#
version 5.20, Release 2208
#
sysname hexin
#
clock timezone beijing add 08:00:00
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
telnet server enable
#
ip ttl-expires enable
#
mirroring-group 1 remote-source
mirroring-group 1 remote-probe vlan 300
#
user-bind ip-address 192.168.255.180 mac-address c025-a5af-6a2c
#
acl number 3000
rule 0 permit ip destination 192.168.0.0 0.0.255.255
rule 20 deny ip
#
vlan 1
#
vlan 88 to 89
#
vlan 200
description fuwuqi
#
vlan 201
description yunwei
#
vlan 248
#
vlan 249
description KouQiangKe
#
vlan 250 to 255
#
vlan 300
description DuanKouJingXiang_Many to Many
#
radius scheme system
server-type extended
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
dhcp server ip-pool 250
network 192.168.250.0 mask 255.255.255.0
gateway-list 192.168.250.1
#
dhcp server ip-pool 251
network 192.168.251.0 mask 255.255.255.0
gateway-list 192.168.251.1
#
dhcp server ip-pool 253
network 192.168.253.0 mask 255.255.255.0
gateway-list 192.168.253.1
#
user-group system
#
stp enable
#
interface Bridge-Aggregation10
description to_FW
port link-type trunk
port trunk permit vlan all
#
interface NULL0
#
packet-filter 3500 inbound
packet-filter 3500 outbound
#
interface Vlan-interface88
ip address 192.168.88.1 255.255.255.0
packet-filter 3500 outbound
packet-filter 3500 inbound
#
interface Vlan-interface200
ip address 192.168.200.1 255.255.255.0
packet-filter 3500 inbound
packet-filter 3500 outbound
#
interface Vlan-interface201
ip address 192.168.201.1 255.255.255.0
packet-filter 3500 outbound
packet-filter 3500 inbound
#
interface Vlan-interfac
暂无评论