H3C路由器固定IP地址标准配置.doc

《H3C路由器固定IP地址标准配置.doc》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、H3C路由器固定IP地址标准配置# version5.20,Alpha1503# sysnameTH# configure-usercount5# firewallenable            //使能防火墙功能# domaindefaultenablesystem# dnsresolve dnsserver218.74.122.74 dnsserver218.74.122.66# telnetserverenable# undol2fwfast-forwarding#vlan1#radiusschemesystem#domai

2、nsystem   access-limitdisable stateactive idle-cutdisable self-service-urldisable#trafficclassifiertestoperatorand      //流量分类器test，条件操作为“逻辑与” if-matchacl3999                  //匹配ACL3999trafficclassifiermacoperatoror       //流量分类器mac，条件操作为“逻辑或” if-matchsource-mac00e0-4

3、c02-29b4       //匹配源MAC00e0-4c02-29b4 if-matchsource-mac00e0-4cf0-189f       //匹配源MAC00e0-4cf0-189f if-matchsource-mac0050-8d6e-c328       //匹配源MAC0050-8d6e-c328#trafficbehaviorpermit               //流量行为permit filterpermit                     //过滤操作为“允许转发”trafficbehavi

4、ordeny                //流量行为deny filterdeny                      //过滤操作为“拒绝、丢弃”#qospolicytest                    //QoS策略test classifiertestbehaviorpermit         //对流分类test允许通过，即允许任意源访问192.168.1.0/24 classifiermacbehaviordeny           //对流分类mac拒绝并丢弃，即不允许mac访问除192.168.1

5、.0外的网段#dhcpserverip-pool1 network192.168.1.0mask255.255.255.0 gateway-list192.168.1.1 nbns-list218.74.122.66 expiredday10hour12#local-useradmin passwordsimpleadminlogin service-typetelnet level3#aclnumber2000 rule0permitsource192.168.1.00.0.0.255 rule1deny#aclnumber3000

6、                      //ACL3000为防火墙策略 descriptionmatchthedestinationip-address rule0denyipsource192.168.1.680       //不允许源192.168.1.68访问aclnumber3999                          //ACL3999用于流分类test匹配 rule0permitipdestination192.168.1.00.0.0.255  //匹配目的网段192.168.1.0/24#wlanr

7、rm 11amandatory-rate61224 11asupported-rate918364854 11bmandatory-rate12 11bsupported-rate5.511 11gmandatory-rate125.511 11gsupported-rate69121824364854#interfaceAnalogmodem0/0 asyncmodeflow link-protocolppp#interfaceAux0 asyncmodeflow link-protocolppp#interfaceEthernet

8、0/0 portlink-moderoute firewallpacket-filter3000outbound          //在出方向应用ACL3000的防火墙策略 natoutbound2000 ipaddr