#
version 7.1.064, Release 9524P33
#
sysname H3C
#
context Admin id 1
#
telnet server enable
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
dialer-group 1 rule ip permit
dialer-group 2 rule ip permit
#
dhcp enable
#
password-recovery enable
#
vlan 1
#
vlan 10
#
dhcp server ip-pool GuideSecDHCPPool
gateway-list 192.168.7.1
network 192.168.7.0 mask 255.255.255.0
dns-list 114.114.114.114 202.96.128.133 192.168.7.1
#
bridge 1 blackhole
bypass enable
#
controller Cellular1/0/0
#
interface Dialer0
mtu 1492
ppp chap password cipher $c$3$Vjq9ookrw PGz/WQtzVs3HNkTbNbqTpXZuu7
ppp chap user 07561205148200@163.gd
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 07561205148200@163.gd password cipher $c$3$eYwi4wFd00xaJl3EqyLOpQuK6COa7U83u sG
dialer bundle enable
dialer-group 2
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
nat outbound description GuideNat
#
interface Dialer1
mtu 1492
ppp chap password cipher $c$3$AkAotsrGYYJWmrvM2fqANZ5qz1TbA15YPPSP
ppp chap user 0756120148200@163.gd
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 0756120148200@163.gd password cipher $c$3$ Y5RtfpYmTGk8axUl9OYU7M8I3zHeWXVReCu
dialer bundle enable
dialer-group 1
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
tcp mss 1400
#
interface NULL0
#
interface Vlan-interface10
ip address 192.168.7.1 255.255.255.0
#
interface GigabitEthernet1/0/0
port link-mode route
combo enable copper
ip address 192.168.0.1 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode route
combo enable copper
pppoe-client dial-bundle-number 1
#
interface GigabitEthernet1/0/8
port link-mode route
#
interface GigabitEthernet1/0/9
port link-mode route
#
interface GigabitEthernet1/0/10
port link-mode route
#
interface GigabitEthernet1/0/11
port link-mode route
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet1/0/3
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet1/0/4
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet1/0/5
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet1/0/6
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet1/0/7
port link-mode bridge
port access vlan 10
#
security-zone name Local
#
security-zone name Trust
import interface Vlan-interface10
import interface GigabitEthernet1/0/2 vlan 10
import interface GigabitEthernet1/0/3 vlan 10
import interface GigabitEthernet1/0/4 vlan 10
import interface GigabitEthernet1/0/5 vlan 10
import interface GigabitEthernet1/0/6 vlan 10
import interface GigabitEthernet1/0/7 vlan 10
#
security-zone name DMZ
#
security-zone name Untrust
import interface Dialer0
import interface GigabitEthernet1/0/1
#
security-zone name Management
import interface GigabitEthernet1/0/0
#
scheduler logfile size 16
#
line class aux
user-role network-operator
#
line class console
authentication-mode scheme
user-role network-admin
#
line class usb
user-role network-admin
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line con 0
user-role network-admin
#
line vty 0 63
authentication-mode scheme
user-role network-admin
#
ip route-static 0.0.0.0 0 Dialer0
ip route-static 0.0.0.0 0 Dialer1
#
info-center source FILTER logfile deny
#
ssh server enable
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$Ox79oofkMArttDE7$yeg2g3GpwK8wjxyD/KFUIYcEaFPviYKrZdP/SkLUreR6Isj8IOiqKvErCehA4zkhgTqugvx7OmyTZZiew8A6zQ==
service-type ssh terminal https
authorization-attribute user-role level-3
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
ftp server enable
#
session synchronization enable
session synchronization http
#
ipsec logging negotiation enable
#
ike logging negotiation enable
#
ip https enable
#
app-profile 0_IPv4
ips apply policy guideipspolicy mode protect
#
loadbalance isp file flash:/l
那就看下拨号口是否拨号成功了