port access vlan 100 qos
packet-filter inbound ip-group 3000 rule 10 system-index 55 packet-filter inbound ip-group 3000 rule 20 system-index 56 packet-filter inbound ip-group 3000 rule 100 system-index 57 #
interface NULL0 #
ip route-static 0.0.0.0 0.0.0.0 192.168.0.1 preference 60 #
user-interface aux 0
authentication-mode password
set authentication password xxxxxxx user-interface vty 0 4
authentication-mode scheme
------------------------------------------------------------------------------------------------------------- [S7502]dis ver
H3C Comware Platform Software
Comware software, Version 3.10, Release 3135
Copyright (c) 2004-2007 Hangzhou H3C Technologies Co., Ltd. All rights reserved.
H3C S7502 uptime is 0 week, 0 day, 22 hours, 17 minutes
P12TE 0: uptime is 0 weeks,0 days,22 hours,17 minutes H3C S7500 with 1 MPC8245 Processor 256M bytes SDRAM
32768K bytes Flash Memory 0K bytes NVRAM Memory PCB Version : VER.B BootROM Version : 531 CPLD Version : 005 Second CPLD Ver : 005
Software Version : S7502-3135 Patch Version : None
[S7502]dis cur #
sysname S7502 #
super password level 3 cipher PLP0V73A)D[Q=^Q`MAF4<1!! #
local-server nas-ip 127.0.0.1 key h3c #
domain default enable system #
temperature-limit 0 10 70 #
poe power max-value 2400 #
radius scheme system
primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domain #
domain system
vlan-assignment-mode integer access-limit disable state active
idle-cut disable
self-service-url disable messenger time disable #
local-user backbone
password cipher backboneewenxlf service-type ssh telnet level 3 #
stp instance 1 root secondary stp instance 2 root primary stp TC-protection enable stp enable
stp region-configuration region-name fuda
instance 1 vlan 100 200 instance 2 vlan 300 400
active region-configuration #
acl number 3000
rule 10 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.3.0 0.0.0.255
rule 20 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
rule 100 permit ip acl number 3001
rule 10 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.4.0 0.0.0.255
rule 20 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.1.0
0.0.0.255
rule 100 permit ip #
vlan 1 #
vlan 88 #
vlan 100
de.ion to_xingzheng name xingzheng #
vlan 200
de.ion to_changqu name changqu #
vlan 300
de.ion to_sushe name sushe #
vlan 400
de.ion to_netbar name netbar
# interface Vlan-interface88
ip address 192.168.0.253 255.255.255.0 #
interface Vlan-interface100
ip address 192.168.1.253 255.255.255.0 vrrp vrid 1 virtual-ip 192.168.1.1
vrrp vrid 1 preempt-mode timer delay 1 #
interface Vlan-interface200
ip address 192.168.2.253 255.255.255.0 vrrp vrid 2 virtual-ip 192.168.2.1
vrrp vrid 2 preempt-mode timer delay 1 #
interface Vlan-interface300
ip address 192.168.3.253 255.255.255.0 vrrp vrid 3 virtual-ip 192.168.3.1 vrrp vrid 3 priority 120
vrrp vrid 3 preempt-mode timer delay 1 #
interface Vlan-interface400
ip address 192.168.4.253 255.255.255.0
vrrp vrid 4 virtual-ip 192.168.4.1 vrrp vrid 4 priority 120
vrrp vrid 4 preempt-mode timer delay 1 #
interface Aux0/0/0 #
interface M-Ethernet0/0/0 #
interface GigabitEthernet0/0/1 stp disable
port access vlan 88 #
interface GigabitEthernet0/0/2 port access vlan 200 #
interface GigabitEthernet0/0/3 #
interface GigabitEthernet0/0/4 #
interface GigabitEthernet0/0/5 #
interface GigabitEthernet0/0/6
# interface GigabitEthernet0/0/7 #
interface GigabitEthernet0/0/8 #
interface GigabitEthernet0/0/9 port link-type trunk
port trunk permit vlan 1 100 200 300 400 #
interface GigabitEthernet0/0/10 de.ion to_changqu port access vlan 200 qos
packet-filter inbound ip-group 3000 rule 10 system-index 1 packet-filter inbound ip-group 3000 rule 20 system-index 2 packet-filter inbound ip-group 3000 rule 100 system-index 3 #
interface GigabitEthernet0/0/11 de.ion to_sushe
port access vlan 300 qos
packet-filter inbound ip-group 3001 rule 10 system-index 4
packet-filter inbound ip-group 3001 rule 20 system-index 5 packet-filter inbound ip-group 3001 rule 100 system-index 6 #
interface GigabitEthernet0/0/12 #
interface GigabitEthernet0/0/13 #
interface GigabitEthernet0/0/14 #
interface GigabitEthernet0/0/15 #
interface GigabitEthernet0/0/16 #
interface NULL0 #
ip route-static 0.0.0.0 0.0.0.0 192.168.0.1 preference 60 #
user-interface aux 0
set authentication password xxxxxx user-interface vty 0 4
authentication-mode scheme #
return