核 心 交换机详细配置 （2011 年 12 月 2 日） dis cur # version 5.20, Release 6605 # sysname CoreSwitch # domain default enable system # local-user password-display-mode cipher-force # management-vlan 10 # port-security enable # mirroring-group 2 local # switch-mode standard # ip vpn-instance 1 # acl number 3000 acl number 3002 rule 0 deny ip destination 172.20.98.32 0.0.0.15 rule 5 deny ip destination 172.20.98.48 0.0.0.15 rule 10 deny ip destination 172.20.98.64 0.0.0.31 rule 15 deny ip destination 172.20.98.96 0.0.0.31 rule 20 deny ip destination 172.20.98.160 0.0.0.31 rule 25 deny ip destination 172.20.98.192 0.0.0.15 rule 30 deny ip destination 172.20.98.208 0.0.0.15 rule 35 deny ip destination 172.20.98.224 0.0.0.31 acl number 3003 rule 1 deny ip source 172.20.98.0 0.0.0.31 destination 172.20.98.224 0.0.0.31 rule 5 deny ip destination 172.20.98.32 0.0.0.15 rule 10 deny ip destination 172.20.98.48 0.0.0.15 rule 15 deny ip destination 172.20.98.160 0.0.0.31 rule 25 deny ip destination 172.20.98.208 0.0.0.15 acl number 3004 rule 0 deny ip destination 172.20.98.0 0.0.0.31 rule 5 deny ip destination 172.20.98.32 0.0.0.15 rule 10 deny ip destination 172.20.98.64 0.0.0.31 rule 15 deny ip destination 172.20.98.96 0.0.0.31 rule 20 deny ip destination 172.20.98.160 0.0.0.31 rule 25 deny ip destination 172.20.98.192 0.0.0.15 rule 30 deny ip destination 172.20.98.208 0.0.0.15 rule 35 deny ip destination 172.20.98.224 0.0.0.31 acl number 3005 rule 0 deny ip destination 172.20.98.32 0.0.0.15 rule 5 deny ip destination 172.20.98.32 0.0.0.31 rule 10 deny ip destination 172.20.98.64 0.0.0.31 rule 15 deny ip destination 172.20.98.160 0.0.0.31 rule 25 deny ip destination 172.20.98.208 0.0.0.15 rule 30 deny ip destination...
