文档库 最新最全的文档下载
当前位置:文档库 › 防ARP+防DHCP+802.1X+EAD快速部署(E126A)

防ARP+防DHCP+802.1X+EAD快速部署(E126A)

[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]dis ver
H3C Comware Platform Software
Comware Software, Version 3.10, Release 1602P05
Copyright (c) 2004-2008 Hangzhou H3C Technologies Co., Ltd. All rights reserved.
E152 uptime is 0 week, 4 days, 1 hour, 14 minutes

E152 with 1 Processor
64M bytes DRAM
8196K bytes Flash Memory
Config Register points to FLASH

Hardware Version is REV.C
CPLD Version is CPLD 001
Bootrom Version is 200
[Subslot 0] 48 FE Hardware Version is REV.C
[Subslot 1] 4 GE Hardware Version is REV.C

[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]dis cu
#
sysname E152-1#D[M2]-3F04
#
domain default enable https://www.wendangku.net/doc/376280487.html,
#
igmp-snooping enable
#
dot1x
dot1x supp-proxy-check logoff
dot1x url http://192.168.200.3
dot1x free-ip 192.168.200.3 255.255.255.255
dot1x free-ip 222.172.200.68 255.255.255.255
#
arp protective-down recover enable
arp protective-down recover interval 3600
dhcp protective-down recover enable
dhcp protective-down recover interval 3600
#
radius scheme system
radius scheme ynni_cams
server-type extended
primary authentication 192.168.200.2
primary accounting 192.168.200.2
key authentication ynnikey
key accounting ynnikey
user-name-format without-domain
accounting-on enable
#
domain system
domain https://www.wendangku.net/doc/376280487.html,
scheme radius-scheme ynni_cams
#
local-user ynmzdxh3c
password cipher $:$GNU(4]_CT\16@J0T5N!!!
service-type telnet
level 3
#
vlan 1
#
vlan 158
#
vlan 1107
arp detection enable
#
interface Vlan-interface1
ip address 192.168.107.12 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/2
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/3
port access vlan 158
description LINK-TO-1#D402[ShuJiXueYuan_Server]
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/4
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/5
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/6
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-lim

it 100
#
interface Ethernet1/0/7
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/8
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/9
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/10
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/11
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/12
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/13
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/14
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/15
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/16
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/17
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/18
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/19
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/20
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rat

e-limit 100
#
interface Ethernet1/0/21
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/22
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/23
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/24
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/25
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/26
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/27
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/28
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/29
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/30
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/31
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/32
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/33
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/34
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable


dhcp rate-limit 100
#
interface Ethernet1/0/35
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/36
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/37
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/38
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/39
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/40
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/41
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/42
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/43
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/44
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/45
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/46
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/47
port access vlan 1107
dot1x
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50
dhcp rate-limit enable
dhcp rate-limit 100
#
interface Ethernet1/0/48
port link-type trunk
port trunk permit vlan 1 1107
dot1x supp-proxy-check logoff
dot1x version-check
arp rate-limit enable
arp rate-limit 50

dhcp rate-limit enable
dhcp rate-limit 100
#
interface GigabitEthernet1/1/1
port link-type trunk
port trunk permit vlan 1 158 1107
dhcp-snooping trust
description LINK-TO-[S7503E-1#D-2F01]
arp detection trust
#
interface GigabitEthernet1/1/2
#
interface GigabitEthernet1/1/3
#
interface GigabitEthernet1/1/4
#
interface NULL0
#
arp anti-attack valid-check enable
dhcp-snooping
#
ip route-static 0.0.0.0 0.0.0.0 192.168.107.1 preference 60
#
snmp-agent
snmp-agent local-engineid 800063A2000FE2817DCC6877
snmp-agent sys-info version v3
snmp-agent group v3 ynmzdx authentication write-view adminview
snmp-agent mib-view included adminview iso
snmp-agent usm-user v3 admin ynmzdx authentication-mode md5 2&VP+:F>QD>GMD;'X$>\[1!!
#
user-interface aux 0 7
user-interface vty 0 4
authentication-mode scheme
#
return
[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]dis arp detection statistics interface Ethernet 1/0/48
ARP DETECTION : ENABLE
ARP PORT TRUST : DISABLE
INVALID ARP PACKETS : 5406
[E152-1#D[M2]-3F04]
[E152-1#D[M2]-3F04]dis arp detection statistics interface Ethernet 1/0/47
ARP DETECTION : ENABLE
ARP PORT TRUST : DISABLE
INVALID ARP PACKETS : 0
[E152-1#D[M2]-3F04]dis arp detection statistics interface Ethernet 1/0/46
ARP DETECTION : ENABLE
ARP PORT TRUST : DISABLE
INVALID ARP PACKETS : 0
[E152-1#D[M2]-3F04]


相关文档
相关文档 最新文档