局域网配置案例

coreSW01是5500-28C-SI开启DHCP server，向不同网段的PC分配静态或动态IP。
接入层交换机使用S5024PV2-EI。
A、B和C区三个的接入层交换机用GE1/0/1与coreSW01相连
SerSW01划分两个vlan,vlan 98 (服务器群使用)，vlan 91(语音网关使用)
除FW01以外其他所有设备的GE1/0/1从属于vlan 1,并在vlan 1 接口上配置192.168.199.0网段的IP，以便远程访问设备。

在接入层交换机上为防止仿冒用户、仿冒网关，开启ARPDetection功能；为防止用户私自更改ip，开启dhcp-snooping功能，在GE1/0/1上dhcp-snooping trust。

具体配置如下：
--------------------FW01---------------------------------
#
version 5.20, Release 5140
#
sysname FW01
#
clock timezone Beijing add 08:00:00
#
undo voice vlan mac-address 00e0-bb00-0000
#
domain default enable system
#
dns resolve
dns proxy enable
dns server 105.21.16.35
#
telnet server enable
#
port-security enable
#
web idle-timeout 30
#
undo alg dns
undo alg rtsp
undo alg h323
undo alg sip
undo alg sqlnet
undo alg pptp
undo alg ils
undo alg nbt
undo alg msn
undo alg qq
undo alg tftp
undo alg sccp
undo alg gtp
#
session synchronization enable
#
password-recovery enable
#
time-range worktime from 07:00 4/23/2014 to 07:00 4/23/2015
#
acl number 2000
rule 1001 permit
#
acl number 3000
rule 0 permit ip
#
vlan 1
#
vlan 95
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
pki domain default
crl check disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet
service-type web
#
cwmp
undo cwmp enable
#
interface NULL0
#
interface Vlan-interface95
ip address 192.168.95.1 255.255.255.252
#
interface GigabitEthernet0/0
port link-mode route
nat outbound 2000
nat server 3000 protocol tcp global 110.121.11.54 www inside 192.168.95.1 www
nat server protocol udp global 110.121.11.54 3555 inside 192.168.98.1 3553
nat server 3000 protocol tcp global 110.121.11.54 3555 inside 192.168.98.1 3553
ip address 110.121.11.54 255.255.255.252
dns server 105.21.16.35
#
interface GigabitEthernet0/1
port link-mode route
#
interface GigabitEthernet0/3
port link-mode route
#
interface GigabitEthernet0/4
port link-mode route
#
interface GigabitEthernet0/2
port link-mode bridge
port access vlan 95
#
vd Root id 1
#
zone name Management id 0
priority 100
zone name Local id 1
priority 100
zone name Trust id 2
priority 85
import interface GigabitEthernet0/1
import interface GigabitEthernet0/3
import interface Vlan-interface95
zone name DMZ id 3
priority 50
zone name Untrust id 4
priority 5
import interface GigabitEthernet0/0
switchto vd Root
zone name Management id 0
ip virtual-reassembly
zone name Local id 1
ip virtual-reassembly
zone name Trust id 2
ip virtual-reassembly
zone name DMZ id 3
ip virtual-reassembly
zone name Untrust id 4
ip virtual-reassembly
#
ip route-static 0.0.0.0 0.0.0.0 110.121.11.53
ip route-static 192.168.11.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.20.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.21.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.22.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.23.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.24.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.25.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.26.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.27.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.28.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.29.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.31.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.32.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.33.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.34.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.86.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.91.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.98.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.168.199.0 255.255.255.0 Vlan-interface95 192.168.95.2
ip route-static 192.186.86.0 255.255.255.0 Vlan-interface95 192.186.95.2
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
--------------------coreSW01-----------------------------
#
version 5.20, Release 2220P02
#
sysname coreSW01
#
clock timezone beijing add 08:00:00
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
dns resolve
dns proxy enable
#
telnet server enable
#
mac-address timer aging 10
#
mirroring-group 1 local
#
password-recovery enable
#
vlan 1
#
vlan 11
#
vlan 16
#
vlan 20 to 29
#
vlan 31 to 34
#
vlan 86
#
vlan 91
description to Keygoe3003
#
vlan 95
#
vlan 98
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan11
network 192.168.11.0 mask 255.255.255.0
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan11.1
static-bind ip-address 192.168.11.1 mask 255.255.255.0
static-bind mac-address 0011-1111-0000
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan11.2.wifirouter
static-bind ip-address 192.168.11.2 mask 255.255.255.0
static-bind mac-address 14cf-925b-ea6f
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan11.5.taishiji
static-bind ip-address 192.168.11.5 mask 255.255.255.0
static-bind mac-address 94de-8091-81bd
gateway-list 192.168.11.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan20
network 192.168.20.0 mask 255.255.255.0
gateway-list 192.168.20.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan20.1
static-bind ip-address 192.168.20.1 mask 255.255.255.0
static-bind mac-address 0020-1111-0001
gateway-list 192.168.20.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan21
network 192.168.21.0 mask 255.255.255.0
gateway-list 192.168.21.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan21.1
static-bind ip-address 192.168.21.1 mask 255.255.255.0
static-bind mac-address 0021-1111-0001
gateway-list 192.168.21.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan22
network 192.168.22.0 mask 255.255.255.0
gateway-list 192.168.22.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan22.1
static-bind ip-address 192.168.22.1 mask 255.255.255.0
static-bind mac-address 0022-1111-0001
gateway-list 192.168.22.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan23
network 192.168.23.0 mask 255.255.255.0
gateway-list 192.168.23.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan23.1
static-bind ip-address 192.168.23.1 mask 255.255.255.0
static-bind mac-address 0023-1111-0001
gateway-list 192.168.23.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan24
network 192.168.24.0 mask 255.255.255.0
gateway-list 192.168.24.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan24.1
static-bind ip-address 192.168.24.1 mask 255.255.255.0
static-bind mac-address 0024-1111-0001
gateway-list 192.168.24.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan25
network 192.168.25.0 mask 255.255.255.0
gateway-list 192.168.25.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan25.1
static-bind ip-address 192.168.25.1 mask 255.255.255.0
static-bind mac-address 0025-1111-0001
gateway-list 192.168.25.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan26
network 192.168.26.0 mask 255.255.255.0
gateway-list 192.168.26.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan26.1
static-bind ip-address 192.168.26.1 mask 255.255.255.0
static-bind mac-address 0026-1111-0001
gateway-list 192.168.26.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan27
network 192.168.27.0 mask 255.255.255.0
gateway-list 192.168.27.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan27.1
static-bind ip-address 192.168.27.1 mask 255.255.255.0
static-bind mac-address 0027-1111-0001
gateway-list 192.168.27.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan28
network 192.168.28.0 mask 255.255.255.0
gateway-list 192.168.28.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan28.1
static-bind ip-address 192.168.28.1 mask 255.255.255.0
static-bind mac-address 0028-1111-0001
gateway-list 192.168.28.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan29
network 192.168.29.0 mask 255.255.255.0
gateway-list 192.168.29.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan29.1
static-bind ip-address 192.168.29.1 mask 255.255.255.0
static-bind mac-address 0029-1111-0001
gateway-list 192.168.29.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan31
network 192.168.31.0 mask 255.255.255.0
gateway-list 192.168.31.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan31.1
static-bind ip-address 192.168.31.1 mask 255.255.255.0
static-bind mac-address 0031-1111-0001
gateway-list 192.168.31.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan32
network 192.168.32.0 mask 255.255.255.0
gateway-list 192.168.32.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan32.1
static-bind ip-address 192.168.32.1 mask 255.255.255.0
static-bind mac-address 0032-1111-0001
gateway-list 192.168.32.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan33
network 192.168.33.0 mask 255.255.255.0
gateway-list 192.168.33.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan33.1
static-bind ip-address 192.168.33.1 mask 255.255.255.0
static-bind mac-address 0033-1111-0001
gateway-list 192.168.33.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan33.2.wifirouter
static-bind ip-address 192.168.33.2 mask 255.255.255.0
static-bind mac-address 9c21-6a2c-3ef3
gateway-list 192.168.33.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan34
network 192.168.34.0 mask 255.255.255.0
gateway-list 192.168.34.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan34.1
static-bind ip-address 192.168.34.1 mask 255.255.255.0
static-bind mac-address 0034-1111-0001
gateway-list 192.168.34.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan68
network 192.168.68.0 mask 255.255.255.0
#
dhcp server ip-pool vlan86
network 192.186.21.0 mask 255.255.255.0
gateway-list 192.168.86.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan91
network 192.168.91.0 mask 255.255.255.0
gateway-list 192.168.91.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98
network 192.168.98.0 mask 255.255.255.0
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.1.ser01
static-bind ip-address 192.168.98.1 mask 255.255.255.0
static-bind mac-address 00e0-4c06-a214
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.2.ser02
static-bind ip-address 192.168.98.2 mask 255.255.255.0
static-bind mac-address 8ce7-4844-a1d5
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.3.ser03
static-bind ip-address 192.168.98.3 mask 255.255.255.0
static-bind mac-address 000c-29f8-d3dd
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.4.ser04
static-bind ip-address 192.168.98.4 mask 255.255.255.0
static-bind mac-address 0011-1111-0004
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.5.ser05
static-bind ip-address 192.168.98.5 mask 255.255.255.0
static-bind mac-address 0011-1111-0005
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.6.ser06
static-bind ip-address 192.168.98.6 mask 255.255.255.0
static-bind mac-address 0011-1111-0006
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
dhcp server ip-pool vlan98.7.ser07
static-bind ip-address 192.168.98.7 mask 255.255.255.0
static-bind mac-address 0011-1111-0007
gateway-list 192.168.98.254
dns-list 105.21.16.35 33.116.5.9
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet terminal
service-type web
local-user adminer
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type web
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.199.1 255.255.255.0
#
interface Vlan-interface11
ip address 192.168.11.254 255.255.255.0
#
interface Vlan-interface16
#
interface Vlan-interface20
ip address 192.168.20.254 255.255.255.0
#
interface Vlan-interface21
ip address 192.168.21.254 255.255.255.0
#
interface Vlan-interface22
ip address 192.168.22.254 255.255.255.0
#
interface Vlan-interface23
ip address 192.168.23.254 255.255.255.0
#
interface Vlan-interface24
ip address 192.168.24.254 255.255.255.0
#
interface Vlan-interface25
ip address 192.168.25.254 255.255.255.0
#
interface Vlan-interface26
ip address 192.168.26.254 255.255.255.0
#
interface Vlan-interface27
ip address 192.168.27.254 255.255.255.0
#
interface Vlan-interface28
ip address 192.168.28.254 255.255.255.0
#
interface Vlan-interface29
ip address 192.168.29.254 255.255.255.0
#
interface Vlan-interface31
ip address 192.168.31.254 255.255.255.0
#
interface Vlan-interface32
ip address 192.168.32.254 255.255.255.0
#
interface Vlan-interface33
ip address 192.168.33.254 255.255.255.0
#
interface Vlan-interface34
ip address 192.168.34.254 255.255.255.0
#
interface Vlan-interface86
ip address 192.168.86.254 255.255.255.0
#
interface Vlan-interface91
ip address 192.168.91.254 255.255.255.0
#
interface Vlan-interface95
ip address 192.168.95.2 255.255.255.252
#
interface Vlan-interface98
ip address 192.168.98.254 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/3
description to A_SW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/4
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/5
description to B_SW07
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/6
description to B_SW10
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/7
description to B_SW02
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/8
description to B_SW05
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/9
description to B_SW06
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/10
description to C_SW03
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/11
description to C_SW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/12
description to B_SW08
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/13
description to C_SW04
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/14
description to C_SW02
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/15
description to B_SW03
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/16
description to B_SW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/17
description to B_SW04
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/18
description to B_SW09
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/19
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/20
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/21
description to serSW01
port link-type trunk
port trunk permit vlan all
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/22
port link-type trunk
port trunk permit vlan all
shutdown
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/23
port access vlan 20
mirroring-group 1 monitor-port
#
interface GigabitEthernet1/0/24
description to FW01
port access vlan 95
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/25
shutdown
#
interface GigabitEthernet1/0/26
shutdown
#
interface GigabitEthernet1/0/27
shutdown
#
interface GigabitEthernet1/0/28
shutdown
#
ip route-static 0.0.0.0 0.0.0.0 Vlan-interface95 192.168.95.1
#
dhcp server forbidden-ip 192.168.11.110 192.168.11.254
dhcp server forbidden-ip 192.168.20.25 192.168.20.254
dhcp server forbidden-ip 192.168.21.25 192.168.21.254
dhcp server forbidden-ip 192.168.22.25 192.168.22.254
dhcp server forbidden-ip 192.168.23.25 192.168.23.254
dhcp server forbidden-ip 192.168.24.25 192.168.24.254
dhcp server forbidden-ip 192.168.25.25 192.168.25.254
dhcp server forbidden-ip 192.168.26.25 192.168.26.254
dhcp server forbidden-ip 192.168.27.25 192.168.27.254
dhcp server forbidden-ip 192.168.28.25 192.168.28.254
dhcp server forbidden-ip 192.168.29.25 192.168.29.254
dhcp server forbidden-ip 192.168.31.25 192.168.31.254
dhcp server forbidden-ip 192.168.32.25 192.168.32.254
dhcp server forbidden-ip 192.168.33.25 192.168.33.254
dhcp server forbidden-ip 192.168.34.25 192.168.34.254
dhcp server forbidden-ip 192.168.98.25 192.168.98.254
dhcp server forbidden-ip 192.168.20.24 192.168.20.254
dhcp server forbidden-ip 192.168.21.24 192.168.21.254
dhcp server forbidden-ip 192.168.22.24 192.168.22.254
dhcp server forbidden-ip 192.168.23.24 192.168.23.254
dhcp server forbidden-ip 192.168.24.24 192.168.24.254
dhcp server forbidden-ip 192.168.25.24 192.168.25.254
dhcp server forbidden-ip 192.168.26.24 192.168.26.254
dhcp server forbidden-ip 192.168.27.24 192.168.27.254
dhcp server forbidden-ip 192.168.28.24 192.168.28.254
dhcp server forbidden-ip 192.168.29.24 192.168.29.254
dhcp server forbidden-ip 192.168.31.24 192.168.31.254
dhcp server forbidden-ip 192.168.32.24 192.168.32.254
dhcp server forbidden-ip 192.168.33.24 192.168.33.254
dhcp server forbidden-ip 192.168.34.24 192.168.34.254
dhcp server forbidden-ip 192.168.98.30 192.168.98.254
dhcp server forbidden-ip 192.168.11.40 192.168.11.254
dhcp server forbidden-ip 192.168.91.22 192.168.91.254
#
dhcp enable
#
arp timer aging 10
#
ip https enable
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 4
user privilege level 3
set authentication password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
user-interface vty 5 15
#
return
--------------------A_SW01-------------------------------
#
version 5.20.99, Release 1103
#
sysname A_SW01
#
clock timezone Beijing add 08:00:00
#
domain default enable system
#
ipv6
#
telnet server enable
#
mirroring-group 1 local
#
password-recovery enable
#
vlan 1
arp detection enable
#
vlan 11
arp detection enable
#
vlan 86
arp detection enable
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet
service-type web
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.199.101 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
dhcp-snooping trust
arp detection trust
#
interface GigabitEthernet1/0/2
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/3
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/4
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/5
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/6
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/7
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/8
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/9
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/10
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/11
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/12
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/13
description to financialroomA23
port access vlan 86
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/14
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/15
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/16
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/17
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/18
description to financialroomA24
port access vlan 86
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/19
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/20
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/21
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/22
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/23
port access vlan 11
mirroring-group 1 mirroring-port both
#
interface GigabitEthernet1/0/24
port access vlan 11
mirroring-group 1 monitor-port
#
interface GigabitEthernet1/0/25
#
interface GigabitEthernet1/0/26
#
interface GigabitEthernet1/0/27
#
interface GigabitEthernet1/0/28
#
dhcp-snooping
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 15
authentication-mode scheme
#
return
--------------------serSW01------------------------------
#
version 5.20.99, Release 1103
#
sysname serSW01
#
domain default enable system
#
ipv6
#
telnet server enable
#
password-recovery enable
#
vlan 1
arp detection enable
#
vlan 91
#
vlan 98
arp detection enable
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$bIanGr5abuKLEEw8Kno3x3udAbKSlsdfAKgwhBVcui1/jpDWu==
authorization-attribute level 3
service-type telnet
service-type web
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.199.2 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
dhcp-snooping trust
arp detection trust
#
interface GigabitEthernet1/0/2
port access vlan 98
#
interface GigabitEthernet1/0/3
port access vlan 98
#
interface GigabitEthernet1/0/4
port access vlan 98
#
interface GigabitEthernet1/0/5
port access vlan 98
#
interface GigabitEthernet1/0/6
port access vlan 98
#
interface GigabitEthernet1/0/7
port access vlan 98
#
interface GigabitEthernet1/0/8
port access vlan 98
#
interface GigabitEthernet1/0/9
port access vlan 98
#
interface GigabitEthernet1/0/10
port access vlan 98
#
interface GigabitEthernet1/0/11
port access vlan 91
#
interface GigabitEthernet1/0/12
port access vlan 91
#
interface GigabitEthernet1/0/13
port access vlan 91
#
interface GigabitEthernet1/0/14
port access vlan 91
#
interface GigabitEthernet1/0/15
port access vlan 91
#
interface GigabitEthernet1/0/16
port access vlan 91
#
interface GigabitEthernet1/0/17
port access vlan 91
#
interface GigabitEthernet1/0/18
port access vlan 91
#
interface GigabitEthernet1/0/19
port access vlan 91
#
interface GigabitEthernet1/0/20
port access vlan 98
#
interface GigabitEthernet1/0/21
port access vlan 98
#
interface GigabitEthernet1/0/22
port access vlan 98
#
interface GigabitEthernet1/0/23
port access vlan 98
#
interface GigabitEthernet1/0/24
port access vlan 98
#
interface GigabitEthernet1/0/25
#
interface GigabitEthernet1/0/26
#
interface GigabitEthernet1/0/27
#
interface GigabitEthernet1/0/28
#
dhcp-snooping
#
load xml-configuration
#
user-interface aux 0
user-interface vty 0 15
authentication-mode scheme
#
return