H3C三层网络设备组网实例

1、H3C三层网络设备组网实例自己新手实验。1. 设备名称：7506，30-20，1000，5800，51202. 拓扑图：7506设备：assword:<7506E>su Password:User privilege level is 3, and only those commands can be usedwhose level is equal or less than this.Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE<7506E>sysSystem View: return to User V

2、iew with Ctrl+Z.7506Edis cu# version 5.20, Release 6616P05# sysname 7506E# super password level 3 cipher Q:YST8.1SQ=QMAF4<1!# domain default enable system# telnet server enable#switch-mode standardswitch-mode normal slot 2#vlan 1#vlan 2 to 100#domain system access-limit disable state active idle-

3、cut disable self-service-url disable#user-group system#local-user admin password cipher 7-CZB#/YXKQ=QMAF4<1!#interface NULL0#interface Vlan-interface1#interface Vlan-interface50 description cunchu#interface Vlan-interface51 description fuwuqi-1#interface Vlan-interface52 description fuwuqi-2#inte

4、rface Vlan-interface53 description fuwuqi-3#interface Vlan-interface54 description fuwuqi-4#interface Vlan-interface60 description link-F1000#interface Vlan-interface61 description link-3020#interface Vlan-interface100#interface GigabitEthernet2/0/1 port link-mode bridge description link-cuncu-AS112

5、 port access vlan 50#interface GigabitEthernet2/0/2 port link-mode bridge#interface GigabitEthernet2/0/3 port link-mode bridge description link5800 port link-type trunk port trunk permit vlan all#interface GigabitEthernet2/0/4 port link-mode bridge#interface GigabitEthernet2/0/5 port link-mode bridg

6、e description link-F1000 port access vlan 60#interface GigabitEthernet2/0/6 port link-mode bridge#interface GigabitEthernet2/0/7 port link-mode bridge description link-hujiao251 port access vlan 100#interface GigabitEthernet2/0/8 port link-mode bridge description link-hujiao252 port access vlan 100#

7、interface GigabitEthernet2/0/9 port link-mode bridge description link-hujiao-switch port access vlan 100#interface GigabitEthernet2/0/10 port link-mode bridge#interface GigabitEthernet2/0/11 port link-mode bridge description link-fuwu-2 port access vlan 52#interface GigabitEthernet2/0/12 port link-m

8、ode bridge#interface GigabitEthernet2/0/13 port link-mode bridge description link-fuwu-4 port access vlan 54#interface GigabitEthernet2/0/14 port link-mode bridge#interface GigabitEthernet2/0/15 port link-mode bridge description link-fuwu-1 port access vlan 51#interface GigabitEthernet2/0/16 port li

9、nk-mode bridge#interface GigabitEthernet2/0/17 port link-mode bridge description link-fuwu-3 port access vlan 53#interface GigabitEthernet2/0/18 port link-mode bridge#interface GigabitEthernet2/0/19 port link-mode bridge description link-Router-3020 port access vlan 61#interface GigabitEthernet2/0/2

10、0 port link-mode bridge#interface GigabitEthernet2/0/21 port link-mode bridge#interface GigabitEthernet2/0/22 port link-mode bridge#interface GigabitEthernet2/0/23 port link-mode bridge#interface GigabitEthernet2/0/24 port link-mode bridge#interface M-Ethernet0/0/0# load xml-configuration#user-inter

11、face aux 0user-interface vty 0 4 set authentication password cipher 7-CZB#/YXKQ=QMAF4<1!user-interface vty 5 15#return7506E路由器30-2030-20dis cu# version 5.20, Release 2311, Basic# sysname 30-20# super password level 3 cipher $c$3$apM+A/lCx636wxYJ0rlpXolz4RRPAw=# domain default enable system# telne

12、t server enable# dar p2p signature-file cfa0:/p2p_default.mtd# port-security enable# undo ip http enable#vlan 1#domain system access-limit disable state active idle-cut disable self-service-url disable#user-group system group-attribute allow-guest#local-user admin password cipher $c$3$ZhkT3JGOKb/CIz

13、ZtOUajo6+gUE1BHA= authorization-attribute level 3 service-type telnet#interface Aux0 async mode flow link-protocol ppp#interface Cellular0/0 async mode protocol link-protocol ppp#interface NULL0#interface GigabitEthernet0/0 port link-mode route description link-1000 speed 1000#interface GigabitEther

14、net0/1 port link-mode route description link-7506# load xml-configuration#user-interface con 0user-interface tty 13user-interface aux 0user-interface vty 0 4 authentication-mode scheme set authentication password cipher $c$3$Ble0bHzUESE3MET33Y2jGYDh0zt3sg=#return30-20防火墙1000F1000F1000dis cu# sysname

15、 F1000# firewall packet-filter enable firewall packet-filter default permit# firewall statistic system enable#radius scheme system server-type extended#domain system#local-user admin password cipher 7-CZB#/YXKQ=QMAF4<1!#interface Aux0 async mode flow#interface GigabitEthernet0/0#interface Gigabit

16、Ethernet0/1 speed 1000 description link-3020 ip address #interface GigabitEthernet1/0#interface GigabitEthernet1/1 description link-7506-5#interface Encrypt2/0#interface NULL0#firewall zone local set priority 100#firewall zone trust add interface GigabitEthernet0/1 add int

17、erface GigabitEthernet1/1 set priority 85#firewall zone untrust add interface GigabitEthernet0/0 add interface GigabitEthernet1/0 set priority 5# firewall zone DMZ set priority 50#firewall interzone local trust#firewall interzone local untrust#firewall interzone local DMZ#firewall interzone trust untrust#firewall interzone trust DMZ#firewall interzone DMZ untrust# telnet source-interface GigabitEthernet1/1# ip route-static 192.168.6