产品：S5560，5110

组网：核心机房跳到s5560，5560跳线跳到5110两台交换机。5110设置了vlan1，20，80， A交换机5110网络通的， B交换机只有vlan一能通

配置如下： [H3C]dis cu # version 5.20.99, Release 1110 # sysname H3C # domain default enable system # ipv6 # telnet server enable # password-recovery enable # vlan 1 # vlan 20 # vlan 80 # vlan 100 # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$mVESB54gmF8YYddJVPGIujEYFJKIY5LU authorization-attribute level 3 authorization-attribute user-profile level-15 service-type telnet # stp enable # interface NULL0 # interface Vlan-interface100 ip address 192.168.100.19 255.255.255.0 # interface GigabitEthernet1/0/1 # interface GigabitEthernet1/0/2 # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 # interface GigabitEthernet1/0/5 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEthernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 # interface GigabitEthernet1/0/13 # interface GigabitEthernet1/0/14 # interface GigabitEthernet1/0/15 # interface GigabitEthernet1/0/16 # interface GigabitEthernet1/0/17 port access vlan 80 # interface GigabitEthernet1/0/18 port access vlan 80 # interface GigabitEthernet1/0/19 port access vlan 80 # interface GigabitEthernet1/0/20 port access vlan 80 # interface GigabitEthernet1/0/21 port access vlan 80 # interface GigabitEthernet1/0/22 port access vlan 80 # interface GigabitEthernet1/0/23 port access vlan 80 # interface GigabitEthernet1/0/24 port access vlan 80 # interface GigabitEthernet1/0/25 port access vlan 80 # interface GigabitEthernet1/0/26 port access vlan 80 # interface GigabitEthernet1/0/27 port access vlan 80 # interface GigabitEthernet1/0/28 port access vlan 80 # interface GigabitEthernet1/0/29 port access vlan 80 # interface GigabitEthernet1/0/30 port access vlan 80 # interface GigabitEthernet1/0/31 port access vlan 80 # interface GigabitEthernet1/0/32 port access vlan 80 # interface GigabitEthernet1/0/33 port access vlan 20 # interface GigabitEthernet1/0/34 port access vlan 20 # interface GigabitEthernet1/0/35 port access vlan 20 # interface GigabitEthernet1/0/36 port access vlan 20 # interface GigabitEthernet1/0/37 port access vlan 20 # interface GigabitEthernet1/0/38 port access vlan 20 # interface GigabitEthernet1/0/39 port access vlan 20 # interface GigabitEthernet1/0/40 port access vlan 20 # interface GigabitEthernet1/0/41 port access vlan 20 # interface GigabitEthernet1/0/42 port access vlan 20 # interface GigabitEthernet1/0/43 port access vlan 20 # interface GigabitEthernet1/0/44 port access vlan 20 # interface GigabitEthernet1/0/45 port access vlan 20 # interface GigabitEthernet1/0/46 port access vlan 20 # interface GigabitEthernet1/0/47 port access vlan 20 # interface GigabitEthernet1/0/48 port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/49 # interface GigabitEthernet1/0/50 # interface GigabitEthernet1/0/51 # interface GigabitEthernet1/0/52 # ip route-static 0.0.0.0 0.0.0.0 192.168.100.254 # undo info-center enable undo info-center logfile enable # load xml-configuration # load tr069-configuration # user-interface aux 0 user-interface vty 0 4 authentication-mode scheme user-interface vty 5 15 # [s5110]dis cu # version 5.20.99, Release 1109 # sysname s5110 # domain default enable system # ipv6 # telnet server enable # password-recovery enable # vlan 1 # vlan 20 to 21 # vlan 30 # vlan 40 # vlan 70 description new # vlan 80 # vlan 100 description guanli # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$7WxohrHcBWbAjdIb2m7yWpELdzjeE6fIIXmNg7k= authorization-attribute level 3 service-type ssh telnet # stp enable # interface NULL0 # interface Vlan-interface100 ip address 192.168.100.3 255.255.255.0 # interface GigabitEthernet1/0/1 # interface GigabitEthernet1/0/2 # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 # interface GigabitEthernet1/0/5 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEthernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 # interface GigabitEthernet1/0/13 # interface GigabitEthernet1/0/14 # interface GigabitEthernet1/0/15 # interface GigabitEthernet1/0/16 # interface GigabitEthernet1/0/17 port access vlan 20 # interface GigabitEthernet1/0/18 port access vlan 20 # interface GigabitEthernet1/0/19 port access vlan 20 # interface GigabitEthernet1/0/20 port access vlan 20 # interface GigabitEthernet1/0/21 port access vlan 20 # interface GigabitEthernet1/0/22 port access vlan 20 # interface GigabitEthernet1/0/23 port access vlan 20 # interface GigabitEthernet1/0/24 port access vlan 20 # interface GigabitEthernet1/0/25 port access vlan 20 # interface GigabitEthernet1/0/26 port access vlan 20 # interface GigabitEthernet1/0/27 port access vlan 20 # interface GigabitEthernet1/0/28 port access vlan 20 # interface GigabitEthernet1/0/29 port access vlan 20 # interface GigabitEthernet1/0/30 port access vlan 20 # interface GigabitEthernet1/0/31 port access vlan 20 # interface GigabitEthernet1/0/32 port access vlan 20 # interface GigabitEthernet1/0/33 port access vlan 80 # interface GigabitEthernet1/0/34 port access vlan 80 # interface GigabitEthernet1/0/35 port access vlan 80 # interface GigabitEthernet1/0/36 port access vlan 80 # interface GigabitEthernet1/0/37 port access vlan 80 # interface GigabitEthernet1/0/38 port access vlan 80 # interface GigabitEthernet1/0/39 port access vlan 80 # interface GigabitEthernet1/0/40 port access vlan 80 # interface GigabitEthernet1/0/41 port access vlan 80 # interface GigabitEthernet1/0/42 port access vlan 80 # interface GigabitEthernet1/0/43 port access vlan 80 # interface GigabitEthernet1/0/44 port access vlan 80 # interface GigabitEthernet1/0/45 port access vlan 80 # interface GigabitEthernet1/0/46 port access vlan 80 # interface GigabitEthernet1/0/47 port access vlan 80 # interface GigabitEthernet1/0/48 description 连接s5560 port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/49 # interface GigabitEthernet1/0/50 # interface GigabitEthernet1/0/51 # interface GigabitEthernet1/0/52 # ip route-static 0.0.0.0 0.0.0.0 192.168.100.254 # undo info-center enable undo info-center logfile enable # load xml-configuration # load tr069-configuration # user-interface aux 0 authentication-mode password set authentication password cipher $c$3$m6SLLW0SwgXwst8OvBZo712hCJ1FuuCtCllVTB0= user-interface vty 0 4 authentication-mode scheme user privilege level 3 set authentication password cipher $c$3$+Uo5eeUk4FTAo8h8aihWX3cWFatFn41y2h4aCas= protocol inbound telnet user-interface vty 5 15 [S5560]dis cu # version 7.1.045, Release 1109 # sysname S5560 # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # ip ttl-expires enable # lldp global enable # password-recovery enable # vlan 1 description jiaoshi # vlan 10 # vlan 20 description 教室 # vlan 21 description 教室 # vlan 30 # vlan 40 # vlan 50 # vlan 60 # vlan 70 # vlan 80 # vlan 90 # vlan 100 description guanli # vlan 1000 to 1002 # stp global enable # interface NULL0 # interface Vlan-interface1 # `$ interface Vlan-interface100 ip address 192.168.100.1 255.255.255.0 # `0 interface FortyGigE1/0/29 port link-mode bridge # interface FortyGigE1/0/30 port link-m锊e bridge # interface GigabitEthernet1/0/1 port link-mode bridge port link-type tru頺 port trunk permit vlan all # interface GigabitEthernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/3 port link-mode b騣dge port link-type trunk port trunk permit vlan all # port link-mode bridgenet1/0峉℉ī┅ R闗Wぉ┅$銱H悙 port link-type trunk port trunk permit vlan all #(" port link-mode bridgeng篖 萤S℉ī┅ R闗WΙ┅$$HH悙 port link-type trunk port trunk permivlan all # interface GigabitEthernet1/0/6 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/7 port link-mode bridge port link-type trunk port trunk permit vlan all # interfacg怗igabitEthernet1/0/8 port link-mode bridge port link-type trunk port trunk permit vlan all # a intesface GigabitEthernet1/0?9 port link-mode bridge port link-type trunk port trunk permit vlan all #悙 interface GigabitEthernet1/0/10 port link-mode bridge port link-type trunk port trunk permiu vlan all # interface GigabitEthernet1/0/11 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/12 port link-mode britge port link-type trunk port!trunk permit vlan all # interface GigabitEthernet1/0/13 port link-mote bridge port(link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/14 port lynk-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/15 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/16 port link-mode bridge port link-type trunk portrunk permit vlan all # 4! interfice GigabitEthernet1/0/17 port link-mode bridge port link-type trunk port trunk permit vlan all # * - mnterface GigabitEthernet1/0/18 port link-mode bridge port link-type trunk port trunk permit(vlan all # interface GigabitEthernet1/0/19 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/20 port link-mode bridge port access vlan 70 # interface GigabitEthernet1/0/21 pozv link-mode bridge port access vlan 70 # interface GigabitEthernet1/22 port link-mode bridge port access vlan 90 # interface GigabitEthernet1/0/23 port link-mode bridge port access vlan 90 # interface GigabitEthernet1/0/24 pst link-mode bridge port access vlan 90 # interface M-GigabitEthernet0/0/0 # interface M-GigabitEtxernet0/0/1 # interface Ten-GigabitEthernet1/0/25 port link-mode bridge port link-ty餰 trunk port trunk permit vlan all # interface Ten-GigabitEthernet1/0/26 port link-type trunk℉ī┅ R闗Wぉ┅$$HH悙 port trunk permit vlan all # interface Ten-Gigabit舤hernet1/0/27 port link-mode bridge port link-type trunk #port trunk:暽单褋脖吂北5jR詊jjj跎晛jjjjj $$HH悙 interface Ten-GigabitEthernet1/0/28 port link-mode bridge description 连接核心 port link-type trunk port trunk permit vlan all # scheduler logfile syze 16 # line class aux user-role network-admin # 爯 line class vty user-role network-operator # line aux 0 authentication-mode password set authentication password hash $h$6$1BLOLepmYgjuf68b$mlmeArQTiBj/fwZwvYyb/HXTdT/YMYsB/eozBHrIRmUqL/MnAZeB7VKyW0P8ryaUjciyclNgF0hQOngnRwwsQA== # mine vty 0 4 authentication-mode scheme user-role network-operator protocol inbound telnetword hash $h$6$6JTP9jUjGxMyMsum$SySL7AAxEyy3nabX7tPxrvGOSJD1GdqC7tfkX8SPgyF0ina1qPIgySDtx網1輶j U%压)暽蹶j预ī┅ R闗Wぉ┅$$HH悙 # line vty 5 63 user-role network-operator # ip route-static 0.0.0.0 0 192.168.100.254 # undo info-center enable # ! radius scheme system user-name-format without-domain # domain system- # domain default enable system # role爊ame level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # $ role name level-2 description Predefined level-2 role #--- More ----$$HH悙 role name level-3 description Predefined level-3 role # role name level-4 descrirtion Predefined level-4 role # role name level-5 description Predefined level-5 role # role name le籩l-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 !description Predefined lY籝禟LL惞ole # role name level-12 description Predefined level-12 role # r飈e name level-13 description Predefined level-13 role # description Predefined level-14 role # user-group system # local-user4admin class manage password hash $h$6$U/ZytDuqLdIxuvU8$PBqHCKCVdFilt/br2eHS9DFubHhp2sFvZLu55QPrfUUpXeLdm8AlPS5DQAB7moeENKXuX3Z8r7U5Tk4+tpzIZA== servic錕篰竃惍.ZH篩斗et authorization-attribu鬳 user-role level-15 authorization-attribute user-role network-operator