H3C MSR3620-DP系列路由器生产环境配置

1、GE0 默认是管理口，配置管理地址192.168.0.1 并且开了DHCP
2、默认账号密码admin
3、最坑的来了，要么选择图形化配置，要么使用命令行（推荐），图形化配置和命令行配置完，前后不统一

贴上配置：

#修改系统名称sysname H3C_Chukou_Router#修改时区clock timezone BJadd08:00:00#配置DNS代理dns proxy enable dns server223.5.5.5dns server223.6.6.6dns fast-reply enable dns cache ttl minimum60maximum3600#做个策略路由policy-based-route NW permit node10if-match acl3000apply next-hop192.168.3.1#policy-based-route NW permit node20if-match acl3001apply next-hop192.168.2.1#做个3层聚合口，连核心交换机，调用策略路由interfaceRoute-Aggregation1 description Connect_Core_SW ip address10.255.255.242255.255.255.252ip policy-based-route NW#这是电信外网interfaceGigabitEthernet0/0port link-mode route description Dianxin combo enable copper ip address192.168.3.254255.255.255.0nat outbound nat hairpin enable#这是联通外网interfaceGigabitEthernet0/1port link-mode route description Liantong combo enable copper ip address192.168.2.253255.255.255.0nat outbound nat hairpin enable#加入三层聚合组，连核心交换机interfaceGigabitEthernet0/2port link-mode route combo enable copper port link-aggregationgroup1#加入三层聚合组，连核心交换机interfaceGigabitEthernet0/3port link-mode route combo enable copper port link-aggregationgroup1#line vty063authentication-mode scheme user-role network-operator#写回程路由ip route-static0.0.0.00192.168.3.1preference20ip route-static0.0.0.00192.168.2.1preference10ip route-static10.0.0.02310.255.255.241ip route-static10.0.2.02310.255.255.241ip route-static10.0.4.02310.255.255.241ip route-static10.0.6.02310.255.255.241ip route-static10.0.8.02310.255.255.241ip route-static10.0.10.02310.255.255.241ip route-static10.0.12.02310.255.255.241ip route-static10.0.14.02310.255.255.241ip route-static10.0.16.02410.255.255.241ip route-static10.10.2.02410.255.255.241ip route-static10.255.252.02410.255.255.241ip route-static10.255.253.02410.255.255.241ip route-static10.255.254.02410.255.255.241ip route-static10.255.255.02410.255.255.241ip route-static172.16.10.02410.255.255.241ip route-static192.168.1.02410.255.255.241ip route-static192.168.5.02410.255.255.241ip route-static192.168.10.02410.255.255.241#开SSH服务ssh server enable#开NTP服务ntp-service enable ntp-service unicast-server ntp1.aliyun.com#配合策略路由使用acl advanced3000description YouXian_YeWu rule0permit ip source10.0.2.00.0.1.255rule5permit ip source10.0.10.00.0.1.255rule10permit ip source192.168.5.00.0.0.255rule15permit ip source192.168.10.00.0.0.255#配合策略路由使用acl advanced3001description AD rule0permit ip source10.0.8.00.0.1.255#关闭密码控制策略undo password-control aging enable undo password-control history enable password-control length6password-control login-attempt3exceedlock-time10password-control update-interval0password-control login idle-time0#创建用户给与权限local-user adminclassmanagepassword simple password service-type ssh telnet http https authorization-attribute user-role network-admin 最后别忘记保存 save force 一个简单的路由器配置就完成了