule permit ip source destination any [R01]acl number 3001 [R01acladv3001]rule deny ip source any destinaton any [R01acladv3001]rule permit tcp source any destination 0 destinationport eq 80 [R01acladv3001]rule permit udp source any destination 0 destinationport eq 25 [R01acladv3001]qui [R01]int e0/0 [R01ether0/0]firewall packetfilter 3000 inbound [R01ether0/0]qui [R01]int s0/0 [R01serial0/0]firewall packetfilter 3001 inbound [R01serial0/0]qui [R01]qui R01sav 匯聚層 SH201 配置： 16 配置 stp 并劃分 vlan H3Csys [H3C]sysname SH201 [SH201]vlan 10 [SH201VLAN10]port e1/0/3 to e1/0/4 [SH201VLAN10]qui [SH201]vlan 11 [SH201VLAN11]port e1/0/5 [SH201VLAN11]qui [SH201]vlan 12 [SH201VLAN12]port e1/0/6 [SH201VLAN12]qui [SH201]stp enable [SH201]int e1/0/3 [SH201ether0/3]stp disable [SH201ether0/3]int e1/0/4 [SH201ether0/4]stp disable [SH201ether0/4]int e1/0/5 [SH201ether0/5]stp disable [SH201ether0/5]int e1/0/6 [SH201ether0/6]stp disable 17 [SH201ether0/6]qui [SH201]qui SH201sav SH202 配置： 配置鏈路聚合并劃分 vlan H3Csys [H3C]sysname SH202 [SH202]vlan 13 [SH202VLAN13]port e1/0/3 [SH202VLAN13]qui [SH202]vlan 14 [SH202VLAN14]port e1/0/4 [SH202VLAN14]qui [SH202]vlan 15 [SH202VLAN15]port e1/0/5 [SH202VLAN15]qui [SH202]vlan 16 [SH202VLAN16]port e1/0/6 [SH202VLAN16]qui [SH202]vlan 17 [SH202VLAN17]port e1/0/7 [SH202VLAN17]qui [SH202]int e1/0/1 [SH202ether1/0/1]duplex full [SH202ether1/0/1]speed 100 [SH202ether1/0/1]int e0/2 [SH202ether1/0/2]duplex full [SH202ether1/0/2]speed 100 [SH202ether1/0/2]qui [SH202]linkaggregation e1/0/1 to e1/0/2 both [SH202]qui SH202sav 核心層 SH31 配置： H3Csys [H3C]sysname SH31 18 [SH31]int e1/0/1 [SH31ether1/0/1]ip add [SH31ether1/0/1]no sh [SH31ether1/0/1]int e1/0/2 [SH31ether1/0/2]ip add [SH31ether1/0/2]no sh [SH31ether1/0/2]int e1/0/3 [SH31ether1/0/3]ip add [SH31ether1/0/3]no sh [SH31ether1/0/3]qui [SH31]ip route [SH31]defaultrout 配置 stp [SH31]stp enable [SH31]int e1/0/1 [SH31ether1/0/1]stp disable [SH31ether1/0/1]int e1/0/2 [SH31ether1/0/2]stp disable [SH31ether1/0/2]int e1/0/3 [SH31ether1/0/3]stp disable [SH31ether1/0/3]int e1/0/6 [SH31ether1/0/6]stp disable [SH31ether1/0/6]int e1/0/7 [SH31ether1/0/7]stp disable [SH31ether1/0/7]qui 配置鏈路手工匯聚 [SH31]int e1/0/6 [SH31ether1/0/6]duplex full [SH31ether1/0/6]speed 100 [SH31ether1/0/6]int e1/0/7 [SH31ether1/0/7]duplex full [SH31ether1/0/7]speed 100 [SH31ether1/0/7]qui [SH31]linkaggregation e1/0/6 to e1/0/7 both 配置 vlan 的 IP 地址 [SH31]vlan 10 19 [SH31vlan10]qui [SH31]int vlaninterface 10 [SH31vlaninterface10]ip add [SH31vlaninterface10]qui [SH31]vlan 11 [SH31vlan11]qui [SH31]int vlaninterface 11 [SH31vlaninterface11]ip add [SH31vlaninterface11]qui [SH31]vlan 12 [SH31vlan12]qui [SH31]int vlaninterface 12 [SH31vlaninterface12]ip add [SH31vlaninterface12]qui [SH31]vlan 13 [SH31vlan 13]qui [SH31]int vlaninterface 13 [SH31vlaninterface13]ip add [SH31vlaninterface13]qui [SH31]vlan 14 [SH31vlan 14]qui [SH31]int vlaninterface 14 [SH31vlaninterface14]ip add [SH31vlaninterface14]qui [SH31]vlan 15 [SH31vlan 15]qui [SH31]int vlaninterface 15 [SH31vlaninterface15]ip add [SH31vlaninterface15]qui [SH31]vlan 16 [SH31vlan 16]qui [SH31]int vlaninterface 16 [SH31vlaninterface16]ip add [SH31vlaninterface16]qui [SH31]vlan 17 [SH31vlan 17]qui [SH31]int vlaninterface 17 [SH31vlaninterface17]ip add [SH31vlaninterface17]qui 20 acl配置： [SH31]timerange huawei 8:00 to 18:00 workingday [SH31]firewall enable [SH31]firewall default permit [SH31]acl number 3000 [SH31acladv3000]rule permit ip source 0 destination any timerange huawei [SH31acladv3000]rule permit ip source 0 destination any timerange huawei [SH31acladv3000]rule permit ip source destination any timerange huawei [SH31acladv3000]rule permit ip source destination any timerange huawei [SH31acladv3000]rule deny ip source any destination any timerange huawei [SH31acladv3000]qui [SH31]int e1/0/2 [SH31ether1/0/2]firewall packetfilter 3000 outbound [SH31ether1/0/2]qui [SH31]qui SH31sav 21 接入層 SJ201配置： H3Csys [H3C]sysname SJ201 [SJ201]int e1/0/1 [SJ201ether1/0/1]linerate outbound 30 [SJ201ether1/0/1]linerate inbound 16 SJ202配置： H3Csys [H3C]sysname SJ202 [SJ202]int e1/0/1 [SJ202ether1/0/1]linerate outbound 30 [SJ202ether1/0/1]linerate inbound 16 [SJ202ether1/0/1]qui [SJ202]firewall enable [SJ202]firewall default permit [SJ202]acl number 3000 [SJ202acladv3000]rule permit source 0 destination [SJ202acl