某交换机的基本配置教学课件

1、华为交换机的基本配置一、交换机的软件版本 由于华为交换机的软件版本不尽相同，我们以比较新的版本 V3.1R0005为例。New_S3552display versionHuawei Versatile Routing Platform SoftwareVRP (R) Software, Version 3.10, RELEASE 0007Copyright (c) 2000-2004 HUAWEI TECH CO., LTD.Quidway S3552G uptime is 41 weeks,0 day,9 hours,32 minutes二、端口操作1、打开关闭以太网端口 shutdown

2、undo shutdown例如：YD_S3552interface eth 0/38YD_S3552-Ethernet0/38shutdownYD_S3552-Ethernet0/38undo shutdown二、端口操作2、端口描述 description text例如：YD_S3552interface eth 0/38YD_S3552-Ethernet0/38descYD_S3552-Ethernet0/38description shihuanbaoju.YD_S3552-Ethernet0/38undo desc二、端口操作3、端口双工状态、端口速率 duplex auto | fu

3、ll | half undo duplex speed 10 | 100 | auto undo speed二、端口操作4、端口链路类型设置端口为Access端口 port link-type access设置端口为Hybrid端口 port link-type hybrid设置端口为Trunk端口 port link-type trunk恢复端口的链路类型为缺省的Access端口undo port link-type二、端口操作7、查看端口状态 display interface 例如： display interface Ethernet 0/11 Ethernet0/11 current

4、 state : UP IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc37-a4f0 Description: to_qixiangju The Maximum Transmit Unit is 1500 Media type is twisted pair, loopback not set Port hardware type is 100_BASE_TX 10Mbps-speed mode, half-duplex mode Link speed type is force link, lin

5、k duplex type is autonegotiation Flow-control is not supported The Maximum Frame Length is 1552 Broadcast MAX-ratio: 100% PVID: 110 Mdi type: auto Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 110 Last 5 minutes input: 4 packets/sec 502 bytes/sec Last 5 minutes output: 6 packets/se

6、c 1827 bytes/sec Input(total): - packets, - bytes - broadcasts, - multicasts Input(normal): 919143 packets, 187520582 bytes 9502 broadcasts, 2221 multicasts Input: 0 input errors, 0 runts, 0 giants, - throttles, 0 CRC 0 frame, 0 overruns, 0 aborts, - ignored, - parity errors Output(total): - packets

7、, - bytes - broadcasts, - multicasts, - pauses Output(normal): 1139625 packets, 639282176 bytes 6450 broadcasts, 4878 multicasts, 0 pauses Output: 20415 output errors, - underruns, - buffer failures 0 aborts, 0 deferred, 20415 collisions, 0 late collisions - lost carrier, - no carrier三、Vlan 操作1、创建或删

8、除Vlan vlan vlan_id undo vlan vlan_id三、Vlan 操作2、创建/删除VLAN接口创建或进入VLAN接口视图interface vlan-interface vlan_id删除VLAN接口undo interface vlan-interface vlan_id三、Vlan 操作3、给VLAN接口指定/删除IP地址和掩码ip address ip_address ip_netmaskundo ip address ip_address ip_netmask 例如： ip address 7 华为二层交换机允许配置一个三层IP地址。三、Vlan 操作4、VLAN

9、显示和调试显示VLAN接口相关信息display interface VLAN-interface vlan_id 显示VLAN相关信息display vlan vlan_id | all | static | dynamic 例如：YD_S3552display interface vlan 103Vlan-interface103 current state : UPLine protocol current state : UPIP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc37-a4f3Int

10、ernet Address is 41/29 PrimaryDescription : qiaoqinzhongxueThe Maximum Transmit Unit is 1500四、访问管理配置1、认证模式authentication-mode local/none/password/schemeLocal 本地帐号认证None 不要认证Password 密码认证Scheme Radius 认证四、访问管理配置2、设置密码认证口令Set authentication password cipher/simple textCipher 加密显示认证口令Simple 明文显示认证口令例如：S

11、et authentication password cipher CMNetisgood!四、访问管理配置3、 创建本地用户、设置本地用户口令Local-user username level 03 password cipher/simple text例如：LY_LC_8016local-user CMNet level 3 password cipher CMNetisgood!创建一个user privilege为3、用户名为CMNet，加密显示密码 CMNetisgood!User privilege 0 为最低级别 3为最高级别四、访问管理配置4、设置远程访问接入限制例如：只允许2

12、8/28的网段进行远程登陆 acl number 1 #创建访问控制策略1 rule 0 permit source 28 5 #创建策略0只允许28/28的网段访问 user-interface vty 0 4 acl 1 inbound #在VTY上适用策略1五、QOS命令1、配置端口镜像Mirroring-port 指定镜像端口Monitor-port 监控端口例如：使用Eth 0/48端口监控Eth 0/1端口的流入流出Mirroring-port Ethernet 0/1 bothMirror-port Ethernet 0/48 both五、QOS命令显示镜像Display mir

13、ror例如：CT_S3552display mirror Monitor-port: Ethernet0/48 both Mirroring-port: Ethernet0/1 both五、QOS命令2、端口访问策略 rule-map 定义端口策略 eacl 定义策略动作 acces-group 策略使用到端口例如：在Eth 5/0/8 以太口上过滤冲击波震荡波病毒常用的445端口 rule-map intervlan fbd1 tcp any any eq 445 Eacl fbd fbd1 deny Access-group eacl fbd port Ethernet 5/0/8六、路由

14、配置1、缺省路由 ip route-static 例如：Ip route-static 在华为二层交换机上可配置路由，主要是为交换机远程控制服务。六、路由配置2、静态路由 ip route-static Undo ip route-static 例如：Ip route-static 六、路由配置3、查看路由表 display ip routing-tableYD_S3552display ip routing-table Routing Table: public netDestination/Mask Protocol Pre Cost Nexthop Interface/0 STATIC

15、60 0 17 Vlan-interface1000/8 DIRECT 0 0 InLoopBack0/32 DIRECT 0 0 InLoopBack084/29 DIRECT 0 0 85 Vlan-interface10485/32 DIRECT 0 0 InLoopBack036/30 DIRECT 0 0 37 Vlan-interface10237/32 DIRECT 0 0 InLoopBack0七、系统管理操作1、显示目录或文件信息 dirdirDirectory of flash:/-rwxrwxrwx 1 noone nogroup 3418167 Dec 14 2003

16、10:00:44 S3552-VRP310-0005.bin-rwxrwxrwx 1 noone nogroup 4 Aug 05 2005 07:44:57 snmpboots-rwxrwxrwx 1 noone nogroup 5992 Jul 21 2005 17:22:33 vrpcfg.txt16125952 bytes total (12692480 bytes free)Vrpcfg.txt 为交换机配置文件。七、系统管理操作2、删除文件 delete 恢复删除文件 undelete 拷贝文件 copy 移动文件 move可以通过删除flash中的vrpcfg.txt，直接删除交

17、换机的配置，恢复到出厂缺省配置。例如：detele vrpcfg.txt 七、系统管理操作3、查看以太网交换机的当前配置和起始配置查看以太网交换机的起始配置display saved-configuration查看以太网交换机的当前配置display current-configurationSaved-configuration保存在Flash MemoryCurrent-configuration保存在DRAM七、系统管理操作4、保存当前配置 Save saveThis will save the configuration in the flash memory.The switch configurations will be written to flash.Are you sure?Y/NyNow saving current configuration to flash memory.Please wait for a while.Saved current configuration to flash successfully.七、系统管理操作5、擦除Flash Memory中配置文件 reset saved-configuration配置文件被擦除后，以太网交换机下次上电时，系统将采用缺省的配置参数进行初始化