H3C 实验一 S95E IRF下ACG(MQC方式)实验

žŒS95EIRFIPS/ACG(MQC¹)žŒ1.1žŒ…¹î,žŒ/©fXýŸ‰S95EIRFIPS/ACG„èrŒ,žŒ¨”åýŒáS95EIRFMQCA0IPS/ACGvž°IPS/ACGÒaý1.2„åƌ€ý”†ãS95EIRF„ŸÊMnåÊIPS/ACGÒa„å\Ÿ1.3žŒÄQþþ1-1S95EIRFIPS/ACGžŒ¯ƒþ1.4ÌoB,žŒ„:o:IRFOAAÒaèr„x‹:o1.5žŒ¾H,,žŒ@K;¾hP‚h1-1@:žŒS95EIRFIPS/ACG(MQC¹)žŒ1.1žŒ…¹î,žŒ/©fXýŸ‰S95EIRFIPS/ACG„èrŒ,žŒ¨”åýŒáS95EIRFMQCA0IPS/ACGvž°IPS/ACGÒaý1.2„åƌ€ý”†ãS95EIRF„ŸÊMnåÊIPS/ACGÒa„å\Ÿ1.3žŒÄQþþ1-1S95EIRFIPS/ACGžŒ¯ƒþ1.4ÌoB,žŒ„:o:IRFOAAÒaèr„x‹:o1.5žŒ¾H,,žŒ@K;¾hP‚h1-1@:žŒS95EIRFIPS/ACG(MQC¹)žŒ1.1žŒ…¹î,žŒ/©fXýŸ‰S95EIRFIPS/ACG„èrŒ,žŒ¨”åýŒáS95EIRFMQCA0IPS/ACGvž°IPS/ACGÒaý1.2„åƌ€ý”†ãS95EIRF„ŸÊMnåÊIPS/ACGÒa„å\Ÿ1.3žŒÄQþþ1-1S95EIRFIPS/ACGžŒ¯ƒþ1.4ÌoB,žŒ„:o:IRFOAAÒaèr„x‹:o1.5žŒ¾H,,žŒ@K;¾hP‚h1-1@:h1-1žŒ¾ŒhPðŒ‹÷H,pÏÏðS9508ER1238P08ÊåH,2SecbaldeACGIPSÒa ACG:E6117P11ÊåIPS:E2110P10Êå 2¥e¤b: B¥e¤b:2å*Q¿--101.6žŒÇžŒû¡S9500EIRFIPS/ACGère¤S95EMn$ðS9500EbIRFT/(VLAN1004-1008 BTVLAN1001-1002 BZþïL8äb:Œ¤b:2„VLANác8acseiserverenable//ÇacseiO®ùÒa„¶
ÛLÀK#vlan1001to1008#interfaceVlan-interface1001ipaddress192.168.11.254255.255.255.0#interfaceVlan-interface1002ipaddress192.168.12.254255.255.255.0#interfaceVlan-interface1004ipaddress192.168.14.254255.255.255.0#interfaceVlan-interface1005ipaddress192.168.15.254255.255.255.0#interfaceVlan-interface1006ipaddress192.168.16.254255.255.255.0#interfaceVlan-interface1007ipaddress192.168.17.254255.255.255.0#interfaceVlan-interface1008ipaddress192.168.18.254255.255.255.0#e¤ŒèrACGÒa—8äb:Œ’TQ¤b:2„’¿AÏÏÇIRFX:1„ACG-1ÒaåaEœAÏb0IRFX:2„ACG-2S95EACGÒa¥ãú@MninterfaceTen-GigabitEthernet1/5/0/1portlink-typetrunkporttrunkpermitvlan1100110021004to1008//A¸¡VLANÇÅ{öA¸VLAN1stpdisable//sístp&stpdïãblockmac-addressmax-mac-count0//símacf`2bmac0@f`Oû#interfaceTen-GigabitEthernet2/5/0/1portlink-typetrunkporttrunkpermitvlan1100110021004to1008//A¸¡VLANÇÅ{öA¸VLAN1stpdisable//sístp&stpdïãblockmac-addressmax-mac-count0//símacf`2bmac0@f`Oû#MnMQCaclnumber3200descriptionMatch-ALL-Addressrule0permitipaclnumber3300descriptionMatch-ALL-Addressrule0permitip#aclnumber4000//9MŒBÄ­Œ­
ARPdescriptionMatch-MultiCast-ARPrule0permitdest-mac0100-0000-0000ff00-0000-0000rule5permitdest-macffff-ffff-ffffffff-ffff-ffffrule10permittype0806ffff#aclnumber3400//vlan1004-1008¡hKô’¿„AÏî„0@:¡hQµdescriptionMatch-Internal-Flowrule0permitipdestination192.168.14.00.0.0.255rule5permitipdestination192.168.15.00.0.0.255rule10permitipdestination192.168.16.00.0.0.255rule15permitipdestination192.168.17.00.0.0.255rule20permitipdestination192.168.18.00.0.0.255#aclnumber3500//vlan1001-1002¡hKô’¿„AÏî„0@:¡hQµdescriptionMatch-Internet-Flowrule0permitipdestination192.168.11.00.0.0.255rule5permitipdestination192.168.12.00.0.0.255#trafficclassifierMulticast-ARPoperatorandif-matchacl4000trafficclassifierAll-Addressoperatorandif-matchacl3200if-matchforwarding-layerroute//Å BlÑAÏAtrafficclassifierAll-Address-2operatorandif-matchacl3300if-matchforwarding-layerroute//Å BlÑAÏA#trafficclassifierInternal-Flow-1operatorandif-matchacl3400#trafficclassifierInternet-Flow-2operatorandif-matchacl3500#trafficbehaviorRedirect_ACG_1redirectinterfaceTen-GigabitEthernet1/5/0/1trafficbehaviorRedirect_ACG_2redirectinterfaceTen-GigabitEthernet2/5/0/1trafficbehaviorAllowfilterpermittrafficbehaviorDeny-Multicast-ARPfilterdeny#qospolicyACG-Deny-Multicast-ARPclassifierMulticast-ARPbehaviorDeny-Multicast-ARP#qospolicyACG_DOWN_STREAM//LAÏMQCclassifierMulticast-ARPbehaviorAllow//Ä­
ARP¥‡ACGclassifierInternet-Flow-2behaviorAllow//vlan1001Œvlan1002Kô’¿„AÏACGclassifierAll-AddressbehaviorRedirect_ACG_1//AÏHACG_1classifierAll-Address-2behaviorRedirect_ACG_2//SACG-11HAÏACG_2#qospolicyACG_UP_STREAM//LAÏclassifierMulticast-ARPbehaviorAllow//Ä­
ARP¥‡ACGclassifierInternal-Flow-1behaviorAllow//vlan1004-1008Kô’¿„AÏACGclassifierAll-AddressbehaviorRedirect_ACG_1classifierAll-Address-2behaviorRedirect_ACG_2(S95Eøs¥ãÑMQC:T¥ãinterfaceGigabitEthernet1/10/0/1qosapplypolicyACG_DOWN_STREAMinbound#interfaceGigabitEthernet2/10/0/1qosapplypolicyACG_DOWN_STREAMinboundT„¥ãinterfaceGigabitEthernet1/10/0/7qosapplypolicyACG_UP_STREAMinbound#interfaceGigabitEthernet2/10/0/7qosapplypolicyACG_UP_STREAMinboundS95EACGÒa¥ã¥‡ÇäMninterfaceTen-GigabitEthernet1/5/0/1qosapplypolicyACG-Deny-Multicast-ARPinbound//Ù́(inbound¹Çäú¹,:Ñú„O®¥‡àÕÇäinterfaceTen-GigabitEthernet2/5/0/1qosapplypolicyACG-Deny-Multicast-ARPinboundžŒû¡ŒACGøsMn$ðACG„Mn7 1 »ýOAAACFPClient(,¹H-(ACFPŸý2 ‰hߥãý é:Xeth0-0(…Tã)…èßvlan é@ ¡h„VLAN‚1004-1008 èßvlan éL„VLAN‚10011002I