交換機(jī)配置代碼

1、H3c交換機(jī)配置代碼*中文切換language-mode Chinese|English1 .進(jìn)入特權(quán)用戶(hù)<Quidway>system/2 .命名交換機(jī)sysname 名稱(chēng)3 .查看配置情況undo shutdown/翻開(kāi)端口display currect-config/查看所有配置dis vlan/查看vlanQuit/返回上一級(jí)Save/保存4.戈ij分 vlanvlan 號(hào)/vlan 105.在劃分vlan后分配端口port ethernet0/2 /port ethernet0/3 to ethernet0/5/從3端口至U 5端口6.進(jìn)入端口分配vlanint e0/3

2、/ 進(jìn)入3號(hào)端口port access vlan 2 /戈分進(jìn)vlan27 .進(jìn)入vlan劃分IPS3026interface vlan 1S3026-Vlan-interface1ip address 192.168.0.1255.255.255.08 .靜態(tài)路由ip route-static 0.0.0.0 0.0.0.0 10.65.1.29 .設(shè)置默認(rèn)網(wǎng)管ip default-gateway 10.65.1.2H3以換機(jī) TT" TT" “TTTnT“ TT “TnTmTTnTTT " " “ “ TnTTTTnTTnTmT “ “ b"

3、; “ TTTTIl II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II1、system-view進(jìn)入系統(tǒng)視圖模式2、sysname為設(shè)備命名3、 display current-configuration當(dāng)前酉已置情況4、language-mode Chinese|English中英文切換進(jìn)入以太網(wǎng)端口視圖5、interface Ethernet 1/0/16、po

4、rt link-typeAccess|Trunk|Hybrid設(shè)置端口訪問(wèn)模式7、undo shutdown 翻開(kāi)以太網(wǎng)端口8、shutdown 關(guān)閉以太網(wǎng)端口9、quit 退出當(dāng)前視圖模式10、vlan 10創(chuàng)立VLAN 10并進(jìn)入VLAN 10的視圖模式11、port access vlan 10在端口模式下將當(dāng)前端口參加到 vlan10中12、port E1/0/2 to E1/0/5 在VLANI式下將指定端口參加到當(dāng)前vlan中允許所有的vlan通過(guò)13、port trunk permit vlan allH3c路由器, TT" TT" “TTTnT“ TT “

5、“TF “ TnTmTTnTTT " “ TnTTnTTnTTnTTTTT “ “ TT “ “ TT “ TnTTT “ “ TT " “ TTTTIl II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II IIff ff ff ff ff ff ff ff ff ff ff ff ff

6、ff ff ff ff ff ff ff ff ff ff ff ff ff ff TT" TT" “TTTnT“ TT " “TT“ " “ TTTT " " JTTTIl II II II II II II II II II II II II II II II II II II II II II II II II II II1、system-view 進(jìn)入系統(tǒng)視圖模式2、sysname R1為設(shè)備命名為 R13、display ip routing-table顯示當(dāng)前路由表4、language-mode Chinese|Engli

7、sh中英文切換5、interface Ethernet 0/0進(jìn)入以太網(wǎng)端口視圖6、ip address 192.168.1.1 255.255.255.0 配置 IP 地址和子網(wǎng)掩碼7、undo shutdown翻開(kāi)以太網(wǎng)端口8、shutdown 關(guān)閉以太網(wǎng)端口9、 quit退出當(dāng)前視圖模式10、ip route-static 192.168.2.0 255.255.255.0 192.168.12.2description To.R2 配置靜態(tài)路由11、ip route-static 0.0.0.0 0.0.0.0 192.168.12.2 descriptionTo.R2配置默認(rèn)的路由H

8、3c S3100 SwitchH3C S3600 SwitchH3C MSR 20-20 Router TT" TT" “TTTnT“TT“TnTmTTnTTT " “TnTTnTTnTTnTTTTT“TT“TT“TnTTT “ “ TT " “ TTTTII II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II

9、 II II II II II II II II TT" TT" “TTTnT“TT“TF “ TTTTTT " “ JTTT “ “"Il II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II1、調(diào)整超級(jí)終端的顯示字號(hào)；2、捕獲超級(jí)終端操作命令行,以備日后查對(duì)；3、language-mode Chinese|English中英文切換;4、復(fù)制命令到超級(jí)終端命令行,粘貼到主機(jī);5、交換機(jī)去除配置：<H3C>reset

10、save ; <H3C>reboot ;6、路由器、交換機(jī)配置時(shí)不能掉電,連通測(cè)試前一定要檢查網(wǎng)絡(luò)的連通性,不要犯最低級(jí)的錯(cuò)誤.7、192.168.1.1/24 等同 192.168.1.1 255.255.255.0;在配置交換機(jī)和路由器時(shí),192.168.1.1 255.255.255.0 可以寫(xiě)成：192.168.1.1 248、設(shè)備命名規(guī)那么：地名-設(shè)備名-系列號(hào)例：PingGu-R-S3600 TT" TT" “TTTnT“TT“ TnTmTTnTTT " “TnTTnTTnTTnTTTTT“TT“TT“TnTTT“TT"“TTTT

11、II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II TT" TT" “TTTnT“ TT “ “TF “ TnTmTTnTTT " “ TrTnTTTT " TnTTT “ “ TT “ “ “ “ TTTTTT " Il II II II II

12、II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II IIH3M 為交換機(jī)端口綁定根本配置2022-01-22 13:401,端口 MACa)AM命令使用特殊的AMUser-bind命令,來(lái)完成MACfe址與端口之間的綁定. 例如：SwitchAam user-bind mac-address 00e0-fc22-f8d3 interfaceEthernet 0/

13、1配置說(shuō)明：由于使用了端口參數(shù),那么會(huì)以端口為參照物,即此時(shí)端口 E0/1只允許PC1上網(wǎng),而使用其他未綁定的 MACfe址的PC機(jī)那么無(wú)法 上網(wǎng).但是PC1使用該MACfe址可以在其他端口上網(wǎng).b)mac-address 命令使用mac-address static 命令,來(lái)完成 MACfe址與端口之間的綁定. 例如：SwitchAmac-address static 00e0-fc22-f8d3 interface Ethernet 0/1 vlan 1SwitchAmac-address max-mac-count 0配置說(shuō)明：由于使用了端口學(xué)習(xí)功能,故靜態(tài)綁定 mac后,需再設(shè)置 該端

14、口 mac學(xué)習(xí)數(shù)為0,使其他PC接入此端口后其mac地址無(wú)法被 學(xué)習(xí).2, IP MACa)AM命令使用特殊的AMUser-bind命令,來(lái)完成IP地址與MACfe址之間的綁 定.例如：SwitchAam user-bind ip-address 10.1.1.2 mac-address 00e0-fc22-f8d3配置說(shuō)明：以上配置完成對(duì) PC機(jī)的IP地址和MACfe址的全局綁定, 即與綁定的IP地址或者M(jìn)ACfe址不同的PC機(jī),在任何端口都無(wú)法上 網(wǎng).支持型號(hào)：S3026E/EF/C/G/T、S3026C-PWR E026/E026T、S3050GE05O S3526E/C/ER S501

15、2T/G S5024Gb)arp命令使用特殊的arp static 命令,來(lái)完成IP地址與MACfe址之間的綁定.例如：SwitchAarp static 10.1.1.2 00e0-fc22-f8d3配置說(shuō)明：以上配置完成對(duì) PC機(jī)的IP地址和MA況址的全局綁定.3,端口 IP MAC使用特殊的AM User-bind命令,來(lái)完成IP、MACfc址與端口之間的 綁定.例如：SwitchAam user-bind ip-address 10.1.1.2 mac-address00e0-fc22-f8d3 interface Ethernet 0/1配置說(shuō)明：可以完成將 PC1的IP地址、MAC

16、fe址與端口 E0/1之間的 綁定功能.由于使用了端口參數(shù),那么會(huì)以端口為參照物,即此時(shí)端口E0/1只允許PC1上網(wǎng),而使用其他未綁定的IP地址、MACfe址的PC機(jī)那么無(wú)法上網(wǎng).但是PC1使用該IP地址和MACfe址可以在其他端口上網(wǎng). TT" TT" “TTTnT“ TT “ “TF “ TnTTnTTnTTT " “ TnTTnTTnTTnTTTTT “ “ TT “ “ TT “ TnTTT “ “ TT " “ TTTTII II II II II II II II II II II II II II II II II II II II II

17、II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II TT" TT" “TTTnT“ TT “ “TF “ TnTmTTnTTT " “ “ TTTTTTTTTTIl II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II IIS2022-E1-E

18、thernet0/1mac-address max-mac-count 0;進(jìn)入到端口,用命令 mac max-mac-count 0端口 mac學(xué)習(xí)數(shù)設(shè)為0S2022-E1mac static 0000-9999-8888 int e0/1 vlan 10;將0000-9999-8888綁定到e0/1端口上,此時(shí)只有綁定 mac的pc可以通過(guò)此口上網(wǎng),同時(shí)E0/1屬于vlan 10就這樣,ok 了,不過(guò)上面兩個(gè)命令順序不能弄反,除非端口下沒(méi)有接pc TT" TT" “TTTnT“TT“TF “ TnTmTTnTTT " “ TnTTnTTnTTnTTTTT “

19、“ TT “ “ TT “ TnTTT “ “ TT " “ TTTTIl II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II II IIff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff

20、ff TT" TT" “TTTnT“ “ TT “ “TF “ TTTnTTT " “ TT " Il II II II II II II II II II II II II II II II II II II II II II II II II II II II IIdis vlan 顯示 vlanname text 指定當(dāng)前vlan的名稱(chēng)undo name 取消h3c vlan 2h3c-vlan2name test vlandis users顯示用戶(hù)dis startup顯示啟動(dòng)配置文件的信息dis user-interface顯示用戶(hù)界面的相關(guān)信

21、息dis web users 顯示 web用戶(hù)的相關(guān)信息.header login配置登陸驗(yàn)證是顯示信息header shell undo headerlock鎖住當(dāng)前用戶(hù)界面 acl 訪問(wèn)限制歹！J表 acl number inbound/outboundh3cuser-interface vty 0 4h3c-vty0-4 acl 2000 inbound shutdown:關(guān)閉 vlan 接口undo shutdown 翻開(kāi) vlan 接口關(guān)閉vlan1接口h3c interface vlan-interface 1h3c-vlan-interface shutdown vlan vla

22、n-id 定義 vlan undo valn vlan-iddisplay ip routing-table display ip routing-table protocol staticdisplay ip routing-table statisticsdisplay ip routing-table verbose查看路由表的全部詳細(xì)信息interface vlan-interface vlan-id進(jìn)入 valnmanagement-vlan vlan-id定義治理 vlan 號(hào)reset ip routing-table statistics protocol all去除所有路由協(xié)

23、議的路由信息.display garp statistics interface GigabitEthernet 1/0/1顯示查看語(yǔ)音vlan狀態(tài)以太網(wǎng)端口上的garp統(tǒng)計(jì)信息display voice vlan statush3c-GigabitEthernet1/0/1 broadcast-suppression 20 允許接受的最大播送流量為該端口傳輸水平的20%超出局部丟棄.h3c-GigabitEthernet1/0/1 broadcast-suppression pps 1000每秒允許接受的最大播送數(shù)據(jù)包為1000傳輸水平的20%.超出局部丟 棄.display interfa

24、ce GigabitEthernet1/0/1查看端 口信息display brief interface GigabitEthernet1/0/1查看端口 簡(jiǎn)要配置信息display loopback-detection用來(lái)測(cè)試環(huán)路測(cè)試是否開(kāi)啟display transceiver-information interfaceGigabitEthernet1/0/50顯示光口相關(guān)信息duplex auto/full/halfh3cinterface GigabitEthernet1/0/1h3c-GigabitEthernet1/0/1duplux auto協(xié)商設(shè)置端口雙工屬性為自port l

25、ink-type access/hybrid/trunk 默認(rèn)為 accessport trunk permit vlan all 將 trunk 扣力口入所有 vlan 中reset counters interface GigabitEthernet1/0/1清楚端口 的統(tǒng)計(jì)信息speed auto 10/100/1000display port-security查看端口平安配置信息am user-bind mac-addr 00e0-fc00-5101 ip-addr 10.153.1.2interface GigabitEthernet1/0/1 端口 ip 綁定display arp

26、 顯示 arpdisplay am user-bind顯示端口綁定的配置信息display mac-address顯示交換機(jī)學(xué)習(xí)至用勺 mac地址display stp顯示生成樹(shù)狀態(tài)與統(tǒng)計(jì)信息h3c-GigabitEthernet1/0/1stp instance 0 cost 200設(shè)置生成樹(shù)實(shí)例0上路徑開(kāi)銷(xiāo)為200stp cost設(shè)置當(dāng)前端口在指定生成樹(shù)實(shí)例上路徑開(kāi)銷(xiāo).instance-id為0-16 0表cist 取值范圍1-200000<h3c> display system-guard ip-record顯示防攻擊記錄信息system-guard enable啟用系統(tǒng)防攻

27、擊功能display icmp statistics icmp流量統(tǒng)計(jì)display ip socketdisplay ip statisticsdisplay acl allacl number acl-number match-order auto/configacl-number 2000-2999 是根本 acl 3000-3999 是高級(jí) acl 為治理員 預(yù)留的編號(hào)rule deny/permit protocal訪問(wèn)限制h3c acl number 3000h3c-acl-adv-3000rule permit tcp source 129.9.0.00.0.255.255 de

28、sti Nation 202.38.160.0 0.0.255.255desti Nation-port eq 80 定義高級(jí)acl 3000,允許129.0.0/16 網(wǎng)段的主機(jī)向202.38.160/24 網(wǎng)段主機(jī)訪問(wèn)端口 80rule permit source 211.100.255.0 0.255.255.255rule deny cos 3 souce 00de-bbef-adse ffff-ffff-fff dest0011-4301-9912 ffff-ffff-ffff禁止 mac地址 00de-bbef-adse 發(fā)送到 mac地址 0011-4301-9912 且802.

29、1p優(yōu)先級(jí)為3的報(bào)文通過(guò)display qos-interface GigabitEthernet1/0/1 traffic-limit查看端口上流量端口速率限制line-rate inbound/outbound target-rateinbound:對(duì)端口接收?qǐng)?bào)文進(jìn)行速率限制outbound:對(duì)端口發(fā)送報(bào)文進(jìn)行速率限制target-rate對(duì)報(bào)文限制速率,單位kbps千兆口 inbound范圍1-1000000 outbound 范圍 20-1000000undo line-rate 取消限速.h3cinterface GigabitEthernet1/0/1h3c-GigabitEthernet1/0/1line-rate outbound 128率為 128kbpsdisplay arp | include 77display arp count 計(jì)算 arp 表的記錄數(shù)dis