MSR26-00路由器命令设置

各位大神，我这里有台MSR26-00，具体是这样的，因为公司财务部需要1条专线，而我们公司刚好有2条外线，但是我们公司内部有NAS需要共享文件，如果财务分出去，访问NAS会比较麻烦，于是我的想法是路由接双线，然后在路由上分2个Vlan，非财务部的走192.168.0.0 255.255.255.0网段，财务部走10.0.0.0 255.255.255.0网段，非财务部是VLan1,财务部设置为Vlan 2,然后Vlan 1走1条外线，Vlan 2走另外1条外线，并且设置VLan 1和Vlan 2之间可以互相访问数据，但是由于本人不懂H3C命令的配置方式，就咨询了H3C技术，他给了一段命令我参考，本人之前曾经学过CISCO路由交换机命令的设置，对命令配置还是有点知晓，但是大部分已经交回给老师了，所以想请教下大神们，应该怎么设置路由，并且需要输入那些命令，之前本人配置过的一些命令我也想删了重新配，现在只删了ACL几条规则，不知道怎么删policy-based-route aaa\bbb permit node 5这2条命令，反正现在怎么人都懵逼了，望大神搭救，谢谢

这是我路由现在的状态 version 5.20, Release 2513P21

#

 sysname H3C

#

 clock timezone Beijing add 08:00:00

#

 undo nat alg all

#

 domain default enable system

#

 dns resolve

 dns proxy enable

#

 telnet server enable

#

 dar p2p signature-file flash:/p2p_default.mtd

#

 qos carl 1 destination-ip-address range 192.168.0.121 to 192.168.0.199 per-address shared-bandwidth

#

 password-recovery enable

#

vlan 1

#

vlan 2

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

dhcp server ip-pool vlan1 extended

 network ip range 192.168.0.121 192.168.0.199

 network mask 255.255.255.0

 gateway-list 192.168.0.1

 dns-list 192.168.0.1

#

dhcp server ip-pool vlan2 extended

#

policy-based-route aaa permit node 5

 if-match acl 3100

 apply ip-address next-hop 121.32.137.61

#

policy-based-route bbb permit node 5

 if-match acl 3200

 apply ip-address next-hop 183.6.135.42

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$niKWDKX5i+j5vUmWHpmmSFcv0pXEues4

 authorization-attribute level 3

 service-type telnet

 service-type web

#

cwmp

 undo cwmp enable

#

interface Aux0

 async mode flow

 link-protocol ppp

#

interface Cellular0/0

 async mode protocol

 link-protocol ppp

#

interface NULL0

#

interface Vlan-interface1

 ip address 192.168.0.1 255.255.255.0

 dhcp server apply ip-pool vlan1

 ip flow-ordering internal

#

interface Vlan-interface2

 ip address 10.0.0.1 255.255.255.0

 undo dhcp select server global-pool

 dhcp server apply ip-pool vlan2

 ip policy-based-route aaa

#

interface GigabitEthernet0/0

 port link-mode route

 nat outbound

 shutdown

 ip address 121.32.137.61 255.255.255.0

 dns server 202.96.128.166

 dns server 202.96.134.133

#

interface GigabitEthernet0/1

 port link-mode route

 nat outbound

 nat server 1 protocol tcp global current-interface 9090 inside 192.168.0.218 9090

 nat server 2 protocol tcp global current-interface 3389 inside 192.168.0.218 3389

 nat server 3 protocol tcp global current-interface 5000 inside 192.168.0.252 5000

 mtu 1460

 ip address 183.6.135.42 255.255.255.0

 tcp mss 1360

 qos car inbound carl 1 cir 5000 cbs 18750 ebs 0 green pass red discard

 dns server 202.96.128.86

 dns server 202.96.134.133

 ip flow-ordering external

#

interface GigabitEthernet0/2

 port link-mode bridge

#

interface GigabitEthernet0/3

 port link-mode bridge

#

interface GigabitEthernet0/4

 port link-mode bridge

#

interface GigabitEthernet0/5

 port link-mode bridge

#

interface GigabitEthernet0/6

 port link-mode bridge

#

interface GigabitEthernet0/7

 port link-mode bridge

#

interface GigabitEthernet0/8

 port link-mode bridge

#

interface GigabitEthernet0/9

 port link-mode bridge

#

#

voice-setup

 #

 sip

 #

 sip-server

  #

  call-rule-set

  #

  call-route

 #

 dial-program

 #

 aaa-client

 #

 gk-client

#

 ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/1 183.6.135.41

 ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0 121.32.137.1

#

 dhcp enable

#

 nms primary monitor-interface GigabitEthernet0/0

#

 ip flow-ordering stat-interval 10

#

 load xml-configuration

#

 load tr069-configuration

#

user-interface tty 12

user-interface aux 0

user-interface vty 0 4

 authentication-mode scheme

#

return

===============================================================================

而这是H3C工程师给我的命令参考，我已经把里面的地址改成自己的地址

display current-configuration

sys

acl   num  3100           //匹配0.0.0网段的地址

rule  permit  ip  source 10.0.0.0 255.255.255.0  //匹配0.0.0网段的地址

quit

int e0/0

ip add   121.32.137.61 255.255.255.0

nat  outbound

int e0/1

ip  add 183.6.135.42 255.255.255.248

nat  outbound

quit

policy-based-route aaa permit node 5

if-match  acl  3100

apply ip-address next-hop   121.32.137.61        //让0.0.0段从1口上网

quit

int  vlan  2    

ip  policy-based-route  aaa

ip  route-static  0.0.0.0  0  183.6.135.42                   //其他地址从0口上网

ip  route-static  0.0.0.0  0  121.32.137.61   preference  70       //如果1口down了，则让1口从0口上网