思路
mstp
顺序：自下而上的配置
加粗没修改
1.接入层/汇聚层的vlan信息配置
sw3：创建vlan2 3 20 30
3/4口放通2，3，20，30 删除vlan1 放通
sw4同3
sw1/sw2创建完vlan直接聚合：最简单
三个接口都放通所有
2.生成树协议
mstp
sw1 2 3 4都要
让1 2 3 4处于同一个域 同一网关
vlan 2 3一个域
20 30 一个域
绝对看不到master
主备
3.vrrp网关配置信息
监控上行0/0/5
4.dhcp
网关设置虚拟的
5.三层以上
两个路由器也要写vlanif
配交换机路由，交换机有没有通
等一个主根
企业边界缺省向外指
6.acl优化点
super vlan
子vlan不能创建vlan接口
结果
以pc1访问pc3 和pc1访问环回为例
but：当时我在班级还能ping通，回到宿舍突然失效ping不通了！
pc1 访问pc3
PC>ping 10.0.20.253
Ping 10.0.20.253: 32 data bytes, Press Ctrl_C to break
From 10.0.20.253: bytes=32 seq=1 ttl=127 time=203 ms
From 10.0.20.253: bytes=32 seq=2 ttl=127 time=125 ms
From 10.0.20.253: bytes=32 seq=3 ttl=127 time=140 ms
From 10.0.20.253: bytes=32 seq=4 ttl=127 time=110 ms
From 10.0.20.253: bytes=32 seq=5 ttl=127 time=140 ms
--- 10.0.20.253 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 110/143/203 ms
PC>
PC>ping 100.100.100.100
Ping 100.100.100.100: 32 data bytes, Press Ctrl_C to break
Request timeout!
From 100.100.100.100: bytes=32 seq=2 ttl=253 time=109 ms
From 100.100.100.100: bytes=32 seq=3 ttl=253 time=78 ms
From 100.100.100.100: bytes=32 seq=4 ttl=253 time=125 ms
From 100.100.100.100: bytes=32 seq=5 ttl=253 time=63 ms
--- 100.100.100.100 ping statistics ---
5 packet(s) transmitted
4 packet(s) received
20.00% packet loss
round-trip min/avg/max = 0/93/125 ms
PC>ping 100.100.100.100不足点：我的pc1 2 3 4 获得IP未考虑备用三层路由器
解决办法：
要加备用的网关 一个vlan两个地址池
IP池一人一半：加排除 excluded-IP-address 10.0.2.128-10.0.2.253
网关设置虚拟的
interface Vlanif100
ip address 10.0.0.1 255.255.255.252
#
return
[sw1-Vlanif100]q
[sw1]vlan batch 300
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw1]
Apr 20 2026 20:10:26-08:00 sw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 8, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw1] port link-type access
^
Error:Ambiguous command found at '^' position.
[sw1]int g 0/0/5
[sw1-GigabitEthernet0/0/5]port link-type access
[sw1-GigabitEthernet0/0/5]port default vlan
Apr 20 2026 20:12:26-08:00 sw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 9, the c
hange loop count is 0, and the maximum number of records is 4095. 100
[sw1-GigabitEthernet0/0/5]
Apr 20 2026 20:12:27-08:00 sw1 %%01IFNET/4/IF_STATE(l)[0]:Interface Vlanif100 ha
s turned into UP state.
Apr 20 2026 20:12:27-08:00 sw1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
on the interface Vlanif100 has entered the UP state.
[sw1-GigabitEthernet0/0/5]port default vlan 100
[sw1-GigabitEthernet0/0/5]
Apr 20 2026 20:12:36-08:00 sw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 10, the
change loop count is 0, and the maximum number of records is 4095.
[sw1-GigabitEthernet0/0/5]int Eth-Trunk 0
[sw1-Eth-Trunk0]port link-type trunk 300
^
Error:Too many parameters found at '^' position.
[sw1-Eth-Trunk0]port link-type trunk
[sw1-Eth-Trunk0]port trunk allow-pass vlan 300
[sw1-Eth-Trunk0]
Apr 20 2026 20:13:46-08:00 sw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 11, the
change loop count is 0, and the maximum number of records is 4095.
[sw1-Eth-Trunk0]dis th
#
interface Eth-Trunk0
port link-type trunk
port trunk allow-pass vlan 2 to 3 20 30 300
mode lacp-static
max active-linknumber 2
#
return
[sw1-Eth-Trunk0]int vlan 300
[sw1-Vlanif300]
Apr 20 2026 20:15:25-08:00 sw1 %%01IFNET/4/IF_STATE(l)[2]:Interface Vlanif300 ha
s turned into UP state.
[sw1-Vlanif300]ip address 10.0.0.9 30
[sw1-Vlanif300]
Apr 20 2026 20:15:36-08:00 sw1 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol IP
on the interface Vlanif300 has entered the UP state.
Apr 20 2026 20:15:46-08:00 sw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 12, the
change loop count is 0, and the maximum number of records is 4095.
[sw1-Vlanif300]q
[sw1]ping 10.0.0.10
PING 10.0.0.10: 56 data bytes, press CTRL_C to break
Reply from 10.0.0.10: bytes=56 Sequence=1 ttl=255 time=80 ms
Reply from 10.0.0.10: bytes=56 Sequence=2 ttl=255 time=40 ms
Reply from 10.0.0.10: bytes=56 Sequence=3 ttl=255 time=30 ms
Reply from 10.0.0.10: bytes=56 Sequence=4 ttl=255 time=30 ms
Reply from 10.0.0.10: bytes=56 Sequence=5 ttl=255 time=50 ms
--- 10.0.0.10 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 30/46/80 ms
[sw1]ping 10.0.06
Error: Unknown host 10.0.06.
[sw1]ping 10.0.06
Error: Unknown host 10.0.06.
[sw1]ping 10.0.0.6
PING 10.0.0.6: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- 10.0.0.6 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[sw1]ip route-static 0.0.0.0 10.0.0.2
^
Error:Incomplete command found at '^' position.
[sw1]ip route-static 0.0.0.0 0 10.0.0.2
[sw1]
Apr 20 2026 20:22:06-08:00 sw1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 13, the
change loop count is 0, and the maximum number of records is 4095.
[sw1]ping 10.0.0.6
PING 10.0.0.6: 56 data bytes, press CTRL_C to break
Reply from 10.0.0.6: bytes=56 Sequence=1 ttl=255 time=150 ms
Reply from 10.0.0.6: bytes=56 Sequence=2 ttl=255 time=20 ms
Reply from 10.0.0.6: bytes=56 Sequence=3 ttl=255 time=50 ms
Reply from 10.0.0.6: bytes=56 Sequence=4 ttl=255 time=50 ms
Reply from 10.0.0.6: bytes=56 Sequence=5 ttl=255 time=30 ms
--- 10.0.0.6 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/60/150 ms
[sw1]ping 100.100.100.100
PING 100.100.100.100: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- 100.100.100.100 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[sw1]ping 100.100.100.100
PING 100.100.100.100: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- 100.100.100.100 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[sw1]ping 202.1.1.1
PING 202.1.1.1: 56 data bytes, press CTRL_C to break
Reply from 202.1.1.1: bytes=56 Sequence=1 ttl=255 time=70 ms
Reply from 202.1.1.1: bytes=56 Sequence=2 ttl=255 time=50 ms
Reply from 202.1.1.1: bytes=56 Sequence=3 ttl=255 time=1 ms
Reply from 202.1.1.1: bytes=56 Sequence=4 ttl=255 time=50 ms
Reply from 202.1.1.1: bytes=56 Sequence=5 ttl=255 time=40 ms
--- 202.1.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/42/70 ms
[sw1]ping 202.1.1.2
PING 202.1.1.2: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- 202.1.1.2 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[sw1]
Apr 20 2026 20:59:15-08:00 sw1 %%01VRRP/4/STATEWARNINGEXTEND(l)[4]:Virtual Route
r state BACKUP changed to MASTER, because of protocol timer expired. (Interface=
Vlanif20, VrId=3, InetType=IPv4)
Apr 20 2026 20:59:15-08:00 sw1 %%01VRRP/4/STATEWARNINGEXTEND(l)[5]:Virtual Route
r state BACKUP changed to MASTER, because of protocol timer expired. (Interface=
Vlanif30, VrId=4, InetType=IPv4)
Apr 20 2026 20:59:15-08:00 sw1 %%01VRRP/4/STATEWARNINGEXTEND(l)[6]:Virtual Route
r state MASTER changed to BACKUP, because of priority calculation. (Interface=Vl
anif20, VrId=3, InetType=IPv4)
Apr 20 2026 20:59:15-08:00 sw1 %%01VRRP/4/STATEWARNINGEXTEND(l)[7]:Virtual Route
r state MASTER changed to BACKUP, because of priority calculation. (Interface=Vl
anif30, VrId=4, InetType=IPv4) User interface con0 is available
Please Press ENTER.
<sw1>save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y
Now saving the current configuration to the slot 0.
Apr 20 2026 21:04:21-08:00 sw1 %%01CFM/4/SAVE(l)[0]:The user chose Y when decidi
ng whether to save the configuration to the device.
Save the configuration successfully.
<sw1>
<sw1>
<sw1>sys
Enter system view, return user view with Ctrl+Z.
[sw1]ping 202.1.1.1
PING 202.1.1.1: 56 data bytes, press CTRL_C to break
Reply from 202.1.1.1: bytes=56 Sequence=1 ttl=255 time=50 ms
Reply from 202.1.1.1: bytes=56 Sequence=2 ttl=255 time=40 ms
Reply from 202.1.1.1: bytes=56 Sequence=3 ttl=255 time=50 ms
Reply from 202.1.1.1: bytes=56 Sequence=4 ttl=255 time=20 ms
Reply from 202.1.1.1: bytes=56 Sequence=5 ttl=255 time=50 ms
--- 202.1.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/42/50 ms
[sw1]ping 202.1.1.2
PING 202.1.1.2: 56 data bytes, press CTRL_C to break
Request time out
Reply from 202.1.1.2: bytes=56 Sequence=2 ttl=254 time=80 ms
Reply from 202.1.1.2: bytes=56 Sequence=3 ttl=254 time=60 ms
Reply from 202.1.1.2: bytes=56 Sequence=4 ttl=254 time=30 ms
Reply from 202.1.1.2: bytes=56 Sequence=5 ttl=254 time=40 ms
--- 202.1.1.2 ping statistics ---
5 packet(s) transmitted
4 packet(s) received
20.00% packet loss
round-trip min/avg/max = 30/52/80 ms
The device is running!
<sw2>
<sw2>sys
Enter system view, return user view with Ctrl+Z.
[sw2]int g 0/0/4
[sw2-GigabitEthernet0/0/4]dis th
#
interface GigabitEthernet0/0/4
#
return
[sw2-GigabitEthernet0/0/4]
[sw2-GigabitEthernet0/0/4]port link-type trunk
[sw2-GigabitEthernet0/0/4]port rrunk
Apr 20 2026 19:32:53-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 1, the c
hange loop count is 0, and the maximum number of records is 4095. allow
^
Error: Unrecognized command found at '^' position.
[sw2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 3 20 30
[sw2-GigabitEthernet0/0/4]
Apr 20 2026 19:33:43-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 2, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw2-GigabitEthernet0/0/4]int g 0/0/3
[sw2-GigabitEthernet0/0/3]dis th
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 20 30
#
return
[sw2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 3
[sw2-GigabitEthernet0/0/3]
Apr 20 2026 19:34:33-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 3, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw2-GigabitEthernet0/0/3]q
[sw2]display vrrp brief
VRID State Interface Type Virtual IP
----------------------------------------------------------------
1 Backup Vlanif2 Normal 10.0.2.3
2 Backup Vlanif3 Normal 10.0.3.3
3 Master Vlanif20 Normal 10.0.20.3
4 Master Vlanif30 Normal 10.0.30.3
----------------------------------------------------------------
Total:4 Master:2 Backup:2 Non-active:0
[sw2]
Apr 20 2026 19:40:33-08:00 sw2 %%01PHY/1/PHY(l)[0]: GigabitEthernet0/0/3: cha
nge status to down
Apr 20 2026 19:40:34-08:00 sw2 %%01PHY/1/PHY(l)[1]: GigabitEthernet0/0/3: cha
nge status to up
[sw2]int vlan 20
[sw2-Vlanif20]dis th
#
interface Vlanif20
ip address 10.0.20.254 255.255.255.0
vrrp vrid 3 virtual-ip 10.0.20.3
vrrp vrid 3 priority 120
dhcp select global
#
return
[sw2-Vlanif20]vrrp vrid 3 preempt-mode timer delay 20
[sw2-Vlanif20]
Apr 20 2026 19:47:24-08:00 sw2 %%01PHY/1/PHY(l)[2]: GigabitEthernet0/0/3: cha
nge status to down
Apr 20 2026 19:47:25-08:00 sw2 %%01PHY/1/PHY(l)[3]: GigabitEthernet0/0/3: cha
nge status to up
Apr 20 2026 19:47:33-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 4, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw2-Vlanif20]vrrp vrid 3 track interface GigabitEthernet 0/0/5
[sw2-Vlanif20]
Apr 20 2026 19:47:53-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 5, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw2-Vlanif20]int vlan 30
[sw2-Vlanif30]dis th
#
interface Vlanif30
ip address 10.0.30.254 255.255.255.0
vrrp vrid 4 virtual-ip 10.0.30.3
vrrp vrid 4 priority 120
dhcp select global
#
return
[sw2-Vlanif30] vrrp vrid 4 preempt-mode timer delay 20
[sw2-Vlanif30]
Apr 20 2026 19:48:33-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 6, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw2-Vlanif30] vrrp vrid 4 track interface GigabitEthernet 0/0/5
[sw2-Vlanif30]
Apr 20 2026 19:48:53-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 7, the c
hange loop count is 0, and the maximum number of records is 4095. User interface con0 is available
Please Press ENTER.
<sw2>sys
Enter system view, return user view with Ctrl+Z.
[sw2]int vlan 200
[sw2-Vlanif200]dis th
#
interface Vlanif200
ip address 10.0.0.5 255.255.255.252
#
return
[sw2-Vlanif200]vlan batch 300
Info: This operation may take a few seconds. Please wait for a moment...done.
[sw2]
Apr 20 2026 20:10:34-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 8, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw2]interface Eth-Trunk0
[sw2-Eth-Trunk0] port link-type trunk
[sw2-Eth-Trunk0]port trunk allow-pass vlan 300
[sw2-Eth-Trunk0]
Apr 20 2026 20:14:34-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 9, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw2-Eth-Trunk0]int g 0/0/5
[sw2-GigabitEthernet0/0/5]port link-type access
[sw2-GigabitEthernet0/0/5]port default vlan 200
[sw2-GigabitEthernet0/0/5]
Apr 20 2026 20:15:03-08:00 sw2 %%01IFNET/4/IF_STATE(l)[0]:Interface Vlanif200 ha
s turned into UP state.
Apr 20 2026 20:15:03-08:00 sw2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
on the interface Vlanif200 has entered the UP state.
Apr 20 2026 20:15:04-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 11, the
change loop count is 0, and the maximum number of records is 4095.
[sw2-GigabitEthernet0/0/5]int vlan 300
[sw2-Vlanif300]
Apr 20 2026 20:16:00-08:00 sw2 %%01IFNET/4/IF_STATE(l)[2]:Interface Vlanif300 ha
s turned into UP state.
[sw2-Vlanif300]ip add 10.0.0.10 30
[sw2-Vlanif300]
Apr 20 2026 20:16:14-08:00 sw2 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol IP
on the interface Vlanif300 has entered the UP state.
Apr 20 2026 20:16:24-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 12, the
change loop count is 0, and the maximum number of records is 4095.
[sw2-Vlanif300]q
[sw2]ip route-static 0.0.0.0 0 10.0.0.6
[sw2]
Apr 20 2026 20:22:24-08:00 sw2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 13, the
change loop count is 0, and the maximum number of records is 4095.
Apr 20 2026 20:23:13-08:00 sw2 %%01PHY/1/PHY(l)[4]: GigabitEthernet0/0/3: cha
nge status to down
Apr 20 2026 20:23:14-08:00 sw2 %%01PHY/1/PHY(l)[5]: GigabitEthernet0/0/3: cha
nge status to up User interface con0 is available
Please Press ENTER.
<sw2>save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y
Now saving the current configuration to the slot 0.
Apr 20 2026 21:04:28-08:00 sw2 %%01CFM/4/SAVE(l)[0]:The user chose Y when decidi
ng whether to save the configuration to the device.
Save the configuration successfully.
<sw2>
<sw2>
<sw2>
<sw2>
The device is running!
<sw3>sys
Enter system view, return user view with Ctrl+Z.
[sw3]display stp brief
MSTID Port Role STP State Protection
0 GigabitEthernet0/0/1 DESI FORWARDING NONE
0 GigabitEthernet0/0/2 DESI FORWARDING NONE
0 GigabitEthernet0/0/3 ROOT FORWARDING NONE
0 GigabitEthernet0/0/4 ALTE DISCARDING NONE
[sw3]int g 0/0/3
[sw3-GigabitEthernet0/0/3] port link-type trunk
[sw3-GigabitEthernet0/0/3] port trunk allow-pass vlan 2 to 3 20 30
[sw3-GigabitEthernet0/0/3]int g 0/0/4
[sw3-GigabitEthernet0/0/4] port link-type trunk
[sw3-GigabitEthernet0/0/4] port trunk allow-pass vlan 2 to 3 20 30
[sw3-GigabitEthernet0/0/4] User interface con0 is available
Please Press ENTER.
<sw3>i User interface con0 is available
Please Press ENTER.
<sw3>save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y
Now saving the current configuration to the slot 0.
Apr 20 2026 21:04:43-08:00 sw3 %%01CFM/4/SAVE(l)[0]:The user chose Y when decidi
ng whether to save the configuration to the device.
Save the configuration successfully.
<sw3>
<sw3>dis th
#
return
<sw3>
The device is running!
<sw4>
<sw4>sys
Enter system view, return user view with Ctrl+Z.
[sw4]int g 0/0/4
[sw4-GigabitEthernet0/0/4] port link-type trunk
[sw4-GigabitEthernet0/0/4] port trunk allow-pass vlan 2 to 3 20 30
[sw4-GigabitEthernet0/0/4]
Apr 20 2026 19:29:30-08:00 sw4 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25
.191.3.1 configurations have been changed. The current change number is 1, the c
hange loop count is 0, and the maximum number of records is 4095.
[sw4-GigabitEthernet0/0/4]int g 0/0/3
[sw4-GigabitEthernet0/0/3]
[sw4-GigabitEthernet0/0/3]dis th
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 3 20 30
#
return
[sw4-GigabitEthernet0/0/3]
[sw4-GigabitEthernet0/0/3] User interface con0 is available
Please Press ENTER.
<sw4>
Apr 20 2026 20:10:24-08:00 sw4 %%01PHY/1/PHY(l)[0]: GigabitEthernet0/0/2: cha
nge status to down
Apr 20 2026 20:10:25-08:00 sw4 %%01PHY/1/PHY(l)[1]: GigabitEthernet0/0/2: cha
nge status to up User interface con0 is available
Please Press ENTER.
<sw4>save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y
Now saving the current configuration to the slot 0.
Apr 20 2026 21:04:51-08:00 sw4 %%01CFM/4/SAVE(l)[0]:The user chose Y when decidi
ng whether to save the configuration to the device.
Save the configuration successfully.
<sw4>
<sw4>
[AR1]acl 2000
[AR1-acl-basic-2000]rule permit source 10.0.0.0 0.255.255.255
[AR1-acl-basic-2000]rule 10 permit source any
[AR1-acl-basic-2000]int g 0/0/0
[AR1-GigabitEthernet0/0/0]traffic-filter outbound acl 2000
Error: A simplified ACL has been applied in this view.
[AR1-GigabitEthernet0/0/0]dis th
[V200R003C00]
#
interface GigabitEthernet0/0/0
ip address 202.1.1.1 255.255.255.252
traffic-filter outbound acl 2000
#
return
[AR1-GigabitEthernet0/0/0]undo traffic-filter outbound acl 2000
^
Error:Too many parameters found at '^' position.
[AR1-GigabitEthernet0/0/0]acl 2000
[AR1-acl-basic-2000]undo rule 10 permit source any
^
Error:Too many parameters found at '^' position.
[AR1-acl-basic-2000]undo rule 10
[AR1-acl-basic-2000]rule 10 permit source 10.0.0.0 0.255.255.255
Error: The rule already exists.
[AR1-acl-basic-2000]traffic-filter outbound acl 2000
^
Error: Unrecognized command found at '^' position.
[AR1-acl-basic-2000]int g 0/0/0
[AR1-GigabitEthernet0/0/0][AR1-acl-basic-2000]traffic-filter outbound acl 2000
^
Error: Unrecognized command found at '^' position.
[AR1-GigabitEthernet0/0/0]
[AR1-GigabitEthernet0/0/0] ^
^
Error: Unrecognized command found at '^' position.
[AR1-GigabitEthernet0/0/0]
[AR1-GigabitEthernet0/0/0]Error: Unrecognized command found at '^' position.
^
Error: Unrecognized command found at '^' position.
[AR1-GigabitEthernet0/0/0]traffic-filter outbound acl 2000
Error: A simplified ACL has been applied in this view.
[AR1-GigabitEthernet0/0/0]undo traffic-filter outbound
[AR1-GigabitEthernet0/0/0]traffic-filter outbound acl 2000
[AR1-GigabitEthernet0/0/0]
Please check whether system data has been changed, and save data in time
Configuration console time out, please press any key to log on
<AR1>sys
Enter system view, return user view with Ctrl+Z.
[AR1]undo rule permit source 10.0.0.0 0.255.255.255
^
Error: Unrecognized command found at '^' position.
[AR1]acl 2000
[AR1-acl-basic-2000]undo rule
^
Error:Incomplete command found at '^' position.
[AR1-acl-basic-2000]q
[AR1]display acl 2000
Basic ACL 2000, 1 rule
Acl's step is 5
rule 5 permit source 10.0.0.0 0.255.255.255 (10 matches)
[AR1]int g 0/0/0
[AR1-GigabitEthernet0/0/0]dis th
[V200R003C00]
#
interface GigabitEthernet0/0/0
ip address 202.1.1.1 255.255.255.252
traffic-filter outbound acl 2000
#
return
[AR1-GigabitEthernet0/0/0]int g 0/0/1
[AR1-GigabitEthernet0/0/1]dis th
[V200R003C00]
#
interface GigabitEthernet0/0/1
ip address 10.0.0.2 255.255.255.252
#
return
[AR1-GigabitEthernet0/0/1]acl 2000
[AR1-acl-basic-2000]dis th
[V200R003C00]
#
acl number 2000
rule 5 permit source 10.0.0.0 0.255.255.255
#
return
[AR1-acl-basic-2000]q
[AR1]
[AR1]
[AR1]dis
[AR1]display ip rou
[AR1]display ip routing-table
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 15 Routes : 16
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 Static 60 0 RD 202.1.1.2 GigabitEthernet
0/0/0
10.0.0.0/8 Static 60 0 RD 10.0.0.1 GigabitEthernet
0/0/1
Static 60 0 RD 10.0.0.5 GigabitEthernet
0/0/2
10.0.0.0/30 Direct 0 0 D 10.0.0.2 GigabitEthernet
0/0/1
10.0.0.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
10.0.0.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
10.0.0.4/30 Direct 0 0 D 10.0.0.6 GigabitEthernet
0/0/2
10.0.0.6/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
10.0.0.7/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
202.1.1.0/30 Direct 0 0 D 202.1.1.1 GigabitEthernet
0/0/0
202.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
202.1.1.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
[AR1]
[AR1]
[AR1]int
[AR1]interface g
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]dis th
[V200R003C00]
#
interface GigabitEthernet0/0/0
ip address 202.1.1.1 255.255.255.252
traffic-filter outbound acl 2000
#
return
[AR1-GigabitEthernet0/0/0]undo f
[AR1-GigabitEthernet0/0/0]undo flow-control
[AR1-GigabitEthernet0/0/0]undo tra
[AR1-GigabitEthernet0/0/0]undo traffic-filter o
[AR1-GigabitEthernet0/0/0]undo traffic-filter outbound a
[AR1-GigabitEthernet0/0/0]undo traffic-filter outbound
[AR1-GigabitEthernet0/0/0]
[AR1-GigabitEthernet0/0/0]
[AR1-GigabitEthernet0/0/0]o
[AR1-GigabitEthernet0/0/0]nat o
[AR1-GigabitEthernet0/0/0]nat outbound 2000
[AR1-GigabitEthernet0/0/0]q
[AR1]#########################
<AR1>av
^
Error: Unrecognized command found at '^' position.
<AR1>save
The current configuration will be written to the device.
Are you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait.......
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
<AR1>sys
Enter system view, return user view with Ctrl+Z.
[AR1]int g 0/0/0
[AR1-GigabitEthernet0/0/0]nat outbound 2000
[AR1-GigabitEthernet0/0/0]
[AR1-GigabitEthernet0/0/0]q
[AR1]acl 20000
The device is running!
<ISP>
<ISP> User interface con0 is available
Please Press ENTER.
<ISP> User interface con0 is available
Please Press ENTER.
<ISP>sys
Enter system view, return user view with Ctrl+Z.
[ISP]dis th
#
sysname ISP
#
return
[ISP]int g 0/0/0
[ISP-GigabitEthernet0/0/0]dis th
#
interface GigabitEthernet0/0/0
ip address 202.1.1.2 255.255.255.252
#
return
[ISP-GigabitEthernet0/0/0]q
[ISP]interface LoopBack 0
[ISP-LoopBack0]ip add 100.100.100.100 24
Error: The address already exists.
[ISP-LoopBack0] User interface con0 is available
Please Press ENTER.
<ISP>
<ISP>save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y
Now saving the current configuration to the slot 17.
Apr 20 2026 21:07:57-08:00 ISP %%01CFM/4/SAVE(l)[0]:The user chose Y when decidi
ng whether to save the configuration to the device.
Save the configuration successfully.
<ISP>
<ISP>
User interface con0 is available
Please Press ENTER.