ME60维护手册.docx
- 文档编号:28216511
- 上传时间:2023-07-09
- 格式:DOCX
- 页数:22
- 大小:20.03KB
ME60维护手册.docx
《ME60维护手册.docx》由会员分享,可在线阅读,更多相关《ME60维护手册.docx(22页珍藏版)》请在冰豆网上搜索。
ME60维护手册
BrasME60维护手册
2016年12月
一、设备配置脚本
设备配置较多,仅列出维护相关部分
sysnameJRZK-ME60
radius-servergroupwgyxy
radius-serverauthentication192.168.100.1001812weight0
radius-serveraccounting192.168.100.1001813weight0
radius-servershared-keyhwme60
radius-servernas-ip-address192.168.100.1
radius-serverattributetranslate
undoradius-serveruser-namedomain-included
#
radius-serverauthorization192.168.100.100shared-keyhwme60
#
#
aclnumber6000
rule20permittcpsourceuser-groupportaldestination-porteqwww
rule25permittcpsourceuser-groupportaldestination-porteq8080
rule30permittcpsourceuser-groupportaldestination-porteq801
rule35permittcpsourceuser-groupportaldestination-porteq802
rule40permittcpsourceuser-groupportaldestination-porteq803
rule45permittcpsourceuser-groupportaldestination-porteq804
rule50permittcpsourceuser-groupportaldestination-porteq443
#
aclnumber6001
rule5permitipsourceuser-groupportaldestinationip-address192.168.100.1000
rule10permitipsourceuser-groupportaldestinationip-address127.0.0.10
rule15permitipsourceip-address192.168.100.1000destinationuser-groupportal
rule20permitipsourceip-address127.0.0.10destinationuser-groupportal
rule25permitipsourceip-address10.10.10.00.0.1.255destinationuser-groupportal
rule30permitipsourceuser-groupportaldestinationip-address10.10.10.00.0.1.255
rule35permitipsourceip-address10.19.0.00.0.0.255destinationuser-groupportal
rule40permitipsourceuser-groupportaldestinationip-address10.19.0.00.0.0.255
rule45permitipsourceip-address10.3.1.00.0.0.255destinationuser-groupportal
rule50permitipsourceuser-groupportaldestinationip-address10.3.1.00.0.0.255
rule55permitipsourceip-address202.97.224.680.0.0.1destinationuser-groupportal
rule60permitipsourceuser-groupportaldestinationip-address202.97.224.680.0.0.1
rule65permitipsourceip-address101.7.8.90destinationuser-groupportal
rule70permitipsourceuser-groupportaldestinationip-address101.7.8.90
#
aclnumber6002
rule30permitipsourceuser-groupportaldestinationip-addressany
rule35permitipsourceip-addressanydestinationuser-groupportal
#
#
ippool3jiao_ap_dongbaslocal
gateway10.10.31.1255.255.255.0
section010.10.31.210.10.31.254
excluded-ip-address10.10.31.210.10.31.9
dns-server202.97.224.68202.97.224.69
#
ippool3jiao_ap_xibaslocal
gateway10.10.30.1255.255.255.0
section010.10.30.210.10.30.254
excluded-ip-address10.10.30.210.10.30.9
dns-server202.97.224.68202.97.224.69
#
ippoolguanlibaslocal
gateway10.11.255.254255.255.0.0
section010.11.0.110.11.255.253
excluded-ip-address10.11.0.110.11.255.253
#
ippoolportalbaslocal
gateway10.50.0.1255.255.0.0
section010.50.0.210.50.255.254
excluded-ip-address10.50.100.100
dns-server202.97.224.68202.97.224.69
#
#
aaa
local-userhuaweipasswordirreversible-cipher$1a$:
a(TQ#W /&^#1w;: V4$3Vq6YO$ local-userhuaweiservice-typetelnet local-userhuaweilevel15 local-userhuaweistateblockfail-times3interval5 authentication-schemedefault0 authentication-schemedefault1 authentication-schemedefault authentication-modelocalradius authentication-schemepppoe authentication-modenone authentication-schemeradius # authorization-schemedefault # accounting-schemedefault0 accounting-schemedefault1 accounting-schemepppoe accounting-modenone accounting-schemejrzk accounting-schemeradius accountinginteriminterval10 # domaindefault0 ip-poolqinshi-1 dnsprimary-ip202.97.224.68 dnssecond-ip202.97.224.69 user-groupportal web-server192.168.100.100 web-serverurlhttp: //192.168.100.100/index_3.html web-serverurl-parameter domaindefault1 domaindefault_admin domainportal authentication-schemeradius accounting-schemeradius radius-servergroupwgyxy domainguanli authentication-schemepppoe accounting-schemepppoe ip-poolguanli # interfaceEth-Trunk1 descriptionto-HW-S12708[20G] modeuser-termination load-balancepacket-all # interfaceEth-Trunk1.1 descriptionportal_bohao user-vlan101148qinq21112114 user-vlan101148qinq2141 user-vlan101148qinq2171 user-vlan101148qinq22112213 user-vlan201248qinq2213 user-vlan101148qinq2240 user-vlan201248qinq2240 user-vlan301348qinq2240 user-vlan101148qinq23212324 user-vlan101148qinq2341 user-vlan101148qinq2371 user-vlan101148qinq24212425 user-vlan101148qinq2441 user-vlan101148qinq2471 user-vlan101148qinq25112518 user-vlan101148qinq2520 user-vlan101148qinq2540 user-vlan201248qinq2540 user-vlan101148qinq2542 user-vlan101148qinq2561 user-vlan101148qinq26112614 user-vlan101148qinq2641 user-vlan101148qinq27112713 user-vlan101148qinq27412742 user-vlan101148qinq2810 user-vlan201248qinq2810 user-vlan101148qinq28212822 user-vlan101148qinq2830 user-vlan201248qinq2830 user-vlan101148qinq2840 user-vlan201248qinq2840 user-vlan101148qinq2851 user-vlan101148qinq28612862 user-vlan101148qinq2870 user-vlan201248qinq2870 bas # access-typelayer2-subscriberdefault-domainauthenticationportal authentication-methodweb arp-trigger # # interfaceEth-Trunk1.2 descriptiondevice_management user-vlan2000 user-vlan2000qinq21112114 user-vlan2000qinq2141 user-vlan2000qinq2171 user-vlan2000qinq22112213 user-vlan2000qinq22402243 user-vlan2000qinq23212324 user-vlan2000qinq2341 user-vlan2000qinq2371 user-vlan2000qinq24212425 user-vlan2000qinq2441 user-vlan2000qinq2471 user-vlan2000qinq25112518 user-vlan2000qinq2520 user-vlan2000qinq2540 user-vlan2000qinq2542 user-vlan2000qinq2561 user-vlan2000qinq26112614 user-vlan2000qinq2641 user-vlan2000qinq27112713 user-vlan2000qinq27412742 user-vlan2000qinq2810 user-vlan2000qinq28212822 user-vlan2000qinq2830 user-vlan2000qinq2840 user-vlan2000qinq2851 user-vlan2000qinq28612862 user-vlan2000qinq2870 bas # access-typelayer2-subscriberdefault-domainauthenticationguanli authentication-methodbind arp-proxy ip-trigger arp-trigger 其他子接口可根据子接口描述确定业务! # # interfaceEth-Trunk2 portswitch descriptionto-USG9000-FW[20G] portlink-typetrunk porttrunkallow-passvlan1054000 # interfaceGigabitEthernet1/0/0 undoshutdown eth-trunk1 # interfaceGigabitEthernet1/0/1 undoshutdown eth-trunk1 # interfaceGigabitEthernet1/0/2 undoshutdown eth-trunk2 # interfaceGigabitEthernet1/0/3 undoshutdown eth-trunk2 # interfaceGigabitEthernet1/0/4 descriptionto_powercache undoshutdown ipaddress10.100.99.1255.255.255.0# # interfaceGigabitEthernet1/0/9 negotiationauto descriptionto-H3C12508 undoshutdown ipaddress172.16.6.66255.255.255.0 # # iproute-static0.0.0.00.0.0.0Vlanif4000172.31.0.1descriptionuplink-USG9000-FW iproute-static10.5.0.0255.255.252.0172.28.2.2 iproute-static10.10.1.0255.255.255.0172.28.2.2 iproute-static10.10.2.0255.255.255.0172.28.2.2 iproute-static10.10.3.0255.255.255.0172.28.2.2 iproute-static10.10.4.0255.255.255.0172.28.2.2 iproute-static10.10.5.0255.255.255.0172.28.2.2 iproute-static10.10.6.0255.255.255.0172.28.1.2 iproute-static10.10.7.0255.255.255.0172.28.1.2 iproute-static10.10.8.0255.255.255.0172.28.2.2 iproute-static10.10.9.0255.255.255.0172.28.2.2 iproute-static10.10.11.0255.255.255.0172.28.1.2 iproute-static10.10.12.0255.255.255.0172.28.1.2 iproute-static10.10.13.0255.255.255.0172.28.1.2 iproute-static10.10.14.0255.255.255.0172.28.2.2 iproute-static10.10.15.0255.255.255.0172.28.1.2 iproute-static10.10.16.0255.255.255.0172.28.1.2 iproute-static10.10.17.0255.255.255.0172.28.1.2 iproute-static10.10.18.0255.255.255.0172.28.2.2 iproute-static10.10.19.0255.255.255.0172.28.1.2 iproute-static10.10.20.0255.255.255.0172.28.1.2 iproute-static10.10.21.0255.255.255.0172.28.1.2 iproute-static10.10.32.0255.255.255.0172.28.1.2 iproute-static10.17.0.0255.255.255.0172.28.1.2 iproute-static10.20.0.0255.255.255.0172.28.1.2 iproute-static10.22.0.0255.255.255.0172.28.1.2 iproute-static10.23.0.0255.255.255.0172.28.2.2 iproute-static10.25.25.0255.255.255.0172.28.2.2 iproute-static172.20.1.99255.255.255.255192.168.100.97descriptionto-ATM iproute-static172.20.2.2255.255.255.255192.168.100.97descriptionto-ATM # # static-user10.11.0.25410.11.0.254gateway10.11.255.254interfaceEth-Trunk1.2vlan2000domain-nameguanlidetect static-user10.11.1.1110.11.1.11gateway10.11.255.254interfaceEth-Trunk1.2vlan2000qinq2111domain-nameguanlidetect static-user10.11.1.1210.11.1.12gateway10.11.255.254interfaceEth-Trunk1.2vlan2000qinq2112domain-nameguanlidetect static-user10.11.1.1310.11.1.13gateway10.11.255.254interfaceEth-Trunk1.2vlan2000qinq2113domain-nameguanlidetect static-user10.11.1.1410.11.1.14gateway10.11.255.254interfaceEth-Trunk1.2vlan2000qinq2114domain-nameguanlidetect static-user10.11.1.4110.11.1.41gateway10.11.255.254interfaceEth-Trunk1.2vlan2000qinq2141domain-nameguanlidetect static-user10.11.1.25410.11.1.254gateway10.11.255.254interfaceEth-Trunk1.2vlan2000domain-nameguanlidetect static-user10.11.2.1110.11.2.11gateway10.11.255.254interfaceEth
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- ME60 维护 手册