H3C MSR3620路由器不为人知的安全防护

具体得看下设备配置

​配置如下：

#
version 7.1.064, Release 0821P18
#
sysname aratek
#
clock timezone Beijing add 08:00:00
clock protocol ntp
#
wlan global-configuration
#
telnet server enable
telnet server port 2323
telnet server ipv6 port 2323
#
qos carl 1 source-ip-address object-group 8段 per-address
qos carl 2 destination-ip-address object-group 8段 per-address
#
security-zone intra-zone default permit
#
ip pool l2tp1 192.168.50.100 192.168.50.200
#
dialer-group 3 rule ip permit
dialer-group 186 rule ip permit
dialer-group 187 rule ip permit
#
ip load-sharing mode per-flow src-ip global
#
nat static inbound 14.116.138.243 192.168.3.173
nat static inbound 14.116.138.244 192.168.1.149
nat static inbound 14.116.138.245 192.168.1.190
nat static outbound 192.168.1.149 14.116.138.244
nat static outbound 192.168.1.190 14.116.138.245
nat static outbound 192.168.3.173 14.116.138.243
#
dhcp enable
#
dns proxy enable
dns server 223.5.5.5
#
system-working-mode standard
password-recovery enable
#
vlan 1
#
vlan 2 to 3
#
vlan 5 to 9
#
vlan 17
#
vlan 20
#
vlan 25 to 26
#
object-group ip address 1.0/24
0 network range 192.168.1.1 192.168.1.254
#
object-group ip address 17网段
0 network range 192.168.17.2 192.168.17.255
#
object-group ip address 192.168.1.10-200
#
object-group ip address 192.168.1.164
0 network host address 192.168.1.164
#
object-group ip address 192.168.1.17
0 network host address 192.168.1.17
#
object-group ip address 192.168.1.20
0 network host address 192.168.1.20
#
object-group ip address 192.168.1.87
0 network host address 192.168.1.87
#
object-group ip address 192.168.1.92
0 network host address 192.168.1.92
#
object-group ip address 192.168.1.94
0 network host address 192.168.1.94
#
object-group ip address 192.168.17.13
0 network host address 192.168.17.13
#
object-group ip address 192.168.17.72
0 network host address 192.168.17.72
#
object-group ip address 192.168.3.64
0 network host address 192.168.3.64
#
object-group ip address 3.0/24
0 network range 192.168.3.1 192.168.3.255
#
object-group ip address 6段
0 network range 192.168.6.2 192.168.6.254
#
object-group ip address 7.0/24-8.0/24
0 network range 192.168.7.1 192.168.8.255
#
object-group ip address 8段
0 network range 192.168.8.2 192.168.8.254
#
object-group ip address 9网段
0 network range 192.168.9.2 192.168.9.254
#
object-group ip address all_user
description 所有用户
1 network range 192.168.1.2 192.168.1.254
1 network exclude 192.168.1.36
1 network exclude 192.168.1.37
1 network exclude 192.168.1.40
1 network exclude 192.168.1.42
1 network exclude 192.168.1.133
1 network exclude 192.168.1.141
1 network exclude 192.168.1.185
1 network exclude 192.168.1.190
1 network exclude 192.168.1.218
2 network range 192.168.2.2 192.168.2.254
2 network exclude 192.168.2.100
3 network range 192.168.3.2 192.168.3.254
3 network exclude 192.168.3.76
3 network exclude 192.168.3.77
3 network exclude 192.168.3.217
3 network exclude 192.168.3.240
5 network range 192.168.5.2 192.168.5.254
6 network range 192.168.6.2 192.168.6.254
7 network range 192.168.7.2 192.168.7.254
8 network range 192.168.8.2 192.168.8.254
9 network range 192.168.9.2 192.168.9.254
17 network range 192.168.17.2 192.168.17.254
17 network exclude 192.168.17.101
20 network range 192.168.20.2 192.168.20.254
25 network range 192.168.25.2 192.168.25.254
26 network range 192.168.26.2 192.168.26.254

#
traffic classifier 1 operator and
if-match acl 3010
#
traffic behavior 1
#
dhcp server ip-pool 1
#
dhcp server ip-pool all
#
dhcp server ip-pool interface-vlan17
#
dhcp server ip-pool lan
#
dhcp server ip-pool lan1
gateway-list 192.168.1.1
network 192.168.1.0 mask 255.255.255.0
address range 192.168.1.16 192.168.1.250
dns-list 202.96.134.133 202.96.128.86
forbidden-ip-range 192.168.1.1 192.168.1.1
static-bind ip-address 192.168.1.2 mask 255.255.255.0 hardware-address ecd6-8a7b-3415 description 行为管理
static-bind ip-address 192.168.1.6 mask 255.255.255.0 hardware-address 000c-29f1-6ca8 description 王志刚虚拟机
static-bind ip-address 192.168.1.7 mask 255.255.255.0 hardware-address 80e4-5567-7b80 description AC控制器
static-bind ip-address 192.168.1.8 mask 255.255.255.0 hardware-address 001e-49d9-31c0
static-bind ip-address 192.168.1.9 mask 255.255.255.0 hardware-address f41d-6b56-1130
static-bind ip-address 192.168.1.15 mask 255.255.255.0 hardware-address 0200-4c69-a41d description 防火墙设备
static-bind ip-address 192.168.1.19 mask 255.255.255.0 hardware-address 6c4b-90cd-e673 description 唐爱华
static-bind ip-address 192.168.1.22 mask 255.255.255.0 hardware-address 84c2-e4a5-79de description 电话交换机
static-bind ip-address 192.168.1.24 mask 255.255.255.0 hardware-address 94c6-9120-48b1 description 张俊宇台式
static-bind ip-address 192.168.1.27 mask 255.255.255.0 hardware-address 94c6-918b-d510 description 张细燕台式
static-bind ip-address 192.168.1.29 mask 255.255.255.0 hardware-address 507b-9d9e-723f description 王文清台式
static-bind ip-address 192.168.1.30 mask 255.255.255.0 hardware-address 8061-5f04-50ae description 严小波一楼机房引擎开发服务
static-bind ip-address 192.168.1.32 mask 255.255.255.0 hardware-address 14dd-a94e-5644 description 王玉坚新三码系统
static-bind ip-address 192.168.1.33 mask 255.255.255.0 hardware-address 3cec-efb6-a55f description 闫永强
static-bind ip-address 192.168.1.35 mask 255.255.255.0 hardware-address 6018-9520-0ce6 description 蔡燕霞笔记本有线
static-bind ip-address 192.168.1.36 mask 255.255.255.0 hardware-address 14dd-a94f-0c14 description 禅道服务器
static-bind ip-address 192.168.1.37 mask 255.255.255.0 hardware-address 000c-296c-879c description 甄玉龙
static-bind ip-address 192.168.1.40 mask 255.255.255.0 hardware-address 14dd-a94f-0d6c description MANTIS
static-bind ip-address 192.168.1.41 mask 255.255.255.0 hardware-address 00be-43f4-31ea description 朱秀平
static-bind ip-address 192.168.1.43 mask 255.255.255.0 hardware-address a4ae-1227-08c1 description 欧阳TrustIVS演示服务器
static-bind ip-address 192.168.1.47 mask 255.255.255.0 hardware-address 0023-24a0-227b description 李青
static-bind ip-address 192.168.1.49 mask 255.255.255.0 hardware-address 2c16-dba8-d528 description 林洽平
static-bind ip-address 192.168.1.50 mask 255.255.255.0 hardware-address 7c10-c941-471d description 胡啟奎
static-bind ip-address 192.168.1.52 mask 255.255.255.0 hardware-address 00be-43f5-46c1 description 刘笑倩
static-bind ip-address 192.168.1.53 mask 255.255.255.0 hardware-address d08e-7908-9047 description 麦市斌
static-bind ip-address 192.168.1.60 mask 255.255.255.0 hardware-address 6018-9519-a838 description 陈锦永
static-bind ip-address 192.168.1.61 mask 255.255.255.0 hardware-address e454-e8c5-baa8 description 陈君炎
static-bind ip-address 192.168.1.64 mask 255.255.255.0 hardware-address 7427-ea58-bd88 description 财务发工资的电脑
static-bind ip-address 192.168.1.67 mask 255.255.255.0 hardware-address 00be-43f5-479b description 朱梦婷
static-bind ip-address 192.168.1.68 mask 255.255.255.0 hardware-address 0023-24d4-aded description 阳艾
static-bind ip-address 192.168.1.70 mask 255.255.255.0 hardware-address b405-5d14-ab5c description 朱建GUP服务器
static-bind ip-address 192.168.1.71 mask 255.255.255.0 hardware-address e0be-0325-698b description 江伟彬
static-bind ip-address 192.168.1.72 mask 255.255.255.0 hardware-address 94c6-91d0-28b1 description 欧阳VSS服务器
static-bind ip-address 192.168.1.73 mask 255.255.255.0 hardware-address ecd6-8ad8-8094 description 汪海军盒子
static-bind ip-address 192.168.1.77 mask 255.255.255.0 hardware-address 1c69-7a5f-b1dc description 谭云丹
static-bind ip-address 192.168.1.86 mask 255.255.255.0 hardware-address 68f7-28f3-e518 description 余亮SVN版本控制服务器
static-bind ip-address 192.168.1.87 mask 255.255.255.0 hardware-address 18c0-4de3-a438 description 卢珊珊台式市场营销部
static-bind ip-address 192.168.1.88 mask 255.255.255.0 hardware-address 6c92-bff4-980a description 严小波GPU服务器一楼机房
static-bind ip-address 192.168.1.89 mask 255.255.255.0 hardware-address 6c92-bff4-987f description 朱建GUP服务器
static-bind ip-address 192.168.1.90 mask 255.255.255.0 hardware-address 14dd-a94f-0ced description 朱建ssh对外服务器
static-bind ip-address 192.168.1.94 mask 255.255.255.0 hardware-address 7c10-c947-82a0 description 钟佳鑫台式市场营销部
static-bind ip-address 192.168.1.102 mask 255.255.255.0 hardware-address a4ae-1227-026b description 2杨凌台式应用创新研发部
static-bind ip-address 192.168.1.103 mask 255.255.255.0 hardware-address f8bc-1283-63fd description 财务服务器备用
static-bind ip-address 192.168.1.106 mask 255.255.255.0 hardware-address b083-fea2-312a description 6汪海军台式PC有线
static-bind ip-address 192.168.1.107 mask 255.255.255.0 hardware-address 6c92-bff4-9809 description 7小波浪潮（原1-51）
static-bind ip-address 192.168.1.112 mask 255.255.255.0 hardware-address 00be-43f5-4428 description 王于恺
static-bind ip-address 192.168.1.115 mask 255.255.255.0 hardware-address 6c24-086b-c285 description 李青
static-bind ip-address 192.168.1.116 mask 255.255.255.0 hardware-address 6018-9519-19e5 description 郑健晓
static-bind ip-address 192.168.1.118 mask 255.255.255.0 hardware-address 88a4-c277-e924 description 王文清笔记本有线
static-bind ip-address 192.168.1.120 mask 255.255.255.0 hardware-address c0b7-1306-e9de description 1楼小鱼会议主机有线
static-bind ip-address 192.168.1.121 mask 255.255.255.0 hardware-address 8030-4985-610d description 汪海军
static-bind ip-address 192.168.1.124 mask 255.255.255.0 hardware-address 3c3c-ef95-529d description 严小波
static-bind ip-address 192.168.1.126 mask 255.255.255.0 hardware-address b07b-2529-311a description 陈新亮
static-bind ip-address 192.168.1.128 mask 255.255.255.0 hardware-address 00ff-446e-d71c description 高春生
static-bind ip-address 192.168.1.129 mask 255.255.255.0 hardware-address 782b-cb92-d4cf description 欧阳同文
static-bind ip-address 192.168.1.133 mask 255.255.255.0 hardware-address 000c-2941-c4a1 description trustface
static-bind ip-address 192.168.1.139 mask 255.255.255.0 hardware-address a4ae-1113-5730 description 石达
static-bind ip-address 192.168.1.142 mask 255.255.255.0 hardware-address 00e0-4c7f-a19c description 李玉霞笔记本有线
static-bind ip-address 192.168.1.143 mask 255.255.255.0 hardware-address 6c92-bff4-9800 description 王于恺3楼服务器
static-bind ip-address 192.168.1.150 mask 255.255.255.0 hardware-address a4ae-12f7-8f89 description 甄玉龙
static-bind ip-address 192.168.1.151 mask 255.255.255.0 hardware-address 94c6-9120-45e4 description 欧阳同文
static-bind ip-address 192.168.1.155 mask 255.255.255.0 hardware-address 00d8-6122-2528 description SVN备份服务器
static-bind ip-address 192.168.1.159 mask 255.255.255.0 hardware-address 38f3-abe4-2759 description 国际部张积楷
static-bind ip-address 192.168.1.162 mask 255.255.255.0 hardware-address 6018-9550-4f03 description 张细燕笔记本有线
static-bind ip-address 192.168.1.163 mask 255.255.255.0 hardware-address 6018-9515-7a1d description 林燕钗笔记本有线
static-bind ip-address 192.168.1.165 mask 255.255.255.0 hardware-address 6018-9515-7a1d description 林燕钗笔记本有线
static-bind ip-address 192.168.1.170 mask 255.255.255.0 hardware-address 6c4b-90ce-d475 description 0唐昭强台式国际销售部
static-bind ip-address 192.168.1.176 mask 255.255.255.0 hardware-address 1c69-7ab7-4c76 description 张锡件
static-bind ip-address 192.168.1.178 mask 255.255.255.0 hardware-address 5838-790c-9ee3 description 1-printer
static-bind ip-address 192.168.1.181 mask 255.255.255.0 hardware-address 6018-9523-3619 description 1郑健晓笔记本有线
static-bind ip-address 192.168.1.184 mask 255.255.255.0 hardware-address a4ae-12f6-8f9c description 高春生可信服务器
static-bind ip-address 192.168.1.185 mask 255.255.255.0 hardware-address 7020-8402-a03f description 欧阳1楼服务器
static-bind ip-address 192.168.1.188 mask 255.255.255.0 hardware-address 88a4-c277-e924 description 王文清笔记本有线
static-bind ip-address 192.168.1.190 mask 255.255.255.0 hardware-address 9009-d004-ebdd description 0群晖文件服务器LAN1口
static-bind ip-address 192.168.1.193 mask 255.255.255.0 hardware-address 6c4b-90cc-530a description 高春生
static-bind ip-address 192.168.1.194 mask 255.255.255.0 hardware-address 9009-d00c-270b description 4备用文件服务器一号口
static-bind ip-address 192.168.1.197 mask 255.255.255.0 hardware-address 0cdd-246d-abeb description 7ceo
static-bind ip-address 192.168.1.211 mask 255.255.255.0 hardware-address 4ced-fb6c-7fd9 description 1于文志台式-市场营销中心
static-bind ip-address 192.168.1.215 mask 255.255.255.0 hardware-address 10e7-c664-20a3 description 商务打印机
static-bind ip-address 192.168.1.217 mask 255.255.255.0 hardware-address 0800-2725-5195 description 高春生虚拟机
static-bind ip-address 192.168.1.222 mask 255.255.255.0 hardware-address 6018-9521-2eec description 2肖琦笔记本有线
static-bind ip-address 192.168.1.224 mask 255.255.255.0 hardware-address 2c16-dbad-98e6 description 陈君炎笔记本有线
static-bind ip-address 192.168.1.227 mask 255.255.255.0 hardware-address 7020-8402-9f56 description 李青
static-bind ip-address 192.168.1.234 mask 255.255.255.0 hardware-address 5046-5d75-d2a8 description 4CRM服务器
static-bind ip-address 192.168.1.238 mask 255.255.255.0 hardware-address 80ea-07bf-45e2 description 86f-ac-WIFI控制器
static-bind ip-address 192.168.1.242 mask 255.255.255.0 hardware-address e040-0749-f262 description 2qiantai路由器
static-bind ip-address 192.168.1.245 mask 255.255.255.0 hardware-address b405-5d14-ab44 description 5严小波GPU服务器一楼机房
static-bind ip-address 192.168.1.246 mask 255.255.255.0 hardware-address 7071-bce3-afdc description 6电话快易呼
static-bind ip-address 192.168.1.247 mask 255.255.255.0 hardware-address 8c16-45f4-7064 description 7一楼会议室公共笔记本
#
dhcp server ip-pool lan7
#
dhcp server ip-pool lan17
#
dhcp server ip-pool llan1
#
dhcp server ip-pool vkan-interface17
#
dhcp server ip-pool vlan-interfac7
#
dhcp server ip-pool vlan-interfac37
#
dhcp server ip-pool vlan-interfacce17
#
dhcp server ip-pool vlan-interfacd7
#
dhcp server ip-pool vlan-interface
#
dhcp server ip-pool vlan1
#
dhcp server ip-pool vlan3
#
dhcp server ip-pool vlan17
#
dhcp server ip-pool vlan-interface1
#
dhcp server ip-pool vlan-interface2
gateway-list 192.168.2.1
network 192.168.2.0 mask 255.255.255.0
address range 192.168.2.50 192.168.2.200
dns-list 202.96.128.86 221.5.88.88
static-bind ip-address 192.168.2.2 mask 255.255.255.0 hardware-address 0026-73c0-f68b description 二楼公共打印机
static-bind ip-address 192.168.2.100 mask 255.255.255.0 hardware-address 5046-5d76-1ad0 description 0域服务器
#
dhcp server ip-pool vlan-interface3
gateway-list 192.168.3.1
network 192.168.3.0 mask 255.255.255.0
address range 192.168.3.10 192.168.3.240
dns-list 223.5.5.5 202.96.134.133
static-bind ip-address 192.168.3.4 mask 255.255.255.0 hardware-address 0025-90a6-5766 description 严小波
static-bind ip-address 192.168.3.12 mask 255.255.255.0 hardware-address 0862-66a3-c510 description 暖暖校园服务器物理机
static-bind ip-address 192.168.3.13 mask 255.255.255.0 hardware-address 000c-298b-b06c description 严小波
static-bind ip-address 192.168.3.14 mask 255.255.255.0 hardware-address 782b-cb92-6728 description 算法SVN
static-bind ip-address 192.168.3.15 mask 255.255.255.0 hardware-address a4ae-1113-5d49 description 欧阳打包服务器
static-bind ip-address 192.168.3.17 mask 255.255.255.0 hardware-address 0800-273c-6af8 description 张俊宇
static-bind ip-address 192.168.3.19 mask 255.255.255.0 hardware-address 000c-2913-bbb5 description 严小波
static-bind ip-address 192.168.3.20 mask 255.255.255.0 hardware-address e86a-6405-8c9a description 李健春
static-bind ip-address 192.168.3.22 mask 255.255.255.0 hardware-address 6c4b-90b1-5438 description 李秋凤
static-bind ip-address 192.168.3.24 mask 255.255.255.0 hardware-address 0025-9058-b71a description 严小波
static-bind ip-address 192.168.3.27 mask 255.255.255.0 hardware-address 000c-2923-f9bd description 严小波
static-bind ip-address 192.168.3.28 mask 255.255.255.0 hardware-address 7020-8402-9e26 description 吴海容(办公）
static-bind ip-address 192.168.3.29 mask 255.255.255.0 hardware-address f46b-8c5a-b515 description 蓝苑苑
static-bind ip-address 192.168.3.30 mask 255.255.255.0 hardware-address 00d8-6167-2f51 description 谢敏
static-bind ip-address 192.168.3.31 mask 255.255.255.0 hardware-address 8c16-452a-f9ec description 周兰芝
static-bind ip-address 192.168.3.33 mask 255.255.255.0 hardware-address 14dd-a94f-0ff6 description 福建服务器
static-bind ip-address 192.168.3.35 mask 255.255.255.0 hardware-address 000c-29ac-8d46 description 严小波
static-bind ip-address 192.168.3.36 mask 255.255.255.0 hardware-address 000c-2991-2f4b description 严小波
static-bind ip-address 192.168.3.37 mask 255.255.255.0 hardware-address 002b-67c1-df98 description 吴海容财务部笔记本有线
static-bind ip-address 192.168.3.38 mask 255.255.255.0 hardware-address 14dd-a94e-56c0 description 福建服务器
static-bind ip-address 192.168.3.39 mask 255.255.255.0 hardware-address 000c-2941-22ef description 陈敏虚拟机
static-bind ip-address 192.168.3.40 mask 255.255.255.0 hardware-address 14dd-a94f-0f7e description 高春生BSP-2楼机房
static-bind ip-address 192.168.3.41 mask 255.255.255.0 hardware-address 74d4-35c3-b5fa description 王于恺二楼机房编译服务器
static-bind ip-address 192.168.3.43 mask 255.255.255.0 hardware-address 000c-29ee-4925 description 严小波
static-bind ip-address 192.168.3.45 mask 255.255.255.0 hardware-address 14dd-a94e-5582 description 福建服务器
static-bind ip-address 192.168.3.46 mask 255.255.255.0 hardware-address 0025-905c-7130 description 王于恺二楼机房编译服务器
static-bind ip-address 192.168.3.47 mask 255.255.255.0 hardware-address a4ae-122b-5a0c description 徐昊天
static-bind ip-address 192.168.3.49 mask 255.255.255.0 hardware-address 14dd-a94e-5446 description 高春生开发数据库2楼机房
static-bind ip-address 192.168.3.50 mask 255.255.255.0 hardware-address ac1f-6bd0-32e9 description 福建服务器
static-bind ip-address 192.168.3.52 mask 255.255.255.0 hardware-address 7c8a-e10d-c0a2 description 黄振娟
static-bind ip-address 192.168.3.53 mask 255.255.255.0 hardware-address 14dd-a94f-0cc4 description 2楼机房招聘公众号服务器
static-bind ip-address 192.168.3.54 mask 255.255.255.0 hardware-address 14dd-a94f-0da3 description 严小波2楼服务器
static-bind ip-address 192.168.3.59 mask 255.255.255.0 hardware-address 8061-5f04-4fb4 description 严小波
static-bind ip-address 192.168.3.64 mask 255.255.255.0 hardware-address 6018-9519-1524 description 廖春红笔记本有线采购部
static-bind ip-address 192.168.3.72 mask 255.255.255.0 hardware-address 5405-db5e-b658 description 俞珽
static-bind ip-address 192.168.3.75 mask 255.255.255.0 hardware-address a4ae-127f-076d description 朱建
static-bind ip-address 192.168.3.77 mask 255.255.255.0 hardware-address 0023-24aa-2886 description 欧阳同文
static-bind ip-address 192.168.3.78 mask 255.255.255.0 hardware-address 14dd-a94e-56f4 description 欧阳研发文件发文
static-bind ip-address 192.168.3.85 mask 255.255.255.0 hardware-address 00d8-6167-2112 description 余加超
static-bind ip-address 192.168.3.87 mask 255.255.255.0 hardware-address 1c69-7ac8-e2f7 description 何军全
static-bind ip-address 192.168.3.88 mask 255.255.255.0 hardware-address 0cc4-7aac-3c82 description 严小波
static-bind ip-address 192.168.3.89 mask 255.255.255.0 hardware-address 000c-29ea-338a description 暖暖校园虚拟机
static-bind ip-address 192.168.3.104 mask 255.255.255.0 hardware-address 14dd-a94e-5a94 description SVN同步服务器
static-bind ip-address 192.168.3.109 mask 255.255.255.0 hardware-address 00d8-6167-2f30 description 林彩萍
static-bind ip-address 192.168.3.111 mask 255.255.255.0 hardware-address 10e7-c664-20a3 description 1财务室打印机
static-bind ip-address 192.168.3.126 mask 255.255.255.0 hardware-address d8cb-8ab7-11cf description 6财务台式查资料备用机原梁欣
static-bind ip-address 192.168.3.133 mask 255.255.255.0 hardware-address 000c-2941-c4a1 description 严小波
static-bind ip-address 192.168.3.137 mask 255.255.255.0 hardware-address 7427-ea57-8ac3 description 林彩萍
static-bind ip-address 192.168.3.172 mask 255.255.255.0 hardware-address 0025-905c-2bd0 description 2王于恺二楼机房编译服务器
static-bind ip-address 192.168.3.173 mask 255.255.255.0 hardware-address 94c6-9179-6933 description ouyangtw
static-bind ip-address 192.168.3.181 mask 255.255.255.0 hardware-address 14dd-a94e-56aa description 1王玉坚图像服务器二楼机房
static-bind ip-address 192.168.3.188 mask 255.255.255.0 hardware-address f46b-8c5a-c0ed description 徐昊天
static-bind ip-address 192.168.3.196 mask 255.255.255.0 hardware-address f46b-8c5a-b755 description 6梁欣台式有线财务部
static-bind ip-address 192.168.3.207 mask 255.255.255.0 hardware-address 94c6-91d0-28c8 description 7创新研发部域名服务器
static-bind ip-address 192.168.3.220 mask 255.255.255.0 hardware-address b083-fea2-3144 description 亿赛通文件服务器
static-bind ip-address 192.168.3.222 mask 255.255.255.0 hardware-address 04d4-c439-19f6 description 2加密验签服务器
static-bind ip-address 192.168.3.226 mask 255.255.255.0 hardware-address b083-fe5a-1090 description 6李文强
static-bind ip-address 192.168.3.239 mask 255.255.255.0 hardware-address 3822-e2fe-60e4 description 9采购部打印机
static-bind ip-address 192.168.3.250 mask 255.255.255.0 hardware-address bc30-5be2-cc65 description 0版本发布服务器
static-bind ip-address 192.168.3.251 mask 255.255.255.0 hardware-address 14dd-a94e-4e80 description SVN服务器
static-bind ip-address 192.168.3.253 mask 255.255.255.0 hardware-address 001e-67ae-9532 description 加密网关服务器
#
dhcp server ip-pool vlan-interface4
#
dhcp server ip-pool vlan-interface5
gateway-list 192.168.5.1
network 192.168.5.0 mask 255.255.255.0
address range 192.168.5.1 192.168.5.254
dns-list 223.5.5.5
forbidden-ip-range 192.168.5.1 192.168.5.1
static-bind ip-address 192.168.5.19 mask 255.255.255.0 hardware-address 0080-4831-0006 description 考勤机
static-bind ip-address 192.168.5.187 mask 255.255.255.0 hardware-address 6c4b-90cc-e592 description 7可信认证
#
dhcp server ip-pool vlan-interface6
gateway-list 192.168.6.1
network 192.168.6.0 mask 255.255.255.0
address range 192.168.6.100 192.168.6.200
dns-list 202.96.134.133 202.96.128.86
#
dhcp server ip-pool vlan-interface7
gateway-list 192.168.7.1
network 192.168.7.0 mask 255.255.255.0
address range 192.168.7.50 192.168.7.250
dns-list 202.96.134.133 202.96.128.86
static-bind ip-address 192.168.7.57 mask 255.255.255.0 hardware-address e02b-e91e-7d32 description 林燕钗笔记本无线
static-bind ip-address 192.168.7.63 mask 255.255.255.0 hardware-address 502f-9b9e-26d1 description 蔡燕霞无线
static-bind ip-address 192.168.7.69 mask 255.255.255.0 hardware-address 6018-9550-4c6c description 邹冬香
static-bind ip-address 192.168.7.76 mask 255.255.255.0 hardware-address 7a87-0d28-029e description 刘振波笔记本无线
static-bind ip-address 192.168.7.77 mask 255.255.255.0 hardware-address 6c24-087d-eb21 description 唐娟
static-bind ip-address 192.168.7.79 mask 255.255.255.0 hardware-address 485f-99a1-b8c1 description 胡亚军三楼总监
static-bind ip-address 192.168.7.80 mask 255.255.255.0 hardware-address 20c1-9bbc-1362 description 阳艾
static-bind ip-address 192.168.7.90 mask 255.255.255.0 hardware-address 106f-d9a0-f62b description 陈君炎
static-bind ip-address 192.168.7.95 mask 255.255.255.0 hardware-address f89e-9478-9b64 description 陆华龙笔记本无线
static-bind ip-address 192.168.7.100 mask 255.255.255.0 hardware-address b060-885a-01db description 孙春雨
static-bind ip-address 192.168.7.103 mask 255.255.255.0 hardware-address e4aa-eae6-0da5 description 3袁雪婷笔记本无线国际事业部
static-bind ip-address 192.168.7.108 mask 255.255.255.0 hardware-address b40e-de12-6821 description 石达笔记本办公
static-bind ip-address 192.168.7.110 mask 255.255.255.0 hardware-address cc15-31ac-c920 description 王文清笔记本办公
static-bind ip-address 192.168.7.112 mask 255.255.255.0 hardware-address 2c33-5887-e853 description 黄文律
static-bind ip-address 192.168.7.124 mask 255.255.255.0 hardware-address 20c1-9bbc-dd6f description 严小波笔记本
static-bind ip-address 192.168.7.127 mask 255.255.255.0 hardware-address e02b-e91c-425b description 李佳琪
static-bind ip-address 192.168.7.136 mask 255.255.255.0 hardware-address bc6e-e2bb-26c3 description 李青
static-bind ip-address 192.168.7.139 mask 255.255.255.0 hardware-address e02b-e9e0-a15f description 肖琦笔记本无线
static-bind ip-address 192.168.7.142 mask 255.255.255.0 hardware-address 6018-951f-a200 description 采购主管
static-bind ip-address 192.168.7.143 mask 255.255.255.0 hardware-address 20c1-9b21-77d5 description 王宇哲
static-bind ip-address 192.168.7.144 mask 255.255.255.0 hardware-address 1485-7f63-6cb7 description 邹逢飞
static-bind ip-address 192.168.7.154 mask 255.255.255.0 hardware-address e02b-e91e-7d55 description 徐培菊
static-bind ip-address 192.168.7.157 mask 255.255.255.0 hardware-address 169a-b3f4-c1ca description 严小波
static-bind ip-address 192.168.7.168 mask 255.255.255.0 hardware-address e02b-e98b-22a7 description 裴莹婷办公
static-bind ip-address 192.168.7.174 mask 255.255.255.0 hardware-address 3402-860c-a328 description 黄娟
static-bind ip-address 192.168.7.176 mask 255.255.255.0 hardware-address 8030-4979-480f description 何淑蓉
static-bind ip-address 192.168.7.183 mask 255.255.255.0 hardware-address a442-3b78-e1eb description 郑健晓无线
static-bind ip-address 192.168.7.189 mask 255.255.255.0 hardware-address 147d-dacf-419e description 丁超
static-bind ip-address 192.168.7.199 mask 255.255.255.0 hardware-address 20c1-9bbc-001b description 张军虎无线
static-bind ip-address 192.168.7.200 mask 255.255.255.0 hardware-address 6854-5a58-2db6 description 尤萌
static-bind ip-address 192.168.7.201 mask 255.255.255.0 hardware-address 4ceb-bd7c-8355 description 李玉霞笔记本无线
static-bind ip-address 192.168.7.206 mask 255.255.255.0 hardware-address 3800-25ec-7061 description 肖佳宜
static-bind ip-address 192.168.7.207 mask 255.255.255.0 hardware-address 8030-4985-610d description 汪海军
static-bind ip-address 192.168.7.208 mask 255.255.255.0 hardware-address 1485-7f63-2978 description 张细燕
static-bind ip-address 192.168.7.209 mask 255.255.255.0 hardware-address 38ba-f8d2-9312 description 黄娟
static-bind ip-address 192.168.7.212 mask 255.255.255.0 hardware-address 603a-7c9d-c037 description 何淑蓉
static-bind ip-address 192.168.7.215 mask 255.255.255.0 hardware-address e02b-e91d-33d2 description 谢师洋
static-bind ip-address 192.168.7.219 mask 255.255.255.0 hardware-address 00f4-8dff-fcd5 description 9王玉坚笔记本无线算法研究部
static-bind ip-address 192.168.7.225 mask 255.255.255.0 hardware-address e86f-3806-7a7f description 葛礼乐
static-bind ip-address 192.168.7.228 mask 255.255.255.0 hardware-address 485f-99a1-c9cf description 尧助文新笔记本无线
static-bind ip-address 192.168.7.229 mask 255.255.255.0 hardware-address 00f4-8dbc-83af description 梁欣
static-bind ip-address 192.168.7.232 mask 255.255.255.0 hardware-address 6854-5a58-2da2 description 何军全
static-bind ip-address 192.168.7.234 mask 255.255.255.0 hardware-address 8030-4985-606b description 赵鹏程
static-bind ip-address 192.168.7.241 mask 255.255.255.0 hardware-address 1826-49ef-2860 description 梁国涛
static-bind ip-address 192.168.7.247 mask 255.255.255.0 hardware-address dce9-9469-d0e9 description 徐旺华笔记本无XIAN
static-bind ip-address 192.168.7.248 mask 255.255.255.0 hardware-address f89e-9486-48a9 description 李林华笔记本无线
static-bind ip-address 192.168.7.249 mask 255.255.255.0 hardware-address 8cc8-4b86-c017 description 黄娟
#
dhcp server ip-pool vlan-interface8
gateway-list 192.168.8.1
network 192.168.8.0 mask 255.255.255.0
address range 192.168.8.10 192.168.8.250
dns-list 202.96.134.133 202.96.128.86
static-bind ip-address 192.168.8.20 mask 255.255.255.0 hardware-address f889-d2c9-6f85 description 麦市斌
static-bind ip-address 192.168.8.21 mask 255.255.255.0 hardware-address b0fc-364b-f561 description 邹燕昆
static-bind ip-address 192.168.8.99 mask 255.255.255.0 hardware-address 9829-a619-a8bc description 张育燊
static-bind ip-address 192.168.8.113 mask 255.255.255.0 hardware-address d0c6-372a-6ca0 description 冯建华
static-bind ip-address 192.168.8.122 mask 255.255.255.0 hardware-address 28df-eb1a-4965 description 许志祥笔记本电脑无线
static-bind ip-address 192.168.8.132 mask 255.255.255.0 hardware-address a442-3bea-b65e description 张俊宇笔记本无线
static-bind ip-address 192.168.8.136 mask 255.255.255.0 hardware-address 00f4-8dbc-8c0b description 葛礼乐
static-bind ip-address 192.168.8.148 mask 255.255.255.0 hardware-address 502f-9b9d-fe86 description 郭丹仪
static-bind ip-address 192.168.8.186 mask 255.255.255.0 hardware-address 88b1-b13f-8fc2 description 蔡汶钊
static-bind ip-address 192.168.8.193 mask 255.255.255.0 hardware-address a442-3beb-fb2c description 贺威
static-bind ip-address 192.168.8.220 mask 255.255.255.0 hardware-address 4ceb-bd7c-8355 description 李玉霞
static-bind ip-address 192.168.8.223 mask 255.255.255.0 hardware-address 1485-7f64-3ab6 description 裴莹婷
static-bind ip-address 192.168.8.228 mask 255.255.255.0 hardware-address 6ec6-d217-455c description 石达
static-bind ip-address 192.168.8.244 mask 255.255.255.0 hardware-address 28d2-44d8-9519 description 陈子楠
#
dhcp server ip-pool vlan-interface9
gateway-list 192.168.9.1
network 192.168.9.0 mask 255.255.255.0
address range 192.168.9.2 192.168.9.254
dns-list 202.96.134.133 202.96.128.86
#
dhcp server ip-pool vlan-interface17
gateway-list 192.168.17.1
network 192.168.17.0 mask 255.255.255.0
address range 192.168.17.2 192.168.17.250
dns-list 202.96.134.133 202.96.128.86
static-bind ip-address 192.168.17.2 mask 255.255.255.0 hardware-address a4ae-12f7-8f93 description 廖俊谦
static-bind ip-address 192.168.17.4 mask 255.255.255.0 hardware-address 507b-9d9e-723e description 朱建
static-bind ip-address 192.168.17.11 mask 255.255.255.0 hardware-address 6018-9520-0ce6 description 黄卫正
static-bind ip-address 192.168.17.15 mask 255.255.255.0 hardware-address 84a9-3872-feb0 description 许志祥笔记本电脑有线
static-bind ip-address 192.168.17.17 mask 255.255.255.0 hardware-address 3cec-efb6-a5fa description 朱建存储服务器
static-bind ip-address 192.168.17.18 mask 255.255.255.0 hardware-address 000c-29a4-219d description 朱建
static-bind ip-address 192.168.17.19 mask 255.255.255.0 hardware-address c0b7-1306-2c72 description 9三楼会议室小鱼视频
static-bind ip-address 192.168.17.23 mask 255.255.255.0 hardware-address ecd6-8aa8-8aed description 朱建
static-bind ip-address 192.168.17.24 mask 255.255.255.0 hardware-address ac1f-6ba1-7641 description 王玉坚服务器
static-bind ip-address 192.168.17.27 mask 255.255.255.0 hardware-address f46b-8c03-27b9 description 李晨羽
static-bind ip-address 192.168.17.28 mask 255.255.255.0 hardware-address 6c4b-90cc-530a description 8林晓华台式应用创新研发部
static-bind ip-address 192.168.17.29 mask 255.255.255.0 hardware-address 6c4b-90cf-9f30 description 张洋
static-bind ip-address 192.168.17.30 mask 255.255.255.0 hardware-address 6c4b-90cc-e290 description 冯建华
static-bind ip-address 192.168.17.31 mask 255.255.255.0 hardware-address 94c6-9120-47f0 description 1陆华龙台式嵌入式软件研发部
static-bind ip-address 192.168.17.38 mask 255.255.255.0 hardware-address e03f-494c-2e88 description 欧阳同文
static-bind ip-address 192.168.17.40 mask 255.255.255.0 hardware-address d076-e758-39fc description 李文强路由器
static-bind ip-address 192.168.17.41 mask 255.255.255.0 hardware-address e0a5-0900-97d4 description 闫永强
static-bind ip-address 192.168.17.45 mask 255.255.255.0 hardware-address 6018-9550-4c5b description 卢美吉
static-bind ip-address 192.168.17.46 mask 255.255.255.0 hardware-address 6c4b-90cd-eff8 description 6史云瑞泽应用创新部台式
static-bind ip-address 192.168.17.48 mask 255.255.255.0 hardware-address 00be-43f5-4799 description 熊胜云
static-bind ip-address 192.168.17.50 mask 255.255.255.0 hardware-address b083-fe5a-0fc7 description 0王斌台式应用创新研发部
static-bind ip-address 192.168.17.52 mask 255.255.255.0 hardware-address 448a-5b57-ef64 description 2王玉坚台式3算法研究部
static-bind ip-address 192.168.17.53 mask 255.255.255.0 hardware-address f46b-8c02-e487 description 方洪春
static-bind ip-address 192.168.17.57 mask 255.255.255.0 hardware-address 6cb3-114f-215e description 7王玉坚三楼机房T4-4服务器
static-bind ip-address 192.168.17.62 mask 255.255.255.0 hardware-address d8cb-8ab5-8f32 description 2刘振波台式三楼
static-bind ip-address 192.168.17.63 mask 255.255.255.0 hardware-address 0023-24d5-1c50 description 3欧阳同文台式
static-bind ip-address 192.168.17.65 mask 255.255.255.0 hardware-address fc34-97a8-75d9 description 闫永强
static-bind ip-address 192.168.17.67 mask 255.255.255.0 hardware-address 6c24-086b-cce3 description 陆华龙
static-bind ip-address 192.168.17.68 mask 255.255.255.0 hardware-address 98fa-9bd5-8821 description 陈耿豪
static-bind ip-address 192.168.17.69 mask 255.255.255.0 hardware-address fc34-97a4-c23c description 荆树励
static-bind ip-address 192.168.17.70 mask 255.255.255.0 hardware-address ac1f-6b80-93a0 description 0王玉坚服务器三楼机房三号柜
static-bind ip-address 192.168.17.71 mask 255.255.255.0 hardware-address a4ae-12f7-8fbe description 欧阳同文
static-bind ip-address 192.168.17.72 mask 255.255.255.0 hardware-address d8cb-8ab6-2c37 description 欧阳同文
static-bind ip-address 192.168.17.73 mask 255.255.255.0 hardware-address 000e-c65c-7f8e description 严小波
static-bind ip-address 192.168.17.79 mask 255.255.255.0 hardware-address 50eb-f6ba-e331 description 申耀贵
static-bind ip-address 192.168.17.80 mask 255.255.255.0 hardware-address 94c6-9179-6d51 description 王玉坚
static-bind ip-address 192.168.17.81 mask 255.255.255.0 hardware-address 000c-29d3-a3bb description 石达域控
static-bind ip-address 192.168.17.84 mask 255.255.255.0 hardware-address 000c-2902-22c7 description 朱建
static-bind ip-address 192.168.17.86 mask 255.255.255.0 hardware-address 6c4b-90cd-e54f description 蔡汶钊
static-bind ip-address 192.168.17.88 mask 255.255.255.0 hardware-address e865-5ffe-2d6c description 赵铁军
static-bind ip-address 192.168.17.90 mask 255.255.255.0 hardware-address 94d9-b373-a7e0 description 熊岩路由器
static-bind ip-address 192.168.17.91 mask 255.255.255.0 hardware-address 1c69-7a5f-b208 description 贺威
static-bind ip-address 192.168.17.92 mask 255.255.255.0 hardware-address 54e1-ad5a-5bb8 description 2应用创新部欧阳同文笔记本
static-bind ip-address 192.168.17.93 mask 255.255.255.0 hardware-address 002b-67c1-b3d8 description 王志刚
static-bind ip-address 192.168.17.94 mask 255.255.255.0 hardware-address 0023-24a0-ba94 description 严小波
static-bind ip-address 192.168.17.95 mask 255.255.255.0 hardware-address 6c0b-840a-930c description 欧阳同文
static-bind ip-address 192.168.17.96 mask 255.255.255.0 hardware-address 000e-c65c-7fa2 description 陆华龙
static-bind ip-address 192.168.17.100 mask 255.255.255.0 hardware-address 7486-e20f-1823 description 黄卫正
static-bind ip-address 192.168.17.102 mask 255.255.255.0 hardware-address a4ae-12f7-943b description 欧阳同文
static-bind ip-address 192.168.17.103 mask 255.255.255.0 hardware-address e0be-0325-6c8e description 颜鹏
static-bind ip-address 192.168.17.105 mask 255.255.255.0 hardware-address 40b0-7662-06f1 description 蒋莉莉
static-bind ip-address 192.168.17.107 mask 255.255.255.0 hardware-address b083-fe59-d736 description 蒋莉莉
static-bind ip-address 192.168.17.108 mask 255.255.255.0 hardware-address 94c6-910d-42d6 description 08应用创新部李贤忠台式
static-bind ip-address 192.168.17.109 mask 255.255.255.0 hardware-address b083-fea1-f7ae description 09王帅应用创新研发部台式普通
static-bind ip-address 192.168.17.110 mask 255.255.255.0 hardware-address 0023-24a0-9719 description 10严小波生物识别部台式
static-bind ip-address 192.168.17.112 mask 255.255.255.0 hardware-address 6c4b-90cc-5881 description 王志刚
static-bind ip-address 192.168.17.118 mask 255.255.255.0 hardware-address cc96-e527-c190 description 王玉坚新电脑
static-bind ip-address 192.168.17.119 mask 255.255.255.0 hardware-address b083-fea2-32c0 description 19王玉坚台式算法研究部
static-bind ip-address 192.168.17.120 mask 255.255.255.0 hardware-address 4ccc-6a36-6664 description 20严小波人脸识别主机
static-bind ip-address 192.168.17.123 mask 255.255.255.0 hardware-address 94c6-918b-dcbd description 廖俊谦
static-bind ip-address 192.168.17.124 mask 255.255.255.0 hardware-address 1c69-7a28-4aff description 付万安
static-bind ip-address 192.168.17.125 mask 255.255.255.0 hardware-address 94c6-9179-6d51 description 25王玉坚主机算法研究部
static-bind ip-address 192.168.17.126 mask 255.255.255.0 hardware-address 4ccc-6a36-6664 description 严小波
static-bind ip-address 192.168.17.128 mask 255.255.255.0 hardware-address 54e1-ad5a-5cd1 description 刘振波笔记本
static-bind ip-address 192.168.17.129 mask 255.255.255.0 hardware-address 000e-c635-78f5 description 袁炳伟
static-bind ip-address 192.168.17.130 mask 255.255.255.0 hardware-address 507b-9d9e-722b description 王志刚
static-bind ip-address 192.168.17.133 mask 255.255.255.0 hardware-address 5405-db04-c22c description 许志祥台式电脑有线
static-bind ip-address 192.168.17.134 mask 255.255.255.0 hardware-address 6c92-bff4-97fc description 34王于恺-三楼机房-编译服务器
static-bind ip-address 192.168.17.135 mask 255.255.255.0 hardware-address 6c92-bff4-9800 description 35王于恺编译服务器三楼
static-bind ip-address 192.168.17.136 mask 255.255.255.0 hardware-address 0002-a001-222d description 朱建
static-bind ip-address 192.168.17.139 mask 255.255.255.0 hardware-address 2cf0-5d4a-5668 description 欧阳同文
static-bind ip-address 192.168.17.140 mask 255.255.255.0 hardware-address 000e-c6c1-10db description 40谢丽枚笔记本有线
static-bind ip-address 192.168.17.141 mask 255.255.255.0 hardware-address 0e0d-9a98-ce0f description 朱建
static-bind ip-address 192.168.17.147 mask 255.255.255.0 hardware-address 6c4b-90b6-7fb7 description 钟天生
static-bind ip-address 192.168.17.151 mask 255.255.255.0 hardware-address 6c4b-90cc-7857 description 51贺威台式
static-bind ip-address 192.168.17.152 mask 255.255.255.0 hardware-address 1c69-7ab1-568a description 52裴振华台式智能终端研发中心
static-bind ip-address 192.168.17.154 mask 255.255.255.0 hardware-address f46b-8c02-e557 description 54尧助文台式嵌入式软件产品部
static-bind ip-address 192.168.17.155 mask 255.255.255.0 hardware-address b405-5d14-c65e description 邓小琴服务器三楼机房3号柜
static-bind ip-address 192.168.17.159 mask 255.255.255.0 hardware-address 448a-5b9b-1ebf description 冯建华
static-bind ip-address 192.168.17.161 mask 255.255.255.0 hardware-address b083-fea1-fc7d description 欧阳同文
static-bind ip-address 192.168.17.162 mask 255.255.255.0 hardware-address b07b-2529-31d5 description 张军虎
static-bind ip-address 192.168.17.163 mask 255.255.255.0 hardware-address d08e-7908-5edc description 孙祥
static-bind ip-address 192.168.17.165 mask 255.255.255.0 hardware-address 34f7-1611-887e description 王锴英路由器
static-bind ip-address 192.168.17.168 mask 255.255.255.0 hardware-address e86a-640c-e8e5 description 钟天生
static-bind ip-address 192.168.17.171 mask 255.255.255.0 hardware-address f46b-8c5a-b575 description 王杨
static-bind ip-address 192.168.17.172 mask 255.255.255.0 hardware-address 6c4b-90cd-e92d description wuyonggang
static-bind ip-address 192.168.17.174 mask 255.255.255.0 hardware-address d08e-7906-3297 description 肖佳宜
static-bind ip-address 192.168.17.176 mask 255.255.255.0 hardware-address f8bc-125b-bd4f description 易亮
static-bind ip-address 192.168.17.179 mask 255.255.255.0 hardware-address b083-fea1-f86c description 79熊胜云应用创新研究部台式
static-bind ip-address 192.168.17.180 mask 255.255.255.0 hardware-address 1c69-7a5f-1a30 description 闫永强
static-bind ip-address 192.168.17.182 mask 255.255.255.0 hardware-address 8c8c-aab4-b796 description 徐旺华
static-bind ip-address 192.168.17.183 mask 255.255.255.0 hardware-address fc34-97a8-75d6 description 83温职先台式有线
static-bind ip-address 192.168.17.184 mask 255.255.255.0 hardware-address 8c8c-a3b4-b591 description 徐旺华
static-bind ip-address 192.168.17.185 mask 255.255.255.0 hardware-address 1c1b-0d9e-3983 description 温职先服务器
static-bind ip-address 192.168.17.188 mask 255.255.255.0 hardware-address 6c24-0819-8b59 description 严小波
static-bind ip-address 192.168.17.195 mask 255.255.255.0 hardware-address 7020-8402-9ab1 description 徐培菊
static-bind ip-address 192.168.17.200 mask 255.255.255.0 hardware-address 94c6-9172-33df description 温职先
static-bind ip-address 192.168.17.202 mask 255.255.255.0 hardware-address 14a7-8bca-fb54 description 02三楼监控大门口大华
static-bind ip-address 192.168.17.203 mask 255.255.255.0 hardware-address 14a7-8bd3-2c48 description 03三楼大门口第一走廊监控
static-bind ip-address 192.168.17.204 mask 255.255.255.0 hardware-address 14a7-8bca-fc58 description 04三楼第二走廊监控
static-bind ip-address 192.168.17.205 mask 255.255.255.0 hardware-address 14a7-8bd3-2d32 description 05三楼消防通道监控
static-bind ip-address 192.168.17.210 mask 255.255.255.0 hardware-address 000c-296e-4216 description 朱建
static-bind ip-address 192.168.17.216 mask 255.255.255.0 hardware-address 1c69-7ac8-e3cc description 廖俊谦
static-bind ip-address 192.168.17.220 mask 255.255.255.0 hardware-address a4ae-12f7-8842 description 20春生座位下域服务器主机
static-bind ip-address 192.168.17.240 mask 255.255.255.0 hardware-address 1c69-7ac8-e357 description 朱建
static-bind ip-address 192.168.17.242 mask 255.255.255.0 hardware-address 002b-67c1-d260 description 汪海军
static-bind ip-address 192.168.17.249 mask 255.255.255.0 hardware-address 000c-29ca-99aa description 陆华龙虚拟机
#
dhcp server ip-pool vlan-interface20
gateway-list 192.168.20.1
network 192.168.20.0 mask 255.255.255.0
address range 192.168.20.20 192.168.20.200
dns-list 114.114.114.114 221.5.88.88
#
dhcp server ip-pool vlan-interface25
gateway-list 192.168.25.1
network 192.168.25.0 mask 255.255.255.0
address range 192.168.25.10 192.168.25.200
dns-list 114.114.114.114 221.5.88.88
#
dhcp server ip-pool vlan-interface26
gateway-list 192.168.26.1
network 192.168.26.0 mask 255.255.255.0
address range 192.168.26.10 192.168.26.200
dns-list 192.168.26.1
#
dhcp server ip-pool vlan-interface276
#
dhcp server ip-pool vlan3-interface
#
dhcp server ip-pool vlan7
#
dhcp server ip-pool vlaninterface17
#
policy-based-route local permit node 10
if-match acl 3777
apply next-hop 112.95.151.17
#
policy-based-route local permit node 30
if-match acl 3333
apply next-hop 183.62.140.225
#
policy-based-route local permit node 40
if-match acl 3111
apply next-hop 218.17.160.129
#
policy-based-route pbr17418 permit node 2
if-match acl name acl174182
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17418 permit node 3
if-match acl name acl174183
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17418 permit node 4
if-match acl name acl174184
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17418 permit node 8
if-match acl name acl174188
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17419 permit node 0
if-match acl name acl174190
apply next-hop 163.177.79.129
apply output-interface GigabitEthernet5/7
#
policy-based-route pbr17419 permit node 1
if-match acl name acl174191
apply next-hop 163.177.79.129
apply output-interface GigabitEthernet5/7
#
policy-based-route pbr17420 permit node 0
if-match acl name acl174200
apply output-interface Dialer2
#
policy-based-route pbr17420 permit node 1
if-match acl name acl174201
apply output-interface Dialer2
#
policy-based-route pbr17421 permit node 0
if-match acl name acl174210
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17421 permit node 1
if-match acl name acl174211
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17421 permit node 2
if-match acl name acl174212
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17421 permit node 3
if-match acl name acl174213
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17422 permit node 0
if-match acl name acl174220
apply output-interface Dialer2
#
policy-based-route pbr17422 permit node 1
if-match acl name acl174221
apply output-interface Dialer2
#
policy-based-route pbr17423 permit node 0
if-match acl name acl174230
apply output-interface Dialer2
#
policy-based-route pbr17423 permit node 1
if-match acl name acl174231
apply output-interface Dialer2
#
policy-based-route pbr17427 permit node 5
if-match acl name acl174275
apply output-interface Dialer186
#
policy-based-route pbr17427 permit node 6
if-match acl name acl174276
apply output-interface Dialer186
#
policy-based-route pbr17427 permit node 7
if-match acl name acl174277
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17427 permit node 8
if-match acl name acl174278
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17427 permit node 9
if-match acl name acl174279
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 0
if-match acl name acl174290
apply next-hop 163.177.79.129
apply output-interface GigabitEthernet5/7
#
policy-based-route pbr17429 permit node 1
if-match acl name acl174291
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 2
if-match acl name acl174292
apply next-hop 163.177.79.129
apply output-interface GigabitEthernet5/7
#
policy-based-route pbr17429 permit node 3
if-match acl name acl174293
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 4
if-match acl name acl174294
apply next-hop 163.177.79.129
apply output-interface GigabitEthernet5/7
#
policy-based-route pbr17429 permit node 26
if-match acl name acl1742926
apply output-interface Dialer185
#
policy-based-route pbr17429 permit node 27
if-match acl name acl1742927
apply output-interface Dialer185
#
policy-based-route pbr17429 permit node 28
if-match acl name acl1742928
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 29
if-match acl name acl1742929
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 30
if-match acl name acl1742930
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 31
if-match acl name acl1742931
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 32
if-match acl name acl1742932
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 33
if-match acl name acl1742933
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 34
if-match acl name acl1742934
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 35
if-match acl name acl1742935
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
policy-based-route pbr17429 permit node 36
if-match acl name acl1742936
apply next-hop 14.116.138.241
apply output-interface GigabitEthernet0/0
#
controller Cellular0/0
#
interface Dialer0
#
interface Dialer2
bandwidth 1000000
mtu 1492
ppp chap password cipher $c$3$fCuvNvnwqcaP2NG7L/jKCoxqMOJoQSbx7/al
ppp chap user 07551217595359@163.gd
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 07551217595359@163.gd password cipher $c$3$OLeJRujozloiA7+VwUHklPcyjxCMEIvX2lto
dialer bundle enable
dialer-group 3
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
tcp mss 1280
ip last-hop hold
qos reserved-bandwidth pct 100
qos lr outbound cir 1000000 cbs 62500000 ebs 0
qos car inbound carl 2 cir 160000 cbs 10000000 ebs 0 green pass red discard yellow pass
qos car outbound carl 1 cir 160000 cbs 10000000 ebs 0 green pass red discard yellow pass
nat outbound
#
interface Dialer185
bandwidth 1000000
mtu 1492
ppp chap password cipher $c$3$P0rZpb5qzRJslB7Nm27uUcUwPsFb64MHazbr
ppp chap user 07551210723705@163.gd
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 07551210723705@163.gd password cipher $c$3$WgNq9qgS+fp5t+/UjKMyGhmdnUbEWTvuOos2
dialer bundle enable
dialer-group 186
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
tcp mss 1280
ip last-hop hold
qos reserved-bandwidth pct 100
qos lr outbound cir 1000000 cbs 62500000 ebs 0
nat outbound
#
interface Dialer186
bandwidth 1000000
mtu 1480
ppp chap password cipher $c$3$VzPlR/CmJfyHfmN6OL27pSDF+te7I7MgkOz9
ppp chap user 07551210739324@163.gd
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 07551210739324@163.gd password cipher $c$3$j3jes3yqL8XYg2jA1Oqaj/9Xps7RUMBuag4h
dialer bundle enable
dialer-group 187
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
tcp mss 1280
ip last-hop hold
qos reserved-bandwidth pct 100
qos lr outbound cir 1000000 cbs 62500000 ebs 0
nat outbound
#
interface Dialer187
mtu 1492
#
interface Virtual-Template1
ppp authentication-mode chap
remote address pool l2tp1
ppp account-statistics enable
ip address 192.168.50.1 255.255.255.0
#
interface Virtual-Ethernet8
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.1.1 255.255.255.0
tcp mss 1280
packet-filter 3800 inbound
packet-filter mac 4999 inbound
nat hairpin enable
ip policy-based-route pbr17429
ip subscriber l2-connected enable
ip subscriber initiator dhcp enable
ip subscriber initiator unclassified-ip enable
ip subscriber dhcp domain ipoeenabledomain
ip subscriber unclassified-ip domain ipoeenabledomain
#
interface Vlan-interface2
ip address 192.168.2.1 255.255.255.0
tcp mss 1280
nat hairpin enable
dhcp server apply ip-pool vlan-interface2
#
interface Vlan-interface3
description ith
ip address 192.168.3.1 255.255.255.0
tcp mss 1280
nat hairpin enable
ip policy-based-route pbr17418
#
interface Vlan-interface5
ip address 192.168.5.1 255.255.255.0
tcp mss 1280
nat hairpin enable
ip policy-based-route pbr17419
#
interface Vlan-interface6
ip address 192.168.6.1 255.255.255.0
tcp mss 1280
nat hairpin enable
ip policy-based-route pbr17420
#
interface Vlan-interface7
ip address 192.168.7.1 255.255.255.0
tcp mss 1280
nat hairpin enable
dhcp server apply ip-pool vlan-interface7
ip policy-based-route pbr17421
ip subscriber l2-connected enable
ip subscriber initiator dhcp enable
ip subscriber initiator unclassified-ip enable
ip subscriber dhcp domain ipoeenabledomain
ip subscriber unclassified-ip domain ipoeenabledomain
#
interface Vlan-interface8
ip address 192.168.8.1 255.255.255.0
tcp mss 1280
nat hairpin enable
ip policy-based-route pbr17422
ip subscriber l2-connected enable
ip subscriber initiator dhcp enable
ip subscriber initiator unclassified-ip enable
ip subscriber dhcp domain ipoeenabledomain
ip subscriber unclassified-ip domain ipoeenabledomain
#
interface Vlan-interface9
ip address 192.168.9.1 255.255.255.0
tcp mss 1280
nat hairpin enable
ip policy-based-route pbr17423
ip subscriber l2-connected enable
ip subscriber initiator dhcp enable
ip subscriber initiator unclassified-ip enable
ip subscriber dhcp domain ipoeenabledomain
ip subscriber unclassified-ip domain ipoeenabledomain
#
interface Vlan-interface17
ip address 192.168.17.1 255.255.255.0
tcp mss 1280
nat hairpin enable
ip policy-based-route pbr17427
ip subscriber l2-connected enable
ip subscriber initiator dhcp enable
ip subscriber initiator unclassified-ip enable
ip subscriber dhcp domain ipoeenabledomain
ip subscriber unclassified-ip domain ipoeenabledomain
#
interface Vlan-interface20
ip address 192.168.20.1 255.255.255.0
tcp mss 1280
nat hairpin enable
#
interface Vlan-interface25
ip address 192.168.25.1 255.255.255.0
tcp mss 1280
nat hairpin enable
#
interface Vlan-interface26
ip address 192.168.26.1 255.255.255.0
nat hairpin enable
#
interface GigabitEthernet0/0
port link-mode route
description Multiple_Line7
bandwidth 50000
combo enable copper
ip address 14.116.138.242 255.255.255.248
dns server 202.96.128.68
dns server 202.96.134.133
tcp mss 1280
ip last-hop hold
qos reserved-bandwidth pct 100
qos lr outbound cir 50000 cbs 3125000 ebs 0
nat outbound
nat server protocol tcp global 14.116.138.243 80 inside 192.168.3.173 80 description ***.***
nat server protocol tcp global 14.116.138.244 3389 inside 192.168.1.149 3389 description 远程桌面
nat server protocol tcp global 14.116.138.244 6321 inside 192.168.1.149 6321 description ftp
nat server protocol tcp global 14.116.138.245 80 inside 192.168.1.190 5000
nat server protocol udp global 14.116.138.244 3389 inside 192.168.1.149 3389 description 远程桌面
nat server protocol udp global 14.116.138.245 80 inside 192.168.1.190 5000
nat server protocol tcp global current-interface 80 inside 192.168.1.184 80 description 可信
nat server protocol tcp global current-interface 443 inside 192.168.1.184 443 description 可信
nat server protocol tcp global current-interface 1585 inside 192.168.1.40 8080 description MANTIS
nat server protocol tcp global current-interface 1723 inside 192.168.2.100 1723 description VPN服务器
nat server protocol tcp global current-interface 3000 inside 192.168.3.173 3000 description 邹逢飞测试
nat server protocol tcp global current-interface 8080 inside 192.168.1.138 8080 description 内保系统映射
nat server protocol tcp global current-interface 8082 inside 192.168.1.36 8081 description 李青门禁测试（暂已弃用）
nat server protocol tcp global current-interface 8090 inside 192.168.1.43 8090 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 8433 inside 192.168.2.100 8433 description VPN服务器
nat server protocol tcp global current-interface 9000 inside 192.168.1.43 9000 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 9020 inside 192.168.1.36 10122 description 李青HZ人脸算法
nat server protocol tcp global current-interface 9080 inside 192.168.17.101 9210 description 未知人员
nat server protocol tcp global current-interface 9086 inside 192.168.1.43 9086 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 9087 inside 192.168.1.43 9087 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 9090 inside 192.168.3.89 9090 description 余亮
nat server protocol tcp global current-interface 9399 inside 192.168.1.185 9399 description 未知人员
nat server protocol tcp global current-interface 10000 inside 192.168.1.43 10000 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 10001 inside 192.168.1.43 10001 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 11935 inside 192.168.1.43 11935 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 12228 inside 192.168.1.138 80 description 春生内保映射
nat server protocol tcp global current-interface 12389 inside 192.168.1.43 12389 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 15060 inside 192.168.1.43 15060 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 15070 inside 192.168.1.43 15070 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 30000 30500 inside 192.168.1.43 30000 30500 description 欧阳TrustIVS映射
nat server protocol tcp global current-interface 36058 inside 192.168.3.36 36058 description 严小波
nat server protocol tcp global current-interface 39001 inside 192.168.1.184 39001 description 汪海军
nat server protocol udp global current-interface 80 inside 192.168.1.184 80 description 可信
nat server protocol udp global current-interface 443 inside 192.168.1.184 443 description 可信
nat server protocol udp global current-interface 1585 inside 192.168.1.40 8080 description MANTIS
nat server protocol udp global current-interface 1723 inside 192.168.2.100 1723 description VPN服务器
nat server protocol udp global current-interface 8082 inside 192.168.1.36 8081 description 李青门禁测试（暂已弃用）
nat server protocol udp global current-interface 8090 inside 192.168.1.43 8090 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 8433 inside 192.168.2.100 8433 description VPN服务器
nat server protocol udp global current-interface 9000 inside 192.168.1.43 9000 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 9020 inside 192.168.1.36 10122 description 李青HZ人脸算法
nat server protocol udp global current-interface 9080 inside 192.168.17.101 9210 description 未知人员
nat server protocol udp global current-interface 9086 inside 192.168.1.43 9086 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 9087 inside 192.168.1.43 9087 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 9090 inside 192.168.3.89 9090 description 余亮
nat server protocol udp global current-interface 9399 inside 192.168.1.185 9399 description 未知人员
nat server protocol udp global current-interface 10000 inside 192.168.1.43 10000 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 10001 inside 192.168.1.43 10001 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 11935 inside 192.168.1.43 11935 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 12389 inside 192.168.1.43 12389 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 15060 inside 192.168.1.43 15060 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 15070 inside 192.168.1.43 15070 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 30000 30500 inside 192.168.1.43 30000 30500 description 欧阳TrustIVS映射
nat server protocol udp global current-interface 36058 inside 192.168.3.36 36058 description 严小波
attack-defense apply policy AtkInterface2
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
#
interface GigabitEthernet0/2
port link-mode route
description Multiple_Line2
combo enable copper
pppoe-client dial-bundle-number 2
#
interface GigabitEthernet0/3
port link-mode route
combo enable copper
#
interface GigabitEthernet0/4
port link-mode route
#
interface GigabitEthernet0/5
port link-mode route
#
interface GigabitEthernet5/5
port link-mode route
description Multiple_Line6
duplex full
pppoe-client dial-bundle-number 185
#
interface GigabitEthernet5/6
port link-mode route
description Multiple_Line4
combo enable copper
pppoe-client dial-bundle-number 186
#
interface GigabitEthernet5/7
port link-mode route
description Multiple_Line5
bandwidth 50000
combo enable copper
ip address 163.177.79.148 255.255.255.224
dns server 223.5.5.5
tcp mss 1280
ip last-hop hold
qos reserved-bandwidth pct 100
qos lr outbound cir 50000 cbs 3125000 ebs 0
nat outbound
nat outbound 3005
nat server protocol tcp global current-interface 1723 inside 192.168.2.100 1723
nat server protocol tcp global current-interface 6892 inside 192.168.3.240 6892
nat server protocol tcp global current-interface 7001 inside 192.168.3.217 7001
nat server protocol tcp global current-interface 7722 inside 192.168.1.90 7722 description 朱建ssh对外服务器
nat server protocol tcp global current-interface 8080 inside 192.168.17.17 8080
nat server protocol tcp global current-interface 8088 inside 192.168.3.63 8088 description 张俊宇外部映射
nat server protocol tcp global current-interface 8090 inside 192.168.1.91 8090 description 先华
nat server protocol tcp global current-interface 8433 inside 192.168.2.100 8433
nat server protocol tcp global current-interface 9000 inside 192.168.1.91 9000 description 先华
nat server protocol tcp global current-interface 9006 inside 192.168.1.42 9006
nat server protocol tcp global current-interface 9020 inside 192.168.1.36 10122
nat server protocol tcp global current-interface 9080 inside 192.168.17.101 9120
nat server protocol tcp global current-interface 9086 9087 inside 192.168.1.91 9086 9087 description 先华
nat server protocol tcp global current-interface 9399 inside 192.168.1.185 9399
nat server protocol tcp global current-interface 10000 inside 192.168.1.91 10000 description 先华
nat server protocol tcp global current-interface 10001 inside 192.168.1.91 10001 description 先华
nat server protocol tcp global current-interface 10800 inside 192.168.1.240 10800 description 先华盒子
nat server protocol tcp global current-interface 11935 inside 192.168.1.91 11935 description 先华
nat server protocol tcp global current-interface 12389 inside 192.168.1.91 12389 description 先华
nat server protocol tcp global current-interface 12401 inside 192.168.1.227 36058 description 李青Trustlink公网映射给客户
nat server protocol tcp global current-interface 15060 inside 192.168.1.91 15060 description 先华
nat server protocol tcp global current-interface 15070 inside 192.168.1.91 15070 description 先华
nat server protocol tcp global current-interface 16080 inside 192.168.1.218 16080
nat server protocol tcp global current-interface 22080 inside 192.168.1.240 22080 description 先华盒子
nat server protocol tcp global current-interface 30000 30500 inside 192.168.1.91 30000 30500 description 先华
nat server protocol tcp global current-interface 36059 inside 192.168.1.141 36059
nat server protocol tcp global current-interface 38089 inside 192.168.1.133 8089
nat server protocol udp global current-interface 1723 inside 192.168.2.100 1723
nat server protocol udp global current-interface 6892 inside 192.168.3.240 6892
nat server protocol udp global current-interface 7001 inside 192.168.3.217 7001
nat server protocol udp global current-interface 7722 inside 192.168.1.90 7722 description 朱建ssh对外服务器
nat server protocol udp global current-interface 8080 inside 192.168.17.17 8080
nat server protocol udp global current-interface 8088 inside 192.168.3.63 8088 description 张俊宇外部映射
nat server protocol udp global current-interface 8090 inside 192.168.1.91 8090 description 先华
nat server protocol udp global current-interface 8433 inside 192.168.2.100 8433
nat server protocol udp global current-interface 9000 inside 192.168.1.91 9000 description 先华
nat server protocol udp global current-interface 9006 inside 192.168.1.42 9006
nat server protocol udp global current-interface 9020 inside 192.168.1.36 10122
nat server protocol udp global current-interface 9080 inside 192.168.17.101 9120
nat server protocol udp global current-interface 9086 9087 inside 192.168.1.91 9086 9087 description 先华
nat server protocol udp global current-interface 9399 inside 192.168.1.185 9399
nat server protocol udp global current-interface 10000 inside 192.168.1.91 10000 description 先华
nat server protocol udp global current-interface 10001 inside 192.168.1.91 10001 description 先华
nat server protocol udp global current-interface 10800 inside 192.168.1.240 10800 description 先华盒子
nat server protocol udp global current-interface 11935 inside 192.168.1.91 11935 description 先华
nat server protocol udp global current-interface 12389 inside 192.168.1.91 12389 description 先华
nat server protocol udp global current-interface 12401 inside 192.168.1.227 36058 description 李青Trustlink公网映射给客户
nat server protocol udp global current-interface 15060 inside 192.168.1.91 15060 description 先华
nat server protocol udp global current-interface 15070 inside 192.168.1.91 15070 description 先华
nat server protocol udp global current-interface 16080 inside 192.168.1.218 16080
nat server protocol udp global current-interface 22080 inside 192.168.1.240 22080 description 先华盒子
nat server protocol udp global current-interface 30000 30500 inside 192.168.1.91 30000 30500 description 先华
nat server protocol udp global current-interface 36059 inside 192.168.1.141 36059
attack-defense apply policy AtkInterface348
ipsec apply policy h3c
ipsec no-nat-process enable
#
interface GigabitEthernet5/0
port link-mode bridge
#
interface GigabitEthernet5/1
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet5/2
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet5/3
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet5/4
port link-mode bridge
port link-type trunk
port trunk permit vlan all
#
security-zone name Local
#
security-zone name Trust
#
security-zone name DMZ
#
security-zone name Untrust
#
security-zone name Management
#
scheduler logfile size 16
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class usb
user-role network-admin
#
line class vty
user-role network-operator
#
line con 0
user-role network-admin
#
line vty 0 63
authentication-mode scheme
user-role network-operator
#
ip route-static 0.0.0.0 0 Dialer186 preference 40
ip route-static 0.0.0.0 0 Dialer185 preference 40
ip route-static 0.0.0.0 0 GigabitEthernet5/7 163.177.79.129
ip route-static 0.0.0.0 0 Dialer2 preference 40
ip route-static 0.0.0.0 0 GigabitEthernet0/0 14.116.138.241
ip route-static 47.98.97.240 32 GigabitEthernet0/0 14.116.138.241 preference 30
ip route-static 59.37.13.190 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 凌霄网关
ip route-static 106.11.6.1 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 钉钉测试
ip route-static 117.23.61.137 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 备案官网
ip route-static 121.43.164.109 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 访问e智慧
ip route-static 121.196.201.59 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 阿里云服务器
ip route-static 161.117.214.54 32 GigabitEthernet0/0 14.116.138.241 preference 30
ip route-static 183.3.234.152 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 微信
ip route-static 183.57.48.62 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 微信
ip route-static 192.168.15.0 24 GigabitEthernet5/7 163.177.79.149 preference 40
ip route-static 192.168.16.0 24 GigabitEthernet5/7 163.177.79.149 preference 40
ip route-static 210.75.24.195 32 GigabitEthernet0/0 14.116.138.241 preference 30 description 凌宵华南分流DNS
#
info-center loghost 127.0.0.1 port 3301
info-center source CFGLOG loghost level informational
#
snmp-agent
snmp-agent local-engineid 800063A280A8C98A308A7C00000001
snmp-agent community read aratek acl 2999
snmp-agent sys-info version v1 v2c
#
performance-management
#
ssh server enable
sftp server enable
ssh server acl 2000
#
ip local policy-based-route local
#
time-range tr174182 00:00 to 24:00 daily
time-range tr174183 00:00 to 24:00 daily
time-range tr174184 00:00 to 24:00 daily
time-range tr174188 00:00 to 24:00 daily
time-range tr174190 00:00 to 24:00 daily
time-range tr174191 00:00 to 24:00 daily
time-range tr174200 00:00 to 24:00 daily
time-range tr174201 00:00 to 24:00 daily
time-range tr174210 00:00 to 24:00 daily
time-range tr174211 00:00 to 24:00 daily
time-range tr174212 00:00 to 24:00 daily
time-range tr174213 00:00 to 24:00 daily
time-range tr174220 00:00 to 24:00 daily
time-range tr174221 00:00 to 24:00 daily
time-range tr174230 00:00 to 24:00 daily
time-range tr174231 00:00 to 24:00 daily
time-range tr174275 00:00 to 24:00 daily
time-range tr174276 00:00 to 24:00 daily
time-range tr174277 00:00 to 24:00 daily
time-range tr174278 00:00 to 24:00 daily
time-range tr174279 00:00 to 24:00 daily
time-range tr174290 00:00 to 24:00 daily
time-range tr174291 00:00 to 24:00 daily
time-range tr174292 00:00 to 24:00 daily
time-range tr1742926 00:00 to 24:00 daily
time-range tr1742927 00:00 to 24:00 daily
time-range tr1742928 00:00 to 24:00 daily
time-range tr1742929 00:00 to 24:00 daily
time-range tr174293 00:00 to 24:00 daily
time-range tr1742930 00:00 to 24:00 daily
time-range tr1742931 00:00 to 24:00 daily
time-range tr1742932 00:00 to 24:00 daily
time-range tr1742933 00:00 to 24:00 daily
time-range tr1742934 00:00 to 24:00 daily
time-range tr1742935 00:00 to 24:00 daily
time-range tr1742936 00:00 to 24:00 daily
time-range tr174294 00:00 to 24:00 daily
time-range 全天 00:00 to 24:00 daily
#
ntp-service enable
#
acl basic 2000
rule 0 permit source 192.168.1.0 0.0.0.255
rule 1 permit source 192.168.7.0 0.0.0.255
rule 5 deny
#
acl number 2999
rule 1 permit source 192.168.1.2 0
#
acl basic name connlimitAcl_Vlan3_ip
rule 65534 permit source 192.168.3.0 0.0.0.255
#
acl basic name connlimitAcl_Vlan7_ip
rule 65534 permit source 192.168.7.0 0.0.0.255
#
acl advanced 3000
rule 0 permit ip destination 192.168.1.202 0
rule 5 permit ip source 192.168.1.202 0
#
acl number 3002
#
acl advanced 3005
rule 0 deny ip source 192.168.0.0 0.0.255.255 destination 192.168.0.0 0.0.255.255
rule 1 deny ip source 192.168.1.190 0
rule 5 permit ip
#
acl advanced 3009
rule 0 permit ip destination 192.168.3.41 0
#
acl advanced 3010
rule 0 permit ip destination 42.156.140.12 0
#
acl advanced 3111
rule 0 permit ip source 218.17.160.235 0
#
acl advanced 3333
rule 0 permit ip source 183.62.140.226 0
#
acl advanced 3666
rule 0 permit ip source 100.64.0.0 0.0.255.255
#
acl advanced 3777
description local-pbr-g5/7
rule 0 permit ip source 112.95.151.25 0
#
acl number 3800
rule 1 deny ip source 192.168.1.90 0 destination 192.168.0.0 0.0.255.255
rule 500 permit ip
#
acl number 3801
rule 5 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.17.0 0.0.0.255
rule 100 permit ip
#
acl advanced 3998
#
acl advanced 3999
description test
rule 0 permit ip source 192.168.1.26 0
rule 5 permit ip source 183.62.140.226 0 destination 114.114.114.114 0
rule 10 permit ip source 114.114.114.114 0 destination 183.62.140.226 0
#
acl advanced name acl174182
rule 1 permit ip source object-group srcgroup174182 destination object-group dstgroup174182 time-range tr174182
rule 1 comment 3段访问阿里
#
acl advanced name acl174183
rule 1 permit ip source object-group srcgroup174183 destination object-group dstgroup174183 time-range tr174183
rule 1 comment 3段访问阿里
#
acl advanced name acl174184
rule 1 permit ip source object-group srcgroup174184 destination object-group dstgroup174184 time-range tr174184
rule 1 comment 3段走电信专线
#
acl advanced name acl174188
rule 1 permit ip source object-group srcgroup174188 destination object-group dstgroup174188 time-range tr174188
rule 1 comment 3段走电信专线
#
acl advanced name acl174190
rule 1 permit ip source object-group srcgroup174190 destination object-group dstgroup174190 time-range tr174190
rule 1 comment 5段走联通专线
#
acl advanced name acl174191
rule 1 permit ip source object-group srcgroup174191 destination object-group dstgroup174191 time-range tr174191
rule 1 comment 5段走联通专线
#
acl advanced name acl174200
rule 1 permit ip source object-group srcgroup174200 destination object-group dstgroup174200 time-range tr174200
rule 1 comment 6段走拔号3
#
acl advanced name acl174201
rule 1 permit ip source object-group srcgroup174201 destination object-group dstgroup174201 time-range tr174201
rule 1 comment 6段走拔号3
#
acl advanced name acl174210
rule 1 permit ip source object-group srcgroup174210 destination object-group dstgroup174210 time-range tr174210
rule 1 comment 7网走电信专线
#
acl advanced name acl174211
rule 1 permit ip source object-group srcgroup174211 destination object-group dstgroup174211 time-range tr174211
rule 1 comment 7段走电信专线
#
acl advanced name acl174212
rule 1 permit ip source object-group srcgroup174212 destination object-group dstgroup174212 time-range tr174212
rule 1 comment 7段走电信专线
#
acl advanced name acl174213
rule 1 permit ip source object-group srcgroup174213 destination object-group dstgroup174213 time-range tr174213
rule 1 comment 7段走电信专线
#
acl advanced name acl174220
rule 1 permit ip source object-group srcgroup174220 destination object-group dstgroup174220 time-range tr174220
rule 1 comment guest走拨号3
#
acl advanced name acl174221
rule 1 permit ip source object-group srcgroup174221 destination object-group dstgroup174221 time-range tr174221
rule 1 comment guest走拨号3
#
acl advanced name acl174230
rule 1 permit ip source object-group srcgroup174230 destination object-group dstgroup174230 time-range tr174230
rule 1 comment 9段走拨号3
#
acl advanced name acl174231
rule 1 permit ip source object-group srcgroup174231 destination object-group dstgroup174231 time-range tr174231
rule 1 comment 9段走拨号3
#
acl advanced name acl174275
rule 1 permit ip source object-group srcgroup174275 destination object-group dstgroup174275 time-range tr174275
rule 1 comment 17段走拨号2
#
acl advanced name acl174276
rule 1 permit ip source object-group srcgroup174276 destination object-group dstgroup174276 time-range tr174276
rule 1 comment 17段走拨号2
#
acl advanced name acl174277
rule 1 permit ip source object-group srcgroup174277 destination object-group dstgroup174277 time-range tr174277
rule 1 comment 阿里云
#
acl advanced name acl174278
rule 1 permit ip source object-group srcgroup174278 destination object-group dstgroup174278 time-range tr174278
rule 1 comment 阿里云
#
acl advanced name acl174279
rule 1 permit ip source object-group srcgroup174279 destination object-group dstgroup174279 time-range tr174279
rule 1 comment aliyun2
#
acl advanced name acl174290
rule 1 permit ip source object-group srcgroup174290 destination object-group dstgroup174290 time-range tr174290
rule 1 comment 1楼小鱼走联通线
#
acl advanced name acl174291
rule 1 permit ip source object-group srcgroup174291 destination object-group dstgroup174291 time-range tr174291
rule 1 comment 笔记本走电信
#
acl advanced name acl174292
rule 1 permit ip source object-group srcgroup174292 destination object-group dstgroup174292 time-range tr174292
rule 1 comment 台式走联通
#
acl advanced name acl174293
rule 1 permit ip source object-group srcgroup174293 destination object-group dstgroup174293 time-range tr174293
rule 1 comment 笔记本走电信
#
acl advanced name acl174294
rule 1 permit ip source object-group srcgroup174294 destination object-group dstgroup174294 time-range tr174294
rule 1 comment 台式走联通
#
acl advanced name acl1742926
rule 1 permit ip source object-group srcgroup1742926 destination object-group dstgroup1742926 time-range tr1742926
rule 1 comment 1段走拨号1
#
acl advanced name acl1742927
rule 1 permit ip source object-group srcgroup1742927 destination object-group dstgroup1742927 time-range tr1742927
rule 1 comment 1段走拨号1
#
acl advanced name acl1742928
rule 1 permit ip source object-group srcgroup1742928 destination object-group dstgroup1742928 time-range tr1742928
rule 1 comment 后台管理系统
#
acl advanced name acl1742929
rule 1 permit ip source object-group srcgroup1742929 destination object-group dstgroup1742929 time-range tr1742929
rule 1 comment --
#
acl advanced name acl1742930
rule 1 permit ip source object-group srcgroup1742930 destination object-group dstgroup1742930 time-range tr1742930
rule 1 comment --
#
acl advanced name acl1742931
rule 1 permit ip source object-group srcgroup1742931 destination object-group dstgroup1742931 time-range tr1742931
rule 1 comment --
#
acl advanced name acl1742932
rule 1 permit ip source object-group srcgroup1742932 destination object-group dstgroup1742932 time-range tr1742932
rule 1 comment --
#
acl advanced name acl1742933
rule 1 permit ip source object-group srcgroup1742933 destination object-group dstgroup1742933 time-range tr1742933
rule 1 comment --
#
acl advanced name acl1742934
rule 1 permit ip source object-group srcgroup1742934 destination object-group dstgroup1742934 time-range tr1742934
rule 1 comment 小波走电信
#
acl advanced name acl1742935
rule 1 permit ip source object-group srcgroup1742935 destination object-group dstgroup1742935 time-range tr1742935
rule 1 comment 小波
#
acl advanced name acl1742936
rule 1 permit ip source object-group srcgroup1742936 destination object-group dstgroup1742936 time-range tr1742936
rule 1 comment aliyun
#
acl advanced name connlimitAcl_Vlan3_tcp
rule 65534 permit tcp source 192.168.3.0 0.0.0.255
#
acl advanced name connlimitAcl_Vlan3_udp
rule 65534 permit udp source 192.168.3.0 0.0.0.255
#
acl advanced name connlimitAcl_Vlan7_tcp
rule 65534 permit tcp source 192.168.7.0 0.0.0.255
#
acl advanced name connlimitAcl_Vlan7_udp
rule 65534 permit udp source 192.168.7.0 0.0.0.255
#
acl advanced name greenChannelAcl_18929
#
acl advanced name greenChannelAcl_18929_I
#
acl mac 4999
rule 5 permit
#
password-control enable
undo password-control aging enable
undo password-control history enable
password-control length 6
password-control login-attempt 3 exceed lock-time 10
password-control update-interval 0
password-control login idle-time 0
#
domain ipoeenabledomain
authorization-attribute idle-cut 5 1
authentication ipoe none
authorization ipoe none
accounting ipoe none
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user aratek-admin class manage
service-type ssh telnet terminal http https
authorization-attribute user-role network-admin
#
local-user wangwenqing class manage
access-limit 500
service-type ftp
service-type ssh telnet terminal http https
authorization-attribute user-role network-admin
#
local-user aratek class network
password cipher $c$3$iFQ7ybKtXkLFG1fi2VVr8OqDh3Xcv1ookA==
access-limit 1000
service-type ppp
authorization-attribute user-role network-operator
#
local-user aratek-admin class network
password cipher $c$3$nbjhQ0QteoZiog6RcX26E71yi14yjSP9Uh4IF0pZoZ8=
service-type ppp
authorization-attribute user-role network-operator
#
local-user aratek1 class network
password cipher $c$3$v/t9xRL71kE+N0a1ciYLnGBcyW1RR5V2g3U=
access-limit 1000
service-type ppp
authorization-attribute user-role network-operator
#
local-user aratek2 class network
password cipher $c$3$uDnYRvL2uxImI9QOyECI+19keAFdOFZ1Iss=
access-limit 1000
service-type ppp
authorization-attribute user-role network-operator
#
local-user aratek3 class network
password cipher $c$3$ggL9AZvRTqWEqQvlkODhMtXr6pQdsnpHA9E=
access-limit 1000
service-type ppp
authorization-attribute user-role network-operator
#
local-user aratek4 class network
password cipher $c$3$6hXs15ABotJ1AgBEZ42TNLueW9XAQeLpnu8=
access-limit 1000
service-type ppp
authorization-attribute user-role network-operator
#
local-user fum class network
password cipher $c$3$7T+jl9AqHFm/aMAEi82lw6lQbk/lfYTtc50ShNzp
access-limit 1024
service-type ppp
authorization-attribute user-role network-operator
description 付明
#
local-user liuhy class network
password cipher $c$3$WJj020pyfqTTUtgWCGhWCk6ko7YxRu2sk3y6dK3l
access-limit 1024
service-type ppp
authorization-attribute user-role network-operator
description 刘红宇
#
local-user liuzb class network
password cipher $c$3$NeK5DFkyU9Qc4pZwUalwjfeN759kE2oy0J9ILJtF
access-limit 1024
service-type ppp
authorization-attribute user-role network-operator
#
local-user rajan class network
password cipher $c$3$RK+sKG0KW+QrQVhVVSiPt99xUP/gDlwnanueXpn7
access-limit 1024
service-type ppp
authorization-attribute user-role network-operator
description 印度rajan
#
local-user wangwenqing class network
password cipher $c$3$cvDQ8O8BFT1TT7C2nwfDKZBPxaCpW+Nt9tGfGtZuTF0=
service-type ppp
authorization-attribute user-role network-operator
#
session statistics enable
#
connection-limit policy 1
limit 253 acl name connlimitAcl_Vlan7_udp per-source amount 750 749
limit 254 acl name connlimitAcl_Vlan7_tcp per-source amount 750 749
limit 255 acl name connlimitAcl_Vlan7_ip per-source amount 1500 1499
#
connection-limit policy 2
limit 253 acl name connlimitAcl_Vlan3_udp per-source amount 750 749
limit 254 acl name connlimitAcl_Vlan3_tcp per-source amount 750 749
limit 255 acl name connlimitAcl_Vlan3_ip per-source amount 1500 1499
#
ipsec transform-set 1
esp encryption-algorithm 3des-cbc
esp authentication-algorithm sha1
#
ipsec transform-set 2
esp encryption-algorithm 3des-cbc
esp authentication-algorithm sha1
#
ipsec transform-set WAN7(GE5/7)@aratek_test
esp encryption-algorithm 3des-cbc
esp authentication-algorithm sha1
#
ipsec policy-template 1 1
transform-set 1
ike-profile 1
sa duration time-based 28800
sa duration traffic-based 1843200
#
ipsec policy-template 1 2
transform-set 2
ike-profile 2
sa duration time-based 28800
sa duration traffic-based 1843200
#
ipsec policy h3c 1 isakmp template 1
#
l2tp-group 1 mode lns
allow l2tp virtual-template 1
undo tunnel authentication
#
l2tp enable
#
ike identity fqdn 123
#
ike profile 1
keychain 1
exchange-mode aggressive
match remote identity fqdn 333
proposal 1
#
ike profile 2
keychain 2
exchange-mode aggressive
match remote identity fqdn 234
proposal 2
#
ike profile WAN7(GE5/7)@aratek_test
keychain WAN7(GE5/7)@aratek_test
match remote identity address 0.0.0.0 0.0.0.0
proposal 65535
#
ike proposal 1
encryption-algorithm 3des-cbc
sa duration 28800
#
ike proposal 2
encryption-algorithm 3des-cbc
sa duration 28800
#
ike proposal 65535
#
ike keychain 1
pre-shared-key hostname 333 key cipher $c$3$vmM/9J4c3p2iVWy7tG5MdE6sO39f3PH/zg==
#
ike keychain 2
pre-shared-key hostname 234 key cipher $c$3$8YyUlcOJi3PuVtBn5DmBeZGCUOz54p8yWi+j2g==
#
ike keychain WAN7(GE5/7)@aratek_test
pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c$3$cI+eMPVK880h+dx0/6nqiw+wrdcKt6v9mHtb5p9k
#
ip http port 11080
ip http enable
ip https enable
web idle-timeout 999
web new-style
#
attack-defense policy AtkInterface2
scan detect level high action logging block-source
syn-flood detect non-specific
syn-flood action logging drop
udp-flood detect non-specific
udp-flood action logging drop
icmp-flood detect non-specific
icmp-flood action logging drop
signature detect smurf action drop logging
signature detect large-icmp action drop logging
signature detect large-icmpv6 action drop logging
signature detect tcp-invalid-flags action drop logging
signature detect tcp-null-flag action drop logging
signature detect tcp-all-flags action drop logging
signature detect tcp-syn-fin action drop logging
signature detect tcp-fin-only action drop logging
signature detect land action drop logging
signature detect winnuke action drop logging
signature detect fraggle action drop logging
signature detect ip-option record-route action drop logging
signature detect ip-option strict-source-routing action drop logging
signature detect icmp-type destination-unreachable action drop logging
signature detect icmp-type redirect action drop logging
#
attack-defense policy AtkInterface348
scan detect level high action logging block-source
syn-flood detect non-specific
syn-flood action logging drop
udp-flood detect non-specific
udp-flood action logging drop
icmp-flood detect non-specific
icmp-flood action logging drop
signature detect smurf action drop logging
signature detect large-icmp action drop logging
signature detect large-icmpv6 action drop logging
signature detect tcp-invalid-flags action drop logging
signature detect tcp-null-flag action drop logging
signature detect tcp-all-flags action drop logging
signature detect tcp-syn-fin action drop logging
signature detect tcp-fin-only action drop logging
signature detect land action drop logging
signature detect winnuke action drop logging
signature detect fraggle action drop logging
signature detect ip-option record-route action drop logging
signature detect ip-option strict-source-routing action drop logging
signature detect icmp-type destination-unreachable action drop logging
signature detect icmp-type redirect action drop logging
#
url-filter category custom severity 65535
#
wlan ap-group default-group
vlan 1
#
traffic-policy
rule 1 name web_AppTraffRank
application app http
#
uapp-control
#
dac log-collect service dpi traffic enable
dac traffic-statistic application enable
#
dac storage service dpi traffic limit hold-time 1
dac storage service traffic limit hold-time 1
#
return