园区网Bras ME60 维护手册
user-vlan 201 248 qinq 2240 user-vlan 301 348 qinq 2240
user-vlan 101 148 qinq 2321 2324 user-vlan 101 148 qinq 2341 user-vlan 101 148 qinq 2371
user-vlan 101 148 qinq 2421 2425 user-vlan 101 148 qinq 2441 user-vlan 101 148 qinq 2471 user-vlan 101 148 qinq 2511 2518 user-vlan 101 148 qinq 2520 user-vlan 101 148 qinq 2540 user-vlan 201 248 qinq 2540 user-vlan 101 148 qinq 2542 user-vlan 101 148 qinq 2561 user-vlan 101 148 qinq 2611 2614 user-vlan 101 148 qinq 2641 user-vlan 101 148 qinq 2711 2713 user-vlan 101 148 qinq 2741 2742 user-vlan 101 148 qinq 2810 user-vlan 201 248 qinq 2810 user-vlan 101 148 qinq 2821 2822 user-vlan 101 148 qinq 2830 user-vlan 201 248 qinq 2830 user-vlan 101 148 qinq 2840 user-vlan 201 248 qinq 2840 user-vlan 101 148 qinq 2851 user-vlan 101 148 qinq 2861 2862 user-vlan 101 148 qinq 2870 user-vlan 201 248 qinq 2870 bas #
access-type layer2-subscriber default-domain authentication portal authentication-method web arp-trigger # #
interface Eth-Trunk1.2 description device_management user-vlan 2000
user-vlan 2000 qinq 2111 2114 user-vlan 2000 qinq 2141 user-vlan 2000 qinq 2171
user-vlan 2000 qinq 2211 2213 user-vlan 2000 qinq 2240 2243
5 / 18
园区网Bras ME60 维护手册
user-vlan 2000 qinq 2321 2324 user-vlan 2000 qinq 2341 user-vlan 2000 qinq 2371
user-vlan 2000 qinq 2421 2425 user-vlan 2000 qinq 2441 user-vlan 2000 qinq 2471
user-vlan 2000 qinq 2511 2518 user-vlan 2000 qinq 2520 user-vlan 2000 qinq 2540 user-vlan 2000 qinq 2542 user-vlan 2000 qinq 2561
user-vlan 2000 qinq 2611 2614 user-vlan 2000 qinq 2641
user-vlan 2000 qinq 2711 2713 user-vlan 2000 qinq 2741 2742 user-vlan 2000 qinq 2810
user-vlan 2000 qinq 2821 2822 user-vlan 2000 qinq 2830 user-vlan 2000 qinq 2840 user-vlan 2000 qinq 2851 user-vlan 2000 qinq 2861 2862 user-vlan 2000 qinq 2870 bas #
access-type layer2-subscriber default-domain authentication guanli authentication-method bind arp-proxy ip-trigger arp-trigger
其他子接口可根据子接口描述确定业务！ # #
interface Eth-Trunk2 portswitch
description to-USG9000-FW [20G] port link-type trunk
port trunk allow-pass vlan 105 4000 #
interface GigabitEthernet1/0/0 undo shutdown eth-trunk 1 #
interface GigabitEthernet1/0/1
6 / 18
园区网Bras ME60 维护手册
undo shutdown eth-trunk 1 #
interface GigabitEthernet1/0/2 undo shutdown eth-trunk 2 #
interface GigabitEthernet1/0/3 undo shutdown eth-trunk 2 #
interface GigabitEthernet1/0/4 description to_powercache undo shutdown
ip address 10.100.99.1 255.255.255.0 # #
interface GigabitEthernet1/0/9 negotiation auto
description to-H3C12508 undo shutdown
ip address 172.16.6.66 255.255.255.0 # #
ip route-static 0.0.0.0 0.0.0.0 Vlanif4000 172.31.0.1 description uplink-USG9000-FW ip route-static 10.5.0.0 255.255.252.0 172.28.2.2 ip route-static 10.10.1.0 255.255.255.0 172.28.2.2 ip route-static 10.10.2.0 255.255.255.0 172.28.2.2 ip route-static 10.10.3.0 255.255.255.0 172.28.2.2 ip route-static 10.10.4.0 255.255.255.0 172.28.2.2 ip route-static 10.10.5.0 255.255.255.0 172.28.2.2 ip route-static 10.10.6.0 255.255.255.0 172.28.1.2 ip route-static 10.10.7.0 255.255.255.0 172.28.1.2 ip route-static 10.10.8.0 255.255.255.0 172.28.2.2 ip route-static 10.10.9.0 255.255.255.0 172.28.2.2 ip route-static 10.10.11.0 255.255.255.0 172.28.1.2 ip route-static 10.10.12.0 255.255.255.0 172.28.1.2 ip route-static 10.10.13.0 255.255.255.0 172.28.1.2 ip route-static 10.10.14.0 255.255.255.0 172.28.2.2 ip route-static 10.10.15.0 255.255.255.0 172.28.1.2 ip route-static 10.10.16.0 255.255.255.0 172.28.1.2 ip route-static 10.10.17.0 255.255.255.0 172.28.1.2 ip route-static 10.10.18.0 255.255.255.0 172.28.2.2 ip route-static 10.10.19.0 255.255.255.0 172.28.1.2 ip route-static 10.10.20.0 255.255.255.0 172.28.1.2
7 / 18
园区网Bras ME60 维护手册
ip route-static 10.10.21.0 255.255.255.0 172.28.1.2 ip route-static 10.10.32.0 255.255.255.0 172.28.1.2 ip route-static 10.17.0.0 255.255.255.0 172.28.1.2 ip route-static 10.20.0.0 255.255.255.0 172.28.1.2 ip route-static 10.22.0.0 255.255.255.0 172.28.1.2 ip route-static 10.23.0.0 255.255.255.0 172.28.2.2 ip route-static 10.25.25.0 255.255.255.0 172.28.2.2
ip route-static 172.20.1.99 255.255.255.255 192.168.100.97 description to-ATM ip route-static 172.20.2.2 255.255.255.255 192.168.100.97 description to-ATM # #
static-user 10.11.0.254 10.11.0.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect
static-user 10.11.1.11 10.11.1.11 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2111 domain-name guanli detect
static-user 10.11.1.12 10.11.1.12 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2112 domain-name guanli detect
static-user 10.11.1.13 10.11.1.13 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2113 domain-name guanli detect
static-user 10.11.1.14 10.11.1.14 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2114 domain-name guanli detect
static-user 10.11.1.41 10.11.1.41 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2141 domain-name guanli detect
static-user 10.11.1.254 10.11.1.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect
static-user 10.11.2.11 10.11.2.11 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2211 domain-name guanli detect
static-user 10.11.2.12 10.11.2.12 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2212 domain-name guanli detect
static-user 10.11.2.13 10.11.2.14 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2213 domain-name guanli detect
static-user 10.11.2.41 10.11.2.43 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2240 domain-name guanli detect
static-user 10.11.2.254 10.11.2.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect
static-user 10.11.3.21 10.11.3.21 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2321 domain-name guanli detect
static-user 10.11.3.22 10.11.3.22 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2322 domain-name guanli detect
static-user 10.11.3.23 10.11.3.23 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2323 domain-name guanli detect
static-user 10.11.3.24 10.11.3.24 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2324 domain-name guanli detect
static-user 10.11.3.41 10.11.3.41 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq
8 / 18
园区网Bras ME60 维护手册
2341 domain-name guanli detect
static-user 10.11.3.71 10.11.3.71 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2371 domain-name guanli detect
static-user 10.11.3.253 10.11.3.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect #
web-auth-server 192.168.100.100 port 50100 key simple hwme60
二、 新设备（用户）开局脚本
2.1 汇聚/接入交换机开局
场景：假定新建一套中区11号楼的汇聚和接入交换机，其外层VLAN为1011，内层管理地址为11，内层1xx为一楼交换机，2xx为二楼交换机，依次类推。
1.定义一个管理IP地址池：
ip pool guanli-zhongqu-11 bas local gateway 10.0.11.254 255.255.255.0 section 0 10.0.11.1 10.0.11.253
excluded-ip-address 10.0.11.1 10.0.11.253
2.在管理域中加入此地址池： aaa
domain guanli
ip-pool guanli-zhongqu-11
3.在Bras口上终结此VLAN interface Eth-Trunk1.2 user-vlan 11
user-vlan 11 qinq 1011
4.定义静态IP用户（交换机）
static-user 10.0.11.1 10.0.11.252 gateway 10.0.11.254 interface Eth-Trunk1.2 vlan 11 qinq 1011 domain-name guanli detect
static-user 10.0.11.253 10.0.11.253 gateway 10.0.11.254 interface Eth-Trunk1.2 vlan 11 domain-name guanli detect
9 / 18