华为高端交换机配置脚本
合集下载
相关主题
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
#
vlanbatch 1000 to 1016 2001 to 2002 2024 to 2029
#
poe-power backup-mode 2
#
dba-profile default0 type3 assure 40000 max 80000
#
line-profile default0
#
service-profile default0
port trunk allow-passvlan1002
#
interface GigabitEthernet1/0/3
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1003
#
interface GigabitEthernet1/0/4
ipaddress10.25.1.41 255.255.255.252
#
interface Vlanif1012
description To LYJWHD-LIUDIANZIZHUDI-S5300
ipaddress10.25.1.45 255.255.255.252
#
interface Vlanif1013
<LYJWHD-HEDONGQUJIAOYUJU-S9306>discur
#
sysnameLYJWHD-HEDONGQUJIAOYUJU-S9306
#
super password level 3 cipher "@J*U2S*(7F,YWX*NZ55OA!!
#
router id 10.25.255.254
rule 20 permittcpdestination-porteq1023
rule 21 permitudpdestination-porteq1023
rule 22 permittcpdestination-porteq135
rule 23 permitudpdestination-porteq135
rule 44 permittcpdestination-porteq42
rule 45 permitudpdestination-port range 1026 1027
#
traffic classifier anti-virus operator or precedence 5
if-matchacl3000
#
interface Vlanif1015
description To LYJWHD-XIANGGONGZHUDI-S5300
ipaddress10.25.1.57 255.255.255.252
#
interface Vlanif1016
description To LYJWHD-TANGTOUZHUDI-S5300
rule 8 permittcpdestination-porteq4444
rule 9 permittcpdestination-porteq9996
rule 10 permittcpdestination-porteq5554
rule 11 permitudpdestination-porteq9996
ipaddress10.25.1.1 255.255.255.252
#
interface Vlanif1002
description TO LYJWHD-GONGYEYUANXUEXIAO-S3352
ipaddress10.25.1.5 255.255.255.252
#
interface Vlanif1003
ipaddress10.25.1.61 255.255.255.252
#
interface Ethernet0/0/0
undoportswitch
#
interface GigabitEthernet1/0/0
port link-type access
port defaultvlan1000
#
interface GigabitEthernet1/0/1
ipaddress10.25.1.21 255.255.255.252
#
interface Vlanif1007
description To LYJWHD-HEDONGZHIYEZHONGZHUAN-S3352
ipaddress10.25.1.25 255.255.255.252
#
interface Vlanif1008
rule 35 permittcpdestination-porteq136
rule 36 permitudpdestination-porteq136
rule 38 permittcpdestination-porteq138
rule 39 permittcpdestination-porteq3332
rule 16 permittcpdestination-porteq9995
rule 17 permitudpdestination-porteq9995
rule 18 permittcpdestination-porteq1068
rule 19 permitudpdestination-porteq1068
rule 30 permittcpdestination-porteq5800
rule 31 permittcpdestination-porteq5900
rule 32 permittcpdestination-porteq1720
rule 33 permitudpdestination-porteq1720
local-userlyhdjwlevel 1
local-userlyhdjwservice-type telnet terminal
#
aclnumber 3000
rule 1 permittcpdestination-porteq445
rule 2 permitudpdestination-porteq445
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1004
#
interface GigabitEthernet1/0/5
port link-type trunk
undo port trunk allow-passvlan1
rule 40 permitudpdestination-porteq4444
rule 41 permittcpdestination-porteq6669
rule 42 permittcpdestination-porteq1434
rule 43 permittcpdestination-port range 3127 3130
rule 12 permitudpdestination-porteq5554
rule 13 permittcpdestination-porteq137
rule 14 permittcpdestination-porteq1025
rule 15 permitudpdestination-porteq1025
port trunk allow-passvlan1005
#
interface GigabitEthernet1/0/6
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvБайду номын сангаасan1006
#
interface GigabitEthernet1/0/7
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1007
#
interface GigabitEthernet1/0/8
#
diffservdomain default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domaindefault_admin
local-userlyhdjwpassword cipheraT'\+I\YBCGQ=^Q`MAF4<1!!
#
traffic behavior anti-virus
deny
#
traffic policy anti-virus
classifier anti-virus behavior anti-virus
#
traffic-policy anti-virus global inbound
#
drop-profile default
description To LYJWHD-HEDONGQUJIAOYUJU-S3352
ipaddress10.25.1.29 255.255.255.252
#
interface Vlanif1009
description To LYJWHD-FENGHUANGLINGZHUDI-S5300
ipaddress10.25.1.33 255.255.255.252
rule 25 permittcpdestination-porteq139
rule 26 permitudpdestination-porteqnetbios-ssn
rule 28 permitudpdestination-porteqnetbios-ns
rule 29 permitudpdestination-porteqnetbios-dgm
description To LYJWHD-ERSHIQIZHONGXUE-S3352
ipaddress10.25.1.9 255.255.255.252
#
interface Vlanif1004
description To LYJWHD-DIJIUXIAOXUE-S3352
ipaddress10.25.1.13 255.255.255.252
#
interface Vlanif1000
description to HEDONGJIAOYU--Firewall
ipaddress 10.25.254.254 255.255.255.252
#
interface Vlanif1001
description to LYJWHD-JIUQUXIAOXUE-S3352
#
interface Vlanif1010
description To LYJWHD-BAHUZHUDI-S5300
ipaddress10.25.1.37 255.255.255.252
#
interface Vlanif1011
description To LYJWHD-TANGHEZHUDI-S5300
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1001
#
interface GigabitEthernet1/0/2
port link-type trunk
undo port trunk allow-passvlan1
description To LYJWHD-TAIPINGZHUDI-S5300
ipaddress10.25.1.49 255.255.255.252
#
interface Vlanif1014
description To LYJWHD-ZHENGWANGZHUDI-S5300
ipaddress10.25.1.53 255.255.255.252
rule 3 permittcpdestination-porteq539
rule 4 permitudpdestination-porteq539
rule 5 permitudpdestination-porteq593
rule 6 permittcpdestination-porteq593
rule 7 permitudpdestination-porteq1434
#
interface Vlanif1005
description To LYJWHD-DISHIXIAOXUE-S3352
ipaddress10.25.1.17 255.255.255.252
#
interface Vlanif1006
description To LYJWHD-ERSHISIZHONGXUE-S3352
vlanbatch 1000 to 1016 2001 to 2002 2024 to 2029
#
poe-power backup-mode 2
#
dba-profile default0 type3 assure 40000 max 80000
#
line-profile default0
#
service-profile default0
port trunk allow-passvlan1002
#
interface GigabitEthernet1/0/3
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1003
#
interface GigabitEthernet1/0/4
ipaddress10.25.1.41 255.255.255.252
#
interface Vlanif1012
description To LYJWHD-LIUDIANZIZHUDI-S5300
ipaddress10.25.1.45 255.255.255.252
#
interface Vlanif1013
<LYJWHD-HEDONGQUJIAOYUJU-S9306>discur
#
sysnameLYJWHD-HEDONGQUJIAOYUJU-S9306
#
super password level 3 cipher "@J*U2S*(7F,YWX*NZ55OA!!
#
router id 10.25.255.254
rule 20 permittcpdestination-porteq1023
rule 21 permitudpdestination-porteq1023
rule 22 permittcpdestination-porteq135
rule 23 permitudpdestination-porteq135
rule 44 permittcpdestination-porteq42
rule 45 permitudpdestination-port range 1026 1027
#
traffic classifier anti-virus operator or precedence 5
if-matchacl3000
#
interface Vlanif1015
description To LYJWHD-XIANGGONGZHUDI-S5300
ipaddress10.25.1.57 255.255.255.252
#
interface Vlanif1016
description To LYJWHD-TANGTOUZHUDI-S5300
rule 8 permittcpdestination-porteq4444
rule 9 permittcpdestination-porteq9996
rule 10 permittcpdestination-porteq5554
rule 11 permitudpdestination-porteq9996
ipaddress10.25.1.1 255.255.255.252
#
interface Vlanif1002
description TO LYJWHD-GONGYEYUANXUEXIAO-S3352
ipaddress10.25.1.5 255.255.255.252
#
interface Vlanif1003
ipaddress10.25.1.61 255.255.255.252
#
interface Ethernet0/0/0
undoportswitch
#
interface GigabitEthernet1/0/0
port link-type access
port defaultvlan1000
#
interface GigabitEthernet1/0/1
ipaddress10.25.1.21 255.255.255.252
#
interface Vlanif1007
description To LYJWHD-HEDONGZHIYEZHONGZHUAN-S3352
ipaddress10.25.1.25 255.255.255.252
#
interface Vlanif1008
rule 35 permittcpdestination-porteq136
rule 36 permitudpdestination-porteq136
rule 38 permittcpdestination-porteq138
rule 39 permittcpdestination-porteq3332
rule 16 permittcpdestination-porteq9995
rule 17 permitudpdestination-porteq9995
rule 18 permittcpdestination-porteq1068
rule 19 permitudpdestination-porteq1068
rule 30 permittcpdestination-porteq5800
rule 31 permittcpdestination-porteq5900
rule 32 permittcpdestination-porteq1720
rule 33 permitudpdestination-porteq1720
local-userlyhdjwlevel 1
local-userlyhdjwservice-type telnet terminal
#
aclnumber 3000
rule 1 permittcpdestination-porteq445
rule 2 permitudpdestination-porteq445
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1004
#
interface GigabitEthernet1/0/5
port link-type trunk
undo port trunk allow-passvlan1
rule 40 permitudpdestination-porteq4444
rule 41 permittcpdestination-porteq6669
rule 42 permittcpdestination-porteq1434
rule 43 permittcpdestination-port range 3127 3130
rule 12 permitudpdestination-porteq5554
rule 13 permittcpdestination-porteq137
rule 14 permittcpdestination-porteq1025
rule 15 permitudpdestination-porteq1025
port trunk allow-passvlan1005
#
interface GigabitEthernet1/0/6
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvБайду номын сангаасan1006
#
interface GigabitEthernet1/0/7
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1007
#
interface GigabitEthernet1/0/8
#
diffservdomain default
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domaindefault_admin
local-userlyhdjwpassword cipheraT'\+I\YBCGQ=^Q`MAF4<1!!
#
traffic behavior anti-virus
deny
#
traffic policy anti-virus
classifier anti-virus behavior anti-virus
#
traffic-policy anti-virus global inbound
#
drop-profile default
description To LYJWHD-HEDONGQUJIAOYUJU-S3352
ipaddress10.25.1.29 255.255.255.252
#
interface Vlanif1009
description To LYJWHD-FENGHUANGLINGZHUDI-S5300
ipaddress10.25.1.33 255.255.255.252
rule 25 permittcpdestination-porteq139
rule 26 permitudpdestination-porteqnetbios-ssn
rule 28 permitudpdestination-porteqnetbios-ns
rule 29 permitudpdestination-porteqnetbios-dgm
description To LYJWHD-ERSHIQIZHONGXUE-S3352
ipaddress10.25.1.9 255.255.255.252
#
interface Vlanif1004
description To LYJWHD-DIJIUXIAOXUE-S3352
ipaddress10.25.1.13 255.255.255.252
#
interface Vlanif1000
description to HEDONGJIAOYU--Firewall
ipaddress 10.25.254.254 255.255.255.252
#
interface Vlanif1001
description to LYJWHD-JIUQUXIAOXUE-S3352
#
interface Vlanif1010
description To LYJWHD-BAHUZHUDI-S5300
ipaddress10.25.1.37 255.255.255.252
#
interface Vlanif1011
description To LYJWHD-TANGHEZHUDI-S5300
port link-type trunk
undo port trunk allow-passvlan1
port trunk allow-passvlan1001
#
interface GigabitEthernet1/0/2
port link-type trunk
undo port trunk allow-passvlan1
description To LYJWHD-TAIPINGZHUDI-S5300
ipaddress10.25.1.49 255.255.255.252
#
interface Vlanif1014
description To LYJWHD-ZHENGWANGZHUDI-S5300
ipaddress10.25.1.53 255.255.255.252
rule 3 permittcpdestination-porteq539
rule 4 permitudpdestination-porteq539
rule 5 permitudpdestination-porteq593
rule 6 permittcpdestination-porteq593
rule 7 permitudpdestination-porteq1434
#
interface Vlanif1005
description To LYJWHD-DISHIXIAOXUE-S3352
ipaddress10.25.1.17 255.255.255.252
#
interface Vlanif1006
description To LYJWHD-ERSHISIZHONGXUE-S3352