华为交换机配置（三层交换机配置）

rule 1 permit source X.X.X.X 0

port default vlan 100

进入aaa视图，新建账号，设置密码及权限等级、服务协议

rule 4 permit source X.X.X.X 0

telnet server enable

acl 2000 inbound

authentication-mode aaa

telnet server acl 2000

aaa

port trunk allow-pass vlan 100 to 101

qos lr outbound cir 102400 cbs 102400

ip route-static 0.0.0.0 0.0.0.0 下一跳

local-user weiziidc service-type telnet

rule 5 permit source X.X.X.X 0

rule 2 permit source X.X.X.X 0

user-interface vty 0 4

interface Vlanif100

local-user weiziidc password irreversible-cipher +密码

acl number 2000

step 1

protocol inbound telnet

新建vlan，进入vlan管理，配置IP：

rule 999 deny

port link-type trunk

authentication-mode aaa

华为5720交换机配置流程：

vlan 100

...

user-interface vty 16 20

protocol inbound telnet

interface GigabitEthernet0/0/1

sys 提高权限

interface XGigabitEthernet0/0/1

rule 3 permit source X.X.X.X 0

acl 2000 inbound

telnet server port 33899

local-user weiziidc privilege level 15

文章以X.X.X.X代替IP地址，以s5720为例

qos lr inbound cir 102400 cbs 102400

其他端口按需依次设置。

ip address X.X.X.X 255.255.255.0