H3C設(shè)備組網(wǎng)詳細(xì)配置步驟

1、設(shè)備名稱產(chǎn)品型號數(shù)量配置單價價格核心路由器H3CMSR20-2012x100MWAN接口60006000核心三層交換機(jī)H3CS3600-28TP-SI124x100M+2x10/100/100M50005000核心二層交換機(jī)H3CS3100-26C-SI124x10/100M30003000浪潮服務(wù)器NF190D22E5405/12M/2GDDR2/73GSAS/1000M*2/單電源2003040060客戶機(jī)浪潮日升S30021M/1G/160GSATA/集成顯卡/17”純平37007400網(wǎng)絡(luò)拓樸:hiternet1231.1釧DNS臨B岷器MAILFTPEC/1Il19?.1ST,0,7

2、Z74S3600-26TP-SIVian4服務(wù)網(wǎng)既19216840PI美:192.168A1t0.2Vian3工程留網(wǎng)段：1921g8J0網(wǎng)美:19Z1.3,1二二E02tosEU/9Vian1網(wǎng)管IM段：19216810同美>S3IJD-2AC-SIVian2市蜻網(wǎng)段；1S21682.0削美:1921682110. 組網(wǎng)需求：利用端口捎綁技木實(shí)現(xiàn)高速上有鏈踏利用GVRPS現(xiàn)vlM信息動態(tài)學(xué)習(xí)利用三層交換機(jī)實(shí)現(xiàn)vlan間通訊實(shí)現(xiàn)三層交換機(jī)和路由器互述W通利用ACL限制Vian2訪問Vian3設(shè)置三層交換機(jī)的DHCP嘴多器功能7設(shè)置STP,實(shí)現(xiàn)防止廣描風(fēng)暴功能路由器上

3、做NAT*現(xiàn)內(nèi)部土機(jī)上網(wǎng)發(fā)布雁務(wù)器實(shí)現(xiàn)外網(wǎng)用戶訪問發(fā)布地址：91234J.2T123.1,1.3實(shí)現(xiàn)網(wǎng)絡(luò)設(shè)備遠(yuǎn)程telnet管理實(shí)現(xiàn)網(wǎng)培諼蓄的安全設(shè)詈配置步驟：1.端口設(shè)置及端口捆綁在3L和2L上設(shè)置以下命令：（在三層交換機(jī)與二層交換機(jī)上配置）interfaceEthernet0/2toEthernet0/3speed100duplexfullportlink-typetrunkporttrunkpermitvlanall#link-aggregationEthernet0/2toEthernet0/3both2.GVRP配置在3L上和2L上設(shè)置system-view#gvrp/設(shè)備開啟gvr

4、p功能#interfaceethernet0/2toethernet0/3gvrp/在trunk端口上開啟gvrp3.VLAN設(shè)置在3L上設(shè)置Vlan2市場部#Vlan3工程部#Vlan4服務(wù)器在2L上設(shè)置interfaceEthernet0/8Portaccessvlan3#interfaceEthernet0/9Portaccessvlan2#/3L上設(shè)置端口加服務(wù)器vlanPortaccessvlan44.三層交換實(shí)現(xiàn)Vlan互通在3L上設(shè)置interfacevlan-interfacel/網(wǎng)管Vlanipaddressundoshutdown#interfacevlan-interfa

5、ce2/市場Vlanipaddressundoshutdown#interfacevlan-interface3/工程vlanipaddressundoshutdown#interfacevlan-interface4/服務(wù)器vlanipaddressundoshutdown5.三層交換機(jī)和路由器互通在3L上設(shè)置Interfacevlan-interface100IpaddressUndoshutdown#Iproute-static指向路由器的默認(rèn)路由在路由器上設(shè)置InterfaceEthernet0/0IpaddressUndoshutdown#Iproute-static/超網(wǎng)路由，指向

6、所有vlan的回程路由#Iproute-static指向ISP的默認(rèn)路由器6.ACL限制vlan2和vlan3互訪在三層交換機(jī)上設(shè)置aclnumber3000rule0denyipsourcedestinationrulelpermitip在vlan2的三層接口上設(shè)置Interfacevlan-interface2packet-filterinboundip-group30007.三層交換機(jī)做DHCP服務(wù)器在3L上設(shè)置dhcpserverip-poolvlan2networkmaskgateway-listdns-listdhcpserverforbidden-ip#dhcpserverip-

7、poolvlan3networkmaskgateway-listdns-listdhcpserverforbidden-ip在3L的vlan2和vlan3三層接口上設(shè)置interfacevlan-interface2dhcpselectglobal#interfacevlan-interface3dhcpselectglobal8.STP設(shè)置在3L上設(shè)置stprootprimary#setroot-protenction/在指定端口啟用根保護(hù)功能（根網(wǎng)橋上所有端口都是指定端口）在2L上設(shè)置stpenable#interfaceethernet0/1toEthernet0/24stpdisabl

8、e/在交換機(jī)連PC端口關(guān)閉stp功能9.路由器做NAT在路由器上設(shè)置aclnumber2000/配置允許進(jìn)行NAT轉(zhuǎn)換的內(nèi)網(wǎng)地址段/rule0permitsourcerule1deny#interfaceEthernet0/1/外網(wǎng)接口/ipaddressnatoutbound2000#interfaceEthernet0/0ipaddress內(nèi)網(wǎng)網(wǎng)關(guān)/#10.發(fā)布內(nèi)網(wǎng)服務(wù)器在路由器上設(shè)置natserverprotocoltcpglobalinsidenatserverprotocoltcpglobalinside11.網(wǎng)絡(luò)設(shè)置telnet設(shè)置在三層交換機(jī)和路由器上設(shè)置telnetuser-i

9、nterfacevty0authentication-modepasswordsetauthenticationpasswordsimplely-benetuserprivilegelevel3protocolinboundtelnetidle-timeout6在2L上設(shè)置telnet和管理ip地址Interfacevlan-interfacelIpaddressUndoshutdown#user-interfacevty0authentication-modepasswordsetauthenticationpasswordsimplely-benetuserprivilegelevel3protocolinboundtelnetidle-timeout612.網(wǎng)絡(luò)設(shè)備安全設(shè)置關(guān)閉沒有使用的端口InterfaceEthernet0/10toEthernet0/24Undoshutdwon設(shè)置console口令user-interfaceaux0authentication-modepasswordsetauthenticationpasswordsimplely-benetuserprivilegelevel3idle-