網(wǎng)絡(luò)建設(shè)項(xiàng)目竣工文檔

/中國(guó)核工業(yè)其次二建設(shè)公司網(wǎng)絡(luò)系統(tǒng)建設(shè)項(xiàng)目竣工文檔沈陽(yáng)賽莫網(wǎng)絡(luò)工程有限公司2013年11月

書目前言 4一、網(wǎng)絡(luò)設(shè)備的安裝配置文檔 51.VLAN及IP地址支配 52.網(wǎng)絡(luò)設(shè)備管理IP 53.公網(wǎng)IP地址支配 64.現(xiàn)網(wǎng)絡(luò)設(shè)備連接圖 75.后期規(guī)劃網(wǎng)絡(luò)拓?fù)鋱D 8二、網(wǎng)絡(luò)設(shè)備的調(diào)試及叮囑 91.核心交換機(jī)叮囑: 91.1遠(yuǎn)程登陸交換機(jī)： 9（1）創(chuàng)建DOS界面 9（2）遠(yuǎn)程登入叮囑： 91.2．運(yùn)用displaycur查看配置 101．3交換機(jī)配置叮囑 11(1)創(chuàng)建vlan 11(2)將端口劃入Vlan 11(3)變更交換機(jī)名稱 11(4)指定VLANInterfaceIP地址 112.接入交換機(jī)叮囑 122.1交換機(jī)遠(yuǎn)程登入: 12（1）創(chuàng)建DOS界面 12（2）遠(yuǎn)程登入叮囑： 122.2運(yùn)用Display查看配置 142．3交換機(jī)配置叮囑 173．深信服防火墻登陸及配置 18(1)登陸防火墻 18(2)查看及修改物理端口 18(3)查看及創(chuàng)建路由 19(4)VPN建立 204．上網(wǎng)行為管理 21(1)登陸設(shè)備 21(2)查看及創(chuàng)建物理端口IP地址 21(3)組和用戶建立 24(4)流量帶寬限制 265．1H3C-1配置： 295．2H3C-2配置： 335．3H3C-3配置： 375．4H3C-4配置： 405．5H3C-5配置： 445．6H3C-6配置： 485．7H3C-7配置： 525．9H3C-9配置： 605．10H3C-10配置： 635．11H3C-11配置： 675．10H3C-10配置： 71核心交換機(jī)配置： 78前言沈陽(yáng)賽莫網(wǎng)絡(luò)工程有限公司依據(jù)《中國(guó)核工業(yè)其次二建設(shè)公司網(wǎng)絡(luò)系統(tǒng)建設(shè)項(xiàng)目設(shè)計(jì)方案》及中國(guó)核工業(yè)其次二建設(shè)公司網(wǎng)絡(luò)系統(tǒng)建設(shè)項(xiàng)目的實(shí)際需求，對(duì)網(wǎng)絡(luò)系統(tǒng)進(jìn)行集成建設(shè)。通過(guò)項(xiàng)目的實(shí)施，網(wǎng)絡(luò)設(shè)備方面完成了上網(wǎng)行為管理、防火墻核心交換機(jī)、接入交換機(jī)、服務(wù)器等網(wǎng)絡(luò)設(shè)備的安裝調(diào)試；，公司內(nèi)部相互連接和連接Internet，并按需求安裝VPN。下面，對(duì)項(xiàng)目實(shí)施中的相關(guān)文檔進(jìn)行整理總結(jié)。

一、網(wǎng)絡(luò)設(shè)備的安裝配置文檔1.VLAN及IP地址支配VLANIDVLAN名稱VLANIP地址段子網(wǎng)掩碼備注11設(shè)備管理網(wǎng)段210.0服務(wù)器辦公320辦公430預(yù)留5-2010.20.40.0-10.20.200.0預(yù)留網(wǎng)段2.網(wǎng)絡(luò)設(shè)備管理IP設(shè)備名稱管理IP地址備注AF1120防火墻AC1200上網(wǎng)行為管理H3CS5800核心交換機(jī)H3C-1接入交換機(jī)H3C-210.接入交換機(jī)H3C-310.接入交換機(jī)H3C-410.接入交換機(jī)H3C-5接入交換機(jī)H3C-6接入交換機(jī)H3C-7接入交換機(jī)H3C-8接入交換機(jī)H3C-9接入交換機(jī)H3C-10接入交換機(jī)H3C-11接入交換機(jī)H3C-12接入交換機(jī)H3C-13接入交換機(jī)3.公網(wǎng)IP地址支配3.1互聯(lián)IP地址:由電信運(yùn)營(yíng)商支配地址為:/255.255.255.252為互連IP地址,設(shè)置在深信服AF1120防火墻設(shè)備外網(wǎng)口處.(如圖):3.2業(yè)務(wù)IP地址可運(yùn)用業(yè)務(wù)IP地址段為:10.20.*.*-10.20.*.*。4.現(xiàn)網(wǎng)絡(luò)設(shè)備連接圖

5.后期規(guī)劃網(wǎng)絡(luò)拓?fù)鋱D二、網(wǎng)絡(luò)設(shè)備的調(diào)試及叮囑1.核心交換機(jī)叮囑:1.1遠(yuǎn)程登陸交換機(jī)：（1）創(chuàng)建DOS界面在WINDOWS操作系統(tǒng)，起先菜單→運(yùn)行（見圖1）→提示框內(nèi)輸入cmd回車（見圖2）彈出DOS界面（見圖3）后可以輸入叮囑操作 圖1 圖2 圖3（2）遠(yuǎn)程登入叮囑：登陸成功后會(huì)提示輸入密碼,輸入密碼時(shí)不會(huì)顯示任何內(nèi)容，輸入完成后按回車鍵即可生效。登陸交換機(jī)后：提示符為＜S5800＞”需輸入：sys回車進(jìn)入用戶模式，提示符為：【S5800】后可以運(yùn)用叮囑進(jìn)行操作1.2．運(yùn)用displaycur查看配置(1)[s5800]displaycur查看當(dāng)前交換機(jī)的配置例：以下為輸入叮囑后的部分輸出，不是完整輸出！只為更便利的介紹顯示內(nèi)容，具體輸入見附件，交換機(jī)配置備份。interfaceGigabitEthernet1/0/1………………交換機(jī)千兆以太網(wǎng)第1口portlink-modebridge……….接口模式為bridgeportlink-typetrunk………….接口方式為trunkporttrunkpermitvlanall……允許trunk通過(guò)全部VLANinterfaceVlan-interface10………………….進(jìn)入交換機(jī)vlan10…..該VLAN的IP地址(2)S5800displayvlan；查看vlan配置信息disvlanTotal10VLANexist(s).ThefollowingVLANsexist:1(default),5,10,15,20,30,40,50,60,70,………….該交換機(jī)已經(jīng)建立哪些vlanDisvlan1……….查看具體某個(gè)vlanVLANID:1VLANType:staticRouteInterface:configuredIPAddress:10.0.0.3Description:VLAN0001Name:VLAN0001TaggedPorts:noneUntaggedPorts:……該vlan包含的端口Bridge-Aggregation1GigabitEthernet2/0/1GigabitEthernet2/0/2GigabitEthernet2/0/3GigabitEthernet2/0/4GigabitEthernet2/0/5GigabitEthernet2/0/6GigabitEthernet2/0/7GigabitEthernet2/0/8GigabitEthernet2/0/9GigabitEthernet2/0/10GigabitEthernet2/0/11GigabitEthernet2/0/12GigabitEthernet2/0/13GigabitEthernet2/0/14GigabitEthernet2/0/15GigabitEthernet2/0/16GigabitEthernet2/0/17GigabitEthernet2/0/18GigabitEthernet2/0/19GigabitEthernet2/0/20GigabitEthernet2/0/21GigabitEthernet2/0/22GigabitEthernet2/0/23GigabitEthernet2/0/24GigabitEthernet2/0/25GigabitEthernet2/0/26GigabitEthernet2/0/27GigabitEthernet2/0/28GigabitEthernet2/0/29GigabitEthernet2/0/30GigabitEthernet2/0/31GigabitEthernet2/0/32GigabitEthernet3/0/1GigabitEthernet3/0/2GigabitEthernet3/0/3GigabitEthernet3/0/4GigabitEthernet3/0/5GigabitEthernet3/0/6GigabitEthernet3/0/7GigabitEthernet3/0/8GigabitEthernet3/0/9GigabitEthernet3/0/10GigabitEthernet3/0/17GigabitEthernet3/0/18GigabitEthernet3/0/19GigabitEthernet3/0/201．3交換機(jī)配置叮囑(1)創(chuàng)建vlan<S5800>sys………….進(jìn)入用戶模式[S5800]vlan10……………………..建立vlan10(2)將端口劃入Vlan[S5800]vlan10[S5800-S-vlan10]portg1/0/1tog1/0/24……….把1到24口劃入該vlan(3)變更交換機(jī)名稱<H3C>sys[H3C]sysnameS5800……………..定義交換機(jī)名稱[S5800](4)指定VLANInterfaceIP地址[S5800]interfaceVlan-interface30…………..進(jìn)入vlan30[S5800……更改VLANIP地址

2.接入交換機(jī)叮囑2.1交換機(jī)遠(yuǎn)程登入:（1）創(chuàng)建DOS界面在WINDOWS操作系統(tǒng)，起先菜單→運(yùn)行（見圖1）→提示框內(nèi)輸入cmd回車（見圖2）彈出DOS界面（見圖3）后可以輸入叮囑操作 圖1 圖2 圖3（2）遠(yuǎn)程登入叮囑：在DOS窗口下輸入：telnet空格設(shè)備管理IP地址，回車。如下圖：登陸成功后會(huì)提示輸入密碼,輸入密碼時(shí)不會(huì)顯示任何內(nèi)容，輸入完成后按回車鍵即可生效。如下圖：登陸交換機(jī)后：提示符為“<H3C-1＞”需輸入：super回車后提示輸入密碼,登陸后進(jìn)入管理模式并提示擁有3級(jí)權(quán)限、可以全部配置叮囑。如需具體配置交換機(jī)須要輸入system-view進(jìn)入配置模式，提示符變?yōu)閇H3C-1]后才可配置交換機(jī)如圖:

2.2運(yùn)用Display查看配置(1)[H3C-1]displaycurrent-configuration查看交換機(jī)配置：例：以下為輸入叮囑后的部分輸出，不是完整輸出！只為更便利的介紹顯示內(nèi)容，具體輸入見附件，交換機(jī)配置備份。sysnameH3C-1……………交換機(jī)名稱#vlan1……………………VLANID號(hào)nameFuWuQi……………VLAN名稱#interfaceVlan-interface2…………………VLAN2（管理VLAN）………………VLAN2地址（管理地址）#interfaceEthernet1/0/1………………物理接口ID號(hào)（Ethernet1/0/1）portaccessvlan23…………端口歸屬和VLAN23loopback-detectionenable…………………環(huán)路檢測(cè)打開#interfaceGigabitEthernet1/1/1……物理ID號(hào)（GIgabiEthernet1/1/1）portlink-typetrunk……………………端口類型為trunk(中繼模式)porttrunkpermitvlanall…………………允許全部VLAN通過(guò)descriptionConnet-to-HX-4506E-1……描述為連接到HX-4506E-1#management-vlan2………………規(guī)定交換機(jī)管理VLAN為VLAN2#iproute-static0.0.0.00.0.0.010.1.2.254preference60…交換機(jī)默認(rèn)路由指像網(wǎng)關(guān)#user-interfacevty04………………遠(yuǎn)程連接用戶書目（0-4為數(shù)量）setauthenticationpasswordsimple********………………認(rèn)證模式為密碼認(rèn)證，密碼為：*********(2)[H3C-1]displayvlanall查看VLAN信息及端口所歸屬VLAN信息VLANID:1VLANType:staticRouteInterface:notconfiguredDescription:VLAN0001Name:FuWuQi、TaggedPorts:none、UntaggedPorts:、GigabitEthernet1/1/1GigabitEthernet1/1/2GigabitEthernet1/2/1GigabitEthernet1/2/2#VLANID:2VLANType:staticRouteInterface:configuredDescription:VLAN0002Name:SheBeiGuanLiTaggedPorts:GigabitEthernet1/1/1GigabitEthernet1/1/2UntaggedPorts:none(3)[H3C-1]displaybriefinterfaceEthernet查看物理接口狀態(tài)<H3C-1>displaybriefinterfaceEthernetInterface:Eth-EthernetGE-GigabitEthernetTENGE-tenGigabitEthernetLoop-LoopBackVlan-Vlan-interfaceCas-CascadeSpeed/Duplex:A-auto-negotiationInterfaceLinkSpeedDuplexTypePVIDDescriptionEth1/0/1DOWNAAaccess23Eth1/0/2DOWNAAaccess23Eth1/0/3DOWNAAaccess23Eth1/0/4DOWNAAaccess23Eth1/0/5DOWNAAaccess23Eth1/0/6DOWNAAaccess23Eth1/0/7DOWNAAaccess23Eth1/0/8DOWNAAaccess23Eth1/0/9DOWNAAaccess23Eth1/0/10DOWNAAaccess23Eth1/0/11DOWNAAaccess23Eth1/0/12DOWNAAaccess23Eth1/0/13DOWNAAaccess23Eth1/0/14DOWNAAaccess23Eth1/0/15DOWNAAaccess23Eth1/0/16DOWNAAaccess23Eth1/0/17DOWNAAaccess23Eth1/0/18DOWNAAaccess23Eth1/0/19DOWNAAaccess23Eth1/0/20UPA100MAfullaccess23Eth1/0/21DOWNAAaccess23Eth1/0/22UPA100MAfullaccess23Eth1/0/23DOWNAAaccess23Eth1/0/24UPA100MAfullaccess23Eth1/0/25DOWNAAaccess23Eth1/0/26DOWNAAaccess23Eth1/0/27DOWNAAaccess23Eth1/0/28DOWNAAaccess23Eth1/0/29DOWNAAaccess23Eth1/0/30DOWNAAaccess23Eth1/0/31DOWNAAaccess23Eth1/0/32DOWNAAaccess23Eth1/0/33DOWNAAaccess23Eth1/0/34DOWNAAaccess23Eth1/0/35DOWNAAaccess23Eth1/0/36DOWNAAaccess23Eth1/0/37DOWNAAaccess23Eth1/0/38DOWNAAaccess23Eth1/0/39DOWNAAaccess23Eth1/0/40DOWNAAaccess23Eth1/0/41DOWNAAaccess23Eth1/0/42DOWNAAaccess23Eth1/0/43DOWNAAaccess23Eth1/0/44DOWNAAaccess23Eth1/0/45DOWNAAaccess23Eth1/0/46DOWNAAaccess23Eth1/0/47DOWNAAaccess23Eth1/0/48DOWNAAaccess232．3交換機(jī)配置叮囑(1)創(chuàng)建vlan<H3C-1>super<H3C-1>system-viewSystemView:returntoUserViewwithCtrl+Z.[H3C-1]vlan10[H3C-1-vlan10][H3C-1-vlan10]quit[H3C-1]saveTheconfigurationwillbewrittentothedevice.Areyousure?[Y/N]yPleaseinputthefilename(*.cfg)(Toleavetheexistingfilenameunchangedpresstheenterkey):Nowsavingcurrentconfigurationtothedevice.Savingconfiguration.PleasewaitUnit1saveconfigurationflash:/config.cfgsuccessfully[H3C-1]%Apr1403:20:19:1042000H3C-1CFM/3/CFM_LOG:-1-Unit1savedconfigurationsuccessfully.(2)將端口劃入Vlan[H3C-1]vlan23[H3C-1-vlan23]portEthernet1/0/48[H3C-1]save(3)變更交換機(jī)名稱[H3C-1]sysnameH3C-1[H3C-1]save

3．深信服防火墻登陸及配置(1)登陸防火墻如下圖：在閱讀器地址欄內(nèi)輸入后出現(xiàn)登陸界面輸入用戶名密碼后點(diǎn)擊”登錄”登陸到防火墻主頁(yè)(2)查看及修改物理端口在防火墻主頁(yè)面內(nèi)點(diǎn)擊網(wǎng)絡(luò)配置→接口/區(qū)域可以看到全部物理。如下圖：需看具體點(diǎn)擊“具體接口”查看具體內(nèi)容。如下圖（比如點(diǎn)擊ETH1）(3)查看及創(chuàng)建路由在左側(cè)點(diǎn)擊“網(wǎng)絡(luò)配置”→“路由”→“靜態(tài)路由”查看或修改目的路由(4)VPN建立點(diǎn)擊左側(cè)“VPN”“連接管理”“新增”可建立新的VPN隧道如下圖：點(diǎn)擊“本地子網(wǎng)列表”將內(nèi)網(wǎng)網(wǎng)段添加到VPN子網(wǎng)。如下圖：4．上網(wǎng)行為管理(1)登陸設(shè)備在閱讀器地址欄內(nèi)輸入IP地址：10.后出現(xiàn)用戶、密碼登陸框輸入后可進(jìn)入界面。如下圖：登陸后主界面如下圖：(2)查看及創(chuàng)建物理端口IP地址“網(wǎng)絡(luò)配置”→“網(wǎng)口配置”如下圖：進(jìn)入界面后如下圖可查看IP地址及所在物理端口：點(diǎn)擊“網(wǎng)絡(luò)配置”→“部署模式”來(lái)配置設(shè)備。如下圖：點(diǎn)擊“起先配置”選擇部署模式點(diǎn)擊下一步，本設(shè)備應(yīng)選擇網(wǎng)橋模式部署：選擇網(wǎng)橋模式，本設(shè)備為多網(wǎng)橋：在此頁(yè)面選擇網(wǎng)橋接口，可隨意選擇，建議選擇ETH2及ETH0作為網(wǎng)橋接口，此接口也為默認(rèn)接口點(diǎn)擊下一步配置網(wǎng)橋信息：完成設(shè)備部署：點(diǎn)擊提交則設(shè)備重啟配置生效。(3)組和用戶建立點(diǎn)擊“用戶和策略管理”點(diǎn)擊“上網(wǎng)策略”→“新增”建立上網(wǎng)策略。如下圖：做行為管理點(diǎn)擊上網(wǎng)權(quán)限策略、做審計(jì)點(diǎn)擊上網(wǎng)審計(jì)策略。如下圖上網(wǎng)權(quán)限策略點(diǎn)擊新增在右側(cè)選擇相對(duì)應(yīng)用和時(shí)間段上網(wǎng)設(shè)計(jì)策略點(diǎn)擊新增點(diǎn)擊添加選擇須要審計(jì)的項(xiàng)目?jī)煞N策略建立完成均有選擇運(yùn)用組及用戶選項(xiàng)來(lái)依據(jù)需求對(duì)相應(yīng)組及用戶下發(fā)策略。(4)流量貸款限制點(diǎn)擊“流量管理”→“線路帶寬配置”設(shè)置總帶寬點(diǎn)擊“通道配置”→“新增一級(jí)通道”來(lái)做流量限制。如下圖：點(diǎn)擊左側(cè)“通道運(yùn)用范圍”選擇運(yùn)用的組、用戶及應(yīng)用：5．1H3C-1配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．2H3C-2配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．3H3C-3配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．4H3C-4配置：<H3C>sys#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．5H3C-5配置：<H3C>discu#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/18portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/19portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/20portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/21portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/22portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/23portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/24portaccessvlan20loopback-detectionenable#interfaceGigabitEthernet1/1/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/1/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceGigabitEthernet1/2/1portlink-typetrunkporttrunkpermitvlanall#interfaceGigabitEthernet1/2/2portlink-typetrunkporttrunkpermitvlanallshutdown#interfaceNULL0#iproute-static0.0.0.00.0.0.010.0.0.3preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return5．6H3C-6配置：<H3C>discu#sysnameH3C#loopback-detectionenable#radiusschemesystem#domainsystem#local-useradminpasswordsimpleadminservice-typetelnetterminallevel3#vlan1to200#interfaceVlan-interface1#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/2portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/3portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/4portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/5portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/6portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/7portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/8portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/9portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/10portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/11portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/12portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/13portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/14portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/15portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/16portaccessvlan20loopback-detectionenable#interfaceEthernet1/0/17portaccessvlan20loopback-detecti