1.修改名称

sysname 名称


2.进入aaa模式

[5F/L01]aaa      

#

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password simple admin

 local-user admin service-type http



 local-user xqidc password cipher Z7*!2I18^PL2a:I4"+(+"1!!   //添加用户名密码

 local-user xqidc privilege level 15                //设定安全等级

 local-user xqidc service-type telnet              //开启远程telnet


3.设置vty接口，启用aaa模式

[5F/L01]user-interface vty 0 4

[5F/L01-ui-vty0-4]authentication-mode aaa 


4.添加机柜网段对应vlan，在vlan内配置交换机管理地址

[5F/L01]vlan 2400 

[5F/L01-vlan502]q

[5F/L01]interface Vlanif 2400

[5F/L01-Vlanif502]ip address 119.147.152.116 255.255.255.224  


5.配置静态路由

[5F/L01]ip route-static 0.0.0.0 0.0.0.0 119.147.152.97   //97为本子网网关


6.配置上联端口（trunk模式，添加本子网vlan）

interface GigabitEthernet0/0/1

 port link-type trunk                     

 port trunk allow-pass vlan 2400

 ntdp enable

 ndp enable


7.配置24个百兆电口access模式

interface Ethernet0/0/1

 port link-type access

 port default vlan 2400

 ntdp enable

 ndp enable

 qos lr inbound cir 10000 cbs 1000000



8.绑定mac地址

 ping 服务器ip地址

[5F/L01]ping 119.147.152.112

  PING 119.147.152.112: 56  data bytes, press CTRL_C to break

    Reply from 119.147.152.112: bytes=56 Sequence=1 ttl=64 time=2 ms

    Reply from 119.147.152.112: bytes=56 Sequence=2 ttl=64 time=1 ms

    Reply from 119.147.152.112: bytes=56 Sequence=3 ttl=64 time=1 ms


查看该ip对应的mac地址及端口

[5F/L01]dis arp | in 119.147.152.98

IP ADDRESS      MAC ADDRESS  EXPIRE(M) TYPE INTERFACE      ×××-INSTANCE       

                                       VLAN 

------------------------------------------------------------------------------

119.147.152.98  0014-22b1-24b1  17     D-0  Eth0/0/1

------------------------------------------------------------------------------

Total:16        Dynamic:15      Static:0    Interface:1    


绑定

[5F/L01]user-bind static ip-address 119.147.151.99 mac-address 0014-22b1-23af interface Ethernet 0/0/2 vlan 502

在对应端口开启

[5F/L01-Ethernet0/0/1]arp anti-attack check user-bind enable 

[5F/L01-Ethernet0/0/1]ip source check user-bind enable

解绑

[5F/L01-Ethernet0/0/1]undo arp anti-attack check user-bind enable 

[5F/L01-Ethernet0/0/1]undo ip source check user-bind enable

[5F/L01]undo user-bind static ip-address 119.147.151.99