家用万兆网络搭建方案，求推荐

qiangduan

小魔头 发表于 2024-2-19 14:12
不是的，我自己做的智能家居，12个摄像头全家全覆盖，利用视觉识别来实现一些控制反馈。 ...

请问下摄像头和智能家居选的哪家的？我也是打算四层大概十三四个 目前想用小米蓝牙mesh方案，但是他们家用摄像头都是无线的

小魔头

海康的摄像头，poe供电。
智能家居是我用FPGA自己焊自己写程序做的。传感器和灯光用485通讯

ljdooo

ynix2002 发表于 2024-2-19 12:34
42U机柜，12个摄像机，豪就一个字。

羡慕嫉妒，其他不看，PC都5W，已经是顶层了

zgpnhhy

推荐ubnt呀,帅就完事了.
监控,门禁,ap全部接管到ubnt控制台.

小魔头

zgpnhhy 发表于 2024-3-4 08:58
推荐ubnt呀,帅就完事了.
监控,门禁,ap全部接管到ubnt控制台.

主要是UBNT新出的那个U7的AP看了看赶紧性能很一般，cisco、aruba这些品牌国内又没有上线wifi7的产品，比较了下华为新华三**，看了看还是华为的性能好，所以才想着搞华为全家桶。

Krakenius

要是有单独的房间或位置隔音放S5736-S24UM4XC，完全没必要换掉，这是个好东西

小魔头

Krakenius 发表于 2024-3-4 16:16
要是有单独的房间或位置隔音放S5736-S24UM4XC，完全没必要换掉，这是个好东西 ...

有单独的一个小机房来放，想换主要是2个问题，1是这个噪音确实是个问题，普通不隔音的柜子门那种关上还是听得见。二是这个东西功率太大了（即使不插任何设备空载就70W，我只有几个AP是需要万兆POE供电的，赶紧24口POE没必要）

zgpnhhy

小魔头 发表于 2024-3-4 16:04
主要是UBNT新出的那个U7的AP看了看赶紧性能很一般，cisco、aruba这些品牌国内又没有上线wifi7的产品，比 ...

额,我还没有上wifi7的,没有测试过.
手机就是用wifi6,pc跟nas主要还是万兆.

zhqiang

Krakenius 发表于 2024-3-4 16:16
要是有单独的房间或位置隔音放S5736-S24UM4XC，完全没必要换掉，这是个好东西 ...

借楼问一下，这个交换机好配置么？以前用的都是傻瓜交换机，感觉这种企业的都是要通过命令行配置，不知道复杂不复杂？谢谢

Krakenius

zhqiang 发表于 2024-3-6 19:46
借楼问一下，这个交换机好配置么？以前用的都是傻瓜交换机，感觉这种企业的都是要通过命令行配置，不知道 ...

要是有个模板的话就不难，要是自己没有之前存起来用过的配置，对新手还是有一点难度的，我这个是H3C的，华为的应该差不多。里面的配置基本上接口都是类似的，二层交换机就配置一下vlan和接口是access还是trunk，允许哪些vlan通过，三层交换机就再配置个网关和路由还有dhcp，但也可以当二层用不起网关

1. #
   
2. version 7.1.070, Release 6351P06
   
3. #
   
4. sysname switch
   
5. #
   
6. clock timezone Beijing add 08:00:00
   
7. clock protocol ntp
   
8. #
   
9. telnet server enable
   
10. telnet server acl 2000
    
11. telnet server ipv6 acl ipv6 2000
    
12. #
    
13. link-aggregation global load-sharing mode ingress-port destination-mac source-mac destination-ip source-ip destination-port source-port
    
14. #
    
15. dhcp snooping enable
    
16. #
    
17. dns server 223.5.5.5
    
18. dns server 119.29.29.29
    
19. #
    
20. ipv6 savi strict
    
21. #
    
22. ipv6 dhcp snooping enable
    
23. #
    
24. undo transceiver third-party alarm enable
    
25. password-recovery enable
    
26. #
    
27. poe ai enable
    
28. #
    
29. vlan 1
    
30. ipv6 nd detection enable
    
31. dhcp snooping binding record
    
32. ipv6 dhcp snooping binding record
    
33. #
    
34. vlan 10
    
35. ipv6 nd detection enable
    
36. dhcp snooping binding record
    
37. ipv6 dhcp snooping binding record
    
38. #
    
39. vlan 20
    
40. ipv6 nd detection enable
    
41. dhcp snooping binding record
    
42. ipv6 dhcp snooping binding record
    
43. #
    
44. vlan 45
    
45. #
    
46. vlan 100
    
47. ipv6 nd detection enable
    
48. dhcp snooping binding record
    
49. ipv6 dhcp snooping binding record
    
50. #
    
51. stp instance 0 priority 4096
    
52. stp mode rstp
    
53. stp global enable
    
54. #
    
55. interface Bridge-Aggregation1
    
56. 
    
57. port access vlan 100
    
58. link-aggregation mode dynamic
    
59. stp root-protection
    
60. ipv6 nd detection trust
    
61. ipv6 nd raguard role router
    
62. dhcp snooping trust
    
63. ipv6 dhcp snooping trust
    
64. #
    
65. interface NULL0
    
66. #
    
67. interface Vlan-interface1
    
68. ip address 172.16.0.2 255.255.255.0
    
69. dhcp client identifier ascii 982044b0c3f8-VLAN0001
    
70. #
    
71. interface GigabitEthernet1/0/1
    
72. port link-type trunk
    
73. port trunk permit vlan 1 10 20 45 100
    
74. flow-control receive enable
    
75. broadcast-suppression 1
    
76. multicast-suppression 1
    
77. unicast-suppression 1
    
78. stp root-protection
    
79. ipv6 nd raguard role host
    
80. poe enable
    
81. dhcp snooping rate-limit 64
    
82. dhcp snooping check request-message
    
83. dhcp snooping check mac-address
    
84. ipv6 dhcp snooping rate-limit 64
    
85. ipv6 dhcp snooping check request-message
    
86. #
    
87. interface GigabitEthernet1/0/2
    
88. port link-type trunk
    
89. port trunk permit vlan 1 10 20 45 100
    
90. flow-control receive enable
    
91. broadcast-suppression 1
    
92. multicast-suppression 1
    
93. unicast-suppression 1
    
94. stp root-protection
    
95. ipv6 nd raguard role host
    
96. poe enable
    
97. dhcp snooping rate-limit 64
    
98. dhcp snooping check request-message
    
99. dhcp snooping check mac-address
    
100. ipv6 dhcp snooping rate-limit 64
     
101. ipv6 dhcp snooping check request-message
     
102. #
     
103. interface GigabitEthernet1/0/3
     
104. port link-type trunk
     
105. port trunk permit vlan 1 10 20 45 100
     
106. flow-control receive enable
     
107. broadcast-suppression 1
     
108. multicast-suppression 1
     
109. unicast-suppression 1
     
110. stp root-protection
     
111. ipv6 nd raguard role host
     
112. poe enable
     
113. dhcp snooping rate-limit 64
     
114. dhcp snooping check request-message
     
115. dhcp snooping check mac-address
     
116. ipv6 dhcp snooping rate-limit 64
     
117. ipv6 dhcp snooping check request-message
     
118. #
     
119. interface GigabitEthernet1/0/4
     
120. port link-type trunk
     
121. port trunk permit vlan 1 10 20 45 100
     
122. flow-control receive enable
     
123. broadcast-suppression 1
     
124. multicast-suppression 1
     
125. unicast-suppression 1
     
126. stp root-protection
     
127. ipv6 nd raguard role host
     
128. poe enable
     
129. dhcp snooping rate-limit 64
     
130. dhcp snooping check request-message
     
131. dhcp snooping check mac-address
     
132. ipv6 dhcp snooping rate-limit 64
     
133. ipv6 dhcp snooping check request-message
     
134. #
     
135. interface GigabitEthernet1/0/5
     
136. port link-type trunk
     
137. port trunk permit vlan 1 10 20 45 100
     
138. flow-control receive enable
     
139. broadcast-suppression 1
     
140. multicast-suppression 1
     
141. unicast-suppression 1
     
142. stp root-protection
     
143. ipv6 nd raguard role host
     
144. poe enable
     
145. dhcp snooping rate-limit 64
     
146. dhcp snooping check request-message
     
147. dhcp snooping check mac-address
     
148. ipv6 dhcp snooping rate-limit 64
     
149. ipv6 dhcp snooping check request-message
     
150. #
     
151. interface GigabitEthernet1/0/6
     
152. port link-type trunk
     
153. port trunk permit vlan 1 10 20 45 100
     
154. flow-control receive enable
     
155. broadcast-suppression 1
     
156. multicast-suppression 1
     
157. unicast-suppression 1
     
158. stp root-protection
     
159. ipv6 nd raguard role host
     
160. poe enable
     
161. dhcp snooping rate-limit 64
     
162. dhcp snooping check request-message
     
163. dhcp snooping check mac-address
     
164. ipv6 dhcp snooping rate-limit 64
     
165. ipv6 dhcp snooping check request-message
     
166. #
     
167. interface GigabitEthernet1/0/7
     
168. port link-type trunk
     
169. port trunk permit vlan 1 10 20 45 100
     
170. flow-control receive enable
     
171. broadcast-suppression 1
     
172. multicast-suppression 1
     
173. unicast-suppression 1
     
174. stp root-protection
     
175. ipv6 nd raguard role host
     
176. poe enable
     
177. dhcp snooping rate-limit 64
     
178. dhcp snooping check request-message
     
179. dhcp snooping check mac-address
     
180. ipv6 dhcp snooping rate-limit 64
     
181. ipv6 dhcp snooping check request-message
     
182. #
     
183. interface GigabitEthernet1/0/8
     
184. port link-type trunk
     
185. port trunk permit vlan 1 10 20 45 100
     
186. flow-control receive enable
     
187. broadcast-suppression 1
     
188. multicast-suppression 1
     
189. unicast-suppression 1
     
190. stp root-protection
     
191. ipv6 nd raguard role host
     
192. poe enable
     
193. dhcp snooping rate-limit 64
     
194. dhcp snooping check request-message
     
195. dhcp snooping check mac-address
     
196. ipv6 dhcp snooping rate-limit 64
     
197. ipv6 dhcp snooping check request-message
     
198. #
     
199. interface GigabitEthernet1/0/9
     
200. port access vlan 10
     
201. flow-control receive enable
     
202. broadcast-suppression 1
     
203. multicast-suppression 1
     
204. unicast-suppression 1
     
205. stp root-protection
     
206. stp edged-port
     
207. stp tc-restriction
     
208. ipv6 nd raguard role host
     
209. dhcp snooping rate-limit 64
     
210. dhcp snooping check request-message
     
211. dhcp snooping check mac-address
     
212. ipv6 dhcp snooping rate-limit 64
     
213. ipv6 dhcp snooping check request-message
     
214. #
     
215. interface GigabitEthernet1/0/10
     
216. port access vlan 10
     
217. flow-control receive enable
     
218. broadcast-suppression 1
     
219. multicast-suppression 1
     
220. unicast-suppression 1
     
221. stp root-protection
     
222. stp edged-port
     
223. stp tc-restriction
     
224. ipv6 nd raguard role host
     
225. dhcp snooping rate-limit 64
     
226. dhcp snooping check request-message
     
227. dhcp snooping check mac-address
     
228. ipv6 dhcp snooping rate-limit 64
     
229. ipv6 dhcp snooping check request-message
     
230. #
     
231. interface GigabitEthernet1/0/11
     
232. port access vlan 10
     
233. flow-control receive enable
     
234. broadcast-suppression 1
     
235. multicast-suppression 1
     
236. unicast-suppression 1
     
237. stp root-protection
     
238. stp edged-port
     
239. stp tc-restriction
     
240. ipv6 nd raguard role host
     
241. dhcp snooping rate-limit 64
     
242. dhcp snooping check request-message
     
243. dhcp snooping check mac-address
     
244. ipv6 dhcp snooping rate-limit 64
     
245. ipv6 dhcp snooping check request-message
     
246. #
     
247. interface GigabitEthernet1/0/12
     
248. port access vlan 10
     
249. flow-control receive enable
     
250. broadcast-suppression 1
     
251. multicast-suppression 1
     
252. unicast-suppression 1
     
253. stp root-protection
     
254. stp edged-port
     
255. stp tc-restriction
     
256. ipv6 nd raguard role host
     
257. dhcp snooping rate-limit 64
     
258. dhcp snooping check request-message
     
259. dhcp snooping check mac-address
     
260. ipv6 dhcp snooping rate-limit 64
     
261. ipv6 dhcp snooping check request-message
     
262. #
     
263. interface GigabitEthernet1/0/13
     
264. port access vlan 10
     
265. flow-control receive enable
     
266. broadcast-suppression 1
     
267. multicast-suppression 1
     
268. unicast-suppression 1
     
269. stp root-protection
     
270. stp edged-port
     
271. stp tc-restriction
     
272. ipv6 nd raguard role host
     
273. dhcp snooping rate-limit 64
     
274. dhcp snooping check request-message
     
275. dhcp snooping check mac-address
     
276. ipv6 dhcp snooping rate-limit 64
     
277. ipv6 dhcp snooping check request-message
     
278. #
     
279. interface GigabitEthernet1/0/14
     
280. port access vlan 10
     
281. flow-control receive enable
     
282. broadcast-suppression 1
     
283. multicast-suppression 1
     
284. unicast-suppression 1
     
285. stp root-protection
     
286. stp edged-port
     
287. stp tc-restriction
     
288. ipv6 nd raguard role host
     
289. dhcp snooping rate-limit 64
     
290. dhcp snooping check request-message
     
291. dhcp snooping check mac-address
     
292. ipv6 dhcp snooping rate-limit 64
     
293. ipv6 dhcp snooping check request-message
     
294. #
     
295. interface GigabitEthernet1/0/15
     
296. port access vlan 10
     
297. flow-control receive enable
     
298. broadcast-suppression 1
     
299. multicast-suppression 1
     
300. unicast-suppression 1
     
301. stp root-protection
     
302. stp edged-port
     
303. stp tc-restriction
     
304. ipv6 nd raguard role host
     
305. dhcp snooping rate-limit 64
     
306. dhcp snooping check request-message
     
307. dhcp snooping check mac-address
     
308. ipv6 dhcp snooping rate-limit 64
     
309. ipv6 dhcp snooping check request-message
     
310. #
     
311. interface GigabitEthernet1/0/16
     
312. port access vlan 10
     
313. flow-control receive enable
     
314. broadcast-suppression 1
     
315. multicast-suppression 1
     
316. unicast-suppression 1
     
317. stp root-protection
     
318. stp edged-port
     
319. stp tc-restriction
     
320. ipv6 nd raguard role host
     
321. dhcp snooping rate-limit 64
     
322. dhcp snooping check request-message
     
323. dhcp snooping check mac-address
     
324. ipv6 dhcp snooping rate-limit 64
     
325. ipv6 dhcp snooping check request-message
     
326. #
     
327. interface GigabitEthernet1/0/17
     
328. port access vlan 100
     
329. flow-control receive enable
     
330. broadcast-suppression 1
     
331. multicast-suppression 1
     
332. unicast-suppression 1
     
333. stp root-protection
     
334. stp edged-port
     
335. stp tc-restriction
     
336. ipv6 nd raguard role host
     
337. dhcp snooping rate-limit 64
     
338. dhcp snooping check request-message
     
339. dhcp snooping check mac-address
     
340. ipv6 dhcp snooping rate-limit 64
     
341. ipv6 dhcp snooping check request-message
     
342. #
     
343. interface GigabitEthernet1/0/18
     
344. port access vlan 100
     
345. flow-control receive enable
     
346. broadcast-suppression 1
     
347. multicast-suppression 1
     
348. unicast-suppression 1
     
349. stp root-protection
     
350. stp edged-port
     
351. stp tc-restriction
     
352. ipv6 nd raguard role host
     
353. dhcp snooping rate-limit 64
     
354. dhcp snooping check request-message
     
355. dhcp snooping check mac-address
     
356. ipv6 dhcp snooping rate-limit 64
     
357. ipv6 dhcp snooping check request-message
     
358. #
     
359. interface GigabitEthernet1/0/19
     
360. port access vlan 100
     
361. flow-control receive enable
     
362. broadcast-suppression 1
     
363. multicast-suppression 1
     
364. unicast-suppression 1
     
365. stp root-protection
     
366. stp edged-port
     
367. stp tc-restriction
     
368. ipv6 nd raguard role host
     
369. dhcp snooping rate-limit 64
     
370. dhcp snooping check request-message
     
371. dhcp snooping check mac-address
     
372. ipv6 dhcp snooping rate-limit 64
     
373. ipv6 dhcp snooping check request-message
     
374. #
     
375. interface GigabitEthernet1/0/20
     
376. port access vlan 100
     
377. flow-control receive enable
     
378. broadcast-suppression 1
     
379. multicast-suppression 1
     
380. unicast-suppression 1
     
381. stp root-protection
     
382. stp edged-port
     
383. stp tc-restriction
     
384. ipv6 nd raguard role host
     
385. dhcp snooping rate-limit 64
     
386. dhcp snooping check request-message
     
387. dhcp snooping check mac-address
     
388. ipv6 dhcp snooping rate-limit 64
     
389. ipv6 dhcp snooping check request-message
     
390. #
     
391. interface GigabitEthernet1/0/21
     
392. port access vlan 100
     
393. flow-control receive enable
     
394. broadcast-suppression 1
     
395. multicast-suppression 1
     
396. unicast-suppression 1
     
397. stp root-protection
     
398. packet-filter 3000 outbound hardware-count
     
399. packet-filter ipv6 3000 outbound hardware-count
     
400. port link-aggregation group 1
     
401. dhcp snooping trust
     
402. ipv6 dhcp snooping trust
     
403. #
     
404. interface GigabitEthernet1/0/22
     
405. port access vlan 100
     
406. flow-control receive enable
     
407. broadcast-suppression 1
     
408. multicast-suppression 1
     
409. unicast-suppression 1
     
410. stp root-protection
     
411. packet-filter 3000 outbound hardware-count
     
412. packet-filter ipv6 3000 outbound hardware-count
     
413. port link-aggregation group 1
     
414. dhcp snooping trust
     
415. ipv6 dhcp snooping trust
     
416. #
     
417. interface GigabitEthernet1/0/23
     
418. port access vlan 45
     
419. flow-control receive enable
     
420. broadcast-suppression 1
     
421. multicast-suppression 1
     
422. unicast-suppression 1
     
423. undo stp enable
     
424. ipv6 nd detection trust
     
425. ipv6 nd raguard role router
     
426. dhcp snooping trust
     
427. ipv6 dhcp snooping trust
     
428. #
     
429. interface GigabitEthernet1/0/24
     
430. flow-control receive enable
     
431. broadcast-suppression 1
     
432. multicast-suppression 1
     
433. unicast-suppression 1
     
434. stp root-protection
     
435. #
     
436. interface Ten-GigabitEthernet1/0/25
     
437. port access vlan 10
     
438. flow-control receive enable
     
439. broadcast-suppression 1
     
440. multicast-suppression 1
     
441. unicast-suppression 1
     
442. stp root-protection
     
443. stp edged-port
     
444. stp tc-restriction
     
445. ipv6 nd raguard role host
     
446. dhcp snooping rate-limit 64
     
447. dhcp snooping check request-message
     
448. dhcp snooping check mac-address
     
449. ipv6 dhcp snooping rate-limit 64
     
450. ipv6 dhcp snooping check request-message
     
451. #
     
452. interface Ten-GigabitEthernet1/0/26
     
453. port access vlan 10
     
454. flow-control receive enable
     
455. broadcast-suppression 1
     
456. multicast-suppression 1
     
457. unicast-suppression 1
     
458. stp root-protection
     
459. stp edged-port
     
460. stp tc-restriction
     
461. ipv6 nd raguard role host
     
462. dhcp snooping rate-limit 64
     
463. dhcp snooping check request-message
     
464. dhcp snooping check mac-address
     
465. ipv6 dhcp snooping rate-limit 64
     
466. ipv6 dhcp snooping check request-message
     
467. #
     
468. interface Ten-GigabitEthernet1/0/27
     
469. port link-type trunk
     
470. port trunk permit vlan 1 10 20 45 100
     
471. flow-control receive enable
     
472. broadcast-suppression 1
     
473. multicast-suppression 1
     
474. unicast-suppression 1
     
475. stp root-protection
     
476. ipv6 nd raguard role host
     
477. dhcp snooping rate-limit 64
     
478. dhcp snooping check request-message
     
479. dhcp snooping check mac-address
     
480. ipv6 dhcp snooping rate-limit 64
     
481. ipv6 dhcp snooping check request-message
     
482. #
     
483. interface Ten-GigabitEthernet1/0/28
     
484. port link-type trunk
     
485. port trunk permit vlan 1 10 20
     
486. flow-control receive enable
     
487. broadcast-suppression 1
     
488. multicast-suppression 1
     
489. unicast-suppression 1
     
490. ipv6 nd detection trust
     
491. ipv6 nd raguard role router
     
492. dhcp snooping trust
     
493. ipv6 dhcp snooping trust
     
494. #
     
495. scheduler logfile size 16
     
496. #
     
497. line class aux
     
498. authentication-mode scheme
     
499. user-role network-admin
     
500. #
     
501. line class vty
     
502. authentication-mode scheme
     
503. user-role network-operator
     
504. #
     
505. line aux 0
     
506. user-role network-admin
     
507. #
     
508. line vty 0 63
     
509. user-role network-operator
     
510. #
     
511. ipv6 nd detection port-match-ignore
     
512. #
     
513. info-center format unicom
     
514. info-center source default console deny
     
515. #
     
516. ssh server enable
     
517. ssh server acl 2000
     
518. ssh server ipv6 acl ipv6 2000
     
519. #
     
520. domain system
     
521. #
     
522. domain default enable system
     
523. #
     
524. role name level-0
     
525. description Predefined level-0 role
     
526. #
     
527. role name level-1
     
528. description Predefined level-1 role
     
529. #
     
530. role name level-2
     
531. description Predefined level-2 role
     
532. #
     
533. role name level-3
     
534. description Predefined level-3 role
     
535. #
     
536. role name level-4
     
537. description Predefined level-4 role
     
538. #
     
539. role name level-5
     
540. description Predefined level-5 role
     
541. #
     
542. role name level-6
     
543. description Predefined level-6 role
     
544. #
     
545. role name level-7
     
546. description Predefined level-7 role
     
547. #
     
548. role name level-8
     
549. description Predefined level-8 role
     
550. #
     
551. role name level-9
     
552. description Predefined level-9 role
     
553. #
     
554. role name level-10
     
555. description Predefined level-10 role
     
556. #
     
557. role name level-11
     
558. description Predefined level-11 role
     
559. #
     
560. role name level-12
     
561. description Predefined level-12 role
     
562. #
     
563. role name level-13
     
564. description Predefined level-13 role
     
565. #
     
566. role name level-14
     
567. description Predefined level-14 role
     
568. #
     
569. user-group system
     
570. #
     
571. local-user admin class manage
     
572. password simple password
     
573. service-type ftp
     
574. service-type telnet http https pad ssh terminal
     
575. authorization-attribute user-role level-15
     
576. authorization-attribute user-role network-admin
     
577. #
     
578. security-enhanced level 1
     
579. #
     
580. ftp server enable
     
581. ftp server acl 2000
     
582. ftp server acl ipv6 2000
     
583. #
     
584. ip http acl 2000
     
585. ip http enable
     
586. ip https acl 2000
     
587. ip https enable
     
588. #
     
589. cloud-management server port 19443
     
590. #
     
591. return
     

复制代码

cowboy

楼主这套配下来，功耗还是很感人

zhqiang

Krakenius 发表于 2024-3-6 20:42
要是有个模板的话就不难，要是自己没有之前存起来用过的配置，对新手还是有一点难度的，我这个是H3C的， ...

谢谢， 我先研究下

5957788

zhqiang 发表于 2024-3-6 19:46
借楼问一下，这个交换机好配置么？以前用的都是傻瓜交换机，感觉这种企业的都是要通过命令行配置，不知道 ...

有网页版的，可以傻瓜式配置

zhqiang

5957788 发表于 2024-3-14 23:39
有网页版的，可以傻瓜式配置

好的，谢谢

就爱TJ

最近刚刚买了一个h3c的交换机S6520系列，我买的具体型号是S6520-30SG-SI，22个SPF+万兆光，8个GBE千兆电，官方数据显示空载15w，满载也就60w出头，感觉非常适合家用这种功耗敏感型的环境，毕竟噪音问题可以改风扇，改温控，但是功耗基本无解。机器还在路上，等到货了我看看实际功耗以及噪音怎么样。

就爱TJ

启动时，12W


进入系统以后，14~15W


我自己是使用了AOC一体线缆，两头的模块各消耗0.5~0.6w

gravely

Krakenius 发表于 2024-3-6 20:42
要是有个模板的话就不难，要是自己没有之前存起来用过的配置，对新手还是有一点难度的，我这个是H3C的， ...

这个配置v6能出各vlan能获取到公网地址吗？公网路由通吗？

jiano

几个点位万兆，其他2.5g，即好用又省事。

所有点位预留光纤+网线，几个PC+NAS+AP位置用万兆做主干，剩余用2.5g，而且即便日后其他2.5g点位需要提升，直接增加设备即可，主干也不用动。

Krakenius

gravely 发表于 2024-3-19 23:03
这个配置v6能出各vlan能获取到公网地址吗？公网路由通吗？

这个配置是二层交换机的配置，要前面的路由器发v6地址，我不喜欢三层交换机，我不希望vlan互通，前面的路由器有防火墙可以隔离vlan，要是网关起在交换机这些vlan就互通了，下面这个是拨号并在vlan10发ipv6地址的配置：

1. 
   
2. interface Dialer0
   
3. mtu 1492
   
4. ppp chap password simple 密码
   
5. ppp chap user 宽带账号
   
6. ppp ipcp dns admit-any
   
7. ppp ipcp dns request
   
8. ppp pap local-user 宽带账号 password simple 密码
   
9. dialer bundle enable
   
10. dialer-group 1
    
11. dialer timer idle 0
    
12. dialer timer autodial 5
    
13. ip address ppp-negotiate
    
14. tcp mss 1460
    
15. ipv6 mtu 1452
    
16. connection-limit apply policy 1
    
17. connection-limit apply ipv6-policy 1
    
18. ipv6 address auto
    
19. ipv6 address auto link-local
    
20. ipv6 address dhcp-alloc
    
21. ipv6 dhcp client pd 1 rapid-commit
    
22. interface Vlan-interface10
    
23. ip address 192.168.1.1 255.255.255.0
    
24. dhcp server apply ip-pool lan
    
25. dhcp client-detect
    
26. ipv6 dhcp select server
    
27. ipv6 dhcp server apply pool lan
    
28. ipv6 address 1 ::1/64
    
29. ipv6 nd autoconfig managed-address-flag
    
30. ipv6 nd autoconfig other-flag
    
31. undo ipv6 nd ra halt
    
32. ipv6 nd ra interval 60 20
    
33. ipv6 nd ra dns server 2400:7FC0:849E:200::4 sequence 0
    
34. ipv6 nd ra dns server 2404:C2C0:85D8:901::4 sequence 1
    
35. gateway 192.168.1.1

复制代码

超极限01

请问下，华为有像ubnt那样子的统一管理界面来配置所有设备吗？

xu089757

1. 拓扑拓扑上没啥建议，你的网络也比较简单

2. 网关选型看你的诉求是什么
1)是否考虑万兆？
        你是否确实存在超千兆的互联网接入，你的光猫是否具备超千兆的下联端口？如果这些有一个不具备，其实也没必要上万兆设备。
2)软or硬？
        如果追求稳定，建议还是使用靠谱的硬路由，软路由的所有能力基本都可以通过一个内网服务器实现。
3)具体品牌？（以下是我个人浅见，如果您不同意，那您就是对的）
        经济实惠爱折腾：MikroTik。
        有国内应用识别、流控的需求：没钱上ikuai，有钱上panbit（其实ax50c纪念版999也不贵，但是首发没买到的话，咸鱼补票就贵了）。
        对国际流量识别有要求：fortigate（别看全新，咸鱼有惊喜）但要注意低端型号跑pppoe性能较差，毕竟别人是个防火墙……
        不差钱有售后，不折腾了直接上华为吧，该买的license都买上。

3. ap选型要慎重考虑企业级设备
1)单终端的速度：企业ap的优点是高负载下的稳定，或者其他家用一般都用不上的能力。单终端的速度不是企业级设备关注的重点。
2)信号强度：而且企业级ap的场景一般也都是空旷区域的覆盖，真要有隔断一般也是加设备，所以穿墙能力也不是他们的目标。
具体可以看看这两个视频：
5分钟告诉你在家用企业级AP的坑有多深
Aruba的WiFi用了很久，今天有些话不吐不快
如果你看完还对企业级设备感兴趣，那最无脑的建议是用Aruba（虽然我是用的fortiap，因为已经有了fortigate和fortiswitch，凑个全家桶）。魔力象限还是有一定参考性的。

nineapple

目前还没有万兆口的POE交换机吧

小魔头

xu089757 发表于 2024-3-23 10:25
1. 拓扑拓扑上没啥建议，你的网络也比较简单

2. 网关选型看你的诉求是什么

感谢回复。
1.我这个主要是考虑内网万兆，甚至25G、40G这种。外网反正千兆我觉得是够用的。我主要是照片、视频剪辑这种，素材再NAS里，所以对内网速度要求很高。
2.感觉这么一说，还是硬件路由器+内网服务器靠谱？但是好像内网服务器的玩法网上看到说的不多，有没有入门教程，求推荐。

xu089757

nineapple 发表于 2024-3-23 10:53
目前还没有万兆口的POE交换机吧

还挺多的，就是看准备出多少米了……

xu089757

小魔头 发表于 2024-3-25 08:26
感谢回复。
1.我这个主要是考虑内网万兆，甚至25G、40G这种。外网反正千兆我觉得是够用的。我主要是照片 ...

那还是具体要看你有什么需求了，感觉并没有什么全套方案。
比如你如果需要ddns，而你的硬路由又不支持，就可以在服务器上定时任务去curl一个能获取当前外网ip的地址，然后再调用对应服务商的api设置dns。
其他的也是差不多的意思，一般的需求搜一下有没有能实现的docker镜像，能省不少事。

baoziking

楼主，你那台华为的交换机有多少分贝？

小魔头

baoziking 发表于 2024-3-29 15:29
楼主，你那台华为的交换机有多少分贝？

凑近有60分贝，距离1米大概52分贝。
这个还是温度低，风扇最低负荷（25%）下的情况

goat

国内除非开6G，不然AP用上代6760足矣。就算加了rtu也就半台8771的价格，性能基本一样。当然口袋不痛直接上8760，虽然说同样价格买上代产品可能觉得有些那啥，但是8771没6G实在是

Krakenius

goat 发表于 2024-3-31 03:34
国内除非开6G，不然AP用上代6760足矣。就算加了rtu也就半台8771的价格，性能基本一样。当然口袋不痛直接上8 ...

6GHz以后可能会开放吧，8771-X1T硬件是支持6GHz的

goat

Krakenius 发表于 2024-4-6 22:47
6GHz以后可能会开放吧，8771-X1T硬件是支持6GHz的

wifi的6Ghz目前看就是挂起晾着，自然风干状态。等移动通信的6G试商用发现6Ghz基本没用或许会吐点出来...问题那时候应该开始/已经卷wifi8了
另外8771还不能关三频用8x8，只能4x4+4x4，不过最近发现多射频比多天线更有用