H3C-S5500基本配置思路及实用命令

H3C S5500基本配置思路及实用命令1. 总体配置思路：1) 添加VLAN1，并将相应端口添加到该VLAN。(在VLAN状态下才可一次将多个端口加入相应VLAN,interface e 1/0/1 to e 1/0/24)2) 添加VLAN2，并将其置为管理VLAN(在#状态下management-vlan 2)，才可设置其VLAN的IP地址。3) 添加静态路由。4) 配置端口TRUNK模式。5) 配置远程登录VTY认证。6) 配置本地用户。2. 进入特权模式System View System ViewSystem View: return to User View with Ctrl+Z.H3CdisH3Cdisplay cur3. 配置交换机主机名sysnamesysname H3C4. 添加VLANvlan 1或在此状态下直接将相应端口加入该VLAN (否则只能一个口一个口的添加)Interface e 1/0/1 to e 1/0/245. 配置管理VLAN- management-vlanmanagement-vlan 26. 给管理VLAN添加IP地址interface Vlan-interface1 ip address 76 7. 添加端口到VLAN：port access vlan 1interface GigabitEthernet1/0/2 port access vlan 18. 远程登录配置及3A认证模式user-interface vty 0 4authentication-mode scheme9. 配置3A认证本地用户及属性local-user testpassword simple testpwdauthorization-attribute level 3service-type telnet可能的配置local-user testpassword simple testservice-type telnetlevel 310. 将端口配置为Trunk口interface GigabitEthernet1/0/20port link-type trunkport trunk permit vlan all11. 添加静态路由 ip route-static 12. 查看路由表display ip routing-tableH3Cdisplay ip routing-table Routing Tables: Public Destinations : 7 Routes : 7Destination/Mask Proto Pre Cost NextHop Interface/0 Static 60 0 Vlan/24 Direct 0 0 80 Vlan80/32 Direct 0 0 InLoop0/8 Direct 0 0 InLoop0/32 Direct 0 0 InLoop0/24 Direct 0 0 Vlan76/32 Direct 0 0 InLoop013. 显示当前配置display current-configurationH3Cdisplay current-configuration 14. 查看端口及VLAN的up/down状态display brief interfaceH3Cdisplay brief interface The brief information of interface(s) under route mode:Interface Link Protocol-link Protocol type Main IP NULL0 UP UP(spoofing) NULL - Vlan1 UP UP ETHERNET Vlan2 UP UP ETHERNET 80 The brief information of interface(s) under bridge mode:Interface Link Speed Duplex Link-type PVID GE1/0/1 UP 1G(a) full(a) access 1 GE1/0/2 DOWN auto auto access 1 GE1/0/3 DOWN auto auto access 1 GE1/0/9 DOWN auto auto access 1 GE1/0/10 DOWN auto auto access 1 display brief interface GigabitEthernet 1/0/1H3Cdisplay brief interface GigabitEthernet 1/0/1The brief information of interface(s) under bridge mode:Interface Link Speed Duplex Link-type PVID GE1/0/1 UP 1G(a) full(a) access 1 display brief interface Vlan-interface 1H3Cdisplay brief interface Vlan-interface 1The brief information of interface(s) under route mode:Interface Link Protocol-link Protocol type Main IP Vlan1 UP UP ETHERNET 15. 查看MAC地址缓存表display mac-addressH3Cdisplay mac-address MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)0000-e7a7-2374 1 Learned GigabitEthernet1/0/19 AGING 0000-e8f1-6952 1 Learned GigabitEthernet1/0/19 AGING 0001-6c41-9cee 1 Learned GigabitEthernet1/0/19 AGING 000c-2919-0d6c 1 Learned GigabitEthernet1/0/19 AGING 000c-2961-d8ea 1 Learned GigabitEthernet1/0/19 AGING 16. 查看某一端口的MAC地址缓存表display mac-address interface GigabitEthernet 1/0/1H3Cdisplay mac-address interface GigabitEthernet 1/0/1MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)0016-3642-e888 1 Learned GigabitEthernet1/0/1 AGING 0016-eca2-d69d 1 Learned GigabitEthernet1/0/1 AGING 001c-25d8-77b6 1 Learned GigabitEthernet1/0/1 AGING 0024-1d6e-6fbe 1 Learned GigabitEthernet1/0/1 AGING 17. 查看ARP缓存表display arpH3Cdisplay arp Type: S-Static D-DynamicIP Address MAC Address VLAN ID Interface Aging Type6 0016-eca2-d69d 1 GE1/0/1 20 D31 0016-3642-e888 1 GE1/0/1 19 D71 0024-1d6e-6fbe 1 GE1/0/1 13 D 0018-742d-4fc0 2 GE1/0/19 14 D 0018-742d-4fc0 1 GE1/0/19 10 D18. Tftp备份配置1) 查看配置文件名及所在文件夹-dir 配置文件名可能为startup.cfg或config.cfg配置文件可能在flash:/或unit1flash:/目录下dir flash:/ Directory of flash:/ 0 -rw- 8221183 Aug 11 2010 16:27:52 s5500tpsi-cmw520-r2202p11.bin 1 -rw- 2365 Apr 26 2000 12:13:58 startup.cfg(配置文件名)31496 KB total (23460 KB free)dir Directory of unit1flash:/ 1 -rw- 3146 Jan 01 2004 00:00:00 config.def 2 (*) -rw- 3711222 Mar 25 2011 16:51:52 s31si_e-cmw310-r2211p07.bin 3 (*) -rw- 886025 Jan 01 2004 00:00:00 h3c-http3.1.9-0019.web 4 (*) -rw- 2834 Apr 03 2000 01:20:33 config.cfg(配置文件名)7239 KB total (2739 KB free)(*) -with main attribute (b) -with backup attribute(*b) -with both main and backup attributetftp 1 put unit1flash:/config.cfg 85.txt File will be transferred in binary mode. Sending file to remote tftp server. Please wait. | TFTP: 2979 bytes sent in 0 second(s). File uploaded successfully. dirDirectory of unit1flash:/ 1 -rw- 3146 Jan 01 2004 00:00:00 config.def 2 (*) -rw- 3711222 Mar 25 2011 16:51:52 s31si_e-cmw310-r2211p07.bin 3 (*) -rw- 886025 Jan 01 2004 00:00:00 h3c-http3.1.9-0019.web 4 (*) -rw- 2979 Apr 02 2000 07:17:02 config.cfg7239 KB total (2739 KB free)(*) -with main attribute (b) -with backup attribute(*b) -with both main and backup attribute2) 配置可以使用tftp的ACLacl number 2000rule permit source 1 0jyzx-px-zhongxinacl number 2000 jyzx-px-zhongxin-acl-basic-2000rule permit source 1 ? 0 Wildcard bits : ( a host ) X.X.X.X Wildcard of sourcejyzx-px-zhongxin-acl-basic-2000rule permit source 1 03) 配置tftp服务器- tftp-server acl 2000 tftp-server acl 2000jyzx-px-zhongxintftp-server acl 2000 The ACL number does not exist or contains no rule. Continue? Y/N:y(如果还没有配置ACL,则会有此提示)jyzx-px-zhongxintftp client source ip 14) 备份配置文件到tftp软件所在目录下(在用户视图下,即“”状态下)tftp 1 put flash:/startup.cfg (无目标文件名则表示与源文件名同名)tftp 1 put flash:/startup.cfg startup.txt(将配置文件保存为txt文件)tftp 1 put flash:/startup.cfg File will be transferred in binary mode Sending file to remote TFTP server. Please wait. TFTP: 2365 bytes sent in 0 second(s). File uploaded successfully.tftp 1 put flash:/startup.cfg 77.txt File will