华为8505核心交换机配置实例
#
config-version S8500-VRP310-R1648P02
#
sysname HUAWEI
#
super password level 3 cipher \!KOB^)1/4OGM;.I_W::-1!!
#
local-server nas-ip 127.0.0.1 key huawei
#
Xbar load-single
#
router id 10.88.183.248
#
router route-limit 128K
router VRF-limit 256
#
vbas deviceid_type bridge_mac
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
vlan-assignment-mode integer
access-limit disable
state active
idle-cut disable
self-service-url disable
domain default enable system
#
local-user fanjinsheng
service-type telnet
level 3
local-user hnwgwh
service-type telnet
level 1
#
stp timer hello 100
stp timer forward-delay 400
stp timer max-age 600
stp instance 0 root primary
stp pathcost-standard dot1t
stp enable
stp config-digest-snooping
#
acl number 2000
rule 10 permit source 10.96.33.0 0.0.0.63
rule 20 permit source 10.88.129.64 0.0.0.63
rule 30 permit source 10.87.58.64 0.0.0.63
rule 40 permit source 10.87.58.213 0
rule 50 permit source 10.87.50.76 0
#
vlan 1
#
vlan 2
description to-[hpta1sw1-F0/15-for-NOKIA-OMC1]
#
vlan 3
description to-[hpta2sw1-F0/14-for-1212]
#
vlan 4
description to-[hpta3sw1-F0/14-for-1213]
#
vlan 5
description to-[hpta4sw2-F0/24-for-1214]
#
vlan 6
description to-[hpta5sw1-F0/19-for-1215]
#
vlan 7
description to-[hpta6sw1-F0/20-for-1216]
#
vlan 8
description to-[hpta7sw1-F0/20-for-1217]
#
vlan 9
description to-[hpta8sw1-F0/24-for-1218]
#
vlan 10
description to-[hpta9sw1-F0/15-for-1219]
#
vlan 11
description to-[hpta10sw1-F0/14-for-12110]
#
vlan 12
description to-[NOKIA-TD-OMC]
#
vlan 13
description to-[HUAWEI-TD-OMC]
#
vlan 40
description to-[I2000]
#
vlan 68
description to-[M2000-1]
#
vlan 69
description to-[M2000-2]
#
vlan 74
description to-[M2000-3]
#
vlan 75
description to-[M2000-4]
#
vlan 76
description to-[M2000-5]
#
vlan 79
description to-[jituan-shujuwangguan]
#
vlan 80
description to-[TD-ZTE]
#
vlan 81
description to[TD-xinyoutong]
#
vlan 82
description to-[TD-YWZLFX-1]
#
vlan 600
description to-[HAWG-HX-HUAWEI40E-1]
#
vlan 601
description to-[HAWG-HXSC-HUAWEI8505-zonghe-2]
#
interface Vlan-interface2
description to-[hpta1sw1-F0/15-for-1211]
ip address 10.87.80.23 255.255.255.192
vrrp vrid 2 virtual-ip 10.87.80.25
vrrp vrid 2 priority 105
vrrp vrid 2 preempt-mode timer delay 10
#
interface Vlan-interface3
description to-[hpta2sw1-F0/14-for-1212]
ip address 10.87.80.71 255.255.255.192
vrrp vrid 3 virtual-ip 10.87.80.70
vrrp vrid 3 priority 105
vrrp vrid 3 preempt-mode timer delay 10
#
interface Vlan-interface4
description to-[hpta3sw1-F0/14
-for-1213]
ip address 10.87.80.151 255.255.255.192
vrrp vrid 4 virtual-ip 10.87.80.150
vrrp vrid 4 priority 105
vrrp vrid 4 preempt-mode timer delay 10
#
interface Vlan-interface5
description to-[hpta4sw2-F0/24-for-1214]
ip address 10.87.80.211 255.255.255.192
vrrp vrid 5 virtual-ip 10.87.80.210
vrrp vrid 5 priority 105
#
interface Vlan-interface6
description to-[hpta5sw1-F0/19-for-1215]
ip address 10.87.81.60 255.255.255.192
vrrp vrid 6 virtual-ip 10.87.81.59
vrrp vrid 6 priority 105
vrrp vrid 6 preempt-mode timer delay 10
#
interface Vlan-interface7
description to-[hpta6sw1-F0/20-for-1216]
ip address 10.87.82.105 255.255.255.192
vrrp vrid 7 virtual-ip 10.87.82.90
vrrp vrid 7 priority 105
vrrp vrid 7 preempt-mode timer delay 10
#
interface Vlan-interface8
description to-[hpta7sw1-F0/20-for-1217]
ip address 10.87.82.26 255.255.255.192
vrrp vrid 8 virtual-ip 10.87.82.28
vrrp vrid 8 priority 105
vrrp vrid 8 preempt-mode timer delay 10
#
interface Vlan-interface9
description to-[hpta8sw1-F0/24-for-1218]
ip address 10.87.82.252 255.255.255.192
vrrp vrid 9 virtual-ip 10.87.82.251
vrrp vrid 9 priority 105
vrrp vrid 9 preempt-mode timer delay 10
#
interface Vlan-interface10
description to-[hpta9sw1-F0/15-for-1219]
ip address 10.87.81.186 255.255.255.192
vrrp vrid 10 virtual-ip 10.87.81.185
vrrp vrid 10 priority 105
vrrp vrid 10 preempt-mode timer delay 10
#
interface Vlan-interface11
description to-[hpta10sw1-F0/14-for-12110]
ip address 10.87.81.253 255.255.255.192
vrrp vrid 11 virtual-ip 10.87.81.252
vrrp vrid 11 priority 105
vrrp vrid 11 preempt-mode timer delay 10
#
interface Vlan-interface12
description to-[NOKIA-TD-OMC]
ip address 10.96.27.170 255.255.255.224
vrrp vrid 12 virtual-ip 10.96.27.161
vrrp vrid 12 priority 105
vrrp vrid 12 preempt-mode timer delay 10
#
interface Vlan-interface13
description to-[HUAWEI-TD-OMC]
ip address 10.96.27.200 255.255.255.224
vrrp vrid 13 virtual-ip 10.96.27.199
vrrp vrid 13 priority 105
vrrp vrid 13 preempt-mode timer delay 10
#
interface Vlan-interface40
description to-[I2000]
ip address 10.87.4.98 255.255.255.240
vrrp vrid 40 virtual-ip 10.87.4.97
vrrp vrid 40 priority 105
#
interface Vlan-interface68
description to-[M2000-1]
ip address 10.87.60.204 255.255.255.240
vrrp vrid 68 virtual-ip 10.87.60.206
vrrp vrid 68 priority 105
vrrp vrid 68 preempt-mode timer delay 10
#
interface Vlan-interface69
description to-[M2000-2]
ip address 10.88.183.137 255.255.255.248
vrrp vrid 69 virtual-ip 10.88.183.139
vrrp vrid 69 priority 105
vrrp vrid 69 preempt-mode timer delay 10
#
interface Vlan-interface74
description to-[M2000-3]
ip address 10.88.183.145 255.255.255.248
vrrp vrid 74 virtual-ip 10.88.183.147
vrrp vrid 74 priority 105
vrrp vrid 74 preempt-mode timer delay 10
#
interface V
lan-interface75
description to-[M2000-4]
ip address 10.96.27.232 255.255.255.224
vrrp vrid 75 virtual-ip 10.96.27.231
vrrp vrid 75 priority 105
vrrp vrid 75 preempt-mode timer delay 10
#
interface Vlan-interface76
description to-[M2000-5]
ip address 10.87.109.65 255.255.255.240
vrrp vrid 76 virtual-ip 10.87.109.67
vrrp vrid 76 priority 105
vrrp vrid 76 preempt-mode timer delay 10
#
interface Vlan-interface79
description to-[jituan-shujuwangguan]
ip address 10.88.183.153 255.255.255.248
vrrp vrid 79 virtual-ip 10.88.183.155
vrrp vrid 79 priority 105
vrrp vrid 79 preempt-mode timer delay 10
#
interface Vlan-interface80
description to-[TD-ZTE]
ip address 10.87.109.81 255.255.255.240
vrrp vrid 80 virtual-ip 10.87.109.83
vrrp vrid 80 priority 105
vrrp vrid 80 preempt-mode timer delay 10
#
interface Vlan-interface81
description to[TD-xinyoutong]
ip address 10.87.109.99 255.255.255.224
vrrp vrid 81 virtual-ip 10.87.109.101
vrrp vrid 81 priority 105
vrrp vrid 81 preempt-mode timer delay 10
#
interface Vlan-interface82
description to-[TD-YWZLFX-1]
ip address 10.97.84.4 255.255.255.224
#
interface Vlan-interface600
description to-[HAWG-HX-HUAWEI40E-1]
ip address 10.88.183.70 255.255.255.252
ospf authentication-mode md5 1 JUV&XBW19TWQ=^Q`MAF4<1!!
#
interface Vlan-interface601
description to-[HAWG-HXSC-HUAWEI8505-zonghe-2]
ip address 10.88.183.109 255.255.255.252
ospf authentication-mode md5 1 JUV&XBW19TWQ=^Q`MAF4<1!!
#
interface Aux0/0/1
flowcontrol normal
async mode interactive
link-protocol ppp
#
interface M-Ethernet0/0/0
#
interface Ethernet3/1/1
description to-[M2000-1-S3026C-E0/22]
port access vlan 68
#
interface Ethernet3/1/2
stp disable
description to-[M2000-2-S3928-1-E1/0/1]
duplex full
speed 100
port access vlan 69
#
interface Ethernet3/1/3
description to-[M2000-3-S928-E1/0/1]
duplex full
speed 100
port access vlan 74
#
interface Ethernet3/1/4
description to-[M2000-4-S3928-E1/0/22]
duplex full
speed 100
port access vlan 75
#
interface Ethernet3/1/5
description to-[ jituan-shujuwangguan-S5624P-2-1/0/21]
duplex full
speed 100
port access vlan 79
#
interface Ethernet3/1/6
description to-[ I2000server10.87.4.107]
port access vlan 40
#
interface Ethernet3/1/7
stp reset-arp enable
stp config-digest-snooping
description to-[ hpta1sw1-F0/15-for-1211]
duplex full
speed 100
port access vlan 2
#
interface Ethernet3/1/8
stp reset-arp enable
stp config-digest-snooping
description to-[ hpta2sw1-F0/14-for-1212]
duplex full
speed 100
port access vlan 3
#
interface Ethernet3/1/9
stp reset-arp enable
stp config-digest-snooping
description to-[hpta3sw1-F0/14-for-1213]
duplex full
speed 100
port access vlan 4
#
interface Ethernet3/1/10
stp reset-arp enable
stp config-digest-snooping
description to-[hpta4sw2-F0/24-for-1214]
port access vlan 5
#
interface Ethernet3/1/11
stp reset-arp enable
stp config-digest-snooping
description to-[hpta5sw1-F0/19-for-1215]
duplex full
speed 100
port access vlan 6
#
interface Ethernet3/1/12
stp reset-arp enable
stp config-digest-snooping
description to-[ hpta6sw1-F0/20-for-1216]
port access vlan 7
#
interface Ethernet3/1/13
stp reset-arp enable
stp config-digest-snooping
description to-[hpta7sw1-F0/20-for-1217]
duplex full
speed 100
port access vlan 8
#
interface Ethernet3/1/14
stp reset-arp enable
stp config-digest-snooping
description to-[hpta8sw1-F0/24-for-1218]
duplex full
speed 100
port access vlan 9
#
interface Ethernet3/1/15
stp reset-arp enable
stp config-digest-snooping
description to-[hpta9sw1-F0/15-for-1219]
duplex full
speed 100
port access vlan 10
#
interface Ethernet3/1/16
stp reset-arp enable
stp config-digest-snooping
description to-[hpta10sw1-F0/14-for-12110]
duplex full
speed 100
port access vlan 11
#
interface Ethernet3/1/17
description to-[NOKIA-TD-OMC-S3928-1-F1/0/22]
duplex full
speed 100
port access vlan 12
#
interface Ethernet3/1/18
description to-[HUAWEI-TD-OMC-S3928-1-F1/0/22]
port access vlan 13
#
interface Ethernet3/1/19
description to-[M2000-5]
duplex full
speed 100
port access vlan 76
#
interface Ethernet3/1/20
description to-[TD-zhiliangfenxi]
#
interface Ethernet3/1/21
description to [TD-xinyoutong]
duplex full
speed 100
port access vlan 81
#
interface Ethernet3/1/22
description to-[TD-ZTE]
duplex full
speed 100
port access vlan 80
#
interface Ethernet3/1/23
description to-[TD-YWZLFX-1]
duplex full
speed 100
port access vlan 82
#
interface Ethernet3/1/24
#
interface Ethernet3/1/25
#
interface Ethernet3/1/26
#
interface Ethernet3/1/27
#
interface Ethernet3/1/28
#
interface Ethernet3/1/29
#
interface Ethernet3/1/30
#
interface Ethernet3/1/31
#
interface Ethernet3/1/32
#
interface Ethernet3/1/33
#
interface Ethernet3/1/34
#
interface Ethernet3/1/35
#
interface Ethernet3/1/36
#
interface Ethernet3/1/37
#
interface Ethernet3/1/38
#
interface Ethernet3/1/39
#
interface Ethernet3/1/40
#
interface Ethernet3/1/41
#
interface Ethernet3/1/42
#
interface Ethernet3/1/43
#
interface Ethernet3/1/44
#
interface Ethernet3/1/45
#
interface Ethernet3/1/46
#
interface Ethernet3/1/47
#
interface Ethernet3/1/48
#
interface GigabitEthernet2/1/1
speed 1000
duplex full
#
interface GigabitEthernet2/1/2
#
interface GigabitEthernet2/1/3
#
interface GigabitEthernet2/1/4
#
interface GigabitEthernet2/2/1
#
interface GigabitEthernet2/2/2
#
interface GigabitEtherne
t2/2/3
#
interface GigabitEthernet2/2/4
#
interface GigabitEthernet2/3/1
#
interface GigabitEthernet2/3/2
#
interface GigabitEthernet2/3/3
description to-[HAWG-HXSC-HUAWEI8505-zonghe-2]-GE 2/3/3
speed 1000
duplex full
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 13 40 68 to 69 74 to 76 79 to 81 601
#
interface GigabitEthernet2/3/4
stp disable
description to-[HAWG-HX-HUAWEI40E-1]-GE 1/0/3
speed 1000
duplex full
port access vlan 600
#
interface NULL0
#
interface LoopBack0
ip address 10.88.183.248 255.255.255.255
#
ospf 102
import-route static type 1 route-policy static
import-route direct type 1 route-policy static
silent-interface Vlan-interface10
silent-interface Vlan-interface11
silent-interface Vlan-interface12
silent-interface Vlan-interface13
silent-interface Vlan-interface2
silent-interface Vlan-interface3
silent-interface Vlan-interface4
silent-interface Vlan-interface40
silent-interface Vlan-interface5
silent-interface Vlan-interface6
silent-interface Vlan-interface68
silent-interface Vlan-interface69
silent-interface Vlan-interface7
silent-interface Vlan-interface74
silent-interface Vlan-interface75
silent-interface Vlan-interface76
silent-interface Vlan-interface79
silent-interface Vlan-interface8
silent-interface Vlan-interface80
silent-interface Vlan-interface81
silent-interface Vlan-interface82
silent-interface Vlan-interface9
area 0.0.0.3
network 10.87.4.96 0.0.0.15
network 10.87.60.192 0.0.0.15
network 10.87.80.0 0.0.0.63
network 10.87.80.64 0.0.0.31
network 10.87.80.128 0.0.0.63
network 10.87.80.192 0.0.0.63
network 10.87.81.0 0.0.0.63
network 10.87.81.128 0.0.0.63
network 10.87.81.192 0.0.0.63
network 10.87.82.0 0.0.0.31
network 10.87.82.64 0.0.0.63
network 10.87.82.192 0.0.0.63
network 10.87.109.64 0.0.0.15
network 10.87.109.80 0.0.0.15
network 10.87.109.96 0.0.0.31
network 10.88.183.68 0.0.0.3
network 10.88.183.108 0.0.0.3
network 10.88.183.136 0.0.0.7
network 10.88.183.144 0.0.0.7
network 10.88.183.152 0.0.0.7
network 10.88.183.248 0.0.0.0
network 10.96.27.160 0.0.0.31
network 10.96.27.192 0.0.0.31
network 10.96.27.224 0.0.0.31
network 10.97.84.0 0.0.0.31
authentication-mode md5
nssa
#
route-policy static permit node 10
if-match ip-prefix static
#
ip route-static 10.87.0.0 255.255.255.224 10.87.80.30 preference 60
ip route-static 10.87.0.32 255.255.255.224 10.87.80.30 preference 60
ip route-static 10.87.0.64 255.255.255.240 10.87.80.30 preference 60
ip route-static 10.87.0.80 255.255.255.240 10.87.80.30 preference 60
ip route-static 10.87.0.96 255.255.255.240 10.87.80.30 preference 60
ip route-static 10.87.0.112 255.255.255.240 10.87.80.157 preference 60
ip route-static 10.87.0.128 255.255.255.224 10.87.80.202 preference 60
ip route-static 10.87.0.160 255.255.255.224 10.87.8
0.202 preference 60
ip route-static 10.87.0.192 255.255.255.224 10.87.81.10 preference 60
ip route-static 10.87.0.224 255.255.255.224 10.87.81.10 preference 60
ip route-static 10.87.0.240 255.255.255.248 10.87.80.202 preference 60
ip route-static 10.87.1.0 255.255.255.224 10.87.80.157 preference 60
ip route-static 10.87.1.32 255.255.255.224 10.87.80.157 preference 60
ip route-static 10.87.1.64 255.255.255.224 10.87.82.17 preference 60
ip route-static 10.87.1.96 255.255.255.224 10.87.82.17 preference 60
ip route-static 10.87.1.128 255.255.255.224 10.87.82.58 preference 60
ip route-static 10.87.1.160 255.255.255.224 10.87.82.58 preference 60
ip route-static 10.87.50.128 255.255.255.128 10.88.183.158 preference 60
ip route-static 10.87.96.128 255.255.255.240 10.87.60.195 preference 60
ip route-static 10.87.96.144 255.255.255.240 10.87.60.193 preference 60
ip route-static 10.87.96.160 255.255.255.240 10.87.60.193 preference 60
ip route-static 10.87.109.0 255.255.255.224 10.88.183.142 preference 60
ip route-static 10.87.109.32 255.255.255.224 10.88.183.150 preference 60
ip route-static 10.87.109.240 255.255.255.240 10.88.183.142 preference 60
ip route-static 10.87.168.0 255.255.255.240 10.87.60.195 preference 60
ip route-static 10.87.168.32 255.255.255.240 10.87.60.193 preference 60
ip route-static 10.87.168.64 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.87.168.80 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.87.168.96 255.255.255.252 10.87.60.197 preference 60
ip route-static 10.88.37.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.88.37.16 255.255.255.248 10.87.60.197 preference 60
ip route-static 10.88.190.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.88.190.32 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.88.190.56 255.255.255.248 10.87.60.197 preference 60
ip route-static 10.88.225.0 255.255.255.240 10.87.60.193 preference 60
ip route-static 10.88.252.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.89.124.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.89.126.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.89.252.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.89.254.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.90.37.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.90.158.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.90.158.32 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.90.158.56 255.255.255.248 10.87.60.197 preference 60
ip route-static 10.90.193.0 255.255.255.240 10.87.60.193 preference 60
ip route-static 10.90.252.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.90.254.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.91.37.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.91.158.0 255.255.255.240 1
0.87.60.197 preference 60
ip route-static 10.91.158.32 255.255.255.248 10.87.60.197 preference 60
ip route-static 10.91.252.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.91.254.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.92.126.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.92.126.32 255.255.255.248 10.87.60.197 preference 60
ip route-static 10.92.252.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.92.254.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.93.92.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.93.94.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.93.124.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.93.188.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.93.190.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.94.94.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.94.124.128 255.255.255.248 10.87.60.193 preference 60
ip route-static 10.94.190.0 255.255.255.240 10.87.60.197 preference 60
ip route-static 10.94.190.32 255.255.255.248 10.87.60.197 preference 60
ip route-static 10.94.254.0 255.255.255.240 10.87.60.197 preference 60
#
ip ip-prefix static index 10 permit 10.87.109.0 24 greater-equal 24 less-equal 32
ip ip-prefix static index 20 permit 10.0.0.0 8 greater-equal 8 less-equal 32
#
snmp-agent
snmp-agent local-engineid 800007DB000FE2B2C8E86877
snmp-agent community read NetMz2006ro
snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 10.87.50.76 params securityname NetMz2006ro v2c
snmp-agent trap enable ldp
snmp-agent trap enable configuration
snmp-agent trap enable system
snmp-agent trap enable standard
snmp-agent trap enable lsp
snmp-agent trap enable protect-switch
snmp-agent trap enable mpls-oam
snmp-agent trap enable pw
snmp-agent trap enable vrrp
snmp-agent trap enable ospf
snmp-agent trap enable bgp
snmp-agent trap enable flash
snmp-agent trap source LoopBack0
#
stp non-flooding
#
user-interface con 0
us------------gL6GI3Ij5Ij5GI3Ij5cH2cH2KM7gL6
Content-Dispositier-interface aux 0
user-interface vty 0 4
acl 2000 inbound
authentication-mode scheme
idle-timeout 5 0
#
return