华为小型网络配置
交换机
sysname lsw1
vlan batch 2 100
cluster enable
ntdp enable
ndp enable
drop illegal-mac alarm
dhcp enable
diffserv domain default
drop-profile default
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
interface Vlanif1
ip address 192.168.0.254 255.255.255.0
dhcp select interface
dhcp server dns-list 114.114.114.114
dhcp server domain-name ccieh3c.taobao.com
interface Vlanif2
ip address 192.168.2.254 255.255.255.0
dhcp select interface
dhcp server dns-list 114.114.114.114
dhcp server domain-name ccieh3c.taobao.com
interface Vlanif100
ip address 1.1.1.2 255.255.255.0
interface MEth0/0/1
interface GigabitEthernet0/0/1
port link-type access
port default vlan 100
interface GigabitEthernet0/0/2
interface GigabitEthernet0/0/3
port link-type access
port default vlan 2
interface GigabitEthernet0/0/4
interface GigabitEthernet0/0/5
interface GigabitEthernet0/0/6
interface GigabitEthernet0/0/7
interface GigabitEthernet0/0/8
interface GigabitEthernet0/0/9
interface GigabitEthernet0/0/10
interface GigabitEthernet0/0/11
interface GigabitEthernet0/0/12
interface GigabitEthernet0/0/13
interface GigabitEthernet0/0/14
interface GigabitEthernet0/0/15
interface GigabitEthernet0/0/16
interface GigabitEthernet0/0/17
interface GigabitEthernet0/0/18
interface GigabitEthernet0/0/19
interface GigabitEthernet0/0/20
interface GigabitEthernet0/0/21
interface GigabitEthernet0/0/22
interface GigabitEthernet0/0/23
interface GigabitEthernet0/0/24
interface NULL0
ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
user-interface con 0
user-interface vty 0 4
return
AR1
[V200R003C00]
sysname AR1
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
clock timezone Indian Standard Time minus 05:13:20
clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23 00:00 2005 2005
portal local-server load portalpage.zip
drop illegal-mac alarm
set cpu-usage threshold 80 restore 75
acl number 3000
rule 5 permit ip source 192.168.0.0 0.0.0.255
rule 10 permit ip source 192.168.2.0 0.0.0.255
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %
K8m.Nt84DZ}e#<0`8bmE3Uw}%
local-user admin service-type http
firewall zone Local
priority 15
interface GigabitEthernet0/0/0
ip address 1.1.1.1 255.255.255.0
interface GigabitEthernet0/0/1
ip address 192.168.1.150 255.255.255.0
nat outbound 3000
interface GigabitEthernet0/0/2
interface NULL0
ip route-static 0.0.0.0 0.0.0.0 192.168.1.254
ip route-static 192.168.0.0 255.255.255.0 1.1.1.2
ip route-static 192.168.2.0 255.255.255.0 1.1.1.2
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
wlan ac
return
R1-ISP
sysname R1-ISP
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http
firewall zone Local
priority 16
interface Ethernet0/0/0
interface Ethernet0/0/1
ip address 192.168.1.254 255.255.255.0
interface Serial0/0/0
link-protocol ppp
interface Serial0/0/1
link-protocol ppp
interface Serial0/0/2
link-protocol ppp
interface Serial0/0/3
link-protocol ppp
interface GigabitEthernet0/0/0
interface GigabitEthernet0/0/1
interface GigabitEthernet0/0/2
interface GigabitEthernet0/0/3
wlan
interface NULL0
interface LoopBack0
ip address 114.114.114.114 255.255.255.255
user-interface con 0
user-interface vty 0 4
user-interface vty 16 20
return