1. 程式人生 > >華為AR2220E-S 設置限制上網時間

華為AR2220E-S 設置限制上網時間

華為 drop mat realm arm 自己 fir min telnet

華為AR2220E-S 設置限制上網時間

<staff_AR2220e>dis version

Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.160 (AR2200 V200R007C00SPCb00)
Copyright (C) 2011-2016 HUAWEI TECH CO., LTD
Huawei AR2220E-S Router uptime is 0 week, 3 days, 2 hours, 48 minutes
BKP 0 version information:

  1. PCB Version : AR01BAK2C VER.B
  2. If Supporting PoE : No
  3. Board Type : AR2220E-S
  4. MPU Slot Quantity : 1
  5. LPU Slot Quantity : 6

以下為配置信息註意斜體部分需要修改。
[V200R007C00SPCb00]
#
sysname staff_AR2220e
#

  • time-range staff-workingday 17:30 to 23:00 working-day
    time-range staff-workingday 07:00 to 23:00 off-day *
    #上部分斜體為設置可上網時間
    drop illegal-mac alarm
    #
    clock timezone BeijingChongqingHongKongUrumqi add 08:00:00
    #設置時區
    ipv6
    #
    dns resolve
    dns server 114.114.114.114
    dns proxy enable
    #
    dhcp enable
    #
    ip accounting mismatched-threshold 8192
    #
    pki realm default
    enrollment self-signed
    #
    ssl policy default_policy type server
    pki-realm default
    #
    acl name ls2 2998
    acl name GigabitEthernet0/0/1 2999
    rule 5 permit
    #
    acl name staff 3996
    rule 5 permit ip source 10.1.0.0 0.0.0.128 time-range staff-workingday
    acl name xiaofangju_leader 3997
  • rule 1 permit ip source 10.1.0.1 0
    rule 2 permit ip source 10.1.0.2 0

    rule 50 permit ip source 10.1.0.0 0.0.0.255 time-range staff-workingday
    acl number 3998
    acl name test 3999
    #斜體部分IP不受上網時間限制 rule50為對剩余ip進行上網時間控制
    aaa
    authentication-scheme default
    authorization-scheme default
    accounting-scheme default
    domain default
    domain default_admin

#
firewall zone Local
priority 64
#
interface GigabitEthernet0/0/0
ip address 192.168.1.1 255.255.255.0
combo-port auto
#
interface GigabitEthernet0/0/1
ip address 123.123.123.123 255.255.255.248
nat outbound 3997
#斜體處ip與掩碼需要更換為自己的
interface GigabitEthernet0/0/2
tcp adjust-mss 1200
ip address 10.1.0.1 255.255.255.0
dhcp select interface
dhcp server excluded-ip-address 10.1.0.2 10.1.0.100
dhcp server excluded-ip-address 10.1.0.200 10.1.0.227
dhcp server dns-list 10.1.0.1
ip accounting input-packets
ip accounting output-packets
#
interface GigabitEthernet0/0/3
description VirtualPort
#
interface Cellular0/0/0
#
interface Cellular0/0/1
#
interface NULL0
#
info-center timestamp log format-date
#

#
telnet server enable
#
http secure-server port 4433
http secure-server ssl-policy default_policy
http server enable
http secure-server enable
#
ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0/1 123.123.123.122
#斜體出更換為自己網關
fib regularly-refresh disable
#
user-interface con 0
authentication-mode aaa
user-interface vty 0
authentication-mode aaa
user privilege level 15
user-interface vty 1 4
authentication-mode aaa
#
wlan ac
#
undo ntp-service enable
ntp-service cwmp unicast-server 120.25.115.20 first
#此處禁止時間服務器
voice
#
diagnose
#
ops
#
autostart
#
return

註意可使用以下命令查看時間段是否生效
<staff_AR2220e>dis time-range all

技術分享圖片

使用以下命令查看路由器當前時間
<staff_AR2220e>dis clock
2018-08-25 21:15:27
Saturday
Time Zone(BeijingChongqingHongKongUrumqi) : UTC+08:00
<staff_AR2220e>

設置時間使用以下命令
<Bloomage_SD_staff_AR2220e>clock datetime

華為AR2220E-S 設置限制上網時間