; J8698A Configuration Editor; Created on release #K.12

hostname "Core"
max-vlans 200
connection-rate-filter sensitivity low
ip access-list extended "v2"
   10 deny udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 135
   20 deny udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 139
   30 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 139
   40 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 135
   50 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 445
   60 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 4444
   100 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
   exit
ip access-list extended "general"
   10 deny udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 135
   20 deny udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 139
   30 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 139
   40 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 135
   50 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 445
   60 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 4444
   100 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
   exit
module 1 type J8702A
module 2 type J8702A
module 3 type J8706A
interface C1
   name "edge_10"
exit
interface C2
   name "edge_18"
exit
interface C3
   name "edge_2_1"
exit
interface C5
   name "edge_8"
exit
interface C7
   name "edge_2_2"
exit
interface C9
   name "edge_12"
exit
interface C11
   name "edge_15"
exit
interface A13
   speed-duplex 100-full
exit
ip routing
snmp-server community "public" Unrestricted
vlan 1
   name "DEFAULT_VLAN"
   untagged A1-A24,B2-B23,C4,C6,C8,C10,C12-C24
   ip address 10.9.76.9 255.255.255.0
   tagged B1,C1-C3,C5,C7,C9,C11
   no untagged B24
   ip access-group "general" in
   exit
vlan 2
   name "VLAN2"
   untagged B24
   ip address 10.9.77.1 255.255.255.0
   tagged C1-C3,C5,C7,C9,C11
   ip access-group "v2" in
   exit
vlan 3
   name "VLAN2"
   untagged B23
   ip address 10.9.78.1 255.255.255.0
   tagged C1-C3,C5,C7,C9,C11
   ip access-group "v2" in
   exit
interface C1
   rate-limit icmp 80
   exit
interface C2
   rate-limit icmp 80
   exit
interface C3
   rate-limit icmp 80
   exit
interface C4
   rate-limit icmp 80
   exit
........

ip route 0.0.0.0 0.0.0.0 10.9.76.54

router vrrp
vlan 2
   vrrp vrid 1
      owner
      virtual-ip-address 10.9.77.1 255.255.255.0
      priority 255
      enable
      exit
   exit
vlan 3
   vrrp vrid 3
      owner
      virtual-ip-address 10.9.78.1 255.255.255.0
      priority 255
      enable
      exit
   exit

password manager
password operator

 

为了对上面单位负责，我把ip配置有所变动，对大家学习交流无影响，为了大家学习方便，图也发了上来