华为AR1220路由器配置参数实际应用实例解说一

华为AR1220路由器配置参数实际应用实例解说一配置参数[GZ]discu[V200R001C00SPC200]//路由器软件版本，可从官方网站下载#sysnameGZ//路由器名字GZftpserverenable//ftp服务开通以便拷贝出配置文件备份#voice#httpserverport1025//httpundohttpserverenable#dropillegal-macalarm#l2tpaging0#vlanbatch1020304050//本路由器设置的VLANID #igmpgloballimit256#multicastrouting-enable//开启组播#dhcpenable//全局下开启DHCP服务然后在各VLAN上开启单独的DHCP#ipvpn-instance1ipv4-family#aclnumber2000rule10permit#aclnumber2001//以太网访问规则列表。rule6permitsource55//允许此网段访问外网rule7permitsource55//允许此网段访问外网rule8permitsource//允许此网段的前三个IP访问外网rule9deny//不允许其他网段访问外网#aclnumber3000//此规则并未应用rule40permitipsource55destination55#aclnumber3001//定义两个网段主机互不访问，学生不能访问65网段。rule5denyipsource55destination55rule10denyipsource55destination55#aaa//默认视图窗口定义本地登录帐号和密码portdefaultvlan20//定义端口所在VLANqosgtscir6000cbs600000//定义该端口数据缓存带宽范围#interfaceEthernet0/0/3//物理端端口3portlink-typeaccessportdefaultvlan30#interfaceEthernet0/0/4//物理端端口4portlink-typeaccess//定义该端口类型portdefaultvlan40//定义端口所在VLAN#interfaceEthernet0/0/5//物理端端口5portlink-typeaccess//定义该端口类型portdefaultvlan50//定义端口所在VLAN#interfaceEthernet0/0/6//物理端端口6portlink-typeaccess//定义该端口类型#interfaceEthernet0/0/7//物理端端口6portlink-typeaccess//定义该端口类型portdefaultvlan10//定义端口所在VLAN#interfaceGigabitEthernet0/0/0//三层口不在任何一个VLAN中，有映射功能。ipaddress28//定义该端口的网关地址和子网掩码natserverprotocoltcpglobalcurrent-interface10001inside2210001//允许内网IP端口映射到外网natserverprotocoltcpglobalcurrent-interface10002inside2210002natserverprotocoltcpglobalcurrent-interface10003inside2210003natserverprotocoltcpglobalcurrent-interface10004inside2210004natserverprotocoltcpglobalcurrent-interface10005inside2210005natserverprotocoltcpglobalcurrent-interface10006inside2210006natserverprotocoltcpglobalcurrent-interface10007inside2210007natserverprotocoltcpglobalcurrent-interface10008inside2210008natserverprotocoltcpglobalcurrent-interface10009inside2210009natserverprotocoltcpglobalcurrent-interface10010inside2210010natserverprotocoludpglobalcurrent-interface11001inside2211001natserverprotocoludpglobalcurrent-interface11002inside2211002natserverprotocoludpglobalcurrent-interface11003inside2211003natserverprotocoludpglobalcurrent-interface11004inside2211004natserverprotocoludpglobalcurrent-interface11005inside2211005natserverprotocoludpglobalcurrent-interface11006inside2211006natserverprotocoludpglobalcurrent-interface11007inside2211007natserverprotocoludpglobalcurrent-interface11008inside2211008natserverprotocoludpglobalcurrent-interface11009inside2211009natserverprotocoludpglobalcurrent-interface11010inside2211010natoutbound2001//在该端口上执行编号为2001的访问规则#interfaceGigabitEthernet0/0/1//三层口不在任何一个VLAN中，有映射功能。ipaddress52//定义该端口的网关地址和子网掩码pimdm//组播协议需开启的功能igmpenable//组播协议需开启的功能undonegotiationauto//关闭端口自动协商功能zonetrust//定义该端口是信任区域#interfaceCellular0/0/0link-protocolppp#interfaceCellular0/0/1link-protocolppp#interfaceNULL0#igmp#pimc-bsrGigabitEthernet0/0/0c-rpGigabitEthernet0/0/0group-policy2000c-rpGigabitEthernet0/0/1group-policy2000#iproute-static//新增静态路由列表，访问外网iproute-staticiproute-staticiproute-staticiproute-staticiproute-staticiproute-staticiproute-staticiproute-static#superpasswordlevel3cipherEO2\:%&(X.$'CLYaDZ]EJ1!!user-interfacecon0user-interfacevty04authentication-modeaaauser-interfacevty1620#port-group1group-memberEthernet0/0/0group-memberEther