华为9300接入交换机初始配置

1、设置名称时间设置配置网管vlan/新建vlan/vlan描述配置网管接I I地址配置网管ipQuid way Sysname NB-SW1-S9300#NB-SW1- S9300 clock tmiezone beijing add 08:00:00#vlan 250description TO S9300-NetManagement#vlan 1483description yw-BinWang-14-ALCXD-DSLAM-2#iiiteiiace Vlanif25Odescription TO S9303-NetManagement ip address 61.130.38.38 255

2、.255.255.252#配置端口镜像：首先在全局模式下将一个端口配置成观测端口 （整机支持两个观察端口）：S9300obseive-poit 1 interface GigabitEthernet x/x/x然后再进入需要镜像的端口配置镜像端口：S9300-GigabitEthemet3/0/37port-mirroring observe-port 1 both（支持出或入方向及双向流） 配置流镜像：首先也是在全局模式下将一个端口配置成观测端口 （整机支持两个观察端口）：S9300obseive-poit 1 interface GigabitEthernet x/x/x然后再配置ACL将

3、需要镜像的流匹配出来：创建ACL增加一条规则acl number 3000mle 5 permit ip/创建流分类1匹配acl#traffic classifier 1 operator and precedence 5if-match 5 acl 3000/创建流行为1#traffic behavior 1niinoriiig obseivmg-poit 1/创建流策略1把创建流分类与创建流行为关联 最后进入此流进入或出去的端口下发镜像规则： S9303-GigabitEtheniet3/0/37tiaffic-policy 1 inbound （支持出流量和入流量）#traffic po

4、licy 1classifier 1 behavior 1端口速率限制:ftS9300 interface GigabitEthernet 1/010 S9300GigabitEthernetl/0/10 broadcast-suppression cir 100 cbs 18800 ftS9300 qos car qoscarl cir 10000 cbs 10240 ftS9300 interface GigabitEthernet 2/0/0S9300GigabitEthernet2/0/0 qos car inbound qoscarl#iiiteiiace eth-tiimk 2de

5、scription To JH-YW-BW-BAS-SE800-4-DM1 .MAN G2/8portswitch/三层接I I切换到二层工作模式port link-type tninkport tnink allow-pass vlan 1483 to 1494 1511 1513 to 1515 1528 1536 1587#iiiteiiace GigabitEthernet 1 /0/1 eth-tmiik 2#iiiteiiace GigabitEthernet 1/0/2 eth-tmiik 2#iiiteiiace GigabitEthernet 1 /0/19descripti

6、on To JH-YW-BW-BAS-SE80（M-DMlMAN G2/8 port link-type tninkport tnink allow-pass vlan 1483 to 1494 1511 1513 to 1515 1528 1536 1587#iiiteiiace GigabitEthernet 1/0/1description To yw-FuTian-MA5600-DSLANIundo negotiation auto 端I I强制模式（强制模式只透用GE光I I、千兆电I I只能采用自协 商）/透传Dslam管理vlan剥离回程报文外层vlan对 vlan 101-96

7、0 打上外层 vlan 1400对 vlan 3600 打上外层 vlan 1400port hybrid tagged vlan 32port hybrid untagged vlan 1400port vlan-stacking vlaii 101 to 960 stack-vlan 1400port vlan-stacking vlan 3600 stack-vlan 1400指定 router id#router id 120.199.95.4#interface Vlanif43/设置链路开销值，也可以默认不设/选定链路网络类型为p2p模式/创建LoopBackO接口与接口地址des

8、cription To_QT-JR-S5352-07 ip address 120. 199. 95. 110 255. 255. 255. 252 ospf cost 10 ospf network-type p2pinterface LoopBackOip address 120. 199. 95. 4 255. 255. 255. 255ospf 10silent-interface LoopBackO import-route static area 0. 0. 0. 0network 120. 199. 95. 4 0. 0. 0. 0network 120. 199. 95. 10

9、8 0. 0. 0. 3#S9300isis S9300-isisnetwork-entity 49.0001.1201.9909.5004.00 S9300-isisis-level level-1S9300-isis-l import-route static cost 15#interface Vlanif43description To_QT-JR-S5352-07ip address 120. 199. 95. 110 255. 255. 255. 252isis enableisis ckcuit-level level-1端I I默认模式是Level-1-2层isis cost

10、5 level-1ninterface LoopBackOip address 120. 199. 95. 4 255. 255. 255. 255isis enable#ip route-static 0.0.0.0 0.0.0.0 172.135.xxx.xxx#iiifb-center source default chaimel 2 log level warningiiifb-center loghost source Vlanif 26iiifo-center loghost 172.200.100.6 facility local6 7J/创建ospf进程/不向LoopBackO

11、接口发送协议报文引如静态路由（直连direct）/选定area区域/发布LoopBackO接口地址，并使能ospf/发布接口地址，并使能ospf在全局模式下启用IS-IS配置网络实体名称设置当前S9300工作在Level-1引入静态路由，并设置cost值为15/在端I I模式下使能IS-IS在端I I模式下更改IS端I I的层次,链路开销为5/创建LoopBackO接口与接口地址配置默认路由配置syslog信息配置综合网管smup-agentsmup-agent local-engiiieid 800007DB000FE23F4Csmnp-agent community read nbroot

12、smup-agent sys-infb contact HuaWei 800-8302118设置设备名称smup-agent sys-infb location NB-A-YJXQ-3552-1smup-agent sys-infb version allsmup-agent taiget-host trap address udp-domam 172.200.xxx.xxx udp-poit 161 paramssecurityname public设置网管服务器地址smup-agent trap enable#super password level 3 cipher XXXXX/配置登录信息#aaalocal-user XXX password cipher XXXXX local-user XXX service-type termi