1、想要实现员工的电脑Mac地址绑定,陌生电脑不能接入公司内网,应该怎么配置?
2、电脑识别网络很慢,是哪里的问题?应该怎么配置交换机?
目前核心详细配置如下:
Login: admin Password: ****************************************************************************** * Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed. * ****************************************************************************** <core>dis cu # version 7.1.070, Release 6522 # sysname core # clock timezone UTC add 08:00:00 clock protocol none # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # packet-filter 3990 global inbound packet-filter 3980 global outbound # port-security enable # dhcp enable dhcp server forbidden-ip 192.168.1.2 192.168.1.50 # lldp global enable # password-recovery enable # vlan 1 # vlan 10 # vlan 20 # vlan 99 to 100 # stp global enable # dhcp server ip-pool vlan1 gateway-list 192.168.1.1 network 192.168.1.0 mask 255.255.255.0 dns-list 219.141.140.10 219.141.136.10 expired unlimited static-bind ip-address 192.168.1.51 mask 255.255.255.0 client-identifier 0130-9c23-ee70-ca static-bind ip-address 192.168.1.52 mask 255.255.255.0 client-identifier 01e0-be03-497a-8e static-bind ip-address 192.168.1.53 mask 255.255.255.0 client-identifier 0138-fc98-3770-71 static-bind ip-address 192.168.1.54 mask 255.255.255.0 client-identifier 0160-1895-0d68-a0 static-bind ip-address 192.168.1.55 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.56 mask 255.255.255.0 client-identifier 0100-0ec6-c159-31 static-bind ip-address 192.168.1.57 mask 255.255.255.0 client-identifier 0168-f728-5e96-1f static-bind ip-address 192.168.1.58 mask 255.255.255.0 client-identifier 0160-1895-0d62-4d static-bind ip-address 192.168.1.59 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.60 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.61 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.62 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.63 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.64 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.65 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.66 mask 255.255.255.0 client-identifier 018c-1645-2e97-d2 static-bind ip-address 192.168.1.67 mask 255.255.255.0 client-identifier 0160-1895-0d69-ac static-bind ip-address 192.168.1.68 mask 255.255.255.0 client-identifier 0154-e1ad-eb7f-c5 static-bind ip-address 192.168.1.69 mask 255.255.255.0 client-identifier 0130-d042-e3e2-ba static-bind ip-address 192.168.1.70 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.71 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.72 mask 255.255.255.0 client-identifier 0130-9c23-ef16-23 static-bind ip-address 192.168.1.73 mask 255.255.255.0 client-identifier 01bc-17b8-bbd1-6e static-bind ip-address 192.168.1.74 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.75 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.76 mask 255.255.255.0 client-identifier 016c-4b90-4e76-42 static-bind ip-address 192.168.1.77 mask 255.255.255.0 client-identifier 01c8-5b76-b23a-17 static-bind ip-address 192.168.1.78 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.79 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.80 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.81 mask 255.255.255.0 client-identifier 0100-2b67-13ca-e3 static-bind ip-address 192.168.1.82 mask 255.255.255.0 client-identifier 014c-cc6a-17e0-44 static-bind ip-address 192.168.1.83 mask 255.255.255.0 client-identifier 01c8-5b76-a3ed-60 static-bind ip-address 192.168.1.84 mask 255.255.255.0 client-identifier 01c8-5b76-b237-e2 static-bind ip-address 192.168.1.85 mask 255.255.255.0 client-identifier 0154-e1ad-eb7d-e9 static-bind ip-address 192.168.1.86 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.87 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.88 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.89 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.90 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.91 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.92 mask 255.255.255.0 client-identifier 0160-1895-0d6a-7a static-bind ip-address 192.168.1.93 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.94 mask 255.255.255.0 client-identifier 0164-006a-8ce6-f1 static-bind ip-address 192.168.1.95 mask 255.255.255.0 client-identifier 018c-1645-345e-89 static-bind ip-address 192.168.1.96 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.97 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.98 mask 255.255.255.0 client-identifier 016c-4b90-5519-f2 static-bind ip-address 192.168.1.99 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.100 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.101 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.102 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.103 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.104 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.105 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.106 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.107 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.108 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.109 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.110 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.111 mask 255.255.255.0 client-identifier 01e8-6a64-81aa-58 static-bind ip-address 192.168.1.112 mask 255.255.255.0 client-identifier 0100-ff29-0e4e-d6 static-bind ip-address 192.168.1.113 mask 255.255.255.0 client-identifier 0100-e04c-367d-c9 static-bind ip-address 192.168.1.114 mask 255.255.255.0 client-identifier 01e8-6a64-31f1-a0 static-bind ip-address 192.168.1.115 mask 255.255.255.0 client-identifier 01e8-6a64-d27a-60 static-bind ip-address 192.168.1.116 mask 255.255.255.0 client-identifier 0100-2b67-1a23-ff static-bind ip-address 192.168.1.117 mask 255.255.255.0 client-identifier 0100-e04c-73e6-ff static-bind ip-address 192.168.1.118 mask 255.255.255.0 client-identifier 017c-8ae1-71ab-2f static-bind ip-address 192.168.1.119 mask 255.255.255.0 client-identifier 018c-1645-5c76-65 static-bind ip-address 192.168.1.120 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.121 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.122 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.123 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.124 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.125 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.126 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.127 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.128 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.129 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.130 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.131 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.132 mask 255.255.255.0 client-identifier 01e8-6a64-2f12-24 static-bind ip-address 192.168.1.133 mask 255.255.255.0 client-identifier 018c-1645-136d-bd static-bind ip-address 192.168.1.134 mask 255.255.255.0 client-identifier 01dc-1ba1-7bcc-f7 static-bind ip-address 192.168.1.135 mask 255.255.255.0 client-identifier 0148-2ae3-15ad-d4 static-bind ip-address 192.168.1.136 mask 255.255.255.0 client-identifier 01e8-6a64-31d9-ec static-bind ip-address 192.168.1.137 mask 255.255.255.0 client-identifier 01e8-6a64-c7f7-82 static-bind ip-address 192.168.1.138 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.139 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.140 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.141 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.142 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.143 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.144 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.145 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.146 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.147 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.148 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.149 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.150 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.151 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.152 mask 255.255.255.0 client-identifier 0160-1895-0d68-e2 static-bind ip-address 192.168.1.153 mask 255.255.255.0 client-identifier 0154-bf64-9dd6-47 static-bind ip-address 192.168.1.154 mask 255.255.255.0 client-identifier 0154-bf64-9dd6-8e static-bind ip-address 192.168.1.155 mask 255.255.255.0 client-identifier 0154-bf64-9dd7-9b static-bind ip-address 192.168.1.156 mask 255.255.255.0 client-identifier 018c-1645-4925-c1 static-bind ip-address 192.168.1.157 mask 255.255.255.0 client-identifier 0100-2b67-13ca-e3 static-bind ip-address 192.168.1.158 mask 255.255.255.0 client-identifier 016c-2408-b7e5-42 static-bind ip-address 192.168.1.159 mask 255.255.255.0 client-identifier 01e8-6a64-d27b-92 static-bind ip-address 192.168.1.160 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.161 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.162 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.163 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.164 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.165 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.166 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.167 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.168 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.169 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.170 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.173 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.174 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.175 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.176 mask 255.255.255.0 client-identifier 01c8-5b76-b233-93 static-bind ip-address 192.168.1.177 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.178 mask 255.255.255.0 client-identifier 01b0-5216-d029-77 static-bind ip-address 192.168.1.179 mask 255.255.255.0 client-identifier 0150-7b9d-c8f1-d8 static-bind ip-address 192.168.1.180 mask 255.255.255.0 client-identifier 018c-1645-5bd5-e8 static-bind ip-address 192.168.1.181 mask 255.255.255.0 client-identifier 0100-e04c-6801-02 static-bind ip-address 192.168.1.182 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.183 mask 255.255.255.0 client-identifier 01e8-6a64-3a50-c6 static-bind ip-address 192.168.1.184 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.185 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.186 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.187 mask 255.255.255.0 client-identifier 01c8-5b76-b239-39 static-bind ip-address 192.168.1.188 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.189 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.190 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.191 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.192 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.193 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.194 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.195 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.196 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.197 mask 255.255.255.0 client-identifier 0188-a4c2-65ce-ff static-bind ip-address 192.168.1.198 mask 255.255.255.0 client-identifier 0136-5cad-3aa9-80 static-bind ip-address 192.168.1.199 mask 255.255.255.0 client-identifier 01e8-6a64-d27e-a4 static-bind ip-address 192.168.1.200 mask 255.255.255.0 client-identifier 01c8-5b76-b241-b3 static-bind ip-address 192.168.1.201 mask 255.255.255.0 client-identifier 01c8-5b76-a633-fe static-bind ip-address 192.168.1.202 mask 255.255.255.0 client-identifier 01e8-6a64-2a9c-8b static-bind ip-address 192.168.1.203 mask 255.255.255.0 client-identifier 0154-ee75-c0d3-eb static-bind ip-address 192.168.1.204 mask 255.255.255.0 client-identifier 01b0-fc36-0f92-59 static-bind ip-address 192.168.1.205 mask 255.255.255.0 client-identifier 0170-c94e-e2f1-19 static-bind ip-address 192.168.1.206 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.207 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.208 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.209 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.210 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.211 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.212 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.213 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.214 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.215 mask 255.255.255.0 client-identifier 01f8-e43b-80a4-50 static-bind ip-address 192.168.1.216 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.217 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.218 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.219 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.220 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.221 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.222 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.223 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.224 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.225 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.226 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.227 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.228 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.229 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.230 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.231 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.232 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.233 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.234 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.235 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.236 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.237 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.238 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.239 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.240 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.241 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.242 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.243 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.244 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.245 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.246 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.247 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.248 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.249 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.250 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.251 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.252 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.253 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff static-bind ip-address 192.168.1.254 mask 255.255.255.0 client-identifier 01ff-ffff-ffff-ff # dhcp server ip-pool vlan20 gateway-list 192.168.20.1 network 192.168.20.0 mask 255.255.254.0 dns-list 219.141.140.10 219.141.136.10 # dhcp server ip-pool vlan99 gateway-list 192.168.99.1 network 192.168.99.0 mask 255.255.255.0 dns-list 219.141.140.10 219.141.136.10 # dhcp server ip-pool vlan100 gateway-list 192.168.100.1 network 192.168.100.0 mask 255.255.255.0 dns-list 219.141.140.10 219.141.136.10 # interface NULL0 # interface Vlan-interface1 ip address 192.168.1.1 255.255.255.0 dhcp server apply ip-pool vlan1 dhcp client identifier ascii 9c54c2efab00-VLAN0001 # interface Vlan-interface10 ip address 192.168.10.2 255.255.255.0 # interface Vlan-interface20 ip address 192.168.20.1 255.255.254.0 dhcp server apply ip-pool vlan20 # interface Vlan-interface99 ip address 192.168.99.1 255.255.255.0 dhcp server apply ip-pool vlan99 # interface Vlan-interface100 ip address 192.168.100.1 255.255.255.0 dhcp server apply ip-pool vlan100 # interface GigabitEthernet1/0/1 port link-mode bridge # interface GigabitEthernet1/0/2 port link-mode bridge # interface GigabitEthernet1/0/3 port link-mode bridge # interface GigabitEthernet1/0/4 port link-mode bridge # interface GigabitEthernet1/0/5 port link-mode bridge # interface GigabitEthernet1/0/6 port link-mode bridge # interface GigabitEthernet1/0/7 port link-mode bridge # interface GigabitEthernet1/0/8 port link-mode bridge # interface GigabitEthernet1/0/9 port link-mode bridge # interface GigabitEthernet1/0/10 port link-mode bridge # interface GigabitEthernet1/0/11 port link-mode bridge # interface GigabitEthernet1/0/12 port link-mode bridge # interface GigabitEthernet1/0/13 port link-mode bridge # interface GigabitEthernet1/0/14 port link-mode bridge # interface GigabitEthernet1/0/15 port link-mode bridge # interface GigabitEthernet1/0/16 port link-mode bridge # interface GigabitEthernet1/0/17 port link-mode bridge # interface GigabitEthernet1/0/18 port link-mode bridge # interface GigabitEthernet1/0/19 port link-mode bridge # interface GigabitEthernet1/0/20 port link-mode bridge port access vlan 10 # interface GigabitEthernet1/0/21 port link-mode bridge # interface GigabitEthernet1/0/22 port link-mode bridge # interface GigabitEthernet1/0/23 port link-mode bridge # interface GigabitEthernet1/0/24 port link-mode bridge # interface GigabitEthernet1/0/25 port link-mode bridge # interface GigabitEthernet1/0/26 port link-mode bridge # interface GigabitEthernet1/0/27 port link-mode bridge # interface GigabitEthernet1/0/28 port link-mode bridge # interface GigabitEthernet1/0/29 port link-mode bridge # interface GigabitEthernet1/0/30 port link-mode bridge # interface GigabitEthernet1/0/31 port link-mode bridge # interface GigabitEthernet1/0/32 port link-mode bridge # interface GigabitEthernet1/0/33 port link-mode bridge # interface GigabitEthernet1/0/34 port link-mode bridge # interface GigabitEthernet1/0/35 port link-mode bridge # interface GigabitEthernet1/0/36 port link-mode bridge # interface GigabitEthernet1/0/37 port link-mode bridge # interface GigabitEthernet1/0/38 port link-mode bridge # interface GigabitEthernet1/0/39 port link-mode bridge # interface GigabitEthernet1/0/40 port link-mode bridge # interface GigabitEthernet1/0/41 port link-mode bridge # interface GigabitEthernet1/0/42 port link-mode bridge # interface GigabitEthernet1/0/43 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 99 to 100 # interface GigabitEthernet1/0/44 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 99 to 100 # interface GigabitEthernet1/0/45 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 99 to 100 # interface GigabitEthernet1/0/46 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 99 to 100 # interface GigabitEthernet1/0/47 port link-mode bridge description to_firewall port access vlan 10 # interface GigabitEthernet1/0/48 port link-mode bridge description to_access_1 port link-type trunk port trunk permit vlan 1 10 20 99 to 100 # interface M-GigabitEthernet0/0/0 # interface Ten-GigabitEthernet1/0/49 port link-mode bridge # interface Ten-GigabitEthernet1/0/50 port link-mode bridge # interface Ten-GigabitEthernet1/0/51 port link-mode bridge # interface Ten-GigabitEthernet1/0/52 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 99 to 100 speed 1000 # scheduler logfile size 16 # line class aux user-role network-admin # line class usb user-role network-admin # line class vty user-role network-operator # line aux 0 authentication-mode scheme user-role network-admin # line vty 0 4 authentication-mode scheme user-role network-operator # line vty 5 63 user-role network-operator # ip route-static 0.0.0.0 0 192.168.10.1 ip route-static 192.168.0.0 24 192.168.10.200 # undo info-center enable info-center logbuffer size 1024 # ntp-service enable ntp-service unicast-server 192.168.10.1 # acl advanced 3980 rule 0 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 5 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 20 deny ip source 192.168.99.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 25 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 # acl advanced 3990 rule 0 deny ip source 192.168.20.0 0.0.0.255 destination 192.168.1.0 0.0.0.255 rule 5 deny ip source 192.168.20.0 0.0.0.255 destination 192.168.10.0 0.0.0.255 rule 10 deny ip source 192.168.20.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 15 deny ip source 192.168.20.0 0.0.0.255 destination 192.168.99.0 0.0.0.255 rule 20 deny ip source 192.168.20.0 0.0.0.255 destination 192.168.100.0 0.0.0.255 # radius scheme system user-name-format without-domain # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$eFId4W0/fTsCEeWo$vJO9b8eEm2SjMS68KxpLY36GExIHhFjI5lesVgPnt3t1Bnje6WzRRHGtxRRqXOSJgqL9+dTsXm7XisY96kEyrw== service-type telnet http https ssh terminal authorization-attribute user-role network-admin # ip http enable ip https enable # return <core> <core> <core> <core> <core> <core>
(0)
最佳答案
您好,参考
如图1-2所示,Host A与Host B分别与Device B的端口Ethernet1/0/2、Ethernet1/0/1相连;Host C与Device A的端口Ethernet1/0/2相连。Device B接到Device A的端口Ethernet1/0/1上。各主机均使用静态配置的IP地址。
通过在Device A和Device B上配置IPv4静态绑定表项,可以满足以下各项应用需求:
· Device A的端口Ethernet1/0/2上只允许Host C发送的IP报文通过。
· Device A的端口Ethernet1/0/1上只允许Host A发送的IP报文通过。
· Device B的端口Ethernet1/0/2上只允许Host A发送的IP报文通过。
· Device B的端口Ethernet1/0/1上只允许使用IP地址192.168.0.2/24的主机发送的IP报文通过,即允许Host B更换网卡后仍然可以使用该IP地址与Host A互通。
(1) 配置Device A
# 在端口Ethernet1/0/2上配置IPv4端口绑定功能,绑定源IP地址和MAC地址。
<DeviceA> system-view
[DeviceA] interface ethernet 1/0/2
[DeviceA-Ethernet1/0/2] ip verify source ip-address mac-address
# 配置IPv4静态绑定表项,只允许MAC地址为0001-0203-0405、IP地址为192.168.0.3的Host C发送的IP报文通过端口Ethernet1/0/2。
[DeviceA] interface ethernet 1/0/2
[DeviceA-Ethernet1/0/2] ip source binding ip-address 192.168.0.3 mac-address 0001-0203-0405
[DeviceA-Ethernet1/0/2] quit
# 在端口Ethernet1/0/1上配置IPv4端口绑定功能,绑定源IP地址和MAC地址。
[DeviceA] interface ethernet 1/0/1
[DeviceA-Ethernet1/0/1] ip verify source ip-address mac-address
# 配置IPv4静态绑定表项,只允许MAC地址为0001-0203-0406、IP地址为192.168.0.1的Host A发送的IP报文通过端口Ethernet1/0/1。
[DeviceA] interface ethernet 1/0/1
[DeviceA-Ethernet1/0/1] ip source binding ip-address 192.168.0.1 mac-address 0001-0203-0406
[DeviceA-Ethernet1/0/1] quit
# 在端口Ethernet1/0/2上配置IPv4端口绑定功能,绑定源IP地址和MAC地址。
<DeviceB> system-view
[DeviceB] interface ethernet1/0/2
[DeviceB-Ethernet1/0/2] ip verify source ip-address mac-address
# 配置IPv4静态绑定表项,只允许MAC地址为0001-0203-0406、IP地址为192.168.0.1的Host A发送的IP报文通过端口Ethernet1/0/2。
[DeviceB-Ethernet1/0/2] ip source binding ip-address 192.168.0.1 mac-address 0001-0203-0406
[DeviceB-Ethernet1/0/2] quit
# 在Ethernet1/0/1上配置IPv4端口绑定功能,绑定源IP地址。
[DeviceB] interface ethernet 1/0/1
[DeviceB-Ethernet1/0/1] ip verify source ip-address
# 配置IPv4静态绑定表项,只允许IP地址为192.168.0.2的主机发送的IP报文通过端口Ethernet1/0/1。
[DeviceB-Ethernet1/0/1] ip source binding ip-address 192.168.0.2
[DeviceB-Ethernet1/0/1] quit
# 在Device A上显示IPv4静态绑定表项配置成功。
[DeviceA] display ip source binding static
Total entries found: 2
MAC Address IP Address VLAN Interface Type
0001-0203-0405 192.168.0.3 N/A Eth1/0/2 Static
0001-0203-0406 192.168.0.1 N/A Eth1/0/1 Static
# 在Device B上显示IPv4静态绑定表项配置成功。
[DeviceB] display ip source binding static
Total entries found: 2
MAC Address IP Address VLAN Interface Type
0001-0203-0406 192.168.0.1 N/A Eth1/0/2 Static
N/A 192.168.0.2 N/A Eth1/0/1 Static
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论