华为三层交换+双链路出口

公司的网络使用场景：原来公司使用USG2200的防火墙，申请的是联通的固定ＩＰ光纤作为上网出口，现公司增加了技术开发部门和线上业务运营部门，需使用ads多条l线路制作软路由为为上网出口，需将原来的的三层交换机华为Ｓ5700默认路由改为策略路由。

原三层配置：

is cu
#
!Software Version V100R005C01SPC100
 sysname Active Switch
#
 vlan batch 2 to 13 100 200 300
#
 stp instance 0 root primary
 stp enable
#
 cluster enable
 ntdp enable
 ntdp hop 16
 ndp enable
#
 undo http server enable
#
 dhcp server group 1
#
vlan 100
 description to firewall
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher #%YJO2E(@[2C"6@5+9/9:1!!
 local-user admin privilege level 3
 local-user admin service-type telnet terminal web http
 local-user niewd password cipher :/!T+]7*81C,UMD0PV(YO1!!
 local-user niewd privilege level 5
#
interface Vlanif1
 ip address 192.168.1.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.1.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif2
 ip address 192.168.2.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.2.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif3
 ip address 192.168.3.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.3.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif4
 ip address 192.168.4.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.4.1
 vrrp vrid 1 priority 254
vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif5
 ip address 192.168.5.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.5.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif6
 ip address 192.168.6.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.6.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif7
 ip address 192.168.7.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.7.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif8
 ip address 192.168.8.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.8.1
vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif9
 ip address 192.168.9.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.9.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif10
 ip address 192.168.10.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.10.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif11
 ip address 192.168.11.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.11.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif12
 ip address 192.168.12.2 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.12.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif13
 ip address 192.168.13.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.13.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif100
 ip address 10.0.0.2 255.255.255.0
#
interface Vlanif200
 ip address 192.168.200.1 255.255.255.0
#
interface Vlanif300
 ip address 192.168.100.2 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/5
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/6
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/7
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/8
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/9
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/10
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/11
port link-type trunk
 port trunk allow-pass vlan 2 8 10 100 300
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/12
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/13
 port link-type access
 port default vlan 13
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/14
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/15
 port link-type access
 port default vlan 5
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/16
 port link-type access
 port default vlan 200
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/17
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
bpdu enable
#
interface GigabitEthernet0/0/18
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/19
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/20
 port link-type access
 port default vlan 100
 traffic-policy ecrouter inbound
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/21
 port link-type access
 port default vlan 2
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/22
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/23
 port link-type access
 port default vlan 100
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/24
port link-type trunk
 port trunk allow-pass vlan 2 to 99 101 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface NULL0
#
 ip route-static 0.0.0.0 0.0.0.0 10.0.0.1 
#
 snmp-agent
 snmp-agent local-engineid 000007DB7F000001000056F5
 snmp-agent community read  public
 snmp-agent community write  private
 snmp-agent sys-info version all
#
user-interface con 0
 idle-timeout 0 0
user-interface vty 0 4
 authentication-mode aaa
#
return

　后来查阅资料增加策略路由使用路由重定向指定下一跳地址，成功设定固定网段走指定路由。但后来又发现一个问题指定的网段不能和三层交换机的其它网段互通，经过测试最终找到问题是由由，没有设定访问192.168.0.0网段的路由，所有的路由都被默认指定重定向的下一跳路由接口10.0.0.3的地址上，下面附最终测试完成的三层路由。　

#
!Software Version V100R005C01SPC100
 sysname Active Switch
#
 vlan batch 2 to 13 16 100 200 300
#
 stp instance 0 root primary
 stp enable
#
 cluster enable
 ntdp enable
 ntdp hop 16
 ndp enable
#
 dhcp enable
#
 undo http server enable
#
 ip pool vlan4
 dhcp server group 1
#
acl number 3009
 rule 10 permit ip destination 192.168.0.0 0.0.255.255
acl number 3012                           
 rule 11 permit ip source 192.168.5.0 0.0.0.255
 rule 15 permit ip source 192.168.3.0 0.0.0.255
 rule 20 permit ip source 192.168.6.0 0.0.0.255
 rule 25 permit ip source 192.168.7.0 0.0.0.255
 rule 30 permit ip source 192.168.10.0 0.0.0.255
#
traffic classifier ecnet operator or
 if-match acl 3012
traffic classifier innernet operator or
 if-match acl 3009
#
traffic behavior yunxu
 permit
traffic behavior redirect
 redirect ip-nexthop 10.0.0.3
#
traffic policy EcRouter
 classifier innernet behavior yunxu
 classifier ecnet behavior redirect
#
vlan 100
 description to firewall
#                                         
dhcp server group 1
#
ip pool vlan4
 gateway-list 192.168.4.1
 network 192.168.4.0 mask 255.255.255.0
 excluded-ip-address 192.168.4.2 192.168.4.4
 dns-list 8.8.8.8 202.102.227.68
 lease day 3 hour 0 minute 0
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher #%YJO2E(@[2C"6@5+9/9:1!!
 local-user admin privilege level 3
 local-user admin service-type telnet terminal web http
 local-user niewd password cipher :/!T+]7*81C,UMD0PV(YO1!!
 local-user niewd privilege level 5
#
interface Vlanif1
 ip address 192.168.1.2 255.255.255.0     
 vrrp vrid 1 virtual-ip 192.168.1.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif2
 ip address 192.168.2.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.2.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif3
 ip address 192.168.3.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.3.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif4
 ip address 192.168.4.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.4.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
 dhcp select global
#                                         
interface Vlanif5
 ip address 192.168.5.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.5.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif6
 ip address 192.168.6.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.6.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif7
 ip address 192.168.7.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.7.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif8
 ip address 192.168.8.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.8.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10  
#
interface Vlanif9
 ip address 192.168.9.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.9.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif10
 ip address 192.168.10.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.10.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif11
 ip address 192.168.11.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.11.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif12
 ip address 192.168.12.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.12.1
 vrrp vrid 1 priority 254                 
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif13
 ip address 192.168.13.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.13.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif100
 ip address 10.0.0.2 255.255.255.0
#
interface Vlanif200
 ip address 192.168.200.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.200.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 traffic-policy EcRouter inbound          
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 7
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/4
 port link-type access
 port default vlan 6
 ntdp enable
 ndp enable                               
 bpdu enable
#
interface GigabitEthernet0/0/5
 port link-type access
 port default vlan 7
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/6
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/7
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable                              
#
interface GigabitEthernet0/0/8
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/9
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/10
 port link-type access
 port default vlan 11
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/11           
 port link-type trunk
 port trunk allow-pass vlan 2 8 10 100 300
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/12
 port link-type access
 port default vlan 7
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/13
 port link-type access
 port default vlan 8
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/14
 port link-type access                    
 port default vlan 11
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/15
 port link-type access
 port default vlan 5
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/16
 port link-type access
 port default vlan 4
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/17
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094     
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/18
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/19
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/20
 port link-type access
 port default vlan 100
 ntdp enable
 ndp enable                               
 bpdu enable
#
interface GigabitEthernet0/0/21
 port link-type access
 port default vlan 4
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/22
 port link-type access
 port default vlan 8
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/23
 port link-type access
 port default vlan 100
 ntdp enable
 ndp enable
 bpdu enable
#                                         
interface GigabitEthernet0/0/24
 port link-type trunk
 port trunk allow-pass vlan 2 to 99 101 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface NULL0
#
 ip route-static 0.0.0.0 0.0.0.0 10.0.0.1
 ip route-static 192.168.5.0 255.255.255.0 10.0.0.3 preference 20
#
 snmp-agent
 snmp-agent local-engineid 000007DB7F000001000056F5
 snmp-agent community read  public
 snmp-agent community write  private
 snmp-agent sys-info version all
#
user-interface con 0
 idle-timeout 0 0
user-interface vty 0 4
 authentication-mode aaa
                                          
[Active Switch-GigabitEthernet0/0/24]traffic-policy EcRouter inbound
 Info: This operation maybe take a long time, please wait for a moment.
[Active Switch-GigabitEthernet0/0/24]
Mar 17 2022 19:16:23+08:00 Active Switch DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 57, the change loop count is 0, and the maximum number of records is 4095.
[Active Switch-GigabitEthernet0/0/24]
[Active Switch-GigabitEthernet0/0/24]
[Active Switch-GigabitEthernet0/0/24]interface GigabitEthernet0/0/12
[Active Switch-GigabitEthernet0/0/12]
Mar 17 2022 19:16:53+08:00 Active Switch DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 58, the change loop count is 0, and the maximum number of records is 4095.
[Active Switch-GigabitEthernet0/0/12]traffic-policy EcRouter inbound
 Info: This operation maybe take a long time, please wait for a moment.
[Active Switch-GigabitEthernet0/0/12]
Mar 17 2022 19:17:03+08:00 Active Switch DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 59, the change loop count is 0, and the maximum number of records is 4095.
[Active Switch-GigabitEthernet0/0/12]q
[Active Switch]q
<Active Switch>sa
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y
Now saving the current configuration to the slot 0 .
Info: Save the configuration successfully.
<Active Switch>
Mar 17 2022 19:21:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3262]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=09)
Mar 17 2022 19:31:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3263]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=08)
Mar 17 2022 19:41:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3264]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=020)
Mar 17 2022 19:51:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3265]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=010)
Mar 17 2022 20:01:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3266]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=010)
Mar 17 2022 20:11:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3267]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=010)
Mar 17 2022 20:21:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3268]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=014)
Mar 17 2022 20:31:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3269]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=014)
Mar 17 2022 20:41:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3270]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=028)
Mar 17 2022 20:51:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3271]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=014)
Mar 17 2022 21:01:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3272]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=014)
Mar 17 2022 21:21:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3273]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=014)
Mar 17 2022 21:31:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3274]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=028)
Mar 17 2022 21:41:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3275]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=014)
Mar 17 2022 22:01:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3276]:Some packets are dropped by cpcar on the MPU. (Protocol=arp-miss, Drop-Count=014)
Mar 18 2022 06:51:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3277]:Some packets are dropped by cpcar on the MPU. (Protocol=reserved-multicast, Drop-Count=033)
Mar 18 2022 07:01:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3278]:Some packets are dropped by cpcar on the MPU. (Protocol=reserved-multicast, Drop-Count=0119)
Mar 18 2022 08:18:04+08:00 Active Switch %%01IFNET/4/IF_STATE(l)[3279]:Interface GigabitEthernet0/0/5 has turned into UP state.
Mar 18 2022 08:18:32+08:00 Active Switch %%01IFNET/4/IF_STATE(l)[3280]:Interface GigabitEthernet0/0/5 has turned into DOWN state.
Mar 18 2022 08:18:37+08:00 Active Switch %%01IFNET/4/IF_STATE(l)[3281]:Interface GigabitEthernet0/0/5 has turned into UP state.
Mar 18 2022 08:21:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3282]:Some packets are dropped by cpcar on the MPU. (Protocol=reserved-multicast, Drop-Count=0272)
<Active Switch>
Mar 18 2022 09:01:55+08:00 Active Switch %%01DEFD/4/CPCAR_DROP_MPU(l)[3283]:Some packets are dropped by cpcar on the MPU. (Protocol=reserved-multicast, Drop-Count=0230)
<Active Switch>sys
Enter system view, return user view with Ctrl+Z.
[Active Switch]dis cu
#
!Software Version V100R005C01SPC100
 sysname Active Switch
#
 vlan batch 2 to 13 16 100 200 300
#
 stp instance 0 root primary
 stp enable
#
 cluster enable
 ntdp enable
 ntdp hop 16
 ndp enable
#
 dhcp enable
#
 undo http server enable
#
 ip pool vlan4
 dhcp server group 1
#
acl number 3009
 rule 10 permit ip destination 192.168.0.0 0.0.255.255
acl number 3012                           
 rule 11 permit ip source 192.168.5.0 0.0.0.255
 rule 15 permit ip source 192.168.3.0 0.0.0.255
 rule 20 permit ip source 192.168.6.0 0.0.0.255
 rule 25 permit ip source 192.168.7.0 0.0.0.255
 rule 30 permit ip source 192.168.10.0 0.0.0.255
#
traffic classifier ecnet operator or
 if-match acl 3012
traffic classifier innernet operator or
 if-match acl 3009
#
traffic behavior yunxu
 permit
traffic behavior redirect
 redirect ip-nexthop 10.0.0.3
#
traffic policy EcRouter
 classifier innernet behavior yunxu
 classifier ecnet behavior redirect
#
vlan 100
 description to firewall
#                                         
dhcp server group 1
#
ip pool vlan4
 gateway-list 192.168.4.1
 network 192.168.4.0 mask 255.255.255.0
 excluded-ip-address 192.168.4.2 192.168.4.4
 dns-list 8.8.8.8 202.102.227.68
 lease day 3 hour 0 minute 0
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher #%YJO2E(@[2C"6@5+9/9:1!!
 local-user admin privilege level 3
 local-user admin service-type telnet terminal web http
 local-user niewd password cipher :/!T+]7*81C,UMD0PV(YO1!!
 local-user niewd privilege level 5
#
interface Vlanif1
 ip address 192.168.1.2 255.255.255.0     
 vrrp vrid 1 virtual-ip 192.168.1.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif2
 ip address 192.168.2.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.2.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif3
 ip address 192.168.3.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.3.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif4
 ip address 192.168.4.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.4.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
 dhcp select global
#                                         
interface Vlanif5
 ip address 192.168.5.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.5.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif6
 ip address 192.168.6.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.6.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif7
 ip address 192.168.7.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.7.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif8
 ip address 192.168.8.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.8.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10  
#
interface Vlanif9
 ip address 192.168.9.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.9.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif10
 ip address 192.168.10.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.10.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif11
 ip address 192.168.11.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.11.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif12
 ip address 192.168.12.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.12.1
 vrrp vrid 1 priority 254                 
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif13
 ip address 192.168.13.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.13.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface Vlanif100
 ip address 10.0.0.2 255.255.255.0
#
interface Vlanif200
 ip address 192.168.200.2 255.255.255.0
 vrrp vrid 1 virtual-ip 192.168.200.1
 vrrp vrid 1 priority 254
 vrrp vrid 1 preempt-mode timer delay 10
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 traffic-policy EcRouter inbound          
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 7
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/4
 port link-type access
 port default vlan 6
 ntdp enable
 ndp enable                               
 bpdu enable
#
interface GigabitEthernet0/0/5
 port link-type access
 port default vlan 7
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/6
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/7
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable                              
#
interface GigabitEthernet0/0/8
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/9
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/10
 port link-type access
 port default vlan 11
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/11           
 port link-type trunk
 port trunk allow-pass vlan 2 8 10 100 300
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/12
 port link-type access
 port default vlan 7
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/13
 port link-type access
 port default vlan 8
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/14           
 port link-type access
 port default vlan 11
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/15
 port link-type access
 port default vlan 5
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/16
 port link-type access
 port default vlan 4
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/17
 port link-type trunk                     
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/18
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/19
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/20
 port link-type access
 port default vlan 100
 ntdp enable                              
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/21
 port link-type access
 port default vlan 4
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/22
 port link-type access
 port default vlan 8
 ntdp enable
 ndp enable
 bpdu enable
#
interface GigabitEthernet0/0/23
 port link-type access
 port default vlan 100
 ntdp enable
 ndp enable
 bpdu enable                              
#
interface GigabitEthernet0/0/24
 port link-type trunk
 port trunk allow-pass vlan 2 to 99 101 to 4094
 traffic-policy EcRouter inbound
 ntdp enable
 ndp enable
 bpdu enable
#
interface NULL0
#
 ip route-static 0.0.0.0 0.0.0.0 10.0.0.1
 ip route-static 192.168.5.0 255.255.255.0 10.0.0.3 preference 20
#
 snmp-agent
 snmp-agent local-engineid 000007DB7F000001000056F5
 snmp-agent community read  public
 snmp-agent community write  private
 snmp-agent sys-info version all
#
user-interface con 0
 idle-timeout 0 0
user-interface vty 0 4                    
 authentication-mode aaa
#
return