华为交换技术实例(1)
这个是某小区汇聚层的交换机配置，具体细节来一起分享一下，看看他们是咋配的，学学经验。 super password level 3 cipher N`C55QK<`=/Q=^Q`MAF4<1!!//配置了密码，等级为3应该有所有权限。然后经md5算法加密过了。
#
vlan batch 2 to 404 406 408 to 409 411 413 to 415 417 419 to 420 422 425 to 428 430
vlan batch 432 434 438 441 to 442 445 447 to 448 450 452 to 453 455 458 to 459
vlan batch 461 to 462 465 to 468 471 to 474 476 561 to 744 746 to 4094
//vlan划得很多，一般情况是根据不同的业务来划分vlan的。
#
cluster enable
ntdp enable
ntdp hop 16
ndp enable
//ndp是用来发现直接相连的邻居信息。包括邻接设备的设备类型、软/硬件版本、连接端口等。NTDP 为集群管理提供可加入集群的设备信息,收集指定跳数内的交换机的拓扑信息。这里设置的跳数是16条。NDP 为 NTDP 提供邻接表信息,NTDP 根据邻接信息发送和转发 NTDP 拓扑收集请求,收集一定网络范围内每个设备的 NDP 信息和它与所有邻居的连接信息。
#
dhcp enable
#
undo http server enable
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password simple admin
local-user admin service-type http
//3a认证:认证、授权和计费都使用默认的default
#
interface Vlanif7
ip address 192.168.1.1 255.255.255.0
//设置vlanif,此接口是逻辑接口，配置后可以部署三层特性。
#
interface Vlanif11
ip address 192.168.1.2 255.255.255.0
#
interface Ethernet0/0/1
description to_XC_MA5105-1
qinq vlan-translation enable
port hybrid tagged vlan11
port hybrid untagged vlan 100 3329
port vlan-stacking vlan 100 to 2000 stack-vlan 100
port vlan-stacking vlan 2112 to 2127 stack-vlan 3329
port vlan-stacking vlan 2176 to 2191 stack-vlan 3329
port vlan-mapping vlan 11 map-vlan 11
ntdp enable
ndp enable
bpdu enable
//这个口上连到ma5105这台设备上。默认接口类型就hybrid，是首先是起了qinq vlan转发功能。起了qinq就需要准备两个标签，一个内层一个外层。port-stacking 命令告诉我们内部的vlan从100 to 2000将要打上 100的标签了用来穿透isp。port hybrid tagged vlan11这个是说要是出去的是vlan 11就不要去掉标签，这个是内部标签。port hybrid untagged vlan 100 3329 要是进来的是vlan 100 3329那就去掉他们的标签，这个是外部标签，要打的。 port vlan-mapping 我是硬是没有看懂什么意思，呜呜。
#
interface Ethernet0/0/2
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/3
description to_XC_MA5105-2
qinq vlan-translation enable
port hybrid tagged vlan 11
port hybrid untagged vlan 200 900 3330 3594
port vlan-stacking vlan 100 to 2000 stack-vlan 900
port vlan-stacking vlan 2112 to 2127 stack-vlan 3330
port vlan-stacking vlan 2176 to 2191 stack-vlan 3330
port vlan-mapping vlan 11 map-vlan 11
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/4
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/5
description to_XC_MA5103-1
qinq vlan-translation enable
port hybrid tagged vlan11
port hybrid untagged vlan 300 3328 3594
port vlan-stacking vlan 100 to 2000 stack-vlan 300
port vlan-stacking vlan 2112 to 2143 stack-vlan 3328
port vlan-stacking vlan 2176 to 2207 stack-vlan 3328
port vlan-stacking vlan 2240 to 2271 stack-vlan 3328
port vlan-mapping vlan 11 map-vlan 11
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/6
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/7
description to XC_CPN_3#
qinq vlan-translation enable
port default vlan 3594
port hybrid tagged vlan 7
port vlan-stacking vlan 3200 to 3223 stack-vlan 3594
port hybrid untagged vlan 3594
port vlan-mapping vlan 7 map-vlan 7
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/8
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/9
description to XC_CPN_4#
qinq vlan-translation enable
port default vlan 3594
port hybrid tagged vlan 7
port vlan-stacking vlan 3264 to 3287 stack-vlan 3594
port hybrid untagged vlan 3594
port vlan-mapping vlan 7 map-vlan 7
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/10
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/11
description to XC_CPN_7#
port link-type dot1q-tunnel
port default vlan 19下·
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/12
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/13
description to XC_CPN_6#
qinq vlan-translation enable
port default vlan 3594
port hybrid tagged vlan 7
port hybrid untagged vlan 3594
port vlan-stacking vlan 3360 to 3383 stack-vlan 3594
port vlan-mapping vlan 7 map-vlan 7
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/14
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/15
description to XC_CPN_2#
qinq vlan-translation enable
port default vlan 3594
port hybrid tagged vlan 7
port hybrid untagged vlan 3594
port vlan-stacking vlan 3168 to 3191 stack-vlan 3594
port vlan-mapping vlan 7 map-vlan 7
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/16
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/17
description to XC_CPN
port link-type dot1q-tunnel
port default vlan 19
ntdp enable
ndp enable
bpdu enable
#
interface Ethernet0/0/18
ntdp enable
ndp enable
bpdu enable
#
..............
页:
[1]