#
ip access-list acl_in
45 deny udp any any eq netbios-ss
70 deny udp any any eq tftp
120 deny udp any any eq netbios-dgm
150 deny udp any any eq netbios-ns
#
policy-map type control-plane copp-system-policy-customized
class copp-system-class-excp-ttl
police cir 128 kbps bc 6400000 bytes
#
spanning-tree mode mst
spanning-tree mst 1 priority 4096
#
interface Vlan2
description uw-606
no shutdown
ip access-group acl_in in
ip address 10.68.2.1/24
ipv6 address 2001:250:6405:8002::1/64
#
no spanning-tree vlan 1-800,811-812
spanning-tree vlan 1-105 priority 8192
spanning-tree mst configuration# name zucc
instance 1 vlan 32,104
route-map connect_route permit 10
match ip address connect_r
route-map ipv6_connect_route permit 10
match ipv6 address ipv6_connect_r
vrf context management
#
interface Vlan811
description connect_n7k_core_a
no shutdown
ip address 10.69.255.42/30
ipv6 link-local fe80::10:69:255:42
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 3 5939115581b7e49a
ip router ospf 100 area 0.0.2.93
ipv6 router ospfv3 1 area 0.0.2.93
#
interface port-channel101
description connect_n7k_b
no lacp suspend-individual
switchport access vlan 812
speed 10000
#
router ospf 100
router-id 10.69.254.76
redistribute direct route-map connect_route
log-adjacency-changes
auto-cost reference-bandwidth 10 Gbps
router ospfv3 1
router-id 10.69.254.76
auto-cost reference-bandwidth 10 Gbps
address-family ipv6 unicast
redistribute direct route-map ipv6_connect_route
#
(0)
最佳答案
大概配置如下,有部分配置未翻译,建议寻求专业人士翻译,此配置翻译仅供参考,:
思科N5k配置:
ip access-list acl_in
45 deny udp any any eq netbios-ss
70 deny udp any any eq tftp
120 deny udp any any eq netbios-dgm
150 deny udp any any eq netbios-ns
#
对应H3C配置:
acl adv n acl_in
rule 45 deny udp source-port eq netbios-ssn destination-port eq netbios-ssn
rule 70 deny udp source-port eq tftp destination-port eq tftp
rule 120 deny udp source-port eq netbios-dgm destination-port eq netbios-dgm
rule 150 deny udp source-port eq netbios-ns destination-port eq netbios-ns
思科N5k 限速配置:
policy-map type control-plane copp-system-policy-customized
class copp-system-class-excp-ttl
police cir 128 kbps bc 6400000 bytes
#
对应H3C配置:
思科N5k stp配置:
spanning-tree mode mst
spanning-tree mst 1 priority 4096
no spanning-tree vlan 1-800,811-812
spanning-tree vlan 1-105 priority 8192
spanning-tree mst configuration# name zucc
instance 1 vlan 32,104
对应H3C stp配置:
stp mode mstp
stp instance 1 priority 4096
#
stp region-configuration
region-name zucc
instance 1 vlan 1 to 32 104
active region-configuration
#
stp instance 1 priority 4096
undo stp vlan 1 to 800 811 to 812 enable
stp vlan 1 to 105 priority 8192
stp global enable
思科N5k 接口配置:
interface Vlan2
description uw-606
no shutdown
ip access-group acl_in in
ip address 10.68.2.1/24
ipv6 address 2001:250:6405:8002::1/64
#
interface Vlan811
description connect_n7k_core_a
no shutdown
ip address 10.69.255.42/30
ipv6 link-local fe80::10:69:255:42
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 3 5939115581b7e49a
ip router ospf 100 area 0.0.2.93
ipv6 router ospfv3 1 area 0.0.2.93
#
对应H3C 接口配置:
#
interface Vlan-interface2
description uw-606
ip address 10.68.2.1 255.255.255.0
packet-filter name acl_in inbound
ipv6 address 2001:250:6405:8002::1/64
#
interface Vlan-interface811
description connect_n7k_core_a
ip address 10.69.255.42 255.255.255.252
ipv6 address auto link-local
ospf authentication-mode md5 3 cipher $c$3$bLxyvH7XMZ8PWambThehHDtd/0B178kiuY6l6qpxcLysNZU=
ospf 100 area 0.0.2.93
ospfv3 1 area 0.0.2.93
#
思科N5k聚合口配置:
#
interface port-channel101
description connect_n7k_b
no lacp suspend-individual
switchport access vlan 812
speed 10000
#
对应H3C聚合口配置:
interface Bridge-Aggregation101
description connect n7k_b
port access vlan 812
#
思科N5k OSPF配置:
router ospf 100
router-id 10.69.254.76
redistribute direct route-map connect_route
log-adjacency-changes
auto-cost reference-bandwidth 10 Gbps
router ospfv3 1
router-id 10.69.254.76
auto-cost reference-bandwidth 10 Gbps
address-family ipv6 unicast
redistribute direct route-map ipv6_connect_route
对应H3C聚合口配置:
#
ospf 100 router-id 10.69.254.76
import-route direct route-policy connect_route
bandwidth-reference 100000
area 0.0.2.93
#
ospfv3 1
router-id 10.69.254.76
import-route direct route-policy ipv6_connect_route
area 0.0.2.93
#
H3C策略路由配置
#
acl advanced name connect_r
#
acl ipv6 advanced name ipv6_connect_r
#
policy-based-route connect_route permit node 10
if-match acl name connect_r
#
policy-based-route connect_roue permit node 10
if-match acl name connect_r
#
policy-based-route ipv6_connect_route permit node 10
if-match acl name ipv6_connect_r
#
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论