h3c路由器设置

h3c路由器配置案例

#version5.20,ESS1807

#sysnameNavigator

#l2tpenable

#tcpsyn-cookieenable

tcpanti-napthaenable

tcpstateclosingconnection-number500

tcpstateestablishedconnection-number500

tcpstatefin-wait-1connection-number500

tcpstatefin-wait-2connection-number500

tcpstatelast-ackconnection-number500

tcpstatesyn-receivedconnection-number500

#info-centersourcedefaultchannel2loglevelerrors

info-centersourcedefaultchannel9loglevelerrors

#

#dnsresolve

dnsproxyenable

dnsserver219.146.1.66

#telnetserverenable

#darp2psignature-fileflash:/p2p_

#port-securityenable

#iphttpacl199

#aclnumber199

rule65534permit

#vlan1

#radiusschemerztele

primaryauthentication*.*.*.*1645

primaryaccounting*.*.*.*1646

keyauthentication1231

keyaccounting1231

#domain*.

authenticationpppradius-schemerztele

authorizationpppradius-schemerztele

accountingpppradius-schemerztele

access-limitdisable

stateactive

idle-cutdisable

self-service-urldisable

ippool110.0.0.210.0.0.254

domainsystem

access-limitdisable

stateactive

idle-cutdisable

self-service-urldisable

#pkidomainnavigator

crlcheckdisable

#pkidomaintr069_vpn_dom

crlcheckdisable

#ikeproposal1

encryption-algorithm3des-cbc

dhgroup2

#ikepeernavigator

pre-shared-keycipherAD1LqehiOrugHKZPCChabQ==

#ipsecproposalnavigator

encapsulation-modetransport

espauthentication-algorithmsha1

espencryption-algorithm3des

#ipsecproposalnavigator1

espauthentication-algorithmsha1

espencryption-algorithm3des

#ipsecpolicy-templategateway1

ike-peernavigator

proposalnavigatornavigator1

#ipsecpolicynavigator1isakmptemplategateway

#dhcpserverip-poolvlan1extended

#user-groupsystem

#local-usertelecomadmin

passwordcipherQQB<1!!

authorization-attributelevel3

service-typetelnet

local-useruseradmin

passwordcipher(@KW6^>_R%UH;C/!R%=1I

authorization-attributelevel3

service-typetelnet

#wlanrrm

dot11bmandatory-rate12

dot11bsupported-rate5.511

dot11gmandatory-rate125.511

dot11gsupported-rate694

#wlanservice-template1clear

ssidChinaNet-cszz

#wlanservice-template2crypto

ssidChinaNet-000

#wlanservice-template3crypto

ssidChinaNet-111

cipher-suitetkip

cipher-suiteccmp

security-iersn

security-iewpa

service-templateenable

#sslserver-policychinanet

pki-domainnavigator

#cwmp

undocwmpenable

cwmpacsusernamenavigator

cwmpacspasswordnavigator

cwmpcpeinformintervalenable

cwmpcpeinforminterval43200

cwmpcpeusernamebbmspasswordbbms

#l2tp-group1

mandatory-lcp

allowl2tpvirtual-template0remoteSHDLACdomain

tunnelpasswor

<1!!

dsimplerzglj001

tunnelnamerztest

#interfaceEthernet0/0

portlink-moderoute

natoutbound

ipaddress*

ipsecpolicynavigator

#interfaceEthernet0/1

portlink-moderoute

#interfaceVirtual-Template0

remoteaddresspool1

ipaddress10.0.0.1255.255.255.0

#interfaceNULL0

#interfaceVlan-interface1

ipaddress192.168.10.1255.255.255.0

dhcpserverapplyip-poolvlan1

dhcpselectrelay

#interfaceEthernet0/2

portlink-modebridge

#interfaceEthernet0/3

portlink-modebridge

#interfaceEthernet0/4

portlink-modebridge

#interfaceEthernet0/5

portlink-modebridge

#interfaceEthernet0/6

portlink-modebridge

#interfaceEthernet0/7

portlink-modebridge

#interfaceEthernet0/8

portlink-modebridge

#interfaceEthernet0/9

portlink-modebridge

#interfaceWLAN-BSS0

#interfaceWLAN-BSS1

#interfaceWLAN-BSS2

port-securityport-modepsk

port-securitytx-key-type11key

port-securitypreshared-keypass-phrasesdrz0633

#interfaceWLAN-Radio2/0

service-template1interfacewlan-bss0

service-template2interfacewlan-bss1

service-template3interfacewlan-bss2

#iproute-static0.0.0.00.0.0.0*

#dhcpenable

#iphttpsssl-server-policychinanet

iphttpsenable

#nmsprimarymonitor-interfaceEthernet0/0

#

loadxml-configuration

#loadtr069-configuration

#user-interfacecon0

user-interfacevty04

authentication-modescheme

#return