配置如下:
#
version 5.20, Release 1513P62
#
sysname S5120S-52P-EI-14
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
telnet server enable
#
password-recovery enable
#
vlan 1
#
vlan 9 to 21
#
vlan 100
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool v10
network 192.168.1.0 mask 255.255.255.0
gateway-list 192.168.1.1
dns-list 61.139.2.69
expired day 3
#
dhcp server ip-pool v11
network 192.168.2.0 mask 255.255.255.0
gateway-list 192.168.2.1
dns-list 61.139.2.69
expired day 3
#
dhcp server ip-pool v12
network 192.168.3.0 mask 255.255.255.0
gateway-list 192.168.3.1
dns-list 61.139.2.69
expired day 3
#
dhcp server ip-pool v13
network 192.168.4.0 mask 255.255.255.0
gateway-list 192.168.4.1
dns-list 61.139.2.69
expired day 3
#
dhcp server ip-pool v14
network 192.168.5.0 mask 255.255.255.0
gateway-list 192.168.5.1
dns-list 61.139.2.69
expired day 3
#
user-group system
#
local-user admin
password cipher $c$3$tImNlC/Jovg5GzO8YnEHn6A7uXtcE 44YECr
authorization-attribute level 3
service-type telnet
service-type web
local-user webadmin
password cipher $c$3$ZEUoVu MNIh81sM8Ijy I5LemLcwzbh5zUSC9Q==
authorization-attribute level 3
service-type telnet
service-type web
#
stp enable
#
interface NULL0
#
interface Vlan-interface1
ip address dhcp-alloc client-identifier mac Vlan-interface1
#
interface Vlan-interface10
ip address 192.168.1.1 255.255.255.0
#
interface Vlan-interface11
ip address 192.168.2.1 255.255.255.0
#
interface Vlan-interface12
ip address 192.168.3.1 255.255.255.0
#
interface Vlan-interface13
ip address 192.168.4.1 255.255.255.0
#
interface Vlan-interface14
ip address 192.168.5.1 255.255.255.0
#
interface Vlan-interface15
ip address 192.168.6.2 255.255.255.0
#
interface Vlan-interface100
description guanli
ip address 192.168.100.1 255.255.255.0
#
interface GigabitEthernet1/0/1
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/2
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/3
port access vlan 10
stp disable
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/4
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/5
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/6
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/7
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/8
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/9
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/10
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/11
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/12
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/13
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/14
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/15
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/16
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/17
port access vlan 19
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/18
port access vlan 16
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/19
port access vlan 16
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/20
port access vlan 16
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/21
port access vlan 17
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/22
port access vlan 17
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/23
port access vlan 17
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/24
port access vlan 17
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/25
port access vlan 17
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/26
port access vlan 17
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/27
port access vlan 11
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/28
port access vlan 11
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/29
port access vlan 18
#
interface GigabitEthernet1/0/30
port access vlan 16
#
interface GigabitEthernet1/0/31
port access vlan 21
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/32
port access vlan 21
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/33
port access vlan 14
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/34
port access vlan 10
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/35
port access vlan 19
#
interface GigabitEthernet1/0/36
port access vlan 21
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/37
port access vlan 19
#
interface GigabitEthernet1/0/38
port access vlan 19
#
interface GigabitEthernet1/0/39
port access vlan 19
#
interface GigabitEthernet1/0/40
port access vlan 18
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/41
port access vlan 18
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/42
port access vlan 19
#
interface GigabitEthernet1/0/43
port access vlan 18
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/44
port access vlan 18
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/45
port access vlan 15
#
interface GigabitEthernet1/0/46
port access vlan 18
dhcp-snooping information enable
dhcp-snooping check mac-address
#
interface GigabitEthernet1/0/47
description TO U200-M
port access vlan 15
#
interface GigabitEthernet1/0/48
description TO s5500-28F
port link-type trunk
port trunk permit vlan all
dhcp-snooping trust
#
interface GigabitEthernet1/0/49
#
interface GigabitEthernet1/0/50
#
interface GigabitEthernet1/0/51
#
interface GigabitEthernet1/0/52
#
dhcp-snooping
#
ip route-static 0.0.0.0 0.0.0.0 192.168.6.1
#
dhcp server forbidden-ip 192.168.1.1 192.168.1.100
dhcp server forbidden-ip 192.168.2.1 192.168.2.100
dhcp server forbidden-ip 192.168.3.1 192.168.3.100
dhcp server forbidden-ip 192.168.4.1 192.168.4.100
dhcp server forbidden-ip 192.168.5.1 192.168.5.100
dhcp server forbidden-ip 192.168.6.1 192.168.6.100
#
dhcp enable
#
arp anti-attack active-ack enable
arp anti-attack source-mac filter
#
load tr069-configuration
#
user-interface aux 0
user-interface vty 0 15
authentication-mode scheme