華為小型網路配置

交換機

sysname lsw1

vlan batch 2 100

cluster enable
ntdp enable
ndp enable

drop illegal-mac alarm

dhcp enable

diffserv domain default

drop-profile default

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http

interface Vlanif1
ip address 192.168.0.254 255.255.255.0
dhcp select interface
dhcp server dns-list 114.114.114.114
dhcp server domain-name ccieh3c.taobao.com

interface Vlanif2
ip address 192.168.2.254 255.255.255.0
dhcp select interface
dhcp server dns-list 114.114.114.114
dhcp server domain-name

ccieh3c.taobao.com

interface Vlanif100
ip address 1.1.1.2 255.255.255.0

interface MEth0/0/1

interface GigabitEthernet0/0/1
port link-type access
port default vlan 100

interface GigabitEthernet0/0/2

interface GigabitEthernet0/0/3
port link-type access
port default vlan 2

interface GigabitEthernet0/0/4

interface GigabitEthernet0/0/5

interface GigabitEthernet0/0/6

interface GigabitEthernet0/0/7

interface GigabitEthernet0/0/8

interface GigabitEthernet0/0/9

interface GigabitEthernet0/0/10

interface GigabitEthernet0/0/11

interface GigabitEthernet0/0/12

interface GigabitEthernet0/0/13

interface GigabitEthernet0/0/14

interface GigabitEthernet0/0/15

interface GigabitEthernet0/0/16

interface GigabitEthernet0/0/17

interface GigabitEthernet0/0/18

interface GigabitEthernet0/0/19

interface GigabitEthernet0/0/20

interface GigabitEthernet0/0/21

interface GigabitEthernet0/0/22

interface GigabitEthernet0/0/23

interface GigabitEthernet0/0/24

interface NULL0

ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

user-interface con 0
user-interface vty 0 4

return

AR1
[V200R003C00]

sysname AR1

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone Indian Standard Time minus 05:13:20
clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23 00:00 2005 2005

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

acl number 3000
rule 5 permit ip source 192.168.0.0 0.0.0.255
rule 10 permit ip source 192.168.2.0 0.0.0.255

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % $$K8m.Nt84DZ}e#<0`8bmE3Uw}% $$
local-user admin service-type http

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 1.1.1.1 255.255.255.0

interface GigabitEthernet0/0/1
ip address 192.168.1.150 255.255.255.0
nat outbound 3000

interface GigabitEthernet0/0/2

interface NULL0

ip route-static 0.0.0.0 0.0.0.0 192.168.1.254
ip route-static 192.168.0.0 255.255.255.0 1.1.1.2
ip route-static 192.168.2.0 255.255.255.0 1.1.1.2

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

return

R1-ISP

sysname R1-ISP

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http

firewall zone Local
priority 16

interface Ethernet0/0/0

interface Ethernet0/0/1
ip address 192.168.1.254 255.255.255.0

interface Serial0/0/0
link-protocol ppp

interface Serial0/0/1
link-protocol ppp

interface Serial0/0/2
link-protocol ppp

interface Serial0/0/3
link-protocol ppp

interface GigabitEthernet0/0/0

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface GigabitEthernet0/0/3

wlan

interface NULL0

interface LoopBack0
ip address 114.114.114.114 255.255.255.255

user-interface con 0
user-interface vty 0 4
user-interface vty 16 20

return