红色字体为需要自己修改对应的的内容。 # version 7.1.045, Release 3109P09# sysname 二基地一区1设备的名字 # telnet server enable开启 telnet 功能# irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1# dhcp snooping enable开启 dhcp 防护功能# lldp global enable# loopback-detection global enable vlan 238开启 vlan238的 环路检测功能 loopback-detection global action shutdown检测到环路后动作为关闭# password-recovery enable#vlan 1#vlan 200 description guanli注释vlan200的作用#vlan 238# stp global enable#interface NULL0#interface Vlan-interface1#interface Vlan-interface200 ip address 192.168.200.179 255.255.255.0定义 该交换机的管理地址#interface GigabitEthernet1/0/1 port access vlan 238该端口加入vlan238 并工作在 access模式 ip verify source ip-address mac-address开启该端口的DHCP检测功能 loopback-detection action shutdown在该端口发生环路后关闭该端口 dhcp snooping binding record关闭该端口的dchp路由发包#interface GigabitEthernet1/0/2 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/3 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/4 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/5 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/6 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/7 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/8 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/9 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/10 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/11 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/12 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/13 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/14 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/15 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/16 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/17 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/18 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/19 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/20 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/21 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/22 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/23 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface GigabitEthernet1/0/24 port access vlan 238 ip verify source ip-address mac-address loopback-detection action shutdown dhcp snooping binding record#interface Ten-GigabitEthernet1/0/25 description link to 二基地核心S10508-2-29注释该端口上级设备接口 port link-type trunk该端口工作模式为 trunk port允许所有vlan ID数据包通过 trunk permit vla