H3C S5560三层交换机VLAN互访问题

sysname H3C # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # dhcp enable dhcp server forbidden-ip 192.168.10.1 dhcp server forbidden-ip 192.168.10.110 192.168.10.120 dhcp server forbidden-ip 192.168.20.1 # dhcp snooping enable # lldp global enable # port-isolate group 1 # password-recovery enable # vlan 1 # vlan 10 # vlan 20 # vlan 50 # traffic classifier c1 operator and if-match acl 3003 # traffic classifier c20 operator and if-match acl 3003 # traffic behavior b1 filter permit # traffic behavior b20 filter permit # qos policy P20 # qos policy p1 classifier c1 behavior b1 # qos policy p20 classifier c20 behavior b20 # stp global enable # dhcp server ip-pool 1 gateway-list 192.168.10.1 network 192.168.10.0 mask 255.255.255.0 dns-list 202.96.104.17 114.114.114.114 expired day 0 hour 12 # dhcp server ip-pool vlan20 gateway-list 192.168.20.1 network 192.168.20.0 mask 255.255.255.0 dns-list 202.96.104.17 223.5.5.5 # interface Bridge-Aggregation1 # interface NULL0 # interface Vlan-interface1 ip address 192.168.1.2 255.255.255.0 packet-filter 3003 inbound packet-filter 2000 inbound packet-filter 3003 outbound packet-filter 2000 outbound # interface Vlan-interface10 ip address 192.168.10.1 255.255.255.0 # interface Vlan-interface20 ip address 192.168.20.1 255.255.255.0 # interface Vlan-interface50 ip address 192.168.50.1 255.255.255.252 # interface GigabitEthernet1/0/1 dhcp snooping trust # interface GigabitEthernet1/0/2 dhcp snooping trust # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 qos apply policy p1 inbound qos apply policy p1 outbound loopback-detection enable vlan 1 loopback-detection action shutdown # interface GigabitEthernet1/0/5 loopback-detection enable vlan 1 loopback-detection action shutdown # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEthernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 shutdown # interface GigabitEthernet1/0/13 # interface GigabitEthernet1/0/14 # interface GigabitEthernet1/0/15 port link-aggregation group 1 # interface GigabitEthernet1/0/16 port link-aggregation group 1 # interface GigabitEthernet1/0/17 port access vlan 10 packet-filter 3001 inbound loopback-detection enable vlan 10 loopback-detection action shutdown # interface GigabitEthernet1/0/18 port access vlan 10 shutdown packet-filter 3001 inbound # interface GigabitEthernet1/0/19 shutdown # interface GigabitEthernet1/0/20 shutdown # interface GigabitEthernet1/0/21 port access vlan 20 # interface GigabitEthernet1/0/22 port access vlan 10 shutdown # interface GigabitEthernet1/0/23 port access vlan 50 packet-filter 3002 inbound # interface GigabitEthernet1/0/24 # interface Ten-GigabitEthernet1/0/25 # interface Ten-GigabitEthernet1/0/26 # interface Ten-GigabitEthernet1/0/27 # interface Ten-GigabitEthernet1/0/28 port link-type trunk port trunk permit vlan all # scheduler logfile size 16 # line class aux user-role network-admin # line class vty user-role network-operator # line aux 0 authentication-mode password user-role network-admin set authentication password hash $h$6$3k1iachqeEEPoQx6$IvE83K+tKJ0igAt3Eg9NS8eJGmviOOo3gbwbBmmK/WjHNcr5oeu7AOfwvoTCrDMNDlNcR1yuIOPqXC+Wf058xQ== # line vty 0 4 authentication-mode scheme user-role network-operator # line vty 5 63 user-role network-operator # ip route-static 0.0.0.0 0 192.168.1.1 # snmp-agent snmp-agent local-engineid 800063A280AC74099D224C00000001 snmp-agent community read public snmp-agent sys-info version all # acl number 2000 rule 0 permit source 192.168.20.0 0 # acl number 3001 rule 1 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.1.87 0 rule 2 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.1.88 0 rule 3 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.1.85 0 rule 4 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.1.89 0 rule 5 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.1.182 0 rule 6 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.1.183 0 rule 7 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.1.252 0 # acl number 3003 rule 5 permit ip source 192.168.20.0 0.0.0.255 destination 192.168.1.0 0.0.0.255 # radius scheme system user-name-format without-domain # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$rox9NEXD7GS0NuNs$PWQYBLFyxGN3KabSrFSCQPwC6/+Sk0UbFhxmYy5jCpUTpOnPaBZ0wwM0b8E+P5EXrRmPibL3NuiFvxIakhc2hA== service-type telnet authorization-attribute user-role level-15 authorization-attribute user-role netword-admin authorization-attribute user-role network-operator # local-user ftpuser class manage password hash $h$6$r2kOO6oY9H7LRsjf$S1JRRK4eb+dtefDMf+CwJE3Wcnwp0N/3H9QL6e266J8ImkauccOWFLVxbps6gTjolV/ZW5cygy40PLS+46bZpA== service-type ftp service-type https authorization-attribute user-role level-15 authorization-attribute user-role network-operator