古董华为3026交换机端口隔离抵御ARP的办法

         校园网内存在一批2005年前后生产的华为交换机，由于近期网络升级采取了DHCP方式下发IP地址，无奈电脑太多，ARP、广播风暴太严重。同一个办公室的电脑只要1人中毒，全办公室都影响。翻阅了百度寻得一法：端口隔离。无奈，交换机太老了居然不支持这些命令。

版本号见下表
<Quidway>dir
Directory of flash:/

-rwxrwxrwx   1 noone    nogroup   2897728  Jun 22 2005 16:14:38   S3026CGSSI-VRP310-r0020-203.app
-rwxrwxrwx   1 noone    nogroup    442799  Jun 22 2005 16:14:38   wnm2.2.2-0004.zip
-rwxrwxrwx   1 noone    nogroup         8  Apr 02 2000 07:55:22   snmpboots
-rwxrwxrwx   1 noone    nogroup      3685  Apr 02 2000 21:37:05   vrpcfg.txt

7282688 bytes total (3804160 bytes free)

<Quidway>

百度上寻到的：port isolate、acl 5000 这些命令，这个老交换机都不支持。

无奈下通过实验，用以下办法效果不错。



简易拓扑图如上。
S3026配置命令见下面
#
sysname Quidway
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain

domain system
radius-scheme system
access-limit disable
state active
vlan-assignment-mode integer
idle-cut disable
self-service-url disable
messenger time disable

domain default enable system
#
local-server nas-ip 127.0.0.1 key huawei
#
vlan 1
#
vlan 11
#
vlan 12
#
vlan 13
#
vlan 14
#
vlan 15
#
vlan 16
#
vlan 17
#
vlan 18
#
vlan 19
#
vlan 20
#
vlan 21
#
vlan 22
#
vlan 23
#
vlan 24
#
vlan 25
#
vlan 26
#
vlan 27
#
vlan 28
#
vlan 29
#
vlan 30
#
vlan 31
#
vlan 32
#
vlan 33
#
vlan 34
#
vlan 100
#
vlan 105
#
vlan 1000
#
vlan 2000
#
interface Vlan-interface2000
ip address 192.168.99.2 255.255.255.0
#
interface Aux0/0
#
interface Ethernet0/1
port link-type hybrid
port hybrid vlan 11 1000 untagged
port hybrid pvid vlan 11
#
interface Ethernet0/2
port link-type hybrid
port hybrid vlan 12 1000 untagged
port hybrid pvid vlan 12
#
interface Ethernet0/3
port link-type hybrid
port hybrid vlan 13 1000 untagged
port hybrid pvid vlan 13
#
interface Ethernet0/4
port link-type hybrid
port hybrid vlan 14 1000 untagged
port hybrid pvid vlan 14
#
interface Ethernet0/5
port link-type hybrid
port hybrid vlan 15 1000 untagged
port hybrid pvid vlan 15
#
interface Ethernet0/6
port link-type hybrid
port hybrid vlan 16 1000 untagged
port hybrid pvid vlan 16
#
interface Ethernet0/7
port link-type hybrid
port hybrid vlan 17 1000 untagged
port hybrid pvid vlan 17
#
interface Ethernet0/8
port link-type hybrid
port hybrid vlan 18 1000 untagged
port hybrid pvid vlan 18
#
interface Ethernet0/9
port link-type hybrid
port hybrid vlan 19 1000 untagged
port hybrid pvid vlan 19
#
interface Ethernet0/10
port link-type hybrid
port hybrid vlan 20 1000 untagged
port hybrid pvid vlan 20
#
interface Ethernet0/11
port link-type hybrid
port hybrid vlan 21 1000 untagged
port hybrid pvid vlan 21
#
interface Ethernet0/12
port link-type hybrid
port hybrid vlan 22 1000 untagged
port hybrid pvid vlan 22
#
interface Ethernet0/13
port link-type hybrid
port hybrid vlan 23 1000 untagged
port hybrid pvid vlan 23
#
interface Ethernet0/14
port link-type hybrid
port hybrid vlan 24 1000 untagged
port hybrid pvid vlan 24
#
interface Ethernet0/15
port link-type hybrid
port hybrid vlan 25 1000 untagged
port hybrid pvid vlan 25
#
interface Ethernet0/16
port link-type hybrid
port hybrid vlan 26 1000 untagged
port hybrid pvid vlan 26
#
interface Ethernet0/17
port link-type hybrid
port hybrid vlan 27 1000 untagged
port hybrid pvid vlan 27
#
interface Ethernet0/18
port link-type hybrid
port hybrid vlan 28 1000 untagged
port hybrid pvid vlan 28
#
interface Ethernet0/19
port link-type hybrid
port hybrid vlan 29 1000 untagged
port hybrid pvid vlan 29
#
interface Ethernet0/20
port link-type hybrid
port hybrid vlan 30 1000 untagged
port hybrid pvid vlan 30
#
interface Ethernet0/21
port link-type hybrid
port hybrid vlan 31 1000 untagged
port hybrid pvid vlan 31
#
interface Ethernet0/22
port link-type hybrid
port hybrid vlan 32 105 1000 untagged
port hybrid pvid vlan 32
#
interface Ethernet0/23
port link-type hybrid
port hybrid vlan 11 to 31 1000 untagged
port hybrid pvid vlan 1000
#
interface Ethernet0/24
port access vlan 2000
#
interface GigabitEthernet1/1
#
interface NULL0
#
user-interface aux 0
user-interface vty 0 4
#
return
[Quidway]