校园网配置
说明:学校通过教育局专线通过光转换器转成电口,连接到学校的代理服务器,利用代理服务器的另外一块网卡连接到华三的S3600上面,华三下面再与学校各幢楼层的堆叠交换机相连,要求分三个网段。
10.52.177.254这个段过来的线连接在ethernet 1/0/12,
10.52.178.254这个段过来的线连接在ethernet 1/0/13,
10.52.180.254这个段过来的线连接在ethernet 1/0/14,
代理服务器内网线连接在H3C 3600上的ethernet 1/0/2上面,
(说明:一开始只要我在ethernet 1/0/12上面改port hybride pvid vlan 2成3或5,被设成的网段就能PING通代理服务器内网网卡地址,ethernet 1/0/12, port hybrid pvid vlan 3,VLAN 3就能通,正常上网,如果改成ethernet 1/0/12, port hybrid pvid vlan 5, VLAN 5就能正常上网。)
代理服务器内部网卡地址:10.52.177.5
代理服务器外部网卡地址:222.16.86.3
代理服务器软件:ISA 2004
外网的网关:222.16.86.254,
学校各网段:
10.52.177.0
网关:10.52.177.254
10.52.178.0
网关:10.52.178.254
10.52.180.0
网关:10.52.180.254
最终目标:内网能够互通,能够能过代理服务器上网,(搞定)
[H3C]display current-configuration
#
sysname H3C
#
radius scheme system
#
domain system
#
vlan 1 to 5
#
interface Vlan-interface2
ip address 10.52.177.254 255.255.255.0
#
interface Vlan-interface3
ip address 10.52.178.254 255.255.255.0
#
interface Vlan-interface4
ip address 10.52.180.254 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1
#
interface Ethernet1/0/2
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
interface Ethernet1/0/3
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
interface Ethernet1/0/4
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
interface Ethernet1/0/5
interface Ethernet1/0/6
interface Ethernet1/0/7
#
interface Ethernet1/0/8
#
interface Ethernet1/0/9
#
interface Ethernet1/0/10
#
interface Ethernet1/0/11
#
interface Ethernet1/0/12
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
#
interface Ethernet1/0/13
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
#
interface Ethernet1/0/14
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
interface Ethernet1/0/1
interface Ethernet1/0/16
#
interface Ethernet1/0/17
#
interface Ethernet1/0/18
#
interface Ethernet1/0/19
#
interface Ethernet1/0/20
#
interface Ethernet1/0/21
#
interface Ethernet1/0/22
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
#
interface Ethernet1/0/23
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
#
interface Ethernet1/0/24
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
interface GigabitEthernet1/1/1
#
interface GigabitEthernet1/1/2
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
#
interface GigabitEthernet1/1/3
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
#
interface GigabitEthernet1/1/4
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
#
undo irf-fabric authentication-mode
#
interface NULL0
#
voice vlan mac-address 0001-e300-0000 mask ffff-ff00-0000
#
interface aux 0 7
user-interface vty 0 4
#
return
[H3C]dis sav
[H3C]dis saved-configuration
#
sysname H3C
#
radius scheme system
#
domain system
#
vlan 1 to 5
#
interface Vlan-interface2
ip address 10.52.177.254 255.255.255.0
#
interface Vlan-interface3
ip address 10.52.178.254 255.255.255.0
#
interface Vlan-interface4
ip address 10.52.180.254 255.255.255.0
#LOCCFG. MUST NOT DELETE
#
interface Aux1/0/0
#
interface Ethernet1/0/1
#
interface Ethernet1/0/2
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
#
interface Ethernet1/0/3
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
#
interface Ethernet1/0/4
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
#
interface Ethernet1/0/5
#
interface Ethernet1/0/6
#
interface Ethernet1/0/7
#
interface Ethernet1/0/8
#
interface Ethernet1/0/9
#
---- More ----[42D
[42Dinterface Ethernet1/0/10
#
interface Ethernet1/0/11
#
interface Ethernet1/0/12
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
#
interface Ethernet1/0/13
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
#
interface Ethernet1/0/14
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
#
interface Ethernet1/0/15
#
interface Ethernet1/0/16
#
interface Ethernet1/0/17
interface Ethernet1/0/18
#
interface Ethernet1/0/19
#
interface Ethernet1/0/20
#
interface Ethernet1/0/21
#
interface Ethernet1/0/22
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
#
interface Ethernet1/0/23
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
#
interface Ethernet1/0/24
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
#
interface GigabitEthernet1/1/1
#
interface GigabitEthernet1/1/2
port link-type hybrid
port hybrid vlan 1 to 4 untagged
port hybrid pvid vlan 2
#
interface GigabitEthernet1/1/3
port link-type hybrid
port hybrid vlan 1 to 3 untagged
port hybrid pvid vlan 3
#
interface GigabitEthernet1/1/4
port link-type hybrid
port hybrid vlan 1 to 2 4 untagged
port hybrid pvid vlan 4
#TOPOLOGYCFG. MUST NOT DELETE
#
undo irf-fabric authentication-mode
#GLBCFG. MUST NOT DELETE
#
interface NULL0
#
voice vlan mac-address 0001-e300-0000
user-interface aux 0 7
user-interface vty 0 4
#
return
[H3C] dis vlan all
VLAN ID: 1
VLAN Type: static
Route Interface: not configured
Description: VLAN 0001
Name: VLAN 0001
Tagged
Ports: none
Untagged Ports:
Ethernet1/0/1
Ethernet1/0/2
Ethernet1/0/3
Ethernet1/0/4
Ethernet1/0/5
Ethernet1/0/6
Ethernet1/0/7
Ethernet1/0/8
Ethernet1/0/9
Ethernet1/0/10
Ethernet1/0/11
Ethernet1/0/12
Ethernet1/0/13
Ethernet1/0/14
Ethernet1/0/15
Ethernet1/0/16
Ethernet1/0/17
Ethernet1/0/18
Ethernet1/0/19
Ethernet1/0/20
Ethernet1/0/21
Ethernet1/0/22
Ethernet1/0/23
Ethernet1/0/24
GigabitEthernet1/1/1
GigabitEthernet1/1/2
GigabitEthernet1/1/3
GigabitEthernet1/1/4
VLAN ID: 2
VLAN Type: static
Route Interface: configured
IP Address: 10.52.177.254
Subnet Mask: 255.255.255.0
Description: VLAN 0002
configured
IP Address: 10.52.180.254
Subnet Mask: 255.255.255.0
Description: VLAN 0004
Name: VLAN 0004
Tagged
Ports: none
Untagged Ports:
Ethernet1/0/2
Ethernet1/0/4
Ethernet1/0/12
Ethernet1/0/14
Ethernet1/0/22
Ethernet1/0/24
GigabitEthernet1/1/2
GigabitEthernet1/1/4
VLAN ID: 5
VLAN Type: static
Route Interface: not configured
Description: VLAN 0005
Name: VLAN 0005
Tagged
Ports: none
Untagged Ports: none
[H3C]dis cpu
Unit 1
Board 0 CPU busy status:
10% in last 5 seconds
10% in last 1 minute
11% in last 5 minutes
[H3C]dis me
[H3C]dis memory
Unit 1
System Available Memory(bytes): 34653696
System Used Memory(bytes): 13066896
Used Rate: 37%
[H3C]display mac-add
[H3C]display mac-address ?
H-H-H
MAC address
aging-time
Global aging time
blackhole
Blackhole entry, no age, can be added/deleted, can be saved to
configuration file
count
MAC entries count
dynamic
Dynamic entry, with aging, can be
added/deleted, lost after
reset
interface
Choose one interface to display
multicast
Multicast entry, can be saved to configuration file
security
Security entry, no age, can be added/deleted, can be saved to
configuration file
static
Static entry, without aging, can be added/deleted, saved to the
configuration file
statistics
MAC entries statistics
vlan
VLAN
<cr>
[H3C]display mac-address
MAC ADDR
VLAN ID
STATE
PORT INDEX
AGING TIME(s)
0003-470d-3ffa
2
Learned
Ethernet1/0/22
AGING
0003-475f-51f7
2
Learned
Ethernet1/0/12
AGING
000a-e63b-a372
2
Learned
Ethernet1/0/12
AGING
000c-7676-0c0c
2
Learned
Ethernet1/0/12
AGING
000c-76dc-78dc
2
Learned
Ethernet1/0/12
AGING
000d-61bf-103c
2
Learned
Ethernet1/0/12
AGING
000d-61c0-3943
2
Learned
Ethernet1/0/12
AGING
0010-5cf7-c4b3
2
Learned
Ethernet1/0/22
AGING
0010-5cf7-c73a
2
Learned
Ethernet1/0/12
AGING
0010-5cf7-c759
2
Learned
Ethernet1/0/12
AGING
0010-5cf7-c75b
2
Learned
Ethernet1/0/22
AGING
0010-5cf7-c81a
2
Learned
Ethernet1/0/12
AGING
0011-09a4-7f62
2
Learned
Ethernet1/0/12
AGING
0090-2739-cf15
2
Learned
Ethernet1/0/22
AGING
00c0-9f34-abd8
2
Learned
Ethernet1/0/2
AGING
00c0-9f37-e751
2
Learned
Ethernet1/0/22
AGING
0003-475f-5169
3
Learned
Ethernet1/0/13
AGING
0050-fc46-0dc6
3
Learned
Ethernet1/0/13
AGING
00d0-f80e-2c83
3
Learned
Ethernet1/0/13
AGING
00d0-f80e-2e9a
3
Learned
Ethernet1/0/13
AGING
000d-87f0-45d4
4
Learned
Ethernet1/0/14
AGING
000d-87f0-4c86
4
Learned
Ethernet1/0/14
AGING
---
22 mac address(es) found
---
[H3C]
[H3C]dis ver
[H3C]dis version
H3C Comware Platform Software
Comware Software, Version 3.10, Release 1510P09
Copyright (c) 2004-2007 Hangzhou H3C Technologies Co., Ltd. All rights reserved.
S3600-28P-SI uptime is 0 week, 0 day, 0 hour, 23 minutes
S3600-28P-SI with 1 MIPS Processor
64M
bytes DRAM
8196K
bytes Flash Memory
Config Register points to FLASH
Hardware Version is REV.C
CPLD Version is CPLD 001
Bootrom Version is 320
[Subslot 0] 24 FE Hardware Version is REV.C
[Subslot 1] 4 GE
Hardware Version is REV.C