[V200R006C10SPC300]
#
drop illegal-mac alarm
#
clock timezone 8 add 11:45:50
#
ipv6
dhcp enable
#
pki realm default
enrollment self-signed
#
ssl policy default_policy type server
pki-realm default
#
acl number 2998
rule 5 permit source 192.168.10.0 0.0.0.255
acl name GigabitEthernet0/0/4 2999
rule 5 permit
#
acl number 3000
rule 5 permit ip source 192.168.10.10 0
#
traffic classifier FinA operator or
if-match acl 3000
#
traffic behavior FinA
redirect interface Dialer1
#
traffic policy Fin
classifier FinA behavior FinA
#
firewall zone Local
priority 16
#
interface Dialer1
link-protocol ppp
ppp chap user 02903227394
ppp chap password cipher %@%@79rbLT@\D:l($<*iY32T,.dO%@%@
ppp pap local-user 02903227394 password cipher %@%@79rbLT@\D:l($<*iY32T,.dO%@%@
ppp ipcp dns admit-any
ppp ipcp dns request
mtu 1492
tcp adjust-mss 1200
ip address ppp-negotiate
dialer user arweb
dialer bundle 1
dialer-group 1
nat outbound 2999
#
interface Dialer2
link-protocol ppp
ppp chap user 02903051656
ppp chap password cipher %@%@%L'MB%I=N%g6Ka0kMwKW8D<x%@%@
ppp pap local-user 02903051656 password cipher %@%@o>\P$=Q6tN8F2hIkOp.D8DGm%@%@
ppp ipcp dns admit-any
ppp ipcp dns request
mtu 1492
tcp adjust-mss 1200
ip address ppp-negotiate
dialer user 02903051656
dialer bundle 2
dialer-group 2
nat outbound 2998
#
interface Vlanif1
ip address 192.168.10.254 255.255.255.0
traffic-policy Fin inbound
dhcp select interface
dhcp server excluded-ip-address 192.168.10.1 192.168.10.10
dhcp server dns-list 221.11.1.67 221.11.1.68
#
interface GigabitEthernet0/0/0
undo portswitch
pppoe-client dial-bundle-number 2
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
pppoe-client dial-bundle-number 1
#
interface GigabitEthernet0/0/5
#
interface Cellular0/0/0
#
interface NULL0
#
interface LoopBack0
#
dialer-rule
dialer-rule 1 ip permit
#
#
telnet server enable
#
http acl 2999
http secure-server ssl-policy default_policy
http server enable
http secure-server enable
#
ip route-static 0.0.0.0 0.0.0.0 Dialer1
ip route-static 0.0.0.0 0.0.0.0 Dialer2
#
user-interface con 0
authentication-mode aaa
user-interface vty 0
authentication-mode aaa
user privilege level 15
user-interface vty 1 4
authentication-mode aaa
#
wlan ac
#
return
转载请注明原文地址: https://ju.6miu.com/read-667983.html