华三S6800-54QF交换机

[H-HGA6L1-ECC-DS01]qu <H-HGA6L1-ECC-DS01>dis cu # version 7.1.070, Release 6710 # sysname H-HGA6L1-ECC-DS01 # clock timezone BJ add 08:00:00 # ip vpn-instance Keepalive # address-family ipv4 # parity-error consistency-check log enable parity-error unrecoverable log enable parity-error unrecoverable reboot # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # ip unreachables enable ip ttl-expires enable # lldp global enable # system-working-mode standard hardware-resource switch-mode 0 hardware-resource routing-mode ipv6-64 hardware-resource vxlan l2gw password-recovery enable # vlan 1 # vlan 3000 description ECC-YeWu # vlan 4000 description MGMT # stp bpdu-protection stp global enable # interface Bridge-Aggregation1 description TO H-HGA6L1-ECC-AS01:BAGG101 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 3000 4000 link-aggregation mode dynamic port m-lag group 1 # interface Bridge-Aggregation99 description Peerlink port link-type trunk port trunk permit vlan all link-aggregation mode dynamic port m-lag peer-link 1 undo mac-address static source-check enable # interface Route-Aggregation101 description TO H-HGA6L1-ECC-CS01:eth-trunk1 ip address 216.110.26.2 255.255.255.252 link-aggregation mode dynamic packet-filter 2090 inbound ipv6 address 2402:93C0:10A0:EE1A::1/127 # interface Route-Aggregation102 description TO H-HGA6L1-ECC-CS02:eth-trunk1 ip address 216.110.26.10 255.255.255.252 link-aggregation mode dynamic packet-filter 2090 inbound ipv6 address 2402:93C0:10A0:EE1A::5/127 # interface NULL0 # interface Vlan-interface1 dhcp client identifier ascii 9820447e5f4c-VLAN0001 # interface Vlan-interface3000 description ECC-YeWu ip address 21.252.1.1 255.255.255.0 # interface Vlan-interface4000 description MGMT ip address 21.252.63.1 255.255.255.0 # interface FortyGigE1/0/49 port link-mode bridge shutdown # interface FortyGigE1/0/50 port link-mode bridge shutdown # interface FortyGigE1/0/51 port link-mode bridge shutdown # interface FortyGigE1/0/52 port link-mode bridge shutdown # interface FortyGigE1/0/53 port link-mode bridge description TO H-HGA6L1-ECC-DS02:HGE1/0/54Peer-link port link-type trunk port trunk permit vlan all port link-aggregation group 99 # interface FortyGigE1/0/54 port link-mode bridge description TO H-HGA6L1-ECC-DS01:HGE1/0/54Peer-link port link-type trunk port trunk permit vlan all port link-aggregation group 99 # interface M-GigabitEthernet0/0/0 dhcp client identifier hex 029820447e5f4c # interface M-GigabitEthernet0/0/1 dhcp client identifier hex 029820447e5f4c # interface Ten-GigabitEthernet1/0/44 port link-mode route description TO H-HGA6L1-ECC-CS01:TGE1/0/1 port link-aggregation group 101 # interface Ten-GigabitEthernet1/0/45 port link-mode route description TO H-HGA6L1-ECC-CS01:TGE1/0/2 port link-aggregation group 101 # interface Ten-GigabitEthernet1/0/46 port link-mode route description TO H-HGA6L1-ECC-CS02:TGE1/0/1 port link-aggregation group 102 # interface Ten-GigabitEthernet1/0/47 port link-mode route description TO H-HGA6L1-ECC-CS02:TGE1/0/2 port link-aggregation group 102 # interface Ten-GigabitEthernet1/0/48 port link-mode route description TO H-HGA6L1-ECC-DS02:TGE1/0/48keepalive ip binding vpn-instance Keepalive ip address 172.1.1.1 255.255.255.252 # interface Ten-GigabitEthernet1/0/1 port link-mode bridge description TO H-HGA6L1-ECC-AS01:TGE1/0/49 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 3000 4000 port link-aggregation group 1 # interface Ten-GigabitEthernet1/0/2 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/3 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/4 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/5 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/6 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/7 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/8 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/9 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/10 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/11 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/12 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/13 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/14 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/15 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/16 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/17 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/18 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/19 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/20 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/21 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/22 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/23 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/24 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/25 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/26 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/27 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/28 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/29 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/30 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/31 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/32 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/33 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/34 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/35 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/36 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/37 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/38 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/39 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/40 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/41 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/42 port link-mode bridge shutdown # interface Ten-GigabitEthernet1/0/43 port link-mode bridge shutdown # m-lag mad exclude interface FortyGigE1/0/53 m-lag mad exclude interface FortyGigE1/0/54 m-lag mad exclude interface Ten-GigabitEthernet1/0/48 m-lag mad exclude interface Vlan-interface3000 m-lag mad exclude interface Vlan-interface4000 m-lag restore-delay 180 m-lag role priority 100 m-lag system-mac 8820-447e-6b52 m-lag system-number 1 m-lag system-priority 10 m-lag keepalive ip destination 172.1.1.2 source 172.1.1.1 vpn-instance Keepalive # scheduler logfile size 16 # line class aux user-role network-admin # line class vty user-role network-operator # line aux 0 authentication-mode password user-role network-admin set authentication password hash $h$6$s/cTEzJGwhV65zSO$/mkZ7PfAkwkWVbLLsFSVq0D32T9wXnnkMhjo4IEVBInqDM3EWIV+zfKj9PLx4NPxYZQDubOu3joucdnnA36gWg== idle-timeout 5 0 # line vty 0 63 authentication-mode scheme user-role network-admin user-role network-operator protocol inbound ssh idle-timeout 5 0 command authorization # ip route-static 0.0.0.0 0 216.110.26.1 ip route-static 0.0.0.0 0 216.110.26.9 ipv6 route-static :: 0 2402:93C0:10A0:EE1A:: ipv6 route-static :: 0 2402:93C0:10A0:EE1A::4 # info-center logbuffer size 1024 info-center loghost source Vlan-interface4000 info-center loghost 214.187.41.234 info-center loghost 214.187.41.235 info-center loghost 214.249.55.105 info-center loghost 215.1.93.151 info-center loghost 215.129.91.10 info-center source default console deny info-center source SHELL logbuffer level warning info-center source SSHS logbuffer level notification info-center source default loghost level notification info-center source SHELL loghost deny # snmp-agent snmp-agent local-engineid 800063A2809820447E5F5000000001 snmp-agent community read cipher $c$3$VDf7nZt/pOM0spgsr7qp4bhWUaLoVSDLvAurRdI= acl 2088 snmp-agent sys-info version v2c snmp-agent trap enable arp snmp-agent trap enable nd snmp-agent trap enable radius snmp-agent trap enable stp snmp-agent trap enable syslog snmp-agent trap source Vlan-interface4000 snmp-agent packet max-size 4096 # ssh server enable ssh server acl 2089 # ntp-service enable ntp-service source Vlan-interface4000 ntp-service unicast-server 22.12.75.23 priority # acl basic 2088 description SNMP-ACL rule 5 permit source 21.122.17.0 0.0.0.255 rule 10 permit source 11.2.17.0 0.0.0.255 rule 15 permit source 21.12.2.0 0.0.0.255 rule 20 permit source 11.18.17.0 0.0.0.255 rule 25 permit source 21.1.17.0 0.0.0.255 rule 30 permit source 214.248.55.0 0.0.0.255 rule 35 permit source 214.249.55.0 0.0.0.255 rule 40 permit source 214.187.41.234 0 rule 45 permit source 214.187.41.235 0 rule 50 permit source 214.187.41.238 0 rule 55 permit source 214.187.41.239 0 rule 60 permit source 214.179.21.210 0 rule 65 permit source 214.179.22.237 0 rule 70 permit source 214.179.22.239 0 rule 75 permit source 214.179.42.239 0 rule 80 permit source 215.129.91.0 0.0.0.15 rule 85 permit source 215.1.93.144 0.0.0.15 rule 90 permit source 215.1.93.143 0 rule 95 permit source 215.208.18.0 0.0.0.255 rule 100 permit source 215.80.18.0 0.0.0.255 rule 500 deny # acl basic 2089 description VTY-ACL rule 5 permit source 11.2.16.0 0.0.0.255 rule 10 permit source 11.18.16.0 0.0.0.255 rule 15 permit source 21.122.16.0 0.0.0.255 rule 20 permit source 21.122.50.0 0.0.0.255 rule 25 permit source 21.188.50.0 0.0.0.255 rule 30 permit source 21.12.128.0 0.0.7.255 rule 35 permit source 21.122.132.0 0.0.3.255 rule 40 permit source 21.122.152.0 0.0.7.255 rule 45 permit source 214.187.41.234 0 rule 50 permit source 214.187.41.235 0 rule 55 permit source 214.187.41.238 0 rule 60 permit source 214.187.41.239 0 rule 500 deny # acl basic 2090 description xianzhifangwentiaomu rule 5 permit source 11.2.16.0 0.0.0.255 rule 10 permit source 11.18.16.0 0.0.0.255 rule 15 permit source 21.122.16.0 0.0.0.255 rule 20 permit source 21.122.50.0 0.0.0.255 rule 25 permit source 21.188.50.0 0.0.0.255 rule 30 permit source 21.12.128.0 0.0.7.255 rule 35 permit source 21.122.132.0 0.0.3.255 rule 40 permit source 21.122.152.0 0.0.7.255 rule 45 permit source 214.187.41.234 0 rule 50 permit source 214.187.41.235 0 rule 55 permit source 214.187.41.238 0 rule 60 permit source 214.187.41.239 0 rule 65 permit source 21.122.17.0 0.0.0.255 rule 70 permit source 11.2.17.0 0.0.0.255 rule 75 permit source 21.12.2.0 0.0.0.255 rule 80 permit source 11.18.17.0 0.0.0.255 rule 85 permit source 21.1.17.0 0.0.0.255 rule 90 permit source 214.248.55.0 0.0.0.255 rule 95 permit source 214.249.55.0 0.0.0.255 rule 100 permit source 214.179.21.210 0 rule 105 permit source 214.179.22.237 0 rule 110 permit source 214.179.22.239 0 rule 115 permit source 214.179.42.239 0 rule 120 permit source 215.129.91.0 0.0.0.15 rule 125 permit source 215.1.93.144 0.0.0.15 rule 130 permit source 215.1.93.143 0 rule 135 permit source 215.208.18.0 0.0.0.255 rule 140 permit source 215.80.18.0 0.0.0.255 rule 145 permit source 216.110.26.0 0.0.0.31 rule 150 permit source 21.122.160.0 0.0.15.255 rule 155 permit source 21.12.137.0 0.0.0.255 rule 160 permit source 21.12.152.0 0.0.3.255 rule 165 permit source 21.12.168.0 0.0.0.255 rule 999 deny # header motd %C C ACCESS IS RESTRICTED TO AUTHORISED PERSONNEL ONLY This system is equipped with a security system intended to prevent and record unauthorized access attempts. Unauthorised access or use shall render the user liable to criminal and/or civil prosecution. C% # hwtacacs scheme system primary authentication 11.18.16.133 primary authorization 11.18.16.133 primary accounting 11.18.16.133 secondary authentication 11.2.16.133 secondary authorization 11.2.16.133 secondary accounting 11.2.16.133 key authentication cipher $c$3$DR+ianYb6dOqDDGfy+IQaXgMLaMoFgW7tcWp44Gr key authorization cipher $c$3$agsmCC53mULt8jcWM3HCxhgWRP2xUVmnnw5KTf5P key accounting cipher $c$3$Kw2lS8roJw6OrI8RMPdU+mgX/AasXtchyEiNkIIy user-name-format without-domain nas-ip 21.252.63.1 # radius scheme system user-name-format without-domain # domain system authentication login hwtacacs-scheme system local authorization login hwtacacs-scheme system local accounting login hwtacacs-scheme system local authorization command hwtacacs-scheme system local # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user nccnet class manage password hash $h$6$CtzdSmfta2y39Rcj$6yWwFN1oTk3G1tzzpV6RoAoeiwmSRBbbi5Gd2EIC3jtfZYTHCrEX3GrOQXnehYRlLrb9iUIDDVy1Y0u3XMc0Hw== service-type ssh authorization-attribute user-role network-admin authorization-attribute user-role network-operator # security-enhanced level 2 # ssl renegotiation disable ssl version ssl3.0 disable ssl version tls1.0 disable undo ssl version tls1.1 disable # return <H-HGA6L1-ECC-DS01> <H-HGA6L1-ECC-DS01> <H-HGA6L1-ECC-DS01>sa f Validating file. Please wait... Saved the current configuration to mainboard device successfully.

您好，下面贴评论出来了

ssh user +用户名 service-type stelnet authentication-type password 你缺这个

您好，下面评论贴出来了

您好，这是恢复后的，ACL测试时我放通了环回口地址，vrf只是mlag的keeplive

ssh带源地址吧

ssh user +用户名 service-type stelnet authentication-type password 你缺这个