H3C交换机命令总结.doc

交换机基本配置 -秦丽芳【SW1】vlan 10【SW1-vlan 10】description Mariketing 命名vlan 【SW1-vlan 10】port Ethernet1/0/5 to Ethernet1/0/8 给vlan添加端口 Telnet【SW1】telnet server enable【SW1】local-user 0000000【SW1-luser-000000】password simple 000000【SW1-luser-000000】authorization-attribute level 3【SW1-luser-000000】service-type telnetSNMP【SW1】snmp-agent sys-info version v2【SW1】snmp-agent community read public【SW1】snmp-agent community write privateLACP 链路聚合【SW1】interface Bridge-Aggregation 1 创建聚合组1【SW1-Bridge-Aggregation1】quit【SW1】interface Ethernet 0/4/0【SW1-Ethernet0/4/0】port link-aggregation group 1 将端口加入聚合组【SW1-Ethernet0/4/0】quit【SW1】interface Bridge-Aggregation 1【SW1-Bridge-Aggregation1】port link-type trunk【SW1-Bridge-Aggregation1】undo port trunk permit vlan 1【SW1-Bridge-Aggregation1】port trunk permit vlan 10 20 30【SW1-Bridge-Aggregation1】link-aggregation mode dynamic 动态lacpMSTP【SW1】stp region-configuration【SW1-mst-region】instance 1 vlan 20 30【SW1-mst-region】instance 2 vlan 10 100 200【SW1-mst-region】active region-configuration【SW1-mst-region】quit【SW1】stp instance 1 root primary【SW1】stp instance 2 root secondary【SW1】stp enableVRRP【SW1】interface Vlan-interface 10【SW1-Vlan-interface10】vrrp vrid 1 virtual-ip 1.1.1.1【SW1-Vlan-interface10】vrrp vrid 1 priority 150【SW1-Vlan-interface10】vrrp vrid 1 track 1 reduced 50OSPF【SW1】ospf router id 1.1.1.1【SW1-ospf-1】area 0【SW1-ospf-1-area-0.0.0.0】network 192.168.1.0 0.0.0.255【SW1-ospf-1】bandwidth-reference 10000 设ospf带宽【SW1-ospf-】silent-interface Vlan-interface 10/ GigabitEthernet/all 禁止接口发送ospf报文端口上ospf【SW1】interface g0/0/0【SW1-GigabitEthernet0/0/0】ospf authentication-mode simple plain 123456【SW1-GigabitEthernet0/0/0】ospf timer hello 1【SW1-GigabitEthernet0/0/0】bfd min-echo-receive-interval 200【SW1-GigabitEthernet0/0/0】bfd detect-multiplier 4BFD【SW1】bfd echo-source-ip 1.1.1.1【SW1】track 1 bfd echo interface g0/0/0 remote ip 1.1.1.1 local ip 1.1.1.2IRF （在SW1，SW2上操作相同）【SW1】interface Ten-gigabitethernet 1/0/25【SW1-Ten-gigabitethernet】shutdown 关闭端口【SW1】irf-port 1/2 创建irf端口（SW2上为2/1）【SW1-irf-port1/2】port group interface Ten-gigabitethernet 1/0/25【SW1】interface Ten-gigabitethernet 1/0/25 激活端口【SW1-Ten-gigabitethernet】undo shutdown【SW1】save【SW1】irf-port-configuration active 激活irf端口BFD MAD检测【SW1】vlan 123 创建一个新vlan专用于BFD MAD检测【SW1】interface vlan-interface 123【SW1-Vlan-interface123】mad bfd enable 【SW1-Vlan-interface123】mad ip address 123.1.1.1 member 1【SW1-Vlan-interface123】mad ip address 123.1.1.2member 2 给指定成员设备配置MAD IP地址ACL【SW1】acl number 2000 （2000-2999为基本ACL）【SW1-basic-2000】rule 0 deny source 1.1.1.1 0 禁止源IP为1.1.1.1的报文通过【SW1】acl number 3000 （3000-3999为高级ACL）【SW1acl-adv-3000】rule permit ip source 1.1.1.1 0.0.0.255 destination 1.1.2.1 0.0.0.255 允许1.1.0网段访问1.1.2.0 网段配置边缘端口【SW1】interface Ethernet0/4/0【SW1-Ethernet0/4/0】stp edged-port enable启用三层接口模式【SW1】interface Ethernet1/0/24【SW1-Ethernet1/0/24】port link-mode route【SW1-Ethernet1/0/24】ip address 1.1.1.1 24配置静态路由：ip route-static 配置默认路由：ip route-static 0.0.0.0 0.0.0.0 DLDP(设备连接检测协议)【SW1】dldp enable【SW1-Ethernet0/4/0】dldp enable802.1X【SW1】dot1x 启用802.1X【SW1-Ethernet0/4/0】 dot1x 在端口上启用802.1x【SW1】dot1x interface Ethernet 0/4/1 to Ethernet 0/4/7 开启e0/4/1-e0/4/7端口的802.1x特性H3C 交换机命令总结 -李慧配置TELNET登录方式（password方式）system-viewsw1telnet server enablesw1local-user 000000sw1-luser-000000password simple 000000sw1-luser-000000authorization-attribute level 3sw1-luser-000000service-type telnetsw1-luser-000000quitSW1user-interface vty 0 4 SW1-ui-vty0-4authentication-mode schemeSW1-ui-vty0-4quitSW1Vlan 的划分，端口配置SW1vlan 10 SW1-vlan10description ITSW1-vlan10port Ethernet 0/4/1 to Ethernet 0/4/3SW1-vlan10quitSW1SW1interface Ethernet 0/4/1SW1-Ethernet0/4/1port link-type trunk SW1-Ethernet0/4/1undo port trunk permit vlan 1 Please wait. Done.SW1-Ethernet0/4/1port trunk permit vlan 10 20 30 100 200 1000 Please wait. Done.SW1-Ethernet0/4/1quitSW1创建三层接口vrrpSW1interface Vlan-interface 10SW1-Vlan-interface10ip address 10.1.2.1 255.255.255.0SW1-Vlan-interface10vrrp vrid 1 virtual-ip 192.168.10.250SW1-Vlan-interface10vrrp vrid 1 preempt-mode timer delay 1SW1-Vlan-interface10vrrp vrid 1 priority 150SW1-Vlan-interface10vrrp vrid 1 track 1 reduced 50SW1-Vlan-interface10quitSW1SW1stp enable SW1stp mode mstp SW1stp region-configuration SW1-mst-regioninstance 1 vlan 20 30SW1-mst-regioninstance 2 vlan 10 100 400 1000SW1-mst-regionregion-name h3cSW1-mst-regionrevision-level 1SW1-mst-regionactive region-configuration SW1-mst-regionquitSW1stp instance 1 root primary SW1stp instance 1 root secondary设备链路检测协议DLDPSW1dldp enable SW1interface Ethernet 0/4/1SW1-Ethernet0/4/1dldp enable SW1-Ethernet0/4/1quitSW1SW1dldp work-mode enhance/normal链路聚合SW1interface Bridge-Aggregation 1SW1-Bridge-Aggregation1link-aggregation mode dynamic SW1-Bridge-Aggregation1port link-type trunk SW1-Bridge-Aggregation1undo port trunk permit vlan 1SW1-Bridge-Aggregation1port trunk permit vlan 10 20 30 100 400SW1-Bridge-Aggregation1quitSW1聚合端口的配置SW1interface Ethernet 0/4/3SW1-Ethernet0/4/3port link-aggregation group 1SW1-Ethernet0/4/3port link-type trunkSW1-Ethernet0/4/3undo port trunk permit vlan 1SW1-Ethernet0/4/3port trunk permit vlan 10 20 30 100 400SW1-Ethernet0/4/3dldp enableSW1-Ethernet0/4/3duplex fullSW1-Ethernet0/4/3speed 100配置环回地址SW1interface LoopBack 0SW1-LoopBack0ip address 9.9.9.2 255.255.255.255SW1-LoopBack0quitSW1静态路由SW1ip route-static 10.1.5.0 255.255.255.0 10.1.4.2ACL的配置SW1time-range frname 8:00 to 18:00 working-day -定义时间段SW1acl number 3000SW1-acl-adv-3000rule deny ip source 192.168.2.0 0.0.0.255 destination 192.168.4.10 255.255.255.0 time-range frnameSW1-acl-adv-3000quitSW1SNMP 简单网络管理协议SW1snmp-agent sys-info contact 123456SW1snmp-agent sys-info location sxczSW1snmp-agent community read publicSW1snmp-agent community write privateSW1snmp-agent sys-info version v2cOSPFSW1ospf router-id 9.9.9.202SW1-ospf-1silent-interface Vlan-interface 10 -用来禁止接口收发OSPF报文SW1-ospf-1bandwidth-reference 10000 -计算链路开销时所依据的带宽参考值SW1-ospf-1area 0SW1-ospf-1-area-0.0.0.0authentication-mode simpleSW1-ospf-1-area-0.0.0.0network 9.9.9.202 255.255.255.128Ospf接口配置sw1interface ethernet1/0/1sw1port link-mode routesw1ip address 192.168.0.6 255.255.255.252sw1ospf authentication-mode simple plain 123456sw1ospf timer hello 1sw1bfd min-echo-receive-interval 200 -用来配置接收echo报文的最小时间间隔sw1bfd detect-multiplier 4 -用来检测时间倍数BFDSW1bfd echo-source-ip 123.1.1.1 - 用来配置echo报文源ip地址SW1命令用来创建和bfd关联的track项。SW1track 1 bfd echo interface GigabitEthernet 0/0/1 remote ip 61.0.2.10 local ip 61.0.2.9SW1 IRF(链型堆叠)Sw1:Interface ten-gigabitethernet 1/0/25Interface ten-gigabitether