华为交换机专线配置
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
********************************************************************************
* Copyright(c) 1998-2009 Huawei Technologies Co., Ltd. All rights reserved. *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
********************************************************************************
Login authentication
Username:dengjun137********
Password:
System View: return to User View with Ctrl+Z.
[jy_shiyanzhongxue]dis cu
#
sysname jy_shiyanzhongxue
#
cpu-usage cycle 1min
#
radius scheme system
#
domain system
#
local-user dengjun137********
password cipher LY6:[%(+
level 3
#
dhcp server ip-pool 2
network 192.168.0.0 mask 255.255.255.0
gateway-list 192.168.0.1
dns-list 211.137.96.205 61.139.2.69
#
acl number 2000
rule 0 permit source 192.168.10.0 0.0.0.255
#
acl number 3000
rule 0 deny udp destination-port eq 135
rule 1 deny tcp destination-port eq 135
rule 2 deny tcp destination-port eq 139
rule 3 deny tcp destination-port eq 445
rule 4 deny tcp destination-port eq 593
rule 5 deny udp destination-port eq 136
rule 6 deny udp destination-port eq netbios-ns
rule 7 deny udp destination-port eq netbios-dgm
rule 8 deny udp destination-port eq netbios-ssn
rule 9 permit ip
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address 221.182.85.242 255.255.255.224
firewall packet-filter 3000 inbound
nat outbound 2000
#
interface Ethernet0/1
ip address 192.168.10.1 255.255.255.0
firewall packet-filter 3000 inbound
#
interface NULL0
#
FTP server enable
#
dhcp server forbidden-ip 192.168.0.1 192.168.0.100
#
ip route-static 0.0.0.0 0.0.0.0 221.182.85.233 preference 60
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return