学习h3c3100配置sysname区号楼单元如1 1

sysname3Q-1-arpprotective-downrecoverarpprotective-downrecoverinterval60dhcpprotective-downrecoverenabledhcpprotective-downrecoverinterval60local-userH3C3100service-typetelnetlevellocal-userH3C3100conservice-typeterminalvlan（分配vlan号arprestricted-forwarding#interfaceVlan-ipaddress10.82.250.（ip地址）interfaceEthernet1/0/1portaccessvlan1161portisolatearprate-limitenablearprate-limitdhcprate-limit50interfaceportaccessvlan（vlan号portarprate-limitenablearprate-limitdhcprate-limit50undoportlink-typeundoporttrunkpermitvlanundodhcp-snoopingtrustundoarpdetection#portlink-typetrunkporttrunkpermitvlanalldhcp-snoopingtrustarpdetection#portlink-typetrunkporttrunkpermitvlanalldhcp-snoopingtrustarpdetection#portlink-typetrunkporttrunkpermitvlanalldhcp-snoopingtrustiproute-staticpreferencesnmp-agentlocal-snmp-agentcommunityreadpublicsnmp-agentsys-infoversionalluser-interfaceaux0authentication-modeschemeuser-interfacevty04authentication-modescheme命 undovlan disp vlan20 创建vlan(也可进入vlan20) e1/0/1toe1/0/5 把端口1-5放入VLAN20中dispvlan20 显示vlan里的端口20int portaccessvlan undoporte1/0/10 dispcurr intvlan ipaddress00 user-intvty0 authentication-modepassword(autpassword) 设置口令模式setauthenticationpasswordsimple222(setautpasssim222)设置口令userprivilegelevel3(useprivlev3)配置用户级别dispcurrent-configuration（disp dispipint resetsaved-configuration(resetsaved) 在sw1上：vlan int portaccessvlan 5加入vlanvlan int portaccessvlan20 inte1/0/24 进入端口24portlink-type porttrunkpermitvlanall 在SW2上:vlan int portaccessvlan10 inte1/0/24 进入端口24portlink-type porttrunkpermitvlanall(porttrunkpermitvlan10vlan10使用)24dispinte1/0/24 undoporttrunkpermitvlanall删除该句 int ipaddress00 undo dispipinte1/0IP接口情况dispipintbriefIP接口情况user-intvty04进入口令模式authentication-modepassword(authpass)setauthenticationpasswordsimple222 userprivilegelevel resetsaved- undo intiproute(目标网段）（下一跳：下一路由器的接口）iproute dispiprout 华3CAR-18路由器连接使用直通线。wan0wan0wan1 vlan vlan int portaccessvlan10 inte1/0/24 进入24端口portlink-type porttrunkpermitvlanall(porttrunkpermitvlan10vlan10使用)24vlan10inte1/0/24portlink-type porttrunkpermitvlanall(porttrunkpermitvlan10vlan10使用)24intvlan ipaddress54 intvlan ipaddress54 注意：vlan10vlan20int 进入e1/0ipaddress int 进入e2/0ipadress network network dispip int 进入e1/0ipaddress int 进入e2/0ipadress network network dispip （注意：两台PC机的网关设置PC1 PC2intipaddressintipaddressintipaddressaclnumber （2001-2999属于基本的访问列表rule1denysource rule2permitsource55(网段的数据通过)firewallenableinte3/0dispacl2001 undoaclnumber2001 aclnumberruledenytcpsource55destination55destination-porteqrulepermitipsourceandestinationany inte3/0firewall firewallpacket-filter3001nameservervlan20vlan30inte1/0/5inte1/0/10inte1/0/15intvlan10ipaddressundoshipaddressintvlanipaddressaclnumberrule1denysource55rule2permitsourceanydispacl intportaccessvlanpacket-filteroutboundip-group2001rulevlanvlanvlan30inte1/0/10inte1/0/15intvlan10ipaddressundoshipaddressintvlanipaddressaclnumberrule1denytcpsource55destination55destination-porteqwwwintpacket-filterinboundip-group3001ruleinte1/0ipaddressintinte2/0ipaddressintipaddressinte2/0natoutboundiprouteinte1/0ipaddressintipaddressaclnumberrule0permitsourceintiproute-staticpreference↑inte2/0ipaddres