Network: the project a project two project three art engine
Network: hr President Office technical support issues engine
: the project a project two project three art
Server: a network server
Outside the web server
1: the project department completely isolated network need to connect to Intranet server
Each project can access public network and other network isolation
Need to standby 10 each project IP access to the network with three public network IP access to the network have an IP access network
2: art network isolation to access the server
Distribution network isolation
3: the web server can access networks outside
Exchange between outer net department
The network can be normal access network server
4: a unified rule out IP 200-245
How to configure all the configuration in 5720 came a great god to help the confused access with trunk
CodePudding user response:
simple framework or have a better way? But the device cannot be changedCodePudding user response:
Bosses have a look at...CodePudding user response:
Your question is too complicated for the BBS asked, I feel the problem sorted out for at least 15 minutes,CodePudding user response:
#
Sysname core
#
Vlan batch 2 to 16
#
Cluster enable
NTDP enable
NDP enable
#
Drop the illegal - MAC alarm
#
DHCP enable
#
Diffserv domain default
#
The acl number 3000
Rule 5 deny IP destination 10.10.10.0 0.0.0.255
The acl number 3001
Rule 5 deny IP destination 10.10.110.0 0.0.0.255
The acl number 3002
Rule 5 deny IP destination 10.10.120.0 0.0.0.255
#
Drop - profile default
#
Vlan 1
The description guanli
Vlan 2
The description plblic
Vlan 3
The description xiangmu2
Vlan 4
The description xiangmu3
Vlan 5
The description meishu
Vlan 6
The description yinqing
Vlan 7
The description renshi
Vlan 8
The description jishuzhichi
Vlan 9
The description faxing
Vlan 10
The description xingzheng
Vlan 11
The description zongcaiban
Vlan 12
The description neiwang1
Vlan 13
The description waiwang2
#
IP pool 2
Gateway - list 10.10.10.1
The network 10.10.10.0 mask 255.255.255.0
Excluded - IP address 10.10.10.200 10.10.10.254
DNS - list 8.8.8.8
Domain name - public
#
IP pool 3
Gateway - list 10.10.20.1
The network 10.10.20.0 mask 255.255.255.0
Excluded - IP address 10.10.20.200 10.10.20.254
#
IP pool 7
Gateway - list 10.10.60.1
The network 10.10.60.0 mask 255.255.255.0
DNS - list 8.8.8.8
Domain - name waiwangrenshi
#
IP pool 12
Gateway - list 10.10.110.1
The network 10.10.110.0 mask 255.255.255.0
Excluded - IP address 10.10.110.200 10.10.110.254
#
IP pool 13
Gateway - list 10.10.120.1
The network 10.10.120.0 mask 255.255.255.0
Excluded - IP address 10.10.120.200 10.10.120.254
DNS - list 8.8.8.8
#
Aaa
The authentication scheme - the default
Authorization - scheme default
Accounting - scheme default
Domain default
Domain default_admin
Local - user admin password cipher & amp; A! ZVW& 21 I t. & gt; , Z, 88 j \ : Q!!!!!
Local - user admin privilege level 15
The local user admin service - type Telnet
#
Interface Vlanif1
IP address 10.10.1.1 255.255.255.0
#
Interface Vlanif2
IP address 10.10.10.1 255.255.255.0
DHCP select global
#
Interface Vlanif3
IP address 10.10.20.1 255.255.255.0
DHCP select global
#
Interface Vlanif4
IP address 10.10.30.1 255.255.255.0
DHCP select global
#
Interface Vlanif5
IP address 10.10.40.1 255.255.255.0
DHCP select global
#
Interface Vlanif6
IP address 10.10.50.1 255.255.255.0
DHCP select global
#
Interface Vlanif7
IP address 10.10.60.1 255.255.255.0
DHCP select global
#
Interface Vlanif8
IP address 10.10.70.1 255.255.255.0
DHCP select global
#
Interface Vlanif9
IP address 10.10.80.1 255.255.255.0
DHCP select global
#
Interface Vlanif10
IP address 10.10.90.1 255.255.255.0
DHCP select global
#
Interface Vlanif11
IP address 10.10.100.1 255.255.255.0
DHCP select global
#
Interface Vlanif12
IP address 10.10.110.1 255.255.255.0
DHCP select global
#
Interface Vlanif13
IP address 10.10.120.1 255.255.255.0
DHCP select global
#
Interface Vlanif14
IP address 10.10.130.1 255.255.255.0
DHCP select global
#
Interface MEth0/0/1
#
Interface GigabitEthernet0/0/1
#
Interface GigabitEthernet0/.two survivors
The port link -type access
The port default vlan 12
#
Interface GigabitEthernet0/0/3
The port link -type access
The port default vlan 3
#
Interface GigabitEthernet0/0/4
#
Interface GigabitEthernet0/0/5
#
Interface GigabitEthernet0/0/6
#
Interface GigabitEthernet0/0/7
#
Interface GigabitEthernet0/0/8
The port link -type access
The port default vlan 2
#
Interface GigabitEthernet0/0/9
The port link -type access
The port default vlan 13
#
Interface GigabitEthernet0/0/10
The port link -type access
nullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnull