yunvn 发表于 2018-7-27 08:44:07

华为路由器4E1口开局调试案例

NE16的配置  hostname SD_TA-NE16A
  enable password level 15 7 NUaPUFS<;Y)(`_\_0/*Z(Q!!
  user tacrc service-type exec password 7 $TYJ2T!W-5_:C:"-501K]!!!
  user taian_crc service-type exec password 7 $TYJ2T!W-5_:C:"-501K]!!!
  user xintai service-type ppp password 0 xintai
  user taiancrc service-type ppp password 0 taiancrc
  user xinwen service-type ppp password 0 xinwen

  router>  access-list 1 permit 10.0.0.0 0.255.255.255
  access-list 1 permit 168.10.0.0 0.0.255.255
  access-list 1 deny any
  access-list 2 deny 10.0.0.0 0.255.255.255
  access-list 2 deny 168.10.0.0 0.0.255.255
  access-list 2 permit any
  access-list 101 deny icmp any any
  access-list 101 deny tcp any any eq 69
  access-list 101 deny tcp any any eq 135
  access-list 101 deny tcp any any eq 139
  access-list 101 deny tcp any any eq 445
  access-list 101 deny udp any any eq tftp
  access-list 101 permit ip any any
  access-list 101 deny tcp any any eq 4444
  firewall enable slot 0
  firewall enable slot 1
  firewall enable slot 2
  firewall enable slot 7
  enable vlan mode L3
  multilink-user xintai bind Virtual-Template 1
  multilink-user taiancrc bind Virtual-Template 3
  multilink-user xinwen bind Virtual-Template 2
  controller E1 2/1/0
  using e1
  controller E1 2/1/1
  using e1
  controller E1 2/1/2
  using e1
  controller E1 2/1/3
  using e1
  controller E1 2/1/4
  using e1
  controller E1 2/1/5
  using e1
  controller E1 2/1/6
  using e1
  controller E1 2/1/7
  using e1
  interface Ethernet0/2/0
  speed 100
  duplex full
  description to-ZhongXinJu-MA5100,100M FE
  ip access-group 101 in
  ip access-group 101 out
  interface Ethernet0/2/0.10
  ip address 10.0.2.254 255.255.254.0
  ip access-group 101 in
  ip access-group 101 out
  encap dot1q 10
  interface Ethernet0/2/0.20
  ip address 61.233.145.5 255.255.255.252
  ip access-group 101 in
  ip access-group 101 out
  encap dot1q 20
  interface Ethernet1/0/0
  description To-LeYuan-MA5100,100M FE
  interface Ethernet1/0/0.10
  ip address 61.233.145.1 255.255.255.252
  ip access-group 101 in
  ip access-group 101 out
  encap dot1q 10
  interface Ethernet1/0/0.30
  ip address 10.0.0.254 255.255.254.0
  ip access-group 101 in
  ip access-group 101 out
  encap dot1q 30
  interface Ethernet1/1/0
  description To-ShiSiJu-MA5100,100M FE
  interface Ethernet1/1/0.10
  ip address 61.233.145.9 255.255.255.252
  encap dot1q 10
  interface Ethernet1/1/0.20
  ip address 10.0.4.254 255.255.254.0
  ip access-group 101 in
  ip access-group 101 out
  encap dot1q 20
  interface Ethernet1/2/0
  description to 3025m
  ip address 10.10.0.1 255.255.0.0
  interface Ethernet1/2/0.2
  ip address 10.11.0.1 255.255.0.0
  ip access-group 101 in
  ip access-group 101 out
  encap dot1q 2
  interface Ethernet1/2/0.3
  ip address 168.10.24.1 255.255.252.0
  interface Ethernet1/2/0.4
  ip address 168.10.32.1 255.255.255.0
  interface Ethernet1/2/0.5
  ip address 61.232.43.49 255.255.255.252
  encap dot1q 5
  interface Ethernet1/2/0.6
  ip address 168.10.0.1 255.255.240.0
  encap dot1q 6
  interface Ethernet1/2/0.7
  encap dot1q 7
  interface Ethernet1/2/0.8
  encap dot1q 8
  interface Ethernet1/2/0.9
  ip access-group 101 in
  ip access-group 101 out
  encap dot1q 9
  interface Ethernet2/0/0
  description to zhongxinyiyan line
  interface Ethernet2/2/0
  duplex full
  description to rs3000
  ip address 61.233.145.33 255.255.255.240
  ip address 61.233.145.17 255.255.255.240 secondary
  ip access-group 101 in
  ip access-group 101 out
  interface Serial2/1/0:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username taian-crc password 0 taian-crc
  ppp multilink
  interface Serial2/1/1:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username taian-crc password 0 taian-crc
  ppp multilink
  interface Serial2/1/2:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username taian-crc password 0 taian-crc
  ppp multilink
  interface Serial2/1/3:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username taian-crc password 0 taian-crc
  ppp multilink
  interface Serial2/1/4:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username xinwen password 0 xinwen
  ppp multilink
  interface Serial2/1/5:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username xinwen password 0 xinwen
  ppp multilink
  interface Serial2/1/6:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username xinwen password 0 xinwen
  ppp multilink
  interface Serial2/1/7:0
  encapsulation ppp
  ppp authentication pap
  ppp pap sent-username xinwen password 0 xinwen
  ppp multilink
  interface Virtual-Template0
  ppp multilink
  description loopback
  ip address 61.233.144.2 255.255.255.252
  ip ospf network point-to-multipoint
  interface Virtual-Template1
  ip address 10.255.254.1 255.255.255.252
  interface Virtual-Template2
  ip address 61.233.145.53 255.255.255.252
  interface Virtual-Template3
  multilink max-bind 8
  ip address 61.233.145.49 255.255.255.252
  interface Pos0/0/0
  encapsulation ppp
  ip address 61.233.144.22 255.255.255.252
  ip access-group 101 in
  ip access-group 101 out
  nat inside list 1
  ip ospf cost 65
  interface NULL0
  router ospf
  network 61.233.144.20.0.0.0area 0.0.0.0
  network 61.233.144.220.0.0.0area 0.0.0.0
  redistribute static
  redistribute connected route-map deny
  route-map deny permit 10
  match ip address 2
页: [1]
查看完整版本: 华为路由器4E1口开局调试案例