华为5700配置实例.doc

同网段内配置基于接口地址池的DHCP服务器示例组网需求如图1所示，某企业有两个处于同一网络内的办公室，为了节省资源，两个办公室内的主机由SwitchA作为DHCP服务器统一分配IP地址。办公室1所属的网段为/24，主机都加入VLAN10，办公室1使用DNS服务和NetBIOS服务，地址租期30天；办公室2所属的网段为/24，主机都加入VLAN11，办公室2不使用DNS服务和NetBIOS服务，地址租期20天。配置思路基于VLANIF接口地址池的DHCP服务器的配置思路如下：1.在SwitchA上创建两个接口地址池并配置地址池相关属性，实现DHCP服务器可以根据不同需求，从不同的接口地址池中选择合适的IP地址及其配置参数分配给办公室主机。2.在SwitchA上配置VLANIF接口基于接口地址池的地址分配方式，实现DHCP服务器从基于接口的地址池中选择IP地址分配给办公室主机。操作步骤1.使能DHCP服务2. system-view3. HUAWEI sysname SwitchASwitchA dhcp enable4.配置接口加入VLAN#配置GE0/0/1接口加入VLAN10。SwitchA vlan batch 10 to 11SwitchA interface gigabitethernet 0/0/1SwitchA-GigabitEthernet0/0/1 port hybrid pvid vlan 10SwitchA-GigabitEthernet0/0/1 port hybrid untagged vlan 10SwitchA-GigabitEthernet0/0/1 quit#配置GE0/0/2加接口入VLAN11。SwitchA interface gigabitethernet 0/0/2SwitchA-GigabitEthernet0/0/2 port hybrid pvid vlan 11SwitchA-GigabitEthernet0/0/2 port hybrid untagged vlan 11SwitchA-GigabitEthernet0/0/2 quit5.配置VLANIF接口IP地址#配置VLANIF10接口地址。SwitchA interface vlanif 10SwitchA-Vlanif10 ip address 24SwitchA-Vlanif10 quit#配置VLANIF11接口地址。SwitchA interface vlanif 11SwitchA-Vlanif11 ip address 24SwitchA-Vlanif11 quit6.使能VLANIF接口地址池#配置VLANIF10接口下的客户端从接口地址池中获取IP地址。SwitchA interface vlanif 10SwitchA-Vlanif10 dhcp select interfaceSwitchA-Vlanif10 quit#配置VLANIF11接口下的客户端从接口地址池中获取IP地址。SwitchA interface vlanif 11SwitchA-Vlanif11 dhcp select interfaceSwitchA-Vlanif11 quit7.配置接口地址池的DNS服务和NetBIOS服务#配置VLANIF10接口地址池下的DNS服务和NetBIOS服务。SwitchA interface vlanif 10SwitchA-Vlanif10 dhcp server domain-name SwitchA-Vlanif10 dhcp server dns-list SwitchA-Vlanif10 dhcp server nbns-list SwitchA-Vlanif10 dhcp server excluded-ip-address SwitchA-Vlanif10 dhcp server excluded-ip-address SwitchA-Vlanif10 dhcp server netbios-type b-nodeSwitchA-Vlanif10 quit8.配置接口地址池中地址租用期限#配置VLANIF10接口地址租用期限为30天。SwitchA interface vlanif 10SwitchA-Vlanif10 dhcp server lease day 30SwitchA-Vlanif10 quit#配置VLANIF11接口地址租用期限为20天。SwitchA interface vlanif 11SwitchA-Vlanif11 dhcp server lease day 20SwitchA-Vlanif11 quit9.验证配置结果在SwitchA上使用display ip pool命令用来查看接口地址池配置情况。SwitchA display ip pool interface vlanif10 Pool-name : Vlanif10 Pool-No : 0 Lease : 30 Days 0 Hours 0 Minutes Domain-name : DNS-server0 : NBNS-server0 : Netbios-type : b-node Position : Interface Status : Unlocked Gateway-0 : Mask : VPN instance : - - Start End Total Used Idle(Expired) Conflict Disable - 54 253 1 250(0) 0 2 -SwitchA display ip pool interface vlanif11 Pool-name : Vlanif11 Pool-No : 1 Lease : 20 Days 0 Hours 0 Minutes Domain-name : - DNS-server0 : - NBNS-server0 : - Netbios-type : - Position : Interface Status : Unlocked Gateway-0 : Mask : VPN instance : - - Start End Total Used Idle(Expired) Conflict Disable - 54 253 3 250(0) 0 0 - 配置文件SwitchA的配置文件# sysname HUAWEI# vlan batch 10 to 11#dhcp enable#interface Vlanif10 ip address dhcp select interface dhcp server excluded-ip-address dhcp server lease day 30 hour 0 minute 0 dhcp server dns-list dhcp server netbios-type b-node dhcp server nbns-list dhcp server domain-name #interface Vlanif11 ip address dhcp select interface dhcp server lease day 20 hour 0 minute 0#interface GigabitEthernet0/0/1 port hybrid pvid vlan 10 port hybrid untagged vlan 10#interface GigabitEthernet0/0/2 port hybrid pvid vlan 11 port hybrid untagged vlan 11 #return header Define the login banner http HTTP hwtacacs Set the status of the HWTACACS(Huawei Terminal Access Controller Access Control System) service hwtacacs-server Set HWTACACS server icmp Specify ICMP configuration information icmp-reply Enable ICMP reply fast igmp-snooping Specify parameters for IGMP-Snooping info-center Specify information center configuration information interface Specify the interface configuration view ip IP information ipv6 Enable IPv6 functionality l2-topology Layer 2 topology l2protocol-tunnel Layer 2 protocol tunnel lacp Link aggregation control protocol lldp Link Layer Discovery Protocol load-balance Specify load balance mode loopback-detect Loopback detect function mac-address Mac-address mac-authen MAC authenticate configure information mac-forced-forwarding Mac-Forced Forwarding mac-learning MAC learning mac-limit MAC limit mac-spoofing-defend MAC spoofing defend mad Multi-active detection management-port Management port matched Is Command can be matched by upper template mld-snooping Specify parameters for MLD-Snooping monitor-link Monitor link configuration information multicast Multicast configuration information nap NAP protocol nd Neighbor discovery nqa Network Quality Analysis(NQA) nqa-jitter Switch NQA jitter version nqa-server Specify NQA echo server ntp-service Specify NTP (Network Time Protocol) configuration information oam-mgr Oam-mgr view observe-port Configure observe port feature ping Ping function poe Power over Ethernet port Port port-group Port-group port-isolate Port isolate pppoe PPPOE qos QoS configuration radius-server Add or delete RADIUS server template rmon Specify RMON configuration route-policy Route-policy route-policy-change Specify route policy change parameter router Configure router information rps Set RPS status rrpp Rapid ring protection protocol rsa Specify RSA module configuration information savi Source Address Validation Improvement scp Set SCP server screen-width Set screen width sep Smart ethernet protection set Set the mode of power management sflow SFlow module sftp Set SFTP service attribute slave Backup switch from master to slave sleep Set device to sleep mode smart-link Smart link configuration information snmp-agent Specify SNMP(Simple Network Management Protocol) configuration information ssh Set the SSH (secure shell) configuration attribute ssl Security socket layer stack Stack stack-port Stack port startup Startup configuration stelnet Set Stelnet service attribute stp Specify Spanning Tree Protocol (STP) configuration information suppression Suppression, include broadcast-suppression, multicast-suppression and unicast-suppression sys-netid System-netid sysname Specify the host name tcp Specify TCP(Transmission Control Protocol) configuration information telnet Set the status of the Telnet service temperature Device temperature tftp Establish a TFTP connection tftp-server TFTP server time-range Specify time-range configuration information trace Trace route (switch) to host on Data Link Layer traffic Specify traffic configuration information traffic-filter Filter packets based on acl traffic-limit Limit the rate of the packets based on acl traffic-mirror Mirror packets based on acl traffic-policy Apply specific traffic policy traffic-redirect Redirect packets based on acl traffic-remark Remark packets based on acl traffic-secure Filter packets based on acl traffic-statistic Count packets based on acl transceiver Transceiver user-bind User bind user-interface Configure the user terminal interface vlan Virtual LAN voice-vlan Voice VLANxinhaoundo vlxinhaoundo vlan 10xinhaoxinhaoxinhaoquxinhaoquitJan 14 2000 23:57:30 xinhao DS/4/DATASYNC_CFGCHANGE:OID .4.1.2091.3.1 configurations have been changed. The current change number is 23, the change loop count is 0, and the maximum number of records is 4095.dididisplay vlanThe total number of vlans is : 2-U: Up; D: Down; TG: Tagged; UT: Untagged;MP: Vlan-mapping; ST: Vlan-stacking;#: ProtocolTransparent-vlan; *: Management-vlan;-VID Type Ports-1 common UT:GE0/0/1(D) GE0/0/2(D) GE0/0/3(D) GE0/0/4(D) GE0/0/5(D) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D) GE0/0/9(D) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D) GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D) GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D) GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D) GE0/0/25(D) GE0/0/26(D) GE0/0/27(D) GE0/0/28(D)757 common UT:GE0/0/24(D)VID Status Property MAC-LRN Statistics Description-1 enable default enable disable VLAN 0001757 enable default enable disable VLAN 0757savesaveThe current configuration will be written to the device.Are you sure to continue?Y/NyNow saving the current configuration to the slot 0.Jan 14 2000 23:57:55 xinhao %01CFM/4/SAVE(l)1:The user chose Y when decidingwhether to save the configuration to the device.Save the configuration successfully.ssysyssystem-viewEnter system view, return user view with Ctrl+Z.xinhaointxinhaointerface gxinhaointerface GigabitEthernet 0/0/1xinhao-GigabitEthernet0/0/1portxinhao-GigabitEthernet0/0/1port hyxinhao-GigabitEthernet0/0/1port hybrid pvidxinhao-GigabitEthernet0/0/1port hybrid pvid vlxinhao-GigabitEthernet0/0/1port hybrid pvid vlan 757xinhao-GigabitEthernet0/0/1Jan 15 2000 00:03:20 xinhao DS/4/DATASYNC_CFGCHANGE:OID .4.1.2091.3.1 configurations have been changed. The current change number is 24, the change loop count is 0, and the maximum number of records is 4095.xinhao-GigabitEthernet0/0/1portxinhao-GigabitEthernet0/0/1port hybrid pvid vlan 1xinhao-GigabitEthernet0/0/1Jan 15 2000 00:03:40 xinhao DS/4/DATASYNC_CFGCHANGE:OID .4.1.2091.3.1 configurations have been changed. The current change number is 25, the change loop count is 0, and the maximum number of records is 4095.xinhao-GigabitEthernet0/0/1quxinhaoxinhaoxinhaoxinhaoxinhaoqusyssystem-viewEnter system view, return user view with Ctrl+Z.xinhaovlan 10xinhao-vlan10Jan 15 2000 00:04:00 xinhao DS/4/DATASYNC_CFGCHANGE:OID .4.1.2091.3.1 configurations have been changed. The current change number is 26, the change loop count is 0, and the maximum number of records is 4095.xinhao-vlan10undoxinhao-vlan10undo shxinhao-vlan10name 10xinhao-vlan10quxinhao-vlan10quitxinhaointxinhaointerface vlJan 15 2000 00:04:20 xinhao DS/4/DATASYNC_CFGCHANGE:OID .4.1.2091.3.1 configurations have been changed. The current change number is 27, the change loop count is 0, and the maximum number of records is 4095.xinhaointerface vlxinhaointerface Vlanif 10Error: Can not create this interface because the interface number of this type has reached its maximum.xinhaoundoxinhaoundo suxinhaoundo shxinhaoundo ? aaa AAA aaa-authen-bypass Set remote authentication bypass aaa-author-bypass Set remote authorization bypass aaa-author-cmd-bypass Set remote command authorization bypass access-user User access acl Specify ACL configuration information anti-attack Specify anti-attack configurations application-apperceive Set application-apperceive information arp ARP module arp-suppress Specify arp suppress configuration information, default is disabled as-notation The AS notation assign Assgin assistant Assistant authentication Authentication easy-mode authorization-info Authorization information bpdu BPDU message btv Btv view cfm Connectivity fault management clock Specify the system clock command-privilege Specify the command level configuration Configuration interlock configuration-occupied Configuration exclusive occupied cpu-defend Configure CPU defend policy cpu-defend-policy Configure CPU defend policy cpu-usage Set cpu usage configuration debugging Enable system debugging functions device-sensor Device sensor dhcp Dynamic host configure protocol dldp Device link detection protocol dns Specify domain name system domain Default domain dot1x 802.1x configuration information drop Discard attribute dsa Specify DSA module configurations easy-operation Easy operation efm EFM module erps Ethernet ring protection switching error-down The interface was shut down because of an error event ethernet-loop-protection Ethernet loop protection fib FIB status and configuration information file Specify file system configuration information ftp Set the FTP server attributes garp Generic Attribute Registration Protocol gtsm The generalized TTL security mechanism gvrp Generic VLAN Registration Protocol header Define the login banner http HTTP hwtacacs Set the status of the HWTACACS(Huawei Terminal Access Controller Access Control System) service hwtacacs-server Set HWTACACS server icmp Specify ICMP configuration information icmp-reply Enable ICMP reply fast igmp-snooping Specify parameters for IGMP-Snooping info-center Specify information center configuration information interface Specify the interface configuration view ip IP information ipv6 Enable IPv6 functionality l2-topology Layer 2 topology l2pro