1、PC1、PC3在同一vlan,PC2、PC4在同一vlan,同vlan下网段相同 2、为了提高安全性,PC3、PC4做基于MAC的vlan 3、SW3-SW4之间做LACP模式的链路聚合,最大活动链路为两条,允许抢占。 4、接入层交换机为二层交换机。汇聚层为三层交换机, vlan10的网关在SW3上,VLAN20的网关在SW4上。 5、为了保证可靠性,交换机之间互联链路允许所有vlan通行。 6、内网区域使用OSPF全互联。AR3为内网的Telnet服务器。 7、AR1-AR2之间做浮动路由。 8、AR2为NAT设备,使用NAPT访问外网。AR3作为内网Telnet服务器,需要映射到公网中,使公网设备能够访问内网的Telnet服务器 9、公网区域使用OSPF全互联。每台路由器都需创建一个loopback接口,(开启OSPF设备AR2、4、5、6、7) 接口编号为当前路由器的设备编号。公网区域loopback接口要求也能全互访。严禁公网路由进入私网。 10、AR7作为第二个私网的出口路由器,使用静态NAT提供访问公网的服务。仅允许PC5、6进行地址转换访问公网 11、PC5、6处于不同网段,要求使用单臂路由互通。 12、交换机7作为二层交换机,使用hybird接口,AR8能和AR7、AR9互访,但AR7和AR9无法通信。AR9作为Telnet内网服务器 13、在内网1中,禁止PC2、PC3远程登陆Telnet内网服务器。但是可以ping通Telnet服务器。 禁止PC1、PC4,ping通Telnet服务器,但可以远程登陆Telnet服务器 14、公网设备AR5上存在10.1.0.0/24网段–10.1.10.0/24网段(使用loopback接口创建该网段) 要求内网PC1、3设备仅能ping通AR5上的偶数网段,PC2、4仅能ping通AR5的奇数网段。 15、要求PC5、6访问AR2的G0/0/2接口时,流量路径仅为AR7-AR5-AR4。同一时刻之内,访问AR2的G0/0/2接口仅能出现一条路由。 16、要求PC1能ping通PC5,做NAT444,在AR7的NAT444中使用静态NAT 17、附加题,做Telnet的路由器使用3A认证的方式 18、注意,PC无法Telnet,可以使用其他三层设备Telnet
#
sysname SW1
#
undo info-center enable
#
vlan batch 10 20 30
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/6
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/7
port link-type access
port default vlan 20
#
interface GigabitEthernet0/0/8
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
#
sysname SW2
#
undo info-center enable
#
vlan batch 10 20
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
vlan 10
mac-vlan mac-address 5489-9875-3e78 ffff-ffff-0000 priority 0
vlan 20
mac-vlan mac-address 5489-989e-80e3 ffff-ffff-0000 priority 0
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/6
port hybrid untagged vlan 10
mac-vlan enable
#
interface GigabitEthernet0/0/7
port hybrid untagged vlan 20
mac-vlan enable
#
interface GigabitEthernet0/0/8
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
#
sysname SW3
#
undo info-center enable
#
vlan batch 10 20 100
#
lacp priority 0
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface Vlanif10
ip address 192.168.1.254 255.255.255.0
#
interface Vlanif100
ip address 100.1.1.3 255.255.255.0
#
interface MEth0/0/1
#
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 10 20
mode lacp-static
lacp preempt enable
max active-linknumber 2
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 100
#
interface GigabitEthernet0/0/4
eth-trunk 1
lacp priority 10
#
interface GigabitEthernet0/0/5
eth-trunk 1
#
interface GigabitEthernet0/0/6
eth-trunk 1
lacp priority 10
#
interface GigabitEthernet0/0/7
eth-trunk 1
#
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 100.1.1.0 0.0.0.255
network 192.168.1.0 0.0.0.255
network 192.168.2.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 100.1.1.10
#
user-interface con 0
user-interface vty 0 4
#
return
#
sysname SW4
#
undo info-center enable
#
vlan batch 10 20 200
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface Vlanif20
ip address 192.168.2.254 255.255.255.0
#
interface Vlanif200
ip address 200.1.1.3 255.255.255.0
#
interface MEth0/0/1
#
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 10 20
mode lacp-static
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 200
#
interface GigabitEthernet0/0/4
eth-trunk 1
#
interface GigabitEthernet0/0/5
eth-trunk 1
#
interface GigabitEthernet0/0/6
eth-trunk 1
#
interface GigabitEthernet0/0/7
eth-trunk 1
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 200.1.1.0 0.0.0.255
network 192.168.1.0 0.0.0.255
network 192.168.2.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 200.1.1.10
#
user-interface con 0
user-interface vty 0 4
#
return
#
sysname AR10
#
board add 0/4 4GET
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
acl name canxun 3000
rule 5 deny tcp source 192.168.2.2 0 destination 103.1.1.3 0 destination-port e
q telnet
rule 10 deny tcp source 192.168.1.3 0 destination 103.1.1.3 0 destination-port
eq telnet
rule 15 deny icmp source 192.168.1.1 0 destination 103.1.1.3 0
rule 20 deny ip source 192.168.1.0 0.0.0.255 destination 10.1.1.0 0.0.254.255
rule 25 deny ip source 192.168.2.0 0.0.0.255 destination 10.1.0.0 0.0.254.255
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 110.1.1.10 255.255.255.0
traffic-filter outbound acl name canxun
#
interface GigabitEthernet0/0/1
ip address 100.1.1.10 255.255.255.0
#
interface GigabitEthernet0/0/2
ip address 200.1.1.10 255.255.255.0
#
interface GigabitEthernet4/0/0
ip address 103.1.1.10 255.255.255.0
traffic-filter outbound acl name canxun
#
interface GigabitEthernet4/0/1
#
interface GigabitEthernet4/0/2
#
interface GigabitEthernet4/0/3
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 100.1.1.0 0.0.0.255
network 103.1.1.0 0.0.0.255
network 110.1.1.0 0.0.0.255
network 200.1.1.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 110.1.1.1
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR3
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
local-user canxun password cipher %$%$[c'dAO[/N/'&I;Yk)J9"/2[<%$%$
local-user canxun privilege level 3
local-user canxun service-type telnet
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 103.1.1.3 255.255.255.0
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 103.1.1.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 103.1.1.10
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
authentication-mode aaa
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR1
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 110.1.1.1 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
#
interface GigabitEthernet0/0/2
ip address 21.1.1.1 255.255.255.0
ospf cost 6000
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 12.1.1.0 0.0.0.255
network 21.1.1.0 0.0.0.255
network 110.1.1.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR2
#
board add 0/4 2SA
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
acl number 2000
rule 5 permit source 192.168.1.0 0.0.0.255
rule 10 permit source 192.168.2.0 0.0.0.255
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
nat address-group 1 24.1.1.10 24.1.1.20
#
interface Serial4/0/0
link-protocol ppp
#
interface Serial4/0/1
link-protocol ppp
#
interface GigabitEthernet0/0/0
ip address 12.1.1.2 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 21.1.1.2 255.255.255.0
ospf cost 6000
#
interface GigabitEthernet0/0/2
ip address 24.1.1.2 255.255.255.0
nat server protocol tcp global 24.1.1.5 telnet inside 103.1.1.3 telnet
nat outbound 2000 address-group 1
#
interface NULL0
#
interface LoopBack0
ip address 2.2.2.2 255.255.255.255
#
ospf 1
area 0.0.0.0
network 12.1.1.0 0.0.0.255
network 21.1.1.0 0.0.0.255
#
ospf 2 router-id 2.2.2.2
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 24.1.1.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 24.1.1.4
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR4
#
board add 0/4 2SA
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface Serial4/0/0
link-protocol ppp
#
interface Serial4/0/1
link-protocol ppp
#
interface GigabitEthernet0/0/0
ip address 24.1.1.4 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 46.1.1.4 255.255.255.0
#
interface GigabitEthernet0/0/2
ip address 45.1.1.4 255.255.255.0
#
interface NULL0
#
interface LoopBack0
ip address 4.4.4.4 255.255.255.255
#
ospf 1 router-id 4.4.4.4
area 0.0.0.0
network 4.4.4.4 0.0.0.0
network 24.1.1.0 0.0.0.255
network 45.1.1.0 0.0.0.255
network 46.1.1.0 0.0.0.255
#
ip route-static 192.168.5.0 255.255.255.0 45.1.1.5
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR5
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 57.1.1.5 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 45.1.1.5 255.255.255.0
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
ip address 5.5.5.5 255.255.255.255
#
interface LoopBack1
description q
ip address 10.1.0.1 255.255.255.0
#
interface LoopBack2
ip address 10.1.1.1 255.255.255.0
#
interface LoopBack3
ip address 10.1.2.1 255.255.255.0
#
interface LoopBack4
ip address 10.1.3.1 255.255.255.0
#
interface LoopBack5
ip address 10.1.4.1 255.255.255.0
#
interface LoopBack6
ip address 10.1.5.1 255.255.255.0
#
interface LoopBack7
ip address 10.1.6.1 255.255.255.0
#
interface LoopBack8
ip address 10.1.7.1 255.255.255.0
#
interface LoopBack9
ip address 10.1.8.1 255.255.255.0
#
interface LoopBack10
ip address 10.1.9.1 255.255.255.0
#
interface LoopBack11
ip address 10.1.10.1 255.255.255.0
#
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 5.5.5.5 0.0.0.0
network 10.1.0.0 0.0.255.255
network 45.1.1.0 0.0.0.255
network 57.1.1.0 0.0.0.255
#
ip route-static 192.168.5.0 255.255.255.0 57.1.1.7
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR6
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 46.1.1.6 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 67.1.1.6 255.255.255.0
ospf cost 6000
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
ip address 6.6.6.6 255.255.255.255
#
ospf 1 router-id 6.6.6.6
area 0.0.0.0
network 6.6.6.6 0.0.0.0
network 46.1.1.0 0.0.0.255
network 67.1.1.0 0.0.0.255
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR7
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 67.1.1.7 255.255.255.0
ospf cost 6000
nat static global 67.1.1.55 inside 192.168.5.5 netmask 255.255.255.255
nat static global 67.1.1.66 inside 192.168.6.6 netmask 255.255.255.255
#
interface GigabitEthernet0/0/1
ip address 57.1.1.7 255.255.255.0
nat static global 57.1.1.55 inside 192.168.5.5 netmask 255.255.255.255
nat static global 57.1.1.66 inside 192.168.6.6 netmask 255.255.255.255
#
interface GigabitEthernet0/0/2
ip address 98.1.1.7 255.255.255.0
nat static global 98.1.1.88 inside 24.1.1.10 netmask 255.255.255.255
nat static global 98.1.1.89 inside 24.1.1.11 netmask 255.255.255.255
nat static global 98.1.1.90 inside 24.1.1.12 netmask 255.255.255.255
nat static global 98.1.1.91 inside 24.1.1.13 netmask 255.255.255.255
nat static global 98.1.1.92 inside 24.1.1.14 netmask 255.255.255.255
nat static global 98.1.1.93 inside 24.1.1.15 netmask 255.255.255.255
nat static global 98.1.1.94 inside 24.1.1.16 netmask 255.255.255.255
nat static global 98.1.1.95 inside 24.1.1.17 netmask 255.255.255.255
nat static global 98.1.1.96 inside 24.1.1.18 netmask 255.255.255.255
nat static global 98.1.1.97 inside 24.1.1.19 netmask 255.255.255.255
nat static global 98.1.1.98 inside 24.1.1.20 netmask 255.255.255.255
#
interface NULL0
#
interface LoopBack0
ip address 7.7.7.7 255.255.255.255
#
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 7.7.7.7 0.0.0.0
network 57.1.1.0 0.0.0.255
network 67.1.1.0 0.0.0.255
#
ospf 2
area 0.0.0.0
network 98.1.1.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 57.1.1.5
ip route-static 192.168.5.0 255.255.255.0 98.1.1.8
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
#
sysname AR9
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
local-user canxun password cipher %$%$&L_\!c`weHA-9H;]Lr1W/sVj%$%$
local-user canxun privilege level 3
local-user canxun service-type telnet
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 98.1.1.9 255.255.255.0
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 98.1.1.0 0.0.0.255
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
authentication-mode aaa
user-interface vty 16 20
#
wlan ac
#
return
#
sysname SW7
#
undo info-center enable
#
vlan batch 70 80 90
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port hybrid pvid vlan 80
port hybrid untagged vlan 70 80 90
#
interface GigabitEthernet0/0/2
port hybrid pvid vlan 70
port hybrid untagged vlan 70 80
#
interface GigabitEthernet0/0/3
port hybrid pvid vlan 90
port hybrid untagged vlan 80 90
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return
#
sysname AR8
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 98.1.1.8 255.255.255.0
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/1.50
dot1q termination vid 50
ip address 192.168.5.254 255.255.255.0
arp broadcast enable
#
interface GigabitEthernet0/0/1.60
dot1q termination vid 60
ip address 192.168.6.254 255.255.255.0
arp broadcast enable
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 98.1.1.0 0.0.0.255
network 192.168.0.0 0.0.255.255
#
ip route-static 0.0.0.0 0.0.0.0 98.1.1.7
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
sysname SW6
#
undo info-center enable
#
vlan batch 50 60
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
drop-profile default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
#
interface Vlanif1
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 50
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 60
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 50 60
#
#
interface NULL0
#
user-interface con 0
user-interface vty 0 4
#
return