華為AR1220路由器配置參數(shù)實(shí)際應(yīng)用實(shí)例解說一

華為AR1220路由器配置參數(shù)實(shí)際應(yīng)用實(shí)例解說一配置參數(shù)[GZ]discu[V200R001C00SPC200]//路由器軟件版本，可從官方網(wǎng)站下載#sysnameGZ//路由器名字GZftpserverenable//ftp服務(wù)開通以便拷貝出配置文件備份#voice#httpserverport1025//httpundohttpserverenable#dropillegal-macalarm#l2tpaging0#vlanbatch1020304050//本路由器設(shè)置的VLANID #igmpgloballimit256#multicastrouting-enable//開啟組播#dhcpenable//全局下開啟DHCP服務(wù)然后在各VLAN上開啟單獨(dú)的DHCP#ipvpn-instance1ipv4-family#aclnumber2000rule10permit#aclnumber2001//以太網(wǎng)訪問規(guī)則列表。rule6permitsource55//允許此網(wǎng)段訪問外網(wǎng)rule7permitsource55//允許此網(wǎng)段訪問外網(wǎng)rule8permitsource//允許此網(wǎng)段的前三個(gè)IP訪問外網(wǎng)rule9deny//不允許其他網(wǎng)段訪問外網(wǎng)#aclnumber3000//此規(guī)則并未應(yīng)用rule40permitipsource55destination55#aclnumber3001//定義兩個(gè)網(wǎng)段主機(jī)互不訪問，學(xué)生不能訪問65網(wǎng)段。rule5denyipsource55destination55rule10denyipsource55destination55#aaa//默認(rèn)視圖窗口定義本地登錄帳號(hào)和密碼portdefaultvlan20//定義端口所在VLANqosgtscir6000cbs600000//定義該端口數(shù)據(jù)緩存帶寬范圍#interfaceEthernet0/0/3//物理端端口3portlink-typeaccessportdefaultvlan30#interfaceEthernet0/0/4//物理端端口4portlink-typeaccess//定義該端口類型portdefaultvlan40//定義端口所在VLAN#interfaceEthernet0/0/5//物理端端口5portlink-typeaccess//定義該端口類型portdefaultvlan50//定義端口所在VLAN#interfaceEthernet0/0/6//物理端端口6portlink-typeaccess//定義該端口類型#interfaceEthernet0/0/7//物理端端口6portlink-typeaccess//定義該端口類型portdefaultvlan10//定義端口所在VLAN#interfaceGigabitEthernet0/0/0//三層口不在任何一個(gè)VLAN中，有映射功能。ipaddress28//定義該端口的網(wǎng)關(guān)地址和子網(wǎng)掩碼natserverprotocoltcpglobalcurrent-interface10001inside2210001//允許內(nèi)網(wǎng)IP端口映射到外網(wǎng)natserverprotocoltcpglobalcurrent-interface10002inside2210002natserverprotocoltcpglobalcurrent-interface10003inside2210003natserverprotocoltcpglobalcurrent-interface10004inside2210004natserverprotocoltcpglobalcurrent-interface10005inside2210005natserverprotocoltcpglobalcurrent-interface10006inside2210006natserverprotocoltcpglobalcurrent-interface10007inside2210007natserverprotocoltcpglobalcurrent-interface10008inside2210008natserverprotocoltcpglobalcurrent-interface10009inside2210009natserverprotocoltcpglobalcurrent-interface10010inside2210010natserverprotocoludpglobalcurrent-interface11001inside2211001natserverprotocoludpglobalcurrent-interface11002inside2211002natserverprotocoludpglobalcurrent-interface11003inside2211003natserverprotocoludpglobalcurrent-interface11004inside2211004natserverprotocoludpglobalcurrent-interface11005inside2211005natserverprotocoludpglobalcurrent-interface11006inside2211006natserverprotocoludpglobalcurrent-interface11007inside2211007natserverprotocoludpglobalcurrent-interface11008inside2211008natserverprotocoludpglobalcurrent-interface11009inside2211009natserverprotocoludpglobalcurrent-interface11010inside2211010natoutbound2001//在該端口上執(zhí)行編號(hào)為2001的訪問規(guī)則#interfaceGigabitEthernet0/0/1//三層口不在任何一個(gè)VLAN中，有映射功能。ipaddress52//定義該端口的網(wǎng)關(guān)地址和子網(wǎng)掩碼pimdm//組播協(xié)議需開啟的功能igmpenable//組播協(xié)議需開啟的功能undonegotiationauto//關(guān)閉端口自動(dòng)協(xié)商功能zonetrust//定義該端口是信任區(qū)域#interfaceCellular0/0/0link-protocolppp#interfaceCellular0/0/1link-protocolppp#interfaceNULL0#igmp#pimc-bsrGigabitEthernet0/0/0c-rpGigabitEthernet0/0/0group-policy2000c-rpGigabitEthernet0/0/1group-policy2000#iproute-static//新增靜態(tài)路由列表，訪問外網(wǎng)iproute-staticiproute-staticiproute-staticiproute-staticiproute-staticiproute-staticiproute-staticiproute-static#superpasswordlevel3cipherEO2\:%&(X.$'CLYaDZ]EJ1!!user-interfacecon0user-interfacevty04authentication-modeaaauser-interfacevty1620#port-group1group-memberEthernet0/0/0group-memberEther