网络建设项目竣工文档

/中国核工业其次二建设公司网络系统建设项目竣工文档沈阳赛莫网络工程有限公司2013年11月

书目前言 4一、网络设备的安装配置文档 51.VLAN及IP地址支配 52.网络设备管理IP 53.公网IP地址支配 64.现网络设备连接图 75.后期规划网络拓扑图 8二、网络设备的调试及叮嘱 91.核心交换机叮嘱: 91.1远程登陆交换机： 9（1）创建DOS界面 9（2）远程登入叮嘱： 91.2．运用displaycur查看配置 101．3交换机配置叮嘱 11(1)创建vlan 11(2)将端口划入Vlan 11(3)变更交换机名称 11(4)指定VLANInterfaceIP地址 112.接入交换机叮嘱 122.1交换机远程登入: 12（1）创建DOS界面 12（2）远程登入叮嘱： 122.2运用Display查看配置 142．3交换机配置叮嘱 173．深信服防火墙登陆及配置 18(1)登陆防火墙 18(2)查看及修改物理端口 18(3)查看及创建路由 19(4)VPN建立 204．上网行为管理 21(1)登陆设备 21(2)查看及创建物理端口IP地址 21(3)组和用户建立 24(4)流量带宽限制 265．1H3C-1配置： 295．2H3C-2配置： 335．3H3C-3配置： 375．4H3C-4配置： 405．5H3C-5配置： 445．6H3C-6配置： 485．7H3C-7配置： 525．9H3C-9配置： 605．10H3C-10配置： 635．11H3C-11配置： 675．10H3C-10配置： 71核心交换机配置： 78前言沈阳赛莫网络工程有限公司依据《中国核工业其次二建设公司网络系统建设项目设计方案》及中国核工业其次二建设公司网络系统建设项目的实际需求，对网络系统进行集成建设。通过项目的实施，网络设备方面完成了上网行为管理、防火墙核心交换机、接入交换机、服务器等网络设备的安装调试；，公司内部相互连接和连接Internet，并按需求安装VPN。下面，对项目实施中的相关文档进行整理总结。

一、网络设备的安装配置文档1.VLAN及IP地址支配VLANIDVLAN名称VLANIP地址段子网掩码备注11设备管理网段210.0服务器办公320办公430预留5-2010.20.40.0-10.20.200.0预留网段2.网络设备管理IP设备名称管理IP地址备注AF1120防火墙AC1200上网行为管理H3CS5800核心交换机H3C-1接入交换机H3C-210.接入交换机H3C-310.接入交换机H3C-410.接入交换机H3C-5接入交换机H3C-6接入交换机H3C-7接入交换机H3C-8接入交换机H3C-9接入交换机H3C-10接入交换机H3C-11接入交换机H3C-12接入交换机H3C-13接入交换机3.公网IP地址支配3.1互联IP地址:由电信运营商支配地址为:/255.255.255.252为互连IP地址,设置在深信服AF1120防火墙设备外网口处.(如图):3.2业务IP地址可运用业务IP地址段为:10.20.*.*-10.20.*.*。4.现网络设备连接图

5.后期规划网络拓扑图二、网络设备的调试及叮嘱1.核心交换机叮嘱:1.1远程登陆交换机：（1）创建DOS界面在WINDOWS操作系统，起先菜单→运行（见图1）→提示框内输入cmd回车（见图2）弹出DOS界面（见图3）后可以输入叮嘱操作 图1 图2 图3（2）远程登入叮嘱：登陆成功后会提示输入密码,输入密码时不会显示任何内容，输入完成后按回车键即可生效。登陆交换机后：提示符为＜S5800＞”需输入：sys回车进入用户模式，提示符为：【S5800】后可以运用叮嘱进行操作1.2．运用displaycur查看配置(1)[s5800]displaycur查看当前交换机的配置例：以下为输入叮嘱后的部分输出，不是完整输出！只为更便利的介绍显示内容，具体输入见附件，交换机配置备份。interfaceGigabitEthernet1/0/1………………交换机千兆以太网第1口portlink-modebridge……….接口模式为bridgeportlink-typetrunk………….接口方式为trunkporttrunkpermitvlanall……允许trunk通过全部VLANinterfaceVlan-interface10………………….进入交换机vlan10…..该VLAN的IP地址(2)S5800displayvlan；查看vlan配置信息disvlanTotal10VLANexist(s).ThefollowingVLANsexist:1(default),5,10,15,20,30,40,50,60,70,………….该交换机已经建立哪些vlanDisvlan1……….查看具体某个vlanVLANID:1VLANType:staticRouteInterface:configuredIPAddress:10.0.0.3Description:VLAN0001Name:VLAN0001TaggedPorts:noneUntaggedPorts:……该vlan包含的端口Bridge-Aggregation1GigabitEthernet2/0/1GigabitEthernet2/0/2GigabitEthernet2/0/3GigabitEthernet2/0/4GigabitEthernet2/0/5GigabitEthernet2/0/6GigabitEthernet2/0/7GigabitEthernet2/0/8GigabitEthernet2/0/9GigabitEthernet2/0/10GigabitEthernet2/0/11GigabitEthernet2/0/12GigabitEthernet2/0/13GigabitEthernet2/0/14GigabitEthernet2/0/15GigabitEthernet2/0/16GigabitEthernet2/0/17GigabitEthernet2/0/18GigabitEthernet2/0/19GigabitEthernet2/0/20GigabitEthernet2/0/21GigabitEthernet2/0/22GigabitEthernet2/0/23GigabitEthernet2/0/24GigabitEthernet2/0/25GigabitEthernet2/0/26GigabitEthernet2/0/27GigabitEthernet2/0/28GigabitEthernet2/0/29GigabitEthernet2/0/30GigabitEthernet2/0/31GigabitEthernet2/0/32GigabitEthernet3/0/1GigabitEthernet3/0/2GigabitEthernet3/0/3GigabitEthernet3/0/4GigabitEthernet3/0/5GigabitEthernet3/0/6GigabitEthernet3/0/7GigabitEthernet3/0/8GigabitEthernet3/0/9GigabitEthernet3/0/10GigabitEthernet3/0/17GigabitEthernet3/0/18GigabitEthernet3/0/19GigabitEthernet3/0/201．3交换机配置叮嘱(1)创建vlan<S5800>sys………….进入用户模式[S5800]vlan10……………………..建立vlan10(2)将端口划入Vlan[S5800]vlan10[S5800-S-vlan10]portg1/0/1tog1/0/24……….把1到24口划入该vlan(3)变更交换机名称<H3C>sys[H3C]sysnameS5800……………..定义交换机名称[S5800](4)指定VLANInterfaceIP地址[S5800]interfaceVlan-interface30…………..进入vlan30[S5800……更改VLANIP地址

2.接入交换机叮嘱2.1交换机远程登入:（1）创建DOS界面在WINDOWS操作系统，起先菜单→运行（见图1）→提示框内输入cmd回车（见图2）弹出DOS界面（见图3）后可以输入叮嘱操作 图1 图2 图3（2）远程登入叮嘱：在DOS窗口下输入：telnet空格设备管理IP地址，回车。如下图：登陆成功后会提示输入密码,输入密码时不会显示任何内容，输入完成后按回车键即可生效。如下图：登陆交换机后：提示符为“<H3C-1＞”需输入：super回车后提示输入密码,登陆后进入管理模式并提示拥有3级权限、可以全部配置叮嘱。如需具体配置交换机须要输入system-view进入配置模式，提示符变为[H3C-1]后才可配置交换机如图:

2.2运用Display查看配置(1)[H3C-1]displaycurrent-configuration查看交换机配置：例：以下为输入叮嘱后的部分输出，不是完整输出！只为更便利的介绍显示内容，具体输入见附件，交换机配置备份。sysnameH3C-1……………交换机名称#vlan1……………………VLANID号nameFuWuQi……………VLAN名称#interfaceVlan-interface2…………………VLAN2（管理VLAN）………………VLAN2地址（管理地址）#interfaceEthernet1/0/1………………物理接口ID号（Ethernet1/0/1）portaccessvlan23…………端口归属和VLAN23loopback-detectionenable…………………环路检测打开#interfaceGigabitEthernet1/1/1……物理ID号（GIgabiEthernet1/1/1）portlink-typetrunk……………………端口类型为trunk(中继模式)porttrunkpermitvlanall…………………允许全部VLAN通过descriptionConnet-to-HX-4506E-1……描述为连接到HX-4506E-1#management-vlan2………………规定交换机管理VLAN为VLAN2#iproute-static0.0.0.00.0.0.010.1.2.254preference60…交换机默认路由指像网关#user-interfacevty04………………远程连接用户书目（0-4为数量）setauthenticationpasswordsimple********………………认证模式为密码认证，密码为：*********(2)[H3C-1]displayvlanall查看VLAN信息及端口所归属VLAN信息VLANID:1VLANType:staticRouteInterface:notconfiguredDescription:VLAN0001Name:FuWuQi、TaggedPorts:none、UntaggedPorts:、GigabitEthernet1/1/1GigabitEthernet1/1/2GigabitEthernet1/2/1GigabitEthernet1/2/2#VLANID:2VLANType:staticRouteInterface:configuredDescription:VLAN0002Name:SheBeiGuanLiTaggedPorts:GigabitEthernet1/1/1GigabitEthernet1/1/2UntaggedPorts:none(3)[H3C-1]displaybriefinterfaceEthernet查看物理接口状态<H3C-1>displaybriefinterfaceEthernetInterface:Eth-EthernetGE-GigabitEthernetTENGE-tenGigabitEthernetLoop-LoopBackVlan-Vlan-interfaceCas-CascadeSpeed/Duplex:A-auto-negotiationInterfaceLinkSpeedDuplexTypePVIDDescriptionEth1/0/1DOWNAAaccess23Eth1/0/2DOWNAAaccess23Eth1/0/3DOWNAAaccess23Eth1/0/4DOWNAAaccess23Eth1/0/5DOWNAAaccess23Eth1/0/6DOWNAAaccess23Eth1/0/7DOWNAAaccess23Eth1/0/8DOWNAAaccess23Eth1/0/9DOWNAAaccess23Eth1/0/10DOWNAAaccess23Eth1/0/11DOWNAAaccess23Eth1/0/12DOWNAAaccess23Eth1/0/13DOWNAAaccess23Eth1/0/14DOWNAAaccess23Eth1/0/15DOWNAAaccess23Eth1/0/16DOWNAAaccess23Eth1/0/17DOWNAAaccess23Eth1/0/18DOWNAAaccess23Eth1/0/19DOWNAAaccess23Eth1/0/20UPA100MAfullaccess23Eth1/0/21DOWNAAaccess23Eth1/0/22UPA100MAfullaccess23Eth1/0/23DOWNAAaccess23Eth1/0/24UPA100MAfullaccess23Eth1/0/25DOWNAAaccess23Eth1/0/26DOWNAAaccess23Eth1/0/27DOWNAAaccess23Eth1/0/28DOWNAAaccess23Eth1/0/29DOWNAAaccess23Eth1/0/30DOWNAAaccess23Eth1/0/31DOWNAAaccess23Eth1/0/32DOWNAAaccess23Eth1/0/33DOWNAAaccess23Eth1/0/34DOWNAAaccess23Eth1/0/35DOWNAAaccess23Eth1/0/36DOWNAAaccess23Eth1/0/37DOWNAAaccess23Eth1/0/38DOWNAAaccess23Eth1/0/39DOWNAAaccess23Eth1/0/40DOWNAAaccess23Eth1/0/41DOWNAAaccess23Eth1/0/42DOWNAAaccess23Eth1/0/43DOWNAAaccess23Eth1/0/44DOWNAAaccess23Eth1/0/45DOWNAAaccess23Eth1/0/46DOWNAAaccess23Eth1/0/47DOWNAAaccess23Eth1/0/48DOWNAAaccess232．3交换机配置叮嘱(1)创建vlan<H3C-1>super<H3C-1>system-viewSystemView:returntoUserViewwithCtrl+Z.[H3C-1]vlan10[H3C-1-vlan10][H3C-1-vlan10]quit[H3C-1]saveTheconfigurationwillbewrittentothedevice.Areyousure?[Y/N]yPleaseinputthefilename(*.cfg)(Toleavetheexistingfilenameunchangedpresstheenterkey):Nowsavingcurrentconfigurationtothedevice.Savingconfiguration.PleasewaitUnit1saveconfigurationflash:/config.cfgsuccessfully[H3C-1]%Apr1403:20:19:1042000H3C-1CFM/3/CFM_LOG:-1-Unit1savedconfigurationsuccessfully.(2)将端口划入Vlan[H3C-1]vlan23[H3C-1-vlan23]portEthernet1/0/48[H3C-1]save(3)变更交换机名称[H3C-1]sysnameH3C-1[H3C-1]save

3．深信服防火墙登陆及配置(1)登陆防火墙如下图：在阅读器地址栏内输入后出现登陆界面输入用户名密码后点击”登录”登陆到防火墙主页(2)查看及修改物理端口在防火墙主页面内点击网络配置→接口/区域可以看到全部物理。如下图：需看具体点击“具体接口”查看具体内容。如下图（比如点击ETH1）(3)查看及创建路由在左侧点击“网络配置”→“路由”→“静态路由”查看或修改目的路由(4)VPN建立点击左侧“VPN”“连接管理”“新增”可建立新的VPN隧道如下图：点击“本地子网列表”将内网网段添加到VPN子网。如下图：4．上网行为管理(1)登陆设备在阅读器地址栏内输入IP地址：10.后出现用户、密码登陆框输入后可进入界面。如下图：登陆后主界面如下图：(2)查看及创建物理端口IP地址“网络配置”→“网口配置”如下图：进入界面后如下图可查看IP地址及所在物理端口：点击“网络配置”→“部署模式”来配置设备。如下图：点击“起先配置”选择部署模式点击下一步，本设备应选择网桥模式部署：选择网桥模式，本设备为多网桥：在此页面选择网桥接口，可随意选择，建议选择ETH2及ETH0作为网桥接口，此接口也为默认接口点击下一步配置网桥信息：完成设备部署：点击提交则设备重启配置生效。(3)组和用户建立点击“用户和策略管理”点击“上网策略”→“新增”建立上网策略。如下图：做行为管理点击上网权限策略、做审计点击上网审计策略。如下图上网权限策略点击新增在右侧选择相对应用和时间段上网设计策略点击新增点击添加选择须要审计的项目两种策略建立完成均有选择运用组及用户选项来依据需求对相应组及用户下发策略。(4)流量贷款限制点击“流量管理”→“线路带宽配置”设置总带宽点击“通道配置”→“新增一级通道”来做流量限制。如下图：点击左侧“通道运用范围”选择运用的组、用户及应用：5．1H3C-1配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．2H3C-2配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．3H3C-3配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．4H3C-4配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．5H3C-5配置：<H3C>discu#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．6H3C-6配置：<H3C>discu#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detecti