佛山網(wǎng)站建設(shè)的首選,在哪一個(gè)網(wǎng)站上做勞務(wù)合同備案,服裝網(wǎng)站建設(shè)平臺(tái)分析,網(wǎng)站流程圖設(shè)計(jì)工具1、GE0 默認(rèn)是管理口#xff0c;配置管理地址192.168.0.1 并且開了DHCP 2、默認(rèn)賬號(hào)密碼admin 3、最坑的來了#xff0c;要么選擇圖形化配置#xff0c;要么使用命令行#xff08;推薦#xff09;#xff0c;圖形化配置和命令行配置完#xff0c;前后不統(tǒng)一 貼上配置配置管理地址192.168.0.1 并且開了DHCP2、默認(rèn)賬號(hào)密碼admin3、最坑的來了要么選擇圖形化配置要么使用命令行推薦圖形化配置和命令行配置完前后不統(tǒng)一貼上配置#修改系統(tǒng)名稱sysname H3C_Chukou_Router#修改時(shí)區(qū)clock timezone BJadd08:00:00#配置DNS代理dns proxy enable dns server223.5.5.5dns server223.6.6.6dns fast-reply enable dns cache ttl minimum60maximum3600#做個(gè)策略路由policy-based-route NW permit node10if-match acl3000apply next-hop192.168.3.1#policy-based-route NW permit node20if-match acl3001apply next-hop192.168.2.1#做個(gè)3層聚合口連核心交換機(jī)調(diào)用策略路由interfaceRoute-Aggregation1 description Connect_Core_SW ip address10.255.255.242255.255.255.252ip policy-based-route NW#這是電信外網(wǎng)interfaceGigabitEthernet0/0port link-mode route description Dianxin combo enable copper ip address192.168.3.254255.255.255.0nat outbound nat hairpin enable#這是聯(lián)通外網(wǎng)interfaceGigabitEthernet0/1port link-mode route description Liantong combo enable copper ip address192.168.2.253255.255.255.0nat outbound nat hairpin enable#加入三層聚合組連核心交換機(jī)interfaceGigabitEthernet0/2port link-mode route combo enable copper port link-aggregationgroup1#加入三層聚合組連核心交換機(jī)interfaceGigabitEthernet0/3port link-mode route combo enable copper port link-aggregationgroup1#line vty063authentication-mode scheme user-role network-operator#寫回程路由ip route-static0.0.0.00192.168.3.1preference20ip route-static0.0.0.00192.168.2.1preference10ip route-static10.0.0.02310.255.255.241ip route-static10.0.2.02310.255.255.241ip route-static10.0.4.02310.255.255.241ip route-static10.0.6.02310.255.255.241ip route-static10.0.8.02310.255.255.241ip route-static10.0.10.02310.255.255.241ip route-static10.0.12.02310.255.255.241ip route-static10.0.14.02310.255.255.241ip route-static10.0.16.02410.255.255.241ip route-static10.10.2.02410.255.255.241ip route-static10.255.252.02410.255.255.241ip route-static10.255.253.02410.255.255.241ip route-static10.255.254.02410.255.255.241ip route-static10.255.255.02410.255.255.241ip route-static172.16.10.02410.255.255.241ip route-static192.168.1.02410.255.255.241ip route-static192.168.5.02410.255.255.241ip route-static192.168.10.02410.255.255.241#開SSH服務(wù)ssh server enable#開NTP服務(wù)ntp-service enable ntp-service unicast-server ntp1.aliyun.com#配合策略路由使用acl advanced3000description YouXian_YeWu rule0permit ip source10.0.2.00.0.1.255rule5permit ip source10.0.10.00.0.1.255rule10permit ip source192.168.5.00.0.0.255rule15permit ip source192.168.10.00.0.0.255#配合策略路由使用acl advanced3001description AD rule0permit ip source10.0.8.00.0.1.255#關(guān)閉密碼控制策略u(píng)ndo password-control aging enable undo password-control history enable password-control length6password-control login-attempt3exceedlock-time10password-control update-interval0password-control login idle-time0#創(chuàng)建用戶給與權(quán)限local-user adminclassmanagepassword simple password service-type ssh telnet http https authorization-attribute user-role network-admin 最后別忘記保存 save force 一個(gè)簡(jiǎn)單的路由器配置就完成了